Accept language in Http Header of Aqualogic portlet.

Hi, we have developed one web page using ASP.Net and hosted in the Aqualogic portlet server, when ever we access that page from different location/browser, we are getting "en-us" as accept language in the Http header variable of Request object, but it should change based on the location and browser.
Please let us know,do we have to modify any settings in the aqualogic portal?
Note: We are getting different accept language from the same code when hosted on the web server/local(Without Aqualogic).
Thanks in Advance.
Edited by: 993251 on Mar 12, 2013 11:08 PM

>
by using Client Cert authentication I have to set HTTPS required to true.
>
Yes.
>
When I try to invoke this service with http request, it redirects to https service.
This actually just trashes the entire idea of terminating SSL in the load balancer.
>
Not necessarily. Although direct HTTP request to WebLogic is redirected to HTTPS enabled port, you can still use this settings with WebLogic plugin. I'm not aware of your deployment, but I use Apache plugin for WebLogic, terminate SSL on Apache and I'm still able to send requests authenticated by certificate from client through HTTPS.
I don't know about F5, but I guess there should be similar feature as well.
http://download.oracle.com/docs/cd/E12840_01/wls/docs103/cluster/load_balancing.html

Similar Messages

  • Flash 11 sending incorrect accept-language header in IE9

    I am building a website and while web requests from the browser and from javascript report the correct accept-language header (as set inside the IE9 properties, as well as set in system settings on Windows), Flash continues to send English. This seems to be a bug in Flash as I can see no other way to force it to send the same value as the browser.
    Can someone confirm this? Also, our Flash developer says that when he looks inside the capabilities object for the current language, it seems that he's also getting the incorrect one. From my research, it sounds like IE sends scripts and plugins only the System Localization language (ie Language in which Windows was shipped), and not the system setting language.
    However, since Flash seems to be using the browser http stack for its web calls, I don't see why this behavior should be broken on IE when it works fine for Firefox, Chrome and Opera.

    I don't think this is new behavior. When searching on Google, I found a similar post from years ago about this same issue. To reproduce it, get on any internet explorer, set your language to something other than English (or whatever your default happens to be currently).
    Go to a website like speedtest.com and press f12 for the developer tools. go to the network tab and enable network monitoring. refresh the page. you will see that all of the page requests send accept-language correctly as your new language.
    Next, run the speedtest. you will see a bunch more requests pop up in the network monitor. check the headers. it will send accept-language as en-US, regardless of your settings.
    https://bugbase.adobe.com/index.cfm?event=bug&id=3154517

  • Choose value of Accept-Language: header

    Hello,
    I have a problem: I use Safari on an english language system, but I would like it to request pages in French, sending the following header: "Accept-Language: fr"
    Couldn't find this in the preferences, as in Firefox, did I miss something? And there's no way I'll change my system's language just for that
    thanks

    No way to do what you want in Safari yet.
    To tell Apple you want it, use the Report bugs item in the Safari menu.

  • Custom Inserted HTTP Header not showing up in Iplanet Logs

    ALL:
    I have some iPlanet Enterprise/6.0 web servers sitting behind a LoadBalancer. The LoadBalancer is setup in an 'one-armed mode', and takes a client HTTP request passes it onto the server, but during this process, changes the client source IP to that of local static IP that the LoadBalancer has. Due to our setup we cannot change this.
    By changing the client source IP to a local address, we have lost any useful user session tracking that was done by source IP.
    To get around this, I have the LoadBalancer inserting an HTTP header with the client real source IP. Reading the NSAPI Programmer's Guide (Table 7-1 "http://docs.sun.com/source/816-5686-10/07_magnu.htm"), there is an option "%Req->headers.headername%" that can be used with 'flex-int' to log any header value.
    My output from snoop looks as follows:
    HTTP: ----- HyperText Transfer Protocol -----
    HTTP:
    HTTP: GET /plugin.do HTTP/1.1
    HTTP: OrigClientAddr:10.5.4.28
    HTTP: Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/x-shockwave-flash, */*
    HTTP: Accept-Language: en-us
    HTTP: Accept-Encoding: gzip, deflate
    HTTP: User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
    HTTP:
    I have set the value to "%Req->headers.OrigClientAddr%" and it still does not show up in the log file. Any clues?
    Works fine in Apache with:
    LogFormat "%h %l %u %t \"%r\" %>s %b \"%{OrigClientAddr}i\" \"%{User-Agent}i\"" headerinsert
    CustomLog logs/access_log headerinsert

