Certificate selection and PIN entry include username/password

Our users are using Windows 7 and Internet Explorer.
When they visit a page that requires client authentication, they're prompted to "Select a certificate". However, their certificates are loaded below a username/password prompt.
When they select a certificate, during the PIN prompt, it also has a username/password prompt. They can't enter a PIN without clicking below to the PIN prompt, which is very irritating for users.
How do I disable the username/password prompt when selecting a certificate?
Thanks.

Hi,
Did you use IIS?
If yes, try the methods in this article:
Why do I still get a user/password Login prompt with Integrate Authentication (for Virtual server 2005 Administration website)
Remove Username-Password Prompts from the Web Module with Windows Authentication
Meanwhile, please post this issue in asp.net forum for more professional help.
http://forums.asp.net/
If no, give us a screenshot about your issue.
Karen Hu
TechNet Community Support

Similar Messages

RPE-02018 and ORA-01017: invalid username/password; logon denied

In OWB, some users could not deploy work flow and always get the following errors:
Status
Log
Error
RPE-02018: Oracle Work flow schema OWF_MGR on host ORS2RD cannot be accessed using service SBOX1 through port 1521. Please check the location details and try again.
Error
ORA-01017: invalid username/password; logon denied
I have tested the workflow location and password preference is set to persistent and cache at run time.
I logged into OWB repository owner and could deploy the work flow. I even assigned the role that the users were in but they still could not deploy work flow. Any clue?
Thanks.
HT

1. With OWB Design Client, connect to the Control Center Repository using the Control Center Repository Owner (or any other Admin User).
2. Go to the Security section in Tools -> Preferences
3. Check the box that says "Share passwords at Runtime".
4. Commit the changes.
And then try deploying..
Regards,

When trying to install yosemite it won't let me select and disk drive including the hd for install. Whats the problem?

While installing yosemite, after agreeing to the terms it ask for a disk drive to select for install. All of mine that come up say that yosemite cannot install to that one. This includes my HD. What is the problem?

I subscribe to the "if it ain't broke don't fix it" and it currently works fine with 10.9.5, or it works fine as my start up disk presently.
The reason I suspect FDE is the culprit is from reading this:
http://fairerplatform.com/2014/06/can-mac-run-os-x-10-10-yosemite/
and in the known issues for installation it mentions "may be unable to install over an encrypted volume" and while this is from an older version, I'm going to hold off now until I've seen that 'Known issue' resolved. I'm having trouble finding a copy of the current release notes.
This account of installing Yosemite seems to have hit a number of the Known Issues:
http://onword.co/6642/
My FDE linux installations know how to upgrade themselves on a full disk encrypted systems. I'm a little disappointed this is an issue at all, and am going to wait. It's not worth the risk of bricking this machine.

Include username password in WSDL

Hi,
My scenario is SOAP to RFC , Sender is Java application, I generated the wsdl file in XI , Java webservice is using that wsdl file but it is asking for credentials, how to give credentials in wsdl url
regards,
kalpana

&sap-user=<username>&sap-password=<password>
--> in the end of url add these details..
go through this link too
Re: WSDL
Invoke Webservices using SAPXI
Regards,
Parvathy
Edited by: parvathy sriraman on Sep 19, 2008 9:06 AM
Edited by: parvathy sriraman on Sep 19, 2008 9:08 AM

Discoverer 10g and R12 error - invalid username/password

Hi all
I have R12 and Discoverer Desktop 10.1.2.1 only (user and admin) on the same Windows machine.
I can connect to Discoverer as the APPS user with no problem, create EULs and workbooks, and see data.
However, I cannot connect as an Apps User. I have copied the DBC file to the Discoverer Oracle home (c:\\oracle\BIToolsHome_1).
I have not updated any opmn.xml files yet as I don't know which ones to update (if any as this is only desktop).
Any help appreciated.
Thanks
Alex
Edited by: AlexChard on May 27, 2009 11:06 AM

Hussein, yes, I completed all the steps. Here is what I have done:
- Install Discoverer 10.1.2 from eDelivery web site
- Create secure folder in
- Copy .dbc file, and name it vis.dbc all lower case.
- Create FND_SECURE and FND_TOP system variables, populated with <ORACLE_HOME>/secure and <ORACLE_HOME> respectively. <ORACLE_HOME> is C:\oracle\BIToolsHome_1.
None of the above has worked.
I have also set the s_appserverid_authentication to OFF in $INST_TOP/appl/admin/VIS_x2o12.xml and then run Autoconfig on the Apps tier, but this has also not worked.
Can you think of anything else to try?
And can you think why I can access Discoverer with SYSADMIN user?
Thanks
Alex
Edited by: AlexChard on May 27, 2009 6:47 PM

