How-To: server-based... application policy management

Hi all,
I am at the end of me rope here.
I have a system with an intended client-server architecture - although the server component is not developed/functioning yet.
I have partially integrated JAAS into the system as I need authentication and authorization within my application. It is currently built into the client component for testing purposes, but should be distributed over both at deployemnt time.
And hence my problem: I have developed a database implementation of both the Policy and Configuration classes. These are a part of the server component. I do not want any configuration to be called for on the client -side i.e. preconfiguring of policy files and permissions. I just want an instance of the policy and configuration to be 'downloaded' and installed on the client prior to the security manager being switched on and authentication. This is of course given that runtime authorization occurs on the client.
I would really love to do all this the Java advocated way. I have tried to make sense of Sun Directory Server and Access Manager.... but I am wondering if this is overkill; there is so much talk of what these products can do, but it leaves me with no idea if they are appropriate for the 'little' I want done.
The last thing I want to do is implement my own solution... something I have already researched with a combination of web services, JAX-RPC and SOAP... but it's a big unnecassary headache.
Please advise... anyone.
See also http://forum.java.sun.com/thread.jspa?threadID=576476&tstart=0

Ok,
I solved the problems I described earlier and I have a fully funtional policy implementation. The main features are:
(1) It is distributed to accomodate client-server architectures
(2) Transmitted over the wire with an arbitrary protocol
(3) Is populated from a database
(4) Fully supports JAAS
There are a few glitches with regard to refresh; this maybe due to the fact that my client-server comms is SOAP based.
I can't post code due to contract blah blah... but the least I can do is help troubleshoot; since completing it I can see how stupid my mistakes were and would like to help others avoid the same 'I'M GONNA SCREW YOU PROJECT SCHEDULE' pitfalls that I did ran into.
One word of advice I offer now is to ignore the fact that only getPermissions(CodeSource cs) andrefresh() are abstract - reimplement what ever you need to - it's clear the new PolicyFile implementation has abandoned some/alot of the concepts of the pre 1.4 version and hence the interface is a bit misleading.
Kind regards,
Darren B

Similar Messages

How to disable autostart (application) when managed server restart ?

Hi Ppl,
How to disable autostart (application) when managed server restart ?
I want some of the applications to remain not started. In WebSPhere, we have an option disable auto start for applications.
I don't find in weblogic.
Thanks

Hi,
I agree with Faisal. When you shutdown your WL server while the application is running, the thing is when you start your server again, it would automatically start the application with it. Now if the application was down when you shutdown the server, it _the application_ won't start with the server.
So it depends on the application last state, when you start your server.
Regards,
Mohab

Client/Server to Web-Based application Conversion

Hi! Everyone,
I have couple of questions for you guys.
Our Client had recently upgraded Forms 4.5 to 6i to move from Client/Server based application to Web based application.
They are using Forms Server 6i Patch Set 1, OAS 4.0.8.1, Windows NT Service Pack 5 and Oracle 7.3. They are facing the following error every now and then, when they run the forms,
"FRM-92100: Your connection to the server was interrupted. This may be the result of a network error or a failure on the server.You will need to re-establish your session."
Please let me know what might be causing the above error. The only problem i can think about might be Oracle 7.3. If i am right only Oracle 8 and above supports Forms 6i.
Can anyone let me know some tips and/or techniques to upgrade Forms 4.5 to 6i. If there are any important settings/steps which we might have over looked during the upgrade, please list them.
Any kind of help is greatly appreciated.
Thanks,
Jeevan Kallem
[email protected]

Most of the code is use with no changes at all.
See otn.oracle.com/formsupgrade
Regards
Grant Ronald

Not able to see the users in Authorization Policy Manager

I have configured a OID provider in the myrealm of weblogic for OES Server. I also added the following lines to jps-config.xml
<serviceInstance provider=”idstore.ldap.provider” name=”idstore.ldap”>
<property value=”oracle.security.jps.wls.internal.idstore.WlsLdapIdStoreConfigProvider” name=”idstore.config.provider”/>
<property value=”oracle.security.idm.providers.stdldap.JNDIPool” name=”CONNECTION_POOL_CLASS”/>
<property name=”idstore.type” value=”OID”/>
</serviceInstance>
Even then I cannot see any of the users from the OID through application policy manager.
Anybody aware of any other settings that need to be done ?
oes server version is 11.1.1.6. and OID is 11.1.1.5.
Any help will be appreciated.
Edited by: ssarkar on May 10, 2012 1:15 PM

externalize the users.

