Access to portal

Hi all,
We have a portal 9.0.2. When users logs in from within intranet they have some access rights. But if they login
from internet I could like to restrict their access, for some users. How to do this?
The Portal can be accessed thru'
the Internet too.
We would like to restrict the access from the
Internet (outside the firewall) to only certain users.
How do I do that? Do I have to put some kind of
restrictions at the SSO or WebCache or at Firewall ?
with thanks

One (non-SAP) was of doing this would be to use a https accelerator in front of the portal to do https into your company network and then http to the portal.
Or - https runs on a different port, so they could connect to this. However, this would be very messy (technical term ) as it is recommended that if you use http, you should use it everywhere throughout the environment (i.e. when accessing ITS/ BSP/BW reports) or vice versa, if using https you should use it everywhere.
Hope that helps.
Paul

Similar Messages

How to restrict access to portal based on entitlements.

Hi,
I am working on weblogic 8.1 portal project. i want to restrict the user to access
the portal based on the entitlements. However when user try to login he is seeing
Weblogic Error 403 forbidden page. How to display custom error page, instead of
weblogic default error page.
How to programatically check whether user has access to portal or not based on
entitlements.
Please give me code.
regards,
-chada-

Chada,
The 403 is by design. If you want to place a page in front of one or more
portal desktops and only show links to desktops the current user is entitled
to, review the attachment.
-Phil
"Chada" <[email protected]> wrote in message
news:3fcd6969$[email protected]..
>
Hi,
I am working on weblogic 8.1 portal project. i want to restrict the userto access
the portal based on the entitlements. However when user try to login he isseeing
Weblogic Error 403 forbidden page. How to display custom error page,instead of
weblogic default error page.
How to programatically check whether user has access to portal or notbased on
entitlements.
Please give me code.
regards,
-chada-[login.zip]

Can't access to Portal Admin Console.

Hi all,
I'm working with WLP 10.2. I've created the ear-file (using maven) and deployed it on server (with Unix-system). The current application works well.
My current task is a creation portal in streaming mode. Unfortunately I can't access to Portal Admin console for resolving task. I always retrieve "Error 404 (Not found)".
As I know the admin-tools.war is responsible for Portal Admin Console. I've checked admin-tools.war is running on server (with status "Active").
I'm using the next path for running Portal Admin Console: {serverhost:port}/{context root of admin-tools}/portal.portal.
Maybe, Should I set up(correct) application.xml or weblogic.xml?
Please let me know if you have any ideas.
Thanks,
Yuriy

I think your URL is wrong, try with the following...
http://{server:port}/{name_your_ear}Admin/portal.portal
name_your_ear= The name of your Enterprise Application.
For example,
http://localhost:7001/DemosEarAdmin/portal.portal
I hope this helps

Internet Access to Portal located in DMZ

I've seen questions on the forum regarding gaing Internet access to the Oracle Portal located in the DMZ. This answer does not resolve the issue of having multple DADs to access your portal like abc.com and xyz.com. For that see note:162044.1 on metalink. http://metalink.oracle.com.
If you registered a domain name e.g. abc.com and have the portal up and running in the DMZ. Your local network should be accessing the portal just fine. Your computer name for example is portal. The URL translates into http://portal.abc.com. You opened the ports in the DMZ to allow access and wonder why you get partial portal pages, no login, etc. It's becase users can't resolve the DNS entry for portal.abc.com. Call your ISP and get an "A Record" entry. After a few hours and propogation of the A Record, users on the Internet can successfuly access your site. This A Record should be free.
Good luck
Kellan

Hi,
You've to open the ITS for internet for accessing things from Portal too. As I've told you in previous post, the request goes directly to ITS server (http://itsserver.com/scripts..) and not as (http://myportal.com/scripts..). The idea of having it via Portal will be to mask the URL of ITS , which will not be visible (except for time you click on iview which will display in status bar). In any case, you can directly acces ITS as what you've told, however you give the proxy.
Regards,
Siva
P.S: Award points if you find this useful.

