Limitation on principal name length due to propagation?

Is there a limitation on the java.security.Principal name length due to the underlying
implementation of the security context propagation, even though it is a java.lang.String?
Thanks,
Guillaume Bedard

Similar Messages

Limits on clip name lengths on log and import?

Hi,
I just arrived back from vacation where I had shot quite a number of AVCHD files on my Sony HDR-SR12E (all in the same quality and resolution), plugged in the camera to my Mac, launched FCE, started the Log and Import and proceeded to name each of the clips in the queue something that I could use to easily identify them.
I came back after letting the queue import for a while and noticed that some of the clips were failing to import and hovering the cursor over the queue status flag simply popped up with 'Error: Unknown'.
I repeated the import on some of the small filler clips and it seemed to fail right at the end.
I then removed the clips from the queue, shortened the name and added them to the queue and so far they all seem to be importing correctly.
I didn't have any punctuation characters in the name, sure some had a few spaces but no more than any of the others.
Does anyone know of any naming limitations when importing like this..?
Regards,
-Andy

I didn't have any punctuation characters in the name, sure some had a few spaces but no more >than any of the others.
When naming files as you mention punctuation characters are best avoided.
Also parentheses, brackets, quotation marks and operators.
Spaces can cause trouble and the underscore (_) is a better option than a space.
I suspect one of the above characters to be at the bottom of your file naming drama.
Al

My Logic file name length changed

For some reason, Logic started limiting my file name lengths to 31 characters. This was never an issue before. I could always use much longer names. About a week ago, for no apparent reason, it started limiting the length and truncating the names to only 31 characters. Anyone know if this is a bug or is there a setting somewhere that i don't know about. I'm on OSX 10.6.8. There is no problem with creating long file names outside of Logic 9.0.0

This has always been so in Logic. It never suddenly "started"...
But it was fixed in version 9.1.0, which came out
almost three years ago
and is a free update for every LP 9 owner...
You really should update, there's no reason not to. If you're on a PPC (G4 or G5), you can only go to 9.0.2 (still worth it), if on an Intel Mac (2006 and later), you can go to 9.1.8; this will improve things for you, and also end the 31 charachter limit, which was an atavism.

Font name length limitation...

Hello all,
I have a serious problem related with .PFB font files. Is there any relation between font name length; I checked and if font name length is more than 30 characters I am getting an error that "the requested file C:\....\....Pfm,C:\....\....Pfb was not a valid font file". Although I am using the same way to install all fonts.
Please help me and give me any solution. Please let me know if there any limitation with windows XP, or its a limitation of Type 1 fonts.
Thanks in advance and pardon my English.
Thanks........

I believe the answer is "both" for practical purposes. Although, my recollection would have been that the limit was 31 characters, not 30.
Regards,
T

Column name length exceeds maximum allowed

Hello,
I get this error when am trying to create a table. ERROR: Column name length exceeds maximum allowed length(30).
Is it able to extend this length to be more than 30 ? By the way I am using Oracle 11g
Regards,
Moussa El Tayeb
about.me/MoussaEltayeb

Hello,
also Oracle has some limits. For more Information see the logical limits
http://docs.oracle.com/cd/E14072_01/server.112/e10820/limits.htm
regards
Peter

Principal name character set restriction ?

In weblogic.xml, principal-name is of type PCDATA in Weblogic 8.x and ealier, but is of type NMTOKEN in Weblogic 9.0 and later.
So a principal-name value like "id=manager,dc=pg&e,dc=com" works in 8.x but doesn't work in 9.x due to the '=', ',' and '&'.
(when you deploy your application with the above in weblogic.xml, the Weblogic 9.x will complain the value is not conformant to NMTOKEN type)
How to deal with this ?
Should there be some kind of backward compatibility here ?
If not, what is the best way to convert the value to NMTOKEN type that'll be accepted by 9.x.
Thanks for any hints.

