-(Help!)Trying to have custom authentication against a NT domain

Hi! I'm pretty much new to sun one and setting up realms for an app server, but here is my problem: We are developing a web-app and need users to login in against the NT machine instead of a DB server or flatfile. I've developed a java.rmi class that can take a username and password and a domain and return a boolean, but I have no way to have Sun One 7 take that as an authentication. I'm trying to have the authentication for the realm hit my class instead of whatever default it goes to and have my class return the required object back... any suggestions? Anyone?
thanks.

Thank you, that worked. but I still can't get the server to reconize my roles. I have a role being passed into the PasswordLoginModule and I have it defined in the "web.xml" as a auth-constraint, but I get this in the log files:
FINE: Authenticator[]: Authenticated 'jeff.corbett' with type 'BASIC'
FINE: Authenticator[]: Calling accessControl()
FINEST: PRINCIPAL : jeff.corbett hasRole?: adminmember
FINEST: PRINCIPAL TABLE: {}
INFO: SEC1123: Audit: principal=jeff.corbett GET /XCSservices.jsp session=null DENIED
FINE: Authenticator[]: Failed accessControl() test
-if you have any ideas of what I may be missing, that would be a great help. Thank you again.

Similar Messages

Anybody done USERID/PASSWORD authentication against aWindows NT Domain

I think I'll have to write a C++ Program to the WinNT API to do it
(LogonUser). Then I'll wrap it with a service object for authentication. Has
it been done before? Or something similar? We want to validate users against
a WindowsNT Server DOMAIN.
-martin ([email protected])

Hi Martin & All,
Yes you are right, wrap the API in C++/C then write a PEX file for interface to Forté and use the method to invoke the WinNT API authentication. Do not forget to validate the return values from the methods. They are very crucial in handling exceptions etc., in forte.
I've done the same to provide the mail user authentication in MAPI API wrapper for Forté.
Is this what you looking for????
Regards,
Sivaram S Ghorakavi mailto:[email protected]
International Business Corporation http://www.ibcweb.com/
From: Martin G Nystrom
Sent: Wednesday, November 26, 1997 1:53 PM
To: [email protected]
Subject: Anybody done USERID/PASSWORD authentication against a Windows NTDomain?
I think I'll have to write a C++ Program to the WinNT API to do it
(LogonUser). Then I'll wrap it with a service object for authentication. Has
it been done before? Or something similar? We want to validate users against
a WindowsNT Server DOMAIN.
-martin ([email protected])

IPS30SP4 and PDC authentication against non-default domain

We are trying to get certificate authentication to work for a domain with a URL not equal to "/". At the moment the portal sends us right back at the default domain.<BR>
Is there any way around that?
Regards, Robert

Hi,
Can u explain the problem elaborately
Thanks,
Raj_indts
Developer Technical Support
Sun Microsystems
http://www.sun.com/developers/support"

Need help trying to have more than one delegate calendar display in iCal and on mobile devices

I have several calendars that are under my user name in Google. They all work as delegates and life is good.
I'm trying to set up the local school with a calendar for the sports schedule as well as a separate one for district events like school board meetings and would like to be able to add one for the holidays, exams and things of that nature. The sports calendar works but I can't figure out how to add the second caledar to iCal or my iPhone. It shows shared but doesn't appear as a possible delegate in iCal and will not load on the iPhone.
Google has the output to allow more than one calendar to display on a website but syncing at the level I want with the "i" apps isn't obvious.
Am I missing something? I really don't want one very cluttered master calendar for the school. Being able to turn on and off the various types of calendar will make it much easier to manage.

I have several calendars that are under my user name in Google. They all work as delegates and life is good.
I'm trying to set up the local school with a calendar for the sports schedule as well as a separate one for district events like school board meetings and would like to be able to add one for the holidays, exams and things of that nature. The sports calendar works but I can't figure out how to add the second caledar to iCal or my iPhone. It shows shared but doesn't appear as a possible delegate in iCal and will not load on the iPhone.
Google has the output to allow more than one calendar to display on a website but syncing at the level I want with the "i" apps isn't obvious.
Am I missing something? I really don't want one very cluttered master calendar for the school. Being able to turn on and off the various types of calendar will make it much easier to manage.

