Tag Archives: trust

2016-07 July Shinnyo Podcast Getting Enlightenment

2016-07 July Shinnyo Podcast Getting Enlightenment

  • Gotta Catch Them All
  • Living with Hungry Spirits
  • Losing My Marbles
  • Alternative Reality
  • The New Cycle Awakens

Subscribe to this Podcast (RSS) or iTunes or via Flipboard

Pokemon Go meme - Expectation vs. Reality
Courtesy of http://www.videogamesblogger.com/2015/09/19/pokemon-become-real-with-pokemon-go-in-2016-ios-android.htm/pokemon-pride-go

Fear is the path to the dark side. Fear leads to anger. Anger leads to hate. Hate leads to suffering. — Yoda

But there is more.  Suffering leads to desire. Desire leads to attachment.  Attachment leads to attainment. Attainment leads to loss. Loss leads to fear. And the cycle continues.

Augmented Reality has been around awhile, but until the little Nintendo game came up this week that shadows Foursquare’s original check-in GPS technology (leading to 4SQ points, badges and virtual hierarchies of achievement), with the connection to the popular collect-until-infinity game Pokemon, we didn’t see people walking distracted into moving traffic, getting mugged and robbed by wandering where they shouldn’t, nor putting themselves in the beyond-selfie dangerous places.

People’s desire for things they don’t have (yet) was described in the original Buddhist depiction of hungry spirits (jpn. Gakido or skt. Preta-gati) as the realm of existence that one finds a mere level above Hell itself.  (Shinnyo et.al describes ten realms of existence – six lower ones are consumed by desire or earthly limits, and 4 realms of heavenly or getting closer to Nirvana existence.)  The difference between a human and a hungry spirit is that a human has the ability or will to say “no” to desire (the spirit is kind of perpetually suffering from desire unless it transcends.)

But in my depiction of the odd cycle of fear described above, you might see how an incidence of any kind of violence, intentional or not, tends to lead oneself into the cycle, and has a relatively predictable outcome, despite rejecting the original emotion that triggered it. I remember this as a child when some other child took a marble from me (one of those “I know it was there a moment ago – Hey! Give that back! That’s mine!” moments.) While I didn’t fear losing that one marble, within six months I had started carrying around this 5lb (2kg) sack of marbles, which I’m sure provided great strength training, but was eminently impractical, especially for actually playing marble games.  Maybe that was my own little sack of karma.

Marbles back then, human lives now. I was reflecting to my life in the 80’s when our President and his staff dealt with an amazing number of fear factors all during the decade – financial ruin, insider trading, junk bonds, deregulation, AIDS, the Cold War, Iran-Contra, technology boom, Yuppies.  We responded by buying guns, putting on Walkman earphones, and going online. Maybe VR and AR are just a lead-in to realization of the world of Tommy (don’t hear, speak or see… happy, safe and secure)

But there are always those who, for whatever reason, decide to open their eyes, listen carefully, and speak up.  Their fear is transformed into compassion.  Compassion leading to caring. Caring leading to love. Love leading to enrichment. Enrichment leading to embracement. Embracement leading to freedom. Freedom leading to acceptance. And acceptance leading to enlightenment. And thus, a new infinite single-ended cycle begins.

[YouTube] 8th Grader Recites “White Boy Privilege” Poem! 8th Grader Recites “White Boy Privilege” Poem!
https://youtu.be/g4Q1jZ-LOT0

/* That’s it for this session. Thank you for listening. For more information feel free to e-mail me at jlui at jlui dot net, or twitter @jhlui1 With Gassho, James*/

Save

Save

Save

Save

Save

Save

Save

Save

Advertisement

OEM 12c SSL Certificate Swapping (HowTo)

"This Connection is Untrusted" error message
“This Connection is Untrusted” error message

Oracle Enterprise Manager out of the box, comes with demonstration SSL certificates that are generally okay for getting the basic system up and running, but should not be left as your long-term solution for SSL/HTTPS connections to your Oracle Management Server (OMS).

Similar to how e-Business Suite installations delivered a DEMO Certificate Authority certificate with the bundled Internet Application Server (iAS) installation, OEM packages do the same thing.  But eventually, forced by browser and client workstation OS upgrades, you will eventually need to install “real” certificates by a true trusted Root Certification Authority (RCA) so that your client browsers don’t begin rejecting encrypted connections to your OMS.

