Catching security exception on user lockout

Hi,
We want to show a message to the user when his id is locked by weblogic after
exceeding invalid login attempts. So when the user tries to login, we are not
able to differentiate between the invalid password failure and the failure due
to user-lockout. The documentation mentions that once a user account is locked,
any subsequent attempts to access the account raise a Security exception. We are
using FORM authentication, and are forwarded to same login-error-page in both
cases. Perhaps that exception is getting caught by the web server and we end up
seeing the same login-error-page.
http://edocs.bea.com/wls/docs70/secmanage/passwords.html
http://edocs.bea.com/wls/docs81/messages/Security.html#BEA-090078
Any way around this?
Priyank

I don't think that there is a way to catch this case. I believe the
thought was that if you give a potential attacker an indication of why
authentication failed you are giving them too much information. With no
indication of the failure an attacker doesn't know if the authentication
failed due to a bad username, a bad password or what. I agree that it
makes it hard for the "good" user who mistyped their password once too
many times.
PaulF
On Wed, 26 Nov 2003 10:38:10 -0500, Peter <PeterB> wrote:
>
"Priyank" <[email protected]> wrote in message
news:3fbc445b$[email protected]..
Hi,
We want to show a message to the user when his id is locked by weblogicafter
exceeding invalid login attempts. So when the user tries to login, we
arenot
able to differentiate between the invalid password failure and the
failuredue
to user-lockout. The documentation mentions that once a user account islocked,
any subsequent attempts to access the account raise a Security
exception.We are
using FORM authentication, and are forwarded to same login-error-page inboth
cases. Perhaps that exception is getting caught by the web server and weend up
seeing the same login-error-page.
http://edocs.bea.com/wls/docs70/secmanage/passwords.html
http://edocs.bea.com/wls/docs81/messages/Security.html#BEA-090078
Any way around this?
I would ask in the weblogic.developer.interest.servlet newsgroup.
Using M2, Opera's revolutionary e-mail client: http://www.opera.com/m2/

Similar Messages

Catch RFC Exception - User Account locked

Hello,
I am hoping someone knows how in the portal to catch an exception thrown by JCo indicating a users account is locked in R/3.
I would like to trap the error and display a friendly error message to contact the correct people. I do not want to see a Portal Runtime Error get presented to end users.
Here is what it looks like in the default trace:
Caused by: com.sap.mw.jco.JCO$Exception: (103) RFC_ERROR_LOGON_FAILURE: User is locked. Please notify the person responsible
at com.sap.mw.jco.MiddlewareJRfc.generateJCoException(MiddlewareJRfc.java:418)
Any docs on catching R/3 Fault exceptions is great as well.
Thank you,
Sean

Usually when working with BAPIs, it is designed not to raise any exceptions. They are designed to pass any errors back to the caller thru the BAPIRET2 parameter in the BAPI signature, using a TABLES parameter. This is how you will let the user know gracefully. If you are working with custom function modules which are to be called from the portal, they need to be developed in such a way that they do not RAISE and exceptions, but pass the errors back using a table like in the BAPIs.
REgards,
Rich Heilman

[svn] 977: Bug: BLZ-93 - When a producer sends a message to a secure destination with no credentials it causes a security exception to get logged with a log level of error .

Revision: 977
Author: [email protected]
Date: 2008-03-27 17:04:59 -0700 (Thu, 27 Mar 2008)
Log Message:
Bug: BLZ-93 - When a producer sends a message to a secure destination with no credentials it causes a security exception to get logged with a log level of error.
QA: Yes
Doc: No
Details:
Updates to catch-all exception logging hinge points on the server to use a new method on MessageException that protects against repeat logging of the same exception as we unwind the call stack on the server, as well as allowing exception subclasses to control the log level, intro text and inclusion of a full stack trace in the logged output. This allows things like SecurityExceptions, which represent common errors like incorrect user credentials, to avoid polluting the log with error-level logging and stack traces. It also consolidates our catch-all handling for MessageExceptions and their subclasses in a single point, avoiding problems with needing to make updates or tweaks to our logging output in multiple places.
Ticket Links:
http://bugs.adobe.com/jira/browse/BLZ-93
Modified Paths:
blazeds/branches/3.0.x/modules/common/src/java/flex/messaging/log/Log.java
blazeds/branches/3.0.x/modules/common/src/java/flex/messaging/util/ExceptionUtil.java
blazeds/branches/3.0.x/modules/core/src/java/flex/messaging/MessageBroker.java
blazeds/branches/3.0.x/modules/core/src/java/flex/messaging/MessageException.java
blazeds/branches/3.0.x/modules/core/src/java/flex/messaging/endpoints/amf/MessageBrokerFi lter.java
blazeds/branches/3.0.x/modules/core/src/java/flex/messaging/endpoints/amf/SuspendableMess ageBrokerFilter.java
blazeds/branches/3.0.x/modules/core/src/java/flex/messaging/security/SecurityException.ja va
blazeds/branches/3.0.x/modules/core/src/java/flex/messaging/services/ServiceException.jav a

