Client Authentication via middle tier to database.

Is it possible to pass through the Identity of the Real User
to the database when using an Application Server that uses
connection pooling to connect to the database.
Note. The Application server is running EJBs that connect to the
database using JDBC, with any driver type (eg OCI, thin).
null

Trevor,
What type of OS is the app server running on? How is the user
logging into the app? There are middleware packages that can
map the currently logged in user to the database on a per-
connection basis. Openlink provides a middle-tier security
layer that dispatches a connection to the database based on a
combination of factors (client app, client IP, username,
servertype).
HTH,
Stephen
Trevor (guest) wrote:
: Is it possible to pass through the Identity of the Real User
: to the database when using an Application Server that uses
: connection pooling to connect to the database.
: Note. The Application server is running EJBs that connect to
the
: database using JDBC, with any driver type (eg OCI, thin).
null

Similar Messages

Novell Client patch kills authentication to middle tier

Hi,
There was a recent patch for the novell client which replaces the file nicm.sys due to a security vulnerability. When I install this patch onto servers which have the Zenworks Middle Tier software installed it prevents the client machines from authenticating to edirectory via the middle tier servers.
Once I put the old vulnerable nicm.sys file back then the authentication begins working again.
I've had dig around to see if any one else is experiencing this problem but I haven't found anything.
Any suggestions on how I might fix this. I would ideally like to resolve this as I don't like my servers being vulnerable.
Thanks in advanced
Liz

You can install a server that only has Middle-Tier.
The rest of the stuff requires the client IIRC.
If you have upgrade protection, you may be able to test with a ZDM7 SP1 IR3
version of the middle-tier.
The problem is that Novell is no longer patching/testing against ZDM6.5, so
even if there was a code issue, its not likely you could get a fix.
Craig Wilson - MCNE, MCSE, CCNA
Novell Support Forums Volunteer Sysop
Novell does not officially monitor these forums.
Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human.
"enegro" <[email protected]> wrote in message
news:[email protected]..
>
> Hi,
>
> There was a recent patch for the novell client which replaces the file
> nicm.sys due to a security vulnerability. When I install this patch
> onto servers which have the Zenworks Middle Tier software installed it
> prevents the client machines from authenticating to edirectory via the
> middle tier servers.
>
> Once I put the old vulnerable nicm.sys file back then the
> authentication begins working again.
>
> I've had dig around to see if any one else is experiencing this problem
> but I haven't found anything.
>
> Any suggestions on how I might fix this. I would ideally like to
> resolve this as I don't like my servers being vulnerable.
>
> Thanks in advanced
>
> Liz
>
>
> --
> enegro
> ------------------------------------------------------------------------
> enegro's Profile: http://forums.novell.com/member.php?userid=24444
> View this thread: http://forums.novell.com/showthread.php?t=335789
>

Handling Locking for transaction in Middle Tier versus Database backend

Hi,
If we implement middle tier with C# as the programming language and backend as SQL Server database, if we now wanted to implement locking where we take the classic case of money withdrawal from a bank account, we could implement this as a single atomic transaction
using locks / monitor in the middle tier or we could do this in a stored procedure and handle it using a begin tran commit tran in SQL Server.
What would be the recommended way? middle tier or sql server database backend?
Thanks

> the two different servers having the same middle tier executing the same code at the same time will be handled by the backend by putting one on hold while the other is being serviced.
Yes. A SQL Server database provides a single coherent state repository for the whole application. And you can use the database transactions to control which business transactions run concurrently, and which do not.
David
David http://blogs.msdn.com/b/dbrowne/

Applet clients accessing EJB middle-tier

Hello
I am trying to have an Applet access the stateless session EJBs on the middle tier (OC4J 9.0.3)
The applet works fine in the AppletViewer.
However in the IE browser version 5.5, I get java.security.AccessControlException.
Which I can understand because applet is not allowed to open a RMI-IIOP port on the remote server.
What steps do I need to take to allow the applet to open such a connection. Signing jars?, java.poclicy file ?
I know that this setup works fine on JBoss and also on WebSphere. (using certificates)
Is this not suported by OC4J? Does the server need to support something or is it strictly a client side issue?
Any comments will be highly appreciated.
Thanks
vijay

