How to set up trust relationship between oc4j an tomcat

Howdy
According to the EJB 2.0 spec., section 19.8.1.1, second paragraph: "EJB containers are required to provide deployers or administrators with the tools to configure trust relationships with intermediate web or EJB containers."
What tools/methods are available for OC4J?
To give my question some context:
I'm trying to set up things so that I have Tomcat (4.1.x) as a servlet container and OC4J (9.0.3) as an EJB container. I wan't Tomcat to authenticate users (using it's JDNI (LDAP) realm, and then have it forward a javax.security.Principal representing the user, when invoking EJB's on OC4J from servlets. One task in that is to make the OC4J instance trust the Tomcat instance, so that OC4J accepts a principal sent from Tomcat as already authenticated.
I've been unable to find any docs on this subject.
Any help appreciated.
best regards Christian Surlykke

Christian -- Setting up the trust relationship is described in interoperability section of the OC4J v903 Services Guide. I would probably start there.
Thanks -- Jeff

Similar Messages

  • 2-way Trust Relationship between Windows and Mac Domain

    Hi guys I hope someone can help me.
    Just a quick explanation of what I am trying to do.
    I have an Xserve running OSX 10.5.8 server, which is the OD Master. On that server I’m running Kerio mail server. I have a Microsoft 2003 server running AD.
    The problem is I need to run BlackBerry Enterprise on the Windows server as the BlackBerry need active directory to work.
    Since I have both system already running, I do not want to destroy my open directory just to get the BlackBerry working.
    So what I have tried to do is create a 2-way Trust Relationship between the 2 domains, so the BlackBerry server will talk to the Kerio mail server.
    The trust relationship appears to create fine from the Windows server side, but I’m not able to retrieve LDAP information from the open directory server.
    The creation from the OSX server starts fine automated but then I had to finish it manually.
    Has anyone else here created a 2-way trust relationship between Windows and Mac’s before? Any help on how you did it would be appreciated. Thanks

    Have you checked on when the computer last checked in and changed the computer account password with the domain?  When a computer changes it's password, Active Directory will store only the current password and it does not expire.  The workstation
    will store both the current password and the previous password.  This for cases when you may restore Active Directory to a point before the computer password change.  
    To handle this, the workstation will try it's current password, then it's previous.
    If you're restoring the workstation to a previous point in time, you may be rolling the stored passwords back too far for Active Directory to accept.  I would only imagine this to be the case a handful of times if you're going back 1-2 days.
    Are you experiencing 100% failure?

  • Trust Relationship between PC and Domain broken\failed after System Restore

    We are currently faced with a problem that every time we do a System Restore on our Windows 7 workstation, upon login attempt, we an login failed because the Trust Relationship between PC and Domain is broken. 
    As solution: we have to log in as a local admin,  remove the workstation account from the domain, then re-add the workstation back to the domain.
    Does anybody know if there is a hotfix for this or how we can bypass having to remove and re-add the workstation to the domain in order to login?

    Have you checked on when the computer last checked in and changed the computer account password with the domain?  When a computer changes it's password, Active Directory will store only the current password and it does not expire.  The workstation
    will store both the current password and the previous password.  This for cases when you may restore Active Directory to a point before the computer password change.  
    To handle this, the workstation will try it's current password, then it's previous.
    If you're restoring the workstation to a previous point in time, you may be rolling the stored passwords back too far for Active Directory to accept.  I would only imagine this to be the case a handful of times if you're going back 1-2 days.
    Are you experiencing 100% failure?

  • Getting Error The trust relationship between the primary domain and the trusted domain failed in SharePoint 2010

