How to enable DNSSEC - DNS Security validation in Resolver

Hi,
I would like to set my Mac to use DNSSEC (request secure answers and perform validation of answers). Anybody have an idea how to configure this?
I understand BIND 9 is in the OS but don't know how/if it ties into the name (DNS) resolver library which the apps (like Safari etc) use. I've realized that the usual UNIX style config files like /etc/named.conf and /etc/resolv.conf aren't really in use (see the Mac OS notices inside them).
This originally started as the ISP (Rogers) started displaying their own ad ridden search page for mis-typed/non-existent domain names typed into the web browser address bar. There was an opt out, which I used, but then it started displaying a highly annoying copy of Internet Exploder's DNS error page. Lately they started redirecting my Safari default home page (when starting Safari or shiftcmdH) to their own website instead of what I've configured Safari with (I actually use the default http://livepage.apple.com/, call me lame . So much for net neutrality...
DNSSEC may not solve this particular problem, since not all domains are secured anyways, but I'd like to try the option for other obvious reasons too.
PS. I couldn't find a topic on this. Apologies if there is already a thread on this topic and please direct me there if you know of it.
Cheers and hope you're having happy holidays!
Thanks in Advance!

If you want to report this issue to Apple's engineering, send a bug report or an enhancement request via its Bug Reporter system. To do this, join the Apple Developer Connection (ADC)—it's free and available for all Mac users and gets you a look at some development software. Since you already have an Apple username/ID, use that. Once a member, go to Apple BugReporter and file your bug report or enhancement request. The nice thing with this procedure over submitting feedback is that you get a response and a follow-up number; thus, starting a dialog with engineering.

Similar Messages

How to enable both WS Security and MTOM

I am trying to call a web service running in JBoss. The web service is enabled with both ws
security and MTOM as per the requirement. When i am trying to call the web method from my
java client, i am getting the below exception
Exception in thread "main" javax.xml.ws.soap.SOAPFaultException: Endpoint
{http://wsg.hpos.om.hp.com/}HPOSGatewayPort does not contain operation meta data for:
{http://www.w3.org/2001/04/xmlenc#}EncryptedData
at org.jboss.ws.core.jaxws.SOAPFaultHelperJAXWS.getSOAPFaultException
(SOAPFaultHelperJAXWS.java:72)
at org.jboss.ws.core.jaxws.binding.SOAP11BindingJAXWS.throwFaultException
(SOAP11BindingJAXWS.java:109)
at org.jboss.ws.core.CommonSOAPBinding.unbindResponseMessage
(CommonSOAPBinding.java:579)
at org.jboss.ws.core.CommonClient.invoke(CommonClient.java:381)
at org.jboss.ws.core.jaxws.client.ClientImpl.invoke(ClientImpl.java:300)
at org.jboss.ws.core.jaxws.client.ClientProxy.invoke(ClientProxy.java:166)
at org.jboss.ws.core.jaxws.client.ClientProxy.invoke(ClientProxy.java:152)
at $Proxy17.getName(Unknown Source)
at wsclient.TestHPOSClient.main(TestHPOSClient.java:106)
my client code is:
URL endpoint_new = new URL("http://15.70.176.190:9000/HPOSGateway/HPOSGateway?wsdl");
QName qname = new QName("http://wsg.hpos.om.hp.com/", "HPOSGatewayService");
HPOSGateway port = new HPOSGatewayService(endpoint_new,qname).getHPOSGatewayPort();
BindingProvider bp=(BindingProvider)port;
SOAPBinding binding = (SOAPBinding)bp.getBinding();
binding.setMTOMEnabled(true);
Map<String,Object> map = bp.getRequestContext();
map.put(BindingProvider.USERNAME_PROPERTY,"administrator");
map.put(BindingProvider.PASSWORD_PROPERTY,"da1sy");
URL securityURL = new File("c://jboss-wsse-client.xml").toURL();
((StubExt)port).setSecurityConfig(securityURL.toExternalForm());
((StubExt)port).setConfigName("Standard WSSecurity Client");
map.put(BindingProvider.ENDPOINT_ADDRESS_PROPERTY,
"http://15.70.176.190:9000/HPOSGateway/HPOSGateway");
System.setProperty("org.jboss.ws.wsse.keyStore", "c:\\wsse.keystore");
System.setProperty("org.jboss.ws.wsse.trustStore", "c:\\wsse.truststore");
System.setProperty("org.jboss.ws.wsse.keyStorePassword", "jbossws");
System.setProperty("org.jboss.ws.wsse.trustStorePassword", "jbossws");
System.setProperty("org.jboss.ws.wsse.keyStoreType", "jks");
System.setProperty("org.jboss.ws.wsse.trustStoreType", "jks");
System.out.println(port.getName("Welcome to this testing part."));
,, my jboss.wsse.client.xml is...
<?xml version="1.0" encoding="UTF-8" ?>
<jboss-ws-security xmlns="http://www.jboss.com/ws-security/config"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.jboss.com/ws-security/config http://www.jboss.com/ws-
security/schema/jboss-ws-security_1_0.xsd">
<config>
<encrypt type="x509v3" alias="wsse" />
<requires>
<encryption />
</requires>
</config>
</jboss-ws-security>
and my jboss-wsse-server.xml is ...
<?xml version="1.0" encoding="UTF-8"?>
<jboss-ws-security xmlns="http://www.jboss.com/ws-security/config"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.jboss.com/ws-security/config http://www.jboss.com/ws-
security/schema/jboss-ws-security_1_0.xsd">
<key-store-file>WEB-INF/wsse.keystore</key-store-file>
<key-store-password>jbossws</key-store-password>
<trust-store-file>WEB-INF/wsse.truststore</trust-store-file>
<trust-store-password>jbossws</trust-store-password>
<config>
<encrypt type="x509v3" alias="wsse"/>
<requires>
<encryption/>
</requires>
</config>
</jboss-ws-security>
i have my web service annotations like below.
@WebService(name="HPOSGateway",targetNamespace="http://wsg.hpos.om.hp.com/")
@EndpointConfig(configName = "Standard WSSecurity Endpoint")
@BindingType(javax.xml.ws.soap.SOAPBinding.SOAP11HTTP_MTOM_BINDING)
@HandlerChain(name = "HPOSGateway_handlerChain", file = "HPOSGateway_handler.xml")
public class HPOSGateway{
Can any one help me what is the problem and where i need to change? Please it is very
urgent.
Regards
Ramchand

