How to set up trust relationship between oc4j an tomcat
Howdy
According to the EJB 2.0 spec., section 19.8.1.1, second paragraph: "EJB containers are required to provide deployers or administrators with the tools to configure trust relationships with intermediate web or EJB containers."
What tools/methods are available for OC4J?
To give my question some context:
I'm trying to set up things so that I have Tomcat (4.1.x) as a servlet container and OC4J (9.0.3) as an EJB container. I wan't Tomcat to authenticate users (using it's JDNI (LDAP) realm, and then have it forward a javax.security.Principal representing the user, when invoking EJB's on OC4J from servlets. One task in that is to make the OC4J instance trust the Tomcat instance, so that OC4J accepts a principal sent from Tomcat as already authenticated.
I've been unable to find any docs on this subject.
Any help appreciated.
best regards Christian Surlykke
Christian -- Setting up the trust relationship is described in interoperability section of the OC4J v903 Services Guide. I would probably start there.
Thanks -- Jeff
Similar Messages
-
2-way Trust Relationship between Windows and Mac Domain
Hi guys I hope someone can help me.
Just a quick explanation of what I am trying to do.
I have an Xserve running OSX 10.5.8 server, which is the OD Master. On that server I’m running Kerio mail server. I have a Microsoft 2003 server running AD.
The problem is I need to run BlackBerry Enterprise on the Windows server as the BlackBerry need active directory to work.
Since I have both system already running, I do not want to destroy my open directory just to get the BlackBerry working.
So what I have tried to do is create a 2-way Trust Relationship between the 2 domains, so the BlackBerry server will talk to the Kerio mail server.
The trust relationship appears to create fine from the Windows server side, but I’m not able to retrieve LDAP information from the open directory server.
The creation from the OSX server starts fine automated but then I had to finish it manually.
Has anyone else here created a 2-way trust relationship between Windows and Mac’s before? Any help on how you did it would be appreciated. ThanksHave you checked on when the computer last checked in and changed the computer account password with the domain? When a computer changes it's password, Active Directory will store only the current password and it does not expire. The workstation
will store both the current password and the previous password. This for cases when you may restore Active Directory to a point before the computer password change.
To handle this, the workstation will try it's current password, then it's previous.
If you're restoring the workstation to a previous point in time, you may be rolling the stored passwords back too far for Active Directory to accept. I would only imagine this to be the case a handful of times if you're going back 1-2 days.
Are you experiencing 100% failure? -
Trust Relationship between PC and Domain broken\failed after System Restore
We are currently faced with a problem that every time we do a System Restore on our Windows 7 workstation, upon login attempt, we an login failed because the Trust Relationship between PC and Domain is broken.
As solution: we have to log in as a local admin, remove the workstation account from the domain, then re-add the workstation back to the domain.
Does anybody know if there is a hotfix for this or how we can bypass having to remove and re-add the workstation to the domain in order to login?Have you checked on when the computer last checked in and changed the computer account password with the domain? When a computer changes it's password, Active Directory will store only the current password and it does not expire. The workstation
will store both the current password and the previous password. This for cases when you may restore Active Directory to a point before the computer password change.
To handle this, the workstation will try it's current password, then it's previous.
If you're restoring the workstation to a previous point in time, you may be rolling the stored passwords back too far for Active Directory to accept. I would only imagine this to be the case a handful of times if you're going back 1-2 days.
Are you experiencing 100% failure? -
Hi,
SharePoint 2010 Backup has been taken from production and restored through Semantic Tool in one of the server.The wepapplication of which the backup was taken is working fine.
But the problem is that the SharePoint is not working correctly.We cannot create any new webapplication ,cannot navigate to the ServiceApplications.aspx page it shows error.Even the Search and UserProfile Services of the existing Web Application is not working.Checking
the SharePoint Logs I found out the below exception
11/30/2011 12:14:53.78 WebAnalyticsService.exe (0x06D4) 0x2D24 SharePoint Foundation Database
8u1d High Flushing connection pool 'Data Source=urasvr139;Initial Catalog=SharePoint_Config;Integrated Security=True;Enlist=False;Connect Timeout=15'
11/30/2011 12:14:53.78 WebAnalyticsService.exe (0x06D4) 0x2D24 SharePoint Foundation Topology
2myf Medium Enabling the configuration filesystem and memory caches.
