BOE XI 3.1 using IIS
We are building a new BOE XI 3.1 using IIS as the web server, windows AD authentication and Kerberos for SSO. At this point we have run into two issues:
1. we can't configure Windows AD authentication for the CMC login. We would also like to use SSO, but at this point would be happy getting WIndows AD working.
2. SSO does not work for the desktop tools like Universe builder or designer. Windows AD is working but would like to get SSO working as well.
Please let us know if you have been able to configure either of the above in the environment that I describe.
Best Regards,
Kevin Geiger
I don't think any type of SSO will work with the CMC cept maybe siteminder in XI 3.1. AD will work but you will have to configure java AD due to the CMC not running on .net.
Now our Admin guide specifically states that using java kerberos and .net kerberos is not supported on the same server (not that it won't work). It just states that. So there are no docs that show how to set these both up at the same time.
So the doc in the previous post should help with the .net part. Where are you running the CMC? WACS? or tomcat?
Regards,
Tim
Similar Messages
-
Unable to login into BIP using IIS/Oc4j
Hi ,
we have configured SSO in OBIEE using IIS. and to configure oracle proxy for OC4J followed the steps at below url.
http://gerardnico.com/wiki/dat/obiee/iis
But getting the error when trying to browse the ulr
http://localhost/xmlpserver/login.jsp
Error: Internet Explorer cannot display the webpage
any suggestion plsWhen I try:
http://localhost:9704/xmlpserver/
it direct me to BIP login page
http://localhost
Under Construction
The site you are trying to view does not currently have a default page. It may be in the process of being upgraded and configured.
Please try this site again later. If you still experience the problem, try contacting the Web site administrator.
If you are the Web site administrator and feel you have received this message in error, please see "Enabling and Disabling Dynamic Content" in IIS Help.
To access IIS Help
Click Start, and then click Run.
In the Open text box, type inetmgr. IIS Manager appears.
From the Help menu, click Help Topics.
Click Internet Information Services.
http://localhost:9704
It direct me to welcome page for OC4J
any help please..
when I try
http://localhost/xmlpserver/login.jsp
get the error please find the log:-
12/06/12 13:36:22: [op_uri_map.c (129)]: Into op_uri_map_t::uri_map_alloc
12/06/12 13:36:22: [op_uri_map.c (163)]: Into op_uri_map_t::uri_map_open
12/06/12 13:36:22: [op_worker_list.c (37)]: op_worker_list_init: propfile=c:\proxy\proxy.conf p=0x010D4A60 l=0x010D24C0
12/06/12 13:36:22: [op_worker_list.c (45)]: op_worker_list_init: numservers=1
12/06/12 13:36:22: [op_worker_list.c (57)]: op_worker_list_init: inside loop, serverlist[0]=ias1
12/06/12 13:36:22: [op_worker_list.c (73)]: op_worker_list_init: hostname=hrlvmdv1281.emea.hays.loc
12/06/12 13:36:22: [op_worker_list.c (82)]: op_worker_list_init: port=9704
12/06/12 13:36:22: [op_worker_list.c (160)]: op_worker_list_init: tablesize=3
12/06/12 13:36:22: [op_worker_list.c (169)]: op_worker_list_init: lookuptable[0]=/xmlpserver/*, servlist[0]=ias1
12/06/12 13:36:22: [op_worker_list.c (169)]: op_worker_list_init: lookuptable[1]=/xmlpserver oproxy.ias1.urlrule=/bioffice/*, servlist[0]=ias1
12/06/12 13:36:22: [op_worker_list.c (169)]: op_worker_list_init: lookuptable[2]=/bioffice, servlist[0]=ias1
12/06/12 13:36:22: [op_uri_map.c (193)]: op_uri_map_t::uri_map_open, rule map size is 3
12/06/12 13:36:22: [op_uri_map.c (266)]: Into op_uri_map_t::uri_map_open, match rule /xmlpserver/=hrlvmdv1281.emea.hays.loc was added
12/06/12 13:36:22: [op_uri_map.c (266)]: Into op_uri_map_t::uri_map_open, match rule /xmlpserver oproxy.ias1.urlrule=/bioffice/=hrlvmdv1281.emea.hays.loc was added
12/06/12 13:36:22: [op_uri_map.c (301)]: Into op_uri_map_t::uri_map_open, exact rule /bioffice=hrlvmdv1281.emea.hays.loc was added
12/06/12 13:36:22: [op_uri_map.c (313)]: Into op_uri_map_t::uri_map_open, there are 3 rules
12/06/12 13:36:22: [op_uri_map.c (340)]: op_uri_map_t::uri_map_open, done
12/06/12 13:36:22: [op_isapi_plugin.c (765)]: initialize_extension, success!
