Authentication through SMP to Gateway

I am trying to set up SMP to allow me to register with credentials which will then be used to access my back-end Gateway server.
I have configured the authorization profile to accept these registration details.
When I un-tick the box "Allow anonymous access", and remove the anonymous credentials, the Kapsel app breaks upon registration, and returns the message "check your connection data".
But when I tick the box "allow anonymous access" and enter the exact same credentials, it all works fine.
How do I set up SMP to accept credentials and then use these same ones to speak to my Gateway server? I need users to be able to uniquely identified in Gateway, so anonymous access will not be allowed.
i.e. I want to login to SMP as LSTANGER with a password (for example) and then I want SMP to make all connections to Gateway using this username and password, so that within Gateway I can uniquely identify a user, and restrict their data access accordingly.
Thank you

Use HTTP/HTTPS authentication and provide the gateway end point URL for the app created in cockpit. No need to check the option "allow anonymous connections" and try.
Midhun VP

Similar Messages

How to deploy connection (Mac OS X Yosemite to Windows RDS) through the RD Gateway with Two Factor authentication (Safenet OTP) on Session host?

Good day!
Could you please help me? How to deploy connection (Mac OS X Yosemite to Windows RDS) through the RD Gateway with Two Factor authentication on Session host? How to open an authentication dialog that is the same as in Windows when logging on to network resources
in Windows (Windows Security)?
Our test environment: We have one RDS 2012 R2 server (all roles in one) and one session host in collection. On the session host installed Safenet Network Logon and it under GPO which disable all authentication, only OTP.

Hi Sir,
It seems that you are going to integrate 3rd party product into AD for authentication .
I would suggest you to contact the vendor of Safenet for this deployment scenario :
http://www.safenet-inc.com/multi-factor-authentication/authentication-management/safenet-authentication-manager-express-samx/
Best Regards,
Elton Ji
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected] .

