Encrypted="true" does not encrypt MBean attribute

Hi,
I have developed a Custom Weblogic Security Service Provider. I have also created
an MBean
to manage my provider. One of my MBean attributes is as follows:
<MBeanAttribute
Name = "JdbcPassword"
DisplayMessage = "The JDBC Password to the security database"
Type = "java.lang.String"
Writeable = "true"
Encrypted = "true"
Default = ""password""
/>
I have specified Encryped="true" above, however, the value I put in the Weblogic
Console
is still seen in cleartext in the config.xml. Why isnt it being encrypted? Or
do I misunderstand
the purpose of the Encrypted attribute?
Thanks,
Proneel.

"Proneel Guptan" <[email protected]> wrote:
>
Hi,
I have developed a Custom Weblogic Security Service Provider. I have
also created
an MBean
to manage my provider. One of my MBean attributes is as follows:
<MBeanAttribute
Name = "JdbcPassword"
DisplayMessage = "The JDBC Password to the security database"
Type = "java.lang.String"
Writeable = "true"
Encrypted = "true"
Default = ""password""
/>
I have specified Encryped="true" above, however, the value I put in the
Weblogic
Console
is still seen in cleartext in the config.xml. Why isnt it being encrypted?
Or
do I misunderstand
the purpose of the Encrypted attribute?
Thanks,
Proneel.Hi Proneel,
Could you please tell me what version of Weblogic are you using?
Thanks,
Carmen

Similar Messages

Error : Sales Org.Unit does not have these attributes -- Urgent

Hi, Team,
I am unable to create a service order with serivce material ( Only installation visit charges ) for w/o warranty product .
I am getting error : " Sales Org.Unit does not have these attributes "
I had checked the related Org data of respective sales org , already the sales area combination is also maintained from R/3 with required attributes "
Pls revert with possible solution .
Regards,
VCS

PePe :
Thanks for reversion !!
Basically it is a product Service Material (Servicing Charges), where in I had checked in the transaction , Though the required sales area is well maintained in the R/3 System and is being replicated to the CRM .
When I checked the product Service material , the required comination is missing and could find other sales area combinations .
Pls guide , how to go to get this resolved .
Regards,
VCS

Encrypt Message does not work with new Plug-in 7.3

I installed the new Email Security Plug-in 7.3 but now the Encrypt Message button does not work. It is grayed out and unavailable when I attempt to create a new message.
I first tried installed 7.3 over the previous version but every time I opened Outlook I received an error message about XML not loading. I uninstalled the plugin, rebooted and installed it clean and that took care of the XML message. But I then found the encrypt button issue and have not been able to solve that issue. This is not isolated to my machine as I have tried installing it on another machine that never had the plug-in installed before.

My understanding is that they completely rewrote it, which is probably why an upgrade doesn't work well...
I did get one way of deploying figured out, the stuff on page 3-20 has some errors.
Here's what I did that works:
     Do a clean install on a machine that doesn't have any plugin installed.
     Copy the C:\Users\All Users\Cisco\Cisco IronPort Email Security Plug-In\Common directory and its contents to a network accsible share, say \\fs1\share\pluginconfig, so you now have \\fs1\share\pluginconfig\Common, etc...
     Copy your BCE_Config_Signed.xml file to the Common folder
     Rename that to config_1.xml
     Edit the CommonEncryptionConfig.xml to have the following XML:
      Now you can push the install with a command line that references the folder (the example on page 3-20 is wrong, no 's' ):
            CiscoIronPortEmailSecurity-7-3-0-102.exe /exenoui /qn UseCustomConfig="\\fs\share\pluginconfig"
       (if you're doing it on the same machine you did the clean install with, you should uninstall it first...)
Message was edited by: Ken Stieers

The data does not encrypt using Wallet!

Hi All,
I've created a wallet to encrypt/decrypt the data, but when I change any column to be ecrypted by this command:
alter table accounts modify (ssn encrypt); --accounts is the table containing ssn column to be ecrypted.
and then inserting data on it, the data does not appear in encrypted format it appears in it's truth format!
how to make the data ecrypted?

Dev. Musbah wrote:
Hi All,
I've created a wallet to encrypt/decrypt the data, but when I change any column to be ecrypted by this command:
alter table accounts modify (ssn encrypt); --accounts is the table containing ssn column to be ecrypted.
and then inserting data on it, the data does not appear in encrypted format it appears in it's truth format!
how to make the data ecrypted?Did you go back and read that what does TDE(transparent data encryption) actually does? It does NOT make your column look encrypted but makes the physically stored data in teh datafile as encrypted which otherwise can be reverse engineered by someone and can be read. In your case, whatever is happening is the right thing.
For your unmentioned version, here is the link for the same,
http://download.oracle.com/docs/cd/E11882_01/network.112/e10746/asotrans.htm#ASOAG10137
HTH
Aman....

