CF 7/IIS 6

Hi ,
I have installed CF 7 standard edition (with IIS 6) both on
same machine(W2k3). I have created virtual directory and trying to
access cfm pages in remote file server. I am getting error as file
not found error ( in stack trace).
However I could access html pages in the same location with
same virtual directory. also I could access all cfm pages local to
the server.
Please clarify and advice
Regards
sudhakar

IIS security is very fine grained. You can apply security
setting as
global as the entire website or as granular as an individual
file or
directory.
When I have been presented with the exact issue you are
experiencing;
having anonymous access for scheduled tasks, I would set up a
file or
directory for the scheduled tasks and allow anonymous access
for just
that file or directory, while leaving the rest of the site
secured.
You can use other filters to prevent unlimited access to
these files if
that is necessary. Such as restricting the IP address for
these files
to just the CF server, or similar restrictions.
You can not set any user for ColdFusion that will pass IIS
integrated
security. The reason for this is that for IIS integrated
security, the
browser must understand the protocol and respond correctly.
The only
browser that does this is IE. Any other browser, including
the very
basic browser CF uses to make a scheduled task request, do
not
understand this protocol. They will either present a dialog
box for a
user name and password or just fail completely upon making
the request.
If you can accept IIS basic security, you can use the user
name and
password fields on the scheduled task form to provide these.
Just be
aware that these creditionals are passed between client and
server in
open, plain text and can be snooped. The usual mitigation for
this is
using HTTPS or another security protocol to encrypt data in
transition.
HTH
Ian

Similar Messages

SSO to partner application running under IIS

Hi,
We have a complete set-up for 9iAS Release2 where some applications are running. In parallell we have an application running under IIS, and would now like to enable the IIS application as a partner application to 9iAS letting the 9iAS SSO server handle the authentication.
In the documentation of Oracle Proxy Plug-in I read that this proxy plug-in can be used to proxy requests from IIS to Oracle http server (OHS) and also in this way enable SSO.
My question is if this can be done only for applications running under 9iAS but having IIS as web server, or if it is also possible like in our case to enable SSO via the proxy plug-in to applications runnind under IIS?
If this is not supported is the only available solution to use the SSO SDK in my IIS application?
Thanks and regards,
Rikard

Here's a DIY answer.
See Metalink Note 269820.1 which shows you how to use Perl to overwrite the host name in the HTTP header and remove the port number.

IIS 7.5 URL Rewrite: Hit specific page of a web application but should be redirected to another application's page

I have deployed 2 different web application on IIS 7.5 running on Windows Server 2008 R2 but on different port numbers i.e. one application deployed on port no. 1776 and another on 8091. I want to rewrite URL in such a way that if i hit any page of first
application such as default.aspx then it will be redirected to particular page of another application along with some changes in url.
Example: if i access any page from first application like:
http://g2wv126rbsc:1776/sites/main/commercial/commercial-solutions/financing/default1.aspx
then it should redirect to specific page of another application along with some changes in url:
http://g2wv126rbsc:8091/main/commercial/commercial-solutions/financing/default2.aspx
Note: In above mentioned url, also removed "sites".
I tried to create a inbound rule through URL Rewrite module (installed on IIS 7.5) by selecting Action as "Rewrite" but didn't find any success.
I need some examples if anyone has come across same kind of issue.
Thanks in advance.

Please post ASP.NET questions in the ASP.NET forums (http://forums.asp.net ).

SSO With XI 3.0 on IIS

I've searched these forums and finding bits and pieces of information so I'm hoping someone can help me out.
I've successfully installed XI 3.0 on a new server. We're trying to get SSO to work from our custom application so that users won't have to sign onto BO seperately.
Most of the documentation I've found has been related to XI 2.
I'm very new to administrating BO. I'm assuming that the SSO on XI 2 (which we currently have our users using) cannot simply be copied over (I've tried.). Also, I'm assuming that the SSO is part of a SDK or API. If so, are these installed by default or are they seperate downloads?
Can someone point me in the right direction?
Thanks

3.0 does not support IIS for infoview, only java app servers. We can enable SSO for those.
As far as what migrates over from XIR2, the users, groups, plugin config, but the SSO settings do have to be applied on the web/app server(s)
If you get 3.1 (same license code) that does support IIS/SSO. You should get 3.1 regardless 3.0 was the very 1st version of 3.x and therefor has the most bugs.
Regards,
Tim

'Unable to Launch Application Error' - Java Web Start Running Under MS IIS.

