How to enable UWC with SSL on Communication Suite 5?
Sorry for asking this FAQ level question at first.
I have watched this for almost one year but still have problem for enabling UWC + SSL + Self signed certificate.
Would have user to login into https://abc.com/uwc then use the messenger and calendar servers from one single uwc interface, all the connections are secured.
Is there any step-by-step procedure for reference? I appreciate for your help.
The application software is JCS 5.
Best regards,
Robert
Edited by: Robert_Chang on Apr 8, 2008 10:24 AM
Robert_Chang wrote:
Sorry for asking this FAQ level question at first.
I have watched this for almost one year but still have problem for enabling UWC + SSL + Self signed certificate.Let me just point out that using self-signed-certificates are not a good idea in a production environment. They can cause a number of headaches (e.g. trust relationships between products) and don't offer the same level of security/verification as a proper CA signed cert.
Would have user to login into https://abc.com/uwc then use the messenger and calendar servers from one single uwc interface, all the connections are secured.
Is there any step-by-step procedure for reference? I appreciate for your help.There isn't one -- I have been meaning to write one but it's an extremely time consuming process and I haven't gotten around to it.
Where it gets complex is if you messaging/calendar on different hosts (hence different certificate names), including LDAP SSL as well (UWC->LDAP, Messaging->LDAP, Calendar->LDAP), Outlook Connector using SSL, Access Manager using SSL, configuring SSL during initial installation vs. post-installation, renewing SSL certificates, problems when SSL certificates expire and so-on...
I may end up writing a guide for the next release (if time permits).
Regards,
Shane.
Similar Messages
-
How to configure sso with SSL step by step
Purpose
In this document, you can learn how to configure SSO with SSL. After user have certificate installed in browser, he can login without input username and password.
Overview
In this document we will demonstrate:
1. How to configure OHS support SSL
2. How to Register SSO with SSL
3. Configure SSO for certificates
Prerequisites
Before start this document, you should have:
1. Oracle AS 10g infrastructure installed (10.1.2)
2. OCA installed
Note:
1. “When you install Oracle infrastructure, please make sure you have select OCA.
2. How Certificate-Enabled Authentication Works:
a. The user tries to access a partner application.
b. The partner application redirects the user to the single sign-on server for authentication. As part of this redirection, the browser sends the user's certificate to the login URL of the server (2a). If it is able to verify the certificate, the server returns the user to the requested application.
c. The application delivers content. Users whose browsers are configured to prompt for a certificate-store password may only have to present this password once, depending upon how their browser is configured. If they log out and then attempt to access a partner application, the browser passes their certificate to the single sign-on server automatically. This means that they never really log out. To effectively log out, they must close the browser.
Enable SSL on the Single Sign-On Middle Tier
The following steps involve configuring the Oracle HTTP Server. Perform them on the single sign-on middle tier. In doing so, keep the following in mind:
l You must configure SSL on the computer where the single sign-on middle tier is running.
l You are configuring one-way SSL.
l You may enable SSL for simple network encryption; PKI authentication is not required. Note though that you must use a valid wallet and server certificate. The default wallet location is ORACLE_HOME/Apache/Apache/conf/ssl.wlt/default.
1. Back up the opmn.xml file, found at ORACLE_HOME/opmn/conf
2. In opmn.xml, change the value for the start-mode parameter to ssl-enabled. This parameter appears in boldface in the xml tag immediately following.
<ias-component id="HTTP_Server">
<process-type id="HTTP_Server" module-id="OHS">
<module-data>
<category id="start-parameters">
<data id="start-mode" value="ssl-enabled"/>
</category>
</module-data>
<process-set id="HTTP_Server" numprocs="1"/>
</process-type>
</ias-component>
3. Update the distributed cluster management database with the change: ORACLE_HOME/dcm/bin/dcmctl updateconfig -ct opmn
4. Reload the modified opmn configuration file:
ORACLE_HOME/opmn/bin/opmnctl reload
5. Keep a non-SSL port active. The External Applications portlet communicates with the single sign-on server over a non-SSL port. The HTTP port is enabled by default. If you have not disabled the port, this step requires no action.
6. Apply the rule mod_rewrite to SSL configuration. This step involves modifying the ssl.conf file on the middle-tier computer. The file is at ORACLE_HOME/Apache/Apache/conf. Back up the file before editing it.
