CF/Flex3 and session management

Does anyone know how to manage user access to CF components
so that a person must be authenticated before running the
CFComponent? Otherwise, if I set access to a CF Component to
"remote" anyone can call it without authentication.
Thanks!

Well after a bit of a research and almost a whole day without
electricity I found out that setremotecredentials is the way to
pass credentials to CF, and using the CF security framework secure
the CFC. Then you can authenticate and using cflogin and Roles then
you're able to use per function security. It's a shame you can
secure the whole CFC as well. Here you'll find a tutorial.
http://kb.adobe.com/selfservice/viewContent.do?externalId=tn_18684

Similar Messages

ITS iView and Session Management in Federated Portal Network

Hi,
We use an ITS iView for an HR application in the Portal. When used in federation the session management doesn not work correctly. We fill in a selection screen in the begin of the application and then run the report. When we click the back button in the Portal and then reload the app, the selection of the previous session is used, in stead of showing a new selection screen.
This only occurs when used in Federated Portal Network. SAP OSS already pointed out that the USR_ABORT command is not given in the consumer Portal. How can we make sure that this command is given, so that the session is correctly closed? How can we set these session management properties and options?
Best regards,
Jan Laros

Solved it. It is done in the federation configuration. In SAP Note 880482 - Central Note: Federated Portal Network (SAP NetWeaver 7.0) the problem is identified, specific for SPS13. The two properties of the producer: External Hostname and External Port were not updated properly and needed to be changed manually.

Cfdiv and session managment

I am working on a website that uses session managment for
security login.
The site was developed with CF6, and we are now trying
migrating it to CF8.
Currently, forms are submitted passing the session token in
the URL like this:
<form
action="Assignments.cfm?<cfoutput>#session.URLToken#</cfoutput>"
method="post">
</form>
I'm trying to integrate CFDIV into the code, so I have
<cfform>
</cfform>
<CFDIV bind="url:AnotherForm.cfm ...>
When I run this, Instead of including "AnotherForm.cfm" the
session is not getting passed and the system logs me out.
I've tried
bind="url:AnotherForm.cfm?<cfoutput>#session.URLToken#</cfoutput>
(also logs me out)
and putting the code in a
<cfdiv>
<cfform
action="AnotherForm.cfm?<cfoutput>#session.URLToken#</cfoutput>">
</cfform>
<cfdiv>
Doesn't abend, but doesn't do anything either.
So, does anybody know how to incorporate cfdiv into session
management?
thank you,
Steve Shapiro
University of Oregon

Yes, entity managers are allowed to have one transaction active at any given time.
Assuming that you have a resource-local entity manager (from your comment about JDBC and non-JTA data sources) then any container-managed transaction associated with a session bean is going to be a JTA transaction and be completely independent of the entity manager transaction (as long as the non-JTA-data source is properly set to a data source that is not a JTA data source).
If you are using a non-JTA data source element to configure your database then the entity manager will simply do a getConnection() on the data source. If you are using the JDBC persistence properties in persistence.xml then the connection will be obtained directly from the JDBC driver.

Web Services and session management

Hello,
I am building an application using tomcat and axis2 for ws support. Is there any (standard, preferably) way to maintain session information accross multiple soap invocations? Or maybe even manage the sessions by myself "logically" and send something like a header identifying the session key with each request?
Any comments would be appreciated,
Thx

Hi
Axis2 offers two ways of doing session management. The first way uses a cookie. You need to specify scope="transportsession" in your services.xml, and ensure that cookies are enabled.
The second way is not dependent on HTTP cookies, but uses WS-Addressing headers instead. It is scope="soapsession". If you use the Axis2 client then you can do this very simply use setManageSession(true) on your ServiceClient.
e.g. stub._getServiceClient.setManageSession(true);
If you use another client, you will need to get the header from the response message and add it to future requests yourself.
Can I suggest you move this discussion to [email protected] where all the axis2 experts hang out?
Paul

