Use of WebPass

Whts the use of WebPass ... as documented it's used for helps communications b/w Identity Server and Webserver. Is there any other use of it? in detail?

Hi,
The WebPass is the OAM 10g component that sits within a web server and supplies the urls that make up the Identity System (/identity/oblix). The admin part of it (the WebPass comprises both the admin and the end-user urls) is described in some detail here: http://docs.oracle.com/cd/E15217_01/doc.1014/e12489/toc.htm
In a nutshell, it allows users to view and administer users, groups and other objects within an ldap. It is often used in combination with an OAM 10g Access System configuration in order to control users' access rights, and to supply password change functionality.
Regards,
Colin

Similar Messages

OAM lost pswd mgmt stylesheet issue

We are getting stylesheet error after making changes to lpm_changepwd.xsl. How do we go about troubleshooting it? We are able to open the the xsl file in IE and see the content.
Thanks.
VS

Hi VS,
It is very useful to have an xml tool such as XML Spy (there are also free utilities, such as Exchanger) so that you can validate the XSL, and directly see the effect of applying it to XML without using the WebPass/Identity Server.
To get the XML, you can add the parameter &format=xmlnoxsl to the url in the relevant WebPass page (in this case the Change Password screen) so that you can copy it into the xml tool for testing.
Regards,
Colin

OAM lost pswd mgmt

If the "Change on Reset" is checked in the password policy, when a user with expired/temporary password tries to login to a application, he will be redirected to the password change page. User provides temporary password and new password and clicks submit, the user gets to a confirmation page that password is changed. The confirmation page has a ok button. When the user click the ok button, the user is redirected to the application homepage with a valid obssocookie. This is out of the box functionality.
If we want the user to be redirected to login page after after clicking the ok on the confirmation page, what would be the best way to do this?
Thanks
VS

Hi VS,
It is very useful to have an xml tool such as XML Spy (there are also free utilities, such as Exchanger) so that you can validate the XSL, and directly see the effect of applying it to XML without using the WebPass/Identity Server.
To get the XML, you can add the parameter &format=xmlnoxsl to the url in the relevant WebPass page (in this case the Change Password screen) so that you can copy it into the xml tool for testing.
Regards,
Colin

Problem while sending/Receiving request using the HttpURLConnection obj

Hi,
We are facing the problem while passing the request in Weblogic.
Looks like there is some problem with Weblogic while sending/Receiving the request using the HttpURLConnection object.
Currently we are migrating 2 applications to WebLogic. Application1 to application2 request should pass.
Below is some example we tried:
"When we send a request to our code using the SSOAdaptor code (which handles the request/session in our application) which is on the SunOne server the request parameters are received by our code successfully. And also in Create User Functionality of application1 we are sending a request to webpass(which is on Sunone Server) using the HttpURLConnection object and the SOAP request is received successfully by the Webpass."
Looks like when we send request (using HttpURLConnection) from a server other than Weblogic to a servlet in a Weblogic the request parameters are received with out issues.
Where as when the request is sent from WebLogic to WebLogic the request parameters are missing some how.
Is there any issue in Weblogic? Please helpus on this.
Thanks,
Nagesh
Edited by: user9307541 on Mar 15, 2010 5:08 AM

