Java EE Servers

Does Java EE Servers have specification for JAAS configuration ?

gimbal2 wrote:
well thats easy then: download the JEE spec and find out.
http://jcp.org/aboutJava/communityprocess/final/jsr316/index.html
Thanks for the link. I have visited that . There are 6 downloads . Which one you are talking about ?
Also, when I search 'JAAS' at the top left search JSR box , I get this
http://jcp.org/en/jsr/summary?id=JAAS
This looks JEE spec is silent about 'JAAS' ...what that could mean ? does that mean JAAS is optional ?

Similar Messages

  • Configure CRS2008 to using AD and Kerberos with Java application servers.

    Hi All,
    I have configure CRS2008 to using AD and Kerberos with Java application servers. Domain Controller is installed on W2K3 Server. In addition, CRS2008 is installed on another W2k3 Server.
    I have create service account in domain controller: CMSACC
    I have create two user account: CRuser1 and CRuser2
    I have create domain group: CRSGroup
    After I had run the setspn in domain controller,I got the message at below:
    Registered ServicePrincipalNames for CN=CMSACC, OU=TEST, DC=BD, DC=com:
        BOBJCentralMS/BDMGTSRV.BD.com
    CMC Setting:
    AD Administration Name: BD\administrator
    Default AD Domain: BD.com
    Add AD Group(Domain\Group): secWinAD:CN=CRSGroup,OU=TEST,D=BD,DC=com
    Service principal name:BOBJCentralMS/CMSACCatBD.com
    I have create a WINNT folder in root directory.Moreover and save bcsLognin.conf and Krb5.ini at here.
    bscLogin.conf:
    com.businessobjects.security.jgss.initiate {
    com.sun.security.auth.module.Krb5LoginModule required;
    krb5.ini:
    [libdefaults]
    default_realm = BD.com
    dns_lookup_kdc = true
    dns_lookup_realm = true
    [realms]
    forwardable = true
    BD.com = {
    default_domain = BD.com
    kdc = BDMGTSRV.BD.com
    I have tested the Kerberos,using kinit CMSACCatBD.com password, and got error message at below:
    Exception: krb_error 41 Message stream modified (41) Message stream modified
    KrbException: Message stream modified (41)
            at sun.security.krb5.KrbKdcRep.check(KrbKdcRep.java:53)
            at sun.security.krb5.KrbAsRep.<init>(KrbAsRep.java:96)
            at sun.security.krb5.KrbAsRep.getReply(KrbAsRep.java:486)
         at sun.security.krb5.KrbAsRep.getReply(KrbAsRep.java:444)
         at sun.security.krb5.internal.tools.Kinit.sendASRequest(Kinit.java:310)
         at sun.security.krb5.internal.tools.Kinit.<init>(Kinit.java:259)
         at sun.security.krb5.internal.tools.Kinit.main(Kinit.java:106)
    My problem is failed to logon CMC and infoview and got error message at below:
    Account Information Not Recognized: Active Directory Authentication failed to log you on. Please contact your system administrator to make sure you are a member of a valid mapped group and try again. If you are not a member of the default domain, enter your user name as UserNameatDNS_DomainName, and then try again.
    Actually, I am sucessful to logon Business View manager with CRuser1. However, I fail to logon CMC and infoview and got the above error. Have you any suggestion to solve this problem?
    Ken.

    if you can logon with client tools then that should be an indication that the service account running the CMS IS working! Good news.
    So the problem is likely with the java portion (krb5/bsclogin or java options)
    If the files are in c:\winnt\ (if not copy them there) and perform c:\program files\business objects\javasdk\bin\kinit username
    then enter and password/enter again
    Probably get the same message. To note in your krb5.ini all domain info must be in CAPS (the .com appears to be in lower case)
    kinit works with just the krb5.ini, java SDK and AD (removing BO config and the service account from the picture). Once that works if your java options are specified properly you should be able to login to CMC/infoview.
    also 1 last point. Add udp_preference_limit = 1 to the krb5 lib defaults section
    libdefaults
    default_realm = BD.com
    dns_lookup_kdc = true
    dns_lookup_realm = true
    udp_preference_limit = 1
    Regards,
    Tim