One thing I forgot to add, which may be causing you
problems: the "mount volume" command is not part of
the Finder dictionary. It stands alone.
bill
Mac OS X
(10.4.10) 1 GHz Powerbook G4
I tried the mount command. After executing it in Script Editor, I was prompted with login and password, but it was my Keychain!
I don't know if you have your keychain unlocked or what else..
Maybe the original poster (Rick Anderson) has his keychain locked and the prompt is from it.
Just a guess...
Ciao,
Ermanno
Dual 2 GHz PowerPC G5 Mac OS X (10.4.9) 4.5 GBy SDRAM, 5 external FW disks, 2 Internal SATA disks

Security exceptions not configurable after release 31 (bug number 1042889 is not fixed)

We are running Firefox 31 32 and 33 on different machines on windows/XP (updated until end of support).
Our router has an expired certificate. On the machines updated to Firefox 32 or above the security popup screen does not show. Instead we just get the corresponding error message, when trying to access the router's homepage.
I looked at the support thread "Secure Connection Failed- can not confirm security exception (since update to 31)" .
The posted solutions do NOT work!
Chrome and even IE work fine.
Please take a look at what was changed and reverse it.
Or add a possibility to configure exceptions to the always accessible options tab "security", Having only 262 users with the same problem, means all others having the problem just moved to other browsers.
For someone using Firefox since the beginning and liking it this will be a hard step, so I raise the issue again.
No, buying a new router is NOT an option, because it manages our network storage and printers and the rule is "never fix a running system".

hello, the fix of the bug number you have referred to has already landed in firefox 31.2.0 esr and will land in the regular firefox release channel in case there is an update to firefox 33 or else in version 34.

Unable to run a form(FOrms 5.0) on Web. Security exception E

Hi,
I am trying to run a simple form developed in Forms 5.0 over our
intranet.
Environment: On NT I am using Oracle 8.0.5, Developer/2000
Server and Internet Information Server 4.0.
I have created a simple form and deployed on the server.
(created the virtual directories for Java related directories as
per some documentation available with me). Made a small html
document containing the Applet definition to run this form. When
I tried to execute this, it gives the following security
exception error.
==============================================
com.ms.security.SecurityExceptionEx
[oracle/forms/uiClient/v1_4/engine/Runform.initClipboard]:
Clipboard access denied.
at com/ms/security/permissions/UIPermission.check
at com/ms/security/PolicyEngine.deepCheck
at com/ms/security/PolicyEngine.checkPermission
at com/ms/security/StandardSecurityManager.chk
at
com/ms/security/StandardSecurityManager.checkSystemClipboardAcces
s
at com/ms/awt/WToolkit.getSystemClipboard
at
oracle/forms/uiClient/v1_4/engine/Runform.initClipboard
at oracle/forms/uiClient/v1_4/engine/Runform.startRunform
at oracle/forms/uiClient/v1_4/engine/Runform.run
at java/lang/Thread.run
com.ms.security.SecurityExceptionEx
[oracle/forms/uiClient/v1_4/engine/Runform.initClipboard]:
Clipboard access denied.:Clipboard access denied.
Microsoft (R) VM for Java, 4.0 Release 4.79.0.2435
==============================================
? help
c clear
f run finalizers
g garbage collect
m memory usage
q quit
t thread list
==============================================
Can any body help me, where I might have gone wrong, either in
the development or deployment.
I am also, running Oracle Application server 4.0.7 on the
server, but I am not using the cartridge based deployment of
forms, beca, I could not find way to create Forms
application/Cartridge in it. If any one about it please help me.
Early response is highly appreciated.
Thanking you in advance ..// Manohar Reddy //
null

