Constrained Delegation for MBAM Web User with 2003 Domain Level?

Hi,
i installed MBAM 2.5 in our environment and now stopped at the point where i should configure constrained delegation for the mbam web application pool account. I cannot find the delegation Tab in the user properties within Active Directory. Our domain is
(unfortunately) still running Windows Server 2003 Domain Level. Is it maybe related to this? Within my test environment (Domain Level 2012 R2) it is working fine.
Is there any other chance to configure constrained delegation in my situation?
Thanks
Stefan

I found an older MSDN blog post that may help in this situation. It states that the delegation tab does not show up until there is at least one value set in the servicePrincipaName attribute.
Delegation tab in ADUC not available until a SPN is set
Hope this helps,
David
MDOP on the Springboard Series on TechNet

Similar Messages

  • How to reset password for a web user via GUI?

    Hi,
    How to reset password for a web user ID via GUI? is it possible?
    Thanks.

    Hi,
    You can  reset the pwd for the user through trascn SU01.
    BR,
    Disha.
    *Pls reward points for useful answers.*

  • Win 8.1 domain workstation. Block all access, except for a fews users/groups and domain controller information/date.

    Hi!
    Win 8.1 pro, domain workstation. How Block all access, except for a fews users/groups and domain controller information/date.
    Nuance:
    From domain AD is locked Workstation Firewall "Domain profile" edit.
    Possible?
    cenubit

    Hi GirtsR,
    I am not sure the command to use the SID to accomplish what you want to achieve, if you only know the SID, you could take use Powershell to find the related information, more information, please check:
    Working with SIDs
    And a similar thread for reference:
    How to find user/group known only SID
    More reference: Default local groups.
    Best regards
    Michael Shao
    TechNet Community Support

  • Business Management Error: You are attempting to create a user with a domain logon that does not exist. Select another domain logon and try again.

    Hello,
    Suddenly the working CRM is being stopped for some group of users.
    I drilled down to the issue and have checked that the users from Domain in which CRM is installed are having CRM access.
    But for other domain user having problem to access CRM.
    I tried to add a user from a domain which is not of CRM domain then it gives following error.
    "Business Management Error: You are attempting to create a user with a domain logon that does not exist. Select another domain logon and try again.
    <Message>LookupAccountNameW failed with error</Message> "
    The change is made - AD group have upgraded Activer Directory server to 2012 R2
    Please help as the Production CRM is not working for other domain user.

    We have Activer Directory Structure like below.
    One Root Domain says A
    and there are multiple child domain like B,C,D etc...
    B,C and D are all in same level,they are child of A domain.
    There are two way transitive trusts between A and all the child Domain.
    But there is no trust in between B and C and so on.
    Our CRM server is in B domain and B domain's user can access CRM but users of Domain C,D and so on can not access CRM.
    If this post answers your question, please click &quot;Mark As Answer&quot; on the post and &quot;Mark as Helpful&quot;

  • Can we map three BPC users with single domain user

    Hi..
    When we map the three BPC users in the ABAP server in the program UJA3_WRITE_SYS_USERS with domain user,can we map with only one domain user for all three BPC users or we have to use three different domain users to map the three BPC users?
    Please do reply
    Thanks
    Bobby

    yep
    u can map three bpc user with single domain user.
    but domain user must have management roles.

  • Error in SRM:  a user with enough authorisation level is miss

    Hello,
    We are on SRM 5.0 and our users get the following error in SRM when creating a shopping cart:
    No user assigned to object a user with enough authorisation level is missing.
    Anybody any idea ?
    Thanks as ever

    Hello Can anybody helpe me please ?

  • Why cant i change user password or pwdlastset after delegation for only certain users in an ou?