SQLite encrypted Database does not get attached Using Adobe Air,Why?

Hi,
Any one knows the solution, am trying to attach the encrypted SQLite database adobe air-adobe flex bulder , it does not get attached using sqlconnection.attach throws error, though the given key is correct, but it gets open using sqlconnection.open with the same key, any one knows the solution, how to attach the encrypted data base, since am using two data base one is opened and another must be attached to the existing ,thanks in advance. using adobe air- flex related. i use the following code
databaseFile1 = File.applicationStorageDirectory.resolvePath("Sample_1.sqlite");
databaseFile2 = File.applicationStorageDirectory.resolvePath("Sample_2.sqlite");
dbConnection.open(databaseFile1, SQLMode.CREATE, false, 1024, secKey);
dbConnection.attach("db2",databaseFile2,null,secKey);
got the following error.
ERROR #3125 Unable to open the database file.

And I would say more "this is the issue" !
It should be possible as it is clearly stated in the doc :
public function attach(name:String, reference:Object = null, responder:Responder = null, encryptionKey:ByteArray = null):void
with
encryptionKey:ByteArray (default = null) — The encryption key for the database file. If the attach() call creates a database, the database is encrypted and the specified key is used as the encryption key for the database. If the call attaches an existing encrypted database, the value must match the database's encryption key or an error occurs. If the database being attached is not encrypted, or to create an unencrypted database, the value must be null (the default).
so with a same encryptionkey, I (and this should be the same for FinalTarget) can open the encrypted db but not to attach it... quite strange.

Encryption program does not work in IBM JDK

Hi
I have a encrypt, decrypt program, which does not work in IBM JDK
the code is as below, it gives PBEWithMD5AndDES does not exist kind of error when running with IBM JDK
import java.io.UnsupportedEncodingException;
import java.security.spec.AlgorithmParameterSpec;
import java.security.spec.KeySpec;
import javax.crypto.Cipher;
import javax.crypto.IllegalBlockSizeException;
import javax.crypto.SecretKey;
import javax.crypto.SecretKeyFactory;
import javax.crypto.spec.PBEKeySpec;
import javax.crypto.spec.PBEParameterSpec;
public class MapsPasswordUtil
     Cipher ecipher;
     Cipher dcipher;
     // 8-byte Salt
     byte[] salt = { (byte) 0xA9, (byte) 0x9B, (byte) 0xC8, (byte) 0x32,
               (byte) 0x56, (byte) 0x35, (byte) 0xE3, (byte) 0x03 };
     // Iteration count
     int iterationCount = 19;
     public MapsPasswordUtil(String passPhrase)
          try
               KeySpec keySpec = new PBEKeySpec(passPhrase.toCharArray(), salt,
                         iterationCount);
               SecretKey key = SecretKeyFactory.getInstance("PBEWithMD5AndDES")
                         .generateSecret(keySpec);
               ecipher = Cipher.getInstance(key.getAlgorithm());
               dcipher = Cipher.getInstance(key.getAlgorithm());
               // Prepare the parameter to the ciphers
               AlgorithmParameterSpec paramSpec = new PBEParameterSpec(salt,
                         iterationCount);
               // Create the ciphers
               ecipher.init(Cipher.ENCRYPT_MODE, key, paramSpec);
               dcipher.init(Cipher.DECRYPT_MODE, key, paramSpec);
          } catch (java.security.InvalidAlgorithmParameterException e)
               e.printStackTrace();
          } catch (java.security.spec.InvalidKeySpecException e)
               e.printStackTrace();
          } catch (javax.crypto.NoSuchPaddingException e)
               e.printStackTrace();
          } catch (java.security.NoSuchAlgorithmException e)
               e.printStackTrace();
          } catch (java.security.InvalidKeyException e)
               e.printStackTrace();
     public String encrypt(String str)
          try
               // Encode the string into bytes using utf-8
               byte[] utf8 = str.getBytes("UTF8");
               // Encrypt
               byte[] enc = ecipher.doFinal(utf8);
               // Encode bytes to base64 to get a string
               return new sun.misc.BASE64Encoder().encode(enc);
          } catch (javax.crypto.BadPaddingException e)
               e.printStackTrace();
          } catch (IllegalBlockSizeException e)
               e.printStackTrace();
          } catch (UnsupportedEncodingException e)
               e.printStackTrace();
          return null;
     public String decrypt(String str)
          try
               // Decode base64 to get bytes
               byte[] dec = new sun.misc.BASE64Decoder().decodeBuffer(str);
               // Decrypt
               byte[] utf8 = dcipher.doFinal(dec);
               // Decode using utf-8
               return new String(utf8, "UTF8");
          } catch (javax.crypto.BadPaddingException e)
               e.printStackTrace();
          } catch (IllegalBlockSizeException e)
               e.printStackTrace();
          } catch (UnsupportedEncodingException e)
               e.printStackTrace();
          } catch (java.io.IOException e)
               e.printStackTrace();
          return null;
}

