Single Sign On and Application with Web Services

My Application Server is set as partner application for SSO so for example this address: http://myserver:80 is SSO enabled.
I have two ADF applications on it with jspx pages and the ADF security is enabled on them. SSO works for these applications (for jspx files).
I added a new application with a web service and deployed this new application. It is on the same application server as those two applications and its security provider in identity management, SSO enabled. Its address is something like:
http://myserver:80/newWebService-Project1-context-root/MyWebService1SoapHttpPort
So I expect to be unable to test web service, but I can and I am not prompted for user name and password.
Regards
Farbod

Thank you.
Yes I had cleared the cache and in these cases I always use a new browser also.
I deployed a third application without declarative security options (ADF application, no security settings) and this application also didn't ask me for user information though it was under SSO.
Regards
Farbod

Similar Messages

How can I authenticate and authorize with Web Service on ESB ?

Hello,
I want to authenticate and authorize client with Web Service published
by HTTP/SOAP BC.
Simply if it is an Web Service as J2EE application, I will use
Basic Authentication with JAX-RPC and Realm.
But I think that Web Service published by HTTP/SOAP BC is not belong
to J2EE Application. Threre is no place to describe security role mapping
(like web.xml).
JBI 1.0 the section "5.5.1.1.3 Normalized Message Properties" comments
JAAS Subject is given in the NM Properties. Really in this package
com.sun.jbi.internal.security.*
implements JAAS autentication and authorization (at JaasAuthenticator).
But I can't see how to configure my Service to use this.
How can I authenticate and authorize with Web Service on ESB ?
I referred to the resources.
Mutual Authentication for Web Services: A Live Example
http://developers.sun.com/prodtech/appserver/reference/techart/mutual_auth.html
XML and Web Services Security
http://java.sun.com/j2ee/1.4/docs/tutorial/doc/Security7.html
JAAS Authentication Tutorial
http://java.sun.com/j2se/1.4.2/docs/guide/security/jaas/tutorials/GeneralAcnOnly.html
Thanks,
Takurou
- environment ---------------------------------------------
OpenESB : Project Open ESB Starter Kit
AppServer : Sun Java Systems Application Server 9.0 PE
OS : Windows XP
I don't assume to use SSL (if It's necessary I will try).
User information is stored in a LDAP Server.
-----------------------------------------------------------

Hello,
I read this resource.
SecurityDesign
http://www.glassfishwiki.org/jbiwiki/Wiki.jsp?page=SecurityDesign
Then I think [non-ssl and ssl/tls and so on] securing by basic authentication is ongoing feature at this time.
But I can't see well why this page comments 'HTTP over SSL, TLS'.
HTTP/SOAP Binding Component Overview
http://download.java.net/general/open-esb/docs/jbi-components/httpsoap-bc.html
Does BC support only "SSL server authentication" ?
Doesn't BC support "SSL client authentication" by username/password ?
Thanks,
Takurou

