How to set UsernameToken to a Binding Reference Service with policy enabled

I have a composite Designed in the following fashion:
     *AQ_Adaptor[AQ] ------------> Mediator[MD] -------------> ServiceReference[SR]*
SR is another composite service exposed which has the wss_username_token_over_ssl_service_policy enabled,
In the above process i apply the wss_username_token_over_ssl_client_policy in EM console
but how do i pass the username token credentials, as the process starts with a listener???? , would appreciate any help
Tried creating the Map and Key in the EM cosole and set it as the csf-key for the reference service but that too did not help.
Would also like to share that if I create the policy at design time and set the credentials policy property in the composite.xml for the binding reference,
then it works well.
Edited by: Wajid Mehraj on Aug 30, 2012 11:39 PM

Did the following to resolve the issue
-> Create a credential Store in EM console
-> Set the key on the policy applied to the Binding Reference.
But now i have one dependency,
I have to make reference to the binding URL on SSL port in my composite to the SR which throws a compile time warning.

Similar Messages

  • How to set background ChoiceBox item color to ChoiceBox with css?

    How to set background ChoiceBox item color to ChoiceBox with css?
    I need to change items list backgound color.
    I tried with following code, but it doesnt helps:
    .choice-box .context-menu {
      -fx-backgound-color: red;
    .choice-box .menu-item{
      -fx-background-color: red;

    In Java 8, either of your selectors should work.
    In Java 7 (JavaFX 2.2), you need the following workaround:
    #choice-box-menu-item {
         -fx-background-color: red ;

  • How to set up mail on i phone 5 with an email of "example@email.school.edu" hosted through google?

    I have an email just like the title says "[email protected]" and it is hosted through google but I have to go to my school website to sign in to the account.  I want to be able to use the mail app and I can't figure out how to set this particular account up with the I phone.

    Talk to the IT people at your school

  • How to set upper and lower limit for service notification in SPRO

    Hello everyone,
    Good morning....!!
    I am new to SAP PM and to SCN as well.
    I have a question on Service notification user status.
    I  have notification profile configured in SAP as below:
    Status no      Status          Short text              Lower limit          Upper limit
    5                  REGD          Registered                1                          70
    10                PCKS            Pack sent                  1                          70
    20                APRC            Application received  1                        70
    etc..
    I want the statusesto be set as  navigation should only allow to go back one by one...like from APRC -->PCKS not to REGD.From PCKS -->REGD etc..not vice versa.
    Can enayone explain me to how to set lower and upper limits for these according ot the above requirement.
    for more details please check my attachment.
    Thanks in advance..!!
    Regards,
    Sudha.

    Once you change the status to previous status, just save the order. Then again open the order & try to change the user status.
    Just I made replica of your profile. I could able to change (even without saving the order).

  • How to set Essbase Administration Server as Windows service?

    Hi,I have installed the Essbase Admin Services 7.1.0.0 Build 261 under Tomcat application server. Now from Start menu I have to select "Start Administration Server". Is there any way to set this option as Windows Service.My system:Windows 2003 SP1,Essbase 7.1.0,Essbase Admin Services 7.1.0.0 Build 261Thanks,Grofaty

    This information is in the Install Guide that comes with EAS.Running EAS as a Windows service is an option you can select when you install it. If you did not do that, you can set it up to run as service by doing the following: (From the EAS Install Guide)----------------------------------------Adding Administration Server as a Windows ServiceYou can add Administration Server as a Windows service, even if it was not installed as a Windows service.?To add Administration Server to the list of Windows services:1. From a command prompt, navigate to the following directory: EASPATH\eas\server\bin2. Run the following command: install_service.batAdministration Services installs the Windows service as Hyperion-Essbase_Administration_Server Windows service. A message displayed in the command prompt window indicates that the service is installed.3. Start the Hyperion-Essbase_Administration_Server Windows service. See ?Starting the Administration Server Windows Service? on page 49.The Hyperion-Essbase_Administration_Server Windows service is set to start automatically each time you reboot.

  • How can have the cost of a Medical service with SAP EHS (OH)?