    Always nice to find resolution to one's own question.
    Fix was to change the header value to all lower case.
    From:
    "%Req->headers.OrigClientAddr%"
    To:
    "%Req->headers.origclientaddr%"

  • Problem with HttpHeader Accept-Language with InternetExplorer

    I'm building an web application using Flash at the front side and Jetty at the back side.
    This application has to care of the language settings of the browser.
    Normally the browser sends with each request the Http-header accept-language in wich the language settings of the browser are reflected.
    To check this I wrote a servlet wich echos the request with its headers.
    Here is the output for FF:
    <code>
    >>>TestServlet0<<<
    HttpServletRequest.getRequestURI
    /Era09Web/TestServlet0
    HttpServletRequest.getHeader
    Host : localhost:8080
    User-Agent : Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.1.9) Gecko/20100315 Firefox/3.5.9
    Accept : text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
    Accept-Language : en-gb,de-at;q=0.5
    Accept-Encoding : gzip,deflate
    Accept-Charset : ISO-8859-1,utf-8;q=0.7,*;q=0.7
    Keep-Alive : 300
    Connection : keep-alive
    Cache-Control : max-age=0
    HttpServletRequest.getLocale: Englisch (Vereinigtes Königreich)
    </code>
    Here is the output for IE:
    <code>
    >>>TestServlet0<<<
    HttpServletRequest.getRequestURI
    /Era09Web/TestServlet0
    HttpServletRequest.getHeader
    Accept : */*
    Accept-Language : en-GB,de-AT;q=0.5
    User-Agent : Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; MSN OptimizedIE8;DEDE)
    Accept-Encoding : gzip, deflate
    Host : localhost:8080
    Connection : Keep-Alive
    HttpServletRequest.getLocale: Englisch (Vereinigtes Königreich)
    </code>
    That looks ok, but it was without Flash jet.
    Now the same info requested by mx.rpc.http.HTTPService.
    First for FF:
    <code>
    RequestURL : http://localhost:8080/Era09Web/DownServlet
    HttpHeader:
    Host : localhost:8080
    User-Agent : Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.1.9) Gecko/20100315 Firefox/3.5.9
    Accept : text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
    Accept-Language : en-gb,de-at;q=0.5
    Accept-Encoding : gzip,deflate
    Accept-Charset : ISO-8859-1,utf-8;q=0.7,*;q=0.7
    Keep-Alive : 300
    Connection : keep-alive
    RequestLocale : Englisch (Vereinigtes Königreich)
    </code>
    Second for IE:
    <code>
    RequestURL : http://localhost:8080/Era09Web/DownServlet
    HttpHeader:
    Accept : */*
    Referer : http://localhost:8080/Diagramm1.swf
    Accept-Language : de-DE
    User-Agent : Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; MSN OptimizedIE8;DEDE)
    Accept-Encoding : gzip, deflate
    Host : localhost:8080
    Connection : Keep-Alive
    x-flash-version : 9,0,124,0
    RequestLocale : Deutsch (Deutschland)
    </code>
    Question: Why with IE it shows me de-DE and not en-GB ?

    I'm sending the files zipped yes. I thinks it's better like that. Isn't it?
    Yes.
    They are not necessarly using the same version. I will ask them to get the last one so we will have all the same.
    Perhaps that will help. You should also make sure they have the same Arabic fonts on their machines that you used for your file.

  • Https header rewrite

    Guys,
    I need to setup ACE to do the below:
    The client will call a url: https://server1.com.br
       - Ace will terminate this ssl with a certificate of my internal ca imported to ACE;
    Then, I need ACE to rewrite the url to https://host01.com.br/appl using a certificate generated by the Application Server and also imported to ACE.
    It's possible?

