Creating realms?

The way to create a password protected realm with the Server Admin seems to involve the creation of a new user for the username of the realm (thus taking up one of my limited number of users on OS X Server!). All I really want to do is to protect a folder with a username and password. Is there a way of doing this without having to create a new user (in Workgroup Manager) for the username?
Thanks
Tony

The way I understand it and the way I had it setup in Jaguar server (I've consoliadated accounts in tiger) is that you can have as many accounts setup in workgroup mamanger as you want, but the limit only applied to file sharing... Such as AFP/SMB I don't believe FTP was included in there... so setting up a realm wouldn't cause you to "lose" an account.
Is this folder going to be accessed from the web or through AFP/SMB?
If it's an AFP/SMB thing, you can just set the permissions for that folder with work group manager.
If it is through the web, then you'll need to setup a realm for it, unless I'm totally misunderstanding the question.

Similar Messages

Error message when trying to create realm in OAS

I have deployed my app to OAS 10.1.3 from JDEV 10.1.3.3. I am trying to create a realm so I can set up roles and users but when I hit apply I get the following error message:
An error has occurred.
Error invoking method: addRealm on MBean: oc4j:j2eeType=Security,name=SecurityProvider,J2EEApplication=KATS,J2EEServer=standalone
Error invoking method: addRealm on MBean: oc4j:j2eeType=Security,name=SecurityProvider,J2EEApplication=KATS,J2EEServer=standalone
Is there something I should have done when configuring for deployment? Is this a bug with the OAS?
Thanks for any help.

Hi,
this is a JDeveloper forum. There is a separate OracleAs forum that you can post your question to.
Frank

How to re-create realm

hi friends
this is PHANI
i have a problem that is in security realm there is myrealm
by mistake i deleted the myrealm
i need myrealm. how can i get it back or create newrealm with same settings
thanks in advance
PHANI

It is not possible to get the security realm back once deleted.
Only option is to replace the existing config.xml file with some backup config.xml which has the old realm configuration and then restarting the Admin Server.
You can check inside the %DOMAIN_HOME%/config/ dir for some backup config files.
By default Weblogic creates a backup of a config.xml file as : config_bootstrap.xml
Try to copy the same file as config.xml and restart the admin server.
thanks,
Sandeep

When creating realm got error

Error Processing Request
Error CodeViewDAO_.findObjects(2)=<SelectQuery" start="0" count="-1">SELECT ID#,CODE_GROUP,CODE,VALUE,LANGUAGE,DESCRIPTION,VERSION,CREATED_BY,CREATE_DATE,UPDATED_BY,UPDATE_DATE FROM DVSYS.DV$CODE WHERE code_group = ? ORDER BY code</SelectQuery>,java.sql.SQLException: ORA-00942: table or view does not exist

I presume this question relates to Data Vault not Audit Vault which is the topic of this forum.
If it is AV related please post sufficient information for someone to help you. Otherwise I would suggest you open an SR at metalink.

Creating users in realm

I am in the oid console and it says "you logged in as a oid admin . you can create realms and users" .When I search for realms then I see only "view" button but I can see and links or buttons to create users inside those realms. How can create users inside those realms
thanks

Step 1) (As Andreas explained): create an extra realm; navigate to the your.servername/oiddas page. Select the third tab "Directory". Notice an extra picture appears in the upper right corner, called "Realms". Click that, and create the realm.
Step 2) Reconfigure your SSO server to allow for the extra realm
Step 3) Configure Application Server Hosting
Step 4) Add the subscriber
Step 5) Add user(s) - note the extra option "Realm" in the basic data part
It's a lot more complicated than rpelies on this forum allows; the documentation describes it quite well - note that the enblhstg.csh misses the "-mode sso" switch (at least for 10.1.2 on HP-UX)
Bottom line: create users is simply the Create button on the users page - you shoud have the option to select the default realm there, not on the realm pages

Getting problem with realms

Hi Guy's
I created realm and i assign that realm at user level. But it is not reflecting.. Any other set up i have to do?. The same stuff i applied at responsibility level. It is working..
If anyone knows reply
Thanks & Regards
Palakondaiah.U

I am talking about Category browse. Once we enter into the iProcurement responsibility, we click on Categories sub tab under Shop tab. Here we have different categories. If we click on Categories, it shows sub categores and if we click on sub categories, it shows the items in it.
If I apply responsibility realms i can able to see the items for which we created realms. But if i apply User level realm alone(at this i am not setting realms at responsibility realms) then i am able to access all the items in all categories. So here User level realms are not working.
What can I do to use realms at User Level?
One more query-->Can we create Requistion templates(not information Templates) to suite our needs. Why because we can't do validation for attributes if we use Information Templates right?
Thanks
pal

Can admin.jar create oc4j users and connection pools that use those users

Hi
I have an ADF BC application written in jdev 10.1.3.3 deployed to standalone oc4j 10.1.3
When I deploy the application I use the enterprise manager to create the users on the security provider/realms tab. I then set up the connection pools in jdbc resources to use those users via the username and indirect password fields. I also set the minimum number of connections on the attributes tab.
I have read the following document but I cannot find any reference to setting up users, connection pools with indirect passwords or minimum number of connections.
http://download-uk.oracle.com/docs/cd/B31017_01/web.1013/b28950/adminclient.htm#BABHJAFE
Is it possible to do using admin.jar?
thanks
paul schweiger

I'm not sure about setting indirect passwords on the connection pool creation -- never tried it. It's probably treated purely as a lexical string, so may well be able to to issue the CP creation command with the "->USER" entry as the password.
To create realms, users, groups, etc. you need to use the $ORACLE_HOME/j2ee/home/jazn.jar utility: http://download.oracle.com/docs/cd/B25221_04/web.1013/b14429/admintool.htm#g1022417
The options for connection pool parameters such as min/max connections aren't directly expressable in the command. I'll need to look at the code and see if they can be passed in as non checked options via the factoryproperties. If not, then you can create a JMX client to use the MBeans that are created for the CP post deployment to change its behaviour.
-steve-

Can't set up realm for PHP

I have a web server that is hosting several SVN repositories. I need to set up realms to lock them down so that only specific users can access each repository. Using the server admin utility I was able to successfully create realms to lock down the SVN repos and the raw SVN browser. My problem is that we also have a websvn browser connected to these repos that uses PHP. Can anyone help me create realms to secure the websvn browser?

