Access read-only LDAP for username/password, Directory Server LDAP for rest

Hello! I keep trying to find documentation on the above, but thus far I have been unable to find something that explains this well (and my attempts at figuring out thus far have failed).
I have a read-only LDAP that is used University wide, and I am not allowed to change how it currently operates. It uses double-bind authentication in that you search for a user to get their DN, then bind to that DN with the users password to see if it was correct.
I'd like to use the above setup to verify a user's credential as well as return some basic information about them (name, email, etc). After this, I'd like to use another freshly installed Directory Server LDAP to manage the roles that seem to be needed for Portal Server (as I cannot write to the original LDAP).
Any help or advice on the above would be appreciated! Thank you.

The authentication you described is the default way LDAP authentication works.
AM Ldap auth-module allows you to 'pull' attributes from the LDAP server you're using for authentication and store it in it's 'amSDK' Directory Server - which is leveraged by Portal Server (if you're talking about Sun's Portal Server).
However this is only done if the profile is created (set 'dynamic profile generation' in auth - service).
As Portal Server does not support the new 'identity repsoistory API' of AM you have to stick to AM's legacy mode when using Portal Server.
To keep the the data in sync (if needed) you have to write a post-auth class.
-Bernhard

Similar Messages

Keeps asking for username password proxy server

When i start Firefox 8 at work, Firefox keeps asking for username and password. I have fild in the network settings to not use a proxyserver for: 150.0.*;12.0.*.
Now the startpage of Firefox is our ourIntranet which is: http://ourintranet (which has a ip example: 150.0.2.3
So what i want to do is: use proxy except for this ip: xxxxxxxx, because this ip is http:\\ourintranet
Now i cannot go to http:\\ourintranet because he keeps asking for password.

I'm not sure why it's not working. I think Firefox looks in the hosts file and then the configured/automatic DNS server for address resolution, in that order. To specify otherwise (for eg. a proxy for address resolution) the [http://kb.mozillazine.org/Network.proxy.socks_remote_dns network.proxy.socks_remote_dns] in [http://kb.mozillazine.org/About:config about:config] has to be set to true.
You can also check in a [https://support.mozilla.org/en-US/kb/Managing-profiles new profile]. A new profile would have the default settings and wouldn't usually have any installed extensions and would be clean. You can try then try the proxy settings.
The 150.0.2.0/24 should work (24 bits for the network with 254 addresses - http://www.subnet-calculator.com/cidr.php) unless perhaps the network is super-netted in which case you can also try the supernet prefix instead of /24.

Reading only Image Files from a Directory and ignoring the rest

i am wanting to be able to read a directory but only obtain the Image files (ie, gif, jpeg, tiff, png etc) and ignore all other type of files.
i have made a custom ImageFIlter class which extends FileFilter which works for adding a photo singly, as only image files are shown in the JFileChooser. however i am wanting to add a folder of photos at once.
here is the code so far:
File dir;
                    JFileChooser fc = new JFileChooser();
                    fc.setFileSelectionMode(JFileChooser.DIRECTORIES_ONLY);
                    //Handle open button action.
                    int returnVal = fc.showOpenDialog(MainAppGUI.this);
                    if (returnVal == JFileChooser.APPROVE_OPTION) {
                         dir = fc.getSelectedFile();
                         if (dir.isDirectory()) {
                              File[] files = dir.listFiles(new ImageFilter());
                              for (int i = 0; i < files.length; i++) {
                                   if (files.isFile()) {
                                        try {
                                             Photo PhotoAdded = workingCollection.addManyPhotos(files[i], canvas.getChangedMaxDim());
                                             //need to also add it to the relevant vectors, ie
                                             //for mouse over operations, or photos added after
                                             //save.
                                             if(!workingCollection.isDuplicate()){
                                                  photosToCheck.add(photoAdded);
                                                  canvas.addToGrid(photoAdded);
                                                  photosAddedAfterLoad.add(photoAdded);
                                                  canvas.repaint();
                                             else{
                                                  //do nothing as it is already in the vectors.
                                        } catch (Exception er) {
                                             // Do nothing. Bad mp3, don't add.
                                   // recurse through directories
                                   else {
                         } else {
                              try {
                                   throw new IOException(
                                             "Error loading files from a directory: "
                                                       + dir.getAbsolutePath() + " is not a "
                                                       + "directory");
                              } catch (IOException e1) {
                                   // TODO Auto-generated catch block
                                   e1.printStackTrace();
any ideas?

