Block HTTP Options request in DBMS_EPG

We are having some trouble opening HTML pages from Office tools in combination with the Embedded PL/SQL Gateway on a Oracle 11g database.
When we open a public Apex page from word or Excel it will prompt for XDB username / password.
We open the page like this: http://epg-host:8080/apex/f?p=111:1
When we open the same page from the same Apex application using the Oracle HTTP Server instead of the Embedded PL/SQL Gateway, Word and Excel won't prompt for a username and password.
I used Wireshark to see the difference in HTTP traffic. Microsoft Office will do a HTTP Options request on the "directory" of the page (for the url http://epg-host:8080/apex) before opening the page. The HTTP Options request results Error 401 Unauthorized, that’s why Word/Excel ask the user to login.
With a HTTP Send Tool I have send the Options Request to the Embedded PL/SQL Gateway and to the Oracle HTTP Server, these are the different responses:
Options for http://epg-host:8080/apex/
The remote server returned an error: (401) Unauthorized.
MS-Author-Via     DAV
DAV     1,2,<http://www.oracle.com/xdb/webdav/props>
Content-Length     147
Content-Type     text/html; charset=UTF-8
Date     Thu, 10 Nov 2011 10:05:56 GMT
Server     Oracle XML DB/Oracle Database
WWW-Authenticate     Basic realm="XDB"
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<HTML><HEAD>
<TITLE>401 Unauthorized</TITLE>
</HEAD><BODY><H1>Unauthorized</H1>
</BODY></HTML>Options for http://apache-host:7778/apex/
The remote server returned an error: (501) Not Implemented.
Allow
Connection     close
Content-Length     252
Content-Type     text/html; charset=iso-8859-1
Date     Thu, 10 Nov 2011 10:15:44 GMT
Server     Oracle-Application-Server-11g
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>501 Method Not Implemented</title>
</head><body>
<h1>Method Not Implemented</h1>
<p>The server does not support the functionality required to fulfil the request.</p>
</body></html>I do not really understand why the Options Request results in Unauthorized. I would like to change the behavior of the Embedded PL/SQL Gateway so that it does not throw the "Unauthorized" error. Any other error would be good, but Unauthorized results in a Login prompt.
Does anyone know how to configure the Embedded PL/SQL Gateway so it will not result in the unauthorized error? It doesn’t matter if I have to block the Options requests or grant extra authorization.

Thanks for your reply. When we open the page in the browser we do not get the Login-prompt, the allow-repository-anonymous-access is already set to true.
The login-prompt only occurs when we open the page from Word/Excel, that's when the HTTP-Options request is send.
Opening an Apex page in the browser only results in a HTTP-Get request, Word/Excel will send HTTP-Options followed by the HTTP-Get request.

Similar Messages

Need to disable "Block Anonymous Internet Requests" with "Clone MAC address?"

Ok -- so I learned from tech support and this forum that the "Clone MAC address" option needs to be enabled when connecting to the Internet via a cable modem. In one of the forum posts (sorry lost track of which one), it said that in addition I need to disable "Block Anonymous Internet Requests" as well -- is this correct? If so what is the effect of this? Linksys documentation is not clear if this is absolutely necessary.
I think the comment is in this thread
http://forums.linksys.com/linksys/board/message?board.id=Wireless_Routers&message.id=8600

Usually resetting you cable modem will allow you to use a router without cloning the MAC address. Reset modem, power down, plug router into the modem, power up the modem, power up the router and you should be good to go. The popular reason that I know of for unchecking "Block Anonymous Internet Requests" is when you plan to use P2P software like Azureus. Your computer becomes pingable and can be seen on the net.

