Host application authentication

Excuse my newbie question, but I'm wondering how do you authenticate a host application? If you do that by sharing some keys, then the host application must have a copy of such keys stored somewhere, right? But is it safe? I mean, what if the hacker is able to somehow get the keys from your host application?
THanks!

To authenticate- read the Global Platform specifications. It's detailed very well in there ( follow this thread http://forum.java.sun.com/thread.jsp?forum=23&thread=279804)
Key security - develop a good design to protect them.

Similar Messages

Calling Azure Key Vault from a non Azure hosted application

Hi,
I need to know whether I can call the Azure's Key Vault from a non Azure hosted application which is either running on a private cloud or on premise. I believe it will as long as I authenticated with that MS Azure AD and then use the token to access the
Azure's Key Vault.
Regards,
Wahaj

Hi Wahaj,
Yes you can, there is no requisite that the consuming client should be azure hosted. It can be a console application too running on your local system, as long as it is able to authenticate against the azure ad. The sample that I have used
here is a console application that talks to the key vault service.
Let know if you need any additional information
Please mark posts as answers/helpful if it answers your query. This would be helpful for others facing the same kind of problem

Application-to-application authentication using Calendar Web Services

Calendar Web Services
Application-to-application authentication
(Proxy authentication)
Abstract:
Application-to-application authentication allows services to trust other services without having to authenticate the end-user making use of these services. The Calendar Web Services offers an application-to-application authentication mechanism called âProxy Authenticationâ.
What is Proxy Authentication?
The Calendar Web Services Proxy Authentication is a solution that was developed by the Oracle Calendar team and is similar to what SSO would be to the web. Proxy Authentication allows any application developed using the Calendar Web Services Toolkit to establish a trusted authentication link to the Calendar Server via the Calendar Web Services.
What do I need to get Proxy Authentication going?
-     The Calendar Web Services Toolkit 9.0.4.2.X (Calendarlet.jar)
-     The Calendar Web Services 9.0.4.2.X (OCAS)
-     The Calendar Server 9.0.4.2.X (Calserv)
-     Oracle Internet Directory 9.0.4.X (OID)
Your collaboration suite deployment MUST be configured in a way where the Calendar Server is connected to the OID (done by default). This is fundamental given that Proxy Auth is designed to extensively use the OID security schemes.
How to configure Proxy Authentication?
You must have:
1.     Access to the OID administrator account.
2.     Access to the ldap tools ($ORACLE_HOME/ldap/bin).
3.     Access to the Oracle Calendar Server administrator password.
OID Configuration
Create an entry for your application product in OID
The following entry needs to be created:
- cn=OracleContext
- cn=Products
- cn=MyApplicationProduct
The MyApplicationProduct.ldif will look like:
dn: cn= MyApplicationProduct, cn=Products, cn=OracleContext
objectClass: orclContainer
objectClass: top
The command to add the entry is
./ldapadd -h HOSTNAME.COM -p OIDPORT -D "cn=orcladmin" -w PASSWROD -f ./MyApplicationProduct.ldif
Where [HOSTNAME.COM] is the OID server hostname, [PASSWROD] is the password for the OID directory and [OIDPORT] is the OID port.
Create an application entity for MyAppName in OID
The following entry needs to be added to the OID:
- cn=OracleContext
- cn=Products
- cn= MyApplicationProduct
- orclApplicationCommonName=MyAppName
The MyAppName.ldif will look like:
dn: orclApplicationCommonName= MyAppName,
cn= MyApplicationProduct, cn=Products,
cn=OracleContext
objectClass: orclApplicationEntity
objectClass: top
orclApplicationCommonName: MyAppName
userpassword: test1
The command to add the entry is
./ldapadd -h HOSTNAME.COM -p OIDPORT -D "cn=orcladmin" -w PASSWORD -f ./MyAppName.ldif
Ensure the entry is properly configured
Perform an LDAP search to locate the entry's distinguished name:
"orclApplicationCommonName= MyAppName,
cn= MyApplicationProduct, cn=Products,
cn=OracleContext"
./ldapsearch -h HOSTNAME.COM -p OIDPORT -D "cn=orcladmin" -w PASSWROD
-b "cn= MyApplicationProduct,cn=Products,cn=OracleContext"
"objectclass=orclApplicationEntity" "c"
Grant proxy privileges to the new application entity
This creates an entry in OID:
- dc=com
- dc=oracle
- dc=us
- cn=OracleContext
- cn=Products
- cn=Calendar
- cn=UserProxyPrivilege
- uniquemember:
orclApplicationCommonName= MyAppName,
cn= MyApplicationProduct, cn=Products,
cn=OracleContext
From the $ORACLE_HOME/ocal/bin
./unioidconf -grantproxyprivilege \
"orclApplicationCommonName= MyAppName,
cn= MyApplicationProduct, cn=Products,
cn=OracleContext"
NOTE: you need the calendar server admin password.
How to use Proxy Authentication?
Once successfully done configuring your OID and Calendar Server, you must start the real work; coding. It is actually simple to implement.
In your Java application, you will simply change the BasicAuth class with the ProxyAuth class. You then set the end-user identity, along with the proxy application name and proxy application password, you registered a moment ago.
Ex:
ProxyAuth auth = new ProxyAuth();
auth.setApplicationName("orclApplicationCommonName=MyAppName, cn=MyApplicationProduct, cn=Products, cn=OracleContext");
auth.setApplicationPassword(âtest1â);
auth.setName(myUserId);
Your application will no longer need to pass the end-userâs password to the Calendar Web Services. From now on, it is your applicationâs responsibility to authenticate the end-user.
Frederic Leblanc

