Comms Express and proxy auth (ie for a portal or Identity system)

All, we'll be moving to Comms Express in about a month and we currently have an Identity/access management solution working with Mess Express (6.1) and using the proxy auth url (http://webmail.domain.com/?user=user1&proxy-auth=.....) We can pass the proxy auth from the access manager (SiteMinder) to ME and people can login into their Webmail (ME) without incident.
However UWC is a different animal. Does anyone know how to get a proxy auth url string for UWC to accomplish the same thing? I know UWC essentially does a proxy auth for messaging and calenar already, so we have to find something that does it to pass it to messaging and calendar to get the Comms Exprees interface.
We will be using the following version:
Sun Java(tm) System Messaging Server 6.2-4.03 (built Sep 22 2005)
libimta.so 6.2-4.03 (built 04:37:42, Sep 22 2005)
And UWC is at 118540-23
Any help would be appreciated.

pruebitas wrote:
Before, when we had Messenger Express, we have a web (like a portal) where users used to fill in a form with the user and the passwd to connect to the messenger express.
Now, with the UWC, is not posible to access the same way. I'm a bit lose with this.UWC provides Acess Manager Single-Sign-On (SSO). So if your web-application was to set an access-manager SSO cookie when the user logged in and redirected the user to the UWC login page, they would be automatically logged in (assuming you had configured UWC to allow access manager authentication).
For information on how to set access manager SSO cookies in web-interfaces, please refer to the access manager manuals on docs.sun.com.
Regards,
Shane.

Similar Messages

HTTP Basic Auth and Proxy Auth

Hi,
i have a problem with the authentication against a proxy server and against a content provider. At first I have to authenticate against the proxy to get "free internet". The next step is to authenticate against the content provider to get a html or xml file.
The following source code runs very good in Eclipse, i.e. as JUnitTest. But If I execute the same code within a weblogic server, I will get an error (not authenticated). I believe I get this message from the content provider and not from the proxy because If I test this code within the weblogic server and with no authentication (i.e. google needs no authentication), I will get a valide xml/html file.
StringBuffer sb = new StringBuffer();
          SimpleAuthenticator simple = new SimpleAuthenticator("joeuser","a.b.C.D"); //from openbook
          Authenticator.setDefault(simple);
          String strUrl = "http://www.rahul.net/joeuser/";
          URL url = null;
          try {
               url = new URL(strUrl);
          } catch (MalformedURLException e) {
               // TODO Auto-generated catch block
               e.printStackTrace();
          URLConnection conn = null;
          InetSocketAddress addr = new InetSocketAddress("proxy.domain",8080);
          Proxy proxy = new Proxy(Proxy.Type.HTTP, addr);
          try {
               conn = url.openConnection(proxy);
          } catch (IOException e) {
               // TODO Auto-generated catch block
               e.printStackTrace();
          String proxyStr = "username" + ":" + "passwordl";
          String encoded = new String(Base64.encodeBase64(proxyStr.getBytes()));
          conn.setRequestProperty("Proxy-Authorization", "Basic " + encoded);
          // get http status code which is located in header field 0
          String status = conn.getHeaderField(0);
          if (status.contains("200")) {
               BufferedReader in = null;
               try {
                    in = new BufferedReader(new InputStreamReader(conn.getInputStream(),
                              "ISO-8859-1"));
                    String inputLine;
                    while ((inputLine = in.readLine()) != null) {
                         sb.append(inputLine);
                    in.close();
               } catch (UnsupportedEncodingException e) {
                    // TODO Auto-generated catch block
                    e.printStackTrace();
               } catch (IOException e) {
                    // TODO Auto-generated catch block
                    e.printStackTrace();
          else {
               System.out.println("Error");
          System.out.println(sb.toString());
public class SimpleAuthenticator
extends Authenticator
     private String username,
     password;
     public SimpleAuthenticator(String username,String password)
          this.username = username;
          this.password = password;
     protected PasswordAuthentication getPasswordAuthentication()
          return new PasswordAuthentication(
                    username,password.toCharArray());
Does somebody know a solution? I need the authentication against proxy and content provider in "one application".
Thank you very much,
André

I typically have used Apache Commons HttpClient for anything but trivial URL connections, and especially when combining both basic auth and proxy auth. When you use it, be aware of the "preemptive authentication" flag. One server I worked with didn't send the correct parameters back on particular requests, so I had to turn on this flag to get it to work.

