Tuesday 17 January 2017

How to decrypt the weblogic password

To decrypt the WebLogic password follow the below steps

 1)Take the adminserver boot. Properties details

[appgvpk1@server5050 security]$ cat $EBS_DOMAIN_HOME/servers/AdminServer/security/boot.properties
#Sun May 08 17:51:57 EDT 2016
password={AES}RL4vuk2Y1rreNBi0EmKNt0x8zY10ckmKxmv+j64CGak\=
username={AES}YOyAsoH6TA9BvK2qxjayQh3NvkQ4W3/3pygLNc4vWUM\=
[appgvpk1@server5050 security]$

 2)create decrypt.py file in

 [appgvpk1@server5050 security]$ cd $EBS_DOMAIN_HOME/security

[appgvpk1@server5050 security]$ cat decrypt.py
from weblogic.security.internal import *
from weblogic.security.internal.encryption import *
encryptionService = SerializedSystemIni.getEncryptionService(".")
clearOrEncryptService = ClearOrEncryptedService(encryptionService)

# Take encrypt password from user
pwd = raw_input("Paste encrypted password ({AES}fk9EK...): ")

# Delete unnecessary escape characters
preppwd = pwd.replace("\\", "")

# Display password
print "Decrypted string is: " + clearOrEncryptService.decrypt(preppwd)
[appgvpk1@server5050 security]$

[appgvpk1@server5050 security]$ pwd
/erppwrc1/erpapp/fs2/FMW_Home/user_projects/domains/EBS_domain_erppwrc1/security

3) source the   setDomainEnv.sh

[appgvpk1@server5050 security]$ cd $EBS_DOMAIN_HOME/bin
[appgvpk1@server5050 bin]$ ls -ltr
total 56
drwxr-x--- 2 appgvpk1 oinstall  4096 May  7 15:29 service_migration
drwxr-x--- 2 appgvpk1 oinstall  4096 May  7 15:29 server_migration
drwxr-x--- 2 appgvpk1 oinstall  4096 May  7 15:29 nodemanager
-rwxr-x--- 1 appgvpk1 oinstall  2010 May  7 15:29 secureWebLogic.sh
-rwxr-x--- 1 appgvpk1 oinstall  2003 May  7 15:29 stopWebLogic.sh
-rwxr-x--- 1 appgvpk1 oinstall  2473 May  7 15:29 stopManagedWebLogic.sh
-rwxr-x--- 1 appgvpk1 oinstall  5704 May  7 15:29 startWebLogic.sh
-rwxr-x--- 1 appgvpk1 oinstall  3251 May  7 15:29 startManagedWebLogic.sh
-rwxr-x--- 1 appgvpk1 oinstall 17349 May  7 15:29 setDomainEnv.sh
[appgvpk1@server5050 bin]$. ./setDomainEnv.sh


4)run the decrypt password script
 
[appgvpk1@server5050 security]$ cd $EBS_DOMAIN_HOME/security
[appgvpk1@server5050 security]$ ls -ltr
total 40
-rw-r----- 1 appgvpk1 oinstall   486 May  7 15:29 decrypt.py
-rw-r----- 1 appgvpk1 oinstall 22654 May  7 15:29 XACMLRoleMapperInit.ldift
-rw-r----- 1 appgvpk1 oinstall    64 May  7 15:29 SerializedSystemIni.dat
-rw-r----- 1 appgvpk1 oinstall  2398 May  7 15:29 DefaultRoleMapperInit.ldift
-rw-r----- 1 appgvpk1 oinstall  3301 May  8 17:50 DefaultAuthenticatorInit.ldift
[appgvpk1@server5050 security]$

[appgvpk1@server5050 security]$ java weblogic.WLST decrypt.py

Initializing WebLogic Scripting Tool (WLST) ...

Welcome to WebLogic Server Administration Scripting Shell

Type help() for help on available commands

Paste encrypted password ({AES}fk9EK...): {AES}RL4vuk2Y1rreNBi0EmKNt0x8zY10ckmKxmv+j64CGak\=
Decrypted string is: weblogic123

1 comment: