Accessing Java System - Via SAPRouter

Hi,
Is it possible to access the NetWeaver component via SAPRouter.If yes please provide the settings to be done in saprouter and how to access BI java part in web browser.
Thanks,
Vignesh P

Hi,
>My Question is how to access http://192.168.xxx.xxx:50000/irj/index.html from out side network.
I don't think that it is possible for us, SAP customers, to use the saprouter as an HTTP gateway.
It is, of course, possible for SAP support but I don't know how they do it. I've never found a documentation about it.
There must be something special because a standard web browser does not know what to do whith a saprouter.
The official solution for external HTTP access is to use a reverse proxy like the SAP Web dispatcher or Apache.
This works perfectly for us. In one case, we have a saprouter (for sapgui access) and an Apache reverse proxy (for BSP browser access) on the same host in a DMZ.
Regards,
Olivier

Similar Messages

Can users who accessed the system via the ITS be identified?

Dear experts,
I wondered if there is any SAP system table which provides the information that a certain logged-in user has connected to the SAP-system via the ITS. I couldn't find anything and I've also been searching the SDN forums for that information in vain.
Thanks in advance for your help
cheers
Andreas
P.S.: In case this should be of any interest in order to answer the question:
R/3 4.7 Enterprise / SAP_BASIS Release 620 Patchlevel 0063

Hi Andreas,
Cristiano is right here. The Access.log will show you the required information in an ITS 6.20 environment
See the help.sap.com section: [Access Logs |http://help.sap.com/saphelp_webas630/helpdata/eN/32/1166d6f97811d1801d00c04fadbf76/frameset.htm]
Regards,
Oisin

Accessing ECC system via portal

Hello,
We are in the process of implementing netweaver 2004s components for one of our client. In the landscape we have ECC6.0, BI 7.0 and XI 7.0. We are planning to use Enterprise Portal for the SSO activation. Presently the client is having windows active directory.
My question is if I need to integrate ECC6.0 with the EP for the SSO, is there any portal development effort is required?. How do we access the ECC from the portal. For each ECC tcode do we need to create any iviews? Kindly advice.
Regards
Sachin

Hi Sachin,
You can easily do that. Create you transaction iview using "Session_Manager" transaction. This transaction will bring the user on initial screen as he gets in ECC after logging. Due to this Iview he will be able to see the menu bar as in traditional ECC screen. So from there the user can navigate to other transactions as well for which the user is authorized.
You can create the transaction ivews from portal following these steps:
1) Logon to portal with Content Administrator Role.
2) Select Content Administration> Portal Content. On Right Side Select Portal Content.
3) Right Click Portal Content>new>iview. On right side select Iview Template out of three radio buttons. Click Next.
4) Select SAP Transaction Iview from the list of Iview Templates.
5) Provide Iview Name, ID properties.
6) Select SAP GUI Type say "SAP GUI for HTML" for HTML.
7) Here Select your System Alias name to which you want to connect, TCode need to be accessed. Click Next and then Finish.
If your system is successfully created and running then you will be able to preview the iview.
I hope the information provided will be very useful to you..
Regards,
Sumit

Access Dev Studio J2EE engine via SapRouter?

I have a group of Developers in another country who wish to use the j2ee engine on our local EP6 machine. They can presently access the R3 Dev system via SapRouter, but the question is: can we configure the j2ee engine in the Developer Workplace see the message server on the EP6 machine?
The path to setting is <i>Preferences > SAP J2EE Engine</i>
For example can we enter something like:
H/<localsaprouter>/H/<our saprouter>/H/<EP6 ip address>
Message was edited by: Graham Slater

Hi,
As for as I know ,
We need SAPlogon (higher vertion preferable but not necesary) for such knid of connection. for the saplogon connection you need application server name, system ID and username and password as described below
You also need some sort of VPN conection.
Following are the inputs required for creating Connection from SAP Logon Pad.
1. Application Server = IP Address or Host Name of SAP Server you want to connect.
2. SAP Router String = If you are connecting via Firewall accross VPN.
3. System ID = <SID> ex., DEV, PRD...
4. System Number = <00> ex., 00, 01 ..99
5. Select radio Button R/3
6. Give some description under that field.
Before doing the above please try to PING the Server at Location A from your machine(should be replying).
I don't think NWDS have this facility of using sap router remote r/3.
let me know whther this helps. also reward if so.

NWA to java systems authentication

Hi,
I have setup a Netweaver Administration system and able to connect to the monitored java systems by storing the login in the NWA system.
I store the login in NWA system via
Visual Admin --> Cluster --> Services --> Destinations --> HTTP
and entering these info
name : sap.com/tcjejmxwsconnectorsp/<SID>/<host>
URL : http://<host>:<port>/WSConnector/Config1?style=document
and authentication is set to basic.
What I like to do however, is <u>not</u> to use Basic authentication but rather to use SAP logon ticket. Both my NWA system and monitored java system is setup to create and receive logon tickets. However, i kept getting JMX connection unauthorized error. I can't seem to be able to set it to use SAP Logon ticket.
Further reading, I realize that most of the NWA setup documents state to use the basic authentication.
So my question is :
1. Can NWA access the monitored sap java systems via SAP Logon Ticket.
2. Can a webservice setup to only accept Basic Authentication even though the J2EE engine is setup for SAP logon tickets too?
regards,
Laurence...
disclaimer:
The content of this message is my personal opinion only and, the statements I make here in no way represent my employer's position on the issue, nor am I authorized to speak on behalf of my employer on this matter.

figured out another way.

Access System Resources using Java Applet via Java Script

Hello
I can access my Applet public methods (and this methods access system resources) via Java Script if I do the following: System.setSecurityManager(null);However, I'm making this post because I don't like this solution.
Supposedly, setting the SM to null is like making the Applet (which is signed and was accepted by the user via a prompt from the browser) behave like a normal Java program that has no restrictions. (http://java.sun.com/docs/books/tutorial/essential/environment/security.html, second paragraph)
However, this feels like a workaround of something that is supposed to be there (the SM).
Also, if I make the methods invocation from inside the applet (using swing buttons and textboxes for example) I can use the standard SM without no problems.
From my readings, the problem regarding Java Script invocation, comes from the fact that the Java Script is not a secure (not signed) source (because you can invoke public methods the way you wish from it i guess) on the contrary to the applet methods invoked by the buttons.
Possible solutions I found in the web range from using the public static Object doPrivileged(PrivilegedAction action) method or imaginative things like creating new threads on the public method that call the private methods that access the system resources (supposedly because the new thread runs under the safe environment of the applet)
I almost got a glimpse of hope with this post http://forums.sun.com/thread.jspa?threadID=5325271&tstart=0
However, none of these solutions worked, the only results were with the setResourceManager(null)So, any one can contribute with a solution for this? Should I keep trying to find a solution other then the one I already have?
Regards
Cad

1. yes
2. yes
Note for 2. the converter will run the applet with SUN jre for sure if the user has IE.
IE will use the ActiveX technology to run the applet (as with Macromedia Flash).
For Netscape I am not sure, but I would think Netsape will use the plug in provided by
SUN.
Note for SUN jre 1.3. If this applet is to be used within a company that uses a proxy with
ntlm authentication the 1.3 applet cannot connect (to the Internet) through this proxy since
ntlm athentication is supported since j2re1.4.2_03. There is one version before that but
that one will pop up a window asking for the user's domain account and password wich
is both lame and crappy.
As for the IE settings, IE has a default setting that askes users the "do you trust"
queston for AciveX controls within the Internet securety zone (tools -> internet options
-> security).
Sincy anybody can make ActiveX controls (allso sign them) a user that has a problem
to find the "no" button will sooner or later install a malicuous ActiveX control (spy ware
or a virus).
If this user's desktop is within your company's network it will cause serious harm.
This is why most company's disable this by changing the default internet expolorer
settings. Since I assume you are writhing this applet to be used by a company I allso
assumed that company has someone to maintain the desktops. In that case I
assume that person would want to control the security within the SUN jre instead of
letting the user deside what to trust and what not.

How to access JDBC Resource registered in Sun Java System App Server ?

I want to create a stand-alone JDBC application with Java SE using Swing technologies and JNDI technology. The purpose of using JNDI technology is to avoid change of Java Source Code every time I move the database to different location. This Java application will be used in a standalone PC installed with Windows XP Professional with no LAN / WAN connection. Of course, Internet connection is available with the PC.
I use JavaDB to store the data tables and the location of the database is D:\E-DRIVE\SAPDEV. Tomorrow, if I move this database to C:\SAPDEV or any network drive, I do not want to change the Java Source code. I want to use JNDI which, if I am not wrong, helps developers to avoid manual change of Java source code whenever the database location is changed. Changes have to be made only in the JNDI Name which contains all relevant information about the database in order to get connection no matter where the database SAPDEV is stored; it can be placed under D:\E-DRIVE directory or C:\ directory of the hard disk. To implement my intention, I started developing Java application as per the steps mentioned below:
Step 1:
To proceed, first, I sought the help of Sun Java System Application Server Admin Console. I created JNDI object for Connection Pool using the menu path Common Tasks->Resources->JDBC->Connection Pools.
JNDI Name : ABAPRPY
Resource Type : javax.sql.DataSource
Datasource class : org.apache.derby.jdbc.ClientDataSource
Description : ABAP Program Repository
The Connection Pool creation has options for General, Advanced and Additional Settings tabs and I made all the settings relevant to the database I created in D:\E-DRIVE\SAPDEV.
To confirm whether the above settings are correct, I pressed the Ping push button which is available in the General tab of the connection pool creation screen. The system responded with the message Ping Succeeded.
Step 2:
I created a JDBC Resource using the menu path Common Tasks->Resources->JDBC->JDBC Resources.
JNDI Name : jdbc/SAPDEV
Pool Name : ABAPRPY
Description : Database Connection for SAPDEV database
Status : Enabled
I can see all the above settings recorded in the domain.xml which is placed in the folder
C:\Sun\AppServer\domains\domain1\config
Step 3:
I have made sure that Sun Java System Application Server is up and running in the background with JavaDB server. I created a Java Program making sure the following JAR files are included in the classpath:
appserv-admin.jar
appserv-ee.jar
appserv-rt.jar
javaee.jar
fscontext.jar
Plus, the lib directory of JDK 1.6 & C:\Sun\AppServer\domains\domain1\config
Source code of the program is as follows: I used NetBeans IDE to create my project file.
import java.util.logging.Level;
import java.util.logging.Logger;
import javax.naming.*;
import javax.activation.DataSource;
public class JNDILookup {
public static void main(String[] args) {
try {
InitialContext initCtx = new InitialContext();
DataSource ds = (DataSource) initCtx.lookup("java:comp/env/jdbc/sapdev>");
} catch (NamingException ex) {
Logger.getLogger(JNDILookup.class.getName()).log(Level.SEVERE, null, ex);
When I attempted to compile the above program in NetBeans IDE ,no compilation error reported. But while executing the program, I got the following run-time error message:
SEVERE: null
javax.naming.NameNotFoundException: No object bound for java:comp/env/jdbc/sapdev> [Root exception is java.lang.NullPointerException]
at com.sun.enterprise.naming.java.javaURLContext.lookup(javaURLContext.java:224)
at com.sun.enterprise.naming.SerialContext.lookup(SerialContext.java:396)
at javax.naming.InitialContext.lookup(InitialContext.java:392)
at SAPConnect.JNDILookup.main(JNDILookup.java:21)
Caused by: java.lang.NullPointerException
at com.sun.enterprise.naming.java.javaURLContext.lookup(javaURLContext.java:173)
... 3 more
Now, I want to come out of this situation; at the same time, I want to preserve the settings I have made in the Sun Java System Application Server Admin Console. That is, I want to programmatically access the data source using Connection Pool created in Sun Java System Application Server Admin Console.
I request dear forum members to provide me an appropriate solution.
Thanks and regards,
K. Rangarajan.

jay44 wrote:
Bare in mind I am attempting the context.lookup() from inside the container (my code is in a session bean). I have accessed the server and have my bean "say hello" first to verify the bean works OK, then I call a method with this rather standard code:
String jndiDataSourceName ="Second_EJB_Module_DataBase";
Logger.getLogger(DynamicPU.class.getName()).log(Level.INFO,"Programatically acquiring JNDI DataDource: "+ jndiDataSourceName);
InitialContext ctx;
try {
ctx = new InitialContext();
ds =(DataSource)ctx.lookup("java:comp/env/jdbc/"+jndiDataSourceName);
} catch (NamingException ex) {
Logger.getLogger(DynamicPU.class.getName()).log(Level.SEVERE, null, ex);
return "Exception generated trying to preform JDBC DataSource lookup. \n"+ex.toString();
But when I run the code the server log shows the initial context is created Ok, but an exception is thrown becasue the resource name is not found:
(and i have tried vriations of ctx.lookup("jdbc/"+jndiDataSourceName) etc etc
You are fine here. It works in container because the InitialContext properties have been supplied already. That was the link I forwarded earlier. The InitialContext you create locally needs to locate the container JNDI. That is what the properties specify.
Where I am confused is where you indicate the stack below is from the server log. So, you initiate a standalone (java main method) application, create an InitialContext, and you see the results in your app server log?
LDR5010: All ejb(s) of [EJB_Module_1] loaded successfully!
Programatically acquiring JNDI DataDource: Second_EJB_Module_DataBase
The log message is null.
javax.naming.NameNotFoundException: Second_EJB_Module_DataBase not found
at com.sun.enterprise.naming.TransientContext.doLookup(TransientContext.java:216)
at com.sun.enterprise.naming.TransientContext.lookup(TransientContext.java:188)
at com.sun.enterprise.naming.TransientContext.lookup(TransientContext.java:192)...
at com.sun.corba.ee.impl.orbutil.threadpool.ThreadPoolImpl$WorkerThread.run(ThreadPoolImpl.java:555)
This is strange since I can see this resource (a JDBC connection named Second_EJB_Module_DataBase) is configured on the server from the server's admin console.
That is why you can obtain a lookup from within the container (app server).
For this lookup to work it may be that one must map the name inside an ejb-jar.xml deployed with the application, but I have also read some resources like jdbc connection should have a default name. Does anyone know if my lookup() should work without using an ejb-jar.xml mfile to explcitly map the reource for my application?
Both EBJ's and data sources can be referenced via JNDI. It's a remote lookup (that is normally optimized if it is running in the same JVM). You should not have any dependencies on a JDBC data source being set-up on ejb-jar.xml. That file can of course impact your EJB's. However, data sources are normally set-up on a container-specific basis (e.g., you probably did it through a console, but there is a spec somewhere about how to set up a data source via a resource the app server looks for; it varies from app server to app server). However, once you have that container-specific data source set-up, JNDI operates vendor-neutral. You should be able to take the code above and move it to JBoss or Weblogic or Tomcat or whatever (this is an ideal, in practice, the vendors sometimes put a data source in a name you would not expect, but again, you can use their JMX console to see what the JNDI name is).
(As I stated above if I have to use a deployment discriptor to get at this JNDI datasource, then solution is not "programmatic" as newly configured datasources could not be accessed without redeploying the entire application).
As JSchell alluded to, you will always have at least something vendor-specific. JNDI itself (the code you wrote) is totally portable. However, you have to set the various JNDI environment properties to a given vendor's spec. Ideally, you should not need a vendor's actual InitialContext application, but it's a possibility. Once you can safely cast to Context, you should be vendor-neutral (if not, demand your money back).
So that is exactly where I am stuck, trying to get the lookup to work and wondering if it should work without and xml file mapping the resource for my app.
What we ended up doing for standalone was to provide our own JNDI. If you look at the open source project JOTM, there are examples on how to use that with XBean (if integrating with Spring, as we did), you can easily set up a data source that runs standalone exactly as you get in the container. Another benefit is you get full JTA/JTS support and the ability to run XA transactions. (This might all be alphabet soup, but the app server gives it to you, and this is the way we ended up doing the same: JNDI + JTA + JTS + XA). It ends up the same application code uses a "vanilla" InitialContext and all we have to do is write one or two xml files (one for our app server, a couple for JOTM), and our actual code works the same.
I still think you have a shot at getting to the container's JNDI, just not using their full-blown app server JAR.
I think there must be a simple way to do this with an ejb-jar.xml, I am no expert in JNDI, I could be missing something simple, I will keep at it and post an answer here if I come up with it.
Thanks, jayIt is simple to code. Getting it to integrate with your app server, yes, that can be challenging. But it has nothing to do with EJB's. Write a simple test. Using nothing but DataSource and InitialContext. Let us know where you get stuck.
- Saish

Window 8.1 system unable to access network shares via VPN connection

Is there something inherent to Windows 8.1 that prevents it from accessing shares on a domain?
I know that it cannot join a domain, but does that also mean that it cannot access shares which are on a domain?
My problem is that I have several user that are running windows 8.1 that are connecting to our network via a VPN.
The users have domain accounts but their computers as windows 8.1 cannot joined to the domain.
So to access network shares they have to use their domain credentials to create a VPN connection.
Once connected the user can RDP to systems on the domain using their domain accounts, so I know that their user names/passwords and permissions are correct. They can access these systems using the computer name, so I don't feel that I have a DNS issue.
They can see the shares on our file server, but when they try to access their departments shared file, they receive an access denied message. There are a few shares that are completely wide open, shared to all users and all departments but they cannot access
those shares either.
You can ping the file server, from the the client when they are connected to the VPN but you just cannot access any of the shares.
So...
I am thinking that it has something to do with windows 8.1 and not being able to join a domain, but I cannot find anything to explicitly support this thought.
Other users running a variety different OS (windows 7, OSX, Linux) can all access the shares without any problems via the VPN, so I am a little stumped.

I have done some more testing and oddly enough I can map a drive if I use the IPaddress, but not the computer name, when checking the check box "connect using different credentials"and providing they users domain credentials.
This seems to point to a DNS issue, one would think, but I can hit the file share server by name \\fileserver.dev.lan
I can see all the shares, so dns seems to be fine right?
So I don't understand why I can map a drive using do the IPaddress and not the machine name, but yet I can see and ping the server by name?
When I try to create a mapped drive by machine name I receive the following message:
Windows cannot access \\fileserver.dev.lan\all
You do not have permissions to access \\fileserver.dev.lan. contact your network administrator to request access.
But if I use the \\x.x.x.x\all using the very same user and password I get connected with no problem.
This only seems to happen on windows 8.1, which leads me to think that has something to do with OS.
I am thinking about upgrading to windows 8.1 pro, but I don't want to go though the hassle and expanse is the OS is not the problem.

Access local disk via Java Web Start??

HI all ,
I had saw the JWS document.
It indicate we can't access local disk via JWS in that Security.
If I need to access local disk by command, does anyone have better suggestion.
And can I run *.bat via Java Web Start?
Thanks very much for your help.
Morris

I do the both thing but still don't access to Local disk.
I just write a simple test class within extend another that create a file (and of course sign it)but still can't create a file Local disk. this MAKE ME MAD and LOOSE MY JOB .
here is my JNLP file:
<?xml version="1.0" encoding="utf-8"?>

<jnlp
spec="1.0+"
codebase="file:///d:/"
href="test.jnlp">
<information>
<title>Me</title>
<vendor>myself</vendor>
<homepage href="http://www.me.com"/>
<description> test test test</description>
<description kind="short">Test creatin of log file on client </description>
</information>
<offline-allowed/>
<security>
<all-permissions/>
</security>
<resources>
<j2se version="1.4"/>
<jar href="test2.jar"/>
</resources>
<application-desc main-class="secMan.Test"/>
</jnlp>

Not able to start the Sun Java System Access Manager 7 Console

Hi All,
I have successfully installed the Sun Java System Portal Server 7 on RHEL 4.0.The problem I am facing is not able to start the Sun Java System Access Manager 7 Console while accessing the URL: http://fqdn:8080/amconsole
As soon as I try to access this URL it gives me following Excepiton:::::::
type Exception report
message
description The server encountered an internal error () that prevented it from fulfilling this request.
exception
com.iplanet.jato.NavigationException: Exception encountered during forward
Root cause = [java.lang.NullPointerException]
     com.iplanet.jato.view.ViewBeanBase.forward(ViewBeanBase.java:386)
     com.iplanet.jato.view.ViewBeanBase.forwardTo(ViewBeanBase.java:267)
     com.iplanet.am.console.base.ConsoleServletBase.onUncaughtException(ConsoleServletBase.java:338)
     com.iplanet.jato.ApplicationServletBase.fireUncaughtException(ApplicationServletBase.java:1023)
     com.iplanet.jato.ApplicationServletBase.processRequest(ApplicationServletBase.java:469)
     com.iplanet.jato.ApplicationServletBase.doPost(ApplicationServletBase.java:324)
     com.iplanet.jato.ApplicationServletBase.doGet(ApplicationServletBase.java:294)
     javax.servlet.http.HttpServlet.service(HttpServlet.java:747)
     javax.servlet.http.HttpServlet.service(HttpServlet.java:860)
     sun.reflect.GeneratedMethodAccessor106.invoke(Unknown Source)
     sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     java.lang.reflect.Method.invoke(Method.java:585)
     org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:249)
     java.security.AccessController.doPrivileged(Native Method)
     javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
     org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:282)
     org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:165)
If anyone have any idea about the cause of this error,please let me know.All suggestions are welcome .
Thanx and Regards,
Chirag.

Hi All,
I am having exactly the same problem with the same stack trace. Has anybody have an idea how to fix this?
I have downloaded the Java Identity Management Suite.(java_es-5-identsuite-ga-windows-x86.zip) The first time installation was fine and I was able to bring the Access Manager console. I was able to create users groups etc.
However, when I uninstalled and installed it again, I got exactly the same error described in the thread. Running "amserver start" and "amserver restart" did not help. I did the installation one more time
but again I got the same error.
Thanks for the help.
celikkan

Integrating WebSphere Portal Server with Sun Java System Access Manager

Hi All,
Is it possible to Integrate WebSphere Portal Server with Sun java System Access Manager?. If so plz send me any doc or web site link for the same.
Thanks in Advance
Rgds,
Lessly J

Rushi-Reliance wrote:
Kindly let us know how to proceed further as we are waiiting some reply from your team.As I already advised in your previous posting (http://forums.sun.com/thread.jspa?threadID=5359095), you are best off re-installing solaris from scratch and installing Communication Suite 6 update 1 if you cannot get Access Manager 7.1 configured.
Regards
Shane.

Tivoli Access Manager 6.0 with Sun Java System Directory 6.3

Hi,
We have been using Tivoli Access Manager 6.0 with Sun Java System Directory 6.3 .
Using IBM TAM Java API we can administer the user creation but the API provide support only to create user with required attribute as user name, password, description, setAccoutntvalid etc.
But Sun Java System Directory 6.3 contains the many attributes as just to name a few...
First Name (givenname), User ID (uid),Password (userPassword), Confirm Password
E-mail (mail), Telephone Number (telephoneNumber), Country (c),Fax Number (facsimileTelephoneNumber), Locality (l), Organization (o), Organizational Unit (ou), accessHint, accountHint, departmentNumber, description, destinationIndicator, displayName, employeeNumber ETC...
Now My Issue is if we need to add the values for other attributes as "accessHint" , "employeeNumber" etc, then how can we acheive using IBM TAM Java API or is there any other way.
Thanks for your kind help...

