Configure lpr to authenticate using keychain

I'm at a university where shared printers are set up as Windows (smb) shared printers. Under Leopard (10.5) the keychain handles the authentication for printing.
This is working fine for GUI apps, but I need help with printing from a UNIX application that uses lpr.
Here is what works:
On the command line I can type "lpr somefile". Then I get prompted "Password for <username on my mac> on localhost?
I enter my username and hit return.
Then I goto the printer queue on my mac and I see the job is waiting for authentication.
I click the resume button, which passes me off to an authentication window (presented by the keychain, I think). My credentials are already filled in, so I click okay and the job prints.
This is what does not work:
The UNIX application just sends an lpr command and I never get a chance to authenticate on the command line or in the GUI.
Any way to get lpr to automatically authenticate against the keychain?

You can find the steps for windows here which is similar to what we do on linux except we use ktpass
http://weblogic-wonders.com/weblogic/2009/11/15/configuring-kerberos-with-weblogic-server/
Please drop me a mail at <mod. action: removed email address, everything can be done public here> will try to send you a doc explaining how to do it on linux..

Similar Messages

Mount_webdav does not authenticate using keychain

Using Snow Leopard 10.6.2 on my iMac, mount_webdav does not ask for username or password or obtain these from the keychain, or return any information whatsoever. It does return exit code 80.
After adding -i, mount_webdav does prompt for the username and password and works, but this is annoying when the same server is mounted many times.
mount_webdav worked fine on the same machine with Leopard, and on my macbook with Snow Leopard.

Ditto; for me I was able to see why. mount_webdav was padding my userid with an extra character thereby causing me to receive an UNAUTHORIZED from idisk.mac.com.
To work around this I put together an 'expect' script that spawns mount_webdav with the -i arg and spawns security (keychain cli) with the find-internet-password arg.
<CODE>
#!/usr/bin/expect
set timeout 15
log_user 0
spawn security -q find-internet-password -gs idisk.mac.com
expect -re "password: \"(.*)\"" {
set pwd $expect_out(1,string)
spawn mount_webdav -i -s -v vol_name http://idisk.mac.com/user_name/ mount_point
expect "name:" {
send "user_name\r"
expect timeout {
exit
} "word:" {
send "$pwd\r"
exp_continue
</CODE>

Problem configuring SOA suite to use OID for authentication

We are in the process of rebuilding our environment to use the full SOA suite with our OID server for authentication (was previously just BPEL using AD directly), and have encountered several problems (below). We have rebuilt the OID server, and reinstalled the SOA suite into a clean ORACLE_HOME to no avail.
We first rebuilt the OID server using the following steps (derived from Oracle® Internet Directory Administrator's Guide):
1)     Create the Import and Export profiles for AD synchronization. We did this using the Directory Integration and Provisioning Server Administration tool under “Active Directory Configuration”
2)     Modify the map file to specify the correct OU mappings between AD and OID.
3)     Update the profile with the new map file using “dipassistant.bat mp”
4)     Bootstrap the import profile using “dipassistant.bat bootstrap”
5)     Start a new instance of the Integration server (odisrv) running on config set 1 (the config set containing the Active Directory import/export profiles) using “oidctl”
6)     Set the Import profile to Enable. The OID server does not export changes to AD in our current configuration, so the Export profile is left on disable (and not bootstrapped)
At this point it appears that the AD synchronizes correctly into our new OID server.
Next we installed the SOA suite:
1)     We ran “irca.bat” on our database server to create the ORABPEL, ORAESB, and ORAWSM schemas and associated integration repository structure.
2)     After launching the SOA suite installer, we selected Advanced Install.
3)     On the next screen, we selected J2EE Server, Web Server, and SOA Suite.
4)     We then provided the credentials for our Oracle database, and the passwords for ORABPEL, ORAESB, and ORAWSM.
5)     We configured our new AS instance as an administration instance, but did not opt to use from a separate HTTP server, and did not make this instance part of an OAS cluster topology.
And finally, we configured our new SOA suite instance to use OID for authentication (using the instructions in Oracle® BPEL Process Manager Administrator's Guide section 2.1.3):
1)     Used the configure_oid.bat command to seed OID with required users only.
2)     Logged into the OracleAS Control Console
3)     Chose the oc4j_soa instance, then Administration->Security->Identity Management
4)     Configured the OID server using a non-ssl connection and the cn=orcladmin account.
5)     When prompted, chose to reconfigure all applications in the oc4j_soa instance to OID, but not to use SSO for any of them.
6)     Copied the contents of ORACLE_HOME\j2ee\home\config\jazn.xml to ORACLE_HOME\j2ee\oc4j_soa\config\jazn.xml
7)     Restarted the application server.
After this procedure, we encountered the following issues:
1)     The BPEL console appears to authenticate users correctly out of OID, but no users have access to the default domain, including bpeladmin and oc4jadmin. All users receive a similar access denied message when attempting to log into the BPEL Admin Console.
2)     We cannot upload a BPEL process to our new server via JDeveloper’s standard BPEL deployment mechanisms. The connection appears to be working properly and passes all tests, but on uploading a process we get a Java AccessDeniedException. ESB appears to be functioning properly, and accepts uploaded projects without issue.