    So, you have client authentication cofigured on your real server ? (I mean , very often HTTPS  only uses certificate on server side)
    If yes - no problem you can configure  such type of SSL initiation too, however we can rewrite http header but we can't change URL (and https://server1.com.br to https://host01.com.br/app are URLs)
    Example of HTTP header and some small explanations :
    http://www.http.header.free.fr/http.html
    And in that example you can change only these parts :
    >> Host: www.http.header.free.fr
    >> Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg,
    >> Accept-Language: Fr
    >> Accept-Encoding: gzip, deflate
    >> User-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 4.0)
    >> Connection: Keep-Alive
    You can't change these :
    URL : "http://www.http.header.free.fr/http.html". Your browser connects to www.http.header.free.fr and sends :
    >> GET /http.html Http1.1

  • Single-Sign-On (SSO) configuration on JAVA Stack through HTTP Header method

    Hello SDN community,
    in the context of a Proof of Concept, we are testing the integration of Microsoft Sharepoint Portal with SAP Backend (addin) systems.
    As the architecture impose use an external scenario (access from the internet), we couldn't use the Kerberos (SPNego) solution and thus we chosed the http header solution which in short uses an intermediary web server (in this case the IIS of the MOSS solution) which will act as authority.
    I miss information on how the workflow works for this http header authentication method. Through the visual administrator of the addin JAVA stack, it is possible to configure each application with a customized authentication (a choice of security modules). But this all that I know.
    My task is to configure SSO. From a sharepoint portal, the user should be able to access Web Dynpros and BSPs. I imagine that the very first call to a webdynpro or bsp (or maybe when we log on the sharepoint portal), the request to the WDP or BSP will first be forwareded by the intermediary server to the JAVA stack (or is it the SAP dispatcher that has to be configured).
    Is there an application to be built on the java stack to deal with the authentication, modify http header?
    What will the Java stack return? a sap long ticket? a token?
    How will the redirect work (to by example a BSP which is in the ABAP stack)?
    SAP preconise to secure with SSL the link between the intermediary web server and the JAVA stack, is IP restriction also a solution?
    A lot of questions about how this SSO http header should work,
    I would be very greatful for any help, or info,
    Kind regards,
    Tanguy Mezzano