Looks like the attribute sunIdentityServerDiscoEntries is defined twice in the schema. Run the following and see where it is defined for the second time.
# cd /var/opt/SUNWdsee/dsins1/config/schema
# grep -w sunIdentityServerDiscoEntries *.ldif | grep -iv objectclasses
Edited by: etst123 on Mar 3, 2009 1:28 PM

Accessing Java webservice (XML over http) via WCF or HTTP adapter with content-type and authorization HTTP headers with POST method

Hi Team,
I need to access Java web service which is simple service and accepts and returns XML over HTTP. No credentials are needed to access the service. We need to pass following two HTTP headers (Content-Type and Authorization) along with XML request message:
<GetStatus> message is being constructed in the orchestration and URI is constant to access.
Which adapter shall I use to get the response back? I tried using WCF-WSHttp with Security Mode = Transport, and different options of client credential types but every time, error returned stating:
System.Net.WebException:
The HTTP request is unauthorized with client authentication scheme 'Basic'. The
authentication header received from the server was 'Basic realm='.
Authentication failed for principal Basic. Message payload is of type:
String
In Fiddler, request looks line following
POST <https://URL/GetServiceReopnse HTTP/1.1
Content-Type: application/xml
Authorization: Basic cmVmU3RhdHN2Y19kgeRfsdfs=
Host: <Server name>
<GetStatus XMLNS="http://server.com/.....">
<OrgId>232323</OrgId>
<HubId>3232342323</HubId>
</GetStatus>
MMK-007

First, you should not use the HTTP Adapter because it's been deprecated and replaced by WCF.
Start with the WCF-Custom Adapter and select the customBinding.
You should start with the textMessageEncoder and httpTransport and go from there.

Access a java card via two logical channels

Dear all;
I was wondering if someone managed to do following setup(because it doesn't work for me):
I have an android phone with a sd-card slot in which I've inserted a java card. I can open a logical channel from my android phone to the java card. Since the java card also suports T=CL, I'm also able to open a logical channel from a pc to the java card via a contactless interface (with a reader that is connected to the pc). But what seams to be impossible is opening the two logical channels simultaniously. So I can't open simultaniously a logical channel from the android phone to the java card and a logical channel via the contactless interface.
Did anyone have succes with this setup? (I made the applet multiselectable)
greets,
JT

If you are trying to connect to the card over both the NFC controller (card emulation) and the device interface from Android at the same time you will probably have a race condition. On the phones I have used, you can only have one active at time.
Shane