I am attempting to render the following .jnlp in MS IE:
<?xml version="1.0" encoding="utf-8"?>

<jnlp
   codebase="http://localhost/LottoMadness/"
   href="LottoMadness.jnlp">
   <information>
     <title>LottoMadness Application</title>
     <vendor>Rogers Cadenhead</vendor>
     <homepage href="http://localhost/LottoMadness/"/>
     <icon href="lottobigicon.gif"/>
   </information>
   <resources>
     <j2se version="1.5"/>
     <jar href="LottoMadness.jar"/>
   </resources>
   <application-desc main-class="LottoMadness"/>
</jnlp>I've deployed the .jnlp, .gif, and .jar to MS IIS, running locally on my PC.
When I attempt to render the .jnlp in IE I obtain an 'Application Error' window stating 'Unable to Launch Application'. Clicking details gives me:
com.sun.deploy.net.FailedDownloadException: Unable to load resource: http://localhost/LottoMadness/LottoMadness.jnlp
     at com.sun.deploy.net.DownloadEngine.actionDownload(Unknown Source)
     at com.sun.deploy.net.DownloadEngine.getCacheEntry(Unknown Source)
     at com.sun.deploy.net.DownloadEngine.getResourceCacheEntry(Unknown Source)
     at com.sun.deploy.net.DownloadEngine.getResourceCacheEntry(Unknown Source)
     at com.sun.deploy.net.DownloadEngine.getResource(Unknown Source)
     at com.sun.deploy.net.DownloadEngine.getResource(Unknown Source)
     at com.sun.javaws.Launcher.updateFinalLaunchDesc(Unknown Source)
     at com.sun.javaws.Launcher.prepareToLaunch(Unknown Source)
     at com.sun.javaws.Launcher.launch(Unknown Source)
     at com.sun.javaws.Main.launchApp(Unknown Source)
     at com.sun.javaws.Main.continueInSecureThread(Unknown Source)
     at com.sun.javaws.Main$1.run(Unknown Source)
     at java.lang.Thread.run(Unknown Source)I have configured MS IIS for Web Start, by setting the Extension/Content Type fields to .jnlp and application/x-java-jnlp-file.
(The .jnlp is basically from 'Programming with Java in 24 Hours', as this is the book I am learning Java from.)

AndrewThompson64 wrote:
I am not used to seeing references to a local server that do not include a port number.
E.G. http://localhost:8080/LottoMadness/
I have deployed the following HTML (HelpMe.html) to the web server:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<head>
     <title>Untitled</title>
</head>
<body>
Help Me!
</body>
</html>When I attempt to render the URL in IE, I see the page just fine. The URL is use is:
http://localhost/LottoMadness/HelpMe.htmlSo, I think my web server setup and usage is ok.
>
As an aside, what happens if (your MS IIS is running and) you click a direct link to..
[http://localhost/LottoMadness/LottoMadness.jnlp|http://localhost/LottoMadness/LottoMadness.jnlp]
When I click this link I get the error and exception I cited in my previous post.

SSO to IIS

Hello,
we tried to setup SSO between portal and an web application that runs in an IIS. I found several threads about this topic but non of them wer really specific. Like:
/message/78763#78763 [original link is broken]
I'm looking for a real easy solution, that verifies the SAP SSO Ticket and lets the user log in to the IIS pages. Could anybody give me some information about that. I would prefer a faster solution than the SSO2KerbMap.
Thanks and regards
Markus Armbruster

Hi,
try these link
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/47d0cd90-0201-0010-4c86-f81b1c812e50
http://help.sap.com/saphelp_nw04/helpdata/en/4f/bd2c3a11f3bf31e10000000a11402f/frameset.htm
http://help.sap.com/saphelp_nw04/helpdata/en/4f/bd2c3a11f3bf31e10000000a11402f/frameset.htm
Regards,
Padman

Global data getting reset when running under IIS?

We have a scenario using IIS with an ASP.NET web service written in VB.NET. When a call to the web service is made, the web service calls a native dll (written in C, compiled using VS2010) using platform invoke, which in turn calls into our product API:
VB.NET web service -> native library (p/invoke) -> native API ....
Web service requests are successfully completed and the system runs without problem for hours. A trace of the native API shows it is being called by multiple processes and multiple threads within those processes.
The main native API dll contains a static global variable used to detect whether it is the first time it has been called and run initialization logic if it is. This dll is itself linked to a second dll that contains a global variable used to detect if it is
the first time it has been called.
After some hours the trace shows that the native API is invoked by an existing process but that the initialization logic is being exercised again, even though the global variable was set to indicate not first time and is never reset. One theory was that
the first process has ended and a new process has started almost instantaneously using the same process ID. However this is not the case as existing thread IDs from the same process are seen to write to the trace again after the first time logic has executed
for the second time, indicating the process has not restarted. The problem occurs regularly.
It is as though the process's global data has been initialized again and malloc'ed memory freed while the processing is still running. Is there any way this is possible when running under IIS?
There is an internal thread which waits on a blocking read of a named pipe (via ReadFile), and when the problem occurs, the ReadFile call ends with ERROR_NO_ACCESS, which appears to indicate the malloc'ed buffer is no longer valid, again implying something
has happened to the memory allocated to the process.

