Exclude a url from a protected ressource

Hi,
is there a chance to configure in the policy agent oder in the access manager an exclude url.
For example.
http://domain.tld is the protected ressource
http://domain.tld/protected.html is a protected url and if you want to show it, you where redirected to the login page.
http://domain.tld/notprotected.html is a not protected url and if you call the url without session cookie it will be shown.
The url domain.tld/notprotected.html must be configured as an exclude and non protected ressource.
Thanks in advance.

Add the page you mentioned to the following list of AMAgent.properties
com.sun.am.policy.agents.config.notenforced_list
Please also check the value com.sun.am.policy.agents.config.notenforced_list.invert is true or false. If it is true, the list above becomes protected list, otherwise it's excluded as what you wanted.

Similar Messages

Exclude URLs from ACL settings

Hi,
I have applied an ACL to a directory such that a user must log into a certificate server before accessing. However, when a client side Applet tries to access a file within the directory, the web server issues a rejection message (after the user has logged in).
Is there a way, I can excluded certain URLs from the ACL setting so that my Applets don't get rejected?
Here is my ACL file:
version 3.0;
acl "path=e:/avf/visible/jca/";
authenticate (user,group) {
method = "SSL";
deny (all)
(user = "anyone");
allow (all)
(group = "JCA/JSIPS");
allow (all)
(group = "PMA-281 CM");
Here is my web server error file:
[03/Mar/2003:09:10:25] failure ( 1340): for host x.x.x.x trying to GET /forum/,
Client-Auth reports: Unexpected error
receiving data: -5938
[03/Mar/2003:09:10:25] security ( 1340): get_auth_user_ssl: client passed no
certificate.
[03/Mar/2003:09:10:25] failure ( 1340): for host x.x.x.x trying to GET /forum/,
Client-Auth reports: SSL library call failed:
SSL_ERROR_HANDSHAKE_NOT_COMPLETED - Cannot initiate another SSL handshake until
current handshake is complete.
Any help is greatly appreciated!

I would do that except directories dynamically change fairly often (almost every other week) and I don't want to change the ACL's, reload the rules and restart the server whenever a user creates a directory.
Is there a way to define an ACL to apply for directories with a wildcard? For example, for "htdocs/dir1/*/dir3?"

Protect the adf url from anonymous users

Hi All,
How can i protect my adf application url from anonymous users?Please give me your valuable suggestions.

Have you read about ADF Security in the documentation?

Invoke protected url from code

We are trying to invoke the protected url to the pdf stored on the webserver from the J2EE application code. We are passing the ObSSOCookie as a querystring parameter while invoking the pdf url from the code. But it gives the following error:
PDF header signature not found
If we try to invoke the non-protected url to the pdf, the code is able to fetch the corresponding file. The issue is with fetching the protected pdf.
Appreciate any assistance / pointers to resolve this.

You can make a URLConnection to that other site.
http://java.sun.com/j2se/1.5.0/docs/api/java/net/HttpURLConnection.html
http://www.javaworld.com/javaworld/jw-03-2001/jw-0323-traps.html

How can I block a url from accessing my browser?

I want to block a url from accessing my browser. The url in question, djbsaqja.co.cc, flashed a pop-up saying that my computer was infected with a dangerous virus and that "Windows Security" required that I download a program to fix it.
I maintain realtime virus protection, but ran a manual scan anyway, which proved that I was clean.
The url listed above would not let me out of an unending chain of popups, demanding that I download their tool.
Instead, I opened a new Firefox session (it was the only way I could re-enter Firefox without this rogue url taking control), then cleared out my history, cache and cookies.
I'm clean...and now I'm back in control with, I believe, no damage. But since I wrote down the url, is there a way that I can block from accessing my browser again?
Thanks for the help.

You can add it to your hosts file - http://allthingsmarked.com/2006/08/28/howto-block-websites-using-the-hosts-file
Sites like that pop up on a regular basis, but will often get taken down quite quickly. I have just checked and the site appears to have been taken down.