Works for me with the latest IBM JDK. You will need to specify your context i.e. what platform, what JDK/JRE etc etc etc.
P.S. That exception handling is rubbish.
Edited by: sabre150 on Mar 23, 2009 6:01 AM
I suspect that you are using JDK 1.5 and that you have fallen foul of the bug where key.getAlgorithm() does net return the correct value. You get round this by specifying it as             SecretKey key = SecretKeyFactory.getInstance("PBEWithMD5AndDES").generateSecret(keySpec);
            ecipher = Cipher.getInstance("PBEWithMD5AndDES");Of course if you are clever you will just define a static final constant for this algorithm.
Edited by: sabre150 on Mar 23, 2009 6:09 AM

SecurityMode.TransportWithMessageCredential Binding does not encrypt the message

When I send a message with SecurityMode.TransportWithMessageCredential Binding (over https), I can see the decrypted message in the service log file. Isn't the message supposed to be encrypted?
Bob

Hi Bob12543,
In the TransportWithMessageCredential security mode, message security is used to authenticate the client and transport security is used to authenticate the server and provide message confidentiality and integrity, so the encryption
and signature are ensured at the transport layer. However the transport security mode secures the transfor not the message itself.
For more information, please try to refer to the following:
https://msdn.microsoft.com/en-us/library/ms735093.aspx .
A similar thread:
https://social.msdn.microsoft.com/Forums/vstudio/en-US/fb39d649-f28e-4803-83a7-6aa7c6ca3673/messages-not-encrypted-using-transportwithmessagecredential?forum=wcf
Best Regards,
Amy Peng
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Rtexprvalue true does not work

I write a tag ,it works well( tomcat 5.5 ,jdk5):
 <u:repeat num="5">
 ${count} of 5 
 </u:repeat>
 <%
 request.setAttribute("number",2);
 %>
but when I use it like this:
 <u:repeat num="${number}">
 ${count} of 5
 </u:repeat>
i got the error:
NumberFormatException: For input string: "${number}"
It seems the rtexprvalue does not work at runtime.
tag class:
import javax.servlet.jsp.JspException;
import javax.servlet.jsp.tagext.SimpleTagSupport;
import java.util.HashMap;
import java.io.IOException;
public class RepeatSimpleTag extends SimpleTagSupport {
 private int num;
 public void doTag() throws JspException, IOException {
 for (int i = 0; i < num; i++) {
 getJspContext().setAttribute("count", String.valueOf(i + 1));
 getJspBody().invoke(null);
 public void setNum(int num) {
 this.num = num;
TLD:
 <tag>
 <name>repeat</name>
 <tag-class>boc.common.tags.RepeatSimpleTag</tag-class>
 <body-content>scriptless</body-content>
 <variable>
 <description>Current invocation count (1 to num)</description>
 <name-given>count</name-given>
 </variable>
 <attribute>
 <name>num</name>
 <required>true</required>
 <rtexprvalue>true</rtexprvalue>
 </attribute>
 </tag>
then I change the code to:
 public void setNum(String num) {
 this.num = Integer.parseInt(num);
still got the error
org.apache.jasper.JasperException: Exception in JSP: /WEB-INF/jsp/spring/userauth.jsp:22
19: request.setAttribute("number",2);
20: %>
21:
22: <u:repeat num="${number}">
23: ${count} of 5
24: </u:repeat>
25: <u:repeat num="5">
Stacktrace:
 org.apache.jasper.servlet.JspServletWrapper.handleJspException(JspServletWrapper.java:504)
 org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:393)
root cause
java.lang.NumberFormatException: For input string: "${number}"
 java.lang.NumberFormatException.forInputString(NumberFormatException.java:48)
 java.lang.Integer.parseInt(Integer.java:447)