Because the Oracle HTTP Server has to be available over both HTTP and HTTPS, the SSL host must be configured as a virtual host. Add the lines that follow to the SSL Virtual Hosts section of ssl.conf if they are not already there. These lines ensure that the single sign-on login module in OC4J_SECURITY is invoked when a user logs in to the SSL host.
<VirtualHost ssl_host:port>
RewriteEngine on
RewriteOptions inherit
</VirtualHost>
Save and close the file.
7. Update the distributed cluster management database with the changes:
ORACLE_HOME/dcm/bin/dcmctl updateconfig -ct ohs
8. Restart the Oracle HTTP Server:
ORACLE_HOME/opmn/bin/opmnctl stopproc process-type=HTTP_Server
ORACLE_HOME/opmn/bin/opmnctl startproc process-type=HTTP_Server
9. Verify that you have enabled the single sign-on middle tier for SSL by trying to access the OracleAS welcome page, using the format https://host:ssl_port.
Reconfigure the Identity Management Infrastructure Database
Change all references of http in single sign-on URLs to https within the identity management infrastructure database. When you change single sign-on URLs in the database, you must also change these URLs in the targets.xml file on the single sign-on middle tier. targets.xml is the configuration file for the various "targets" that Oracle Enterprise Manager monitors. One of these targets is OracleAS Single Sign-On.
1. Change Single Sign-On URLs
Run the ssocfg script, taking care to enter the command on the computer where the single sign-on middle tier is located. Use the following syntax:
UNIX:
$ORACLE_HOME/sso/bin/ssocfg.sh protocol host ssl_port
Windows:
%ORACLE_HOME%\sso\bin\ssocfg.bat protocol host ssl_port
In this case, protocol is https. (To change back to HTTP, use http.) The parameter host is the host name, or server name, of the Oracle HTTP listener for the single sign-on server.
Here is an example:
ssocfg.sh https login.acme.com 4443
2. Restart OC4J_SECURITY instance and verify the configuration
To determine the correct port number, examine the ssl.conf file. Port 4443 is the port number that the OracleAS installer assigns during installation.
If you run ssocfg successfully, the script returns a status 0. To confirm that you were successful, restart the OC4J_SECURITY instance:
ORACLE_HOME/opmn/bin/opmnctl restartproc process-type=OC4J_SECURITY
Then try logging in to the single sign-on server at its SSL address:
https://host:ssl_port/pls/orasso/
3. Back up the file targets.xml:
cp ORACLE_HOME/sysman/emd/targets.xml ORACLE_HOME/sysman/emd/targets.xml.backup
4. Open the file and find the target type oracle_sso_server. Within this target type, locate and edit the three attributes that you passed to ssocfg:
· HTTPMachine—the server host name
· HTTPPort—the server port number
· HTTPProtocol—the server protocol
If, for example, you run ssocfg like this:
ORACLE_HOME/sso/bin/ssocfg.sh http sso.mydomain.com:4443
Update the three attributes this way:
<Property NAME="HTTPMachine" VALUE="sso.mydomain.com"/>
<Property NAME="HTTPPort" VALUE="4443"/>
<Property NAME="HTTPProtocol" VALUE="HTTPS"/>
5.Save and close the file.