Sun Java System Portal Server 6.0 FAQs

Sun Java System Portal Server 6.0 FAQs.
Author: Sanjeev Agarwal
Q. How to connect to external URLs from Sun ONE Portal Server? I want to use URL Scrapper for some of external sites/URLs.
Ans:
You can connect to external URLs if you have a Proxy Server running.
If you are using Web Server addition of Sun ONE the Portal Server then
go to /opt/SUNWam/servers/https-hostname.domainname/config/ dir
In the jvm12.conf file, enter the followings:
http.proxyHost=proxyservername.domainname
http.proxyPort=80 (or the appropriate proxy server port number)
https.proxyHost=proxyservername.domainname
https.proxyPort=80 (or the appropriate proxy server port number)
If you are using Sun ONE AppServer addition of Sun ONE Portal Server then
go to /var/opt/SUNWappserver/domains/domain1/<server-instance>/config dir
In the server.xml file, enter the followings:
<jvm-options>-Dhttp.proxyHost=proxyservername.domainname </jvm-options>
<jvm-options>-Dhttp.proxyPort=80 (or the appropriate proxy server port number) </jvm-options>
<jvm-options>-Dhttps.proxyHost=proxyservername.domainname </jvm-options>
<jvm-options>-Dhttps.proxyPort=80 (or the appropriate proxy server port number) </jvm-options>
After this modification restart the server.
Q. Explain all the processes (solaris 8 and S1 Portal Server 6.0) which runs when I start the Sun ONE Portal Server.
Ans.
These are the processes that a running Portal Server installation (Sun ONE WebServer addition, without SRAP) generally has by default.
1. Directory server processes:
- ns-slapd (LDAP server instance)
- uxwdog (admin server process) (parent process)
--- ns-httpd
----- ns-httpd
2. Auth Helper processes:
- doUnix
3. Web-Server/Identity-Server/Portal-Server processes:
As the Portal Server and Identity Server runs as web application on the Web Server, so they share the same JVM and processes.
- uxwdog (web server admin server process) (parent process)
--- ns-httpd
----- ns-httpd
(for each web server instance)
- uxwdog (parent process)
- ns-httpd
- ns-httpd
or (in case of MaxProc=n )
- uxwdog (parent process)
--- ns-httpd
----- ns-httpd
----- ns-httpd
----- n
Q. I have created a custom Provider but getting this error when I access the desktop, what do I do?
> error in the desktop.debug file:
> ERROR: DesktopServlet.handleException()
> java.util.MissingResourceException: Can't find bundle for base name CustomTabContainerProvider,
Ans:
It needs a resource bundle for the custom provider. You need to create a file CustomTabContainerProvider.properties (as mentioned in the error message) and put it into the /etc/opt/desktop/classes directory. If you are not using any properties defined in this resource file then it can be a empty file. Have a look on the properties files that bundled containerProviders uses in dir <portal-install-dir>/SUNWps/web-apps/https-<host.domain>/portal/WEB-INF/classes.
As you are extending JSPTabContainerProvider class, you can just copy the file JSPTabContainerProvider.properties from the above directory after renaming it to the <defined-provider-name>.properties (in your case CustomTabContainerProvider.properties) and move it into /etc/opt/desktop/classes directory.
Q. what is actually multiple instances of Portal Server means?
Ans:
Multiple instance of Portal Server means, you will have more http listeners for the same desktop contents and the same identity profiles stored in a single Directory Server which all the instances share.
In simple words you can have your Portal Server listening on different http ports, but uses same configuration, desktop and identities.
It can help you to share the load for Portal Server http requests. The alternate methods are to create more web server virtual server processes (maxProc=n, but in this case the listening port will be 1 only) or use some hardware load balancer.
You can achieve more from multiple instances if you have a multi level organization, you can change the look and feel of all the instances, images, services, components and can assign each instance to different organization or sub-organization.
Q. How do I check the availability of the Sun ONE Portal Server/Identity Server services.
Ans:
You can check the availability of Sun ONE Identity Server services from following urls.
http://<host.domainname>:<port>/amserver/sessionservice
http://<host.domainname>:<port>/amserver/loggingservice
To know the availability of components of Sun ONE Portal Server like Desktop/providers/Rewriter/Netmail you have to login into desktop. These are not services, but just the programming identities which will work if your Web Server and Identity Server is running.
Just go to URL http://<server>:<port>/portal/dt , if it shows up that means your portal server is fine, and these entities will work for sure.
Q. I am able to add the yahoo channels to existing users. But I am getting the weather for London not for local New Jersey. My language pref is to en|en_US and also the server is the default U.S server and not europe. How do I add the cities I want to see on weather channel?
Ans:
A Portal user himself (after login) can select what cities he want to see in weather channel.
Steps:
- click the edit button of weather channel
- click on the area you belong to from Available Sections
- select the cities from Available Cities select box and add them to Your Choices.
- click finished from select city page and then again click finished from select area page.
It will come back to the Portal Desktop and you will see all the cities you have selected in the weather channel.
Q. How to use getContent() method to use in custom jsp providers (developed by ourselves) so that it can be used to retrieve a jsp page. I have already placed the JSP file in the directory structure /etc/opt/SUNWps/desktop/default/channel_dir. But still the jsp is not being displayed.
Ans:
You don't have to do anything in the custom JSPProvider's getContent method except the call { return super.getContent(request,response); } . If all you want is just to show your jsp, then create a channel from the default JSPProvider, and edit the property contentPage of that channel from samplecontent.jsp to your jsp name, save the changes and login again. You should see your JSP.
Q. I want to remove all the buttons (help/edit etc.) from all the channels/one particular channel in my desktop?
Ans:
You can hide any buttons you want from any channel.
These steps show how to hide all the buttons.
1. Create a channel say "myNetlet" from netlet provider.
2. Set the channel title to "myNetlet"
3. Go to the dir /etc/opt/SUNWps/desktop/default/JSPTableContainerProvider and edit the file providerCommands.jsp, and modify the last line :
from :
<%=minMaximizeCommand%><%=helpCommand%><%=editCommand%><%=detachAtachCommand%><%=removeCommand%>
to:
<% if ( !(title.equals("myNetlet"))){ %><%=minMaximizeCommand%><%=helpCommand%><%=editCommand%><%=detachAtachCommand%><%=removeCommand%><% } %>
4. Clean the dir mentioned below which contains compiled JSPs. /var/opt/SUNWps/https-<host>.<domain>/portal/tmp/_jsps/_etc/_opt/_SUNWps/_desktop/_default_en/_JSPTableContainerProvider/_html and reload the page.
Relogin, and you would not see any buttons on "myNetlet" channel. You can customize this logic as per your needs.
Q. How to change the title of SampleJSP Channel. I tried to change the channel properties title value via iplanet directory Server Access Management GUI. But it is not getting reflected.
Ans:
Through Admin console you can change the channel property "title", and as soon as you refresh the page (Shift reload) of relogin in the portal it get's reflected.
The reason to this problem may be due to the channel property "title" is having "propagate" value as false and you are setting the channel title in the org level display profile not in the user level display profile.
So better you change the channel name in user's display profile also.
For this login into admin console and go to :
