Https and redirection

Hi all
I’m using a Oracle Access Manager to protect my web application. I have a form-based authentication for my application. The authentication form is like this
<form name="myloginform" action="/access/dummy" method="post">
UserID <input type="text" name="userid" size="20" value="user1k1">
Password <input type="password" name="password" size="20" value="oblix">
<input type="submit" name="submit" value="Login">
The source /access/dummy doesn’t exist.
If I try to request a protected source over http, my request is redirected after authentication without any problems. But if I try to request a protected source over https I get an error:
"The requested URL /obrar.cgi/ was not found on this server."
Can anybody help me?
Many thanks
Pavel

Honestly, you have not provided enough information for anyone to judge. For example, which webserver/version, OAM version etc.
One thing is: Is client authentication turned on in your web server? If yes, are you providing client cert from the browser? Try to turn that off and post the results here.
Let us know if this was helpful.

Similar Messages

Session Time Out and Redirect to login page - urgent

My problem is I want to display alert message and redirect to the home page when session expires.
Iam using TimeOutListener in my application as follows.
public PhaseId getPhaseId() {
return PhaseId.ANY_PHASE;
public void beforePhase(PhaseEvent phaseEvent) {
     FacesContext facesContext = phaseEvent.getFacesContext();
HttpSession sessionx = (HttpSession)facesContext.getExternalContext().getSession(false);
if(sessionx == null) {
     FacesUtils.sessionCheck = true;
String ampee = (String)((HttpServletRequest)FacesContext.getCurrentInstance().getExternalContext().getRequest()).getAttribute("ampee");
if(ampee != null && ampee.equals("ampee")) FacesUtils.sessionCheck = false;
if(phaseEvent.getPhaseId() == PhaseId.RENDER_RESPONSE) {
     if(FacesUtils.sessionCheck){
     facesContext.getApplication().getNavigationHandler().handleNavigation(facesContext, "", "sessionExpired" );
     FacesUtils.sessionCheck = false;
ExternalContext externalContext = FacesContext.getCurrentInstance().getExternalContext();
          HttpServletRequest request = (HttpServletRequest) externalContext.getRequest();
          HttpSession session = request.getSession();
          if (session.isNew()) {
               try {
               String errorPageURL = externalContext.getRequestContextPath() +
               "/index.jsf?errorpage=true";
               externalContext.redirect(errorPageURL);
               }catch(Exception e){
                    e.printStackTrace();
here i have appended param errorPage=true...
in jsp page i have used following code to get the param<% if(request.getParameter(errorPage)!=null && request.getParameter(errorPage).equals("true")){%>
<script>alert("session expired");</script>
<%
%>
Can any one help me how to Implement this?
Do u know another way pls let me know...

Consider using the Javascript setTimeout() function in conjunction with HttpSession#getMaxInactiveInterval(). The HttpSession#getMaxInactiveInterval() returns the remaining seconds of the session lifetime.
Basic example:<script>
    setTimeout("alert('The session will timeout after one minute.')", <%= (session.getMaxInactiveInterval() * 1000) - 60000 %>);
</script>I've given the client one minute (60000ms) extra time space to respond accordingly.
Use this in combination with the following head:
<meta http-equiv="refresh" content="<%= session.getMaxInactiveInterval() %>;url=login.jsf">which will redirect to login.jsf if the session is timed out. You can also redirect to another page of your taste, e.g. error.jsf or so.

Urgent: how to Logoff and redirect to the login screen from WebDynpro appli

Hi,
i want to logoff and redirect to to the login page.
i use WDClientUser.forceLogoffClientUser([_"what should be the code here"_]);
If i pass null as the url, it will terminate and default message will be shown (it will not go to logon screen)
I want to logoff and navigate to customize login page.
I don't know from which server the request is from dev, Qa or some other system.
I can use WDClientUser.forceLogoffClientUser("http://dev"); but it doesn't work with QA.
i will be really appriciate we suggest me regarding this. Its urgent please send for responce ASAP.
Thanks
NSM

