How to manage coexistance of IIS policy agent and sun-passthrough from AS

We have an ISS 6 with Policy Agent 2.2 and on same instance we have the sun-passthrough plugin installed to redirect certain pages to an Application mounted on Sun App Server 8,2. We need to apply policies to requests to those pages before redirection is done but seams that passthrough plugin is taking precedence over Policy Agent. Therefore, policies are not evaluated and all traffic is passed. PA agent is installed as a wild card and passthrough as an ISAPI filter. We do not see a way to change priority (already set to HIGH) for the passthrough plugin. PA has the option on amAgent.properties and we set it allready to HIGH. Any hint?
Edited by: blancay on Sep 20, 2008 9:47 AM

1) How to restrict the new employee from availing any type of leave company have a policy only after completion of probation employee can avail sick leave?
Note 897623 User Exits in PT
Use user exit to check It0019 or monitoring of tasks or reminder of dates or 0041 IT
2) Sick leaves can be availed only after completion of 1 year wht are the settings do i need to set?
You can use quota deduction and user exit and read dates from 0041 for his entry date in company
3) Earned leaves can be given to employees those who complete 2 years of service? what are the settings for this?
base entitlement ie seniority quota check table v_t559l
4) Intervening holidays and weekly offs can be treated as leaves in sick leave as well as earned leaves what are the customizing settings for this?
counting rule and exit
5) only female employees are entitled to avail maternity leave?what are the settings for this?
feature pe03 MASEX Set Infotype 80 Admissability for Employees
read more on help.sap.com

Similar Messages

Has anyone got the IIS Policy Agent 3.0 working with an ASP web application

Hi,
Can anyone pllease please confirm if they have managed to get the IIS Policy Agent 3.0 working for a asp/asp.net web site on IIS 7 running on Windows Server 2008 64 bit.?
I have installed the 32bit version of the agent as my web site must support 32 bit applications.
I have created a simple web site which works fine with the policy agent configured if the page is html, If I rename the html page to be of type asp I get an Object Move error.
I would much appreciate if someone could confirm if they have managed to get an asp web site working with the policy agent.
Note: The Policy Agent 2.2 worked perfectly with asp on IIS 6.0.
Thanks in advance,
Tommy.

I managed to make Agent 3 work with IIS 7 for a sample application based on aspx in Dev environment .... after modifying the sample application, I got the same errors as "Object removed" and others .... I have no idea what the hell. Fortunately, a super .Net start here spent a few minutes to do some twicking on IIS, and make it work again .... don't ask me what he did, I am pretty dump, and no idea. :)
Thanks

Access Manager Policy Agent and Oracle AS

Hi,
my system uses Oracle Application Server. The security dept use Sun Access Manager. I need to integrate the security of the Oracle system with the policy agent. Where this gets a little confusing is that one of my developers tells me that this is difficult to implement and that Sun arent planning on supporting the Oracle AS in future.
What I would like is some clarification from the horses mouth so to speak. In particular is it possible to integrate the policy agent and Oracle AS, and are Sun committed to supporting and developing for this.
Thanks,
Andy.

"Where this gets a little confusing is that one of my developers tells me that this is difficult to implement"
"it is NOT an implementation but an integration ! difficult ? why ?"
"and that Sun arent planning on supporting the Oracle AS in future."
There is a PA 2.2 for Oracle 10g ! It is the latest version(2.2 I mean). I don't see any reasons why Sun should not continue. But it is ONLY my point of view...
"What I would like is some clarification from the horses mouth so to speak. In particular is it possible to integrate the policy agent and Oracle AS, and are Sun committed to supporting and developing for this."
Of course it is possible because you can find the PA that will integrate your Oracle AS with a Sun AM.
1) Please read the documentation.
http://docs.sun.com/app/docs/coll/1322.1
Download the one for Oracle and read also the user guide.
PA are very easy to integrate if you know what you do... Espec. und. the AM auth and sso... If you can be helped by a AM guy from your comp. it is welcome... It is a j2ee agent and of course the PA will make what is necessary to redirect you to AM at login time and later to auth. your request...2)
2) Download the soft and do the job :-)
Product Downloads
Sun Java System Access Manager Policy Agent 2.2 for Oracle Application Server 10g
http://www.sun.com/download/products.xml?id=455d52ed
I did plenty of int. with Sun/Bea/Tomcat AS(don't forget there are also webserver agents like Apache PA) with AM and it is not a big deal. Not Oracle, but it is an AS and I don't see why it should be difficult...
Hope this helps a bit.