How to access Sap portal login user in ejb web service

Hi,
I wnt to access SAP Portal login user in my ejb application which resides on the same server.
I am using following code
try {
     IUser user =null;                         IWDClientUser wdUser = WDClientUser.getCurrentUser();
                              user = wdUser.getSAPUser();
                         } catch (WDUMException e) {
                              // TODO Auto-generated catch block
                              e.printStackTrace();
Some additional jar files are required for this?
The same code works fine with webDynpro but not with ejb.
Thanks in advance
Best regards,
Nilesh

Thanks for reply.
I have already added com.sap.security.api in my EJB module project classpath. How to add the same in EJB application Project (application-j2ee-engine.xml)?
Best regards,
Nilesh

How to access a Portal User Info from a J2EE application?

Hi,
I have deployed a j2ee application in portal and its running fine.
from that application i need to assign some roles to some users.i have the user id.
so my doubt is can i access the portal user info from this j2ee application?i have some servlets in the j2ee application....can i get the portal user info from this servlet?
plz help me
regards,
Visweswar

Hi,
Please check out this to get the portal user information from Java -
WdClientUser class/Interface to aciehve this.
Please check out these links on the same -
WDClientUser.getClientUser IUser
help needed
Regards
Lekha

Accessing multiple portals at the same time?

Is it possible to access multiple portals at the same time?
For example, what I want to achieve is different properties (layout,
portlets, look & feel) for different groups of users accessing the same
portal. The Associated Groups part on the Portal admin page is not
fulfilling our requirements. So we decided to have different portals for
different groups of users, all working through one portal, and accessing
their custom portals. Is this achievable?
What we are thinking is: put the common functionality in the repository
portal directory, and the custom portlets/jsps in the group-specific portal
directories. This way we can customize portal behavior for different groups
of users. Is this achievable?
Thanks.
Amit

You have to user respective DRILL commands present in WAD to configure the drill operations on multiple characteristics...

Urgent: cannot access the portal home page because of problems language

I have installed Oracle 9iAS, including infrastructure with language FRENCH_FRANCE.WE8ISO8859P15 and portal and wireless type I dont have problem for access to http://machine:1810 and http://machine:7779 in French.
But when I access this url: http://machine:7779/pls/portal, there is a error : java.io.IOException:
Unsupported character encoding: "ISO-8859-15"
at oracle.webdb.page.BaseContentRequest.getResponseJavaEncoding(Unknown Source)
at oracle.webdb.page.BaseContentRequest.getReader(Unknown Source)
at oracle.webdb.page.PageBuilder.getMetaData(Unknown Source)
at oracle.webdb.page.PageBuilder.process(Unknown Source)
at oracle.webdb.page.ParallelServlet.doGet(Unknown Source)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:244)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:336)
at com.evermind.server.http.ResourceFilterChain.doFilter(ResourceFilterChain.java:59)
at oracle.security.jazn.oc4j.JAZNFilter.doFilter(JAZNFilter.java:283)
at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:523)
at com.evermind.server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:269)
at com.evermind.server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:735)
at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:151)
at com.evermind.util.ThreadPoolThread.run(ThreadPoolThread.java:64)
When I install infrastructure, I select FRENCH_FRANCE.WE8ISO8859P15. I check in sql*plus in the v$NLS_PARAMETERS and NLS_LANGUAGE is FRENCH, NLS_TERRITORY is FRANCE, NLS_DATE_LANGUAGE is FRENCH and NLS_CHARACTERSET is WE8ISO8859P15. It seems all well.
But I check in the Windows registry, I find that NLS_LANG is FRENCH_FRANCE.WE8MSWIN1252 under under HKEY_LOCAL_MACHINE/SOFTWARE/ORACLE/HOME1 and HKEY_LOCAL_MACHINE/SOFTWARE/ORACLE/HOME2. Then I correct in FRENCH_FRANCE.WE8ISO8859P15 in the Windows registry.
Also I check in EM web_site in
To check the DAD settings, in my EM Console, I go to Http Server/PLSQL Properties/DAD status. I correct NLS Language with FRENCH_FRANCE.WE8ISO8859P15.
Also I correct langinst.cmd under OH/portal/admin/plsql to replace WE8MSWIN1252 with WE8ISO8859P15
case f:
setenv NLS_LANG FRENCH_FRANCE.WE8ISO8859P15
breaksw
case frc:
setenv NLS_LANG FRENCH_FRANCE. WE8ISO8859P15
breaksw
All that I do is not useful for access the portal home page, thers is always the error java.io.IOException: Unsupported character encoding: "ISO-8859-15"
I dont have problem in language English. My page portal is running well in a another machine where I install Oracle9iAS in English, but I have always problem in the machine where I install Oracle9iAS in French.
I find there are lots of this problem in this forum, but there isnt a answer. So thanks for anyone to resolve this problem.