Problems running Application with Web Service Client

Im having some problems maybe related to some classpath details?
I am running a Web Service another computer which works fine. I have also made an application using Sun ONE Studio 1 consisting of a Web Service Client etc. and GUI which uses the Client to get data from the Web Service. This works fine as long as I use Sun ONE Studio to execute the application, but now I have packaged the application to a .jar file and have encountered problems:
When running the application from the .jar file I get the exception:
java.lang.NoClassDefFoundError: com/sun/xml/rpc/client/BasicService
at java.lang.ClassLoader.defineClass0(Native Method)
at java.lang.ClassLoader.defineClass(ClassLoader.java:537)
at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:123)
at java.net.URLClassLoader.defineClass(URLClassLoader.java:251)
at java.net.URLClassLoader.access$100(URLClassLoader.java:55)
at java.net.URLClassLoader$1.run(URLClassLoader.java:194)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:187)
at java.lang.ClassLoader.loadClass(ClassLoader.java:289)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:274)
at java.lang.ClassLoader.loadClass(ClassLoader.java:235)
at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:302)
at util.servicelocator.ServiceLocator.getServant(ServiceLocator.java:68)
at lagerApp.eHandelLager.jRegisterBrukerListeActionPerformed(eHandelLager.java:784)
at lagerApp.eHandelLager.access$400(eHandelLager.java:20)
at lagerApp.eHandelLager$5.actionPerformed(eHandelLager.java:277)
at javax.swing.AbstractButton.fireActionPerformed(AbstractButton.java:1786)
at javax.swing.AbstractButton$ForwardActionEvents.actionPerformed(AbstractButton.java:1839)
at javax.swing.DefaultButtonModel.fireActionPerformed(DefaultButtonModel.java:420)
at javax.swing.DefaultButtonModel.setPressed(DefaultButtonModel.java:258)
at javax.swing.AbstractButton.doClick(AbstractButton.java:289)
at javax.swing.plaf.basic.BasicMenuItemUI.doClick(BasicMenuItemUI.java:1113)
at javax.swing.plaf.basic.BasicMenuItemUI$MouseInputHandler.mouseReleased(BasicMenuItemUI.java:943)
at java.awt.AWTEventMulticaster.mouseReleased(AWTEventMulticaster.java:231)
at java.awt.Component.processMouseEvent(Component.java:5100)
at java.awt.Component.processEvent(Component.java:4897)
at java.awt.Container.processEvent(Container.java:1569)
at java.awt.Component.dispatchEventImpl(Component.java:3615)
at java.awt.Container.dispatchEventImpl(Container.java:1627)
at java.awt.Component.dispatchEvent(Component.java:3477)
at java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:3483)
at java.awt.LightweightDispatcher.processMouseEvent(Container.java:3198)
at java.awt.LightweightDispatcher.dispatchEvent(Container.java:3128)
at java.awt.Container.dispatchEventImpl(Container.java:1613)
at java.awt.Window.dispatchEventImpl(Window.java:1606)
at java.awt.Component.dispatchEvent(Component.java:3477)
at java.awt.EventQueue.dispatchEvent(EventQueue.java:456)
at java.awt.EventDispatchThread.pumpOneEventForHierarchy(EventDispatchThread.java:201)
at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:151)
at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:145)
at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:137)
at java.awt.EventDispatchThread.run(EventDispatchThread.java:100)
I have searched the forum and found simular topics which are resolved by adding some lines to the classpath.
How do I set the classpath? Do i have to use the classpath parameter from command window? How can I know which classpaths to include (libraries)..
Any help would be nice.. : )

Thank you for the reply..
But im still geting the same error. I have tried to include all the libraries in JWSDP pack but still.. I have managed to narrow down the place where the error occures.. It actually happens when I try to get the WebService Client Servant which is located in the package LSC:
---> LSC.LWServiceGenClient.LWS_Impl service = new LSC.LWServiceGenClient.LWS_Impl();
LSC.LWServiceGenClient.LWSServantInterface lagerServiceServant = LSC.LWServiceGenClient.LWSServantInterface_Stub)service.getLWSServantInterfacePort();
return lagerServiceServant;
Could something be wrong with the way I package the Jar? I'm using Sun One Studio and have tried including the 5 packages the application consists of; I have tried including just the files; moving the main class to <root>.. Still same problem..
Or could there be some different fundemental thingy I have forgotten ??
thanks
Aqoi

Starting single sign-on and directory service

i am trying to install oracle 9i infrastructure on my clean win2000 box with 2.4 GHz proc and 1GB RAM.
i am getting falilure messages for the following:
infrastructure instance configuration assistant: failed
oracle 9i application server randomize password: failed
single sign on configuration assistant: failed
infrastructure mod-osso configuration assistant: failed
OPMN configuration assistant: failed
log file says:
Configuration failed for IAS
IAS Instance creation failed
Configuration failed for JAZN
JAZN configuration failed: unable to establish a directory context.
Configuration succeeded for IASProperty
Configuration failed for IAS
Configuration failed for JAZN
after which single sign-on and directory service dont start. which means no connectivity :(
can somebody please guide me about how to avoid this failure in installation or how to manually start these after installation.
it would be a great help
ashish

Hi,
we're having exactly the same problem.
Could you tell me what the problem is with the network ?
You say configure it properly but what do you mean ?
It's installed on a Windows 2000 Server machine, it's own DNS.
Thanks,
Yuri Arts

How to import or sync Exchange server data like Calendar, Contacts with a web application or web service

How to import or sync Exchange data like Calendar, Contacts with a web application or web service.
1. Is there any API to import contacts and calendar (tasks and events) from exchange server to my calendar in web application using web services or http request. the user would have provided the username and password for his exchange account.
2. Is there any licensing involved to communicate with exchange server for its data.
thanks in advance

I am bit lost here; i have my exchange credentials, how (or) can i use the above mentioned solution for windows application or web services. can you please point in the right direction. my requirement is this: how to sync exchange data with a third party
app or webapp(my development) using EWS. how to start with, starting point and steps to do[just overview ;)].

