Authentication Problem for Web module

Trying to secure a third party web servlet by attaching it to the default app.
This should be fairly straight forward in that I setup my web.xml with a security constraint, a login config, and a security role as follows:
web.xml
=====
     <security-constraint>
          <web-resource-collection>
               <web-resource-name>File Manager</web-resource-name>
               <url-pattern>*</url-pattern>
          </web-resource-collection>
          <auth-constraint>
               <role-name>fmuser</role-name>
          </auth-constraint>
     </security-constraint>
     <login-config>
          <auth-method>BASIC</auth-method>
          <realm-name>File Manager</realm-name>
     </login-config>
     <security-role>
          <role-name>fmuser</role-name>
     </security-role>
I then setup a role to JAAS/JAZN mapping as follows inside orion-web.xml
orion-web.xml
=========
<orion-web-app>

<security-role-mapping name="fmuser">
<group name="fmanager-users"/>
</security-role-mapping>
</orion-web-app>
And I've setup an fmanager-users group in JAZN and added a user but when I try to navigate to my application I get a 401 - Unauthorized (or 403 - Forbidden in newer version of OC4J) and if I switch the login-config to FORM it doesn't redirect to the login forms at all.
This is highly frustrating as this is all done following Oracle sketchy documentation through many manuals and guides for hours but can be done in Tomcat in about five minutes.
Any ideas anyone?
Thanks,
Martin
Edited by: mpzarde on Nov 26, 2008 10:29 PM
Edited by: mpzarde on Nov 26, 2008 10:31 PM

Think I figured it out; I was trying to bind my servlet to the default application which in turn isn't setup with a security provider or at least doesn't make it directly available to modules bound to it.
As soon as I setup a separate application (fmanager in my case) and defined a skeleton META-INF/application.xml everything started working.
Can anyone confirm this?

Similar Messages

Error in running a URL for Web Module Project with a JSP

Hi Experts,
I created a Web Module Project with name "WebModuleProject".
I created a jsp file naming "test_jsp" inside it
Then i created a Web Archive for it which resulted in a WebModuleProject.war file.
I then created an Enterprise Module Project with name "EnterpriseWebModule"
Then i linked the "WebModuleProject" whith this project.
I created an EAR for this project.
Deployed that EAR on to hte J2EE Engine.
Now on applying the following url:
<a href="http://server:port/WebModuleProject/test_jsp.jsp">http://server:port/WebModuleProject/test_jsp.jsp</a>
i m getting the following error
404 Not Found
The requested resource /WebModuleProject/test_jsp.jsp is not available
Details: File [WebModuleProject/test_jsp.jsp] not found in application root of alias [/] of J2EE application [sap.com/com.sap.engine.docs.examples].
Please experts help me to dig out this problem
Can anybody suggest me why i m getting this error? And how to resolve it???????

Hi Saurabh,
In SMICM transaction code we have to maintain the parameters in order to run the web report in the specified format.
i am listing some parameters in the below, Please have a look and see whether it can help u out .....
Services
icm/server_port_0     = PROT=HTTP,PORT=8000
icm/server_port_1     = PROT=SMTP,PORT=0
HTTP settings
icm/HTTP/max_request_size_KB   = 102400
icm/HTTP/j2ee_0                = PREFIX=/,HOST=localhost,CONN=0-500,PORT=50000
icm/HTTP/server_cache_0        = PREFIX=/, CACHEDIR=/usr/sap/BSD/DVEBMGS00/dat
   a/cache
Misc
icm/host_name_full             = cauvery.com
icm/cancel_strategy            = cancel requests without session (stateless)
rdisp/plugin_auto_logout       = 1800
is/HTTP/virt_host_0            = :;
is/SMTP/virt_host_0            = :;
Once after maintain the parameters go and check in the SICF transaction code SAPBW---BEx + right click + test service. And check whether it is opening in the required URL path.
Regards,
Vara Prasad.

Suggestion for web module

My workflow of capturing, editing, managing and publishing images on the web could be greatly enhanced if Lightroom's web module had the capability of creating and managing hierarchies of web galeries. Since this is not possible at the moment I still have to use another software to create my online photo gallery. Isn't this an obvious feature that's missing?

I second this idea.
This is especially important for the situations when I have a hierarchy of the directories with photos. In this case I would like to be able to tell LR to produce web galleries with preserved hierarchy, instead of making a web gallery in each directory, and then designing the "top" gallery(ies) separately.