Suggestting you asking it on:
http://forums.iis.net/

How to protect an application running on IIS with OAM 11gR2

Hello Gurus,
I have a question regarding protecting an application running on IIS with OAM 11gR2. We have an OHS server running and all the requests from the users are coming to this OHS server webgate for them to login using the SSO login page. These is all solaris. I am protecting other applications like pplsoft moduels with this OHS instance and OAM server. There is another application that I need to protect which is itself running on IIS windows machine. I need guidance as to -
1.) Do I need to install a windows version of webgate to protect this IIS based application?
2.) Or I can still protect and proxy requests from this application to current OHS instance? How can I do this?
3.) Or Do I need to proxy requests directly from IIS to OAM weblogic server?
Please advise to the earliest as this is an urgent issue.
Thanks !!

From your description it is not clear how exactly architecture looks like
We have an OHS server running and all the requests from the users are coming to this OHS server webgate for them to login using the SSO login page.
is this OHS centralized login farm ? (Case 1)
OR is this OHS server (with webgate) acting as virtual web server hosting multiple web sites so that request to any site passes through this OHS/webgate (Case 2)
1.) Do I need to install a windows version of webgate to protect this IIS based application?
If case 1 then you need to install 10g webgate on top of IIS server to protect this application
If case 2 then you can just proxy request from OHS to IIS server. As every request passes through OHS user will be authenticated before request hits IIS
Look at Product documentation for virtual web sites : http://docs.oracle.com/cd/E27559_01/admin.1112/e27239/shared.htm#autoId12
It has steps to protect virtual web sites.
Also you need to make sure no one hits IIIS web sites directly.
Hope this helps

