General question on uning JAAS for webApp authentification

Hi,
I am new to the world of JAAS and its usage on securing web services like servlets on tomcat or ejbs on jBoss.
I want to write a loginModule that allows login via JavaCard. Therefore I want to use a challenge and response authentication mechanism, sending some random data to the JavaCard (challenge), sign it and return it to the Web server (response).
Programming the JavaCard was the easiest part. Now I am confused on some details of the JAAS authentication process:
Sending the challenge from the server to the client looks for me as a perfect job for a callback object. The object would be created on the server, filled with random and transmitted (via RMI?) to the client that activates it via its CallbackHandler, adds the signature and return it to the server.
Is this the way it goes?
Jan

We are trying to use roles such as GUEST and CUSTOMER using one principal
for each role.
However we find that this approach doesnt work and maybe someone can explain
why.
If in role (or principal) GUEST if have a permission say:
DummyPermission view
and in role CUSTOMER
DummyPermission view, update, create
If a subject has both "roles" i.e. both principals, the following happens:
Depending on the order of principals in the policy file a check
on DummyPermission create
will fail or succeed.
If GUEST is the first principal of course the check will fail. Unfortunately this
means the whole check will fail.
If CUSTOMER is the first principal in the policy file, the check for this principal will succeed and the whole check will proceed.
That is really strange and I would consider it a bug. Can anyone help?
and

Similar Messages

General question on SQL Server 2000 to Oracle 10g

Hello all,
I just have a general question on migration from SQL Server 2000 to Oracle 10g using SQL Developer.
How does it migrate Users with proper privileges from SQL Server to Oracle? Follow the interface steps? Or should the users be created on destination Oracle side?
Thank you.

Hi,
It depends which type of migration you are making.
For a 'Standard' migration when you migrate data a 'create user' statement is created as part of the migration and you will see this in the generated code.
If you are using the 'Quick' migration option then you need to create the Oracle user or use an existing user to receive the data.
Your best option is to review the documentation available from -
http://www.oracle.com/technology/tech/migration//workbench/index_sqldev_omwb.html
or directly from -
http://download.oracle.com/docs/cd/E12151_01/index.htm
and then get back with specific questions if this does not give you the information you need.
Review the chapter -
2. Migrating Third-Party Databases
in -
Oracle® Database SQL Developer User’s Guide Release 1.5
Regards,
Mike

Report Builder Question - OA AR Aging - and a general question

I'm sure this is the wrong forum for this question, but I thought there might be someone here who might be using Oracle Applications and Report Builder who'd be kind enough to help me out.
We've recently implemented Oracle Applications 11.5.10 and I have to use report builder to change the Accounts Receiveable Aging (7 bucket) to a 5 bucket report. I've already made some changes to the seeded "ARXAGMW.rdf" report, but I'm not a big Oracle Reports guy. I've stumbled through making some changes in various other reports. But this one is just plain nasty! :)
I was thinking that I could simply add buckets 6 & 7 to bucket 5, then just hide or delete the 6 & 7 buckets. But I'm not sure where to even start. Any help with this would GUARANTEE a Christmas or other holiday card this year! :)
I really want to keep this simple as possible, so any help would be very....helpful. :)
Oh, my general question is: Are there any resouces/books for Oracle Reports (Report Builder)? I feel so lost trying to modify existing reports, let alone creating new ones.
Thanks again!
Steve

Hi Steve,
I am working on the 7-bucket aging report and i want to add a new field in data model.
As the query is build dynamically, i have modified the function BUILD_CUSTOMER_SELECT to meet my requirements.
But the problem is that in the data model, the field is not present in my Grouping. and if I try to add the field in the Data Model query (Q_ Customer) section,
i get the following error: ORA-01789: query block has incorrect number of result columns.
The query is as shown below:
select rpad('a',50,'-') short_cust_name,
0 cust_id,
rpad('a',30,'-') cust_no,
rpad('a',500,'-') sort_field1,
rpad('a',40,'-') sort_field2,
0 payment_sched_id,
rpad('a',32,'-') class,
sysdate due_date,
0 amt_due_remaining,
0 days_past_due ,
0 amount_adjusted,
0 amount_applied,
0 amount_credited,
sysdate gl_date,
'x' data_converted,
0 ps_exchange_rate,
0 b0,
0 b1,
0 b2,
0 b3,
0 b4,
0 b5,
0 b6,
rpad('a',25,'-') bal_segment_value,
rpad('a',500,'-') inv_tid,
rpad('a',32,'-') invoice_type
, 'y' parent_cust --I WANT A NEW FIELD HERE TO BE VIEWED ON THE REPORT LAYOUT LATER
from dual
where 1=2
UNION ALL
&common_query_cus
Did i missed somthing 4 me to be able to add the field here?

