Authentication on Proxy with SmartCard

Hi there,
On Windows Vista, we authenticate our users with SmartCard-PIN. For access to the internet, the user has also to authenticate by Smartcard (PIN) on the proxy server.
How can I configure the Safari browser (Version 5.1.2) to authenticate automatically with the SmartCard? Safari asks everytime for username and password, but the user don't have any passwords. He authenticate only by PIN.
Thank you in advance.
Best regards,
Andreas

So it only lags on network authentication through a proxy?
Have you checked "Do not prompt for password if stored" in that same menu.

Similar Messages

Help not working behind proxy with authentication

Hello,
Clicking Help within a CS5 app brings up the error:
Our school is behind a proxy with authentication.
What I'd like to do is download the help files and put it on a local server.
Then I'd like to edit the main help config (where is this?) to point there.
I've seen posts where it talks about %appdata%\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1\ but we have hundreds of users and editing anything in this path is not feasible.
Please could you help in showing me where the original files are that make up the appdata chc folder so that I can edit this config at SOURCE and that any user that logs on will have a correct CHC folder made up pointing to the correct location.
I appreciate anyone's help.
Thanks for your time,
Jonathan

Hi Jonathan: there is a list of HTML and PDF files for download here: http://blogs.adobe.com/premiereprotraining/2010/08/help-documents-for-creative-suite-5-pdf -and-html.html
The help config files are located in the directories indicated below -- however, you did mention that editing those files is not feasible. So, I'm not sure if this the right solution for you ... We are resolving this in the next CS release, however, I understand that this is not much of a consolation/solution for you right now.
Windows: %appdata%/chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
Tip: To find this directory in Windows, copy the preceding phrase into the Windows Explorer file manager.
Mac OS: /[username]/Library/Preferences/chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1

Connecting to DirectAccess server from a client behind proxy with authentication

Hi,
All our DA clients are working fine except those that are working from a client company where a proxy with authentication is used.
Our DA server is running Windows server 2012 and clients are running Windows 7.
I have found similar posts, where it states it is a known issue and it is fixed by a new feature in Windows 2012, however i cannot find more info:
http://technet.microsoft.com/en-us/library/hh831416.aspx
IP-HTTPS runs in a system context rather than a user context. This context can cause connection issues. For example, if a DirectAccess
client computer is located in the network of a partner company that uses a proxy for Internet access, and WPAD auto detection is not used, the user must manually configure proxy settings in order to access the Internet. These settings are configured in Internet
Explorer on a per user basis, and cannot be retrieved in an intuitive way on behalf of IP-HTTPS. In addition, if the proxy requires authentication, the client provides credentials for Internet access, but IP-HTTPS will not provide the credentials required
to authenticate to DirectAccess. In Windows Server 2012, a new feature solves these issues. Specifically, the user can configure IP-HTTPS to work when behind a proxy that is not configured using WPAD and IP-HTTPS will request and provide the proxy credentials
needed to IP-HTTPS request authenticated, and relay it to the DirectAccess server.

Hello,
As far as I know it's a feature of Windows 2012 URA with a Windows 8 client.
Unfortunatelly you will have trouble with proxy authentication with Windows 7 client I think
Regards,
Follow me on Twitter http://www.twitter.com/liontux | My Blog (French/English) :
http://security.sakuranohana.fr/

Initialize ipad behind proxy with authentication

It seems that an iPad is not capable to handle a HTTP proxy with authentication
during its intilization phase. Am I correct ?
Phase on some network trace I made, it does not generate any traffic as soon as
the proxy settings are configured, for which we are prompted after a while when
it "discovers"it cannot reach directly Internet.

hi..
configure transparent proxy at ur server. enter IP in the gateway and in DNS setting of proxy server .
not proxy in internet explorer.
hopefully it will work
Regard
Khan

CSM-S to Servers... Reverse proxy with authentication?

Using a CSM-S with a number of web servers behind it, can the CSM-S be configured to act as a reverse proxy for the servers with no other equipment or licenses to buy?

Reverse proxy with authentication.

ASA cut through proxy with RADIUS challenge response?

