Client Login Procedure

Our business involves sending out topical economic and financial research in multiple daily e-mails to our clients. We wish to prevent e-mail forwarding of this research to non-clients. While there seems to be nothing to prevent e-mail forwarding itself, we hope to control access to our research by using attached PDF files.
The solution seems to be Policy Server, but I have an initial question about client login. What exactly does it mean that clients must log in to Policy Server before they are allowed to view a PDF sent to them? Is this done automatically when the client tries to open a PDF, or must they do this prior to attempt opening the file, and must they do this before every PDF file sent to them (we send several every day). If the latter, most of our clients would object to this extra step each time. And does this mean we need to open our firewall to the server for all clients?
Thanks

[email protected] wrote:
> Thanks Justin
>
> This helps a lot for us to move forward with this solution. I'm wondering, however, just how stable a server is going to be outside a firewall. I wonder if there is a port forwarding solution that would open up the firewall just to policy server requests, but still, it sounds like a not very secure situation. There must be something within an LDAP server that will secure the server.
>
> Thanks for your help!
>
> Carl Steen
One other thing...the web application should be configured to run SSL (https). This is a
requirement of Policy Server and will encrypt all communication between the client and server.
Regarding your security concerns...Policy Server doesn't need to be running on a computer outsite
the firewall...it just needs to be accessible from outside the firewall. This is how many corporate
websites are set up.
Justin Klei
Cardinal Solutions Group
www.cardinalsolutions.com

Similar Messages

Client refresh procedure

hi all,
i have two system landscape, dev and pro, on hp-unix, oracle 9.1 and sap 4.7.
i want refresh the dev client (it have old data). i want know.
who to do my dev client refresh ?
how to check compare space req ?
i need procedure doc. where i will get...please provide link then i can download.
thnaks and regards,
swathi

Hi Swathi,
I normally do a client copy using export and import. I felt very comfortable to perform a export/import rather than a remote copy which will put a tremendous load in your existing network.
These are the steps I follow to refresh my client in DEV / QA from PRD,
1. Export the DEV users in a transport request.
2. Schedule the YSTABSIZ to check the size of the DEV client (Login with the target client)
3. Delete the DEV client using SCC5.
3. Export the Production data (Select the appropriate profiile for your need) SCC8
4. Compare the DB size of each table space of DEV with PRD. Estimate the DB space growth after deletion ( DEV data) and importing the PRD data. This can be done through experience and there is no step by step guide to do the activity. Add datafiles if needed in dev system.
5. Write a shell script to GZIP the exported file. (Perform GZIPing of exported data)
6. Write a shell script to convert the GZIP file to TAR file.
7. FTP the TAR file from Production host to Development host.
8. Write a shell script to UNTAR the file..
9. Write a shell script to UNZIP the files
10. Now you have the production data to Import.
11. Use STMS to import the production client in to Dev system.
12. Import the user master transports for the DEV system.
13. Perform Post processing activities after client import.
Now you have your production client in Dev system.
regards,
VInodh.

Client logins

How could I implement client logins to a RMI application in Java? What should I use?
I (will) have a RMI application and i want dude A when he loggs in to be able to call only some methods on the stubs. However, I want dude B to be able to access all the methods. How could I possibly do that?
Thank you.
Adi.

Yes it does. Thank you very much. So here is my complete idea:
Every module will have a XML descriptor. Within that descriptor, every component of the module will have to have a descriptor with every remote method and every group that can execute it. This will be stored in a HashTable on the server. The primary key is the Class + "." + methodName and the value is an array of strings with the name of the groups that can execute it. Every "secure" remote method will check the module for the right permissions:
The username/password combination will generate a unique key (J2EE JSESSIONID cookie springs to mind) that will be passed to the client and stored in a hashtable on the server. The HashTable will have as primary key the string (or Long) and as values the group under which the user is situated. The checkCredentials functions will get the group for a uniqueID, then it will check the credentials of that group.
For let's say 30 users I don't think (read "hope") this won't be too much of a slow down.
=======
A more efficient way would be to create three interfaces (as posted here) RemoteRead, RemoteWrite (extends RemoteRead) and maybe RemoteCreate (extends RemoteWrite) to be passed to the client. This would eliminate the need to check the credentials for every remote procedure call but I'm still left to wonder whether the client would be able to create a Write interface for something that he doesn't have write access (anymore)? Let's assume he creates such an interface: it would need to have a corespondant on the server, right? I mean object A has full acces to the database. User U has only Read acces and the object gives him the read interface.
1) Is it possible for him to programatically create a Write interface?
2) Suppose he can can he somehow link it with the remote object and obtain Write privileges?