Hi Mobeen,
That is one thing that I wanted to know. How do I make Forms
Server to run as Service. Please explain me the
procedure/operation.
I am using IIS 4.0.
Do you have any Idea, how to implement the Cartridge version of
the Forms on OAS 4.0
Thanks for the information though ..// Manohar //
mobeen (guest) wrote:
: hi
: well u can run forms server asa service on NT then even if u
log
: out i wont terminate.
: which web server r u running
: mobeen
: Manohar Reddy (guest) wrote:
: : Thank you Mobeen for your time..
: : I was able solve the problem.
: : The problem was, my Forms Server(F50srv32.exe) was
terminating,
: : whenever I log out of that box. Now, I need to know, I to
make
: : that Process to run continuously, like a servece.
: : Another issue, which mentioned, in my y'days mail is, How to
: run
: : these forms as the CARTRIDGE method ? ..
: : Does any bdy can help me ..// Manohar //
: : Mobeen (guest) wrote:
: : : Hi
: : : i guesss u have not exported Dev2k.x509 for Developer/2000.
: : : copy Dev2k.x059 file to ur harddisk from the media
: : : then
: : : use javakey -c Developer/2000 true
: : : javekey -ic Developer/2000 Dev2k.x509
: : : it would generate identitydb.obj place that file in
: : /user/profile
: : : directory.
: : : plus u have to set forms60_mapping and forms60_output
: Registry
: : : Variables
: : : i hope that would sovle ur problem
: : : mobeen
: : : Manohar Reddy (guest) wrote:
: : : : Hi,
: : : : I am trying to run a simple form developed in Forms 5.0
: over
: : : our
: : : : intranet.
: : : : Environment: On NT I am using Oracle 8.0.5,
Developer/2000
: : : : Server and Internet Information Server 4.0.
: : : : I have created a simple form and deployed on the server.
: : : : (created the virtual directories for Java related
: directories
: : : as
: : : : per some documentation available with me). Made a small
: html
: : : : document containing the Applet definition to run this
form.
: : : When
: : : : I tried to execute this, it gives the following security
: : : : exception error.
: : : : ==============================================
: : : : com.ms.security.SecurityExceptionEx
[oracle/forms/uiClient/v1_4/engine/Runform.initClipboard]:
: : : : Clipboard access denied.
: : : : at com/ms/security/permissions/UIPermission.check
: : : : at com/ms/security/PolicyEngine.deepCheck
: : : : at com/ms/security/PolicyEngine.checkPermission
: : : : at com/ms/security/StandardSecurityManager.chk
: : : : at
com/ms/security/StandardSecurityManager.checkSystemClipboardAcces
: : : : s
: : : : at com/ms/awt/WToolkit.getSystemClipboard
: : : : at
: : : : oracle/forms/uiClient/v1_4/engine/Runform.initClipboard
: : : : at
oracle/forms/uiClient/v1_4/engine/Runform.startRunform
: : : : at oracle/forms/uiClient/v1_4/engine/Runform.run
: : : : at java/lang/Thread.run
: : : : com.ms.security.SecurityExceptionEx
[oracle/forms/uiClient/v1_4/engine/Runform.initClipboard]:
: : : : Clipboard access denied.:Clipboard access denied.
: : : : Microsoft (R) VM for Java, 4.0 Release 4.79.0.2435
: : : : ==============================================
: : : : ? help
: : : : c clear
: : : : f run finalizers
: : : : g garbage collect
: : : : m memory usage
: : : : q quit
: : : : t thread list
: : : : ==============================================
: : : : Can any body help me, where I might have gone wrong,
either
: : in
: : : : the development or deployment.
: : : : I am also, running Oracle Application server 4.0.7 on the
: : : : server, but I am not using the cartridge based deployment
: of
: : : : forms, beca, I could not find way to create Forms
: : : : application/Cartridge in it. If any one about it please
: help
: : : me.
: : : : Early response is highly appreciated.
: : : : Thanking you in advance ..// Manohar Reddy //
null