SharePoint 2013 Multiple authentication prompts for web apps

We have multiple web apps for MySite, collaboration portal and search centre. When users click on different URLs and access different portals non IE browsers prompt for credentials multiple times for
each Web app.
Is this some thing to do with
kerberos delegation set-up?
http://technet.microsoft.com/en-us/library/ee806870(v=office.15).aspx
sudesh withanage

This is basically the way its designed to work. Kerberos will help with authentication between different site collections on the same web app, but not different web apps. Since you have multiple web apps Kerberos Delegation of credentials does
not apply. It only happens on non-IE browsers because IE can be set to pass the OS credentials in the background by default. For other browsers you normally have to save a web site's credentials.
Paul Stork SharePoint Server MVP
Principal Architect: Blue Chip Consulting Group
Blog: http://dontpapanic.com/blog
Twitter: Follow @pstork
Please remember to mark your question as "answered" if this solves your problem.

Oracle*Terminal configuration problem for Web deployment

Hello everyone!
I am a novice in using Oracle Forms 6i. I installed a Forms 6i Developer and Server at Windows 2000, the same machine where 8.1.6 Server is running (of cource I installed DB server and Developer in different Oracle_Home's).
Everything seems to be going well while trying "Client-Server" model. But I can not suceed in deploying forms to the Web. For example when I try "Run a form on the Web" standard option, after I try to run a standard test form (test.fmx), I get another Browser (IE5) window opened, then an applet loads and after that I get a Java-form inside of IE5 window with red bell picture and an error message: "Error while opening Oracle*Terminal file fmrweb."
Can anyone help me with an advise what to do in such situation?
Thank you in advance
Alexander Ilin

I can't answer the specific problem about the test, but the resource file is set up as follows:
The html file that invokes the Forms applet has a server argument showing where the terminal key-mapping file is stored on your forms server. In your case it appears to be looking for fmrweb.res and can't find it.
Take a look at the html and find the path it is using to look for it (I think you'll find this in the ServerArgs parameter). Then make sure the file is there on your Windows 2000 server.
If it isn't there, do a search for it in the server's Oracle_home directory, and then copy it to the directory where it is expecting it. Along with fmrweb.res, you can also use fmrpcweb.res - just replace fmrweb.res in your html file.
Hope that helps.

Problem for web service path for Xcelsius engage in flash object

Hi, All
I had created one xcelsius through Web Service of SAP B1.it works well.
but when I run the flash object came from xcelsius by explorer,it gives one message
"Can not access external data"
thier I have to give path for swf file and web service path -- (which is given at the time of connection of xcelsius through web service in data manager)
and I have to run the web service then it shows
the dash board made from Xcelsius very well.
but when i change the path of same web service to other m/c then flash file does work and it gives message
"Can not access external data"
but in practical my web service path can be changed, it should not fixed for path which is given in data manager in Xcelsius.
I am using Xcelsius Engage 2008 sp3
please give suggetions for solve the problem
thanks in advance

Hi Venky CRMIT, Bruce007
Aside from the question, I tried another methods and I have succeeded calling webservice. A reference URL is
http://www.webbasedcrmsoftware.com.au/crm-on-demand-tutorials/65-java-access-to-crm-on-demand#_Toc224720963
Main cause may be jsessionID as you guess. When I try with EAI, I have send login information and message call at once, so URL may be incorrect.
Thank you for your help.

Partial redeployment problem for J2EE module update

hi, all
I have one application file (.ear) composed of three EJB modules. I tried to paritally redeploy one of them, but it didn't work.
Here is the command-line for partial redeployment: java weblogic.Deployer -adminurl t3://XX.XX.XX.XX:XXXX -username XXXX -password XXXX -name XA_MOrderEAR -source XAMOrderEAR -targets MOrderBM.jar@SquadA_N1 -redeploy, where XAMOrderEAR is the name of the exploded archive, MOrderBM.jar is the EJB module to be partially redeployed, SquadA_N1 is a cluster.
Here is the result:
<2010/2/22 下午02時10分06秒 GMT+08:00> <Info> <J2EE Deployment SPI> <BEA-260121> <Initiating redeploy operation for appl
ication, XA_MOrderEAR [archive: null], to SquadA_N1 .>
Task 29 initiated: [Deployer:149026]redeploy application XA_MOrderEAR on SquadA_N1.
Task 29 failed: [Deployer:149026]redeploy application XA_MOrderEAR on SquadA_N1.
Target state: redeploy failed on Cluster SquadA_N1
weblogic.application.CannotRedeployException: Module 'MOrderBM.jar' has the same ClassLoader as the Application 'XA_MOrd
erEAR'. Consider redeploying the entire application.
Please tell me how to solve the problem. I tried to set enable-bean-class-redeploy to true in weblogic-ejb-jar.xml. It didn't work too.
thanks
Blithe Meng

