Basic authentication - does owa_util.get.cgi.env return the userid?
that was entered in the login dialog? How does this relate to the "cookie user" of APEX?
David
Hi,
I came across the same problem today, my current understanding of the problem confirms your suspects, but I am still investigating the matter.
If you made some progress on this, please share your thoughts.
Flavio
http://oraclequirks.blogspot.com
http://www.yocoya.com
Similar Messages
-
Web Service Call with Basic Authentication does not work
If I try to use Basic Authentication in my Web Service Client with the automatically created methods
setUsername(inUserName)
setPassword(inPassword)
setAddress(inAddress)
the application does not make a call. Did I forget something?
Is it possible to use "Test Method" with Basic Authentication?
Thank you.Thank you for your answer.
But: I already read this article. And it doesn't help me.
I use the following code:
getMyServiceClient1().setUsername(inUserName);
getMyServiceClient1().setPassword(inPassword);With this code I always get a java.lang.NullPointerException.
The methods setUsername and setPassword are definded as follows:
public void setUsername(String inUserName) {
myStub._setProperty(Stub.USERNAME_PROPERTY, inUserName);
public void setPassword(String inPassword) {
myStub._setProperty(Stub.PASSWORD_PROPERTY, inPassword);
}But if I look at the methods which are generated automatically by Sun Java Studio Creator I cannot find _setProperty.
I also found this thread in your forum:
http://swforum.sun.com/jive/thread.jspa?forumID=123&threadID=54773 -
After I run a query can I get it to return the number of files matched and each individual file name? I am trying to do a data mining routine and this would be helpful.
BBANACKIHi bbanacki,
Please have a look at the following code:
Define your queries and then:
oAdvancedQuery.ReturnType=eSearchFile
oMyDataFinder.Results.MaxCount = iMaxNumberOfReturndElements
Call oMyDataFinder.Search(oAdvancedQuery)
Set oMyResults = oMyDataFinder.Results
If oMyResults.IsIncomplete Then
msgbox "The first " & str(oMyResults.Count) & " files found"
Else
msgbox str(oMyResults.Count) & " files found"
End If
for iLoop = 1 to oMyResults.Count
Cell.Text = oMyResults(iLoop).Properties("Name").Value
Cell.Text = oMyResults(iLoop).Properties("fullpath").Value
next
Greetings
Walter -
When I enter time machine (on Time Capsule) i see the stack of screen shots and the time line. However, when I roll over the mouse pointer, the time line does not activate. The cancel button does not get me out of the app: have to alt+cmd+esc. Ideas?
I have never seen it but then I run SL which is much more reliable than Lion..
See
http://pondini.org/TM/E4.html
Check the master guru of all TM problems. -
Get CGI env variables in a database procedure using new APEX Listener
I already posted this question in the Apex Listener forum and still no replies after one week. The original post is here:
Get CGI environment from APEX Listener within database procedure
So please forgive me for posting in this forum as well, but there is a lot more activity here.
I'd like to know how I can get the CGI environment from the APEX Listener. For example, if I want to write a procedure that inserts into a table the originating IP Address of the client making the web request, how do I get it?
I am familiar with the Oracle Http Server and mod_plsql, and I know how to call OWA_UTIL.GET_CGI_ENV to get this sort of information. How do I do it using the APEX Listener?
In particular, how do I do this when calling a custom procedure (not in an Apex workspace)? When I try it now, I get an error from owa_util. The cgi env seems to be empty or not initiated (owa.num_cgi_vars is null or zero).
Specific set-up:
I have a web server running the latest JDK, Glassfish, and 1.1.4 Apex Listener. It connects to another server running the latest 11.2 database. Apex is installed and running, but I am not really developing a traditional Apex application in a workspace. I mainly use it like you would use mod_plsql. In other words, I have custom pl/sql packages that are called directly via URL. The requests are forwarded by the listener to the database, and the DB executes the procedure and returns output using htp.p to send text back to the browser. And it works just fine for this purpose. But if I want to call GET_CGI_ENV to get information like the IP Address, web browser making the request, etc. I can't seem to get it with the OWA packages.
