How to authenticate user when accessing a servlet in WLS6.0

          In my current project , i need to authenticate user when accessing(executing) a
          servlet deployed in WLS6.0. I tried to add
          <auth-method>
          BASIC
          </auth-method>
          in the web.xml.
          Also in the default fileRealmProperties file, i set up the ACL for
          acl.execute.weblogic.Servlet.myServlet = the user
          also i have disabled guest access in my config.xml.
          after all these, the servlet can still be accessed freely.
          do i miss something ? what is the right way to set up it in wls6.0
          thanks a lot
          hyliu
          

The steps required are documented at:
          http://e-docs.bea.com/wls/docs60/quickstart/quick_start.html
          mark
          narendra wrote:
          > hi all,
          > I had written a simple servlet. I would like to know the steps to
          > be followed to run the servlet.
          > What i did is i kept that servlet class file in the default directory
          > and added the servlet path in the web.XML.
          > but when i try to run the servlet its giing me 404 error.
          > Can any one help me out by giving the detailed steps to be followed as I
          > am new to Weblogic6.0
          >
          > Thanks in Advance,
          

Similar Messages

  • How to restrict users to access the files directly from /irj/go/km/docs/doc

    Dear Experts,
    I have made a folder in KM where I have saved some files, and also I have made a application from where user can access those files.
    But the users are able to access the files by directly typing the path of the file in internet explorer, I have to restrict it that the user should not be able to access the files directly.
    Please give your helpful suggestions.
    Warm Regards
    Upendra Agrawal
    Edited by: Upendra Agrawal on May 15, 2009 4:49 PM

    Hello,
    You can have a link/button react to a mouse clic by reading the KM document and putting it on the htpp flux with the correct header (this is the same kind of code that is used when you generate the pdf). As the file access is in you server-code, user will not have access to the URL...
    an exemple for the WD Java (coming from this [PDF|https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/d0cc41cb-9576-2b10-99a6-ab90ef28c73b]), with slight modifications :
    public void exportToPDF( ) {
       //@@begin exportToPDF()
       ByteArrayOutputStream outputStream = null;
       outputStream = new ByteArrayOutputStream();
       // read the file with KM API and copy it to the outputStream
       showPopUp(WDWebResourceType.PDF, outputStream, "PDF Out Put");
       outputStream.close();
    //@@end
    regards
    Guillaume

  • How to authenticate users by IP Adress

    Hi!
    We need authenticate some users by username/password and computer's IP address or subnet on iAS 10gR2 10.1.2.0.2.
    Now we are authenticating only by user/pwd through SSO, we need to authenticate users depending on the subnet/computers they are.
    In Metalink there is a note:
    How to Simulate The Authorized Ports Setting from WAS 3.X in OAS 4.X
    Doc ID: Note:73596.1
    that talk about this option, but only for PLSPL/SQL cartridge.
    Tx in advance!
    Diego.

    Hello,
    I have got it to work here.
    Let me try to help you.
    In my app I used the following configuration:
    <filter>
      <filter-name>NtlmHttpFilter</filter-name>
      <filter-class>jcifs.http.NtlmHttpFilter</filter-class>
      <init-param>
         <param-name>jcifs.netbios.wins</param-name>
         <param-value>10.76.122.3</param-value>
         <!-- This is the the IP or the DNS of the machine where the AD is intalled. The computer that authenticates the users in your network -->
      </init-param>
      <init-param>
         <param-name>jcifs.smb.client.domain</param-name>
         <param-value>ABCD</param-value>
         <!-- This is your DOMAIN name. Here my domain is ABCD.COM.BR, but I didn't have to put the sufix .COM.BR, only the main name -->
      </init-param>
    </filter>
    <filter-mapping>
      <filter-name>NtlmHttpFilter</filter-name>
      <url-pattern>/*</url-pattern>
    </filter-mapping>That's it. With this example, the authentication worked perfectly.
    In order to test it, I put the following code inside a index.jsp file:
    <%
    String userName = request.getUserPrincipal().getName();
    %>
    And the Oscar goes to: <%=userName%>