12/06/12 13:36:22: [op_isapi_plugin.c (459)]: Start of HttpFilterProc
12/06/12 13:36:22: [op_uri_map.c (363)]: Into op_uri_map_t::map_uri_to_host
12/06/12 13:36:22: [op_uri_map.c (443)]: op_uri_map_t::map_uri_to_host, done without a match
12/06/12 13:36:22: [op_isapi_plugin.c (553)]: HttpFilterProc [] is not a proxy url
12/06/12 13:36:22: [op_isapi_plugin.c (459)]: Start of HttpFilterProc
12/06/12 13:36:22: [op_uri_map.c (363)]: Into op_uri_map_t::map_uri_to_host
12/06/12 13:36:22: [op_uri_map.c (443)]: op_uri_map_t::map_uri_to_host, done without a match
12/06/12 13:36:22: [op_isapi_plugin.c (553)]: HttpFilterProc [] is not a proxy url
12/06/12 13:36:22: [op_isapi_plugin.c (566)]: HttpFilterProc ==> SF_NOTIFY_LOG phase
12/06/12 13:36:22: [op_isapi_plugin.c (566)]: HttpFilterProc ==> SF_NOTIFY_LOG phase
12/06/12 13:36:23: [op_isapi_plugin.c (459)]: Start of HttpFilterProc
12/06/12 13:36:23: [op_uri_map.c (363)]: Into op_uri_map_t::map_uri_to_host
12/06/12 13:36:23: [op_uri_map.c (443)]: op_uri_map_t::map_uri_to_host, done without a match
12/06/12 13:36:23: [op_isapi_plugin.c (553)]: HttpFilterProc [pagerror.gif] is not a proxy url
12/06/12 13:36:23: [op_isapi_plugin.c (459)]: Start of HttpFilterProc
12/06/12 13:36:23: [op_uri_map.c (363)]: Into op_uri_map_t::map_uri_to_host
12/06/12 13:36:23: [op_uri_map.c (443)]: op_uri_map_t::map_uri_to_host, done without a match
12/06/12 13:36:23: [op_isapi_plugin.c (553)]: HttpFilterProc [pagerror.gif] is not a proxy url
12/06/12 13:36:23: [op_isapi_plugin.c (566)]: HttpFilterProc ==> SF_NOTIFY_LOG phase
12/06/12 13:36:23: [op_isapi_plugin.c (566)]: HttpFilterProc ==> SF_NOTIFY_LOG phase -
Configuring Windows XP to use IIS w/ Kerberos
I need to build a Windows XP SSO solution using IIS 5.1 with Integrated Windows Authentication using Kerberos protocol. IIS will then pass the request over to another application which will need to use a Kerberos JAAS module to authenticate the respective users to the application.
Does anyone have any instructions or tips on accomplishing these set of tasks? I have very limited experience with Kerberos. Any help would be much appreciated.
Note: I've gotten this to work using NTLM, so I would like to know the level of difficulty in making the switch over to Kerberos.
Thanks a lot in advance!