Can anyone shed some light on this? If Apex Listener is not designed to do this, is there some kind of workaround I can use to forward this sort of information to the database for each request?I have not tried owa_util.print_cgi_env from SQL Workshop yet, as I have not created an APEX workspace. I have had no need for a workspace because of the way I am using APEX as a method for calling custom packages and stored procedures. In other words, I am using APEX strictly for the mod_plsql functionality. I just use it to forward requests to the database to execute pl/sql code, but I don't develop anything in APEX. My application is a web service with no screens and no direct user interface, which is why I did not need to create APEX forms. The front end is a mobile app that makes calls to the web service.
But I have tried calling owa_util.print_cgi_env in one of my stored procedures and it returns no data, even when calling it from the web front-end.
So I am beginning to believe that if the OWA toolkit works with APEX, then it must only be enabled when invoked within a workspace. Stand-alone procedures can be called via APEX, but apparently doing so does not initiate the CGI env variables. This set-up used to work under the OHS with mod_plsql. The embedded pl/sql gateway also works this way.
Is there a procedure call that APEX is making to set the environment before each SQL Workshop request?
My security model currently blocks access to all packages and procedures except for my custom packages. I am using the APEX Listener configuration to allow only the packages listed by name in a white list. But I thought I allowed all access when I first tried calling the OWA packages. I'll have to try that again. -
I'm trying to query from one table (call it Table1) a batch of rows in another table (Table2) using VLOOKUP on a date specified in the first table (Table1). My problem is it's returning the last incident in Table2 of the requested date instead of the first incident. This really breaks the OFFSET scheme I'd like to use to collect the rest of the items for that date. Is there some way to compel VLOOKUP to return the first row of query results, not the last?
NOTE: I see I've asked this before, but forgot to go back and look at responses given. It's been a while and I've limped along until now with the way things were. I'm actually trying to delete this questions, so if you see it, ignore it. I suppose if someone can tell me real quick how to delete a stupid question, that might be helpful.you cannot delete a post yourself. You can flag the post an request a moderator remove.
-
Powershell: Why does this Get-ADUser command return Nada??!
get-aduser-filter*-propertiesName,employeeID|Where-Object{$_.type
-like"*user*"}
|
selectName,employeeID|out-gridviewget-aduser-filter*-propertiesName,employeeID|Where-Object{$_.type
-like"*user*"}
|
selectName,employeeID|out-gridview
At line:1 char:34
+ get-aduser-filter*-propertiesName,employeeID|Where-Object{$_.type -like"*user*"} ...
+ ~
Missing argument in parameter list.
At line:1 char:95
+ ... } | selectName,employeeID|out-gridview
+ ~
Missing argument in parameter list.
+ CategoryInfo : ParserError: (:) [], ParentContainsErrorRecordException
+ FullyQualifiedErrorId : MissingArgument
Don't retire TechNet! -
(Don't give up yet - 13,225+ strong and growing) -
How does QtCurve get colors to stay the same? Somehow doesn't w/o KDE.
Basically, the one on the left is qtcurve-qt4 + qtcurve-gtk2 and the one on the right is qtcurve-kde4 + qtcurve-gtk2. I can't figure out what QtCurve is writing to some gtkrc file in order to allow this color synching. Does anyone else use qtcurve-qt4 + qtcurve-gtk2 and get something similar or is there something that I need edit in my gtkrc file in order to have the qtcurve-gtk2 match the qtcurve-qt4 without having to install qtcurve-kde4? (note: I am currently using gnome-color-chooser to adjust my colors. Without it, Qtcurve would be in a blinding white and blue color scheme)
I have just had a quick read. You may not have had much corrupted before you started playing but unfortunately you may have introduced a few extra problems.
You don't appear to have done the thing I would do first: delete the password entry in Keychain for any non-working service - they can get corrupted resulting in silly error messages.
I have checked for the latest Gmail settings and put them below. I advise that you use these with SSL for both incoming and outgoing email.