We are having Applet-clients with OC4J and it works fine. We sign all our client-jars (including oc4jclient.jar) and our application has all permissions at the client. Modifying java.policy works as well, but signing Jar-Files is simpler and doesn't need any client-changes.
For normal operations it seems ok to include oc4client.jar for the client application, but we are using JMS and therefore need a lot of classes of oc4j.jar - so I buildt my own deployment-jar out of oc4j.jar.
If you use the cache_archive and cache_version attributes in the html-tag, all the jar-files are only downloaded at application startup if they are changed on the server (und version-numbers are increased). So startup-time is comparable to a local application.
Gilbert

ACS Authentications via RSA or local database

Hi Expert,
Currently, I have a group of devices authenticate through RSA. Now, we are implementing Nagios monitoring system that require backup device configuration through ACS local database. Is that possible to create a login credential using local database while maintain two form factor authentication?
Cheers,
Jeffrey

Hi,
We had a same sceraria as well, which is required login credential by using ACS local database only as our NMS do not support two form factor login. Currently, we are using ACS 5.2. Appreciate if you could provide us some idea on this. Thanks!

Windows Integrated Authentication Help From Middle Tier

We are trying to enable single sign-on using Windows Integrated Authentication so that the user does not have to enter a username or password, they just get logged in automatically. I created the current Oracle account on the database and it works just fine when I try to connect from my local computer to the database. Our problem is that our application calls an application that runs as a Windows services on the middle tier, and so it gets an invalid username/password error. I can see in the audit logs that it is trying to connect to the database as NT AUTHORITY\ANONYMOUS LOGON.
The client, middle tier, and database are all Windows based operating systems. The applications is a .Net application and we turned on Impersonation which we read will help pass the client OS user to middle tier so that the application runs as them. And that appears to be working correctly. Again we can get this working when we host the windows service locally, it just wont work when it is hosted on the middle tier. Any ideas how to get this to work?
Oracle version 11.2.0.2 and 11.2.0.3
Windows Server 2008 R2

Hi, jeff81.
I had same problem with Win2003 server. Try this:
Start -> Settings -> Control Panel -> Administrative Tools -> Services
then select "PROPERTIES/LOGON" for necessary service.
Change "Local System account" to your user account.
Make sure that user account have necessary grants.
ps. sorry my poor english :(

Control without client or middle tier server

Is it possible to remote control/view workstations without having the
client OR a middle tier server set up? We only want to be able to control
our workstations from inside our firewall, so the middle tier server
would not be needed.
Another question, is it also possible to run naldesk the same way to push
applications out to workstations without the client installed (with or
without the middle tier server). Thanks in advance.