I'm confused.
You already ARE using a FileFilter to only pick up image files. Whats the problem?
If you need to recurse directories you need to change your code only a little.
Write your method
JFileChooser fc = new JFileChooser();
fc.setFileSelectionMode(JFileChooser.DIRECTORIES_ONLY);
//Handle open button action.
int returnVal = fc.showOpenDialog(MainAppGUI.this);
if (returnVal == JFileChooser.APPROVE_OPTION) {
dir = fc.getSelectedFile();
if (dir.isDirectory()) {
scanDirectory(dir);
else{
// not a directory
public void scanDirectoryForPhotos(File directory){
// taking your code
if (dir.isDirectory()) {
File[] files = dir.listFiles(new ImageFilter());
for (int i = 0; i < files.length; i++) {
    if (files.isFile()) {
// details deleted
// recurse through directories
else {
scanDirectory(files[i]);
Your exception handling is a little strange. You throw an exception only to catch it immediately to print a stack trace? Not exactly the most common handling I've seen. You should probably just throw the exception and let the next level down handle it.
Cheers,
evnafets

SDK Trunk. Update my local copy has started asking for username/password

SDK Trunk. Update my local copy has started asking for username/password
these has been happening on and off for a few days now.
when i click update on my local copy of the sdk ready to do my morning build I've started to be asked for a username and password. I do have a username and password for sandbox and patching etc but entering this has no effect.
are there times of day when the trunk is locked or something like that? This is not happening all the time but it is several times a day.
has anyone any idea why this is happening
Ive don e all the usual things, clean my local version, grabbed a totally new version etc
im on windows using TortoiseSVN(which is always using a current build)
cheers
g

Ive had this same issue on and off across all the open source svn
im yet to find any pattern apart from the fact that the auth error only ever shows the root of the svn request.
Ie http://opensource.adobe.com/svn/opensource/
Now im not sure if thats just the way the reporting ui works of if it indicates that somewhere in the update it starts to trigger the url rot and thats where the auth request gets triggered. This may be total nonsense. Just a thought.

Howto access Apex through dbms_epg without username/password ?

I had just setup HTMLDB using dbms_epg (htmldb_epg_config.sql).
Now i'm unable to access http://localhost:port/htmlb via http without username/password.
Granting anonymous access to xdb repository doesn't help. I'm able to access http://localhost:port without username/password, but then i try http://localhost:port/htmlb - no go.
How can i enable http access to http://localhost:port/htmlb without username/password ?

We are using 10.2.0.2 EE Edition and decided to try Apex without use of standalone Apache.
I've already done that while running dbms_epg_config.sql
declare
l_cfg xmltype;
begin
dbms_xdb.cfg_update(xmltype.appendchildxml(dbms_xdb.cfg_get(),'/xdbconfig/sysconfig/protocolconfig/httpconfig', xmltype('<allow-repository-anonymous-access xmlns="http://xmlns.oracle.com/xdb/xdbconfig.xsd">true</allow-repository-anonymous-access>')));
exception
when others then
select updatexml(dbms_xdb.cfg_get(),'/xdbconfig/sysconfig/protocolconfig/httpconfig/allow-repository-anonymous-access/text()','true') into l_cfg from dual;
dbms_xdb.cfg_update( l_cfg );
commit;
dbms_xdb.cfg_refresh;
end;
I'm actually able to access repository without supply username/password.
The troubles begin as sun as i try to access /htmldb - it wants password for HTMLDB_PUBLIC_USER account before i can proceed.

