Extracting username and password from security header

Hey all,
I'm writing a BPEL process that invokes two secured web services. One of them authenticates using Username Token and the other has a authenticate method in which the username and password are supplied as Strings. I have successfully propagated the credentials from the BPEL process to the web service using Username Token by doing the following:
1) I secured my BPEL process
2) I imported oasis-200401-wss-wssecurity-secext-1.0.xsd and from it created a variable of type Security
3) I added the security variable to the Header Variables for the BPEL process input
4) I added the security variable to the Input Header Variables for the web service's invoke operation
This worked fine. However, I need to be able to extract out the username and password and supply them as Strings to the authenticate method of the other web service. How can this be done? If it can't, what are some alternatives?
Environment:
JDeveloper 11.1.1.6.0
Thanks,
Bill

Hi Sri,
If I understand your steps correctly, I think the problem I'm having rests with the second step. I don't know how to get a hold of the username and password to assign to the local variables you mention. The BPEL process itself uses Username Token for authentication. These credentials need to be passed to the web services invoked within the BPEL process. If I assign the security header variable directly to the string output for the BPEL process, the string returned will be the complete XML security header, which includes the username and password. However, the security header variable itself doesn't expose the username and password directly. In other words, I can't expand the security header variable node in the dialog for editing the Assign operation and get to the username and password. I think one solution is to parse out the username and password from the complete XML security header using string operations (substring, index-within-string, etc). Also, regarding step 4, I'm not sure if passing the credentials in the header will work for this web service. I think the web service is expecting the credentials as parameters to its authenticate method.
Thanks,
Bill

Similar Messages

How to extract username and password from CRMOD

I have a requirement where i have make a jsp paget hru which user can upload doc in UCM and embed in CRMOD using Web Applet.But at the backend the UCM requires CRMOD username and password.How can i extract username and password frm crmod using java.

You can get this info from your ISP. This one may help.
Create a Broadband connection using PPPoE in Windows Vista and Windows Server 2008
Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows]
Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Webdynpro application taking MDM username and password from LDAP

Hi All,
I am working on EP-MDM integration.
EP-LDAP , MDM-LDAP and EP-MDM have been integrated.
The requirement is :
When we run a webdynpro application from EP , it should take the user id and password of EP user who is currently logged in.(which is actually LDAP user and also exists for MDM) without hard coding it.
The application will work according to the roles guaranteed to the user in MDM for eg: the user will be able to write into MDM only if he has read/write permissions in MDM.
Please tell how the application will fetch the username and password from the EP details.
Regards
Shilpa

Hi,
You need to set a trusted connection between the EP and MDM System.
And use the trusted connection JAVA API in the Web Dynpro to make a connection to MDM Repository. Trusted connection JAVA API will ask you only the username and not the password.
Regards,
Amol

HT204085 removing icloud username and password from old iphone

I sold a previously owned iPhone and the person who purchased it cannot create an iCloud account on it. He said my iCloud account is still attached to the iPhone. Is there a way to remove any iCloud username and password from the device?

Read here: http://support.apple.com/kb/TS4515.

How to know username and password from existing PPPOE broadband connection?

Hi All,
I am using windows server 2008 R2, and now I've used PPPOE broadband connection to connect the internet. what I am asking is how to know the username and password from my PPPOE setting, I have the requirement to create same setting in the difference machine.
thanks.

You can get this info from your ISP. This one may help.
Create a Broadband connection using PPPoE in Windows Vista and Windows Server 2008
Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows]
Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Loading the username and password from database when login to xMII

Hi
can you explain briefly about how to configure the netweaver for loading username and password from database when the user login to xMII via netweaver platform?
In xMII 11.5 we are configuring xMII itself? but in xMII 12.0 configuring by netweaver platform. if anyone know please explain step by step

I am sending you some java code, which you can use in JSP.
import java.sql.*;
public class connectOracle{
public static void main(String[] args) {
System.out.println("Getting Column Names Example!");
Connection con = null;
String url = "jdbc:oracle:thin:@172.16.0.21:1521:orcl";
String driver = "oracle.jdbc.driver.OracleDriver";
String user = "scott";
String pass = "tiger";
try{
Class.forName(driver);
con = DriverManager.getConnection(url, user, pass);
catch (SQLException s){
System.out.println("SQL statement is not executed!");
catch (Exception e){
e.printStackTrace();
}

Forgot username and password from the email iCloud chozhe not know forgot. purchase the product, all documents have. What to do?

forgot username and password from the email iCloud chozhe not know forgot. purchase the product, all documents have. What to do?

If you don't know your ID, you can try to find it as explained here: http://support.apple.com/kb/HT5625. If you don’t know your password you can reset the password as explained here: http://support.apple.com/kb/PH2617.