  • DotNET Admin server, Java Portal Servers

    We are to work for a customer who has a DotNet installation of ALUI Admin server running on an IIS host and the java versions of other portal components running on WebLogic.
    Admin Server: Windows OS, IIS Server
    Portal servers, Publisher, etc: RHE Linux, WebLogic Server
    I was surprised to see this but everything works fine. Is this configuration a supported one? Anyone has worked on such a setup? How we can go about for an upgrade in such a environment? The immediate problem we have at hand is to upgrade the ALUI version from 6.1MP1 to 6.5MP1. I believe I have to upgrade the admin and the portal servers separately. Appreciate any advices or recommendations :)

    Thank you for that clarification.
    So how does one go about upgrades of a portal deployment spread over different boxes (Dot Net or Java)? For e.g., if the portal components like Admin server, portal servers, documentary repository, automation service, search services, etc. are running on different machines. Do we run installers separately for each of those or could a single installer run(for upgrade) be used for all?
    Among other things, a Windows installation of portal supports MS SQL Server DB whereas a Linux installation doesnt. So if the admin server is running in Windows (IIS) and portal server in Linux (Weblogic), could we use MS SQL server as the DB. Will such a deployment have any vulnerabilities / incombatibilities on upgrade?

  • Java Chat Servers???

    I hope this isn't an inappropriate query for this forum. I'm looking for a Java Chat Server and was told that Sun/Java provides a free, open source implementation but haven't been able to find it. I've also looked at some of the commercial offerings such as Volano and RealChat. Would anyone like to offer advice on the best options?
    Thanks for any help.

    I've coded my own very basic version but it would be
    much cheaper for my company to buy one than to try
    and do a full-blown, commercial-grade, fully
    de-bugged implementation from scratch or demos, for
    me at least ;-)I'm sure it would be cheaper. I'm sure that chat servers are extremely common, too. By the way, where does Java come into your picture? I don't see any benefit to having a chat server that happened to be written in Java.

  • How can vendors still sell Java application servers ?

    Hi,
    Please correct me if i am wrong. I understand that we can deploy Sun Application Server Platform Edition for free in production.
    If so, why would anyone still pay for Websphere or weblogic ? We are currently using weblogic and there are pressures to move to Sun AS. Is there anything that we are missing here ?
    Appreciate any advise.

    Yes, we have clustering and high availability support in both Glassfish and our SUN Application Server product. You can find more information here :
    http://www.sun.com/software/products/appsrvr/index.xml
    http://www.glassfishwiki.org/gfwiki/Wiki.jsp?page=GlassFishV2Architecture
    --ken                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               

  • Windows 2003: JAVA does not recognize 8 GB, Why?

    Hello Folks,
    We have a windows 2003 (32 bit) HP server with quad processor with 8 gb ram. we were creating multiple java app servers with 1024MB heap on each server. We were able to create three java servers and fourth one is giving error message saying that there is not enough memory even though there is 8GB of physical memory. We did set the /PAE option. Java version 1.4.2_08.
    What is the maximum memory that JAVA would recognize? (I am not talking about heap memory)
    Are there any windows or JAVA setting that I have to do to make all the 8 GB memory recognized by the JAVA?
    Thanks
    Steve

    Don't use the /3GB switch you'll start getting in to trouble with memory performance and blue screens. Unless you have a specific need that the /3GB solves for you don't go for the general opinion that the /3GB together with Enterprise will solve your problems. It doesn't realy give you more memory, Microsoft together with Intel / AMD are just doing fancy foot work with the memory. Applicatoins like MS SQL and other sepcific apps. can benifit using this /3GB but most apps won't benefit. And even if your server don't blue screen you can still only utilize 3 GB of memory to an app isntead of 2 GB memory and your machine will suffer on other parts. Since your pushing memory from the OS up to the apps the OS will have less place and will run out of memory faster and will get more instable. My recommendation would be to go for W2K3 x64 version.
    /Fredrik

  • CE Installation Vs AS Java on PI7.1 ??