I found the solution:
Using the CalendaringResponse.getReceiveBuffer() and getSendBuffer() methods, the soap request looks something like this:
Sendbuffer: <?xml version='1.0' encoding='UTF-8'?>
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
<SOAP-ENV:Header>
<auth:ProxyAuth xmlns:auth="http://www.oracle.com/WebServices/Calendaring/Authentication/1.0/"><ApplicationName>orclApplicationCommonName=MyAppName,cn=MyApplicationProduct, cn=Products, cn=OracleContext</ApplicationName><ApplicationPassword>testpw1</ApplicationPassword><Name>king</Name></auth:ProxyAuth>
</SOAP-ENV:Header>
<SOAP-ENV:Body>
<cwsl:Search xmlns:cwsl="http://www.oracle.com/WebServices/Calendaring/1.0/"><CmdId>MySearchCommandID-1</CmdId><vQuery><From>VEVENT</From><Where>DTEND >= '20061007T220000Z' AND DTSTART <= '20061014T215900Z'</Where></vQuery></cwsl:Search>
</SOAP-ENV:Body>
</SOAP-ENV:Envelope>

Satellite L500D-144 - CCC Host Application has stopped working

Ladies and Gentlemen,
my PSLT6E-007004GR is almost a year old.
Earlier this month there was an update - possibly from Microsoft - and since then popt always at startup in Windows 7 this window and look for solutions:
Catalyst Control Center. Host Application has stopped working, it is searched for a solution.
A new installation of the graphics card driver and Catalyst Control Center did not change. Instead, a standard graphics card driver from Microsoft is installed.
Resetting the system to the month of October also brought nothing, for after fresh updates, the problem occurs again.
So it is reproducible.
Have already reported more customers or am I the first?
What can you do to the problem?
Sincerely,
CBluebaerchen

Hello
> Resetting the system to the month of October also brought nothing, for after fresh updates, the problem occurs again.
Do you get this display driver update from Windows Update?
If yes restore the system to an earlier point and disable this display driver update and choose only the important updates from Windows. Thats enough.
Otherwise you could try to run CCleaner. It can clean and fix registry problems.

Unable to connect multiple MAF components in a WPF host application

I'm trying to connect my MAF component parts for the addin extensibility to work, however I'm getting certain errors while trying to build my add in store.
string path = @"...\MyProject\Extensibility\Output";
string[] errorList = AddInStore.Rebuild(path);
that's the pipeline path, which looks like according to documentation:
Extensibility\
Output\
AddIns
AddInSideAdapters
AddInViews
Contracts
HostSideAdapters
My WPF host app DLL file is located under this directory:
MyProject\WPFApp\bin\debug
So, I'm unsure where to build my HostView. Currently the output is the pipeline root directory (Extensibility\Output)
I have 4 errors in my errorList:
While examining an assembly for pipeline segments, got a ReflectionTypeLoadException: Unable to load one or more of the requested types. Retrieve the LoaderExceptions property for more information. File Name: ...MyProject\Extensibility\Output\AddInSideAdapters\AddInSideAdapters.dll
2:
Could not connect up a part in a pipeline to its neighbors: Contract Name: "IAddInContract" Location: "Contracts\Contracts.dll".
3:
Could not connect up a part in a pipeline to its neighbors: AddInBase Name: "AddInView" Location: "AddInViews\AddInViews.dll".
4:
Could not connect 2 valid add-in model parts.
And the code of addin side adapter, contact and addin view respectively:
[AddInAdapter]
public class AddInSideAdapter : ContractBase, IAddInContract
private AddInView view;
public AddInSideAdapter(AddInView view)
this.view = view;
public void Initialize(IPluginHandler handler)
view.Initialize(handler);
public INativeHandleContract GetCustomUI()
return FrameworkElementAdapters.ViewToContractAdapter(view.GetCustomUI());
[AddInContract]
public interface IAddInContract: IContract
void Initialize(IPluginHandler handler);
INativeHandleContract GetCustomUI();
[AddInBase]
public abstract class AddInView
public abstract void Initialize(IPluginHandler handler);
public abstract FrameworkElement GetCustomUI();
They're output directories are ok, all building into the corresponding pipeline segments. I really cannot understand what's failing. Pipeline structure is ok, build paths of segments are ok (just not sure about the HostView and the host app). The path variable
is ok, i just omitted the entire path for brevity