  • How to connect to MS Access from servlet uploaded in TOMCAT server

    Hi,
    I want to access MS Access from servlet .I use TOMCAT server.I want to know what should i do.How to get drivers and how to set class path for them.
    Please help me in finding the solution
    thanks and Regards

    HI,
    try this
    <Code>
    response.setContentType(CONTENT_TYPE);
         PrintWriter out = response.getWriter();
         java.sql.DatabaseMetaData dm = null;
         java.sql.ResultSet rs = null;
         try
              Class.forName("sun,jdbc.odbc.JdbcOdbcDriver");
              Connection con = java.sql.DriverManager.getConnection("jdbc:odbc:dsnName","","");
              dm = con.getMetaData();
              out.println("<html>");
              out.println("<head><title>Servlet1</title></head>");
              out.println("<body bgcolor=\"lightblue\">");
              if(con!=null){
                   dm = con.getMetaData();
                   out.println("<B><br>Driver Information</B>");
                   out.println("\n\t<br><br>Driver Name: "+ dm.getDriverName());
                   out.println("\n\t<br>Driver Version: "+ dm.getDriverVersion ());
                   out.println("\n\t<br>Database Information ");
                   out.println("\n\t<br>Database Name: "+ dm.getDatabaseProductName());
                   out.println("\n\t<br>Database Version: "+ dm.getDatabaseProductVersion());
                   out.println("\n\t<br><br>Avalilable Catalogs ");
                   rs = dm.getCatalogs();
                   while(rs.next()){
                             out.println("<br>\tcatalog: "+ rs.getString(1));
                   out.println("\n\t<br><br>conURL =" + conURL);
                   out.println("\n\t<br><br>Title = Database");
                   rs.close();
                   rs = null;
                   con.close();
              }else {
                   out.println("Error: No active Connection");
         }catch(ClassNotFoundException e) {
              out.println("Coudn't laod the database driver: " + e.getMessage());
         } catch(SQLException e) {     
              out.println("SQLException caught: " + e.getMessage());
              try {
                   if (con != null)
                        con.close();
                   if (rs != null)
                        rs.close();
              catch (SQLException ignored) {}
              finally {
                   try {
                             if (con != null)
                                  con.close();
                             if (rs != null)
                                  rs.close();
                        catch (SQLException ignored) {}
    </Code>
    Sachin

  • How can authenticate users´portal in OIM?

    I have installed Aqualogic Interaction 6.5, and I want import and authenticate users from OIM(or another LDAP)? What i can do?
    I read that i must install Oracle webcenter identity services? It´s true? Where i can adquire?
    thanks

    I have not tried with 6.5, btu I think you just need to install one of the identity services which allow you to sync and authenticate against various sources (LDAP, AD, etc). See here for more info http://edocs.bea.com/alui/integration/

  • How control multiple users to access same page?

    Hi,
    I am working on a public page where the data pull from
    database base on different UUID. Where this page doesn't required
    login account. It differential by UUID where it send via email.
    What I affaird in the email that contain UUID that might
    forward to multiple users for filling in a long forms with same
    UUID.
    (This form it could be share same department but different
    sections).
    How can I lock this page or only allow accessing by a user
    until been submitted?

    Qoop wrote:
    I tested but it cannot be lock - i open the dept_id:HR in my pc
    and I open same dept_id:HR in other pc which able to view same
    page.
    BKBK wrote:
    That is a paradox. If entry to the page cannot be locked then
    the form should not appear on at least one of the PCs. Could we see
    your code.
    Qoop later wrote:
    anyway, here is the code (simplify version)...:
    <cfquery of DEPT info base on the #URL.UUID#>
    <cfif DEPT recordcount EQ 0>
    Missing dept info <cflocation to xxx.cfm>
    <cfelse>
    <cfif SUBMIT EQ 1>
    TQ for submitting...
    <cfelse>
    code start here...
    <form action= next_page_action.cfm>
    </cfif>
    </cfif>
    I have tested my suggestion. It works.
    I can see where your code is leading to. However, it does not
    follow the line I suggested on 08/08/2007. Its logic is essentially
    different from mine. In my code, the condition for displaying the
    form is in a lock. In your code, the form is displayed
    unconditionally.