Bassman,
We recently configured our SOA Suite to use OID and SSO. We had the same issues you are having, and we found the resolutions in a blog from Jaas Poot (http://blog.jpoot.com/category/oracle-appserver/oid-ldap/). For the BPEL domain access, this involved going to the data-sources.xml file and changing the database passwords from using ->pwForOrabpel for the orabpel schema and ->pwForOraesb for the oraesb schema to the real passwords; the blog explains more about this.
The blog also covers the JDeveloper deployment issue, and another issue we encountered, where we couldn't access the BPEL Admin console. All of these were resolved following the steps in the blog.
Hope this helps
Candace

Using Keychain Access for applications other than Safari

I am trying to decide what browser I want to use. There are several things to take into consideration - bookmarks kept in sync between the browers and passwords. So far I have stayed with Safari because it works with Keychain. I tried to open Keychain and add Firefox to a web form password but it doesnt appear to work. As for the bookmark issue, I downloaded "Bookdog" and it looks nice - the latest version is supposed to sync the bookmarks between the two browsers but I dont see a setting or option for that (emailed for support on that issue).
So, is there a way I can use Keychain for all of my browsers?

The following blueprint (http://www.sun.com/blueprints/0406/819-6320.pdf) describes what you want, but its not wise to put user-applications on well known ports. It wouldn't be the first time that an application crashes when a networkscanner is hammering on well known ports to find known problems. Also most of the time people are trying to bind there application on a well known port to bypass firewalls for example. So if you're going to do this, then please configure IPF for example to limit the amount of IPs that can access that port.

CWMS v.2 - how to configure CWMS to authenticate user with CUCM

Hi,
I have a CUCM with no LDAP or AD integration. I already configured the directory integration with CUCM and it synchronized the user accounts to CWMS. When trying to login with end user account, password configured in CUCM doesn't work. What is the process to configure CWMS to authenticate with CUCM user database? Thanks.
-Alan

Hi Alan,
CUCM and LDAP integration is a prerequisite for using Directory Integration on CWMS.
http://www.cisco.com/c/en/us/td/docs/collaboration/CWMS/1_5/Administration_Guide/Administration_Guide_chapter_01011.html#task_DB0D271D6EB1459EB4DA269461E93B36
Before You Begin
You must configure AXL and LDAP directory service on CUCM before you can use the directory integration feature. CUCM is required to import users into your Cisco WebEx Meetings Server system. Use CUCM to do the following:
Enable Cisco AXL Web Service
Enable Cisco directory synchronization
Configure LDAP integration
Configure LDAP authentication
-Dejan

Why does a Login Error occur: "AFP Client wants to use Keychain Login"?