Hi,
use the following code to get the url
String hostName = WDProtocolAdapter.getProtocolAdapter().getRequestObject().getServerName();
          int port = WDProtocolAdapter.getProtocolAdapter().getRequestObject().getServerPort();
          StringBuffer url = new StringBuffer("http://");
          url.append( hostName );
          url.append(":");
          url.append(port);
WDClientUser.forceLogoffClientUser(url.toString());
Regards
Ayyapparaj

How to protect both access (http and https) with a Policy Agent

Hi,
During the installation of a web Policy Agent (i.e. Policy Agent for IIS) we have to choose the protocol (and port) of the web server we want to protect.
If we have an IIS with secure (https) and non secure (http) applications, how we manage this scenario with the policy agent?
Regards,

Hi,
Finally, i have installed the agent in IIS5 in the non secure port (http) and in fact it detects both access (http and https) fine.
The problem now is that if i try to access to a non secure url ( http://mynonsecureapp.com ) all works fine, the agent redirects to https://myaccessmanager.com:443/amserver/UI/Login?goto=http://mynonsecureapp.com but when i try to access to a secure url ( https://mysecureapp.com ) the agent try to redirects me to: https://myaccessmanager.com:443/amserver/UI/Login?goto=http://mysecureapp.com (notice that the agent removes the 's' in the url).
The amAgent log file shows:
+2008-07-17 09:44:08.296MaxDebug 656:d8f6b0 PolicyAgent: am_web_is_notification(), https://sigcit.agp.gva.es:443/fullcitriweb is not notification url http://sigcit.agp.gva.es:80/amagent/UpdateAgentCacheServlet?shortcircuit=false.+
+2008-07-17 09:44:08.296 Warning 656:d8f6b0 PolicyAgent: OnPreprocHeaders(): Access Manager Cookie not found.+
+2008-07-17 09:44:08.296 Debug 656:d8f6b0 PolicyAgent: am_web_is_access_allowed(): url 'https://sigcit.agp.gva.es:443/fullcitriweb' path_info ''.+
+2008-07-17 09:44:08.296MaxDebug 656:d8f6b0 PolicyAgent: am_web_is_access_allowed(): processing url http://sigcit.agp.gva.es:80/fullcitriweb.+
+2008-07-17 09:44:08.296 Debug 656:d8f6b0 PolicyAgent: am_web_is_access_allowed(): client_ip 172.27.65.62 not found in client ip not enforced list+
Any ideas?
Regards,
Edited by: idm_oceanic on Jul 17, 2008 1:33 AM

: invalid content type for SOAP: TEXT/HTML; HTTP 302 Redirect

Hi Experts,
I am facing with the flowing error when we are receiving for the soap receiver chanel.
Message processing failed. Cause: com.sap.engine.interfaces.messaging.api.exception.MessagingException: java.io.IOException: invalid content type for SOAP: TEXT/HTML; HTTP 302 Redirect
is their any content type to give in soap receiver channel.
please let me know.
Regards
Raju

I think the message is misleading. HTTP 302 meaning is that the url specified in not found or invalid for that service. You might want to check with external system that the specified URL in the SOAP receiver communication channel is right? Also you can find the URL from the WSDL itself. Similar test do it outside PI using the SOAPUI or XMLSPY and see the response error.