Email becomes unreadible after going through Cisco email gateway

Hi all,
I have an issue with one sender who is trying to email password protected attachments to other staff in our organization.
The issue seems to only occur when the email goes through our C370, if he sends to an externally hosted email account the email and attachment can be opened, and when that email is then sent as an attachment back into our organization it is also openable, which seems to rule out our clients.
Sanitized header from the C370 below is part of the message header which I think might contain the problem, I have removed the first part with to & from as I didn't know if it was relevant..
Subject: Daily Subject
Thread-Topic: Subject
thread-index: Ac+JToaXaax6VYP2Qlaj21mbCsrr5w==
Date: Mon, 16 Jun 2014 10:36:28 +0000
Message-ID: <Message ID>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
X-Originating-IP: [192.168.30.71]
Content-Type: multipart/mixed;
        boundary="_005_B078E7CA8779484CB2961CF42F9F12481EE3C285RALXMBX01WHITSL_"
MIME-Version: 1.0
Return-Path: <[email protected]>
X-OriginalArrivalTime: 16 Jun 2014 10:36:31.0542 (UTC) FILETIME=[D6741560:01CF894E]
This is a multi-part message in MIME format.
--_005_B078E7CA8779484CB2961CF42F9F12481EE3C285RALXMBX01WHITSL_
Content-Type: multipart/alternative;
        boundary="_000_B078E7CA8779484CB2961CF42F9F12481EE3C285RALXMBX01WHITSL_"
--_000_B078E7CA8779484CB2961CF42F9F12481EE3C285RALXMBX01WHITSL_
Content-Type: text/plain;
        charset="utf-8"
Content-Transfer-Encoding: base64
UGxlYXNlIHNlZSBhdGFjaGVkDQoNClJlZ2FyZHMNCg0KQWtlZW0gTGluc2V5DQoNCkFrZWVtIExp
bnNleQ0KV0hBQ1QgQ2FwYWNpdHkgVGVhbSBBZG1pbmlzdHJhdG9yDQpBY29uYnVyeSBFYXN0DQpX
b3JjZXN0ZXIgUm95YWwgSG9zcGl0YWwNClRlbDogMDE5MDUgNzYwMDY3DQpFbWFpbDogYWtlZW0u
bGluc2V5QGhhY3cubmhzLnVrPG1haWx0bzpha2VlbS5saW5zZXlAaGFjdy5uaHMudWs+DQoNClRo
ZSBpbmZvcm1hdGlvbiBjb250YWluZWQgaW4gdGhpcyBlbWFpbCBtYXkgYmUgc3ViamVjdCB0byBw
This string continues for 10's of lines
--_000_B078E7CA8779484CB2961CF42F9F12481EE3C285RALXMBX01WHITSL_
Content-Type: text/html;
        charset="utf-8"
Content-Transfer-Encoding: base64
PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i
dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxzdHlsZT4NCjwhLS0NCkBmb250LWZhY2UNCgl7
Zm9udC1mYW1pbHk6Q2FsaWJyaX0NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29O
b3JtYWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXpl
OjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYifQ0KYTpsaW5rLCBz
cGFuLk1zb0h5cGVybGluaw0KCXtjb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxp
bmV9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7Y29sb3I6cHVycGxl
This string continues for 10's of lines
--_000_B078E7CA8779484CB2961CF42F9F12481EE3C285RALXMBX01WHITSL_--
--_005_B078E7CA8779484CB2961CF42F9F12481EE3C285RALXMBX01WHITSL_
Content-Type: application/vnd.openxmlformats-officedocument.spreadsheetml.sheet;
        name="16.06.14 test data.xlsx"
Content-Description: 16.06.14 test data.xlsx
Content-Disposition: attachment;
        size=21504;
        creation-date=Mon, 16 Jun 2014 10:35:56 GMT;
        modification-date=Mon, 16 Jun 2014 10:34:01 GMT;
        filename="16.06.14 test data.xlsx"
Content-Transfer-Encoding: base64
0M8R4KGxGuEAAAAAAAAAAAAAAAAAAAAAPgADAP7/CQAGAAAAAAAAAAAAAAADAAAAAQAAAAAAAAAA
EAAAAgAAAAEAAAD+////AAAAAAAAAAAHAAAACAAAAP//////////////////////////////////
YhaetsvzHMi3ipkrNJSzrFVRN7+bX4l0BumhMZTII2xrE6oeB8hEqY8k2VbXv8U3HBd8J9RGVWDJ