No longer see "Internet Explorer Maintenance" in Group Policy Management Console

I am trying to configure Internet Explorer favorites on a GPO that I have already constructed. I had already successfully created the GPO many months ago and wanted to go back and check on some things.
However in the GPMC when I navigate to User Configuration-->Policies-->Windows Settings, I no longer see "Internet Explorer Maintenance" listed. This is where I had previously configured Internet Explorer favorites.
I uninstalled and reinstalled GPM using these instructions
http://www.addictivetips.com/windows-tips/how-to-install-the-group-policy-management-in-windows-7/ but this did not help.
Previously I had two Windows XP computers in the OU that this GPO was applied to. I had no problems at all configuring it and getting the rules and favorites to apply to these two computers. I just recently upgraded one of the computers to Windows
7 and used the same machine name for the computer. The computer gets some of the rules applied to it but not all. In particular the IE favorites are not being applied which led me to check the policy in the GPMC. However, as stated before
I cannot even see "Internet Explorer Maintenance" which has me confused on what to do next. Please help.

Am 29.03.2013 14:15, schrieb FuFighter:
> <?xml version="1.0" encoding="utf-8"?>
> <Shortcut clsid="{4F2F7C55-2790-433e-8127-0739D1CFA327}"
> userContext="1" name="Google" status="Google" image="0"
> changed="2013-03-29 13:00:44"
> uid="{648046B5-4019-4F32-8F0E-E691EA54E125}"><Properties pidl=""
> targetType="URL" action="C" comment="" shortcutKey="0" startIn=""
> arguments="" iconIndex="0" targetPath="http://www.google.com"
> iconPath="" window=""
> shortcutPath="%CommonFavoritesDir%\Google"/></Shortcut>
I'm too tired at the moment to check all you already did, so just let me
ask some further questions on that item:
This is a user or a computer item? If it is a user item and "run in
logged on users context" is checked, I believe it will fail, because a
non administrator cannot add all users favorites.
I'm unaware whether all users favorites works at all - never used it...
For further clarification, I'd enable GPP debug logging:
http://blogs.technet.com/b/askds/archive/2008/07/18/enabling-group-policy-preferences-debug-logging-using-the-rsat.aspx
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!

How to protect an application running on Apache Tomcat app server with OAM 11gR2

Gurus,
We have an Apache Tomcat based application named "ABCD" here at client site that we want OAM 11gR2 PS1 to integrate with for SSO purposes. I have successfully configured OHS to reverse proxy requests to Apache Tomcat server whenever somebody tries to access the application URL but still, I am getting the application login page once I have successfully authenticated on OAM SSO login page. The Tomcat based application is authenticating users against a "UserDatabase realm".
I know in terms of weblogic application, there is an OAM identity asserter provider which then populates the User Principal for the java environment with the authenticated OAM user. But there is no such OAM identity provider for Tomcat.
So my question is, is there an provider (or Tomcat equivalent) which will entrust authentication to a header, that could be used to populate the Java User Principal from the OAM_REMOTE_USER header? Is the weblogic equivalent of authentication providers present in tomcat as well? Are those called valves?
Please advise to the earliest.
Thanks !!