Windows 8.1 default logon prompt for smart card instead of username/password

Hello,
We are currently in our pre-deployment test phase for Windows 8.1 and are trying to knock out the high visibility problems that we notice. One of the issues we've noticed:
When logging into Windows, the default prompt is for a username/password. all of our users are using smart cards, so they have to click "sign-in options", click the smart card icon, and then enter their PIN. How would I change the startup
screen to default to smart card?
Also, when locking the screen by removing the card it again prompts for the username/password when unlocking the screen. So the users again have to click on "sign-in options" and select the smart card, otherwise they risk locking out their
account by entering the PIN in the username/password field.
when locking the screen via ctrl-alt-del or windows-L unlocking does default to the smart card, so I know it can be done!
thanks,
-Nick

Hi,
I'm afraid we couldn't change the Sign-in Options order, I checked GP and Registry, there is no way to do it.
However, there is another way is just enable "Require smart card" In GP. While after this policy enabled, All users will have to use smart cards to log on to the network. This means that the organization must have a reliable public key infrastructure (PKI)
in place, and provide smart cards and smart card readers for all users.
Location: GPO_name\Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options
Roger Lu
TechNet Community Support

Datasource.getConnection(username, password)

I was able to setup the bookstore example in the Webservices tutorial. In this example they make use of a JDBC connection, using JNDI contexts.
I am using Tomcat 4.1.18 as Web container and I have a configuration file with the JDBC parameters. The problem is that username and password are included in this xml file. I want to leave these out and use the getConnection(username, password) method instead.
When I do this I get an UnsupportedException. The stacktrace is mentioning something about PoolingDataSource. I am missing something or is it just not possible using this method in this configuration??
java.lang.UnsupportedOperationException
at org.apache.commons.dbcp.PoolingDataSource.getConnection(PoolingDataSo
urce.java:125)
at org.apache.commons.dbcp.BasicDataSource.getConnection(BasicDataSource
.java:329)
at database.BookDBAO.<init>(Unknown Source)
at listeners.ContextListener.contextInitialized(Unknown Source)
at org.apache.catalina.core.StandardContext.listenerStart(StandardContex
t.java:3269)
at org.apache.catalina.core.StandardContext.start(StandardContext.java:3
598)
at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase
.java:821)
at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:80
7)
at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:579)
at org.apache.catalina.core.StandardHostDeployer.addChild(StandardHostDe
ployer.java:529)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
sorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:324)
at org.apache.commons.beanutils.MethodUtils.invokeMethod(MethodUtils.jav
a:228)
...

The getConnection(username, password) method in apache DBCP (Data Base Connection Pool) implementation always returns a java.lang.UnsupportedOperationException. In fact this is the only thing it does.
You must use the getConection() method instead.
If you use a framework that calls the getConnection(username, password)
method and you don�t have any way of changing that call try to compile yourself the tomcat dbcp jar file changing the method code to:
public Connection getConnection(String uname, String passwd)
throws SQLException
//OLD CODE: throw new UnsupportedOperationException();
return getConnection();
So it works in the same way that getConnection();

Is it possible to have an AP that doesn't ask for username & password?

Hi,
I have been asked to take some APs to factory default and leave them without username & password.
I don't have the devices with me at the moment and I don't remember if that is possible, as long as I remember when you take them to factory default the username and passwords are set to Cisco. But actually I need to leave them without username and password.
By the way the APs are AIR-LAP1242!
Any help is much appreciated.

So in conclusion it is possible, right?
Yes and no. Yes, it's possible. No, it's not possible just by simply doing a factory default/factory reset. This solution is a two-step process.
After leaving the AP whithout user/pass when I Telnet/SSH the IP address of the AP, I won't be prompt to type username/password, right?
Again, yes and no. Yes, you WON'T be prompted. NO, you CANNOT remote into a Cisco appliance (Telnet or SSH) UNLESS you have a username and password.