Welcome to the forum!
Even if it were physically possible, you wouldn't be able to use both Ethernet ports at the same time, because the motherboard doesn't support more than one connection at the time.
Cheers,
George
In daily use: R60F, R500F, T61, T410
Collecting dust: T60
Enjoying retirement: A31p, T42p,
Non-ThinkPads: Panasonic CF-31 & CF-52, HP 8760W
Starting Thursday, 08/14/2014 I'll be away from the forums until further notice. Please do NOT send private messages since I won't be able to read them. Thank you.

How to Enable BIOS & HDD Security

I'm using my MacBook Air for work and have a need to enable a BIOS boot up and Hard Drive password. Is there any way to do this in Mac OS X 10.6.5?

You can enable a firmware password. The Firmware Password utility is in the /Applications/Utilities/ folder of your OS X installer disc. Copy it to your Utilities folder. Then see this article: Setting up firmware password protection in Mac OS X. Ignore instructions for Open Firmware Password and skip to the bottom for instructions for use on Intel hardware.

TS1424 My Apple ID has been disabled, it won't let me updated my previous purchases. No reason for why it has been disabled or how to enable it again. I reset my password, security questions and billing info. Nothing- Anybody has seen this before?...

My Apple ID has been disabled, it won't let me updated my previous purchases. No reason for why it has been disabled or how to enable it again. I reset my password, security questions and billing info. Nothing… I even called Apple SUpport 1-800 # and they said they can't help me...Anybody has seen this before?...

You need to contact itunes support.
http://www.apple.com/support/contact/
There is NO telephone support for itunes. Use the link above.