    We want to use NW BPM & BRM Capabilities. I understand that these capabilities come with CE7.1 & CE7.1 is AS Java 7.1.
    PI7.1 has also AS JAva 7.1. Hence can i use PI's AS Java server to run my BPM or would the rumtime compain anything like about missing .sda's or runtime not for BPM/BRM not available??  I used to develop & deploy Java WD apps  to PI server & they always ran perfect... No complains...
    What additional components should i deploy on AS Java 7.1 to make it run NW-BPM/BRM scenario's..  We just don't want to have too many AS Java App servers in our SANDBOX landscape.
    -Siva Maranani

    I have found anwer to my Question... Plain AS Java Dosen't come with "Additional Capabilities" that are provided by CE Environment... "CE Installation Master Guide" - Pages 8-10 have the answer to the above Question...
    Also BPM/BRM capabilities are provided as part of CE 7.1 EhP1 or CE 7.1.1...
    -Siva Maranani

  • Java Apps don't start automaticaly after system restart

    Hi,
    Since a few days ago when restarting Java application servers of SAP
    Portal, the applications deployed don't start for itselfs.
    When starting the instance, the memory stops to increase at 500mb. The
    only way to start the applications is by the manual way in:
    Server -> Services -> Deploy -> Runtime -> Application -> Start
    Application.
    After starting the applications manually the instance starts fine.
    I already increased some values in global configuration:
    From:
    InitialThreadCount = 40
    MaxThreadCount = 150
    MinThreadCount = 40
    To:
    InitialThreadCount = 80
    MaxThreadCount = 200
    MinThreadCount = 80
    After the restart the applications are not starting automaticaly yet.
    I have 4 instances. The first two instances are starting fine, but the problem is happening with the other 2 instances.
    Is there any reason for this type of behavior?
    Thanks for the help
    Pedro Nunes

    Hello Vyara,
    thanks for your reply.
    This kind of problem happens since 3 weeks ago and the stack of this system (SP09) remain unchangeble since 07.04.2008.
    The strange behavior is that the Server 1 and 2 are starting all the apps fine, but this problem is only happens in server 3 and 4.
    Can you help please?
    Thanks

  • Looking up EJBs from a java client

    While trying to migrate my application from standalone-oc4j
    to Oracle Application Server 10g, I ran into the following problem.
    My application has a stateless session bean. When trying to lookup the bean (from a java client), I get the following exception:
    javax.naming.NamingException: Lookup error: javax.naming.AuthenticationException
    Invalid username/password for UnifyoccEAR (ias_admin)
    My code used the username/password I used to log into web-based console (which I used to deploy the application). The lookup code follows:
    Hashtable env = new Hashtable();
    env.put(Context.INITIAL_CONTEXT_FACTORY,
    OracleJASLayer.INITIAL_CONTEXT_FACTORY);
    env.put(Context.PROVIDER_URL, "ormi://localhost:3201/UnifyoccEAR");
    env.put(Context.SECURITY_AUTHENTICATION, "simple");
    env.put(Context.SECURITY_PRINCIPAL, username);
    env.put(Context.SECURITY_CREDENTIALS, password);
    Context ctx = new InitialContext(env);
    Object obj = ctx.lookup("unify/nxj/controlCenters/occ/ControlCenterEJB");
    On a whim, I tried the old SCOTT/TIGER username/password and got the following
    exception:
    javax.naming.NoPermissionException: Not allowed to look up unify/nxj/controlCenters/occ/ControlCenterEJB,
    check the namespace-access tag setting in orion-application.xml for details
    So evidently, SCOTT/TIGER is in the security database used by the app (but isn't
    authorized) while the ias_admin user is not in the security database.
    I have the following questions:
    1. In the default configuration, is there a username/password I can use to
    lookup EJB homes in the jndi namespace of an OC4J instance? If so, what
    is it?
    2. Where is the security database? I tried looking in the web-based console
    to find how to configure security and could not figure it out. I did find
    the Security page for the application, but when I tried to add a user,
    it had no effect. Furthermore, this page did not show a user entry for
    SCOTT; hence, it doesn't seem that OC4J is actually using the information
    on this page. This is strange because the path to this page is:
    Farm > Application Server: ias_admin.lab10.sac.unify.com > OC4J: home > Application: UnifyoccEAR > Security
    I then went to the Security page for the default application and found
    that it did have a SCOTT user. So I added a new user and tried to run
    my java client. This resulted in the javax.naming.AuthenticationException
    described above (I was expected the NoPermissionException encounted when
    using SCOTT/TIGER). Next, I used the Security page for the default application
    to change the password for SCOTT and reran my java client using SCOTT/TIGER.
    This time I was expecting an AuthenticationException exception, but got the
    NoPermission exception. Therefore, it seems that OC4J isn't using this
    security data either.
    Hunting in the console (again) for the security database, I stumble accross
    the Infrasturcture page and see an Identity Management section and see that
    it is configure to use an Oracle Internet Directory server. Using
    <ORACLE_HOME>/bin/oidadmin, I connect to the directory server and look
    for the SCOTT user. I don't find it, so I believe that this can't be the
    security database either.
    3. Finally, how do I configure the OC4J instance such that it will allow
    anonymous users to lookup my EJB from a java client?
    Please help a confused and frustrated user.

