Groupwise Webaccess Basic Interface via NAM (Access Manager)

Hi,
I have just setup Groupwise as a protected resource behind NAM (Access Manager), and it works great. The only issue is that I did not take account for the mobile users using the webaccess basic interface. What I think is a possible solution is to have a different URL for the basic interface along the lines of http://portal.website.com/gwbasic, but what I need to do is to be able to get webaccess at the backend to open in basic interface mode from NAM. Can anyone please give me some clues of what needs to be passed in the headers to get Webaccess to render the basic interface?
Thanks,
Mark Currie

Yeah I flipped a coin whether to post it here or in the NAM forum...I don't normally like to multi-post, but I think I will make an exception is this case as it concerns both products...I've been trying to capture the post from the webacc login screen to see if I can fool it without much success so far....Need to do SSO as their are quite a few line of business apps that are being NAM'ed. Thanks, Mark Currie

Similar Messages

BPC authentication via Tivoli Access Manager

Hello experts,
I'm now investigating BPC authentication mechanism with third vendor authentication software.
Is it possible to login to BPC v7.5 MS version via Tivoli Access Manager with 'Reverse Proxy' ?
And can BPC get a login-user information as a http-header from Tivoli Access Manager at this time ?
If the above situation is possible, can BPC utilize BO enterprise authentication with Tivoli Access Manager ?
Best regards,
Tatsuo Oba

SAP BOPC can use Reverse Proxy.
I'm not sure how you want to use Tivoli Access Manager with SAP BOPC?
It is very interesting to know also the reason you woudl like to use SAP BOPC in this way.
It can be a very nice case study.
BPC can not get information like an HTTP header and something like that it will be unsafe from security point of view.
Regarding your question:
BPC to utilize CMS authentication with Tivoli Access Manager
I think you have to provide more information? Why do I need Tivoli Access Manager to access BPC or to do authentication to CMS.
I have to mention I don't know how it is working Tivoli Access Manager and because of that I'm asking you to provide more information.
Regards
Sorin Radulescu

Oracle Access Manager 11g Basic with E-Business Suite

Hi gurus,
I was just wondering if anyone could tell me if the basic edition of Oracle Access Manager 11g is licensed for use with e-Business Suite 11i as a partner application? Or is it necessary to purchase the full license to use it with EBS?

925237 wrote:
Hi gurus,
I was just wondering if anyone could tell me if the basic edition of Oracle Access Manager 11g is licensed for use with e-Business Suite 11i as a partner application? Or is it necessary to purchase the full license to use it with EBS?You need a license for Oracle Access Manager. However, AccessGate is available at no charge to customers who have already licensed both Oracle E-Business Suite and Oracle Access Manager.
Oracle E-Business Suite AccessGate Release 1.0.2 Now Available
https://blogs.oracle.com/stevenChan/entry/ebs_accessgate_102
Oracle Access Manager 11.1.1.5 Certified with E-Business Suite 12
https://blogs.oracle.com/stevenChan/entry/oracle_access_manager_11_11
Oracle Access Manager 11.1.1.3 Certified with E-Business Suite 12
https://blogs.oracle.com/stevenChan/entry/oracle_access_manager_11_1
Please contact your Oracle sales representative (account manager), he/she is the best one to answer your license questions.
Global Pricing and Licensing
http://www.oracle.com/us/corporate/pricing/index.html
Thanks,
Hussein

Access Management Basic Questions

Hello, I have several basic questions regarding the access manager. Short answers are OK for me.
1) Is there a build in self registration process for end users
2) Where Access Manager store it's users data (AD, Ldap, Identity Server ? )
3) Does Access Manager come standalone or it rely in SUN IdM
4) Does Acess Manager has it's own workflow engine or can rely on IdM
5) What is the programming language XPRESS or any other.
Thank You !!!!

Hi Shivaram, thank you for reply.
Regarding the 4. What if I want to create the workflow for End User self registration, For example user must be approved by manager. Is this should be done by IDM? Does that mean that all self registration process will be moved to IDM?
Regarding the 5 ,I meant is there a possibility to write my own code which will expand the Access Manager capabilities .Like make some changes in AM user creation or deletion process? Sending notifications to end users etc. Is there any API or programming language for this?
Thank You!!!
Alex.

Problem with Access Manager intergration

Hi,
I'm integrating Identity Manager and Access Manager.
I've configured the End User interface to use Access Manager for authentication, and I have (as far as I can tell) everything else set up and working correctly. When I access the end user pages I get the following error:
Access Manager (Sun Access Manager Realm):Successfully authenticated '00000001' on resource 'Access Manager' and found a Lighthouse user with the same accountId, but no matching resource accountIdI've checked and confirmed that there is an attribute being passed in the header
'sois_user = 00000001'
And I have the following defined:
      <Attribute name='common resources'>
        <Object>
          <Attribute name='AM Resources'>
            <List>
              <String>Enterprise Directory</String>
              <String>Access Manager</String>
            </List>
          </Attribute>
        </Object>
      </Attribute>I suspect that it is the common resources that is failing, because its looking for an accountId that matches the DN of the account in LDAP rather than the LogonID. Can anyone provide pointers on how to resolve this?
All suggestions gladly received,
R