Signed applet throws security exceptions

Since nobody seems to be reading the Signe Applet forum, I decided to try here:
Hi all
I have problems with signed applet (self-made cert), and after reading this forum I see this is more or less common.
The problem that I am having is, that I can not use doPrivilege() and similar tricks, because applet needs to be Java 1.1 compatible.
So, signing will have to work.
Applet is signed using 1.5.0_06 jarsigner. Jarsigner verifies it OK.
It works on JVM 1.5.0_06 but not on 1.4.2_08.
Please help me make if work under any JVM.
The error I get is:
Java(TM) Plug-in: Version 1.4.2_08
Using JRE version 1.4.2_08 Java HotSpot(TM) Client VM
User home directory = C:\Documents and Settings\miha
Proxy Configuration: Automatic Proxy Configuration
     URL: http://orion.nil.si/proxy.pac
c:   clear console window
f:   finalize objects on finalization queue
g:   garbage collect
h:   display this help message
l:   dump classloader list
m:   print memory usage
o:   trigger logging
p:   reload proxy configuration
q:   hide console
r:   reload policy configuration
s:   dump system properties
t:   dump thread list
v:   dump thread stack
x:   clear classloader cache
0-5: set trace level to <n>
java.security.AccessControlException: access denied (java.net.SocketPermission host.domain.dom resolve)
TelnetWrapper PROXY: java.security.AccessControlException: access denied (java.net.SocketPermission 127.0.0.1:0 connect,resolve)
java.lang.NullPointerException
     at net.propero.rdp.ISO.connect(ISO.java:123)
     at net.propero.rdp.MCS.connect(MCS.java:84)
     at net.propero.rdp.Secure.connect(Secure.java:153)
     at net.propero.rdp.Secure.connect(Secure.java:171)
     at net.propero.rdp.Rdp.connect(Rdp.java:498)
     at net.propero.rdp.Rdesktop.main_nonstatic(Rdesktop.java:615)
     at net.propero.rdp.applet.RdpThread.run(RdpApplet.java:222)
FATAL: java.lang.NullPointerException: nullWhat is funny, is that I have two applets, and one works and the other one doesn't. It is like this:
Applet A (signed) needs to connect to host1, fails and tries to connect through proxy using my proxy library (also signed - different JAR). Everything works.
Applet B (signed) needs to connect to host1, fails and tries to connect through proxy using the same proxy library. It gets a security exception.
All JARs are signed using the same key/certificate.
Both applets try to connect to the same "host1".
Both applets try to use the same proxy - which is different from "host1".
The one thing that might make a difference, is that in the working applet, everything is within one thread, and in the broken applet, the proxy object is in the main applet thread, and this applet may open many windows, that all utilize the same proxy object - only they can't.
When I tried to move the proxy object down to the child threads, I get the following exception:
Exception in thread "Thread-1952" java.security.AccessControlException: access denied (java.lang.RuntimePermission accessClassInPackage.sun.misc)
     at java.security.AccessControlContext.checkPermission(Unknown Source)
     at java.security.AccessController.checkPermission(Unknown Source)
     at java.lang.SecurityManager.checkPermission(Unknown Source)
     at java.lang.SecurityManager.checkPackageAccess(Unknown Source)
     at sun.applet.AppletSecurity.checkPackageAccess(Unknown Source)
     at sun.applet.AppletClassLoader.loadClass(Unknown Source)
     at java.lang.ClassLoader.loadClass(Unknown Source)
     at java.lang.ClassLoader.loadClassInternal(Unknown Source)
     at net.propero.rdp.Rdesktop.main_nonstatic(Rdesktop.java:567)
     at net.propero.rdp.applet.RdpThread.run(RdpApplet.java:211)It seems that I can only create the proxy object in the Applet.init() method, to avoid this exception.
So to, summarize: I would prefer just one object for all threads that I will create, but then my applet behaves like it is not signed (at least under JVM 1.4.2_08). Java 1.5.0_06 doesn't have any problems with this.
Regards, Miha Vitorovic

The one thing that might make a difference, is that in the working applet, everything is within one thread, and in the broken applet, the proxy object is in the main applet thread, and this applet may open many windows, that all utilize the same proxy object - only they can't.
When I tried to move the proxy object down to the child threads, I get the following exception:
Exception in thread "Thread-1952" java.security.AccessControlException: access denied (java.lang.RuntimePermission accessClassInPackage.sun.misc)
     at java.security.AccessControlContext.checkPermission(Unknown Source)
     at java.security.AccessController.checkPermission(Unknown Source)
     at java.lang.SecurityManager.checkPermission(Unknown Source)
     at java.lang.SecurityManager.checkPackageAccess(Unknown Source)
     at sun.applet.AppletSecurity.checkPackageAccess(Unknown Source)
     at sun.applet.AppletClassLoader.loadClass(Unknown Source)
     at java.lang.ClassLoader.loadClass(Unknown Source)
     at java.lang.ClassLoader.loadClassInternal(Unknown Source)
     at net.propero.rdp.Rdesktop.main_nonstatic(Rdesktop.java:567)
     at net.propero.rdp.applet.RdpThread.run(RdpApplet.java:211)It seems that I can only create the proxy object in the Applet.init() method, to avoid this exception.
So to, summarize: I would prefer just one object for all threads that I will create, but then my applet behaves like it is not signed (at least under JVM 1.4.2_08). Java 1.5.0_06 doesn't have any problems with this.
Regards, Miha Vitorovic