How programmatically "enable" the Page to have Item level security

Some body known how do we programmatically "enable" the Page to have
Item level security. - analogous to checking the box in the Page edit mode for "Enable item level security"

Hi, I only know portal.wwsbr_api.enable_ils_for_item.....
You can perform actions on multiple objects simultaneously.
Navigator > Page Groups(TAB) > PageGroup > Page > actions(link)
Click on actions link and in LOV, select "Enable ILS".
Hope this help.

How to Enable Secure Boot on UEFI Systems?

SymptomsWhen attempting to enable Secure Boot, the system does not allow you to select the option to enable or disable Secure Boot. This is due to the way Acer's UEFI implementation requires a Supervisor Password be set in order to access this option.
UEFI is a newer technology that replaces the older standard BIOS.
DiagnosisCreating a Supervisor Password in UEFI will allow you to access the Secure Boot options. It is important that you remember this password as it will be required to make any changes in the UEFI interface.
SolutionCreate a Supervisor Password to gain access to the Secure Boot option.
Refer to our FAQ for all the steps on how to access Secure Boot on Desktops, Notebooks, and Tablets:
Enable or Disable Secure Boot in Windows 8

Das macht man 2-3 mal und dann ist nix mehr mit Bios. Dann kommt Passwort ist falsch und das war's dann. Hab ich schon auf verschiedenen Lappis gehabt. Sprich TOSHIBA... und Aspire E1-571g. Beim Toshi den Baustein ausgelötet neuen gekauft, beschrieben und wieder eingelötet. Kostet schlappe 150,-€. Mal schauen was beim Acer rauskommt.Vielleicht gibt es ja noch einen Jumper um das UEFI BIOS zurückzusetzen

HT201303 I can't remember my security question answers, and my rescue email is no longer valid. How can I change my security question answers?

Help I can't remember my security question answers, and my rescue email on your records is no longer a valid email as I no longer work at that organisation. How can I reset my security questions or reset my rescue email?

Forgotten Security Questions/Answers
You need to contact Apple by:
1 - Use the Express lane and start here:
https://expresslane.apple.com
then click More Products and Services>Apple ID>Other Apple ID Topics>Forgotten Apple ID security questions.
or
Apple - Support -form iTunes Store - Contact Us
2 - Call Apple in your country by getting the number from here:
http://support.apple.com/kb/HE57
or
Apple ID: Contacting Apple for help with Apple ID account security
3 - Use your rescue email address if you set one up
Rescue email address and how to reset Apple ID security questions
For general information see:
Apple ID: All about Apple ID security questions

The security validation for this page is invalid – Infopath 2010

Hello Experts,
I have created browser enabled Infopath form and written a custom code (infopath 2010). I have a “Save” button on a form that submits the data into multiple relational sharepoint list. While debugging through VSTA everything goes well and successfully submits
the data, but after publishing a form(browser enabled) I am not able to save a data to sharepoint list. When I Clicked on save button, it just refreshing a page, even the same was getting after
made it to full trust and approved by Admin.
Before this I was using “Submit” button to submit a form, that time I was getting a popup with the message “There has been an error while processing the form”. And in log files it was showing error message as “The security validation
for this page is invalid”.
I referred many blogs regarding validation error and tried almost everything in every way, some of shortly mentioned below,
Formdigest (It not works for me)
Security Validation (It works perfectly)
The second option is working for me. (But this is not a good practice and also not recommended)
Just want to know “Without making Security Validation Off” how can I resolved this validation issue from infopath 2010 form.
Please share your thoughts on this. Any help is appreciated.
Regards,
Uday

Hi Uday,
Have you tried SPWebapplication.FormDigestSettings.Enabled = false to turn off the digest setting property for the web application? See this blog for the details.
http://ktskumar.wordpress.com/2009/03/09/the-security-validation-for-this-page-is-invalid-click-back-in-your-web-browser-refresh-the-page-and-try-your-operation-again/
Thanks & Regards,
Emir
Emir Liu
TechNet Community Support

