Does NW7.4 ABAP stack still not support usernametoken with digest password?

Hello, experts,
I got the message from here Username Token with digest password on AS ABAP that NW7.0 ABAP STACK can't support usernametoken with digest password.
Does NW7.4 ABAP stack still not support usernametoken with digest password?
or can I custom the method VERIFY_USERNAME_TOKEN in CL_WS_SECURITY_PROFILE to support usernametoken with digest password?
or does sap have any plan to support this security requirement?
Many thanks.
fangzj

I asked my experts about your question. On the client side we support this. We cannot support digest passwords on the server side. We save passwords in hashed format on the server side. To support digest passwords, the client would either need to send the password in clear text so that the digest can be calculated or the server would have to store the password in clear text, so that the digest password can be calculated. From a security standpoint these are questionable ideas. Either an eavesdropper is picking up the passwords from the traffic or the attacker who breaks the server suddenly has all the passwords in clear text.
You can modify the method VERIFY_USERNAME_TOKEN, but if an upgrade comes along that changes this package, you'll be prompted for a correction import. Then you will either have to skip the upgrade or lose your customization.
-Michael

Similar Messages

  • Does Firefox for Mac still not support Lion-style scrollbars?

    I notice running Firefox on OSX Lion, the scrollbars are of the old style still. Have they really not implemented this yet?

    Will be in firefox 23
    https://bugzilla.mozilla.org/show_bug.cgi?id=636564

  • NCo 3 error: Non ABAP RFC Client not supported

    Hi,
    Iu2019m trying to create a server using .NET Connector 3.0(version 3.0.2, framework 2 and x64) for receiving Idocs from SAP ALE.
    When i send IDOC type HRMD_A from SAP using ALE for RFC server I have this error on server: Non ABAP RFC Client not supported.
    SAP.Middleware.Connector.RfcServerApplicationException: Uncaught exception SAP.Middleware.Connector.RfcUnsupportedPartnerException thrown in SAP.Middleware.Connector.RfcServer.ARfcDestShipImp
       when executing RFC server function ARFC_DEST_SHIP --->
       SAP.Middleware.Connector.RfcUnsupportedPartnerException: Non ABAP RFC Client not supported.
       at SAP.Middleware.Connector.RfcConnection.ReadUpTo(RFCGET readState, RfcFunction function, RFCID toRid)
       at SAP.Middleware.Connector.RfcConnection.Dispatch()
       at SAP.Middleware.Connector.RfcTransaction.Playback()
       at SAP.Middleware.Connector.RfcServer.ARfcDestShipImp(RfcServerContext ctx, IRfcFunction func)
       at SAP.Middleware.Connector.RfcServer.InvokeServerFunction(RfcConnection conn, ServerFunctionInfo serverFuncInfo, RfcServerFunction functionImp)
       --- End of inner exception stack trace ---
       at SAP.Middleware.Connector.RfcServer.InvokeServerFunction(RfcConnection conn, ServerFunctionInfo serverFuncInfo, RfcServerFunction functionImp)
       at SAP.Middleware.Connector.RfcServer.Dispatch(RfcConnection conn)
    Do I need to do some "special configuration" because i´m sending from SAP ALE to my server??
    Any help will be appreciated.
    Thanks
    Edited by: antonio.coelho on May 13, 2011 5:26 PM

    Hi,
    I changed the name of the server and I have the same error. I changed the server name on: RfcServerManager.GetServer("SERVER_NAME", handlers); do I need to change in some other place?
    Did you made any more changes on SAP or c#?
    Anyone have any suggestions on how to solve this problem? I'm trying everything and I still could not solve...
    Any help will be appreciated.
    Edited by: antonio.coelho on Jun 8, 2011 12:00 PM

  • Firefox mobile 6 is still not support flash playing?

    Waiting for several months, ff6 mobile is still not support flash playing...have a bit disappointed!

