Forwarding credentials from j_security_check to EJB

I'm using the FORM based authentication on my web app to log in users...
I've defined roles on both web app and ejb jar files... The problem that I'm
facing is that the Principal is not being forwarded to the EJB Container to
validate authorization...
Should this mechanism me transparent? Or do I have to provide the user's
credential when creating my InitialContext? I hope I'm not too lost on this
one...
BTY, I'm using WLS6.1, the EJB is a very simple stateless bean and using the
default Realm. Also, I'm not using EAR files and the EJB is NOT a ejb-ref on
my WAR file
Thanks in advance,
Marcelo.

          Hi Aleksey,
          Please ensure that your error page jsp contains a page
          directive setting isErrorPage="true" as follows.
          <%@ page isErrorPage="true" %>
          This makes the implicit 'exception' object available to
          your jsp code in the error page. If you still have
          trouble and believe that the behavior is incorrect I
          would recommend that you open a support case with
          WebLogic support. Thanks.
          Regards,
          Tom Hegadorn
          Developer Relations Engineer
          BEA Support
          Aleksey Matiychenko <[email protected]> wrote:
          >I have the error page working on weblogic 6.1 with SP2 except when the error
          >is thrown in j_security_check. Then I still get redirected to the error
          >page by my exception object is null.
          >Any ideas?

Similar Messages

Cannot send or forward email from Apple products since last update

Since my last Apple update I am unable send or forward mail from my ipad or iphone. Because I can send / forward from my PC and webmail my email provider advises the issue is an Apple problem and that their tech support line has had numerous similar complaints. I have hunted through settings and on-line with no success to date. Any suggestions?

suggest you delete the mail account, then re enter it. But first, masker sure to check google for the current settings for their email set up. sometimes they change server names or ports. Existing accounts are not affected - but when you do a system update, the pad tries to initialize the account as new (as far as their servers are concerned) and if you are not using the current server names, it won't work. (You using yahoo by any chance?)

My phone has been working fine untill the other day. I can't receive forwarded email from my home computer?.

My phone won't accept forwarded emails from my home computer. Also when I go the my gmail account at work the emails arn't there eather, why and cane someone help with a suggestion?

Your iCoud account remains in iCloud even if your device is restored. (In fact, you can't delete an iCloud account from iCloud, you can only choose to stop using it.) If the device is restored, or it may no longer be signed into your iCloud account but your account will still exist in iCloud.

Get URL from within a Ejb-Container

Hi all,
I try to realize a WD-Application with Hibernate ORM. Now it seems , that from within the Ejb the hibnerate.cfg.xml couldn't be found.
No I try to read the URL from hibernate.cfg.xml. There I did some test with the getResource()-Function. At least I managed to get a URL from a zip-archive, but I'm not able to found the URL from something inside the archive, <b>and my configuration is in an archive!!!</b>
See the following tests:
URL myurl11 = cl.getClass().getResource("/"); //works
URL myurl12 = cl.getResource("/"); //works not! (without getClass())
URL myurl2 = cl.getClass().getResource("/version.txt"); //works
URL myurl3 = cl.getClass().getResource("version.txt");//works not (relativ)
URL myurl4 = cl.getClass().getResource("/apps/sap.com/dc~oracle~ear/src/java/src.zip");//works
URL myurl5 = cl.getClass().getResource("/apps/sap.com/dc/oracle/ear/src/java/src.zip");//works not
URL myurl6 = cl.getClass().getResource("/apps/sap.com/dc~oracle~ear/src/java/src.zip/de/pa/ejb/systeme/SystemeDao.java");//works not
URL myurl7 = cl.getClass().getResource("/apps/sap.com/dc~oracle~ear/src/java/src.zip/de.pa.ejb.systeme/SystemeDao.java");//works not
URL myurl8 = cl.getClass().getResource("/apps/sap.com/dc~oracle~ear/src/java/src.zip/de.pa.ejb.systeme.SystemeDao.java");//works not
As you can see with "myurl14" it works for a zip-file but not futher. How can I get Into an archive? Or even adress things relative?
Can anybody help me?
Thanks
Richard

Hi Joe,
Thanks a lot for ur reply,
But the LD_LIBRARY PATH is set to the user that runs the App Server, Since it is throwing a UnsatisfiedLinkError, there must be a problem with the link only(i.e calling native method).
The flow of data is as follows
1 A method from ejb calls another java method in an other java class which is in the same jar file,passing the actual arguments.
2 That java method calls the Native methos residing in the same class file
3 The Native mentod calls a c function as usual
My ejb is working fine up to the Native Method call, at this point it is throwing an error
All my java files are in a package, and my .h file contains package name in the prototype of c function
If you get any ideas please mail me ASAP
ThanQ
Kiran

Logging into app using credentials from database table and not APEX default

Hi,
I am new to this forum and also APEX, I have had a play around with APEX and liked what i have seen.
I am currently trying to change the log in process on one of my applications from the APEX default of Application login to a get the credentials from a table within my database schema,
Could anyone please point me in the right direction to find out how to do this please. either tutorials or guides would be good. or even better if u can talk me through it that would be great :)
Many thanks
J