Policy Agent on Sun Application Server 9.1

I'm attempting to deploy the Access Manager Policy Agent to Sun Application Server 9.1 and I'm running into some issues.
Environment:
amhost - Access Manager 7.0 on Sun Webserver can do both http and https
ashost - Access Manager Policy AGent 2.2 on Sun Application Server 9.1
If everything is set to http:
When i attempt to access a simple servlet application (Headersnooper) I am redirected the the access manager server and when authentication is successful I see the browser attempting to redirect back to the application server and I see the following error in the Policy Agent debug logs amJAXRPC:
11/13/2007 02:46:18:055 PM EST: Thread[httpSSLWorkerThread-8080-79,10,Grizzly]
JAXRPCHelper: Connection to URL: https://ssodev.queensu.ca:443/amserver/jaxrpc/SMSObjectIF failed
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:150)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1518)
at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:174)
at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:168)
Why would it think to attempt to connect to https when everything in the agent is configured for http?
Any thoughts or recommendations would be appreciated.

Hi,
One thing that could help is to look at the info in the agent logs, first increase Debug Logging Level, then restart the agent server and click thru your app, then look in agent runtime logs which should have more descriptive errors. For more detail on how to do this, try http://wikis.sun.com/display/OpenSSO/GlassFishAgentTrouble#GlassFishAgentTrouble-generaltips
You could look on this page, which is mostly based on GlassFish server but could help for other servers as well.
http://wikis.sun.com/display/OpenSSO/GlassFishAgentTrouble
I have not installed either of the policy agents you mentioned. But with some of the other agents, like the Sun App server 9 (GlassFish) agent, it comes with a sample application, and I find that this is the best way to ensure your setup is good and you are following all steps etc. Once sample app is up, you can try your own apps with confidence.
Since you already have the SJSAS 9 installed, maybe you could create a new domain and download/install the SJSAS 9 policy agent on the new domain. Then try out the sample app?
Or if those other agents have a sample app then try it out.
hth,
Sean

Policy agent and normal portal logon on one portal

We run a shared portal infrastructure and want to use multiple logon methods for accessing ESS MSS portal applications.
Is it possible to logon via Policy Agent and with normal sap poral logon to the same application?

We have 3 bespoke types of SSO logon methods, JAAS, SAML and PKI.
This means users can logon via our bespoke SSO solutions or via the normal SAP standard delivered logon method with UID and password.
Currently we are investigating if we can also implement the Sun policy agent as logon method for the Poral and WAS. It should run in parallel with our current solutions without harming them.

Difference between web policy agent and j2ee Policy agent ?

Difference between web policy agent and j2ee Policy agent ?

http://docs.sun.com/app/docs/doc/820-5816/ghscr?a=view

How to get the values of all elements and sub elements from following xml

how to get the values of all elements and sub elements from following xml...
<?xml version="1.0" encoding="UTF-8" ?>
<List_AML_Finacle xmlns="http://3i-infotech.com/Cust_AML_Finacle.xsd"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://3i-infotech.com/Cust_AML_Finacle.xsd List_AML_Finacle.xsd">
<TransactionID>TransactionID</TransactionID>
<Match>
<Src_Matched_Field>Src_Matched_Field</Src_Matched_Field>
<List_Matched_Field>
<FSFM_Matches>
<NUMBER>NUMBER</NUMBER>
<TERROR>TERROR</TERROR>
<TU>TU</TU>
<NAMEU>NAMEU</NAMEU>
<DESCRIPT>DESCRIPT</DESCRIPT>
<KODCR>KODCR</KODCR>
<KODCN>KODCN</KODCN>
<AMR>AMR</AMR>
<ADDRESS>ADDRESS</ADDRESS>
<SD>SD</SD>
<RG>RG</RG>
<ND>ND</ND>
<VD>VD</VD>
<GR>GR</GR>
<YR>YR</YR>
<MR>MR</MR>
<CB_DATE>CB_DATE</CB_DATE>
<CE_DATE>CE_DATE</CE_DATE>
<DIRECTOR>DIRECTOR</DIRECTOR>
<FOUNDER>FOUNDER</FOUNDER>
<TERRTYPE>TERRTYPE</TERRTYPE>
</FSFM_Matches>
<OfacMatchDetails>
<UID>UID</UID>
<TITLE>TITLE</TITLE>
<SDNTYPE>SDNTYPE</SDNTYPE>
<REMARKS>REMARKS</REMARKS>
<ID_UID>ID_UID</ID_UID>
<IDTYPE>IDTYPE</IDTYPE>
<IDNUMBER>IDNUMBER</IDNUMBER>
<IDCOUNTRY>IDCOUNTRY</IDCOUNTRY>
<ISSUEDATE>ISSUEDATE</ISSUEDATE>
<EXPIRATIONDATE>EXPIRATIONDATE</EXPIRATIONDATE>
<ADDRESS1>ADDRESS1</ADDRESS1>
<ADDRESS2>ADDRESS2</ADDRESS2>
<ADDRESS3>ADDRESS3</ADDRESS3>
<CITY>CITY</CITY>
<STATEORPROVINCE>STATEORPROVINCE</STATEORPROVINCE>
<POSTALCODE>POSTALCODE</POSTALCODE>
<COUNTRY>COUNTRY</COUNTRY>
</OfacMatchDetails>
</List_Matched_Field>
</Match>
</List_AML_Finacle>

avoid multi post
http://forum.java.sun.com/thread.jspa?threadID=5249519

How do i stop an old apple ID and password prompt from always popping up on my phone during normal use ?

