How to avoid the Security Constraint framework's user validating.

The problem is I have set up a security constraint in web.xml. If I link to that mapping tomcat will throw a window for user to input the username and password.
I expect that i could set a URL to redirect to this mapping which is constrainted by web.xml and jump over the step of input window.
I prefer the way like logon FTP, setting the URL like this: ftp://username:[email protected] (of course the way http://username:password@host:port/file was fail) or anyother ways to implement that.
thanks!!

in your form tag specify method=post, that'll hide the values from being displayed in the url
eg:
<form action="someAction" method="post">

Similar Messages

How to specify a servlet mapping as the url pattern with in the security constraints

Hi ,
Weblogic 6.0 documentation says the following:-
Define which resources in the Web Application the security constraint applies to using the <url-pattern> element that is nested inside the <web-resource-collection> element. The <url-pattern> can refer to either a directory, filename or a <servlet-mapping>.
To apply the security constraint to the entire Web Application, use the following <url-pattern>:
<url-pattern>/*</url-pattern>
Could any one let me know how to specify servlet mapping as the url pattern.
I tried various combination and it doesn't seem to work and any help in this regard will be greatly appreciated.
Thanks
kannan

The answer is posted here:
Unapproved User Flag in UME

How can avoid the problem of Parameter Prompting when I submitting ?