There shouldn't be any difference setting up a realm for your PHP vs. your regular content.
The Realm authentication takes place prior to the content request, so it doesn't matter what the request is for (e.g. .html, .php, .mov, or anything else), the realm authentication has to pass before the server will respond with the content.
So you just need to setup a new realm that matches your websvn URI.

Orphan entries in Realm as a result of using usermanager

Hi All,
The usermanager first uses the realm class to create newuser and then use the
profilemanager and others to create property. Now my question if the later fails
then the entries saved in the realm won't be rolled back (even if the realm is
RDBMS) as it's already commited.
This is my understanding. Am I right ? If yes, then this may create orphan entries.
Can anybody pls tell me if there is any work around or not ?
TIA,
Sudarson

Thank you very much Tom. Yeah, I think I may have to go for some custom realm as
u have suggested. You're right it won't make sense to have roll back for non-transactional
realm like LDAP. So it's perfectly okay that cashing realm doesn't contain any
rollback sort of the method. The thing I was expecting that if there is some extra
method implemented in RDBMS realm class in p13n, so that if some one can make
use of it.
anyway, is that possible to inherit custom RDBMS realm class from the RDBMS realm
provided in p13n and incorporate the rollback method ?
Thanking you once again,
Regards,
Sudarson
"Tom Stamm" <[email protected]> wrote:
Well like I said there is no method in the weblogic realm interface to
support rollback, so we couldn't really expose it. For example, rolling
back
a transaction might not make sense in the case of something like an ldap
realm.
If this is a big issue for you, your best bet might be to create your
own
realm implementation which does expose a rollback method. Then when you
catch an exception you can grab the realm, cast it to your specific
implementation, and rollback the transaction. FYI our realm is loosely
based
on the sample RDBMSRealm that is in the weblogic server examples, we
just
added things like delegate pooling and a more robust group table structure.
So you can probably use that as a starting point too.
Your realm would probably also have to be designed as a singleton, with
some
sort of static method to find itself, since there is no way to retrieve
the
delegate realm from the CachingRealm. You would need to set that singleton
instance in the realm's constructor, which gets called by the server
on
startup.
Hope that helps...
-Tom
"sudarson" <[email protected]> wrote in message
news:[email protected]...
Thanks Tom for your help.
Regarding conection pool and realm, I got the point why u need therealm
before
connection pool is to be created. If I'm not it's because it may berequired to
check whether the logged in user has the access to the pool or not.
But still somewhere u have created connection usingDriverManager.getConnection
and perhaps setAutocommit also to false. So is any method there inthat
class
which will call that connection.rollback() ?
Beacuse it's always safe to have rollback rather than trying to deleteentries
in the exception block. As u never know what could be the situationwhere
that
exception will arise. Suppose, there is a network problem or some databaseproblem
itself while this exception has occured and so the deletion mechanismwon't work.
Pls correct me if I'm wrong.
So if u can pls suggest any alternative, it will be of great help.
Thanks,
Sudarson
"Tom Stamm" <[email protected]> wrote:
Unfortunately, there is no rollback functionality in the realm interface,
which we implement; and there really is no way around needing to
initialize
the realm's connections before the main connection pools are created,
since
the connection pool calls the realm on creation.
Are you running into a specific problem with an exception happeningwhile
creating a new user's profile? It seems like the only thing that would
cause
this is if there was a problem with the database, in which case therealm
entry should not have been created either...
But if you're just looking for a way to delete the realm entry, youcan
always call the realm directly in your catch block:
import weblogic.security.acl.CachingRealm;
import weblogic.security.acl.Security;
import weblogic.security.acl.User;
CachingRealm realm = (CachingRealm)Security.getRealm();
User user = realm.getUser( username );
if ( user != null )
realm.deleteUser( user ):
"sudarson" <[email protected]> wrote in message
news:[email protected]...
Hi Tom,
Thanks for the help.
I have couple of questions here:
1. But isn't it a bad thing to have this kind of situtation ? BecauseI
may be
interested to insert the record of an user with his profile. And
if
profile couldn't
be created, realm entry should be rolled back. Is there any methodcalled
rollback
in the realm class, so that if an exception occurs we can roll backthe
realm
operation in the catch block .
2. otherwise, it won't be a good design to create user with all
profile
and property
data without this kind of support.
Pls do suggest.
Thanks,
Sudarson
"Tom Stamm" <[email protected]> wrote:
Hi Sudarson,
The RDBMS realm uses it's own connection pool for database
connectivity,
because at the time the realm is booted up, the reglar connectionpools
are
unavailable. (they call the realm on initialization, so you have
a
chicken-and-egg situation) The ProfileManager uses the standard
"commercePool" connection pool, via a DataSource. So unfortunatelywe
do not
support transactions in this situation.
However, the UserManager is designed to work with realms that areout
of its
control, so if there is a realm entry without a corresponding profile
entry,
it will automatically create a new profile entry. So in your caseof
having
an orphan realm entry, there shouldn't be anything to worry about.
If your situation requires special handling, you can always implement
your
own custom realm by extending weblogic.security.acl.ManageableRealm.
Hope that helps,
-Tom
"sudarson" <[email protected]> wrote in message
news:[email protected]...
Hi Daniel,
Thanks for the reply.
Thru admin tool it can be removed. But my concern is that it
should
not
create
at all any orphans. Can we give some kind of transactional behaviourto
this so
that if any exception arises while saving profile data, realm
should
also
roll
back the user entry as well as the userid sequence in the sequencertable
Is that possible ?
Thanks,
Sudarson
"Daniel Selman" <[email protected]> wrote:
Sudarson,
Could you please post your test code and I will get an engineer
to
take
a
look. Are the orphans NOT being removed by the User Management
admin
tools?
Sincerely,
Daniel Selman
"sudarson" <[email protected]> wrote in message
news:[email protected]...
Hi All,
It's very urgent. Can anyone pls help me in this regard?
THanks,
Sudarson
"sudarson" <[email protected]> wrote:
Thanks for the reply. I have also gone thru this section.
But
have
u
tested this
? As in my case, I'm getting orphan entries while simulating
exception
at property
data insertion and getting orphan entries as a result.
Actually this usermanager calls most probably realm.newUserand
in
the
realm class
data is always commited.
Can any body pls suggest ? Perhaps BEA folks may help in
this
regard.
Thanks,
Sudarson
"Prady" <[email protected]> wrote:
Here is a snippet of the documentation:
Integration between Profiles and the Realm
The User Manager and Group Manager session beans act as
a
single
entry
point
for user/group profiles and user/group security. When
createUser
or
removeUser is called, they delegate to both the realm and
the
profile
manager components to ensure that they stay synchronized.
If a read-only realm such as LDAP is being used, new users
and
groups
cannot
be created through the User Manager or Group Manager. However,profiles
for
users and groups that exist in the realm will be created
on-the-fly.
For
example, if a user "joe" exists in your LDAP server, and
you
are
running
the
LDAP realm, the first time Joe's profile is requested the
UserManager
will
see that the profile does not exist. It will then verify
that
Joe
exists
as
a user in the realm, and will create a new profile record
at
that
point
and
return it. Because the UserManager has no way to know when
users
and
groups
are removed from the realm, this can result in leftover
profile
records
that
belong to users and groups that no longer exist.
Note: The User Management Administration Tools provide a
means
to
cleanup
these leftover records. See the section Deleting User Records
That
Do
Not
Exist in the Realm from the Personalization Database.
In your case, the next time the user profile is requested
for
the
user
who
has an entry in the Realm, but not in the user profile,
it
will
create
a new
profile record and return it (provided you are using the
default
profile
manager and not your custom profile manager. If you have
implemented
a
custom profile manager, you can either try to re-create
the
profile
the
first time or when a user profile is requested at a later
stage).
Prady
"sudarson" <[email protected]> wrote in message
news:[email protected]...
Hi All,
The usermanager first uses the realm class to create newuser
and
then
use
the
profilemanager and others to create property. Now my question
if
the
later
fails
then the entries saved in the realm won't be rolled back
(even
if
the
realm is
RDBMS) as it's already commited.
This is my understanding. Am I right ? If yes, then this
may
create
orphan
entries.
Can anybody pls tell me if there is any work around or
not
TIA,
Sudarson