Desktop4 can use any of the options.
It really is a bit cumbersome to use at the moment, but drop me a note at
my email address of craig_d_wilson at yahoo dot com in about 2 weeks.
I'm in the process of writing a small front-end program for use in
clientless environments. I should have something going by then.
Normally the Workstation Object gives rights to the local SYSTEM account
when the Novell Client is around to access NetWare shares.
In a Windows Domain Environment, you can use the Windows Domain workstation
object to do the same thing.
Otherwise you may have issues accessing system resources when process are
running in System mode.
FYI, you will 100% need a middle-tier server to get your App Objects.
It will not be needed to RC or transfer files, but you will need at least
one mid-tier server.
Craig Wilson
Novell Product Support Forum Sysop
Master CNE, MCSE, CCNA
http://www.ithowto.com
Editor - http://www.ithowto.com
<[email protected]> wrote in message
news:[email protected]...
>> Yes to all of your questions.
>>
>> In regards to remote control you have two options.....
>>
>> 1) Use Desktop4.exe with password based remote control to connect to
> the
>> remote PC.
>> 2) Have the remote PC use the option to Request a remote control
> session
>> from the support personnel.
>>
>> Search support.novell.com for desktop4.exe and there should be a couple
> tids
>> that go into detail.
>>
>> In regards to distributing applications.....................
>> 1) Are you in a Domain or Non-Domain environment. This controls what
>> options you have.
>>
>> --
>> Craig Wilson
>> Novell Product Support Forum Sysop
>> Master CNE, MCSE, CCNA
>>
>> http://www.ithowto.com
>>
>> Editor - http://www.ithowto.com
>
> Thanks for the response! We are currently strictly netware with no
> domain, but we were looking at moving towards a domain (we are testing
> both OES cores to act as a PDC to authenticate through edir, both of
> which we got to function correctly :-) So we were just looking at the
> rest of the stuff we may or may not lose by going that route. We
> currently use ZENworks mostly to remote view student workstations,
> control admin machines, and image all the machines. We also occasionaly
> push out small apps or registry changes with Nal, but not that often. Can
> you simply remote view the workstation (without the user knowing) or does
> desktop4.exe only control the machine? I will have to check it out.
> Thanks again

Middle Tier

Recently became unable to authenticate via Middle Tier on laptops with no Client installed. Able to do so in the past. Any thought on the most likely culprit? Have already rebooted Middle Tier/ZENworks server.

youngj,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Oracle forms 10g (win Xp middle tier IE 8 Win 7- IE 8 client)