Exception handling in Custom Login procedure

Hi,
I have a custom login procedure. Now instead of handling the possible exceptions in a custom way too, I want to use the syntax of the exception handling API (probably the one in the PDK) the default login procedure uses. Can someone point me to the values the default login procedure uses?
Thanks, Tony

Tony,
The default login page (the source of which is now unwrapped in 3.0.0), uses the following snippet of code to report the errors:
if p_error then
wwerr_api_error_ui.show_inline_html;
end if;The errors are stacked when the ls_login procedure is executed, and the next time the login page is called up, it just displays the stacked errors.

Client login and purchasing

I want to switch my photography website from Zenfolio to Behance Pro but before I do I want to confirm that Behance provides the capability to have client login and purchasing capabilities. I've not explored Behance in minute detail, but I just don't have anymore time! Perhaps for this type of site it's better to work through Adobe Muse?

Hello - to address your questions:
1) For "client login," you can create a password-protected page for clients. When you give them the link to this, they'll be required to enter a password.
2) While we don't have an e-commerce feature on ProSite, you can mark specific images as "for sale" by using this feature:
More on this here: https://behancenetwork.zendesk.com/entries/21953670-How-can-I-mark-my-work-as-for-sale-on- Behance-
Let me know if anything else comes up.

Client login +cms

Hi,
Maybe I bite more than I can chew but this is what I want to make. On a
small site I have to create a client login. On this website my client must
be able to generate a log&pass that sends his clients to a specific page where
they can read a comment and review 1 or 2 video clips. So he must be able to add some text and to hook up the clips.
The whole setup is small. We're talking around 5 clients logging in to 5
unique pages. Maybe even 3 will do. So client1 > can only view secure page1, client 2 >
can only view secure page 2, etc.
What is the best solution for this situation? I have little experience with
creating a secure area (only MyLocked Area) but no experience with a cms
yet. The site is hosted on a server which supports php, perl, cgi-bin and
mysql. I'm working with GL CS2, OS 10.4.11.
TIA, Stoli

Since it's only a few required pages it might be easiest to use an .htaccess file. If your server supports them. They are supported by Apache servers and can be created by hand or through a c-panel interface. What your doing is simply password protecting some directories. Here's a tutorial on how to do it by hand.
Set up pages like this:
main_page
      subdir1/index.html
     subdir2/index.html
     subdir3/index.html
     subdir4/index.html
     subdir5/index.html
Then make htaccess files to give each each subdir it's own username/passwords.
Someone enters the main page and selects who they are. This links them to the appropriate subdir where they are asked for their proper username/password to enter.

Client Login to own album

Hi everyone,
Is it possible to login and display an album for a specific client?
I have set up two tables client_login and Wedding_alb, which both contain the field client_id. Each client has an album of wedding images that I want them to be able to login to, so that they can only view their own images. I have two user levels set on my client login page, one for admin and one for client. I want the client page to redirect to the clients own album page which I have set up to show thumbnail images with a horizontal looper. This I have linked with the client_id fields in the client_login table and wedding_alb table passing a url. Does this make sense?
I have tried to set the redirect on success page using a dynamic parameter but this hasn't worked, is there an easy way to set up the login link?
Thanks in advance
Sarah

Hi Günter
"SELECT * FROM Wedding_alb WHERE client_id" equals ADDT´s session variable kt_login_id
Many thanks for your reply I added the above query you suggested to the clients own album page but does not appear to work as it has not triggered a specific clients own album on that page when I logged in from the client login page.
Do I need to add anything else to the client login page or clients album page?
Ps. I only have one page its called 'wedding_client.php' which I want to display different client albums on triggered by which client logs in from the client login page.
Cheers
Sarah

