The weblogic.security.Security.runAs() and JAAS Subject

Let say that I have Java client with some JAAS code that authenticates
the user. The LoginContext generates a Subject containing the Principal
name of the authenticated user, but also some private credentials that
makes the Subject secure.
Now I want to call an EJB on WLS.
Having JNDI (EJB) code inside a PriviledgesAction and using the
weblogic.security.Security.runAs() method, I assume that the Subject is
sent over the wire with the EJB call. If not, please correct me.
Question is: How does WLS authenticate this call? What modules are
called? IdentityAsserter? LoginModule? Is the Subject simply assumed
"valid"? Any documentation describing how this is done?
/Bo

Hi,
Problem is solved, we also got security exception when we tried to call MBeans.For this to work we have to set
-Dweblogic.disableMBeanAuthorization=true in weblogic startup script so that our application can access MBeans.
Thanks
girish

Similar Messages

How can I found out the No. of Psocess running and How can I Release them

Dear experts,
How can I found out the No. of Psocess running and How can I Release them.
I have 1GB RAM with oracle 10G. and please tell me How many processes can run with this RAM.

>How can I found out the No. of Psocess running
well, that depends on where you are ? if you are on windows then task manager will tell you what all processes are running. if you are on unix then ps -ef will tell you about all the processes running on a particular machine
How can I Release them.
what do you exactly mean by Release ? if you mean "end" that again has 2 scenarios, first that process ends by itself (ie after completing its job), another can be killing the process , that again will depend upon operating system. in windows you can kill a process from task manager itself, in unix you can use kill -9 PID to kill a process.
How many processes can run with this RAM.
loads of other details required before one can answer this question.no of processes in a very simple manner will depend how much memory is available and how much a process is eating.
Sidhu

I installed iWork11 but the '09 versions of the software are still running--and the default. What do I need to do to get the '11 versions working?

I installed iWork11 but the '09 versions of the software are still running--and the default. What do I need to do to get the '11 versions working?

It's very simple. If you want to use iPhoto, just let it manage things as it does. Other than that: Export from iPhoto and delete the image from iPhoto. That will remove the master and all versions.
If space is an issue... use an external disk.
Don't change anything in the iPhoto Library Folder via the Finder or any other application. iPhoto depends on the structure as well as the contents of this folder. Moving things, renaming things, deleting them or otherwise making changes will prevent iPhoto from working and could even cause you to damage or lose your photos.
Regards
TD

The original u201CBP_CONFIRMu201D is running and not the redefine one.

Hi,
In Component CRMCMP_BPIDENT,
I have enhanced the custom controller CRMCMP_BPIDENT/CuCoBuPa
and redefined the method u201CBP_CONFIRMu201D with my logic.
But when I run the IC web client the original u201CBP_CONFIRMu201D is running and not the redefine one.
Why ?
Thanks in advance.

Amit,
We have not yet transported our Enhancement Set through the landscape, but I suspect you will need to maintain the assignment (BSPWDV_EHSET_ASG) in each system for the reason you give.
Your created Enhancement Set (BSPWDV_EHSET_DEF) will still transport through, then you will need to go into table maintenance for BSPWDV_EHSET_ASG once the set has been transported into your QAS system, and then assign it to your QAS clients.
Many thanks,
Andrew Griffin.

Service cannot be started. Microsoft.VirtualManager.DB.CarmineSqlException: Unable to connect to the VMM database. Ensure that the SQL Server is running and configured correctly

Hi All,
I am setting up SCVMM 2012 R2 in a production environment. Whenever I restart the SCVMM virtual machine the VMM service doesn't start automatically, I have to manually start it. I checked the VMM logs and in the event viewer i find the below error,
Service cannot be started. Microsoft.VirtualManager.DB.CarmineSqlException: Unable to connect to the VMM database. Ensure that the SQL Server is running and configured correctly. ---> System.Data.SqlClient.SqlException: Cannot open database "VirtualManagerDB"
requested by the login. The login failed. Login failed for user 'NXTRA\VMMSVC'. at System.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction) at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject
stateObj, Boolean callerHasConnectionLock, Boolean asyncClose) at System.Data.SqlClient.TdsParser.TryRun(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj, Boolean&
dataReady) at System.Data.SqlClient.TdsParser.Run(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj) at System.Data.Sq...
I added the 'VMMSVC' account as db_owner and sysadmin and also NT_Authority\System with same permissions still the service doesn't start on the start up.
I googled a lot and I find the threads with the error containing "General failure" but not with the above. Can someone please help me to find out why this error is occuring.
Thanks,
Ravi