    Adobe and Google made several non standard changes to the standard plugin system. This has required the engineers working on Firefox mobile to try and understand the changes without any guidance from Adobe or Google. This takes a lot of effort and is not trival.

  • Why does phone say "this device not supported" when charging

    why does phone say "this device not supported" when charging?

    If it is clean connect a 2nd accessory of the same kind to see if you need to replace the accessory or continue troubleshooting the phone.

  • I have a newer MacBook Pro and I am trying to download my Final Cut Pro 7 Studio 2 on it. Is that possible or does the new MacBook Pro not support anything other than Final Cut Pro X?

    I have a newer MacBook Pro and I am trying to download my Final Cut Pro 7 Studio 2 on it. Is that possible or does the new MacBook Pro not support anything other than Final Cut Pro X?

    As Tom said the FCS forum is the better place to post the question.
    Here is Apple's best practices doc for installing both on the same system.
    BTW, FCP7 is part of the FCS 3 suite of apps.
    Russ

  • HT204291 My macbook air was purchased late 2010. Does that mean it will not support mirroring? Can I purchase anything to enable mirroring

    My macbook air was purchased late 2010. Does that mean it will not support mirroring? Can I purchase anything to enable mirroring?

    Your computer is too old to support native mirroring. You can use 3rd party software like Airparrot, though results will vary so try it first.

  • HT202343 Profile Manager 3.2.2 does not support 'use per-connection password'

    Profile Manager 3.2.2 does not support 'use per-connection password' for wireless configuration as stated here.
    https://support.apple.com/en-lu/HT202343
    This feature stops users credentials from being remembered by the device, particularly useful for multi-user devices in an enterprise environment.
    Any help would be much appreciated.
    Thanks in advance

    Yes Clinton I did same, but they were (Huawei customer support) surprised about this problem, They behave like they have no idea about USB 2.0 and  3.0 knowledge. They handsUp that reason I posted my problem in this forum.
    So is there any better solution to use any mediator between these USB version handling, Please let me know.
    Thanks
    Tauheed

  • Mobile Vikings still not supported as carrier

    hello
    Mobile Vikings is still not supported carrier in IOS 6..
    Too bad...Will it be supported ever?

    They don't respond individually to feedback, but rest assured that they read everything you send them.
    You can't assume that Apple isn't making plans with Mobile Vikings to add them as a carrier. You can only wait and see.

  • HT3887 why does my iPhone say device not supported when connecting to my make even after it has successfully paired?

    why does my iphone say device not supported when connecting to my mac pro, even though it has already succesfuly paired? I also use a wirless bluetooth keyboard and mouse on the computer successfully.
    Also when I turn Bluetooth on on the phone the devices cog never stops turning (forever serching for a device)

    iTunes automatically syncs voice memos to your iTunes library when you connect iPhone to your computer.
    It couldn't be much easier than that as you don't actually have to do anything more than normal.
    This lets you listen to voice memos on your computer and provides a backup if you delete them from iPhone.
    Voice memos are synced to the Voice Memos playlist. iTunes creates the playlist if it doesn’t exist. When you sync voice memos to iTunes, they remain in the Voice Memos application until you delete them. If you delete a voice memo on iPhone, it isn’t deleted from the Voice Memos playlist in iTunes. However, if you delete a voice memo from iTunes, it is deleted from iPhone the next time you sync with iTunes.
    USB syncing is far faster than Bluetooth.

  • Ridiculous on Nokia not support 6280 with NSU! An...