Aakash,
I did follow the 4 steps that you mentioned to me. Out of the 4 that you had mentioned, I already had the webgate in place on OHS server and I was already passing the remote_user http header in oam policy as action.
As part of Step #2: Install mod_jk plugin on OHS server that you mentioned
1.) I downloaded the tomcat connector - tomcat-connectors-1.2.37-src
2.) I had to run ./configure,make, make install on my OHS server which runs on RHEL 6. It created the mod_jk.so file. I pasted it in the needed folder.
3.) I then created the httpd.conf file and workers.properties file as said in the connector docs.
4.) Restarted OHS.
As part of Step #3: Configure tomcat's ajp connector that you mentioned and I went through all the links pasted below but didn't find actually what needs to be in place to configure tomcat's ajp connector. I do see in the server.xml of tomcat app server that the ajp 1.3 protocol is supported:
http://tomcat.apache.org/tomcat-4.0-doc/config/ajp.html
http://tomcat.apache.org/tomcat-3.3-doc/mod_jk-howto.html#s8
http://tomcat.apache.org/tomcat-7.0-doc/config/ajp.html
http://www.mulesoft.com/understanding-tomcat-connectors

    <Connector port="8080" protocol="HTTP/1.1"
               connectionTimeout="20000"
               redirectPort="8443" />

    <Connector port="8009" protocol="AJP/1.3" redirectPort="8443" />
Do we need to disable the HTTP protocol in Tomcat and keep only AJP connector enabled? If yes, how to do that?
I am trying to connect to the application from OHS server like so I am using the http protocal right? How should I use the ajp protocol to connect to tomcat application?
http://ohs-host:ohs-port/abcd
Thanks !!!!!

How to integrate web based application to windows based application

Hi,
Experts,
we developed web based application in this when we raising
invoice document after adding this we need to updated Amount
in integratee SAP B1 then that Amount we need Update The
Amount in OACT Table how we can Update in Amount Field
in OACT Particular Account Code. plz Guide me. and how to
integrate web absed application to windowbased application
plz help me.
Regds,
Samapth.

Dear sampathdevunuri kumar,
You may develop the addon based on SDK DIServer for required function.
The DI Server is an extension of the DI API and supports all its objects. It is intended for high-volume data integration, where numerous client connections must be managed simultaneously and optimized for speed. It is also suitable where Web-services architecture is preferred.
Please refer to SDK help and SDK DIServer sample for more information.
Best Regards
Jane Jing
SAP Business One Forums team

Cisco QM/Calabrio - server based recording - how many NICs?

I'm looking to replace a Verint system that is doing server-based recording with Call Mgr 4.1.3. We are going to upgrade to 7.1.x soon.
My customer is a CCX CAD/Citrix environment. I see that QM/Calabrio also supports server-based recording.
We have a number of subnets that we need to SPAN. I have a couple of questions:
1) How many recording NICs can be in one QM recording server? Verint can do 4 plus a management NIC.
2) How many recording servers can be supported? We also have a remote WAN location that needs a recording server.
3) Does QM require an MCS server to run, or will it install on general server hardware (we are an IBM shop and have the servers.)
Thanks.

Questions about Cisco Call recording and Quality Management or Workforce management should be posted
under the Contact Center Applications at https://www.myciscocommunity.com/community/partner/collaboration/contactcenter/apps
I am checking some of the details for question 1 & 2 and will respond to your questions in a few hours
for 3 The QM application can be deployed on MCS or MCS equivelent servers as determined by the partner/customer

How a J2EE web application access CR reports stored on the CR Server XI?

Hi,
I'll be working on some crystal report templates that will eventually be hosted/publish on the CR Server XI.
My questions are:
1. How my J2EE web application access those reports?
2. Do my web application uses some CR API for the connectivity and integration?
3. What will happen to the database connectivity of the report template? since the report are created locally.
4. Can the report template be edited/updated on the server?
5. How the CR XI login functionality be involve in the integration (web application ---> CR Server XI)?
6. Is the J2EE web application be deployed on similar web/application server where the CR Server XI resides?
7. What is the role of RAS, Universe, Business View Manager to this whole CR integration?
I hope you can provide some guidance on this journey to Crystal Report world
Regards,
Rulix Batistil
Genesis Networks Pte Ltd
www.gen-net.com.sg

