How to determine if user is autheticated (from non-secured resource in web)

Is it possible to determine if a user is autheticated from a non-secured servlet in a web application?
I have a servlet served to both public and autheticated users. This servlet performs different logic depending the user whether is autheticated or not.
The getRemoteUser() is useless due to the servlet is not protected (for public users).
My application is set to use declarative security and form based logon.

Please try it out...getRemoteUser is the answer..
For example, Lets consider the following scenario.
S1 -- secured servlet
S2 -- public servlet
(assuming form-login already happened)
Req1 -- S1 -- dispatches to -- S2 (getRemoteUser returns the user authenticated)
Req1 -- S2 (getRemoteUser returns null)

Similar Messages

  • How to backup only users' relevant files from File History on Windows 8.1?

    Hi,
    I would like to find out how to backup certain user's files from File History on Windows 8.1?
    I'm planning to store the backup files on our server, over a shared network, so that client can retrieve them whenever they need.
    I manage to do one by excluding all the folders from c:\, but it occurs quite silly to me to go select one by one files to exclude them.
    Please advise if there is a better way?

    Hi,
    This IT Professional forum is for general questions, feedback, or anything else related to Office 2010, since your question is more related to Windows client, I'd recommend you post a new question in the following forum for further assistance:
    https://social.technet.microsoft.com/Forums/windows/en-US/home?category=w7itpro%2Cw8itpro%2Cwindowsvistaitpro%2Cwindowsxpitpro%2Cwindowsintune
    The reason why we recommend posting appropriately is you will get the most
    qualified pool
    of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us. Thank you for your understanding.
    Steve Fan
    TechNet Community Support
    It's recommended to download and install
    Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
    programs.

  • How to export & import customer table space from non-unicode to unicode sys

    hello all,
    I have performed a migration of Single code to Unicode system. -
    (ECC 6.0 SR2)
    After completion of export & import i have noticed  there is one customer table space which is missing.
    eg - PSAPABCD
    I have checked in source system & noticed that Table space is created by customer & not maintained properly as required,
    therefore it is not either exported or imported.
    Please advice me how should i manage to export tablespace from Non - unicode system & import in Unicode.
    Is there any work out.
    Thanks & rgds,
    -rahul

    Hi Rahul,
    please have a look at
    http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/f0f9f37c-be11-2a10-3baf-d5d7de5fb78d
    point 3) f. and g.
    However in order to keep consistency I would highly recommend to export and import all tables at the same time.
    Best regards,
    Nils Buerckel
    SAP AG

  • How much is the price of upgrading from CS5.5 Design and Web Premium to CS6 Design and Web Premium?

    How much is the price of upgrading from CS5.5 Design and Web Premium to CS6 Design and Web Premium? 
    And why is this price not on the Web site?
    And when will this price be added to the Web site?  It's long overdue.

    Sorry.  After downloading required Adobe CS6 Design and Web Premium files and attempting to install, the error message "
    The file archive part of Adobe CS6 Design and Web Premium is missing. You need all parts in the same folder in order to extract Adobe CS6 Design and Web Premium. Please download all parts" appears.  Using Window 8.  This happens on the Adobe Design and Web Premium CS6 installer file.

  • How to determine the user who placed a certain concurrent request?

    Hi there,
    Is there a way (SQL query, for example) that can help me determine the user (EBS username) who placed a certain concurrent request?
    Thanks,
    Tareq

    Hi Tareq;
    Please check below notes which could be helpful for your issue:
    Concurrent Request-whcih is submmited by one of the Oracle USER *<<Posted By Hussein Sawwan*
    How to See Others Concurrent Request Oracle 11i
    Concurrent program- How to find database session *<<Posted By Hussein Sawwan*
    Re: Reg: Apps Concurrent
    Regard
    Helios

  • How to edit other user's session from a session id?

    I want to ban a person on real time for example. Website's database ban checking is on the login level. So if i ban someone the user's session must be expired and relogin. But if i change user's session attiributes it will be real time ban.
    Shortly how can i edit some user's session from their session ids.
    Thanks
    null

    Use a filter and have it check with every page load (as one obvious solution).

  • How to determine the download media required from my License key?