Online Help does not have "Customizing the Login Portlet" as claimed by Conf Guide

Hello
Portal 309 configuration guide claims that you can include a self-registration link in your customized login portlet. However, this does not exist in online help.
Does anybody know what is the link which I can use in m customized login portlet?
Thanks
Tam.
null

Here is the topic:
Installing and configuring the self-registration feature
You can enable users to create their own portal user accounts. However, first you must install the self-registration feature.
To install and configure the self-registration feature:
1.Start SQL*Plus and login to the database in which the Login Server is installed.
2.Create a schema. This schema will be used for accessing user administration objects on the Login Server. From now
on in this task we will refer to this as the user administration access schema.
3.In the user administration access schema, create a synonym for the Login Server SSO schema package
wwsso_api_user_admin. This synonym must be called wwsso_api_user_admin.
4.Grant Execute privileges on the wwsso_api_user_admin package in the Login Server SSO schema to the user
administration access schema.
5.If Oracle Portal and the Login Server are installed in different databases:
a.In the user administration access schema, create a synonym for the Login Server SSO schema package
wwctx_api_vpd package. This synonym must be called wwctx_api_vpd.
b.Grant Execute privileges on the wwctx_api_vpd package in the Login Server SSO schema to the user
administration access schema.
c.In the schema in which Oracle Portal is installed, create a database link to connect to the user administration
access schema.
6.Start a command line prompt.
7.Change to the portal30/admin/plsql directory of the directory in which Oracle Portal is installed.
8.Enter the following command:
UNIX:
selfreg.csh -s <portal_schema> -p <portal_password> -ua <sso_uadmin_schema> -c
<portal_connect_string> -dblink <sso_uadmin_dblink>
NT:
selfreg.cmd -s <portal_schema> -p <portal_password> -ua <sso_uadmin_schema> -c
<portal_connect_string> -dblink <sso_uadmin_dblink>
where:
portal_schema
is the database schema in which Oracle Portal is installed.
Default: PORTAL30
portal_password
is the password for the above schema.
Default: <portal_schema>
sso_uadmin_schema
is the user administration access database schema you created in step 1.
Default: <portal_schema>SSOUA
Note: You do not need to provide a value for this parameter if you specify a database
link for the dblink parameter.
portal_connect_string
is the connect string for the database in which Oracle Portal is installed.
Note: You need to provide the connect string only if you are running the script on a
different database.
sso_uadmin_dblink
is the name of the database link created in step 4c.
Note: You need to provide the database link only if the Login Server is installed in a
different database instance from the Oracle Portal installation. If you do not provide a
value for this parameter, it is assumed that the user administration access schema is
in the same database instance as Oracle Portal.
For example:
selfreg.csh -s myportal -p myportal -ua myportal_sso_ua -c orcl -dblink uadmin_link
9.Press the Enter or Return key.
10.Start Oracle Portal
11.In the Services portlet, click Global Settings. By default, the Services portlet is located on the Oracle Portal home
page's Administer tab.
12.In the Self-Registration Options section, select Enable Users To Log On Immediately if you want users to be able to
log on to Oracle Portal immediately after they create their own user account using the self-registration feature.
Note: If you do not select this check box, you will need to assign the user as an authorized user before he or she is able
to log on.
13.To expose the self-registration feature to users, you can customize the Login portlet to include a self-registration link.
null