Firefox can't store permanent security exceptions.

I'm using Firefox 3.16.12 (user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3)
When I try to add security exception for self-signed certificate - I have the same problem as it seen on this video: http://www.youtube.com/watch?v=WatBXY5CxO0
Temporary exceptions are stored without any problems.

Found solution for this problem here: http://forums.mozillazine.org/viewtopic.php?f=38&t=1160375&start=0&st=0&sk=t&sd=a
It seems, that something was wrong with cert_override.txt , cert8.db from profile folder. Deleting those file helps.

Catching an exception (help)!!!

Hi everyone, the problem i have is when the user enters a number that is out of bounds (higher or lower than the excepted values it should prompt the program to write to the screen "out of range, try again" or something along those lines.
However, it instead just prints "error - program terminated" which is the message that should be printed when there is a different problem within the program.
Can anyone help me get the program to print the correct messages, you can see what i mean from the code:
import java.io.*;
import java.util.ArrayList;
public class FlatCost {
    ArrayList floors = new ArrayList();
    public FlatCost(String filename) {
        try    {
            readDataFromFile(filename);
            BufferedReader in = new BufferedReader(new InputStreamReader(System.in));
            int floor;
            int rooms;
            String another = "y";
            while(another.equalsIgnoreCase("y"))      {
                System.out.print("\nEnter floor number (0 for ground): ");
                floor = Integer.parseInt(in.readLine());
                if(floor < 0 || floor > floors.size())        {
                System.out.println("floor out of range, try again");
            else        {
                System.out.print("\nEnter no. rooms: ");
                rooms = Integer.parseInt(in.readLine());
                if(rooms < 0 || rooms > ((String[])floors.get(floor)).length)          {
                    System.out.println("rooms out of range, try again");
                else          {
                    System.out.println("\nThe cost of a "+rooms+"-room flat on floor "+floor+" is "+
                    ((String[])floors.get(floor))[rooms+1]+" per month");
                    System.out.print("\nAnother? (y/n): ");
                    another = in.readLine();
        catch(Exception e){
            System.out.println("error - program terminated");
public void readDataFromFile(String filename)throws Exception {
BufferedReader br = new BufferedReader(new FileReader(filename));
String line = "";
while((line = br.readLine()) != null)
floors.add(line.split(" "));
br.close();
public static void main(String args[])throws IOException{
new FlatCost(args[0]);
}any help is appreciated
thanks
Sarah x

I barely know where to begin.
Start by printing out the stack trace when you catch an exception. That'll give you more information than the message you're printing out. You know the program is terminating - you need to know why.
You're writing in a VERY procedural style. There's little or nothing object-oriented about what you're doing.
You've got a bunch of stuff in that constructor that really doesn't belong there. You shouldn't have code to continuously ask a client for a floor and room number in a constructor. That really belongs in an application that drives the object, like the main method that you wrote.
Your FlatCost can read in a file that contains floor/room/price information, but if I were writing the application I'd read it in and store it in the ArrayList as you've done. Then I'd have a getCost() method that would take floor and room count as parameters and return the total cost.
Learning how to program is learning how to debug. I'd rewrite things a little bit and put System.out.println() statements into the code to narrow down exactly where the error was occurring and why. It won't take you long to figure it out. You don't even need a fancy debugger or IDE.

How does one catch WebUtil exceptions?