HTTP PUT Request for File Uploads is returning a response header with content-length = 0

After upgrading from CF9 to Coldfusion 10, I'm running into an odd issue, with `cURL` calls to a webservice that used to work.
We are using an HTTP PUT Request with multipart="no" so that the request header content is the file itself, now the data is being sent properly in the content but it has a ~8k limit. This is fine for smaller files but some files are 60kb etc.
Errors are odd too, near the 8KB limit we get a bad gateway error 502, and above that the webpage errors with a connection reset.
It works fine with multipart="yes", but in a PUT request the file's data isn't even sent since it's looking for `httpparam formField` , the content-length from the target page's Headers show a content-length of 0 which causes `cURL` to fail with an error (56): http://curl.haxx.se/docs/manpage.html
Here's example code to reproduce:
<cfset sFilename = "C:\999\test4.txt">
<cffile action="readBinary" file="#sFilename#" variable="fileRead">
<cfset oFileInfo = GetFileInfo("#sFilename#")>
<cfhttp           url="localhost/Clarence/diff_elt_test_output.cfm"
                              method="PUT"
                              username="******"
                              password="******"
                              multipart="yes"
                              result="oHttp">
          <cfhttpparam type="header" name="Content-Type" value="text/plain" />
          <cfhttpparam type="header" name="Content-Length" value="#oFileInfo.Size#" />
          <cfhttpparam type="body" value="#fileRead#"/>
</cfhttp>
<cfdump var="#oHttp#">
Dumping the response via GetHttpRequestData() shows that the header's content-length = 0 and content is blank.
Whereas POST requests work fine, cURL has a -F form option which is our fallback but a solution to this would be great.
Here's what I've tried:
1. Changing CF post request limit sizes (64MB+)
2. Changing IIS config web/webserver http runtime and security.request filtering request limits to much higher values
3. AJP Connector between IIS and Tomcat has a default 8KB header limit, I changed that to 64k on both sides, still nothing
Also am I missing something fundamental here? I thought at the network layer a packet is split up and rejoined, so large content in a http request body should work, what's wrong with Coldfusion 10?

I am familiar with java.net package and know how to
Read and Write Streams.
However, what I do not know is what string
represntation of PUT or POST resquests is?It's HttpURLConnection.setRequestMethod("PUT") or ("POST").
Also you have to setDoOutput(true).
Then you set the content type, possibly encode the input, set the content length, and write the file data to the stream.
Using a Jakarta package may be easier, however.

ACE http probe "request method type" mandatory on A3(2.6)?

Hi people,
I recently upgraded to A3(2.6) from A3(2.0) and I don't see the N/A option on the http probe "request method type".
It also has an asterisk * which means it's mandatory.
I tried to set up a new http probe for another farm I am creating and the probe shows status failed, although I can ping and telnet to the http server on port 80 from the ACE context. My probe is like that:
probe http http_probe_WWW
interval 15
passdetect interval 60
expect status 200 200
open 10
My other http probes for other farms work ok after the upgrade and they are similar.
So my question is: Do I need to set the request method type or something else causes the probe to fail?
thanks a lot.
George

What you see is a problem with the GUI.
CSCtg78008 while creating http probe default method slected should be get as in CLI
But the request-method is not required.
So your config should work.
Do a 'show probe detail' to see the failure reason.
Get a sniffer trace as well.
Regards,
Gilles.

Exchange 2007 Block incoming meeting requests?

Hello,
Is there any way to block incoming meeting requests on an Exchange 2007 server and have it send a message back saying the server doesn't accept said requests? I know it can be done in Outlook with a rule but we would like to block them
at the server for any requests, not just a couple of users.
Thanks

You could look at hub transport rules. I cant remember if 2007 allowed a rule based on a message class.
I would also disable the processing of external meeting requests for mailboxes:
http://technet.microsoft.com/en-us/library/aa996340(v=exchg.80).aspx
Use the ProcessExternalMeetingMessages parameter to specify whether to process meeting requests originating outside the Exchange organization
Twitter!: Please Note: My Posts are provided “AS IS” without warranty of any kind, either expressed or implied.