Difference of Oracle Application Server Web Services and JDeveloper

As new to the Webservices my Question is what is difference of:
- 1. Web Services Assistents in JDeveloper 1.3 (JAXRPC specification, WS-Sec)
- 2. "Oracle Application Server Web Services" 10.1.2 using WebServicesAssembler (depreciated ?)
- 3. Apache Soap Server 2 based (deprecated ?)
When should I use the iAS Assistent and when the JDeveloper one for generation?
Why don't they use the same stuff?
Does anyone have some experience for projects on this?
Thx, Willi
Have not found any Topic with an explanation on this. If you know someone please point me to that.
oOracle Web Services Framework Confusion
oracle web services framework confusion
Web service Assembler Tool

Thanks a lot for clearing this things to me.
I have to start a web services projects and I am confused which tools to use - JDeveloper Assistents or the WebServicesAssembler (as pointed out before).
Because I did not find some hints on this (expecpt your ones), it seems to me that I am missing some point or criteria on that I can do such a decision when to use what of those two tools.
Do I understand you right, that in future JDeveloper and the WebServicesAssembler will use the same .jar files and also generate the same code?
Thanks a lot for such valuable hints, Willi

Sun Java Application Server Performance with Web Services

We are running a web service on SJAS (Standard Edition). Load testing under 1 or 2 users works alright, but with 5 users making concurrent web service calls it immediately crashes the domain. Has anyone else run into performance issues when using SJAS with Web Services? Are there any configuration parameters we need to setup to handle more than 1 connection?
I'm sure that the application server can handle many concurrent connections, just not sure how to configure and where to look for more information. If anyone is aware of actual numbers for load testing, that would be great information.
Thanks,
Dawson

Hi Dawson,
SJSAS can definetly handle more users. Can you please tell us, what version of SJSAS and web services (jax-rpc 1.1 or jax-ws 2.0?) implementation you are using? When you say it crashes the domain, do you see any error messages in the server.log?

Infopath 2007 and SharePoint 2007 error with Web Service Submit and Recieve

I have an InfoPath form with code. The code submits the form to SharePoint and to SQL DB through Web Service. The form has some workflow. When form is in a "New" state if submits to SharePoint and Database through custom web service. Works fine
from both Client and SharePoint browser form. The database ID is returned to the form and then stored in a field. In second stage of workflow additional fields are shown for Supervisor to fill out. I then have an "update" web service to update the
database. I set all the field values in the Web service then execute both the update Web Service and the SharePoint submit. I get an error (both if running from desktop or SharePoint) Error is
"The string '' is not a valid AllXsd value"
I know sometimes this happens with dates. But I've got all the dates set. The funny thing is in the first submit there are 2 dates in the second submit there is one date. All are set the same and on the first submit no problem submits correct dates to SQL
database through web Service. Second submit has 2 Boolean fields that I also default to a value of false. I've debugged and looked at all the values and everything has a value. I use delete NIL to make sure value in Web Service is set. I can save the data
in the form but not submit it because I get the web service error. If I save the data in form and download it and copy all the values in the XML to my Web Service and invoke the web service works fine. So there is no error in the web service. The first
submit submits both dates and some integer values. The only difference in second is the Boolean value but it is set to default of false for all checkboxes. I'm going out of mind trying to see what could be wrong. Also difference with second
is it sends in the ID of the record that was set in form by result of first submit query sending back the DB value. That value is an integer but I also set correctly.
Susan J. Swanger