Michael,
Thanks for your help, I understand your answer. However, I am using the Access Manager realm adapter which the docs say can't manage users, so no account is being exposed there.
I have found the solution though and it involves a couple of steps:
Firstly, the sois_user value that is passed by the header has to be the DN of the LDAP account.
Secondly, I think the order of the accounts in the 'common resources' definition needs to have the LDAP resource defined first.
Finally, the Login group needs to have both the Access Manager and LDAP login modules.
With these 3 components in place, SSO to IdM works.
R

Policy Agent doesn't reset Sun Access Manager session time idle value

Hi,
We have the following setup in our environment:
- apache web server/web and policy agent 2.2 for apache 2.0.54
- webmethods portal server (jetty)
-Sun Access Manager (with Sun Directory Server)
We use policy agent for authentication purpose only (via Sun Access Manager/LDAP) when the users access the portal. We have custom code that creates session in Sun Access Manager for custom LDAP services. For testing purpose, we configure SAM session to have Max Session Timeout at 120mins and Time Idle at 15mins. I would assume that, after the initial login request, for all subsequent accesses to the portal the policy agent should intercept the request and reset the Time Idle value of SAM session. However, when I monitor time idle value using SAM console, session tab, the time idle value didn't change when the portal user access pages, submit actions, etc. I can see in the debug log of policy agent that requests are being intercepted/processed, but the time idle didn't get reset.
Does anyone know if this is a bug in configuration or in policy agent itself or am I making the wrong assumption?
Thanks a lot for the help.

Thanks for the reply, Shivaram. The issue appears to occur at random time, not accurately at the 3 min interval as you mention. I tested changing this value to 1, theoretically, after one 1 minute of idle time, accessing a link would make the agent reset the time idle value for the user session in SAM, but it didn't even after 3 minutes. This seems to be either a policy agent or system access manager bug.
We performed a 'vanilla' test using the apache server manual pages (only plain HTML, no POST requests), the pages are protected by the policy agent. At the first login, rwe were prompted to enter credential to be validated by SAM/LDAP, and then a user session is created in SAM session table. We browse around the manual pages, once in a while, certain pages cause the policy agent to reset the time idle. However, revisiting these links after a few minutes doesn't reset the idle value. Caching setting has been disable as well. Could there be or lack of some settings in AMConfig.properties or AMAgent.properties that might have caused this behavior?
Thanks for all your help,

VZW Access manager freezing MacBook Pro

I use VZW Access Manager to connect to the internet via bluetooth through my BlackBerry. I am using the latest version of the software. Sometimes VZW Access Mananger will freeze up after I have disconnected my phone. I've tried to force quit the application but it still displays the pinball when I try to reconnect via VZW Access Manager. The only way that I can completely force quit the program is to do a hard shut down. I've tried simply restarting the computer and shutting it down, but it freezes up when it tries to shut down/restart. Has anyone else experienced this?? Any suggestions?? Please help, it's starting to become really annoying! I purchased the MacBook Pro in November so it is relatively new....

Uninstall Virus Barrier don't use it again. ClamXav is free and won't bugger up your machine.
Uninstall your RIM software, check for updates/compatability with iTunes 11.
Run through this list of fixes 1-15.
Step by Step to fix your Mac
And make sure of your machines performance
Why is my computer slow?
Backup backup backup
Most commonly used backup methods

Tivoli Access Manager WebSeal & Infoview

Post Author: ab129001
CA Forum: Authentication
Is it possible to enable Infoview users to authenticate via Tivoli Access Manager WebSeal (a reverse proxy authentication product)?
Thanks in advance.
Andy

Post Author: jsanzone
CA Forum: Authentication
Andy,
It's my understanding that in order to achieve SSO w/ TAM running under WebSeal, that a Portal Integration Kit (PIK) must first be produced from BusinessObjects for the XI R2 platform. Back in early April 2007, before I knew about PIKs, I submitted a trouble ticket to Tech Support in the hopes of getting a "quick" solution, hence the PIK education lesson. In response to my request, tech support submitted an enhancement request for a WebSeal Portal Integration Kit, the Ticket number for the enhancement is ADAPT00755013. If you find out anything further on this situation, I'd be all ears!!

Can not access ASAs inside interface via VPN tunnels

Hi there,
I have a funny problem.
I build up a hub and spoke VPN, with RAS Client VPN access for the central location.
All tunnels and the RAS VPN access are working fine.
I use the tunnels for Voip, terminal server access and a few other services.
The only problem I have is, that I could not access the inside IP address of any of my ASAs, neither via tunnels nor via RAS VPN access. No telnet access and no ping reach the inside interfaces.
No problem when I connect to the interface via a host inside the network.
All telnet statments in the config are ending with the INSIDE command.
On most of the ASAs the 8.2 IOS is running on one or two ASAs the 8.0(4).
For the RAS client access I use the Cisco 5.1 VPN client.
Did anybody have any suggestions?
Regards
Marcel

Marcel,
Simply add on the asas you want to administer through the tunnels
management-access
http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/m.html#wp2027985
for asa5505
management-access inside
for all others if you have management interface management0/0 defined then:
management-access management
then you may need to allow the source , for example if RA VPN pool network is 10.20.20.0/24 then you tell asa that network cann administer asa and point access to inside, but sounds you have this part already.
telnet 10.20.20.0 255.255.255.0 inside
http 10.20.20.0 255.255.255.0 inside
same principle for l2l vpns
Regards

Multiple Top-Level Realms in Access Manager via AMconfig?