Hiya
You can debug this quite easily yourself.
Enable the SQL Trace for that session and see the Last SQL in the raw trace file.
You can also run the trace with the option to view bind variables.
This way you can find out why the SQL is returning no_data_found
thanks
anil passi

Context root for web Module application (with slash)

We are on PI 7.31. I am getting URL not found error with web application in certain cases. Initially, i had thought it was not working because of the Slash. Later I realized it was happening with only keyword 'inbound'.
Edited:
my alias (context-root) starts with "inbound" and that is the problem.. For me when i try anything other inbound it works..
For some reason, when I put my context-root as 'inbound' it gives me the message that URL does not work. All other context roots with and without "/"(slash) works.

Okay, The URL prefix in the SMICM is generated from the Services/external Alias defined in the SICF. Unfortunately in the new PI 7.31 environment, the URL prefix is stripped down to the first level.
In our case, we had the URL (/inbound/xxx/yyy) which was SICF service. As a result our URL prefix was stripped to /inbound/. When we developed a java webmodule with URL /inbound/zzzz, it gave service not active error.
We are creating a message with SAP to see if this will be the standard behavior going forward. Anyone encountered such an issue before?
Moderators, I guess this question needs to be moved to a different topic thread. Wondering if I should close this thread and open a new one ?

Mutual Authentication client for Web Service

Hi,
How I can tell java to use this particular client certificate in mutual authentication.
I have two certificates
1) cacert.pem and
2) client.pem (includes private key),
client.pem is signed by cacert.pem and also contains the private key. I have the wsdl file for the webservice that I have to call and I can generate java wrappers of it using wsdl2java.
Infact I just called web services that used Server-Only SSL/TLS authentication, in that case I just had to add root/CA certificate (in cer format) in the JREs cacerts file and used https for the webservice url, and all worked file
Now I can't understand what to do for mutual authentication.
Thanks in advance.
Sohaib

Hi,
How I can tell java to use this particular client certificate in mutual authentication.
I have two certificates
1) cacert.pem and
2) client.pem (includes private key),
client.pem is signed by cacert.pem and also contains the private key. I have the wsdl file for the webservice that I have to call and I can generate java wrappers of it using wsdl2java.
Infact I just called web services that used Server-Only SSL/TLS authentication, in that case I just had to add root/CA certificate (in cer format) in the JREs cacerts file and used https for the webservice url, and all worked file
Now I can't understand what to do for mutual authentication.
Thanks in advance.
Sohaib

Key mapping problem for web forms !!!

Hi all,
I have implemented forms 6 on the web using OAS 4.0.7 on WinNT SP 3 workstation. I have modified FMRWEB.RES file for activating F9 - LOV. We have a customized toolbar for our application. There are also shortcut keys defined for the same. For example, if the user presses ALT+S, then 'Save' button gets pressed. But when i run the form on the web, if the focus is on any list box, and if the user presses 'S', then 'Save' button gets pressed. I figured that if i deactivate 'ALT+S' key on the web, then it will work. How can i make the changes in FMRWEB.RES file ??
Please advise urgently...Thanks
Best Regards,
Saumin
null

Hi Hector,
Please ensure that in your Payment Terms code, no such special character has been used that are reserved by XML.This may cause conflict with the XML format and may lead to this issue.
Moreover, for analysis, you may provide with the list of common Payment Terms across your Intercompany participating companies.
Regards,
Agneesh Jain
SAP Intercompany Team

Output options for Web module

I have several suggestions to improve web gallery output using the Web and Print modules. First, and most important, should be the options to "Preview and Save", and "Export and Upload". With these options, when an event like an upload error occurs, the entire gallery doesn't have to be re-processed. Example: I attempted to upload a gallery of 400 photos this morning. After an hour or so, the remote server closed the connection causing me to have to recreate the entire gallery from the start, and another hour lost. Having the option to save the gallery locally in addition to previewing or uploading would be really practical.
Second, I'd like to have the ability to add info to the grid pages (html gallery), such as file name or rating. A simple drop down menu in the Site Info column...
Finally, how 'bout the ability to add text to the top of a contact print? Example: say I'm printing a grid of selected images from a shoot. I'd like to be able to add identifying info to the top of that printed sheet as well as file info such as file name with each photo.