Apex Custom Authentication Schema Page Sentry Error

Hi,
I am using Application Express 4.0.0. I am struggling with a strange problem while trying to implement custom authentication schema.
I declare a page sentry function 'page_sentry' which returns TRUE or FALSE based on certain conditions. My page_sentry is as follows:
FUNCTION PAGE_SENTRY RETURN BOOLEAN
IS
l_username VARCHAR2(512);
l_session_id NUMBER;
BEGIN
IF USER != 'APEX_PUBLIC_USER' THEN
RETURN false;
END IF;
l_session_id := wwv_flow_custom_auth_std.get_session_id_from_cookie;
-- check application session cookie.
IF wwv_flow_custom_auth_std.is_session_valid THEN
apex_application.g_instance := l_session_id;
l_username := wwv_flow_custom_auth_std.get_username;
wwv_flow_custom_auth.define_user_session(
p_user => l_username, p_session_id => l_session_id);
RETURN true;
ELSE
--redirect to login page using OWA_UTIL.REDIRECT_URL
END IF;
RETURN false;
END page_sentry;
And Cookie Name : _AUTH
At first, It always returned FALSE. I wasn't getting any error. However, even after forcibly returning TRUE from the page_sentry function the redirect was still not happening. I tried to look into what cookies were being set for the same and I found this:
Name: ApexLibErrorStack1
Content: page%3D1%3Cbr%20%2F%3EERR-1201%20session%20ID%20not%20set%20on%20custom%20authentication
I couldn't find any relevant help for this. Worst of it is I cannot set any cookie from the page_sentry function at all. Please help!

Hi all.
Can someone please help me out with the above issue. I am not sure if things are wrong at my end or is this an apex bug.
--Update:
The source of my problem perhaps lies in the manner in which I have configured my Oracle HTTP Server. When I disable port HTTP server on port 80 and run apex without it on default port 8080, the custom authentication schema cookie gets set.
Executing the following with Oracle HTTP Server:
OWA_UTIL.PRINT_CGI_ENV;
gives:
HTTP_COOKIE = ApexLibErrorStack1=page%3D1%3Cbr%20%2F%3EERR-1201%20session%20ID%20not%20set%20on%20custom%20authentication.; ORA_WWV_R1=%23ALL; ORA_WWV_R2=%23ALL; ORA_WWV_R3=%23ALL
And without HTTP Server:
gives:
HTTP_COOKIE = WWV_CUSTOM-F_1420403886791332_100=9625AAC49B9951D8;......
Did I miss something in my HTTP server configuration ?
Edited by: pc on Jan 2, 2012 3:15 AM

ISE and authenticating against Windows AD with RADIUS realm that is different from the Windows domain

Hello
We are in the process of evaluating the Cisco ISE VMWare appliance with a view to replace our existing FreeRADIUS installation as authentication provider for our wireless network and VPN service. As a part of this we are hoping to migrate our user authentication to Microsoft Active Directory - we have previously authenticated against a different identity store (not MS AD). Because of this legacy our Windows domain is not the same as our RADIUS realm name - the Windows domain is "win.mydomain" whereas we wish to allow users to authenticate using "username@mydomain" or even "[email protected]" as they are doing today. We are experiencing an issue where authentication requests with the format "[email protected]" will be forwarded to the Windows AD whereas authentication requests with the format "username@mydomain" will fail with the log message "User not found in Active Directory". We do not know if the ISE itself is validating the username and triggering this error, or if the error originates from AD. We suspect the that the ISE is not even asking AD because "win.mydomain" is the domain configured in "Active Directory" in "External Identity Sources".
Authentication requests against the AD without a realm are successful (that is, using only "username"). With this in mind we located a post on the Cisco support forums that described a process of proxying the request back to the ISE and strip the realm information, but this was specific for the ACS platform. We have attempted to implement this solution but it is still not working as we would have hoped, and we are not entirely certain where the fault might lie. We are currently using PEAP with MSCHAPv2 for authentication in our WLAN where the main problem is. We suspect that the "proxy-to-self" with realm stripping is an issue with PEAP.
Is there a supported method of achieving our goal, or should we abandon the ISE platform as our scenario is simply not supported?

Seems like your issue maybe related to DNS, when ISE receives the format [email protected], the dns request is failing. However, there is a setting for alternate UPN Suffixes that can be configured to include domain.com and student.domain.com.
Here is a windows article that should fix this for you. Once you get this updated please reboot ISE so it rejoins AD. Try your tests again.
http://technet.microsoft.com/en-us/library/cc772007.aspx
Thanks,
Tarik Admani
*Please rate helpful posts*