1) Your application connects via the Java SDK using the appropriate JAR files.
2) It can. You can set the database information at runtime or use the already populated information from Enterprise.
3) Same as 2. Typically when you save the report to Enterprise you set up the database information there so that it runs against the database you want without prompting. You can change this via code to hit whatever equivalent database you want.
4) Yes. You would have to use RAS and the RCAPI to accomplish this via code. You can also make changes in the designer and overwrite the existing report template.
5) You will log in via code. The information on how to do so is in the SDK documentation, which I will link.
6) It can be deployed to the same machine as CR Server, though we recommend against that. Typically you will want to deploy it to a seperate web server and allow it to connect to the CR Server across the network.
7) RAS can be used to run reports, as well as the page server. The universe and business view manager are not directly used in code. If a report runs against a universe or business view then it will use them for data, but you wouldnt do anything with them directly.
[BOE Developer Library|http://devlibrary.businessobjects.com/BusinessObjectsXIR2SP2/en/devsuite.htm]
You will find the Java SDK information under the BusinessObjects Enterprise SDK section.
Best Regards,
Jason

How do I share server based Ical calendars to external users on google calendar

I need to share some server based calendars with google calendar. I know how to export but how do I keep the connection live so that when I put a new event into iCal on the server it automatically updates to google calendar? I was looking for a way to publish my server calendar to a hosting server but I can not even work out how to do that.
Any help would be appreciated.

Why not ask in the iCal forum area? - https://discussions.apple.com/community/applications/ical

How to set up Group Policy without any server installed

How to set up Group Policy on Win8 without any server installed?
I have set up 50 users on LAN and want to push softwares via one common point. From google I found to deploy Software using Group Policy. But then Group Policy occurs in Servers and I don't have any server set up.

Hello,
a Domain requires at least one Windows server OS machine which has Active Directory installed.
As previous already mentioned from SenneVL this also requires that computers are added to the domain and that you create user accounts in Active Directory users and computers which stores the account information in the Active directory database.
In your case with single computers each machine has its own database(SAM) which stores passwords etc. this is different in a domain.
Each computer has a local policy which will be overwritten from centrally managed policies from the domain.
"The common point would be my PC (Admin PC) ."
This machine can not be used for your needs with software installation for 50 computers.
"How To Use the Group Policy Editor to Manage Local Computer Policy."
This is about the local machine and you cannot manage them for other computers from your Admin PC.
"DOMAIN part: By default Microsoft takes everyone on Workgroup. Is that not a default DOMAIN? or should I make one lets say "ABC" on every PC ?"
NO, this is NOT a domain.
http://windows.microsoft.com/en-us/windows7/what-is-the-difference-between-a-domain-a-workgroup-and-a-homegroup
Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://blogs.msmvps.com/MWeber
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
Twitter:

Client/server socket based application

hi does anyone have example of client/server socket based application using Spring and Maven
where application do the following
Client sends a request with a path to any file on the server
„h Server reads the file and responds back with the content
„h Client outputs the content to the console
am trying to follow this
http://www2.sys-con.com/itsg/virtualcd/java/archives/0205/dibella/index.html
http://syntx.io/a-client-server-application-using-socket-programming-in-java/
am using java 6

