How to get the security MBeans?
Hi,
I need to get counts for the invalid user login attempts. According to javaDocs,
these are published by the following MBEans:
1. weblogic.management.runtime. ServerSecurityRuntimeMbean [does not work]
2. weblogic.management.security.authentication.UserLockoutManagerMBean
The first one does not work [always returns back "0"]. Hence, the need for the
other approach.
I have not been able to figure out how to get the UserLockoutManagerMBean for
a managed server.
[On a domain server I was able to fetch it using: securityConfigurationMBean.findDefaultRealm().getUserLockoutManager()
. However, on a managed server the MBEan "SecurityConfigurationMBean" is not available.].
Q) How do I get the UserLockoutManagerMBean
[from a remote client] targeting a managed WLS 8.x version?
Regards,
DKV
Thanks for your help Satya - it did work!
Looking up "SecurityConfigurationConfigMBean" does return an instance of SecurityConfigurationMBean.
Regards,
DKV
Satya Ghattu <[email protected]> wrote:
On a managed server you will need to query the
SecurityConfigurationConfig MBean, from that you know how to get to the
UserLockoutManager MBean.. :-).
Thanks,
-satya
DKV wrote:
Hi,
I need to get counts for the invalid user login attempts. Accordingto javaDocs,
these are published by the following MBEans:
1. weblogic.management.runtime. ServerSecurityRuntimeMbean [does not
work
2. weblogic.management.security.authentication.UserLockoutManagerMBean
The first one does not work [always returns back "0"]. Hence, the needfor the
other approach.
I have not been able to figure out how to get the UserLockoutManagerMBeanfor
a managed server.
[On a domain server I was able to fetch it using: securityConfigurationMBean.findDefaultRealm().getUserLockoutManager()
However, on a managed server the MBEan "SecurityConfigurationMBean"
is not available..
Q) How do I get the UserLockoutManagerMBean
[from a remote client] targeting a managed WLS 8.x version?
Regards,
DKV
Similar Messages
-
How to get the security MBeans for the managed Server of weblogic 11g
Dear All ,
I have been trying to figure it out why the UserLockoutManagerMBean API not working on the managed Server of Weblogic . Its always returns 0 value . Where as in the Admin server it give a proper result . I am attaching the code for the references . Please help me out.
MBeanHome home = null;
Environment env = new Environment();
env.setProviderUrl("t3://localhost:8001?");
env
.setSecurityPrincipal(Resources
.getRefNo(GlobalVariableConstant.WEBLOGIC));
env
.setSecurityCredentials(Resources
.getRefNo(GlobalVariableConstant.WEBLOGIC_PASSWORD));
javax.naming.Context context = env
.getInitialContext();
home = (MBeanHome) context
.lookup("weblogic.management.adminhome");
RealmMBean realmMBean = home.getActiveDomain()
.getSecurityConfiguration()
.getDefaultRealm();
UserLockoutManagerMBean userLockoutManagerMBean = realmMBean
.getUserLockoutManager();
userLockoutManagerMBean.getRealm()
.getUserLockoutManager();
boolean d2 = userLockoutManagerMBean
.isLockoutEnabled();
long getUser = userLockoutManagerMBean
.getLoginFailureCount(username);Thanks for your help Satya - it did work!
Looking up "SecurityConfigurationConfigMBean" does return an instance of SecurityConfigurationMBean.
Regards,
DKV
Satya Ghattu <[email protected]> wrote:
On a managed server you will need to query the
SecurityConfigurationConfig MBean, from that you know how to get to the
UserLockoutManager MBean.. :-).
Thanks,
-satya
DKV wrote:
Hi,
I need to get counts for the invalid user login attempts. Accordingto javaDocs,
these are published by the following MBEans:
1. weblogic.management.runtime. ServerSecurityRuntimeMbean [does not
work
2. weblogic.management.security.authentication.UserLockoutManagerMBean
The first one does not work [always returns back "0"]. Hence, the needfor the
other approach.
I have not been able to figure out how to get the UserLockoutManagerMBeanfor
a managed server.
[On a domain server I was able to fetch it using: securityConfigurationMBean.findDefaultRealm().getUserLockoutManager()
However, on a managed server the MBEan "SecurityConfigurationMBean"
is not available..
Q) How do I get the UserLockoutManagerMBean
[from a remote client] targeting a managed WLS 8.x version?