Hello Michael,
Thanks for your help !
I think that the problem is in the PlsqlNLSLanguage. But I couldnt check it now with the version French WE8ISO8859P15, because today Ive installed oracle902 AS with WE8MSWIN1252 and it functions well. I find the PlsqlNLSLanguage in my $ORACLE_HOME_INFRA/Apache/mod_plsql/conf/dads.conf is FRENCH_FRANCE.WE8MSWIN1252
, and in my $ORACLE_HOME/Apache/mod_plsql/conf/dads.conf is AMERICAN_AMERICA.WE8MSWIN1252. But I dont understand why it doesnt create the languages problem.
I will try again in another machine with WE8ISO8859P15.

Not able to access the portal on the network - (RedHat Enterprise Linux 5).

Friends,
I have installed the portal(7.1) on a linux(RHEL 5) box.I am able to access the portal locally and everything looks fine.
However when I try accessing the portal on the network...I get "page cannot be displayed" as if the server is not listning on 8080.
when I do "GET http://rexportal.davita.corp:8080" I get ........
500 Can't connect to rexportal.davita.corp:8080 (connect: No route to host)
what does this mean?
other info:
1) I have disbaled the firewall by setting SELinux to disabled.
2)I am able to traceroute to the m/c
3) can ftp and SSH
4) When I do "GET http://rexportal.davita.corp" I see a apache server page.It means apache server is accessible at port 80 on the network.
Can you plz help me resolve this issue.what can prevent my server not being accesible across the network
Thanks!!
Deepak.

I was able to resolve this.! basically It was a firewall issue.
To help othere here is what I found.
I had disabled the SELinux utility which should have basically disabled the firewall service but It didnt stop it.
You can check If the firewall is running with following command on redhat linux.
service iptables status
If it is enabled ,you can either stop it by
/etc/init.d/iptables stop (not recommended -- for security)
or
you can add a entry for the port you want to enable by modifying the file
/etc/sysconfig/iptables
Hope it might be helpful !
Thanks,
Deepak.

Use ip address to access the portal

If there any way to access a portal through ip address instead of fully qualified domain name. I need to access the portal in my office through an external ip address in a router. The port forewarding force an ip address even I define a hostname for my router.

Hi Wing ,
yes you can , but some pieces of the portal depend on full hostname resolution ( for domain security) . So Single Sign On to backends will not work properly (if at all) plus Javascript will act funnily in your browser (depending on the settings ).
Also you need to make sure any content in an Iview that is displayed in an Iframe is domain-name resolvable to your browser (e.g. other non-portal hosts ) .
Much better to go through a Reverse Proxy in the DMZ ..see various posts in the Implementation forum .
Regards
Daniel

Ise 1.2, cannot access guest portal

I upgraded from 1.1.4 patch 3 to 1.2 but cannot access guest portal anymore nor with FQDN:8443 nor with IP:8443
any idea?