forms services 10.1.2.0.2
Database 11gR2 also on Win Xp pro SP3
Hi
I have a problem with java and Jinitiator and my understanding of what is / should be happening.
In the file forms/server/formsweb.cfg see below. I can alter the parameter
baseHTMLjinitiator=basejini.htm
###baseHTMLjinitiator=basejpi.htm
between the two alternatives. As it stands as shown the IE8 on the middle tier and on the database PC both work as near correctly as i can tell. On the Win 7 client IE 8 however crashes. switch it to the other way around and the
win 7 works and the win xp on the database server stops with frm-92095 error version number too low. while on the middle tier Xp PC a blank doucument is displayed.
How can i have both working at the same time please. I you need more information i will happily supply it.
Neill
# $Id: formsweb.cfg 15-apr-2005.13:17:30 pkuhn Exp $
# formsweb.cfg defines parameter values used by the FormsServlet (frmservlet)
# This section defines the Default settings. Any of them may be overridden in the
# following Named Configuration sections. If they are not overridden, then the
# values here will be used.
# The default settings comprise two types of parameters: System parameters,
# which cannot be overridden in the URL, and User Parameters, which can.
# Parameters which are not marked as System parameters are User parameters.
# SYSTEM PARAMETERS
# These have fixed names and give information required by the Forms
# Servlet in order to function. They cannot be specified in the URL query
# string. But they can be overridden in a named configuration (see below).
# Some parameters specify file names: if the full path is not given,
# they are assumed to be in the same directory as this file. If a path
# is given, then it should be a physical path, not a URL.
# USER PARAMETERS
# These match variables (e.g. %form%) in the baseHTML file. Their values
# may be overridden by specifying them in the URL query string
# (e.g. "http://myhost.mydomain.com/forms/frmservlet?form=myform&width=700")
# or by overriding them in a specific, named configuration (see below)
[default]
# System parameter: default base HTML file
baseHTML=base.htm
# System parameter: base HTML file for use with JInitiator client
baseHTMLjinitiator=basejini.htm
###baseHTMLjinitiator=basejpi.htm
# System parameter: base HTML file for use with Sun's Java Plug-In
baseHTMLjpi=basejpi.htm
# System parameter: delimiter for parameters in the base HTML files
HTMLdelimiter=%
# System parameter: working directory for Forms runtime processes
# WorkingDirectory defaults to <oracle_home>/forms if unset.
workingDirectory=
# System parameter: file setting environment variables for the Forms runtime processes
envFile=default.env
# Forms runtime argument: whether to escape certain special characters
# in values extracted from the URL for other runtime arguments
escapeparams=true
# Forms runtime argument: which form module to run
form=test.fmx
# Forms runtime argument: database connection details
userid=scott/xxxxxxxxxxx@orcl
# Forms runtime argument: whether to run in debug mode
debug=no
# Forms runtime argument: host for debugging
host=
# Forms runtime argument: port for debugging
port=
# Other Forms runtime arguments: grouped together as one parameter.
# These settings support running and debugging a form from the Builder:
otherparams=buffer_records=%buffer% debug_messages=%debug_messages% array=%array% obr=%obr% query_only=%query_only% quiet=%quiet% render=%render% record=%record% tracegroup=%tracegroup% log=%log% term=%term%
# Sub argument for otherparams
buffer=no
# Sub argument for otherparams
debug_messages=no
# Sub argument for otherparams
array=no
# Sub argument for otherparams
obr=no
# Sub argument for otherparams
query_only=no
# Sub argument for otherparams
quiet=yes
# Sub argument for otherparams
render=no
# Sub argument for otherparams
record=
# Sub argument for otherparams
tracegroup=
# Sub argument for otherparams
log=
# Sub argument for otherparams
term=
# HTML page title
pageTitle=Oracle Application Server Forms Services
# HTML attributes for the BODY tag
HTMLbodyAttrs=
# HTML to add before the form
HTMLbeforeForm=
# HTML to add after the form
HTMLafterForm=
# Forms applet parameter: URL path to Forms ListenerServlet
serverURL=/forms/lservlet
# Forms applet parameter
codebase=/forms/java
# Forms applet parameter
imageBase=DocumentBase
# Forms applet parameter
width=750
# Forms applet parameter
height=600
# Forms applet parameter
separateFrame=false
# Forms applet parameter
splashScreen=
# Forms applet parameter
background=
# Forms applet parameter
lookAndFeel=Oracle
# Forms applet parameter
colorScheme=teal
# Forms applet parameter
logo=
# Forms applet parameter
restrictedURLparams=HTMLbodyAttrs,HTMLbeforeForm,pageTitle,HTMLafterForm,log,allow_debug,allowNewConnections
# Forms applet parameter
formsMessageListener=
# Forms applet parameter
recordFileName=
# Forms applet parameter
serverApp=default
# Forms applet archive setting for JInitiator
archive_jini=frmall_jinit.jar
# Forms applet archive setting for other clients (Sun Java Plugin, Appletviewer, etc)
archive=frmall.jar
# Number of times client should retry if a network failure occurs. You should
# only change this after reading the documentation.
networkRetries=0
# Page displayed to Netscape users to allow them to download Oracle JInitiator.
# Oracle JInitiator is used with Windows clients.
# If you create your own page, you should set this parameter to point to it.
jinit_download_page=/forms/jinitiator/us/jinit_download.htm
# Parameter related to the version of JInitiator
jinit_classid=clsid:CAFECAFE-0013-0001-0022-ABCDEFABCDEF
# Parameter related to the version of JInitiator
jinit_exename=jinit.exe#Version=1,3,1,22
# Parameter related to the version of JInitiator
jinit_mimetype=application/x-jinit-applet;version=1.3.1.22
# Page displayed to users to allow them to download Sun's Java Plugin.
# Sun's Java Plugin is typically used for non-Windows clients.
# (NOTE: you should check this page and possibly change the settings)
jpi_download_page=http://java.sun.com/products/archive/j2se/1.4.2_06/index.html
# Parameter related to the version of the Java Plugin
jpi_classid=clsid:CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA
# Parameter related to the version of the Java Plugin
jpi_codebase=http://java.sun.com/products/plugin/autodl/jinstall-1_4_2-windows-i586.cab#Version=1,4,2,06
# Parameter related to the version of the Java Plugin
jpi_mimetype=application/x-java-applet;jpi-version=1.4.2_06
# EM config parameter
# Set this to "1" to enable Enterprise Manager to track Forms processes
em_mode=0
# Single Sign-On OID configuration parameter
oid_formsid=%OID_FORMSID%
# Single Sign-On OID configuration parameter
oracle_home=E:\DSHome_1
# Single Sign-On OID configuration parameter
formsid_group_dn=%GROUP_DN%
# Single Sign-On OID configuration parameter: indicates whether we allow
# dynamic resource creation if the resource is not yet created in the OID.
ssoDynamicResourceCreate=true
# Single Sign-On parameter: URL to redirect to if ssoDynamicResourceCreate=false
ssoErrorUrl=
# Single Sign-On parameter: Cancel URL for the dynamic resource creation DAS page.
ssoCancelUrl=
# Single Sign-On parameter: indicates whether the url is protected in which
# case mod_osso will be given control for authentication or continue in
# the FormsServlet if not. It is false by default. Set it to true in an
# application-specific section to enable Single Sign-On for that application.
ssoMode=false
# The parameter allow_debug determines whether debugging is permitted.
# Administrators should set allow_debug to "true" if servlet
# debugging is required, or to provide access to the Forms Trace Xlate utility.
# Otherwise these activities will not be allowed (for security reasons).
allow_debug=false
# Parameter which determines whether new Forms sessions are allowed.
# This is also read by the Forms EM Overview page to show the
# current Forms status.
allowNewConnections=true
# EndUserMonitoring
# EndUserMonitoringEnabled parameter
# Indicates whether EUM/Chronos integration is enabled
EndUserMonitoringEnabled=
# EndUserMonitoringURL
# indicates where to record EUM/Chronos data
EndUserMonitoringURL=
# Example Named Configuration Section
# Example 1: configuration to run forms in a separate browser window with
# "generic" look and feel (include "config=sepwin" in the URL)
# You may define your own specific, named configurations (sets of parameters)
# by adding special sections as illustrated in the following examples.
# Note that you need only specify the parameters you want to change. The
# default values (defined above) will be used for all other parameters.
# Use of a specific configuration can be requested by including the text
# "config=<your_config_name>" in the query string of the URL used to run
# a form. For example, to use the sepwin configuration, your could issue
# a URL like "http://myhost.mydomain.com/forms/frmservlet?config=sepwin".
[sepwin]
separateFrame=True
lookandfeel=Generic
# Example Named Configuration Section
# Example 2: configuration forcing use of the Java Plugin in all cases (even if
# the client browser is on Windows)
[jpi]
baseHTMLJInitiator=basejpi.htm
# Example Named Configuration Section
# Example 3: configuration running the Forms ListenerServlet in debug mode
# (debug messages will be written to the servlet engine's log file).
[debug]
serverURL=/forms/lservlet/debug
# Sample configuration for deploying WebUtil. Note that WebUtil is shipped with
# DS but not AS and is also available for download from OTN.
[webutil]
WebUtilArchive=frmwebutil.jar,jacob.jar
WebUtilLogging=off
WebUtilLoggingDetail=normal
WebUtilErrorMode=Alert
WebUtilDispatchMonitorInterval=5
WebUtilTrustInternal=true
WebUtilMaxTransferSize=16384
baseHTMLjinitiator=webutiljini.htm
baseHTMLjpi=webutiljpi.htm
archive_jini=frmall_jinit.jar
archive=frmall.jar
lookAndFeel=oracle