I am developing web application in visual studio 2008 in csharp.How can avoid the issue or problem of Parameter Prompting when I send parameters programaticaly or dyanmicaly? I am sending the values from .net web form to crystal report but it is still asking for parameters. so when i submit second time that is when the reports is being genereated. How can i solve this problem. Please help. The code Iam using is below.
   1. using System;
   2. using System.Collections;
   3. using System.Configuration;
   4. using System.Data;
   5. using System.Linq;
   6. using System.Web;
   7. using System.Web.Security;
   8. using System.Web.UI;
   9. using System.Web.UI.HtmlControls;
10. using System.Web.UI.WebControls;
11. using System.Web.UI.WebControls.WebParts;
12. using System.Xml.Linq;
13. using System.Data.OleDb;
14. using System.Data.OracleClient;
15. using CrystalDecisions.Shared;
16. using CrystalDecisions.CrystalReports.Engine;
17. using CrystalDecisions.Web;
18.
19.
20. public partial class OracleReport : System.Web.UI.Page
21. {
22.     CrystalReportViewer crViewer = new CrystalReportViewer();
23.     //CrystalReportSource crsource = new CrystalReportSource();
24.     int nItemId;
25.
26.     protected void Page_Load(object sender, EventArgs e)
27.     {
28.         //Database Connection
29.         ConnectionInfo ConnInfo = new ConnectionInfo();
30.         {
31.             ConnInfo.ServerName = "127.0.0.1";
32.             ConnInfo.DatabaseName = "Xcodf";
33.             ConnInfo.UserID = "HR777";
34.             ConnInfo.Password = "zghshshs";
35.         }
36.         // For Each Logon parameters
37.         foreach (TableLogOnInfo cnInfo in this.CrystalReportViewer1.LogOnInfo)
38.         {
39.             cnInfo.ConnectionInfo = ConnInfo;
40.
41.         }
42.
43.
44.
45.
46.
47.
48.         //Declaring varibles
49.          nItemId = int.Parse(Request.QueryString.Get("ItemId"));
50.         //string strStartDate = Request.QueryString.Get("StartDate");
51.         //int nItemId = 20;
52.         string strStartDate = "23-JUL-2010";
53.
54.         // object declration
55.         CrystalDecisions.CrystalReports.Engine.Database crDatabase;
56.         CrystalDecisions.CrystalReports.Engine.Table crTable;
57.
58.
59.         TableLogOnInfo dbConn = new TableLogOnInfo();
60.
61.         // new report document object
62.         ReportDocument oRpt = new ReportDocument();
63.
64.         // loading the ItemReport in report document
65.         oRpt.Load("C:
Inetpub
wwwroot
cryreport
CrystalReport1.rpt");
66.
67.         // getting the database, the table and the LogOnInfo object which holds login onformation
68.         crDatabase = oRpt.Database;
69.
70.         // getting the table in an object array of one item
71.         object[] arrTables = new object[1];
72.         crDatabase.Tables.CopyTo(arrTables, 0);
73.
74.         // assigning the first item of array to crTable by downcasting the object to Table
75.         crTable = (CrystalDecisions.CrystalReports.Engine.Table)arrTables[0];
76.
77.         dbConn = crTable.LogOnInfo;
78.
79.         // setting values
80.         dbConn.ConnectionInfo.DatabaseName = "Xcodf";
81.         dbConn.ConnectionInfo.ServerName = "127.0.0.1";
82.         dbConn.ConnectionInfo.UserID = "HR777";
83.         dbConn.ConnectionInfo.Password = "zghshshs";
84.
85.         // applying login info to the table object
86.         crTable.ApplyLogOnInfo(dbConn);
87.
88.
89.
90.
91.
92.
93.         crViewer.RefreshReport();
94.
95.                 // defining report source
96.         crViewer.ReportSource = oRpt;
97.         //CrystalReportSource1.Report = oRpt;
98.
99.         // so uptill now we have created everything
100.         // what remains is to pass parameters to our report, so it
101.         // shows only selected records. so calling a method to set
102.         // those parameters.
103.      setReportParameters();
104.     }
105.
106.     private void setReportParameters()
107.     {
108.
109.         // all the parameter fields will be added to this collection
110.         ParameterFields paramFields = new ParameterFields();
111.          //ParameterFieldDefinitions ParaLocationContainer = new ParameterFieldDefinitions();
112.        //ParameterFieldDefinition ParaLocation = new ParameterFieldDefinition();
113.
114.         // the parameter fields to be sent to the report
115.         ParameterField pfItemId = new ParameterField();
116.         //ParameterField pfStartDate = new ParameterField();
117.         //ParameterField pfEndDate = new ParameterField();
118.
119.         // setting the name of parameter fields with wich they will be recieved in report
120.
121.         pfItemId.ParameterFieldName = "RegionID";
122.
123.         //pfStartDate.ParameterFieldName = "StartDate";
124.         //pfEndDate.ParameterFieldName = "EndDate";
125.
126.         // the above declared parameter fields accept values as discrete objects
127.         // so declaring discrete objects
128.         ParameterDiscreteValue dcItemId = new ParameterDiscreteValue();
129.         //ParameterDiscreteValue dcStartDate = new ParameterDiscreteValue();
130.         //ParameterDiscreteValue dcEndDate = new ParameterDiscreteValue();
131.
132.         // setting the values of discrete objects
133.
134.
135.           dcItemId.Value = nItemId;
136.
137.         //dcStartDate.Value = DateTime.Parse(strStartDate);
138.         //dcEndDate.Value = DateTime.Parse(strEndDate);
139.
140.         // now adding these discrete values to parameters
141.           //paramField.HasCurrentValue = true;
142.
143.
144.
145.           //pfItemId.CurrentValues.Clear();
146.          int valueIDD = int.Parse(Request.QueryString.Get("ItemId").ToString());
147.           pfItemId.Name = valueIDD.ToString();
148.
149.         pfItemId.CurrentValues.Add(dcItemId);
150.         //ParaLocation.ApplyCurrentValues;
151.         pfItemId.HasCurrentValue = true;
152.
153.         //pfStartDate.CurrentValues.Add(dcStartDate);
154.         //pfEndDate.CurrentValues.Add(dcEndDate);
155.
156.         // now adding all these parameter fields to the parameter collection
157.         paramFields.Add(pfItemId);
158.
159.         //paramFields.Add(pfStartDate);
160.         //paramFields.Add(pfEndDate);
161.         /////////////////////
162.         //Formula from Crystal
163.        //crViewer.SelectionFormula = "{COUNTRIES.REGION_ID} = " + int.Parse(Request.QueryString.Get("ItemId")) + "";
164.         crViewer.RefreshReport();
165.         // finally add the parameter collection to the crystal report viewer
166.         crViewer.ParameterFieldInfo = paramFields;
167.
168.
169.
170.     }
171. }