Can't post to Mircrosoft IIS machines

Hi I am using the following code from a tutorial. But it blows up every time after a second POST. But I can post as many times as I need to a linux box or any other UNIX boxes I can think of.
What is going on? Why does it not work with microsoft products?
* HttpMidlet.java
* Created on October 23, 2001, 11:19 AM
import javax.microedition.midlet.*;
import javax.microedition.lcdui.*;
import javax.microedition.io.*;
import java.io.*;
* @author kgabhart
* @version
public class HttpMidlet extends MIDlet implements CommandListener {
// A default URL is used. User can change it from the GUI
private static String defaultURL = "http://www.microsoft.com";
// Main MIDP display
private Display myDisplay = null;
// GUI component for entering a URL
private Form requestScreen;
private TextField requestField;
// GUI component for submitting request
private List list;
private String[] menuItems;
// GUI component for displaying server responses
private Form resultScreen;
private StringItem resultField;
// the "send" button used on requestScreen
Command sendCommand;
// the "exit" button used on the requestScreen
Command exitCommand;
// the "back" button used on resultScreen
Command backCommand;
public HttpMidlet(){
// initialize the GUI components
myDisplay = Display.getDisplay( this );
sendCommand = new Command( "SEND", Command.OK, 1 );
exitCommand = new Command( "EXIT", Command.OK, 1 );
backCommand = new Command( "BACK", Command.OK, 1 );
// display the request URL
requestScreen = new Form( "Type in a URL:" );
requestField = new TextField( null, defaultURL, 100, TextField.URL );
requestScreen.append( requestField );
requestScreen.addCommand( sendCommand );
requestScreen.addCommand( exitCommand );
requestScreen.setCommandListener( this );
// select the HTTP request method desired
menuItems = new String[] {"GET Request", "POST Request"};
list = new List( "Select an HTTP method:", List.IMPLICIT, menuItems, null );
list.setCommandListener( this );
// display the message received from server
resultScreen = new Form( "Server Response:" );
resultScreen.addCommand( backCommand );
resultScreen.setCommandListener( this );
}//end HttpMidlet()
public void startApp() {
myDisplay.setCurrent( requestScreen );
}//end startApp()
public void commandAction( Command com, Displayable disp ) {
// when user clicks on the "send" button
if ( com == sendCommand ) {
myDisplay.setCurrent( list );
} else if ( com == backCommand ) {
// do it all over again
requestField.setString( defaultURL );
myDisplay.setCurrent( requestScreen );
} else if ( com == exitCommand ) {
destroyApp( true );
notifyDestroyed();
}//end if ( com == sendCommand )
if ( disp == list && com == List.SELECT_COMMAND ) {
String result;
if ( list.getSelectedIndex() == 0 ) { // send a GET request to server
System.out.println("getHTTP");
result = sendHttpGet( requestField.getString() );
else // send a POST request to server
System.out.println("postHTTP");
result = sendHttpPost( requestField.getString() );
resultField = new StringItem( null, result );
resultScreen.append( resultField );
myDisplay.setCurrent( resultScreen );
}//end if ( dis == list && com == List.SELECT_COMMAND )
}//end commandAction( Command, Displayable )
private String sendHttpGet( String url )
HttpConnection hcon = null;
DataInputStream dis = null;
StringBuffer responseMessage = new StringBuffer();
try {
// a standard HttpConnection with READ access
hcon = ( HttpConnection )Connector.open( url );
// obtain a DataInputStream from the HttpConnection
dis = new DataInputStream( hcon.openInputStream() );
// retrieve the response from the server
int ch;
while ( ( ch = dis.read() ) != -1 ) {
responseMessage.append( (char) ch );
}//end while ( ( ch = dis.read() ) != -1 )
catch( Exception e )
e.printStackTrace();
responseMessage.append( "ERROR" );
} finally {
try {
if ( hcon != null ) hcon.close();
if ( dis != null ) dis.close();
} catch ( IOException ioe ) {
ioe.printStackTrace();
}//end try/catch
}//end try/catch/finally
return responseMessage.toString();
}//end sendHttpGet( String )
private String sendHttpPost( String url )
HttpConnection hcon = null;
DataInputStream dis = null;
OutputStream os = null;
StringBuffer responseMessage = new StringBuffer();
// the request body
String requeststring = "This is a POST.";
try {
hcon = (HttpConnection)Connector.open(url);
byte [] data = "TextField=Hello&TextField2=Hello2&Submit=Submit".getBytes ();
hcon.setRequestMethod(HttpConnection.POST);
hcon.setRequestProperty("User-Agent","Profile/MIDP-1.0 Configuration/CLDC-1.0");
hcon.setRequestProperty("Content-Language","en-US");
hcon.setRequestProperty("Content-Type","application/x-www-form-urlencoded");
os = hcon.openOutputStream ();
os.write (data);
os.close ();
//conn.close ();
// obtain DataInputStream for receiving server response
dis = new DataInputStream( hcon.openInputStream() );
// retrieve the response from server
int ch;
while( ( ch = dis.read() ) != -1 ) {
responseMessage.append( (char)ch );
}//end while( ( ch = dis.read() ) != -1 ) {
catch( Exception e )
e.printStackTrace();
responseMessage.append( "ERROR" );
finally {
// free up i/o streams and http connection
try {
if( hcon != null ) hcon.close();
if( dis != null ) dis.close();
if( os != null ) os.close();
} catch ( IOException ioe ) {
ioe.printStackTrace();
}//end try/catch
}//end try/catch/finally
return responseMessage.toString();
}//end sendHttpPost( String )
private String xsendHttpPost( String url )
HttpConnection hcon = null;
DataInputStream dis = null;
DataOutputStream dos = null;
StringBuffer responseMessage = new StringBuffer();
// the request body
String requeststring = "This is a POST.";
try {
// an HttpConnection with both read and write access
hcon = ( HttpConnection )Connector.open( url, Connector.READ_WRITE );
// set the request method to POST
hcon.setRequestMethod( HttpConnection.POST );
//hcon.setRequestProperty("Content-length", ""+ requeststring.length() );
hcon.setRequestProperty("Content-type","application/x-www-form-urlencoded");
//hcon.setRequestProperty("Content-language", "en-US"); // should be config.
//hcon.setRequestProperty("Accept", "text/xml");
//hcon.setRequestProperty("Connection", "close");
// obtain DataOutputStream for sending the request string
dos = hcon.openDataOutputStream();
byte[] request_body = requeststring.getBytes();
// send request string to server
for( int i = 0; i < request_body.length; i++ ) {
dos.writeByte( request_body[i] );
}//end for( int i = 0; i < request_body.length; i++ )
// obtain DataInputStream for receiving server response
dis = new DataInputStream( hcon.openInputStream() );
// retrieve the response from server
int ch;
while( ( ch = dis.read() ) != -1 ) {
responseMessage.append( (char)ch );
}//end while( ( ch = dis.read() ) != -1 ) {
catch( Exception e )
e.printStackTrace();
responseMessage.append( "ERROR" );
finally {
// free up i/o streams and http connection
try {
if( hcon != null ) hcon.close();
if( dis != null ) dis.close();
if( dos != null ) dos.close();
} catch ( IOException ioe ) {
ioe.printStackTrace();
}//end try/catch
}//end try/catch/finally
return responseMessage.toString();
}//end sendHttpPost( String )
public void pauseApp() {
}//end pauseApp()
public void destroyApp( boolean unconditional ) {
// help Garbage Collector
myDisplay = null;
requestScreen = null;
requestField = null;
resultScreen = null;
resultField = null;
}//end destroyApp( boolean )
}//end HttpMidlet