Regards,
DKV -
How to get the security-roles ?
Hi,
How can I get the security-roles defined in my web.xml ?
I have looked for a method in the request, and in the context, but I can't find something that would return a String[] with the roles available in the web-app.
Any ideas ?
H.Just a stab in the dark, but what about getInitParameterNames() ?
It returns an Enumeration of String.
Although, I did not check to see if it returns the <security-roles>
Short of that, I would think you could use SAX, or something like it, to parse web.xml.
Just a thought, feel free to correct me.
S. -
Helo. How to get my security questions because i forget the question.
Helo, How to get my security question because i forget the answer. Please help me.
Go to https://getsupport.apple.com ; click 'See all products and services', then 'More Products and Services, then 'Apple ID', then 'Other Apple ID Topics' then 'Forgotten Apple ID security questions'.
-
Hi im having trouble with downloading an album off my computer. i have forgotten the security questions, but have already sent them to my email. could someone help me in how to get the answers?
Hello Carpets,
Thanks for the question. You can reset your security questions with your rescue email address, as outlined with this article:
Apple ID: All about Apple ID security questions
http://support.apple.com/kb/HT5665
If you do not see the option for resetting your questions with a rescue email address, see this excerpt:
Note: The option to send an email to reset your security questions and answers will not be available if a rescue email address is not provided. You will need to contact iTunes Store support in order to do so.
Rescue email address and how to reset Apple ID security questions
http://support.apple.com/kb/HT5312
Additional Information:
Apple ID: Contacting Apple for help with Apple ID account security
http://support.apple.com/kb/HT5699
Thanks,
Matt M. -
how can i get my security questions if my account is locked why cant you add a forgot security questions button or something to get the security questions back?
The Three Best Alternatives for Security Questions and Rescue Mail
1. Send Apple an email request at: Apple - Support - iTunes Store - Contact Us.
2. Call Apple Support in your country: Customer Service: Contact Apple support.
3. Rescue email address and how to reset Apple ID security questions.
A substitute for using the security questions is to use 2-step verification:
Two-step verification FAQ Get answers to frequently asked questions about two-step verification for Apple ID. -
How to get the most current file based on date and time stamp using SSIS?
Hello,
Let us assume that files get copied in a specific directory. We need to pick up a file and load data. Can you guys let me know how to get the most current file based on date and time stamp using SSIS?
Thanks
thx regards dinesh vvhi simon
i excuted this script it is giving error..
Microsoft SQL Server Integration Services Script Task
Write scripts using Microsoft Visual C# 2008.
The ScriptMain is the entry point class of the script.
using System;
using System.Data;
using Microsoft.SqlServer.Dts.Runtime;
using System.Windows.Forms;
namespace ST_9a6d985a04b249c2addd766b58fee890.csproj
[System.AddIn.AddIn("ScriptMain", Version = "1.0", Publisher = "", Description = "")]
public partial class ScriptMain : Microsoft.SqlServer.Dts.Tasks.ScriptTask.VSTARTScriptObjectModelBase
#region VSTA generated code
enum ScriptResults
Success = Microsoft.SqlServer.Dts.Runtime.DTSExecResult.Success,
Failure = Microsoft.SqlServer.Dts.Runtime.DTSExecResult.Failure
#endregion
The execution engine calls this method when the task executes.
To access the object model, use the Dts property. Connections, variables, events,
and logging features are available as members of the Dts property as shown in the following examples.
To reference a variable, call Dts.Variables["MyCaseSensitiveVariableName"].Value;
To post a log entry, call Dts.Log("This is my log text", 999, null);
To fire an event, call Dts.Events.FireInformation(99, "test", "hit the help message", "", 0, true);
To use the connections collection use something like the following:
ConnectionManager cm = Dts.Connections.Add("OLEDB");
cm.ConnectionString = "Data Source=localhost;Initial Catalog=AdventureWorks;Provider=SQLNCLI10;Integrated Security=SSPI;Auto Translate=False;";
Before returning from this method, set the value of Dts.TaskResult to indicate success or failure.