    Hi Tanguy,
    to tell you the truth I'm really unsure about what you are trying to achieve. When I started posting to your thread I thought all you wanted was trying to access your J2EE engine via Browser and authenticate against the engine using HTTP Header Variables. Nevermind:
    Here are some answers to your question:
    in fact I did succeed, the problem was that even after domain-relaxation done by the J2EE, I had to change the domain of th SAP cookie to the bbbb.domain.com to be understood (I would have thought that all hosts in/under domain .domain would have accepted such a cookie but it seems that no...).
    The server does not care about the domain because Cookies in an HTTP Request do not contain any domain information. The domain is just important when the Cookie is set by the server so your Client (Browser) will know in which cases the Cookie may be sent or not. So if your domain is xxx.yyy.domain.com and your cookie is issued to .domain.com then your Browser will definitely sent it to all hosts under .domain.com (This includes xxx.yyy.domain.com etc.)
    My current scenario is: in a first request get a SAP Logon Ticket from the Java Stack, then change its domain and then directly call the backend with it.
    You can do that but there is no Client involved in this scenario. So this is useful if you just want to test the functionality (e.g. authentication to J2EE using Header Variables (This works finally!!!) and then use the fetched Logon Ticket to test SSO against any trusted Backend!!)
    So everything's is in a Java Client application without using any redirection.
    If I understand you, you're solution is from the Browser call a servlet (which is deployed on the Java Stack and has no authentication schema) by passing to it our http header.
    No, you should initially authenticate somewhere! I thought that maybe you had some resource you access before accessing the Java Stack. This could be any application (e.g. deployed on a Tomcat or JBOSS or other server or if you like even SAP J2EE). After authenticating there you are aware of the username and could use it to  procceed (e.g. Authenticate against the J2EE using the same user and HTTP Header authentication for that particular user!)
    That servlet will transfer the http header (with the HttpClient app) in order to get from the Java Stack a SAP Logon ticket, and then to redirect to the resource and by sending back the cookie in client browser. Am I correct?
    This was just a suggestion because I realized that there was no Client ever involved in any of your testing (looked strange to me!). I was just thinking that it would be easier for you to just get the Cookie into your Browser so your Browser would do the rest for you (in your case finally send the Logon Ticket Cookie to your Backend to test SSO using Logon Tickets!).
    The AuthenticatorServlet somehow serves as a Proxy to your client because your client is not able to set the Header Variable. That's why I initially suggested to use a Proxy (e.g. Apache) for that purpose. The problem is just that if you use a Proxy you will have to tell it somehow which username it should set in the Header Variable (e.g. using a URL Parameter or using a personalized client certificate and fetch the username (e.g. cn=<username> from the certificate!)
    This way of doing would simplify the calls for sso for each new application needing authentication, instead of having all code each time in it...
    I'm stuck again! Do you want to authenticate an End User or do you want to authenticate an application that needs to call any resources in your Backend that requires authentication?
    So my problem now, is how to call the servlet from the client browser:
    I'm trying to call my servlet from the browser but I don't succeed. I am able to understand how to reach a jsp from the Java Stack, but not to reach a servlet. I don't find the path to my servlet:
    <FORM method="POST" action="SSORedirect2" >
    A JSP is a servlet too. There is just no JAVA Class involved!
    You do not need any POST Request to invoke a Servlet.
    I see that my servlet is deployed, but I don't how what path to give to my form to invoke the servlet, here follows my web.xml
      <?xml version="1.0" encoding="UTF-8" ?>
      <!DOCTYPE web-app (View Source for full doctype...)>
    - <web-app>
      <display-name>WEB APP</display-name>
      <description>WEB APP description</description>
    - <servlet>
      <servlet-name>SSOredirect2</servlet-name>
      <servlet-class>com.atosorigin.examples.AuthenticatorServlet</servlet-class>
      </servlet>
    - <servlet>
      <servlet-name>SSORedirect2.jsp</servlet-name>
      <jsp-file>/SSORedirect2.jsp</jsp-file>
      </servlet>
    - <security-constraint>
      <display-name>SecurityConstraint</display-name>
    - <web-resource-collection>
      <web-resource-name>WebResource</web-resource-name>
      <url-pattern>/*</url-pattern>
      <http-method>GET</http-method>
      <http-method>POST</http-method>
      </web-resource-collection>
    - <auth-constraint>
      <role-name>DefaultSecurityRole</role-name>
      </auth-constraint>
      </security-constraint>
    - <security-role>
      <role-name>DefaultSecurityRole</role-name>
      </security-role>
      </web-app>
    If you have an AuthenticatorServlet Class all you need is to add the Servlet Mapping in your web.xml file
    e.g.
    <servlet>
      <description>
      </description>
      <display-name>AuthenticatorServlet</display-name>
      <servlet-name>AuthenticatorServlet</servlet-name>
      <servlet-class>com.atosorigin.examples.AuthenticatorServlet</servlet-class>
    </servlet>
    <servlet-mapping>
      <servlet-name>AuthenticatorServlet</servlet-name>
      <url-pattern>/AuthenticatorServlet</url-pattern>
    </servlet-mapping>
    You can directly call the Servlet in your Browser by calling the URL provided in the url-pattern of your Servlet mapping ( in this case /AuthenticatorServlet). The engine will invoke the Class "com.atosorigin.examples.AuthenticatorServlet" in the background and do whatever you defined there!
    I have also to pass my http header and the redirectUrl in the GET request.
    If you like! I just suggested this for testing purposes. As I stated before you need a way to tell your proxy (or in your case AuthenticatorServlet) which user should be set when calling the Engine in order to authenticate using HTTP Header. You could use the URL Paramater to define the user you actually want to use when you set the Header Variable.
    I just introduced the redirectURL because you were talking about redirects all the time. So if you finally want to call the Backend you could define the Backend URL in the redirectURL Parameter and the Servlet will make sure that you are redirected to this location after the whole process!
    Thx for your input very helpful,
    But again 0 points
    Cheers

  • How do I set the Http Header POST URL in SAAJ?

    Hi ,
    I am a newbie in the field of web services. I was trying to create a SOAP request with Http Header POST information having a POST url like
    the following:
    POST /OMASTI.xml HTTP/1.1
    Content-Type: multipart/related; boundary="eladeladeladeladeladeladeladeladelad"; type=text/xml; start=11814460
    Content-Length: 54596
    Host: unspecified
    SOAPAction: ""
    to that effect I did the following in the SAAJ client:
    MimeHeaders md = message.getMimeHeaders();
              md.setHeader("SOAPAction" ,"\"\"");
              md.setHeader("POST" ,"/OMASTI.xml");
    However what I got was :
    POST / HTTP/1.1
    Accept: text/xml, text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
    SOAPAction: ""
    POST: /OMASTI.xml
    Content-Type: multipart/related; type="text/xml"; boundary="----=_Part_2_32124414.1153146262750"
    Content-Length: 3352
    Cache-Control: no-cache
    Pragma: no-cache
    User-Agent: Java/1.5.0_07
    Host: www.google.com
    Connection: keep-alive
    I have two POSTs in the header. How do I fix it? Please Help ASAP.
    Regards,
    Zeus

