Is it possible to Cache Proxy Credentials in J2RE

Our users access the internet through a proxy server that requires authentication. When users access an internet site that contains Java content the J2RE requests for Proxy credentials. I underestand why this happens but have the following questions...
1. Is it possible to get J2RE to cache the credentials for future use? This would save users typing their login info each time they access a site with Java content.
2. Is J2RE able to use the cached proxy credentials used by Internet Explorer? This would save the user having to authenticate more than once to the proxy server.
Any suggestions or explanations are greatly appreciated.
Cheers,
Timshel

This would not be a direct fault of forms; this is a SQL*Net problem (the forms runtime is communicating with the database over 500km via SQL*Net). Try the same with SQL*Plus...pulling data over small bandwith networks via SQL*Net doesn't make much fun (and I doubt SQL*Net is designed for this).
Next thing is I wouldn't even consider to expose the database at this level in the network; the clients don't need to know about the database, they just need the application server, so you only need to expose the application server to the public and keep your database behind bars.
@OP if you are experiencing performance problems this might be related to network roundtrips;
what I would do is to check for unnecessary roundtrips and enable networkstats in the formsweb.cfg (search the forum for "networkstats") to see the actual roundtrips. Another thing would be to create a little testform and see if at least dummy forms are performing well. If even the dummy forms have bad performance your connection is too poor to run webforms over them (and you can spare you the pain of searching unnecessary roundtrips).
cheers

Similar Messages

Is this dynamic caching scenario possible with reverse proxy?

I'm considering using the Sun System Java Web Server as a reverse proxy in front of other SSJWS's running a java webapp. I'm creating a dynamic site where most of the pages change only occasionally. I'm wondering if the follow "dream compression/caching" scenario is possible:
- Origin web servers have a set of high traffic dynamic pages that change only occasionally. Other pages (could be partition in subdirs) should not be cached.
- These dynamic pages set cache and expires headers allowing browser and proxies to cache the content--say for hours or days. It's ok if users see a slightly stale page within this expiration period.
- Reverse proxy caches these pages as if they were static files. They also create gzipped versions on the fly and cache those. When requests comes in for these specific pages, they are served straight from proxy cache (either compressed or uncompressed depending on request header.)
- When the expiration date is reached, reverse proxy requests fresh pages from the origin server, creates a compressed version, and only servies these pages from cache.
- A certain set of pages shouldn't be cached and will have appropriate headers. They will probably also be in different subdirectories.
Is it possible to use the reverse proxy as a self-updating cache this way? (And it it possible to proactively invalidate the cache. Let's say I change a page on the origin and I want the proxy to refresh that cached page right away.)
Thank you,
Armando

I see. Thank you, this is very helpful.
I've take taken a look at Web Proxy 4. It seems it can do much of what I'd like. One downside I see is that it seems to be quite a big tool with all of the forward proxying features that I don't need. I just need a transparent reverse proxy/cache, so it would have been nice if the reverse proxy provided by Sun Web Server offered some of the caching features of Web Proxy 4.
Does Web Proxy 4 share code with Web Server? I haven't any seen any buzz, blogs, etc about it as I have with Sun Web Server. I see it now has a "modern HTTP core" and such but is performance on par with Web Server? (There are no trumpeted world records, and I don't see any architecture details, such as the ability to leverage event ports on Solaris...)
It looks like Web Proxy 4 can be configured as a reverse proxy to do sticky load balancing, caching with interval checks, and on the fly gzip compression. Can it: cache both a compressed and uncompressed version of the content? Run other filters on the content before caching, such as the sed content trip filter? I haven't really seen anything out there that can do all that. If this is possible, then Web Proxy 4 deserves more buzz!
If anyone has any good or bad experience using Web Proxy as a reverse proxy, I'd love to hear it!
Cheers!
Armando