    Looking at your example, it looks like you are using a J2EE client container or some properties file to specify the JNDI environment used to create the initial context (for you use the no-arg constructor to InitialContext). Since our application needs to the ability to dynamically connect to ejb's running on different Java application servers (e.g., WebLogic, WebSphere, JBoss), such an approach will not work. Instead we must do it the old-fashioned way and pass the jdni connection info to the InitialContext constructor.
    In any event, our problem isn't how to write the connection code, it is how to test it. Specifically, we can't figure out a valid username/password that will allow us to look up the home. Nor can we figure out how to configure security for the oc4j instance.

  • Unable to deploy BI java components

    I am trying to deploy BI components on WAS-java. I get following error when trying to deploy files. Any clue?
    Its using space in path between SAP and AG(/BI_MMR/SAP AG/1000.xxx). We are on Solaris. Any suggestions?
    Info: Loading archive '/Install_CD/Components1/DVD_NW_04_SR1_NetWeaver_Component
    s/BW/BW-UDI/OFFLINE/BIMMR09_0.sca'
    Error: Caught IOException while copying file to target location: java.io.FileNot
    FoundException: /usr/sap/EP1/JC00/SDM/root/origin_sc/sap.com/BI_MMR/SAP AG/1000.
    350.0.9.0.20041026073434/BIMMR09_0.sca (No such file or directory)
    Error: java.io.FileNotFoundException: /usr/sap/EP1/JC00/SDM/root/origin_sc/sap.com/BI_MMR/SAP AG/1000.350.0.9.0. 20041026073434/BIMMR09_0.sca (No such file or directory)
    Error: Error while loading selected archives.
    Message was edited by: RG
    Message was edited by: RG

    As well as the other doc on http://www.oracle.com/technetwork/middleware/bi-foundation/documentation/bi-pub-096318.html
    Oracle® Business Intelligence PublisherCertification Information
    10g Release 3 (10.1.3.4.1)
    E12692-06
    Table 1 lists the Oracle Business Intelligence Publisher support information for the components required to run the BI Publisher server.
    In general, Oracle Business Intelligence Publisher server can be run in any J2EE application server that supports Java 5.0 (JDK 1.5) or Java 6.0 (JDK 1.6). Java application servers support a wide range of operating systems, processors and bus architectures. Please refer to the support and certification documentation of the J2EE application server vendor to determine which platforms and processor architectures are supported.