Realm && organization

What is the difference between realm and organization?
if i use a data store for users as LDAPv3Repository how can i manage roles?
and
how can i add a user the possibility of administrate like the amadmin user?

A realm is generally the 'top-most' in the 'Directory Information Tree (DIT)'.
You can create containers and sub containers based on the requirements.
If 'dc=env1realm,dc=sales,dc=us,dc=com' and 'dc=env2realm,dc=sales,dc=us,dc=com' are considered as realms, then they would be independent of each other, and you would be able to create containers/sub containers in them.
(3): You can create realms/containers/sub-containers using 'ldif' file, or some generic LDAP browsers.

Error Message When trying to log into the IM7.1

[18 Jul 2006 17:13:10,484] INFO xmppd [org.netbeans.lib.collab.util.Worker 2] [Identity] Failed to create SSO token for jsoap
Any Help Appreciated
Carinus

I have posted it to your gmail account but I posting here as well just in case I got a crash on my mail client when I sent it. I got a error message for the log4j when I made the change in the conf file.
log4j:WARN No appenders could be found for logger (nbcollab.nio).
log4j:WARN Please initialize the log4j system properly.
xmppd.log
[19 Jul 2006 10:52:17,285] INFO xmppd [main] Starting XMPP Server: Version 7.1
[19 Jul 2006 10:52:20,964] INFO xmppd [main] RealmClassName com.iplanet.im.server.IdentityRealm
[19 Jul 2006 10:52:20,964] DEBUG xmppd [main] Creating realm for first time com.iplanet.im.server.IdentityRealm
[19 Jul 2006 10:52:24,293] DEBUG xmppd [main] [LDAPPool] binding as cn=dsameuser,ou=DSAME Users,o=msp
[19 Jul 2006 10:52:24,294] DEBUG xmppd [main] [LDAPPool] creating a new context
[19 Jul 2006 10:52:28,944] DEBUG xmppd [main] [FileGroupChatStorage] root dir = /var/opt/sun/im/default/db/pubsub
[19 Jul 2006 10:52:28,944] DEBUG xmppd [main] [FileGroupChatStorage] loaded /var/opt/sun/im/default/db/pubsub
[19 Jul 2006 10:52:37,322] DEBUG xmppd [main] [Identity] open called, getting user attributes names.
[19 Jul 2006 10:52:37,466] DEBUG xmppd [main] [Identity] sunIM user service attributes: [sunIMUserProperties, sunIMUserRoster, sunIMUserConferenceRoster, sunIMUserNewsRoster, sunIMUserPrivateSettings]
[19 Jul 2006 10:52:37,467] DEBUG xmppd [main] [Identity] sunIM dynamic service attributes: [sunIMProperties, sunIMPrivateSettings, sunIMNewsRoster, sunIMRoster, sunIMConferenceRoster]
[19 Jul 2006 10:52:37,467] DEBUG xmppd [main] [Identity] sunIM policy attributes: [sunIMAllowPollingAccess, sunIMAllowContactListManage, sunIMAllowAlertsAccess, sunIMAllowPollingSend, sunIMAllowChatInvite, sunIMAllowFileTransfer, sunIMAllowChat, sunIMAllowForumManage, sunIMAllowNewsManage, sunIMAllowNewsAccess, sunIMAllowForumAccess, sunIMAllowForumModerate, sunIMAllowUserSettings, sunIMAllowAlertsSend]
[19 Jul 2006 10:52:37,681] DEBUG xmppd [main] [Identity] sunPresence user service attributes: [sunPresenceEntityAccessDenied, sunPresenceEntityDevices, sunPresenceEntityDefaultAccess, sunPresenceEntityAccessPermitted, sunPresenceUserPrivacy]
[19 Jul 2006 10:52:37,682] DEBUG xmppd [main] [Identity] sunPresence dynamic service attributes: [sunPresenceAccessDenied, sunPresenceDefaultAccess, sunPresenceDevices, sunPresenceAccessPermitted, sunPresencePrivacy]
[19 Jul 2006 10:52:37,682] DEBUG xmppd [main] [Identity] sunPresence policy attributes: [sunPresenceAllowPublish, sunPresenceAllowManage, sunPresenceAllowAccess]
[19 Jul 2006 10:52:37,691] DEBUG xmppd [main] [Identity] getServiceVersion Exception: Service does not exist : SunIMService
[19 Jul 2006 10:52:37,692] INFO xmppd [main] [Identity] no old sunIMService attributes: Service does not exist : SunIMService
[19 Jul 2006 10:52:41,961] DEBUG xmppd [main] [Identity] admin role DNs: [cn=IM Administrator,o=msp]
[19 Jul 2006 10:52:41,961] DEBUG xmppd [main] [Identity] admin role DN: cn=IM Administrator,o=msp
[19 Jul 2006 10:52:41,985] DEBUG xmppd [main] [Identity] admin user DNs: []
[19 Jul 2006 10:52:42,003] DEBUG xmppd [main] [Identity] topics role DN: cn=IM News Administrator,o=msp
[19 Jul 2006 10:52:42,042] DEBUG xmppd [main] [Identity] rooms role DN: cn=IM Conference Rooms Administrator,o=msp
[19 Jul 2006 10:52:42,060] DEBUG xmppd [main] [Identity] send alerts role DN: cn=IM Allow Send Alerts Role,o=msp
[19 Jul 2006 10:52:42,078] DEBUG xmppd [main] [Identity] watch role DN: cn=IM Allow Watch Changes Role,o=msp
[19 Jul 2006 10:52:42,097] DEBUG xmppd [main] [Identity] save user settings role DN: cn=IM Allow User Settings Role,o=msp
[19 Jul 2006 10:52:43,508] DEBUG xmppd [main] [Identity] _topicsDefault: deny
[19 Jul 2006 10:52:43,509] DEBUG xmppd [main] [Identity] _roomsDefault: deny
[19 Jul 2006 10:52:43,509] DEBUG xmppd [main] [Identity] _sendAlertsDefault: allow
[19 Jul 2006 10:52:43,509] DEBUG xmppd [main] [Identity] _saveUserSettingsDefault: allow
[19 Jul 2006 10:52:43,509] DEBUG xmppd [main] [Identity] _watchDefault: allow
[19 Jul 2006 10:52:43,509] INFO xmppd [main] Loaded realm: com.iplanet.im.server.IdentityRealm
[19 Jul 2006 10:52:43,619] INFO xmppd [main] Monitoring is disabled
[19 Jul 2006 10:52:43,625] INFO xmppd [main] XMPP Server, version 7.1 Starting
[19 Jul 2006 10:52:43,670] DEBUG xmppd [main] [Archive] not loaded yet
[19 Jul 2006 10:52:43,670] DEBUG xmppd [main] [Archive] initializing archive providers
[19 Jul 2006 10:52:43,710] INFO xmppd [main] [Archive] loaded archive provider: com.iplanet.im.server.EmailIMArchive
[19 Jul 2006 10:52:43,710] INFO xmppd [main] [Archive] autoarchive=false
[19 Jul 2006 10:52:43,710] DEBUG xmppd [main] [Archive] finished loading
[19 Jul 2006 10:52:43,745] DEBUG xmppd [Timer-1] [EmailIMArchive] submit called:
[19 Jul 2006 10:52:43,973] DEBUG xmppd [main] [Disco] new key: muc new size=1
[19 Jul 2006 10:52:43,974] DEBUG xmppd [main] [Disco] new key: pubsub new size=2
[19 Jul 2006 10:52:43,974] DEBUG xmppd [main] [Disco] new key: jud new size=3
[19 Jul 2006 10:52:43,978] DEBUG xmppd [main] ServerSocketChannel on: null Port: 5269
[19 Jul 2006 10:52:44,009] WARN xmppd [main] [S2SSession] server ID = null
[19 Jul 2006 10:52:44,012] DEBUG xmppd [main] [PeerServer] connecting to peers
[19 Jul 2006 10:52:44,014] INFO xmppd [main] [Multiplex] starting on 0.0.0.0:45222
[19 Jul 2006 10:52:44,015] INFO xmppd [main] Server start completed
[19 Jul 2006 10:52:44,015] INFO xmppd [Thread-14] [NioSelectAcceptor][0.0.0.0:5269] Acceptor starting
[19 Jul 2006 10:52:44,578] INFO xmppd [Thread-15] New Multiplexor Connection started from /127.0.0.1
[19 Jul 2006 10:52:44,585] INFO xmppd [Thread-15] New Multiplexor Connection started from /127.0.0.1
[19 Jul 2006 10:52:44,586] DEBUG xmppd [Thread-16] MultiplexManager#33185374 buffered bytes: 0