Idoc Communication Configurations and Proxy Runtime Configurations for PI

We have a fresh PI 7.1 system, fresh ECC6 system, and an existing 4.6C system.
is there any blog/doc with step-by-step instructioins/screenshots for following tasks:
1. Configuring Abap proxy runtime between ECC6 and PI 7.1 Systems, for using sproxy from ECC6.
2. Configuring for IDOC communication between ECC6 and PI 7.1
3. Configuring for IDOC communication between 4.6C system and PI 7.1
It involves creating of sm59 rfc destination creations, usage of idoc related transactions on PI system and the other system.. I searched on sdn/forum, but it seems to be addressing specific issues faced.
Pls suggest any step-by-step instructions docs/blogs available.
thanks in advance.
Madhu.

Madhu,
Refer the links below:
1. /people/vijaya.kumari2/blog/2006/01/26/how-do-you-activate-abap-proxies
2& 3 :
https://wiki.sdn.sap.com/wiki/display/XI/SAPR3%28Idocs%29ToXI--Steps+Summarized
http://www.riyaz.net/blog/xipi-settings-in-r3-partner-system-to-receive-idocs/
/people/swaroopa.vishwanath/blog/2007/01/22/ale-configuration-for-pushing-idocs-from-sap-to-xi
https://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/877c0d53-0801-0010-3bb0-e38d5ecd352c&overridelayout=true
http://www.riyaz.net/blog/beginners-guide-to-ale-and-idocs-a-step-by-step-approach/
Also, I think u hv just started learning XI ..so following link might help:
http://wiki.sdn.sap.com/wiki/display/NWTech/QAforPI-Onestopforall%28Part-1%29

How to Change proxy settings/homepage for all users in my system at a time?

Need single configuration file for all users

You can set up a system cache for sharing jars: See here: http://java.sun.com/j2se/1.5.0/docs/guide/javaws/developersguide/enterprise_config.03.06.html

I am trying to link our xbox and PC into our wireless network. I am using an apple airport express and it is asking me for a WEP Key. Where can I find my wep key?

I am tyrying to link our xbox and PC int oour wireless network. I am using an apple airport express and it is asking for my WEP Key. Where do I find it?

You should be able to setup WPA / WPA2 access, rather than WEP - which is old an less secure. (Unless your devices are too old for WPA??)
Try this link: http://spotlight.getnetwise.org/wireless/wifitips/apple/apple-wpa.php
**Edit
Airport does support the WEP protocol.
Apple Docs: http://docs.info.apple.com/article.html?path=Airport/5.0/en/ap2084.html

Comm Express redirect to MEM

I have Comm Express and MEM both installed on ServerA. Comm Express is listening on port 80 and MEM is listening on port 8080. I have configured AM SSO between the two. When I access http://ServerA/uwc I get redirected to http://ServerA:8080/ after successfully logging in. The MEM seems to work fine after that. The problem is the port 8080. I was expecting it to remain at 80. I assume I have something misconfigured, but I have went through them a number of times and they seem to match up with the docs. Any ideas on what I have missed?
BTW, I am running JES 2005Q4 on Solaris 10 Sparc.
Thanks,
Pete

Ok, I have followed the few links and configured the reverse proxy with the following entries in obj.conf:
NameTrans fn="assign-name" from="/amconsole(|/*)" name="amconsole"
NameTrans fn="assign-name" from="/amserver(|/*)" name="amserver"
NameTrans fn="assign-name" from="/uwc(|/*)" name="uwc"
NameTrans fn="assign-name" from="/*" name="messengerXpress"
<Object name="uwc">
ObjectType fn="check-passthrough" type="magnus-internal/passthrough"
</Object>
<Object name="messengerXpress">
Service fn="service-passthrough" servers="http://uwc.unca.edu:8080"
</Object>
<Object name="amconsole">
ObjectType fn="check-passthrough" type="magnus-internal/passthrough"
</Object>
<Object name="amserver">
ObjectType fn="check-passthrough" type="magnus-internal/passthrough"
</Object>
After bouncing the webserver I log into http://ServerA/uwc and get redirected to the following http://ServerA/?argv=laurel=on%26cal=1.
What am I missing?
Thanks,
Pete