Standard Gmail configuration instructions:
Incoming Mail (POP3) Server - requires SSL:
pop.gmail.com
Use SSL: Yes
Port: 995
Outgoing Mail (SMTP) Server - requires TLS or SSL:
smtp.gmail.com
Use Authentication: Yes
Port for TLS/STARTTLS: 587
Port for SSL: 465
Server timeouts
Greater than 1 minute, we recommend 5
Full Name or Display Name:
[your name]
Account Name or User Name:
your full email address (including @gmail.com or @your_domain.com)
Email Address:
your email address ([email protected] or username@your_domain.com)
Password:
your Gmail password
I would get the accounts working first before trying to move any further items in ~/Library/Mail
Once things are working you could try copying individual .mbox folders from a working computer to the problem one. Quit both Mail applications first.
I use POP on multiple computers and often use one to restore another. I Bcc all outgoing email to myself so all computers have all outgoing messages. I keep messages on the server for 122 days (4months) - slightly tedious to set this on Mail but it can be easily set to a month. I mainly use Thunderbird without any folders except the Archive ones so it is very easy to maintain the same structure on all computers.
You can always download everything on the server again by deleting MessageUidsAlreadyDownloaded. -
The system does not get Storage Location of the material from the Contract
Hi to all,
We are encountering a problem now regarding the PR to PO conversion. Our ABAPer has made a background job for the User to convert a PR to PO using ME59N.
Background Job : ZPTI_MM_PR_PO_CON
Program : RM06BB30
Tcode: ME59N
Variant : SAMPLE2_ME59N ( Plant, Vendor, POrg, Pgrp.)
Rule : When the PO is converted the STORAGE LOCATION of the material should be gotten from a CONTRACT/AGREEMENT instead of the SLoc defaulted in PR.
Problem: When the backround job is finished, the PO is converted but the STORAGE LOCATION did not get from the CONTRACT.
Steps done :
1. Create a Contract (ME31K)
1.1 Specify the SLOC of the material
2. Create PR (ME51N) and enter the Contract Number inside the PR
note : In the PR the material has a Storage Location which defaults from the Material Master.
3. Run SM36 and enter the job ZPTI_MM_PR_PO_CON
4. Set the job to "Immediately"
5. Click Steps icon and enter the program RM06BB30 and variant SAMPLE2_ME59N
6. Save
7. Go to SM37 and check the job if finished.
8. When the job is finished, check the PR if it has a PO.
9. Display the PO.
10. Check if the storage location in PO has gotten from the Contract
The problem now appeared.
We have tried to use ME59N alone and not using the background job. The system has gotten the correct Storage Location, thus it got from the Contract.
Please help what should be checked on our side. Our ABaper is also currently debugging the program but we
are seeking help to fasten the solution.
Best Regards,
ElynneHi Elynne,
Definitively, it is a problem with ME59N background process.
It is better if you can create a message to SAP asking for the solution.
I only found the next SAP note:
Note 1287723 - ME59N in backgound does not populate PR details in PO.
But, I do not know if it will help to resolve your issue.
I hope this little information can help you in anyway.
Kind regards,
Sandra -
"Message Processor" does not get assigned when saving the document.
Hi folks!
When creating a support message (SLFN) and saving the document usually the BP of the current user got assigned to the partner funtion "message processor".
This used to work but does not anymore. Now I cannot find the reason why.
I think I could achieve this via customizing "Make Settings for Change Transaction Types" and using "Specify Copy of Current User" but I am pretty sure this was not customized before.
I could use partner determination procedure, too. Access sequence "User" but still I am not sure this was customized before.
I am using SLFN transaction type service provider scenario (SLFC0001)
Anyone got an idea?
Thanks in advance.
Regards
Edited by: Christian Kaunzner on Mar 25, 2009 5:15 PMHi Christian,
did you solve this issue on your own? can you share your experience?
thanks
Pedro Rodrigues -
How get cfspreadsheet to return the query dump in Excel?
I read my data as shown in examples, but my data just displays the query dump. If I add cfheader and cfcontent, the query dump just displays in an Excel.