    Hi
    After recently rebuilding a dead PC,  The user has advised me she used to use Illustrator.
    Unfortunately the user does not have the install media available.
    Support advised my license key is a volume license for Design Standard.
    I have downloaded Design Standard (Universal) but the Licence key is not accepted.
    Can anyone advise how to determine the correct download based on my License key?
    Many thanks

    Some times you may need to sign in to volume licensing account and download
    refer
    Adobe Licensing Website | Serial numbers | Orders | Accounts

  • How to determine best User Device Affinity Settings

    We've configured User Device Affinity for our site based on the canned defaults. Initially we started with 14 days and 1440 minutes. But after a recent deployment, we discovered that our Antivirus service account is registering as a "Primary User"
    on all of our machines which has triggered a very bad situation.
    My question is how do you determine these settings? My first try was to find a report that showed how many minutes each user was registering in the given period so that I could adjust it accordingly. I assume that my regular users are using the computers
    a lot more than my service account but I have no way of verifying this.
    I've tried combing through the security logs, but I'm not sure what SCCM is picking up on to determine the time period.
    To me, it seems that 24 hours is a really low threshold and that I could bump that up to 120 hours over 14 days pretty easily without issue. My concern is that there is a reason that they are setting it so low to begin with that I'm missing. Even then, I'm
    just randomly trying things hoping to get it right as I don't have the proper information to make the right decisions.
    Any ideas? Feedback?  

    Yeah, I saw those logs but it still seems mysterious to me. I'm not sure where it's getting it's info. I assume it's the security log for each machine but I have nothing to confirm that. It's odd because our service account for our antivirus solution isn't
    actually logging onto the machines so I'm not sure how it decides that this user is a primary user. 
    Ultimately, we worked around the problem by switching antivirus solutions but that won't be an option next time. 
    My guess is that we could have fixed our problem by adjusting our security logging settings in windows. But it wasn't something I wanted to do without direct confirmation with how this all works. 
    Thank you for your help on this though. 

  • How to migrate custom user attributes (UDF) from test environment to production when a sandbox is published

    Hi all,
    I like to migrate custom attributes from test environment to my production environment. I read OIM documentation and i tried to fallow these steps but I cannot export sandbox and import it because all sandboxes are published in the test environment.
    I exported and imported users metadata by deployment manager only. Now, all migrated attributes are in the OIM DB but I do not see these attributes in Administration Console.
    How can i solve this issue? Is it possible to export published sandbox and import it in the other environment?
    Thank you.
    Milan

    In OIM 11g R2 you need to export sandbox before publishing sandbox for custom user fields from DEV or TEST environment.
    Then import exported sandbox in the another environment.
    If you didn't exported custom user fields sandbox from your TEST or DEV in that case you need to create those again in another environment manually. There is no other option for this in OIM 11g R2.

  • How to determine the Country and Organization from IP

    Hi,
    I would like to determine the Country and Organization from a given IP. I have to write a JSP, which when given the IP address gives the country and the organization to which the IP belongs. The organization may be the ISP, or a MNC or any other corporate/government body, or it may be of an individual. I have to do it progamitically from inside a JSP?
    Any suggestions anybody
    Thanks in Advance for your reply

    even when tracking IP's, if it is static you can narrow it down pretty far - if it's dynamic, you can only narrow it down to a specific part of the country.

  • How to determine if user is logged in

    I am trying to look for a flag which tells me whether the user is logged into the application or not. I thought I could user :APP_USER but it can still contain value even if the user has logged out the application. We are using LDAP authentication. Thanks.

    I have some items on page 0 which I do not want displayed on the log in page. So I was looking for a condition which basically tells me whether the user has logged in or not. May be there is a better way of dealing with this other than figuring out if user is logged in. My understanding is that a user gets a session id regardless of whether the user is logged in or not. Upon successful login APEX creates a cookie with values that it uses to match with user session id to determine if user is logged in or not.

  • How to create windows users and groups from Java

    Hi,
    Can any one please tell me, which Package/API will helps to create windows users and groups from Java.
    Thanks,
    M.Prem.

    You can't do it with pure Java, and it's not in the core API. You'd have to write a native function to do it, using whatever API Windows provides, and then call it with JNI. Or look for a third party native-based Java library that already does that.

  • How to code the user exit userexit_number_range from mv45afzz

    Hi, i need to modify the user exit userexit_number_range from mv45afzz, this is an standard include so when i try to modify i get the request for the my access code.
    Can someone explain me what is the procedure to modify an user exit.
    Do i need to request an access code to modify this user exit.
    am i complete lost in the proces of coding user exits?
    i have already check many of the message posted.
    thank for advance

    Hi
    MV45AFZZ is a customer user exit to add customer functionality....so when u change first time..you need to provide access key...for the object...
    Take a Print screen of the screen displayed and send it to basis guy..who can provide you with access key for that object..then u can enter that value and modify the user-exit...
    To add your code into this user-exit...u need to place the cursor in the routine u want to change..and press Insert button on the Tool bar... which will open up space for u to enter the code...
    Thanks
    Balu

  • Help Pls: how to assign a user form to a non active sync resource adapter

    I need to implement a non active sync resource adapter, such as oracle database or RACF. When a user is assigned a resource by IdM, an account is created on that resource. I want to transform some attributes during the creation, such as pre-padding the accountId with a letter and zeros. My questions are:
    1) I think attribute transformation should be accomplished by user form. is it correct? How do I assign the user form to the non active sync resource?
    2) What workflow/userform should I change to accomplish that?
    Thanks a lot.