User authentication against LDAP - Non-AD

Hi,
We are trying to setup LDAP authentication against an LDAP, Oracle Unified Directory and below are the parameters of ldap.properties file:
ldapAuthentication.defaultRole = ROLE_AUTHENTICATED_PRINCIPAL
ldapAuthentication.enabled = true
ldapAuthentication.tryNextProviderIfNoAuthenticated = true
ldapAuthentication.stopIfCommunicationError = true
ldapAuthentication.url=ldap\://localhost:389/
ldapAuthentication.rootContext=DC=test,DC=com
ldapAuthentication.securityPrincipal=CN=Directory Manager
ldapAuthentication.securityCredential.encrypted=password
ldapAuthentication.keepContextPrefix=false
ldapAuthentication.isAD=false
ldapAuthentication.userAccountSearchKey=CN
ldapAuthentication.firstNameSearchKey=givenName
ldapAuthentication.lastNameSearchKey=sn
Still I am getting while I try to login to OIA as an OUD user:
WARN [UserManagerImpl] RbacxUser with username: 'cn=oiaadmin' not found
Please help

Hi Jcorker,
According to your description, you need to access the SQL Serve Analysis Services database which is configured as cluster for SQL & SSAS from another domain, right?
In SSAS we can use the solution below achieve the requirement.
1.Create new domain account and impersonate the web site with that.
2.Create local user account on the analysis service with same exact username/password as like domain account created in the previous step.
However, you cannot create a local account with the same name on both servers. I have tested it on my local environemnt, we can create the same local account with the same name on both servers. In your scenario, if DB1 and DB2 on different server, you can
create a local account with the same name on both servers. Please post the detail errors, so that we can make further analysis.
Besides, SSAS only allows users of the same domain or trusted domains and it does not allow users from any domain except from these two. You can configure the trust relationship between the domains.
http://technet.microsoft.com/en-us/library/cc961481.aspx
Regards,
Charlie Liao
If you have any feedback on our support, please click
here.
Charlie Liao
TechNet Community Support

SharePoint Custom Authentication

Hi,
There is a request from our customer that the SharePoint 2013 site can be accessed via two log in modes by the same user.
1. Via Custom Web Service which will authenticate and return True, password will not be shared from the web service where as authentication result will be shared. Based on the True status the user should be able to access to the SharePoint site.
2. Via Active Directory Account - using their AD log in id and password
For this request, is it possible to associate the same user through two log in modes.
How this Custom authentication should be set up ?
Please advise
Ready for Action

Look at the codeplex project in the link below
https://spcustomauthwtwitter.codeplex.com
it's already contains custom authentication providers against DB and twitter, you can use the same solution and add your own custom authentication against the client's webservice
Hope that helps|Amr Fouad|MCTS,MCPD sharePoint 2010

URGENT help required : Custom Authentication Plugin for validation of users

Hi Experts.
I'm a newbie and am stuck in middle of nowhere.
I have been asked to develop a custom authentication plug-in which would validate a user using the attributes such as a userid and a shared-userid.
shared-userid is just a custom id that would be generated on the basis of some logic.
Currently I'm using OAM 10.1.4.3.0 on WINDOWS server and as everybody, I'm also not able to find any sample files or sample folder structure.
As per one of the other threads https://forums.oracle.com/forums/thread.jspa?messageID=3838474, sample code and sample folders are removed from this particular version and were present in some previous version.
So, can anyone please help me out with the following:
1. How can I proceed to accomplish this task, i.e. to check whether a user-id and a shared-userid both are validated and a user is granted access.
2. Are all of these files required to create a custom authentication plug-in or can we proceed only with the ".c" file (i.e. make file, authn.c, and a dll file made using the make file and .c file)
3. Can anybody provide me with a sample file or a sample code written in "C" wherein the plug-in connects to the LDAP and searches for a particular dn for comparison or something. Also a sample make file for windows to convert the .c file to .dll.
PLEASEEEE help me ASAP.
Regards
Edited by: 805912 on Nov 15, 2011 7:18 PM