Fetching a URL from a socket output or input stream in a proxy server

We have written a proxy server in java .
It connects with a client on some local port and forwards the request of the client to main server through socket connections.
The code is as follows...
* BasicProxyServer.java
* A simple multithreaded proxy server.
* A client connects to theserver. The server starts a
* separate threads for data flow though two Sockets.
* The first socket communicates with the socket of the client.
* The second socket is used to communcate with the main server
* for which this server is a proxy. The sockets are connected by pipes.
import java.net.*;
import java.io.*;
public class BasicProxyServer {
     private static int serverPort;
     private static String primaryServerHost;
     private static int primaryServerPort;
     // 1st arg: port to listen on
     // 2nd arg: primary server IP
     // 3rd arg: primary server port
     public static void main(String [] args) {
          serverPort = Integer.parseInt(args[0]);
          primaryServerHost = args[1];
          primaryServerPort = Integer.parseInt(args[2]);
          BasicServer bserv = new BasicServer(serverPort,primaryServerHost,primaryServerPort);
class BasicServer extends Thread {
     private int serverPort;
     private String primaryHost;
     private int primaryPort;
     private ServerSocket servSock = null;
     public BasicServer(int port, String primSrv, int primPort) {
          serverPort = port;
          primaryHost = primSrv;
          primaryPort = primPort;
          start();
     public void run() {
          Socket clientSock = null;
          Socket primaryServerSock = null;
          try {
               servSock = new ServerSocket(serverPort);
          catch (IOException e) {
               e.printStackTrace();
          while(true) {
               try {
                    clientSock = servSock.accept();
                    primaryServerSock = new Socket(primaryHost, primaryPort);
                    PipedInputStream fromClient = new PipedInputStream();
                    PipedOutputStream toMainServer = new PipedOutputStream(fromClient);
                    PipedInputStream fromMainServer = new PipedInputStream();
                    PipedOutputStream toClient = new PipedOutputStream(fromMainServer);
                    Talk clientToMainServer = new Talk(clientSock, fromClient, primaryServerSock, toMainServer);
                    Talk mainServerToClient = new Talk(primaryServerSock, fromMainServer, clientSock, toClient);
                    clientToMainServer.start();
                    mainServerToClient.start();
               catch (IOException e) {
                    e.printStackTrace();
     // Override finalize() to close server socket
protected void finalize() {
if (servSock != null) {
try {
servSock.close();
} catch (IOException e) {
e.printStackTrace();
servSock = null;
class Talk extends Thread {
     private Socket incoming;
     private Socket outgoing;
     private InputStream in;
     private OutputStream out;
     private InputStream from;
     private OutputStream to;
     Talk(Socket inSock, InputStream in, Socket outSock, OutputStream out) {
          this.in = in;
          this.out = out;
          incoming = inSock;
          outgoing = outSock;
     public void run() {
          int aByte;
          try {
               from = incoming.getInputStream();
               to = outgoing.getOutputStream();
               while(( aByte = from.read()) != -1 ) {     //read from socket
                    out.write(aByte);     // write to pipe`
                    // read the byte from the pipe
                    to.write(in.read());          // write it to the output socket stream
                    to.flush();
               to.close();
               from.close();
               if(incoming != null) {
                    incoming.close();
                    incoming = null;
               if(outgoing != null) {
                    outgoing.close();
                    outgoing = null;
          catch (SocketException e) {
          // there is one for a closed socket. Seems to have no effect.
          //     e.printStackTrace();
          catch (IOException e) {
               e.printStackTrace();
Here,when client gives any URL in the address bar in the web browser the request is forwarded to this proxy server.
We want to fetch the URL which client enters in order to implement content filtering and also store the most visited sites by each user .
But we don't know how to fetch the URL from the socket input or output stream.
Can you suggest any suitable solution for the same??

