Anonymous access with named users

Hi!
I am trying to set up anonymous access with named users on EP6 SP9. I am using Database only as UME Data storage. I have applied the note #728106, since most of the content is html-pages on the KM.
I defined the UME settings ume.login.guest_user.uniqueids=anon01,anon02
ume.login.anonymous_user.mode=1
Restarted the server and attached user account into roles (which contain only anonymous content).
I then accessed the page /irj/portal/anonymous (or the longer version /irj/servlet/prt/portal/prtroot/com.sap.portal.navigation.portallauncher.anonymous) and everything was fine. However I wasn't able to get the portal working with /irj/portal/anonymous?j_user=anon02. I always received Portal runtime error. From the logs I saw that the portal tried to access as user anon01.
When I changed the UME settings into
ume.login.guest_user.uniqueids=anon02,anon01
I was able to get the anon02 user account working, but not /irj/portal/anonymous?j_user=anon01. From the logs I saw that the portal tried to access as user anon02.
Both user account are using the same rule, portal desktop and framework page. I can see the correct (and different) TLN for each user only in the content are I see this error.
Any ideas?
Thanks,
Petri

I need to switch between two named anonymous users.
It works fine using http://<server>:<port>/irj/portal?j_user=<first_Guest_user>&j_password=<pwd_of_first_Guest_user>&login_submit=true
Then to switch to the other user I must do a log-off or close the browser and input the other url http://<server>:<port>/irj/portal?j_user=<second_Guest_user>&j_password=<pwd_of_second_Guest_user>&login_submit=true
I developed a servlet to switch the users using IAuthentication (method forceLogoffUser) and then redirect to the respective url. But when I call forceLogoffUser method I get a login screen and the script stop executing. Passing 'returnURL' parameter did not work.
Parameters:
req - HttpServletRequest
resp - HttpServletResponse
returnURL - url to use to logon again.
Is there a way to switch automaticaly between the two named anonymous users?

Similar Messages

Troubleshooting SharePoint Auth prompts and Anonymous access with Fiddler - Is there a better way?

I've troubleshooted (troubleshot?) many SharePoint sites for anonymous and random authentication prompts. It usually winds up being something not checked in or published, but sometimes it's something more random, like a survey list based on a template from
another site prompting for auth even when configured for anonymous access, but when created manually, question by question, works fine for anonymous, and other random things I've run into in the past. In these situations, I almost always break out Fiddler,
and then almost always move on to the tried and true method of "trying different things" until getting it to work.
Because Fiddler almost never, in my experience, produces actionable results pointing at a specific file or problem. Am I alone? And if not, does anyone have anything better they've used over time?
Thanks!

That is as close as you're going to get to the element that isn't loading, although if it is a reference in a page, you should see the error when attempting to load the reference.
Trevor Seward, MCC
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

ACL denied using Pkb but works using anonymous block with same user

I have a recent 11g installation with a developer that is getting a access denied message when using a package but is able to run the same code manually in sqlplus and it works.
eg. I have granted access to connect and resolve to the user BLAH.
from sqlplus, BLAH can do
select trim(substr(utl_inaddr.get_host_name,1,30)) from dual;
TRIM(SUBSTR(UTL_INADDR.GET_HOST_NAME,1,30))
serverhostname
and get the hostname successfully, but this same line in a pkb fails when called like so
exec func_name.something()
BEGIN func_name.something(); END;
ERROR at line 1:
ORA-24247: network access denied by access control list (ACL)
ORA-06512: at "SYS.UTL_INADDR", line 4
ORA-06512: at "SYS.UTL_INADDR", line 35
ORA-06512: at line 1
ORA-06512: at "BLAH.FUNC_NAME", line 83
ORA-06512: at line 1
but if you were to do this same bit of code in sqlplus as follows:
set serveroutput on
declare
mhost varchar(30);
begin
select trim(substr(utl_inaddr.get_host_name,1,30)) into mhost
from dual;
dbms_output.put_line(mhost);
end;
it works.
I do not understand this at all. This is the same user account that owns the pkb and is running it in sqlplus. The user has been granted the connect and resolve priv through being granted a role that has this permission.
Can anyone help me out here?