    Hello,
    I am starting with SAP PLM and/or SAP GRC, working with the Solution SAP EHS and his component OH (Occupancy Heath) and my client ask me if they can see all the costs:
    -Cost of medical Service (Doctor cost, Drugs, Medicine Materilas, etc..).
    -Cost of Laboratory test.
    -All the cost regarding EHS-OH.
    So with the transaction "EHSSERV" I don´t see the integration with SAP FI or SAP CO, I don´t know how make the procurament of this medical service with SAP EHS or how integrated this medical service with the SAP  SD or MM in order to Sell a medical service or buy a Laboratory test.
    1.-SAP EHS give me an Standar report of that, or I need do it in other module of SAP, maby SAP FI or SAP BI?
    2.-What level of Cost detail, can I have with SAP EHS.
    3.-What I need to do this?
    Thanks Experts.
    Alejandro González Spencer.

    Hi ,
    There is no Integration with the SAP-OH component  (Occupational Health)
    you can mention cost in Text for your record.
    Rahul.

  • How to set List and Tree Binding Value manually from backing bean?

    Dear All,
    I somehow found this code to work so that I could set a value on my bindings from a managed bean.
      public void setBindingExpressionValue(String expression, Object value)
        FacesContext facesContext = getFacesContext();
        Application app = facesContext.getApplication();
        ExpressionFactory elFactory = app.getExpressionFactory();
        ELContext elContext = facesContext.getELContext();
        ValueExpression valueExp =
          elFactory.createValueExpression(elContext, expression, Object.class);
        valueExp.setValue(elContext, value);
      public class MyBean{
      private String employeeId;
      public void inAmethod(){
           setBindingExpressionValue("#{bindings.employeeId.inputValue}",
                                         getEmployeeId());
      }Now, I am thinking. What if I have a List or Tree Binding in my managed bean then how or what should I send
    to the expression value. Is it a List or Map?
    The first one was easy as it is just a string but how about when dealing with collection?
    JDEV 11g PS4
    Thanks

    Hi,
    a tree binding does not set the value of the tree but determines the selected node. The binding itself represents the collection model that shows the hierarchical tree structure. So your question does not apply to a tree
    Frank

  • How to set hostname using dynamic binding for FTP, AQ, SMTP adaptersin BPEL

    I am using Oracle BPEL and SOA 11g and my requirement is to send files and messages to different destinations ( hostname ) using dynamic JCA bindings. All hostname to be used other related information for destination is stored in database. My BPEL flow should retrieves the hostnames using one webservice and then set the hostname in FTP, AQ and SMTP adapters using dynamic JCA bindings.
    I came across http://rahullahiri.blogspot.in/2011/09/configuring-ftp-adapters-in-oracle-soa.html and http://www.soabyte.com/2010/11/jca-dynamic-partnerlinks-in-soa-11g.html but unsure if we can dynamically set the hostname also for the adapters mentioned in the BPEL flow.
    Can you please advice how it can be achieved in BPEL and what is the best way?
    Thanks for help in advance.
    Shail

    Hi,
    Its good that u pasted the complete log file. In your environment you have to run this upgrade tool only once from any of the middle tier.
    And with respect to your error that u got in precheck is quite simple. All u have to do is just run this script from by connecting to portal schema using sqlplus.
    Run dropupg.sql
    Location-------- /raid/product/OraHome_1/upgrade/temp/portal/prechktmp/dropupg.sql
    Later you re-run the upgrade tool and let me know the status.
    Good luck
    Tanmai

  • How to set unknown number of binds for dynamic setWhereClause? - Urgent!

    Hi,
    I have a requirement wherein i would have to pass unknown bind parameters to the where clause of the sql query in the VO at runtime.
    Ex: Select a, b, c from XYZ where a in (....).
    How do i achieve this using the setWhereClause for the condition "*where a in (:1, :2, ...)*" - the number of arguments is unknown in the IN condition.
    Thanks.