  • SAP NW 7.0 AS JAVA Application Server Installation in DMZ : Win 2008 SR2

    Dear Experts,
    We are installing two AS JAVA application servers in DMZ (XYZ domain) and the central instance is running outside DMZ (ABC domain). While trying to give the profile path of the CI, in the application server installation, it says that the path cannot be found. We have opened the following ports 54200,54201,54204,54218,54230,3342,3641,3310,3610,8010,8011, and 25.  The installation inside DMZ is run with a user which is part of local administration group. The DB (SQL 2008R2)is running on a different host in a distributed setup.
    Could  someone please let us know if any other port needs to be open to allow communication between the central instance and application server?
    Help is appreciated.
    KP

    If FileSharing disabled, Firewal is open, unable to do ping test. How does the poor App server can access the Path from CI ?
    Please request your network team to open firewal between CI and APP server otherwise, even if you install you might get other below access problems
    1). user's in App server can't update CI
    2). Jobs in App server might run as expected.
    etc...

  • Using Sun Java Web Server 2.0 for XSQL

    In the documentation for XSQL, a number of Java Web servers are described but not Sun java web server. I need to know the configuration for Sun java web server 2.0 for running XSQL.
    null

    This is not enough information to be useful.

  • Sun Java Directory Server 6.3 supports nCipher HSM?

    Hi,
    We want to do the replication in Master - Master configuration on SSL. Does anyone has an idea whether it is possible to store the SSL Certificate Keys used for replication in nCipher netHSM.
    If yes, can anyone provide us the URL on how can it be done or how to go about it?
    Thanks and Regards

    Hi,
    Thanks for the reply. The URL that you mentioned has "Sun Java System Web Server" integration with nCipher HSM.
    We have a requirement where we want to do replication between two "Sun Java Directory Servers" on SSL and the keys used are in HSM. We are not using Web Servers in our setup.
    If you have any info on integration with Directory Servers, it would be of great help.
    Thanks and Regards.

  • Extend Domain to include BPM -- Enterprise manager crashes Java binary

    Hello,
    I thought I would share a rather puzzling issue.  I have been working with a Soa Suite Domain for quite some time now, and have it configured with a java email servers, JMS, Db Adapters, and I wanted to extend this domain so I backed it up and extended it to include BPM.  Later when opening EM, I would suddenly get a message saying that the Java SE Binary had stopped working.
    There are very few mentions on the net for weblogic, this one being the only one I could find JAVA (TM) Platform SE Binary Stopped Working on SOA Enterprise manager
    In my case, it turns out that I had an email server that was using one version of java, while the domain was working on the java version in the installation directory.  I went to the control panel, system, environmental variables and took the path of the java that the email server was using, and entered in the java version of the weblogic domain.  No problems so far....
    Stuart

    Looks like you have conflict with your java home and you are running 2 different JREs. Keep the latest and try launching EM console again and post the exception if you get any.
    Thanks,
    Vijay

  • Passing Arguments/Properties File to SUN JAVA ONE WEBSERVER at startup

    We are porting a Java App currently running on an Orion Web Server to Sun Java One Web Sever.
    We have found that with the various java application servers we've used over the years, that each want to find the properties file in a different spot. They way we've got around this is that we start Orion with a -D option to java to set a system property called cdsProps. Example: java -DcdsProps=Path_to_properties_file. We then reference that cdsProps arugment throughout the java code so it knows where to find the properties file. Because the cdsProps argument is used thoughout the java code, if the -D option is not used when starting the webserver to point to the properties file, the website will not function properly.

    in the case above, the command line arguments are passed in the aaaaaaaaaaaaaaaaaaaaaaarggggggggggs array
    you probably want aaaaaaaaaaaaaaaaaaaaaaarggggggggggs[0] for the filenameAm not sure i understand, do you mean i must change the param of the main method to String[] args[0] as this resulted in error when i did so. Or do you mean at command line instead file simply being passed to the Compressor program as
    "java Compressor < examplefilename"
    It has to be "java Compressor < examplefilename[0]" ?
    If you could expand on this, would be grateful,
    Thanks.

Maybe you are looking for