Best way Of providing user authentication using ADF security...

Hi,
I have a web application . I want to implement to ADF security to the application.. What is the best approach of doing this? I have the user information in the database tables along with the roles and other information. I want to these tables for authorization ?
What is the best approach to do this? It would be great if u could help ..
I ma using 11g release 2
Thanks in advance.
Rakesh

Hi,
Thanks for the quick response.
I have been looking at the post but i found one of the forum post in which the person was saying the SQLAuthentication doesnt work ..
"Be wary when using ADF Security (OPSS) with a SQLAuthenticator.
This is feedback I got in SR 3-4124753004 :
"If the you want to use DB as the identity store, then the supported way is to buy OVD server license and configure DB adapter in OVD and then configure an OVD authenticator in Weblogic. SQLAuthenticator will not be used as identity store. And, we do not recommend to use LibOVD for DB identity store. OVD server is the recommended and supported way."
related bugs are :
- bug 13876651, "FMW CONTROL SHOULD NOT ALLOW MANAGING USERS GROUPS FROM SQL AUTHENTICATOR"
- enhancement request 12864498, "OPSS : ADDMEMBERSTOAPPLICATIONROLE : THE SEARCH FOR ROLE FAILED"
related forum threads are :
- "ADF Security : identity store : tables in a SQL database"
- "OPSS : addMembersToApplicationRole : The search for role failed"
regards
Jan Vervecken"
Is this true?
Rakesh

Similar Messages

Whats the best way to create USER variable in BI Apps?

I have just installled BI Apps and am trying to integrate EBS R12 with OBIEE 11g
We have USER variable already defined in the BI Apps rpd.
In EBS Security context init block i need to define USER variable, but when i define it... it says *'USER' has already been defined in the variable "Authentication"."USER"*
Whats the best way to create USER variable for EBS Security Context init block?
1) Delete the existing USER variable and then define a new one ( in this case all the places where USER variable is getting used in the rpd would become <missing>)
And i was told that it should not be done.
Let me know how can it be done.
Thanks
Ashish

Disable existing Init block and then double click on USER variable and hit on NEW... button to create new Init block
Thanks
Edited by: Srini VEERAVALLI on May 1, 2013 4:18 PM

User Authentication in ADF BC

Hi,
I am trying to understand "how to authenticate the database(or application) user and retain the connection for later pages in ADF BC application".
I downloaded the famous SRDEMO from oracle and now working on it.
As I understand :
It runs the index.jspx page which just has the following code :
<?xml version='1.0' encoding='windows-1252'?>
<jsp:root xmlns:jsp="http://java.sun.com/JSP/Page" version="2.0">
<jsp:scriptlet>
response.sendRedirect("faces/app/SRWelcome.jspx");
</jsp:scriptlet>
</jsp:root>
it calls the SRWelcome.jspx but when I see the SRWelcome.jspx I do not see the actual code as I see when I run the application.I do not find any include file statement which ask for username and password.
Questions :
1. How SRDEMO calls the login page which asks the username and password and later use it in other pages?
2. Is there exists any document which describe How user connection(userid and password) information is authenticated and preserve later in other pages of the ADF applicaton?
3. Is there exists any example which does the database user authentication instead of application user authentication in ADF BC and used in later forms?
4. Is there exists some pre-login( on-logon) triggers kind of stuff in ADF as it was in forms?
PS: I don't have experienced in ADF but in Oracle Forms so looking for the same kind of simple authentication functionality in ADF.
Best Regards
Anurag Vidyarthi

Hi,
How SRDEMO calls the login page which asks the username and password and later use it in other pages?
Its using container managed security: Look at infrastructure/SRLogin.jspx
Is there exists any document which describe How user connection(userid and password) information is authenticated and preserve later in other pages of the ADF applicaton?
In container managed authentication, the username can be accessed from the JSf external context. The password isn't
Is there exists any example which does the database user authentication instead of application user authentication in ADF BC and used in later forms?
Yes, you can configure container managed authentication to use a custom JAAS LoginModule instead
http://www.oracle.com/technology/products/jdev/howtos/10g/jaassec/index.htm
Is there exists some pre-login( on-logon) triggers kind of stuff in ADF as it was in forms?
Using ADF Business Components that would be the prepareSession() method that is called on the application module
Frank

What is the best way to manage multiple ipods using the same itunes?