6. Reload the OracleAS console:
ORACLE_HOME/bin/emctl reload
7. Issue these two commands:
ORACLE_HOME/opmn/bin/opmnctl restartproc process-type=HTTP_Server
ORACLE_HOME/opmn/bin/opmnctl restartproc process-type=OC4J_SECURITY
Registering mod_osso
1. This command sequence that follows shows a mod_osso instance being reregistered with the single sign-on server.
$ORACLE_HOME/sso/bin/ssoreg.sh
-oracle_home_path $ORACLE_HOME
-config_mod_osso TRUE
-mod_osso_url https://myhost.mydomain.com:4443
2. Restarting the Oracle HTTP Server
After running ssoreg, restart the Oracle HTTP Server:
ORACLE_HOME/opmn/bin/opmnctl restartproc process-type=HTTP_Server
Configuring the Single Sign-On System for Certificates
1. Configure policy.properties with the Default Authentication Plugin
Update the DefaultAuthLevel section of the policy.properties file with the correct authentication level for certificate sign-on. This file is at ORACLE_HOME/sso/conf. Set the default authentication level to this value:
DefaultAuthLevel = MediumHighSecurity
Then, in the Authentication plugins section, pair this authentication level with the default authentication plugin:
MediumHighSecurity_AuthPlugin = oracle.security.sso.server.auth.SSOX509CertAuth
2. Restart the Single Sign-On Middle Tier
After configuring the server, restart the middle tier:
ORACLE_HOME/opmn/bin/opmnctl restartproc process-type=HTTP_Server
ORACLE_HOME/opmn/bin/opmnctl restartproc process-type=OC4J_SECURITY
Bringing the SSO Users to OCA User Certificate Request URL
The OCA server reduces the administrative and maintenance cost of provisioning a user certificate. The OCA server achieves this by authenticating users by using OracleAS SSO server authentication. All users who have an Oracle AS SSO server account can directly get a certificate by using the OCA user interface. This reduces the time normoally requidred to provision a certificate by a certificate authority.
The URL for the SSO certificate Request is:
https://<Oracle_HTTP_host>:<oca_ssl_port>/oca/sso_oca_link
You can configure OCA to provide the user certificate request interface URL to SSO server for display whenever SSO is not using a sertificate to authenticate a user. After the OracleAS SSO server authenticates a user, it then display the OCA screen enabling that user to request a certificate.
To link the OCA server to OracleAS SSO server, use the following command:
ocactl linksso
opmnctl stoproc type=oc4j instancename=oca
opmnctl startproc type=oc4j instancename=oca
You also can use ocactl unlinksso to unlink the OCA to SSO.I have read the SSO admin guide, and performed the steps for enabling SSL on the SSO, and followed the steps to configure mod_osso with virtual host on port 4443 as mentioned in the admin guide.
The case now is that when I call my form (which is developed by forms developer suite 10g and deployed on the forms server which is SSO enabled) , it calls the SSO module on port 7777 using http (the default behaviour).
on a URL that looks like this :
http://myhostname:7777/pls/orasso/orasso.wwsso_app_admin.ls_login?Site2pstoreToken=.......
and gives the error :
( Forbidden
You don't have permisission to access /sso/auth on this server at port 7777)
when I manually change the URL to :
https://myhostname:4443/pls/orasso/orasso.wwsso_app_admin.ls_login?Site2pstoreToken=.......
the SSO works correctly.
The question is :
How can I change this default behaviour and make it call SSO on port 4443 using https instead ?
Any ideas ?
Thanks in advance -
so I've changed my hard drive for an ssd and now I've been told to enable trim ? now I've got the apple cover will they show me how to enable it with out some program of the internet ?
Use an app called chameleon ssd optimizer.
I enabled trim with it after almost a year of having installed a Samsung 840 pro SSD and my read/write speeds almost quadrupled.
I would definite;y advise using it even though Samsung SSD's come with there own garbage disposal.
Hope that helps. -
SSL SSO Communications Suite 2005Q4 setup
I posted this a few days agao on google groups and have not gotten any responses. Can anyone tell me if its possible to do SSl SSO on Communications Suite. I just want my users to access Communications Express [uwc] with mail and calendar using SSL.
I have Messaging Server 6.2-3.04 (built July 15 2005)
Thanks in advance.
-James
SSL SUN Communications Suite 2005Q4
Only 1 message in topic - view as tree
From: jamturtle - view profile
Date: Mon, Apr 3 2006 3:48 pm
Email: "jamturtle" <[email protected]>
Groups: comp.sys.sun.apps, comp.sys.sun.admin, comp.unix.solaris, comp.unix.admin
Not yet rated
Rating:
show options
Reply | Reply to Author | Forward | Print | Individual Message | Show original | Remove | Report Abuse | Find messages by this author
Does anybody know how to setup step-by-step SSL and SSO on SUN's
Communications Suite? I am using [or rather testing] The following
products: Calendar Server 6, Messaging Server 6, Communications Express
6, Web Server 6.1 and Access Manager 7. All on just one machine.
I have managed to get Single Sign-On working fine with Comm Express but
I can not seem to manage to get it working with SSL. I mainly want to
run https via Comm Express to access messenger and calendar. This works
great on http.
I have also read [and read] SUN's documentation about setting up SSO
with SSL but that is a bit confusing [to say the least]. I found in the
Comm Express Admin Guide:
Messaging SSO is not supported in SSL.