Message was edited by:
YvesGBecause in SAP Help on topics <a href="http://help.sap.com/saphelp_nw2004s/helpdata/en/44/0ebf6c9b2b0d1ae10000000a114a6b/content.htm">Single Sign-On with Microsoft Kerberos SSP</a> and
<a href="http://help.sap.com/saphelp_nw2004s/helpdata/en/44/0ebf6c9b2b0d1ae10000000a114a6b/content.htm">Configuring the Application Server</a>, tell to copyt the gsskrb5.dll file(see SAP Note 595341), to the following directory on the central instance: Drive:\%windir%\system32.
This text let me think that central instance is installed on a Windows Server, but on SAP Help docs I didn't found the specific information that the central instance must be installed on a Windows Server. -
How do I set up and use IIS 7.5 in Windows 7
I just bought a new machine and installed Windows 7 RC Ultimate and CS4 on it.
I set up IIS (or at least I think I did) and Inetpub now shows in the directory listing, so it should be there.
Only problem is that I cannot save any files to any site in the Inetpub directory even when logged in as administrator.
I have to manage lots of web sites that use asp, and so need to have the Inetpub facility.
Setting up IIS in Windows 7 is poorly documented, and seems quite complex.
The instructions on Microsoft's technet site for accessing IIS do not work, and so I am at a loss.
Am I to assume that the normal Dreamweaver method of storing files in inetpub/wwwroot/sitefolder is no longer valid?
Whether or not, can anyone tell me how to set up a site in windows 7 that will run an asp site using IIS?http://forums.iis.net/t/1147354.aspx has the answer to providing acess to folders that are not usually accesible in Windows 7.
Run the following command from an elevated command prompt (right click the "command prompt" icon and select "Run as Administrator").
icacls %systemdrive%\inetpub /grant %userdomain%\%username%:(OI)(CI)(F) /grant %userdomain%\%username%:F
This command will add full access for your user account to the INETPUB directory.
Now the Administrator privileges which you don't have don't matter anymore because your account and not Administrators grant you access.
How obscure can you get?
I assume that changing the folder name from inetpub to whatever other folder you need to access will have the same effect.
All I have to sort out now is how to get the F12 key on my wireless keyboard to run a file when pressed in Dreamweaver - but that is another problem. -
Help with using IIS as webserver
I have two DNS that maps to two application on the same instance of weblogic.
I have to use IIS as my webserver, and so I have two IIS apps that maps by path. In one of the iisproxy.ini file - WlForwardPath = / and in the other WlForwardPath = /app2
My context-root for both applications in the application.xml file is / and /app2 respectively.
However my first DNS works fine - http://app1.company.com, but the second DNS does not work if i type http://app2.company.com. If I type http://app2.company.com/app2 then it works fine. Is there some way that I can implicitly make http://app2.company.com point to http://app2.company.com/app2 ? Any help greatly appreciated.bgeorge,
I haven't used the IIS Plugin, but in the Apache plugin, I think that there's a "PathPrepend" parameter for the plugin that I think might do what you want, i.e., you'd do a "PathPrepend=/app2".
See:
http://e-docs.bea.com/wls/docs81/plugins/plugin_params.html#1143055
Hope that this helps.
Jim -
How to Open MPP programmatically without using IIS Express in WCF Application
Hi all,
i have been succeeded to open Microsoft Project Profession file programmatically for Project that is created in project server
please refer this
link.
but now we have to do this task in WCF Application then if we enable "Use IIS Express" option then this code is working fine.
but if we uncheck or remove "use IIS express" option then it is not working, what would be the possible reason for this?
and just wondering if we deploy this WCF service on some X server, does this code will be helpfull??