ORA-01017: invalid username/password when using TNS Alias

Friends,
I am experiencing this strange issue in 11G R2. When I use tnsalias and connect using sqlplus username/password@TNS it shows ORA-01017: invalid username/password . But the same works with ORACLE_SID. See below.
-bash-3.00$ uname -a
SunOS ibs-ash-sr147 5.10 Generic_144489-06 i86pc i386 i86pc
-bash-3.00$ env | grep ORACLE
ORACLE_SID=DB1
ORACLE_BASE=/project/oracle/orabase
ORACLE_HOME=/project/oracle/orabase/product/11.2.0/dbhome_1
-bash-3.00$ tnsping DB
TNS Ping Utility for Solaris: Version 11.2.0.1.0 - Production on 17-JUN-2011 12:23:12
Copyright (c) 1997, 2009, Oracle. All rights reserved.
Used parameter files:
/project/oracle/orabase/product/11.2.0/dbhome_1/network/admin/sqlnet.ora
Used TNSNAMES adapter to resolve the alias
Attempting to contact (DESCRIPTION = (ADDRESS = (PROTOCOL = TCP)(HOST = crs-scan)(PORT = 1521)) (CONNECT_DATA = (SERVER = DEDICATED) (SERVICE_NAME = DB)))
OK (0 msec)
-bash-3.00$ sqlplus IRES_USER@DB
SQL*Plus: Release 11.2.0.1.0 Production on Fri Jun 17 12:30:22 2011
Copyright (c) 1982, 2009, Oracle. All rights reserved.
Enter password:
Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - 64bit Production
With the Partitioning, Real Application Clusters, Automatic Storage Management, OLAP,
Data Mining and Real Application Testing options
SQL> show parameter sec_case_sensitive_logon
NAME                                 TYPE        VALUE
sec_case_sensitive_logon             boolean     TRUE
Disconnected from Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - 64bit Production
With the Partitioning, Real Application Clusters, Automatic Storage Management, OLAP,
Data Mining and Real Application Testing options
-bash-3.00$ sqlplus IRES_USER/U9$bvs#ir@DB
SQL*Plus: Release 11.2.0.1.0 Production on Fri Jun 17 12:34:30 2011
Copyright (c) 1982, 2009, Oracle. All rights reserved.
ERROR:
ORA-01017: invalid username/password; logon denied
Enter user-name: ^CMy understanding is that both connections use a TNS alias, but second is not working. Any help is appreciated.
Thanks in Advance,
SSN
Edited by: SSNair on Jun 17, 2011 5:43 AM

SSNair wrote:
Friends,
I am experiencing this strange issue in 11G R2. When I use tnsalias and connect using sqlplus username/password@TNS it shows ORA-01017: invalid username/password . But the same works with ORACLE_SID. See below.
-bash-3.00$ uname -a
SunOS ibs-ash-sr147 5.10 Generic_144489-06 i86pc i386 i86pc
-bash-3.00$ env | grep ORACLE
ORACLE_SID=DB1
ORACLE_BASE=/project/oracle/orabase
ORACLE_HOME=/project/oracle/orabase/product/11.2.0/dbhome_1
-bash-3.00$ tnsping DB
TNS Ping Utility for Solaris: Version 11.2.0.1.0 - Production on 17-JUN-2011 12:23:12
Copyright (c) 1997, 2009, Oracle. All rights reserved.
Used parameter files:
/project/oracle/orabase/product/11.2.0/dbhome_1/network/admin/sqlnet.ora
Used TNSNAMES adapter to resolve the alias
Attempting to contact (DESCRIPTION = (ADDRESS = (PROTOCOL = TCP)(HOST = crs-scan)(PORT = 1521)) (CONNECT_DATA = (SERVER = DEDICATED) (SERVICE_NAME = DB)))
OK (0 msec)
-bash-3.00$ sqlplus IRES_USER@DB
SQL*Plus: Release 11.2.0.1.0 Production on Fri Jun 17 12:30:22 2011
Copyright (c) 1982, 2009, Oracle. All rights reserved.
Enter password:
Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - 64bit Production
With the Partitioning, Real Application Clusters, Automatic Storage Management, OLAP,
Data Mining and Real Application Testing options
SQL> show parameter sec_case_sensitive_logon
NAME                                 TYPE        VALUE
sec_case_sensitive_logon             boolean     TRUE
Disconnected from Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - 64bit Production
With the Partitioning, Real Application Clusters, Automatic Storage Management, OLAP,
Data Mining and Real Application Testing options
-bash-3.00$ sqlplus IRES_USER/U9$bvs#ir@DB
SQL*Plus: Release 11.2.0.1.0 Production on Fri Jun 17 12:34:30 2011
Copyright (c) 1982, 2009, Oracle. All rights reserved.
ERROR:
ORA-01017: invalid username/password; logon denied
Enter user-name: ^CMy understanding is that both connections use a TNS alias, but second is not working. Any help is appreciated.
Thanks in Advance,
SSN
Edited by: SSNair on Jun 17, 2011 5:43 AMHere's your problem:
-bash-3.00$ sqlplus IRES_USER/U9$bvs#ir@DBBecaue of the dollar-sign, The shell is trying to expand the environment variable $bvs#ir@DB
Of course you have no environment variable by that name so what gets passed to sqlplus is not "IRES_USER/U9$bvs#ir@DB", but rather "IRES_USER/U9"
In your first test, you didn't pass the password on the command line, so the shell didn't get a chance to intercept it.
You can have a similar issue if you have a '@' in your password
oracle> sqlplus scott/P@ssword@orclTns will catch that first "@" as the delimiter to the tns string, and come up with something that cant' be resolved.
Edited by: EdStevensTN on Jun 17, 2011 8:59 AM