To open Help, press F1.
public void Main()
string file = Dts.Variables["User::FolderName"].Value.ToString();
string[] files = System.IO.Directory.GetFiles(Dts.Variables["User::FolderName"].Value.ToString());
System.IO.FileInfo finf;
DateTime currentDate = new DateTime();
string lastFile = string.Empty;
foreach (string f in files)
finf = new System.IO.FileInfo(f);
if (finf.CreationTime >= currentDate)
currentDate = finf.CreationTime;
lastFile = f;
Dts.Variables["User::LastFile"].Value = lastFile;
Dts.TaskResult = (int)ScriptResults.Success;
thx regards dinesh vv -
How I get the new software to update my phone fast???
How I get the newest software to update my Iphone fast?
What do you mean by "fast"? The only way for you is to connect your phone to iTunes and click "Udate. If this seems to dowload too slow, disable ALL security apps (firewall, antivirus, etc.) when updating.
Your profile states you're running iOS 3.1.3 on an iPhone 4 which isn't even possible - the iPhone 4 can't run anything earlier than iOS 4.0 -
How to get the Path of the Current File using Import & Export File -Reg.
Dear all,
I have a mega (big) doubt. I have manually inserted the Figures from the figure folders. Now i need, fully automated. So How can I get the Figure path
Example :
PMString path = "E://development/Figures/";
now i checked, How many subFolders is there in "path", get the All Subfolders and check to the Article Name.
Example
Article Name == subFolder name then get the Files from the SubFolders(E://development/Figures/ChapterF/*.eps files").
now I paste the Document using to For Loop.
Please any one can suggest me, How can We get the Path in SDK.
Note:
Should I have to create the relative path by myself?
No method supplied in SDK to do this directly?
Please I need a help of this Query as soon as posible.
Thanks & Regards
T.R.Harihara SudhaNhttp://msdn.microsoft.com/workshop/author/dhtml/reference/objects/input_file.asp?frame=true
When a file is uploaded, the file name is also submitted. The path of the file is available only to the machine within the Local Machine security zone. The value property returns only the file name to machines outside the Local Machine security zone. See About URL Security Zones for more information on security zones.
i need to know on how to get the compelete path /directory of the filename
using <input type="file"> tag You can't. Its a security thing.
is there any other way to get an input file from a local host aside from <input type="file"> tag?No. Not using just html.
You could always go into activex components, but thats different again.
Cheers,
evnafets -
How to get the network details in flex4.5 web application
How to get the network details in flex 4.5 web application
similar to the nativeinterface in air applicationcheckout this document for secure web application
http://help.adobe.com/en_US/flex/using/WS2db454920e96a9e51e63e3d11c0bf6167e-7fff.html -
How to get the SQL Signon that Agent Jobs "Run As" or "Executed as User"
How to get the SQL Signon that Agent Jobs "Run As" or "Executed as User"?
I have an install SQL scripts that creates a Linked Server. I want to put some security on the Linked Server and only grant the Agent Job Signon (the "Run As" or "Executed as User") access to the linked server. I need to retrieve the
Agent Job Signon (something like "NT SERVICE\SQLAgent$FIDEV360BI02").
I could query certain jobs and SUBSTRING the Message column - using some form of the query below, which would return "Executed as user: NT SERVICE\SQLAgent$SSDEVBI02. The step succeeded." But that is pretty imprecise.
use msdb
SELECT [JobName] = JOB.name,
[Step] = HIST.step_id,
[StepName] = HIST.step_name,
[Message] = HIST.message,
[Status] = CASE WHEN HIST.run_status = 0 THEN 'Failed'
WHEN HIST.run_status = 1 THEN 'Succeeded'
WHEN HIST.run_status = 2 THEN 'Retry'
WHEN HIST.run_status = 3 THEN 'Canceled'
END,
[RunDate] = HIST.run_date,
[RunTime] = HIST.run_time,
[Duration] = HIST.run_duration,
[Retries] = HIST.retries_attempted
FROM sysjobs JOB
INNER JOIN sysjobhistory HIST ON HIST.job_id = JOB.job_id
-- CHANGE THIS
-- WHERE JOB.name like '%GroupMaster%' or Job.name like '%etlv%'
ORDER BY HIST.run_date, HIST.run_timeby default all sql jobs are executed as sql server agent account, unless otherwise a proxy is setup.
you can get the proxy information as Olaf mentioned, if the proxy_id is null for the step, it implies that the job step was executed as sql server service account and in such case it will be null
so, if it is null, it ran as sql server agent account.
so, one work around is get the sql server agent service account and if the proxy is null, that means it ran as sql server agent account, so, use isnull function. the disadvantage would be if the sql server agent account was switched, you might not get the
accurate information as the new account will show up though the job really ran as old account, to get this information, you need to get this from the logmessage column as you mentioned above.
try this code...