11/30/2011 12:14:53.79 WebAnalyticsService.exe (0x06D4) 0x12AC SharePoint Foundation Database
8u1d High Flushing connection pool 'Data Source=urasvr139;Initial Catalog=SharePoint_Config;Integrated Security=True;Enlist=False;Connect Timeout=15'
11/30/2011 12:14:53.79 WebAnalyticsService.exe (0x06D4) 0x12AC SharePoint Foundation Topology
2myf Medium Enabling the configuration filesystem and memory caches.
11/30/2011 12:14:55.54 mssearch.exe (0x0864) 0x2B24 SharePoint Server Search Propagation Manager
fo2s Medium [3b3-c-0 An] aborting all propagation tasks and propagation-owned transactions after waiting 300 seconds (0 indexes) [indexpropagator.cxx:1607] d:\office\source\search\native\ytrip\tripoli\propagation\indexpropagator.cxx
11/30/2011 12:14:55.99 OWSTIMER.EXE (0x1DF4) 0x1994 SharePoint Foundation Topology
75dz High The SPPersistedObject with
Name User Profile Service Application, Id 9577a6aa-33ec-498e-b198-56651b53bf27, Parent 13e1ef7d-40c2-4bcb-906c-a080866ca9bd failed to initialize with the following error: System.SystemException: The trust relationship between the primary domain and the trusted
domain failed. at System.Security.Principal.SecurityIdentifier.TranslateToNTAccounts(IdentityReferenceCollection sourceSids, Boolean& someFailed) at System.Security.Principal.SecurityIdentifier.Translate(IdentityReferenceCollection
sourceSids, Type targetType, Boolean forceSuccess) at System.Security.Principal.SecurityIdentifier.Translate(Type targetType) at Microsoft.SharePoint.Administration.SPAce`1.get_PrincipalName()
at Microsoft.SharePoint.Administration.SPAcl`1.Add(String princip...
11/30/2011 12:14:55.99* OWSTIMER.EXE (0x1DF4) 0x1994 SharePoint Foundation Topology
75dz High ...alName, String displayName, Byte[] securityIdentifier, T grantRightsMask, T denyRightsMask) at Microsoft.SharePoint.Administration.SPAcl`1..ctor(String persistedAcl)
at Microsoft.SharePoint.Administration.SPServiceApplication.OnDeserialization() at Microsoft.SharePoint.Administration.SPIisWebServiceApplication.OnDeserialization() at Microsoft.SharePoint.Administration.SPPersistedObject.Initialize(ISPPersistedStoreProvider
persistedStoreProvider, Guid id, Guid parentId, String name, SPObjectStatus status, Int64 version, XmlDocument state)
11/30/2011 12:14:56.00 OWSTIMER.EXE (0x1DF4) 0x1994 SharePoint Foundation Topology
8xqx High Exception in RefreshCache. Exception message :The trust relationship between the primary domain and the trusted domain failed.
11/30/2011 12:14:56.00 OWSTIMER.EXE (0x1DF4) 0x1994 SharePoint Foundation Timer
2n2p Monitorable The following error occured while trying to initialize the timer: System.SystemException: The trust relationship between the primary domain and the trusted domain failed. at System.Security.Principal.SecurityIdentifier.TranslateToNTAccounts(IdentityReferenceCollection
sourceSids, Boolean& someFailed) at System.Security.Principal.SecurityIdentifier.Translate(IdentityReferenceCollection sourceSids, Type targetType, Boolean forceSuccess) at System.Security.Principal.SecurityIdentifier.Translate(Type
targetType) at Microsoft.SharePoint.Administration.SPAce`1.get_PrincipalName() at Microsoft.SharePoint.Administration.SPAcl`1.Add(String principalName, String displayName, Byte[] securityIdentifier, T grantRightsMask,
T denyRightsMask) at Microsoft.SharePoint.Administrati...