WCCP Configuration HTTP and HTTPS

Looking for anyone that might have a clue in on this, im attempting to configure a pair of routers to use WCCP to redirect HTTP and HTTPS traffic to two content keeper devices. The network im building is going to be used for a guest internet connection where defining proxies on end devices would be unusable.
I'll drop the configs in below but for now what i have are 2 cisco 3925 routers configured for HSRP. 2 content keeps running squid for the cache engine. with my current configurations, I have wccp web-cache and wccp service 70 configured (all 4 devices are available/usable in both services). this is a layer 2 setup. HTTP traffic is picked up and redirected to the content keepers without issue. https traffic does not appear to be detected by the routers. I have chosen not to use ACLS for WCCP and use the redirect in because we want to capture http(s) traffic from all hosts.
for HTTP, I see hits counters rise on the router under show ip wccp, i see hit counters for the content keepers increase, i see http traffic on the firewall from the content keepers and I get the web page on the device
For HTTPS I do not see hit counters under wccp increase, I do not see any traffic on the content keepers bridge, and i see traffic on the firewall from the hosts orginal ip address.
interface0/2 internal LAN
interface 0/0 content keepers (no WCCP commands)
interface 0/1 gateway firewalls. (no WCCP commands
ip wccp check services all
ip wccp web-cache
ip wccp 70
interface GigabitEthernet0/2
description To Lan
ip address x.x.x.x
ip wccp web-cache redirect in
ip wccp 70 redirect in
standby 1 ip x.x.x.x
standby 1 priority 150
standby 1 preempt
duplex auto
speed auto
Global WCCP information:
    Router information:
        Router Identifier:                   x.x.x.2
    Service Identifier: web-cache
        Protocol Version:                    2.00
        Number of Service Group Clients:     2
        Number of Service Group Routers:     2
        Total Packets Redirected:            17999
          Process:                           0
          CEF:                               17999
        Service mode:                        Open
        Service Access-list:                 -none-
        Total Packets Dropped Closed:        0
        Redirect access-list:                110
        Total Packets Denied Redirect:       0
        Total Packets Unassigned:            0
        Group access-list:                   -none-
        Total Messages Denied to Group:      0
        Total Authentication failures:       0
        Total GRE Bypassed Packets Received: 0
          Process:                           0
          CEF:                               0
    Service Identifier: 70
        Protocol Version:                    2.00
        Number of Service Group Clients:     2
        Number of Service Group Routers:     2
        Total Packets Redirected:            0
          Process:                           0
          CEF:                               0
        Service mode:                        Open
        Service Access-list:                 -none-
        Total Packets Dropped Closed:        0
        Redirect access-list:                -none-
        Total Packets Denied Redirect:       0
        Total Packets Unassigned:            0
        Group access-list:                   -none-
        Total Messages Denied to Group:      0
        Total Authentication failures:       0
        Total GRE Bypassed Packets Received: 0
          Process:                           0
          CEF:                               0
Show details and show service attached.

Hello Josh,
1. Yes, port-specific ACL is not supported. But it is not a big problem. Usually on WCCP server you can configure very specific bypass (Cisco WSA supports that - do not know about Sophos). For bypassed traffic WCCP server will reinject that packet in GRE and send back to ASA which will decapsulate it and send as normal packets.
It's a good design, because you can have very granural bypass policy on WCCP server.
2. Yes, configuration is correct, although it's better to be more specific (not send all traffic to WCCP if there is no need for that).
3. Yes, you can use deny in redirect-list to exclude traffic.
4. WCCP keepalives are being send by WCCP server by default every 10 seconds. If ASA does not see that replies for some time it marks server as dead and uses other ones.
Michal

Firefox randomly does an automatic search for a word I type and redirects to some website. Any ideas why?

I've been having this problem for awhile now. If I type a word while using firefox (in a form, searching a page for that word/phrase, etc.), Firefox will later (at a seemingly random time) do an automatic search for that word/phrase and redirect me to some site (e.g. if I search a page for 'history', Firefox will at a random time, redirect me to, for example, history.com). I have no idea what might be causing this, and it is really annoying when I'm filling out a form online and Firefox randomly goes to some site, interrupting what I was doing at the time.

Do you have that problem when running in the Firefox SafeMode? <br />
[http://support.mozilla.com/en-US/kb/Safe+Mode] <br />
''Don't select anything right now, just use "Continue in SafeMode."''
If not, see this: <br />
[http://support.mozilla.com/en-US/kb/troubleshooting+extensions+and+themes]

Configuring WCCP for http and https

How do I configure wccp on a 6509 to redirect http and https trafic to a S650. I am using the following config and http is working fine:
ip wccp version 2
ip wccp web-cache redirect-list aclwccp
interface Vlan23
description Rede Firewall
ip address 10.0.23.20 255.255.255.0
ip access-group 172 out
ip wccp web-cache redirect out
mls rp vtp-domain coc_block1
mls rp ip
mls netflow sampling
end
Should I config an other service for the https protocol?