Auth grp for custom program

Hi,
I have an custom program which i need to secure by auth group so i went to RSCSAUTH then i kept some auth grp...eg;- say "FI" under auth grp column....before this i did not create any auth grp named: FI any where in the system......
so my question is by doing this is considered as creation and assignment of auth grp to this custom program ???
and if i do this in dev then how come this piece carried to production.
Thanks,
Lisa Pl

The field is however not limited to 4 characters, RSCSAUTH is protected by 7.
As you would hopefully develop and assign Auth Groups to programs in your development system, it does not make sense (to me) that the defined Auth Groups of the concept are necesarily known to the Prod system, as the role(s) for the report / transaction should be created / changed from the same source, ideally. So transporting the Groups themselves is only usefull if you are, for example, protecting programs or queries or report trees in production which are also maintained there. Transporting the program itself with the assigned TRDIR-SECU entry is not hindered (unless there is some feature of the STMS which does this - for example the production system is the domain controller).
You can assign the auth group in Production as well with RSCSAUTH, subject to having the correct authorization for it. But you should restrict that very carefully and take care with your client settings...
Other similar topics are changing menus in production.
Cheers,
Julius
PS: If the reason for your question is because of protecting the prgram to run online, then perhaps a simple SY-BATCH... check in the program is another (additional) option. S_PROGRAM P_ACTION = 'BTCSUMBIT' as well.
Edited by: Julius Bussche on Apr 20, 2008 8:58 PM

Calendar error in Comm express

Hi All,
Ihave configured calendar server in comm express.
when i click calendar tab in comm express or when i launch calendar in portal,
the comm express calendar page says this error
"uwc-common-error-server-misconfig"
Plz anyone help me to short out this issue.
Thanks
Parthi

Hi All,
Ihave configured calendar server in comm express.
when i click calendar tab in comm express or when i launch calendar in portal,
the comm express calendar page says this error
"uwc-common-error-server-misconfig"
Plz anyone help me to short out this issue.
Thanks
Parthi

Proxy Auth authentication required and kerberos

Hi All
Oracle supports the proxy auth trusted subsystem which allows greater scalability through the use of a system wide connection pool. There is a configuration option to "authentication required" to the proxy auth system.
Oracle also support kerberos authentication for external users.
What I would like to know is whether the proxy_auth authentication required is compatable with kerberos authentication. That is can I configure proxy auth to authenticate the tunneled user using kerberos.
Thanks
Edited by: user8002300 on 28/10/2009 16:47

Hi,
What you can do is to set up a reverse and the forward proxy. When the client hits the first proxy it should be configured as a reverse proxy which will redirect the request to the second proxy (this will be a reverse proxy) which will connect to the internet.
Hope this helps.
Regards,
Dakshin.
Developer Technical Support
Sun Microsystems
http://www.sun.com/developers/support.

I have an airport express that i am using for my wifi network to include iphone 4 ipad2 windows vista laptop and a hp eprint printer. My internet is coming from my iphone 4 via peronal hotspot.

The problem is i only am able to be on one or the other, at first i was able to be on internet and connected to wifi network thus being able to surf and print how do i need to fix this?

You are asking several different questions. If you need to store your photos, music, and movies on an external volume, you certainly can. Any externally connected hard disk drive will work, connected either directly to your Mac or to your Time Capsule as a shared volume.
You should not rely upon using that as a backup device though. Although you certainly may use it for both purposes, it is a better idea to have dedicated backup devices for a variety of reasons not limited to redundancy. You would not want to simultaneously lose all your pictures as well as your backup. If they are all on the same device, that could happen. Furthermore, a backup cannot back up the volume on which it is running.
As for adding an Extreme or Express, using its LAN port for your iMac, and then enable Internet sharing so you can effectively use the iMac as a "hotspot", you can do that too, but I am unclear on what benefit you believe this arrangement would convey for you.
An Extreme's Guest network is separate from its Main network; that is the reason for having it.

I am traveling with my macbook pro and I forgot to install final cut express and quicktime pro before I left. How can I in a way download them for free on my laptop from where I am

I am traveling with my macbook pro and I forgot to install final cut express and quicktime pro before I left. How can I in a way download them for free on my laptop from where I am? I need them and don't want naturally to buy them again!!!
Thank you

Assuming you purchased QT Pro, you can always download it again at no extra charge by logging in to your Apple account.
Regarding FCE, there is no way to download & install the product. You need an original FCE install disk and your FCE serial number.
Final Cut Pro X (aka FCPX) can be purchased & downloaded from the App Store.