11/30/2011 12:14:56.00* OWSTIMER.EXE (0x1DF4) 0x1994 SharePoint Foundation Timer
2n2p Monitorable ...on.SPAcl`1..ctor(String persistedAcl) at Microsoft.SharePoint.Administration.SPServiceApplication.OnDeserialization() at Microsoft.SharePoint.Administration.SPIisWebServiceApplication.OnDeserialization()
at Microsoft.SharePoint.Administration.SPPersistedObject.Initialize(ISPPersistedStoreProvider persistedStoreProvider, Guid id, Guid parentId, String name, SPObjectStatus status, Int64 version, XmlDocument state) at Microsoft.SharePoint.Administration.SPConfigurationDatabase.GetObject(Guid
id, Guid parentId, Guid type, String name, SPObjectStatus status, Byte[] versionBuffer, String xml) at Microsoft.SharePoint.Administration.SPConfigurationDatabase.GetObject(SqlDataReader dr) at Microsoft.SharePoint.Administration.SPConfigurationDatabase.RefreshCache(Int64
currentVe...
Please guide me on the above issue ,this will be of great help
Thanks.I have same error. Verified for trust , ports , cleaned up cache.. nothing has helped.
The problem is caused by User profile Synch Service:
UserProfileProperty_WCFLogging :: ProfilePropertyService.GetProfileProperties Exception: System.SystemException:
The trust relationship between the primary domain and the trusted domain failed. at System.Security.Principal.SecurityIdentifier.TranslateToNTAccounts(IdentityReferenceCollection sourceSids,
Boolean& someFailed) at System.Security.Principal.SecurityIdentifier.Translate(IdentityReferenceCollection sourceSids, Type targetType, Boolean forceSuccess) at System.Security.Principal.SecurityIdentifier.Translate(Type
targetType) at Microsoft.SharePoint.Administration.SPAce`1.get_PrincipalName() at Microsoft.SharePoint.Administration.SPAcl`1.Add(String principalName, String displayName, SPIdentifierType identifierType, Byte[]
identifier, T grantRightsMask, T denyRigh...
08/23/2014 13:00:20.96* w3wp.exe (0x2204)
0x293C SharePoint Portal Server User Profiles
eh0u Unexpected ...tsMask) at Microsoft.SharePoint.Administration.SPAcl`1..ctor(String persistedAcl)
at Microsoft.Office.Server.Administration.UserProfileApplication.get_SerializedAdministratorAcl() at Microsoft.Office.Server.Administration.UserProfileApplication.GetProperties() at Microsoft.Office.Server.UserProfiles.ProfilePropertyService.GetProfileProperties()
Please let me know if you any solution found for this?
Regards,
Kunal -
how to set up the interaction between InDesign CS6 8.0 and Photoshop CS 6 - if Photoshop is installed and the 64 and 32-bit?? default InDesign refers to the 64-bit version of Photoshop and scripts do not work.
Nice of you to point it out here as I at least don’t follow Mr.Nash’s blog regularly.
-
How to set up internet connection between MacBook Pro and an old eMac?
I got an old eMac without wifi and a MacBook Pro. I'd like to share the network connection via ethernet cable to my eMac, but I can't get it work.
I'd like to use it with screenrecycler and it needs a network connection.
How to do it? How to set up the connection between the client and the host? Could somebedy give me a step by step guide?
Thank you very muchHello,
First, are you using Wifi for Internet on the MBP?
System Preferences>Network, click on the little gear at the bottom next to the + & - icons, (unlock lock first if locked), choose Set Service Order.
The interface that connects to the Internet should be dragged to the top of the list, Wifi on the MBP.
In Shating on both, enable File Sharing, Screen Sharing, & Web Sharing on both.
Then with the Ethernet cable between the two, find the IPs of both, or use Finder>Go>Connect to Server>Browse... see what shows up. -
How to verify that trust relationship has been set up successfully at client machine ?