Is it possible to configure multiple top-level realms in Access Manager via AMconfig? It is not possible through the UI.

Hi!
How about this:
String adminDN = (String)AccessController.doPrivileged(new AdminDNAction());
String adminPwd = (String)AccessController.doPrivileged(new AdminPasswordAction());
adminToken = adminManager.createSSOToken(new AuthPrincipal(adminDN), adminPwd);
hth Chris

Access Manager Basic install (Weblogic Suite)

Greetings.
We want to install Access Manager but our customer has Oracle WebLogic Suite license, I understand that there is a restriction in that license and only Access Manager Basic is supported.
I don't know how to install Oracle Access Manager 11g only, because oracle oam 11g is bundled with Oracle Identity and Access Manager 11g. I don't want to install Oracle Identity Manager because there isn't included in the WebLogic Suite license.
Could anybody tell me how to install OAM 11g to comply with the OAM basic restrictions included in Oracle Weblogic suite.
Thanks
Ramiro Ortíz.

While installing Oracle fusion middleware suite, you'll get list of product to be installed, you can select only 'Oracle Access Manager' there to install only OAM.
regards,
GP

Groupwise Webaccess Via Blackberry Storm

Is it possible to connect to Groupwise Webaccess (6.5.7) using web browsing via a Blackberry storm?

tom,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

NEO4 Plat. -- Nvidia NAM (network access manager)

Hi everyone,
My motherboard documentation mentions that the board supports the Nvidia network access manager firewall. I have not yet installed the software for it. Is it a hardware firewall?
I have used ZoneAlarm for a couple of years, and have found it both simple and effective. How does the NAM compare?
Thanks,
DEM

i was wondering the same thing.....my board is sitting next to my desk, thursday is my day off so hopefully i can get her built than, but i was reading the book and noticed this too, i know it has something to do with the built in firewall...but otherwise not sure whatesle there is to it, i run norton internet secuirty for 3 years now with issues (built in firewall) so i suppose even with the nvidia active firewall i will still install norton of course for antivirus....

Cisco's AnyConnect Network Access Manager (NAM)

Hi dears,
I configurate EAP_FAST in Cisco ISE and want wired users authenticate from ISE. I install Network Access Manager Profile Editor and Cisco Anyconnect Security Mobility Client on PC. I configure Network Access Manager when i want to save as that I did not see the . \newConfigFiles folder. Then I did that: Organize’, ‘Folder and Search Options’, ‘Show hidden files, folders, and drives. but in this case i did see the network access manager folder.
I need a to install Cisco’s AnyConnect Network Access Manager (NAM) on PC. HOW I get this soft? I have a smartnet for ISE.
Which email address(to cisco) i must be write to get this soft?
Thanks.

You can download the Network Access Manager module from CCO. This link should work if you have a CCO account.
http://software.cisco.com/download/release.html?mdfid=283000185&softwareid=282364313&release=3.1.05160&relind=AVAILABLE&rellifecycle=&reltype=latest&i=rs
The file name will be similar to anyconnect-win-3.1.05160-pre-deploy-k9.iso. Just unzip the ISO with 7zip or Winrar and you will see the NAM msi file anyconnect-nam-win-3.1.05149-k9.msi.

AnyConnect + Network Access Manager (NAM) + Certificate

Hello,
I want to use Network Access Manager with Anyconnect.
I configured a WiFi network with EAP-TLS authentication.
The certificate used for EAP-TLS has the following EKU:
- clientAuth (1.3.6.1.5.5.7.3.2)
- emailProtection (1.3.6.1.5.5.7.3.4)
- msSmartcardLogin (1.3.6.1.4.1.311.20.2.2)
It works with Microsoft Wireless Zero Configuration.
With NAM, I have this error "No valid certificates available. Please insert a smart card or install a valid certificate"
If I remove msSmartcardLogin EKU, it works with NAM.
I can't remove this EKU because Smart card logon is used.
Why msSmartcardLogin EKU generates this error?
How can I resolve it?
Thanks a lot for your support.
Patrick

Hi,
I am having the same issue, but have noticed that every now and then the NAM will fail to detect the certificate 3 times then suddently in the NAM event log there will be a message that saying "“Enumerating certificate store 'user personal'.” and it would retrieve the local certificate for authentication.
Has anyone else experienced this problem? and knows the fix?
Regards,
JZ
anyconnect fails to detect the local certificate store about 3 time before “Enumerating certificate store 'user personal'.” And retrieves the local user certificate for authentication.

Groupwise Webaccess Basic Interface via NAM (Access Manager)

Similar Messages

Maybe you are looking for