Hi,
Regarding question 2, you also need the header file is supplied in the Access Server installation directory, under ...access\oblix\sdk\authn_api and is called authn_api.h. you need this to build the dll which must then be placed in the Access Server's ...\access\oblix\lib directory.
Regarding question 3, if you install an earlier version of the Access Server, ie 10.1.4.2 or less, then you will get a \access\oblix\sdk\authentication\samples\authn_api directory that contains a basic sample authentication plugin. However, there is still documented in the 10.1.4.3 Developer Guide another sample plugin, simplapi.c, in the 10.1.4.3 Developer Guide with instructions on how to use it. It does work, but unfortunately requires a couple of edits to get it working after copy&pasting it (no code changes, just fairly obvious case changes eg changing ObanPlugin* to ObAnPlugin*). I used the following commands to get it to compile into a .so file on unix:
g++44 -c -fPIC -Wno-deprecated -m32 simpleapi.c
g++44 -shared -nostdlib -lc -m32 simpleapi.o -o simpleapi.so
but I really would not know if or how these translate into a Windows environment.
Regards,
Colin
Edited by: ColinPurdon on Nov 15, 2011 2:50 PM

When i try to send email from my ipad i get the message The recipient "£)()&&£)" was rejected by the server. This has only just started to happen and I don't know why. Please help. I have tried lots of things now and cannot solve it.

When i try to send email from my ipad i get the message The recipient "£)()&&£)" was rejected by the server. This has only just started to happen and I don't know why. Please can someone help. I have tried lots of things now and cannot solve it.

"Your email account" means to tap on the name of your email account. Whatever it is listed as in the settings.
In my mail settings, one of my email accounts is a Comcast account. I tap on the Comcast name and it brings up this window.
Then I tap on the arrow under the Outgoing mail server smtp setting to get to the next window.
In the resulting window, I then tap on the arrow next to the smtp server under the Primary Server setting.
That brings up this window in which I check to make sure that my user name and password have been entered correctly. If those items are missing, enter them in the appropriate fields and then tap done.

HT4623 Please help! i have just update my iphone 4s with 7.4 update and my phone is now asking for a password which i dont have. I have tried my keypad lock i used before the update and also my itunes password and neither work, how do i rectify this ??

Please help! i have just update my iphone 4s with 7.4 update and my phone is now asking for a password which i dont have. I have tried my keypad lock i used before the update and also my itunes password and neither work, how do i rectify this ???

Did you buy this iPhone new from an authorized seller?

How do I transfer my checked songs from one computer to another - tried exporting library playlist etc but no luck! Please help! I have 26,000 songs - 17,000 are selected and I can't run down the list on my new computer and re-check 17,000 songs! Thanks!

How do I transfer my checked songs from one computer to another - tried exporting library playlist etc but no luck! Please help! I have 26,000 songs - 17,000 are selected and I can't run down the list on my new computer and re-check 17,000 songs! Thanks!

Make a smart playlist of your whole library but only checked songs - #4 on http://support.apple.com/kb/ht1801
Highlight all files in that playlist, then drag to the other drive. This isn't preserving any playlists or whatever, just copying files from one drive to another.
You might want to delete the smart playlist this once you are done because it will probably gobble up resources with that many files.

Good day please help me, my iphone 5 wont turn on. i have tried the hard reset . but that didnt even work. i plugged it in charger but still no response i connect it in itunes still.dont open. please help. i dont have the warranty anymore, i

good day please help me, my iphone 5 wont turn on. i have tried the hard reset . but that didnt even work. i plugged it in charger but still no response i connect it in itunes still.dont open. please help. i dont have the warranty anymore, so please help.me.

Please make a Genius Appointment and take it in for service. By now it probably cannot be fixed, but you never know.

Runtime error while trying to execute custom F4 help in OOP ALV grid.

Dear All,
I am trying to add custom search help for one of my column in ALV grid. I'm using OOP ALV, when i click for search help for that column, the system shows runtime error like below.
I am new to OOP concept and tried to follow program BCALV_EDIT_03. But not getting this error occur. Please help me.
With regards.

