External Authentication won't correctly set USER name or Role

I am using JAVA under Google App Engine for my backend and attempting to log a user into a room using external authentication. I can connect and get into the room just fine my issue is with the user infomation once I am logged in. The user has a null username and ID (possibly generated) and thier role is set to zero (or at least not high enough to publish). If the room is set to auto-Promote then I do have the ability to publish (this is what I would expect) but still I needed the user to have a role of owner (so they can create nodes).
Here is a little of the java on the back end (I removed my shared secret):
public String getRoomToken(String roomID, String userName, String userID, int userRole)      {
           try {               
                         Session session = am.getSession(roomID);
             return session.getAuthenticationToken(..., "Bob", "TestID", 100);               
                         //return session.getAuthenticationToken(..., userName, userID, userRole);          
                      } catch (Exception e) {
               // TODO Auto-generated catch block
                               e.printStackTrace();
                    return null;
getAuthenticationToken is hardely changed from what is in the AFCS.java in the examples folder but here it is in any case
/**      * get an external authentication token      */
public String getAuthenticationToken(String accountSecret, String name, String id, int role) throws Exception
     if (role < UserRole.NONE || role > UserRole.OWNER)
         throw new Error("invalid-role");
        String token = "x:" + name + "::" + this.account
         + ":" + id + ":" + this.room + ":"+ Integer.toString(role);
        String signed = token + ":" + sign(accountSecret, token);
        // unencoded      
               //String ext = "ext=" + signed;       
               // encoded
       String ext = "exx=" + Utils.base64(signed);
       return ext;
This should work. My Shared secret is removed above but I doubt that is the problem as my app does authenticate just fine it just throws an exception telling me I don't have the required permissions to publish when I try to do anything. while observing from the DevConsole I see a user in the room but they are marked as null. Note that non-external authentication works just fine. If I hardcode my login creds in AdobeHSAuthenticator I can get in just fine with no issue. Also if the room I get an authenticationToken for does not match the roomURL I connect to with ConnectSessionContainer I will fail to login correctly like I would expect. So I know my credentials are getting to the AFCS and being decrypted correctly (as I can only authenticate for the room I send in that credential token) but for some reason it simply won't set my role and username/userid correctly.  Any help would be great, this has caused me a great deal of grief for days now...
Thanks guys...
Ves

Well this is wierd I was trying to set this up so that I could get the log output on that run and I ended up changing
<rtc:AdobeHSAuthenticator id="auth" authenticationKey="{Application.application.parameters['token'] as String}"/>
to
<rtc:AdobeHSAuthenticator id="auth" authenticationKey="{token}"/>
and adding a preinitialize function of:
protected function preInit():void
            templateID = Application.application.parameters['room'];
             token = Application.application.parameters['token'];
oddly enough it now works like a charm now. It is still disconcerting that I was able to actually enter the room even though my token was somehow corrupted (that probably isn't intened behavior). If this shows up agian I will try and track down the particulars and send you guys an email as an FYI. thanks for the help....
Ves

Similar Messages

  • TS3899 My email account has disappeared from my iphone4. No longer listed. Now won't accept my user name and or password.

    My email account has disappeared from my iphone4. No longer listed. Tried to set up new email account but now won't accept my user name and or password.

    Finally went to the Apple shop where a nice young man explained that I had to use the original password not the recently changed password - case sensitive too - and finally have installed the updated Adobe Flash player with no shaking! Maybe this helps you too. JL

  • Same select (user, name, profile, role, table_name, privilege table)