- View: "User Management" -> click on organization -> Show: Users
- click on the blue arrow of that user
- click on Edit in section Desktop (this will open a window)
- then change the channel properties same way you do for Organization display profile.
Q. Login Problem with SunOne Portal 6.0.
I was able to download and install sun one portal 6 on Solaris 8. The sample portal page came up after installation. However whenever I try to login to the Login channel with "amadmin" and the passphrase I used during installation, it takes me to another page - iPlanet/LDAP authentication page. Here I tried using the same login, but fails every time (the same login page appears). The url that shows is "http://<hostname>/amserver/login?module=dproadmin&goto=/amconsole/base/AMAdminFrame"
I tried registering myself as a new user as well. This too fails.
Ans:
Make sure you are giving fully qualifying the hostname in the url which invoked the desktop. This in fact is documented in the administration documentation. If the hostname is not fully-qualified, the login page goes into an endless mode. Again, the correct url is "http://<fully-qualified-hostname>/portal". Once you get to the desktop, the login and the new user registration works.
Q. How to send variables/parameters from 1 app to another app deployed on Sun ONE Portal Server? It may be the apps or different JSPs of JSP provider channel.
How to achieve inter channel communication in Sun ONE Portal Server?
Ans:
You can use servlet context object or session, or may be the request object itself to store the information from one channel and use that in another channel. The use of either of these 3 approaches may depend on your requirements. Using session, the information will be available to that user's channels only, using request, the information will be available for that user and that request only and by using ServletContext you can share the information across users and sessions. You can obtain DesktopServlet's ServletContext object inside JSP/JSPProvider.
Q. I am trying to modify the default desktop JSPs in TableContainerProvider and TabCotntainerProvider dirs, but it is not picking my modified JSPs ? what do I do?
Ans:
One easiest way to 100% ensure that it updates all your new jsp pages is to remove all the compiled jsps so that with next request the Sun ONE Portal Server compiles all the jsps and will make sure that your modification will be taken care of in next request.
Go to /var/opt/SUNWps/https-<instance_name>/portal/tmp/_jsp/_etc/_opt/_SUNWps/_desktop/_default_<locale>/ and remove everything. and access the Portal server, it will be little slow as it has to compile all the JSPs again. Here you will find directories in the name of Containers and Channels, so if you are modifying any particular Container/Channel you can just delete that only. This approach can help a lot during development time.
Q. What is the location of compiled JSPs in Sun ONE portal Server and what servlet spec does it supports?
Ans: The Portal server 6.0 runs on Sun ONE Web Server 6.0 sp2, which supports only jdk 1.3 and servlet spec 2.2 only. The Sun ONE Portal Server keeps the compiled jsps of desktop and channels in : /var/opt/SUNWps/https-<instance_name>/portal/tmp/_jsp/_etc/_opt/_SUNWps/_desktop/_default_<locale>/ dir as per the channels/container names.
Servlet 2.3 is supported if you run the Portal Server edition that runs on Sun ONE Application Server 7.0.
Q. How do I change jdk for Sun ONE Portal Server to another jdk? I want to change the JDK of only one of my Portal Server instances, is it possible? how?
Ans:
Yes you can achieve both.
A. To change the JDK for all the server instances:
Open <portal-install-dir>/SUNWam/servers/https-admserv/start-jvm file and modify the first line
NSES_JDK=/usr/java_1.3.1_04; export NSES_JDK
to
NSES_JDK=<your-jdk-location> ; export NSES_JDK
then open <portal-install-dir>/SUNWam/servers/https-<instance-name>/config/jvm12.conf file of all the server instances and add a line
jvm.option=-server after the first line
B. To change the JDK for a particular server instances:
Make a another copy of the start-jvm file rename it and modify the jdk location in it as mentioned above.
Open the start script from <portal-install-dir>/SUNWam/servers/https-<instance-name> dir and modify these lines :
if test -r {SERVER_ROOT}/https-admserv/start-*
then
for STARTSCRIPT in {SERVER_ROOT}/https-admserv/start-*
modify this to
if test -r {SERVER_ROOT}/https-admserv/<changed_name_of_start-jvm-file>
then
for STARTSCRIPT in {SERVER_ROOT}/https-admserv/<changed_name_of_start-jvm-file>
Note: As Portal Server 6.0 uses Web server 6.0 sp2, jdk 1.4 is not supported.
Q. How do I create a custom login page or a link, which will just log me into the portal server.
Ans:
You can create a custom page in your jsp page, just add this portion of html into your web page :
<FORM action="http://<server>:<port>/amserver/login?module=<login-module>&page=1" method=post name=login_form2 target=_top>
Login page using <login-module><br>
<P>Enter UserId<BR><INPUT name=TOKEN0 size=22></P>
<P>Enter Password<BR><INPUT name=TOKEN1 size=22 type=password></P>
<P><INPUT name=Submit type=submit value=Submit> </P>
</FORM>
The <login-module> can be LDAP or Unix or Membership which ever you have enabled. Or instead of this you can create a link. For example for LDAP auth module :
"<a href="http://<server>:<port>/amserver/login?module=LDAP&page=1&TOKEN0=user&TOKEN1=password" target=_top> Login into Portal </a>"
where user and password are the user credential for the portal server.
Q. Can I install a portal server pointing to another Identity server? I want to install few postal servers (on different machines) pointing to same identity server, is it possible?
Ans:
No, right now the Sun ONE Portal Server is tightly integrated with Sun ONE Identity Server so you can't just install only Sun ONE Portal Server and point it to another Sun ONE Identity Server. You can have a common Directory server if you want.
Q. I have an application which takes input in from anonymous user and then to complete the request the user than has to login. I am having problem in passing the taken input from anonymous page to logged in user. all the request parameters are lost when I log in. How do i get the request parameters after I log in
Ans:
You can create a custom login page and submit the form to "/amserver/login" with a hidden parameter "goto" through which you basically specify which url to go after you log in. So you can use this mechanism to create a query string with all your request parameters you want to pass after login. For example:
You can create a jsp which take few inputs from user and to complete the request you have to login so it posts the input form to a login jsp and stores the parameters taken from user in a hidden field (goto) :
<FORM action="/amserver/login?module=LDAP&page=1" method=post name=login_form2 target=_top>
Login page using LDAP<br>
<P>Enter UserId<BR><INPUT name=TOKEN0 size=22></P>
<P>Enter Password<BR><INPUT name=TOKEN1 size=22 type=password></P>
<INPUT TYPE=HIDDEN NAME="goto" VALUE="/portal/dt?param1=<%=request.getParameter("param1")%>&param2=<%=request.getParameter("param2")%>">
<P><INPUT name=Submit type=submit value=Submit> </P>
</FORM>
After you login through this page both the param1 and param 2 will be available in the request object after you login and you can retrieve them in your application or jsp.
Q. I have few System.out.println in my jsp which i am using in my JSP provider channel, but when I look at the portal server's /var/opt/SUNWam/debug/desktop.debug file, none are there. I looked at the web server's access and error logs too, but it is not there also. Can somebody tell me how do it get those ? Do we have any other mechanism to put debug logs ?
Ans
By default the binary which web server runs is uxwdog which eats up System.out.println output. If you want to see the System.out.println then you need to change the product binary from the start script of the portal server instance.