Router No Asking For Username/Password

Having just upgraded from a WRT54G to a E2500 all I can say is that I'm disappointed with Cisco.
Having spent a few hours yesterday trying to resolve issues via Live Chat (ID 130105-001270 & 130105-002081) and spending more time today - I'm truly at wits end. I consider myself pretty knowledgeable with computers and networking.
I'm not sure if anyone from Cisco's Tech staff sees these posts but I don't know where else to "complain" in hopes that the next software/firmware update resolves these problem(s).
The first is my router's setup screens are totally open when using my desktop. The desktop is hardwired to the router and has the Cisco Connect software installed. I open the Cisco software and go to advanced settings. There I'm shown what my router's name is and its password. This is really strange - why would you wish to display this information PRIOR to requesting usename and password? However, once there you can go right into the setup screens by clicking OK.
I have also entered these screens directly without being prompted for username/password by using 192.168.1.1 or myrouter.local via Internet Explorer 8 or Google Chrome. At other times I am denied access because IE cannot display page.
I'm concerned because I can hide the Cisco Connect software however, anyone that uses my desktop has full access to my router via the web or Cisco Connect.
The second issue is that the password to enter the router and allow access to the internet IS THE SAME! When I had my WRT54G running I had one password (8 alpha characters) to enter setup screens. There was a router generated, 16 alpha/numeric character, password to allow outside devices such as laptops, TVs and game consoles access to the internet. When I set this router up I installed the 16 character password originally used so my laptop and Wii could connect without having to fool around with their settings. Everything was fine until I went into administration and changed the password to my old 8 character one. That is when I found out that the router uses this password setting under administration to control access to the internet AND access to the router settings!
I have uninstalled and reinstalled IE 8. I have ensured that my browser's history and caches are clear which they do when I shut IE down. I'm running Windows XP service pack 3 with the "proper" anti-virus and anti-malware software. My system is up-to-date.
I have ensured that the router is running the latest firmware 1.0.05 build 2 and software 1.4.11299.0.
I have seen other posts suggesting the removal of Cisco Connect however, I feel that this is a bandaid solution.
I'm not professing to be a router technician however, I "feel" the problem might be the fact that the password issue is the problem. Since the same one is being used for both accessing the router and having the router grant access to the net, my desktop is allowed to access the setup screens without being prompted for username and password.
Again I hope SOMEONE from Cisco sees this and investigates.
Thanks for allowing me to "rant".
Dave

Thank you zee29 for the reply however, when I change the router password under administration I'm presented with a screen that says the router's password has been changed on my next Cisco Connect startup. I click OK and then I'm presented with a screen that says BOTH passwords must be the same. This is crazy. My router is not secure on my desktop. Anyone who uses my desktop and wants to "fish" around can enter my router's settings without being presented with a password prompt.
And I'm still presented with the problem of connecting via 192.168.1.1. or myrouter.local using IE 8 in which a "page cannot be displayed" message appears. I can log in via Google Chrome however, once I enter the username and password once I'm able to access router without being prompted. The network isn't totally secure.
I have seen other posts where these Cisco routers are having "problems" when using IE. It would seem to me that Cisco would want to rectify this situation. Its not like I'm running a beta operating system that Cisco is not aware of. I'm running an XP system that is totally updated.
I've been running Linksys/Cisco routers for years and have never had these problems. If these "problems" continues I will have no choice but to purchase a router from another company such as Netgear and say goodbye to Cisco.
I want and need a SECURE network.
Dave

Need thread safe way to access read-only objects

I have been working on a lot of projects and all the developers agree that they want thread safe code when called by many threads. It's rare developers are making statement like: "Data are not corrupted often so don't bother" or "It's not thread safe, but that will not often create issues".
In TopLink client session itself is thread safe but not the persistent object themselves. Via client session, if you want thread safe access you need to put a lock on CacheKey and it's not a public/supported API. So the only thread safe access is via unit of work.
We would like fast access to objects. We have a batch process that just need read-only access to objects. We need to read via unit of work to get thread safe access. But we just need the clone when we read via unit of work, we don't need the backup for change detection.
However, TopLink doesn't have a mean to do that.
Please push implementation of Bug5998333[WANT THREAD SAFE AND CORRECT ISOLATION WITH OBJECTS FROM ADDREADONLYCLASS]
In Hibernate, by design, all access are always thread safe. Accessing read-only object just create one copy (a clone), no backup needed.
Oracle claims that TopLink is fast. I wonder if their performance testing code is thread safe, so access objects via unit of work or they take the shortcut of accessing objects from client session. Also, reliable performance comparison should use conform in unit of work.