    Hi Sumit,
    Thanks for the quick reply,
    But my problem is:
    1. the initQuery will have a variable number of arguments so the below code wont help i guess, because i wouldn't know how many i will have to pass.
    void initQuery(String value1, String value2, String value3)
    this.setWhereClause(null);
    this.setwhereClauseparams(null);
    this.setWhereClause("a in ("value1", "value2", "value3");");
    this.executeQuery();
    2. The second suggestion i guess would work, but i don't know how to go about this, the parameters that i need to pass to this unique bind parameter would be number type.
    Another option is to have a unique bind parameter (:1) in the VO query
    Select a, b, c from XYZ where a in (:1)
    But you have comma separated values in the string which you bind for :1 (eg "xyz,abc,dfg" )
    Thanks.

  • How to set up iPhone 5 iOS 6 email with IMAP over SSL on a custom port?

    Basically I have the same problem as this guy 5 years ago but the thread contained no useful answer. Maybe there are people out there who became smarter in the meantime? Please help me out how to get my iPhone read emails via IMAP over SSL on a custom port to the corporate server. The issue is that the iPhone only seems to work if you use the standard 993 port for IMAPS, not with a custom port as we have. I've installed the corporate root certificate in a profile, and it shows up as trusted and verified in the phone, so that should not be the issue. The mail app in the iPhone tries to connect, I can verify that from the server, but then does nothing, doesn't try to authenticate, doesn't log out, nothing is going on, and then drops the connection after 60 seconds. Repeats this every 5 minutes (as set to fetch e-mail every 5 minutes.)
    Original thread 5 years ago: https://discussions.apple.com/message/8104869#8104869