/*from sql 2008r2 sp1, you get the service accounts using tsql,otherwise you have to query the registry keys*/
declare @sqlserveragentaccount varchar(2000)
select @sqlserveragentaccount= service_account
from sys.dm_server_services
where servicename like '%sql%server%agent%'
select message,isnull(name,@sqlserveragentaccount) as AccountName
from sysjobhistory a inner join sysjobsteps b
on a.step_id=b.step_id and a.job_id=b.job_id
left outer join sysproxies c on c.proxy_id=b.proxy_id
Hope it Helps!! -
How to get the list of documents
Hi everyone
Can anyone help me How to get the list of documents residing in a folder of KM repository of SAP Netweaver using a simple java program
Thanks in ADV.
Rupesh KhemkaHi Rupesh,
I have written the code for you and it works with WebDynpro, no seperate java program is required.
Just try to paste it in your application code and run it.
try{
// Will check the user athentication for EP
IWDClientUser wdClientUser = WDClientUser.getCurrentUser();
IUser sapUser = wdClientUser.getSAPUser();
com.sapportals.portal.security.usermanagement.IUser ep5User = WPUMFactory.getUserFactory().getEP5User(sapUser);
ResourceContext context = new ResourceContext(ep5User);
// The path in which your folder resides
RID rid1 =RID.getRID("/documents/Public Documents/SCAP/");
IResourceFactory factory1 = ResourceFactory.getInstance();
ICollection icollection = (ICollection)factory1.getResource(rid1, context);
IResourceList resourcelist = icollection.getChildren();
int size1 = resourcelist.size();
for(int s=0; s<listOfDocuments.getLength(); s++){
IResource resource = resourcelist.get(i);
InputStream input = new InputStream();
input = resource.getContent().getInputStream();
}catch(Exception e){
e.getMessage();
Once you get the InputStream everything else is possible....
This will surely help you in reading the documents from KM.
Regards,
Rekha Malavathu -
How to get the path of input type="file" tag
-- im using <input type="file"> tag to get an input file from a local host, it returns only the filename but not the complete path of the filename,,,
-- i need to know on how to get the compelete path /directory of the filename using <input type="file"> tag , or is there any other way to get an input file from a local host aside from <input type="file"> tag?
thankshttp://msdn.microsoft.com/workshop/author/dhtml/reference/objects/input_file.asp?frame=true
When a file is uploaded, the file name is also submitted. The path of the file is available only to the machine within the Local Machine security zone. The value property returns only the file name to machines outside the Local Machine security zone. See About URL Security Zones for more information on security zones.
i need to know on how to get the compelete path /directory of the filename
using <input type="file"> tag You can't. Its a security thing.
is there any other way to get an input file from a local host aside from <input type="file"> tag?No. Not using just html.
You could always go into activex components, but thats different again.
Cheers,
evnafets -
WebGUI: How to get the users IP-address
Hello.
I have to develop a simple web-application, that will enable users to reset their forgotten passwords or to unlock themselves, if they are locked because of too many failed login-attempts.
As you can imagine, this application must not require a login. For security reasons any action has to be logged.
The username can not be used for logging-purposes, as the application is executed using a default-user defined in transaction SICF. That's why the IP-address of the user's pc has to be written into the log-table.
My problem is, that i do not know how to get it. I have read many articles on help.sap.com, searched in the sap notes, used Google and tried to find usefull functions in our SAP-system, but after two days it still does not work and i do'nt know, what else to try.
At the moment i am able to read the name of the client-pc with my test-coding.
DATA: lv_webgui TYPE xfeld.
STATICS: lv_computer_name TYPE string,
lv_username TYPE string.
CLASS: cl_gui_frontend_services DEFINITION LOAD.
lv_webgui = cl_gui_frontend_services=>www_active.
IF lv_webgui EQ gc_true.
" Begin of experimental coding #1
CALL METHOD cl_gui_frontend_services=>get_computer_name
CHANGING
computer_name = lv_computer_name.