I'm using CF 9.01 and Excel 2007
shell. Here is my code:
<cfscript>
//Use an absolute path for the files. --->
theDir=GetDirectoryFromPath(GetCurrentTemplatePath());
theFile=theDir & "TrackEverythingXLS.xls";
//Create two empty ColdFusion spreadsheet objects. --->
theSheet = SpreadsheetNew("TBI_2009");
theSheet2 = SpreadsheetNew("TBI_2008");
//Populate each object with a query. --->
SpreadsheetAddRows(theSheet,QO_getAllData);
SpreadsheetAddRows(theSheet2,QO_getAllData_TBI_2008);
</cfscript>
<!--- Write the sheet --->
<cfspreadsheet action="write" filename="#theFile#" overwrite="true" name="theSheet"
sheetname="QO_getAllData">
<cfspreadsheet action="update" filename="#theFile#" name="theSheet2"
sheetname="QO_getAllData_TBI_2008">
<cfheader name="Content-Disposition" value="inline; filename=TrackEverythingXLS.xls">
<cfcontent type="application/vnd.msexcel">
<cfspreadsheet action="read" src="#theFile#" sheetname="QO_getAllData"
query="spreadsheetData">
<cfspreadsheet action="read" src="#theFile#" sheetname="QO_getAllData_TBI_2008"
query="spreadsheetData2">
<cfdump var="#spreadsheetData#" />
<cfdump var="#spreadsheetData2#" />
As you can see, I'm trying to write 2 tabs. That doesn't work either. All the data is dumped into one tab.My initial problem may start with "Simply create your spreadsheet as usual." How do I do that?
With the code I just tried below, I did get a spreadsheet. So using cfheader and cfcontent is correct?
I did not get 2 sheets though.
<cfscript>
//Use an absolute path for the files. --->
theDir=GetDirectoryFromPath(GetCurrentTemplatePath());
theFile=theDir & "TrackEverythingXLS.xls";
//Create two empty ColdFusion spreadsheet objects. --->
theSheet = SpreadsheetNew("TBI_2009");
SpreadsheetAddRows(theSheet,QO_getAllData);
//Create a new sheet.
SpreadsheetCreateSheet (theSheet, "QO_getAllData_TBI_2008"); // 2nd query
//Set the sheet as active.
SpreadsheetSetActiveSheet (theSheet, "QO_getAllData_TBI_2008");
//Populate each object with a query. --->
SpreadsheetAddRows(theSheet,QO_getAllData_TBI_2008);
</cfscript>
<!--- Write the sheet --->
<cfspreadsheet action="write" filename="#theFile#" overwrite="true" name="theSheet"
sheetname="QO_getAllData">
<!--- (no formatting) Works best. 8/10/11 2:54 pm --->
<cfheader name="Content-Disposition" value="inline; filename=TrackEverythingXLS.xls">
<cfcontent type="application/vnd.msexcel">
<cfspreadsheet action="read" src="#theFile#" sheetname="QO_getAllData"
query="spreadsheetData">
<cfdump var="#spreadsheetData#" />
Also, will I be able to code to Sort? Right now, I get an error message saying: "This operation requires the merged cells to be identically sized. (I had selected a Custom Sort on the entire sheet.) Is this a formatting issue?
Thanks for helping me out. -
Hi, I have installed VMware Fusion to switch between Mac and Windows. It worked fine until I installed and played a game (Atlantis). Now the screen in frozen and even turning off the computer does not help. Does anybody have an idea what to do?
Try the remaining items of:
iOS: Not responding or does not turn on
If not successful, make an appointment at the Genius Bar of an Apple store.
Apple Retail Store - Genius Bar -
Hi All ;
We are in the middle of a migration Project but we stuck with this pop3 setting. Most of the mailboxes uses pop3 to connect Exchange 2010 with the setting spa + port 110 on the client side. We want to give same authentication options for the pop3 settings
on 2013 side but when spa is selected the pop3 rejects the connection with the following error.
Your e-mail server rejected your login with SPA.
So both settings for pop3 protocol is same but the client cannot connect from 2013 server.