- Go to <portal-install-dir>/SUNWam/servers/https-<instance-name> and open the start script
- Change the PRODUCT_BIN=uxwdog to PRODUCT_BIN=ns-httpd , save the file
- Run the script ./start to start the portal server
Note : with ns-httpd ON the server will not leave that shell, and in the same window/shell you will be able to see all your System.out.println statements. To close the server you have to kill the server process with "kill -9 pids" command
Alternate way is to use api inside your application or jsp:
<%@page import="com.sun.portal.providers.jsp.JSPProvider, com.sun.portal.providers.*, com.sun.portal.providers.containers.*, com.sun.portal.providers.context.*" %>
<% JSPProvider p=(JSPProvider)pageContext.getAttribute("JSPProvider");
ProviderContext pc = p.getProviderContext(); %>
<%-- after that you can use these lines any where in your jsp --%>
<%
pc.debugError("your error msg");
pc.debugMessage("your msg");
pc.debugWarning("your warning msg");
%>
The particular mgs will be shwon in /var/opt/SUNWam/debug/desktop.debug file as per your "debugLevel" parameter setting in /etc/opt/SUNWps/desktop/desktopconfig.properties file. By default the debugLevel is set to error so only pc.debugError("error msg") will be shown.
Q. Multipart form (file upload) processing in providers? Is it supported
Ans:
The Sun ONE Portal Server's DesktopServlet does not have the ability to process a request with the content encoding type of multipart/form-data. DesktopServlet does not pass the input stream for the request on to the Provider.
To accomplish handling of multipart/form-data type requests, it is necessary to create a companion servlet or JSP that process the multipart/form-data. This servlet can then pass control back to the Portal channel. The data from the file can be shared between the servlet and the provider by using static Java members or by storing the data in a back-end database and then passing a reference to the data over to the provider.
Q. After installing the Portal Server I am trying to login as admin, but it is failing and coming back to login page every time. How do I login?
Ans:
The Default Admin user is 'amadmin' and the password is the PASSPHRASE you give during Portal Server installation. Try login using these credentials.
Also in the browser give the complete URL for the Portal Server like : Http://<myhost>.<mydomain>:<port>/amserver/login or Http://<myhost>.<mydomain>:<port>/amconsole. You can't login into portal server's IDSAME console by giving IP Address or just the hostname, also your machine should be listed in the DNS server so that it can resolve the name.
Q. I installed Sun ONE Portal Server 6.0 some time back, and now I want to know all the installation parameters and user/passwords for whole portal installation. How do I do that?
Ans:
The Default Admin user is 'amadmin' and the password is the PASSPHRASE you give during Portal Server installation. Also in the browser give the complete URL for the Portal Server like : Http://<myhost>.<mydomain>:<port>/amserver/login or Http://<myhost>.<mydomain>:<port>/amconsole. You can't login into portal server's IDSAME console by giving IP Address or just the hostname, also your machine should be listed in the DNS server so that it can resolve the name.
In case you have forgotten the port numbers and PASSPHRASE that you give during installation, you still can see all the information for each component of your Portal Server Installation. The Portal server and it's components like Directory Server, Web Server and IDSAME are installed as Solaris package so the system has all the information for these packages.
Portal Server : See file /var/sadm/pkg/SUNWps/pkginfo
Directory Server : See files /var/sadm/pkg/SUNWamds/pkginfo and /var/sadm/pkg/SUNWamdsc/pkginfo
Web Server : See file /var/sadm/pkg/SUNWamws/pkginfo
Identity Server : See file /var/sadm/pkg/SUNWamsam/pkginfo
Note: In any case you should never edit/modify these files.
Q. Controlling the display of the help (?) button.
Where are the links/image elements defined for the help/edit/minimize buttons? the leafWrapper.jsp pulls the hashtable out of the HttpRequest, and that hashtable is being used by providerCommands.jsp:
Hashtable commands = (Hashtable)request.getAttribute("provider_cmds");
Any idea where this is being set?
Ans:
- You can remove the help/edit button of any channel by adding the line into the Channel's properties by editing the Xml of display profile in the admin console.
<String name="helpURL" value="" advanced="false" merge="replace" lock="false" propagate="true"/>
<Boolean name="isEditable" value="false" advanced="false" merge="replace" lock="false" propagate="true"/>
The Attribute 'provider_cmds' is set into /etc/opt/SUNWps/desktop/default/JSPTableContainerProvider/tablecolumn.jsp :
<dttable:getProviderCommand id="provider_cmds" scope="request" />, and after that only the leafwrapper.jsp is included, but the Hashtable is generated by a class com.sun.portal.providers.util.ProviderCommands.java and made available through taglib classes. So you can't change the generated contents/string in the Hashtable.
But you can change the default 'alt' text displayed and the images linked to the help/edit icons. As this modification is at Provider level, it will change the icons for all the channels in the desktop.
Please see the file:
/opt/SUNWps/web-apps/https-<host>.<domain>/portal/WEB-INF/classes/JSPTABLEContainerProvider.properties.
Here you will find the mapping. The image location are given from the context root of portal server which is by default : /opt/SUNWps/web-apps/https-<host>.<domain>/portal.
Q. I have a number of web applications needed to integrate to portal server. Any pointers or tips of what my option is?
Ans:
You can very well integrate all your web application with Portal server. Portal Server 6.0 has web container same as Sun ONE web server 6.0 Sp2, which runs on Jdk-1.3.
If your web applications are just Servlets/Jsps then you can very well port them on Portal server's webserver which supports war module deployment. (infect for Web server the Portal server and Identity server is like a war module.)
There can be two possibilities in this case, either you put the whole of your application on portal server and make the link available into the desktop via 'Application Provider Channels' or you can create a client to your web application into portal server.
If your web application is on Sun ONE Application server 7.0 and needs authentication, you can also have SSO. If you just want to show the link of your web application into desktop then you can either use URL Scrapper to show the first page of your web application or use Bookmark channel to provide just the url.
The easiest way to make a client of your web application is to use JSP Channel using JSPProvider and put your logic into the samplecontents.jsp file or you can create your own custom Provider extending JSPProvider. There can be a lot of different configurations, depending on the web application you want to integrate and your needs
Q. I removed few channels from the org level display profile but still they are coming to the desktop of users, I had accessed the desktop before. why?
Ans:
If you still see any channel after you remove it from the display profile at organization lever, that means you have to edit the user's display profile. So go to admin console and select User from Show: menu and click on the blue arrow near the user. In the right frame under the 'Desktop' category click on the Edit link (right side). This will open user's display profile in a window. Now edit it as per your requirements.

Unfortunately Web Server 6.0SP2 is no longer available for download.
If you must use Web Server 6.0, you should use the most current Service Pack. It is backward compatible and contains many performance and security fixes.

Accessing Java System - Via SAPRouter

Similar Messages

Maybe you are looking for