Hi,
Please find below scenario for testing.
We have tested the SSOAdaptor code (it is the fucntion name which will send the data from source) locally by hittiing the WPS adaptor URL in a Java client program(TestRequest.java) and the request parameters were reaching the WPS Adapter successfully.
Then we have written two test servlets to test the communication between SSOAdaptor(TestServlet.java) and WPS adaptor(WPSServlet.java).
Functionality of TestSevlet: It is sending a request to WPSServelt similar to the way we are doing it in SSOAdaptor.
Functionality of WPSServlet: It will receive the request parameters and write the parameter Map to console.
We have deployed and these two servlets(in a single webapplication) on Tomcat server and the request parameters are reaching the WPSServlet successfully.
Output on Tomcat server:
before sending request
**********************Inside WPS Servlet -- the request Map is:{TypeAcc=[Ljava.lang.String;@14e3f41, ServiceName=[Ljava.lang.String;@1acd47, GMEPortalUserID=[Ljava.lang.String;@19b04e2, UserID=[Ljava.lang.String;@5dcec6, Country=[Ljava.lang.String;@b25b9d}
after sending request
After this we have deployed these two servlets (with in a single webapplication) on the Weblogic server in Dev machine(path: /apps/usmport/domains/usmport/servers/usmport_admin/upload/ssoAdaptor/WEB-INF/classes/com/gm/gmeportal/security/adaptor) and
now the request parameters are not reaching the WPSServlet.
Output on Weblogic Server:
before sending request
**********************Inside WPS Servlet -- the request Map is:{}
after sending request
Looks like there is some problem with Weblogic while sending/Receiving the request using the HttpURLConnection object.
When we send a request to WPSAdaptor using the Old SSOAdaptor code which is on the SunOne server the request parameters are received by WPS successfully. And also in Create User Functionality of Portal we are sending a request to webpass(which is on Sunone Server) using the HttpURLConnection object and the SOAP request is received successfully by the Webpass.
Looks like when we send request (using HttpURLConnection) from a server other than Weblogic to a servlet in a Weblogic the request parameters are received with out issues. Where as when the request is sent from weblogic to weblogic the request parameters are missing some how.
Please find below javs source code used to test this:
TestRequest.java
import java.io.BufferedReader;
import java.io.DataOutputStream;
import java.io.InputStream;
import java.io.InputStreamReader;
import java.io.OutputStream;
import java.net.HttpURLConnection;
import java.net.MalformedURLException;
import java.net.URL;
public class TestRequest {
     * @param args
     public static void main(String[] args) throws Exception{
          // TODO Auto-generated method stub
          excutePost("http://localhost:8080/Testing/TestServlet", "GMEPortalUserID=captest.wss@it0555&UserID=bl1133&Country=it&TypeAcc=256&ServiceName=Logon");
          //System.out.println("********** Now the request is from SSO *****************");
          //excuteGet("http://10.156.0.173:7013/channel21/wpsadapter", "GMEPortalUserID=captest.wss@it0554&UserID=bl1133&Country=it&TypeAcc=256&ServiceName=Logon");
     public static String excutePost(String targetURL, String urlParameters)
     URL url;
     HttpURLConnection connection = null;
     try {
     //Create connection
     url = new URL(targetURL);
     connection = (HttpURLConnection)url.openConnection();
     connection.setRequestMethod("POST");
     connection.setRequestProperty("Content-Type",
     "application/x-www-form-urlencoded");
     connection.setRequestProperty("Content-Length", "" +
     Integer.toString(urlParameters.getBytes().length));
     connection.setRequestProperty("Content-Language", "en-US");
     connection.setUseCaches (false);
     connection.setDoInput(true);
     connection.setDoOutput(true);
     //Send request
     DataOutputStream wr = new DataOutputStream (
     connection.getOutputStream ());
     wr.writeBytes (urlParameters);
     wr.flush ();
     wr.close ();
     //Get Response
     InputStream is = connection.getInputStream();
     BufferedReader rd = new BufferedReader(new InputStreamReader(is));
     String line;
     StringBuffer response = new StringBuffer();
     while((line = rd.readLine()) != null) {
     response.append(line);
     response.append('\r');
     rd.close();
     System.out.println("Response is:" + response);
     return response.toString();
     } catch (Exception e) {
     e.printStackTrace();
     return null;
     } finally {
     if(connection != null) {
     connection.disconnect();
     public static String excuteGet(String targetURL, String urlParameters) throws Exception
          URL url = new URL(targetURL);
          HttpURLConnection httpurlconnection =
               (HttpURLConnection) url.openConnection();