Thanks, the oracle logic behind this doesn't make sense to me - if the user can do this action, then surely the user should be able to run the package...
Anyway, I will try to grant directly to the user that needs the privs, but then how do I grant this privilege to multiple users, it's some awkward bit of pl/sql just to grant it to one user.
Here is what I did:
dbms_network_acl_admin.create_acl(acl => 'filename.xml',
description => 'Network permissions for BLAH_USER to connect/resolve any host',
principal => 'BLAH_USER', is_grant => TRUE, privilege => 'connect');
dbms_network_acl_admin.add_privilege(acl => 'filename.xml', principal => 'BLAH_USER', is_grant => TRUE, privilege => 'resolve');
dbms_network_acl_admin.assign_acl(acl => 'filename.xml', host => '*');
grant execute on dbms_network_acl_admin to BLAH_USER;
but this only works for 1 user and I cannot recreate this as the acl now already exists. Would I have to change filename.xml every time and do all these steps for every user?
This is why I granted to a role and then granted that role to the BLAH_USER originally.
Any ideas on how to make this scalable to many users or to add users to this ACL?

GRANT ACCESS with sys user

hi
i have an user with objects, tables, views and procedures but it doesn't´t have dba privileges... how can i grant access to all the user to these objects? (with the sys or system user).
thanks for your help.
alex

Hello,
Every user in database has its objects and DBA privileges are not for everyone.
how can i grant access to all the user to these objects? (with the sys or system user)<<<<<<Can explain these lines ?? What's your requirment ?? Please state clearly...
As far as i got your problem, you require that all other users of databse should be able to access the objects of user (lets say A) which you specified in first line.
For this purpose create public synonyms for all objects of user A and grant. So, everyone can use the objects of "A's" schema.
Please update..... if you got the point or not...

Console access with other user

hi,
I have installed SunOne directory server and able to access it with SunOne server console as directory manager. I want to give read only access to one another user say user1 who could use the console and see the contents (tree structure and it's attribute) of the directory server.
I tried it by creating one new user (user1) and set ACI for him but when i am trying to login into directory server through the console, it is able to login but not able to see the tree structure of the directory server.
Can anyone tell me where i am wrong and what is the right way to do it? or if the user other than directory manager is not able to use console? though i am able to see the tree structure when i first login with directry manager and then i switch to the new user.
thx in advance.
ASN

Great ! Do you have it working with WLS 8.1 SP4 ?

How can I use KM with named anonymous users

Hi All,
Do any of you have an idea of how I can use named anonymous user togheter with KM? I need the anonymous users to get access to some km iviews with documents and news.
Regards,
Lennart

Hi Lennert,
see
/thread/26806 [original link is broken]
Anonymous access to KM content
Link from external sites into KM
Hope it helps
Detlev

How to set up KM folder with Anonymous access.

Experts,
I would like to setup a KM folder with anonymous access where any document on that folder can be viewed by anonymous users by clicking on a link specific to that document. For example: http://server/irj/go/km/docs/documents/TechDocs/file_name.html
Please note that this document will not be rendered through an iView, so setting up an anonymous role will not work in this case.
Can anyone tell if this will be doable and the steps to do it?
Thanks in advance for your help.
Regards,
Abu

Hi Abu,
> How can I just give access to a specific folder under /irj/go/km/docs?
You have to differentiate between anonymous access to the iView behind /irj/go/km/docs (PCD auth scheme) and the permissions on KM folders (KM permissions). If you want to restrict the access, on the folders which should not be accessible for anonymous access, remove the group "Everyone" from the permissions (via details / settings / permissions). For details see http://help.sap.com/saphelp_nw04/helpdata/en/1b/12c49eb27011d5993800508b6b8b11/frameset.htm
Hope it helps
Detlev

Unable to access Runtime Services with admin user

Hi all,
Trying to access runtime services with admin user returns a "Authentication Denied
The username or password has been refused by Runtime Services. Please try again."
Credentials are correct. It seems to be some kind of lockout. I´ve copied this admin user entry in ldap and named it admin2, this "new" user can perfectly log.
As it could be a lockout I have unlocked the user although the proper tab said there was no locked user.
The realm is in a openldap.
Any hint would really be appreciated.