    I remembered a while ago I used delegate control to assign the ability to reset pwd and reset change on next logon.  It seems to work for some users but not others in same ou.  effective permissions shows I have write access to the attribute for
    the user; see imgur link below.  the box for change pwd at next logon is gray.  attribute editor tab doesn't allow me to edit it either.  domain admins can change it.  I'm wondering what else I should check out cus everything I know says
    I have the right to change it.
    forest / domain level 2003
    http://imgur.com/1VHuh7h
    mydomain\Allow Reset Win Pwd   was used for delegation and the user trying to change the password is a part of that group. they are also a member of account operators
    Owner: mydomain\Domain Admins
    Group: mydomain\Domain Admins
    Access list:
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS
                                          READ PERMISSONS
                                          LIST CONTENTS
                                          READ PROPERTY
                                          LIST OBJECT
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS
                                          READ PERMISSONS
                                          LIST CONTENTS
                                          READ PROPERTY
                                          LIST OBJECT
    Allow mydomain\Domain Admins          SPECIAL ACCESS
                                          READ PERMISSONS
                                          WRITE PERMISSIONS
                                          CHANGE OWNERSHIP
                                          CREATE CHILD
                                          DELETE CHILD
                                          LIST CONTENTS
                                          WRITE SELF
                                          WRITE PROPERTY
                                          READ PROPERTY
                                          LIST OBJECT
                                          CONTROL ACCESS
    Allow mydomain\Enterprise Admins      SPECIAL ACCESS
                                          READ PERMISSONS
                                          WRITE PERMISSIONS
                                          CHANGE OWNERSHIP
                                          CREATE CHILD
                                          DELETE CHILD
                                          LIST CONTENTS
                                          WRITE SELF
                                          WRITE PROPERTY
                                          READ PROPERTY
                                          LIST OBJECT
                                          CONTROL ACCESS
    Allow BUILTIN\Administrators          SPECIAL ACCESS
                                          DELETE
                                          READ PERMISSONS
                                          WRITE PERMISSIONS
                                          CHANGE OWNERSHIP
                                          CREATE CHILD
                                          DELETE CHILD
                                          LIST CONTENTS
                                          WRITE SELF
                                          WRITE PROPERTY
                                          READ PROPERTY
                                          LIST OBJECT
                                          CONTROL ACCESS
    Allow NT AUTHORITY\Authenticated Users
                                          SPECIAL ACCESS
                                          READ PERMISSONS
                                          LIST CONTENTS
                                          READ PROPERTY
                                          LIST OBJECT
    Allow NT AUTHORITY\SYSTEM             FULL CONTROL
    Allow mydomain\Allow Reset Win Pwd    SPECIAL ACCESS   <Inherited from parent>
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS   <Inherited
    from parent>
                                          READ PERMISSONS
                                          LIST CONTENTS
                                          READ PROPERTY
                                          LIST OBJECT
    Allow BUILTIN\Terminal Server License Servers
                                          SPECIAL ACCESS   <Inherited
    from parent>
                                          READ PERMISSONS
                                          LIST CONTENTS
                                          WRITE SELF
                                          WRITE PROPERTY
                                          READ PROPERTY
    Allow mydomain\Enterprise Admins      FULL CONTROL   <Inherited from parent>
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS   <Inherited
    from parent>
                                          LIST CONTENTS
    Allow BUILTIN\Administrators          SPECIAL ACCESS   <Inherited from parent>
                                          DELETE
                                          READ PERMISSONS
                                          WRITE PERMISSIONS
                                          CHANGE OWNERSHIP
                                          CREATE CHILD
                                          LIST CONTENTS
                                          WRITE SELF
                                          WRITE PROPERTY
                                          READ PROPERTY
                                          LIST OBJECT
                                          CONTROL ACCESS
    Allow mydomain\Delegate-Join-Domain-Rights
                                          SPECIAL ACCESS for computer  
    <Inherited from parent>
                                          CREATE CHILD
    Allow Everyone                        SPECIAL ACCESS for computer   <Inherited from parent>
                                          CREATE CHILD
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Account Restrictions
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Account Restrictions
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Logon Information
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Logon Information
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Group Membership