Sun.security.validator.ValidatorException: Netscape cert type does not perm

Hi,
I am getting the following exception when clientAuthentication is enabled for ssl connection.
I am using tomcat and a java client in my application.
Please let me know how do i get through this.
Thanks in advance
-Sanjeev
Below trace is from catalina.out
===========================
http-8443-Processor24, SEND TLSv1 ALERT: fatal, description = certificate_unknown
http-8443-Processor24, WRITE: TLSv1 Alert, length = 2
http-8443-Processor24, called closeSocket()
http-8443-Processor24, handling exception: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: Netscape cert type does not permit use for SSL client
http-8443-Processor24, called close()
http-8443-Processor24, called closeInternal(true)
===================================
I get the below exception in my java client application.
==========================================
: 68 42 6F FD E9 35 AB E5 C7 48 31 2C 78 31 BA F0 hBo..5...H1,x1..
0020: EB 97 10 1F F9 B2 03 B7 7D CE 8A 04 73 37 07 A1 ............s7..
0030: 9D 46 5A A2 B7 99 EE 86 1D EE A1 E4 D6 64 73 9B .FZ..........ds.
0040: 6B FA D1 19 44 54 C0 47 DC F8 E1 4B 33 F6 0D 2D k...DT.G...K3..-
0050: C9 04 B7 E8 8F 67 00 99 78 67 CC BE 26 C4 73 B5 .....g..xg..&.s.
0060: 88 26 F6 08 B7 A3 89 A0 28 29 79 DD 16 B0 86 8F .&......()y.....
0070: DE AA EA D3 1F 9F 8B 5B E7 B4 51 3B C8 90 67 0D .......[..Q;..g.
0080: 68 46 F1 CC 10 D9 hF....
main, WRITE: TLSv1 Handshake, length = 134
main, WRITE: TLSv1 Change Cipher Spec, length = 1
main, handling exception: java.net.SocketException: Software caused connection abort: socket write error
main, SEND TLSv1 ALERT: fatal, description = unexpected_message
main, WRITE: TLSv1 Alert, length = 2
Exception sending alert: java.net.SocketException: Software caused connection abort: socket write error
main, called closeSocket()
Exception
=================================================

Netscape cert type does not permit use for SSL clientTry using another certificate. Your certificate can't be used as a web browser client certificate.

I have forgotten the answer to my security questions. How do i reset the security questions.

I Have forgotten the answer to the security questions, how do I reset the security questions to enable purchase a book from iTunes for the first time.

Alternatives for Help Resetting Security Questions and/or Rescue Mail
     1. If you have a valid rescue email address, then use this procedure:
         Rescue email address and how to reset Apple ID security questions.
     2. Fill out and submit this form. Select the topic, Account Security. You must
         have a Rescue Email to use this option.
     3. This is the only option if you do not already have a valid Rescue Email.
         These are telephone numbers for contacting Apple Support in your country.
         Apple ID- Contacting Apple for help with Apple ID account security. Select
         the appropriate country and call. Ask to speak to the Account Security Team.
     4. Account security issues almost always require you to speak directly to an
         Apple representative to securely establish your identity as the account holder.
         You can set it up so that Apple calls you, either immediately or at a time
         convenient to you.
            1. Go to www.apple.com/support.
            2. Choose Contact Support and click Contact Us.
            3. Choose Other Apple ID Topics and choose the appropriate topic for
                your issue.
            4. Follow the onscreen instructions.
         Note: If you have already forgotten your security questions, then you cannot
         set up a rescue email address in order to reset them. You must set up
         the rescue email address beforehand.
Your Apple ID: Manage My Apple ID.
                        Apple ID- All about Apple ID security questions.

How do you reset your security question if you dont remember the email with it?

I wanna reset my security questions but I don't remember the email with it because its not the same email as my apple id. Could someone please help me

Alternatives for Help Resetting Security Questions and/or Rescue Mail
     1. If you have a valid rescue email address, then use this procedure:
         Rescue email address and how to reset Apple ID security questions.
     2. Fill out and submit this form. Select the topic, Account Security. You must
         have a Rescue Email to use this option.
     3. This is the only option if you do not already have a valid Rescue Email.
         These are telephone numbers for contacting Apple Support in your country.
         Apple ID- Contacting Apple for help with Apple ID account security. Select
         the appropriate country and call. Ask to speak to the Account Security Team.
     4. Account security issues almost always require you to speak directly to an
         Apple representative to securely establish your identity as the account holder.
         You can set it up so that Apple calls you, either immediately or at a time
         convenient to you.
            1. Go to www.apple.com/support.
            2. Choose Contact Support and click Contact Us.
            3. Choose Other Apple ID Topics and choose the appropriate topic for
                your issue.
            4. Follow the onscreen instructions.
         Note: If you have already forgotten your security questions, then you cannot
         set up a rescue email address in order to reset them. You must set up
         the rescue email address beforehand.
Your Apple ID: Manage My Apple ID.
                        Apple ID- All about Apple ID security questions.