Shailesh24 wrote:
We want to fetch the URL which client enters in order to implement content filtering and also store the most visited sites by each user .
But we don't know how to fetch the URL from the socket input or output stream.
Can you suggest any suitable solution for the same??Yes. Write a proxy server that actually speaks HTTP.

Exclude a Resource from scope of control of a Admin role??????

Hi,
I need to exclude a resource from the scope of ADMINROLE for a particular form. This i m able to achive by Admin role form. but i need to do this in backed .(not through that form). I am able to create Admin Role in a workflow .I m even able to addign controlled Sub organisatons,member organisations,capabilities.But can anyone tell me how to limit the scope of control of a Resource of a particular organisation under his control.i.e Exclude or Include Resources for this child organisation from a workflow.
Any help will be highly appriciated.......
Thanks and Regards,
Ashi

The site swallowed my first reply to this. Attempt 2.
nantucket wrote:
AndrewThompson64 wrote:
nantucket wrote:
..Where the method getCodeBase() of the Applet instance returns the url of the directory from which the applet originated.No. It is the URL of the codebase. ......I made my response based upon what I saw in the API
http://java.sun.com/j2se/1.5.0/docs/api/java/applet/Applet.html#getCodeBase()
public URL getCodeBase()
"Gets the base URL. This is the URL of the directory which contains this applet."So try the experiment. See where it leads you..
[http://pscode.org/test/codebase/applet.html] - two different (in the codebase) calls to the same applet.
import javax.swing.*;
public class CodeBaseApplet extends JApplet {
public void init() {
add(new JLabel(getCodeBase().toString()));
My wording may have been confusing. But I thought "which contains this applet" and "from where the applet originated" referred to the same thing.This is not the first time I have discovered JavaDocs that are misleading.
I generally don't work with the applet tag when I do develop applets as the tag has been deprecated for a number of years.Same difference with <object> (or <embed>). The codebase is the codebase, not the directory of any Jar (necessarily).
Think about it this way. An applet loads one Jar from my site, one Jar from yours, and another from any other site. What is the codebase then? (Answer: the codebase defined in the applet element.)
*OTOH it is quite typical to have the codebase point to the single directory that contains all the applet Jars - so often that advice is true. But the devil is in the details.*

Hide webpage link URL from browser status bar?

Anyone know how to hide webpage link URL from the browser
status bar with Dreamweaver CS4? So that when the mouse cursor
hovers over a link on a webpage, the URL won't be shown in the
browser status bar. This comes in useful for when I put my email as
a link on a webpage but I don't want to let my email address be
known prematurely. I prefer to do this through the Dreamweaver CS4
interface without coding, if possible. What is the easiest way to
hide link URL like this? Thanks.

More than the anal users. Many people use this information to
decide
whether they will click on the link. By hiding it, you remove
that
extremely valuable security information - for example, a link
tells you on
the screen that it is taking you to www.wachovia.com, but the
status bar
link tells you it's taking you to
www.iamahackersiteandwilldrinkyourmilkshake.cn
I don't think you want to remove that from your site, unless,
of course, you
are the webmaster for
'iamahackersiteandwilldrinkyourmilkshake.cn....
Murray --- ICQ 71997575
Adobe Community Expert
(If you *MUST* email me, don't LAUGH when you do so!)
==================
http://www.projectseven.com/go
- DW FAQs, Tutorials & Resources
http://www.dwfaq.com - DW FAQs,
Tutorials & Resources
==================
"joeq" <[email protected]> wrote in message
news:gib1tf$kn7$[email protected]..
> it can be done - Behaviors > Set Text > Set Text
of Status Bar.
>
> do what you want, but know that it's somewhat unreliable
(see the caveat
> in
> the DW Behavior box) and that some anal users will
object to the masking
> of
> your links.
>
>
>
quote:
Originally posted by:
ghost zero
> Anyone know how to hide webpage link URL from the
browser status bar with
> Dreamweaver CS4? So that when the mouse cursor hovers
over a link on a
> webpage, the URL won't be shown in the browser status
bar. This comes in
> useful for when I put my email as a link on a webpage
but I don't want to
> let
> my email address be known prematurely. I prefer to do
this through the
> Dreamweaver CS4 interface without coding, if possible.
What is the
> easiest way
> to hide link URL like this? Thanks.
>
>
>