    Hi,
    Please forgive my ignorance. I did the same as you said. and then checked the Http request being sent out using ethreal software... it was the same as I had told earlier. Is only POST supported by the connection object? And the does the URL that comes in the Mime header as POST refer to the URL to which the request was sent? what I mean is that if the mime header says
    POST /OMASTI.xml HTTP 1.1, does it mean that the URL that was passed to the connection object was "/OMASTI.xml" ? I had given the url as http://www.google.com to test the request being sent.. I only have a sample SOAP request which shows a HTTP header with the post url as I said before. I need to create a SOAP request with the same sort of Http header and the body needs to follow a certain OMA-STI protocol. My experience in the SOAP domain is almost nil. So please enlighten me.
    Thanks in advance,
    zeus

  • OIF11g - Help on sending user attributes in HTTP header

    Hello, I have a OIF11g setup configured for both IdP and SP. Upon successfull authentication against LDAP, I need to end some user attributes on the HTTP header to the SP application. I do no have OAM in my setup, so there is no option of Webgate or Policy Manager to do that. As far as I read the config doc, I'm in the impression that we need to write a custom authentication engine to accept user credentials and code to authenticate against LDAP and also add attributes to the response header.
    Before I go down that path, just wanted to confirm if anybody has done this with OIF?
    Thanks,
    Sunil.

    Bernhard:
    Actually the headers are not set to null. I have an intermediate index.jsp page which is the first page that is redirected to by the AM - it is this page which calls my LoginServlet.
    The value appears consistently on this index.jsp page but after it is forwarded to the LoginServlet it starts behaving inconsistently. I check the system.out log in my websphere /logs folder and that tells me that LoginServlet does not consistenly get these values from the header.
    The wierd part is that if I use cookies or attributes, it works perfectly - each time every time. However, only in the case of headers (which is the method i am required to do) it behaves inconsistently.
    ANY feedback/help on this would be really appreciated bern.. thanks..
    ~saahil

  • OSB Http Transport Custom Authenticatiion (X509 in Http header)