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for General Information
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for General Information
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Remote Access Information
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Remote Access Information
                                          READ PROPERTY
    Allow mydomain\Cert Publishers        SPECIAL ACCESS for userCertificate
                                          WRITE PROPERTY
                                          READ PROPERTY
    Allow BUILTIN\Windows Authorization Access Group
                                          SPECIAL ACCESS for tokenGroupsGlobalAndUniversal
                                          READ PROPERTY
    Allow BUILTIN\Terminal Server License Servers
                                          SPECIAL ACCESS for terminalServer
                                          WRITE PROPERTY
                                          READ PROPERTY
    Allow mydomain\Allow Reset Win Pwd    SPECIAL ACCESS for pwdLastSet   <Inherited from parent>
                                          WRITE PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Account Restrictions  
    <Inherited from parent>
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Logon Information  
    <Inherited from parent>
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Group Membership  
    <Inherited from parent>
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for General Information  
    <Inherited from parent>
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Remote Access Information  
    <Inherited from parent>
                                          READ PROPERTY
    Allow BUILTIN\Terminal Server License Servers
                                          SPECIAL ACCESS for accountExpires  
    <Inherited from parent>
                                          WRITE PROPERTY
    Allow BUILTIN\Terminal Server License Servers
                                          SPECIAL ACCESS for Terminal Server
    License Server   <Inherited from parent>
                                          WRITE PROPERTY
                                          READ PROPERTY
    Allow NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
                                          SPECIAL ACCESS for tokenGroups  
    <Inherited from parent>
                                          READ PROPERTY
    Allow NT AUTHORITY\SELF               SPECIAL ACCESS for Private Information   <Inherited from parent>
                                          WRITE PROPERTY
                                          READ PROPERTY
                                          CONTROL ACCESS
    Allow Everyone                        Change Password
    Allow NT AUTHORITY\SELF               Change Password
    Allow mydomain\Allow Reset Win Pwd    Reset Password   <Inherited from parent>
    Permissions inherited to subobjects are:
    Inherited to all subobjects
    Allow mydomain\Enterprise Admins      FULL CONTROL   <Inherited from parent>
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS   <Inherited
    from parent>
                                          LIST CONTENTS
    Allow BUILTIN\Administrators          SPECIAL ACCESS   <Inherited from parent>
                                          DELETE
                                          READ PERMISSONS
                                          WRITE PERMISSIONS
                                          CHANGE OWNERSHIP
                                          CREATE CHILD
                                          LIST CONTENTS
                                          WRITE SELF
                                          WRITE PROPERTY
                                          READ PROPERTY
                                          LIST OBJECT
                                          CONTROL ACCESS
    Allow mydomain\Delegate-Join-Domain-Rights
                                          SPECIAL ACCESS for computer  
    <Inherited from parent>
                                          CREATE CHILD
    Allow Everyone                        SPECIAL ACCESS for computer   <Inherited from parent>
                                          CREATE CHILD
    Allow NT AUTHORITY\SELF               SPECIAL ACCESS for Private Information   <Inherited from parent>
                                          WRITE PROPERTY
                                          READ PROPERTY
                                          CONTROL ACCESS
    Inherited to group
    Allow NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
                                          SPECIAL ACCESS for tokenGroups  
    <Inherited from parent>
                                          READ PROPERTY
    Inherited to computer
    Allow NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
                                          SPECIAL ACCESS for tokenGroups  
    <Inherited from parent>
                                          READ PROPERTY
    Inherited to group
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS   <Inherited
    from parent>
                                          READ PERMISSONS
                                          LIST CONTENTS
                                          READ PROPERTY
                                          LIST OBJECT
    Inherited to inetOrgPerson
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS   <Inherited
    from parent>
                                          READ PERMISSONS
                                          LIST CONTENTS
                                          READ PROPERTY
                                          LIST OBJECT
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Remote Access Information  
    <Inherited from parent>
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for General Information  
    <Inherited from parent>
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Group Membership  
    <Inherited from parent>
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Logon Information  
    <Inherited from parent>
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Account Restrictions  
    <Inherited from parent>
                                          READ PROPERTY
    The command completed successfully

