Issue with normal page link redirecting to SSO page / forbidden page

Hi,
I am having an issue with a number of pages within my portal.
I have a 'List of Objects' that has been working for some time, each link in the list linked to another page.
Just lately a number of pages that are linked to within this list are not loading correctly.
When one of the items is selected, the correct page is initially displayed, but then after a couple of seconds the page is redirected to the 'Single Sign-On' page, or alternatively the page is redirected to a 'Forbidden' page with this error:
Forbidden
You don't have permission to access /pls/orasso/orasso.wwsso_app_admin.ls_login on this server.
(This page will also show up after the user tries to login when the page is redirected to the SSO page).
As well as this issue occuring at the front end, the same issue is happening when the pages are loaded from the back end, in the Navigator.
This issue is even happening when the page is opened up in 'edit' mode using the ORCLADMIN user.
Any help is greatly appreciated!!
Amanda.

Figured it out...

Similar Messages

Issues with using relative links in Captivate 8

Is anyone else having issues with using relative links in Captivate 8? These links all used to work in the previous version of Captivate. And I could have sworn this was fixed already once in Captivate 8 but it's popping up again for us. Here is the situation... We have courses that are made up of multiple lessons which as separate Captivate files. Within those lessons are buttons to link to external documents (which live in a shared document folder), demonstrations, etc. We use relative links because we post these to our amazon servers and we also sell them to clients where they can post them on their own web servers or in their LMS. SO we can't put in full paths for the links or we'd have to change them constantly. So an example is that the link for a button might be "../Document/nameofdoc.pdf" This would be going to a user guide or something that is posted in the "Document" folder that lives at the same level as the lesson's folder. But now, all of the sudden, none of our bazillion links is working. And I've tried buttons, hyperlinks, and even the old click box. Nothing works with relative links. And I did check the permissions on every file and folder on our Amazon server to verify nothing changed there as well. Any suggestions?

I have the same issue with relative links using Captivate 8. I am trying to load Captivate modules into an LMS using relative links to document files within the LMS. The links work fine during a site page test so not an issue in the LMS, but from the Captivate module they aren't working....
Help?

Issue with Open Enrolment Link in ESS - Benefits

Hi Experts,
We are facing two issues with open Enrolment Link in ESS for benefits, Need your help in resolving this. Please find the details below :
1. Benefits cost is not appearing in open enrolment Screen
Details : Monthly Contribution cost is not appearing against the Benefits Plan for which employees are already enrolled in Open Enrolment Screen, Because of this employees are not able see previous contribution before deciding on contribution amount for next Financial Year.
2. URL for Benefits plan Gets disappeared in Open enrolment Screen
Details : When Contribution is removed for any Benefits Plan the corresponding URL link disappears, But this comes up when the page is refreshed.
Could you please let us know if this is related to missing configuration or Java webdynpro code.
Our Live system is ECC6.0 SP level A4 , Please let me know if you need more details.Looking forward for your response.
Regards,
Shilpa

In regards to your first question, it could be a date issue for the infotype record. If the records for open enrollment are set to be effective for a future date, and the current record is delimited, then you won't see it in the open enrollment screen. This is true for benefits like a flex account because they have to be re-elected every plan year.
Let's say that any elections made in the current open enrollment period you are in take effect June 1, 2014. If the current record has an end date before June 1, then in the enrollment screen the employee will not see the current record because SAP is looking at June 1.
Take a look at the employee's record and at the benefit you want them to see and see what the end date is for the most recent record.

Issues with using the output redirection character with newer NXOS versions?