    hello Everyone
    1.- i don't know how to merge the two qys to see in the same select (user, name, profile, role, table_name, privilege table)
    Im using the tables usuarios and view dba_users : See next qry
    SELECT Nvl(US.IDUSUARIO,DU.USERNAME) USUARIO,
    US.DESCRIPCION NAME,
    ACCOUNT_STATUS STATUS,
    DU.PROFILE,
    CREATED FECHA_CREACION
    FROM USUARIOS US,
    SYS.DBA_USERS DU
    WHERE DU.USERNAME = US.IDUSUARIO(+)
    UNION
    SELECT Nvl(US.IDUSUARIO,DU.USERNAME) USUARIO,
    US.DESCRIPCION NAME,
    ACCOUNT_STATUS STATUS,
    DU.PROFILE,
    CREATED FECHA_CREACION
    FROM USUARIOS US,
    SYS.DBA_USERS DU
    WHERE DU.USERNAME = UPPER(US.IDUSUARIO)
    ORDER BY NAME;
    this extract me, USER, REAL NAME, STATUS, PROFILE, CREATION_DATE
    JP01 Johan Pena OPEN DEFAULT 05-07-2010
    on the other hand:
    select * from role_tab_privs
    this extract me, ROLE, TABLE_NAME and PRIVILEGE
    DBA TABLE1 SELECT
    DBA TABLE1 INSERT
    DBA TABLE2 DELETE
    1.- i don't know how to merge the two qys to see in the same select (user, name, profile, role, table_name, privilege table)
    2.-i want something like this.
    USER, REAL NAME, STATUS, PROFILE, CREATION_DATE ROLE, TABLE_NAME PRIVILEGE
    JP01 Johan Pena OPEN DEFAULT 05-07-2010 DBA TABLE1 SELECT
    JP01 Johan Pena OPEN DEFAULT 05-07-2010 DBA TABLE1 DELETE
    Ect Ect. Ect.
    who can HELP ME.

    I have part understood your requirement and assumed the rest! Hence, I have used dba_role_privs in addition to the list of tables you used.
    Also, I think your LEFT OUTER JOIN on sys.dba_users is incorrect. I think you are trying to get all users from USUARIOS table for which roles / privileges exist in the database. If that is what you want the following query should help out. If not change the LEFT keyword in the MAIN query (NOT the one in WITH clause) to RIGHT but the results might be unpredictable.
    Note: Using ANSI standard keywords for JOIN allows you to use functions in the JOIN clause (such as UPPER(column name), which the Oracle propreitary notation does not allow and hence made you opt for the UNION option).
    WITH OS AS
            SELECT
                 DU.USERNAME
                ,DU.ACCOUNT_STATUS
                ,DU.PROFILE
                ,DU.CREATED
                ,DRP.GRANTED_ROLE
                ,RTP.TABLE_NAME
                ,RTP.PRIVILEGE
            FROM
                sys.dba_role_privs drp
            LEFT OUTER JOIN
                role_tab_privs     rtp
            ON
                ( drp.granted_role    = rtp.role    )
            LEFT OUTER JOIN
                sys.dba_users      du
            ON   
                ( du.username         = drp.grantee )
    SELECT
         NVL (US.IDUSUARIO, OS.USERNAME)    USUARIO
        ,US.DESCRIPCION                     NAME
        ,OS.ACCOUNT_STATUS                  STATUS
        ,OS.PROFILE                         PROFILE
        ,OS.CREATED                         FECHA_CREACION
        ,OS.GRANTED_ROLE                    ROLE
        ,OS.TABLE_NAME                      TABLE_NAME
        ,OS.PRIVILEGE                       PRIVILEGE
    FROM
        USUARIOS US
    LEFT OUTER JOIN
        OS -- temporary result set created using WITH clause above
    ON
        UPPER (US.USERNAME) = OS.USERNAME
    ORDER BY 2 ;Edited by: VishnuR on Jul 5, 2010 8:44 PM
    Edited by: VishnuR on Jul 5, 2010 8:47 PM

  • How to set User Name in session?

    Can anyone tell me if there is an user name variable already stored in a session object to which I can assign the user's name? I usually do this by storing a variable in the session to hold that name. When I print the session object (I am using websphere) I get the following...You will notice that there is a user name field that has value anonymous....how can i change that to store the actual users name?
    Thanks in advance,
    jk.
    Session Object Internals:
    id : 1M12TXAPPYUZAJJJ4SS5IVY
    hashCode : 586456410
    create time : Sun Jun 30 15:17:38 MDT 2002
    last access : Sun Jun 30 15:17:40 MDT 2002
    max inactive interval : 1800
    user name : anonymous
    valid session : true
    new session : false
    session active : true
    overflowed : false
    session application parameters : com.ibm.servlet.personalization.sessiontracking.SessionApplicationParameters@385b1d5b
    session tracking pmi app data : com.ibm.servlet.personalization.sessiontracking.SessionTrackingPMIApplicationData@38581d5b
    enable pmi : true
    non-serializable app specific session data : {}
    serializable app specific session data : {}
    session data list : Session Data List -> id : 1M12TXAPPYUZAJJJ4SS5IVY next : LRU prev : MRU

    ok I did some more reading on the websphere literature and came to understand that the User Name indicated there was really set as part of an authenticated request from a secure page. And if the request was in an insecure page websphere automatically assigns "anonymous" to it.
    Security integration rules for HTTP sessions
    Sessions in unsecured pages are treated as accesses by "anonymous" users.
    Sessions created in unsecured pages are created under the identity of that "anonymous" user.
    Sessions in secured pages are treated as accesses by the authenticated user.
    Sessions created in secured pages are created under the identity of the authenticated user. They can only be accessed in other secured pages by the same user. To protect these sessions from use by unauthorized users, they cannot be accessed from an insecure page.