Have this working for IPSEC VPN on same box (tested on 8.2.1 and 8.2.3)
Want to do cut through proxy with challenge response - same ASA and same RADUIS server but using aaa authentication match command and this is what happens...
It looks like the ASA sends a completely different radius authentication request than with VPN authentication request. Is there any way to specify what request is sent?
What the RADIUS Server sees with ASA VPN auth - THIS WORKS OK (included for comparison)
Date: 15/11/2010
Time: 3:53:57 PM
Type: Information
Source: Server
Category: RADIUS
Code: I-006001
Description: A RADIUS Access-Request has been received.
AMID: 0xC8500B80B3D8F49C6CB37E5D32DA6682
Details:
Source Location : 10.xx.21.24
Client Location : 10.xx.21.230:1025
Request ID : 31
Password Protocol : PAP
Input Details : RADIUS Code:1, RADIUS Id:31, , User-Name:xxxx, User-Password:******, NAS-IP-Address:10.xx.21.230, NAS-Port:31, NAS-Port-Type:Virtual, vendor(9):attrib(1):0x1A2000000009011A69703A736F757263652D69703D31302E32312E352E313137, Calling-Station-Id:ip:source-ip=10.21.5.117
Action : Process
What the RADIUS Server sees with ASA cut thru - THIS FAILS (any help V welcome)
Date: 17/11/2010
Time: 2:29:31 PM
Type: Warning
Source: Server
Category: RADIUS
Code: W-006001
Description: An invalid RADIUS packet has been received.
AMID: 0xC19D988F83365F20151C3F6339DEC74B
Details:
Source Location : 10.xx.21.24:1812 (Authentication)
Client Location : 10.xx.21.230:1025
Reason : The sub-protocol of the received RADIUS packet cannot be determined
Request ID : 33
Input Details : 0x01210066055A8B6881266714BDB20380B9FE5FAC01066962333504060AC815E60506000000203D06000000051A2000000009011A69703A736F757263652D69703D31302E34302E352E3131311F1A69703A736F757263652D69703D31302E34302E352E313131
Request Type : Access-Request
Thanks in advance
IB

Hi Ian,
sorry for the late reaction - do you still need help with this?
The difference between the working (VPN) auth and the failing (CTP) auth seems to be that VPN is using PAP (so no challenge-response!) while the CTP is using MS-Chapv2
So my guess is that your Radius server does not support MS-Chapv2. If that is the case then you may want to try this:
aaa-server () host
no mschapv2-capable
Although this command is not really meant to be used in this scenario, so I'm not sure if it will work but I'm hoping it will make the ASA revert to PAP for all auth requests to this host.
Note that you won't be doing challenge/response, so your passwords will be transmitted over the wire (encrypted).
hth
Herbert