I have three people in my house with separate logins. We are currently using two desktop G4s which are networked via 1000 Base T. When the users login to one of the Macs, they must enter their passwords twice. Once for the AppleShare login and then a second time for the KeyChain Login.
If I attempt to unify the passwords, which are exactly the same, I will get a login error: "AFP Client wants to use Keychain Login". At this point, a dialogue box will appear looking for a password, but not accepting any kind of text at all. All I can do is reset the Mac, go into my admin login and remove the login.keychain file from the local Library folder to get back into the User account.
In my attempts to fix this, I have removed every preference file with the word "login" in it and re-logged in without success. I have also used the Keychain Access software to administer Keychain First Aid without success. Finally, I have deleted the keychain login in Keychain Access without success. I have done all of these separately and together without success.
This is only happening on one Mac. The Mac that has no files on it. All working files are stored on the other Mac and it does not have the same problem at all.
This is not a huge problem, but it is annoying. I would appreciate it if anybody knows anything about this and could shine some light on the situation.

Sorry about the delay from your last reply. I have been busy with work and studying for a licensing exam.
Anyway I tried the AppleJack Utility you suggested. It looked like it tidied up some things. But as for my particular issue, it did absolutely nothing.
Interestingly enough, you know when you aren't looking for something and that something just happens by accident? When I logged in the other day, I typed in the first login. The second dialogue came up immediately and I hit the cancel button instead of the OK button. When I was passed on to the Finder, the second login dialogue came up again. I typed in the password this time and checked the checkbox. When I relogged in, the problem vanished. I only waited this long to let you know to make sure the problem is gone and it is. I wish I would have thought of selecting the cancel button before. Sometimes solutions are simple like this one.
Thanks for your help.

How-do-i-configure-guest-wifi-access-using-2504-wlc-fortigate-utm-l3-device

Dear All
I have a 2504 Wireless Controller with multiple radios attached. I currently have a "private" WLAN configured (taking ip from windows server based DHCP of Range 192.1681.0/24 ) and working, but I need to add a Guest/Public WLAN which should take the IP from Other DHCP Configured on Fortigate UTM of range 172.16.0.0/24.
We have one SG300 switch in the office and the rest are basic switches.
Our firewall/router is a Fortigate UTM 240D
Find the attached network diagram for the issue.
Is there a SIMPLE way to enabling guest access that doesn't require VLANS (or are VLANS easier than I'm making them)?
Thanks.
- See more at: https://supportforums.cisco.com/discussion/12473186/how-do-i-configure-guest-wifi-access-using-2504-wlc-fortigate-utm-l3-device#sthash.aj1XcWI0.dpuf

Complete these steps in order to configure the devices for this network setup:
http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-vlan/70937-guest-internal-wlan.html
Configure Dynamic Interfaces on the WLC for the Guest and Internal Users
Create WLANs for the Guest and Internal Users
Configure the Layer 2 Switch Port that Connects to the WLC as Trunk Port

I gave my old iPad to my daughter without restoring it to original configuration, how can she use it with her iTunes?

I gave my old iPad to my daughter without restoring it to original configuration, how can she use it with her iTunes?

try
http://support.apple.com/kb/ht2589

How to configure Oracle 10g to use 4GB memory

I'm trying to configure Oracle 10g to use >4GB memory. Have configured server boot.ini with required flags (/3GB /PAE). Rebooted server then created standard database, then connected to db instance and changed oracle parameters DB_BLOCK_BUFFERS, USE_INDIRECT_DATA_BUFFERS as required. Restarted DB instance, DB fails to restarted with SGA memory error. According to oracle user docs the SGA is nolonger in effect due to previous settings. Can you provide example of SPFILE with parameters settings that do work and use >4GB memory. Current server has 8GB, 2 x Dual XEON core/processors (i.e. 8 processors)

The recommended /3GB switches in the boot.ini file can only be used with the following operating systems editions (KB article 291988):
Microsoft Windows 2000 Advanced Server
Microsoft Windows 2000 Data Center Server
Microsoft Windows Server 2003, Enterprise Edition
Microsoft Windows Server 2003, Data Center Edition
Microsoft Windows Small Business Server 2003
Important: Windows 2000 and 2003 Server Standard Editions DO NOT SUPPORT /3GB Switch.
So if your OS is listed above, then you cannot have a larger SGA.