Hide URL from Status Bar

Hi,
Is it possible to hide the URL from the browser status bar when the mouse moves over a link AND once the link is clicked to hide the URL from the address bar as well ??
Thanks for any input,
Regards,
Brandon

More than the anal users. Many people use this information to
decide
whether they will click on the link. By hiding it, you remove
that
extremely valuable security information - for example, a link
tells you on
the screen that it is taking you to www.wachovia.com, but the
status bar
link tells you it's taking you to
www.iamahackersiteandwilldrinkyourmilkshake.cn
I don't think you want to remove that from your site, unless,
of course, you
are the webmaster for
'iamahackersiteandwilldrinkyourmilkshake.cn....
Murray --- ICQ 71997575
Adobe Community Expert
(If you *MUST* email me, don't LAUGH when you do so!)
==================
http://www.projectseven.com/go
- DW FAQs, Tutorials & Resources
http://www.dwfaq.com - DW FAQs,
Tutorials & Resources
==================
"joeq" <[email protected]> wrote in message
news:gib1tf$kn7$[email protected]..
> it can be done - Behaviors > Set Text > Set Text
of Status Bar.
>
> do what you want, but know that it's somewhat unreliable
(see the caveat
> in
> the DW Behavior box) and that some anal users will
object to the masking
> of
> your links.
>
>
>
quote:
Originally posted by:
ghost zero
> Anyone know how to hide webpage link URL from the
browser status bar with
> Dreamweaver CS4? So that when the mouse cursor hovers
over a link on a
> webpage, the URL won't be shown in the browser status
bar. This comes in
> useful for when I put my email as a link on a webpage
but I don't want to
> let
> my email address be known prematurely. I prefer to do
this through the
> Dreamweaver CS4 interface without coding, if possible.
What is the
> easiest way
> to hide link URL like this? Thanks.
>
>
>

How do I excude a specific folder from Endpoint Protection scans on *ANY* drive?

I see this question come up over and over again, and I still have not managed to find a straight answer. Sure hope someone here can help. I am in a situation where I have the same exact folder name on multiple random drives that I need to exclude from Endpoint
Protection client scans. So for example here is what I need to exclude:
C:\MyFolder
D:\MyFolder
E:\MyFolder
F:\MyFolder
G:\MyFolder
H:\MyFolder
J:\MyFolder
Z:\MyFolder
I have tried the following with no success:
*\MyFolder
*:\MyFolder
How to I tell Endpoint Protection to exclude "MyFolder" across the board on every drive letter? Can it be done with wildcards?

Sorry, but it can't be done. Real-time protection doesn't honor wildcards used for drives or folders (though it will honor a wildcard for a file name if it is part of a full path. C:\Example\*.log for example) The documentation is sparse for SCEP, but it's
mentioned in this old blog post for FCS and still applies:
http://blogs.technet.com/b/clientsecurity/archive/2012/12/03/3317660.aspx
The reason is that it's inherently less secure to be able to add such broad exclusions, so they don't make it easy. The best you can do is one exclusion per drive letter as you have above.
Well thats at least an answer! Heh, I can live with that. So I just need to try and collect a list of drive letters where those folders are present and add them one at a time then? To excluse everythign underneaht that folder can I just add the folder path
like so:
C:\MyFolder
Or do I need to do somethign like this instead:
C:\MyFolder\*.*
What's the "right" way to do this?