It's often only a problem of the service dependencies. SCVMM starts to fast, SQL server on the same machine in not initialized yet. Here are working service dependencies to ensure SQL server is initializes before SCVMM starts.
You can set the service dependencies directly in regedit (as always: be careful modifying the registry ...)
Here is the content of a reg file setting the dependency.
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SCVMMService]
"DependOnService"=hex(7):53,00,51,00,4c,00,53,00,45,00,52,00,56,00,45,00,52,00,\
41,00,47,00,45,00,4e,00,54,00,00,00,53,00,51,00,4c,00,42,00,72,00,6f,00,77,\
00,73,00,65,00,72,00,00,00,53,00,51,00,4c,00,57,00,72,00,69,00,74,00,65,00,\
72,00,00,00,4d,00,53,00,53,00,51,00,4c,00,46,00,44,00,4c,00,61,00,75,00,6e,\
00,63,00,68,00,65,00,72,00,00,00,00,00

I can't get Firefox to bring up the browser. It continually tells me that the program is already running and to either close it or restart my computer. Not having anything to actually close, I restarted the computer five times. Now what?

I can't get Firefox to bring up the browser. It continually tells me that the program is already running and to either close it or restart my computer. Not having anything to actually close, I restarted the computer five times. Now what?
== This happened ==
Just once or twice
== Today. ==
== User Agent ==
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; PeoplePal 6.6; PeoplePal 7.3) w:PACBHO60 w:PACBHO60 w:PACBHO60 w:PACBHO60 w:PACBHO60

Phillipp,
I tried it again using "save link as", and this time it actually worked! I just now downloaded several more using the "save link as" option, and it works perfectly. Thanks. Problem solved.
Littleberry

WHEN I CONNECT, THROUGH USB CABLE, MY IPHONE TO THE MAC BOOK PRO, THE ITUNES APP STOP RUNNING AND I CAN NOT SYNCRONIZE THE IPHONE

I have an iphone 4, iOS 7.1.2
Mac book pro 13in Mid 2012, with OS X VERSION 10.9.4, Processor speed 2.9 Ghz, Memory 8GB 1600MHz DDR3, Intel core i7, Storage capacity 750 GB, 650 GB available.
WHEN I CONNECT, THROUGH USB CABLE, MY IPHONE TO THE MAC BOOK PRO, THE ITUNES APP STOP RUNNING AND I CAN NOT SYNCRONIZE THE IPHONE.

Hello skkmmayer,
That is probably a lot of stuff you do not want on your iPhone. So this can be handled a few different was. For you current situation, you can delete the apps directly on your iPhone by holding on the app until it starts to jiggle and then tap on the X of all the apps that you do not want. The second thing you can do is before you sync with iTunes, look at the app section on your iPhone to know what gets transfer to it and you can deselect items that you do not want. Lastly, if you download content on your iPad and it is a universal app, you can actually download it directly to your iPhone by looking at your past purchases and download it directly from the App Store. Check out the articles below for more information if need further assistance.
How to delete content you've downloaded from the iTunes Store, App Store, iBooks Store, or Mac App Store
http://support.apple.com/kb/HT5772
iTunes 11 for Mac: Sync and organize iOS apps
http://support.apple.com/kb/PH12115
Download past purchases
http://support.apple.com/kb/HT2519
Regards,
-Norm G.

Hi there, i bought my macbook 1 week ago and its working fine. BUT the fan is always running and it is very annoying? what should i do

hi there, i bought my macbook 1 week ago and its working fine. BUT the fan is always running and it is very annoying? what should i do

Take it back to the store where you bought it for a hardware check and/or exchange/refund.
If they say "that's normal" then get your money back.
Nothing worst than a annoying fan you can't do anything about.
I has a eMac that did that, sounded like a vacuum cleaner running all the time, I'm so glad I trashed it and will never buy a machine I can hear running in a near silent library.
Some advice, the higher end models with a dedicated graphics do tend to operate cooler, it's the one's with only CPU graphics (Intel) regardless if a Mac or PC that tend to make a lot of noise.
Graphics should have never been put on the CPU, it just doubles the heat and doubles the fan noise.

Recently while using my iMac the display will just cut off but the machine is still running and I have to press the power button to get the display to cut back on. What is causing this?

Recently while using my iMac the display will just cut off but the machine is still running and I have to press the power button to get the display to cut back on. What is causing this?