    Solved it by some (a lot) of fiddling.
    Turns out it's not a bug in the iPhone, it's a feature.
    Here's how to make it work.
    DOVECOT
    If the IMAPS port is anything other than 933 (the traditional IMAPS port) the iPhone's Mail App takes the "Use SSL" setting on the IMAP server as 'TLS', meaning it starts the communication in plain text and then issues (tries to issue) the STARTTLS command to switch the connection to encrypted. If, however, Dovecot is set up to start right away in encrypted mode, the two cannot talk to each other. For whatever reason neither the server nor the client realizes the connection is broken and only a timeout ends their misery.
    More explanation about SSL/TLS in the Dovecot wiki: http://wiki2.dovecot.org/SSL
    So to make this work, you have to set Dovecot the following way. (Fyi, I run Dovecot 2.0.19, versions 1.* have a somewhat different config parameters list.)
    1. In the /etc/dovecot/conf.d/10-master.conf file make sure you specify the inet_listener imap and disable (set its port to 0) for imaps like this:
    service imap-login {
      inet_listener imap {
        port = --your port # here--
      inet_listener imaps {
        port = 0
        ssl = yes
    This of course enables unencrypted imap for all hackers of the universe so you quickly need to also do the things below.
    2. In the /etc/dovecot/conf.d/10-ssl.conf file, make sure you set (uncomment) the following:
    ssl = required
    This sets Dovecot to only serve content to the client after a STARTTLS command was issued and the connection is already encrypted.
    3. In /etc/dovecot/conf.d/10-auth.conf set
    disable_plaintext_auth = yes
    This prevents plain text password authentication before encryption (TLS) is turned on. If you have also set ssl=required as per step 2, that will prevent all other kinds of authentications too on an unencrypted connection.
    When debugging this, please note that if you connect from localhost (the same machine the server runs on) disable_plaintext_auth=yes has no effect, as localhost is considered secure. You have to connect from a remote machine to make sure plain text authentication is disabled.
    Don't forget service dovecot restart.
    To test if your setup works as it's supposed to, issue the following (green) from a remote machine (not localhost) (I'm using Ubuntu, but telnet and openssl is available for almost all platforms) and make sure Dovecot responds with something like below (purple):
    telnet your.host.name.here yourimapsportnumber
    * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS LOGINDISABLED] Dovecot ready.
    Most importantly, make sure you see 'STARTTLS' and 'LOGINDISABLED'. Then issue STARTTLS and hopefully you see something like this:
    a STARTTLS
    a OK Begin TLS negotiation now.
    (The 'a' in front of STARTTLS is not a typo, a prefix is required by the IMAP server in front of all commands.)
    Close the telnet (with 'a logout' or Ctrl+C) and you can use openssl to further investigate as you would otherwise; at the end of a lot of output including the certificate chain you should see a line similar to the one below:
    openssl s_client -starttls imap -connect your.domain.name.here:yourimapsportnumber
    . OK Pre-login capabilities listed, post-login capabilities have more.
    You can then use the capability command to look for what authentication methods are available, if you see AUTH=PLAIN, you can then issue a login command (it's already under an encrypted connection), and if it's successful ("a OK Logged in"), then most likely your iPhone will be able to connect to Dovecot as well.
    a capability
    * CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN
    a login username password
    * CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS
    a OK Logged in
    POSTFIX
    Likewise, you have to set Postfix to wait for STARTTLS before encrypting the communication.
    1. You have to delete the setting smtpd_tls_wrappermode=yes from /etc/postfix/master.cf and/or /etc/postfix/main.cf, if it was enabled. This will mean Outlook won't be able to connect any more because it requires a TSL connection without issuing STARTTLS as per Postfix documentation (haven't tested.) In my case we don't use Outlook so I didn't care. Outlook + iPhone + custom SMTPS port are simply not possible together at the same time as far as I understand. Pick one to sacrifice.
    2. Require encrypted (TLS) mode for any data transfer in /etc/postfix/main.cf:
    smtpd_tls_security_level = encrypt
    3. Authentication should only happen while already in encrypted (TLS) mode, so set in /etc/postfix/main.cf:
    smtpd_tls_auth_only = yes
    Don't forget postfix reload.
    To test if this works, issue the following telnet and wait for the server's greeting:
    telnet your.host.name.here yoursmtpsportnumber
    220 your.host.name ESMTP Postfix (Ubuntu)
    Then type in the EHLO and make sure the list of options contains STARTTLS and does not include an AUTH line (that would mean unencrypted authentication is available):
    ehlo your.host.name.here
    250-STARTTLS
    Then issue starttls and wait for the server's confirmation:
    starttls
    220 2.0.0 Ready to start TLS
    Once again, it's time to use openssl for further testing, detailed info here http://qmail.jms1.net/test-auth.shtml
    CERTIFICATES
    You also need to be aware that iOS is somewhat particular when it comes to certificates. First of all, you have to make sure to set the following extensions on your root certificate (probably in the [ v3_ca ] section in your /etc/ssl/openssl.cnf, depending on your openssl setup), especially the 'critical' keyword:
    basicConstraints = critical,CA:true
    keyUsage = critical, cRLSign, keyCertSign
    subjectKeyIdentifier=hash
    authorityKeyIdentifier=keyid:always,issuer:always
    And then on the certificate you sign for your mail server, set the following, probably in the [ usr_cert ] section of /etc/ssl/openssl.cnf:
    basicConstraints=CA:FALSE
    keyUsage = nonRepudiation, digitalSignature, keyEncipherment
    subjectKeyIdentifier=hash
    authorityKeyIdentifier=keyid,issuer
    subjectAltName = DNS:your.domain.name.here
    issuerAltName=issuer:copy
    Please note, the above are results of extensive google-ing and trial and error, so maybe you can omit some of the stuff above and it still works. When it started working for me, I stopped experimenting because figuring this all out already took way too much time. The iPhone is horribly undocumented when it comes to details of its peculiar behaviors. If you experiment more and have more accurate information, please feel free to post here as a reply to this message.
    You have to import your root certificate into your iPhone embedded in a profile via the iPhone Configuration Utility (free, but only available in Windows or a Mac; details here: http://nat.guyton.net/2012/01/20/adding-trusted-root-certificate-authorities-to- ios-ipad-iphone/ ), after having first added it to Windows' certificate store as a trusted root certificate. This way the Utility will sign your certificate for the phone and it becomes usable; if you just add it from the phone it will be there but won't be used. Using a profile has the added benefit of being able to configure mail settings in it too, and that saves a lot of time when you have to install, remove, reconfigure, install again, etc. a million times until it works.
    Another undocumented constraint is that the key size is limited to a max of 4096. You can actually install a root certificate with a larger key, the iPhone Configuration Utility will do that for you without a word. The only suspicious thing is that on the confirmation screen shown on your iPhone when you install the profile you don't get the text "Root Certificate/ Installing the certificate will add it to the list of trusted certificates on your iPhone" in addition to your own custom prompt set up in the iPhone Configuration Utility. The missing additional text is your sign of trouble! - but how would know that before you saw it working once? In any case, if you force the big key certificate on the device, then when you open the Mail App, it opens up and then crashes immediately. Again, without a word. Supposedly Apple implemented this limit on the request of the US Government, read more here if you're interested: http://blogs.microsoft.co.il/blogs/kamtec1/archive/2012/10/13/limitation-of-appl e-devices-iphone-ipad-etc-on-rsa-key-size-bit.aspx .
    IN CLOSING...
    With all this, you can read and send email from your iPhone.
    Don't forget to set all your other clients (Thunderbird, Claws, etc.) to also use STARTTLS instead of SSL, otherwise they won't be able to connect after the changes above.