[19 Jul 2006 10:52:44,588] ERROR xmppd [Thread-16] MultiplexManager#33185374 read error java.io.IOException: Connection reset by peer
[19 Jul 2006 10:52:44,589] ERROR xmppd [Thread-16] MultiplexManager#33185374 error sending BYE
[19 Jul 2006 10:52:44,589] INFO xmppd [Thread-16] MultiplexManager#33185374 exiting
[19 Jul 2006 10:52:44,590] DEBUG xmppd [Thread-17] MultiplexManager#24211360 buffered bytes: 0
[19 Jul 2006 10:52:44,596] INFO xmppd [Thread-17] MultiplexManager#24211360 HELLO received version=4.1 maxchannels=1002
[19 Jul 2006 10:52:44,597] DEBUG xmppd [Thread-17] MultiplexManager#24211360 buffered bytes: 0
[19 Jul 2006 10:52:44,606] INFO xmppd [Thread-15] New Multiplexor Connection started from /127.0.0.1
[19 Jul 2006 10:52:44,606] DEBUG xmppd [Thread-18] MultiplexManager#31447311 buffered bytes: 0
[19 Jul 2006 10:52:44,607] INFO xmppd [Thread-18] MultiplexManager#31447311 HELLO received version=4.1 maxchannels=1002
[19 Jul 2006 10:52:44,607] DEBUG xmppd [Thread-18] MultiplexManager#31447311 buffered bytes: 0
[19 Jul 2006 10:53:17,416] DEBUG xmppd [Thread-18] MultiplexManager#31447311 OPEN Payload len=8
[19 Jul 2006 10:53:17,452] DEBUG xmppd [ThreadPoolManager:default] Starting activity check; inactivity timeout=900000 now=1153299197450
[19 Jul 2006 10:53:17,453] DEBUG xmppd [ThreadPoolManager:default] Completed activity check for 0 channels.
[19 Jul 2006 10:53:17,500] DEBUG xmppd [Thread-18] useTLS : false
[19 Jul 2006 10:53:17,500] DEBUG xmppd [Thread-18] useTLS1 : false
[19 Jul 2006 10:53:17,500] DEBUG xmppd [Thread-18] useSASL : true
[19 Jul 2006 10:53:17,513] DEBUG xmppd [Thread-18] FSN : <features xmlns='http://etherx.jabber.org/streams'><mechanisms xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><mechanism>PLAIN</mechanism></mechanisms><auth xmlns='http://jabber.org/features/iq-auth'/></features>
[19 Jul 2006 10:53:17,513] DEBUG xmppd [Thread-18] tlsFN : null
[19 Jul 2006 10:53:17,606] DEBUG xmppd [Thread-18] Session[null] outbound status changed from disconnected to connected
[19 Jul 2006 10:53:17,607] DEBUG xmppd [Thread-18] Session[null] inbound status changed from disconnected to connected
[19 Jul 2006 10:53:17,607] DEBUG xmppd [Thread-18] mxchnl[1] created, addr=/172.18.2.43
[19 Jul 2006 10:53:17,607] DEBUG xmppd [Thread-18] MultiplexManager#31447311 New channel 1 client address:/172.18.2.43
[19 Jul 2006 10:53:17,608] DEBUG xmppd [Thread-18] MultiplexManager#31447311 buffered bytes: 0
[19 Jul 2006 10:53:17,608] DEBUG xmppd [Thread-18] MultiplexManager#31447311 data received for channel 1 com.iplanet.im.server.MultiplexChannel@dc1f04
[19 Jul 2006 10:53:17,610] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 0] ClientSession started process()
[19 Jul 2006 10:53:17,611] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 0] Session[null] processing input
[19 Jul 2006 10:53:17,625] DEBUG xmppd [Thread-18] MultiplexManager#31447311 addRunnable: 1
[19 Jul 2006 10:53:17,625] DEBUG xmppd [Thread-18] MultiplexManager#31447311 buffered bytes: 0
[19 Jul 2006 10:53:17,728] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 0] Session[null] inbound status changed from connected to opened
[19 Jul 2006 10:53:17,728] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 0] [Session] expecting SASL support from client
[19 Jul 2006 10:53:17,728] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 0] [Session] opened.
[19 Jul 2006 10:53:17,730] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 0] [Session] Opening client session to proxy1.mrc.ac.za
[19 Jul 2006 10:53:17,732] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 0] [Session] opening outbound
[19 Jul 2006 10:53:17,737] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 0] Session[null] outbound status changed from connected to opened
[19 Jul 2006 10:53:17,737] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 0] [Session] opened outbound
[19 Jul 2006 10:53:17,744] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 0] [Session] opened.
[19 Jul 2006 10:53:17,744] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 0] Session[null] processing input
[19 Jul 2006 10:53:17,745] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 0] Session[null] processed input
[19 Jul 2006 10:53:17,745] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 1] ClientSession started process()
[19 Jul 2006 10:53:17,746] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 1] Session[null] processing input
[19 Jul 2006 10:53:17,746] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 1] Session[null] processed input
[19 Jul 2006 10:53:17,746] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 1] ClientSession finished process()
[19 Jul 2006 10:53:17,747] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 0] Session[null] processed input
[19 Jul 2006 10:53:17,747] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 0] ClientSession finished process()
[19 Jul 2006 10:53:18,074] DEBUG xmppd [Thread-18] MultiplexManager#31447311 data received for channel 1 com.iplanet.im.server.MultiplexChannel@dc1f04
[19 Jul 2006 10:53:18,074] DEBUG xmppd [Thread-18] MultiplexManager#31447311 addRunnable: 1
[19 Jul 2006 10:53:18,074] DEBUG xmppd [Thread-18] MultiplexManager#31447311 buffered bytes: 96
[19 Jul 2006 10:53:18,075] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] ClientSession started process()
[19 Jul 2006 10:53:18,075] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] Session[null] processing input
[19 Jul 2006 10:53:18,085] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] Session[null] processing request
[19 Jul 2006 10:53:18,085] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] [ClientPacketDispatcher] SASLPacket detected
[19 Jul 2006 10:53:18,085] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] [Sasl] new packet
[19 Jul 2006 10:53:18,086] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] [Sasl] IS SASLAuthPacket
[19 Jul 2006 10:53:18,086] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] [Sasl] mechanism PLAIN
[19 Jul 2006 10:53:18,091] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] [Sasl] saslProvider : com.iplanet.im.server.sasl.PlainSASLProvider@135da43
[19 Jul 2006 10:53:18,092] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] [Sasl] requestFailed : false
[19 Jul 2006 10:53:18,093] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] [Sasl] saslProvider.isRaw() : false
[19 Jul 2006 10:53:18,100] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] request status : {urn:ietf:params:xml:ns:xmpp-sasl}auth
[19 Jul 2006 10:53:18,100] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] [Sasl] PLAIN mechanism requested