Hi Mefhisto,
>>”So, I'm unsure where to build my
HostView. Currently the output is the pipeline root directory”
I found some information about your problem in “Pipeline Development Requirements”,It said “The host application and the host view are typically deployed
in the same directory. The pipeline directory can be in any location but is typically in the same directory as the host application.”This is the link of the document :
https://msdn.microsoft.com/en-us/library/bb384240(v=vs.90).aspx. And there are several samples,you can refer to it for reference.
http://clraddins.codeplex.com/wikipage?title=Samples&referringTitle=Home

How can I launch configurator from host application in a specefic language.

Hi,
I want to access R12 configurator from a host application and I have no problems accessing it.
But I want that the configurator should Launch in Japanese Language. Can I specify any XML parameter to the UIServlet to achieve this or is there any other Method?
Thanks

Per the "Deploying a User Interface that Supports MLS" section in Chapter 14 ("Multiple Language Support") of the Oracle Configurator Implementation Guide:
"When a host application launches Oracle Configurator to configure an item, the language specified in the database ICX session ticket is passed to Oracle Configurator. Oracle Configurator uses this information to determine which translated text to retrieve from the database and display in the UI."
So essentially, Configurator will display the same language that the hosting application is displaying, the language the user has logged into EBS with. (Of course, translated text will only appear in Configurator if you have supplied translations in the CZ_LOCALIZED_TEXTS table.) If you need Configurator to display a different language than its hosting application, that would require a customization of the initialization string the hosting application sends to Configurator, specifying a different icx_session_ticket parameter value.
Hope this helps.
Eogan

"Error rendering report" in hosted application

I am suddenly getting the following error message in my hosted application (I work for Oracle):
Error rendering report: ORA-00600: internal error code, arguments: [17059], [0x9370852C], [0x93708260], [0x90EE7724], [], [], [], []
when running page 9 (Find Messages) of application 16924 (CRM MEssage Review tool).
I haven't made many changes to the page that would have caused this. I had a similar issue. last year, which was resolved by the APEX team.
Could you please look into this?
Thanks
Daniel

Daniel - If this is still happening please send me an internal email with details about how I can see this.
Scott

Application Authentication

Hi, All
I have some question about MHP Application Authentication, please help me answer them, thanks
1. What's the difference or relationship between "Application Authentication" and "File Authentiction"?
2. For mhp specification 1.03, File Authentication process is described in chapter 12.4.4, but no application authentication is involved, what steps does Application Authentication include?
3. When a DSMCC File is accessed by using java.io.FileInputStream, mhp can authenticate it, if failed to authenticate, it is considered as an empty file, but for Application Authentication, when will do ?
4. For a File Authentication, mhp should search and verify the digital signature of it, however, checking signature is a time-consuming operation for embeded system, in the case if check signature when load each signed file, it may cost much time when run a Xlet. So how to avoid the repeated checking signauture?

dear desperado, thanks for your reply,
About Application authencation, quote from the mhp
spec 1.03,
"For a DVB-J application to be correctly
authenticated, all the class files that the
application consists of need to be signed,
the signatures need to verify (see 12.4.4,
"Integration" on page 160) and the application_id
needs to be from within the
range allocated to signed applications (see Table 12,
"Value ranges for application_id" on page 84). If,
during the loading
or execution of the application the MHP detects a
signed file containing a class that failed to pass
the authentication
process (e.g. because its actual hash value does not
match the expected hash value), then the class shall
be considered as
not available."
But I have three questions about the description,
1. Does app authentciation inclue all class files
authencation, that is , if xlet has 10 class files,
the app authentication will do file authentiation for
10 times?Each class file must be authenticated some time before it's loaded.
If some of the 10 class files are never loaded then they don't have to be authenticated. If all are loaded then the implementation will have to authenticate all 10 files.
>
2. According to spec 12.4.4, file authencation
include hash verify and signature, certficate chain
verify, Dose the applicaton authencation should
verify signatures for the times as the number of
class files?
t's not acceptable for much cost of signature
verification for embeded system.The implementation can cache results as long as the files in the network haven't changed. If a hash file is authenticated once then as long as the files used to authenticate it haven't changed (parent hash files, the signature file and the certificate file) then that process doesn't need to be repeated.
>
3. If application failed to authenticated, it can't
be granted request permisions, but What's time of
the start or end for application authentication, for
start point, may be load the main class of Xlet, but
the end? Does it need to authencate all class
files? Which language are you refering to here?
I would expect that as long as the Xlet class and the PRF are successfully authenticated then the Xlet would be granted permissions. Other class files can be authenticated later and if they fail, they just won't be loaded.
>
if yes, but the time of loading a class is not known
to us, which depend on Xlet's behaviour, that is , we
can't know what time xlet would authenticate all
class files.
if no, Could we consider the end time of
authencating the main class implementing
javax.tv.Xlet as the end of application authenction?
hope your advice, thanks
graynick