Hello,
There is trust set up with domain group.Would you please let me know how can I verify that trust relationship has been set up correctly in such a way that i can see the users of trusted group on client machine ?
Any idea?
Note :I do not have access on Domain Controller.
Thanks and Regards,
Dipti
Dipti ChhatrapatiHi
As far as I know, trust certificates that have been exchanged between the SharePoint farm and external systems should be visible by going to the Central Admin->Security->Manage Trusts page.
Kind Regards
Bjoern
http://www.sharepointviking.com
Twitter: Follow @bjoern_rapp -
How to create tables and relationship between ?
Hello everybody,<o:p></o:p>
I have three table with structures as follow:<o:p></o:p>
<o:p> </o:p>
Table1
contains information on ledger accounts,and
Table2 contains Groups of the detailed
accounts.
When defining ledger
accounts , we must associated them with
groups of detailed accountsthat
are
set
by the
Check
boxes. groups of detailed accounts are three
levels, At each level, there are fifteen
groups as follow:
1_others ,2_People ,3_companies ,4_
Cost centers ,5_projects ,6_
Letter of Credits ,7_ Current
Accounts ,8_
Banking facilities ,9_
Commodity ,10_ Branches
aggregation ,11_ Purchase
Contract
Services ,12_
Sales Contract
Services ,13_
Export Products ,14_
Control account ,15_
Months.Table3 contains detailed accounts information that should associated with groups of detailed accounts(fifiteen groups).
In addition, we
have in our program four combobox,
detailed accounts must be
linked to the detailed groups
so that, by selecting one ledger account in combobox1 it should display detailed accounts of level1 in combobox2 ,detailed accounts of level2
in combobox3 and detailed accounts of level3 in combobox4.<o:p></o:p>
<o:p> </o:p>
How
to design tables and the relationships between them, so
with select the ledger account I can see the detailed
accounts of per level in other comboboxes?<o:p></o:p>
<o:p> </o:p>
I've
spent
a lot of time
on this
subject
but
I have
not been able
to
solve this problem.<o:p></o:p>
Please help me,<o:p></o:p>
Best regards.<o:p></o:p>I am guessing....I hope it is helpful...
>1_others ,2_People ,3_companies ,4_
Cost centers ,5_projects ,6_
Letter of Credits ,7_ Current
Accounts ,8_
Banking facilities ,9_
Commodity ,10_ Branches
aggregation ,11_ Purchase
Contract
Services ,12_
Sales Contract
Services ,13_
Export Products ,14_
Control account ,15_
Months.
Setup a table for each.
>Table3 contains detailed accounts information that should associated with groups of detailed accounts(fifiteen groups).
Setup the AccountDetail(1,2,3 level) tables with 15 NULLABLE FOREIGN KEYs. If some group is not applicable for an FK, keep the value NULL, otherwise enter a valid PK value.
>Table1
contains information on ledger
accounts,and Table2 contains
Groupsof the detailed
accounts
Setup LedgerAccount tables.
Setup LedgerDetailXref table with FOREIGN KEYS to LedgerAccount & AccountDetail(1,2,3) tables.
FOREIGN KEY examples: http://www.sqlusa.com/bestpractices2005/bankdatabase/
Kalman Toth Database & OLAP Architect
SQL Server 2014 Design & Programming
New Book / Kindle: Exam 70-461 Bootcamp: Querying Microsoft SQL Server 2012 -
How to configure container trust relationships?
The EJB 2.0 specification clearly states (paragraph 19.8.1.1) that '...EJB containers
are required to provide deployers and administrators with the tools to configure
trust relationships for interactions with intermediate web or EJB containers...'.
How do you do this in WLS 6.1, and where can I find additional documentation about
the trust relationsships between containers?Between WLS containers.
Erik
"Peter B" <@> wrote:
>
"Erik Godding Boye" <[email protected]> wrote in message
news:3be0280c$[email protected]..