JPA and Session Managment

Hi ,
am using JPA/Toplink , with Bean Managed entity manager (EntityManagerFactory) , as far as i know that for each EntityManager there should be one active transaction within one session , is that right !!? and how does EntityManager handles these connections (Creation , Closing , ... ) on both ways (direct DB url and non JTA DataSource) , and does the transaction type of the Statless session bean that hosts the execution matters !!!
Thanks

Yes, entity managers are allowed to have one transaction active at any given time.
Assuming that you have a resource-local entity manager (from your comment about JDBC and non-JTA data sources) then any container-managed transaction associated with a session bean is going to be a JTA transaction and be completely independent of the entity manager transaction (as long as the non-JTA-data source is properly set to a data source that is not a JTA data source).
If you are using a non-JTA data source element to configure your database then the entity manager will simply do a getConnection() on the data source. If you are using the JDBC persistence properties in persistence.xml then the connection will be obtained directly from the JDBC driver.

State management and session management

Hi
Can anyone tell me a good way to maintain state without using EJB?
and is there a way to manage sessions without cookies and URL rewriting.
Thanks

Can anyone tell me a good way to maintain state
without using EJB?Of course. Depends on what sort of state you are looking to maintain... if you are looking for alternatives to stateless session beans, you can simply use the servlet session i.e., via HttpSession.set/getAttribute().
and is there a way to manage sessions without cookies
and URL rewriting.Not really, cookies and URL rewriting are the only reasonable solutions. I suppose one could design an alternative approach. The bottom line is http is a stateless protocol -- to maintain state across requests a session id must be associated with the client.

Session management for a web service

I am building a web service where the user will need to login and the application will need to maintain a persistent session. I am using Apache Axis2 for client/server communication via SOAP/XML. What would the simplest and most common way of doing this? I know I could implement session management from scratch similarly to how a browser does it, using cookies, but I'd rather use standard Java libraries for this. Am I correct in assuming that even though I'm using Axis2, the solution doesn't really have anything to do with Axis2 since Axis2 is basically just a way for the client/server to send messages to each other?
I've read a lot of information online about this, but there's so much information that it's hard to know where to start. Basically I'm just looking for someone to point me in the right direction on what classes to use and so on. I just need a simple username password authentication and session management system for a web service.

Container Managed Authentication. Does everything you need.

How to import old Session Manager data

I just upgraded to Firefox 35.0 and had to reinstall Session Manager. Now Session Manager doesn't show any of the old saved sessions. I've found the file containing these old sessions, but can't figure out how to import that file so that I can use it with the new versions of Firefox and Session Manager.

#Go to your profile folder:
#*[https://support.mozilla.org/en-US/kb/profiles-where-firefox-stores-user-data#w_how-do-i-find-my-profile Find you profile]
#Exit Firefox.
#Look for sessions folder, enter in it and put here that file with old sessions.
#Restart Firefox and try load the session.

What is new with MAX 2.0 and is it compatible with Session Manager?

We added non-IVI instrument information in, basically the same structure as for IVI instruments,
into the ivi.ini file to keep all instrument information in the same place. Using MAX Version 1.1 caused no problems whatsoever and the system worked fine. With the advent of MAX 2.0 you seem to use ivi.ini as well as config.mxs to store instrument information. What we have found now is that given a working ivi.ini file from MAX 1.1, we end up with 2 or 3 copies of all the devices in the IVI Instruments->Devices section! When the duplicate entries are deleted and the application exited, the
ivi.ini file is updated minus the [Hardware->] sections which contain the resource descriptors that our appl
ications look for. As an added complication, under MAX 2.1 (From an evaluation of the Switch Executive) It behaves the same, except that it almost always crashes with one of the following errors. 'OLEChannelWnd Fatal Error', or 'Error#26 window.cpp line 10028 Labview Version 6.0.2' Once opened and closed MAX 2.1 will not open again! (Note we do not have LabVIEW on the system.) What is the relationship between the config.mxs and ivi.ini now? Also, your Session Manager application (for use with TestStand) extracts information from ivi.ini and may expect entries to be manually entered into ivi.ini (e.g. NISessionManager_Reset = True) i.e. Is the TestStand Session Manager compatible with MAX 2.0?