We are automating Microsoft Word using the CLIENT_OLE2 built-in. In some cases, our requirements demand that Word be running in a visible window. One of our processes automates the same Word session repeatedly -- when a user unwittingly closes Word, and our process attempts to further automate the now-closed Word session, exception WUO-714 is raised, and an alert is displayed.
The WebUtil documentation indicates that logging can be configured silently log exceptions without an alert being displayed, but I cannot find a way to actually catch them. Our process could recover gracefully from the scenario described above by simply relaunching Word -- if only we could catch the exception!
Has anyone else already figured out to accomplish this?
Thanks,
Eric Adamson
State of Michigan

Herzliche Begrüßen Gerd,
Thanks for your reply -- the error occurs in a PL/SQL block. Since my initial post, I have discovered that my test code contained a WHEN OTHERS THEN NULL statement. (When coding blocks, I often complete them with NULL statements, as I compile very often, to simplify tracking down errors. This strategy works wonderfully, when I remain focused, but the distractions of researching WebUtil errors evidently led me to overlook my mistake. Perhaps others may learn from my embarrassing lesson.)
In any case, I am now able to catch the exception, and to handle it appropriately. Most importantly, readers should note that it was necessary to change the WebUtilErrorMode entry in FORMSWEB.CFG. By default WebUtilErrorMode=Alert -- this causes the error alerts to pop up, regardless of whether/not the exception ultimately gets handled. I have set WebUtilErrorMode=Console.
Thanks for reading, and congratulations on winning the match with Costa Rica!
Regards,
Eric Adamson
Lansing, Michigan

Java.lang.SecurityException: [Security:090391]Null User Identity

Hello,
I have deployed .ear file to the Weblogic9.2 server while doing "check .ear -->Start-->Servicing all request".Getting the following Error message:
*java.lang.SecurityException: [Security:090391]Null User Identity
*Errors were encountered while performing this operation.
LOG:
<Jun 10, 2009 11:12:50 AM IST> <Error> <Deployer> <BEA-149265> <Failure occured in the execution of deployment request with ID '1244612561983' for task '3'. E
rror is: 'weblogic.management.DeploymentException: '
weblogic.management.DeploymentException:
at weblogic.application.internal.BaseDeployment.throwAppException(BaseDeployment.java:86)
at weblogic.application.internal.BaseDeployment.activate(BaseDeployment.java:214)
at weblogic.application.internal.DeploymentStateChecker.activate(DeploymentStateChecker.java:154)
at weblogic.deploy.internal.targetserver.AppContainerInvoker.activate(AppContainerInvoker.java:80)
at weblogic.deploy.internal.targetserver.operations.AbstractOperation.activate(AbstractOperation.java:566)
Truncated. see log file for complete stacktrace
java.lang.SecurityException: [Security:090391]Null User Identity
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:118)
at weblogic.application.internal.flow.BaseLifecycleFlow$BaseAction.invoke(BaseLifecycleFlow.java:95)
at weblogic.application.internal.flow.BaseLifecycleFlow.postStart(BaseLifecycleFlow.java:62)
at weblogic.application.internal.flow.TailLifecycleFlow.activate(TailLifecycleFlow.java:33)
at weblogic.application.internal.BaseDeployment$2.next(BaseDeployment.java:635)
Truncated. see log file for complete stacktrace
>
<Jun 10, 2009 11:12:50 AM IST> <Error> <Deployer> <BEA-149202> <Encountered an exception while attempting to commit the 7 task for the application 'pfmEAR'.>
<Jun 10, 2009 11:12:50 AM IST> <Warning> <Deployer> <BEA-149004> <Failures were detected while initiating start task for application 'pfmEAR'.>
<Jun 10, 2009 11:12:50 AM IST> <Warning> <Deployer> <BEA-149078> <Stack trace for message 149004
weblogic.management.DeploymentException:
at weblogic.application.internal.BaseDeployment.throwAppException(BaseDeployment.java:86)
at weblogic.application.internal.BaseDeployment.activate(BaseDeployment.java:214)
at weblogic.application.internal.DeploymentStateChecker.activate(DeploymentStateChecker.java:154)
at weblogic.deploy.internal.targetserver.AppContainerInvoker.activate(AppContainerInvoker.java:80)
at weblogic.deploy.internal.targetserver.operations.AbstractOperation.activate(AbstractOperation.java:566)
Truncated. see log file for complete stacktrace
java.lang.SecurityException: [Security:090391]Null User Identity
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:118)
at weblogic.application.internal.flow.BaseLifecycleFlow$BaseAction.invoke(BaseLifecycleFlow.java:95)
at weblogic.application.internal.flow.BaseLifecycleFlow.postStart(BaseLifecycleFlow.java:62)
at weblogic.application.internal.flow.TailLifecycleFlow.activate(TailLifecycleFlow.java:33)
at weblogic.application.internal.BaseDeployment$2.next(BaseDeployment.java:635)
Truncated. see log file for complete stacktrace
Please help in resolving this.