    A cleaner option would be to
    1. Create a custom form, which could be derived from the Tabbed User Form.
    2. Create a delegated admin, with account administrator capabilities at the minimum, and required controlled organization, and assign the above form to this delegated admin -- this is on the same page.
    3. Use this form to create IDs on the specific resource.
    Now in this custom form you could have the logic on how to create the ID in the specific resource. In fact you could have different logic for different resource. Check the tech deployment guide for the exact syntax, but the field might be:
    account[Res_Name].identity
    Note that this setting would override the 'Identity Template' setting as defined in the RA configuration.
    And BTW, it would really help if you readup the 'Forms' section in the guide.
    Regards,
    Suveer Chainani

  • How to determine the Current Domain name from inside an Mbean / Java Prog

    We have registered an Application Defined MBean. The mbean has several APIs. Now we want to determine the currrent domain using some java api inside this Mbean. Similarly we have deployed a Webapp/Service in the Weblogic domain. And inside this app we need to know the current Domain. Is there any java api that will give this runtime information.
    Note: We are the MBean providers not clients who can connect to the WLS (using user/passwd) and get the domain MBean and determine the domain.
    Fusion Applcore

    Not sure if this will address exactly what you are looking to do, but I use this technique all the time to access runtime JMX information from within a Weblogic deployed application without having to pass authentication credentials. You are limited, however, to what you can access via the RuntimeServiceMBean. The example class below shows how to retrieve the domain name and managed server name from within a Weblogic deployed application (System.out calls only included for simplicity in this example):
    package com.yourcompany.jmx;
    import javax.management.MBeanServer;
    import javax.management.ObjectName;
    import javax.naming.InitialContext;
    public class JMXWrapper {
        private static JMXWrapper instance = new JMXWrapper();
        private String domainName;
        private String managedServerName;
        private JMXWrapper() {
        public static JMXWrapper getInstance() {
            return instance;
        public String getDomainName() {
            if (domainName == null) {
                try {
                    MBeanServer server = getMBeanServer();
                    ObjectName domainMBean = (ObjectName) server.getAttribute(getRuntimeService(), "DomainConfiguration");
                    domainName = (String) server.getAttribute(domainMBean, "Name");
                } catch (Exception ex) {
                    System.out.println("Caught Exception: " + ex);
                    ex.printStackTrace();
            return domainName;
        public String getManagedServerName() {
            if (managedServerName == null) {
                try {
                    managedServerName = (String) getMBeanServer().getAttribute(getRuntimeService(), "ServerName");
                } catch (Exception ex) {
                    System.out.println("Caught Exception: " + ex);
                    ex.printStackTrace();
            return managedServerName;
        private MBeanServer getMBeanServer() {
            MBeanServer retval = null;
            InitialContext ctx = null;
            try {
                //fetch the RuntimeServerMBean using the
                //MBeanServer interface
                ctx = new InitialContext();
                retval = (MBeanServer) ctx.lookup("java:comp/env/jmx/runtime");
            } catch (Exception ex) {
                System.out.println("Caught Exception: " + ex);
                ex.printStackTrace();
            } finally {
                if (ctx != null) {
                    try {
                        ctx.close();
                    } catch (Exception dontCare) {
            return retval;
        private ObjectName getRuntimeService() {
            ObjectName retval = null;
            try {
                retval = new ObjectName("com.bea:Name=RuntimeService,Type=weblogic.management.mbeanservers.runtime.RuntimeServiceMBean");
            } catch (Exception ex) {
                System.out.println("Caught Exception: " + ex);
                ex.printStackTrace();
            return retval;
    }I then created a simply test JSP to call the JMXWrapper singleton and display retrieved values:
    <%@page contentType="text/html" pageEncoding="UTF-8"%>
    <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
       "http://www.w3.org/TR/html4/loose.dtd">
    <%@ page import="com.yourcompany.jmx.JMXWrapper"%>
    <%
       JMXWrapper jmx = JMXWrapper.getInstance();
       String domainName = jmx.getDomainName();
       String managedServerName = jmx.getManagedServerName();
    %>
    <html>
        <head>
            <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
            <title>JMX Wrapper Test</title>
        </head>
        <body>
            <h2>Domain Name: <%= domainName %></h2>
            <h2>Managed Server Name: <%= managedServerName %></h2>
        </body>
    </html>

Maybe you are looking for