[19 Jul 2006 10:53:18,101] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] [Identity] Authenticating user jisolder
[19 Jul 2006 10:53:18,101] INFO xmppd [org.netbeans.lib.collab.util.Worker 2] Authenticating using Identity Server SSO
[19 Jul 2006 10:53:18,111] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] Unable to create SSOToken - the specified token might be a password.
[19 Jul 2006 10:53:18,112] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] [Identity] domain = mrc.ac.za
[19 Jul 2006 10:53:18,283] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] [Identity] getSearchBase(mrc.ac.za)=o=mrc.ac.za,o=msp
[19 Jul 2006 10:53:18,290] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] [Identity] domain=mrc.ac.za OrgDN=o=mrc.ac.za,o=msp
[19 Jul 2006 10:53:18,640] INFO xmppd [org.netbeans.lib.collab.util.Worker 2] [Identity] Failed to create SSO token for jisolder
[19 Jul 2006 10:53:18,641] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] [Sasl] request status : 0
[19 Jul 2006 10:53:18,641] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] [Sasl] response status : 3
[19 Jul 2006 10:53:18,646] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] Session[class com.iplanet.im.server.ClientSession null] authFailed - null
[19 Jul 2006 10:53:18,646] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] Session[null] processed input
[19 Jul 2006 10:53:18,646] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] ClientSession finished process()
[19 Jul 2006 10:53:18,676] DEBUG xmppd [Thread-18] MultiplexManager#31447311 data received for channel 1 com.iplanet.im.server.MultiplexChannel@dc1f04
[19 Jul 2006 10:53:18,676] DEBUG xmppd [Thread-18] MultiplexManager#31447311 addRunnable: 1
[19 Jul 2006 10:53:18,676] DEBUG xmppd [Thread-18] MultiplexManager#31447311 buffered bytes: 16
[19 Jul 2006 10:53:18,677] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 3] ClientSession started process()
[19 Jul 2006 10:53:18,677] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 3] Session[null] processing input
[19 Jul 2006 10:53:18,677] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 3] Session[null] inbound status changed from opened to closed
[19 Jul 2006 10:53:18,678] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 3] Session[null] outbound status changed from opened to closed
[19 Jul 2006 10:53:18,678] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 3] mxchnl[1] closing
[19 Jul 2006 10:53:18,679] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 3] MultiplexManager#31447311 channel 1 terminated.
[19 Jul 2006 10:53:18,679] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 3] Session[null] outbound status changed from closed to disconnected
[19 Jul 2006 10:53:18,679] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 3] Session[null] inbound status changed from closed to disconnected
[19 Jul 2006 10:53:18,679] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 3] Session[null] inbound status reset from disconnected to disconnected
[19 Jul 2006 10:53:18,680] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 3] Session[null] processed input
[19 Jul 2006 10:53:18,680] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 3] ClientSession finished process()
[19 Jul 2006 10:53:44,595] DEBUG xmppd [Timer-0] MultiplexManager#11442116 Starting activity check at 1153299224595
[19 Jul 2006 10:53:44,596] DEBUG xmppd [Timer-0] MultiplexManager#11442116 Completed activity check
[19 Jul 2006 10:53:44,625] DEBUG xmppd [Timer-0] MultiplexManager#7202313 Starting activity check at 1153299224625
[19 Jul 2006 10:53:44,626] DEBUG xmppd [Timer-0] MultiplexManager#7202313 Completed activity check
[19 Jul 2006 10:54:17,425] DEBUG xmppd [ThreadPoolManager:default] Starting activity check; inactivity timeout=900000 now=1153299256925
[19 Jul 2006 10:54:17,426] DEBUG xmppd [ThreadPoolManager:default] Completed activity check for 0 channels.
[19 Jul 2006 10:54:30,110] DEBUG xmppd [Thread-18] MultiplexManager#31447311 OPEN Payload len=8
[19 Jul 2006 10:54:30,111] DEBUG xmppd [Thread-18] useTLS : false
[19 Jul 2006 10:54:30,111] DEBUG xmppd [Thread-18] useTLS1 : false
[19 Jul 2006 10:54:30,111] DEBUG xmppd [Thread-18] useSASL : true
[19 Jul 2006 10:54:30,112] DEBUG xmppd [Thread-18] FSN : <features xmlns='http://etherx.jabber.org/streams'><mechanisms xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><mechanism>PLAIN</mechanism></mechanisms><auth xmlns='http://jabber.org/features/iq-auth'/></features>
[19 Jul 2006 10:54:30,112] DEBUG xmppd [Thread-18] tlsFN : null
[19 Jul 2006 10:54:30,113] DEBUG xmppd [Thread-18] Session[null] outbound status changed from disconnected to connected
[19 Jul 2006 10:54:30,113] DEBUG xmppd [Thread-18] Session[null] inbound status changed from disconnected to connected
[19 Jul 2006 10:54:30,113] DEBUG xmppd [Thread-18] mxchnl[2] created, addr=/172.18.2.43
[19 Jul 2006 10:54:30,114] DEBUG xmppd [Thread-18] MultiplexManager#31447311 New channel 2 client address:/172.18.2.43
[19 Jul 2006 10:54:30,114] DEBUG xmppd [Thread-18] MultiplexManager#31447311 buffered bytes: 0
[19 Jul 2006 10:54:30,145] DEBUG xmppd [Thread-18] MultiplexManager#31447311 data received for channel 2 com.iplanet.im.server.MultiplexChannel@1195c2b
[19 Jul 2006 10:54:30,146] DEBUG xmppd [Thread-18] MultiplexManager#31447311 addRunnable: 1
[19 Jul 2006 10:54:30,146] DEBUG xmppd [Thread-18] MultiplexManager#31447311 buffered bytes: 121
[19 Jul 2006 10:54:30,146] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 1] ClientSession started process()
[19 Jul 2006 10:54:30,146] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 1] Session[null] processing input
[19 Jul 2006 10:54:30,147] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 1] Session[null] inbound status changed from connected to opened
[19 Jul 2006 10:54:30,147] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 1] [Session] expecting SASL support from client
[19 Jul 2006 10:54:30,148] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 1] [Session] opened.
[19 Jul 2006 10:54:30,149] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 1] [Session] Opening client session to proxy1.mrc.ac.za
[19 Jul 2006 10:54:30,149] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 1] [Session] opening outbound
[19 Jul 2006 10:54:30,150] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 1] Session[null] outbound status changed from connected to opened
[19 Jul 2006 10:54:30,150] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 1] [Session] opened outbound
[19 Jul 2006 10:54:30,151] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 1] [Session] opened.
