Is this expect behivour for wss10_saml_token_client_policy?

My web service attached with wss_saml_or_username_token_service_policy.
My Web service client (Java SE) code using oracle/wss10_saml_token_client_policy.
Without any keystore on my client side, I'm able to invoke web service without password.
only thing I put is:
requestContext.put(WSBindingProvider.USERNAME_PROPERTY, "JOE");
Is this expected behivior for oracle/wss10_saml_token_client_policy? no keystore, no password, it seems tell me that Sender Vouches is not being enforced.
Thanks

I believe what you have is correct. No encryption or signing is applied to this policy. You'd probably prefer to use something like oracle/wss_username_token_over_ssl_client_policy or oracle/wss11_saml20_token_with_message_protection_client_policy.
To configure for SSL (Note: I had to enable 2 way SSL on WebLogic for this to work):
System.getProperties().setProperty("javax.net.ssl.keyStorePassword", "password");
entityProcedureService = new EntityProcedureService();
SecurityPoliciesFeature securityFeatures =
new SecurityPoliciesFeature(new String[] { "oracle/wss_saml20_token_over_ssl_client_policy" });
EntityProcedureBASImpl entityProcedureBASImpl = entityProcedureService.getEntityProcedureServicePort(securityFeatures);
Map<String, Object> requestContext =
((BindingProvider)entityProcedureBASImpl).getRequestContext();
requestContext.put(BindingProvider.USERNAME_PROPERTY, "weblogic01");
ProcedureInquiryResponse response =
entityProcedureBASImpl.fetchAllProcedures(new ProcedureInquiryRequest());
System.out.println(response.getProcedures().size());
To configure for SAML:
entityProcedureService = new EntityProcedureService();
SecurityPoliciesFeature securityFeatures =
new SecurityPoliciesFeature(new String[] { "oracle/wss11_saml20_token_with_message_protection_client_policy" });
EntityProcedureBASImpl entityProcedureBASImpl = entityProcedureService.getEntityProcedureServicePort(securityFeatures);
Map<String, Object> reqContext =
((BindingProvider)entityProcedureBASImpl).getRequestContext();
reqContext.put(BindingProvider.USERNAME_PROPERTY, "weblogic01");
reqContext.put(ClientConstants.WSSEC_RECIPIENT_KEY_ALIAS,"service");
reqContext.put(BindingProvider.PASSWORD_PROPERTY, "passw0rd" );
reqContext.put(ClientConstants.WSSEC_KEYSTORE_LOCATION, "d:/projects/ssl_certs/client.jks");
reqContext.put(ClientConstants.WSSEC_KEYSTORE_PASSWORD, "password" );
reqContext.put(ClientConstants.WSSEC_KEYSTORE_TYPE, "JKS" );
reqContext.put(ClientConstants.WSSEC_SIG_KEY_ALIAS, "client" );
reqContext.put(ClientConstants.WSSEC_SIG_KEY_PASSWORD, "password" );
reqContext.put(ClientConstants.WSSEC_ENC_KEY_ALIAS, "client" );
reqContext.put(ClientConstants.WSSEC_ENC_KEY_PASSWORD, "password" );
ProcedureInquiryResponse response =
entityProcedureBASImpl.fetchAllProcedures(new ProcedureInquiryRequest());
for (Procedure procedure : response.getProcedures()) {
System.out.println(procedure.getDescription() + ":" +
procedure.getSuid());
System.out.println(response.getProcedures().size());
Edited by: user3014194 on Mar 29, 2011 10:00 AM

Similar Messages

  • My ipod touch 2gn wont turn on after being charged in a ipod dock...it's been 3 weeks now and i've tried everything and noting has worked! Apple, you better expect paying for this because i am not wasting my money again!

    my ipod touch 2gn wont turn on after being charged in a ipod dock...it's been 3 weeks now and i've tried everything and noting has worked! Apple, you better expect paying for this because i am not wasting my money again!

    Have you tried a reset?
    Stedman

  • Clean install of OS X Lion went from 7GB to 16GB, is this expected?