General question about iTunes Match and multiple libraries

Hello to everyone,
I have a general question about the iTunes Match service, which is available since yesterday in my country (Italy). Currently my library situation is the following:
Computer A (desktop, Windows 7): "big" iTunes library (about 20 GB), at the moment not associated with my Apple ID
Computer B (MacBook Air 2011): "small" iTunes library (about 5 GB), associated with my Apple ID
At the moment, both my iOS devices (iPhone 4 and iPad 2) are synchronized with the smaller library on the MacBook Air.
Question is as follows: should I subscribe to iTunes Match, would it be possible to upload the "big" library (provided I associate it with my Apple ID) to iCloud while keeping my devices synchronized with the "small" one?
Ideally, at the end of the day, the situation should be the following: both iOS devices with music from the small library + possibility of downloading songs from iCloud (coming from the big one). Is this possible?
Maybe the question sounds stupid, but I want to be sure about this before paying for the service.
Thanks a lot.

Yes, you could also associate your larger library with iTunes match if you associated your Apple ID with it. However any purchases in the library made from another Apple ID will not be matched with iTunes much.
If both libraries are part of iTunes match, then all your devices will see all of the content from both libraries, which content you choose to have on those devices and which you have accessible via iTunes match is entirely up to you.

Where to direct a general questions about foreign films subtitles?

I recently purchased a foreign film "Break Ke Badd" from the iTunes store. Although, it didn't specify that it had English subtitles, I assumed it did. After the full download, I tried to watch it and there weren't any English subs. I contacted iTunes and they more than happy to refund the money back to my account. Now after a few weeks, the iTunes store DOES list Eng subs for this film. I don't want to purchase it again and have to contact iTunes for another refund...Therefore my question is, is there a general question contact one could use to find an answer to my question. Basically, to verify that this movie, indeed has English subs before I re-purchase.
Any info is appreciated!

Yes I know as the [https://support.mozilla.org/en-US/questions/ Questions] section is more for desktop Firefox support and the place I linked to is for "Firefox OS" support in English where some who are involved with it do post in it occasionally.
I would have moved that [https://support.mozilla.org/en-US/questions/962783 thread] to the "Firefox OS" English section, however I cannot as the [https://support.mozilla.org//questions/ Questions] and [https://support.mozilla.org/forums Contributor Forums] are not the same.

Camileo charging problem (solved) and a general question!

Hi all!
First of all, I was going to ask for help as to why the Camileo S10 was not charging (the orange light wasn't flashing), and I'd seen a few people with similar problems.
The solution?
Give the contacts on the battery a clean.
The insulation sticker that comes on it must leave some kind of residue on it, and it's enough to prevent charging. Now it's flashing away happily :]
So my general question was, is it possible/advisable to use the camera on the mains?
Rather than constantly draining and charging the battery during long shoots, I'd prefer to just leave it plugged in!
Thanks very much in advance!
Paul

Hi
I think the battery handling is always the same no matter what product it is
From time to time the battery should be recalibrated.
This means that the battery should be discharged fully and after then you should charge it again until the battery would reach 100%
I do this with all my batteries; mobile phone battery, digi cam battery and notebook battery.

Update on Bioinformatics WIKI, scripting challenges, and a general question

I am waiting for my site to go on-line at Oak Ridge National Labs (USA, Tennessee). Should be another week or so, maybe less.
When that happens, you will see a veritable explosion of scripting challenges in my wiki (Emerging Technologies->Bioinformatics.)
One general question in preparation for these challenges.
There are a number of standard bioinformatic programs that can be run interactively via the web at various sites, e.g. "BLAST" and "STRIDE".
Although these can also be run locally, this requires that you download large databases and keep them updated.
So here's my question to the scripting experts:
Are scripting languages powerful enough to submit queries to web pages and then use regex's to parse the html that is returned?
Bill Mann has used PERL to do some of the required regex parsing, but there is a lot left to do, and, his stuff only works when a perl program is invoking a bioinformatic program locally, not interactively.
If so, we all can do some beautiful stuff together , if anyone is interested ...