Work around
To support Messaging SSO with SSL perform the following steps:
How to enable Messaging SSO with SSL
1. Configure Web Server in SSL mode.
2. Configure Communications Express for SSL port of Web Server.
3. Set uwcauth.ssl.enabled=true.
4. Set uwcauth.https.port to SSL port of Web Server.
5. Enable Messaging Server in SSL mode.
6. Set the webmail.port in uwcconfig.properties to SSL port of
Messaging Server.
7. Provide messagingsso.ims.url to Non SSL port of Messaging Server
8. Install the Certificate Management Server root Certificate Authority
(CMS root CA) on both Web Server and Messaging Server.
9. Restart Web Server.
10. Provide a value to local.webmail.sso.ims.verifyurl pointing to Non
SSL port of Messaging Server.
11. Restart Messaging Server.
The problem here is what is meant by "CMS root CA" ?? of course when
searched on Google I get the Communications Express Admin Guide lol :^)
Anyways I got a Thawte Cert for the web server, this seems to work fine
and the "uwc" login page works fine too. Now what do I do to get
messenger to work? Get another Cert?? It says "install CMS root CA on
both Web Server and Messenger" how??? maybe I need to create self
signed certificates??
I need to have calendar working too, there is a SSL setup for calendar
but will it run with SSO uwc??
I also run into the problem in the Admin Guides of using "iplanet
console" to manage certs and some other features, what is this? of
course I can't find it or SUN has changed its name [but still suggests
to use it].
Well I am a bit frustrated, maybe something I am missing or not read
correctly [my apologies]. I do not think this to be uncommon to want an
integrated mail and calendar application running SSO and SSL. So if
anybody knows an easy step-by-step setup or a link to such a thing
please let me know. I am not new to Unix nor Solaris but definitely
know little about Communications Suite [or maybe SUN has changed that
name too :^(
Thanks in Advance
-JamesThanks Jay but I think we are now digressing. I am
sorry if it sounds like I am complaining, I just want
to figure out to how to make this work. Someone must
know how to set this up step-by-step. I think I
understand the difference between SSO and SSL and
that they are not interchangeable, I want both to
work.
If I was to use only ME then I don't need SSO, I
would just use it with SSL, which I still have not
figured out how to do, because I do not know where to
find iPlanet Console???Iplanet Console may be found in your Directory SErver install. command, "startconsole:
You do not need to use Console for anything.
You can use "certutil" to manipulate certificates, should you prefer to do that.
You can use "configutil" to change config settings.
do you know where it should
be, is there a default path? Does it install with ME?It's really the Directory Server console. You have it.
Can I download it?
I also understand that the benefit of SSO is not to
have to sign on several times and that in my case we
are talking about 3 different pieces of software, CE,
ME and Calendar [plus Access Manager].
I am running my system with SSO on CE, ME and
Calendar and it works great. I wish to offer this
setup so my users can access both mail and calendar
via one web interface, just like hotmail, yahoo etc.
I also want remote users to access the same web
b interface via SSL [their passwds will have some
level of security]. As usual, you need to take these one step at a time. First, get your SSL working. Then get CE working. Then follow the documentation to get SSO working. It does work. Many others have been successful getting it all to work.
The reason I asked about possibly another SUN product
is because I have setup other products like IMP and
Zimbra via SSL and they work in this fashion.
I am fairly sure this is possible with these SUN
products but I am still trying to figure out how to
do it.
This is why I am asking if anybody has any experience
setting up this combination of products in this
fashion, please let me know or guide me in the right
direction.
Thanks in advance
-James -
How to enable DVM cache policy in soa suite 11G
Hello,
Can someone describe how to enable DVM cache policy in soa suite 11G?. Also how can i configure the cache policy to load values to cache at server startup? I have very large DVM which i want to load to cache for faster access.
Thanks in advance.Hi,
DVM cache policy is lazy load. there is no option to preload the cache with server startup currently. However this would be affecting only the first request the susequent requests are serviced from cache.
HTH..
appologies for reaching on this late.
regards,
Jitendra -
[Troubleshoot] MSI Gaming 7 ~ How to enable XMP with HyperX Fury RAM?
Hi folks,
First time posting here and new to the MSI brand with a Gaming 7 and MSI GTX 970 Gaming 4G GPU. They are quite awesome so far.