    Hi,
    SharePoint 2010 Backup has been taken from production and restored through Semantic Tool in one of the server.The wepapplication of which the backup was taken is working fine.
    But the problem is that the SharePoint is not working correctly.We cannot create any new webapplication ,cannot navigate to the ServiceApplications.aspx page it shows error.Even the Search and UserProfile Services of the existing Web Application is not working.Checking
    the SharePoint Logs I found out the below exception
    11/30/2011 12:14:53.78  WebAnalyticsService.exe (0x06D4)         0x2D24 SharePoint Foundation          Database                     
     8u1d High     Flushing connection pool 'Data Source=urasvr139;Initial Catalog=SharePoint_Config;Integrated Security=True;Enlist=False;Connect Timeout=15' 
    11/30/2011 12:14:53.78  WebAnalyticsService.exe (0x06D4)         0x2D24 SharePoint Foundation          Topology                     
     2myf Medium   Enabling the configuration filesystem and memory caches. 
    11/30/2011 12:14:53.79  WebAnalyticsService.exe (0x06D4)         0x12AC SharePoint Foundation          Database                     
     8u1d High     Flushing connection pool 'Data Source=urasvr139;Initial Catalog=SharePoint_Config;Integrated Security=True;Enlist=False;Connect Timeout=15' 
    11/30/2011 12:14:53.79  WebAnalyticsService.exe (0x06D4)         0x12AC SharePoint Foundation          Topology                     
     2myf Medium   Enabling the configuration filesystem and memory caches. 
    11/30/2011 12:14:55.54  mssearch.exe (0x0864)                    0x2B24 SharePoint Server Search       Propagation Manager          
     fo2s Medium   [3b3-c-0 An] aborting all propagation tasks and propagation-owned transactions after waiting 300 seconds (0 indexes)  [indexpropagator.cxx:1607]  d:\office\source\search\native\ytrip\tripoli\propagation\indexpropagator.cxx 
    11/30/2011 12:14:55.99  OWSTIMER.EXE (0x1DF4)                    0x1994 SharePoint Foundation          Topology                     
     75dz High     The SPPersistedObject with
    Name User Profile Service Application, Id 9577a6aa-33ec-498e-b198-56651b53bf27, Parent 13e1ef7d-40c2-4bcb-906c-a080866ca9bd failed to initialize with the following error: System.SystemException: The trust relationship between the primary domain and the trusted
    domain failed.       at System.Security.Principal.SecurityIdentifier.TranslateToNTAccounts(IdentityReferenceCollection sourceSids, Boolean& someFailed)     at System.Security.Principal.SecurityIdentifier.Translate(IdentityReferenceCollection
    sourceSids, Type targetType, Boolean forceSuccess)     at System.Security.Principal.SecurityIdentifier.Translate(Type targetType)     at Microsoft.SharePoint.Administration.SPAce`1.get_PrincipalName()    
    at Microsoft.SharePoint.Administration.SPAcl`1.Add(String princip... 
    11/30/2011 12:14:55.99* OWSTIMER.EXE (0x1DF4)                    0x1994 SharePoint Foundation          Topology                     
     75dz High     ...alName, String displayName, Byte[] securityIdentifier, T grantRightsMask, T denyRightsMask)     at Microsoft.SharePoint.Administration.SPAcl`1..ctor(String persistedAcl)    
    at Microsoft.SharePoint.Administration.SPServiceApplication.OnDeserialization()     at Microsoft.SharePoint.Administration.SPIisWebServiceApplication.OnDeserialization()     at Microsoft.SharePoint.Administration.SPPersistedObject.Initialize(ISPPersistedStoreProvider
    persistedStoreProvider, Guid id, Guid parentId, String name, SPObjectStatus status, Int64 version, XmlDocument state) 
    11/30/2011 12:14:56.00  OWSTIMER.EXE (0x1DF4)                    0x1994 SharePoint Foundation          Topology                     
     8xqx High     Exception in RefreshCache. Exception message :The trust relationship between the primary domain and the trusted domain failed.   
    11/30/2011 12:14:56.00  OWSTIMER.EXE (0x1DF4)                    0x1994 SharePoint Foundation          Timer                        
     2n2p Monitorable The following error occured while trying to initialize the timer: System.SystemException: The trust relationship between the primary domain and the trusted domain failed.       at System.Security.Principal.SecurityIdentifier.TranslateToNTAccounts(IdentityReferenceCollection
    sourceSids, Boolean& someFailed)     at System.Security.Principal.SecurityIdentifier.Translate(IdentityReferenceCollection sourceSids, Type targetType, Boolean forceSuccess)     at System.Security.Principal.SecurityIdentifier.Translate(Type
    targetType)     at Microsoft.SharePoint.Administration.SPAce`1.get_PrincipalName()     at Microsoft.SharePoint.Administration.SPAcl`1.Add(String principalName, String displayName, Byte[] securityIdentifier, T grantRightsMask,
    T denyRightsMask)     at Microsoft.SharePoint.Administrati... 
    11/30/2011 12:14:56.00* OWSTIMER.EXE (0x1DF4)                    0x1994 SharePoint Foundation          Timer                        
     2n2p Monitorable ...on.SPAcl`1..ctor(String persistedAcl)     at Microsoft.SharePoint.Administration.SPServiceApplication.OnDeserialization()     at Microsoft.SharePoint.Administration.SPIisWebServiceApplication.OnDeserialization()    
    at Microsoft.SharePoint.Administration.SPPersistedObject.Initialize(ISPPersistedStoreProvider persistedStoreProvider, Guid id, Guid parentId, String name, SPObjectStatus status, Int64 version, XmlDocument state)     at Microsoft.SharePoint.Administration.SPConfigurationDatabase.GetObject(Guid
    id, Guid parentId, Guid type, String name, SPObjectStatus status, Byte[] versionBuffer, String xml)     at Microsoft.SharePoint.Administration.SPConfigurationDatabase.GetObject(SqlDataReader dr)     at Microsoft.SharePoint.Administration.SPConfigurationDatabase.RefreshCache(Int64
    currentVe...
    Please guide me on the above issue ,this will be of great help
    Thanks.