Modified your code on the line:
dos.writeByte( request_body );
to:
dos.write( request_body );
and it works with 2 Microsoft IIs servers. I don't know if you ever got this working or if you went to a GET method but we were having major difficulties with IIs servers as well. I figured late was better than never for a response.

Complete data not getting returned when running IIS (v7.5) commands remotely.

Hello All,
I searched quite a number of forums before posting and all that I have come to know is that some have mentioned it to be related to COM. I do not have experience dealing with COM and no idea how I can sort this out. I hope someone can provide guidance on
these:
Question 1: Server (2008 R2 Standard) is having 4 websites. Default - Running, WS2 - Stopped, WS3 - Running and WS4 - Running. When I run the command "invoke-command -computername Server1 -Credential domain\User -ScriptBlock
{import-module 'webAdministration'; get-website}"
I get this output and then an error:
name : Default Web Site
id : 1
serverAutoStart : False
state : Stopped
bindings : Microsoft.IIs.PowerShell.Framework.ConfigurationElement
PSComputerName : Server1
RunspaceId : ca8bbb00-4631-4c92-a7c7-3bec8039eaee
Attributes : {Microsoft.IIs.PowerShell.Framework.ConfigurationAttribute,
Microsoft.IIs.PowerShell.Framework.ConfigurationAttribute,
Microsoft.IIs.PowerShell.Framework.ConfigurationAttribute,
Microsoft.IIs.PowerShell.Framework.ConfigurationAttribute}
ChildElements : {Microsoft.IIs.PowerShell.Framework.ConfigurationElement
Microsoft.IIs.PowerShell.Framework.ConfigurationElement
Microsoft.IIs.PowerShell.Framework.ConfigurationElement
Microsoft.IIs.PowerShell.Framework.ConfigurationElement
Microsoft.IIs.PowerShell.Framework.ConfigurationElement,
Microsoft.IIs.PowerShell.Framework.ConfigurationElement,
Microsoft.IIs.PowerShell.Framework.ConfigurationElement,
Microsoft.IIs.PowerShell.Framework.ConfigurationElement...}
ElementTagName : site
Methods : {Microsoft.IIs.PowerShell.Framework.ConfigurationMethod,
Microsoft.IIs.PowerShell.Framework.ConfigurationMethod}
Schema : Microsoft.IIs.PowerShell.Framework.ConfigurationElementSchema
The data is invalid. (Exception from HRESULT: 0x8007000D)
+ CategoryInfo : NotSpecified: (:) [Get-Website], COMException
+ FullyQualifiedErrorId : System.Runtime.InteropServices.COMException,Microsoft.IIs.PowerShell.Provider.GetWebsite
Command
What I have been able to figure out is that it returns complete data for the Default Website and then throws the error. Tried the same command on another server running 2 websites (both in started state) and same results :(
Question 2: When the same command "Get-Website" is run locally on the server then only 5 columns show by default; Name, ID, State, Physical Path & Bindings. Why then the command when run remotely returns slightly
more data?
PS: I have Win7 x64 on my desktop. Tried the commands from x86 as well as x64 shells and same results.

Hi Yan,
When I use Enter-PSSession, it works in the same manner as if the command is run locally. Hence the same output as local.
I am not sure of the exact way to use [Reflection.Assembly]::LoadFile('C:\Windows\System32\inetsrv\Microsoft.Web.Administration.dll')
I tried this and get an error:
invoke-command -Session $session -ScriptBlock invoke-command -Session $session -ScriptBlock {[Reflection.Assembly]::LoadFile('C:\Windows\System32\inetsrv\Microsoft.Web.Administration.dll'); get-website}
Output:
GAC Version Location PSComputerName
True v2.0.50727 C:\Windows\assembly\GAC_MSIL\Microsoft.Web.Administrati... Server1
The term 'get-website' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the
name, or if a path was included, verify that the path is correct and try again.
+ CategoryInfo : ObjectNotFound: (get-website:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException
+ PSComputerName : Server1
The version of the dll on the server is 6.1.7601.17514
Thanks