Hi,
In order to be able to provide a search help for a field in an ALV you must do the following things.
1) The field where F4 help need to be attached needs to be made editable.
2) Create an event handler class to handle the ONF4 event. You can refer the following code:
    CLASS lcl_alv1_handler DEFINITION.
    PUBLIC SECTION.
       "Tohandle F4 helps
       METHODS handle_f4 FOR EVENT onf4 OF cl_gui_alv_grid
               IMPORTING e_fieldname e_fieldvalue es_row_no er_event_data
                         et_bad_cells e_display.
    ENDCLASS.
   CLASS lcl_alv1_handler IMPLEMENTATION.
      METHOD handle_f4.
CASE e_fieldname.
     WHEN 'LIFNR'.               "Set F4 for courier vendor
         SELECT lifnr name1 FROM lfa1 INTO TABLE lt_lifnr.
       IF lt_lifnr IS NOT INITIAL.
         CALL FUNCTION 'F4IF_INT_TABLE_VALUE_REQUEST'
           EXPORTING
             retfield           = 'LIFNR'
             window_title   = 'Vendors'
             value_org       = 'S'
           TABLES
             value_tab       = lt_lifnr
             return_tab      = lt_return
           EXCEPTIONS
             parameter_error = 1
             no_values_found = 2
             OTHERS          = 3.
         IF sy-subrc = 0.
           READ TABLE gt_final INTO wa_final_t INDEX es_row_no-row_id.
           IF sy-subrc = 0.
             READ TABLE lt_return INTO wa_return INDEX 1.
             IF sy-subrc = 0.
               CALL FUNCTION 'CONVERSION_EXIT_ALPHA_INPUT'
                 EXPORTING
                   input = wa_return-fieldval
                 IMPORTING
                   output = lv_lifnr.
               wa_final_t-lifnr = lv_lifnr.
               MODIFY gt_final FROM wa_final_t INDEX es_row_no-row_id.
             ENDIF.
           ENDIF.
         ENDIF.
       ENDIF.
      ENDCASE.
         CALL METHOD o_alv->refresh_table_display.
      ENDMETHOD.
   ENDCLASS.
    In the above method, GT_FINAL-LIFNR is being overwritten by the LIFNR you had selected       from F4 help. So we will call the refresh_table_display after it to see the result in the ALV.
3) After creating the ALV object, add the fields to which the F4 has to be added. For this you
    need to declare an internal table based on lvc_t_f4. Use the following code. Here O_ALV is    my ALV object.:
   CREATE OBJECT o_container
       EXPORTING
         container_name              = 'CUSTCON'
       EXCEPTIONS
         cntl_error                  = 1
         cntl_system_error           = 2
         create_error                = 3
         lifetime_error              = 4
         lifetime_dynpro_dynpro_link = 5
         OTHERS                      = 6.
     IF sy-subrc <> 0.
*     MESSAGE ID SY-MSGID TYPE SY-MSGTY NUMBER SY-MSGNO
*                WITH SY-MSGV1 SY-MSGV2 SY-MSGV3 SY-MSGV4.
     ENDIF.
     CREATE OBJECT o_alv
       EXPORTING
         i_parent          = o_container
       EXCEPTIONS
         error_cntl_create = 1
         error_cntl_init   = 2
         error_cntl_link   = 3
         error_dp_create   = 4
         OTHERS            = 5.
     IF sy-subrc <> 0.
*     MESSAGE ID SY-MSGID TYPE SY-MSGTY NUMBER SY-MSGNO
*                WITH SY-MSGV1 SY-MSGV2 SY-MSGV3 SY-MSGV4.
     ENDIF.
   CLEAR : gt_f4, wa_f4.
   wa_f4-fieldname   = 'LIFNR'.
   wa_f4-register    = 'X'.
   wa_f4-getbefore   = space.
   wa_f4-chngeafter = space.
   APPEND wa_f4 TO gt_f4.
   Here I am assigning F4 to LIFNR field in the final internal table that is displayed using ALV.
   After this register this field for F4.
    CALL METHOD o_alv->register_f4_for_fields
       EXPORTING
          it_f4 = gt_f4.
   CREATE OBJECT o_alv_handler.
   SET HANDLER : o_alv_handler->handle_f4 FOR o_alv1.
   The object o_alv_handler is created based on the event handler class.
I hope that this will solve your issue. Revert if this is solved.
Rgards,
Abijith

-(Help!)Trying to have custom authentication against a NT domain

Similar Messages

Maybe you are looking for