  • How to set up a Canon iR 3220-C1 with 10.7

    I'm trying to print to a Canon iR C3220 with ImagePASS C1 from an iMac with OSX10.7. I've tried installing the Canon drivers, which install correctly, but then when I add the printer via LPD with said drivers (setting the queue to print) it just pauses and does not print, or seems to be sending the job indefinitely. I cannot install the imagePass drivers from the Canon website because they are no longer supported in 10.7. Anyone know how to get this dang thing up and running? For the record, there's no LP option in the additional functions menu, and HP DirectJet or whatever it's called also doesn't work. I'm trying to connect to it over the network.

    We just got a new computer running OS X 10.9 Mavericks that we had to connect to our Canon ImageRunner 3220 with imagePASS-C1 printer. With the generic drives and drivers downloaded from Canon I got one of three results: 1. wont' print. 2. prints grainy black and white. or 3. won't print tabloid (11x17). I found a driver that worked. w3.efi.com/Fiery/Fiery=Support/download. I selected Canon, imageRUNNER C3220, PS Print Server Unit-C2 v1.0, All OS. Then selected the English version - Ps_drv_ImagePASSC2_iRC3220_v1.0_WIN_English.zip. I was really skeptical since the file is clearly labeled WIN for windows. But I was at a loss, so I tried it anyway. After unzipping the file I went to System preferences, Printers & Scanners, hit the + to add a printer.  Selected IP to add a printer on the network then put in the following settings: Address: [the printers IP], Protocol: Line Printer Daemon - LPD, Queue: print (lowercase like PAHU said), Name: [whatever you want to name your printer], Location: [leave blank], Use: [Select Other] and navigate to the unzipped files and select EF6M6060.PPD. Then add the printer. This worked and gave us the ability to print double sided.

  • How to set-up Guest Client Wireless Access "PIN" with Restricted Access ???

    This is my first time, and, I am not familiar with the rules.
    Is it possible for someone to answer a slightly different question...
    I just bought a TC and hooked it up to my cable modem. I have 3 computers that I want to configure, with the following requirements: WPA/WPA2 security all around, only the 3 computers I have to be allowed use of the TC, and, no listing of the network should appear on remote computers (i.e., a "closed network"). With these basic needs, the three computers I want to be in this network are listed below --- subject to the following ACCESS limitations:
    1. A G4 iMAC (10.5.5), wired to the TC via an Ethernet cable: FULL ACCESS; i.e., shared file access, TM back-ups, HP printer access, internet access;
    2. A MacBook (10.5.5), airport wireless access to the TC: FULL ACCESS, as the iMAC.
    3. A (new generation) PC laptop: VERY LIMITED access --- access only to the internet, so that the TC looks only like a "wireless router." Internet access available at any time of the day or week. It would be good if this client did not have to use any of my passwords, just a "PIN." Also, I do NOT want this PC client to see my printer, and, also, to NOT see my TC base station and NOT have access to my TC/TM disks. To set this up, I entered the PC laptop name and the "MAC" address using the Airport Utility. Then, I selected the "PIN" choice for access, so that this client need not have to ever use or know of any of my passwords. After I selected the "PIN" option, the utility asked me to enter the PC client's PIN. How do I obtain the PC's PIN? This is very confusing to me, so, I apologize to you all (I'm very new at this).
    Hopefully, this TC-only network concern is within the guidelines to be answered.
    Thanks,
    David.