          /*httpurlconnection.setRequestProperty(
               "cookie",
               constructRequestParams(httpservletrequest.getCookies()));*/
          httpurlconnection.setDoOutput(true);
          httpurlconnection.setDoInput(true);
          httpurlconnection.setRequestProperty(
               "Content-length",
               String.valueOf(urlParameters.length()));
          OutputStream outputstream = httpurlconnection.getOutputStream();
          outputstream.write(urlParameters.getBytes());
          outputstream.flush();
          //Get Response
          try{
     InputStream is = httpurlconnection.getInputStream();
     BufferedReader rd = new BufferedReader(new InputStreamReader(is));
     String line;
     StringBuffer response = new StringBuffer();
     while((line = rd.readLine()) != null) {
     response.append(line);
     response.append('\r');
     rd.close();
     System.out.println("Response from SSO is:" + response);
     return response.toString();
     } catch (Exception e) {
     e.printStackTrace();
     return null;
     } finally {
     if(httpurlconnection != null) {
          httpurlconnection.disconnect();
TestServlet.java
import java.io.BufferedReader;
import java.io.IOException;
import java.io.InputStream;
import java.io.InputStreamReader;
import java.io.OutputStream;
import java.net.HttpURLConnection;
import java.net.URL;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
* Servlet implementation class TestServlet
public class TestServlet extends HttpServlet {
     private static final long serialVersionUID = 1L;
* Default constructor.
public TestServlet() {
// TODO Auto-generated constructor stub
     * @see HttpServlet#doGet(HttpServletRequest request, HttpServletResponse response)
     protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
          // TODO Auto-generated method stub
          doPost(request,response);
     * @see HttpServlet#doPost(HttpServletRequest request, HttpServletResponse response)
     protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
          // TODO Auto-generated method stub
          //System.out.println("********************** the request Map is:" + request.getParameterMap());
          try {
               System.out.println("before sending request");
               excuteGet("http://localhost:7003/ssoAdaptor/WPSServlet", "GMEPortalUserID=captest.wss@it0554&UserID=bl1133&Country=it&TypeAcc=256&ServiceName=Logon");
               System.out.println("after sending request");
          } catch (Exception e) {
               // TODO Auto-generated catch block
               e.printStackTrace();
     public String excuteGet(String targetURL, String urlParameters) throws Exception
          URL url = new URL(targetURL);
          HttpURLConnection httpurlconnection =
               (HttpURLConnection) url.openConnection();
          /*httpurlconnection.setRequestProperty(
               "cookie",
               constructRequestParams(httpservletrequest.getCookies()));*/
          httpurlconnection.setDoOutput(true);
          httpurlconnection.setDoInput(true);
          httpurlconnection.setRequestProperty(
               "Content-length",
               String.valueOf(urlParameters.length()));
          OutputStream outputstream = httpurlconnection.getOutputStream();
          outputstream.write(urlParameters.getBytes());
          outputstream.flush();
          //Get Response
          try{
     InputStream is = httpurlconnection.getInputStream();
     BufferedReader rd = new BufferedReader(new InputStreamReader(is));
     String line;
     StringBuffer response = new StringBuffer();
     while((line = rd.readLine()) != null) {
     response.append(line);
     response.append('\r');
     rd.close();
     //System.out.println("Response from SSO is:" + response);
     return response.toString();
     } catch (Exception e) {
     e.printStackTrace();
     return null;
     } finally {
     if(httpurlconnection != null) {
          httpurlconnection.disconnect();
WPSServlet.java
import java.io.IOException;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
* Servlet implementation class WPSServlet
public class WPSServlet extends HttpServlet {
     private static final long serialVersionUID = 1L;
* @see HttpServlet#HttpServlet()
public WPSServlet() {
super();
// TODO Auto-generated constructor stub
     * @see HttpServlet#doGet(HttpServletRequest request, HttpServletResponse response)
     protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
          // TODO Auto-generated method stub
          System.out.println("**********************Inside WPS Servlet -- the request Map is:" + request.getParameterMap());
     * @see HttpServlet#doPost(HttpServletRequest request, HttpServletResponse response)
     protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
          // TODO Auto-generated method stub
          doGet(request,response);
Thanks,
Nagesh