Brian,
The primary difference between MAX 1.1 and 2.x is that there is a new internal architecture. MAX 2.x synchronizes data between the config.mxs and the ivi.ini. The reason you're having trouble is that user-editing of the ivi.ini file is not supported with MAX 2.x.
Some better solutions to accomplish what you want:
1. Do as Mark Ireton suggested in his answer
2. Use the IVI Run-Time Configuration functions. They will allow you to dynamically configure your Logical Names, Virtual Instruments, Instrument Drivers, and Devices. You can then use your own format for storing and retrieving that information, and use the relevant pieces for each execution. You can find information on these functions in the IVI CVI Help file located in Start >> National I
nstruments >> IVI Driver Toolset folder. Go to the chapter on Run-time Initialization Configuration.
I strongly suggest #2, because those functions will continue to be supported in the future, while other mechanisms may not be.
--Bankim
Bankim Tejani
National Instruments

What is the difference between Session timeout and Short Session timeout Under Excel Service Application -- session management?

Under Excel Service Application --> session management; what is the difference between Session timeout and Short Session timeout?

Any call made from the API will automatically be set to the “Session Timeout” period, no matter
what. Calls made from EWA (Excel Web Access) will get the “Short Session Timeout” period assigned to it initially.
Short Session Timeout and Session Timeout in Excel Services
Short Session Timeout and Session Timeout in Excel Services - Part 2
Sessions and session time-outs in Excel Services
above links are from old version but still applies to all.
Please remember to mark your question as answered &Vote helpful,if this solves/helps your problem. ****************************************************************************************** Thanks -WS MCITP(SharePoint 2010, 2013) Blog: http://wscheema.com/blog

Session management and java Web Service

Hi ,
Can I have two web services one based on Session bean and other on Simple java class, packaged into single ear file? Does NetWeaver supports web service session management/tracking? How can I get an handle to HttpRequest in my Web Service?
Any help will be appreciated.
Thanks in advance
regards,
rajinder

Container Managed Authentication. Does everything you need.

Firefox 5 on Win7: All my plugin buttons have gone from the toolbar. They are not in the customise pane. Session manager offers the correct sessions but opens with last session instead. I've re-installed % and reset toolbars. Help!

Win 7
Firefox 5
Problem with high memory use.
restarted
Plugin buttons gone from toolbar/
Missing plugins still show in plugin manager but buttons missing from toolbar add buttons pane.
Tried reset toolbars - no difference.
Tried re-instal of Firefox 5 - no difference except:
Session manager offers correct session on startup but starts with last session

In case you are using "Clear history when Firefox closes":
*do not clear the Browsing History
*Firefox > Preferences > Privacy > Firefox will: "Use custom settings for history": [X] "Clear history when Firefox closes" > Settings
*https://support.mozilla.org/kb/remove-browsing-search-and-download-history
Note that clearing "Site Preferences" clears all exceptions for cookies, images, pop-up windows, software installation, passwords, and other website specific data.
You can check for problems with the sessionstore.js and sessionstore.bak files in the Firefox profile folder that store session data.
*Help > Troubleshooting Information > Profile Directory: Show Folder (Linux: Open Directory; Mac: Show in Finder)
*http://kb.mozillazine.org/Profile_folder_-_Firefox
*http://kb.mozillazine.org/Multiple_profile_files_created
Deleting sessionstore.js will cause App Tabs and Tab Groups and open and closed (undo) tabs to get lost and you will have to recreate them (make a note or bookmark them if possible).