SqZakOR/sQpgHLGkP6PAdRCn1DnGilooj9RrP4T0NjAipUVFMh82LbWeSHkYeF2odZvS9FDy4hCP
jz0oU3IWExxK67VOvELynIIGDs4OywbgzO1/umDQ5rzKg134XJcOCjZogzLN0aRirTBioH9/1JCq
CDi7xvoEUpPFjuNQt0xfVUV8fqr3fCzrKhhIAh7fo4FYVKHzS2lZkCXP+qLINNsBWDkb2WexmN6U
UrwbjQBNCKLKf2n46v1C
This string continues for 100's of lines
--_005_B078E7CA8779484CB2961CF42F9F12481EE3C285RALXMBX01WHITSL_
Content-Type: application/vnd.openxmlformats-officedocument.wordprocessingml.document;
        name="16.06.14 test document.docx"
Content-Description: 16.06.14 test document.docx
Content-Disposition: attachment;
        size=32566;
        creation-date=Mon, 16 Jun 2014 10:36:01 GMT;
        modification-date=Mon, 16 Jun 2014 10:33:24 GMT;
        filename="16.06.14 test document.docx"
Content-Transfer-Encoding: base64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 string continues for 100's of lines
--_005_B078E7CA8779484CB2961CF42F9F12481EE3C285RALXMBX01WHITSL_--
Below is the header when a copy is sent to Hotmail:
x-store-info: J++/JTCzmObr++wNraA4Pa4f5Xd6uensydyekesGC2M=
Authentication-Results: domain.com; spf=none (sender IP is IP Address) [email protected]; dkim=none header.d=domain.uk; x-hmca=none [email protected]
X-SID-PRA: [email protected]
X-AUTH-Result: NONE
X-SID-Result: NONE
X-Message-Status: n:n
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTE7YT0xO0Q9MTtHRD0xO1NDTD0w
X-Message-Info: NhFq/7gR1vQRHV6jbdvQfj78RRbHIsgK1hLH/9kB6NkUdTKzM/S60sw6uhmZk31ye2Ut7SsNRG194mNbBlVxpVFTOFvWOorYIP5ew8iIWHabwOUS2au4siXFpV/hL6TnYc2aLcBqOdiwZaz+fO5BeYoeCs9RYcubk1Jzn4Ff1TWTeX5PBOwirh+7vaICe5u9/LltrbQ5ODA+UL1EVPECVAszVGdCkiJ5
Received: from relayserver.uk ([62.208.144.128]) by SNT004-MC3F25.hotmail.com
over TLS secured channel with Microsoft SMTPSVC(7.5.7601.22678); Tue, 17 Jun
2014 02:22:01 -0700
Received: from blah.net (blah.net
[IP Address]) by IMSVA80 (Postfix) with ESMTP id D712D448A3A for
<[email protected]>; Tue, 17 Jun 2014 10:21:59 +0100 (BST)
Received: from Blah.local (smtp.server [IP Address]) by
blah.net (Postfix) with ESMTP id 5F6B6448F33 for
<[email protected]>; Tue, 17 Jun 2014 10:21:57 +0100 (BST)
X-PMWin-Version: 3.0.2.0
X-MimeOLE: Produced By Microsoft MimeOLE V16.4.3528.331
Received: from blah.local ([192.168.46.221]) by
Blah.blah.local with Microsoft SMTPSVC(IP address); Tue, 17 Jun 2014
10:21:36 +0100
Received: from Server name ([fe80:::::822d]) by
Exchange server name ([192.168.46.221]) with mapi id 14.02.0342.003;
Tue, 17 Jun 2014 10:21:36 +0100
From: "Surname, Firstname" <[email protected]>
To: <[email protected]>
Subject: Subject
Thread-Topic: Subject
thread-index: Ac+JToaXaax6VYP2Qlaj21mbCsrr5wAvrAhgAAASClA=
Date: Tue, 17 Jun 2014 09:21:35 +0000
OLD-MSG-ID: <Old Message ID>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
X-Originating-IP: [192.168.30.85]
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0002_01CF8FA3.87849CD0"
MIME-Version: 1.0
X-OriginalArrivalTime: 17 Jun 2014 09:21:36.0838 (UTC) FILETIME=[89D06E60:01CF8A0D]
Message-ID: <Message ID>
X-TM-AS-Product-Ver: IMSVA-8.0.0.1495-7.5.0.1017-20762.006
X-TM-AS-Result: No--42.282-60-31-10
X-imss-scan-details: No--42.282-60-31-10;No--42.282-3-31-10;No--42.282-4-31-10
X-TMASE-MatchedRID: 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
X-Hotmail-VirusCheck: Clean
Return-Path: <[email protected]>
The sender has advised they are using Outlook 2010.
Thanks in advance for any help working out why the email cant be read when coming in through our C370 gateway & sorry if posted in wrong community
Katie