    I think this is a problem with the user object rather than the ou.  Reasoning is that I can reset a password for a user in the same OU but not for another user in the same OU.  Two users, same ou.  I can reset one but not the other.  
    Effective Permissions shows I am granted permisiion to do so.
    I believe the error was access denied when we tried to change the password via vbscript.
    @seansobey - I applied the delegation at a ou higher in the tree.  I forget how I had it apply down the tree but I confirmed that the acl is correct
    and applied to the user
    @Travis Vogel - It looks like the user with this problem is a part of Domain Users.  I think the ACL is applied to the user because it shows in
    the security window and effective permissions shows I have permission to reset the password.  However, I see this other user is a part iof the builtin user group and the problematic user account is not.  I may try adding the problematic user account
    to that group and testing.  It'll have to wait until tomorrow though.

  • Ask the Expert: Service Delivery Manager for Cloud Web Security with Alex Chan

    Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions about the recommended practices for Cisco Cloud Web Security (CWS).  Cisco Cloud Web Security (CWS) provides industry-leading security and control for the distributed enterprise, with Cisco expert Alex Chan.
    October 27, 2014 through November 7, 2014.
    Learn how users are protected everywhere and anytime, when using CWS through Cisco worldwide threat intelligence, advanced threat defense capabilities, and roaming user protection. Create a virtual space to learn and ask questions about best practice when implementing Cloud Web Security offerings for various customer requirements and environments. Alex will also answer questions about Easy ID, CWS as SAML Service Provider, Deployment Options (such as ASA, ISR, WSA, Workgroup based Connector and AnyConnect Web Security agent.
    Remember to use the rating system to let Alex know if you have received an adequate response.
    Because of the volume expected during this event, Ali might not be able to answer each question. Remember that you can continue the conversation on the Security community, sub-community shortly after the event. This event lasts through November 7, 2014. Visit this forum often to view responses to your questions and the questions of other community members.

    Cisco CWS platform is one of the Cisco products that maintain collaboration with Cisco PSIRT, and there are few security vulnerabilities related to CWS were being monitored by PSIRT, which you can find out more about in: http://tools.cisco.com/security/center/home.x#~blog.
    Another Cisco entity known as "SenderBase" that is powered by Cisco Security Intelligence Operations (SIO) will provides a view into virus threat intelligence collected from CWS cloud traffics. For more information about "SenderBase", please visit this web site: http://www.senderbase.org

  • "Block EDIT option*" for all WEBI Reports with Administrator Account

    Hi,
    I had opening CMC with Administrator Account.Due to some reasons i want to "Block EDIT option" for all WEBI Reports.Just Viewing is sufficient.In the same way for Universe"Blocking EDIT object option".Instead of Administrator guide reference (chap no 18 &19)option.Could you help in steps resolving issue.Thanks in advance.
    Regards,
    Swapna.

    Hi Swapna,
    You could perform the following steps:
    1. Login to CMC.
    2. Go to Folders >> Manage >> Top Level Security
    3. Click on Add Principal and add the user or group for which you have to set the security.
    4. Click on assign Security >> Advanced tab >> Add/Remove Rights.
    5. Select Content >> Web Intelligence Report
    6. assignt "Edit Object" right as denied and click on apply ok.
    This would help you to block edit option for only webi reports and all the webi reports in your environment.
    Regards,
    Nakul

  • Constrained Delegation For Remote Powershell Sessions

    Consider the case of a client (let's call it Client) doing a remote Powershell session to a server (ServerA). In this Active Directory environment, the client has full administrative permissions over ServerA. To create the
    session, the client opens a Powershell console and types:
    $ps = New-PSSession -ComputerName ServerA
    Enter-PSSession $ps
    From this point, the client wants to be able to open a different remote Powershell session to another server (ServerB). Again, he's having administrative permissions over this server as well. If he goes ahead and uses the cmdlet below:
    $newPS = New-PSSession -ComputerName ServerB
    ...this won't work by default due to the
    Kerberos double hop issue.
    A way to make this work is enable delegation for the Client AD account (by adding a dummy SPN and also making sure the
    Account is sensitive and cannot be delegated isn't enabled), and turn on unconstrained delegation for the
    ServerA computer account in Active Directory. After this is done, as soon as the 1st remote PS session is entered, issuing a 'klist' will reveal a Kerberos TGT for Client, with the 'forwarded' flag set. The 2nd remote PS session can be made without
    any issues now to ServerB.
    However, in order to make this more secure, as to not have ServerA being able to act on behalf of Client to any target machine, but only against
    ServerB, constrained delegation can be used. So the ServerA's Delegation tab in AD is changed as to contain only the
    http/ServerB.fqdn (since we're using Powershell remoting). The problem is that trying to initiate the 2nd connection fails just as in the original case (logon session does not exist). Checking things further, I've noticed that after the 1st session
    is entered, issuing a 'klist' only reveals an http/ServerB.fqdn Kerberos ticket, and no longer any Kerberos TGTs. However reading the documentation surrounding constrained delegation (namely the S4U2Proxy component)
    here, it doesn't look as the TGT should be present there.
    The question is why cannot constrained delegation be used here or more likely, what is it I'm doing wrong ?
    Note that CredSSP is a mechanism that I wouldn't want to use here. Also, even though this entry contains a lot of Active Directory information, I thought it would be relevant for the Powershell community to post here as opposed to the Active Directory section.
    If this should be moved, please let me know.