[19 Jul 2006 10:54:30,152] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 1] Session[null] processing input
[19 Jul 2006 10:54:30,152] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 1] Session[null] processed input
[19 Jul 2006 10:54:30,152] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 1] Session[null] processed input
[19 Jul 2006 10:54:30,152] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 1] ClientSession finished process()
[19 Jul 2006 10:54:30,152] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 1] ClientSession started process()
[19 Jul 2006 10:54:30,152] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 1] Session[null] processing input
[19 Jul 2006 10:54:30,153] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 1] Session[null] processed input
[19 Jul 2006 10:54:30,153] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 1] ClientSession finished process()
[19 Jul 2006 10:54:30,163] DEBUG xmppd [Thread-18] MultiplexManager#31447311 data received for channel 2 com.iplanet.im.server.MultiplexChannel@1195c2b
[19 Jul 2006 10:54:30,164] DEBUG xmppd [Thread-18] MultiplexManager#31447311 addRunnable: 1
[19 Jul 2006 10:54:30,164] DEBUG xmppd [Thread-18] MultiplexManager#31447311 buffered bytes: 96
[19 Jul 2006 10:54:30,164] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] ClientSession started process()
[19 Jul 2006 10:54:30,164] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] Session[null] processing input
[19 Jul 2006 10:54:30,165] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] Session[null] processing request
[19 Jul 2006 10:54:30,166] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] [ClientPacketDispatcher] SASLPacket detected
[19 Jul 2006 10:54:30,166] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] [Sasl] new packet
[19 Jul 2006 10:54:30,166] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] [Sasl] IS SASLAuthPacket
[19 Jul 2006 10:54:30,166] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] [Sasl] mechanism PLAIN
[19 Jul 2006 10:54:30,166] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] [Sasl] saslProvider : com.iplanet.im.server.sasl.PlainSASLProvider@cd83d8
[19 Jul 2006 10:54:30,166] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] [Sasl] requestFailed : false
[19 Jul 2006 10:54:30,166] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] [Sasl] saslProvider.isRaw() : false
[19 Jul 2006 10:54:30,167] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] request status : {urn:ietf:params:xml:ns:xmpp-sasl}auth
[19 Jul 2006 10:54:30,167] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] [Sasl] PLAIN mechanism requested
[19 Jul 2006 10:54:30,167] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] [Identity] Authenticating user ccarelse
[19 Jul 2006 10:54:30,167] INFO xmppd [org.netbeans.lib.collab.util.Worker 2] Authenticating using Identity Server SSO
[19 Jul 2006 10:54:30,168] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] Unable to create SSOToken - the specified token might be a password.
[19 Jul 2006 10:54:30,169] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] [Identity] domain = mrc.ac.za
[19 Jul 2006 10:54:30,169] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] [Identity] getSearchBase(mrc.ac.za)=o=mrc.ac.za,o=msp
[19 Jul 2006 10:54:30,169] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] [Identity] domain=mrc.ac.za OrgDN=o=mrc.ac.za,o=msp
[19 Jul 2006 10:54:30,239] INFO xmppd [org.netbeans.lib.collab.util.Worker 2] [Identity] Failed to create SSO token for ccarelse
[19 Jul 2006 10:54:30,239] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] [Sasl] request status : 0
[19 Jul 2006 10:54:30,239] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] [Sasl] response status : 3
[19 Jul 2006 10:54:30,243] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] Session[class com.iplanet.im.server.ClientSession null] authFailed - null
[19 Jul 2006 10:54:30,243] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] Session[null] processed input
[19 Jul 2006 10:54:30,244] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 2] ClientSession finished process()
[19 Jul 2006 10:54:30,259] DEBUG xmppd [Thread-18] MultiplexManager#31447311 data received for channel 2 com.iplanet.im.server.MultiplexChannel@1195c2b
[19 Jul 2006 10:54:30,259] DEBUG xmppd [Thread-18] MultiplexManager#31447311 addRunnable: 1
[19 Jul 2006 10:54:30,259] DEBUG xmppd [Thread-18] MultiplexManager#31447311 buffered bytes: 16
[19 Jul 2006 10:54:30,259] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 3] ClientSession started process()
[19 Jul 2006 10:54:30,260] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 3] Session[null] processing input
[19 Jul 2006 10:54:30,260] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 3] Session[null] inbound status changed from opened to closed
[19 Jul 2006 10:54:30,260] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 3] Session[null] outbound status changed from opened to closed
[19 Jul 2006 10:54:30,261] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 3] mxchnl[2] closing
[19 Jul 2006 10:54:30,261] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 3] MultiplexManager#31447311 channel 2 terminated.
[19 Jul 2006 10:54:30,261] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 3] Session[null] outbound status changed from closed to disconnected
[19 Jul 2006 10:54:30,261] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 3] Session[null] inbound status changed from closed to disconnected
[19 Jul 2006 10:54:30,261] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 3] Session[null] inbound status reset from disconnected to disconnected
[19 Jul 2006 10:54:30,261] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 3] Session[null] processed input
[19 Jul 2006 10:54:30,262] DEBUG xmppd [org.netbeans.lib.collab.util.Worker 3] ClientSession finished process()
[19 Jul 2006 10:54:43,755] DEBUG xmppd [Timer-1] [EmailIMArchive] submit called:
[19 Jul 2006 10:54:44,605] DEBUG xmppd [Timer-0] MultiplexManager#11442116 Starting activity check at 1153299284605
[19 Jul 2006 10:54:44,606] DEBUG xmppd [Timer-0] MultiplexManager#11442116 Completed activity check
[19 Jul 2006 10:54:44,635] DEBUG xmppd [Timer-0] MultiplexManager#7202313 Starting activity check at 1153299284635
[19 Jul 2006 10:54:44,636] DEBUG xmppd [Timer-0] MultiplexManager#7202313 Completed activity check
[19 Jul 2006 10:55:17,435] DEBUG xmppd [ThreadPoolManager:default] Starting activity check; inactivity timeout=900000 now=1153299316515
[19 Jul 2006 10:55:17,436] DEBUG xmppd [ThreadPoolManager:default] Completed activity check for 0 channels.