I set <el-ignored>true</el-ignored>
change it to false and all is ok

SmoothGraphMarkers=True does not stop Graph Cursor Flicker

I have a xy graph where the cursor labels flicker every time the graph is updated. I have tried setting the smoothGraphMarkers=True
switch in the Labview.ini file but it does not make any difference. I have the smoothupdates graph attribute set to true and have experimented with disabling graphic card acceleration. Nothing seems to help. I have been told that this started to happen when we recompiled the application from LV8.0 to LV8.2. BTW, there are not any graph property nodes in the loop that could be causing a refresh. Thanks.

sachsm,
Are you also setting the Cursor.Allow Drag property of each cursor to FALSE? This can done by either using a property node or by right clicking on the cursor and unchecking Attributes»Allow Drag.
Without this setting cursors are redrawn at every update just in case they have been moved. By disabling the ability to move them along with the other settings you have already mentioned LabVIEW is able to render the cursors as part of the background bitmap and then update the screen all at once.
Regards,
Simon H
Applications Engineer
National Instruments
http://www.ni.com/support/

SAP Cookies does not have secure attribute

Cookies remain without Secure Attribute after changing ticket_only_by_https = 1, SystemCookiesHTTPSProtection=true, and ume.logon.security.enforce_secure_cookie=True.
1.)ABAP: sap-appcontext cookies
2.)Portal: com.sap.engine.security.authentication.original_application_url
Security guidelines advice us to put all cookies into secure flag.
1.) What are these cookies, the information it contain and how are they use?
2.) Is it necessary to set this cookies to secure flag? If not is how does SAP handles possible cookie hijacking?

Hi Jason,
The cookie "com.sap.engine.security.authentication.original_application_url" is used to remember the originally called URL, when - to retrieve this URL - a logon is needed. After the successful login, it is used to redirect to the originally called application URL (and will be deleted then).
It is also (mis)used to interpret for the SPNego login module if there already was a failed approach to login via SPNego. So if the auth request sees this cookie, it does not try to run SPNego but skips it.
The value is encoded; only the information if the initial request was GET or POST is put in clear text in front of the value, separated by a "#" char.
The code setting the cookie can be found in class com.sap.engine.interfaces.security.auth.AbstractWebCallbackHandler in line 1200++ - there someone could add the secure flag.
Hope it helps
Detlev

Schema Validator does not honor "nullable" attribute

Oracle XML Schema validator v1.0 does not seem to honor "nullable" schema attribute as in:
<xsd:element name='myelem' type='xsd:string' nullable='true'/>
On input
<myelem/> or <myelem></myelem>
it reports:
Element not completed: 'myelem'
Thanks
null

My mistake. Input must be specified as:
<myelem xsi:null="true">
where
xmlns:xsi="http://www.w3.org/1999/XMLSchema/instance"
null

Calendar Server 4: Adding a user to a node does not add ou attribute

In Netscape Calendar Server (CS) 3.5, if I add a new user with an organizational
unit (ou)
attribute to a Calendar Server node, the server will create an
ou so that the Calendar client
will be able to use the ou
parameter to search for this user.

However, in CS 4.0, if I add a new user to an ou
and then add that user to a Calendar
node, the server does not automatically create a separate ou
attribute.

Will I need to manually add the separate ou
attribute to the ldif

No. The CS 4.0 server, unlike the CS 3.5 server, supports mapping from
Calendar Server attributes to LDAP attributes. You can find more information
on this mapping property in the Administrator's Guide for Netscape Calendar
Server 4.0 at the following URL: 

http://docs.iplanet.com/docs/manuals/calendar/ncs40/ag/appendie.htm#1025959.
 

To enable this mapping, in the [LDAP]
section of the
/users/unison/misc/unison.ini file,
add the following entry: 

attr_orgunit1 = "ou"

Is there a way to enter multiple groups? Guess I'll have to learn how to do multi input in a real custom form.The "MultiSelect" HTML Component works for me and I cant think of any other suitable component. Multiselectable List maybe. Fill the allowedValues property with a hardcoded list (*BAD*) or directly from a search on LDAP (_GOOD_) using IDM getResourceObjects FormUtil. You should find plenty of examples how to use it in the forum.
One issue I noticed, I've verified the user was added to the group using an external ldap tool (JXplorer), however now that group has disappeared from the LDAP resource browser list view.(I personally prefer the good old [lbe LDAP Browser\Editor|http://www-unix.mcs.anl.gov/~gawor/ldap/] or ldapadmin)
That shouldn't happen... Verify the group is still there, the objectclass isnt changed by IDM (really shouldnt happen...) and make double sure nobody else screwed around with it. Groups of objectclass groupOfNames and groupOfUniqueNames (and posixGroup but that's a different schema mapping) are supported by default afaik.

