Security Issues - No password required for unsleeping and screensaver

I checked the box under security to 'require password when waking from sleep/screensaver' or whatever its called. It worked fine for like 2 weeks...i activate screensaver or sleep the laptop and have to put in a password to get out of it. Now when I wake or unsleep it, no password is required...what can I do? I cannot find any pattern or installation/change I made to cause this at all.
MacBook Pro 1.83 with OS 10.4.6 (all latest updates and firmware)

I deleted 3 plist preference files, the checkbox still remained for the require password option. I did a reboot and the checkbox was still there, and didnt work properly. I did the uncheck/check deal and blam...started to work properly again. Thanks for your help!

Similar Messages

How to fix SOAP Security Header UsernameToken is required for operation?

hi all,
can somone help me how to resolve the error "javax.xml.ws.soap.SOAPFaultException: SOAP Security Header UsernameToken is required for operation" when i run a client.
i got a WSDL and using wsdl2java i generated the stubs
Here is my client code
public final class LiteratureClient {
     public final static QName SERVICE = new QName("http://siebel.com/asi/",
               "Literature");
     public final static URL WSDL_LOCATION;
     private LiteratureClient() {
     static {
          URL url = null;
          try {
               url = new URL(
                         "file:c:\\reprintwsdl\\http___siebel.com_asi__Literature17.WSDL");
          } catch (MalformedURLException e) {
               System.err
                         .println("Can not initialize the default wsdl from file:http___siebel.com_asi__Literature17.WSDL");
               // e.printStackTrace();
          WSDL_LOCATION = url;
     public static void main(String args[]) throws Exception {
          System.out.println(WSDL_LOCATION);
          Literature obj = new Literature(WSDL_LOCATION, SERVICE);
          DefaultBindingSpcLiteratureSpcWS port = obj.getDefault();
          Client cxfClient = ClientProxy.getClient(port);
          cxfClient.getInInterceptors().add(new LoggingInInterceptor());
          cxfClient.getOutInterceptors().add(new LoggingOutInterceptor());
          cxfClient.getOutInterceptors().add(new SiebelPasswordInterceptor());
          com.siebel.xml.literatureio.iterature inputObj = new com.siebel.xml.literatureio.lterature();
inputObj.setDocId("1234");
          // Query by ID
     LiteratureQueryByIdlInput input = new LiteratureQueryByIdInput();
          com.siebel.xml.iteratureio.ListOfliteratureio list = new com.siebel.xml.iteratureio.ListOfliteratureio();
          list.getLiterature().add(inputObj);
          input.setListOfliteratureio(list);
          LiteratureQueryByIdOutput output = obj.getDefault().LiteratureQueryById(input);
This is the interceptor which i added to the client before performing the query operation
public class SiebelPasswordInterceptor extends AbstractPhaseInterceptor<SoapMessage> {
     public static final String SECURITY_TAG_NAME = "wsse:Security";
     public static final String SECURITY_NAMESPACE = "http://schemas.xmlsoap.org/ws/2002/04/secext";
     public static final String USERNAME_TOKEN_TAG_NAME = "wsse:UsernameToken";
     public static final String USERNAME_TAG_NAME = "wsse:Username";
     public static final String PASSWORD_TAG_NAME = "wsse:Password";
     public static final String PASSWORD_TEXT_ATTRIBUTE_NAME = "wsse:PasswordText";
     public static final String TYPE_TAG_NAME = "Type";
     public static final String SECURITY_NAMESPACE_NAME = "wsse";
     public static final String SECURITY = "Security";
     public SiebelPasswordInterceptor() {
          super(Phase.PREPARE_SEND);
     public void handleMessage(SoapMessage message) {
          List l = message.getHeaders();
          Document d = DOMUtils.createDocument();
          Element securityParent = d
                    .createElementNS(
                              SECURITY_NAMESPACE,
                              SECURITY_TAG_NAME);
          Element userNameToken = d.createElementNS(
                    SECURITY_NAMESPACE,
                    USERNAME_TOKEN_TAG_NAME);
          Element userName = d
                    .createElementNS(
                              SECURITY_NAMESPACE,
                              USERNAME_TAG_NAME);
          userName.setTextContent(getUsername());
          userNameToken.appendChild(userName);
          Element pwdText = d
                    .createElementNS(
                              SECURITY_NAMESPACE,
                              PASSWORD_TAG_NAME);
          pwdText.setAttribute(TYPE_TAG_NAME, PASSWORD_TEXT_ATTRIBUTE_NAME);
          pwdText.setTextContent(getPassword());
          userNameToken.appendChild(pwdText);
          securityParent.appendChild(userNameToken);
          SoapHeader header = new SoapHeader(new QName(
                    SECURITY_NAMESPACE, SECURITY,
                    SECURITY_NAMESPACE_NAME), securityParent);
          System.out.println(" HEADER "+header.toString());
          l.add(header);
     protected String getUsername(){
return "test";
     protected String getPassword(){
          return test";
I did add this interceptor as out interceptor to my client but for some reason the header is not getting added to the request . can someone pls. help me in troubleshooting this issue.
Thank you