As you stated the UnitOfWork offers you your desired functionality, you would just like an improvement in performance.
In TopLink 10.1.3 (or 11g preview) you have a few options:
- Use a UnitOfWork an live with the slight overhead of the back copies (it will only add 5-30 % overhead to your processing)
- Instead use an isolated client session, this will not require any cloning or backup clones, but also does not allow any caching.
- Use change tracking, TopLink added attribute-level change tracking in 10.1.3, when used the UnitOfWork does not create backup clones. In 10.1.3 it was mainly used for CMP and requires code generation, but you could implement or weave the code yourself. In TopLink 11g, change tracking is weaved by default with JPA and the weaver can also be used with POJO objects.
I agree that having a feature to mark an object as transactionally read-only would be desirable, it seems like you have logged the enhancement. You could try escalting the enhancement through Oracle support, but since it is an enhancement and not a bug, it is probably beyond what support offers. You may wish to investigate services, or potentially join the open source Eclipse EclipseLink project which the next version of TopLink is being developed under and take part in the feature yourself.

What are the username, password and connect string for Designer 6.1.1?

So that we may better diagnose DOWNLOAD problems, please provide the following information.
- Server name
- Filename
Oracle designer6.1.1
- Date/Time
- Browser + Version
IE 6.0
- O/S + Version
Win 98
- Error Msg
ORA-12154:TNS:could not resolve service name.
RME-00220:Fail to connect to repository
These error messages were shown after I entered system, manager and internal, respectively.

Hi YungJen Chen,
There is no general username, password and connect string for
Designer 6i Release 4.1.1.
First, you install the client tools using the Installer. See also the
Designer Installation Guide, Chapter 1, 'Client Side installation'.
Second, you install the repository into an existing database, using
the Designer Installation Guide, Chapter 2, 'Server-side installation,
migration and upgrade'.
The Installation Guide provides step by step instructions on what
users you need to create for various purposes. Any database users
you may need to use such as System or Sys will use the password
given when you installed the database, or whatever passowrd you
changed it to since.
The Installation Guide is available as part of the download, or from
your Windows Start Menu once the Designer client tools are installed
or from the Designer Documentation page here on OTN.
Hope this helps. Regards,
Dominic Battiston
Designer/JDeveloper Product Management

What are the username, password, and connect string for Designer6i R4.1.1

As the title, I tried system, manager and internal.
But it did not work out.
Thank you for your help.

Hi YungJen Chen,
There is no general username, password and connect string for
Designer 6i Release 4.1.1.
First, you install the client tools using the Installer. See also the
Designer Installation Guide, Chapter 1, 'Client Side installation'.
Second, you install the repository into an existing database, using
the Designer Installation Guide, Chapter 2, 'Server-side installation,
migration and upgrade'.
The Installation Guide provides step by step instructions on what
users you need to create for various purposes. Any database users
you may need to use such as System or Sys will use the password
given when you installed the database, or whatever passowrd you
changed it to since.
The Installation Guide is available as part of the download, or from
your Windows Start Menu once the Designer client tools are installed
or from the Designer Documentation page here on OTN.
Hope this helps. Regards,
Dominic Battiston
Designer/JDeveloper Product Management

Multiple popups for username/password for basic authentication.

Safari 4.0.5 (5531.22.7) gives multiple popups for username/password while requesting a page which has more than one 'secure' items in it (basic auth). We expected that Safari to reuse the credentials entered the first time around and pass it on for subsequent requests. (Although RFC 2617 specifies that the credentials 'may' be reused, not really sure what Safari is doing here, though this seems to be the behavior on other popular browsers).
There's another discussion that listed this problem but that too seems to be unresolved yet (http://discussions.apple.com/message.jspa?messageID=2074214).