    Hi,
    I'm trying to see if others have experienced this as well?
    The whole OS only occupied 7GB (right after install) and after a reboot it reads 16GB.
    Is this expected behavior to occupy 2X the storage space?
    What is the extra ~9GB being used for?
    Details:
    Upgraded from Snow Leopard to OS X Lion:
    Did a Clean Install of OS X Lion (10.7.4) on a new external Hard Drive (1TB) - to be swapped later as my new Internal Drive.
    Get Info reads ~7GB
    Then I rebooted the MBP and doing a Get Info again, now it reads 16GB!
    Tried searching for explanations, but no luck...
    Is this normal?
    How much space does a Clean Installed OS X Lion occupy? 7GB, 16GB?
    Thanks for any feedback.
    Mike

    Use the free utility OmniDiskSweeper to get a more accurate picture of what's on your drive.
    http://www.omnigroup.com/products/omnidisksweeper/

  • I was having trouble getting to ITunes. asked several people for a fix. well i found one, Try this it worked for me. Try this.

    Try this, several people complained of the same problem, they reset winsock..Start --> Programs --> Accessories (Right Click on Command Prompt) --> Run as Administrator then type in: Netsh winsock reset
    Hit enter, restart PC, open iTunes, go to Store

    With option #1 -- I modified and rebuilt the 3rd-party JARs and referenced them in NetBeans. When I choose clean and build, the Ant processes results in an error: "jarsigner returns 1". So it doesn't seem to run at all.As long as you rebuilt the jars correctly without the original signature, I think it should work.
    An example of unsigning a jar using ant is here:
    http://frank.zinepal.com/unsign-a-jar-with-ant
    Do you think the multiple-JNLP idea would work if NetBeans didn't apply "my" signature to the 3rd-party JARs? Aside from manually copying the original JARs into the \dist directory, is there a better way to tell NetBeans to leave the 3rd-party JAR alone (ie, don't sign it again)?I think it's supposed to work (it's the mixed code signing situation I referred to in my prior post).
    For example, from your description it sounds like the default NetBeans build doesn't really support this style of deployment, so you would have to create a custom build which does what you need and is not triggered by NetBeans - which is doable, but annoying - it's sounds like you tried this, but were unable to get it to work as expected. For NetBeans specific help, you are better posting to a NetBeans forum (though you might be just the second person who has tried to do this with a JavaFX app).
    Also need to check the end user experience is acceptable too, because I think the dialog and warning handling for the mixed code situation is different.
    Look at the deployment guide section "Using <fx:resources> for Extension Descriptors" - I think it documents how to do what you want if you use a custom build file rather than letting NetBeans do the work:
    http://docs.oracle.com/javafx/2/deployment/javafx_ant_task_reference002.htm#CIABGCEE
    Hmm, a lot of running around to deploy an app which can open a file . . .

  • This new update for the iphone has me troubled. Nowhere did I see where it was only good for 3GS,4S and or 5. Is this update also good for the 3GS? I'm reading people are haing trouble.

    This new update for the iPhone has me troubled. Nowhere did I see where it was only good for 3GS,4S and or 5 or all. Is this update also good for the 3GS? I'm reading people are having trouble.

    iOS 6 can be loaded without problem on the 3GS.  Not all features are supported however.
    With respect to your reading people are having trouble, what did you expect to see on this technical support forum?  People don't write in to state they have a trouble-free upgrade.

  • Problem with option: enable this distribution point for prestaged content

    Hi, for past few days I have been focused on application deployment with SCCM 2012 R2 (I am learning SCCM 2012 R2 reading books, watching video trainings . . .). Having followed allong book Mastering System Center 2012 R2 Configuration Manager I also did
    deployment of Microsoft Office 2013, Adobe Reader 11, Foxit Reader 4.2 and Notepad ++ to test collection containing one Windows 7 computer. In one of examples prestaged content file is created for Foxit Reader application. In order to do so, if I am
    right, option Enable this distribution point for prestaged content
    has to be checked on distribution point and I did that.
    Problem is that I noticed deployment of any application to test collection failed every time - system waits for prestaged content file if this option is selected. Then I have to delete deployment of given application, application itself, deselect option
    Enable this distribution point for prestaged content and create app, distribute it to DP and deploy to test collection - then everything works well.
    To make things worse, having deselect option Enable this distribution point for prestaged content (I did it yesterday and I checked that several times) this morning I checked again and this option is selected again. What might be the cause
    of this behaviour? I expected this option to be deselected - this is weird to say at least.
     