You have a mixture of problems here.
1. Oracle Jinitiator is not supported for use on Windows 7
2. JRE 1.7 is not supported for use with any version of Forms on any platform. Be sure you do not have this version installed.
3. JRE 1.6 is not supported for use with Forms 10.1.2.0.2, however is supported with 10.1.2.3 (10.1.2.0.2 + patch ID 5983622) and only with IE 8
4. In order to use Win 7 with Forms 10 in a certified and supported manner, you must use 10.1.2.3 (meaning 10.1.2.0.2 + patch ID 5983622).
In short, my recommendation would be the following:
o Patch to 10.1.2.3 (assuming you have access to MyOracleSupport)
o Don't bother trying to use Oracle Jinitiator as it is old and has been desupported for a long time.
o Uninstall any instances of Jinitiator as it can cause conflicts with other JRE installations.
o Uninstall all instances of JRE 1.7. Reconfig your formsweb.cfg to use the JRE (Java Plugin) 1.6.0
baseHTMLJInitiator=basejpi.htm
jpi_classid=clsid:8AD9C840-044E-11D1-B3E9-00805F499D93
jpi_mimetype=application/x-java-applet;version=1.6
jpi_download_page=http://www.oracle.com/technetwork/java/javase/downloads/jre-6u27-download-440425.html
jpi_codebase=http://javadl-esd.sun.com/update/1.6.0/jinstall-6u27-windows-i586.cab#Version=1,6,0Finally, refer to this:
http://www.oracle.com/technetwork/middleware/ias/downloads/as-certification-r2-101202-095871.html#BABGCBHA