Keep your post to under 1200 characters, else you loose the formatting. (you can do two posts if need be).
Re. parameters. First, make sure yo have SP 1 for CR 10.5:
https://smpdl.sap-ag.de/~sapidp/012002523100009351512008E/crbasic2008sp1.exe
Next, see the following:
[Crystal Reports for Visual Studio 2005 Walkthroughs|https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/2081b4d9-6864-2b10-f49d-918baefc7a23]
CR Dev help file:
http://msdn2.microsoft.com/en-us/library/bb126227.aspx
Samples:
https://wiki.sdn.sap.com/wiki/display/BOBJ/CrystalReportsfor.NETSDK+Samples
Ludek
Follow us on Twitter http://twitter.com/SAPCRNetSup

WLC cert to avoid the security warning page

Hi guys,
I am doing some tests with installiing a 3rd party cert on a WLC to avoid the security warning page when trying to access the WLC through https, and I am following the following configuration example:
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00806e367a.shtml
I have followed the same precedures given in the above document, and I am using windows CA to sign the CSR just for a test, I could install the final .pem cert successfully onto the WLC however I am still getting the same warning page when I was trying to login to the WLC through https. I have checked in my certificate store and I have trusted the root CA which is the windows CA in this case.
I have also tried to access the WLC from the CA server (windows 2008 box) still getting the same warning message.
so what should I do in order to make this to work with windows CA? did I missed something in the configuration?
Thanks in advance for your time and help.
Andy

ok guys.... I was wrong last time... actually after double check again it was NOT working .... I think i just simply trusted the cert last time when i was using firefox....
I have tried a number of different things and double checked the places that mentioned previously in this thread however I could not pick up anything wrong in particular, although I know there must be something I have missed out.....
so this time I have also read through some other references on the web, and found the following:
http://www.my80211.com/home/2011/1/16/wlcgenerate-third-party-web-authentication-certificate-for-a.html
I think I did very similar config and only difference is that I am using unchained cert.
I have double checked the following:
on virtual interface configuration, I have ip address 1.1.1.1 and DNS host name as "wlc2112.mydomain.local"
from the controller GUI --> Security --> web auth --> certificate, under subject name, I have CN=wlc2112.mydomain.local, however under Issuer name, I have CN=mydomain, this is a bit different from the last screen shot in the above link. could this be a problem?
in windows 2003 server, with DNS server I have a field called "wlc2112" with IP address 1.1.1.1
as mentioned by Scott previously, I went to the mmc certificate snap in, and under trusted root certificate authorities, I have installed the WLC cert there and I could see it there as well.
now if I try to access the WLC GUI from here I am still getting the error message same as the one below:
http://www.vistaclues.com/the-security-certificate-presented-by-this-website-was-issues-for-a-different-website%E2%80%99s-address/
I then followed the instruction and continue to the website, and when I go file --> properties --> certificate, it actually shows the certificate is issued to 169.254.1.1 and issued by 169.254.1.1, with a red cross on the cert itself....... I have no idea where is this come from, so I just want to ask when I try to access the WLC GUI through a web browser, after I type in https://wlc-ip-address, how does the browser know / search for which certificate it needs to look into? I think in my case here it clearly points to the wrong certificate?
also on the server I went to http://127.0.0.1/certsrv and selected "download a CA certificate, certificate chain or CRL" and then "install this CA certificate chain", does this mean I acknowledge to trust the root CA by doing this?
I am not sure what I have missed out but it just does not work for some reason... is there any other places that I need to check/verify?
Sorry for the long writing but any comments would be highly appreciated.
Thanks in advance for your help.

How to avoid the duplicate values, I do not want the duplicate............