I am trying to connect Garritan Personal Symphony to Logic Express and Garageband. A dialog box pops up and asks for plugin Garritan-P. Where do I find it and what do I do with it. I can't locate this plugin doing searches on any of the porgrams.

I am trying to connect Garritan Personal Symphony to Logic Express and Garageband. A dialog box pops up and asks for plugin Garritan-P. Where do I find it and what do I do with it. I can't locate this plugin doing searches on any of the porgrams.

I'm not sure which version of Garritan Personal Orchestra you have or when you are getting a window pop-up, but check this link for starters:
http://afjohnston.blogspot.com/2009/11/using-garritan-personal-orchestra-gpo.htm l

My home network has an Airport Extreme w/Time Capsule as the base and then an Airport Express and a second Airport Extreme to reach different areas of the house. Is there a way to use the second Airport Extreme for file storage on this network?

My home network has an Airport Extreme w/Time Capsule as the base and then an Airport Express and a second Airport Extreme to reach different areas of the house. Is there a way to use the second Airport Extreme for file storage on this network? Network is administered through an iMac running OS X Yosemite 10.10.2. Ideally, would like for the second Airport Extreme hard drive to appear on the list of devices in the Finder window.

Ok.. gottcha
The problem is network wise.. Yosemite is about equal to tin cans and string.. pathetic.
Here is my usual set of instructions to get anything working on Yosemite.
The best way to fix problems is a full factory reset of all the AE in the network.
Factory reset universal
Power off the AE.. ie pull the power cord or power off at the wall.. wait 10sec.. hold in the reset button.. be gentle.. power on again still holding in reset.. and keep holding it in for another 10sec. You may need some help as it is hard to both hold in reset and apply power. It will show success by rapidly blinking the front led. Release the reset.. and wait a couple of min for the AE to reset and come back with factory settings. If the front LED doesn’t blink rapidly you missed it and simply try again. The reset is fairly fragile in these.. press it so you feel it just click and no more.. I have seen people bend the lever or even break it. I use a toothpick as tool.
Then redo the setup from the computer with Yosemite.
1. Use very short names.. NOT APPLE RECOMMENDED names. No spaces and pure alphanumerics.
eg AEgen5 and AEwifi for basestation and wireless respectively.
Even better if the issue is more wireless use AE24ghz and AE5ghz with fixed channels as this also seems to help stop the nonsense.
2. Use all passwords that also comply but can be a bit longer. ie 8-20 characters mixed case and numbers.. no non-alphanumerics.
3. Ensure the AE always takes the same IP address.. this is not a problem for AE which is router.. it is a problem for AE which is bridged.. you will need to set static IP in the main router by dhcp reservations or use static IP in the AE which is tricky.
4. Check your share name on the computer is not changing.. make sure it also complies with the above.. short no spaces and pure alphanumeric..
5. Make sure IPv6 is set to link-local only in the computer. For example wireless open the network preferences, wireless and advanced / TCP/IP.. and fix the IPv6. to link-local only.
6. Now mount the disk of the second AE in finder... manually.
Use Go, Connect to Server and type in the AE ip address.
SMB://10.0.1.2
Where you will replace that address with the actual address. The network resource should be discovered and then it will request the password.. type that in and make sure you tick to save it in your keychain.
There is a lot more jiggery pokery you can try but the above is a good start.. if you find it still unreliable.. don't be surprised.
Do as much as you want of the above... not all of it is necessary.. only if you want it reliable.. or as reliable as Yosemite in its current incarnation can manage.
The most important thing is point 6.. mount the disk using direct IP address and not names.. dns in Yosemite is fatally flawed.
See http://arstechnica.com/apple/2015/01/why-dns-in-os-x-10-10-is-broken-and-what-yo u-can-do-to-fix-it/

I have bought a new airport express and using it with my macbook (iTunes 10.2.2). I have joined an existing network for internet in my home and with that i am trying to play the music via itunes but there is audio dropouts every 60 secs or so. any soln ?

I have bought a new airport express and using it with my macbook (iTunes 10.2.2). I have joined an existing wireless network for internet in my home and with that i am trying to play the music via itunes but there is audio dropouts every 60 secs or so. I am using a set of speakers from kenwood connected to the airport express. The operating system on my macbook is mac os X 10.5.8. i am sure it is not a problem of streaming music online because i have even tried playing music which are stored in my macbook.
Is there any problem with the setting in itunes or quicktime ? Kindly reply...... I am waiting for your valuable suggestion.
Thank you a lot in advance.