    Here's the start a series of articles that may help:
    http://blogs.msdn.com/b/taylorb/archive/2012/03/26/remote-administration-with-powershell-3-0-sessions-part-1.aspx
    [string](0..33|%{[char][int](46+("686552495351636652556262185355647068516270555358646562655775 0645570").substring(($_*2),2))})-replace " "

  • Same query takes different time for two different users with same privileges

    Hi,
    Just wanted to know if it is possible for an INSERT query to take different amount of time for two different users for the same volume of data. If so, what could be the reason? I would like to add that we are not executing the query simultaneously. But it is always faster for user1(within 10-20 seconds) and slower for user2(takes around 8-10 minutes).

    Show execution plan for each user. I think there is other reasons which you didn't not tell

  • Multiple Web Sites with Personal Domain Names - Overview

    I have read through the last 10 pages of these discussions and have almost worked this out, but I need some help.
    Problem:
    I want to publish and edit two separate web sites with their own, individual, personal web addresses
    from the same user account on the same Mac using iWeb '08 (2.0.2) and my .Mac account
    _So far:_
    I have purchased and registered the two domain names (with Cheap-DomainRegistration.com)
    I have configured the CNAME to point to web.mac.com, and "Set up a Personal Domain" in iWeb successfully, but using a separate Mac for each web site.
    The two sites work great.
    _What (I think) I need to know:_
    (excuse me for copying these posts out, but I can't find a way to link them to this post)
    1) Should I be using iWebSites as suggested by Old Toad (posted Jan 24 in response to StAnNe's "Multiple Websites--HELP!!!")?
    I use iWebSites to manage multiple sites.. It lets me create multiple sites and multiple domain files.
    2) Should I be using Mireille's approach (also posted Jan 24 in response to StAnNe's "Multiple Websites--HELP!!!")?
    Yes you are correct in the thought that with a family pack you can use different accounts and that is the easiest way to upload with one click to .mac. But it is still possible to publish differents sites to one .mac account if that is all one has. Even if the sites are in one domain file each purchased mysite.com domain name purchased can be pointed to a different page in the site
    Look at it this way
    Original Poster has
    site1 page 1 page 2 and so on
    then he/she has brothersite page 1 and so on.
    They each have a domain name purchase wherever
    then site1domain.com is forwarded to site 1 page1
    and brotherdomain.com is forwarded to brothersite page 1.
    Even though both sites are in the same file they do not have anything to do with each other.
    This is one possibility there are others but for a novice user this could be the way to go for simplicity.
    (Mireille, if you're there, can you clarify what you said - thank you)
    3) Would I use Roddy's fix (posted Jan 23 in response to canadensis' "Publishing Multiple Websites?")?
    Here's an example of how you can separate two websites that are on the same domain file.
    Quit iWeb
    Create a new folder on your desktop and call it "iWeb Sites".
    Inside this folder create two more - Website A, Website B.
    Go to Home Folder/Library/Application Support/iWeb and copy your domain file - command C
    Paste this into folders A and B - command V - and also paste a copy of it somewhere else - like in Docs - in case you make a mistake!
    Double click the domain file in the folder Website A - this will launch iWeb.
    In the left column, delete site B, save and quit iWeb.
    Double click the domain file in the folder Website B to launch iWeb.
    Delete website A, save and quit.
    Drop the iWeb sites folder into your Home Folder.
    If you want quick access to this folder you can highlight it and do command L to create an alias to leave on the desktop.
    From now on, to launch any site in iWeb you open its folder in the iWebsites folder and double click the domain file.
    This is not necessary when you are working on only one site as iWeb saves the domain file of the last site you were working on to Home Folder/Library/Application Support/iWeb. When you open the iWeb application, the last site you worked on will be launched.
    Summary:
    I'm not sure if some of the answers in previous discussions allow for personal domain names, which is what I need.
    I would be very grateful for any suggestions as I'm getting bogged down.
    Many Thanks,
    Jeff