On new session after login procedure and :APP_USER

Hi,
I need to get some info using :APP_USER on a new session after login procedure but it's always null:
I'm referencing it this way:
my_var := :APP_USER;
Any help is wecome
For the forum moderator, I got some problems, could you please close 2 of my repeating treads. Thanks
Message was edited by:
Rafael M

Hi Scott,
I am facing the same problem. I have created one application process with process condition On New Session: After Authentication. In this application process i am checking for :app_user in particular table, if the person does not exist i am inserting a record in to the table. But every time :app_user is having null value with On New Session: After Authentication process condition. It is working fine for remaining process conditions.
Thanks in advance for your help
Regards
Ram.

Current license only allows 10 simultaneous client logins when there are only 9 computers logging in?

I continue to receieve an error message when using Final Cut Server "Sorry, the current license only allows 10 simultaneous client logins" and there are only 9 machines connected to this server, 8 iMac's and 1 Mac Pro. They are all running 10.6.8 are Intel Core 2 Duo, 2 GB Ram, FCS 1.1.1 (1C36, 1.3.36). The server is 10.5.8 Dual 2.7 GHz PowerPC G5, 7GB Ram.
The temporary solution was to have some clients log out of Final Cut Server but this should not be necessary if we only have 9 computers logged in. Any help from anyone on this problem would be much appreciated. I have scoured the forums and have not had any luck.

Do you have the Microsoft UAM module installed? That was causing a similar problem for us with 10.3.9.
http://discussions.apple.com/message.jspa?messageID=4165505#4165505

ESM Client login does not appear

Hello,
It seems somethings not working as expected.
When a new user log to a workstation the ESM Client login does not appear. So the user inherits policy applied to the first user that log in with ESM Client.
On properties of the ESM client I have:
Authenticated user: [first] user that login (Local User: [Actual user logged in the workstation).
Any idea?
Thanks in advance.

micgra,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Passing Arguments to Login-Procedure

Hi,
i was trying to pass some own/more connection infos to our login procedure.
I used the "CON=" parameter.
CON=PROGRAM_USER=test_user@
PROGRAM_PASSWORD=pasword_hash@PROGRAM_CON_NAME=Test Connection
Is there a better way to pass such infos?
First I thought about the connectstring (e.g. ConnectString='DSN=myDatabase;UserDefinedOption=ABC') but i didn't find a way to access these infos in my login procedure.
How do i change the connection-name property in my login procedure?
set option name=Test Connection; -- does not work
Regards
Stefan

Hi Stefan,
See the following sqlanywhere-forum thread for more details about changing the connection string after login - it can't be done (and really isn't intended for that purpose):
http://sqlanywhere-forum.sap.com/questions/8730/is-there-a-way-to-set-con-property-connection-apart-from-the-connection-…
So in summary, no, there isn't a way to change the connection name, and as Arcady points out, it isn't a very secure mechanism to transfer passwords. Arcady is also correct in that you should call the login procedure directly from your application.
There are two issues here:
1) Changing connection name information after login / passing information around on your connection
Instead of storing the information in the 'Name' connection property, you probably just want to use a connection-level variable or a customer user-specified database option (created by 'DBA' authority in SQL Anywhere 12 and lower or with the SET ANY USER DEFINED OPTION privilege in SQL Anywhere 16 ) to pass along information from the login procedure:
    CREATE VARIABLE myVar VARCHAR(100);
    SET myVar = 'Hello, World!';
    SELECT myVar;
or
    SET OPTION PUBLIC.custom_option = 'default'
    SELECT * FROM SYS.SYSOPTION;
2) Creating a secure, custom, login procedure against another table
If you're going to be using just one database user with one set of permissions, you should look to pass the custom authentication information after the database connection has been made (hopefully over a strongly encrypted connection, for maximum security), and ideally using a prepared statement with bound parameters from the programming API you're using. Your application can then handle any SQL exceptions that are thrown from the login procedure statement and log-out the user from the application at that time.
You are correct in that this will need to be done outside of the original login procedure (that should really be verifying the supplied database username and password).
e.g. in Java:
       ==================
       Connection con = DriverManager.getConnection( "jdbc:sqlanywhere:uid=DBA;pwd=sql" );
       String sqlStr = "CALL sp_custom_login( ?, ? ) ";
       // Prepare the statement
       PreparedStatement stmt = con.prepareStatement( sqlStr );
       // Set values
      stmt.setString( 1, 'userName' );
      stmt.setString( 2 'password' );
       // Execute the statement
       try {
           int iRows = stmt.executeUpdate();
       } catch (SQLException ex) {
             // Can't log in - log user out of application...
             ex.printStackTrace();
==================
Regards,
Jeff Albion
SAP Active Global Support