  • Time Capsule won't accept my user name and password for access - Help!

    Hi all,
    My Time Capsule seemed to stop working one day and I had to do a hard reset with the little button at the back. After that it worked and I restored my wireless network settings but now I can't access the Time Capsules hard drive with Time Machine.
    When I try to choose it as my Backup Disk in the Time Machine preferences it says "Enter your user name and password so Time Machine can access the file server "Our Time Capsule" (the name of my time capsule). However, every time I try to enter my password I get "Sorry, you entered an invalid username or password".
    I've already tried several resets of the Time Capsule and I've also tried logging on my computer as the Root user and changing my administrator account password back and forth but no go.
    Help! and Thanks.

    Norman & Harry,
    Consider the following:
    *_Time Capsule Keeps Asking Me For a Password_*
    It will be important to know what is going on, or what you are doing when it asks for the password. Is it asking for a password only when Time Machine attempts a backup? Consider this:
    It is NOT your username and password it wants when you try accessing the Time Capsule. (I know... it SAYS "username and password") But it means the Time Capsule's Name and Password.
    You will find that by launching Airport Utility.
    Select the TC on the left.
    Click "Manual Setup".
    Click the "Time Capsule" Tab.
    You will see "Time Capsule Name:" and "Time Capsule Password".
    Make sure “Remember password in keychain" is checked.
    That is the information you need to enter when it asks for "username & password."
    *I Don’t Remember What My Time Capsule Password Is*
    You can see what your current TC password is by going into Keychain.
    Open your Keychain and select "login" from the Keychains pane in the top left. Highlight "Passwords" in the Category pane from the lower left.
    Sort all the items by Kind. Note everything labeled "Airport...". How many do you have listed? There should only be one "Airport base station password" for each base station that you have active. Also, there should only be one "Airport network password" for each network you have created. If there are more than these, then delete all but the ones with the most recent Modification date.
    To see what passwords are being stored, double-click your Time Capsules' entry. A new window will appear.
    Put a check beside "Show Password". You may be asked for your own Admin password so enter that.
    Now the Password field will display the password you entered into Airport Utility for your Time Capsule
    *It Still Won’t Accept the TC Name and Password*
    Launch Airport Utility --> Manual Setup.
    Select "Disks" in the tool bar above.
    Click the "File Sharing" tab.
    Is "File Sharing" checked? It should be.
    What is selected beside "Secure Shared Disks"? If it says "With Accounts" or "With a Disk Password" then the system will ask you for a password every time it mounts the TC hard disk. If you switch it to "With Time Capsule Password" then use the password you designated earlier in the “Time Capsule" tab. It should only ask you once and then never again - because you had checked "Remember password in keychain".
    If you have made any changes then click "Update".
    Let us know if this resolves your issue.
    Cheers!

  • Won't open my user name

    when I turn on my computer it goes to the opening screen and when I click on my name a small windown pops up that has the "Applications" icon and says that it can't open my user name. it doesn't say why or how to fix it, just that it doesn't work. I just drove three hours home to my Apple store to have this thing fixed (I downloaded the new OS and it wouldn't turn back on) and since I'm literally typing this within the first 10 minutes of my computer being back I DO NOT want to have to drive home from school again and get this thing fixed. anyone know how to solve this issue?

    Oct 27, 2013 8:43 PM
    Safari won't open in my user name but as guest it will. I deleting some caches then my wi-fi hardware was missing, so I use my disk and reinstall lion.
    My safari won't open tried adding java no good. So some stuff from tried the different user it work. But want it to work again as in my user. I can find the com.apple.safari.plist I think I deleting it. How can I fix this.
    Mac desk top lion osx 10.7.5

  • New iMac won't accept admin user name or password..please help!

    hi there,
    I just bought an imac 20 inch. Now it started up all good then I installed leopard and all seemed well, until I tried to software update. It asked for Admin name and password. I provided these and it just said 'You need to type an administrator's name and password to update', as if I didn't type anything at all.
    Now I know my admin and password I am typing are correct as I can log out and on. So my next step was to re-install, but then I cannot do this without typing in admin and password which it just acts as if I don't write anything. I then tried to do the original disks holding 'c' then go to the password changer in 'utilities'...but wouldn't you know it it just crashes every time I open!
    I am stuck and very frustrated... any help would be appreciated. I saw similar topics posted but none that really fit...please help. Thanks.....
    PS- leopard kept on freezing on installation.