" End of experimental coding #1
" Begin of experimental coding #2
CALL FUNCTION 'ITS_ENV_GET_VARIABLE'
EXPORTING
variable = 'COMPUTERNAME'
CHANGING
value = lv_computer_name.
" End of experimental coding #2
MESSAGE s000(38) WITH lv_computer_name.
ENDIF.
The problem is, that the Internet Explorer 7 (version: 7.0.5730.13CO) shows a warning before the scripts, generated by the ITS, are executed on the client. If the user clicks "abort", the scripts are not executed and the name of the client-pc will not be returned to the server (experimental coding #1 returns the value 'localhost', experimental coding #2 returns an empty string).
That's why the experimental coding is quite useless, because the user is able to avoid it's execution.
In theory i could use experimental coding #2 and stop the execution of the program if an empty string is returned but some users in our company have administrator-privileges and so they can change environment-variables at will. So i am afraid, that this procedure is not an option.
I am quite sure, that there must be a way to read the IP-address directly from the ITS without using the functions in my experimental coding, but i have no clue how this could be done.
Any suggestions would be highly appreciated.
As i do'nt know how to determine the version of our ITS, i have to leave this information out for the moment. If anyone needs this information it would be very kind, if he or she could tell me how to get the required information.
EDIT: As we are using SAP ECC 6.0 and Services are maintained via transaction SICF, it should be ITS 6.40.
Regards
Jörg Neumann
Edited by: Jörg Neumann on Oct 16, 2009 1:27 PMHello Wolfgang.
Thanks for your reply.
I can imagine, that the application as described above seems to be very insecure, but the description is not complete - i left some parts out, as they were not relevant for my problem.
1.) The application can only be reached from our intranet.
2.) Unlocking / Resetting password can be done three times per day, which limits the number of attemps for cracking a password to a total of 20 per day.
3.) The owner of the account will receive an email if the acount was changed by the application. So if somebody tries to crack the password, the owner of the account will get a total
20 3 mails per day - which should make him/her at least a litte suspicious.
I know, that the logged data is quite worthless, as computername and username are read using clientside-scripting and there could be a proxy between the client and the server, but this is exaclty, what i have to develop.
I will keep the logging-problem in mind and talk about it in the next meeting, though i am quite sure, that it wo'nt change anything.
Regards Jörg Neumann
Edited by: Jörg Neumann on Oct 19, 2009 4:57 PM -
How to get the content of the uploaded file.
Hi Experts,
I am using a input box to get the path of the file to be uploaded.(I am not using FILE UPLOAD UI Element).Could you please let me know how to get the content of the uploaded file.
Regards,
Arun>
ARUN KUMAR.S wrote:
> Hi Experts,
>
> I am using a input box to get the path of the file to be uploaded.(I am not using FILE UPLOAD UI Element).Could you please let me know how to get the content of the uploaded file.
>
> Regards,
> Arun
You will not be able to use a normal InputField to upload file contents. This is not allowed by the browser security model. You must use one of the upload specific UI mechanisms - the FileUpload UI element or as of 7.01 ACFUpDownload or FlashIslands.
Maybe you are looking for
-
Can an external Firewire hard drive be used to boot up intel based macs?
I was looking to buy an external HD for back-ups (finally) and it just dawned on me that it may no longer be possible with intel macs. I know this is possible with non-intel macs. 15" MacBookPro Core 2 Duo 2.16 GHz Mac OS X (10.4.8) 15" MacBookPr
-
I can't get my phone to connect to itunes when i plug it into the computer, help?
iTunes doesn't pop up when i plug my phone in and it doesn't show that my phone is connected, so i can't put any music on my phone now! help please!
-
RFC in C++ to SAP doesn t transfer data
Hello, I make in C++ a RFC call of a function module. The RFC works but not the data transfer. The import parameters of the function module in SAP are: I_MANDT TYPE NUMC3 I_WERKS TYPE CHAR4 I_PROCESS TYPE CHAR10 I_STRING T
-
How to open popup windows in response to an event in view model
Hi All, I'm developing a Windows store app using XAML+C#, following MVVM framework. I have a login form which taked userid and password and logs into a database. If the login failed, i need to open an exception popup on the same login screen.Let's s
-
You are currently restricted from purchasing servi...
Help..... I am "restricted from purchasing services", which has in turned stopped my Skype credit and Skype numbers and call forwarding. I use skype for business and need these services. I have changed my password and have access to my account again,