Using "Keychain Access" as a Password Manager

Hello All,
While searching for a secure, trustworthy password manager I started wondering why I couldn't just use Keychain Access built into the Mac OS.
I've tried others and they're all nice in their own way but why not use what's already there?
Any suggestions, concerns or gotchas are welcomed.
Thanks in advance for your time.
IAV

You can also change the security settings on your keychain and/or create additional keychains. So you might have one keychain with especially secure settings for certain items and another with less secure settings for others. Moreover, you can adjust some settings for each item within a keychain, as well.
Or you can do what I do which is set up several keychains and then render the whole system entirely pointless by saving the passwords in your original keychain because you are terrified you'll forget them otherwise... (I don't actually know why I set them up this way...)
My login password is not my keychain password and my keychain locks after a minute, I require a password to wake from sleep/screensaver (though this does not always work properly) and sensitive items require re-entry of the keychain password anyway. So you can set things up so your keychain is more secure if you want to, at the price of some increased inconvenience.
- cfr

[svn] 3519: Fix typo in error string for situations where there are advanced messaging configuration settings from LCDS used in the configuration files but no AdvancedMessagingSupport service .

Revision: 3519
Author: [email protected]
Date: 2008-10-08 04:17:40 -0700 (Wed, 08 Oct 2008)
Log Message:
Fix typo in error string for situations where there are advanced messaging configuration settings from LCDS used in the configuration files but no AdvancedMessagingSupport service. The error string said that there was no flex.messaging.services.AdvancedMessagingService registered but it is the flex.messaging.services.AdvancedMessagingSupport service that needs to be registered.
Add configuration test that starts the server with a destination that has the reliable property set which is an advanced messaging feature but there is no AdvancedMessagingSupport service registered.
Modified Paths:
blazeds/trunk/modules/common/src/flex/messaging/errors.properties
Added Paths:
blazeds/trunk/qa/apps/qa-regress/testsuites/config/tests/messagingService/ReliableDestina tionWithNoAdvancedMessagingSupport/
blazeds/trunk/qa/apps/qa-regress/testsuites/config/tests/messagingService/ReliableDestina tionWithNoAdvancedMessagingSupport/error.txt
blazeds/trunk/qa/apps/qa-regress/testsuites/config/tests/messagingService/ReliableDestina tionWithNoAdvancedMessagingSupport/services-config.xml

Hi,
Unfortunately I already tried all kinds of re-installs (the full list is in my original message). The only one remaining is the reinstall of Windows 8 itself, which I would really like to avoid.
What I find really strange is the time it takes for the above error message to appear. It's like one hour or even more (never measured exactly, I left the computer running).
What kind of a timeout is that? I would expect that, if ports are really used by some other application, I get the message in less than a minute (seconds, actually). To me this looks like the emulator itself for some reason believes there's a problem with
some port while in reality there isn't.
I'll eventually contact Microsoft Support, thanks for the suggestion.
▼
▲

Configuration Scenario for BPM Using Integration Scenario

hi All,
I Have an Scenario where i am using BPM. Most of the blog tells about manually creating all Configuration objects. I had created an Integration Scenario for this scenario by referring to the earlier threads available for same.
Hoe to Create Integration Scenario for BPM Scenario
Integration Scenario in BPM and few more.
My IS looks like
Sender App Component - Integration Process - Receiver App Component
Now when i am trying to create Configuration scenario for same using model configurator, i am getting Model as "Not Configurable"
And when i click "Configurability Check" Button, i am getting below as status:
Component view IS_POC_BPM: Connection from receivePayload to getABSPayload does not have an inbound service interface
Component view IS_POC_BPM : Connection from sendABSPayload to getPayload has no outbound interface
getABSPayload and sendABSPayload are actions for Abstract interfaces.
IS_POC_BPM is the Integration Process Name.
Also in Integration Scenario, when i create connection between sender action to BPM action there is no inbound interface coming. And viceversa.
Please help me in identifying if i am doing any thing wrong in creating this scenario.
Is it possible to create Configuration Scenario for BPM Using Integration Scenario?
Thanks,
Mayank
Edited by: Mayank Gupta on Apr 21, 2010 6:35 AM