I am facing a very similar problem too. I had the principal name as DEFAULT ADMIN in WLS 8.x and it worked and it complains about not conforming to the NMTOKENTYPE in WLS 9.1 . Looks like NMTOKEN does not support white spaces. I have to make DEAFULT ADMIN as a single word to get it working on WLS9.1. Do let me know if there is another alternative for this

VLD-10011 - name length

Hi,
When trying to deploy an Oracle Workflow I get this message:
VLD-10011: Process flow package JB_LOAD_SA's name length should not exceed 8.
VLD-10011: Process flow package JB_LOAD_SA's name is longer than 8 bytes. JB_LOAD_SA's owning application JB_FLOW_1_SA is associated with an Oracle Workflow location, and Oracle Workflow places a restriction of 8 bytes on the length of the package name that is to be deployed to it. Hence for the current design repository's character set the maximum length allowed is 8.
Other wWorkflows - not designed and deployed by me - exceed mine inlength of name, so my conclusion is that something else is the matter. Does anyone know what's going on?
Thanks in advance

Rob,
problem is not with processflow name. Insted it is with processflow package name (container of processflows).
It is an limitation of Oracle Workflow.
So remove one character from JB_LOAD_SA package name and you will deploy it succesfully.
Regards,
Oleg

Field name lengths

The field name lengths in the Citadel database are approaching 80 characters when Citadel adds the total path to each field. I am saving data from a process running on computer #1 to computer #2. I am using OPC and to select the analog input values require an extremely long length to the field names.
i.e.
"\\Dispatchbd1\Freq_Process\FreqOPC.'OPC DAQ Items'.'Analog Input'.'PHS Narrow Freq'" is just one of my field names. When you have 75 values in a database that you want to look at this long name gets discouraging. Any help would be appreciated.

Hi Wapa,
You are right the names are a bit long. Citadel stores the absolute names (includes computer and process name), to make sure the names are unique. For example if process1 and process2 have both Pot1 and you are storing the data to the same database, unless you log it with a process name and computer name you would get a conflict - (if there is just Pot1 you would not know from which process).
So, the computer and process parts are always there. The Item name has to be also included, but you have more choise there. The member ('OPC DAQ Items'.'Analog Input'.''PHS Narrow Freq') can be aliased to anything you want (and is valid). Go to the Edit database - select the item in the second window - select the datatype - type in alias (for example item1) - check the log to
historical database and hit save (you are going to get a warning - don't worry about it, just make sure the alias (item1) you typed is is not already an existing item - because of the folder structure exposed by DAQ OPC you'll be fine).
Now instaed of using "\\Dispatchbd1\Freq_Process\FreqOPC.'OPC DAQ Items'.'Analog Input'.'PHS Narrow Freq'" you can go with "\\Dispatchbd1\Freq_Process\FreqOPC.item1" - you can stop loggin the original member.
If you need to go even shorter, you can create an expression object for every member you want to log and then log the expression. Then you get to something like:
"\\Dispatchbd1\Freq_Process\Exp1"
I hope this helps.
Martin

Report Name Length Problem

Hies
Guys I've a problem in oracle report calling from Oracle FORMS. I am using reports and forms 6i. When the report name length is more than 30 characters the report engine runs first time correctly but on the second call of report the system gives an error :
" RWRBE60.exe has generated errors and will be closed by windows.You will need to restart the program ".
After this error the report engine closes and i have to call the report again.
Is there a length fixed for reports name in Oracle 6i.
Is any possible solution available.
Remember i dont want to shorten my report names.
Kindly help me with this.
Thanx.

There may be a limit, but I'm not aware of any. I never ran accross a limit. You may try the latest patch to see if it helps. What is your exact Developer version?
But I really have never seen report names of more than 10 characters or so. Almost every application has some short program coding, like xyz_0010.rep, r_emp.rep etc.
Do you mean the the name including the full path is more than 30 characters? If you put the path in the REPORTS60_PATH variable, your report names don't have to include the path.

Authentication failed. (Microsoft.AnalysisServices.AdomdClient). The target principal name is incorrect (Microsoft.AnalysisServices.AdomdClient)

Hi Experts,
We had a task to migrate SQL Server all the components to another server, the migration went well and had no issues at all. but We can login to SSAS service locally wihtout any issues. when we are connecting the analysis services from the other machines(servers)
it is givng the below error.
Authentication failed. (Microsoft.AnalysisServices.AdomdClient)
The target principal name is incorrect (Microsoft.AnalysisServices.AdomdClient)
1) it is a stand alone server
2) it is connecting to default instance but not to a named instance
3) SPN's were set correctly. Double checked with the tool(MS Kerberos configuration Tool).
4) The SQL server analysis start account has domain admin privileges.
5) we can connect to Database services from the other machine remotely.
6) none of the analysis services are connecting.
Thank you in advance.