I guess I am confused.. Do you want the users information to come from a table you develop where they would have to enter in a login id & password, or as your question seemed to ask, you don't want ANY login form, just a table that will determine who they are when they login?
I guess I jumped the gun.. If you want to have a custom authentication (One based upon your table) see this link: http://djmein.blogspot.com/2007/07/custom-authentication-authorisation.html
Thank you,
Tony Miller
Webster, TX

Reading data from file in EJB

I would like to read data from files in EJBS (Stateless Session Bean I think). I've heard that the EJB sepcifications don't allow to use the java.io package to access the filesystem. How can I resolve this problem? Possible solutions I've thought of are:
* Use a webserver to store the data
* put the files in a jar and access them using the getResource() in the classloader class
Could you comment on this plesae
greetings

The specification states:
"An enterprise bean must not use the java.io package to attempt to access files and directories in the file system.
The file system APIs are not well-suited for business components to access data. Business components should use a resource manager API, such as JDBC, to store data."
From this I understand I cannot acces files directly, but it does not specifiy I can't use the java.io package at all. It specifically says not to use the java.io package to acces files and directories, they don't say anything about using the classes for other use.
however, a litle lower the specification states:
"The enterprise bean must not attempt to create a class loader; obtain the current class loader; set the context class loader; set security manager; create a new security manager; stop the JVM; or change the input, output, and error streams.
These functions are reserved for the EJB Container. Allowing the enterprise bean to use these functions could compromise security and decrease the Container�s ability to properly manage the runtime environment."
I'm not sure how to interpret this, but I believe this rule makes my solution invalid.
Please comment on this,
thanks

Notification Forward issue from UWL

Hi All,
My requirement is to Forward Notification from the UWL which comes through R/3
I am using EP version: EP 7.01
Under notification tab after I click on the notification link a new pop-up screen is opened up. In the pop screen text area ,there
i put the user id to whom I want to forward Notification. But it's showing the error "Forward has failed" when click on the submit button.
Help me!!!!!!
Ajit

I meant to use email notifications in your workflow instead of sending out a notification to the workflow/UWL inbox.
So, at the workflow step where you create a notification, send an email to the user instead.
You will be simply notifying the end users via emails instead of notifying the users using UWL notifications.
If the user needs to forward the email notification, it should be pretty straight forward to just forward the email received from the SAP system.
Thanks,
Shanti

Can I forward emails from Mail to my work email when I'm there?

Is is possible to have incoming Mail messages forwarded to another email address when I am at work? It takes too long to log into the web and check my home email at work when I'm there. I have outlook at work and it's way better than Mail (IMO). Can this be done?

A rule is simply an automated action that occurs based on a set of conditions. The ability to make rules exists in just about all email applications including Outlook and Mail.
One of the things I like about Mail is that making rules is a lot easier than in Outlook. But, there's no way to make an email client forward email to specific location by just checking a box because application doesn't know which messages you want forwarded and to where to send it until you tell it.
Anyway, enough background....here's how to make a Rule in Mail:
-Open Mail and select Mail->Preferences from the menu bar.
-Click on the Rules tab and click the Add Rule button.
-Type a name for your rule, e.g. "Forward to Work"
-For conditions, select To and Contains from the drop-down menus, then type your home email address in the blank at the end.
-For actions, select Forward Message from the drop-down menu and type your work email address in the blank.
-Click the OK button.
That's it. Now all messages to your home address will be forwarded to you work address.

Authentication with credentials from another domain?

I've got an Apex app that I've built for a volunteer organization, and they have a non-Apex app built by another volunteer -- they are hosted on two different servers, two different domains.
Any hints/tips/ideas ideas on how to (securely) pass credentials from the non-Apex app to the Apex app so Apex is 'automatically authenticated'. I can easily pass the credentials in the URL (yuck) and add a before header process to manipulate the passed credentials and initiate the login process, or customize the authentication -- but I'm having a brain-freeze on how to do it securely.
Any suggestions?

thanks for the replies
scott -- name added to profile
the same user base uses both apps, so the same username (account name) will be registered in both apps-- the username is first assigned in the non-apex app, then manually added to the apex app
if the linking app needs to know the apex password, it will be up to the user to keep the passwords sync'd -- each app (apex and non-apex) has its own credentials store (nothing in common other than the internet)
yes, 'something' during the non-apex app's authentication needs to notify the apex app -- but that authentication is happening on noaccesstotheapexoracleserver.com, so it will need to pass some credentials in order to reliably inform the apex app that it has authenticated the user, or to insert a row in the database that apex is using -- and the only way it can get to that oracle database is through apex -- so it must pass credentials to apex in order to store credentials in the oracle database. or send them through a public page, which would then require some sort of hand-shaking between the apps
so, that's why i'm thinking of a home-grown 'trusted host' type of solution... something like:
<ol>
<li>Non-apex sends session request to apex, passing username and unique session request id
<li>Apex records request id, generates a unique response id, and sends both back to the non-apex app (using a predefined URL, not based on anything from the request -- i.e., it already knows who it should send the response to and can't be tricked to send a response to a spoofing app)
<li>Non-apex app verifies the response against its request record, than sends request id and response id back to Apex app
<li>Apes verifies the request/response pair, and authenticates the user based on the username (account name) passed with the original request.
</ol>
but, before i build this, i'm just wondering if there's something already out there -- and if i do take this approach, where are the holes that i might not be seeing

Is it allowed to make a rmi call from within an ejb??