I had attached the steps to configure the guest portal and hope will address the problem.
Configuring the Guest Portal
Adding a New Guest Portal You must configure settings for the Guest portal before allowing guests to use it to access the network. Some settings apply globally to all Guest portals and other require you to set them for each portal individually.
You can add a new Guest portal or edit an existing one.
Step 1Choose Administration > Web Portal Management > Settings > Guest > Multi-Portal Configurations.
Step 2Click Add.
Step 3Update the fields on each of these tabs:
•General—enter a portal name and description and choose a portal type.
•Operations—enable the customizations for the specific portal
•Customization—choose a language template for displaying the Guest portal with localized content
•File Uploads—displays only if you have chosen a portal type requiring you to upload custom HTML files.
•File Mapping— identify and choose the HTML files uploaded for the particular guest pages. Displays only if you have chosen a portal type requiring you to upload custom HTML files.
•Authentication—indicate how users should be authenticated during guest login.
Step 4Click Submit.
Specifying Ports and Ethernet Interfaces for End-User Portals
You can specify the port used for each web portal allowing you to use different ports for the end-user portals: Sponsor, Guest (and Client Provisioning), My Devices, and Blacklist portals. The Client Provisioning portal uses ports 8905 and 8909 for posture assessments and remediation, which you cannot change. Otherwise, it uses the same ports assigned to the Guest portal.
You can also partition portal traffic to specific Gigabit Ethernet interfaces. For example, you might not want the Admin portal (which always uses GigabitEthernet 0) available on the same network as guest users or employee devices.
Step 1Choose Administration > Web Portal Management > Settings > General > Ports.
Step 2Enter the port value in the HTTPS Port field for each portal. By default, the Sponsor, Guest, My Devices portals use 8443, and the Blacklist portal uses port 8444.
Step 3Check the Gigabit Ethernet interfaces you want to enable for each portal.
Step 4Click Save.
If you have changed the port settings, all nodes (Administration, Policy Services, and Monitoring) restart automatically, which may take several hours to complete.
Tips for Assigning Ports and Ethernet Interfaces
•All port assignments must be between 8000-8999. This port range restriction is new in Cisco ISE 1.2. If you upgraded with port values outside this range, they are honored until you make any change to this page. If you make any change to this page, you must update the port setting to comply with this restriction.
•You must assign the Blacklist portal to use a different port than the other end-user portals.
•Any portals assigned to the same HTTPS port also use the same Ethernet interfaces. For example, if you assign both the Sponsor and My Devices portals to port 8443, and you disable GigabitEthernet 0 on the Sponsor portal, that interface is also automatically disabled for the My Devices portal.
•You must configure the Ethernet interfaces using IP addresses on different subnets. Refer to these guidelines to help you decide how best to assign ports and Ethernet interfaces to the end-user portals:
Specifying the Fully Qualified Domain Name for Sponsor and My Devices Portals
You can set the Sponsor and My Devices portals to use an easy-to-remember fully-qualified domain names (FQDN), such as: mydevices.companyname.com or sponsor.companyname.com. Alternatively, Cisco ISE also supports wildcard certificates to address certificate name mismatch issues. You must configure DNS to resolve to at least one policy services node. If you have more than one policy services node that will provide portal services, you should configure high availability for the portal. For example, you could use a load balancer or DNS round-robin services.
Before You Begin
Step 1Choose Administration > Web Portal Management > Settings > General > Ports.
Step 2Scroll to the Portal FQDNs section, and check the appropriate setting:
•Default Sponsor Portal FQDN
•Default My Devices Portal FQDN
Step 3Enter a fully qualified domain name.
Step 4Click Save, and all nodes (Administration, Policy Services, and Monitoring) restart automatically, which may take several hours to complete.
Step 5Configure the network DNS server so that it resolves the FQDN to the Sponsor or My Devices portal nodes. You must also update DNS to ensure the FQDN of the new URL resolves to a valid policy service node IP address. Additionally, to avoid certificate warning messages due to name mismatches, you should also include the FQDN of the customized URL in the subject alternative name (SAN) attribute of the local server certificate of the Cisco ISE policy service node.

Solman Document Access thro portal

hi
I wanted to know if we store the documents on SOLMAN, can they be accessed using portal.
if yes may i know how

Dear Anil
We have a standard functionality of solman with which we can access solman documents
For e.g goto properties of doc in solar01 or 02 then click Generate URL
this will generate a URL and copy to clipboard and then press control+v to paste in explorer the doc can be accessed from anywhere with authentication
Note you need to have activate SICF solmandocument service for this.
Hope it solves ur prob.
Regards
Prakhar

ACCESS with PORTAL

Hi All,
Can we integrate an ACCESS application with Oracle Portal? If so, can any one guide me through the process?
Thanks
Raj