Getting an error while product is setup after complition of OAM webpass

Hai i am trying to install OAM 10.1.4.3.0 as given in the following URL "http://www.oracle.com/technology/obe/fusion_middleware/im1014/oam-osso-portal/oam-osso-portal.htm."
In that i installed Identity server and ISAPI webpass. After this i should setup the product application. In that setup, in configuration screen it is asking the Configuration DN value
and the Search base valuie.
I gave the values for Configuration DN: dc=orademo,dc=com and Search base: dc=orademo,dc=com.
For these values i got an exception i.e., "Cannot find the Config DN and Search base. Please make sure they exit."
Any one can help me to solve this issue.
Thank you
SRI

Thanks for you reply. Still I can't view the data. Actually what i did is imported a .csv file using files then created a external table configured , validated and deployed.In next step created a mapping with this excel this using table operator validated and genrated code. In next step using the control center manager i deployed it. But i can't view the data still in the external table.
Is this procedure is correct for loading the excel sheet in to databse. My client environment is on windows xp and database is on linux environment.
Please help me regarding this.I am new to owb.

CoreId Webpass install problems in Red Hat AS 4

Hello
I try to install coreid 7.0.4 in linux sever, I installed Identity Server with out problems, the I tried to install webpass but when the wizard try to update my httpd.conf the next error is show :
Error: You are not authorized to configure this web server.
EditHttpConf Error. Unable to automatically update /etc/httpd/conf/httpd.conf.
No changes have been made to /etc/httpd/conf/httpd.conf.
The user that I used for installation process is root, so I choose the option not update automatically, I update the httpd.conf but when I try to start apache web server I obtain the next error:
Cannot load /opt/netpoint/webcomponent/identity/oblix/apps/webpass/bin/libwebpas
s.so into server: /opt/netpoint/webcomponent/identity/oblix/apps/webpass/bin/lib
webpass.so: cannot open shared object file: Permission denied
Can any have a solution

Hi,
I had the same problem and I solved it editing the httpd.conf file. It turns out that I was carrying out the installation with the user "oracle", who belongs to the group "oinstall" and there is a section in the httpd.conf file where you specify the name (or #number) of the user/group to run httpd as, and to my surprise it was set to the following values:
User oracle
Group oracle
I modified the group value and set it to oinstall and it solved the problem.
Regards

Webpass configuration in linux is failing.

I am running into issue where in I am not able configure my webpass with webserver.
webserver does not start after auto updating the httpd.conf. starting webserver resulting in following error.
Cannot load /netpoint/webcomponent/identity/oblix/apps/webpass/bin/libwebpass.so into server: netpoint/webcomponent/identity/oblix/apps/webpass/bin/libwebpass.so: undefined symbol: apr_bucket_type_flush.
I have installed Directory server and webserver first and then installed COREid server (Identity server) .After this installation I have tried to install webpass ,during webpass installation ,webserver fails to come up with above mentioned error.
Please some one help me regarding this.
Note: I am using 7.0.3 version of CoreId
Regards,
Nataraj

I am also facing the same problem..
Appreciate your help on this.
Syntax error on line 1090 of /s0/software_install/oid/Apache/Apache/conf/httpd.conf:
Cannot load /s0/software_install/OracleAccessManager/netpoint/webcomponent/identity/oblix/apps/webpass/bin/libwebpass.so into server: /s0/software_install/OracleAccessManager/netpoint/webcomponent/identity/oblix/apps/webpass/bin/libwebpass.so: undefined symbol: apr_bucket_type_flush
./apachectl start: httpd could not be started
Many thanks in advance

OAM installation using Apache

Hi,
Is it possible for me to install OAM webpass,policy manager,access server,webgate using Apache as the web server. If yes, cpuld you please tell me the supported version of Apache web server for OAM and also the OAM 10.1.4.3 installers for "Windows server 2008 R2" for Apache.