Proxy credentials not remembered

Dear all
please be assured we have tried many, many things already, including clearing caches, keychains, even fresh installs. We have many, many macs in use at our College, a good number of which suffer from this issue.
The OSX version varies, as does the model of Macbook, but the problem is often the same. The proxy credentials are in the keychain but Safari, App Store, Chrome and other apps do not seem to 'find' them. Alternatively I have tried assigning the proxy settings against HTTP and HTTPS proxy config in the Network System Preference pane, again this does not help. We also have a WPAD file in place so that auto proxy configuration works. And work it does! But sadly, while I can see that the autoconfig is working because the correct proxy server requests credentials, this method still does not cause the Macbook(s) to retrieve and use credentials.
This only seems to affect HTTPS connections, e.g. to https://www.google.co.uk - which of course is Safari's default in-line search.
My only clue so far is a line from the system log on one of the Macbooks, but it doesn't really give a fix - again this line is only generated and the problem seen when attempting to access an HTTPS site:
Nov 11 11:43:19 usersmacbook.ourdomain.com ocspd[411]: Authentication challenge received for "proxy.ourdomain.com:8080", unable to obtain proxy server credential from System keychain.
Please be assured the credentials are most definitely there!
Any help with this issue would be greatly appreciated - particularly with the frightening rate at which the number of students using Macbooks seems to be growing!
Kind regards
Richard

Yup:-
Just the same:-
Nov 11 11:16:41 teds-new-mac.ad.mycompany.co.uk ocspd[537]: Authentication challenge received for "10.203.39.212:8080", unable to obtain proxy server credential from System keychain.
Nov 11 11:16:45 teds-new-mac.ad.mycompany.co.uk ocspd[537]: Authentication challenge received for "10.203.39.212:8080", unable to obtain proxy server credential from System keychain.
Nov 11 11:16:52 teds-new-mac.ad.mycompany.co.uk ocspd[537]: Authentication challenge received for "10.203.39.212:8080", unable to obtain proxy server credential from System keychain.
I'm at a loss.
Safari won't go on to ANY HTTPS address:- Swithched to Firefox which seems quite happy with it all.
Also, when I try the APP STORE, it generates multiple entries of the same line, and brings up the following box:-
The following line also appears in Console (system log):-
Nov 11 12:56:19 teds-new-mac.ad.mycompany.co.uk ocspd[1336]: You can specify the username and password for a proxy server with /usr/bin/security. Example: sudo security add-internet-password -a squiduser -l "HTTP Proxy" -P 3128 -r 'http' -s localhost -w squidpass -U -T /usr/sbin/ocspd /Library/Keychains/System.keychain
So it's DEFINITELY looking in the system keychain.
Q.
This seems too easy - but would copying the entry from login keychain and pasting it into system keychain solve the problem?
Or would it totally screw things up?
Message was edited by: ttreen1950

Wich Caching Proxy would be suiteable for Windows 7 Professional Server

I got the following setup:
3 Computer Rooms for Trainign Purposes.
18 PC per room, one of them a Server. All but the Server are protected by Steady State Software (DeepFreeze), with them getting thawed every 1-3 months for Windows and software updates. The only thing allowed to auto-update is the Virus scanner (MS Security
Essentials).
The Server and all Computers are "only" Windows 7 Professional (no real server OS among them).
I managed to minimise the Internet Load for updates by orgianising Offline installers for the software that had them.
But Windows Updates and some of the Adobe Photoshop Updates don't want to be easily accesible offline.
The only thing I can effectively do for those would be a Cachign Proxy. Aside from MSE definitions (multiple updates per day possible), most of the files will be only updated every month or so.
It also does not need to cache normal Internet Traffic, only large files like updates. Maybe only towards very specific servers (like the MS and Adobe update servers).
What options for a caching Proxy server do I have in this scenario?
Let's talk about MVVM: http://social.msdn.microsoft.com/Forums/en-US/wpf/thread/b1a8bf14-4acd-4d77-9df8-bdb95b02dbe2 Please mark post as helpfull and answers respectively.