Basically we are looking for the exact functionality what "Open with Project" button do in project server. (please refer below image)
Regards, Kartik Ghodasara Associative Software engineer, Synoverge Tech Pvt. Ltd. Ahmedabad Please vote or mark as answer if it helps...the code's not formatted so I'm not going to try to read it,
and there's too many ?? to remove before it will compile,
so, you say it works with the mouse - how, clicking a button?
if so, search for the keyBindings tutorial where you can set up
an action for (e.g.) F2 to do button.doClick() -
How to use repository in boe xi r2 to use common formula's & commands
How can the repository in boe xi r2 be used to store common formula's and commands (i.e. sql - 'add command') so that multiple developers can insert the formula's into new reports to ensure consistency in data selection etc...
Hi,
i guess you are talking here about Crystal Reports. In CR it is possible to store functions and formulas into the repository to re- use these in different Reports.
In WebI you cant. In WebI you could create Objects in the Universe to re- use them in different Reports.
Hope this clarifies a bit more.
Regards
-Seb. -
Use IIS 7 (Microsoft) with Adobe Media Server Extended 5.0
I install Adobe Media Server Extended 5.0 and Flash Media Live Encoder 3.2. Good running. But I want use IIS 7 (Microsoft) replace Apache 2.2. Help me config to run
<moved by mod from downloading,installing,setting up - kglad>Tried in Google : .swf to .flv, .swf to ..f4v convertors
I convert the LMS Content Output formats .swf files to .flv files using SWF to FLV Convertor and upload
on the Flash Media Server 3.5 using
Moyea SWF4Tube Converter (SWF to FLV Converter)
Web URL : http://www.swfkits.com/swf-to-flv-converter/
In this way can i then use the Adobe Flash Media Server 3.5 for Viewing LMS Content in
as a Streaming Video on my IE 6.0/7.0 Browser with Flash Player 10 installed ?
Thanks & Regards,
Prashant S Akerkar -
Need help on struts configuration with ColdFusion 10 using IIS
We need help on struts configuration with ColdFusion 10 using IIS.
Earlier we were using ColdFusion 8 with IIS 6 for one of our application. This application internally calls struts. After upgrading to ColdFusion 10 struts calls are not loading. We get 404 error.
In ColdFusion 8 struts were configured using actions extension .do in IIS from this file-
C:\ColdFusion8\runtime\lib\wsconfig\jrun_iis6.dll.
But in ColdFusion 10 this file is not present as ColdFusion 10 uses Tomcat in place of Jrun.
Also there is no information in ColdFusion log file.Duane wrote:
doctormirabilis, Welcome to the discussion area!
1) how can i configure the time capsule in order to operate as a remote base station synchronizing with the relay using the ethernet port?
Configure the Time Capsule to act as a bridge (not distributing IP addresses). Also configure the Time Capsule to create an 802.11n wireless network with a unique network name (SSID). That's it.
2) how can i avoid that my powerbook while accessing my wireless network does connect through the relay station instead of using the time capsule?
Configure the Time Capsule to use a different network name than the WDS link between the 2 AirPort Express (AX). Configure the PowerBook to use the Time Capsule network.
There are 2 pieces of information that you should be aware of...
(1) None of the PowerBooks are capable of 802.11n.
(2) The WDS link cuts your available bandwidth in half. So the wireless link to your neighbor's has a maximum potential of 27 Mbps.
Let's for a minute assume that you have a Mac compatible with 802.11n. In your configuration the time you could take advantage of the 802.11n speed is when the Mac is sending/recieving data directly from/to the Time Capsule.
There would be NO speed increase in Internet access. The speed of Internet access is going to be controlled by the slowest link in the path to the Internet. That is probably the connection to the ISP. The next slowest path is the WDS link to your neighbor's.
Duane,
I am in a similar situation, sharing internet with my neighbor. Do you think it would be plausible to hook up a vonage phone adapter to time capsule's ethernet port if time capsule is bridging from my neighbor's router in the configuration you have described? A check of my upload speed shows 1.67Mbps (powerbookG4 w/ airport extreme). Vonage reccommends 90kbps minimum upload speed. Am I going to lose some speed putting the Vonag adapter behind time capsule?