Where can i enable this feature from Exchange 2013 .Hi,
Please make sure that we have enabled Outlook Anywhere and 2 pop3 services in Exchange 2013.
More details in the following article:
Enable POP3 in Exchange 2013
http://technet.microsoft.com/en-us/library/bb124934(v=exchg.150).aspx
Please make sure port 110, port 587, port 25 are available.
Please try to disable the NTLM authentication on Exchange 2013 server for testing.
Please also try to run Outlook client under safe mode to avoid some AVs and add-ins.
Please also try to re-create new profile to refresh the caches for testing.
Thanks
Mavis
Mavis Huang
TechNet Community Support -
How to get domain name for the userId?
There is a generic way to get userID
System.getProperty( "user.name" ).
In case of windows it's a name you login in.
Is any way in Java to figure out domain name of that particular user by Java code?
IgorYou can dojava.net.InetAddress.getLocalHost().getHostName()to get the name of the computer. But this will not give you the "domain name of the user". In Windows, for example, when I sign on to my computer, that user name only means something to my computer. There's no "domain", in the Internet sense, involved.
-
How do I protect my JNLP, my JARs etc. (with Basic Authentication)???
hi all,
i know that there is a FAQ ( [see here|http://lopica.sourceforge.net/faq.html#obfuscate] ) answering a related question with "You can use an obfuscator...". ok, but is there really no other solution?
this is the simplified folder structure of my application on the server:
[application]
[etc]
xyz.xml
[jars]
myapp.jar
launch.jnlp
website.jsp
initial start and basic authentication:*
my first idea was to secure everything underneath "application" with basic authentication via my web.xml (yes, i'm aware of the security concerns). this means everybody can access my website (here: website.jsp) which contains a start button that links to "launch.jnlp". as soon as the user clicks on it, the browser opens its standard authentication dialog since launch.jsp is in a protected area. after entering the correct credentials the jnlp-file is downloaded and java web start takes over control. first of all it seems as it tries to access the same jnlp-file again (??? --> probably in order to check for changes in the jnlp file --> this is certainly not the case for the initial startup) and then wants to download the relevant jar (myapp.jar). because both resources are protected jws opens its own basic authentication dialog where i have to enter the same credentials the second time. as far as i know, there is no solution to pass the credentials between the browser and the jvm.
second start and basic authentication:*
if the user starts my application for the 2nd, 3rd, ... time via desktop-link (set in jnlp-file) there is no need for accessing my website with a browser. therefore only the authentication dialog of jws gets displayed. so far, so good!
and now the actual problem:*
during runtime my application (signed with verisign certificate and having all permissions) uses commons-vfs and commons-httpclient to access resources on the same server (e.g. etc/xyz.xml). since they're underneath the protected "application" directory as well, my application needs the same credentials the user already entered in the authentication dialog of jws. now i could retrieve these credentials by calling Authenticator.requestPasswordAuthentication() within my application and passing them to vfs and httpclient. however, doing so opens up jws' authentication dialog again. grrr!!! is there a way to prevent this?
related thougts:*
i know i could disable jws' default Authenticatior and set my own Authenticator which might be able to return already entered credentials without opening the dialog a second time. however, it seems that even with <property name="javaws.cfg.jauthenticator" value="none" /> jws still opens its own dialog when acessing the JNLP file and the relevant JARs during the startup/download phase. of course, who else if not jws could handle that phase? my application might not even be downloaded at this point. so i guess setting my own Authenticator would not be a solution either (at least not if i want to secure my jnlp and my jars, too). quite the contrary, it would have to open another dialog... :-(
my current solution:*
for the moment i use jws' default Authenticatior which allows me to easily protect all my stuff on the server side (jnlp, jar, etc). i can live with the two login dialogs at the initial startup. and instead of querying the credentials from jws' default Authenticatior at runtime, i set two system properties for username and password in the (protected) jnlp-file, query them at runtime and hand it to vfs and httpclient. this prevents the 2nd (or 3rd) dialog but is definitely not a great solution. most of all i'm not happy with the fact that this somehow "destroys" the container-based security advantage of easily configuring authorized users via a separate mechanism e.g. tomcat-users.xml. now there has to be one master-password that has to be set in the jnlp-file! grrr!