    Dear Smokerz,
    Well, this is where I'm confused. I did use the Airport Utility. I went to the place where it asks for the PIN number. So, I made up an 8-digit number and entered it. I assumed that after I entered the number, it would prompt me to do something with the PC. But, the "Continue" button did not become highlighted. Hence, my confusion. Can you please be more specific as to exactly what I should do using the Airport Utility? The detailed instructions are vague to me, unfortunately.
    Also, with respect to the PC Laptop: I only want it to have access to the internet via the TC (so that the TC acts as a wireless router). And, I want to set up restrictions for limited use of the PC: NO ACCESS to the HP printer, and NO ACCESS to the TM/TC (other than as a wireless router). As before, can you please be more specific as to exactly what I should do using the Airport Utility?
    I must be missing a trivial menu item, so, again, I apologize.
    Thank you,
    David.

  • How to set up 2 iphones on a pc with one using mobileme

    Hi
    My wife already has a ipod so we have itunes already set up on the home PC and her work pc. We are about to activate two new iphones. I use the home pc primarily and have myoutlook running on it. Wife uses her outlook on work pc
    2 iphones purchased. My iphone will be setup on home pc with outlook and plan to get mobileme. Second iphone sitting on seperate work computer with no mobileme on it. Though music is sitting on both computers and want to share the music between both iphones. Do not want to share mobileme and contacts between the iphone users.
    So how do we do it. Many thanks in advance

    gnormg wrote:
    My wife and I both have a new iPhone 4s but want to keep everything seperate.
    Then you need separate Apple ID's & iCloud accounts. This is required if you want to use things like iMessage, FaceTime & iCloud and not have a mess on your hands.

  • How to set up myself as family share organizer with my own Apple id when someone else has gotten a new phone and used my Apple ID on it and set up family share for themselves?

    its my Apple ID and it's basically been hijacked on a device I dont own and someone else has been set up as family share organizer in my own Apple ID and I can't seem to do anything about it.

    You really need to get the apple id straightened out before you start, or you will pay the price forever!   You have a couple of options.  I assume your dad is cooperating with this project.  I think you are probably right about using his apple account.
    Make sure you have established the second e mail address and that to works.
    Log onto apple.com, and in the upper right, log into the account.  Once in the accout, click on the area where you can change you data, and add the second email address.    Apple wil verify the adress by send it an e mail, and won't do anything further until you respond to an e mail sent to that address, so watch for it.
    After the address is verified, on your accout page, make that address your primary address contact from apple.  That way if apple sends confirmations for apps and things, they will go to the new address, and your mom won't see them.  Then set the pad up using the same aple Id as your dad.  Remember, you have not changed the apple id or the password, you have only changed the e mail address for contact.   ( you can change it back after the surprise)
    The other suggestion...  I have given a coule of pads to folks, and one of the real fun parts for them and for you is o
    Ending the box, and doing the set up.  It is a great way for them to learn enough to use it.  Press the buttons etc.  pick their own apps.  You can gift her all the apps you want, and she can learn how to download them herself.
    I gave a pad to mom in law, and did pretty much what you are planning, and at the end of the day, having it all set when she openied it made it harder for her to learn, rather than easier.
    But you are doing a god thing, and I am sure she will enjoy the pad.

  • How to set the icon for the entire application with JFrame.setIconImage

    I set the icon on the main frame using JFrame.setIconImage(). The icon is shown properly in the main frame.
    If more JFrames are opened from the main frame, the newly opened JFrames also show the icon.
    However if JDialogs are opended, in some cases the icon set on the main frame is shown and in other cases the coffee cup.
    What is JFrame.setIconImage() expected to do? Setting the icon for a single JFrame or the entire application?
    How can I set the icon for the entire application?
    How can I set the icon for JDialogs?
    Thank you

    In order for your dialogs to use the same icon as the frame, you must parent the dialogs to the frame which has the custom icon.
    See the following thread for more information: http://forum.java.sun.com/thread.jsp?forum=57&thread=362542
    cheers,
    Greg

Maybe you are looking for