From web.xml ..
<servlet-mapping>
<servlet-name>AppManagerServlet</servlet-name>
<url-pattern>/appmanager/*</url-pattern>
</servlet-mapping>
Cheers
Dennis
Karthi wrote:
Sorry Chris,
I don't get you.
What do you mean "any thing" also ?
How do we manage the appmanager URL mapping in web.xml ?
Please explain in bit detail
Thanks,
Karthi.
"Chris Jolley" <[email protected]> wrote in message
news:4086f3f3$[email protected]..
you can use either one in production. .portal files are not just fordevelopment
the only difference is your end users or admins cant customize them
as far as the long urls, are you worries aboutwebappname/appmanager/portalpath/desktopath
being too long?
Some things that might help
-you can make your webapp name anything you like
-appmanager can be anything also just change your web.xml
-portal path can be anything also,
-desktop path you can get rid of by specifying a URI for the portal thatjust
forwards you to
a default desktop.
"Karthi" <[email protected]> wrote:
Hi all,
As of docs, I came to know that the portal can be access by .portal file
during the development.
And using appmanager in producation . Is my understanding right?
If so, what is the recommended way to manage the long urls?
I mean to ask how efficiently we can use the PathTrim directive of apache
to
achive this.
Or is there a better way.
Thanks,
Karthi

No FIM administrator...cannot access the portal

Somehow my user object who has FIM admin rights got removed. How do I resolve this?
TSTADMIN/adminfim is my user who is site collection administrator. This user was a part of SET Administrator.
Permission MPR 'Admin can do anything' used this set as requet resource to allow all access on FIM portal.
This user object is somehow removed and I do not have a single user who has FIM portal admin access. (I know the user is removed as I could search portal for users with another user who has limited access)
If I try to access FIM portal using this user..I get below error
[ServiceFaultException: The endpoint could not dispatch the request.] Microsoft.ResourceManagement.WebServices.EnumerationClient.Enumerate(Message request) +226 Microsoft.ResourceManagement.WebServices.EnumerationClient.Enumerate(Enumerate
enumerate, EnumerateHelper helper) +242 Microsoft.ResourceManagement.WebServices.Client.ResourceTemplate.EnumerateResources(SearchParameters parameters) +782 [UnwillingToPerformException: The endpoint could not dispatch the request.] Microsoft.ResourceManagement.WebServices.Client.ResourceTemplate.EnumerateResources(SearchParameters
parameters) +1457 Microsoft.IdentityManagement.WebUI.Controls.ConfigurationModelBase.RetrieveResources(String type, String filter, List`1 attributes) +499 Microsoft.IdentityManagement.WebUI.Controls.UserConfigurationModel.RetrieveUserConfiguration()
+536 Microsoft.IdentityManagement.WebUI.Controls.NavigationBarConfigurationModel.get_NavigationBars() +148 Microsoft.IdentityManagement.WebUI.Controls.NavigationBarProvider.BuildSiteMap() +242 Microsoft.IdentityManagement.WebUI.Controls.NavigationBarProvider.get_RootNode()
+13 System.Web.UI.WebControls.SiteMapDataSource.GetNodes() +231 System.Web.UI.WebControls.SiteMapDataSource.GetTreeView(String viewPath) +35 System.Web.UI.WebControls.HierarchicalDataBoundControl.GetData(String viewPath) +43 System.Web.UI.WebControls.Menu.DataBindItem(MenuItem
item) +53 System.Web.UI.WebControls.Menu.PerformDataBinding() +49 System.Web.UI.WebControls.HierarchicalDataBoundControl.PerformSelect() +114 System.Web.UI.WebControls.BaseDataBoundControl.EnsureDataBound() +82 System.Web.UI.WebControls.Menu.EnsureDataBound()
+38 System.Web.UI.WebControls.Menu.OnPreRender(EventArgs e, Boolean registerScript) +64 Microsoft.SharePoint.WebControls.AspMenu.OnPreRender(EventArgs e) +166 System.Web.UI.Control.PreRenderRecursiveInternal() +108 System.Web.UI.Control.PreRenderRecursiveInternal()
+224 System.Web.UI.Control.PreRenderRecursiveInternal() +224 System.Web.UI.Control.PreRenderRecursiveInternal() +224 System.Web.UI.Control.PreRenderRecursiveInternal() +224 System.Web.UI.Control.PreRenderRecursiveInternal() +224 System.Web.UI.Control.PreRenderRecursiveInternal()
+224 System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +3394
Event viewer gives me this error:
Requestor: Internal Service
Microsoft.ResourceManagement.Service: Microsoft.ResourceManagement.WebServices.Exceptions.UnwillingToPerformException: Exception of type 'Microsoft.ResourceManagement.WebServices.Exceptions.UnwillingToPerformException' was thrown.
   at Microsoft.ResourceManagement.WebServices.ResourceManagementService.GetCurrentUserFromSecurityIdentifier()
   at Microsoft.ResourceManagement.WebServices.ResourceManagementService.GetCurrentUser()
   at Microsoft.ResourceManagement.WebServices.ResourceManagementService.Create(Message request)
Please assist.