Look in System Preferences/Energy Saver.

How to get both JDNI context and JAAS Subject with EJB

I looked at the JAAS docs and sample, but I'm still confused about
something. There is a sample of JAAS in a regular, non-EJB scenario. The
client initializes the LoginContext, calls login(), then retrieves the
Subject (and possibly later does something with Subject.doAs()). However, in
the typical EJB scenario, the client initializes the JNDI context, then does
the lookup on the bean name (which implicitly does the authentication to the
container). How do they work together, thought? I.e., what does the client
code look like if JAAS authentication is to be used from an EJB client?
Thank you!

In your login module you have to authenticate the user to the Weblogic Server as
well . For simplicity, Weblogic comes with a class weblogic.security.auth.Authenticate
to login a subject with Weblogic Server.
Once logged in, any thread that is invoked within the context of a Subject.doAs
call gets that subject associated with it.
Hope that helps
"Allan" <dfusdfsdfsd> wrote:
I looked at the JAAS docs and sample, but I'm still confused about
something. There is a sample of JAAS in a regular, non-EJB scenario.
The
client initializes the LoginContext, calls login(), then retrieves the
Subject (and possibly later does something with Subject.doAs()). However,
in
the typical EJB scenario, the client initializes the JNDI context, then
does
the lookup on the bean name (which implicitly does the authentication
to the
container). How do they work together, thought? I.e., what does the client
code look like if JAAS authentication is to be used from an EJB client?
Thank you!

RunAs and JAAS

If i try to call an PrivilegedAction i get an SecurityError: Invalid
Subject: principals=[....]
In an MessageBean in the onMessage()-Methode i do:
LoginContext lc = new LoginContext("myrealm",new
MyCallBackHandler(username,password))
lc.login();
Subject s = lc.getSubject();
weblogic.Security.SecurityRunAs(s,this); // this implements
PrivilegedAction
in the run()-Methode
i check the current-Subject/User
Subject cs=weblogic.security.Security.getCurrentSubject();
System.out.println("User:= "
+weblogic.security.SubjectUtils.getUsername(cs));
The System out prints the correct User!!!
After that an Exception occures:
Invalid Subject: principals=[....]

You need to sign the subject:
PrincipalValidator principalValidator =
new PrincipalValidatorImpl();
Set principals = subject.getPrincipals();
Iterator i = principals.iterator();
while(i.hasNext())
Principal principal = (Principal) i.next();
AccessController.doPrivileged(
PrivilegedActions.getSignPrincipalAction(
principalValidator, principal));
[email protected] wrote:
If i try to call an PrivilegedAction i get an SecurityError: Invalid
Subject: principals=[....]
In an MessageBean in the onMessage()-Methode i do:
LoginContext lc = new LoginContext("myrealm",new
MyCallBackHandler(username,password))
lc.login();
Subject s = lc.getSubject();
weblogic.Security.SecurityRunAs(s,this); // this implements
PrivilegedAction
in the run()-Methode
i check the current-Subject/User
Subject cs=weblogic.security.Security.getCurrentSubject();
System.out.println("User:= "
+weblogic.security.SubjectUtils.getUsername(cs));
The System out prints the correct User!!!
After that an Exception occures:
Invalid Subject: principals=[....]

When I boot up my system and Firefox is not running, Firefox tells me I must update, but when it begins to do so, it tells me that the program is currently running and that I must turn it off before the update can proceed.

Basically, I don't know any better way to turn it off than to try closing the program or rebooting the computer. Rebooting usually works, as in the following instance which happens occasionally: I close Firefox, move on to another task, and then try to open Firefox again and am told that Firefox is still running and that I must try to close it again or reboot. Trying to close it again is impossible because for all I can see, it is closed. So, I reboot and can then successfully start Firefox. That is a nuisance that I would like to remedy. I was hoping that the update of the program might resolve the problem, but I can't get the update to work, as explained above.