Thank you -
Issues using IIS 8.5 with ARR 3.0 as Reverse Proxy for Lync 2013
Dear reader, after searching for a day without finding a solution to my problem I end up here ;-)
Working Lync 2013 environment (gradually adding functionality) consisting of 2 FE servers, Persistent Chat Server, Web Apps server, Edge Server, Reverse Proxy Server (IIS 8.5/ARR 3.0), SQL Server.
Set up a fresh Windows 2012 R2 with IIS 8.5, installed ARR 3.0 and followed along this
TechNet article.
So far so good, external clients (incl. mobile phone apps) can all connect.
Now trying to add Web Apps to the reverse proxy, which is slightly different from the others by not forwarding 80/8080 and 443/4443, but just 80 and 443 to internal Web Apps server.
After creating the server farm/URL rewrite, browsing to the webapps.FQDN/hosting/discovery ends up with a 404 error (instead of XML, which is shown when try from the LAN).
After moving this rewrite rule to the top, it started working, but now my lyncdiscover.FQDN stops working.
Ofcourse moving the webapps rule down restores the lyncdiscover.
Any ideas? (everything setup as described in above mentioned TechNet article, so using wildcards. Tried fiddling around with webext.* and lyncdiscover.* and so, but no luck. (I'm completely new to ARR)
Thanks,
BarryCan you confirm that for each URL Rewrite Rule, you have an {http_host} record that matches something like webext.* as you referenced above and as seen in step 15 here:
http://blogs.technet.com/b/nexthop/archive/2013/02/19/using-iis-arr-as-a-reverse-proxy-for-lync-server-2013.aspx
It might help if you posted a screenshot of your URL rewrite rules.
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications -
In my project am going to migrate windows server 2003 to 2012 r2 by using IIS 6.0? what are the parameters are changed and what are the parameters are not supported and what are the modules need to change?
Please give the related answer as soon as posssibule. that is more help for me?
Thanks,
vamsikrishna.1. This seems to be incomplete description.
2. You can enable legacy technologies while installing roles and features.
3. For application pool(s) you should consult respective developer/vendor team(s) for help.
Regards
Milos -
Client Certs for just one directory using IIS
I am using JRun 4 and IIS 5 on one site and IIS 6 on another, and am using SSL and requiring client certificates. I have all that working through IIS's site properties but my issue is that I only want to accept client certificates on one directory, in fact I only want the request for the client cert to pop up on that one directory. By setting the JRun.dll to the proper security settings to accept client certificates in IIS, any jsp file will prompt for the cert.
Do I not want to want to use IIS to set up my SSL and client cert request as opposed to doing it in the web.xml? All my research pointed me to do this through IIS. Using IIS, do I need to use another ISAPI Jrun connector? How do I do that?
Can someone tell me a way to get this working for a client cert prompt only for the one directory either though IIS or application security?
Thanks for any input you can provide.Hello Bill,
I am sorry but I do not have an answer to your issue. It just
happend that I am trying to set up SSL connection between JRUN 4
and IIS 5 using JRUN ISAPI connector. Unfortunately every time I
try to run the "*.jsp" test page I am getting "fetchprops" error
message on JRUN ISAPI connector. Would you be able to give me some
hints as to what could cause this issue. By the way, I am testing
it only with trial version of SSL certificate on IIS.
Thank you -
Can I use IIS for flex portal development?
I want to use IIS for flex portal development. As we can user
jboss portal server to deploy flex portlets.
Is it possible ?
ThanksHello,
pulling 10-25 million rowsYou will never want to show that many records on a page or html based report, the page weight would be absolutely huge along with your network load (this would be the case in any web enviroment), even google which I will have to assume has many more records than you do only shows 10 records returned at a time.