  • How to authenticate user in Active Directory for an Oracle report

    Hey there,
    We have users of 1 report all over the country.
    Currently, when using the report, the user chooses a location as a parameter, then runs the report.
    The problem is we don't want the user to be able to see data from other locations, only their own.
    So how can I do this as all users are set up in Active Directory, but the only thing that distinguishes them apart is under the Properties of the user, under the General tab, the Office field says where they are located.
    Thanks in advance!

    Hey there,
    We have users of 1 report all over the country.
    Currently, when using the report, the user chooses a location as a parameter, then runs the report.
    The problem is we don't want the user to be able to see data from other locations, only their own.
    So how can I do this as all users are set up in Active Directory, but the only thing that distinguishes them apart is under the Properties of the user, under the General tab, the Office field says where they are located.
    Thanks in advance!

  • How to enable users to access windows 2012 through remote desktop client on windows XP SP3

    Hi I have just installed Windows Server 2012 and trying to give access to the users. The users are on windows XP Pro SP3 remote desktop client (Shell and control version 6.1.7600 with Remote Desktop Protocol 7.0 support). 
    I have enabled the windows server 2012 remote desktop users through "control panel -> systems and security ->  Remote access" for the users. When I try to connect to the windows server as administrator, it is getting connected.
    But when I try to connect as other users I get the following message.
    "To sign in remotely, you need the right to sign in through Remote Desktop Services. By default members of the Administrators group have this right. If the group you're in does not have the right, or  if the right has been removed from the Administrators
    group, you need to be granted the right manually."
    Is there any other setting to be done to eanble the Remote Desktop for the users.

    Hi I have just installed Windows Server 2012 and trying to give access to the users. The users are on windows XP Pro SP3 remote desktop client (Shell and control version 6.1.7600 with Remote Desktop Protocol 7.0 support). 
    I have enabled the windows server 2012 remote desktop users through "control panel -> systems and security ->  Remote access" for the users. When I try to connect to the windows server as administrator, it is getting connected.
    But when I try to connect as other users I get the following message.
    "To sign in remotely, you need the right to sign in through Remote Desktop Services. By default members of the Administrators group have this right. If the group you're in does not have the right, or  if the right has been removed from the Administrators
    group, you need to be granted the right manually."
    Is there any other setting to be done to eanble the Remote Desktop for the users.
    Have you tried adding those users to the "Remote Desktop Users" group? It's in Active Directory Users and Computers and it's a Built-In group. Might want to give that a try ...
    - JJ

  • Impersonate user when accessing Microsoft SQL Server from powershell using Windows Authentication

    Hi All,
    Below is the powershell script to connect a SQL DB using windows authentication by impersonating a user. The user should have login access to the server. Script can be highly useful when service id is used to access DB using powershell.
    [reflection.assembly]::LoadWithPartialName("Microsoft.SqlServer.Smo") | Out-Null
    $ds=$null
    $conn = New-Object -typeName Microsoft.SqlServer.Management.Smo.Server -argumentList "Servername"
    $db = New-Object Microsoft.SqlServer.Management.Smo.Database
    $conn.ConnectionContext.ConnectAsUser = $true 
    $conn.ConnectionContext.LoginSecure=$true
    $conn.ConnectionContext.ConnectAsUserName = "username"
    $conn.ConnectionContext.ConnectAsUserPassword ="password
    $conn.Loginmode
    $db = $conn.Databases.Item("dbname")
    $ds = $db.ExecuteWithResults("select top 10 Name from Tablename")
    Foreach ($t in $ds.Tables)
       Foreach ($r in $t.Rows)
          Foreach ($c in $t.Columns)
              Write-Host $c.ColumnName "=" $r.Item($c)