I am shocked to have found this same AX audio dropout problem starting TODAY, every few seconds the audio just drops for a couple seconds and then resumes: Latest software versions of everything. No iPad, iPhone or Touch. Internet hardwired to D-Link DES1105 (1000baseT Switch) hardwired to new 80211N AX, AX optical to stereo, AX Wi-Fi internet to basic 1st-gen MacBook operating at 80211G, and an older 'G' AX extender at the far end of the house, away from all this. The MacBook streaming iTunes is usually 12 feet from AX. I've used this setup for years of trouble-free AirTunes / Airplay until today. Today I also found 2 very reliable fixes and 1 way to force a dropout, but first, I read some posts and tried ALL following settings one-at-a-time and restored them ALL because NONE of them helped: Turned off IPV6. Streamed to multiple speakers 'Computer' and 'AX' (restored to just AX). Turned off 'Ask to Join new (WiFi) Networks'. Turned off Bluetooth (can't live without Magic Trackpad, so glad that wasn't it). Here's my discoveries: Lo and behold, each time I click the Airport icon in the Menu (you know it shows you've got 4 bars from AX) when the status switches to 'Looking for Networks' for a second it CAUSES the AX audio to drop out for a couple seconds (it never did that before today.) iTunes still playing, streaming, AX laser still lit, but the 'PCM' light on stereo and the sound GOES OUT EVERY time I click the Airport icon in the menubar, just like the regular, annoying dropouts. So, to reduce traffic I quit Safari (3 tabs, no streaming, just Gmail, Google, and Netflix browsing). Lo and behold, the dropouts stopped altogether. No other Web apps going (not iTunes Store, Genius, Ping, nothing), so I launched Chrome to the same 3 tabs and the dropouts HAVE NOT RETURNED. That's right, not only did simply QUITTING SAFARI cure it, and Chrome doesn't contribute to it, but I can demonstrate it just by forcing my Airport to re-scan. Works for me, written using Chrome. The other reliable fix is to hardwire MacBook to the Switch. This is obviously not ideal, but Airplay audio doesn't drop out over Ethernet. Also, in all my tests, it made no difference whether iTunes did the streaming, or Airfoil did.

Thank you all for the responses. By process of elimination, I think the problem is the connection to the express in between the extreme and dock. I bought another express and tried it at dock, no luck, I then replaced new express where the one is between

I have an airport extreme and express setup. My extreme is in my 2nd floor office with windows facing the water. My dock is about 250 ft away down a very steep hill. I have the express about 100 ft down the hill in an electrical waterproof box attached to a tree as high as I could install. The signal is weak and I'm thinking I might have to buy another express. Any thoughts on the best setup for me. I ultimately want to control speakers(hard wired in) down at the dock with my iphone. I have a receiver coming with airplay built in.
Thank you all for the responses. By process of elimination, I think the problem is the connection to the express in between the extreme and dock. I bought another express and tried it at dock, no luck, I then replaced new express where the one is between extreme and dock, no better. I unplugged the express between extreme and dock and there was no difference. So I believe I am connecting to the airport express or extreme that is inside the house. Again because when i approach express that is halfway I reconnect. so if you can understand my chaos, I believe the express in between is not really connecting to the extreme inside my house. Yes, No? So I need to know how to know if the express half way down the hill is getting the connection from the the extreme in the house. This is wearing me out!!!!!

You are asking several different questions. If you need to store your photos, music, and movies on an external volume, you certainly can. Any externally connected hard disk drive will work, connected either directly to your Mac or to your Time Capsule as a shared volume.
You should not rely upon using that as a backup device though. Although you certainly may use it for both purposes, it is a better idea to have dedicated backup devices for a variety of reasons not limited to redundancy. You would not want to simultaneously lose all your pictures as well as your backup. If they are all on the same device, that could happen. Furthermore, a backup cannot back up the volume on which it is running.
As for adding an Extreme or Express, using its LAN port for your iMac, and then enable Internet sharing so you can effectively use the iMac as a "hotspot", you can do that too, but I am unclear on what benefit you believe this arrangement would convey for you.
An Extreme's Guest network is separate from its Main network; that is the reason for having it.

Comms Express and proxy auth (ie for a portal or Identity system)

Similar Messages

Maybe you are looking for