Hi Everyone
i am trying to manage three different ipods through the one Itunes, all with very different tastes, not sure if I am doing it the best or easiest way so does anybody have a simple solution on what you're supposed to do, to keep it all simple!
Cheers
Liv

If you have created a new Windows user account you need to log out and then log back in with your original user name. By default each Windows profile will have an independent iTunes library.
If instead you managed to create a new library within the same profile. click the icon to start iTunes and immediately press and hold down the shift key, keep holding until asked to create or choose a library. Click Choose and navigte back to your original which should be at <User's Music>\iTunes.
Your question as posed was:
What is the best way to manage multiple iPods using the same iTunes {library}?
in which case Selected Playlists is probably the best approach. Simply create a playlist for each device, Alice's iPod, Bob's iPhone etc. and sync the device with the appropriate list.
tt2

Best way to save user's choices

Hello everybody
I am working on a Website built on JSP and Servlets . One of the features of the site is to give user the chance to subscribe to different newsletters under different categories.
There are 6, 7 available categories. So for example, user1 surfs to the page which displays category sport and under that some options (check boxes) and he can choose zero or more newsletters, and he clicks to add the next catetory options , for example entertainement. He may choose to go to final summary page without seeing all the categories.
From the summary page , something like this is displayed to user if he has choices from 3 categoires of Sport , Social, Home ; but he did not choose anything from Movies and other categories:
Sport : edit (hyperlink) , remove (hyperlink)
Social : edit (hyperlink) , remove (hyperlink)
Home edit (hyperlink) , remove (hyperlink)
The user should have a choice to go back to each category page and edit it (he will see the page of that category with his previous choices in check boxes) .Another option is just by clicking the remove link in the final summary page, to remove that category and all the values chosen for that category.
I am new at Java and I'd be grateful if you help me with my questions:
1. What is the best way to keep user's choices as he surfs and adds options under each category ? I thought of using session vars , in form of 2 dimentional arrays, but I wonder if there is a better more efficient way ?
2. At the last page, user is shown the category names with two links beside them , edit and remove ... could you also advise what is the best way to implement this as well? For example if I use array session vars, I am not sure how to display that particular page again with his previous choices shown .....
The categories and options under each are read from database. User's choices are not commited to DB until he reviews the summary and clicks confirm button at the last stage.
Thank you in advance
Vajra

You continue along the same lines; keep the DTO in the session as an attribute. When you display your JSP, read the appropriate values for choices from the DTO and set your checkboxes/ radio buttons to 'selected' if they should be.
When the page is submitted, read the parameters from the form submit and update your session attribute ( DTO ) to reflect any changes the user might have made like selecting a new option or deselecting a previously selected one.
People on the forum help others voluntarily, it's not their job.
Help them help you.
Learn how to ask questions first: http://faq.javaranch.com/java/HowToAskQuestionsOnJavaRanch
(Yes I know it's on JavaRanch but I think it applies everywhere)
----------------------------------------------------------------

Best way to transfer files without using migration assistant

upgrading from snow leopard to mavericks goes ok, but migrating files hangs with "less than a minute to go". What is the best way to transfer user files without using migration assistant?

I keep backups of essential documents in Dropbox, and then the files can sync when I reinstall Dropbox.
For larger collections of files, for example, my Documents folder, or iTunes or iPhoto libraries, I transfer them from a Time Machine Backup- just by going into the backup manually and restoring the folders.
If you have files that can fit on a flash drive, then you can use that, which is very fast.

Best way to move users

what is the best way to move user data and settings from one system to another? and how about backing up users? thanks in advance...

Just wanted to clarify:
1. Mike Bombich's method entails moving the entire /Users folder to another drive so everyone's home is moved?
2. David Pogue's method (as described in the Missing Manual) only entails moving individual, selected home folders to another drive (and no soft links needed)?
3. It sounds like Pogue's method is preferable anyway (for the paranoid at least), so if the 2nd drive dies or needs maintenance, I can still login as a user whose home folder is in the boot drive?
4. So, if I use Pogue's method, all that is needed are the steps listed in my original post above, and nothing else?
Thanks.

Create .jspx page to add users using ADF security.

Hello,
I'm using JDeveloper 11.1.1.3. I've created a login page (form based) with different users and roles using ADF Security. I'm able to successfully login/logout through the users and get redirected to the home page. However, i'm asked to create a page by which i can create users and add roles to them. This page will only be accessible by the administrator. I searched this forum for anything that might help, but couldn't find anything. Can anyone help?
Thanks,
Mohamed.

check this thread:
Re: change password in jazn-data.xml programmatically

What's the best way to prevent KDE from using pulseaudio?

What's the best way to prevent KDE from using pulseaudio if it is required to be installed for gnome?

KDE system Settings > Mulitmedia (in Hardware category) > Audio and Video options > Audio Playback
the default device shown there is the pulseaudio device, move it to the bottom of the list
Check all sub entries under Audio Playback to make sure they all have default at the bottom.
This SHOULD make KDE sound subsystem use the real hardware directly through Alsa instead of pulseaudio.