The EJB 2.0 specification clearly states (paragraph 19.8.1.1) that'...EJB
containers
are required to provide deployers and administrators with the toolsto
configure
trust relationships for interactions with intermediate web or EJBcontainers...'.
How do you do this in WLS 6.1, and where can I find additionaldocumentation about
the trust relationsships between containers?Are you talking about other WLS containers or some third party app server
containers?
Peter -
One way trust relationship between different domain windows server 2012 in different forest
I'd like to build trust correctly between the domains A.local and B.int. A.local is on a Windows 2012 . B.int is on a Windows 2012 . Both machines are
connected to the same LAN. The forest level in A.local
machine is Windows Server 2008 and The forest level in B.int
is Windows server 2012.
I want a one-way trust relationship, i.e. users from A.local gain access to B.local.
my problem it i create the trust put when i go to validate the trust between A.Local and B.int give me this error :
The secure channel (SC) reset on Active Directory Domain Controller \\dc2.B.int of domain B.int to domain A.Local failed with error: There are currently no logon servers available to service the logon request.
NOTE : Recently I
UPGRADE THE Active Directory FROM 2008 R2 TO 2012 and i ping on A.local to B.int
it is ping by name and IP but from b.int ping by IP JUST >>>
ihabHi,
yes i already do it the setup conditional forwarding between the 2 domains and
the firewall it is off
ihab -
How to set up trusted system or ip in NW CE 7.1
Hi all,
I am running on NW CE 7.1, and I want to know if NW allows setting up trusted system or ip. If so, is there any documentation about it?
Thanks for your help in advance.Hi,
what do you mean by "trusted system"?
For instance, you can use the CE as a producer in your EP 7.0 consumer portal with SSO. You exchange server certificates and so create a trust between these 2 servers. This is also be possible between CE and ABAP (CE is consuming an ABAP service).
To do so, it's the standard process: export the certificate of CE and import it into the target system
br,
Tobias -
How would i design the relationship between "question", "subquestion", and "answer"
Hi all. Consider the following scenario:
Scenario:
A Question has an Answer, but some Questions have Subquestions. For example:
1. Define the following terms: (Question)
a) Object (1 marks) (Subquestion)
An instance of a class. (Answer)
b) ...
2. Differentiate between a constructor and a destructor (2 marks)
(Question)
A constructor constructs while a destructor destroys.
(Answer)
Question:
I want to model Questions, Subquestion, and Answer as Entities with relationships/associations, preferably binary relationships as i feel ternary relationships will be problematic while programming. Any suggestion on how i would
go about this?
There is never infinite resources.
For the Question Entity, a question has the attributes "QuestionPhrase <String>", "Diagram<Binary>", and "Marks
<Decimal>".
For the SubQuestion Entity, a subquestion has the attributes "SubQuestionPhrase <String>", "Diagram<Binary>", and "Marks <Decimal>".
For the Answer Entity, an answer has attributes, "AnswerPhrase<String>", "Diagram <Binary>"Yes. I am in .Net. I sure do hope i did not ask in the wrong forum. :-|
Hi KCWamuti,
If you need to design the relationship between Question table and Answer table in SQL Server, as Uri’s and Visakh’s posts, you can create the foreign key to establish relationship between tables, and use join in query to get your desired result. For more
information about JOIN in SQL Server, please review this article:
Different Types of SQL Joins.
However, if you need to model Questions, Subquestion, and Answer as Entities in .Net, then the issue regards data platform development. I suggest you post the question in the Data Platform Development forums at
http://social.msdn.microsoft.com/Forums/en-US/home?category=dataplatformdev . It is appropriate and more experts will assist you.
Thanks,
Lydia Zhang -
How to find the table relationship between BSEG-BELNR with CE11000 table.
Hi,
Please help me to find out the table relationship between BSEG with CE11000 table.
I have BSEG-BELNR value.
Thanks in Advance
ShankarHello,
BAsically the relationship can be foundon the basis of cost centre it will be good if you paste the structure ce11000.
I have worked on it and as far i as i can recall it contain value fields right...like vv205,vv305 etc?