Results 1 - 10 of about 3,510,000,000 for htmlApplication Express can handle sql queries against that data, the question you really should be researching is what it takes to create queries that perform well against such a dataset
http://forums.oracle.com/forums/search.jspa?threadID=&q=query+large+datasets&objID=c18
Carl -
Lync Mobile unable to sign in using IIS ARR
We have a deployment which currently has no issues using an Apache reverse proxy running on Ubuntu. I am working on switching over to a supported reverse proxy, so IIS ARR is the obvious choice. I have configured IIS ARR by following the steps at:
http://uclobby.com/2013/08/02/configuring-arr-for-lync-server/
http://blogs.technet.com/b/nexthop/archive/2013/02/19/using-iis-arr-as-a-reverse-proxy-for-lync-server-2013.aspx
When I try to sign on externally using Lync 2013 Mobile, I get a message saying "An unknown error occured". The Lync Mobile logs show the following error:
Caused by: java.net.ConnectException: failed to connect to /xxx.xxx.xxx.xxx (port 443) after 60000ms: isConnected failed: ECONNREFUSED (Connection refused)
I have even gone as far as opening all the ports to the IIS ARR server on the firewall and disabling Windows firewall on everything.To fix issue "502 - Web server received an invalid response while acting as a gateway or proxy server.", you can refer below link
http://support.microsoft.com/kb/2455129/en-us
it's assume reverse proxy configuration issue, please check the following things:
Please make sure your internal web service url and external web service url are not pointed to the same FQDN.
Verify you have update the public certifcates including lyncautodiscover URL in the SAN entries for your reverse proxy server
Check the authenticated delegation is set to "No delegation, but clients may authenticate directly"
Please try to enable internal access and see if it works
If still no luck,please enable Lync server logging tool and reproduce the issues,then use snooper to analyze the log for more specific information
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
Mai Ali | My blog: Technical -
Using IIS AAR as a reverse proxy for Exchange 2010 & Lync 2013
hi
i am planning to use IIS AAR as reverse proxy solution for both Exchange 2010 & Lync 2013 . need clarifications on the below.
Is it production ready proof solution of using IIS AAR as a reverse proxy solution , if yes what is the sizing considerations for the same.
Can we have exchange reverse proxy and lync reverse proxy on the same IIS ARR server.
Is there any special consideration(license/certificates/cal licenses) needs to be taken care while using this solution
4. Deployment Guide available?hi steve.. thanks for reply..
1 have gone through that.. however having both exchange & lync reverse proxy on single server is unanswered and the reason for having this in exchange forum is to have consideration from exchange prospective as well ...
I am also wondering this. Can both exist on the same set of proxy servers? I also plan to have a load balanced solution. Has anyone had any luck with doing that?
Maybe you are looking for
-
Can I use my new iMac to control an old G4?
Before I purchased a new iMac G5, I was able to control two Macs using one monitor, one mouse and one keybord. To switch between the two Macs I used an USB KVM Belkin switch. Can I do the same now that my monitor is the iMac monitor? Can I configure
-
I have a 4th gen white iTouch and I use iMessage alot. Sometimes the messages on there won't send and I don't know why. Today I clicked on "Reset All Settings", because last time I did that, the iMessage started working again. But today it locked me
-
Question about DME file in payment run (transaction F110)
Hi expert, I have made a payment run in transaction F110. The payment was made and the bank file (DME file) was created. We are using DME format /BE_BEPDTA. The bank number in the file is the bank account number from transaction FBZP (table V_T012K,
-
Custom Workflow for sending Remainder mail in MS CRM 2013/2015 online
Hi All, We have a requirement to send a remainder email before 5 days,3 days and on the same day of the M/TC date in lead form. To achieve this we tried using Custom Workflow. Below is the logic tried but in the highlighted line not able to retrieve
-
How do I figure out what swatch I used?
I'm working on a complex illustration in Illustrator CS4. I need to make multiple versions of it, each with a slightly different color scheme. I'm using a set of swatches imported as an .ase file. Is there some way to discover what swatch was used on