Host application strange error, please help !!

hello everyone,
can anybody of you help me with this error:
>> cannot find symbol; symbol : method getMessage(), location: class java.lang.ClassNotFoundException
it is displayed as I am writing the host application for an applet using OCF, at this level:
>> my_Card_Proxy = (MyCardProxy) card.getCardService(MyHostSideApp.class, true);
what do you think of this? I tried many codes but I am always having the same error, I dont know where does the problem come from.
please if you have any suggestion, I really need it
thank you

Hmmm.
Are u sure that u have put all the JSP page in a proper folder where if u do not put them in a proper folder it want work.
Else where in side jsp code the naming part as been misplaced . Go through that code again I hope u can find out the error.
mostly the second one normally occurred every time....
Good site too.

Detecting the host application type

I have a plug-in for Acrobat Professional. Is there any way for this plug-in to determine the host application like if it is running inside a Acrobat Professional or inside a browser container etc?
I need to know this becasuse my plug-in is causing the browsers to crash whenever they open PDF files. My idea is to detect the host for my app and abort loading the plug-in if it is not full blows Acrobat app.
Thanks
Shreedhar

You don't need to!
When you create your toolbar button, don't add EXTERNAL to the parameters you pass it.
How else is your plugin invoked other than button (see above) or menu (not present)?

Parameters for UIServlet from custom Host Application

Hi,
If my host application is not Oracle Application, how to derive the user name, password , icx_session_ticket to the UIServlet ?
Can someone provide the details.

Even if you are hosting Configurator on custom application which is not part of oracle apps, you need to login in Oracle application to launch Configurator.
You can do so either by generating ICX session ticket based on particular oracle application user or you can directly login with user/pwd parameter given in xml initialize message.
Please refer implementation guide for detail. Post detail of issue if you face any.
Regards
Pankaj

Ubuntu One "Host Rquires Authentication"

Arch, fresh install. I installed ubuntuone-clinet and the control panel.
When I try to log in, I get the message "Host Rquires Authentication" where I would normally get informed of bad creds. When I put in bad creds, I get a different error.
Googling the error, I get advice about going into seahorse and removing entries with ubuntuone. I open seahorse, and there is nothing there.
I don't know how to get debug information from that window, so I'm stuck. If I run the qt control panel from the command line, I don't get any relevant debug info.
Any suggestions are greatly appreciated.

Hi,
Could you provide more information about your environment. for example, the Hyper-V server version of the problem on, screenshots is the best information.
Thanks.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

How to dispatch an event to the host application?

Can I create a keyboardEvent and dispatch it to the host application?
I'm trying to create an onscreen keyboard, so on every mouseUp event, a corresponding keyboardEvent is created and dispatched to the host application.
Is it even possible to dispatch a keyboard event programatically?

I can dispatch Keyboard Events programatically, and event listener inside my extension works just fine.
var evnt:KeyboardEvent = new KeyboardEvent(KeyboardEvent.KEY_DOWN, true, false, Keyboard.M);
this.dispatchEvent(evnt);
However, the KeyBoardEvent is not propogating up to the host application (Illustrator).
What do I need to do to send it on to the host application?

Executing the host application

Hi, i developed a host application with OCF to communicate with my applet, everything is OK. now i wonder if i can execute the host application from an HTML page

SYNCHRONIZE will update the display with the internal stae of the application (so don't think you should be expecting any performance improvements).
HOST command will generally run synchronously - so it will wait for the host command to finish executing. If you want to asynchronously you could HOST out to a BAT file a put your commands in the BAT file.
Regards
Grant Ronald
Forms Product Management

Satellite P200D - Catalyst Control Centre host application stopped working

Hi. I have a Satellite P200D-128 and I've been getting a pop-up screen with an error message saying, "Catalyst Control Centre host application stopped working." I'm sure I haven't altered anything.
I tried downloading new drivers from http://support.amd.com/us/gpudownload/Pages/index.aspx but the download wouldn't work.
Please could you help?
Thanks.

Hi
The right driver you can find here . Download it, open Display Driver ATI folder and execute setup.exe. and follow the setup menu.

Host application authentication

Similar Messages

Maybe you are looking for