Complete login procedure in ORACLE APPS.

Hi...
I am appearing for the interview and in one of the interview, i was asked to explain complete details about the login procedure. like what are the configuration files it will use and profile etc....
Please give me the possible detailed contents, if possible flow as well. thanks a lot for your help.
Regards
NEW APPS-DBA.

Hi,
See this thread.
Full cycle ...
Re: Full cycle ...
Thanks,
Hussein

Novell Client Login Check?

I have seen a slow increase in students at several of my schools either failing to log into Novell to get drive maps or logging into the computer thinking they are logging into Novell and still not getting the drive maps. I was looking at making a bundle or script that would check specific drive maps (like If I: exist then bypass the login otherwise bring up the Client login prompt). I would like for the process to check for the specific network before moving on to the client login prompt so was hoping to use ZCM location awareness to do this. I would also like to integrate a proxy setting change at the same time to change depending on the location the user is connected at.
Anyone do this that might be willing to share how they have it working?
Thanks
Richard

Rhuhman,
> (like If I: exist then bypass the login otherwise
> bring up the Client login prompt).
Check for I:\NUL and act accordingly.
Anders Gustafsson (NKP)
The Aaland Islands (N60 E20)
Have an idea for a product enhancement? Please visit:
http://www.novell.com/rms

Mac OS X 10.6 login procedure

Hi,
I would like to automatically start a program each time I log in.
At the moment, after logging in, I start a terminal window and from there execute the program manually.
How can I have the login procedure automatically do this?
I tried adding it to the .profile file, but that runs only upon opening a terminal window.
Thanks for your help.
Andynic

System Preferences>Accounts>Login items - click the '+' sign below the list and navigate to and select the application.

OD client login troubleshooting

I need ideas for troubleshooting a client login issue. Client can login using local accounts and connect to the server using AFP. Client "appears" to be bound to the OD in Directory Access (I get no error message), however running "id testuser" returns, user not found. So, it clearly doesn't see the OD records. "host myserver" on the client, returns the correct DNS info fwd and backward.
I have tried deleting the LDAP record on the client and entering again. It is unable to unbind when I delete the entry, which may be a clue.
I am not sure what to try next?

Hi Philip
When you launch Directory Access from the client is Add DHCP-supplied LDAP servers to automatic search policies ticked? If it is untick it. Delete the existing entry if there is one and add a new one. This time key in the fqdn rather than the IP address. You should see a fairly quick bind process (approx no more than 4-7 seconds). After you have okayed that make sure that the server details are in the Authentication and Contacts part of Directory Access. Now log out and log in as the testuser. What happens now?
Please note: Although it has been mentioned many times in this forum as well as others, fqdn = fully qualified domain name. I know you probably know what it is but to recap an fqdn follows this form: servername.domainname.sch.uk. An fqdn does not have to be a real world domain name, it just has to follow that convention. It is not a good idea to use .local or .internal or .home. I’ve seen some installations where they have used this (strangely Windows AD environments) and it can and does work . . . initially. However major problems eventually start to surface and the only effective cure is a server rebuild. If the DNS is not right then it all goes south very quickly.
One more thing which is often overlooked. Avoid Client Admin accounts having the same name as the Server Admin account.
HTH

Client Login Procedure

Similar Messages

Maybe you are looking for