Is the User object for the account deleted or is it just missing attributes? (Like objectsid)
If you've deleted the object completely, then there's no easy way to get it back - you've effectively locked yourself out of the portal.
https://social.technet.microsoft.com/Forums/en-US/e7d149f2-1fa4-4b2a-8177-67c026978b89/builtin-administrator-account-deleted?forum=ilm2
If you just need the object guid, try this post
https://social.technet.microsoft.com/Forums/en-US/6ab2fbeb-2877-424c-989c-6ddaac1b0df6/how-to-recover-objectsid-fim-admin-and-builton-synchronization-user?forum=ilm2
Sorry for the bad news

Using Multiple Domain Names to Access Our Portal

We operate one domain corp.company.com but all internal intranet web servers get assigned the address inside.ZZZ. The inside.ZZZ is on our IE exclusion list but company.com is not. Adding company.com seems to be a miserable task so we are looking at adding an alias so our users can access the server at the new inside.ZZZ url. We have DNS pointing the URL to the right server and that seems to be working properly.
Something within the application is redirecting the page to gnwhepdev.corp. company .com (our servers domain address) after the initial login. Since *.corp. company .com is not in the exclusion list, it is considered an outside address and rerouted. We are trying to find some way to pass the alias within the application itself so that we dont need *.corp. company .com in the exclusion list and we can point users to the inside.ZZZ url.
Our team researched this issue and found documentation that supported the use of multiple domain names to access a Enterprise Portal. The documentation that we found is below:
How ToConfigure the J2EE Engine Deployment Descriptor (Version 1.00 July 2004)
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/d0eb8120-b66c-2910-5795-894f384fc054
Particularly on page 13-15 in the documentation it talks about enabling the portal via multiple domain names (Section 3.7: Using Multiple Domain Names to Access the Portal). Also, the documentation says the following:
You must have sever proxy servers, each with a different domain name. You then activate the filter mechanism and configure it to work with several proxy servers
We have several questions about the possiblities of being able to set this up and whether it would require another server where Web Dispatcher would need to be installed for this configuration to work properly. Can someone please provide some insight into what needs to be configured and answer the question about the Web Dispatcher? Also, if Web Dispatcher is required, what steps need to be done to configure? If Web Dispatcher is not needed, what will we need to do apart from that to set this up for our Enterprise Portal system?

It is but you have to use masking......
http://iwebfaq.org/site/iWeb_Domains.html

Error 403 accessing Oracle Portal

Hello,
I have just installed Oracle Application Server 10.1.2.0.2, and I am working on setting up Oracle Portal. I am able to access the portal by using an internal domain name (i.e, http://my.domain.local:7778/pls/portal), it will work fine using this url, SSO works also. I am trying to host this so people can see it from the outside world, beyond our internal network. I am getting error 403 when I try to access http://my.domain.com/portal. It states that the website declined to show this page. I am guessing there is a .conf file out there I need to edit, but I am unsure of which one or what kind of code is needed. I have seen a few other posts about this that had no answers to the problem. If anyone has any tips on this, they would be greatly appreciated!
Thanks,
Jordan

You will have to punch a hole through your firewall for port 7777 and 7778 to your application server.
You should refer to the guides for 10g configuration to help you.
http://download-east.oracle.com/docs/cd/B15904_01/nav/docindex.htm
Frank

Access to portal

Similar Messages

Maybe you are looking for