Provide me more details.
Are you preparing some reconcillation report for costing based COPA or Account based COPA..?
Hopefully will help you out..
Regards,
Nabheet -
How to set the servlet context path manually in Tomcat web server.
I tested some servlets by putting them in the folder , which the tomcats examples application uses (ie Tomcat 4.1\webapps\examples\WEB-INF\classes\) and it appeared to be working fine.
I was calling the servlet like this : http://localhost:2006/examples/servlet/TestServlet
But when I installed my own WAR file in the server , the servlet is not working now. now the new location of my servlets is : Tomcat 4.1\webapps\MyApp\WEB-INF\classes\
and I'm trying to call the servlet like this : http://localhost:2006/MyApp/servlet/TestServlet
The error , what i'm getting is :
description :The requested resource (/MyApp/servlet/TestServlet) is not available.
Some body please tell where I'm making the mistake ? I believe this may have something to do with the servlet context path setting. If anybody has any idea , how to set the path..will be much appreciated.Thanx for your reply , at first I was not using any web.xml(since not mandatory) but even after using the web.xml file the error is coming . Please have a look into the contents of the web.xml file and let me know if you find any problem...
<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE web-app
PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN"
"http://java.sun.com/dtd/web-app_2_3.dtd">
<web-app>
<servlet>
<servlet-name>TestServlet</servlet-name>
<servlet-class>TestServlet</servlet-class>
</servlet>
</web-app>
one more thing I would like to tell you here. I was just looking into the configuration of Iplanet web server..I found that , there are options to set the servlet container path (like : - Prefix: /servlet
Servlet Directory: /ecomm/iplanet/nes60/product/docs/container )
so from here I came to know that "container " is the folder where we should put our servlets and it has URI as "servlet" but yet I'm not able to find any option in the Tomcat Web server to set the servlet container to any different directory.
If you have any idea please let me know. -
How to set up a link between sap fica transaction and cic front office
Hi Guys,
How to configure between SAP FICA transaction (FPR1 for create installation plan) to CIC front office.
I did some changes in FPR1 transaction, same changes which are not reflecting on CIC screen, when i log on to CIC0 and select the create install plan, It is automatically go to FPR1 but it is not showing with that changes.
I checked all the way but it is missing the link some where. plz drop any ideas on this.
Thanks
Venkat.Hi Matt, create a column of type "enhanced rich text." Then in your datasheet view, double click on the field in that column and use your "insert" tab to upload a file. You'll then see the file in this cell and you can open it straight
from the datasheet view.
cameron rautmann
Maybe you are looking for
-
JDBC receiver error: field not exist in the table
But the field does exist. Columns Name Data Type Size Scale Not NULL Default Value EMPID VARCHAR2 10 EMPNAME VARCHAR2 30 EMPAGE VARCHAR2 3 FLAG VARCHAR2 1 The Database is Oracle. Message processing failed. Cause: com.sap.aii.af.ra.ms.api.Recoverable
-
12" 1.33Ghz iBook Hard Drive speed?
hey all, i'm curious to know if any of you have ended up w/ 5400rpm drives in your 12" 1.33Ghz iBooks. i know of a couple ppl on a diff forum who got stock iBooks and for whatever reason they got 5400rpm 40GB drives. offhand i know there's very littl
-
Process Chain deleted, how to know who to blame? Log?
Is there a log for changed/deleted Process chains (BW3.5)? br, Marko
-
How and When Does the attribute VI_ATTR_VXI_TRIG_STATUS get initialized
How and When Does the attribute VI_ATTR_VXI_TRIG_STATUS get initialized. Do the actual trigger lines get measured or does the attribute get initialized to a default value when the vxi resource manager is executed?
-
Substitution of VO not reflected
Hi, I substituted XxsliAsgSummaryVO in place of AsgSummaryVO in HRSS Online Payslip. I could see XxsliAsgSummaryVO in Business Components section of About page. But When I add one field from XxsliAsgSummaryVO and gone back to Payslip to see the chang