SAP TechEd 2011- Data Integration and Quality Managment Sessions

Looking for answers on "Data Integration and Quality Management," check out the related educational sessions at SAP TechEd 2011 ([Las Vegas|http://bit.ly/qE0dZs], [Bangalore|http://bit.ly/oVdGsM], [Madrid|http://bit.ly/rnSNOT]). [Register today|http://www.sdn.sap.com/irj/scn/sapteched]!

Hi,
you must check in sap teched site and register it, the link as below
[SAP Teched Banglore 2011|http://www2.sapevents.com/SAP/TechEd2011Bangalore/index.cfm?fuseaction=agenda.sessionCatalogueHOS&view=overview]
Thanks,
Jansi

NI Session Manager gets slower and slower from call to call!

I have the following problem with NI-Session-Manager:
I use Session Manager a lot on my test systems. Now that I have a test system running that makes many Session Manager Calls I noticed that after a while the system gets slower and slower. I�ve attached a Sequence File, which demonstrates this problem.
This sequence file is based on the LV Session Manager Example, which ships with TestStand.
Instructions: In the UI-Msg Field of the Sequence Editor you will see how long the actual run took to execute. Every run makes 500 calls to Session Manager. You will notice that every run takes a little bit longer than the previous. After 100 runs the difference is significant.
Although my example uses a COM
port to demonstrate the problem this problem is really related to Session Manager because the same happens if I use an IVI-Instrument (i.e. NI-DMM, NI-Switch, �)
Any help appreciated!
Regards
Herbert
Herbert Koltschik
Sagem Communication Austria
[email protected]
Attachments:
sessionmgr_-_slow_down_problem.zip ‏63 KB

Herbert -
Thanks for the feedback. I will look into item (1).
The design of the session manager was to solve the problem of only having to share an instrument within a multithread application. If the session already exists, than you get the same session and thus the same handle, and the instrument is only initialize once and closed after the session no longer exists.
In the case of a C++ based program you would have to add the session as a member variable that has a specific lifetime. When the object is release, so will the session.
In the case of an application like TestStand, you just attach the session to the execution. Once the execution goes away, the session may go away if no other execution is using it.
In the case of L
abVIEW being called from TestStand, you are using VIs as subroutines, so either the application (TestStand) must manage the lifetime of the session, or the VI subroutine must deligate the lifetime control to a "global" VI. The item you attach to the global could be the refnum itself or the SMgr session. One way of doing this would be to create a VI that serves the refnum to you but internally manages the lifetime of the ActiveX references to the Session Manager sessions. This would be a simple vector of names and their sessions. When called the VI would lookup and return a refnum from an existing session or create a new session and return a refnum for it.
Scott Richardson
Scott Richardson
National Instruments

WebService with Session manager and Connection pooling

I've created many a Oracle users in our RDBMS. It comes to this, that every
user in our Company has its own oracle account.
We are developing now a Web application (Internal information system) for my
Company.
This Web application will have GUI created in perl and middle tier will be
Oracle WebServices.
This WebServices will be connected to the DB for every oracle user and it also
must have a session management.
And this is a Action plan:
1. the user will log to the Web GUI with his oracle login name and a password
2. this oracle user name and the password will be sent from this Web app to the
WebService
3. this WebService will create a connection over a JDBC (not over DataSources)
and will create also a session (maybe like a servlet)
4. in this session the instance of the created connection for this user will be
saved and the WebService will return to the Web app the session id
5. and this session id will be then used for further calling of WebServices
Then comes another user, signs up over the Web app with his oracle account and
this whole process repeats.
Finally every logged user will have its own session id with his own connection
instance to DB.
Maybe it's possible, that it will work only with Servlet (with HttpSession) and
WebService created from this Servlet.

Take a look at the Statefull Java Web Services. It may be able to handle your use case.
http://download-west.oracle.com/docs/cd/B14099_04/web.1012/b14027/javaservices.htm#i1027664
You should be able to cache the database connection, directly in your service implementation class.
Hope this helps,
Eric

CF/Flex3 and session management

Similar Messages

Maybe you are looking for