i have one database table called "sms1" that table is updated every day or on daily basis it has the following fields in it:
SQL> desc sms1;
Name Null? Type
MOBILE NUMBER
RCSTCNATCNATCNATCNAWTHER VARCHAR2(39 CHAR)
SNO NUMBER
INDATE DATE
From this table the is one column "RCSTCNATCNATCNATCNAWTHER VARCHAR2(39 CHAR)" . I am splitting it into different columns like :
SQL> desc smssplit;
Name Null? Type
R VARCHAR2(2 CHAR)
C VARCHAR2(2 CHAR)
S VARCHAR2(1 CHAR)
TC VARCHAR2(3 CHAR)
NA VARCHAR2(3 CHAR)
TC2 VARCHAR2(3 CHAR)
NA2 VARCHAR2(3 CHAR)
TC3 VARCHAR2(3 CHAR)
NA3 VARCHAR2(3 CHAR)
TC4 VARCHAR2(3 CHAR)
NA4 VARCHAR2(3 CHAR)
WTHER VARCHAR2(10 CHAR)
SNO NUMBER
INSERTDATA VARCHAR2(25 CHAR)
Now I am written a procedure to insert the data from "Sms1" table to smssplit table...
CREATE OR REPLACE PROCEDURE SPLITSMS
AS
BEGIN
INSERT INTO scott.SMSSPLIT ( R,C,S,TC,NA,TC2,NA2,TC3,NA3,TC4,NA4,WTHER,SNO)
SELECT SUBSTR(RCSTCNATCNATCNATCNAWTHER,1,2) R,
SUBSTR(RCSTCNATCNATCNATCNAWTHER,3,2) C,
SUBSTR(RCSTCNATCNATCNATCNAWTHER,5,1) S,
SUBSTR(RCSTCNATCNATCNATCNAWTHER,6,3) TC,
SUBSTR(RCSTCNATCNATCNATCNAWTHER,9,3) NA,
SUBSTR(RCSTCNATCNATCNATCNAWTHER,12,3) TC2,
SUBSTR(RCSTCNATCNATCNATCNAWTHER,15,3) NA2,
SUBSTR(RCSTCNATCNATCNATCNAWTHER,18,3) TC3,
SUBSTR(RCSTCNATCNATCNATCNAWTHER,21,3) NA3,
SUBSTR(RCSTCNATCNATCNATCNAWTHER,24,3) TC4,
SUBSTR(RCSTCNATCNATCNATCNAWTHER,27,3) NA4,
SUBSTR(RCSTCNATCNATCNATCNAWTHER,30,10) WTHER, SNO
FROM scott.SMS1 where SNO=(select MAX (sno) from SMS1);
END;
Now in order to update the second table with data from first table on regular basis I have written a job scheduler and I am using oracle 9.0. version...
DECLARE
X NUMBER;
JobNumber NUMBER;
BEGIN
SYS.DBMS_JOB.SUBMIT
job => X
,what => 'scott.SPLITSMS;'
,next_date => SYSDATE+1/1440
,interval => 'SYSDATE+1/1440 '
,no_parse => FALSE
:JobNumber := to_char(X);
END;
Now this job scheduler is working properly and updating the data for every one minute but it is taking or updating the duplicate values also ..like example:
R C S TC NA TC2 NA2 TC3 NA3 TC4 NA4 WTHER SNO
INSERTDATA
33 35 2 123 456 789 543 241 643 243 135 RRRRRR 55
06-SEP-2012 03:49:16
33 35 2 123 456 789 543 241 643 243 135 RRRRRR 55
06-SEP-2012 03:49:16
33 35 2 123 456 789 543 241 643 243 135 RRRRRR 55
06-SEP-2012 03:50:17
R C S TC NA TC2 NA2 TC3 NA3 TC4 NA4 WTHER SNO
INSERTDATA
33 35 2 123 456 789 543 241 643 243 135 RRRRRR 55
06-SEP-2012 03:50:17
33 35 2 123 456 789 543 241 643 243 135 RRRRRR 55
06-SEP-2012 03:51:19
33 35 2 123 456 789 543 241 643 243 135 RRRRRR 55
06-SEP-2012 03:51:19
R C S TC NA TC2 NA2 TC3 NA3 TC4 NA4 WTHER SNO
INSERTDATA
33 35 2 123 456 789 543 241 643 243 135 RRRRRR 55
06-SEP-2012 03:52:20
33 35 2 123 456 789 543 241 643 243 135 RRRRRR 55
06-SEP-2012 03:52:20
33 35 2 123 456 789 543 241 643 243 135 RRRRRR 55
06-SEP-2012 03:53:22
R C S TC NA TC2 NA2 TC3 NA3 TC4 NA4 WTHER SNO
INSERTDATA
33 35 2 123 456 789 543 241 643 243 135 RRRRRR 55
06-SEP-2012 03:53:22
33 35 2 123 456 789 543 241 643 243 135 RRRRRR 55
06-SEP-2012 03:54:45
33 35 2 123 456 789 543 241 643 243 135 RRRRRR 55
06-SEP-2012 03:54:45
Now I do not want the duplicate values to be updated ...and want them to ignore them.....
please I need a help on this query........How to avoid the duplicate values............