i have attempt code but i wht to do the following
client/server socket based application that will read the content of a file and stream the content of the file to the client. The client must simply output the content of the file to the console using System.out. The client must be able to run in a standalone mode (non-network mode) or in a remote mode.
Additionally the client must be designed in a way that i can print the output to a console but must be interchangeable where if requirements change i can persist the response to file or persist the response to a database.
/* Server.java*/
///ifgetBoolen= true then...
import java.io.*;
import java.net.*;
import java.util.*;
import java.sql.*;
public class Server
    static String array[][];
    // STEP 1 a1
    // Server socket
    ServerSocket listener;
    // STEP 1 a2 Client connection
    Socket client;
    ObjectInputStream in;
    ObjectOutputStream out;
    public void createConnection() throws IOException
            System.out.println("\nSERVER >>> Waiting for connection.....");
            client = listener.accept();
            String IPAddress = "" + client.getInetAddress();
            DisplayMessage("SERVER >>> Connected to " + IPAddress.substring(1,IPAddress.length()));
      public void runServer()
        // Start listening for client connections
        // STEP 2
        try
            listener = new ServerSocket(12345, 10);
            createConnection();
              // STEP 3
//              processConnection();
        catch(IOException ioe)
            DisplayMessage("SERVER >>> Error trying to listen: " + ioe.getMessage());
    private void closeConnection()
        DisplayMessage("SERVER >>> Terminating connections");
        try
            if(out != null && in != null)
                  out.close();
                in.close();
                client.close();
        catch(IOException ioe)
            DisplayMessage("SERVER >>> Closing connections");
    public static void define2DArray(ResultSet RS, int Size)
        try
            ResultSetMetaData RMSD = RS.getMetaData();
            DisplayMessage("SERVER >>> Requested arraySize: " + Size);
            if (RS.next())
                array = new String[Size][RMSD.getColumnCount()];
                for (int Row = 0; Row < Size; Row++)
                    for (int Col = 0; Col < RMSD.getColumnCount(); Col++)
                        array[Row][Col] = new String();
                        array[Row][Col] = RS.getString(Col+1);
                        DisplayMessage(array[Row][Col] + " ");
                    RS.next();
            else
                array = new String[1][1];
                array[0][0] = "#No Records";
        catch (Exception e)
            DisplayMessage("SERVER >>> Error in defining a 2DArray: " + e.getMessage());
    public static void DisplayMessage(final String IncomingSMS)
        System.out.println(IncomingSMS);
//client
* @author
import java.io.*;
import java.net.*;
import javax.swing.*;
public class ClientSystem
    static Socket server;
    static ObjectOutputStream out;
    static ObjectInputStream in;
    static String Response[][];
    static boolean IsConnected = false;
    static int Num = 0;
    public static void connectToServer() throws IOException
        server = new Socket("127.0.0.1", 12345);
//        server = new Socket("000.00.98.00", 12345);
        String IPAddress = "" + server.getInetAddress();
        DisplayMessage("\nCLIENT >>> Connected to " + IPAddress.substring(1,IPAddress.length()));
    public static void getStreams() throws IOException
        out = new ObjectOutputStream(server.getOutputStream());
        out.flush();
          in = new ObjectInputStream(server.getInputStream());
          IsConnected = true;
          DisplayMessage("CLIENT >>> Got I/O streams");
    public static void runClient()
        try
            connectToServer();
            getStreams();
              DisplayMessage("CLIENT >>> Connection successfull....\n");
              DisplayMessage("CLIENT >>> Want to talk to server");
        catch (IOException ioe)
            System.out.print("."+Num);
            Num++;
    public static void closeConnection()
        try
            out.close();
            in.close();
            server.close();
        catch(IOException error)
            DisplayMessage("CLIENT >>> Could not close connections");
    public static void Start()
        System.out.print("\nCLIENT >>> Attempting connection.....");
        try
            IsConnected = false;
            while (IsConnected == false)
                runClient();
                if (IsConnected == false)
                    Thread.sleep(100);
        catch (Exception e)
            DisplayMessage("CLIENT >>> Attempting connection.....");
    public static String sendSMS(String sms)
        Response = new String[0][0];
        try
            DisplayMessage("CLIENT >>> " + sms);
            out.writeObject(sms);
            out.flush();
            Response = (String[][])in.readObject();
            DisplayMessage("CLIENT >>> Waiting for server to respond...");
            for (int Row = 0; Row < Response.length; Row++)
                System.out.printf( "_SERVER >>> \t");
                for (int Col = 0; Col < Response[Row].length; Col++)
                    //DisplayMessage( "_SERVER >>> " + Response[Row][Col] + " ");
                    System.out.printf( "%s\t", Response[Row][Col]);
                System.out.println();
            DisplayMessage("CLIENT >>> Query processed successfully....\n");
        catch(ClassNotFoundException cnfe)
            DisplayMessage("CLIENT >>> Class not found for casting received object");
        catch(IOException ioe)
            reConnect();
        catch (Exception sqle)
            DisplayMessage("CLIENT >>> Error sending query ??? " + sqle.getMessage());
        return "transmission successfull";
    public static void reConnect()
        try
            DisplayMessage("CLIENT >>> Connection was lost. Trying to reconnect...");
            closeConnection();
            Thread.sleep(100);
            IsConnected = false;
            while (IsConnected == false)
                runClient();
                Thread.sleep(200);
        catch (Exception e)
            DisplayMessage("CLIENT >>> Error trying to Re-Connect...");
    public static void DisplayMessage(final String IncomingSms)
        System.out.println(IncomingSms);
    System.out.printf("Isms: %s", IncomingSms); ///naah.
    public static String[][] getResponse()
        return Response;
    public static String getResponse(int row, int col)
        return Response[row][col];
how can i do below using above code
The program must be able to work in a non-networked mode. In this mode, the server and client must run in the same VM and must perform no networking, must not use loopback networking i.e: no “localhost” or “127.0.0.1”, and must not involve the serialization of any objects when communicating between the client and server components.
The operating mode is selected using the single command line argument that is permitted.
imust use a socket connection and define a protocol. networking must be entirely bypassed in the non-network mode.