How to write to windows event logs from determinations-server under IIS

This is just an FYI technical bit of information I wish someone had shared with me before I started trying to write OPA errors to the windows event log... Most problems writing to the windows event log from log4net occur because of permissions. Some problems are because determinations-server does not have permissions to create some registry entries. Some problems cannot be resolved unless specific registry entry permissions are actually changed. We had very little consistency with the needed changes across our servers, but some combination of the following would always get the logging to the windows event log working.
To see log4net errors as log4net attempts to utilize the windows event log, temporarily add the following to the web.config:
<appSettings>

<add key="log4net.Internal.Debug" value="true"/>
</appSettings>
<system.diagnostics>
<trace autoflush="true">
<listeners>
<add
name="textWriterTraceListener"
type="System.Diagnostics.TextWriterTraceListener"
initializeData="logs/InfoDSLog.txt" />
</listeners>
</trace>
</system.diagnostics>
To add an appender for the windows event viewer, try the following in the log4net.xml:
<appender name="EventLogAppender" type="log4net.Appender.EventLogAppender" >
<param name="ApplicationName" value="OPA" />
<param name="LogName" value="OPA" />
<param name="Threshold" value="all" />
<layout type="log4net.Layout.PatternLayout">
<conversionPattern value="%date [%thread] %-5level %logger [%property{NDC}] - %message%newline" />
</layout>
<filter type="log4net.Filter.LevelRangeFilter">
<levelMin value="WARN" />
<levelMax value="FATAL" />
</filter>
</appender>
<root>
<level value="warn"/>
<appender-ref ref="EventLogAppender"/>
</root>
To put the OPA logs under the Application Event Log group, try this:
Create an event source under the Application event log in Registry Editor. To do this, follow these steps:
1.     Click Start, and then click Run.
2.     In the Open text box, type regedit.
3.     Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application
4.     Right-click the Application subkey, point to New, and then click Key.
5.     Type OPA for the key name.
6.     Close Registry Editor.
To put the OPA logs under a custom OPA Event Log group (as in the demo appender above), try this:
Create an event log in Registry Editor. To do this, follow these steps:
1.     Click Start, and then click Run.
2.     In the Open text box, type regedit.
3.     Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog
4.     Right-click the eventlog subkey, point to New, and then click Key.
5.     Type OPA for the key name.
6.     Right-click the new OPA key and add a new DWORD called "MaxSize" and set it to "1400000" which is about 20 Meg in order to keep the log file from getting too large.
7.     The next steps either help or sometimes cause an error, but you can try these next few steps... If you get an error about a source already existing, then you can delete the key.
8.     Right-click the OPA subkey, point to New, and then click Key.
9.     Type OPA for the key name.
10.     Close Registry Editor.
You might need to change permissions so OPA can write to the event log in Registry Editor. If you get permission errors, try following these steps:
1.     Click Start, and then click Run.
2.     In the Open text box, type regedit.
3.     Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog
4.     Right-click the EventLog key, select Permissions.
5.     In the dialog that pops up, click Add...
6.     Click Advanced...
7.     Click Locations... and select the current machine by name.
8.     Click Find Now
9.     Select both the Network user and IIS_IUSERS user and click OK and OK again. (We never did figure out which of those two users was the one that fixed our permission problem.)
10.     Change the Network user to have Full Control
11.     Click Apply and OK
To verify OPA Logging to the windows event logs from Determinations-Server:
Go to the IIS determinations-server application within Server Manager.
Under Manage Application -> Browse Application click the http link to pull up the local "Available Services" web page that show the wsdl endpoints.
Select the /determinations-server/server/soap.asmx?wsdl link
Go to the URL and remove the "?wsdl" from the end of the url and refresh. This will throw the following error into the logs:
ERROR Oracle.Determinations.Server.DSServlet [(null)] - Invalid get request: /determinations-server/server/soap.asmx
That error should show up in the windows event log, OR you can get a message explaining why security stopped you in "logs/InfoDSLog.txt" if you used the web.config settings from above.
http://msdn.microsoft.com/en-us/library/windows/desktop/aa363648(v=vs.85).aspx
Edited by: Paul Fowler on Feb 21, 2013 9:45 AM

Thanks for sharing this information Paul.