Hi Ramu,
According to your description, you migrated SQL Server to another server, everything works fine except that cannot connect to SSAS remotely with the error, right?
Authentication failed. (Microsoft.AnalysisServices.AdomdClient)
The target principal name is incorrect (Microsoft.AnalysisServices.AdomdClient)
Based on my research, this issue is caused by that the SPN for account that run the Analysis Services is corrupt. You said that the SPN were set correctly, however the error message indicate that the problem is related to SPN. So in your scenario, you can
delete the SPN under the service account, and register SPN for Analysis Services instance. Please refer to the link below to see the details.
http://msdn.microsoft.com/en-IN/library/dn194200.aspx
Besides, here is a blog which describe the similar issue.
http://www.wolfsoftwaresystems.com/code/sql/the-target-principal-name-is-incorrect-microsoft-analysisservices-adomdclient/
Regards,
Charlie Liao
TechNet Community Support

Wildcards in principal names

I need to be able to use wildcards in some principal names in the policy file.
I tried to solve it with the equal() method in my Principal class, but it does not work. Where is the principal names (values) in the policy file compared to the names of the principals of the same type in the subject?
I see two possible solutions, but I would prefere another solution. What do you think? These are my solutions:
1) Let my principal class implement com.sun.security.auth.PrincipalComparator in addition to java.security.Principal.
2) Some how solve it with the implies() method in the Permission classes. (How?)
Pleas help!

The comparison is done inside the sun.security.provider.PolicyFile implementation (the default implementation of java.security.Policy).
PolicyFile calls Principal.getClass().getName() along with Principal.getName(), and then compares those values to the class name and principal name listed in the policy file. Note that these are simply String comparisons (they are not done using Principal.equals).
That means you are left with the following choices. You can implement PrincipalComparator, as you mentioned, or you can extend and replace the PolicyFile implementation.
Alternatively, there is one obscure feature in PolicyFile that is not well documented. It supports a minimal amount of wildcarding. Specifically:
grant Principal com.foo.Principal * {
grant Principal * * {
If the principal class is wildcarded, then the principal name must also be wildcarded (this is the second example above). Unfortunately this may not give you the level of wildcarding that you desire.
If the permissions you want to grant are all custom permissions (you have control over the implementation), then it may be possible to design them in a way to achieve what you want. Look at javax.security.auth.PrivateCredentialPermission. That permission encapsulates principals inside of its target name. You would have to design your custom permission class to have a similar syntax, and then the implies method could perform the correct logic for principal name wildcarding.
In this particular case, since the policy file grant statement does not contain principal information (see the example in the PrivateCredentialPermission javadocs), the String comparison that I described above does not occur. Instead, Permission.implies is called, and you have control over that behavior.
Hope that helps.

I need a Microsoft document that says "sqlservr.exe" can register setspn (Service Principal Name)

On all of my SQL Server instances, I can find SQL server error logs that have the same 3 entries below, so while I already know it can, I need a Microsoft document that says "sqlservr.exe" can so I can convince the network guys to grant the service
account for SQL "Write servicePrincipalName: Allow" in AD.
63 2014-06-26 20:24:02.980 Server The SQL Server Network Interface library could not register the Service Principal Name (SPN) [ MSSQLSvc/DFW-MSSQLDW.PathologyPartners.intranet:1433
] for the SQL Server service. Windows return code: 0x2098, state: 20. Failure to register a SPN might cause integrated authentication to use NTLM instead of Kerberos. This is an informational message. Further action is only required if Kerberos authentication
is required by authentication policies and if the SPN has not been manually registered.
61 2014-06-26 20:24:02.970 Server The SQL Server Network Interface library could not register the Service Principal Name (SPN) [ MSSQLSvc/DFW-MSSQLDW.PathologyPartners.intranet:DW
] for the SQL Server service. Windows return code: 0x2098, state: 20. Failure to register a SPN might cause integrated authentication to use NTLM instead of Kerberos. This is an informational message. Further action is only required if Kerberos authentication
is required by authentication policies and if the SPN has not been manually registered.
38 2014-06-26 20:24:02.840 Server SQL Server is attempting to register a Service Principal Name (SPN) for the SQL Server service. Kerberos authentication will not
be possible until a SPN is registered for the SQL Server service. This is an informational message. No user action is required.
Duane Lawrence