The problem is in <form action="http://www.eastsidestudios.com.au/FormProcessv2.aspx?WebFormID=42582&O ID={module_oid}&OTYPE={module_otype}&EID={module_eid}&CID={mo dule_cid}"
You have to remove http://www.eastsidestudios.com.au from the action URL and make it relative:
<form action="/FormProcessv2.aspx?WebFormID=42582&O ID={module_oid}&OTYPE={module_otype}&EID={module_eid}&CID={mo dule_cid}"
Cheers,
-mario

How to enable password request for restart and shutdown?

Hi,
I'm neither a Linux nor an Arch Linux newbie, but inexperienced regarding this particular issue.
I want to enable password request for restart and shutdown and want to know if I'm mistaken, because trial and error might become to time-consuming while working on a project.
I read https://wiki.archlinux.org/index.php/Al … o_shutdown.
$ ls -hAl /usr/bin/shutdown
lrwxrwxrwx 1 root root 9 Apr 22 03:02 /usr/bin/shutdown -> systemctl
If I try to run $ shutdown -hP 28 or $ shutdown -c nothings happens, I need to run $ sudo shutdown -hP 28 and $ sudo shutdown -c and type a password. That's the way I want it.
If I e.g. run $ shutdown -r now no password is needed. I want to disable this. It should behave the same way as shutdown -hP/-c behave. I want to type
$ sudo shutdown -r now or $ sudo systemctl reboot etc. and then the password should be required.
$ sudo grep -vn "#" /etc/sudoers | grep [[:blank:]]
72:root ALL=(ALL) ALL
73:rocketmouse ALL=(ALL) ALL
The user "rocketmouse" should have all permissions after typing a password, but not without typing the password.
IIUC what's written at https://wiki.archlinux.org/index.php/Polkit, I need to edit
$ pkaction | grep login
org.freedesktop.accounts.set-login-option
org.freedesktop.login1.attach-device
org.freedesktop.login1.flush-devices
org.freedesktop.login1.hibernate
org.freedesktop.login1.hibernate-ignore-inhibit
org.freedesktop.login1.hibernate-multiple-sessions
org.freedesktop.login1.inhibit-block-idle
org.freedesktop.login1.inhibit-block-shutdown
org.freedesktop.login1.inhibit-block-sleep
org.freedesktop.login1.inhibit-delay-shutdown
org.freedesktop.login1.inhibit-delay-sleep
org.freedesktop.login1.inhibit-handle-hibernate-key
org.freedesktop.login1.inhibit-handle-lid-switch
org.freedesktop.login1.inhibit-handle-power-key
org.freedesktop.login1.inhibit-handle-suspend-key
org.freedesktop.login1.power-off
org.freedesktop.login1.power-off-ignore-inhibit
org.freedesktop.login1.power-off-multiple-sessions
org.freedesktop.login1.reboot
org.freedesktop.login1.reboot-ignore-inhibit
org.freedesktop.login1.reboot-multiple-sessions
org.freedesktop.login1.set-user-linger
org.freedesktop.login1.suspend
org.freedesktop.login1.suspend-ignore-inhibit
org.freedesktop.login1.suspend-multiple-sessions
org.freedesktop.machine1.login
IOW I need to replace every yes and no etc. with auth_admin in $ grep -v lang /usr/share/polkit-1/actions/org.freedesktop.login1.policy.
Am I mistaken?
Regards,
Ralf

You'll need to create a rules file which uses javascript.
https://wiki.archlinux.org/index.php/Po … tion_rules
// /etc/polkit-1/rules.d/10-admin-shutdown-reboot.rules
polkit.addRule(function(action, subject) {
if (action.id == "org.freedesktop.login1.power-off" ||
action.id == "org.freedesktop.login1.power-off-ignore-inhibit" ||
/*...SOME_MORE_IDS_HERE...*/
// return polkit.Result.AUTH_ADMIN_KEEP;
return polkit.Result.AUTH_SELF_KEEP;
Last edited by progandy (2015-06-21 17:42:35)

How to change "No Password required" for Guest to "Yes"account under Somarsoft Dumpsec

Check Content:
Verify all accounts require passwords.
Run the DUMPSEC utility.
Select "Dump Users as Table" from the "Report" menu.
Select the following fields, and click "Add" for each entry:
UserName
SID
PswdRequired
AcctDisabled
Groups
If any accounts have "No" in the "PswdRequired" column, this is a finding.
Some built-in or application-generated accounts (e.g., Guest, IWAM_, IUSR, etc.) may not have this flag set, even though there are passwords present. It can be set by entering the following on a command line: "Net user <account_name> /passwordreq:yes".