Hi,
Could you please try to put another DNS server on the ESA? Like ISP's DNS or a public one.
Luis Silva

BI Mobile through SMP

Hi folks,
I am trying to connect the BI Mobile app through SMP (aka sup 2.3sp4). but get the following error "proxy connection http://SUP:8000/MobileBIService..." not found. I will refer to SMP as SUP just to avoid confusion with SAP Mobile in BI.
I know BI is ok because if I connect direct to BI using connection type sap businessobjects bi platform ... I can see the sample reports.
I have followed the documentation on setting up SMP and believe it is done correctly.
A few connections ...
1) connection type SMP BOE Connection is for SMP: aka SUP .. correct?
2) if that connection type is correct, what goes in the proxy name fields... I have tried various flavours like http://<SUP Host>:8000/MobileBIService etc
I know the MobileBIService is working correct as I can go direct to Bi server with GetVersion and get details back.
Also in SUP I can see the connection trying but is labelled as offline.
TIA for any help.

Hello Charles Tony O'Reilly,
Can you please give me some more details are you doing a BOE-Legacy connection with 2.3 SP04 or is it a BOE-REST Connection??
Few other quick Questions(below should help if its BOE Legacy):
1. Is the SUP.properties file updated?
2. Is the tomcat server port opened to make communications to via port 5001?
3. What kind of Authentication are you using? WinAD or Enterprise AD? Ensure the autorhizations are maintained in CMS for the users.
4. During the Application Creation, did you use REST API? if not please try this it should work.
Refer attached image.
5. Is there any error which you get on the BI App while testing?
The last version of the admin guide which was released can be found in the following link. However The Step 4 is not described in the document. Please see if this solves the issue.
Regards,
Nagesh

Simple Authentication with SMP 10.1 and FMS 3.5

Good day all,
I am looking to add simple authentication to the SMP player for use with FMS 3.5. I recently came across a technical paper published by Adobe titled, "Video content protection measures enabled by Adobe Flash Media Interactive Server 3.5". Within this document are three examples of user authentication with code samples. I am starting with the "simple" client verification using a unique token authentication key method first.
I've noticed that SMP doesn't have any FMS security mechanisms built-in at least that I've been able to identify in the documentation or feature specs. Did I miss something? I am looking for assistance in getting started with adding this feature to SMP. So my question is where could I add the client side Actionscript within the SMP structure?
I'd very much like to hear about others' experiences with adding security mechanisms to SMP used with FMS.
Thank you.

Andrian - Thank you for the quick reply. I'm gald SMP has support for the playback of protected content. Is there more documentation than this demo on this topic?
I'll explain what I'm doing. I am implementing SMP as the default video player application used in online courses at the Savannah College of Art and Design. Identifying the player and implementing its use in our production workflow is the first step in a strategy to deliver a better video experience and leverage the scalibility and flexibility of SMP. On the back end integration with our FMS I have been asked to implement some user authentication. We don't need to re-auth the students as they have already been authenticated through our LMS. What is desired is each player instance authenticates with our server to prevent stream ripping.
The simple user token authentication key example from the linked document seems to best suit this intial need.

Sending JavaMail Through A Particular Gateway Or Firewall

Sending Java Mail through a particular Gateway or Firewall. I am having the problem while sending mail through Java Mail. This is the code being used for sending mail.
Security.addProvider(new com.sun.net.ssl.internal.ssl.Provider());
          Properties props = new Properties();
          String timeOutVal="50000";
          props.setProperty("mail.transport.protocol","smtp");
          props.setProperty("mail.host","smtp.gmail.com");
          props.put("mail.smtp.auth","true");//we will use the smtp authentication
          props.put("mail.smtp.port","465");
          props.put("mail.smtp.socketFactory.port","465");
          props.put("mail.smtp.socketFactory.class","javax.net.ssl.SSLSocketFactory");
          props.put("mail.smtp.socketFactory.fallback","false");
          props.put("mail.smtp.quitwait","false");
          props.put("mail.smtp.connectiontimeout",timeOutVal);
          props.put("mail.smtp.timeout",timeOutVal);
          final String emailId ="[email protected]";
          final String password ="test123";
          if(emailId != null && password != null){
               Session session = Session.getDefaultInstance(props,new javax.mail.Authenticator(){
                    protected PasswordAuthentication getPasswordAuthentication(){
                         return new PasswordAuthentication(emailId.trim(),password.trim());
                    MimeMessage message = new MimeMessage(session);
                    message.setSender(new InternetAddress(emailId.trim()));
                    if(subject != null){
                         message.setSubject(subject.trim());
                    }else{
                         message.setSubject("");
                    //message.setContent("text","text/plain");
                    message.setContent(msg,"text/plain");
                    String recipients = emailIds.trim();
                    message.setRecipients(Message.RecipientType.TO,InternetAddress.parse(recipients));
                    Transport.send(message);
                    return 0;
          }else{
               return 1;
          }After the Applications sends the mail the following error displays in the console log.
     14:39:59,090 INFO [STDOUT] javax.mail.MessagingException: Could not connect to SMTP host: smtp.gmail.com, port: 465;
       nested exception is:
        java.net.SocketTimeoutException: connect timed out
     14:39:59,090 INFO [STDOUT]     at com.sun.mail.smtp.SMTPTransport.openServer(SMTPTransport.java:911)
     14:39:59,090 INFO [STDOUT]     at com.sun.mail.smtp.SMTPTransport.protocolConnect(SMTPTransport.java:158)
     14:39:59,090 INFO [STDOUT]     at javax.mail.Service.connect(Service.java:310)
     14:39:59,090 INFO [STDOUT]     at javax.mail.Service.connect(Service.java:169)
     14:39:59,090 INFO [STDOUT]     at javax.mail.Service.connect(Service.java:118)
     14:39:59,090 INFO [STDOUT]     at com.sun.mail.smtp.SMTPTransport.connect(SMTPTransport.java:95)
     14:39:59,090 INFO [STDOUT]     at javax.mail.Transport.send0(Transport.java:188)
     14:39:59,090 INFO [STDOUT]     at javax.mail.Transport.send(Transport.java:118)          Troubleshooting Done
     Added Firewall ip in the Gateway List, and removed other gateway.
     Then it works.But it blocks other remote servers from accessing the local server.
     as the other gateway is being removed from the local server.
     Please help me to solve the issue.
Thanks and Regards
Rasa.