...my wiki on...
There is by it's very nature no such thing as MY WIKI, except you run your own wiki project in an exclusive mode. Which were...well ... unusual.
Are scripting languages powerful enough to submit queries to web pages and then use regex's to parse the html that is returned?
Yes.
anton

Delete scriptcode - General question: capacity limit of Acrobat Windows

Hello everybody,
I've got a general question to the capacity limit of Acrobat Windows.
I often make forms with
for instance the current one has 18 pages. Eleven pages have fields on it. (But some pages have only one field on it) The fields of one page to another are sometimes linked with script code. The file needs nearly 1 MB.
Usual I write the script code by a double-click on the field/ calculate/ custom calculation script. (Is this the right way?) Today it happens again that a field with script code lost the script code.
That's why I wonder whether there is a capacity limit of Acrobat Windows or whether I make mistakes. (This is only one instance of several where the form has his own life.)
Thanks in advance for helping me!

http://forums.adobe.com/community/acrobat/acrobat_scripting

SAP GRC Process Control - General Questions

Hi all,
We have the following general questions regarding SAP GRC Process Control:
1) Assume that we have set up 5 different SAP Connectors in Process Control. When you configured a specific rule and control and then, schedule the job for such control, how does the system (SAP Process Control) knows which back-end system needs to be accesed for such control?
2) In which language are the out-of-the box rule steps's script coded? In which different languages can those scripts be coded, what is to say, in which language can we code our own scripts?
3) How is the detailed flow between SAP Process Control and SAP Back-end system?
Many thanks. Regards,
Imanol

null

General Question re logical workflow (Multiple Products/Sales Teams)

Currently we are upgrading from a highly customized CRM environment developed in CRM 4.0. We are hoping to move to an out of the box solution with 2015.
But I have a general question. We are a service company with different sales groups for each of our products.
Currently we have customization for each service so a Sales person is assigned to a specific product for the customer.
So my question is, how is this handled out of the box. I am sure there are many many many companies in the same situation.
So say 10 products with sales group for each product.
Then a customer with multiple departments. Each sales group needs to contact the specific department.
So a customer could potentially have 10 different sales people contacting different people in the customers organization.
How do you know when someone has already made contact?
If we just look at the activities it is not very clear that contact has been made for a specific product.
Even with our customizations, there have been many situations where 2 sales people contact the same person at a clients office and we end up looking very unorganized.
Any thoughts or comments are appreciated.
If this is not the right place to post this type if discussion, please redirect me.
Thanks

As an example, for 37-minute sequence of footage (made up of multiple clips) it's taking 50 minutes to first export a non-self-contained, time-code-reader-filter-added Quicktime.
Did you render fully before you exported? That helps. But this is also a GOP format, and it takes longer to do pretty much everything, as it is a processor intensive format.
1) How much more memory would help this work flow go faster, and approx. how much faster??
None. RAM doesn't come into play here. PROCESSOR speed is all that matters. What will make it go faster is enabling QMaster to have Compressor access all cores of the processor. Or getting hardware to help with the compression, like the Compress HD from Matrox. But that only boosts encoding to H.264.
2) Has anyone else done this type of work-flow, and been able to do it more quickly? Is RAM the issue? Any suggestions for a more efficient work-flow?
RAM isn't the issue. Faster Processors, hardware boosting...converting the footage to ProRes before you begin editing...all help.
RAM isn't what is hindering you here.
Shane

Newbie question - general question about e-mail sync

Hi,
I have a general question about email sync and BlackBerry smartphones. Are there any devices that allow email syncing with a Microsoft Exchange 2007 system that do not require the BlackBerry Enterprise server?
Thanks; sorry if this has been asked before but I was unable to find it in the forums, documentation, etc. Everything I found assumes that for this kind of environment you will be using a BlackBerry Enterprise solution, but I can't assume.
Thanks again.
Solved!
Go to Solution.

Hi and Welcome to the Forums!
If the Exchange server has anything that faces the internet (OWA, POP, IMAP), then BIS can be used to handle email (only email...calendar and contacts require BES to sync OTA).
Or, a PC, inside the network (but with an internet path) and logged into the email server (using Outlook), can be left running, using the RIM Desktop Software's Desktop Redirector capability to forward messages to the BB.
Those are basically the options.
Hope that helps! Let us know!
Occam's Razor nearly always applies when troubleshooting technology issues!
If anyone has been helpful to you, please show your appreciation by clicking the button inside of their post. Please click here and read, along with the threads to which it links, for helpful information to guide you as you proceed. I always recommend that you treat your BlackBerry like any other computing device, including using a regular backup schedule...click here for an article with instructions.
Join our BBM Channels
BSCF General Channel
PIN: C0001B7B4 Display/Scan Bar Code
Knowledge Base Updates
PIN: C0005A9AA Display/Scan Bar Code

Business Objects Training -General Questions

Hi,
I am just Going through the Business Objects...had some few general questions.
1)What is the current Version on BO
2)Where does Crystal reports & Xcelsius fit in Business Objects
3)Does Power Center & Informatica are also included in Business Objects
Thanks

The latest version of Business Objects Enterprise is XI Release 3.1 Service Pack 2. There have been several fixpacks delivered on top of this as well.
Crystal Reports and XCelsius are tools to build Reports and Dashboards respectively. While XCelsius is suited for creating sleek dashboards with very aggregated data - usually less than 2000 rows per report, Crystal Reports can be used for reporting off data warehouses requiring reporting off large data sets.
Informatica Powercenter is a tool proivded by an independant vendor and is not a Business Objects Product. Business Objects Provides Data Integrator, which is pretty much as rugged as Informatica and provides all the functionalities of ETL(Extraction Transformation and Loading).