HI and welcome to Apple Discussions...
If you have tried the suggestions at that link but nothing worked, update Safari.
Apple Menu / Software Updates.
Repair disk permissions after the updates are installed.
Carolyn

Clustering Solutions for Sun One Directory Server

Hi,
Please let me know the different recommended clustering solutions for Sun One Directory Server.
Thanks
Ram

Please read the documentation of the Sun ONE Directory Server 5.2... Clustering is covered and Agents for Sun Cluster provided.
Ludovic

UME as LDAP read only, what is the password

Hi,
If the portal or java instance is setup as UME = LDAP read only + database pointing to AD and the user is then assgined roles/groups in the Java UME with access to allow logon.
1. What is the password of the users to use?
2. I know the AD password is definitly not synchronised as it is one way encrypted. Does the user needs to be set a new password in portal to login with?
3. Will this password be stored on the Java UME only?
4. what happens if the users AD password changes, will it affect the password stored in the Java UME?
Thank you.
John

Hello John,
since we use that setting, too, lets see, what I can tell you. ^^
1. What is the password of the users to use?
> The password of their AD-account.
2. I know the AD password is definitly not synchronised as it is one way encrypted. Does the user needs to be set a new password in portal to login with?
> No, they can derectly use their AD-account (username and password).
3. Will this password be stored on the Java UME only?
> I'm not sure, but I'd say "no". I don't think it is stored in the UME (since the LDAP is connected and the information about the account and password status come from there).
4. what happens if the users AD password changes, will it affect the password stored in the Java UME?
> If the user changes his/her AD-password, that he/she can logon to the portal with that new password immediately. So I don't think, there is any connection to the portal UME database.
Regards,
Steffi.

Windows not prompting for username/password

I'm trying to access my NAS200 via a Windows Vista Home Premium computer. It sees the drive but when I open it I can only access what's made available to 'guest'. I'm trying to login with the admin credentials so I can see shared folders that only admin has access to.
I tried mapping the drive and using the admin user/pass but that doesn't work either. If I try to access a folder directly such as \\nas200\private - windows says it doesn't exist when it clearly does. The only way I'm able to access my files at this point is through the web interface which is not good enough since I need to perform backups to a private folder.

I went to edit a user and it wouldn't let me, so I powercycled and it worked. Now I want to change permissions on the folder for that user but when I click save the permissions do not save.
When I updated the username to match my windows user profile name, it gave me share access based on the username in the NAS settings. It didn't ask for a password or anything. So in theory if I change my windows profile to admin then I'll have admin rights on the NAS.
What the hell is going on here?

I run Dev 6i on Windows 2008 R2 64-bit,the forms are working fine after connection to the database but the reports continue to request for username, password and database connection string every time i try to open a report.

I receive REP-0501: Unable to connect to specified database. I run developer 6i application on windows 2008 r2. I have applied the nn60.dll and nnb60.dll files to the \BIN directory. The forms are working fine. The reports will only display after the correct user id (username, password and database connection string) is supplied. This is happening to all attempts to open already complied form. Pls, help.

If you are connecting to an Oracle 11g database, remember that by default the passwords are case sensitive. To disable that, run
ALTER SYSTEM SET SEC_CASE_SENSITIVE_LOGON = FALSE;

Using SSO username/password in java portlet for Database Connection

Hi all,
We implemented java portlet with environment Oracle Application server 10.1.2 and Portal 10.1.4
At present we are picking the database username and password and connect string in properties and our
java class is reading the properties file and connecting to database to fetch the records.
Our idea is to not to pick the username/password and connect string from the properties file or
not to configure the datasource in data_source.xml.
Our Requirement is who ever login to the Portal(SSO) our java class should pick the sso username/password and
connect to database to fetch the record(s).
Because our database users are one to one mapped to sso user(s) of portal.
We request anyone to guide us how can we do it or suggest any suitable solution for our requirement.
Thanks
Dan Tey

I think this is a no-go, since you cannot retrieve a cleartext password from the OID if I'm correct.

Access read-only LDAP for username/password, Directory Server LDAP for rest

Similar Messages

Maybe you are looking for