Hi, look at this manual page:
http://docs.oracle.com/cd/E12530_01/oam.1014/b32412/apch2ihs.htm#BABHEEBF
The above applies to OAM 10G.
I 'm looking myself for something similar for OAM 11G.

Oracle Access Manager 10.1.4.0.1 WebPass

Hi,
Where can I download Oracle Access Manager WebPass for Sparc machine. I downloaded the whole Access Manager package when I unpack it i found the following webpass file;
Oracle_Access_Manager10_1_4_0_1_sparc-s2_NSAPI_WebPass
During installtion of above file it requires a obj.conf file absolute path instead of httpd.conf. I think I need following file
Oracle_Access_Manager10_1_4_0_1_sparc-s2_OHS2_WebPass
Where can I find above installation file????
Note: I have downloaed the OHS server from following link as I couldn't found any link for 10g version of OHS and the example given on Oracle website is using OHS 2.x for identity manager and following met the requirements.
http://www.oracle.com/technology/software/products/middleware/htdocs/111110_fmw.html
Oracle instruction page to install Identity Manager --> http://www.oracle.com/technology/obe/fusion_middleware/im1014/ovd-oam/oam-ovd/install_oam/install_oam.htm
Please help.

Hi Sheeraz,
The OHS2 WebPass can be found in the file oam_int_solaris_v2_cd2.zip which can be downloaded here:
http://www.oracle.com/technology/software/products/ias/htdocs/101401.html
Click the CD3 link in the 3rd Party Integration row in the Solaris column.
Regards,
Colin

Troubleshoot WebPass installation

For prepairing a project I want to try out OBE's the Integration of OAM and OSSO and Portal
http://www.oracle.com/technology/obe/fusion_middleware/im1014/oam-osso-portal/oam-osso-portal.htm
I had installed and verified OSSO and Portal.
I completed the installation of the identity manager as instructed in OBS without issues and verified the Oblix classess loaded to the OID. But I notice that there is nothing installed in the identity home c:\...\identity .
So I moved on to install WebPass. The installation completed without error. I bounced the identity manager and the Infrastructure and mid-tier -- opmnctl stopall/startall
But I cannot access webpass url
http://<hostname>.<domainname>/identity/oblix
I can access
http://<hostname>.<domainname>
How should I look?
Thanks for help.

Fully agreed. Identity and WebPass don't need to be installed in the same folder. What is the most important, is the platform. You need to install it on a 32-bit OS or in 32-bit mode on a 64-bit mode. WebPass needs to be integrated into a HTTP server like Apache, OHS, and so on. It is important to use the right installation and do the configuration in the correct way. I prefer not to use the automatic way...
HTH,
--olaf

OAM : Which identity server is used by Password Policy?

Hi,
The OAM setup has two identity servers (ois1, ois2), two webpass (wp1, wp2) on two web servers. wp1 is pointing to ois1 only and wp2 is pointing to ois2.
We have two sets of Policy manager, Access server and WebGate. wg1 is pointing to aaa1 and wg2 is pointing to aaa2.
Now, when a user tries to access a OAM webgate protected page and the password policy gets applied, do the identity server comes into picture? if yes, which identity server is used here, ois1 or ois2?
I want to use ois1 for all the requests coming to webserver with wg1. How do I do it?
Thanks in advance.

Hi Colin,
Thanks for your reply.
The reason I put this question was - in a scenario when I dont have Access Server (any access component), then also Password Polices work. So, I understand identity server is used here. When we have access side components, what makes OAM not to use identity server at all. Or is it the feature of OAM - when the accessed resource is ptotected by WebGate the Password policies are taken care of by Access Server, otherwise by identity server or is it because of the 'obReadPasswdMode' and 'obWritePasswdMode' in the authentication scheme?
I stopped my identity server and I saw the password policy working - so I know the behavior; still asking the above question for my better understanding of OAM.
Thanks for your help!