Has anyone seen any issues with using the output redirection character with newer NXOS versions?
Am receiving "Error 0x40870004 while copying."
Simply copying a file from bootflash to tftp is ok.
This occurs for both 3CDaemon and Tftpd32 softwares.
Have tried it on multiple switches - same issue.
Any known bugs?
thanks!
The following is an example of bad (NXOS4.1.1b) and good (SANOS3.2.1a)
MDS2# sho ver | inc system
system:    version 4.1(1b)
system image file is:    bootflash:///m9200-s2ek9-mz.4.1.1b.bin
system compile time:     10/7/2008 13:00:00 [10/11/2008 09:52:55]
MDS2# sh int br > tftp://10.73.54.194
Trying to connect to tftp server......
Connection to server Established. Copying Started.....
TFTP put operation failed:Access violation
Error 0x40870004 while copying tftp://10.73.54.194/
MDS2# copy bootflash:cpu_logfile tftp://10.73.54.194
Trying to connect to tftp server......
Connection to server Established. Copying Started.....
|
TFTP put operation was successful
MDS2#
ck-ci9216-001# sho ver | inc system
system:    version 3.2(1a)
system image file is:    bootflash:/m9200-ek9-mz.3.2.1a.bin
system compile time:     9/25/2007 18:00:00 [10/06/2007 06:46:51]
ck-ci9216-001# sh int br > tftp://10.73.54.194
Trying to connect to tftp server......
|
TFTP put operation was successful

Please check with new version of TFTPD 32 server. The error may be due to older version of TFPT server, the new version available solved this error. Files are getting uploaded with no issues.
1. Download tftpd32b.zip from:
http://tftpd32.jounin.net/tftpd32_download.html
2. Copy the tftpd32b.zip file into an empty directory and extract it.
3. Copy the file you want to transver into the directory containing tftpd32.exe.
4. Run tftpd32.exe from that directory. The "Base Directory" field should show the path to the directory containing the file you want to transfer.
At this point, the tftpserver is ready to begin serving files. As devices request files, the main tftpd32 window will log the requests.
Best Regards...

Hi have the ipod touch and having issue with the reminders app. do not have the reminders page just the completed page

hi have the ipod touch and having issue with the reminders app. do not have the reminders page just the completed page

The problem has been fixed with the most recent OS X software update.

Why is it, when I first launch Firefox, I click on a link I get a "sorry, Forbidden" page. I go back and then the link opens ok.

Why is it, when I first launch Firefox, I click on a link I get a "Sorry, forbidden" page. I go back and then the link opens ok.

I think once I did not even see the page in my history

How do I make a bookmark or page link go to top of the page?

How do I make a bookmark or page link go to top of the page instead of the text that had served for the bookmark, such as a title?

change where and how? Used to be able to do that in Acrobat, seems there used to be a list of links and one could change the action, but can't find that any place now.

Having issues with .fdf's linking to the document they were creating from in reader 9.1

I run adobe reader in a citrix enviroment. presentation server 4.0 windows 2003 SP1. We have alot of PDF forms on our file server and what users do is open up one type in the data and then click on submit at the top of the PDF then they email the .fdf that is created either to themselves or someone else on the network (this still functions in 9.1). When using AR7.0 and a user would double click on the .fdf it would automatically put the data in the form it was created from but with 9.1 it doesnt, it opens up explorer and wants you to navigate to the appropiate .PDF to insert the .fdf into. I have 3 citrix servers and I have only upgraded 1 to 9.1 for testing. If the .fdf is created in AR 7.0 it will link to the .pdf if you open the .fdf in either 7.0 or 9.1. But if the .fdf is created using 9.1 it wont link the document in either AR 7.0 or 9.1.
Any suggestions would be greatly apreciated
Thanks

Have you had any luck with this yet we are having the same issue with this it seems to be the first page only on our issue, we are printing 8.5x18 and it just recognizes the document as 8.5x11, works fine from reader 8.x

Issues with cross-site CAS redirect of OWA users

Hi,
I am having an issue with our CAS servers, possibly since upgrading to SP3 (I am not 100% if the upgrade caused it). We are currently on Exchange 2010 SP3 RU4.
I have tested logging into OWA on each CAS server with a mailbox from the same site as the CAS, and it works fine.
But if I am using a mailbox from the opposing site, I get this scenario:
1. User reaches site 1 CAS server
2. User logs into site 1 CAS server with a site 2 mailbox
3. Site 1 CAS server redirects the user to another form authentication on a site 2 CAS with this URL:
https://Site2CAS.domain.com/owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fSite2CAS.domain.com%2fowa%2fping.owa
4. User again fills out the form to log in
5. User gets a blank page with this URL:
https://Site2CAS.domain.com/owa/ping.owa
The workaround is that the user then can get their inbox page to load by deleting out the "ping.owa" from the URL. But obviously this is not the intended user experience.
The redirect would apparently work fine if it wasn't for the addition of this "ping.owa" to the URL. Although I would prefer the user only have to fill the forms authentication out once, the main problem is the blank page.
Thanks