OraclePersonalizationProvider invalid username/password

Hiya
I have been following the instructions in Oracle Providers for ASP.NET Developer's Guide 11g Release 1 (11.1.0.6.20) and have become stuck.
I just want to use Oracle for WebPart personalization so I logged onto Oracle (not localhost as no Oracle installed locally) as sysdba, I then ran InstallOracleASPNETCommon.sql which ran fine. Then I ran InstallOraclePersonalization.sql which keep prompting me for CURRENTUSER. I then altered my config file and ran the web app and got an invalid username/password error. I thought that maybe using the sys username had been a bad idea so I uninstalled and used the username I had already set up for this web app but got the same error. Then I tried using aspnet as this is given in the config example in the documentation but still no joy. obviouslly I changed the username and password in the config file each time I tried running the scripts with a different username.
Am I doing something wrong? Is it not a username that the prompt is for? Should I be putting username/password or something? Do I need to create aspnet as a user first? There's no mention in the documentation that the sql scripts will prompt you so I'm just not sure I'm doing it right. Can anyone help?
Thanks :)


Hiya
Yes it was using the Oracle SQL Developer tool taht was causing my prompting problem. I got one of our Oracle DBA's to give me a hand and we did the following:
Logged onto SQLPlus as sysdba
Created a new user with the following sql -
create role aspnet_role
grant
alter session,
create cluster,
create indextype,
create library,
create materialized view,
create procedure,
create public synonym,
create sequence,
create session,
create synonym,
create table,
create trigger,
create type,
create view,
create job,
drop public synonym,
query rewrite
to aspnet_role
create user aspnet
identified by aspnet
default tablespace users
temporary tablespace temp
quota unlimited on users
grant aspnet_role to aspnet
grant execute on dbms_scheduler to aspnet
grant execute on dbms_job to aspnet
Exited sqlplus then logged back in again as aspnet user
ran the InstallAllOracleASPNETProviders.sql file in sqlplus
everything runs without error
In my web.config file I add the following connection string


<add name="OraAspNetConStringJcs" connectionString="Data Source = jcs.jcslweb06; User ID = aspnet ; Password = 'aspnet' "/>
now I add the personalisation to the config


<personalization defaultProvider="CustomOraclePersonalizationProvider">
<providers>
<add name="CustomOraclePersonalizationProvider" type="Oracle.Web.Personalization.OraclePersonalizationProvider, Oracle.Web, Version=2.111.6.20, Culture=neutral, PublicKeyToken=89b483f429c47342" connectionStringName="OraAspNetConStringJcs"
applicationName="JCS"/>
</providers>
</personalization>
If I run the web site I get a ora-1017 invalid username/password error
If I use the same credentials to log in using Oracle SQL Developer tool it works fine
If I log in via sqlplus it works fine.
Having googled the problem I've tried putting the username/password in uppercase and turning off the case sensitivity but it always throws this error even though the credentials are correct.
Now I'm gettting ora-28000 - the account is locked and will have to go and find someone to tell me how to unlock it!
Any ideas why it won't authorise my valid credentials?