How can I reset my security questions?

In January 2012, I bought an iPod Touch 4th Generation, and used it about a year and a half. During this time, I got quite a few gift cards from family members, but I never really used the money, even though I redeemed it. Due to some misunderstandings, said iPod was lost for about another year and a half, but I was finally able to get it back a few days ago. However, during the time it went missing, I had logged into iTunes on my computer to update some information, including my email address. Since I hadn't used it for so much time, when I logged into iTunes on the iPod, it was still displaying the old email, so I logged in again. But when I try to buy something with the unused money from the giftcards, it asks me to answer the security questions. Here's the deal: I don't remember the answers [matter of fact, I don't remember setting them up in the first place] and I also hadn't set up a recovery account, and it's not like I can check to see if I saved the info anywhere, since the computer I was using at that time died out shortly after I lost said iPod. Is there anything I can do to reset my security questions? And even if I have to contact customer service, is there anything I can do to prove my identity?

Alternatives for Help Resetting Security Questions and/or Rescue Mail
     1. If you have a valid rescue email address, then use this procedure:
         Rescue email address and how to reset Apple ID security questions.
     2. Fill out and submit this form. Select the topic, Account Security. You must
         have a Rescue Email to use this option.
     3. This is the only option if you do not already have a valid Rescue Email.
         These are telephone numbers for contacting Apple Support in your country.
         Apple ID- Contacting Apple for help with Apple ID account security. Select
         the appropriate country and call. Ask to speak to the Account Security Team.
     4. Account security issues almost always require you to speak directly to an
         Apple representative to securely establish your identity as the account holder.
         You can set it up so that Apple calls you, either immediately or at a time
         convenient to you.
            1. Go to www.apple.com/support.
            2. Choose Contact Support and click Contact Us.
            3. Choose Other Apple ID Topics and choose the appropriate topic for
                your issue.
            4. Follow the onscreen instructions.
         Note: If you have already forgotten your security questions, then you cannot
         set up a rescue email address in order to reset them. You must set up
         the rescue email address beforehand.
Your Apple ID: Manage My Apple ID.
                        Apple ID- All about Apple ID security questions.

How to enable the EL in jsp page

hi can u tell 'how to enable the EL in jsp page'?

*I am getting below exception in tomcat when i inclued +<%@ page isScriptingEnabled="true" isELEnabled="true"%>+*
org.apache.jasper.JasperException: /index.jsp(1,1) Page directive has invalid attribute: isScriptingEnabled
     org.apache.jasper.compiler.DefaultErrorHandler.jspError(DefaultErrorHandler.java:40)
     org.apache.jasper.compiler.ErrorDispatcher.dispatch(ErrorDispatcher.java:407)
     org.apache.jasper.compiler.ErrorDispatcher.jspError(ErrorDispatcher.java:198)
     org.apache.jasper.compiler.JspUtil.checkAttributes(JspUtil.java:311)
     org.apache.jasper.compiler.Validator$DirectiveVisitor.visit(Validator.java:106)
     org.apache.jasper.compiler.Node$PageDirective.accept(Node.java:590)
     org.apache.jasper.compiler.Node$Nodes.visit(Node.java:2338)
     org.apache.jasper.compiler.Node$Visitor.visitBody(Node.java:2388)
     org.apache.jasper.compiler.Node$Visitor.visit(Node.java:2394)
     org.apache.jasper.compiler.Node$Root.accept(Node.java:489)
     org.apache.jasper.compiler.Node$Nodes.visit(Node.java:2338)
     org.apache.jasper.compiler.Validator.validate(Validator.java:1700)
     org.apache.jasper.compiler.Compiler.generateJava(Compiler.java:178)
     org.apache.jasper.compiler.Compiler.compile(Compiler.java:306)
     org.apache.jasper.compiler.Compiler.compile(Compiler.java:286)
     org.apache.jasper.compiler.Compiler.compile(Compiler.java:273)
     org.apache.jasper.JspCompilationContext.compile(JspCompilationContext.java:566)
     org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:317)
     org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:320)
     org.apache.jasper.servlet.JspServlet.service(JspServlet.java:266)
     javax.servlet.http.HttpServlet.service(HttpServlet.java:803)