    When you enable the option "Enable this distribution
    point for prestaged content" on a DP, it causes newly created applications/packages to default to "Manually copy the content in this package to the distribution point"... This would then cause the deployments on the clients to remain
    at 'waiting for content' - unless if you manually prestage the content, as this option requires it.
    If you enable the option "Enable this distribution
    point for prestaged content" on the DP, but want to automatically have CM distribute the content, then configure the app/package to do so,
    before distributing the content: Distribution Settings tab > Prestaged distribution point settings > Automatically download content when packages are assign to distribution points.

  • Will this be available for Android devices?

    I work with Windows and Android products because i feel i have more freedom when it comes to creativity with their products; also i never enjoyed Apple products. So will this be available for Android?

    PB3D is built on top of the new Flash player Molehill APIs so it will be available wherever Flash is. There is more infomation here:
    http://labs.adobe.com/technologies/flashplatformruntimes/features/stage3d.html
    Particularly this question:
    Will 3D be supported in mobile versions of Flash Player too? When?
    Yes, we expect the Stage3D APIs to be available on mobile platforms, such as Android and Linux Mobile. We expect to work with partners through the Open Screen Project to enable 3D in Flash Player and AIR on devices.

  • *HashMap High Memory Usage, is this expected?

    I'm using this test class to demonstrate memory usage in hashmaps. I've done some preliminary testing by adding Runtime calls to get memory before and after, but what I'm immediately noticing is that I'm running out of memory before I hit the 200K mark.
    Error specifically is : Exception in thread "main" java.lang.OutOfMemoryError: Java heap space
    Am I doing anything horribly wrong here that is over-allocating memory to this purpose? It doesn't seem to me. like it should be hitting 75MB's so quickly. How can I estimate the usage per hashmap here? What is each string key worth? I saw that there's a chart of primitive memory somewhere...
    thanks in advance.
    package test;
    import java.util.*;
    /* burns through 75MB, and runs out.
    * is this expected behavior?
    public class ALMemoryTest {
         public static void main(String[] args) {
              ArrayList<HashMap<String,Object>> al = new ArrayList<HashMap<String,Object>>();
              HashMap<String,Object> hm;
              for (int i = 0; i < 200000; i++) {
                   hm = new LinkedHashMap<String,Object>();
                   hm.put("original", i);
                   hm.put("times2", i * 2);
                   hm.put("stringkey", i + "string");
                   al.add(hm);
              System.out.println(al.size());
    }

    So I made another test class. This shows I can get up to 185K-ish elements or so...
    package test;
    import java.util.*;
    /* burns through 75MB, and runs out.
    * is this expected behavior?
    public class ALMemoryTest {
         ArrayList<HashMap<String,Object>> al = new ArrayList<HashMap<String,Object>>();
         public double bytesToMbs (long bytes) {
              return bytes / 1048576;
         public LinkedHashMap<String,Object> newHashMap(int i) {
              LinkedHashMap<String,Object> hm = new LinkedHashMap<String,Object>();
              hm.put("original", i);
              hm.put("times2", i * 2);
              hm.put("stringkey", i + "string");
              return hm;
         public void totalMem() {
              System.out.println( "total bytes: " + Runtime.getRuntime().totalMemory() );     
         public void freeMem() {
              System.out.println( "free bytes: " + Runtime.getRuntime().freeMemory() );
         public void arrayListTest(int max) {
              for (int i = 0; i < max; i++) {
                   al.add(newHashMap(i));
              System.out.println(al.size());          
         public static void main(String[] args) {
              ALMemoryTest test = new ALMemoryTest();
              test.arrayListTest(100000);
              test.arrayListTest(50000);
              test.arrayListTest(20000);
              test.arrayListTest(10000);
              test.arrayListTest(5000);
              test.freeMem();
    }

  • "This message cannot be sent at this time."  I have been getting this pop-up for 3 days when trying to send out mail.  I don't know what to do!  I cannot send mail from this account on any ISP. Please help!