Look at the posts closely:might not be needed if formatted ;)
create or replace procedure splitsms as
begin
insert into scott.smssplit (r,c,s,tc,na,tc2,na2,tc3,na3,tc4,na4,wther,sno)
select substr(rcstcnatcnatcnatcnawther,1,2) r,
         substr(rcstcnatcnatcnatcnawther,3,2) c,
         substr(rcstcnatcnatcnatcnawther,5,1) s,
         substr(rcstcnatcnatcnatcnawther,6,3) tc,
         substr(rcstcnatcnatcnatcnawther,9,3) na,
         substr(rcstcnatcnatcnatcnawther,12,3) tc2,
         substr(rcstcnatcnatcnatcnawther,15,3) na2,
         substr(rcstcnatcnatcnatcnawther,18,3) tc3,
         substr(rcstcnatcnatcnatcnawther,21,3) na3,
         substr(rcstcnatcnatcnatcnawther,24,3) tc4,
         substr(rcstcnatcnatcnatcnawther,27,3) na4,
         substr(rcstcnatcnatcnatcnawther,30,10) wther,
         sno
    from scott.sms1 a
   where sno = (select max(sno)
                  from sms1
                 where sno != a.sno
               ); ---------------> added where clause with table alias.
end;Regards
Etbin

How to setup the security based on roles in Organization.

Hi,
How to setup the security based on roles in Organization.
For example:Few users are Manager and a few user are Non Manager .Manager should have access to all work data including Non Manager and Non Manager should access based role.How to setup this? How OBI server identify the user role?
kindly let me know.
Regards.,
CHR

Hi,
You need to have Back End support to achieve this. In Back End you need to create two groups . You need to know what joins has to be made for which group (which is more important) and also make session variable for the userrole (with SQL supporting it). In the BMM layer, we need to put the security join conditions in the 'where clause'.
And make a common report. User loggin in with the respective userid will have userrole and joins assigned in the Back end. And they will be viewing the report according to their access.
Hope this will solve your problem.
Regards
MuRam

How to avoid the event has been repeated many times in the background

Application, the main screen is divided into two containers:left and right container,
The right side of the container is divided into two containers:top and bottom container,
There is a button in the left container.
Click the button, the container at lower right will using ModuleManager load Module, The following container load of the right of the screen has been monitoring the container above the action.
Problem:
When you click the button repeatedly to load the container in the lower right, it will create multiple instances, and can not be freed immediately. When the above container do an action or event, there are multiple instances of monitoring exist.
The background will be repeat the action or event many times.
How to avoid the event has been repeated many times in the background?
Thanks

Flex harUI
multiple instances of a mxml, maybe ?

How to avoid the long time consuming process of settlement on periodic basi

For investment Project(purpose of capitalisation) related expenses We would like to show it Directly in Balance Sheet rather than P/L A/C.Whether it is feasible or not?as per one of consultant it will be first hit the p/L and after settlement it will only be shown in B/Sheet.So how to avoid the long time consuming process of settlement on periodic basis.

Hi, could you write down an example? And what you mean by investment project-is this an WBS?

How to avoid the pdf file in browser cache

i am opening pdf files through browser. After that same pdf changed their contents . after i open the pdf but it will not updated. Bcoz this file in cache . so how to avoid the cache store for pdf files.
plz help me!!!

the code is as bellow
File fBlob = new File ("test.pdf");
FileInputStream fIS = new FileInputStream(fBlob);
pstUpdate= con.prepareStatement("UPDATE table set file = ? where id = ?");
pstUpdate.setBinaryStream(1, fIS, (int) fBlob.length());
pstUpdate.setString(2, rs.getString("id"));
pstUpdate.execute();
con.commit();

How to call the secured EJB from timer ejb timedout method.