    I have same error. Verified for trust , ports , cleaned up cache.. nothing has helped. 
    The problem is caused by User profile Synch Service:
    UserProfileProperty_WCFLogging :: ProfilePropertyService.GetProfileProperties Exception: System.SystemException:
    The trust relationship between the primary domain and the trusted domain failed.       at System.Security.Principal.SecurityIdentifier.TranslateToNTAccounts(IdentityReferenceCollection sourceSids,
    Boolean& someFailed)     at System.Security.Principal.SecurityIdentifier.Translate(IdentityReferenceCollection sourceSids, Type targetType, Boolean forceSuccess)     at System.Security.Principal.SecurityIdentifier.Translate(Type
    targetType)     at Microsoft.SharePoint.Administration.SPAce`1.get_PrincipalName()     at Microsoft.SharePoint.Administration.SPAcl`1.Add(String principalName, String displayName, SPIdentifierType identifierType, Byte[]
    identifier, T grantRightsMask, T denyRigh...        
    08/23/2014 13:00:20.96*        w3wp.exe (0x2204)                      
            0x293C        SharePoint Portal Server              User Profiles                
            eh0u        Unexpected        ...tsMask)     at Microsoft.SharePoint.Administration.SPAcl`1..ctor(String persistedAcl)    
    at Microsoft.Office.Server.Administration.UserProfileApplication.get_SerializedAdministratorAcl()     at Microsoft.Office.Server.Administration.UserProfileApplication.GetProperties()     at Microsoft.Office.Server.UserProfiles.ProfilePropertyService.GetProfileProperties()
    Please let me know if you any solution found for this?
    Regards,
    Kunal  

  • How to set up the interaction between InDesign CS6 8.0 and Photoshop CS 6 - if Photoshop is installed and the 64 and 32-bit?? default InDesign refers to the 64-bit version of Photoshop and scripts do not work.

    how to set up the interaction between InDesign CS6 8.0 and Photoshop CS 6 - if Photoshop is installed and the 64 and 32-bit?? default InDesign refers to the 64-bit version of Photoshop and scripts do not work.

    Nice of you to point it out here as I at least don’t follow Mr.Nash’s blog regularly.

  • How to set up internet connection between MacBook Pro and an old eMac?

    I got an old eMac without wifi and a MacBook Pro. I'd like to share the network connection via ethernet cable to my eMac, but I can't get it work.
    I'd like to use it with screenrecycler and it needs a network connection.
    How to do it? How to set up the connection between the client and the host? Could somebedy give me a step by step guide?
    Thank you very much

    Hello,
    First, are you using Wifi for Internet on the MBP?
    System Preferences>Network, click on the little gear at the bottom next to the + & - icons, (unlock lock first if locked), choose Set Service Order.
    The interface that connects to the Internet should be dragged to the top of the list, Wifi on the MBP.
    In Shating on both, enable File Sharing, Screen Sharing, & Web Sharing on both.
    Then with the Ethernet cable between the two, find the IPs of both, or use Finder>Go>Connect to Server>Browse... see what shows up.