Hello,
I would like to strongly recommend that you update your version of Flash Player to our currently released version (17.0.0.169) and enable auto updates. The version you are using is insecure and opening your computer (and all of your data) to being easily exploited by bad guys.
As for the error you are receiving, this is most likely a restriction from the website. Each developer is able to specify what the required minimum version of Flash and require their users to have at least that version installed. The detection that is occuring and the message that you are seeing on the website isn't part of Flash Player, but instead part of the website's code.
If you go to this page and click the "Check Now" button, what is displayed (OS, browser and version number)? Do you see the "tree" animation playing below?
Flash Player Help
Thanks,
Chris

I want to delete the version I am running and then upgrade

I am using a MacBook pro and having some issues with the touch pad (background info). I want to delete the current version of Firefox and up grade to FF 4.0.1
I can only find FF listed under 'Drives' in finder and am unable to delete it. I have downloaded FF 4.0.1 and it does not cancel out the current version I am running.
Marty

Trash can sometimes fail to empty if a file that has been moved into the Trash is in use by another application.
Restart your machine and try empty the Trash. It should work.
If there are locked files, either you or another user has locked the file, to empty them from Trash the admin (or user) Password is usually prompted before allowing the locked file to be removed.

When I click on Update, the "Connecting to Server" runs and does not stop or seem to connect. What to do?

Recently I upgraded to Firefox 4. Since then, at least once a week, I get a message to update, but when I click on "update" a message "connecting to server" appears that runs and runs and nothing else happens. No update! I don't know what to do.

If you have problems with updating then best is to download the full version and trash the currently installed version to do a clean install of the new version.
Download a new copy of the Firefox program and save the DMG file to the desktop
* Firefox 4.0.x: http://www.mozilla.com/en-US/firefox/all.html
* Trash the current Firefox application to do a clean (re-)install
* Install the new version that you have downloaded
Your profile data is stored elsewhere in the [http://kb.mozillazine.org/Profile_folder_-_Firefox Firefox Profile Folder], so you won't lose your bookmarks and other personal data.

How to get rid of the weblogic.kernel.Default errors and warning?

Hi there,
When i'm running my application deployed on WLS8.1 SP3 and the application is running fine, but the following error and warnings were thrown.
2004-08-05 11:26:30,453 [ExecuteThread: '13' for queue: 'weblogic.kernel.Default'] ERROR com.bea.wlw.runtime.core.util.Config - Failed to obtain connection to datasource=cgDataSource, using generic DB properties
<Aug 5, 2004 11:26:30 AM SGT> <Error> <WLW> <000000> <Failed to obtain connection to datasource=cgDataSource, using generic DB properties>
2004-08-05 11:27:12,281 [ExecuteThread: '13' for queue: 'weblogic.kernel.Default'] WARN org.apache.jcs.config.OptionConverter - Could not find value for key jcs.default.elementattributes
2004-08-05 11:27:12,282 [ExecuteThread: '13' for queue: 'weblogic.kernel.Default'] WARN org.apache.jcs.engine.control.CompositeCacheConfigurator - Could not instantiate eAttr named 'jcs.default.elementattributes', using defaults.
2004-08-05 11:27:12,308 [ExecuteThread: '13' for queue: 'weblogic.kernel.Default'] WARN org.apache.jcs.config.OptionConverter - Could not find value for key jcs.system.groupIdCache.elementattributes
2004-08-05 11:27:12,308 [ExecuteThread: '13' for queue: 'weblogic.kernel.Default'] WARN org.apache.jcs.engine.control.CompositeCacheConfigurator - Could not instantiate eAttr named 'jcs.system.groupIdCache.elementattributes', using defaults.
2004-08-05 11:27:12,386 [ExecuteThread: '13' for queue: 'weblogic.kernel.Default'] WARN org.apache.jcs.config.OptionConverter - Could not find value for key jcs.region.CodeTableCache.elementattributes
2004-08-05 11:27:12,386 [ExecuteThread: '13' for queue: 'weblogic.kernel.Default'] WARN org.apache.jcs.engine.control.CompositeCacheConfigurator - Could not instantiate eAttr named 'jcs.region.CodeTableCache.elementattributes', using defaults.
2004-08-05 11:27:13,527 [ExecuteThread: '13' for queue: 'weblogic.kernel.Default'] WARN com.bea.wlw.netui.script.el.NetUIReadVariableResolver - Could not create a ContextFactory for type "com.bea.netuix.servlets.script.PortalVariableResolver$PortalContextFactory" because the ContextFactory implementation class could not be found.
May i know why this is so? How to get rid of these error and warnings?
Thanks
Derek
Message was edited by derekchan at Aug 4, 2004 8:41 PM
Message was edited by derekchan at Aug 4, 2004 8:42 PM

you didnt seem to have configured the datasource / connection pool / database control with proper db properties
you should check your configuration to see if you have done it right and then you should check your application and the properties settings in the controls to ensure they are right.

The weblogic.security.Security.runAs() and JAAS Subject

Similar Messages

Maybe you are looking for