Exactly the file output file is binary. Do a vi on it, you'll see what I mean. To push this through our patching system it needs to be in it's xml format like in the BICatalogUtil.sh. To my understanding that archive is a compressed archive of the xml files (stored like the backend). I need to figure out how to uncompress so it can feed through our patching system.
Would be better if we could just get the BICatalogUtil.sh error resolved as that method does work (most of the time).

Should a signed applet ever throw a security exception?

hi,
I've had a few times when a signed applet seems to throw a security exception (at the moment am trying to figure out a SocketException being thrown).
I thought if the applet was signed, and when the browser asks if you want to grant it permissions you press Yes (which I do), then there should not be any security issues?
thanks,
asjf

A signed applet has to assert which permissions it wants. The client JVM then asks the user if they will give those permissions to the signer. If the applet tries to do something for which it hasn't been granted permission a security exception is thrown.

Urgent: How can I catch the exception when application exit by accident

Can anyone give me advice and idea?
I want to catch the exception when application goes down by accident for example: Power off, turn off the machine without closing the appliction properly.
Because I want to notify the server and remove it from register.
How can I do this????
Please help,
Thanks very mich,
Peter

Shrubz,
I tested my application as follows:
1. start rmiregistry
2. start rmi server
3. start two clients
I printed out the client's object information as below:
first clinet:
RemoteObserver is com.ss8.qos.qcsm.policy.policyui.PanelMain_Stub[RemoteStub [ref: [endpoint:[192.168.70.237:4706](remote),objID:[-73a6662b:e75af455a5:-8000, 0]]]]
second client:
RemoteObserver is com.ss8.qos.qcsm.policy.policyui.PanelMain_Stub[RemoteStub [ref: [endpoint:[192.168.70.237:4711](remote),objID:[-73a6665a:e75af48703:-8000, 0]]]]
Now I stop the second client by clicking ^C (ctrl c)
I noticed that this client has not been removed from the server register (Vector).
next, I am working on first client for example add one record. After server received this record, it will update all clients who have already registered with server. Because now in the server register there are two clinets (first and second), so it will try to update two clients. The exception will be thrown when server tries to update second client which has already been stoped. I used printStackTrace() to print out the message as follow:
Catch ConnectException
Connection refused to host: 192.168.70.237; nested exception is:
     java.net.ConnectException: Connection refused: no further information
java.rmi.ConnectException: Connection refused to host: 192.168.70.237; nested exception is:
     java.net.ConnectException: Connection refused: no further information
java.net.ConnectException: Connection refused: no further information
     at java.net.PlainSocketImpl.socketConnect(Native Method)
     at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:305)
     at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:125)
     at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:112)
     at java.net.Socket.<init>(Socket.java:269)
     at java.net.Socket.<init>(Socket.java:98)
     at sun.rmi.transport.proxy.RMIDirectSocketFactory.createSocket(RMIDirectSocketFactory.java:29)
     at sun.rmi.transport.proxy.RMIMasterSocketFactory.createSocket(RMIMasterSocketFactory.java:124)
     at sun.rmi.transport.tcp.TCPEndpoint.newSocket(TCPEndpoint.java:497)
     at sun.rmi.transport.tcp.TCPChannel.createConnection(TCPChannel.java:194)
     at sun.rmi.transport.tcp.TCPChannel.newConnection(TCPChannel.java:178)
     at sun.rmi.server.UnicastRef.invoke(UnicastRef.java:87)
     at com.ss8.qos.qcsm.policy.policyui.PanelMain_Stub.update(PanelMain_Stub.java:53)
     at com.ss8.qos.qcsm.policy.policydb.Observable.performNotify(Observable.java, Compiled Code)
     at com.ss8.qos.qcsm.policy.policydb.Observable.notifyObservers(Observable.java:71)
     at com.ss8.qos.qcsm.policy.policydb.PolicyServer.ServerAddPolicy(PolicyServer.java:102)
     at java.lang.reflect.Method.invoke(Native Method)
     at sun.rmi.server.UnicastServerRef.dispatch(UnicastServerRef.java:237)
     at sun.rmi.transport.Transport$1.run(Transport.java:140)
     at java.security.AccessController.doPrivileged(Native Method)
     at sun.rmi.transport.Transport.serviceCall(Transport.java:137)
     at sun.rmi.transport.tcp.TCPTransport.handleMessages(TCPTransport.java:422)
     at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:634)
     at java.lang.Thread.run(Thread.java:479)
*** end here ***
I don't see any information related to object ID. How can I handle this?
Please give me suggestion.
Many Thanks,
Peter

Possible to catch parameters exceptions in the program ?