Rule of the GAME
For scenario:
CAS Array in Internet Facing AD Site and CAS Array in non Internet facing AD site
It will be CAS Proxy and NOT Redirection
TO force exchange to use Redirection only, set external URL in non Internet facing site CAS as $Null
Internet Facing Site
Internal URL= CAS NLB internal FQDN for that site CAS Array
External URL= CAS NLB Alias published in external DNS
Authentication= Form Based with Basic Auth
Non Internet Facing Site
Internal URL= CAS NLB internal FQDN for that site CAS array
External URL= Null
Authentication= NON Form Based (Integrated Windows Auth)
Thats All
Understanding Proxying and Redirection
http://technet.microsoft.com/en-us/library/bb310763(v=exchg.141).aspx
Thanks,
Soumen
Soumen Ghosh

VLAN Spanning-tree (VSTP) issue with Metro-E links

Hi Everyone,
We have Juniper EX 4200 as core switch at two sites connected Cisco 2960s and Cisco 3560s (access layer switches). For even-numbered VLANs, one Juniper switch is root bridge and for odd-numbered VLANs, other Juniper switch is the root bridge.
We have Cox and Verizon Metro-E links connecting core switches (Juniper EX 4200 at both sites).
I want to do VLAN load sharing using VSTP but somehow it is not working as expected. I want to pass some VLANs through COX and some through Verizon. When there is any issue with Cox, all VLAN traffic pass through Verizon and vice-versa. RSTP is also enabled on both Juniper switches.
I see MAC flapping in log messages on all Cisco access layer switches when I bring up both Metro-E links together. When only Cox is connected, everything works fine. When only Verizon is connected, everything works fine. But when BOTH COX and Verizon are connected, network gets disrupt and I see MAC flapping on all Cisco switches. All cisco switches are running PVST.
Anybody knows what is happening and why VSTP is not working when both COX and VERIZON Metro-E links are active ?

Hi Tojackson, I guess this depends on how stuff is interconnecting. It's obvious gi1/1 is forwarding and gi1/2 is blocking. So from the furthest access switch, what path must it take to reach gi1/1? That is the number of hops involved for normal traffic.
Now, if you're concerned about a specific VLAN and you need gi1/2 forwarding to reduce travel time for other traffic, you may employ RPVST to have that specific VLAN and cost to go to gi1/2.
In some part of the network I support we have a pair of Cisco 7606 which feeds in to a 4507R and off the 4507R we have a ring of 2955 with even 10-12 L2 switches on the ring. The consequence of multiple layer 2 hops is not of much concern and our spanning tree stops with the 4507 since we're not concerned about broadcast storm on the routed interfaces on the 7600.
-Tom
Please mark answered for helpful posts

Issue with parallel operation of SAP NW SSO 2.0 and SNC Client Encryption (Logon Groups)