ConfigParser class and JAAS for WLS 6.1

I am about to implement JAAS authentication in a Java Swing client, talking to
EJBs deployed in WLS.
My question is whether the examples.security.jaas.ConfigParser class may be safely
re-used in my application, to read the .policy file?
The reading of the this file would appear to always be necessary, so I'm surprised
there's no standard library support from BEA or Sun to do this (or maybe I've
missed it...).
Thanks,
Martin

Yes, I get the WebLogic Principal based on the JAAS LoginContext (l is a
LoginContext object in the sample code):
// convert JAAS authenticated user to a Java Principal
Principal p = new
User(l.getSubject().getAuthenticatedUser().getName());
Mukul Joshi wrote:
>
Hi
We are using JAAS for authentication in WLS 6.1 SP2
I am using Authenticate.authenticate() for authentication in
the login(). I am not able to get the Subject from the
LoginContext. Has anyone been able to do this.
Also has anyone tried attaching the principal to the Session
after using JAAS for authentication. This will require calling
one of the weak() methods. But what is the best place to do this.
Should it be in the client code or the LoginModule. In the
LoginModule there will be additional problem of passing the
request/session.
Thanks
Mukul

I have a handful of general questions about Firefox OS as a consumer..

I couldn't find a better place to post this, so I'm trying on here.
I'm in the market for a tablet (high-end), and I'm holding off on getting an Android-powered one because of Firefox OS. However, I have some general questions and concerns regarding performance, software and hardware. Here they are.
1. Is the Firefox OS interface as responsive as a native experience on say an iPad or an Android tablet? (Is there any lag on swipes between screens, button presses, etc?) If not, will it be in the future?
2. Will I miss the Android marketplace or the Apple app store, being restricted to only HTML5 apps? Do you think this will become an irrelevant question as the HTML5 app ecosystem grows?
3. Do you think the quality of HTML5 apps will be inferior to those from existing app stores because they are free?
4. Will the Firefox browser be the only one available in Firefox OS? (i.e. will there be the option to use Chrome, Opera or any other browser if the user so wishes?)
5. Will Firefox OS include useful utility apps, such as an alarm clock, a calendar, a weather app, etc?
6. I read a lot, both on the web (news, video game reviews), as well as ebooks. Will Firefox OS on a tablet be a pleasant experience conducive to e-reading? (Will it include a good ebook reader app?)
7. Will there be a high-end Firefox OS tablet that is comparable in specs to the Nexus 10? (i.e. impressive screen resolution, powerful CPU/GPU, lots of inputs/outputs like USB, HDMI, microSD, etc) When do you think such a device might become available?
8. Would it be possible to flash Firefox OS onto say a Nexus 10 or other tablet or phone if one wanted to use it as their OS instead?
Thanks!

1. Depends on the phone but a avererage power android phone would likely cost the same as a high end firefox os phone.
2. HTML 5 is really the future of the web, I've heard that Firefox will let you package apps to be playable offline, but not sure if thats true.
3. I '''think''' Firefox OS may have paid apps that will be restricted to users who buy them.
4. I think Mozilla will be nice enough to let Google and Opera make browsers. Google let Mozilla do that with FF for android.
5. See the simulator https://addons.mozilla.org/en-us/firefox/addon/firefox-os-simulator/
6. too early to say
7. too early to say, but Foxconn (helps apple) makes some apple products, so yes in the future is see a high end Firefox OS tablet 2-3 years down the road.
8. not sure
NOTE: Please note that we are only contributors, we dont develop firefox os.
You can ask more on the IRC channel as there are likely devs there.
https://client00.chat.mibbit.com/?server=irc.mozilla.org

Searching for Webapps

Two questions regarding webapps:
1. Are there webapps avaiable besides those on the Apple website? Any specific sites to find them?
2. Is there a way to SEARCH the Apple collection of webapps? Browsing is great, but it would be nice to be able to search for keywords in the apps descriptins.

Every site I have seen for webapps have all the same ones as here at Apples site. Pretty much all that develop them know they need to get listed here at Apple for best chance of people finding them.
I know a search would be nice. However you can just use the search at the very top of every page here. Add "web apps" to the keywords you are searching. For example: "hearts web apps" and you will see what I mean.

General question on uning JAAS for webApp authentification

Similar Messages

Maybe you are looking for