Best way to clean microfiber cloth used for the display?

What is the best way to clean microfiber clothes used for the display?
Thanks

Hand washing works well, but can be tedious.
If you decide to machine wash, make sure of a few things:
- Use warm water
- Do not wash with towels or undergarments. The microfiber cloth will pick up every bit of lint from them.
- Wash it with similar color items.
- Use regular soap, but don't use bleach or fabric softener. The bleach can damage the cloth (and the Apple cloth is black anyway, do you really want a spotted cloth?) and the fabric softener will reduce the effectiveness of the cloth.
- Hang it up to dry or dry it on the lowest setting of your dryer. I am not certain about the Apple cleaning clothes, but other microfiber clothes have been known to actually melt in the dryer if it gets too hot.
To hand wash:
- Put the cloth in a bowl with a tight fitting lid, add a little soap. Either dish soap or laundry soap will work, you don't need much.
- Close the lid tight & then shake the bowl hard for a few minutes. Find a 3 year old, they'll love to help do this.
- Remove the cloth & rinse it well, making sure the water runs clear.
- Air dry flat or throw it in the dryer at a low setting.

What is the best way to avoid latency when using the io plug in?

What is the best way to avoid latency when using the io plug in?

Hi colin a.
Welcome to the Support Communities!
The article below may be able to help you with this. Click on the link to see more details and screenshots.
Logic: About I/O buffer size and monitoring latency
http://support.apple.com/kb/ht1314
Cheers,
- Judy

Controlling user actions without ADF Security

Hi!
I have an application in which we use J2EE security, and therefore we have user accounts that can be managed by, in our case, the OID. We have not implemented ADF security yet, because that means we will have to import all kinds of permissions to a suitable place in the OID, and there is no time yet to investigate how to do that (especially how to migrate it to a node in the OID where we want the info, not the default way).
Now I have a requirement to make a JSF screen with an input form read only, based on either a user role or a parameter being populated or not.
I know that I can achieve this by modifying all ReadOnly and Disabled properties of the controls and put an EL expression in there, but I would rather do this on a higher level. Is it possible to make a whole iterator or form read-only with EL or using backing beans?
Regards,
Jeroen van Veldhuizen

Jeroen,
You could certainly write some code in a backing bean that would iterate over all the children of the form and set the property. Without using ADF security (which would let you do it on the iterator level - much preferred, but more work), I cannot think of another way other than setting readOnly/disabled on each individual control.
You can iterate over the children of a component using something like this:
    UIComponent target;
    List children;
    int i, cnt;
    children = target.getChildren();
    cnt = target.getChildCount();
    for (i = 0; i < cnt; i++)
      // do whatever here
    }Hope this helps,
John

How to use ADF Security policies in OID Ldap

Hello
My application uses ADF security policies created by Jdeveloper ADF Security Wizard and page definition Edit Authorization menu. The application runs as expected using file based system-jazn-data.xml. I used the JAZNMigrationTool in order to migrate XML based policies to LDAP based policies. LDIF file was generated by the tool and then using the LDAPModify command the file was uploaded to the OID. No errors were generated during this process.
I used Oracle Directory Manager in order to examine the migration result, and compare the output to that described by
Introduction to ADF Security in JDeveloper 10.1.3.2
An Oracle JDeveloper Article
Written by Frank Nimphius, Oracle Corporation
February, 2007
I was expecting to find Read, Update privileges in the orcljaznpermissionaction and the attribute name in the orcljaznpermissiontarget as shown in Fig 15 ADF security entry in OID.
to narrow down the source of the issue, we examine the LDIF file, and there was no reference to these entries. Below is one example entry from the LDIF file
dn: orclguid=EF37EAA603C611DDBFAE635A1BB60EE0,cn=Permissions,cn=Policy,cn=JAZNContext,cn=Products,cn=OracleContext,dc=realsoft,dc=com
changetype: add
objectclass: orcljaznpermission
objectclass: groupofuniquenames
objectclass: top
cn: EF37EAA603C611DDBFAE635A1BB60EE0
orclGuid: EF37EAA603C611DDBFAE635A1BB60EE0
orcljaznjavaclass: java.security.UnresolvedPermission
orcljaznpermissiontarget: oracle.adf.share.security.authorization.AttributePermission
orcljaznpermissionactions:
uniquemember: orclguid=EF37EAA203C611DDBFAE635A1BB60EE0,cn=Grantees,cn=Policy,cn=JAZNContext,cn=Products,cn=OracleContext,dc=realsoft,dc=com
Note that the orcljazpermissionactions is empty and orcljaznpermissiontarget does not really specify the actual attribute name.
The system-jazn-data.xml includes all entries correctly.
rgds