Hi Somatco,
According to your description, my understanding is that you got an error when you ran report with xml type datasource.
Please set the xml datasource credential to Use Windows Authentication (integrated security). More information, please refer to the link:
http://social.technet.microsoft.com/Forums/sqlserver/en-US/530c29ab-7ed5-4c36-816a-910c0b51f4bd/xml-data-source-unable-to-authenticate-using-windows-authentication?forum=sqlreportingservices
Here are some similar posts for you to take a look at:
http://www.symantec.com/business/support/index?page=content&id=TECH190935
http://social.msdn.microsoft.com/Forums/en-US/285e4e8c-d05c-48f8-b4f3-9d87988d823e/an-error-has-occurred-during-report-processing-rsprocessingaborted-query-execution-failed-for?forum=sqlreportingservices
In addition, as this issue is related to SQL Server Reporting, I commend you create a new thread in SQL Server Reporting forum, more experts will assist you with SQL Server Reporting.
SQL Server Report forum:
http://social.msdn.microsoft.com/Forums/sqlserver/en-US/home?forum=sqlreportingservices
I hope this helps.
Thanks,
Wendy
Wendy Li
TechNet Community Support

Can i deploy web application with WEB-INF as war and leave others as it is

i'm asked to deploy my web application with WEB-INF in a war and leave all the others as it is, but i'm getting error that "resource not found"
what shld i do?
this is the command i used to create war
jar cvf WEB-INF.war *.*
i entered this command from command prompt from the directory
c:/tomcat/webapps/myapplication/WEB-INF/>jar cvf WEB-INF.war *.*
please help!!!!!

can u please elaborate...because i need to speak about that to the manager who is asking me to do so. he will not listen to me until i explain with true reasons.

Axis and Mime to send Images with Web Services

Hi, I have been reading a lot of information about MIME and how I have to send images or attachaments with Web Services, and I am a little lost. I would to find a simple example to use MIME with AXIS 1.4 . Do anybody know where I can find some example to use attachements with AXIS???
Thank you very much in advance

Hi,
When you are using JAX-WS, there is a tool wsimport, with which you are going to generate the artifacts required to implement the web service.
When you pass the WSDL as a parameter to the wsimport tool, it will be create the required beans also(JAXB Objects).
So need of any other external implementation of JAXB when you are working with JAXWS
Thanks,

Single Sign-On and session information

I have an Oracle Portal application with many Java Web Applications. I wish to
provide Single Sign-On to this applications. I know how to configure Single
Sign-On and how to get the user login in Java. I want to store session
information such as: User First and Last Name, User Social Security Number. I
want to get this information from the database after authentication, store it
in session and then access this information from all my applications.

Are you familiarized with sys_context function?
Hope this is useful help.
BR,
Marcos

Security with Web Service calling some EJBs

Hi everybody,
I have implemented some web services residing in a war file deployed on my Tomcat. The web services module is a client to some EJBs deployed on my JBoss. I need to log the user in my realm on each WS request and log the user out before the WS response.
I have implemented security on web applications with JBoss and used JAAS realms succesfully but what do I do in this case with Web Services? I mean the requests are stateless. If I use the org.jboss.security.ClientLoginModule
won't this override the credentials of another user who is already logged in the realm?
I have also implemented a standalone application which spawns a thread for each user request and I am wondering about the same thing. This application is a service listening for some kind of messages; on a message the application should log the user in the realm before calling an EJB and log the user after the request is completed. So it's more or less the same situation as above.
Is this possible? I mean logging many users in the same realm in one non-web application?
Any ideas?
Thank you in advance!!!
thoism

requests are stateless, just as are requests to webapps.
Which is hardly surprising as a web services stack is typically implemented as a web application.
If you could log in only a single user at the same time to an EJB application, it would be rather pointless to have the application as a distributed multiuser system :)
What you might check is whether you're allowed to log in the same user several times, if I remember correctly this can be limited in the EJB module deployment descriptors.

Oracle Single Sign on and Oracle Internet Directory

Hello Gurus,
What is the relationship between Oracle Single Sign on and Oracle Internet Directory.
To my understanding, OID is required to install SSO.
If OID already exist, can we just install SSO and go on integrating it to existing OID.
Great Thanks,
vimal jain.
[email protected]

Hi Tim,
I've been working on this and could reproduce the issue with anonymous binds. A fix will be ready in 4.2.1.
So what I really need is the password used for login to pass to the is_member call.The P101_PASSWORD item does not save state. However, you can access the value during submit processing of the login page, for example in the post authentication function of your authentication scheme. People sometimes put code in there to query the user's groups (e.g. with apex_ldap.member_of2) and save them in an application. This item value can then be used in the authorization schemes.
Regards,
Christian