Anyway, I'm also new to the intel world after using AMD chips for the past number of years and I am wondering what is this buzz about XMP profiles? My new RAM sticks support XMP according to their website. But I'm not sure how to enable them in the UEFI Bios. Videos show that there should be a button right above the GENIE OC but I dont see one. Can someone help me understand how to enable it?
Spec info:
Intel 4790k
Gaming 7 Motherboard
HyperX Fury RAM, 2x8GB (16GB) 1866mhz
EDIT: I cannot share external links but if you search xmp hyperx certifications you'll see that the RAM is XMP ready.
Thanks!Quote from: rp00 on 03-June-15, 22:47:43
but if you set your mem settings to auto, it should pick up 1866 speed from SPD
Check with CPU-Z
Such is not possible. Programmed SPD settings to be used depend on the abilities of the memory controller (here means the cpu) used. The maximum specified memory support of an i7 4790K is DDR3 and DDR3L 1333/1600 (http://ark.intel.com/products/80807/Intel-Core-i7-4790K-Processor-8M-Cache-up-to-4_40-GHz). It is therefor impossible to run memory without an XMP extension (like the Fury sticks) on the platform in question above ddr3 1600 without setting speeds and timings manually. -
How to enable iPad with right passcode after entering wrong passcode 6 times
Hi, my iPad is disabled because my daughter entered wrong passcode more than 6 times. I do remember the passcode myself.
How can I enable the iPad without wiping everything? I do not see an option to enter passcode anywhere. I never backed up my iPad. When I connect the iPad to iTunes, it keeps on giving the message that respond on iPad. But the iPad only shows that iPad is disabled.
Find my iPad is also not enabled.
I recently upgraded the OS to iOS 8.
Thank you for your help in advance.FORCE IPAD INTO RECOVERY MODE
1. Turn off iPad
2. Turn on computer and launch iTunes (make sure you have the latest version of iTune)
3. Plug USB cable into computer's USB port
4. Hold Home button down and plug the other end of cable into docking port.
DO NOT RELEASE BUTTON until you see picture of iTunes and plug
5. Release Home button.
ON COMPUTER
6. iTunes has detected iPad in recovery mode. You must restore this iPad before it can be used with iTunes.
7. Select "Restore iPad"...
Note:
1. Data will be lost if you do not have backup
2. You must follow step 1 to step 4 VERY CLOSELY.
3. Repeat the process if necessary. -
How to enable the filetransfer in Oracle Communicator 11g?
Hi,
I've already change the relevant values in the Program Files\Oracle\Oracle Communicator\defaults.xml as following:
<FileTransfer>
<Location>http://example.com:7001/filetransfer</Location>
</FileTransfer>
<FileTransferEnabled>1</FileTransferEnabled>
But the Communicator still can't send files, how to resolve it?
Best Regards,
SeanHi dprabhu,
I installed the wlcs in a All-in-One Administration Server. The host name is set to example.com and the server listen port is 7001. The original default.xml after the installation is below:
<?xml version="1.0" encoding="UTF-8"?>
<Account>
<Version>11.1.1.10002</Version>
<AccountName></AccountName>
<AgentId></AgentId>
<SipUri></SipUri>
<FullName></FullName>
<FirewallHeartbeat>1</FirewallHeartbeat>
<FirewallHeartbeatInterval>40000</FirewallHeartbeatInterval>
<UseOutboundProxy>1</UseOutboundProxy>
<OutboundProxyAddress></OutboundProxyAddress>
<UseRPortForNatTraversal>1</UseRPortForNatTraversal>
<UseStun>0</UseStun>
<StunServerAddress></StunServerAddress>
<StunServerPort></StunServerPort>
<Theme>Slate</Theme>
<ServiceNote></ServiceNote>
<DeviceQValue>1.0</DeviceQValue>
<Notifications>
<UseNotifications>0</UseNotifications>
<Location></Location>
<LastShowOnceMessageID></LastShowOnceMessageID>
</Notifications>
<Transport>
<ContactTransport>TCP</ContactTransport>