Hi Malik,
How to change "No Password required" for Guest to "Yes"account under Somarsoft Dumpsec
Please contact SystemTools Technical support to get more efficient support regarding this matter:
http://www.systemtools.com/support.htm
http://www.systemtools.com/toolboard/
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Different PPV account required for GR and IR

Hi Experts,
I have an issue about the requirement that different PPV account required for GR and IR for the correcording Valuation class.
Eg: when do the GR,the PPV account should be 3528***, but when do the IR, the PPV account should be 3522***.
Any body can tell me how to fulfil this requirement? Thanks in advance!
Regards
Jimmy

hi
please clarify PPV
gl accounts are maintained in OBYC ,better to aksur Fi person

HT4113 i cant cancel password required for the caidav

i cant cancel password required for the caidav

- Have you looked at the two previous discussions on the right hand side of this page under the heading "More Like This" with your same question?
- Have you tried deleting the calendar associated with the caidav and then recreating it?

I have an Ipad My apple ID and password works for Ibooks and Icloud but when I try to get into the app store it doesn't show my entire email address on the account. When I try to get into the app store it tells me my password is incorrect. How can I corr

I have an Ipad My apple ID and password works for Ibooks and Icloud but when I try to get into the app store it doesn't show my entire email address on the account. When I try to get into the app store it tells me my password is incorrect. How can I correct this? I have been emailing support but so far they have been no help

Open the App Store app, go to the Featured pane, swipe to the bottom, tap the Apple ID and sign out. Tap again and sign in with the Apple ID of your choosing.

HT2731 is iTunes Store account really required for downloading and installing free Apps?

is iTunes Store account really required for downloading and installing free Apps?

Yes. The apps you buy are registered in your account, so you can download them in all your devices

IPhoto -share to email not working-The email server didn't recognize your username/password combination- for hotmail and big pond- since apple technical support re-hotmail on iPhone.

iPhoto -share to email not working-The email server didn’t recognize your username/password combination- for hotmail and big pond- since apple technical support re-hotmail on iPhone.

in the iPhoto preferences ==> accounts delete your e-mail account and reenter it
OR
IMHO the better solution is to set Apple mail as the email client in the iPhoto preferences
LN

Issue with Visibility Settings for Backgrounds and Layers

I am using Acrobat Pro XI 11.0.10 (Windows) and having an issue with visibility settings for layers and backgrounds. I am attempting to get backgrounds to appear while viewing in Adobe Reader and Acrobat Pro but not be printed and so far have had no success.
When using a background the Appearance Options dialogue has "Show when printing" unchecked, but "Show when displaying on screen" is checked. This results in the background not showing on the screen, and the background will only appear once the box for "Show when printing" is checked. It looks like the option for printing is dictating whether or not the background is able to appear.
Using layers has not worked either. The background layer is set to "Never Prints", but will still show up when printed.
I was wondering if anyone else has run into this and has a solution, or has any recommendations.
Thanks in advance.

Hi setrev2012,
How are you adding the backgroud?
The only way I can think to accomplish this is via a watermark.
The basics...
Open PDF in Acrobat. Choose Pages > Watermark > Add Watermark.
Select a jpg or PDF of your background and adjust scaling options as desired.
Then click the Appearance Options.. and uncheck the Show When Printing option.
In this image the PDF is a blank page with the word "Test" on it. The watermark is the stamp and impression (a stock photo jpg).
If you want a solid color background, just create a flat image of the background color for use as the watermark.
If you have already followed the steps and still facing the issue then please share the file with me at [email protected] so that i can have a look.
Regards,
Rave

Password required for pdfs normally read under Windows

For some pdfs which I seamlessly open under Windows, I get password prompt and finally without password they do not open.
I noticed that there are additional security options set on these documents, but still they do open in the Reader under Windows.
How to open such files?