Hi all,
Trying to access runtime services with admin user returns a "Authentication Denied
The username or password has been refused by Runtime Services. Please try again."
Credentials are correct. It seems to be some kind of lockout. I´ve copied this admin user entry in ldap and named it admin2, this "new" user can perfectly log.
As it could be a lockout I have unlocked the user although the proper tab said there was no locked user.
The realm is in a openldap.
Any hint would really be appreciated.

EP5 - Problem with using NavigationTarget via Anonymous access

Hi folks,
Can anyone please advise on how to resolve a particular problem we've come across with anonymous access on EP5 SP5?
We have anonymous access set up on a portal, which means we can anonymously logon to the portal via a guest user, using a URL such as:
http://portal.domain.com/sapportal/guest/guestuser/
That works fine.
However, if we wanted to link directly to a particular page or other content we would use a NavigationTarget. If you append the NavigationTarget to the URL (eg. add ?NavigationTarget=aaa/bbb/ccc...) then the URL does not work, and the user is unable to logon anonymously.
Can anyone advise?
Many thanks in advance.

Anyone with any ideas?

HT1923 I have a Vista Operating system with 2 users. Somehow I got two different play lists each with one user. One is too big for the storage and has a vast amount of duplicates. Can I delete the one that is twice as large and then access the other li

I have a Vista operating system with 2 users. Somehow I got two diffent libraries for the users. How can I delete the one and then access the correct library on the other users profile?

Use the trackpad to scroll, thats what it was designed for. The scroll bars automatically disappear when not being used and will appear if you scroll up or down using the trackpad.
This is a user-to-user forum and most people will post on here if they have problems. You very rarely get people posting to say there update went smooth. The fact is the vast majority of Mountain Lion users will not be experiencing any major problems with the OS, or maybe with apps which are not compatible, but thats hardly Apple's fault if developers don't update their apps.

HT1527 I have windows 8.1 and cannot access itunes store even creating a new apple id. With other users on the same computer I can access itunes store. How can I solve this?

I have windows 8.1 and cannot access itunes store even creating a new apple id. With other users on the same computer I can access itunes store. How can I solve this?

i had the same problem before using a fresh install of Windows 8.1. I have resolved this issue by running the program compatibility wizard. This I did by right-clicking on the iTunes icon in the desktop, selecting Troubleshoot compatibility, waited for it to detect compatibility issues and when presented with the following options: 1.) Try recommended settings; 2.) Troubleshoot program, I chose the latter. When asked what problems I noticed, I checked the following: "The program worked in earlier versions of Windows but won't install or run" and "The program requires additional permission"
After that, it tired to resolve the issue, and provided the necessary settings to run iTunes. Now it's running flawlessly. I have Avast anti-virus installed though.
HTH!

Creating a domain with the access to specific user

Hi,
I tried creating a custom domain(soaAdmin) in BPEL with access to user. I could create new user ,new customdoaminadmin role and attach this role to new user.
Problem is when we try to attach this role or user to new custom domain using JAZN tool command its not working.Following is the full description regarding this.
Configuring Roles and Users for a File-Based Security Provider(from em help)
If you are using a file-based security provider, you configure users and roles as follows:
Navigate to the OC4J Home Page for the OC4J Instance.
Click Administration to display the Administration page.
Click the Go to Task icon in the Security Providers row of the Administration Task table.
Enterprise Manager displays the Security Providers page.
To configure roles and users for the default application, click Instance Level Security.
OR
To configure roles and users for a specific application, scroll to the Application Level Security section of the page and click the edit icon for a selected application that uses a file-based security provider.
Enterprise Manager displays the Security Provider page.
Click Realms to display the Realms page.
The Realms page includes a table containing the defined realms for the selected security provider. The table contains a column that shows the number of users and roles defined for each realm.
To configure the users for a realm, click the number in the Users column.
OR
To configure the roles for a realm, click the number in the Roles column.
now if we see in setup of em we are able to see new user(soaAdmin) assigned to roles(BPMsoaAdminDomainAdmin,BPMCustomDomainAdmin).means we have user and role in realm.
if we run the following jazn tool command to attach this user to custom domain(soaAdmin) it is not able recognize shell.
java -Xbootclasspath/a:/home/oc4j/bpel/lib/orabpel-boot.jar -jar jazn.jar
-shell -grantperm jazn.com -user soaAdmin com.collaxa.security.DomainPermission
soaAdmin all
or
java -Xbootclasspath/a:/home/oc4j/bpel/lib/orabpel-boot.jar -jar jazn.jar
-shell -grantperm jazn.com -role BPMsoaAdminDomainAdmin
com.collaxa.security.DomainPermission soaAdmin all
so we changed that command as follows and run in the j2ee home it is displaying that permission class is not found.
java -classpath F:\product\10.1.3.1\OracleAS_1\bpel\lib\orabpel-boot.jar -jar jazn.jar -grantperm jazn.com -user soaAdmin com.collaxa.security.DomainPermission soaAdmin all
as result of this we are not able to login to custom domain BPEL console with new user (attched error screen when we try to login).
sources of information:
http://download-west.oracle.com/docs/cd/B31017_01/integrate.1013/b28982/security.htm#sthref186
How to create custom OID user/group to access new custom BPEL domain? from meta link
Oracle Enterprise Manager Online Help .
Could you please help me in this.
Regards,
Dhanumjay