Use of a secured proxy with SOAP

Hi all,
I have a java client that tries to connect to our SOAP server through a proxy.
I have no problem with normal proxies but I do however when it's a secured proxy (with authentication).
I have tried several solutions:
1- The use of the system properties like for the normal proxies (+http.proxyHost+, http.proxyPort, http.proxyUser and http.proxyPassword), but it did not work (Error 407: Proxy Authentication Required).
2- A simple class derived from the java.net.Authenticator (code below) but still the same error.
3- Change the properties of the call directly but it might be used by axis only so again the same error.
The main problem comes from the fact that I am using SOAP (apache axis) to start the connection (see code below).
I would appreciate any inputs/remarks because I am really lost at this point.
I can try whatever you may advice me to do since the system is all mine.
Many thanks in advance and best regards.
Rob
The HttpAuthenticateProxy class
import java.net.Authenticator;
import java.net.PasswordAuthentication;
public class HttpAuthenticateProxy extends Authenticator {
    private String username;
     private String userpass;
    public HttpAuthenticateProxy(String user, String pass) {
        super();
     username = user;
     userpass = pass;
    protected PasswordAuthentication getPasswordAuthentication() {
     return new PasswordAuthentication(username,userpass.toCharArray());
The SOAP client class
/* SOAP classes */
import org.apache.axis.client.Call;
import org.apache.axis.client.Service;
public class SOAPClient {
    public static Service service = null;
    private static Call buildCall(String method) throws ServiceException {
     if (service == null) {
         if (GlobalProperties.getHttpProxyHost() != null && GlobalProperties.getHttpProxyHost().length() != 0 && !GlobalProperties.getHttpProxyHost().equalsIgnoreCase("null")) {
             // Secured proxy.
              if (GlobalProperties.getHttpProxyUser() != null && GlobalProperties.getHttpProxyUser().length() != 0 && !GlobalProperties.getHttpProxyUser().equalsIgnoreCase("null")) {
              System.setProperty("http.proxyHost", GlobalProperties.getHttpProxyHost());
              System.setProperty("http.proxyPort", GlobalProperties.getHttpProxyPort());
                    /* my first attempt */
              System.setProperty("http.proxyUser", GlobalProperties.getHttpProxyUser());
              System.setProperty("http.proxyPassword", GlobalProperties.getHttpProxyPass());
              /* my second attempt */
                    Authenticator.setDefault(new HttpAuthenticateProxy(GlobalProperties.getHttpProxyUser(),GlobalProperties.getHttpProxyPass()));
              } else { // Non secured proxy.
              System.setProperty("http.proxyHost", GlobalProperties.getHttpProxyHost());
              System.setProperty("http.proxyPort", GlobalProperties.getHttpProxyPort());
         service = new Service();
         Call call = (Call) service.createCall();
         call.setOperationName(method);
         call.setTimeout(new Integer(1800000));
         return call;
    private static Object invoke(Call call, Object[] objects) throws Exception,RemoteException,MalformedURLException {
     for (String name : GlobalProperties.getSOAPServers()) {
         call.setTargetEndpointAddress(new URL(name));
         if (GlobalProperties.getHttpProxyUser() != null && GlobalProperties.getHttpProxyUser().length() != 0 && !GlobalProperties.getHttpProxyUser().equalsIgnoreCase("null")) {
                /* my third attempt */
          call.setProperty("javax.xml.rpc.security.auth.password",GlobalProperties.getHttpProxyPass());
          call.setPassword(GlobalProperties.getHttpProxyPass());
          call.setProperty("javax.xml.rpc.security.auth.username",GlobalProperties.getHttpProxyUser());
          call.setUsername(GlobalProperties.getHttpProxyUser());
         for (int j = 0; j < objects.length; j++) {
          if (objects[j] == null)
              objects[j] = "";
         Object ret = call.invoke(objects);
         return ret;
         return null;
    /* example of run */
    public static String stressServerAnnot(String server, String nbRuns) throws Exception {
     try {
         Call call = buildCall("stressServerAnnot");
         call.addParameter("server", XMLType.XSD_STRING, ParameterMode.IN);
         call.addParameter("nbRuns", XMLType.XSD_STRING, ParameterMode.IN);
         call.setReturnType(XMLType.XSD_STRING);
         String ret = (String) invoke(call, new Object[] {server, nbRuns});
         return ret;
     } catch (Exception e) {
         System.out.println("[SOAPClient] Error in stressServerAnnot : " + e);
         throw new Exception("[SOAPClient] Error in stressServerAnnot : " + e);
}Edited by: RobR on Nov 29, 2007 1:25 AM
Edited by: RobR on Nov 29, 2007 1:26 AM

Yes, it's not present in the code I have posted but I have tried this as well.
It didn't work, as expected, because soap/axis is on top of http and not https and because my proxy uses http as well (or at least that's what I have learned so far).
In fact, I have tried all combinations between http.\*, https.\*, and Authenticator without success.
I think the problem is more soap/axis related. The solution for axis2 seems somewhat 'trivial' (and well explained over the web) while it's not for axis1.
Regards
Rob
Edited by: RobR on Nov 29, 2007 4:37 AM
Edited by: RobR on Nov 29, 2007 9:56 AM

Build .air behind HTTP proxy with login/password

Hello,
I'made an air application with aptana, bu I can't build my app in a air file.
I'm behind a proxy with authentication. I'got error during timestamp.
I try many options, I can't do this air file.
In another post a find :
"You need to have a network connection for timestamping to work. If that network connection uses a proxy server, you may also need to set up the JRE to use that proxy (Seehttp://www.java.com/en/download/help/5000020600.xml). "
But in the JRE option, I can't set a login or passorwd for proxy.
If I understand my compnany can't build air application ? or there is another soution ?
Thanks.