CAS Policy Manager error when installing Server SQL express 2012

Hello everyone,
I was wondering if anyong can help me with this.
I am trying to install SQL server express 2012 on a windows 7 computer and am unable to install it.
When I try to start the installer I get the error "Microsoft .NET Framework CAS Policy Manager has stopped working"
Problem signature:
Problem Event Name: APPCRASH
Application Name: caspol.exe
Application Version: 2.0.50727.5420
Application Timestamp: 4ca2b8df
Fault Module Name: ntdll.dll
Fault Module Version: 6.1.7601.18247
Fault Module Timestamp: 521eaf24
Exception Code: c0000005
Exception Offset: 0000000000027689
OS Version: 6.1.7601.2.1.0.256.1
Locale ID: 1033
Additional Information 1: 00a4
Additional Information 2: 00a4a2975d5a28cfbbc1bf906fc7eacd
Additional Information 3: 0146
Additional Information 4: 0146abaed829ebf2f677c0e9088e54ea
And after I hit close program on that I get the error:
CasPol.exe - Application Error
The application was unable to start correctly (0x0000005). Click OK to close the application.
And I have tried redownloading it multiple times.
I have run the .net cleanup tool and a repair tool
I have uninstalled and reinstalled .net as well to the lastest version.
With no luck at all.
Any suggestions on what I might be able to do to fix this?
An help would be greatly appreciated.

Hello,
It points to fact that your .Net Framework is corrupt.Use below tool to repair .Net framework
.Net framework repair tool
Additional helpful articles to refer
CAS policy error message
CAS policy error message when
installing SQL server
Please mark this reply as the answer or vote as helpful, as appropriate, to make it useful for other readers

How does QoS work with WAAS WCCP? What's the interaction between QoS Traffic Classification and WAE Traffic Application Policy?

How does QoS work with WAAS WCCP? What's the interaction between Router QoS Traffic Classification and WAE Traffic Application Policy?

By default, WAAS preserves the DSCP marking on intercepted packets. There is a configuration option to set/override the DSCP value at the global (device), application, and classifier levels. Currently WAAS provides marking only. There is no action taken by WAAS based on the DSCP value.
Regards,
Zach

How do I restore Application Set in BPC 5.1 to another BPC 5.1 server?

Hi,
Anyone know how to copy the application set from one server to another server? I was able to Backup the application set and restore to the second server but the application set does not shown up on the second server when I log in. Am I missing some steps? How do I enable the restored app. set in BPC 5.1? Are there easier way to copy the application set to another server?
I have one BPC 5.1 App server and one SQL2005 server for each environment.
Thanks,
Kham

Hi Tim,
Thanks for replying.
I logged in with Sysadmin id and was able to see the restored App. Set. You mentioned that I need to Grant other users access, I looked in the pdf guide I have, but can't find it anywhere. Do you have detail steps on how I can grant user access to the newly restored app set? I tried all the options like Manage Security, Manage App Set, Manage App from Admin Console, but I don't see any options to grant access to other users.
I am new to BPC and just start learning the application myself.
Thanks again for your help.

How-To: server-based... application policy management

Similar Messages

Maybe you are looking for