<RegisterContactTransport>TCP</RegisterContactTransport>
</Transport>
<UPnP>
<Enabled>0</Enabled>
</UPnP>
<ConnectionType>256</ConnectionType>
<SilenceSuppression>0</SilenceSuppression>
<AcousticEchoCancellation>0</AcousticEchoCancellation>
<AutomaticGainControl>1</AutomaticGainControl>
<PCSpeakerEnabled>0</PCSpeakerEnabled>
<AllowVolumeCheck>1</AllowVolumeCheck>
<PreferredCaptureDevice></PreferredCaptureDevice>
<ImageResolution>QCIF</ImageResolution>
<VideoStandard>LSVX</VideoStandard>
<T1>500</T1>
<T2>4000</T2>
<T4>5000</T4>
<PreferredSipPort>5060</PreferredSipPort>
<PreferredAudioRtpPort></PreferredAudioRtpPort>
<PreferredVideoRtpPort></PreferredVideoRtpPort>
<RegisterExpireTime>600</RegisterExpireTime>
<PresenceSubscribeExpireTime>3600</PresenceSubscribeExpireTime>
<WatcherInfoSubscribeExpireTime>3600</WatcherInfoSubscribeExpireTime>
<MessageWaitingSubscribeExpireTime>3600</MessageWaitingSubscribeExpireTime>
<PublishExpireTime>600</PublishExpireTime>
<NetDetectionEnabled>1</NetDetectionEnabled>
<UserIdleTimeOut>1</UserIdleTimeOut>
<UserIdleTimeOutValue>5</UserIdleTimeOutValue>
<ShowSmilies>1</ShowSmilies>
<ShowMessageTimestamps>1</ShowMessageTimestamps>
<UseHotKeys>1</UseHotKeys>
<AutoAnswerEnabled>0</AutoAnswerEnabled>
<SavePasswordPreference>0</SavePasswordPreference>
<ContactListSortCriteria>status</ContactListSortCriteria>
<DeclineResponseCode>486</DeclineResponseCode>
<Sounds>
<Sound>
<Event>UserOnline</Event>
<File>UserOnline.wav</File>
<Mute>0</Mute>
</Sound>
<Sound>
<Event>UserOffline</Event>
<File>UserOffline.wav</File>
<Mute>0</Mute>
</Sound>
<Sound>
<Event>IncomingMessage</Event>
<File>IncomingMessage.wav</File>
<Mute>0</Mute>
</Sound>
<Sound>
<Event>VoiceMessageAvailable</Event>
<File>VoiceMessageWaiting.wav</File>
<Mute>0</Mute>
</Sound>
</Sounds>
<Ui>
<MainDlgTopMost>0</MainDlgTopMost>
<SendMessageWithEnter>1</SendMessageWithEnter>
<HideHoldOnCallSwitchingWarning>0</HideHoldOnCallSwitchingWarning>
<BlockBuddiesOnDelete>1</BlockBuddiesOnDelete>
<PresenceMenu></PresenceMenu>
<MainDlgCloseToTray>1</MainDlgCloseToTray>
<MainDlgCloseToTrayWarning>1</MainDlgCloseToTrayWarning>
<HideCameraNotFoundWarning>0</HideCameraNotFoundWarning>
<ShowOfflineContacts>0</ShowOfflineContacts>
<ShowContactsWithPhone>0</ShowContactsWithPhone>
<Dialogs>
</Dialogs>
</Ui>
<LdapServers></LdapServers>
<Credentials></Credentials>
<RingSignalMap></RingSignalMap>
<SoundEffects></SoundEffects>
<XDMSSettings>
<UseHttps>0</UseHttps>
<Host></Host>
<Port></Port>
<RootContext></RootContext>
<PresRuleAUID></PresRuleAUID>
<PresRuleDocName></PresRuleDocName>
<HardStateAUID></HardStateAUID>
<HardStateDocName></HardStateDocName>
<ResourceListsAUID></ResourceListsAUID>
<ResourceListsDocName></ResourceListsDocName>
</XDMSSettings>
<Provisioning>
<Location></Location>
</Provisioning>
<FileTransfer>
<Location></Location>
</FileTransfer>
<InboxService>
<Enabled>0</Enabled>
<Name></Name>
<Location></Location>
</InboxService>
<PlugInProperties></PlugInProperties>
<Groups></Groups>
<PresenceEnabled>1</PresenceEnabled>
<AddressListStoreEnabled>0</AddressListStoreEnabled>
<FileTransferEnabled>0</FileTransferEnabled>
<SMSEnabled>0</SMSEnabled>
<AudioEnabled>0</AudioEnabled>
<VideoEnabled>0</VideoEnabled>
<UseServerResourceLists>1</UseServerResourceLists>
<HistoryEnabled>0</HistoryEnabled>
<HistoryExpirationDays>14</HistoryExpirationDays>
<CallerIdMessagePopUpDuration>20</CallerIdMessagePopUpDuration>
<StripRealmFromUserName>0</StripRealmFromUserName>
</Account>
I just changed the relevant part
<FileTransfer>
<Location>http://example.com:7001/filetransfer</Location>
</FileTransfer>
<FileTransferEnabled>1</FileTransferEnabled>
Best Regards,
Sean
Edited by: selin on 2009-9-10 下午6:45 -
How to enable https or SSL for login page only?