Hello,
Were you able to successfully build your AIR app? It is possible to bypass the timestamp but there are caveats. Here's what the docs have to say:
If ADT cannot connect to the time-stamp server, then signing is canceled and no package is produced. Specify -tsa none to disable time-stamping. However, an AIR application packaged without a timestamp ceases to be installable after the signing certificate expires.
Chris

Secure Proxy with user name and password.

I'm trying to develop a tool that can go out to the internet through a secure proxy with username and password, and download a file from a secured site, (https). Anyone have any experince with this, I've looked at a few things but nothing has really been helpful.

Do you have an http proxy that requires authentication? If so, what type of authentication? Basic? Digest? NTLM if your proxy is on IIS?

IIS Reverse Proxy with URL rewrite.

Hi all, hoping to leverage the wealth of knowledge contained here.
Any assistance would be very welcome.
I'm having an issue getting a reverse proxy and URL rewrite working in IIS 7.0.
I need to redirect all requests with a specific virtual directory suffix only.
ie; https://domain.test.com/outbound/Content/query_etc
With /Outbound/ being the trigger.
This should be redirected to http://10.10.10.10/inbound/Content/query_etc
While at the same time, requests without the /outbound/ suffix should be handled locally.
I have configured the reverse proxy as described in a few articles, and have had no luck.
Here's a snippet from my (sanitized) web.config at the site level.
<rewrite>
<outboundRules>
<rule name="ReverseProxyOutboundRule1" preCondition="ResponseIsHtml1">
<match filterByTags="A" pattern="^http(s)?://10.10.10.10/inbound/(.*)" />
<action type="Rewrite" value="https://domain.test.com/outbound/{R:2}" />
</rule>
<preConditions>
<preCondition name="ResponseIsHtml1">
<add input="{RESPONSE_CONTENT_TYPE}" pattern="^text/html" />
</preCondition>
</preConditions>
</outboundRules>
<rules>
<rule name="ReverseProxyInboundRule1" stopProcessing="true">
<match url="^outbound/(.*)" />
<action type="Rewrite" url="http://10.10.10.10/inbound/{R:1}" appendQueryString="true" logRewrittenUrl="false" />
</rule>
</rules>
</rewrite>
To me, this looks correct, yet it doesn't work.
With this, I get the normal 404 - Error Code 0x80070002, with the text indicating the local directory doesn't exist, so.... not being picked up by the filter for redirection.

Hi Andrew,
Looking at your requirements it appears you need Reverse Proxy To Another Site/Server.
By using URL Rewrite Module together with
Application Request Routing module you can have IIS 7 act as a
reverse proxy.
It seems like URL Rewrite can't re-route the request somewhere else out of the server.
Even when you rewrite the url the actual connection remains with the server. Hence if your original server doesn't have /inbound/Content/query_etc it will fail with 404.
Hosting multiple domain names under a single account using URL Rewrite.
It’s a common desire to have a single IIS website that handles multiple sites with different domain names.
References:
How to create a url alias using IIS URL Rewrite:
http://blogs.technet.com/b/mspfe/archive/2013/11/27/how-to-create-a-url-alias-using-iis-url-rewrite.aspx
Reverse Proxy with URL Rewrite v2 and Application Request Routing:
http://www.iis.net/learn/extensions/url-rewrite-module/reverse-proxy-with-url-rewrite-v2-and-application-request-routing
Regards,
Satyajit
Please“Vote As Helpful”
if you find my contribution useful or “MarkAs Answer” if it does answer your question. That will encourage me - and others - to take time out to help you.

Digital Signatures with SmartCards.

Hi guys,
Has anyone implemented in R/3 digital signatures with smartcards?
Currently I'm at customer side trying to implement digital signatures within workflow processes using ABAP SSF functions. The smartcard devices are already installed, but I can't read the data inside the smartcard, moreover, I can't link the smartcard device with R/3 and I don't know how to do it
I read in some Weblogs and documents that it is necessary a SAP-certified external security product. I believe this external security product is the software that comes inside of smartcard drivers CD. It is something like a little application on which we can sign in data and put our fingerprint.
I guess it is not supposed to develop an interface application between smartcard and R/3! When I started these developments I thought that I only needed to configure some environment variables to connect these devices with R/3 and then develop the ABAP flow logic with SSF Functions - Am I right?
Can anyone provide me some guidelines for this issue?
Thanks in advance,
Ricardo.