    As the First sliding phone from Nokia, 6280, it seems to be a shame for Nokia support on this phone. By this moment, NSU still kick 6280 out of the supported list. Why?
    As an owner of 6280 phone, we need an answer and your schedule! It is very ridiculous that its sister phone 6288 has been supported for several months. Why? Let us guess a possible answer:
    1. Is it a technical reason? 6288 and 6280 are 99% similar. The remained 1% may be the secret from Nokia Support. Maybe 6280 is just prototype of 6288 and Nokia was still not ready to sell this design yet even this phone was delayed for 9 months. Maybe it was shame on Nokia to delay this annouced product for 1 year and so she started to sell this product to fool its buyers.
    - If it is true, it is a shame for Nokia still sell 6280 currently to fool its customer.
    2. Is it a problem for too many variant software version among different service provider? As a big firm as Nokia, i don't think she cannot forsee this issue. Each service provider has its own version, then Nokia Repair Center needs to handle all those versions. By multipling the phone and software version, wowo, did Nokia hopes her centers filled with crowds everyday?! Maybe she wants it to show its popularity. Or Maybe Nokia got money from service provider for licence fee and ignore her customers.
    - If it is true, I can tell you Nokia, your Nokia Support Center is one of worst center for electronic devices. Queued for hours to get in front of the counters, waited for hours / days to get repair, and queued for another hours to collect the phone...
    I don't want to guess more. Nokia please provide us, the owners of 6280, a reason and schedule.
    BTW, i have found that another Nokia sliding phone E65 was still not supported in NSU yet. Will it be next "6280"?

    Do you have mail set to compose your email messages as rich text? Go into your mail preferences and click on the composing icon then make sure Rich Test is selected. 

  • E3000 shows "USB is not supported" error with External Harddrive

    I have the E3000 router and recently purchased a USB WD (Western Digital) 2TB External Harddrive.  I plug the Harddrive into the router, open the router homepage (http://192.168.1.1/) then click on Storage > Disk and I get a "The attached USB is not supported" error - any suggestions on how to fix this?
    Thanks for any help!
    Solved!
    Go to Solution.

    Likely Final Update:  WD Support sent me a link to download / install SmartWare and solve the problem I was having with the SmartWare software ("Drive Settings" was greyed out).  Once I got SmartWare back up and running I was able to change the "Drive Settings" within SmartWare.  As the last update suggested, I modified the sleep timer settings and security (password settings) and tested to get the following results:
    Sleep Timer on / Password protection on:  E3000 shows "USB not supported"
    Sleep Timer off / Password protection on:  E3000 shows "USB not supported"
    Sleep Timer on / Password protection off:  WD Hard Drive seen and seems to function properly when connected to E3000
    Sleep Timer off / Password protection off:  WD Hard Drive seen and seems to function properly when connected to E3000
    So (other than maybe some inital problems with the WD SmartWare) it appears the "USB is not supported" error is due to the Password protection being turned on for the External Hard Drive.  This point should be highlighted in the Western Hard Drive materials but I don't see it anywhere on the box or in the manual (maybe its fine print in the manual).  Cisco and / or Western Digital are screwing us by not allowing password protection (or making this point known) on at this least model of Hard Drive!
    Thanks again to everyone that helped with troubleshooting this!  

  • AIR 3.9.1030 Still Not Support iOS 7 Icons

    Hi,
    After all the discussion in the beta and here about this, it still looks like to me that the latest released build STILL does not support the new icon sizes 76x76, 120x120, & 152x152. If you look at the AIR_Descriptor.3.9.xsd schema file, it clearly is missing these definitions, and as a result, people using IDE's like Intellij won't be able to compile there project because it will error out. I thought this was fixed?

    Hi
    Could you use AIR 3.9 release AIR SDK  from   http://www.adobe.com/devnet/air/air-sdk-download.html  try  again?  following SDK/templates/air/descriptor-template.xml file 76x76, 120x120, & 152x152. had suppored.
    Please refer to revelant tag in /descriptor-template.xml file.
    <!-- <icon>
            <image16x16></image16x16>
            <image29x29></image29x29>
            <image32x32></image32x32>
            <image36x36></image36x36>
            <image40x40></image40x40>
            <image48x48></image48x48>
            <image50x50></image50x50>
            <image57x57></image57x57>
            <image58x58></image58x58>
            <image72x72></image72x72>
            <image76x76></image76x76>
            <image80x80></image80x80>
            <image96x96></image96x96>
            <image100x100></image100x100>
            <image114x114></image114x114>
            <image120x120></image120x120>
            <image128x128></image128x128>
            <image144x144></image144x144>
            <image152x152></image152x152>
            <image512x512></image512x512>
            <image732x412></image732x412>
            <image1024x1024></image1024x1024>
        </icon> -->
    Thanks
    -Bo

  • On which platforms is Java6 SDK still not supported?