If you search for SSL Certificate authorities, there are many well-known public RCA’s  such as, DigiCert, Verisign, Thawte, GeoTrust, and others, or even those available from your domain registrar.  Larger organizations probably have their own Certificate Authority signing server on-premise that allow generation of trusted certificates, as well. The only really important thing is that the CA is actually available in your browser and OS as a Trusted Root Authority, and that the signing chain is verifiable to prevent issues with SSL/HTTPS handshaking.  For each middle-tier OMS host, or virtual host if you are set up for high-availability with multiple WebLogic servers, a certificate request is generated, signed and then imported back into the keychains related to the OMS Weblogic hosts, and the OMS Servicing Agents (the OEM Agents installedo on the OMS middle-tier hosts.)

Once a new certificate is installed to the OMS itself (in WebLogic), you will also need to install the related RCA to the OMS-side OEM Agent servicing all of the connections to the other OEM Agents, so that they too, will be SSL enabled.

# OEM SSL Certificate swapping
#    EM 12c Cloud Control: How to Create a Wallet With Third Party Trusted Certificate that Can Be Imported into the OMS Console application ? (Doc ID 1937457.1)
#     EM 12c: Steps to Create and Import Third Party / Self-Signed SSL Certificates for WebLogic Server in an Enterprise Manager 12c Cloud Control Installation (Doc ID 1527874.1)
STAGE_DIR=/mnt/nfs/FMW/certs
EM_INSTANCE_HOME=/oemgc/Oracle/gc_inst2/em/EMGC_OMS1      #WebTierIH2 OHS/ohs2 on (alternate hostname

oemmgr@(primary hostname) $> cd $STAGE_DIR

oemmgr@(primary hostname) $> cat import.sh
export JAVA_JREBIN=$JAVA_HOME/jre/bin
export CERTS=/mnt/nfs/FMW/certs
$JAVA_JREBIN/keytool -import -file $CERTS/ORGPOLICYCA.cer -trustcacerts -alias ORGROOTCA -storepass changeit -noprompt  -keystore $JAVA_HOME/jre/lib/security/cacerts
$JAVA_JREBIN/keytool -import -file $CERTS/ORGROOTCA.cer -trustcacerts -alias ORGRootPolicyCA -storepass changeit -noprompt   -keystore $JAVA_HOME/jre/lib/security/cacerts
$JAVA_JREBIN/keytool -import -file $CERTS/ORGHOSTISSUECA1.cer -trustcacerts -alias ORGHOSTissueca1 -storepass changeit -noprompt  -keystore  $JAVA_HOME/jre/lib/security/cacerts

oemmgr@(primary hostname) $> . ./import.sh
Certificate was added to keystore
Certificate was added to keystore
Certificate was added to keystore