    It sounds as though your user has account has changed from an administrator to a regular user. You need to do some things in order to get you changed back to an admin.
    This should help you http://docs.info.apple.com/article.html?artnum=306876

  • How to set user name, password and other proxy settings?

    I use a Proxy connection: I have to set server and port, and user and password.
    With the browser: when I run firefox/safari I type user and password (server and port are given in internet option control panel)
    With skype (for example): I can type everything in skype settings,
    and with iTunes? I dont' know, help me! bye,s

    Hi,
    I came to see your thread know.
    The code is as folllows:-
    IUserMappingService umapser =(IUserMappingService)PortalRuntime.getRunTimeResources().getService(IUserMappingservice.KEY).
    IUser userid = request.getUser();
    IUserMappingData iumdata = umapser.getMappingData("SystemAlias",userid)
    Map map = new HashMap();
    try
    map.put("User","userid");
    map.put("mappedpassword","password");
    iumdata.storelogondata(map);
    catch(Exception e)
    response.write(e.getMessage());
    Thanks & Regards,
    Lokesh.
    Reward Points if usefull.

  • My computer won't remember my user name and p'word for my optuszoo a/c

    My autocomplete option is on and the service difficulties representative from optus was unable to help me.

    Cassie,
    "... I´ve tried removing my old network..."
    What exactly did you do? Did you remove it and your MBS does still not connect or didn´t you succeed to remove it?

  • Help: consuming an external web service with user name token

    Hello Together!
    I need to consume an external web service secured with WS-UserNameToken. The way, how did I do it:
    1. I generated a web service consumer (proxy) in SE80 from the wsdl file
    2. I created logical port for the consumer in SOAMANAGER
    3. I created security profile in WSSPROFILE with telpmate SET_USERNAME and assigned it to consumer operation in LPCONFIG  (I use LPCONFIG, because I didn't find any way to do it in SOAMANAGER)
    3. I called the web service and got the error back:  session token is missing or invalid or has inspired
    My questions are:
    1. is this possible to consume an external webservice in SAP, which is secured with WS-Usernametoken?
    2. do I need therefore any settings in java stack? do I need java stack in general?
    3. Is this any way to configure the consumer without writing programs, which set header parameter manually?
    4. if the answer on the third question is no, do you have any examples, how to implement session management in report? (I mean sending session id and checking the validaty of id)
    I appriciate any help of you!
    best regards Anna

    Hi,
    it should be possible to use WS-UserNameToken for consuming web service. It should be available on AS BAP 7.0 and higher. This profile should be under category Document authentication. You can try to dump a message send from SAP to see what is going out of SAP. This should be supported in ABAP so you don't need a Java stack. What exactly do you want to configure? Do you want to just set user name and password for that service which will be used for any calls of that proxy?
    Cheers

  • User names from Wireless LAN Controller

    Hi all
    I'm trying to get a report out of a Cisco 4402 Wireless LAN controller, showing all the current clients on a particular WLAN profile, with their user name.
    The Monitor -> Clients screen shows me all the MAC addreses, and I can filter by WLAN Profile Name to home in on the clients I'm interested in.  When I click on a MAC address for more detail, I can see the correctly populated User Name on the Client Properties screen - so the WLC definitely knows all the detail I need...
    Ideally I want spreadheet with a list of usernames of currently connected users (or even better, users that have connected over a time period).  I can't see any way to export this data without doing it manually (and I have 270ish clients at any one time).
    I've tried at the command line, with a "show clients summary", which at least gives me a table I can copy and paste into a spreadsheet, but again the username detail is only displayed with a "show clients detail MACADDRESS" - and the MACADDRESS field won't take a wildcard.
    I've also tried examining the log files, and setting up SysLog to a syslog server - but I haven't observed user names in any of the logs I've seen.
    The WLC is on version 4.2.176.0 - and doing an upgrade isn't very convenient at present - although I might consider taking the pain if a later release provides the funcationaility I need.
    Does anyone have any ideas on this one?
    Thanks!