    Is there some up-to-date document that gives an overview of which version of Java is available where? It seems Java5 has reached its end of service life, but then, people keep telling me that some Mac/Apple platforms still do not have Java6 available on them - which would mean that any project that should run an as many platforms as possible would still be compatible with Java5.
    So does anyone know the facts on Java6 support on Macs and is there some place where one can keep track of which version is compatible with what platform?

    johann_p wrote:
    Unfortunately these pages do not explicitly state where Java6 is NOT supported.It's far easier to state where it IS supported.
    So unless one has a real good knowledge of Apple platforms one is still a bit in the dark.I'm not a "Mac Guy"™, but the following passage seemed pretty clear to me:
    Java for Mac OS X 10.5 Update 2
    Java for Mac OS X 10.5 Update 2 delivers improved reliability and compatibility for Java SE 6, J2SE 5.0 and J2SE 1.4.2 on Mac OS X 10.5.4 and later. The release updates Java SE 6 to version 1.6.0_07, J2SE 5.0 to version 1.5.0_16, and J2SE 1.4.2 to 1.4.2_18.
    And so on.
    If the FAQ I found is up-to-date, the OS still comes with Java5 initially so that is rather sad. Overall Apples support for Java seems to be rather disappointing."Mac OS X is the only major consumer operating system that comes complete with a fully configured and ready-to-use Java runtime and development environment."
    <shrugs />
    ~

  • Latest Prelude CC Update - GoPro Files Still Not Supported?

    Hi Forums,
    I just updated my Prelude CC software.  It claims it now offers support for GoPro files.  However I'm ingesting those files and they still won't work with it (.mp4).  Anyone else having this issue? Maybe the software is just fine and it's something on my end?
    Thanks!
    -JD
    iMac late 2012,  3.4 GHz Intel Core i7, 15 GB RAM, OSX 10.9

    I'm not having any problems.  Just Ingested 32 Gigs of Go Pro 1080P-30pfs footage without any problems 
    I'm running with a Hero 3 Black edition with the latest firmware.
    I did copy all of the MP4 Files to an external drive using a USB 3.0 card reader prior to doing the ingest and tagging. I don't copy over any of the other files on the disk either.  Just the MP4 Files.
    Don't know if that makes a diffrence.

Maybe you are looking for

  • JDBC / oracle / date & TIME

    I am attempting to insert the date and time into a date-time field in an Orcale DB.  I am currently sending the following data into the field. 24-AUG-2007 13:45:44 and i am getting the error... Error while parsing or executing XML-SQL document: Error

  • How do you remove the "@" from directory entries (extended permissions)

    I had a CodeIgniter project that I was creating on my MacBookPro, and then uploaded it to my Mac to sync. Now, when I go to that project, it won't run in my XAMPP server...giving a Forbidden message. I went to the terminal to do a typical chmod -R on

  • Lagging problem

    Hello everyone I just have a quick question. I made an application that displays an array of cards in a JFrame with three buttons under it. One button perfectly shuffles the deck(I won't get into what I mean by that unless someone is interested) the

  • How to restart paused Task in Batch Monitor

    Hi All, So I've submitted a bunch of stuff from Compressor. Batch monitor is chugging away but there's no way it's gonna finish before I need to leave and take my laptop. So I figured I could just pause the task. Shut down. Remove the drive. Go home.

  • Configuring ALBPM Studio Built-in Engine

    I am working through the tutorial on ALBPM studio and have reached the stage at which I need to run a process using the studio's built-in engine [i.e. Run/Start engine...]. When I do this, I always get several failure messages that indicate the engin