Redirect to URL from PL/SQL

Hi,
I'm trying to redirect to a url from an Application Process using
DECLARE
l_url varchar2(2000);
BEGIN
select APEX_UTIL.PREPARE_URL('f?p=&APP_ID.:10:&SESSION.:DELETELINE:&DEBUG.:RP:P10_ORID,P10_ORDID:&P10_ORID.,&PP10_CCODE.') into l_url from dual;
htp.init();
owa_util.redirect_url(l_url, true);
END;The above process is called with javascirpt using ajax. This successfully deletes the item i want but first it returns this error
(<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> and second it doesn't refresh the page.
I'm using prepare_url since Page Protection is enabled with Arguments Must Have Checksum.

Solutions:
i) Use the Javascript inside the Pl Sql .,
sample Code:
declare
l_count number:=0;
begin
select count(*) into l_count from usermaster where usertypeid in
( select usertypeid from usermaster where usertypeid !=1 and Userid=:P9_USERID);
if l_count > 0 then
return true;
else
htp.p('<script language="javascript">');
htp.p('window.location ="http://localhost:8080/apex/f?p=2234:8:&SESSION.::NO::"');
htp.p('</script>');
return false;
end if;
end
that's all
All the best...
Udayakumar
Edited by: 872464 on Sep 29, 2011 5:59 AM

Open URL from a report

Hi, I need to make a connection to URL from a report. Is it posible? thanks.

hi jose,
please try the following.
CALL FUNCTION 'GUI_RUN'
EXPORTING
command ='IEXPLORE.EXE'
PARAMETER ='WWW.YAHOOMAIL.COM'.
CD =
IMPORTING
RETURNCODE =
and if u want hyperlink then,
*REPORT ZURL NO STANDARD PAGE HEADING.
DATA: BEGIN OF URL_TABLE OCCURS 10,
L(25),
END OF URL_TABLE.
URL_TABLE-L = 'http://www.lycos.com'.APPEND URL_TABLE.
URL_TABLE-L = 'http://www.hotbot.com'.APPEND URL_TABLE.
URL_TABLE-L = 'http://www.sap.com'.APPEND URL_TABLE.
LOOP AT URL_TABLE.
SKIP. FORMAT INTENSIFIED OFF.
WRITE: / 'Single click on '.
FORMAT HOTSPOT ON.FORMAT INTENSIFIED ON.
WRITE: URL_TABLE. HIDE URL_TABLE.
FORMAT HOTSPOT OFF.FORMAT INTENSIFIED OFF.
WRITE: 'to go to', URL_TABLE.
ENDLOOP.
CLEAR URL_TABLE.
AT LINE-SELECTION.
IF NOT URL_TABLE IS INITIAL.
CALL FUNCTION 'WS_EXECUTE'
       EXPORTING
            program = 'C:\Program Files\Internet Explorer\IEXPLORE.EXE'
            commandline     = URL_TABLE
            INFORM         = ''
          EXCEPTIONS
            PROG_NOT_FOUND = 1.
IF SY-SUBRC <> 0.
     WRITE:/ 'Cannot find program to open Internet'.
ENDIF.
ENDIF.

Can I exclude places.sqlite from time machine backup?

Hi,
Just looking at the time machine backup and raised a question about the repeated backup of places.sqlite in "~/Library/Application Support/Firefox/Profiles/xxxxxxxx.default/", I am wondering if I can exclude this file from my backup or even exclude Profiles from my backup?
What would this affect my backup? Are these all essentials?
I have looked into this page and understand what places.sqlite does. However, what don't know is if this file is missing, does Firefox produce one automatically?
Or say, if each of my places.sqlite in the prevoius backups was like 90MB, how much size would them really take in the storage?