Cecato,
The WSA can be configured to send 80 and 443 traffic, in the WCCP settings area (5.2.0+). There are some things you will need to be aware of before doing this though:
1. If you are on 5.2.0-x, you will not be able to inspect HTTPS traffic. Only version 5.5.0+ has the ability to decrypt HTTPS traffic. Because of this, it is not recommended to redirect port 443 on WSA version 5.2.
2. You will most likely need to specify a service ID other then web-cache. On most Cisco devices, web-cache is reserved for port 80 traffic only and cannot be changed. Any other service ID will work as you want it to.

How to create artifact and redirect

HI ,
I need to implement a use case where there are two Access Manager(7.0) (first named as AM1, other AM2) and an tomcat server. Where AM1 is in some other domain and has trust relationship with AM2. Also AM2 and tomcat are in the same domain.
Use case:
When the user is authenticated by 'AM1' I want 'AM1' to create artifact and redirects that artifact to the servlet in tomcat server, This servlet will then send request to AM2 which will send this artifact through SAML request to AM1, AM1 will process the artifact and send SAML assertion through SOAP over https.
I know this can be implement using SAMLClient API. but I dont want to install jar files on 'AM1'.
Is there any other way ? If its just a configuration issue please give me the details. I tried following Access Manager documentation and was able to created artifact using SAMLAwareservlet but it fails before redirecting to my servlet.
Following is the Message I get
"Failed to Create SSO token"
Please help,
Thanks

It all depends on the current settings of the current SSID.
You cannot configure a web redirect with another security than none or a pre-shared key on layer2.
If you are using 802.1x, you can go with the splash page : http://www.cisco.com/en/US/partner/products/ps6366/products_configuration_example09186a0080956185.shtml
I don't see another friendly method for your users ...
Nicolas.
===
Don't forget to rate answers that you find useful

Run https and http in parallel for a site

I have Mac OS X Lion Server 10.7.2 and things are more complicated than with 10.6. I need to have https enabled for the only website on my system since it uses wiki and calendar. However, I also have some other pages I want to be accessible without ssl. How can I set up my only website that it allows http in parallel to https for the same resources (http://example.com should work, without redirecting to https and also https://example.com should work).
Any help is appreciated.

there is limit in the number of virtual-server's with SSL you can host... sorry
Each SSL Virtual Hosts need one IP
So, if you only have one IP, you can only have one SSL enable Virtual Host.
The reason for that limit is so technical, let me know if you want more explanations.
Most people joins all the SSL services in one name-IP, something like "https://secure.led.com", and there stores all secure services.
In addition, this solution will require only one SSL Certificate, so you will save some money too.

Programmatically logging out of Office 365 and redirection

Hi there :
I am developing some HTML/JS based apps on SharePoint online. It works perfect.
However recently I got a requirement, which I am not sure how to achieve.
I have got a HTML/JS form by which users submit data to SharePoint by clicking a button. However after clicking a button, the requirement is to prompt the user again for Office 365 log in/credential and then after successful authentication redirect to a particular
page. I am giving an example below.
Suppose I am on a page https://<domainname>.sharepoint.com/Pages/form.aspx. There is a submit button on that page. When I hit the submit button, I need to prompt the user again for Office 365 log in/credential and redirect back to https://<domainname>.sharepoint.com/Pages/form.aspx.
I can only use JavaScript here as it is a client side based app. Basically I reckon it involves logging the user out and then redirecting to the required page.
Any help will be much appreciated.
Thanks and regards,
DM

Hi there :
I am still waiting for some direction on this.
This is mainly to comply with 21 CFR Part 11 of Life Science industry and Office 365 is a preferred platform for that.
Any help will be much appreciated.
Cheers!

Portal Logoff and redirect to my own (created) logon page

Hi experts,
one Question about "Portal logoff and redirect to another URL", and I know there already are solutions how to fix that, but I was not successfull with my doings.
I have a customized logon page. When I call "http://myportal:50000/irj/portal/anonymous", I can see my own logon page. That works fine.
Now to my problem:
1) I'm using SAP NetWeaver Portal v7.01 (VMWare) with Windows 7 (x64 Bit)
2) In Config Tool "ume.logoff.redirect.silent" is setted at true and "ume.logoff.redirect.url" (both under "Global settings") at "http://myportal:50000/irj/portal/anonymous". Than WebAS has been restarted.
3) In source code of the Portal page (Masthead), I could see that the setted values can be readed from config tool
4) So far I could understand, when the parameters are setted and "silent" is true, than a new iframe will be created which is append to the document (JavaScript: logoffThirdParty())
5) After this, the logoff form will submitted, that means xxxx.LogOutComponent is running. Think this components reads some hidden attributes as "logon_submit", and one of this should be the (new created) externalIFrame
Instead of my anonymous page, I see the default SAP logon page. I don't have made any changes on com.sap.portal.navigation.masthead iView (should be the right name I think).
Thanks for assitance and regards,
Cengiz
Edited by: Cengiz Türkoglu on Feb 5, 2010 8:39 PM
Edited by: Cengiz Türkoglu on Feb 5, 2010 8:39 PM