    Hello!
    I'm trying to solve this case. We have F5 Load balancer that terminates SSL Connections From client to the OSB. When terminating the SSL, the LB adds the clients certificate into headers of the Http request going to OSB.
    OSb proxy service is configured to use custom authentication with token type X509 (only choice in the OSB console).
    What happens when I send the request to OSB, is that I get http code 401 (unauthorized) this error on server log:
    ####<Sep 27, 2011 3:08:05 PM EEST> <Error> <WliSbTransports> <appserver02> <MANSERV02> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1317125285598> <BEA-381327> <Transport-level custom token identity assertion failed
    java.lang.ClassCastException: java.lang.String cannot be cast to [Ljava.security.cert.X509Certificate;
    The HTTP header sent to OSB is in the messages below.
    It has also been wihotu the BEGIN CERTIFICATE and END CERTIFICATE lines with same results.
    Can somebody help me in:
    a) Should the certificate be sent in what form from LB to OSB.
    b) How should the OSB/WLS be configured for this to work?
    OSB version is 10.3.1.
    Request to the server is:
    POST /prjTemplateService/ProxyServices/psvcHelloWolrdWSSSLInterface HTTP/1.1
    Accept-Encoding: gzip,deflate
    Content-Type: text/xml;charset=UTF-8
    SOAPAction: "urn:#HelloWorldOperation"
    User-Agent: Jakarta Commons-HttpClient/3.1
    Host: <ip_here>
    Content-Length: 459
    SSLClientCertStatus: ok
    SSLClientCertb64: -----BEGIN CERTIFICATE-----
    MIICHDCCAYUCBE2sABcwDQYJKoZIhvcNAQEEBQAwVTELMAkGA1UEBhMCRkkxCzAJ
    BgNVBAgTAkZJMQ4wDAYDVQQHEwVFc3BvbzEMMAoGA1UEChMDRVpaMQswCQYDVQQL
    EwJUQzEOMAwGA1UEAxMFSnVzc2kwHhcNMTEwNDE4MDkxMDQ3WhcNMTEwNzI3MDkx
    MDQ3WjBVMQswCQYDVQQGEwJGSTELMAkGA1UECBMCRkkxDjAMBgNVBAcTBUVzcG9v
    MQwwCgYDVQQKEwNFWloxCzAJBgNVBAsTAlRDMQ4wDAYDVQQDEwVKdXNzaTCBnzAN
    BgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAvEPjEn3tvG3YuXlsLZnE7ZOKUJIF0Foy
    c1hp+k7dyGUoHu3Phva7eVOO1cmHaGkFHkg+EnnK3+/Y58EMQAEwPOfQTj0/vSSk
    cEx2X/2p2W7ACldJlYMxx2ZdFa1qaKTXtoieLy23/kJI+ZTfIoB+nmZiPRE9Hq8p
    LTPlcMWVFnkCAwEAATANBgkqhkiG9w0BAQQFAAOBgQC3EZMQieOy4PFh+95R6W7/
    3xaaRm/BzmEU/Wf9JweEwrnttdSmRKsxx9vSkADnD0J7jGO+koym5CWvJHbox4Sk
    QMRPFaTOBRD4hzZeJMidds1LSzUm/QE9PXzjS/HLSjBBs5DmZfdR+uXPSFqTROkd
    87R5veuPX5KeKQHs8iesTw==
    -----END CERTIFICATE-----
    SSLClientCertSN: 4d:ac:00:17
    <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:urn="urn:Hello:client">
    <soapenv:Body>
    <urn:HelloWorldRequest>
    <urn:FirstName>Jolly</urn:FirstName>
    <urn:Surname>Roger</urn:Surname>
    </urn:HelloWorldRequest>
    </soapenv:Body>
    </soapenv:Envelope>
    Response from OSB:
    HTTP/1.1 401 Unauthorized
    Connection: close
    Date: Fri, 30 Sep 2011 08:32:33 GMT
    Content-Length: 1518
    Content-Type: text/html
    X-Powered-By: Servlet/2.5 JSP/2.1
    <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Draft//EN">
    <HTML>
    <HEAD>
    <TITLE>Error 401--Unauthorized</TITLE>
    <META NAME="GENERATOR" CONTENT="WebLogic Server">
    </HEAD>
    <BODY bgcolor="white">
    <FONT FACE=Helvetica><BR CLEAR=all>
    <TABLE border=0 cellspacing=5><TR><TD><BR CLEAR=all>
    <FONT FACE="Helvetica" COLOR="black" SIZE="3"><H2>Error 401--Unauthorized</H2>
    </FONT></TD></TR>
    </TABLE>
    <TABLE border=0 width=100% cellpadding=10><TR><TD VALIGN=top WIDTH=100% BGCOLOR=white><FONT FACE="Courier New"><FONT FACE="Helvetica" SIZE="3"><H3>From RFC 2068 <i>Hypertext Transfer Protocol -- HTTP/1.1</i>:</H3>
    </FONT><FONT FACE="Helvetica" SIZE="3"><H4>10.4.2 401 Unauthorized</H4>
    </FONT><P><FONT FACE="Courier New">The request requires user authentication. The response MUST include a WWW-Authenticate header field (section 14.46) containing a challenge applicable to the requested resource. The client MAY repeat the request with a suitable Authorization header field (section 14.8). If the request already included Authorization credentials, then the 401 response indicates that authorization has been refused for those credentials. If the 401 response contains the same challenge as the prior response, and the user agent has already attempted authentication at least once, then the user SHOULD be presented the entity that was given in the response, since that entity MAY include relevant diagnostic information. HTTP access authentication is explained in section 11.</FONT></P>
    </FONT></TD></TR>
    </TABLE>
    </BODY>
    </HTML>

    >
    by using Client Cert authentication I have to set HTTPS required to true.
    >
    Yes.
    >
    When I try to invoke this service with http request, it redirects to https service.
    This actually just trashes the entire idea of terminating SSL in the load balancer.
    >
    Not necessarily. Although direct HTTP request to WebLogic is redirected to HTTPS enabled port, you can still use this settings with WebLogic plugin. I'm not aware of your deployment, but I use Apache plugin for WebLogic, terminate SSL on Apache and I'm still able to send requests authenticated by certificate from client through HTTPS.
    I don't know about F5, but I guess there should be similar feature as well.
    http://download.oracle.com/docs/cd/E12840_01/wls/docs103/cluster/load_balancing.html

  • ESB requires "SOAPAction" to be set in HTTP header?