Hi,
have you read
Re: User access to only one domain

Iphone ios5..I upgraded to ios5 on my iphone 4 and in the demo video on the Apple website it shows a cute animation screen with the user dragging what appears to be balloons on a string how do you access this screen?

iphone ios5..I upgraded to ios5 on my iphone 4 and in the demo video on the Apple website it shows a cute animation screen with the user dragging what appears to be balloons on a string how do you access this screen?
Not sure if this is a game or app or not...it shows nothing about it and explains nothing about it...but it is there on the demo video on the apple website for the add to upgrade to ios 5...it shows the user dragging threads and the little icon monster at the bottom of the screen catches them

Yea thats a game called "Cut the Rope" and it can be found in the App Store for $0.99 or you can buy the Lite version for free.

Hi, Trying to log in with my user id and password at iocbc but was not able to access. Problem message shown : Applet not initialised or may not be supported. Please refresh the page or check the browser setting Anyone can advise? or i need to download?

Hi,
i have the same problem?
Trying to log in with my user id and password at iocbc but was not able to access.
Problem message shown : Applet not initialised or may not be supported. Please refresh the page or check the browser setting
Anyone can advise?

You need to install Java for your Mac OS version, and/or make sure it's enabled in the Java Preferences application and your browser's preferences.

Error accessing the UWL only with one user

Hi,
We have a problem only with one user, when the user access the UWL get the following error:
Runtime error in the portal
Exception in processing request, send the ID of exception to your portal ADMINISTRATION
ID exception 10:54_21/10/11_0037_8766350
The other user does not have problems accessing the mailbox.
The user is assigned the role of the mailbox correctly.
Any idea what may be the problem?
Thanks and regards

Hello,
The best way to see what these issues are is to check the trace for when the run time error has occured:
Log on to the portal, recreate the runtime error. Then follow:
1596214 How to find the latest default trace from right after
reproducing an issue. Please ensure that you have reproduced the
issue with a user that is experiencing the issue that you have reported. When you find the most recent default trace file, copy and paste the numbers from the portal screen and do a ctrl + F with the trace file opened and paste in the runtime error. Now you should be able to see what is causing this issue.
Then when you get this information, please paste or attach the file here that contains the runtime error for the user. From this we should be able to figure out why the user is getting this.
Also as an admin user, try clearing this users personalizations on the Universal Worklist first.
Please clear all personalizations with the affected user and retest.
Here is the help link to show you how to clear the personalizations:
http://help.sap.com/saphelp_nw70/helpdata/EN/29
/441f6f09364bcab17f94490555bee4/content.htm
If clearing the personalizations does not help this user, please attach the trace file showing the runtime error.
Beth Maben
EP - Senior Support Consultant II
AGS Primary Support
Global Support Centre Ireland
Please see the UWL Wiki @
https://www.sdn.sap.com/irj/scn/wiki?path=/display/bpx/uwl+faq ***

Anonymous access with named users

Similar Messages

Maybe you are looking for