SPNego not working for EP UME DB

Hi,
We have try to implement SPNego in EP 7.0 EHP2 SP9, We follow all steps maintain as per document attached to SAP Note 1488409.
But User is still prompted for logon screen.
Below is Hardware detail: (all are in same domain)
Active directory : Windows 2008 Enterprise Server R2
Portal Server: Windows 2008 Server Standard
Client : Windows Vista Ultimate SP2
Below is the steps which I performed to configure :
KDC Configuration:
Windows Domain: windomain.corp
FQDN Portal: ephost.windomain.corp
SID Portal: p11
- Create a service user j2ee-p11-ephost with password never expired
- Disable Data Encryption Standard (DES) support for this account
- Register SPN as below
setspn u2013a HTTP/ephost.windomain.corp j2ee-p11-ephost
UME Configuration :
Mapping Mode: Principal only
mapped to: logon ID
Configure Encryption Key:
-Using JDK1.6 we generated keytab file.
ktab u2013a j2ee-p11-ephost @ windomain.corp u2013k keytab
-Finally we add the generated keytab in Created Realm
-Enable the Realm
Adjust The Authentication Stack:
- In visual Administrator ServerXX -> Services -> Security Provider Service -> ticket
We add SPNegoLoginModule with OPTIONAL flag
-> Restart the Portal server.
Please help me.
Thanks & Regards,
Kaushal