    When you said, "you don't need to do CNAME for both sites…", would this method still allow me to use personal web addresses for both sites?
    Yes. With "Ordinary Forwarding" you normally just type your .Mac url (web.mac.com/username/sitename) into a form at the place where you have your name.
    I thought I was using 'web.mac.com' as the 'www' CNAME (alias) for my personal domain name (web address), so that when someone typed in my personal domain name they would 'go' to the domain registration location, which would then pass it on to the .Mac server, where my web site is hosted.
    That's exactly right. It's just not the only way to do that. Ordinary Forwarding is another way, but it differs in terms of what appears in the address bar of the browser. Either you will see web.mac.com/username/.... or, if you add "masking", you will see your personal name for all pages. The CNAME method results in a address bar that reads www.myname.com/sitename/pagename.html.
    Am I way off?
    All help gratefully received,
    Jeff

  • WL 8.1: Configuring a document root for multiple web applcations in a domain

    Subject: Application - document root
    I am using the Apache web server with the BEA proxy plug-in. All requests to the
    apache server are proxied to WebLogic.
    http://localhost/wip-gl/xxx.jsp?param1...
    http://localhost/wip-am/xxx.jsp?param1...
    http://localhost/stg-gl/xxx.jsp?param1...
    etc
    For weblogic I have a domain where I have deployed 6 web applications. Each application
    represents a web site.
    .../wip-gl
    .../wip-am
    .../stg-gl
    etc
    But when processing jsp's it appears that the document root (web root) is not
    defined correctly.
    For each application how do I define the document root?
    Thanks for the help.

    Distributed sessions has nothing to do with different web applications. The concept is about distributing load for the same application between several appserver instances running on the same box(different jvm) or on some other box in the network.
    What you used with iAS 6.5 is not available in 8.1 because sharing sessions between web apps is forbidden by the servlet spec. You should consider repackaging your apps. into a single web app. or using other way of signing/verifying user identity(check Sun Access Manager for example).
    Have a look at this thread as well: http://swforum.sun.com/jive/thread.jspa?threadID=100931

  • How to publish custom web site with own domain name?

    Hey out there. I wonder if anyone can give me any tips on how to publish a web site with my own domain name.
    I have a web site I'm building and I want to purchase a domain name and then publish the site using that domain name.
    I know how to buy a domain name. I have a .mac account so I'm hoping that .mac can host the site. What I don't quite understand how to do is get .mac to host the site using that domain name. I looked through Apple Support but couldn't find what I was looking for. Just wondering if anyone has been in this situation. Thanks in advance.
    Dave
    [email protected]

    Dave ~ Welcome to the discussions. .Mac was re-branded as MobileMe last July. If you're not building your site with iWeb, it's considered to be a "custom" website. These Apple docs may help:
    MobileMe: How to publish a custom website
    iWeb ’08: Using your own domain name
    ...Use this search page to find such documents:
    http://support.apple.com/kb/index?page=search
    Note that you don't need to have iLife '08 to be able to direct your domain name to your custom website published to MobileMe. As someone wrote on another thread:
    "My personal domain is linked to my MM but i don't even have ilife on my mac. When you go to the options in MM to link your personal domain to your MM it provides directions that will guide you with setting up your godaddy settings."
    ...Where "MM" is MobileMe here:
    http://me.com/account
    ...+Personal Domain+ tab, and "godaddy" is wherever your domain name is registered.

  • Change the 'ContextUri' and ServiceUri for a web service with workshop

    Hi all,
    I've created a web service and its url is set by default by workshop, let's say http://myServer:7001/app/services/myWebService.jws
    Is there a way in workshop to modify the url, so that I can call my web service this way :
    http://myServer:7001/myCompany/myWebService
    Thanks.
    Bruno

    Hi Miriam,
    As far as I know, this does not exist.
    However, if you want to capture user input in a webbased (RIA) application, AJAX may be useful for triggering a process based on user navigation of input from keyboard or mouse.
    BTW: in the BPEL4People initiative there is mention of BPEL processes for supporting navigation, i.e. wizard-style user interfaces, which would typically require 'timely' responses.
    Hth, Sjoerd

Maybe you are looking for