Hi!
One of our customers is using the SNC Client Encryption solution to ensure encryption using SNC (based on Kerberos Technology) for their SAP GUI Dialog connections. They have lots of SAP backends DEV, QAS, PRD all with the SNC Client Encryption SNC Lib installed. The profile parameter snc/identity/as contains the following value: p:CN=SAP/<ServiceAccount>@<DOMAIN>.
Example: p:CN=SAP/[email protected]
The customer is using one AD Service Account "SNCServiceUser" with one registered SPN "SAP/SNCServiceUser" for all systems (yes, this is not recommended... but the case).
Important: All users use group entries in the SAP Logon (saplogin.ini). Means, for SAP logon the SNC name can not be manually configured on the SAP Front End. With group logons, the application server's SNC name is dynamically requested by the message server each time a SAP GUI connection is started. The SNC Name is greyed out in this case as dynamically obtained from the applications servers profile parameter snc/identity/as.
Now our customer implements SAP NetWeaver Single Sign-On 2.0 within his landscape. Based on the Secure Login Server 2.0 (SP3) he likes to use X.509 based authentication to his AS ABAP backends using SAP GUI SNC while others still use SNC Client Encryption.
Replacing the SNC Library on the AS ABAP
The Secure Login Library 2.0 (SP3) has been installed on one of the ABAP systems and the SNC Client Encryption SNC Library (which is based on SSO 1.0) is no longer used, thus we changed the parameter snc/gssapi_lib to point to the new SNC library. We removed the old PSE.ZIP containing the keytab and created the new SAPSNCSKERB.PSE incl. the keytab and proper credentials. To ensure parallel operation, we kept the snc/identity/as value as is = p:CN=SAP/[email protected].
After restarting the system with initialized Secure Login Library 2.0, still the SNC client encryption works fine for existing users.
The problem
We created on the Secure Login Server an SNC certificate for the AS ABAP which has the following X.509 Distinguised Name Fomat: CN=SAP/[email protected] This is to avoid having to change the snc/identity/as to an "real" X.509 DN which would lead to non-working SNC Client Encryption for all the other users using SAP GUI and logon groups.
As soon as we install the PSE via STRUST on the system the SNC Client Encryption solution stops working with error „Server refuses kerberos key exchange“.
As part of an pilot implementation we have installed Secure Login Client 2.0 (SP3) on some test PCs. The test PC with SLC is able to perform Single Sign-On with SNC based on X.509 (incl. Encryption) to the ABAP system.
Seems the SAP System now only tries to do X.509 based authentication thus key exchange fails. The problem is, we cannot change the snc/identity/as value because of the logon groups. If we were able to do so, we would in any case set the server identity to X.509 DN and in addition create the SAPSNCSKERB.PSE incl. keytab. This should work, as confirmed by SAP see this post.
Any ideas how to solve this and have both solutions in parallel?
Appreciate any help.
Regards,
Carsten

Hi all,
we was able to fix the issue. It was an issue with the customers cluster configuration and the $SECUDIR variable. This tricky issue leads to non working or sporadic working SNC Client Encryption...
This was how the configuration looks before:
Environment variable $SECUDIR is defined:
"/ABCDEF<SID>/usr/sap/<SID>/DVEBMGSxx/sec“
sapgenpse seclogin -l -v
running seclogin with USER="<SID>adm"
Credentials for username '<SID>adm':
0 (LPS:OFF):
         (LPS:OFF): /ABCDEF<SID>/usr/sap/<SID>/DVEBMGSxx/sec/SAPSNCSKERB.pse
1 (LPS:OFF):
         (LPS:OFF): /usr/sap/<SID>/DVEBMGSxx/sec/SAPSNCS.pse
After changing the $SECUDIR to "/usr/sap/<SID>/DVEBMGSxx/sec“ and re-creating the credentials, it worked like a charm.
As a result of this we can confirm, this configuration and SNC Client Encryption works with CommonCryptoLib in parallel to the SSO configuration.
And Valerie was right with 2. SLC starting from V. 1.0 SP2 PL3 was able to convert the CN= part of the SNC Name into an SPN, was my mistake. In addition SNC Client Encryption starting from Version 1 SP1 PL1 does this also.. just to make this clear
Thread closed hope this helps someone
Carsten

Any known issues with SQL DB Link Synonyms joining on encrypted columns

Are there any known issues with accessing encrypted columns via a database link that is masked by a synonym?
We are experiencing unexpected results when the encrypted column is anti-joined through a not exists, to a local encrypted column of the same datatype The encrypted columns are person ids. If the expected person id is hard coded, the results return correctly. The local database is 10.2.0.4.0 and the link is to a 10.2.0.3.0 RAC.
Both enrollments and person_ids, below, are synonyms to the linked tables.
... From table_1 d
where ...
AND NOT EXISTS (SELECT 1
FROM enrollments x,
person_ids p
WHERE x.person_demo = p.person_demo
AND x.rept_inst = d.rept_inst
AND x.demo_time_frame = d.term_deg_grant
AND p.person_id_encrypted = '999999999')
vs.
... From table_1 d
where ...
AND NOT EXISTS (SELECT 1
FROM enrollments x,
person_ids p
WHERE x.person_demo = p.person_demo
AND x.rept_inst = d.rept_inst
AND x.demo_time_frame = d.term_deg_grant
AND p.person_id_encrypted = d.person_id_encrypted)

milazzo74 wrote:
I am having the same problem...
http://www.milazzo.com.br/teste/projetos.php
It works fine in Firefox but loads forever in explorer 8...
The cause of the problem is not the same.
In your case it takes forever to load the thumbnails from flickr.com; the SpryDataSets without the loading of the thumbnails works as expected.
Remember that ALL of the thumbnails for each 60 odd projects are downloaded from flickr, that is about 1800 thumbnails.
Gramps