  • How to verify that trust relationship has been set up successfully at client machine ?

    Hello,
    There is trust set up with domain group.Would you please let me know how can I verify that trust relationship has been set up correctly in such a way that i can see the users of trusted group on client machine ?
    Any idea?
    Note :I do not have access on Domain Controller.
    Thanks and Regards,
    Dipti
    Dipti Chhatrapati

    Hi
    As far as I know, trust certificates that have been exchanged between the SharePoint farm and external systems should be visible by going to  the Central Admin->Security->Manage Trusts page.
    Kind Regards
    Bjoern
    http://www.sharepointviking.com
    Twitter: Follow @bjoern_rapp

  • How to create tables and relationship between ?

    Hello everybody,<o:p></o:p>
    I have three table with structures as follow:<o:p></o:p>
    <o:p> </o:p>
    Table1
    contains information on ledger accounts,and
    Table2 contains Groups of the detailed
    accounts.
    When defining ledger
    accounts , we must associated them with
    groups of detailed accountsthat
    are
    set
    by the
    Check
    boxes. groups of detailed accounts are three
    levels, At each level, there are fifteen
    groups as follow:
    1_others ,2_People ,3_companies ,4_
    Cost centers ,5_projects ,6_
    Letter of Credits ,7_ Current
    Accounts ,8_
    Banking facilities ,9_
    Commodity ,10_ Branches
    aggregation ,11_ Purchase
    Contract
    Services ,12_
    Sales Contract
    Services ,13_
    Export Products ,14_
    Control account ,15_
    Months.Table3 contains detailed accounts information that should associated with groups of detailed accounts(fifiteen groups).
    In addition, we
    have in our program four combobox,
    detailed accounts must be
    linked to the detailed groups
    so that, by selecting one ledger account in combobox1 it should display detailed accounts of level1 in combobox2 ,detailed accounts of level2
    in combobox3 and detailed accounts of level3 in combobox4.<o:p></o:p>
    <o:p> </o:p>
    How
    to design tables and the relationships between them, so
    with select the ledger account I can see the detailed
    accounts of per level in other comboboxes?<o:p></o:p>
    <o:p> </o:p>
    I've
    spent
    a lot of time
    on this
    subject
    but
    I have
    not been able
    to
    solve this problem.<o:p></o:p>
    Please help me,<o:p></o:p>
    Best regards.<o:p></o:p>

    I am guessing....I hope it is helpful...
    >1_others ,2_People ,3_companies ,4_
    Cost centers ,5_projects ,6_
    Letter of Credits ,7_ Current
    Accounts ,8_
    Banking facilities ,9_
    Commodity ,10_ Branches
    aggregation ,11_ Purchase
    Contract
    Services ,12_
    Sales Contract
    Services ,13_
    Export Products ,14_
    Control account ,15_
    Months.
    Setup a table for each.
    >Table3 contains detailed accounts information that should associated with groups of detailed accounts(fifiteen groups).
    Setup the AccountDetail(1,2,3 level) tables with 15 NULLABLE FOREIGN KEYs. If some group is not applicable for an FK, keep the value NULL, otherwise enter a valid PK value.
    >Table1
    contains information on ledger
    accounts,and Table2 contains
    Groupsof the detailed
    accounts
    Setup LedgerAccount tables.
    Setup LedgerDetailXref table with FOREIGN KEYS to LedgerAccount & AccountDetail(1,2,3) tables.
    FOREIGN KEY examples: http://www.sqlusa.com/bestpractices2005/bankdatabase/
    Kalman Toth Database & OLAP Architect
    SQL Server 2014 Design & Programming
    New Book / Kindle: Exam 70-461 Bootcamp: Querying Microsoft SQL Server 2012

  • How to configure container trust relationships?

    The EJB 2.0 specification clearly states (paragraph 19.8.1.1) that '...EJB containers
    are required to provide deployers and administrators with the tools to configure
    trust relationships for interactions with intermediate web or EJB containers...'.
    How do you do this in WLS 6.1, and where can I find additional documentation about
    the trust relationsships between containers?