How to bind an IIS to the enterprise portal installed on a linux machine

Dear all,
I am very new to the topic of Enterprise Portal.
Our intention is, to develop .NET IViews and deploy them in the Enterprise Portal.
The Enterprise Portal Server is set up on a linux machine.
The Guy who did install the Portal Server, has no idea how to "integrate" the Microsoft IIS to the Portal.
After deploying my .net Component, i tried to view this component in the portal (by right clicking the mouse on the Component in in the .NET Solutions Explorer).
This gives me the following error:
Portal Runtime Error
An exception occured while processing a request for:
iView:N/A
Component Name: N/A
Could not find portal application com.sap.portal.dotnet.framework.
Exception id: 02:06.......
See the details for the exception ID in the log file
I think that this has something in common with integrating the IIS on the Linux Machine, and maybe additionaly installing the pdk.net on the IIS webserver machine which should be used.
Thank you for your help.
Regards

Hi,
Welcome to the world of Enterprise portal
Seems to me like you are trying to use the PDK for .NET. If so - Please read the overview section in the documentation to get a general idea of how it works (for example - IIS is not used at all!).
See the Visual Studio integrated help or click this https://media.sdn.sap.com/html/submitted_docs/dotnet/index.htm
there go to "Getting Started" and mostly "Overview".
Anyway, It seems like the problem is that you didn't deploy the 2 required SDA's to the portal. You should also take a look at the "installation and configuration" guide. Download it here: https://www.sdn.sap.com/sdn/developerareas/dotnet.sdn?contenttype=url&content=/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/documents/a1-8-4/pdk for .net administrator guides.zip
Good luck,
Ofer

IIS Express Issue?

I am working in a visual studio premium 2013 solution that has a web project and class library. The web project is called UI and the class library project is called AppService. We are using ServiceStack and AngularJS. The UI project
is calling the AppService project via AngularJS controller. The class library is a pass through which calls APIs for data.
The web project was created as an empty web project that another team member created. Items were added as needed. It is set up to use IIS Express. The web project is defined to use port 30000 so that the URL is http://localhost:30000/.
When I try running the application using port 30000 I am not getting data back; heck, when I am in debug mode I am not stepping into the AppService project. I am the only person on the team experiencing this problem. There are four other developers
on the team.
In the UI project we have a Global.asax file. In the Application_Start property we are setting a new instance of the AppServiceAppHost object. We are able to step into this method when debugging.
The crux of the problem is that when I change the port number to something other than 30000 (e.g. 30001, 30002) everything works. We are getting data; we step into the AppService project when debugging.
When I am using port 30000, I am seeing in the IIS express logs the error "Object reference not set to an instance of an object" with the stack trace pointing to ServiceStack.HttpHandlerFactory..ctor().

Hi Gerald,
Thank you for posting in the MSDN forum.
Actually this forum is to discuss the VS IDE usage, if this issue is related to web project, you could ask this question in the ASP.NET forum:
http://forums.asp.net. If then, you could get an answer more quickly and professional. Thanks for your cooperation
Best Regards,
Jack
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Get Error on AM 7.0 do SSO on MS IIS 6.0 and Apache 2.0x

Hi...
I install AM 7.0/Sun Web 6.1 on Window (Java ES4). And I try to setup SSO between MS IIS 6.0 and Apache 2.0. I don't know how config in the AM by using amserver (web admin).
I already complete install Policy Agent for MS IIS and Apache 2.0 and both of web was protected.
I get the error msg on AM dubug log below :
IIS :
2006-06-26 22:56:18.376 Debug 3876:157ae90 AuthService: HTTP Status = 200 (OK)
2006-06-26 22:56:18.376 Debug 3876:157ae90 AuthService: Http::Response::readAndParse(): No content length in response.
2006-06-26 22:56:18.376 Error 3876:157ae90 AuthService: AuthService::processLoginStatus() Exception message=[Authentication Failed!!] errorCode='107' templateName=login_failed_template.jsp.
2006-06-26 22:56:18.376 Error 3876:157ae90 PolicyEngine: am_policy_evaluate: InternalException in AuthService::processLoginStatus() with error message:Exception message=[Authentication Failed!!] errorCode='107' templateName=login_failed_template.jsp and code:3
2006-06-26 22:56:18.376 Warning 3876:157ae90 PolicyAgent: am_web_is_access_allowed()(http://w2k3.sunth.com:81/index.html, GET) denying access: status = Access Manager authentication service failure
2006-06-26 22:56:18.376 Debug 3876:157ae90 PolicyAgent: am_web_is_access_allowed(): Successfully logged to remote server for GET action by user unknown user to resource http://w2k3.sunth.com:81/index.html.
2006-06-26 22:56:18.376 Info 3876:157ae90 PolicyAgent: am_web_is_access_allowed()(http://w2k3.sunth.com:81/index.html, GET) returning status: Access Manager authentication service failure.
2006-06-26 22:56:18.376 Debug 3876:157ae90 PolicyAgent: HttpExtensionProc(): status after am_web_is_access_allowed = Access Manager authentication service failure (3)
2006-06-26 22:56:18.376 Error 3876:157ae90 PolicyAgent: HttpExtensionProc(): status: Access Manager authentication service failure (3)
Thank you very much for your support
Wut