Run Crystal Report from URL includes username and password

Hello,
I've downloaded CR 2008, and CR Server 2008 demo's.
I'm trying to use a feature I've used with CR10 enterprise, and XI report server, where I can run a report direct from the URL.
Something like:
HTTP://scada-ho/crystal/enterprise/admin/en/viewrpt.cwr?id=381&init=actx&apsuser=administrator&apspassword=&apsauthtype=secenterprise
or
http://192.168.72.98/businessobjects/enterprise115/infoview/main.aspx?id=1024&init=actx&apssystem=hobprim&apsuser=visy&apspassword=Fillers3&apsauthtype=secenterprise
I've noticed that there were subtle syntax differences between CR10 Enterprise and XI report server in the past, and expect that similar differences exist with CR server 2008.
Could someone show me the syntax for CR Server 2008 to run a report from a URL, and pass the required username and password, without having to go through the infoview logon screen

Tim,
Thanks for the reply. I admit I did see that thread when I was looking for a solution.
My hesitance is that for a non programmer it looks very difficult, and a lot of settings.
I liked the URL reporting because of its simplicity - one line.
I know that it advertises the username and password, but for our requirement (intranet reporting, LAN separated from IT), its not a big risk.
My further investigations indicate that for CRS 2008 something like the following should work:
http://192.168.207.156/CrystalReports/view.aspx?id=1102&apsuser=administrator&apspassword=admin1&apsauthtype=secEnterprise&init=java
However I get
404 - File or Directory not found.
I'm running on Windows7 with IIS7, so I think it must be an IIS configuration issue
Any Ideas?

Configuring OID and logging into a database with a OID username\password

I've installed the Oracle database software (v9.2.0.2.1) and created a database called OIDDB. I then installed the "Management and Integration" portion of the Oracle database software which includes "Oracle Management Server" and "Oracle Internet Directory". All of this installation is on the same database box.
On another server, my other database (called: BAHDB) resides that I OID enabled. I've already used the "Database Configuration Assistant" to register it with the directory service.
What else needs to be done at this point to log into the database without a Oracle username and password? What high level main steps am I missing? Do I need to do anything with Oracle wallets?

There's now a difference when you use domains in your network configuration:
tnsping server.at.your.domain should get resolved through tnsnames.
tnsping server shoudl get resolved through the LDAP server.
The illegal userid/password error makes me suspect you try to logon with the fully qualified server name; LDAP should respond with something like "no nickname found".
Also - the guest user is only used as a "stub" - you should be able to login with a name, defined in OID - not defined in the database!
Things to check:
- rdbms_server_dn - DBCA should take care of it during registration of the database in OID, but it does not always do that. Setting it requires a restart. Remeember, it is case sensitive! Format is cn=SID,cn=OracleContext,dc=<your realm here>
- Wallet. Was it created, what is in it?
- User mapping (Use the Enterprise Security Manager - part of the client install); open Realms, open OracleDefaultDomain within Enterprise Domains, third tab ("Database Schema Mapping"), select "Add".
Navigate to cn=Users,dc=<your realm>. Make sure Subtree level is selected, and use your globally identified user (you used guest) for schema; click OK.
Click Apply
You should now be able to logon as any user, defined in the OID under cn=Users,dc=<your realm> - orcladmin should do.
when logged on, show user will respond with "guest"; use select sys_context('userenv','external_name') from dual; to find out the real user.
The way you now set it up probably will fail to login with 'user lacks create session privilege' - for test purposes, grant create session to guest - in a 'normal' eenviroment, you would use enterprise roles, and assign these to the OID defined users, not directly to the "stub user" (guest in your example)

Hi I have Mountain Line with Safari 6.0.2. I used to open Facebook, Youtube, Twitter etc. and everytime I select "Stay signed in" "Remember my password" etc. but it doesn't save my passwords and everytime I have to sign in again. I never sign out from t