Hi,
My application is runnnin in iPlanet web server 4.1 version.
how to make my login page only secured (SSL)?
previously we have done https enable for the whole application. but client specifically wants for login page only, not for the whole application. how can i make SSL for login page only in iPlanet 4.1.
I searched through iPlanet console, but i didn't get any option such.
i found one more thing console,i.e., "encrypt on or off". if i put encrypt "on" means, it will be for the whole application? How can i make it for login page only.
Do i need to do any code changes for that?
i tried through web.xml security constraints tags, but it is not working and taking that file as we are doing everything in servlet.properties and rules.properties files.
can anybody help me in this regard?
Regards,
ChanduYou specify SSL in web.xml of your application. So, in that case other web applications in same server would not be affected.
<security-constraint>
<web-resource-collection>
<web-resource-name>myresources</web-resource-name>
<url-pattern>/*</url-pattern>
</web-resource-collection>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>Following link will help you to setup SSL in tomcat:
[http://techtracer.com/2007/09/12/setting-up-ssl-on-tomcat-in-3-easy-steps/|http://techtracer.com/2007/09/12/setting-up-ssl-on-tomcat-in-3-easy-steps/]
Thanks,
Mrityunjoy -
C5: How to enable loudspeaker with ovi maps?
C5:
Loudspeaker is en/disabled with the #-button. With ovi-maps I see, e.g. when driving home, in the upper right corner, that the loudspeaker is disabled. # changes the size of the map, so how do I enable the loudspeaker?yes you have to download walk guidance
If i have helped at all a click on the white star below would be nice thanks.
Now using the Lumia 1520 -
How to enable OCR with Scangear MP under Linux for MG8250?
Under Linux openSUSE 12.3 I use Scangear MP 1.80 for my Canon PIXMA MG8250.
As a scan target (in my German GUI it's "Ziel") I can choose "OCR". But there is no text output, the scan is just saved as a picture. How can I configure Scangear to open the scan via Tesseract in a text editor.
By the way, the target "Print" (in German "Drucken") leads to saving just as well, though there is at least one printer at hand, of course.
It's a pity that the pixma scan drivers that are shipped with openSUSE don't work with xsane (the scanner starts working, but stops after one third of the page). Using xsane with a different scanner I can use OCR successfully.
VolkerThere are two basic types of core OCR algorithm, which may produce a ranked list of candidate characters.
Matrix matching involves comparing an image to a stored glyph on a pixel-by-pixel basis; it is also known as "pattern matching" or "pattern recognition". This relies on the input glyph being correctly isolated from the rest of the image, and on the stored glyph being in a similar font and at the same scale. This technique works best with typewritten text and does not work well when new fonts are encountered. This is the technique the early physical photocell-based OCR implemented, rather directly.
Feature extraction decomposes glyphs into "features" like lines, closed loops, line direction, and line intersections. These are compared with an abstract vector-like representation of a character, which might reduce to one or more glyph prototypes. General techniques of feature detection in computer vision are applicable to this type of OCR, which is commonly seen in "intelligent" handwriting recognition and indeed most modern OCR software. Nearest neighbour classifiers such as the k-nearest neighbors algorithm are used to compare image features with stored glyph features and choose the nearest match.
Software such as Cuneiform and Tesseract use a two-pass approach to character recognition. The second pass is known as "adaptive recognition" and uses the letter shapes recognized with high confidence on the first pass to better recognize the remaining letters on the second pass. This is advantageous for unusual fonts or low-quality scans where the font is distorted.
So I wonder which kind of OCR algorithm are you using? -
How to send mail with SSL in ADDT?
The control panel of ADDT for email settings doesn't have option for ssl enable.
Please help me, thanks
PS: One question had posted at http://forums.adobe.com/thread/284636?tstart=210Is there not solution for this problem??