Hi ,
I was installed and configured policy agent successfully.while i am trying to access the application url i am getting following error.
I am using IIS6.0 and access manager 7.1.
Error 2824:15b9918 AuthService: AuthService::processLoginStatus() Exception message=[Application user ID is not valid.] errorCode='107' templateName=login_failed_template.jsp.
2009-03-10 00:03:05.828 Error 2824:15b9918 PolicyEngine: am_policy_evaluate: InternalException in AuthService::processLoginStatus() with error message:Exception message=[Application user ID is not valid.] errorCode='107' templateName=login_failed_template.jsp and code:3
2009-03-10 00:03:05.828 Warning 2824:15b9918 PolicyAgent: am_web_is_access_allowed()(http://fcs-ylwkuzfoz1q.ramesh.com:99/website.html, GET) denying access: status = Access Manager authentication service failure
2009-03-10 00:03:05.828 Debug 2824:15b9918 PolicyAgent: am_web_is_access_allowed(): Successfully logged to remote server for GET action by user unknown user to resource http://fcs-ylwkuzfoz1q.ramesh.com:99/website.html.
2009-03-10 00:03:05.828 Info 2824:15b9918 PolicyAgent: am_web_is_access_allowed()(http://fcs-ylwkuzfoz1q.ramesh.com:99/website.html, GET) returning status: Access Manager authentication service failure.
2009-03-10 00:03:05.828 Debug 2824:15b9918 PolicyAgent: HttpExtensionProc(): status after am_web_is_access_allowed = Access Manager authentication service failure (3)
2009-03-10 00:03:05.828 Error 2824:15b9918 PolicyAgent: HttpExtensionProc(): status: Access Manager authentication service failure (3)
2009-03-10 00:03:05.828 Debug 2824:15b9918 PolicyAgent: OnSendResponse(): HTTP Status code is 500
can any one please help me to resolve this.
Thanks
Ramesh Kumar GV

IIS Proxy SAR file needed

Hi all:
   I would like to implement the IIS Proxy SSO solution. Is there anybody can send me the IIS Proxy SAR file ?
   I cannot find it in service.sap.com/patches
   my mail : [email protected]
   I will give you the reward points.
   thanks.

Hi,
To my knowledge IISProxy is not supported/delivered by SAP anymore. See the OSS note 886214 for details. You can use WebDispatcher as reverse proxy and SPNego for SSO authentication. They are supposed to be replacements for what you could do with IISProxy.
So I doubt you will find IIS Proxy inside Service Marketplace. Doesn't mean that you cannot get it anywhere else though.
Regards,
Mike

SSO, LDAP Authentication & IIS

Hi All,
I am trying to config the sso with the iis,
1. after configuring the LDAP I manage to login to the dashboard with user "richard"
2. but when I am trying to enter with "Domain_name\richard" I am getting an error massage "invalid username password.
3. I configure the sso to work with the biee and the iis.
4. when trying to login, I am getting an error massage "not logged in"
5. in the log file I can see that the biee get "Domain_name\richard" as username and not "richard" and that is the reason for the failure.
how can I solv this problem
Best Regards,
Ronen

Hi,
- you would need LDAP configured on your BOE Server
- you would need SAP Authentication configured on your BOE Server
-your SAP Portal needs to pass on the LDAP part to BOE or
- your portal can pass on the SSO Token
if you portal passes on the SSO Token - then InfoView needs to be configured for SSO with SAP - see here:
Portal Part 1
/people/ingo.hilgefort/blog/2010/03/29/sap-businessobjects-enterprise-sap-enterprise-portal--part-1-of-4
Portal Part 2
/people/ingo.hilgefort/blog/2010/03/30/sap-businessobjects-enterprise-sap-enterprise-portal-part-2-of-4
Portal Part 3
/people/ingo.hilgefort/blog/2010/04/08/sap-businessobjects-enterprise-sap-enterprise-portal--part-3-of-4
Portal Part 4
/people/ingo.hilgefort/blog/2010/04/21/sap-businessobjects-enterprise-and-sap-enterprise-portal--part-4-of-4
but for sure you will need SNC configured between the BOE Server and the source system - assuming BW for now - so that you can combine the authentications.
Ingo

CF 7/IIS 6

Similar Messages

Maybe you are looking for