Eurika
finally solved,
runing the JAZNMigrationTool requires setting the correct classpath,
Setting the classpath to the following
C:\>Set CLASSPATH=d:\jdevstudio10132\j2ee\home\jazn.jar
allows you to run the Jaznmigrationtool successfully, however you will find that the generated LDIF file does not include the premission actions (Read, Update ...)
if however, you add the adfshare.jar to the classpath
C:\>Set CLASSPATH=d:\jdevstudio10132\j2ee\home\jazn.jar;d:\jdevstudio10132\BC4J\lib\adfshare.jar
now the tool will migrate the permission policies , the following shows an extract from the LDIF file
dn: orclguid=A5E662E204D411DDBF8807BC4864C5C2,cn=Permissions,cn=Policy,cn=JAZNContext,cn=Products,cn=OracleContext,dc=realsoft,dc=com
changetype: add
objectclass: orcljaznpermission
objectclass: groupofuniquenames
objectclass: top
cn: A5E662E204D411DDBF8807BC4864C5C2
orclGuid: A5E662E204D411DDBF8807BC4864C5C2
orcljaznjavaclass: oracle.adf.share.security.authorization.AttributePermission
orcljaznpermissiontarget: AppModuleDataControl.VRoleAuthorrizationsView1.RanDateTo
orcljaznpermissionactions: read,update
uniquemember: orclguid=A5E662E104D411DDBF8807BC4864C5C2,cn=Grantees,cn=Policy,cn=JAZNContext,cn=Products,cn=OracleContext,dc=realsoft,dc=com
Ammar Sajdi
www.e-ammar.com/Oracle.html

Best way for wireless guest authentication

Hi
Can anyone tell me what a good way to authenticate guest wireless in my workplace, we currently use mac auth and usernames in the controller, which is not Cisco.
What solutions are out there for this, ie something separate to the controller like a radius or authentication server, we may want the guests to register themselves by providing there mobile number etc
Any ideas?

When you want to provide guest authentication and then you want certain fields for the user to enter, guest access is best when there is a portal page. When you want guest to enter information like cell number etc, then you either need to find a 3rd party captive portal software, or external webauth server or if you have Cisco wlc, you use ISE.
Your final requirements will determine what solution can or can't work.
Sent from Cisco Technical Support iPhone App

What is the best way to deploy application that uses web services?

Hi all,
I'm having some problems figuring out the best way to deploy our app now that we've switched over to using web services.
I'm fairly new to Java and web services. From what I understand, JNLP and WebStart are methods to deploy Java clients to users and not for creating war files and the like.
Here's a little background:
We have a large PowerBuilder/Oracle application. The db consists of over 500 tables and the client consists of several thousand PB components. A user creates "transactions" which contain a series of "sub-transactions" within. Most of the data is collected and stored locally in the client in a series of datastores. When the "finalize" happens, the records are validated and sent to the database.
We are in the process of moving each of the subtransactions (currently in the PB client) into subPROCESSES on a java project. We are using the JAX-WS framework to develop the web services in Netbeans. These web services aren't much more than remote xml as the messaging technology. For writing data back to the database, we are using the Java Persistence API to function outside of an EJB container but will shortly be migrating to the Glassfish application server to use several of the EJB container frameworks including the EntityManager.
We haven't attempted any type of deployment and are unsure of where to start. Any suggestions would be so helpful and appreciated!
Thanks!
Edited by: doubleEspresso on Jan 10, 2008 8:06 AM

>
I'm fairly new to Java and web services. From what I understand, JNLP and WebStart are methods to deploy Java clients to users and not for creating war files and the like. >Correct, while Java Web Start has 'web' in the name, it has little if anything to do with web applications - certainly not providing much toward their installation. It is for launching rich client GUI based (AWT, Swing, SWT..) applications onto the end-user's desktop.
There are some parts of JWS that might seem peripherally useful to the installation of a web-app., but it is really not a 'good fit'.
>
..Any suggestions would be so helpful and appreciated!>You might try the forums for the 'web tier' APIs.
<http://forum.java.sun.com/category.jspa?categoryID=20>
Or perhaps the forum 'Java Technologies for Web Services' (under 'enterprise technologies')
<http://forum.java.sun.com/forum.jspa?forumID=331>
This one in 'BigAdmin' seems particularly relevant, 'Set up and Deploy'
<http://forum.java.sun.com/forum.jspa?forumID=550>

Best way Of providing user authentication using ADF security...

Similar Messages

Maybe you are looking for