-
How to enable JAAS with jdeveloper
hi all,
I start reading about JAAS and previously i developed an web application and now i want to implement XML based JAAS in it i searched different articles which shows JAAS with DB support, can any one mention any good article with baby steps for xml based jaas in jdeveloper,
I first to understand JAAS with babay steps then i will implement it in my application.
A hello world type of tutorial with jdeveloper.
Thanks & Regards
imranHi,
I started a how-to about using the JAAS provider for container managed authentication. But this is about using container managed security with custom JAAS login modules.
If you want to natively code in JAAS, all you need to do is to ensure you set the jaasMode in the aplication's orion-application.xml file. See the OC4J security guide, which is a part of teh OracleAs documentation available nline at otn.oracle.com --> documentation
The XML provider is the dafult provider configured in OC4J and can have user and groups configured as well as JAAS permissions for each of them. You specify the JAAS LoginModule in the system-jazn-data.xml file of the OC4J container and access the login configuration name within your application as part of the created JAAS LoginContext. Once you have this, you obtain a authenticated subject with the user Principals. Using this principals you can now perform check permissions on the AccessController context.
Frank -
WRT300N, how to enable DHCP with Reservation?
Hi all,
I plan buy a WRT300N, since Hong Kong still have not the WRT150N now for business internet share in SMB ...
But our network are using Static IP on some computer, but some computer using DHCP ..., and our old router have the DHCP Reservation
How do WRT300N enable DHCP also have the function like DHCP Reservation?
Thx for your time.
Best Regards,
Jimmy Chan
http://www.jimmychan.tk
http://explorerhome.no-ip.org/blogThx, I understand how to do, for example seting up a pool from 2-50
Then manual set IP for 51 to 254 ...
Best Regards,
Jimmy Chan
http://www.jimmychan.tk
http://explorerhome.no-ip.org/blog -
How to enable JMS with JMQ 2.0
I have trouble to enable jms in IAS6.0 sp2 with JMQ 2.0, on NT4.0
The instruction and the utility batch file talked only the JMQ 1.1, but
JMQ 1.1 is not available from iPlanet
web site. I downloaded and installed JMQ 2.0 that does not match the ias
instruction and utilities.
ias utility "jmqjmsadm.bat" calls "JMQ_HOME/bin/jmsconfig.bat". The
jmsconfig.bat does not exist in JMQ
2.0/bin
What is the solution?
Thanks a million in advance
Mikethe actual that comes with iplanet for JMQ is not proper. Please follow the
steps
said in the java programmer's guide. Ref to page no 266 for enabling JMQ(i.e
IMQ 2.0). actually i had the same problem like you but solved it by using
guide..
All the Best
william
Bangalore
india
default wrote:
I have trouble to enable jms in IAS6.0 sp2 with JMQ 2.0, on NT4.0
The instruction and the utility batch file talked only the JMQ 1.1, but
JMQ 1.1 is not available from iPlanet
web site. I downloaded and installed JMQ 2.0 that does not match the ias
instruction and utilities.
ias utility "jmqjmsadm.bat" calls "JMQ_HOME/bin/jmsconfig.bat". The
jmsconfig.bat does not exist in JMQ
2.0/bin
What is the solution?
Thanks a million in advance
Mike
Maybe you are looking for
-
Can fiber channel be used for connect server to a storage in two nodes RAC
I decided to have an Oracle RAC cluster with only two nodes. The storage I have is a sun 3510FC. Also have five fiber chanal ports. But my each server (Sunfire v240) has got one Ultra160SCSI multimode (SE/LVD) not any fiber chanal ports. I found that
-
i already reserved app name as Ma_Test. But only one error showing "This package is using an app name that hasn't been reserved for this app: "Matest". how to solve?
-
Questions about Spark DataGrid (Header Font Styles, Header Gradient)
Just starting out in 4.5 SDK, and just a tad confused on the Spark DataGrid. 1) Trying to set the font style for just the header, but don't see those properties in the designer....as they appear to apply to every part of the DataGrid. 2) Want to set
-
I have a properly verified Apple ID but iCloud rejects username/password and does not allow me to sign in.Keeps telling me to try later. Using MacBook with 10.7.2. No problem with iCloud on 2 iMacs with different Apple IDs
-
Hi, I've an issue with Ipad2 and Crestron Mobile App. On IPad appears this error "wifi was powered off while the device was in auto-lock". Can you help me?