MTS Client Library Configuration (Case: Two middle tier servers)

One of Oralcle document states:
(a) If you need to configure Oracle Services for MTS on 2 middle tier computers (say #1, #2)then you have to install OraMTS on #1 middle tier system. The #2 middle tier system can use OraMTS which exists on middle tier system #1.
(b) For achieving this you have to configure Oracle Services for MTS client library on system #2.
Can any expert provide more information about how to configure the step (b) above.
My environment:
Oacle Services for MTS version: 8.1.7
Database: Oracle 8.1.6
Middle Tier: Windows NT 4.0
A fast reply will be highly appreciated.
Thanks in advance.

Vivek Raja
3) On machine 1 use the MMC snapin to create the Oracle service For MTS for database DB1.
You mean below
On machine 1>>
[start->programes-> oracle-oraHOME81->application development->oracle manager for microsoft transaction server]
make new service for DB1.
(oracleMTSService0 started)
On machine 2>>
[oracle manager for microsoft transaction server]
I add a new computer-"machine 1".
Then automatically OracleMTSServices0 on
"machine 1" displays.
and "Microsoft management console" dialogue box appears and ask save the change when i exit oracle manager for MTS. I choose YES.
that's all?
Am i right?
On machine 3>>
like machine 2.
You might be boring but Any documents offered by oracle doesn't say it clearly.
rf)) I read "using microsoft transaction server with oracle8-A73029".

Need to Move contents of BLOB from database to middle-tier file system

I need to be able to move the contents of a BLOB (which is a PDF file) from the database to a specified location in the middle-tier file system (running 9iAS). There does not seem to be the equivalent package or other built-in functionality to DBMS_LOB (for moving INTO the database, which is amazing. Does anyone have a java bean or (?) which can accomplish this simingly simple task??

The java bean should work to extract from the database to a binary file on either Unix or Windows. As long as the file is in .bmp format in the database, you can save the file as .bmp on you file system and everything should be alright.
Or, perhaps, am I not understanding your question?
Good Luck
Eric Kamradt

Actually in my project The middle tier was written using RMI.The Database i

Actually in my project The middle tier was written using RMI.The Database interaction was defined in the middle
tier itself.My problem is , the queries we post to the database should interact with XML Database which in turn should
interact with the actual Relational Database from which the XML Database was built.
Thanks in Advance

Leave the phone alone and let it cool down.

Client-middle tier communication.