Try to set the value ume.logoff.redirect.silent to FALSE and then restart and test. In my situation it worked.
Regards,
A

Switching between https and http requests

Hi,
Our application is built using ADF 10.1.3
This application need to be integrated with an in house built single sign on system. ( SSO system is built in C# and .NET)
This single sign on system only understand https request. Once user is validated against single sign on system, our application's authorization page is called in HTTPS mode. Once the user is authorized, he is forwarded to home page. While forwarding to home page, we want to convert the HTTPS request to HTTP.
Currently once the user is authenticated, all requests are happening in HTTPS mode.
We do not know how to make http request from existing https requested page.
Any help is appreciated.
Thanks
Ranajit

Hi,
the way to do this is by redirecting the call from a PhaseListener or command button. The solution Avrom refers to is a PhaseListener that uses XML configuration file to determine whether or not the page you are navigating to requires https or http. The code that handles the protocol switch is printed below
* Determines if the requested page requires SSL and if the current protocol
* meets this need. If not the protocol is switched between http and https
* @param viewId
* @param pageRequiresSSL
public void handleProtocolSwitch(String viewId, boolean pageRequiresSSL)
    ExternalContext exctx = FacesContext.getCurrentInstance().getExternalContext();
    boolean isSecureSSLChannel = ((HttpServletRequest)exctx.getRequest()).isSecure();
    // pages that require SSL and SSL is on, or pages that don't require
    // SSL but SSL is on and should be kept
    if (pageRequiresSSL && isSecureSSLChannel || !pageRequiresSSL && isSecureSSLChannel && isKeepSSLMode) {
    printDebugMessage("Page requires SSL = "+pageRequiresSSL+", channel is secure = "+isSecureSSLChannel+", is keep SSL = "+isKeepSSLMode);
    printDebugMessage("No protocol change required");
    // page requires SSL and SSL is not active. Switch to SSL.
    if (pageRequiresSSL && !isSecureSSLChannel) {
      printDebugMessage("Page requires SSL = "+pageRequiresSSL+", channel is secure = "+isSecureSSLChannel);
      printDebugMessage("Protocol change required to use https");
      switchToHttps(viewId);
    // switch to HTTP is page doesn't require SSL and channel isn't secure
    // and isKeepSSLMode is false
    if (!pageRequiresSSL && !isKeepSSLMode && isSecureSSLChannel) {
      printDebugMessage("Page requires SSL = "+pageRequiresSSL+", channel is secure = "+isSecureSSLChannel+", is keep SSL = "+isKeepSSLMode);
      printDebugMessage("Protocol change required to use http");
      switchToHttp(viewId);
    if (!pageRequiresSSL && !isSecureSSLChannel) {
      printDebugMessage("Page requires SSL = "+pageRequiresSSL+", channel is secure = "+isSecureSSLChannel);
      printDebugMessage("No protocol change required");
* Switches from https to http using a redirect call
* @param viewId
private void switchToHttp(String viewId) {
      FacesContext facesContext = FacesContext.getCurrentInstance();
      ExternalContext exctx = facesContext.getExternalContext();
      ViewHandler vh = facesContext.getApplication().getViewHandler();
      String pageURI = vh.getActionURL(FacesContext.getCurrentInstance(), viewId);
      //redirect to http URL
      String remoteHost = getHostNameFromRequest();
      printDebugMessage("Switch to http on host "+ remoteHost);
      try {
          String port = httpPort.equalsIgnoreCase("80") ? "" : ":" + httpPort;
          String url = "http://" + remoteHost + port + pageURI;
          printDebugMessage("Redirecting to http URL "+ url);
          //TODO check request Map
           this.printDebugMessage(" Content size of RequestMap before redirect "+exctx.getRequestMap().size());
          exctx.redirect(url);
      } catch (IOException e) {
          printDebugMessage("Redirect to http port failed "+ e.getMessage());
* switches to https using a redirect call
* @param viewId
private void switchToHttps(String viewId) {
      FacesContext facesContext = FacesContext.getCurrentInstance();
      ExternalContext exctx = facesContext.getExternalContext();
      ViewHandler vh = facesContext.getApplication().getViewHandler();
      String pageURI = vh.getActionURL(FacesContext.getCurrentInstance(), viewId);
      //redirect to https URL
      String remoteHost = getHostNameFromRequest();
      printDebugMessage("Switch to SLL/https on host "+ remoteHost);
      try {
          String port = httpsPort.equalsIgnoreCase("443") ? "" : ":" + httpsPort;
          String url = "https://" + remoteHost + port + pageURI;
          printDebugMessage("Redirecting to https URL "+ url);
          //TODO check request Map
          this.printDebugMessage(" Content of RequestMap before redirect "+exctx.getRequestMap().size());
          exctx.redirect(url);
      } catch (Exception e) {
          printDebugMessage("Redirect to http port failed "+ e.getMessage());
* @return the hostname of the page request
private String getHostNameFromRequest() {
      ExternalContext exctx = FacesContext.getCurrentInstance().getExternalContext();
      String requestUrlString = ((HttpServletRequest)exctx.getRequest()).getRequestURL().toString();
      URL requestUrl = null;
      try {
          requestUrl = new URL(requestUrlString);
      } catch (MalformedURLException e) {
          e.printStackTrace();
      String remoteHost = requestUrl.getHost();
      return remoteHost;
}If your container doesn't support session sharing between http and https then the session is renewed. In OC4J you will have to configure this.
Frank