Disabling HTTP OPTIONS method

Hi
Can anyone tell me how I can disable the HTTP OPTIONS method in Sun One Web Server 6.0 SP4.
Thanks

1) Why would TRACE and OPTION request specifying HTTP 1.0 vs. 1.1 yield such different results?
Web Server 6.0 only implements the TRACE and OPTIONS methods for HTTP/1.1, not HTTP/1.0. This is reasonable as TRACE and OPTIONS are part of the HTTP/1.1 protocol and not the HTTP/1.0 protocol.
In other words, TRACE is always disabled for HTTP/1.0 requests, even if you don't use the set-variable work around.
2) Is the OPTIONS command a legitimate test of whether this fix works? If it is, has anyone managed to have the command return an "Allow:" line MINUS the TRACE?
Nope, not in Web Server 6.0. OPTIONS will always list TRACE. (Note that in Web Server 6.1, TRACE is not as tightly integrated into the server core. As a result, OPTIONS will conditionally list TRACE in 6.1.)
3) Has anyone managed to generate a 501 error message after specifying TRACE / HTTP/1.1 instead of 1.0?
Nope, not in Web Server 6.0.
4) Does this fix really work?
I wouldn't call it a fix; it's a work around. However, it does effectively disable TRACE. The work around is a bit of a kludge, resulting in the odd 413 status code.
The real "fix" appears in Web Server 6.1 where you can disable TRACE simply by commenting out the Service method="TRACE" fn="service-trace" line in obj.conf.

Does IE-11 send preflight OPTIONS request in case of CORS ?

Hi,
I am seeing preflight OPTIONS request is not being sent from IE-11 browser while doing a
cross domain non-simple call. First request sent is handshake request only. What are the cases when IE-11 does and does not send preflight OPTIONS request ?
Thanks,
Anuj

Hi Anuj_577,
Here is a link may be helpful of understanding this issue.
CORS Support in ASP.NET Web API 2
http://msdn.microsoft.com/en-us/magazine/dn532203.aspx
As the link said ,there are two different ways :
simple CORS requests and preflight CORS requests. Apart from this ,there is a feature called preflight cache mentioned . It can be used to reduce the request. Here is another link for reference:
Cross-Origin Requests (CORS) in Internet Explorer, Firefox, Safari and Chrome
http://www.webdavsystem.com/ajax/programming/cross_origin_requests
NOTE: This response contains a reference to a third party World Wide Web site. Microsoft is providing this information as a convenience to you. Microsoft does not control these sites and has not tested any software or information found on these sites.
Considering this is more likely a developing issue, it is recommended to post it in our Internet Explorer developing forum. The people there are more experienced in this area.
Internet Explorer Dev Center
https://social.msdn.microsoft.com/Forums/ie/en-US/home?forum=iewebdevelopment
Best regards

Invalid Http header request

When I try to go to Yahoo.com on Safari I get the following Message:
Invalid Http Header Request
Anyone have any suggestions?

Clear the cache and the cookies from sites that cause problems.
*"Clear the Cache": Tools > Options > Advanced > Network > Offline Storage (Cache): "Clear Now"
*"Remove the Cookies" from sites causing problems: Tools > Options > Privacy > Cookies: "Show Cookies"
If clearing the cookies doesn't help then it is possible that the file <i>cookies.sqlite</i> that stores the cookies is corrupted.<br />
You can rename (or delete) <b>cookies.sqlite</b (cookies.sqlite.old) and delete <b>cookies.sqlite-journal</b> and <b>cookies.txt</b>, if they exist, in the [http://kb.mozillazine.org/Profile_folder_-_Firefox Profile Folder] in case cookies.sqlite got corrupted.
See [[Cannot log in to websites]] (Remove corrupt cookies file)<br />
See also http://kb.mozillazine.org/Websites_report_cookies_are_disabled (Other Solutions)

Significant delay between Microsoft Office Protocol Discovery OPTIONS requests

When users in our network try to download MS Office document from server (Tomcat and HTTPD as a proxy) IE10 hangs for some time (from 10s to 1min) and then opens document. Previous versions of IE (6, 7, 8) work without any issues. We do have our server
configured to return 405 for PROPFIND and OPTIONS requests. We see that browser hangs between OPTIONS requests in Wireshark. What may be the cause of such problems? Does IE10 has some properties to disable such requests? Can we set some header on back-end
to clearly tell IE that our server is not WebDav service?