    Between WLS containers.
    Erik
    "Peter B" <@> wrote:
    >
    "Erik Godding Boye" <[email protected]> wrote in message
    news:3be0280c$[email protected]..
    The EJB 2.0 specification clearly states (paragraph 19.8.1.1) that'...EJB
    containers
    are required to provide deployers and administrators with the toolsto
    configure
    trust relationships for interactions with intermediate web or EJBcontainers...'.
    How do you do this in WLS 6.1, and where can I find additionaldocumentation about
    the trust relationsships between containers?Are you talking about other WLS containers or some third party app server
    containers?
    Peter

  • One way trust relationship between different domain windows server 2012 in different forest

    I'd like to build trust correctly between the domains A.local and B.int. A.local is on a Windows 2012 . B.int is on a Windows 2012 . Both machines are
    connected to the same LAN. The forest level in A.local
    machine is Windows Server 2008 and The forest level in B.int
    is Windows server 2012.
    I want a one-way trust relationship, i.e. users from A.local gain access to B.local.
    my problem it i create the trust put when i go to validate the trust between A.Local and B.int give me this error :
     The secure channel (SC) reset on Active Directory Domain Controller \\dc2.B.int of domain B.int to domain A.Local failed with error: There are currently no logon servers available to service the logon request.
    NOTE : Recently I
    UPGRADE THE Active Directory FROM 2008 R2 TO 2012 and i ping on A.local to B.int
    it is ping by name and IP but from b.int ping by IP JUST >>>
    ihab

    Hi,
    yes i already do it the setup conditional forwarding between the 2 domains and
    the firewall it is off 
    ihab

  • How to set up trusted system or ip in NW CE 7.1

    Hi all,
    I am running on NW CE 7.1, and I want to know if NW allows setting up trusted system or ip. If so, is there any documentation about it?
    Thanks for your help in advance.

    Hi,
    what do you mean by "trusted system"?
    For instance, you can use the CE as a producer in your EP 7.0 consumer portal with SSO. You exchange server certificates and so create a trust between these 2 servers. This is also be possible between CE and ABAP (CE is consuming an ABAP service).
    To do so, it's the standard process: export the certificate of CE and import it into the target system
    br,
    Tobias

  • How would i design the relationship between "question", "subquestion", and "answer"

    Hi all. Consider the following scenario:
    Scenario:
    A Question has an Answer, but some Questions have Subquestions. For example:
    1. Define the following terms: (Question)
    a) Object (1 marks) (Subquestion)
    An instance of a class. (Answer)
    b) ...
    2. Differentiate between a constructor and a destructor (2 marks)
    (Question)
    A constructor constructs while a destructor destroys.
    (Answer)
    Question:
    I want to model Questions, Subquestion, and Answer as Entities with relationships/associations, preferably binary relationships as i feel ternary relationships will be problematic while programming. Any suggestion on how i would
    go about this?
    There is never infinite resources.
    For the Question Entity, a question has the attributes "QuestionPhrase <String>", "Diagram<Binary>", and "Marks
    <Decimal>".
    For the SubQuestion Entity, a subquestion has the attributes "SubQuestionPhrase <String>", "Diagram<Binary>", and "Marks <Decimal>".
    For the Answer Entity, an answer has attributes, "AnswerPhrase<String>", "Diagram <Binary>"

    Yes. I am in .Net. I sure do hope i did not ask in the wrong forum. :-|
    Hi KCWamuti,
    If you need to design the relationship between Question table and Answer table in SQL Server, as Uri’s and Visakh’s posts, you can create the foreign key to establish relationship between tables, and use join in query to get your desired result. For more
    information about JOIN in SQL Server, please review this article:
    Different Types of SQL Joins.
    However, if you need to model Questions, Subquestion, and Answer as Entities in .Net, then the issue regards data platform development. I suggest you post the question in the Data Platform Development forums at
    http://social.msdn.microsoft.com/Forums/en-US/home?category=dataplatformdev . It is appropriate and more experts will assist you.
    Thanks,
    Lydia Zhang

  • How to find the table relationship between BSEG-BELNR with CE11000 table.