We'd like to inform the middle tier of some choices made in the client but I'm not sure how this communication should be achieved.
For example, the user logs-on using a (non BC4J) method which establishes the user-name and access level.
I want an EntityObject (An AuditTrailEntity) to be able to set the username in any new rows created.
I want ViewObjects to restrict the rows returned based on the access level.
I see I can create some ViewObject methods and export them to the client but can these be class (static) methods? If not, then I must use object methods that set class variables but this doesn't feel like the "right" solution.
Can I set some properties in a Cookie somewhere (how)?
Is there another (better) method?
Any advice gratefully received.
Tony.
P.S.
As part of my investigations, I've tried adding a RowSetListener:
panelBinding.addRowSetListener(new HistoryRowSetListener());
class HistoryRowSetListener extends JUPanelRowSetAdapter
{ public void rowInserted(JUIteratorBinding aIterBinding, InsertEvent aEvent)
{ super.rowInserted(aIterBinding, aEvent);
Row lRow = aIterBinding.getCurrentRow();
lRow.setAttribute("UserName", sCurrentUserName);
But the getCurrentRow() returns the row that's current when the insert was performed, not the row that's being inserted. Is this intended? If so, How can I get the row that's being inserted?

In the client some properties are acquired (from a legacy system) and we want to communicate these to the middle tier. We'll want certain
ViewObjects (in several ApplicationModules) to behave differently.What are the client properties? Are they like read/write access priviledges?
If the client properties change, then we need to re-communicate with the middle tier to alter the ViewObjects behaviour again. For example,
the user is only permited to see their own (or their own region's data). For the most part this can be achieved by modifying the SQL but for
some attributes, we may show the row but hide the value.In 9.0.5 release of BC4J we will have access privilege support in both design time and runtime. We plan to have api for obtaining read/write access based on the logged in user role(s). You can use this info to map the ui.
I think our client could probably call ViewObject.setWhereClause() but I'd rather have this functionality encapsulated in the Business
components.
If you want to set username
then it should be on the session or root AM.
This sounds near the solution. Can I access the Session in both the client and middle-tier. I saw ApplicationModule.getSession() which I'm
hopi[i]Long postings are being truncated to ~1 kB at this time.

How Middle Tier connect to Database Tier?

Desktop tier never directly interact with Database tier. It is the Application tier which is also called Middle tier that connect to Database tier to fullfill the end user request.
My question is how Application tier interact with Database tier under the hood?
I know Middle tier consist of Forms Server, Report Server, Concurrent Server, Web Server, Administration Server.
Let's say I want to know how Concurrent Server connects to Database tier? which file or connection does it use?
Similery how does Forms Server, Reports Server, Web Server interact?
Any overall/broad picture of this whole structure?
Thanks,

Refer to [Oracle Applications R12 Concepts|http://download.oracle.com/docs/cd/B40089_09/current/acrobat/120oacg.pdf] and [Oracle Applications 11i Concepts |http://download-uk.oracle.com/docs/cd/B25516_14/current/acrobat/11iconcepts.pdf] manuals, it is explained properly there.

Client Authentication/Authorization via ISE & AD, Posture Registry Key, and mapped to specific DHCP scope by AD membership

Hi Team,
I'm currently working on a configuration entailing WLC and ISE where the customer wants a single SSID,and wants his wireless clients to authenticate successfully if they pass a registry key compliance. Additionally, they want clients to received a different IP address or get mapped to a different DHCP scope based on the Microsoft AD group they belong too. for example:
Client authenticating with registry key and in AD group ABC that passes authentication gets IP address or subnet for AD group ABC.
Client authenticating with registry key and in AD group XXX that passes authentication gets IP address or subnet for AD group XXX.
Clients---->WLC------>ISE-----> MS AD ( groups ABC, XXXX, YYY )
currently using EAP-PEAP/MSCHAPv2
Does anyone have any idea or pointers or can refer me somewhere that I can read on how to accomplish this? Not sure on how to do the registry compliance check nor what attributes will allow me to map the client to a DHCP Scope based on this AD group membership?
Thanks...

Do check cisco how to guides you will get step by step configuration of the current requirement

Client Authentication via middle tier to database.

Similar Messages

Maybe you are looking for