Hi,
Please refer to the following link:
http://blogs.msdn.com/b/ieinternals/archive/2013/10/11/web-proxy-configuration-and-ie11-changes.aspx
Best Regards,
Vincent Wu
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
As I understand it:
If the programm uses the WinINET settings at all (not many do nowadays), the settings is per user. But you can force a system wide value via registery entry.
I asume windows update will use that setting (I read often about having to change odd users proxy settings before). The WU Service runs under the "Local System" Account in a non-interactive session.
So either changing the proxy settings of Local System or setting the OS to use a global setting should redirect it. So it is possible to redirect the Updater (even background downloaders) to use a proxy server.
I would still need a proxy server I can run on a mere Win 7 Pro. Ideally one I can tell to only cache for specific domains/ip adresses* (the one of the Update servers for Adobe and Windows, for example).
And google will result in me hitting links taking about Proxies run by other people before it will ever give me a list of availible server softwares and thier pro/con's.
*I can get those IP adresses/domains either via wireshark or the resource monitor of Windows. So finding out where the data comes from is the least of my worries.
In the meantime I looked into wsus offline updater. While it cannot cover the regular MSE or the odd Adobe updates, it can still handle the bulk of data.
Let's talk about MVVM: http://social.msdn.microsoft.com/Forums/en-US/wpf/thread/b1a8bf14-4acd-4d77-9df8-bdb95b02dbe2 Please mark post as helpfull and answers respectively.

Itunes 11 and above. Proxy credentials

How do i get itunes 11 and above to ask for proxy credentials like they did in 10.7?

If you have a 4G iPod (one with cameras) you can only go to iOS 6.2.1 and that requires iTunes 10.7 or above.
If you have a 3G you can go to 5.5.1 with iTunes 10.5 or later.
A 2G can only go to 4.2.1
Identifying iPod models
you can update on another computer with the right version of iTunes but you will not be able to sync with your computer unless you update iTunes on your computer.

Pre-Caching Proxy Services

ALSB caches proxy services after they have been run, which is all well and good and results in a performance boost.
Unfortunately after ALSB has been restarted, message processing is slow (i.e. greater than 4 seconds) Subsequent messages are processed fine as the proxy services have been loaded into cache.
Does anyone know of anyway in which to cache some or all of the proxy services on start up?
My current solution is to send through a message every time ALSB starts up, but this is less than desirable.
Currently using ALSB 2.61.
Thanks

This is not supported. You may want to simulate a first run to force the caching after starting the server.
Gregory Haardt
ALSB Prg. Manager
[email protected]

Issues with accessing forms applications behind a firewall & caching proxy

We have web enabled an forms application and has the following set-up at server end.
Machine no 1. Oracle Forms Server 6i with patch level 1 listening on HTTP/Port 80 on a windows NT box.
Machine no 2. Apache Webserver. listening on HTTP/Port 80
Both the machines are behind a firewall which allows only HTTP on port 80.
At clients end we have
1. a firewall which allows only HTTP on port 80.
2. a caching proxy server
The client machine connects through the caching proxy server.
When the client connects the applet gets downloaded and initialised, the form server log shows the following
-Forms Server Log-----
[09/27/00 15:01:09 India Standard Time]::LISTN: Connection Request [ConnId=13, Addr=194.120.163.251:16278]
[09/27/00 15:01:09 India Standard Time]::RUNFORM Client Connected [ConnId=13, PID=188]
at the same time at the client side we get a FRM-92050 error: Failed to connect to server fs.formserver.com:80
Please help
Thanks
null

Thanks Henrique.
This is not very promising but it confirms there is a potential issue
How did you manage to solve the problem, allowing the NW server/application to perform direct accesses?
Adalbert

Hello... what is authenticating proxy credentials to install a software that I bought to install???

hello... what is authenticating proxy credentials to install a software that I bought to install???