How to install and consume GroupWise Web Service (SOAP)

Hello! I'm Razvan, programmer from Romnia, and I am new to GroupWise development.
I am asking if anyone could help me with a C# Visual Studio 2010 example of how to install and consume GroupWise Web Service (SOAP).
The documentation from novell site didn't help me, i didn't understant much of it.
All I need is either a link to a documented GroupWise C# developer step-by-step tutorial, or some code examples.
Can you please show me some code examples in C# with:
1)loging in using a username and a password,
2)retrieving contact list,
3)retrieving appointment list,
4)sending a mail,
5)setting an appointment
I don't know how to use "groupwise.wsdl" and customise it so that it points to our GroupWise server.
Please, I really need this because I am working at a project right now which involves GroupWise integration.
I hope I haven't disturbed anyone with my simple question.
I know this might be a very simple question given the complexity of the other posts here, but that's why I really hope I will get an answer soon.
Thank you very much!
Signature:
How old is the Orthodox faith?
How old is the orthodox faith?

Just a comment.
The value for the version element should be "1.02"
not "1.2".
Preston
>>> On Tuesday, March 01, 2011 at 8:06 AM,
TheRomanian<[email protected]> wrote:
> I have great news! After strong documentation yesterday and today, I've
> just made a successfull example that actually connects to our GroupWise
> server.
>
> I made it in PHP.
>
> I need an ASP.NET + C# application, but now is very simple to convert
> it. I post the PHP code here for other people who in future might be
> interested in finding out.
>
> So a simple PHP GroupWise Login code using "groupwise.wsdl" web
> service:
>
>
> require_once('./GWService/GroupwiseService.php');
> require_once('FB.class.php');
>
> $classmap = array(
> 'Authenication' => 'Authenication',
> 'PlainText' => 'PlainText',
> 'loginRequest' => 'loginRequest',
> 'loginResponse' => 'loginResponse',
> 'logoutRequest' => 'logoutRequest',
> 'logoutResponse' => 'logoutResponse',
> 'UserInfo' => 'UserInfo',
> );
>
> $gwservice = new GroupwiseService(
> "./WSDL/groupwise.wsdl",
> array(
> "location" => "http://11.150.40.78:8756/soap",
> *Your GroupWise server IP:
> and PORT*
> "classmap" => $classmap,
> "trace" => true)
> );
>
> // do login
> $pt = new PlainText();
> $pt‑>username = *"YOUR GROUPWISE USERNAME"*;
> $pt‑>password = *"YOUR GROUPWISE PASSWORD"*;
>
> $lr = new loginRequest();
> $lr‑>auth = $pt;
> $lr‑>language = "en";
> $lr‑>version = "1.2";
> $lr‑>application = "phpClient";
>
> $lres = $gwservice‑>loginRequest($lr);
> //print_r($lres);
>
>
> I Hope this will help others.
>
> ‑‑
> Signature:
>
> How old is the Orthodox Faith?
> 'How old is the orthodox faith?'
> (http://www.orthodoxphotos.com/history.shtml)

How to create items and BOMs using web services

Hi All,
I need to create, change and read Items and BOMs through web services (using SOA Gateway, right). I found this one here: "Process Item (convenience wrapper version)" or "Process Item" within
Internal Name     EGO_ITEM_PUB
Type               PL/SQL
Product          Advanced Product Catalog
Status          Active
Business Entity     Catalog Item
Right now, I don't know how to use it. If somebody has a simple example to create a single item, this would be perfect! Which one would be the right one to read detailed information about an existing item?
The second object I need to maintain (create, change and read) is BOM. Which API can I use here?
btw: I use EBS 12.1.1 on windows.
Many thanks,
Konrad

Hi!
Thanks for your quick answer but unfortunately, I must admit that I'm an absolute beginner with Oracle and EBS and so things like:
Enable trace and generate the tkprof file or open the form using forms builder to get the name of the API used in thta screen.or
Please check e-trm site for your question do not help me to much :-(
Any other advice?
Konrad
Api's in EBS
Re: Api's in EBS
http://sairamgoudmalla.blogspot.com/2009/05/script-to-find-oracle-apis-for-any.html
API
Fixed Asset API
List of API
Re: List of APIs
Regard
Helios

Single Sign On and Application with Web Services

Similar Messages

Maybe you are looking for