Refer the below article
http://blogs.msdn.com/b/psssql/archive/2010/03/09/what-spn-do-i-use-and-how-does-it-get-there.aspx
Automatic SPN Registration
When an instance of the SQL Server Database Engine starts, SQL Server tries to register the SPN for the SQL Server service. When the instance is stopped, SQL Server tries to unregister the SPN. For a TCP/IP connection the SPN is registered in the format MSSQLSvc/<FQDN>:<tcpport>.Both
named instances and the default instance are registered as MSSQLSvc, relying on the <tcpport> value to differentiate the instances.
--Prashanth

Column name length

Hi,
Max column name length is 30
Do we have any settings to increase this size in 10g
Thanks

no
oracle still only allocated 30 to store the name in the data dictionary:
SQL> desc sys.col$
Name                          Null?    Type
OBJ#                          NOT NULL NUMBER
COL#                          NOT NULL NUMBER
SEGCOL#                       NOT NULL NUMBER
SEGCOLLENGTH                  NOT NULL NUMBER
OFFSET                        NOT NULL NUMBER
NAME NOT NULL VARCHAR2(30)
TYPE#                         NOT NULL NUMBER
LENGTH                        NOT NULL NUMBER
FIXEDSTORAGE                  NOT NULL NUMBER
PRECISION#                             NUMBER
SCALE                                  NUMBER
NULL$                         NOT NULL NUMBER
DEFLENGTH                              NUMBER
DEFAULT$                               LONG
INTCOL#                       NOT NULL NUMBER
PROPERTY                      NOT NULL NUMBER
CHARSETID                              NUMBER
CHARSETFORM                            NUMBER
SPARE1                                 NUMBER
SPARE2                                 NUMBER
SPARE3                                 NUMBER
SPARE4                                 VARCHAR2(1000)
SPARE5                                 VARCHAR2(1000)
SPARE6                                 DATEMessage was edited by:
shoblock

Principal Name for Active Directory "Domain Users"

Hi,
I successufully integrated Weblogic & Active Directory Kerberos (SSO). I tested a web application and successifully logined it with authentication.
The system automatically recognized my Active Directory username. It worked.
For authentication in my weblogic.xml I used
<security-role-assignment>
<role-name>admin</role-name>
<principal-name>kursat</principal-name>
<principal-name>fenerbahce</principal-name>
</security-role-assignment>
Now I'm trying to allow all domain members to authenticate my application. For my application I only need the actice directory usernames for them.
For this purpose, I removed "kursat","fenerbahce" from my weblogic.xml
<principal-name>kursat</principal-name>
<principal-name>fenerbahce</principal-name>
I added
<principal-name>Domain Users</principal-name>
instead of writing all domain users.
However I couldn't authenticate. I got the "Error 403--Forbidden"
Is there anyone can help me?

test by creating a groups under Domain Users and use it as your principal name in your weblogic.xml
-Faisal
http://www.weblogic-wonders.com

File Name Length

Hi All,
While down loading .csv file, i can get my file name length dynamicallly upto 157 bytes but not getting more than that.
I have a requirement to download very long file name. Can any one please suggest me a good solution?.
My code is
response.setContentType(contentType);
                    response.setCharacterEncoding("WINDOWS-932");
                    response.setHeader("Content-Disposition",
                              "attachment; filename="
                                        + URLEncoder.encode(fileName, "UTF-8"));-vignesh

It seems there is no restrictions in filename's maxlength.
However, if you check the section 2.3 of this link
[http://www.faqs.org/rfcs/rfc2183.html|http://www.faqs.org/rfcs/rfc2183.html]
It says:
It is important that the receiving MUA not blindly use the suggested
filename. The suggested filename SHOULD be checked
(and possibly changed) to see that it conforms to local filesystem conventions,
does not overwrite an existing file, and does not present a security problem
(see Security Considerations below).I tried to test filename's maxlength with different browsers and found that results differ with browsers.
The HTTP response header nevertheless contained the full filename.
Above all, IMO avoiding long filename is the best solution.

Limitation on principal name length due to propagation?

Similar Messages

Maybe you are looking for