    I'm trying to insert an ESB flow between an existing web service and client. The service and client were previously built with Apache Axis.
    By generating an appropriate WSDL (doc/wrapped rather than Axis' default RPC style) for the existing service, I'm able to connect the ESB to the service.
    The problem is that the existing client (built using Axis) sets the SOAPAction in the HTTP header to empty (SOAPAction: ""), and the ESB appears to require this to be set to the desired operation. If this is a hard requirement, then I can't directly connect the existing client to the ESB flow.
    So, the question is whether it's possible to have the ESB relax the requirement for the SOAPAction header. And if so, how?
    If I can't get the ESB to accept SOAP requests with an empty SOAPAction, then I'll have to create a custom adapter or insert an additional proxy layer (yuk). Anyone else have any suggestions?

    This is all done automatically by FB.
    Just to try something out I just now made a simple app with a label only and tried to upload to Google... FAILED!!!!
    "Market requires versionCode to be set to a positive 32-bit integer in AndroidManifest.xml"
    LOL, FB can't even create this. :-/
    <?xml version="1.0" encoding="utf-8" standalone="no"?>
    <application xmlns="http://ns.adobe.com/air/application/3.1">
    <!-- Adobe AIR Application Descriptor File Template.
              Specifies parameters for identifying, installing, and launching AIR applications.
              xmlns - The Adobe AIR namespace: http://ns.adobe.com/air/application/3.1
                                  The last segment of the namespace specifies the version
                                  of the AIR runtime required for this application to run.
              minimumPatchLevel - The minimum patch level of the AIR runtime required to run
                                  the application. Optional.
    -->
    Message was edited by: KesherMedia.Com

  • Authorization tag in  http header

    While making an end point call using the webservice control the authorization tag is getting added to the http header. This is causing 401 errors when going over SSL . We are adding the credentials as part of the SOAP header.
    Why / How is the Authorization Basic tag getting created? Also how can we eliminate it?
    ****************** tcpmon output shown below
    POST /DMIntegration/ContentService HTTP/1.1
    User-Agent: BEA WebLogic Server 10.3.0.0
    Content-Type: text/xml; charset=utf-8
    SOAPAction: ""
    Authorization: Basic U334567dGFsVXNlcjpQb3J0YW1234==
    Host: 10.157.44.155:7080
    Accept: text/html, image/gif, image/jpeg, */*; q=.2
    Connection: Keep-Alive
    Content-Length: 1834
    Thanks,
    - Shankar

    Hi,
    The Authorization group can be created as follows
    Transaction SE54 >Select 'Authorization Groups'>Create/Change-->New Entries.
    Now the authorization group created can be assigned to your table.
    Goto transaction 'SE56' and select authorization group radio button and create your authorization group.
    In general different users will be given different authorizations based on their role in the orgn.
    We create ROLES and assign the Authorization and TCODES for that role, so only that user can have access to those T Codes.
    USe SUIM and SU21 T codes for this.
    USE
    Much of the data in an R/3 system has to be protected so that unauthorized users cannot access it. Therefore the appropriate authorization is required before a user can carry out certain actions in the system. When you log on to the R/3 system, the system checks in the user master record to see which transactions you are authorized to use. An authorization check is implemented.check Su22 and SU24u will get list of objects
    Hope clear to you.
    Regards,
    R.Brahmankar

  • Exchange 2007 - content-language in message header

    Exchange 2007
    The Regional Settings on client computer is set to Bulgarian (Formats/Location/non Unicode/System Account)
    The Regional Settings in Outlook Web Access for user1 is set to Bulgarian.
    On the exchange server, the language of mailbox of user1 is set to Bulgarian with powershell command
    Set-Mailbox -Identity "user1" -Languages "bg-BG"
    And the check shows
    [PS] C:\Windows\system32>$Mailbox = Get-Mailbox -Identity "user1"
    [PS] C:\Windows\system32>$mailbox.languages
    LCID             Name             DisplayName
    1026             bg-BG            Bulgarian (Bulgaria)
    If user1 sends a new message using Outlook, the message header contains:
    Accept-Language: bg-BG, en-US
    Content-Language: en-US
    But if user1 sends a new message to same recepient using Outlook Web Access, the message header contains:
    Accept-Language: bg-BG, en-US
    Content-Language: bg-BG
    The recepient uses some Blackberry smartphone.
    The problem comes with cyrrilic text in the message:
    If the messaqge is sent using OWA, the recepient can visualize and read cyrillic text.
    But if the message is sent from Outlook, the recepient see symbols "????...?" instead cyrillic text
    Is there a way when use Outlook the message header to be
    Content-Language: bg-BG
    This problem with incorrect cyrrilic text can be observed only on this Blackberry smartphone. There are not any problems if recepient uses computer with correct regional settings and various mail clients