# Determine keystore directory (found by locating your Oracle Home Service (OHS) installation filesystem)
oemmgr@(primary hostname) $> ps -ef | grep ohs
oemmgr     873  9334  0 Jan13 ?        00:47:48 /oemgc/Oracle/MW3/Oracle_WT/ohs/bin/httpd.worker -DSSL
oemmgr    9334  9305  0 Jan13 ?        00:00:06 /oemgc/Oracle/MW3/Oracle_WT/ohs/bin/httpd.worker -DSSL
oemmgr    9342  9334  0 Jan13 ?        00:00:11 /oemgc/Oracle/MW3/Oracle_WT/ohs/bin/odl_rotatelogs -l /oemgc/Oracle/gc_inst2/WebTierIH1/diagnostics/logs/OHS/ohs1/ohs1-%Y%m%d%H%M%S.log 10M 70M
oemmgr    9344  9334  0 Jan13 ?        00:00:11 /oemgc/Oracle/MW3/Oracle_WT/ohs/bin/odl_rotatelogs /oemgc/Oracle/gc_inst2/WebTierIH1/diagnostics/logs/OHS/ohs1/access_log 10M 100M
oemmgr    9345  9334  0 Jan13 ?        00:00:01 /oemgc/Oracle/MW3/Oracle_WT/ohs/bin/odl_rotatelogs /oemgc/Oracle/gc_inst2/WebTierIH1/diagnostics/logs/OHS/ohs1/em_upload_http_access_log 10M 100M
oemmgr    9346  9334  0 Jan13 ?        00:02:13 /oemgc/Oracle/MW3/Oracle_WT/ohs/bin/odl_rotatelogs /oemgc/Oracle/gc_inst2/WebTierIH1/diagnostics/logs/OHS/ohs1/em_upload_https_access_log 10M 100M
oemmgr    9349  9334  0 Jan13 ?        00:00:07 /oemgc/Oracle/MW3/Oracle_WT/ohs/bin/odl_rotatelogs /oemgc/Oracle/gc_inst2/WebTierIH1/diagnostics/logs/OHS/ohs1/mod_wl_ohs.log 10M 100M
oemmgr    9350  9334  0 Jan13 ?        00:00:00 /oemgc/Oracle/MW3/Oracle_WT/ohs/bin/odl_rotatelogs -l -h:/oemgc/Oracle/gc_inst2/WebTierIH1/config/OHS/ohs1/component_events.xml_ohs1 /oemgc/Oracle/gc_inst2/WebTierIH1/auditlogs/OHS/ohs1/audit-pid9334-%Y%m%d%H%M%S.log 1M 4M
oemmgr    9351  9334  0 Jan13 ?        00:00:28 /oemgc/Oracle/MW3/Oracle_WT/ohs/bin/httpd.worker -DSSL
oemmgr    9352  9334  0 Jan13 ?        00:47:55 /oemgc/Oracle/MW3/Oracle_WT/ohs/bin/httpd.worker -DSSL
oemmgr    9353  9334  0 Jan13 ?        00:47:52 /oemgc/Oracle/MW3/Oracle_WT/ohs/bin/httpd.worker -DSSL

# Confirm settings
oemmgr@(primary hostname) $> grep keystore /oemgc/Oracle/gc_inst2/WebTierIH1/config/OHS/ohs1/ssl.conf
SSLWallet file:/oemgc/Oracle/gc_inst2/WebTierIH1/config/OHS/ohs1/keystores/console

# Stage copy of revised CA wallet                                  #WebTierIH2/config/OHS/ohs2 on (secondary hostname)
oemmgr@(primary hostname) $> cp -r /mnt/nfs/FMW/certs/oemgc.domain /oemgc/Oracle/gc_inst2/WebTierIH1/config/OHS/ohs1/keystores
cp -r /mnt/nfs/FMW/certs/oemgc.domain /oemgc/Oracle/gc_inst2/WebTierIH2/config/OHS/ohs2/keystores

# Check permissions 770 on wallet dir, 600 on wallets
oemmgr@(secondary hostname) $> ls -la /oemgc/Oracle/gc_inst2/WebTierIH2/config/OHS/ohs2/keystores/oemgc.domain
ls -la /oemgc/Oracle/gc_inst2/WebTierIH1/config/OHS/ohs1/keystores/oemgc.domain
total 32
drwxrwx— 2 oemmgr oinstall  4096 Mar  9 12:50 .
drwx—— 7 oemmgr oinstall  4096 Mar  9 12:50 ..
-rw——- 1 oemmgr oinstall 11653 Mar  9 12:50 cwallet.sso
-rw——- 1 oemmgr oinstall 11576 Mar  9 12:50 ewallet.p12

# Primary wallet for the OMS console
oemmgr@(primary hostname) $> cd /oemgc/Oracle/MW3/oracle_common/bin
oemmgr@(primary hostname) $> ./orapki wallet display -wallet /oemgc/Oracle/gc_inst2/WebTierIH1/config/OHS/ohs1/keystores/console
Oracle PKI Tool : Version 11.1.1.7.0
Copyright (c) 2004, 2013, Oracle and/or its affiliates. All rights reserved.

Requested Certificates:
User Certificates:
Subject:        CN=oemgc.domain
Trusted Certificates:
Subject:        CN=(primary hostname).domain,C=US,ST=CA,L=EnterpriseManager on (primary hostname).domain,OU=EnterpriseManager on (primary hostname).domain,O=EnterpriseManager on (primary hostname).domain

# Confirm new wallet contents
oemmgr@(primary hostname) $> ./orapki wallet display -wallet /oemgc/Oracle/gc_inst2/WebTierIH1/config/OHS/ohs1/keystores/oemgc.domain
Oracle PKI Tool : Version 11.1.1.7.0
Copyright (c) 2004, 2013, Oracle and/or its affiliates. All rights reserved.