    That is OK when you want to manage the instance biut it wojn't work if the tools are not installed.
    This works from anywhere all of the time and is simpler:
    $datasource='MyServerInstance'
    $database='NorthWind'
    $connStr='Data Source={0}; Database={1}; Trusted_Connection=True;' -f '$datasource,$database
    $conn=New-Object System.Data.SQlClient.SQlConnection($connStr)
    $conn.Open()
    $cmd=$conn.CreateCommand()
    $cmd.CommandText='select * from products'
    $rdr=$cmd.ExecuteReader()
    0..($rdr.FieldCount-1) | %{$rdr.GetName($_)}
    $conn.Close()
    If you want credentials just add them.
    $connStr='Data Source={0}; Database={1}; Trusted_Connection=True;UID={2};PWD={3};' -f  $datasource,$database,uid,$pwd
    ¯\_(ツ)_/¯

  • How to notify users when they are timed out?

    So I am a developer for fortune 500 company and the network infrastructure team came to me with an odd request for an application that taps into Anyconnect. I find it hard to believe that this functionality doesn't exist.
    So here is the scenario. We have Anyconnect set up to not have an idle timeout. However we have it set up to disconnect after 12 hours.
    Here is the problem. When the end user meets that 12 hours, it just disconnects on them. There are no warning messages, no messages they have been disconnected. Just the connection is terminated.
    So my question is there any way to set this up to notify the user they have been disconnected and need to reconnect. Is there a way to notify them in advance that they will be disconnected in say 30 minutes?
    They want me to create an application that periodically checks the connection time by executing
    C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client>vpncli stats traffic
    Getting the time connected then if they are nearing the timeout time then start presenting the user with a warning.
    So that's basically my question. Is there no way to set this up in Anyconnect? If we are supposed to see these messages is it something our team might have disabled?
    We are using Anyconnect 3.1.01065 on Windows XP and Windows 7

    >> You don't have an idle timeout but will force disconnect after 12 hours? Does this really makes sense?
    Actually yes, at least in our environment. Using Citrix applications and VT Terminal applicaitons they need a constant connection. If the user disconnected say via an Idle Timeout then their sessions into these applications can and will hang. Not only that the older VT terminal sessions if hung durring a process that locks records or tables then it is locked for everyone. They have to call our helpdesk and have them kill the user. Citrix gets a little wacky as well if the user just blinly disconnects. So idle timeouts are actually a bad thing. Also a user might through a terminal session or though a citrix connection start a long run transaction. For example a blueprint sent off to a render farm could take 3-4 hours to render some have even take 10 hours. So a user may start a process and then go away especially on the weekend.
    So while there are issues with the internet in general that can cause disconnects most of this software will try reconnecitng from the server to the client everal times before finally giving up. So a quick break in internet connectivity is not an issue, a idle timeout where it doesn't reconnect until the user returns doesn't work.
    Thanks for the link though, that will help

  • How to Retrcit user from accessing t.code mm03 by plant wise.

    Hi All,
    User1 should have access for materialA from mm03(Display mat) for plantA but not for plantB. what roles to be given to user1 in order to do this settings. Please reply.
    Regards in Advance,
    Aiella

    Hi,
    "Created another role2 for plantB M_MATE_WRK. What authorizations given to object M_MATE_WRK? "
    You should be able to answer that,
    M_MATE_WRK has two fields
    Activity
    Plant
    so according to your rek, you could use the solution which  Mylène Dorias provided
    Vijay, you have said you have created composite role and assigned user1 to it, obviously he will access to both the roles
    role 1 you give access to plant A
    role 2 you give access to plant B
    and assign both of them to User1, obviously he is gonna have access to both the plants,
    i hope i explained you well if not could you elaborate your issue
    Thanks,
    Vijay

  • How to disable user from accessing form settings?