Hello,
Am I allowed to make a rmi call from within an ejb such as:
String host = "localhost";
RemoteObject ro = (RemoteObject) Naming.lookup("rmi://"+host+"/MonServeur");
ro.myMethod();
package pack;
import java.rmi.Naming;
import java.rmi.RemoteException;
import java.rmi.server.UnicastRemoteObject;
public class MyRemoteObject extends UnicastRemoteObject implements RemoteObject {
    public MyRemoteObject() throws RemoteException {
    public void myMethod() throws RemoteException {
        System.out.println("toto");
    public static void main(String[] args) {
        try {
            RemoteObject ro = new MyRemoteObject();
            Naming.rebind("MonServeur", ro);
        } catch (Exception ex) {
            ex.printStackTrace();
}Is it allowed by the spec?
Is it good design?
Thanks in advance,
Julien Martin.

Allowed - yes
Good design - no, in my opinion.

Configure Oracle Metalink Credentials from Home page of DB console

OS:SuSE Linux Enterprise Server 8.
I have installed Oracle Enterprise Manager 10g (Oracle DB version: 10.1.0.2.0)
Now I'd like to configure Oracle Metalink Credentials from home page of console.
Because we have proxy settings I need to configure proxy setting or
My information security folk ask me to provide ip address & port number of http:\\updates.oracle.com.
The IP address of this site is 148.87.36.12.
What is the port no for this site?
Does any one resolve this issue?
Regards,
D

Hello,
proxy settings can be different. Our proxy server allows an open access the to interner, in principle you can reach every external website, although it is not allowed to surf just for fun. It seems at your site the opposite is true, websites you want to reach must be allowed explicitly. Therefore your security staff needs the IP adress, obviously it must be known to the proxy server.
There could arise another issue, in fact we have this problem. As just mentioned, our proxy server isn't restricted to certain websites,but password protected. You need to login before you can go to the internet. This isn't yet supported by oracle, so for this very internet access we had to raise this restriction, but the proxy server itself is still used. Orace says, 10g Release 2 will support such a configuration.
Werner

Reading credentials from CSF outside of OIM

Gurus,
I need to retrieve CSF credentials from an application which is outside of OIM/SOA.
Can you please provide some detailed steps to achieve the same?

Thanks for your reply.
But I followed these steps only.
I am trying to get these credentials from a java standlone environment.
I have updated system-jazn-data.xml with all necessary permissions.
But my job is failing saying permission denied.
Can you please let me know if I miss something to get these permissions?

How to forward alert from one user to another user and how to reject?

Hi everybody.
How to forward alert from one user to another user and how to reject and how to complete alert?
Regards,
Vinay.

What alert are you talking about? Which version of BOE / Edge do you use?

I can't forward emails from my hotmail account on my iPad.

Hi there. I'm hoping someone can help me. I can't forward emails from my hotmail account on my iPad. When I try to click on more it won't open up. Any ideas?
Thanks in advance

Try a Reset [Hold the Home and Sleep/Wake buttons down together for 10 seconds or so (until the Apple logo appears) and then release. When the screen goes blank then power ON again in the normal way.] It is 'appsolutely' safe!

RV320 - How to forward ports from WAN2

Hello,
I have 2 IP's on two different wan-ports. No i want to expose one machine from my LAN to the internet, on port 80 to do everything else with a reverse proxy. The other ip however must forward traffic from port 80 to a different machine:
<91.x.x.100>:80 -> forward to 192.168.0.20
<91.x.x.120>:80 -> forward to 192.168.0.110
I tried for two days now, and can't get it to work, here is what i tried so far:
One-To-One NAT from public ip to local machine - didnt work, i cant enter a wan ip address as public ip
Port Forwarding bound to a specific interface - Doesnt work, an interface is not selectable, although its stated in the docs
DMZ - Didnt work. Entered the local machines ip into the DMZ-Host field, set up the wan2 as DMZ with a correct ip, added access rules to the ACL, still no luck, all it did was, requesting both ips from outside, landed on the same machine.
I hope i didnt miss required information in this post, and hope that someone can give me an advice how to solve this.
Greetings
Nick

Was there any verification of this? I have an RV320 that we are attempting to use in the same fashion.
Our ISP is not capable of providing us with multiple addresses on the same network. So essentially we are stuck with 2 "isp's"
I know this issue could be resolved if we used another router, then set gateways on servers on the same network but I would prefer not to.
Wan1 - 198.xxx.xxx.205 - Forward to - Exchange 80/443/25/110
Wan2 - 198.xxx.xxx.146 - Forward to - Internal web app 80/443
Thanks for any help in advance!

Forwarding credentials from j_security_check to EJB

Similar Messages

Maybe you are looking for