How do i stop an old apple ID and password prompt from popping up on my phone screen during normal operations ?

How to change the Apple ID on my iOS Device
Settings > iTunes & App stores.
Tap your Apple ID, sign out then sign back in with new AppleID.
Settings > Facetime.
Tap your Apple ID, sign out then sign back in with new AppleID.
Settings > Messages.
Turn off iMessages, wait 10 seconds, then turn it back on. Go to 'Receive messages at' and then tap your Apple ID. Sign out of the old ID, then sign in with new Apple ID.
Settings > iCloud.
Delete the account (make sure to KEEP the information on your phone), then turn it back on with new Apple ID.
Also, delete any apps that were downloaded with the 'old' Apple ID, then reinstall them with your 'new' ID.

How do I make new albums in photos and move picture from one album to another

How do I make new albums in Photos and move photos from one album to another

At the moment you can't - though it should be possible (if it makes it into the final release) in iOS 5 which will be available sometime in the Autumn. Photos cannot currently be moved between albums on the iPad.
If you sync separate folders from your computer you'll get an album for each of them on the iPad, and you have to sync all the folders/albums that you want together as only the most recent photo sync remains on the iPad (not including a folder in a sync is the way that you delete it from the iPad).

How i can make forms read form nls and reports read from anather

hi evrey one
how i can make forms read form nls_lang and reports read from anather nls_lang ,
I think that this property is found in the file format .ini,
I forgot his name,
Is there one has found this information,
pleez share.
thanks.

At a minimum, the creation of the TcpClient will need to change its parameter to the name of server you want to use:
TcpClient tClient = new TcpClient("gmail-smtp-in.l.google.com", 25);

HT1766 how do i print or save my imessages and text messages from my phone?

how do i print or save my imessages and text messages from my iphone?

When viewing the SMS messages, hit edit. You then have the opportunity to select whatever messages are needed. Forward these to your email or wherever you wish. You then have a text transcript in the body of an email that you can cut/copy/paste into Pages/Word/etc. for printing.

How to import missing content for my music and video files from Itune online

how to import missing content for my music and video files from I tune online.

Downloading past purchases from the App Store, iBookstore, and iTunes Store

How to delete forecast entries with zero current and original qty from a particular forecast set which span across multiple forecasts

how to delete forecast entries with zero current and original qty from a particular forecast set which span across multiple forecasts

Hi,
There is no way to delete those records selectively from front end.
The best possible way is to delete the records from MRP_FORECAST_DATES tables from backend.
Hope that helps!!
Regards,
Mohan Balaji
NOTE: Please mark the post as Helpful or Answered if the update has really helped you. This would also bring the thread to logical conclusion and will be helpful for the viewers.

I own CS4 . It is registered with Adobe covering both my desktop and laptop. I have a brand new laptop . How do I put it on my new and remove it from my old ?

I own CS4 . It is registered with Adobe covering both my desktop and laptop. I have a brand new laptop . How do I put it on my new and remove it from my old ?

On the old laptop, under Help, choose deactivate.
Install on the new machine, and enter the serial number to activate.

Policy Agent and WebMethods Portal

Hi,
Is the PolicyAgent required to authenticate users and control the access to resources ?
If yes, can we use the PolicyAgent/AccessManager with any server like for example WebMethods Portal ?
Thanks,
Adel

Thanks for the reply, Shivaram. The issue appears to occur at random time, not accurately at the 3 min interval as you mention. I tested changing this value to 1, theoretically, after one 1 minute of idle time, accessing a link would make the agent reset the time idle value for the user session in SAM, but it didn't even after 3 minutes. This seems to be either a policy agent or system access manager bug.
We performed a 'vanilla' test using the apache server manual pages (only plain HTML, no POST requests), the pages are protected by the policy agent. At the first login, rwe were prompted to enter credential to be validated by SAM/LDAP, and then a user session is created in SAM session table. We browse around the manual pages, once in a while, certain pages cause the policy agent to reset the time idle. However, revisiting these links after a few minutes doesn't reset the idle value. Caching setting has been disable as well. Could there be or lack of some settings in AMConfig.properties or AMAgent.properties that might have caused this behavior?
Thanks for all your help,

How to manage coexistance of IIS policy agent and sun-passthrough from AS

Similar Messages

Maybe you are looking for