Hello,
in addition to my question here: http://social.technet.microsoft.com/Forums/office/en-US/eb068660-5ded-411e-bfc1-6f18ba7bc585/office-prompts-for-windows-login-when-im-trying-to-save-edited-document?forum=officeitproprevious
Can someone tell my, how does the Microsoft Office Single Sign on work ?
From what i understand, ms office opens the document (when through IE) and tries to create a webdav connection.
I have tried to disable the webdav on apache.
But the entire webserver is mod_auth_kerb "protected".
And in the access-log, i can see this:
IP, DATETIME, [email protected] document....
But also: IP, DATETIME - document <--- None authenticated user... Why does microsoft not use the current user?
I have tried to ssl enable the website, which i read in this thread: http://support.microsoft.com/kb/2123563
But Microsoft Office stills act as anonymous user.
Jakob Olsen

I need to know how to block the option menu on firefox because my students change the connection option bypassing the proxy that should block them when it's not alloud surf on the web. Thank's

I need to know how to block the option menu on firefox because my students are able to change the connection option bypassing the proxy that should block them when it's not alloud surf on the web. Thank's

See http://kb.mozillazine.org/Locking_preferences
<code>//
lockPref("network.proxy.type", 1);
lockPref("network.proxy.http", "");
lockPref("network.proxy.http_port", "");
</code>
See:
http://kb.mozillazine.org/network.proxy.type
http://kb.mozillazine.org/network.proxy.%28protocol%29
http://kb.mozillazine.org/network.proxy.%28protocol%29_port

Set token attribute to HTTP(s) request header

Hi,
in order to meet security requirements we need to put a token attribute to the HTTP(s) requests header. The data connection is setup as "WSDL data connection".
How can we set this header information in Adobe Designer by scripting that Adobe Reader (with ARES) includes the token to the HTTP(s) header request?
Many thanks for your help,
Daniel

Task is solved. First of all I updated PowerQuery since previous version does not support Headers option for Web.Contents function. Here is a correct syntax:
=Xml.Document(Web.Contents("https://api.ebay.com/ws/api.dll",[Headers=[#"X-EBAY-API-COMPATIBILITY-LEVEL"= "871",#"X-EBAY-API-SITEID"="0",#"X-EBAY-API-CALL-NAME"="GetMyeBaySelling",#"CONTENT-TYPE"="text/xml"], Content=Text.ToBinary("<?xml version="&Character.FromNumber(34)&"1.0"&Character.FromNumber(34)&" encoding="&Character.FromNumber(34)&"utf-8"&Character.FromNumber(34)&"?>
<GetMyeBaySellingRequest xmlns="&Character.FromNumber(34)&"urn:ebay:apis:eBLBaseComponents"&Character.FromNumber(34)&">
<RequesterCredentials><eBayAuthToken>***</eBayAuthToken></RequesterCredentials><SoldList><DurationInDays>60</DurationInDays><Pagination><EntriesPerPage>100</EntriesPerPage><PageNumber>1</PageNumber></Pagination></SoldList></GetMyeBaySellingRequest>")]))

Using ADFS authentication to perform SSO via HTTP GET request

Hi,
Can i authenticate users (those users are clients, at home) to a web application using ADFS without SAML tokens?
The situation is that i want the clients to perform SSO to the website via a link they receive in their mailboxes.
I thought about a solution that combines JWT in a URL link that each user will get to his private mail. this link will contain the users' claim (such as ID Num, given from AD DS Server dedicated especially for them).
Thus, the user will receive an email with a link that already contains a short period of time JWT to perform SSO to the webapp.
Is it possible ? anybody heard about a similar solution ?