Trying to pass Login username and password from a non-Oracle Form

I have a form that I am trying to use to pass a login username and password to an Oracle form. The problem is I know Oracle 10g web reports can take login parameters in a URL, but I can't seem to figure out how to encode/hide it and have Oracle read it. I want to be able to hide the username and password (obviously for security) and I also want to be able to pass special characters... does anyone have suggestions? It seems even in Oracle forms there are some issues passing login info because I have built in parameter forms... I have given myself quite a headache either way! We are trying to upgrade from an old, old version of forms and reports and are trying to use as much orginal code as possible. It all works if I pass plain text user name and password... any help would be sooooo appreciated. By the way on the Oracle side I am still pretty much an infant developer... please talk slow and use simple words... ;-p
Thanks again for any help!
Va

...asking me to enter username and password on a non-secured website, or else thy will destroy my account. Is it legit ?
It is definitely a scam. Delete it immediately.
For more information, see this document:
Identifying fraudulent "phishing" email

Retrieve username and password from Portal in external appl.

Hi All,
I have deployed an web application containing jsp into OC4J. I have registered this application as an external application in the portal. I need to capture the username and password required for the external application in the jsp (deployed as web application) after the external application has been authenticated by SSO server.
Can i get it from the request or is ther any other way to capture the user credentials in the jsp of the external application?
Thanks & Regards,
SY

Actually if the JSP is registered as an external Application then it is the JSP itself that is doing the
authentication not the SSO server. The credentials are sent to the External Application either as HTTP
header entries or on the URL depending on the type of method chosen to submit the request. In an external
application the SSO server is effectively building the URL that would have come from the Login Page of the
application.
So in this case, if the application is being called as an external application, then they already have the
username/password. Else it would not be an external application.

Obtaining a Subjects username and password from a servlet

Ok probably an easy one for people out there. I don't even know if it is
possible.
I have a servlet that has BASIC authentication going on (lets say it's using
WebLogic 7.0 default security realm). From the servlet I need to explicitly
obtain the user's username AND password. I have no problem retrieving the
principal it's the password I can't get a hold of. I've tried all sorts of
things like:
javax.security.auth.Subject subject =
weblogic.security.Security.getCurrentSubject(); and then trying to get the
private credentials. No luck though.
Any ideas? Is it possible?
Mich

Thanks for the response Neil.
I need the password because my servlet is accessing a secure Web service.
When connecting to the Web service I need to provide the username and
password of the user (these are passed in String format) and I don't want to
have the user provide username and password again when accessing the
external Web service. So really I need to access the WLS security realm
(where my servlet is executing) to obtain the current user's username and
password. Will the default credential mapper in WLS give me the username
and password in text format...from the limited documentation I have read it
doesn't appear to. Is this correct?
Mich
"Neil Smithline" <[email protected]> wrote in message
news:[email protected]..
The password is not stored in the Subject. We do this to reduce the
risk of the password being snooped from WLS's memory. If you wish you
could write a LoginModule that puts the password in the private
credentials and then creates an authentication provider that uses that
LoginModule and make it part of the current realm.
In general there is no way to get the password from within WLS. The
passwords are stored in a salted one-way hashed format that is not
reverse decryptable except via exhaustive search.
Why do you need the password? If it is for a remote access can you use
the credential mapper?
- Neil
Michel Crichton wrote:
Ok probably an easy one for people out there. I don't even know if it
is
possible.
I have a servlet that has BASIC authentication going on (lets say it'susing
WebLogic 7.0 default security realm). From the servlet I need toexplicitly
obtain the user's username AND password. I have no problem retrievingthe
principal it's the password I can't get a hold of. I've tried all sortsof
things like:
javax.security.auth.Subject subject =
weblogic.security.Security.getCurrentSubject(); and then trying to getthe
private credentials. No luck though.
Any ideas? Is it possible?
Mich

Get DB Username and password from current connection

Hi folks,
I'm presuming this is something absurdly simple, i therefore offer my apologies in advance. my requirement is quite different from the very famous dynamic JDBC credentials example.
I'm using Struts on a 10.1.2 implementation. We have numerous Oracle reports that we wish to call from Jdev (through a report server call). To provide the credentials to the Report server I need to provide the DB connection's username, password and SID. This I intend to do in a helper class in my web module.
Is there a plain vanilla simple way of getting this done. I know "context.getApplicationModule().getTransaction().getConnectionMetadata().getUserName()" gives me the Database Username- just like that. Is there a similar way to obtain the password and SID as well. While getTransaction().getConnectionMetadata().getJdbcURL is also quite useful, how "for the life of me" do i get the password of the current DB connection (assuming I have an application module that is already connected). I basically wish to directly use connections from the application module directly without the need to manually specify/hard-code these credentials in my code.
I've searched the forums and haven't been able to get the answer I was looking for (that or I;m searching in the wrong areas). Any help would be GREATLY appreciated.
Cheers