Your configuration code is unnecessarily complex. Please read the JavaMail FAQ for the simpler way
to configure access to Gmail.
Also, the JavaMail FAQ has tips for debugging connection problems.
If you're having trouble configuring your gateway, talk to your network administrator.

WLAN connection: authentication through captive po...

Access to some Wifi hotspots requires an authentication through captive portal (ID and password must be entered on a special web page). Everything works on my E65 except that I did not find the method to avoid to retype my ID and password every time I try to connect. Any idea ?

Hello,
I've a e61i and I experience a similar problem. My phone work very well on WiFi network with no encryption as well as 64-bit wep.
At home I've 2 wireless routers, both encrypted at 128 bits, one with WEP and the other with WPA. On both of them I can correctly obtain an IP thru DHCP, but the traffic do not go thru.
By using IfInfo I think I discovered the reason of the problem (unless IfInfo is not working properly...) and it seems a bug related to the netmask, broadcast and gateway settings. The router is 192.168.15.1 and this is what I get:
1) DHCP case -- I get two IP adresses: the 169.254.x.x and the one assigned to the router. DNS is also set properly, but both gateway, broadcast and netmask are set to 0.0.0.0 for both IPs.
IP Addr: 169.254.162.106
Netmask: 0.0.0.0
Broadcast: 0.0.0.0
Gateway: 0.0.0.0
DNS1: 192.168.15.1
IP Addr: 192.168.15.100
Netmask: 0.0.0.0
Broadcast: 0.0.0.0
Gateway: 0.0.0.0
DNS1: 192.168.15.1
2) Static IP 192.168.15.64, netmask set to 255.255.255.0 and gateway and DNS set to 192.168.15.1. The 169.254.x.x disappears and I get only one IP which is set to:
IP Addr: 192.168.15.64
Netmask: 0.0.0.0
Broadcast:192.168.15.255
Gateway: 192.168.15.1
DNS1: 192.168.15.1
So in conclusion, it seems that with 128bit encryption, in the DHCP case gateway, broadcast and netmask are not assigned correctly! While in the Static IP case the netmask is still not assigned correctly!!!
Hope this can help...
--AP

How to capture userinfo after a partner application is authenticated through SSOSDK?

I have successfully installed and deployed the Partner application for Portal using SSOSDK. My question is, once the user is authenticated through SSOPartnerServlet.java and gets thrown back to the partner app(PAPP), how do we get the user info(i.e. username) from the PAPP?
Is there an API?
I have already asked this question from oracle tech and they told me to post it
Thanks,
Hamid

Pass the name of a subrotine to handle your user commands to the fm parameter.
I_CALLBACK_USER_COMMAND = 'USER_COMMAND'.
Then code for the user command function,
form user_command using r_ucomm type sy-ucomm.
case r_ucomm.
when '<FCODE of your button>'.
Code your logic....
endcase.
endform.
To add your button using your own pf-status, you should copy a standard gui status and modify it.
To trigger this pf-status you should pass routine name to I_CALLBACK_PF_STATUS_SET.(I_CALLBACK_PF_STATUS_SET = 'SET_PF_STATUS..)
form set_pf_status.
set pf-status 'ZSTAT'. "THis ZSTAT must be created by copying a STANDARD pf-status of say some std program like SAPLKKBL. and then modifying it.
endform.