    Hi,
    Please help me to find out the table relationship between BSEG with CE11000 table.
    I have BSEG-BELNR value.
    Thanks in Advance
    Shankar

    Hello,
    BAsically the relationship can be foundon the basis of cost centre it will be good if you paste the structure ce11000.
    I have worked on it and as far i as i can recall it contain value fields right...like vv205,vv305 etc?
    Provide me more details.
    Are you preparing some reconcillation report for costing based COPA or Account based COPA..?
    Hopefully will help you out..
    Regards,
    Nabheet

  • How to set the servlet context path manually in Tomcat web server.

    I tested some servlets by putting them in the folder , which the tomcats examples application uses (ie Tomcat 4.1\webapps\examples\WEB-INF\classes\) and it appeared to be working fine.
    I was calling the servlet like this : http://localhost:2006/examples/servlet/TestServlet
    But when I installed my own WAR file in the server , the servlet is not working now. now the new location of my servlets is : Tomcat 4.1\webapps\MyApp\WEB-INF\classes\
    and I'm trying to call the servlet like this : http://localhost:2006/MyApp/servlet/TestServlet
    The error , what i'm getting is :
    description :The requested resource (/MyApp/servlet/TestServlet) is not available.
    Some body please tell where I'm making the mistake ? I believe this may have something to do with the servlet context path setting. If anybody has any idea , how to set the path..will be much appreciated.

    Thanx for your reply , at first I was not using any web.xml(since not mandatory) but even after using the web.xml file the error is coming . Please have a look into the contents of the web.xml file and let me know if you find any problem...
    <?xml version="1.0" encoding="ISO-8859-1"?>
    <!DOCTYPE web-app
    PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN"
    "http://java.sun.com/dtd/web-app_2_3.dtd">
    <web-app>
    <servlet>
    <servlet-name>TestServlet</servlet-name>
    <servlet-class>TestServlet</servlet-class>
    </servlet>
    </web-app>
    one more thing I would like to tell you here. I was just looking into the configuration of Iplanet web server..I found that , there are options to set the servlet container path (like : - Prefix: /servlet
    Servlet Directory: /ecomm/iplanet/nes60/product/docs/container )
    so from here I came to know that "container " is the folder where we should put our servlets and it has URI as "servlet" but yet I'm not able to find any option in the Tomcat Web server to set the servlet container to any different directory.
    If you have any idea please let me know.

  • How to set up a link between sap fica transaction and cic front office

    Hi Guys,
    How to configure between SAP FICA transaction (FPR1 for create installation plan) to CIC front office.
    I did some changes in FPR1 transaction, same changes which are not reflecting on CIC screen, when i log on to CIC0 and select the create install plan, It is automatically go to FPR1 but it is not showing with that changes.
    I checked all the way but it is missing the link some where. plz drop any ideas on this.
    Thanks
    Venkat.

    Hi Matt, create a column of type "enhanced rich text." Then in your datasheet view, double click on the field in that column and use your "insert" tab to upload a file. You'll then see the file in this cell and you can open it straight
    from the datasheet view.
    cameron rautmann

Maybe you are looking for

  • JDBC receiver error: field not exist in the table

    But the field does exist. Columns  Name Data Type Size Scale Not NULL Default Value EMPID VARCHAR2 10 EMPNAME VARCHAR2 30 EMPAGE VARCHAR2 3 FLAG VARCHAR2 1 The Database is Oracle. Message processing failed. Cause: com.sap.aii.af.ra.ms.api.Recoverable

  • 12" 1.33Ghz iBook Hard Drive speed?

    hey all, i'm curious to know if any of you have ended up w/ 5400rpm drives in your 12" 1.33Ghz iBooks. i know of a couple ppl on a diff forum who got stock iBooks and for whatever reason they got 5400rpm 40GB drives. offhand i know there's very littl

  • Process Chain deleted, how to know who to blame? Log?

    Is there a log for changed/deleted Process chains (BW3.5)? br, Marko

  • How and When Does the attribute VI_ATTR_VXI_TRIG_STATUS get initialized

    How and When  Does the attribute VI_ATTR_VXI_TRIG_STATUS get initialized. Do the actual trigger lines get measured or does the attribute get initialized to a default value when the vxi resource manager is executed?

  • Substitution of VO not reflected

    Hi, I substituted XxsliAsgSummaryVO in place of AsgSummaryVO in HRSS Online Payslip. I could see XxsliAsgSummaryVO in Business Components section of About page. But When I add one field from XxsliAsgSummaryVO and gone back to Payslip to see the chang