Hey Timo,
thanks for that. I still have a couple of doubts.
One the nature of the application is slightly different. we use independent usernames and passwords which are stored in the DB (different from DB username and password). The request(for the report-server call) comes only after the user is authenticated. Like you rightly said it's not a good idea to store the password and I'm pretty sure that option is completely ruled out.
My questions is, given that the user already has an application module at hand which would mean he has a valid connection to "a" DB- (once again we have multiple DB scenario), I merely wish to use the information from the Connection that the application module is using to issue the request to the report server call. I take it the call to oracle reports server wouldn't accept a connect string, you necessarily have to provide the DB username/password and SID.
My question now, is there anyway to obtain the password(or merely point my report server to this without requiring to store it) from the application module connection.
I hope my query is clear, please let me know if what i'm saying needs to be clarified or doesn't make sense.

Cannot Remove Username and Password from Mail settings in WebLogic for 11g

I have changed my mail server settings in EM->BI->Coreapplication->deployments->mail from an SMTP server using authentication to one without. However, when I try to remove the username and password, then hit apply and activate changes, the UN and PW re-appear. Is there another place where I can force these items to be blank?
Thanks!

I found the mbean "BIDomain.BIInstance.EmailConfiguration" that contains an operation to change the credentials. I'm guessing this is what the EM setting is using. Unfortunately, the change credentials operation doesn't allow blanks for UN and PW. This is probably why the EM can't reset it. Does anyone know how I can reset the MBean?

How to access to SSO username and password from JPDK

Hello
Does anybody know how to access, from Java PDK, to SSO username
and password of user, currently connected to portal.
Thank's,
Tomaz Podbersic

The portal user's password is one way hash algorithm (MD5) that
cannot be reversed.
What you'll have to do is setup a "External Application" and
save an alternate username/password profile in that area. It
requires the user to first enter that data (but only 1 time) the
first time into that application.
===========================================
<HELP NOTE>
If anyone knows of an API to populate those tables when seeding
or creating the user names to also seed or create the "external
applications" user /pass this would be helpful.
============================================
JSP java code:
====================
PortletRenderRequest portletRequest = (PortletRenderRequest)
request.getAttribute (HttpProvider.PORTLET_RENDER_REQUEST);
ProviderUser myUser=(ProviderUser) portletRequest.getUser();
=====================
From this object instance you can get the user's name, and other
Portal session info. NOT password.
The External Application username & password is a bit more
tricky to get.
see:
SQL Login Problems

How do I delete my Twitter username and password from iPhone 4?

I upgraded to iOS5, and when i was setting it up I put in my username and password but I thought it was just for the App and not in the settings of the iPhone itself. Every time I delete the account under setting, it comes back! Why?
I do not have the official Twitter app, I use Echofon.
And every now and then my Twitter account comes back to the setting after i delete it. I really want it gone for good from the iPhone's setting.
Can you please help me? And please provide instruction, they would be greatly appreciated. Thank you!

Try this, I did it on an iBook that someone gave to me because it was slow.
1. Reboot
2. Hold apple key + s key down after you hear the chime. (command + s on newer Macs)
3. When you get text prompt enter in these terminal commands to create a brand new admin account (hitting return after each line):
mount -uw /
rm /var/db/.AppleSetupDone
shutdown -h now
4. After rebooting you should have a brand new admin account. When you login as the new admin you can simply delete the old one and your good to go again!
Apple stores wont reset it for you. Computer shops may charge you $50 to $200 trying to reinstall the Mac OS and failing at end.
NOTE: This will not work with the classic OS, only OS X.
What this does is tricks the Mac into thinking that OS 10.? was just installed. It will play the intro video and then guide you through setting up your new account.

How can I get the username and password from Oracle Forms to PJC !

Dear Sir,
I have username,password and push button fields in oracle forms. When user clicks the push button, I need to get username and password field contents to my Pluggable Java Program to authenticate the user trying to login. How can I get those text field contents to my java program..? Looking forward from you soon sir.
Thanks in Advance,
S Ramkumar

I tried that trigger but nothing reflects. I write that method in WHEN_BUTTON_PRESSED trigger.
In the form module I written,
Set_Custom_Property('BL.USERNAME',1,'NAME','');
Set_Custom_Property('BL.PASSWORD',1,'PASS','');
Implementation class of the push button I gave my java class file name.
In Java Code I tried register the form fields like,
public static final ID userName = ID.registerProperty("NAME");
public static final ID passWord = ID.registerProperty("PASS");
In Java Code I tried get the contents from registered properties,
public boolean setProperty(ID property, Object value) {
if(property == userName) {
System.out.println("Just I wish to see the name entered" + value.toString());
if(property == passWord) {
System.out.println("Just I wish to see the pass entered" + value.toString());
But even System.out.println() is working.
What's wrong with this code sir ???
Can you tell me How to register and get those field values in Java ?

Extracting username and password from security header

Similar Messages

Maybe you are looking for