Hi,
Oracle 10g r2.
I have some procedures/functions like :
function insert_op (op_name in varchar2, op_date in date, op_length in number) is
begin
end;If I call for example :
insert_op('test','02/05/2010','hehe')I will get an error (invalid number). Normal.
My qyestion is, is it possible to catch that exception in the function ?
The fact is that my function is called from an input button in my apex application, so if user enter wrong values in the form, I can't catch the error except using Javascript.
Or should I pass all my parameters as varchar2, and then make functions to ckeck if it is valid numbers, dates, etc... :/
Thanks.
Yann.

function insert_op(op_length in number) return varchar2 is
temp number;
begin
temp := TO_NUMBER(op_length);
return 'ok it is a number';
exception
when others then return 'not a number';
end;Define the op_length as varchar2
create or replace function insert_op(op_length in varchar2) return varchar2 is
temp number;
begin
   temp := TO_NUMBER(op_length);
   return 'ok it is a number';
exception
when others then return 'not a number';
end;And further most important thing is dont use WHEN OTHERS. Use the specific exception. In this case VALUE_ERROR.
I have done such thing in the past. Here is that code.
create or replace function is_number(pVal in varchar2) return number
as
   lNum number;
begin
   lNum := to_number(pVal);
   return 1;
exception
   when value_error then
           return 0;
end;Edited by: Karthick_Arp on Mar 1, 2011 5:26 AM

Getting security exception dialogue box. How do I know this is valid to allow an exception? Especially with the SSL bug out there?

Worried about Heartbleed bug. Getting "Add Security Exception" when sending e-mail. How can I verify this change is accurate?

Normally Firefox talks directly to the mail server, but there are a few reasons that an intermediate program or server might intercept your mail session. Not all of these are good reasons.
Some security suites include a filtering feature. In order to filter secure connections (HTTPS URLs), the security software presents a fake certificate to Firefox so it can intercept and stand in the middle of the secure connection. To have Firefox trust these certificates, you may need to do something such as import a root certificate, or click something in your security software's settings.
But... many users are finding that rogue software they didn't realize they had installed is the culprit.
When you are offered the option to add a security exception, does Thunderbird let you view the problem certificate? For example, in Firefox, you can click the Add Exception button in the error page, then in the dialog click View Certificate or Get Certificate to see the Issued by section. You do not need to finish adding an exception.
We want to get to the "Issued by" section of the certificate, as this often points to the source of the problem.
The kind of issuer you might find is:
* Name associated with your security software, such as ESET, BitDefender, etc.
* Sendori (indicates unwanted software from Sendori)
* FiddlerRoot (indicates unwanted software named similarly to BrowserSafeguard, BrowserSafe, SafeGuard)
* Something else
What do you see?

Security exception while trying to access EJB from stand alone client

Hi!, I am trying a sample EJB application to R&D some security related issues. I want to access EJB through a web application as well as a stand-alone client. I have set approriate <method-permission> in EJB deployment descriptor. I am using users.properties/roles.properties file for authentication mechanism. I am using JBoss 3.2.
- On the web application side I am using BASIC authentication and the servlet is able to access the EJB OK, as long as I am using a login/password that has access to the EJB.
- Now I am trying to access the EJB using a stand alone Java class. These are the things I have tried till now:
=>Created a InitialContext with appropriate principal, credentials and tried getting a reference to EJB home interface. That resulted in security exception.
=>Logged into a LoginContext by using appropriate JBossSX classes and then tried getting a EJB home interface. Again security exception.
Now I am not sure what to do. I read at some places about client side container but not sure what that is. Does anyone has any ideas to try? Is there any other way I can make a swing application and a web application authenticate to EJB container?
Also can anyone point me to any documentation that gives some idea about how the security credentials gets propagated from web application/standalone client to EJB container?

It would be better if you can post your code...and DD that way we can help you better

Catching security exception on user lockout

Similar Messages

Maybe you are looking for