    Hi,
    What is the authorization to disable a user from acessing the forms settings of the main menu?

    General Authorization, User name --> General --> Document Settings --> set to no authorization.
    now the user can click n see the form setting, but cant change any prior settings.
    Regards,
    Dhana.

  • FDM "Error: Can't authenticate user" when creating new apps

    We are experiencing the above error when trying to create a new FDM application, and cannot seem to get past it. The details are as follows:
    - FDM manages to create the folder structure on the server fine, so suspecting SQL or HSS permissions/provisioning
    - SQL database is not created
    - Creating the SQL database manually beforehand does not help either
    - The EPM Admin experiences the same error!
    - No FDM logs appear to have been generated in C:\Oracle\Middleware\user_projects\epmsystem1\diagnostics\logs\fdqm
    We were able to create FDM apps fine at some stage, but cannot now for some reason. Please let me know if you have any suggestions.

    On the FDM server, from the Start menu, go to All Programs --> Oracle EPM System --> Financial Data Quality Management --> Load Balance Manager --> Load Balance Configuration.
    On both the Authentication Providers tab and the Application Servers tab, you should see at least one entry. If you do not see an entry on either of these tabs, enter the appropriate settings on each tab, then go to the General tab and enter the password for the DCOM account. If, on the other hand, the original settings are intact, just go to the General tab and enter the password for the DCOM account. If you enter the correct password and do not get an error, then this verifies that the DCOM settings have not been corrupted.

  • How to be notified when access-list on ASA is modified

    Good Morning,
    Is it possible with snort or some other application to check if an access-list was modified and be alerted with the rule that was changed / edited, and once you acknowledge the change alerting would stop.
    Thanks
    Et

    If you're running on a private LAN then there isn't much to worry about - only systems on the LAN will be able to hit your machine. External traffic should be blocked at your router (you typically have to enable port forwarding in the router to get external traffic to hit your server.
    That said, if you really want such an alert then check out Little Snitch.

  • How to authenticate users from SharePoint 2007 to the Web Dynpro platform

    Hi, I am working on integrating Share to Webdypro application. I want to implelement Single sign on from Sharepoint to SAP.
    So I can make use of Windows credentials for accesing my SAP application.
    So what all configurations need to be maintained at SAP side to achieve this thing.
    Can anyone please help me on this.
    Thanks,
    Betcy

    Hi Betcy,
    I am not familiar with sharepoint solutions, but as you mentioned about windows credentials I believe it refers to kerberos tokens. On this case you can take advantage of SPNego authentication.
    You can find more details on following SAP note:
    #[1488409|https://service.sap.com/sap/support/notes/1488409] - New SPNego Implementation
    I hope it helps.
    Kind regards,
    Lisandro Magnus

Maybe you are looking for

  • Windows Vista vs Zen Micro: Software Problems

    Hey guys, Looking for a little help and this seems to be the right place to get, lots of helpful people!I have a 3 year old Zen Micro, 4/5Gb I think and it worked fine with my old Dell laptop which ran XP, I used to drag and drop mpg files easily wit

  • Bitmaps in a labview report?

    Hi all, I have been developing an application for major diesel engine control and testing and have been using the new reports' vi's in Labview to generated printed reports of a given run. We would now like to include a graphic in the report (eg a log

  • Can Numbers put the dates (in a column) in order if I enter out of order

    I am a procrastinator and I have lots of receipts to enter.  If I enter with the dates out of order is there a way numbers can put in order for me. Thank you

  • Font display problem in Safari....

    Hi-I am sure that this has been discussed here....... Anyway, on some pages in Safari the fonts are weird-there are large spaces between the letters and lots of S's and random capitalizations. None of the letters form a word. Is there a fix for this?

  • Help with creating photo albums

    Hi Guys.. I'm pretty new to dreamweaver and am using a trial version at the moment but love it so far... My problem is that every time i try to create a jpg photo gallary the and select the source and destination file folder,dreamweaver keeps giving