HTTP and OC4J on different server

Hi
We have HTTP server running on machine1 and HTTP and OC4J running on machine2.
Because of security issues, We want to shutdown HTTP on machine2 and use HTTP server on machine1 and redirect requests to machine2.
Can any one pls let us know how to do it.
Thanks in Advance.

hi user11159690
Maybe this can help:
"Oracle® HTTP Server Administrator's Guide 10g Release 3 (10.1.3) B25211-02"
"7.32 mod_oc4j"
http://download.oracle.com/docs/cd/B25221_04/web.1013/b25211/confmods.htm#i1025739
Maybe more specifically "Oc4jMount":
http://download.oracle.com/docs/cd/B25221_04/web.1013/b25211/confmods.htm#CIHJBGFB
(tip : You can use "Your Control Panel" to make your name visible in forum posts.)
success
Jan Vervecken

HTTPS and LOGIN

Hi all,
I want to use https for the login page and for the registration page.
I have enabled the SSL.
HTTP server: Port 80, Listen 80 ;
SSL: Port 4443, Listen 4443.
Then I follow this thread Re: HTTPS and LOGIN
But now I have a problem...
The port is different, so, I can't get to the login page... Because he assumes that the port is 80.
I can get to:
https://hostname:4443/pls/apex
http://hostname/pls/apex
the home page works fine:
http://hostname/pls/apex/f?p=101:1
But the login page, with the code that I put in the applications processes, the application redirects to:
https://hostname/pls/apex/f?p=101:101
(don't have the 4443 port...)
How to resolve this?
Thanks in advance.
Regards
CD

Hi,
I change the "switch protocol" to
htp.init;
owa_util.mime_header('text/html', FALSE);
htp.p('Location: http://'||
owa_util.get_cgi_env('HTTP_HOST')|| ':4443' ||
owa_util.get_cgi_env('SCRIPT_NAME') ||
owa_util.get_cgi_env('PATH_INFO')||'?'||
owa_util.get_cgi_env('QUERY_STRING'));
owa_util.http_header_close;
but nothing change...
The application redirect me to https://hostname/pls/apex/f?p=101:101
without the number port.
What can I do?
Rgds
CD

Https and redirection

Similar Messages

Maybe you are looking for