Sandra
Thanks for your message
Here is the my requirment
The basic flow of a Where 2 Get It REST API call is:
1) create the required XML structure,
2) URI encode it,
3) make a HTTP GET request,
4) then parse the return XML document.
Currently i have some data in ABAP structure with 5 fields, i need to create XML from the those 5 fields,and needs to be URI
encode it, and then needs to make a HTTP get request to connect Where to Get It REST API, finally it will return XML document via HTTP Get request , and then needs to convert the return XML to ABAP structure for further processing .the above 4 points will be implemented in my report.
Any body could help on this

Retrieve data/files fro HTTP POST request in On-Demand process

Hello,
I would like to integrate https://github.com/blueimp/jQuery-File-Upload to my APEX 4.2 application inside XE11g. I would like to use this kind of jQuery component, multiple file upload, use Drag & Drop, image resize, size limit, filter extensions etc...
This jQuery component and also others javascript uploaders sends data files to some defined URL. Developer need to build some servlet, php script or something on server side that will read files from HTTP request and stores it somewhere.
Do you know how to do it in APEX? How can I read data from HTTP POST request in PL/SQL? Now I can only call my On-Demand application process from javascript, but I am not able to read any data from HTTP POST in it.
Can I do it in APEX, or using MOD_PLSQL?
I would like to implement this:
1) some javascript uploader will call some URL of my application and sends HTTP POST with data files
2) I will read data files from HTTP POST and store them into database
3) I will create some HTTP response for javascript uploader
Thank you for some tips

I know about that existing plugin " Item Plugin - Multiple File Upload"
But I doesn't work in IE and has only basic features. Licence for commercial use is also needed. I would like to use some existing jQuery plugin. There are many of these plugins with nice features. And only one problem is that I need to create some server side process/servlet/script.. that can recieve HTTP request, get files from it and stores them into DB.

HTTP GET request to XI

hi forum,
i have been trying to send a HTTP GET request to XI using SOAP and HTTP adpaters (by designing objects in IR and ID), but failed to do so,
the requirement is specifically sending HTTP GET, (no content in the body)
Is there any way of achieving this using existing adapters,
My observations:
when i make a HTTP GET request to XI using sender HTTP adapter, it gives a response "Body is empty" with HTTP code 204-No content,
when i use SOAP adapter, and make a HTTP GET request to intergration engine, using sender SOAP adapter, it gives a response
<html>
<head>MessageServlet</head>
<body>
Message Servlet is in Status OK
Status information:
Servlet com.sap.aii.af.mp.soap.web.MessageServlet (Version $Id: //tc/xi/NW04_23_REL/src/_adapters/_soap/java/com/sap/aii/af/mp/soap/web/MessageServlet.java#2 $) bound to /MessageServlet
<br/>Classname ModuleProcessor: null
<br/>Lookupname for localModuleProcessorLookupName: localejbs/ModuleProcessorBean
<br/>Lookupname for remoteModuleProcessorLookupName: null
<br/>ModuleProcessorClass not instantiated
<br/>ModuleProcessorLocal is Instance of com.sap.aii.af.mp.processor.ModuleProcessorLocalLocalObjectImpl0_0
<br/>ModuleProcessorRemote not instantiated
</body></html>,
and http response code 200 OK, but i cant find anything in the integration engine (from SXMB_MONI),
pls help

hi prateek..... lot of thanks,
developing/deploying a proxy ejb for this purpose seems good,
but, deploying a custom servlet (for calling that ejb) seems "not-so-standard" way,
since i m very new to custom j2ee development in XI, i have certain queries:
1. Is there any guidelines for developing and deploying custom j2ee components,
2. Will SAP provide support in case of these components not working "as expected" or hampering other applications,
thanks for help

How can i send xml file with a http servlet request

Hi
Please tell me how can I send a xml file into http servlet request.
I have a servlet(action) java file.From this servlet I have generate a xml file. Now I need to send that xml file to another servlet with http servlet request object.
Dave.

When you say you have generated an XML file what do you mean?
Is it a file stored on disk? Then pass the file path as a string to the servlet.
Is it stored in memory as an object? The pass a reference to the object to the servlet.
Or are you asking how to communicate between servlets?
Look in the JavaDocs for the RequestDispatcher class. You can use this class to forward the request to another servlet. Data can be passes using the RequestDispatcher by storing it as attributes using the request getAttribute and setAttribute methods. Also described in the JavaDOcs.
http://java.sun.com/j2ee/1.4/docs/api/javax/servlet/RequestDispatcher.html

Block HTTP Options request in DBMS_EPG

Similar Messages

Maybe you are looking for