Hi All,
I have a couple of questions on EJB 3.1 Timer Service.
1. How to call the secured EJB (annotated @RolesAllowed) from Timer EJB @Timeout Method?
2. What's the default role/principal with which the Timer @Timeout Method gets called?
Please let me know any info regarding the same.
Thanks,
Suresh

I'd start here:
http://ant.apache.org/manual/index.html
If that doesn't help, go to the table of contents and start poking around. You don't need to read the whole thing front to back, but if you're not willing to spend some time researching and reading, you're not going to get very far.

How to avoid the screen of selection output device

Hi all,
Who can tell me how to avoid the screen selection output device when running a smartform.
Best regard.

Hi,
      data: wa_SSFCTRLOP type SSFCTRLOP.
       wa_SSFCTRLOP-DEVICE = 'PRINTER'.
       wa_SSFCTRLOP-NO_DIALOG = 'X'.
       wa_SSFCTRLOP-PREVIEW = 'X'.
    in the function module
   call function '....
   exporting
   CONTROL_PARAMETERS = wa_ssfctrlop
regards,
Santosh Thorat

How to avoid the transport request popup when changing real-time load behav

Hello experts,
I'm often switching between the two loading mode, and I already worked in systems where I don't have the popup for transport request : (so I guess there is a possible tuning anywhere)
How to avoid the "asking for a transport request" popup in BW when changing real-time load behaviour of an infocube
Thanks in advance, I will save precious time
Guillaume P.

Hello Krishnan,
i tried to switch all object types from "not changeable" to "changeable original", but still get the popup when switching cube loading mode.
Do you know the particular object type to manage ?
Hello Vishnu,
same thing, whatever the option is (switch on / off standard) I have the transport popup.
Anyway thanks for your try.

How to avoid the Blank elemts in the List Item

Dear All,
I am using a List Item
List Elements List Item Value
Yes 1
No 2
Only two elements in this List Item.But at Run time there is one Blank element.
I need to display only two elements from the List Item .How to avoid the Blank.
Thanks and Regards,
Fazil

Fazil,
I am using a List ItemList Elements List Item Value
Yes 1
No 2
Only two elements in this List Item.But at Run time there is one Blank element.
I need to display only two elements from the List Item .How to avoid the Blank.>
Maybe you actually have null entries in your list. You can clean it up using keys as discussed here http://paranoid-engineering.blogspot.in/2008/05/wonderland-of-oracle-forms-builder.html (Ignore the personal opinions of the author if you will ;) ).
Cheers,

How to avoid the Amount and Date values for VOID Cheques

Hi All,
I had created a two window i.e For Amount and Date. If I process the cheque the Amount value and Date should not trigger for VOID CHEQUES.
Can any one tel me how to avoid the Amount and Date values for VOID Cheques
Your help will be greatly appreciated.
Regards
Yathish

Hi,
I dont know which tablel you are referring to, is it PAYR table and the field VOIDR?
If a cheque is voided, it would have a reason and it is stored in VOIDR field of this PAYR table.
Check if the field VOIDR is filled, if it is filled, do not print the amount and date.
Regards
Subramanian

HT5312 HOW TO KNOW THE SECURITY QUESTIONS ABOUT APPLE ID?

HOW TO KNOW THE SECURITY QUESTIONS ABOUT APPLE ID?HOW TO KNOW THE SECURITY QUESTIONS ABOUT APPLE ID?

If you have a rescue email address (which is not the same thing as an alternate email address) set up on your account then steps 1 to 5 on the page that you posted from should let you reset them : go to https://appleid.apple.com/ and click 'Manage your Apple ID' on the right-hand side of that page and log into your account, then click on 'Password and Security' on the left-hand side of that page and on the right-hand side you should see an option to send security question reset info to your rescue email address.
If you don't have a rescue email address (you won't be able to add one until you can answer 2 of your questions) then you won't get the reset option - you will need to contact iTunes Support / Apple to get the questions reset.
Contacting Apple about account security : http://support.apple.com/kb/HT5699
When they've been reset (and if you don't already have a rescue email address) you can then use the steps half-way down the page that you posted from to add a rescue email address for potential future use
For future info typing all in capitals is considered shouting and makes posts difficult to read, and may mean that people don't reply

How to avoid the Security Constraint framework's user validating.

Similar Messages

Maybe you are looking for