Hi,
I think there was a problem on configuration with SPNego module configure in Visual Admin tool.
(Visual admin -> SID -> ServerXX -> Services -> Security provider -> ticket)
Below is how my login modules look like
com.sap.security.core.server.jaas.EvaluateTicketLoginModule : SUFFICIENT: ume.configuration.active = tue
SPNegoLoginModule : OPTIONAL : No Options define !!
BasicpasswordLoginModule: REQUISITE
com.sap.security.core.server.jaas.CreateTicketLoginModule: OPTIONAL : ume.configuration.active = tue
Am i forgort something to put in options for SPNegoLoginModule ?
Thanks & Regards,
Kaushal

Authentication in LDAP

help me please ,
I am using SUNONE 8. 2 with LDAP.
I am wanting to do the more authentication the mistake happens.
[#|2006-11-14T15:42:12.391-0200|INFO|sun-appserver-pe8.2|javax.enterprise.system.core.security|_ThreadID=13;|SEC5046: Audit: Authentication refused for [p933396].|#]
[#|2006-11-14T15:42:12.391-0200|WARNING|sun-appserver-pe8.2|javax.enterprise.system.container.web|_ThreadID=13;|Web login failed: Login failed: javax.security.auth.login.LoginException: LDAP bind failed for uid=p933396,ou=People, o=IGP.|#]In SUN ONE I created Realm LdapRealm like this:
class Name = com.sun.enterprise.security.auth.realm.ldap.LDAPRealm
directory = ldap://cd0000ux056:489
base-dn = ou=People, o=IGP
jaas-context = LdapRealm
group-base-dn = ou=Groups
In my web. xml
<login-config>
    <auth-method>FORM</auth-method>
    <realm-name>ldapRealm</realm-name>
      <form-login-config>
         <form-login-page>/sistema/jsp/login.jsp</form-login-page>
         <form-error-page>/sistema/jsp/loginInvalido.jsp</form-error-page>
      </form-login-config>
</login-config>In my sun-web.xml
    <security-role-mapping>
      <role-name>administrador</role-name>
      <group-name>admin</group-name>
    </security-role-mapping>
    <realm>ldapRealm</realm>In My login.jsp
<form method="post" action="j_security_check">The where this the mistake? Excuse for my English

see my page
<html>
<body>
<form method="post" action="j_security_check">
<table>
<tr><td>Login:</td>
<td><input size=15 name="j_username">
</tr>
<tr><td>Senha:</td>
<td><input type="password" size=15 name="j_password">
</tr>
<tr><td colpsan="2"><input type="submit" value=" Ok ">
</tr>
</table>
</form>
</body>
</html>when one makes the submit the mistake happens above according to the first post.

FAILING TO AUTHENTICATE WITH NETPOINTREALM

Hi,
Customer is integrating BEA WebLogic and OAM as described in the Intergration Guide (B25347-01). They have successfully ran the Policy Deployer tool and the script to create the NetPointRealm in WebLogic.
And also verified that created realm was set as default. When asked for credentials suppied those of the OAM master admin. The WebLogic failed to start giving the authentication error.
In the error log i am able to see "Authentication for user Administrator denied" .
I provided workarouds/solutions from metalink and from "trobleshooting" Topic in integration Guide but did not help the customer.
Any help/suggestion is greatly appreciated?
Thanks in advance,
Anisha

Can you check whether you have given correct credentials in the file NetPointProvidersConfig.properties and in the runDeployerTool.cmd.
--- yes i have given correct credntials in NetPointProvidersConfig.properties. btw where can i get this runDeployerTool.cmd ? as in my case i used setupNetPointRealm_wl92.cmd.
Did you see any errors are running Deployer Tool?
--- no i didnt get any error.
Did you check the Current Builder checkbox?
If you didnot, then it might create problems.
-- Yes i checked this current builder option
Also, have you enabled netpointrealm as default realm before WLS restart.
-- Yes i set the NetPointRealm as default realm.
regards
KishoreM

Jaas and jdeveloper 11

I cannt make jaas in jdeveloper 11
I do this in jdeveloper 10 but how I do that in jdeveloper 11 ????
Tools > Embedded OC4J Server Preferences.
In JDeveloper 10.1.3, the embedded OC4J server uses the jazn-data.xml file that is contained in the current project, ifany.
If there is no jazn-data.xml file in the current project, the jazn-data.xml file for theapplication is used.
This enables you to deploy the user and group settings to a production systemor stand-alone OC4J for testing.
In the Embedded OC4J Server Preferences dialog box,
expand Current Workspace,
Authentication,
and Realms from the tree at the left.
If there is no jazn.com realm under the Realms node, select the Realms node and click New.
Inthe Create Realm dialog box, enter the name jazn.com and click OK,
The default realm in jazn-data.xml is jazn.com, but you can create your owndefault realm if desired.
Under the jazn.com node, select the Users node in the tree and click Add
Add each users you need, entering Passowrd for the Credentials of each Select the Roles node in the tree (under the jazn.com node) and click Add.
In the Create Role dialog box, for example enter manager and click OK.
Create two additional roles: technician and user.
Select user in the Roles list and click the Member Users tab.
Select the following users in the Available list and click Add to move them to the Selected
list to grant the user role to them:
Click OK to dismiss the Embedded OC4J Server Preferences dialog box.

Hi,
most importantly - an i think that I asked you that the first time you posted this question (if it wasn't another tread) - you should give us an idea if what you want to do with JAAS. Do you want to use JAAS in the way that JAAS is designed, to manually call checkPermission on a functionality, do you want to use it for custo authentication (a feature of OC4J that in WLS exist too) or do you want to use ADF Security. Note that the length of a question is not as important as the information it provides. Usecases are the best questions you can ask.
Frank

Creating realms?

Similar Messages

Maybe you are looking for