The SmartCard device is present at the frontend PC - and that's the place where the digital signature operation has to take place. Important is the "What You See Is What You Sign" principle: it has to be ensured that the data that is to be signed (using the private key stored on the SmartCard) is exactly the same as the one that is displayed to the user.
Notice: there is a different scenario where the server is signing the data (after prompting the user for userID and password and validating that information).
The signed data is then transported back to the server where it is stored (to ensure auditibility); usually you'll have to keep the (archived) data for years; the public key need to be archived as well.
Notice: it is possible to attach the certificate (-> public key) which has been used to sign the data to the signed data.
Regards, Wolfgang

SOAP to Abap Proxy with attachment

Hi Experts,
i am facing one problem while developing one interface from SOAP to ABAP Proxy with attachment.
the sender system is sending empty soap message but with all its content in the attachment.
we need to parse the attachment and send the data to ECC system through proxy.
we made some research on SDN and found out that in sender soap adapter PayloadSwapBean is not supported.
however in receiver XI adapter the module tab is not editable.
could you suggest any solution to handle this interface?
thanks in advance.

Hi Aditya,
Can you just try to use SOAP with Servlet(Axis) protocol, since standard SOAP sender does not allow modules to be used.
please refer http://help.sap.com/saphelp_nw04/helpdata/en/45/a39e244b030063e10000000a11466f/frameset.htm
The first attachment is put in the main payload; further attachments become attachments of the XI message.
http://help.sap.com/saphelp_nw70/helpdata/EN/45/a4f8bbdfdc0d36e10000000a114a6b/frameset.htm
Regards,
Srinivas

Java client for OSB proxy with JMS Transport

Hi,
I am trying to call OSB proxy with JMS Transport. I am generating the client through ant task clientgen and following this article
http://www.oracle.com/technetwork/articles/murphy-soa-jms-092653.html
The osb proxy is req-response and is simply routing to BS which return a string value.
When I run my client, it get stuck and does not return at all. Has any one trying java client in such scenario?
What I may be missing?
Below is snipped of client code:
String url = "http://localhost:7021/sbresource?PROXY/MySample/MyJMSProxyService";
CreditLoanApprovalServiceSoapBindingQSService service = new CreditLoanApprovalServiceSoapBindingQSService_Impl(url);
MyPortType port = service.getCreditLoanApprovalServiceSoapBindingQSPort();
LoanStruct in = new LoanStruct(); //populated the data structure
String loanResult = port.processLoanApp(in); // Stuck here without any error
System.out.println("LoanResult--> " + loanResult);
Thx
/Ashwani

http://localhost:7021/sbresource?PROXY/MySample/MyJMSProxyService is the WSDL URL of the proxy.
Transport is is picked by the client from wsdl.
As far as the documentation of client generation is there, there is no change.
But meanwhile I have started working on sending the message directly to queue. JMSProxy is getting called. May be I will first run the proxy this way and then try troubleshooting the java client.
Regards
Ashwani

ABAP client proxy With Receiver JDBC Adapter

Hello Experts,
I am working on a scenerio ABAP client proxy With Receiver JDBC Adapter.
The client proxy program will fetch the master data related to equipment in plant maintenance module and will update the sql database through Receiver JDBC Adapter .
my requirement is if the equipement is created in sap then the scheduled job has to trigger the client proxy program and send the message with status 'created' to sql data base.
if the equipment is modified in sap then the scheduled job has to trigger the client proxy program and send the message with status 'modify' to sql data base.
please let me know how can i write the logic/code for this scenerio in client proxy program.
Tables for equipment master i am using is EQUI and fields are ERDAT and AEDAT which is created date and modified date.
fields for scheduling start date is tbtcp-sdldate.
Thanks in advance.
Ram.

Hello Ram,
Here you can check if updated date field is not empty then send status as created and if this field is not blank then send status as modified record.
Monica

How to create Web Service Proxy with help of WSDL.

Hi ,
How to create Web Service Proxy with help of WSDL .
Please help me .
Thanks in advacne for reply .

check out this article. It has all the details
http://www.oracle.com/technology/products/jdev/howtos/1013/wsadf/adfcomplexwstypes.html

Authentication on Proxy with SmartCard

Similar Messages

Maybe you are looking for