Eyedropper tool does not copy all attributes

Illustrator CS2 with Windows XP (SP2)
Every document I've checked says that AI CS2's eyedropper tool will copy all appearance attributes. Yet it fails to copy the Align Stroke attribute.
It's not given as an option on preferences so I haven't inadvertently turned it off. All the others work ok. I gather from other documents in this forum that Align Stroke is new to CS2? Could Adobe have forgotten to add a line of code?
Grimble.

> If you wouldn't mind humoring me a little longer, could you confirm that the attributes listed under Appearance, Focal Stroke are: Color, Transparency, Overprint, Weight, Cap, Join, Miter Limit, and Dash Pattern; i.e. that Align Stroke does not appear in the list?
Yes, that is correct. Align Stroke is an effect, so like all other effects it does not appear specifically on the list. The transfer of effects with the Eyedropper is controlled by having the main Appearance checkbox checked. So checking all the items listed
underneath Appearance while leaving the Appearance checkbox itself unchecked means you want to transfer all aspects of Appearance
except Effects. (Brushes are another Effect that is applied through a palette instead of through the Effects menu.)
Since the behavior of Effects are dependent upon each other and upon the fills and strokes (for example, many of them are applied to a specific fill or stroke), they can only be transferred if the entire Appearance is transferred. That's why there is no Effects line. The Appearance checkbox itself means transfer the
entire appearance.
Is your Eyedropper tool transferring other kinds of effects such as Drop Shadow and Roughen?
> Secondly, when I choose a tool, such as pen or rectangle, with no object selected (in order to draw a new object), I find that the Align Stroke option is greyed out - and it is the only option greyed out in Stroke. It only becomes functional after the object is drawn (and still selected) or when another object is selected. This also seems unusual behaviour and I'm wondering if it is normal?
I think it's odd too, and would consider it a bug. The Align Stroke item seems to have very conservative enabling rules. There are many other conditions under which it is disabled even though it is legal for the selection to carry aligned strokes. For example, it is disabled if you have a text object or a compound shape selected. Yet you can transfer outside or inside aligned strokes to compound shapes or text objects using the Eyedropper tool, and you can apply them to those objects by applying an appropriate Graphic Style, and you can apply them to those objects by dragging the Appearance indicator in the Layers palette.
My guess (I did not work on this feature so I don't know for sure) is that when it was first implemented it only worked on path objects, so the button was disabled for other kinds of selections, and then the implementation was beefed up to handle other kinds of objects, but the button enabling logic was never revised to reflect the new capabilities.

Encrypted HDD does not appear in Disk Utility or Finder or Terminal

I recently reformatted a 320 GB external HDD as Encyrpted, Journaled HFS+ using Mountain Lion. For several weeks, it worked flawlessly. I was able to back up financial documents with the security of disk-level encryption. When connected, the drive would mount and prompt for password (as expected).
Then one day I knocked against my desk while the drive was connected, pulling the FireWire cable out of the external HDD. It lost power and disconnected, causing the error message about disconnecting disks before ejecting them.
I immediately plugged it in and attempted to find it. Unfortunately, it didn't appear in Finder. It didn't appear in Disk Utility. It didn't appear in /Volumes or on diskutil list. I haven't been able to get it since then.
I have:
A) Restarted with HDD attached
B) Restarted without HDD attached
C) Connected with a different FireWire cable, then tried connecting with a USB cable
C) Run "Repair Disk" on my main internal HD while in Recovery Mode, without and then with HDD attached
D) Tried connecting to other Macs, using combinations of Lion and Mountain Lion, FireWire and USB
Does anyone have any additional tricks to try? The data is backed up, so it's ok if I lose it. But I would love to unbrick this drive that I purchased before considering it useless.

Apple Support article:
USB and FireWire Troubleshooting
Firewire Device not Working

Apex4 does not render readonly attribute properly for IE.

I found that Apex4 renders the readonly attribute with an extra quotation mark for IE. So I get this:
"readonly="readonly"
And it doesn't work, obviously. For Firefox, all is good.
The simplest solution seems to be to just leave the Disabled attribute set to No and manually add "readonly=true" to the "HTML Form Element Attributes" field.

Hi,
yes that is a problem on our known issue list http://www.oracle.com/technetwork/developer-tools/apex/40-known-issues-159870.html and will be fixed in our upcoming patchset 4.0.1. Actually the release candidate for this patchset has already been installed on apex.oracle.com. So there you should not be able to reproduce the problem anymore.
Regards
Patrick
My Blog: http://www.inside-oracle-apex.com
APEX 4.0 Plug-Ins: http://apex.oracle.com/plugins

Encrypted="true" does not encrypt MBean attribute

Similar Messages

Maybe you are looking for