Cannot use SASL Authentication Through GSSAPI on DS 6.3

I try to kerberized DS 6.3. I do step by step instruction from "Sun Java System Directory Server Enterprise Edition 6.3" and it doesn't work.
When I try to configure the Directory Server to Enable GSSAPI I get an error:
modifying entry cn=SASL,cn=security,cn=config
ldap_modify: DSA is unwilling to perform
ldap_modify: additional info: Modification not allowed on attribute dsSaslPluginsPath
After all when I try to authenticate to the Directory Server i get response:
ldap_sasl_interactive_bind_s: Authentication method not supported
ldap_sasl_interactive_bind_s: additional info: sasl mechanism not supported
Logs file:
+[22/Sep/2008:10:28:11 +0200] conn=2 op=-1 msgId=-1 - fd=22 slot=22 LDAP connection from 10.3.233.4:33054 to 10.3.233.4+
+[22/Sep/2008:10:28:11 +0200] conn=2 op=0 msgId=1 - BIND dn="" method=sasl version=3 mech=GSSAPI+
+[22/Sep/2008:10:28:11 +0200] conn=2 op=0 msgId=1 - RESULT err=7 tag=97 nentries=0 etime=0, sasl mechanism not supported+
+[22/Sep/2008:10:28:11 +0200] conn=2 op=1 msgId=2 - UNBIND+
+[22/Sep/2008:10:28:11 +0200] conn=2 op=1 msgId=-1 - closing from 10.3.233.4:33054 - U1 - Connection closed by unbind client -+
+[22/Sep/2008:10:28:12 +0200] conn=2 op=-1 msgId=-1 - closed.+
system specyfication:
Solaris 10 x86 64-bit
DS 6.3 B2008.0311.0212 NAT

See http://forums.sun.com/thread.jspa?forumID=761&threadID=5202246 for a description of the problem and a workaround.
If you have a Sun support contract, you can request an escalation of CR 6637404.
Also, note that it looks like part of the documentation went missing. In DS5.2 the docs included an additional step
Chapter 11 Implementing Security
Configuring Client Authentication
SASL Authentication Through GSSAPI (Solaris Only)
http://docs.sun.com/source/816-6698-10/ssl.html#18500
ldapmodify -D 'cn=directory manager'
dn: cn=SASL,cn=security,cn=config
changetype: modify
add: dsSaslPluginsEnable
dsSaslPluginsEnable: GSSAPI
replace: dsSaslPluginsPath
dsSaslPluginsPath: /usr/lib/mps/sasl2/libsasl.so
modifying entry cn=SASL,cn=security,cn=config
ldap_modify: DSA is unwilling to perform
ldap_modify: additional info: Adding attributes is not allowed
-------------------------------------------------------------

PL SQL Web Service Authentication through LDAP

I have created one PL SQL Web Service and I would like to provide token security through LDAP.
I have configured LDAP for deployed webservice in oracle IAS 10.1.3 Service.
Problem Description: <?xml version="1.0" encoding="UTF-8"?>
<env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:ns0="http://dbconnection1/MobileWebService.wsdl/types/"><env:Body><env:Fault><faultcode>env:MustUnderstand</faultcode><faultstring>SOAP must understand error: {http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd}Security</faultstring></env:Fault></env:Body></env:Envelope>
I have provided LDAP authentication through oracle iAS Setup.
Please help

Hi I am looking out for a good friend of mine, Rajeev Dave from Vijaywada, if your the one, please email me [email protected]
thanks,

Oracle 10g connectivity with sql server 2000 through oracle transpa gateway

dear gurus.
i am to connecto oracle 10g with sql server 2000 through oracle transparent gateway.
i have installed transparent gateway and proper configured. also link is created.
but when i execute query "select * from city@inventory" , so an error displayed.
ORA-12500: TNS:listener failed to start a dedicated server process.
kindly suggest me what could be the cause.
regards,

if the listener fails to spawn a dedicated server process it is commonly indicating an issue with the listener. So posting the listener and also a listener trace including a description of the env where you installed the gateway into which directory would be helpfull. Please keep also in mind if you have for example a 10.2.0.3 database and you install into this directoty a 10.2.0.1 gateway you have to reapply the patchset again do get consistent file version.
So please describe more detailed your env.