Yes, I am interested in this as well. I purchased a PDF document (SCJP Study Guide) for $30 from ePlanetLabs.com. The content is excellent and I began reading it on my PC.
Then I got the Nokia 9300. And, being on-the-go, I decided to move my e-book to it. The reader on the 9300 asks me for my password; which I provide and it accepts.
But most of the book is garbled in the reader. The only thing that I can read is the reminder on the top of all 40 pages:
SCJP 5.0 Certification Study Guide for Sun Certified Programmer
IMPORTANT NOTE: We did our best to develop this product. We are not responsible to meet highest quality of any one's high expectations. You purchased this eBook with your own risk and with your own interest, so we are not responsible for any of your dissatisfaction or concerns. Thanks for your purchase.
Well. This is nice. Adobe Reader is free. Nokia 9300 is a cost-item. And so is my eBook. But neither Adobe, Nokia nor ePlanetLabs will accept responsibility for being able to actually *use* my eBook.
It doesn't stop there, however. I ordered a book (in PDF) from campusebookstore.com; again, it reads fine on my PC. But on my Nokia 9300, Adobe Reader (1.1 Build 08202004) reports:
--------- snip -------------
ERROR:
This file is encrypted using an unsupported PDF encryption scheme.
--------- snip -------------
I went back to my PC to determine what the file's properties are... and Poof! I cannot open it on my PC. Adobe Reader (7.0.8) reports:
--------- snip -------------
CANNOT OPEN DOCUMENT
This document cannot be opened because its ownership has not been established on this computer.
(O) I own it and I copied it to this computer or restored it from a backup
() Someone else gave it to me and I would like to own it
[Obtain Ownership] [Cancel]
--------- snip -------------
Somewhere along the way (during the past 7 hours which I have spent trying to solve Adobe issues) I used the Adobe DRM Activator and apparently corrupted the initial Activator which was installed with my eBook. What frustration!
At this point in the technology... it seems that normal books are best; at least until Adobe can simplify life for the end-user with the same zeal which it has for protecting the sellers of eBooks.

Password required for Mail?

I open up my Mail icon, and a window pops up that says, Cannot Send Mail, no password provided for user (my email address) of server (my server address).
Please go to Mail Account Settings and enter a password.
Question-How do I go to Mail Account Settings and enter a password? I cannot find this area?
Please help, and thank you in advance for your consideration.
iPhone Windows XP

maniac,
are you talking about the settings on the iphone or settings in itunes or mail? When you say "go back up into user name box and make a change", what kind of change are you talking about?
My issue is similar: I cannot send mail from my POP account (.mac works fine), and the error "address was rejected by the server" showed up each time, and the password field in SMTP on iPhone keeps reverting back to "Optional" no matter how many times I enter it, save it, whatever.
I spent an hour with Apple last week. The tech had me do a software restore, and advised me NOT to sync my mail. This worked.
While this is a good workaround (I got it to work), this is in the longer term unacceptable as it's a pain in the butt to delete mail (no group select of mail???) from the iPhone.
But I'd like to know more about this workaround you mention.

Little security issue in password box on connections

I'm on 1.2.0.29.98 on OSX. I have a password with an @ symbol in it. I was making a new connection in the connection dialog box and typed in the password wrong. I noticed when I double clicked the obfuscated password it only highlighted part of it to the right of the @ symbol instead of the whole password. For other symbols ($, % for example) it will only highlight from where you double clicked up to (and including) that symbol or between two of those symbols.
It could help people to figure out the passwords, it should highlight all the password when you double click it.

Thank you for bringing this to our attention. As you mentioned, it isn't a glaring hole in password security, but even a little hole is undesirable.
- John McGinnis
SQL Developer Team

Password Safe for Pre2 and PC

I'm looking for a tool to store all my passwords etc. to have them available on my Pre2 and also on my PC (even if syncing them obviously is not possible automatically in webOS - which is a standard in Windows Mobile!). Up to now I only found SecuStore having both a webOS and a Windows client. Unfortunately the Windows version is 0.0.5 and I would not like to hand over my sensible data to such an Alpha version.
Does anyone have any other recommendations?
Post relates to: Pre 2 p102ueu (Unlocked EU)

If your OS for the PC is Windows XP, then you will require SP1 for WPA and SP2 for WPA2. If you're already at either of these service pack levels, then the problem might be one of two things:
o The PC wireless configuration, or
o The PC's wireless chipset.
Check out the following iFelix article on connecting a PC to an AirPort wireless network: Accessing a Airport Network with a Windows XP PC or laptop (with XP SP2) You'll see that he has several other helpful Windows links as well.

Exchange 2013 IOPS Requirements for ActiveSync and anti-virus

I am currently planning to replace my Exchange 2003 server with Exchange 2013. I have used the Exchange Server 2013 Role Requirements Calculator but I'm stuck on how much additional IOPS to add for ActiveSync and my anti-virus solution (Symantec Mail Security
for Microsoft Exchange). The only info I've found for ActiveSync in regards to additional IOPS is to add .5 but nothing for SMSMSE. Symantec's web site has nothing on this (the question has been asked but not answered). I've also seen the ActiveSync question
asked but not answered.
Any advice or guidance would be appreciated.
Thank you.

Only Symantec can answer that for the A/V, but for ActiveSync, assuming you are using mostly Android/iOS, I would recommend using 1.3 for both IOPS Multiplication Factor and Megacycles Multiplication Factor.
Twitter!: Please Note: My Posts are provided “AS IS” without warranty of any kind, either expressed or implied.

Security Issues - No password required for unsleeping and screensaver

Similar Messages

Maybe you are looking for