How to enable remote debugging for a session other than the current one

Hi all,
I am trying to figure out how to enable remote debugging for a session other than the one I am currently using.
More specifically, we have an application that is making database calls to Oracle 11gR2. Something is causing an exception during this invocation. My system is currently not set up to recompile said application, so I can't just add the debug call to the code and recompile. Therefore I would like to be able to log into the database (as sys, if necessary) and invoke dbms_debug_jdwp.connect_tcp on the desired session.
The docs indicate that I should be able to do so:
dbms_debug_jdwp.connect_tcp(
host IN VARCHAR2,
port IN VARCHAR2,
session_id IN PLS_INTEGER := NULL,
session_serial IN PLS_INTEGER := NULL,
debug_role IN VARCHAR2 := NULL,
debug_role_pwd IN VARCHAR2 := NULL,
option_flags IN PLS_INTEGER := 0,
extensions_cmd_set IN PLS_INTEGER := 128);
But when I try (even as sys), I get the following:
exec dbms_debug_jdwp.connect_tcp('1.2.3.4',5678,<session id>,<session serial>);ORA-00022: invalid session ID; access denied
ORA-06512: at "SYS.DBMS_DEBUG_JDWP", line 68
ORA-06512: at line 1
00022. 00000 - "invalid session ID; access denied"
*Cause: Either the session specified does not exist or the caller
does not have the privilege to access it.
*Action: Specify a valid session ID that you have privilege to access,
that is either you own it or you have the CHANGE_USER privilege.
I've tried granting the 'BECOME USER' privilege for the relevant users, but that didn't help. I read something about having to set some kind of ACL as of 11gR1, but the reference documentation was very confusing.
Would someone be able to point me in the right direction? Is this even possible, or did I misread the documentation?

Interesting deduction, that would be very useful indeed. I hate recompiling just to add the debug call, and it can't be done in our production environment. But it seems unlikely to me it would be implemented this way.
I would cross-post this in the SQL AND PL/SQL forum though, as this is really a database issue, not with the SQL Developer tool. Do add the links to the other posts in each.
Regards,
K.

How to implement row level security?

Hi all,
There is a database which is for 3 companies to use it and how to use row level security to make sure that they can only manipluate their own data? For example, "employee" table, for each company they just can see their own employees information. How to use dynamic view to do it?
Many Thanks
Amy

Here are two options to achieve what you want.
A. You can do this by coding, that's if you are ready to. Are you? If yes then try the steps below:
1. create a security codes table. Say for example
001 - company a
002 - company b
2. create a security table that will list all users and which company they should have access to. You can also implement this by roles.
3. alter all tables in the application schema to add a security code column. This will be a foreign key reference to table created in 1 above.
4. update all data in the tables according to which company they belong to.
5. write a procedure or package that does a validity check whenever a user requests for data. This procedure/package determines which company data the user has access/rights to.
With this, you should be able to achieve what you want if you do not want to spend on VPD and FGAC. The problem comes where there are users who would have cross access to data from both companies. In this regard, then you have to modify your security table a little bit to handle this.
B. This option i will admit is not so clean. You can also achieve this by two different views for every table in the application schema. And on each of these views, create a private synonym for every user. For illustration purposes:
Table name = Employee.
Create a view employee_a on employee
create a view employee_b on employee
Let's say you have users x and y. X has access to employees of company a and y has access to employees of company b. You can now create private synonyms for each of these users as follows:
create synonym employee on employee_a in x schema.
create synonym employee on employee_b on y schema.
This i have not tried but believe should work.
Hope one of these options serve your purpose.

How to enable DNSSEC - DNS Security validation in Resolver

Similar Messages

Maybe you are looking for