Hi jo lia-lu,
Are you connected to a managed network conected to internet proxy?
Either the proxy server doesn’t require authentication, or the proxy relies upon the NTLM/Kerberos authentication schemes which permit users’ Windows logon credentials to be automatically used to respond to challenges from the proxy server.
Please contact your IT personnel for help in getting the access credentials for the authenticating proxy.
Regards,
Rave

ColdFusion caching WSDL credentials

We are running ColdFusion 9 (version 9.0.1.274733) on Windows 2003 with IIS 6. The server is shared across a few different groups within our organization each with more than one active development project currently underway. 3 of the projects are attempting to consume a .Net webservice hosted on another server. The webservice is using basic authentication to identifiy who is accessing the service. Our problem is that when ColdFusion accesses the service the first time it caches the WSDL proxy/stubs along with the username and password. This presents a problem when the next application attempts to access the service. The second attempt can access the service but since ColdFusion is using the credentials ofthe first application the second application gets permission problems from the application behind the service. Example is application A hits the service with username A this is followed by application B with username B but IIS sees username A, application C does the same thing, IIS sees the access attempt with username A. If we clear the WSDL from the admin or use the refreshWSDL attribute it works one time, with subsequent access attempts using the first set of credentials. Forcing each application to always use the refreshWSDL attribute kind of defeats the purpose of caching.
So my question is this:
Is there any way to get ColdFusion to NOT cache the username/password information when it creates the stubs?

Have you tried creating multiple named instances of the webservice via the cf administrator? I haven't tried it but it looks like you should be able to assign a different username/password to each instance. Then in your code just instantiate it by the name rather than the wsdl url, eg.
<cfset svc = createobject("webservice", "mywebsvc_appA") />

How to change proxy credentials in Firefox?

Hello,
One of our staff recently changed her password which is used for the proxy.
I've updated the credentials in network preferences and it seems to work fine for other browsers (Chrome and Safari) but Firefox does not seem to work.
All other settings in FF should be correct.
Can anyone tell me how to update credentials for the proxy?
Thanks in advance.
Side note: this is on a Mac

I believe changing the proxy for firefox is the same on a mac as with window. You can go to the network settings and change it from there, and I believe firefox will ask to use the settings, otherwise you can go to Settings>Options>Advanced>Network and then on the top will be place that says configure how firefox connects to the internet. Hit that settings button and you can then configure it all. At the bottom of there, there is a button that says "Do not prompt for authentication if the password is saved". I would clear that box because that is probably why her authentication isn't working. Once she has put in new authentication, it should ask if you want to update it. Thats when you can go back there and check the button to not prompt for authentication if the password is saved.
Just in case this was way to long, or didn't make sense, I have a couple screenshots. These were taken on my windows computer, not my mac but it will be the same thing.

Possible session caching issue in SSRS2014

Using custom FormsAuth, User A can sign into our own main asp.net mvc app (WIF cookie), then SSRS (FormsAuth cookie) and all is well. Here is where things go bad. User A signs out of our main application (WIF cookie deleted) then back in into
our main application as User B then back into SSRS. SSRS report that displays User!UserID show UserA instead of current User B. Its like there is either a session or cookie caching issue going on but not for sure.
1. What is the proper way to sign out of SSRS and prevent session caching?
2. Do I need to worry about making my SSRS logon page non-cacheable? If so, what is the recommended way of doing this?
thanks
scott