Hi
I have Mountain Line with Safari 6.0.2. I used to open Facebook, Youtube, Twitter etc. and everytime I select "Stay signed in" "Remember my password" etc. but it doesn't save my passwords and everytime I have to sign in again. I never sign out from these websites but when I open it next time, it requires username & password.
Does anybody know the problem & solution, plz help. I also found disk erros and reaoired permissiomn and the restarted and did disk utlty again and repaired the same disk errors and then did a restart and still does not remember passwords or ask me. Did all this still no luck it saved apple login on here and saved gmail account but others one it used to save does no longer.here is what i did below and still no luck.
Instructions
Set Your Passwords Preferences
1
Open up your Safari Web browser and choose 'Preferences' from the Safari pull down menu
2
Click on the heading 'AutoFill.'
Click on the box next to 'User Names and Passwords.'
4
Close the 'Preferences' window.
Save Your Passwords
5
Go to a Web page that requires a password and enter in your chosen password. Safari will then ask if you would like to save this password.
6
Click on the button 'Yes' in order to save the password.
7
Complete steps 1 and 2 for any other passwords that you want Safari to remember.
Manage Your Passwords
8
Go to the 'AutoFill' section in the Safari Preferences window.
9
Click on the 'Edit' button to the right of where it says 'User Names and Passwords.' This will bring up a window displaying all of the passwords and usernames that you have authorized Safari to save.
10
Click on a password listing and push the 'Remove' button in order to delete the password from Safari's memory.
11
Choose 'Remove All' in order to delete all of the saved passwords.
12

I suggest that you run software update, after which you should have Safari 6.0.5 - then check Safari - Preferences - Privacy & see that 'Block cookies' is not set to Always.
Failing that - switch Safari extensions Off via Safari - Preferences - Extensions & test again

Mail server reports invalid login. Retype login and server accepts it. Password Manager selected.

TBird v 24.5 running on W7 and Avast Free AV (up to date) running.
For years TB has been successfully accessing the pop mail account on this PC with Avast, etc...
Recently the provider (Centurylink/Embarqmail) made some changes. I double-checked the settings against their online list of settings. Also went over them with the Tech Support folks on the phone.
Upon opening TB, it goes to check mail and reports back:
Sending of username did not succeed. Mail server pop.centurylink.net responded Auth-status invalid login or password.
Press OK, then select Re-type PW. Enter the same password as I always have, and select Password Manager to remember.
TB will successfully check mail.
Close TB, start it up again, and get the same response. Go though the same motions, and am able to get mail.
Centurylink/Embarq has said repeatedly that I need to contact the manufacturer of TB... They say they have given me all the support and settings they can.
I've tried changing all sorts of settings to no avail.
Hoping that someone out there recognizes this problem and can offer a solution, or give me some items to check to get to the bottom of it.
Thank you in advance for your time.
System details as shown are for the PC I'm using to submit the request, not the PC I'm trying to solve the problem upon.

You can try this:
Open TB, go to Tools/Options/Security/Passwords, and click saved passwords. Select (click) the email with the password issue, and then click remove. Restart TB.
The password prompt comes up. Enter password, check the remember option, and see if that fixes the issue by restarting and seeing if it logs in without issue.

Different passwords for KeyStore and Key entry

I am having trouble using a keystore whose entries have passwords that are different from both each other, and the keystore itself. I have managed to get this (differing storepass, and keypass) working for the case of a single entry, but this case is pointless since it is the same as having a new keystore for each user. It also works fine in the case that multiple key entries share a password that is different from the keystore. However, when I place a new key entry with a different password into the keystore I get an UnrecoverableKeyException upon initialization of the KeyManagerFactory.
There seems to be some sort of restriction that the key entries should all share the same password.
I have found several articles and texts that touch on this, but the details are fuzzy. Has anyone else ever tried to do this? Will you offer some insight? When multiple users have access to the same machine should they share a keystore, or is keeping a separate keystore file for each user the standard?
Thank you for any assistance.

Pankaj,
Thank you for your reply. I also have not seen the problems when manipulating the keys with keytool. However, when selecting a key through the KeyManager I get problems.
I have wrapped the default KeyManager with another KeyManager which captures the calls to chooseClientAlias, and getPrivateKey so that I may use the key's password rather than the one that was used to load the keystore. The problem seems to arise before this.
I get an UnrecoverableKeyException at the time that the KeyManagerFactory is initialized. I don't know what the KeyManagerFactory initialization method is doing with the password. Do you know where I might find the code for this? My debugger just gives me function defs. I think that I need to supply a custom KMF, but it would be nice to know what the default one is doing first.
I noticed that you have authored a book on j2ee security. Does it cover this?
Ethan

Certificate selection and PIN entry include username/password

Similar Messages

Maybe you are looking for