Access denied when using IdentityXML with WebGate

Hello,
Here is our setup:
- COREid Identity 7.0.4,
- COREid Access 7.0.4,
- WebPass,
- WebGate,
- IIS 6 (hosting the identity application)
We enabled the default policies to protect the /identity URL.
We are using webservice calls (using C# with WSDL proxies) to query the identity server from other applications.
Prior to enabling the Access policies this was working fine, now we get an Access denied error message.
It looks like WebGate is blocking the IDXML calls.
Does anyone knows what is causing this problem and how to solve it ?
My first guess was to use the Access SDK to build an obSSOCookie and join it to the request, however the developper guide doesn't provide may examples on how to practically do this. Will it solve my problem ?
Thank in advance,
Franck

Thanks for your answer.
I eventually found a workaround for this problem.
Actually you don't need to provide an SSO cookie the first time you connect to the webgate server, you just need to provide basic credentials and the webgate will provide you an SSO cookie that you can use for the next call.
The problem is that this doesn't work out of the box with the .NET/WSDL framework for some reason (with Java + the HTTPClient library I had no problem).
I had to had manually the following headers to the HTTP request to make it work:
Authentication: Basic XXXXXXXX
Cookie: OBBasicAuth=fromDialog
Where XXXXXXXX is a base64 encoded string containing "login:password"
Thanks,
Franck

WebPass not supporting Logger

I am trying to install OAM 10.1.4.1 on Windows 2003 and IIS 6. I notice the following error in the event viewer for the webpass.
The description for Event ID ( 519 ) in Source ( WebPass ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Oblix System Logger Initialized.
Has any one encountered this sort of a problem? Like to know the ROOT cause of this and how get a workaround on this?
Thanks

Did you buy it from a Nokia shop or from Vodafone store ? The phone is locked to a Network when you buy it at a special price (which is considerably less then the actual cost) thru' an Operator. The phone comes at this special price with some specific plans but the biggest disadvantage is that you have to ONLY use that particular operator's service for a specified time, till it can be unlocked. Other drawback is the availability of the updates, which are possible only after an approval from the Operator..

How do I use Edge Web Fonts with Muse?

How do I use Edge Web Fonts with Muse - is it an update to load, a stand alone, how does it interface with Muse? I've updated to CC but have no info on this.

Hello,
Is there a reason why you want to use Edge Web Fonts with Adobe Muse?
Assuming you wish to improve typography of your web pages, you should know that Muse is fully integrated with Typekit. This allows you to access and apply over 500 web fonts from within Muse. Here's how you do it:
Select a text component within Muse, and click the Text drop-down.
Select Add Web Fonts option, to pop-open the Add Web Fonts dialog.
Browse and apply fonts per your design needs.
Muse also allows you to create paragraph styles that you can save and apply to chunks of text, a la InDesign. Watch this video for more information: http://tv.adobe.com/watch/muse-feature-tour/using-typekit-with-adobe-muse/
Also take a look at these help files to see if they help you:
http://helpx.adobe.com/muse/tutorials/typography-muse-part-1.html
http://helpx.adobe.com/muse/tutorials/typography-muse-part-2.html
http://helpx.adobe.com/muse/tutorials/typography-muse-part-3.html
Hope this helps!
Regards,
Suhas Yogin

How can multiple family members use one account?

My children have iphones, ipads, ipods and mac books, my problem is how do you use home sharing with the devices and not get each others data. My Husband just added his iphone to the account and got all of my daughters contacts. I understand they could have there own accounts but if i buy music on itunes and both children want the same song, I don't feel i should have to pay for it twice. Is there away we can have home sharing on the devices and they can pick and choose what they want? and is this icloud going to make it harder to keep their devices seperate?

My children have iphones, ipads, ipods and mac books, my problem is how do you use home sharing with the devices and not get each others data. My Husband just added his iphone to the account and got all of my daughters contacts. I understand they could have there own accounts but if i buy music on itunes and both children want the same song, I don't feel i should have to pay for it twice. Is there away we can have home sharing on the devices and they can pick and choose what they want? and is this icloud going to make it harder to keep their devices seperate?

Use of WebPass

Similar Messages

Maybe you are looking for