Hi scott_m,
According to your description, you used custom FormsAuthentication in Reporting Services, after user A sign out the application an sign in as user B, SSRS built-in user is shows user A instead of user B.
Based on my search, once we configured SSRS to use Custom (Forms) authentication by deploying a custom security extension, we can logon to MS Report Manager (MSRM) using credentials of our custom security framework via a logon web page. But there is no way
to logout or to expire the authentication cookie, so we need to close the browser manually. As a workaround, we can add a logout button to the Report Manager which is using Forms Authentication, then use code to clear the cookie and redirect to home page.
In addition, if you extend Reporting Services to use Forms Authentication, it’s better to use Secure Sockets Layer (SSL) for all communications with the report server to prevent malicious users from gaining access to another user's cookie. SSL enables clients
and a report server to authenticate each other and to ensure that no other computers can read the contents of communications between the two computers. All data sent from a client through an SSL connection is encrypted so that malicious users cannot intercept
passwords or data sent to a report server.
Here is a relevant thread you can reference:
https://social.msdn.microsoft.com/Forums/sqlserver/en-US/5e33949d-7757-45d1-9c43-6dc3911c3ced/how-do-you-logout-of-report-manager
For more information about Forms Authentication, please refer to the following document:
https://technet.microsoft.com/en-us/library/aa902691%28v=sql.80%29.aspx?f=255&MSPPError=-2147217396
If you have any more questions, please feel free to ask.
Thanks,
Wendy Fu
If you have any feedback on our support, please click
here.
Wendy Fu
TechNet Community Support

Is EOIO messaging possible using ABAP Proxy in WAS 620?

Hello,
I am trying to implement an outbound EOIO interface using ABAP Proxy on a SAP R/3 470 running on WAS 620. We have XI 3.0 running on WAS 640. I followed the SAP documentation available at http://help.sap.com/saphelp_nw04/helpdata/en/c9/74246d8ad2447799063d39013e9a11/frameset.htm
I find that the interface IF_WSPROTOCOL_ASYNC_MESSAGING required in this exaple does not exist in our R/3 system. I also notice that proxy classes generated on WAS 640 have the superclass of CL_PROXY_BASIS. But the proxy object generated in WAS 620 have no superclass at all.
Does anybody know how I can get EOIO interfaces to work on the WAS 620? Did you use these objects? Can I import / install them somehow? Or, is EOIO just not possible in WAS 620?
Please let me know.
Regards
Cerish Chemparathy

HI,
have a look at this link to the ABAP Proxy Runtime based on WAS 6.20 (Xi 2.0) http://help.sap.com/saphelp_xi20sr1/helpdata/en/02/265c3cf311070ae10000000a114084/content.htm
There is a help entry called Guatanteeing the Order of Asynchronous Messages. Seems that you somehow can set a queue id for this messages and as long as theses messages are all in the same queue, the order will be maintained.
Your observations are right, there are differences between the Proxy Runtime in WAS 6.20 and in WAS 6.40 and as far as i know, there is no way to downport the 6.40 runtime to 6.20. You will need to stick with wath 6.20 offers.
Regards
Christine

Possible to configure Proxy for Wi-Fi in Configuration Utility?

Is it possible to set the proxy information under the Wi-Fi section of the iPhone Configuration Utility?
Being able to pre-configure the SSID, security type, etc is great, but I do not see a place to configure the proxy information...still have to manually type that into the WiFi settings on the device after the profile is installed.

I saw a few other posts about manually editing the .mobileconfig file...when testing, my iPad ignored the section added w/ proxy info.
I'm not thinking this is the way to go anyway since iPCU strips that section out if you try to import it back in (gives a message about unsupported keys), and this way prevents from using the digial sign function in iPCU, so it shows up on the device as unsigned when prompted to install.
Seems like a lot (realtive, but it's more than one) of users on these boards are requesting the same feature. Would be anther major step towards making iOS play catch-up in the Enterprise.

Proxy Credentials In AIR

Hi Guys,
I know that Adobe AIR gest the proxy details from the OS automatically, thats fine. Is that information possible to obtain in the rest of the program at runtime?
Thanks
Jaz

Jaz,
AIR does not expose APIs to read the system proxy settings.
Christain

Proxy Credentials

Hello I'm using JWS and my application uses HttpClient so I need to set HttpClient's proxy properties, I can request to JWS for host and port for proxy but not for user credentials...
Does any body knows how to get the proxy's credentials from JWS
David Casta�eda

Latest version of Java can do this beter (Java SE 6) , by accessing the user credentials in the browser (for some browsers) but I don't know how you could access this information in you application.
/Andy

Is it possible to Cache Proxy Credentials in J2RE

Similar Messages

Maybe you are looking for