How to do .1x port based network access authentication through ACS

How to do .1x port based network access authentication through ACS.

Hi,
802.1x can authenticate hosts either through the username/password or either via the MAC address of the clients (PC's, Printers etc.). This process is called Agentless Network Access which can be done through Mac Auth Bypass.
In this process the 802.1x switchport would send the MAC address of the connected PC to the radius server for authentication. If the radius server has the MAC address in it's database, the authentication would be successful and the PC would be granted network access.
To check the configuration on the ACS 4.x, you can go to http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.1/configuration/guide/noagent.html
To check the configuration on an ACS 5.x, you can go to http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-2/user/guide/acsuserguide/common_scenarios.html#wp1053005
Regards,
Kush

Problems going through a Linux gateway

Greetings,
I am using a Linux box at home to drive my DSL connection, and share it with all other machines (using Netfilter's built-in NAT abilities). It's an Ubuntu Dapper running kernel 2.6.15.
My Windows box has no problem at all and can access any web site. So does my PSP, for that matter.
On the other hand, my brand new Santa Rosa MBP can only access SOME web sites : google and a handful of others. I can also establish a stable ssh connection with a friend's server across that very same internet connection. With most sites, though, the browser starts making requests, then goes into timeout. For instance, I can't load www.apple.com : the browser's status bar (and a network traffic analyzer) show a bunch of requests, then everything freezes after requests are sent to images.apple.com.
I have the exact same symptoms under various settings :
- MacOS X wirelessly connected to the linux gateway (through a Netgear AP) - Safari and Firefox both
- MacOS X physically connected to the linux gateway (through another switch) - Safari and Firefox both
- Windows XP (Boot Camp) wirelessly connected to the linux gateway (through a Netgear AP) - Internet Explorer
Since the problem also appears when wired in, it's not a wifi problem. I've tried fooling around with the MTU (lowering it on the MBP), but no cigar.
One final word : I can access the internet just fine using my neighbour's AP, so I'm almost certain it's a compatibility problem between my MBP and the linux gateway.
Any help would be greatly appreciated!

Well I must give you credit because a lot of people don't know anything about the MTU settings. What setting is it at right now? Is it the same as your PC's?
Try firefox or Flock as an alternative web browser just for now for Diagnostic Perposes.
Otherwise, my notebook and my brothers iMac works fine through a linux gateway.

OBIEE 11.1.1.6.2 BP1 authentication through Shared Services EPM 11.1.2 .2

Hi,
Any idea how to get the authentication in OBIEE through Shared Services to work?
We use Native Directory and MSAD in SS, hence we need to get the authentication through Shared Services.
We were able to run this on EPM 11.1.1.3 through LDAP server of Shared services port 28089, surely not working now.
I've tried both of the following but still no luck:
http://gerdpee.wordpress.com/2011/06/17/oracle-weblogic-and-hyperion-shared-services-11-1-1-3/
http://gerdpee.wordpress.com/2011/06/17/integration-sort-of-of-obiee-11-1-1-5-and-hyperion-shared-services-11-1-1-3/
Please help. Many thanks!!!
Cheers,
Steve

Hi Steve,
I have not been through this, but hope this helps you though. While we run the System configurator Wizard (EPM 11.1.1.2), we are now having an option to integrate EPM with OBIEE. Have you given it a shot?
I am just thinking, if we could had it configure for us, we could directly access the Subject Areas from OBIEE, just like what Mark had mentioned here : http://www.rittmanmead.com/2009/01/epm-workspace-111-and-obiee-10134-updated/
You could further look into the "SSO using CSS Token" field in the connection pool, too.
Hope this helps and I will let you know, if I have any other information.
Thank you,
Dhar

ACS user authenticating through Windows Database

Hello,
Please, i need a document/ guideline on how to configure ACS 4.2 user authenticating through Windows Database and the ACS server is running on an appliance.
Please, help.
Regards,
Ethelbert

Hi,
If you delete the user in AD, then it would not authenticate the user even if the dynamic mapped user exists in the ACS database, as the password would not be verified from the AD for the user.
The dynamically mapped user entry would still exist in ACS and would not get deleted if the user is deleted from AD.
tnx
somishra

Authentication through SMP to Gateway

Similar Messages

Maybe you are looking for