Alvyn wrote:
Thus, I am thinking if this "places.sqlite" thing is there every hour putting around 100MB to my time capsule, quickly my time capsule will be depleted.
No, that's very small.
Is there any way to do something like trimming time points from time capsule?
Under normal circumstances, you shouldn't have to. TM automatically "thins" (deletes) backups every time it does a new backup, on the following schedule:
"Hourly" backups after 24 hours (except the first of the day, which is a "Daily" backup).
"Daily" backups after a month (except the first of each week, which is a "Weekly" backup.)
"Weekly" backups are kept until TM needs the space for new backups; then one or more of the oldest weeklies will be deleted.
So after a month, even if you do an hourly backup every day, and that 100 mb file is changed and backed-up +*every time+* (not real likely), you'd have 54 backups (1 per day plus 24). That would take a total of 5.4 GB, small potatoes on any TM drive, and really not worth worrying about.
But if you want, you could delete all the backups of it. See #12 in the Frequently Asked Questions *User Tip,* also at the top of this forum.

Can not copy a URL from the address bar/line

Why is it proving so difficult for me to copy a URL from the address bar using Safari? When I click on the link I want to copy, it does not highlight. I have used Command L and Command C, and that works but there has to be a simpler way. I also read that if I click the address bar once, then press the control key and click on it again that a menu would appear with cut, paste, copy. That does happen, but all options are greyed out, and not selectable. Another google search resulted in someone saying there was a button or arrow to click on and that this tool would copy the URL.
The URL I am copying is very long, longer that the address bar window
What Gives Here?

Click the icon (favicon) to the left of the URL.
That will select the entire URL.
Command C will copy the URL.

How to do Handshake with tired party(bank) HTTPS URL from SAP PI server

Dear Expert,
I have developed bunch of scenarios, all are synchronous ABAP proxy to HTTP_AAE with bank on PI 7.4(dual stack). Bank web server is HTTPS enabled server. Our ABAP developments are still in progress also we have few issue in connection from ECC to PI.but that is not the focus of discussion here.
we want to do the handshake to check the connectivity with bank on their HTTPS URL from PI. Bank has provided the privet key for SSL from their server and corresponding public key they have maintained on their server. I have imported the private key under NWA -> Certificates -> Key Storage -> TrustedCA->Import Entry->Entry Type->PKCS#12->select the SSL.p12 file->import , also I have selected the option to "Use SSL" in HTTP_AAE receiver communication channel and selected the corresponding entryin "keystore view" and "keystore entry". All these I have done in our DEV system, and we are trying to connect our PI dev to bank Dev server.
Questions
Is there any specific steps to do the handshake with third party HTTPS(bank in my case) server? if not, how can we just test the HTTPS connectivity by using the SSL private installed on our PI server, without running the complete scenarios. Our PI has been installed on UNIX, and "telnet https url 443" is working, as network team has opened the HTTPS port.
We have not enabled the SSL technically on our PI server, and we have not installed any generated certificate from our PI server. Moreover, we have not made our PI url as "https:hostname:port" as we just need to communicate with bank by using their private key. Do you guys think we should enable the SSL? if yes, please explain why.
What is the best practice to test the connection with third party having HTTPS URL? how can I just assure HTTPS communication is working fine, before testing my actual scenarios.
Thanks for helping always.
Regards,
Farhan

Hi Farhan,
Some part of the blog is applicable for sending HTTPS request to partners/third party (Receiver SOAP Adapter).
If banks certificates are already in trustedCA, then, can you check if it also imported under user PIISuser under Identity management in NWA. If above 2 steps are done then i think your are good to go. But be careful when you install certificate, it should be in proper order.
As you already mentioned, connectivity is already established and you are able to PIng/telnet from pi server, connectivity looks ok.
While sending request, if you are getting 401 unauthorized, below might be the reason -
1. Certificate not installed correctly or some missing steps
2. Partner or TP is not ready to receive it, some certificate issue in there side.
other than 401 means you are ok (As per certificate and Connectivity) - 403 and 500 errors are next stops.
403 - error because of encoding method.
500 - data issue.
Regards
Aashish Sinha

Exclude a url from a protected ressource

Similar Messages

Maybe you are looking for