I think you shoudl refer the available Integration Scenarios created for BPMs in IR --> SAP BASIS --> http://sap.com/xi/XI/System/Patterns
Sender template will have the Action with Outbound Service Interface and then in the BPM Template the action will have Inbound Interface.....then within the BPM itself this inbound will be mapped to Action with Abstract Interface
may be after looking the Integration scenarios you will get more idea
Regards,
Abhishek.

Anyone succesfully configured a LinkSys WRT54G using a G5 tower for the IPh

Hi,
Anyone succesfully configured a LinkSys WRT54G using a G5 tower for the IPhone?
If so please, could you give megive me the router configurations?
As my wi-fi network won't even showup on IPhone.
Thanx
SvK

I have that same router and the iPhone found it with no prolblem..
I wish I could be mroe of a help try accessing your routers settings.

How to put the display to sleep in Mac OS Lion using keychain?

I use to be able to turn off my displays by hitting "lock screen" in keychain access in Snow Leopard. Now, when I hit it in Lion, it goes to screen saver. It was great being able to turn off the display at night, before going to bed.
Anyone know a work around WITHOUT going to System Preferences -> Desktop & Screen Saver -> Screen Saver -> Hot Corners... -> Pick a corner -> Select "Put Display to Sleep"? I do not want to use hot corners.
I want to lock computer using keychain and the displays go to sleep.
Hopely someone knows of some plist that can be written to-to put the display to sleep.

windmarble wrote:
I use to be able to turn off my displays by hitting "lock screen" in keychain access in Snow Leopard.
Really? Want to show me that button or setting that allows that? AFAIK, System Preferences->Security->General->is where you set that when the machine sleeps or screensaver activates. Accordingly, I'm only aware of a hot corner triggering those two options and the behavior remains the same in Lion, even though the prefPane's name is slightly changed.

EPM System Configurator not prompting to use existing tables

Planning 11.1.1.3.
Oracle Database
Planning database configured using advanced jdbc URL with alternative servers.
Above is what we have installed and configurations settings we are using.
In the short of it, Our Oracle DBA changed the servicename for the Oracle database to go from <SERVICENAME> to <SERVICENAME.world>. Even going thru TOAD we have to use <SERVICENAME.world> now. When they did this our QA environment is now down and we have to reconfigure all of the databases to account for the new servicename.
We successfully reconfigured the SharedServices database just using the option to connect to an existing configured database and correcting the servicename, and it is working normally.
For all other products we will have to use the configure for first time option to be able to change the properties.
HOWEVER, when we use the 1st-time configuration for planning we are able to correct the properties for the connection and set the new servicename, but when we click next I would expect to be asked whether to reuse the existing tables or drop/recreate them, however, the screen just steps forward to the confirmation screen. In the configtool.log I have the following message:
(Oct 28, 2010, 11:18:12 AM), com.hyperion.planning.HspDBConfigurator, DEBUG, Planning tables exist already but will reuse it as upgrade now -- should be 9.3.X upgrade.
We want to be assured that performing the step without having the option to reuse tables will not wipe and recreate the planning system database.
So:
1. Why do we get this error when trying to reconfigure the planning database? Can we ignore it?
2. What steps do we have to take to ensure that the Servicename is updated in all configuration files, and database locations it is in?
3. Is there any viable way to do this outside of the configuration utility? (For example only editing files and registry)? If so what steps are required?
I would greatly appreciate it!
Robert

I am on 11.1.2.1. I was able to find the solution. I went to the C:\Users directory and copy the oracle.instances file from the original temp ID that had performed the installation onto the account that I want to use going forward. That resolved my issue and I am now able to start EPM configurator for update as well.

Configure lpr to authenticate using keychain

Similar Messages

Maybe you are looking for