    "This message cannot be sent at this time."  I have been getting this pop-up for 3 days when trying to send out mail.  I don't know what to do!  I cannot send mail from this account on any ISP. Please help!

    lots of people seem to be havgin a problem sending email from iCloud webmail.
    does your email address have uppercase characters in it?
    if so, try creating an alias in lowercase (go to preferences in iCloud webmail and select 'accounts') and see if email sends okay from that

  • I buy adobe creative suite for teachers and students about one year ago but now i'm not longer a student. Can I still use this programs legally for commercial purposes or do I have to buy some upgrades or something like this? Please help

    I buy adobe creative suite for teachers and students about one year ago but now i'm not longer a student. Can I still use this programs legally for commercial purposes or do I have to buy some upgrades or something like this? Please help

    The license did not have use restrictions Licenses and terms of use | Adobe
    BUT... when your one year Education account ends, I do not think you will be able to renew at the Education rate

  • How do I access "Firefox is NOT compatible with this application. For best performance, please use Internet Explorer 5.0 and above...." web sites; when I try to download any alternate browser, then a warning that alternate is "imcompatable with your opera

    How do I access websites that warn: "Firefox is NOT compatible with this application. For best performance, please use Internet Explorer 5.0 and above...."? When I try to download any alternate browser, all I get is another warning that the alternate is "not compatible with your operating system." Is Firefox preventing this? The site listed below is a job application site. I've had this same problem with other job application sites also.
    == URL of affected sites ==
    https://storefront.kenexa.com/lithia/cc/Home.ss

    There should be a User Agent Switcher menu item under Tools, which gives you the browser names you can impersonate.
    The menu item name changes to the browser UA you are presently using.
    There is also a User Agent Switcher button, you can add it using View -> Toolbars -> Customize, and dragging the button to your toolbar.
    See http://chrispederick.com/work/user-agent-switcher/features/ and http://chrispederick.com/work/user-agent-switcher/help/
    You can just start trying IE versions (or the versions it says on the site) until it lets you in.

  • I am using a work laptop and have the same problem. When I try to change the "configure proxy", they only available option is "use this proxy server for all protocols". Could it be that my system administrator blocked me from changing it since they don'

    I am using a work laptop and have the same problem. When I try to change the "configure proxy", they only available option is "use this proxy server for all protocols". Could it be that my system administrator blocked me from changing it since they don't want us to use Firefox.
    == User Agent ==
    Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB6.4; FNGP_SYS)

    Start Firefox in [[Safe Mode]] to check if one of your add-ons is causing your problem (switch to the DEFAULT theme: Tools > Add-ons > Themes).
    See [[Troubleshooting extensions and themes]] and [[Troubleshooting plugins]]
    If it does work in Safe-mode then disable all your extensions and then try to find which is causing it by enabling one at a time until the problem reappears.
    You can use "Disable all add-ons" on the ''Safe mode'' start window.
    You have to close and restart Firefox after each change via "File > Exit" (on Mac: "Firefox > Quit")

  • I just bought a new mac mini and an external DVD burner. I want to burn a DVD video and it will not play on the TV but only on the computer? Need this figured out for tomorrow.

    I just bought a new mac mini and an external DVD burner. I want to burn a DVD video and it will not play on the TV but only on the computer? Need this figured out for tomorrow. Can anyone help me?

    Congratulations on the new Mini. Are you saying you tried burning and it does not play, or do you want to burn it only for the computer to be able to play it?
    OS X Mountain Lion: Burn a CD or DVD may help.

  • Since you don't allow emails any more – I suspect because of the numerous complaints with your service and the way you treat people that you don't want documented, I am calling and I want this call recorded for future reference. I have been a long time fa