Requested Certificates:
User Certificates:
Subject:        CN=*.domain,OU=Information Technology,O=ORG My Org,L=My City,ST=California,C=US
Trusted Certificates:
Subject:        OU=Class 2 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Subject:        CN=ORG POLICY CA
Subject:        CN=GTE CyberTrust Global Root,OU=GTE CyberTrust Solutions\, Inc.,O=GTE Corporation,C=US
Subject:        CN=ORG ROOT CA
Subject:        CN=HOSTISSUECA1,DC=fss,DC=ORG,DC=com
Subject:        OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Subject:        OU=Class 1 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

#Add certificates to monitoring agent for the OMS:
cd $AGENT_HOME/bin
./emctl stop agent
# Default jks keyring password – welcome
./emctl secure add_trust_cert_to_jks -trust_certs_loc /mnt/nfs/FMW/certs/ORGROOTCA.cer -alias ORGROOTCA
./emctl secure add_trust_cert_to_jks -trust_certs_loc /mnt/nfs/FMW/certs/ORGPOLICYCA.cer -alias ORGPOLICYCA
./emctl secure add_trust_cert_to_jks -trust_certs_loc /mnt/nfs/FMW/certs/ORGHOSTISSUECA1.cer -alias HOSTISSUECA1
./emctl start agent

# Support virtual host ignore hostname verification
export EM_COMMON_JAVA_OPTIONS=”-Dweblogic.security.SSL.ignoreHostnameVerification=true -Djava.security.egd=file:///dev/./urandom -Dweblogic.log.FileName=/oemgc/Oracle/gc_inst2/em/EMGC_OMS1/sysman/log/wls.log”

# Backup the EM_INSTANCE_BASE/em/EMGC_OMS1/emgc.properites file
cd /oemgc/Oracle/gc_inst2/em/EMGC_OMS1                               #OMS2 on (secondary hostname)
cp emgc.properties emgc.properties_selfsign

# Requires SYSMAN password
# (secondary hostname)
$OMS_TOP/bin/emctl secure console -wallet /oemgc/Oracle/gc_inst2/WebTierIH2/config/OHS/ohs2/keystores/oemgc.domain

# Example output
# Oracle Enterprise Manager Cloud Control 12c Release 5
# Copyright (c) 1996, 2015 Oracle Corporation.  All rights reserved.
# Securing Console… Started.
# Enter Enterprise Manager Root (SYSMAN) Password :
# Securing Console… Successful
# Restart OMS

# (primary hostname)
$OMS_TOP/bin/emctl secure console -wallet /oemgc/Oracle/gc_inst2/WebTierIH1/config/OHS/ohs1/keystores/oemgc.domain
$OMS_TOP/bin/emctl stop oms
$OMS_TOP/bin/emctl start oms

# 10-JUN-2016 Addendum – enable emcli login by establishing trust for the new certificate

oemmgr@(primary hostname)$> ./emcli setup -url=https://oemgc.auca.corp:7799/em -username=”SYSMAN” -password=$SYSMAN_PW

Oracle Enterprise Manager 12c Release 5.
Copyright (c) 1996, 2015 Oracle Corporation and/or its affiliates. All rights reserved.

The configuration directory “/home/oemmgr” may not be local. See the “dir” option in the help for the setup command.
Do you want to continue using this directory? [yes/no] yes

Warning: This certificate has not been identified as trusted in the local trust store
————————————–
[<blah – lots of cryptic information about the new certificate>
]
————————————–
Do you trust the certificate chain? [yes/no] yes
Emcli setup successful

# Test emcli connectivity

oemmgr@(primary hostname)$> ./emcli login -username=”SYSMAN” -password=$SYSMAN_PW

Login successful

#Section 4: Rolling back to the Demonstration WLS Certificate
#If you need to switch back the WLS components in the OMS installation to use the default WebLogic Server demonstration certificates, execute the following steps on each OMS.