How do you fix the issues with the OS X mountain lion? Screen freezes pages just swipe on own

Having issues with the lion operating system

Please read this whole message before doing anything.
This procedure is a diagnostic test. It’s unlikely to solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.
The purpose of the test is to determine whether the problem is caused by third-party software that loads automatically at startup or login, by a peripheral device, or by corruption of certain system caches.
Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards. Boot in safe mode and log in to the account with the problem. Note: If FileVault is enabled on some models, or if a firmware password is set, or if the boot volume is a software RAID, you can’t do this. Ask for further instructions.
Safe mode is much slower to boot and run than normal, and some things won’t work at all, including sound output and Wi-Fi on certain models. The next normal boot may also be somewhat slow.
The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin. Test while in safe mode. Same problem? After testing, reboot as usual (i.e., not in safe mode) and verify that you still have the problem. Post the results of the test.

I have Google set to show results in a new window. When I click on a results page link Firefox reverts to search results page almost instantly

I have Google set to show results in a new window, never use Google instant & search filtering off. When I click on a link on the results page Firefox reverts to the search results page almost instantly. I can of course select the desired page (via windows Aero). This happens on several computers, PCs & Laptops.
Not a major problem but VERY irritating. This seems to have happened from a few update ago ?

This can be caused by corrupted cookies or cookies that aren't send or otherwise blocked.
Clear the cache and the cookies from sites that cause problems.
"Clear the Cache":
*Tools > Options > Advanced > Network > Cached Web Content: "Clear Now"
"Remove Cookies" from sites causing problems:
*Tools > Options > Privacy > Cookies: "Show Cookies"
*http://kb.mozillazine.org/Cookies

Issue with broken navigation when implementing a SSO filter

Hello
I'm facing an issue when integrating the Jasig CAS SSO with Siebel Self-Service (which is an Oracle ADF application). When applying the CAS Authentication Filters, the navigation rules and page flows in the Self-Service application cease to work.
The Siebel Self-Service application is using adfFaces filter, adfBindings filter and the SelfServiceFilter as controllers for the pages.
For the integration with the Jasig CAS, a client lib is installed in the Self-Service OC4J. This CAS Client provides an "Authentication Filter" that is defined in the web.xml. The pages in Self-Service that are to be protected by this authentication filter (the pages that needs user authentication in order to be accessed) are also mapped in the web.xml. This authentication filter checks the user against the CAS Server and sends back a ticket parameter with the URL if the user is logged in. This parameter is used to validate the login attempt, and on successful validation, the CAS server provides the username of the user to a bean called by the SelfServiceFilter in the Self-Service app.
My problem is that any JSF navigation on a page (navigation rules and page flows) cease to work as soon as a page is protected by the Authentication filter. One example would be during the check out process (which consists of several steps - several jspx pages). When you click “Next” on the first check out step, you are not redirected to step no 2, but to the same check out page as you started on.
Since the Authentication Filter protects all the pages involved, it will intercept any request to these pages, fetch the request URL, redirect to the CAS server for user authentication, and on successful authentication it will redirect the user back to the URL that was fetched by the Authentication Filter in the first place.
I have been looking into this, and I think that the JSF navigation rules etc, cease to work because the JSF page flows are being interrupted. When clicking “next” the page would normally post information to the life cycle of the requested page (which in some cases in this app, is also a postback to the same page). This information is then used when going through the life cycle of the new page. But when the CAS Authentication Filter intercepts the request, send the user to the CAS server and then redirect back to the page, this page life cycle is interrupted, or the necessary data is not attached in this “new” request.
Does anyone have an idea for how I can solve this issue?
Thanks!
Jonte

Hi,
JSF pages use a postback navigation model. The filter works as expected but performs a redirect to the request page, which in the case of postback is the current page you see. To change this, you need to change the navigation cases to perform "redirect" navigation itself. Its ot an ADF Faces problem but default JSF behavior
Frank

Issue with normal page link redirecting to SSO page / forbidden page

Similar Messages

Maybe you are looking for