    Since you don’t allow emails any more – I suspect because of the numerous complaints with your service and the way you treat people that you don’t want documented, I am calling and I want this call recorded for future reference.
    I have been a long time faithful customer of vzw and although the past year I have been late on payments many times and really couldn’t afford your exorbitant prices for services lots of other companies offer sometimes three times cheaper than what you charge, I have hung in there trying my best to meet my obligations.
    This month has been no exception. You don’t know the background; the whole story of people’s lives. I know you could care less because all you care about is the profit-the money that comes in.
    I was told when I agreed to pay my bill on the third per the recorded message that I had 14 days to pay…you cut me off anyway. The phones are not the tissue; your suspending my service means I cannot work. I may lose my job…how do you justify that? In any case? The least you could do would be to keep 4986 on and cut the phones off. But no. You refuse to compromise and meet the basic needs of your customer. What does that say about your company? I tried to call back on three separate occasions to tell you I couldn’t pay because of unexpected expenses but couldn’t get out of the automated system…sadly couldn’t get to a real person which also speaks volumes to me.
    All this tells me this is a company I don’t wish to be affiliated with any more. As soon as I can, I will discontinue service with you…I know you could care less. I will honor the remaining portion of the contract but that’s it. You don’t deserve my business. I am a good, hardworking person who, at the sacrifice of myself and my needs, always pays her bills…albeit late at times. I realize others tell you stories and lies to justify themselves. That’s not me. If you knew what I had been through the last 7 yrs you would marvel that I am  still on my feet…don’t judge too quickly. You could be wrong…and in my eyes you are by doing this to me.
    God will see us through this extremely scary time of that I have no doubt. No thanks to your company and lack of understanding and mercy. I am doing the best I can. Sadly you are not.
    See I have choices. MANY choices of providers for services you offer. I don’t have to be treated like this. I don’t have to succumb to your coldness and callousness. I intend to choose better (and cheaper). If your company doesn’t get the “people factor” back you will be sorry.

    Problem here is you admit you cannot afford the service.
    And you want to blame Verizon for losing a job because you have no cell phone.
    If your job depends on that phone I would pay it on time every time if you need a job to pay your bill.
    No other service is going to treat you any different. And if you cannot afford Verizon's monthly invoice how are you going to afford new devices, activation fees, possible security deposits on any other cellular carrier? You can't.
    Also if you made an arraignment to pay and then decide you cannot do so, why should Verizon extend you service or credit, or why is it you want to use the service and data and not pay for it as agreed.
    Get a prepay phone. Its evident the cost is too high for you to afford on post pay.
    Good Luck

  • I downloaded a free App called ThaiPad from Bangkok Post newspaper. I downloaded on my PC running Windows 7. The Bangkok Post recommended itunes for downloading. I completed download but it would not open. I am assuming that perhaps this App. was for iPod

    I downloaded a free App. called ThaiPad from Bangkok Post newswpapers. I downloaded on my PC running Windows 7. The Bangkok Post recommended itunes for downloading. I completed the download but it would not open. I assume that this App was for iPad or iPod etc as the Bangkok Post wants to sell content,  after the free content,  via itunes store I assume. Can someone tell me if I can open this in Windows 7 and if so how. Thanks.

    Any app that you download using iTunes is for use only on iPad, iPhone, or iPod Touch, and not on a PC. It's possible they have a separate app for PC, as some companies do, but the one you downloaded via iTunes definitely will not open in Windows 7.
    Message was edited by: ClayG

Maybe you are looking for

  • I DON'T want to store any data on my MBA. I want to store all data or 90% of it on a NAS

    All I have is a 13inch Macbook Air mid2011 128gb flash storage. And the expertise from you guys able to reply to me * My goal is to set up a NAS ( how do I do this?)... as of writing I am intending to buy an airport express 802.11n. Will the airport

  • HOW TO LENGTHEN THE SHORT TEXT FIELD IN  PR-urgent

    dear friends, my client is asking to lengthen the field size of SHORT TEXT in purchase requisition. if they enter the long text, the characters are getting tranucated. can you please provide me good solution for this problem. who is handling this iss

  • Overwrite java parameters with environment variables or other mechanism???

    I am using several java programs on my machine. Each of them uses some deeply nested startup script so I have no chance to modify the parameters of the java command. I would need to change certain parameters though, e.g. the heap size or certain syst

  • Selection for data load

    hi friends, I have a datasource which contained 25 fields, in that 25 fields, we have selected only 4 fields as key fields.this datasource used in a ods and all are work fine..... so, it was moved into production.. now due to the data capacity in pro

  • Character.isLetter() error on compile

    Hi all. I'm trying to write a method that does a series of validations on the characters in a String. Here's my code:    import java.util.*;    import java.lang.*;     public class ScratchPad        public static void main(String args[])          Sca