    Dear Scott,
           I have some points to get clarified for step by step approach that has to be carried out during our downtime, or which is best option for this migration.
    Is that the WLC running different code will be able to join Mobility Group.  i.e. irrespective of Model and Code ?
    1. Do i have to create a mobility group and include the existing WLC and new 3 numbers of WLC , thus when i remove the Existing WLC from the Group the Ap will try to get assosiated with other WLC in the group.
    2. In WCS changing the Access point template configuring primary, secondary , tertiary Wireless LAN controller with New wireless LAN controller, during the down time this activity will be performed.
    Which method or way to proceed during the downtime. Looking for your expert view.
    Thanks .... Arun

  • Shared Services External Authentication using LDAP in 9.3.1

    Hi,
    I have installed Hyperion Shared Services with native directory. And now planning to setup external authentication using LDAP. I need some guidance to understanding how the external authentication works.
    Questions:
    1. Is it possible to setup Shared Services to use both Native and LDAP user directory? What I mean is some users will be able to login using Native directory, and some others will need to login using User Directory (external authentication).
    2. For User Directory (say we use LDAP), when the user is added into Shared Services, can they be assigned with Groups created in Native directory? We want to explore to use just the external authentication and define all of the groups within shared services.
    If not possible, can we manage the Groups of the User directory using shared services? How is the groups work with external authentication?
    Any feedback would be much appreciated.
    Thanks,
    Lian

    Hi,
    Yes you can use both Native and external authentication. When you add the external provider the native is left by defaut anyway.
    Yes you can add your external users to native groups. You can also provision the groups in the AD if you wish.
    Gee

  • Setting user picture

    I know this should be really, really easy - but it's just not working.
    On my new MBP (June 09), I can choose my account picture, and set it, but I still end up every time with my name in the menubar instead of the chosen picture - even after logging out or restarting.
    Am I missing something?

    anyway to replace the user name in the menubar with an icon?
    Yes, but it is a limited selection of icons. In "login Options" of "Accounts" system preference, you can set Fast User Switching' "View as" to "icon", but everyone gets the same icon. If you want a choice of icons, set it to "Name" (not "Short Name"). You can then set "User Name" to any icon from "Special Characters" in the "Edit" menu, such as"
    ☹ ☺ ☻ ❧ ❦ ♕ ♔ ♗ ♘ ♚ ♛ ♞

  • I am trying to set up the ipod to my email account and it keeps saying it won't work, even though we have confirmed user name and password.  Any advice?

    i am trying to set up the ipod to my email account and it keeps saying it won't work, even though we have confirmed user name and password.  Any advice?

    Try deleting the account from the iPod and try reentring all the information again.  A lot of times it is easier to reenter the information rather than trying to find and correct the error.
    Try Googling for how to setup the email account for your provider on an iPhone.  You can try for an iPod Touch but frequently that does not exist.

  • After I converted to OS5, the iCloud user name on my iPad is set to my email address, not my iCloud User ID.  How can I change it.  It's correct on my iPhone and MacBook.

    After I converted to iOS5, the iCloud user name on my iPad is set to my email address, not my iCloud User ID.  How can I change it.  It's correct on my iPhone and MacBook.

    You'll need to save the documents first from the incorrect iCloud account, sign out then sign in to the correct iCloud account and upload the documents to that account.

Maybe you are looking for

  • Dabase link while using copy command in Oracle 9i

    Hi, Is it must to have a database link while copying data between two databases in Oracle 9i using COPY command? I am using the copy command like following: SQL> copy from xxx/xxx@xyz to abc/abc@stu insert Table using select * from Table Database lin

  • Customer Attribute

    Hi Experts,            I have a strange issue here. I need to bring the Tax classification attribute for a customer from R3 to BW. Is there any datasource that can bring it or shld i go for generic datasources.. Please reply. Thanks in advance Dave

  • Updated my server to OS X Mountain Lion - and now I can't open pdf files, that my users share on wiki.

    Hi! I've updated my mac mini lion server to mountain lion server. I have an exentsive use of wiki in my education environment. Everything looks great, except, when uploading an PDF file to the wiki document folder I can no longer download the file -

  • How to Load data for Inventory Organizations

    Hi All, I have flat file containing data for following fields, Organization Code, Name, From(Date), Location,Org Classification ,Primary Ledger, Legal Entity, Operating Unit ,Item Master Org,     Material Account,     Outside Processing,     Material

  • Can I buy a new phone today and have it activated on 1/7/14

    Can you buy a new phone today and have it activate on jan 7th 2014