1.Stop the OMS:

cd <OMS_HOME>/bin
emctl stop oms

2.Run the following command:

cd <OMS_HOME>/bin>
emctl secure wls -use_demo_cert
emctl secure console -self_signed

3.Stop the OMS:

cd <OMS_Home>/bin
emctl stop oms -all

4.Start the OMS:

cd <OMS_Home>/bin
emctl start oms

2012-October Shinnyo-en Buddhism Monthly Focus Podcast – Building a Trusted Reputation

2012-October Shinnyo-en Buddhism Monthly Focus Podcast – Building a Trusted Reputation

The Importance of Establishing Trust
Consistency Builds a Foundation
Learning to Say, “Yes…”
Choosing the Difficult Path
2012-October Shinnyo-en Buddhism Monthly Focus Podcast – Building a Trusted Reputation


Subscribe to this Podcast (RSS) or iTunes

During an interview recently, Keishu-sama was asked, “What would you most like to be remembered for in this world?” She replied without hesitation, “Not to be formally recognized or rewarded, but to be a person who can be relied upon and trusted – to be a dependable person.”

The timeliness of this idea is quite unmistakable. On TED.com Rachel Botsman spoke this month on how a person’s reputation will become the new perception of an individual’s value, especially out in the virtual internet universe, where we will meet virtual strangers every day and virtual identities are only as genuine as the ratings or comments of others.  In this discussion there is a clear line drawn between one’s Influence (as measured by Likes, Re-Tweets, Follows and Facebook Friends) and one’s Trustworthiness (measured by positive Comments, Recommendations by others, and References by others to your own comments and opinions.)  Botsman points out that the ability to have a positive outcome from a business activity has a direct correlation to your own rather difficult-to-measure Trust factor, and has almost no relation to one’s credit score (FICO), virtual Likes or Influence rating.

So how do you go about building a good reputation?  Trust by others starts with actions towards the benefit of others. It’s easy not to trust someone who is always thinking of themselves first, or doing things in a selfish manner. Even more interesting are those who firmly believe they are making efforts for others, and yet are not sources of inspiration and seem to be beset by troubles and conflicts. The person who always barters is a good negotiator, but seldom trusted. And yet, it’s even simpler to trust someone who always acts by thinking of others first, placing themselves in “the other person’s shoes” and doing things which have no direct correlation with a reward.

Those actions must also have a consistency to them, similar to a river or stream that never dries up.  We think fondly of returning to the cool waters of an ever-present water source to refresh ourselves and cleanse our bodies and minds, but we don’t have that same affinity towards a tributary that only runs randomly, sometimes in great gushes, and other times a mere trickle. We seek every day, to find our own reliable and trustworthy sources of our own sustenance, and that includes those who inspire us and motivate us in life.

If we reflect on the Four Virtues of a Bodhisattva: Permanence (eternity or timelessness), Bliss (happiness), Self (identity or confidence), and Purity (truth)  (Jpn. Jo Raku Ga Jo) each one is attainable only through consistent practice. Each one can be soiled each time someone strays from these invaluable measures. But someone who endeavors to hold true each one of these ideals in their daily life and interactions, becomes by their actions, a trustworthy person because of their consistency and diligence to pursue them.

In a customer service training held by the Telephone Doctor, they introduce verbal phone etiquette choices that enhance communication skills for people dealing with others. The principles are the same in their training – learn to act as you would wish to be treated by putting yourself into the other person’s place before deciding how to react.

Instead of… Try using…
I don’t know. That’s a good question. Let me find out.
I can’t do… Well, what I can do…
You have to… What you need to do…
Just a second… This may take a minute. Can you hold?
No. <…> I can do <something instead>
<silence> (as a response to anything) <say something…>

When you hear the latter responses and imagine a person you’re dealing with responding that way with a smile, can you imagine feeling a little better about the response to your question, even if it happens to be not exactly what you were expecting?

It is very easy it seems to do the opposite of the Four Virtues, much like taking an elevator to the top of a mountain, versus climbing a rocky and steep path along the rocks. You can exhibit impatience, anger or frustration, lack of commitment and lying with as much ease as entering that express lift. Just as taking the stairs once in awhile strengthens our heart and muscles, so does choosing discipline in Life over convenience. We learn more from our difficulties than we ever do from our easy achievements. The interesting change of perspective that transforms the world around you is when you start seeing those challenges in terms of their presented opportunities rather than their burdens. As Life’s hurdles transform into steps, you might find your spiritual strength increasing as you exercise your free will.