a possible alternative:*
i'm not sure but would it be better to secure everything with form-based authentication on the website, and dynamically generate username and password into the jnlp-file? but what happens when the admin changes the password on the server and the user starts its application via desktop-link??? in case of basic authentication i think jws would popup the login dialog again. however, if i use the old username and password generated into the jnlp it won't work. i think the user then has to access the website again. this is not good at all! :-(
the only real solution:*
should i write a small application which can be downloaded by everybody and on startup queries the user's credentials, validates them with the help of our server, and uses the javax.jnlp-api to download the secured JARs of my real application? this seems so much overkill! does anybody have experiences with this approach? how difficult is it to implement the whole download/update stuff with javax.jnlp?
WHAT HAVE I MISSED???
AM I COMPLETELY WRONG???
WHAT IS THE EASIEST WAY???
AND WHAT IS THE BEST WAY???
thank you so much,
stephanNot sure, whether I understood correctly, what you wanna do - but up to now I can't see any problem.
if you have a structure like this:
/ctxroot/
launch.jnlp
/app/
*.jar
*.whateveryou may use in your web.xml:
<servlet>
<servlet-name>JnlpDownloadServlet</servlet-name>
<servlet-class>jnlp.sample.servlet.JnlpDownloadServlet</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>JnlpDownloadServlet</servlet-name>
<url-pattern>*.jnlp</url-pattern>
<url-pattern>/app/*</url-pattern>
</servlet-mapping>
<security-constraint>
<web-resource-collection>
<web-resource-name>Application</web-resource-name>
<url-pattern>/app/*</url-pattern>
<http-method>GET</http-method>
<http-method>POST</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>bla</role-name>
<role-name>fahsel</role-name>
</auth-constraint>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>
<security-constraint>
<web-resource-collection>
<web-resource-name>Subscription</web-resource-name>
<url-pattern>*.jnlp</url-pattern>
</web-resource-collection>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>
<login-config>
<auth-method>BASIC</auth-method>
<realm-name>whatever-realm</realm-name>
</login-config>
<security-role><role-name>bla</role-name></security-role>
<security-role><role-name>fahsel</role-name></security-role>
...Than you may use the Service stuff like:
BasicService bs = (BasicService)ServiceManager.lookup("javax.jnlp.BasicService");
URL codeBase = bs.getCodeBase();
URL pu = new URL(codeBase.toString() + "whatever.bla");
HttpURLConnection res = (HttpURLConnection) pu.openConnection();
res.setInstanceFollowRedirects(true);
res.setRequestMethod("GET");
res.setConnectTimeout(10 * 60 * 1000);
res.connect();
String enc = res.getContentType();
...Where is the problem? If you wanna intercept certain "calls" to an app resource, just use a filter, which decides, whether to answer the request directly by itself or to pass it to the JnlpDownloadServlet ...
Maybe you are looking for
-
How to install Oracle Grid Agent 11g into windows hosts ?
Hi there, I was not able to deploy management agents into windows hosts machines ! I followed steps below and I am getting these errors : On windows 2003 server, I have downloaded grid agent here : D:\grid\Windows_X64_Grid_Control_agent_download_11_1
-
Best Practice on Knowledge Management, IS01 Problems and Solutions
Been Playing with KM and looking for insight from other users (will give points) using it for ICWC. We have mulitple product lines where we have documents with Q & A's in each line. As I look at moving that into CRM via IS01, I am looking for any Be
-
How do I set up a 3GS to use without sim as an ipod touch.
How do I set up a 3GS to use without sim as an ipod touch.
-
Simple question. Hard to find an answer. Threshold setting on WVC2300
Hello I have a WVC2300 What is the most sensitived setting, a plus or a minus - ??? Come on Cisco, update your documentation!
-
How to send error message to forms from Database Trigger
Hi, Please help me to send error message to forms from Database Trigger? RgDs, Madesh.R.M