    Hi,
    Have you resolved this issue?
    If there is any update, please feel free to post here for further research.
    Best regards,
    Belinda
    Belinda Ma
    TechNet Community Support

  • OSB http Header Problem

    Hello all,
    (I hope I'm right here with my Oracle Service Bus problem)
    I have a Oracle Service Bus Proxy Service, that calls a Business Service (not in my control).
    That business service is somehow crap, cause it doesn't respond correctly (in sense of http protocol):
    POST / HTTP/1.1
    Content-Type: text/xml; charset=utf-8
    User-Agent: Java1.6.0_05
    Host: somehost.net:8080
    Accept: text/html, image/gif, image/jpeg, */*; q=.2
    Connection: Keep-Alive
    0093
    <?xml version="1.0" encoding="UTF-8"?>
    <somePayload/>
    0000
    *<TheResponse/>*
    <TheResponse/> is all i get from that service. No http header..
    My Proxy service doesn't like responses with no HTTP/1.1 200 OK
    and returns an error (although its a correct answer.. from the service)
    Is there a posibility to avoid this error and get the plain response instead?
    Thanx in advance
    Pat

    You're right, that service doesn't respond correctly as defined by HTTP. I don't think there is an out of the box feature in OSB you could use to overcome this.
    However, you can possibly write your own transport implementation as described here:
    http://download.oracle.com/docs/cd/E13159_01/osb/docs10gr3/transportsdk/architecture.html
    There's also sample implementation that could be useful:
    http://download.oracle.com/docs/cd/E13159_01/osb/docs10gr3/transportsdk/example.html

  • User-defined http header and com.oracle.httpclient.HttpRequestBuilder

    Hello,
    In Java ME Embedded 8, I would like to send a HTTP request containing a user-defined identifier in the http header (X- header type), using the com.oracle.httpclient package.
           HttpClient client = clientBuilder.build();
            HttpRequestBuilder requestBuilder = client.build(http://my_uri);
            requestBuilder.setHeader(HttpHeader.ACCEPT, "text/plain");
    Here, I would like to add a user-defined header value like :
          requestBuilder.setHeader("MyHeader", "myHeaderValue");
    It seems that there are only pre-defined values available for headers in the com.oracle.httpclient.HttpHeader class.
    Is there any way to add a user-defined header in the request ?
    Thanks in advance.
    Bruno

    Hi Bruno,
    did you try HttpHeader myHeader = new HttpHeader("MyHeader");?
    /Sergey

Maybe you are looking for

  • Issue with HP 3600n, NetGear Wireless Router and SUBNETS!!

    Hello All, I want to say (admit) first off that I am a PC person. The school I work for has recently acquired some new iMacs and I have to say I am very impressed with the design, ease of use and reliability. I can't believe I am saying these things

  • Adobe Photoshop CC 'Window-Application Frame' setting

    So I've never been an adopter of the whole adobe application frame; I like the openness and abiltiy to click my desktop behind the image I'm working on. I know how to turn it off, but how do I KEEP it off? Every time I close and reopen photoshop it's

  • Daisy chain set up dual DVD writers and dual drives

    Which comes first in a daisy chain? I have dual sets of DVD burner/external drives connected to a hub as two sets. With each set should I hub to the DVD burner or hub to the external drive first in the daisy chain or does it matter?

  • Cannot Update Windows 7 while connected to my WRT54G.

    For some reason the computers that are connected via wired or wireless through my WRT54G Vers. #6 (Firmware Version v1.02.8) will not connect for updates (Error Codes: 80072EE2-Win7, 80072EFD-Vista) especially OS, anti-virus, malware updates.  This l

  • ITunes won't open, install or uninstall

    When I try running iTunes, i get the message: iTunes could not be installed because Visual Basic Script (Basic) is not installed or has been disabled. Make sure Basic is installed, turn off script blocking in anti-virus and personal firewall software