Rob,
The 9401 is bidirectional, and when set to input, will function as a tristate output. There are a couple of things to keep in mind with this module: 1) When set to input, the lines still have a weak pulldown resistor with a min. value of 45 kOhms, as specified in the manual. 2) Line direction may only be controlled in banks on the 9401. This means that DIO 0:3 must all be set to the same direction, and 4:7 must all be set to the same direction. I don't have enough information about your setup to know if this will provide a complete solution.
Please post any additional questions, or more details about your application if you're still not sure whether or not this solves your needs.
Thanks,
Kyle Bryson
National Instruments

Authentication Problem for WebService

Dear All,
I have some existing interface which are SOAP to RFC synchronous.In this I am genreting WSDL and providing this WSDL to sender side and it is working fine. But when I have used same WSDL and Provide to some other application people and when are trying to consume that WSDL they are getting the Authentication error that they are fail to connect my XI server.
plz suggest
Regards
Abhay

Abahy,
I am working on SOAP to RFC scenario so for this do I need RFC conection between Application >>>XI BOX >>>> .how can I check the Connectivity?
tcode sm59 -> HTTP Connections to ABAP System -> your ECC system -> Test connection
As far as I know SOAP(webservice) >>>XI>>>ECC
we don't need any RFC connection ..
for what purpose I have to use user ID and pasword?
For PI -> ECC, you need RFC Connection.
User id / password, for logging in to PI, will be required by source system for SOAP -> PI.
Hope this helps.
regards,
Neetesh

Custom filename for web module

Is there a way to change the image filename when exporting through a web engine? Looking at the SDK documentation, I'd say there is not?
If there was, I assume it would be part of the data model in lightroom.Application.property? It would be great if I could just use the renamingTokensOn there.
The other related thing I found was the imageProxy exportFilename, but that can't be altered if I understand this correctly.
Any comments much appreciated (I'm new to the SDK, please be gentle).
Stefan

You will get SD standard reports at following reports.
http://help.sap.com/saphelp_nw70/helpdata/en/8f/36f338472b420de10000000a114084/frameset.htm
http://wiki.sdn.sap.com/wiki/display/BI/BWSDMMFIDATASOURCES
SD
Data sources Tables
2LIS_11_VAKON VBUK, VBUP, VBAK, VBAP, VBKD, KOMV, T001.
2LIS_11_VAHDR VBAK, VBUK, T001
2LIS_11_VAITM VBAP, VBUP, VBAK, VBKD, VBAJP, T001, VBUK, PRPS.
2LIS_11_VASCL VBAP, VBUP, VBAK, VBEP, VBKD, T001, PRPS
2LIS_11_VASTH VBUK
2LIS_11_VASTI VBUP, VBUK
2LIS_11_V_ITM VBAP, VBAK, VBKD, VBUP, T001, PRPS, VBUK.
2LIS_11_V_SCL VBUP, VBEP, VBKD, VBAP, VBAK, T001, PRPS.
2LIS_11_V_SSL VBAP, VBEP, LIPS, WVBEP, VBUP
2LIS_13_VDKON VBUK, VBRP, KOMV, T001, VBRK
Regards,
rvc

Advances Queue problem for Service Module

Client wrote :-
"Messages can be queued well but can not be dequeued automatically.When I dequeue manually, the messages can be processed."
Could you check environment settings related to AQ please?"
Can you please advice how to approach on this ??
EBS R12.1.3

Hi Vicky;
What is your EBS and OS?
Please check below note which could be helpful on your issue:
How To Purge Fnd_AQ Tables [ID 1156523.1] << also see referance part
Performance Issues Caused by WF_EVENT_OJMSTEXT_QH.DEQUEUE Procedure [ID 735812.1]
Java Mailer and Other 11.5.9/OWF G Current Issues in Applications 11i [ID 260393.1
Regard
Helios

Authentication problem for SYSTEM and SYS users

Hi,
I am using form builder 6.0. I have developed a form without using a database table block. When trying to execute the form with user SYSTEM or SYS following errors occured:
1) does not authenticate and login screen prompts again and again but when I use user other than SYSTEM and SYS, I can successfully execute the form.
2) some times when trying to run form from Form builder error 'Service handle not initialized' is displayed.
anybody can help to resolve the following issues?
Regards

Muhammad,
two possibilities
1. You provide the wrong password
2. Connecting to SYS reaquires to connect as SYSDBA or SYSOPENER, which is not specified with the Forms logon dialog.
Frank

Authentication Problem for Web module

Similar Messages

Maybe you are looking for