Match user name (login name) and token

Hi,
I have setup the VDI 3.1 POC evaluation using VMware. It is all working great.
I had 2 other requirements put forth by management:
1) The Windows desktops had to lock the screen when a user removed his/her smart card
2) The card and the user had to be the same. IE. Joe shouldn't be able to use Tom's card to login as Joe.
I fixed issue 1 by using the SRWC Lockscreen addon for SRSS found here: http://wiki.sun-rays.org/index.php/How_To_Section#Sun_Ray_Connector_Lockscreen
However, I cannot seem to fix item 2.
It would seem that this functionality is/should be already builtin. I specified only registered tokens can attach and I registered the appropriate tokens. Then in the VDI Web interface, I specified that Token 1 belongs to Tom and Token 2 belongs to Joe.
However, if I stick in Token 2 card, the login name comes up as Joe (good), but I can change the name to Tom and then login as Tom.
Management doesn't want users who have lost their card to borrow someone else's to get in - they need to report the card lost/stolen and get a new one. This makes sense. However, the system doesn't seem to have any restrictions on this.
What is the point of registering a specific token against a specific user without any enforcement? Seems like the system is broken. It really only functions as a suggestion of what user they should login as.
Is there some way to correct this or implement this functionality?
Thanks,
Jim Nickel
Jim

If you really want to change the behavior of the login dialog, then I am afraid that can not be done without some code changes.
What you could do as an alternative is to assign the desktops directly to the token(s), instead of assigning them to the user. Thus demonstrating that Joe/Tom can not access their desktops without having the right smart card. I know that this is not exactly what you want, but maybe that is sufficient for your demo.
So to be precise here:
1. The smart card of Joe (token A) should be assigned to desktop A (or alternatively to desktop pool A) using the Sun VDI admin UI.
2. The smart card of Tom (token B) should be assigned to desktop B (or alternatively to desktop pool B).
3. In addition you should configure these desktops that desktop A has only an account for Joe, and desktop B has only an account for Tom.
If Tom uses the smart card of Joe (token A), he can still login into VDI but then he will not be able to access desktop B - instead he will be offered desktop A. However, the automatic login into the desktop's Windows OS will then not work, because the desktop does not have an account for Tom.
As stated, not exactly what you want, but just to present an alternative here.
- Klaus

Similar Messages

My app store is not working after installing mavericks. When I open app store it repeatedly asking me to login with apple ID and to provide User name and Password for proxy authentication in a loop.I am a newbie to mac,Please help me.

My app store is not working after installing mavericks. When I open app store it repeatedly asking me to login with apple ID and to provide User name and Password for proxy authentication in a loop.I am a newbie to mac,Please help me.

Hmmmm... would appear that you need to be actually logged in to enable the additional menu features.
Have you tried deletting the plists for MAS?
This page might help you out...
http://www.macobserver.com/tmo/answers/how_to_identify_and_fix_problems_with_the _mac_app_store
Failing that, I will have to throw this back to the forum to see if anyone else can advise further.
Let me know how you get on?
Thanks.

How to read the data from a file in another computer with user name and password login

How to read read the data from a file in anohter computer which need to login with user name and password?

duplicate post: http://forums.ni.com/t5/LabVIEW/log-on-the-other-computer-with-user-name-and-password/m-p/2061478
duplicate post: http://forums.ni.com/t5/LabVIEW/do-need-to-enter-the-user-name-and-password-when-TCP-ip/m-p/2061612
duplicate post http://forums.ni.com/t5/LabVIEW/log-on-the-other-computer-with-user-name-and-password/m-p/2060682

Automatic login in mavericks not working. I still have to enter user name and password

I upgraded the original Hard Drive to SSD drive. After the upgrade, I can no longer automatically log in. I now have to enter my user name and password. I tried resetting automatic login in Users and Groups but it doesn't work in Mavericks.

Hello,
To find out if it's system wide or user specific, try this...
Open System Preferences>Users & Groups, unlock the lock, click on the little plus icon, make a new admin account, log out & into the new account.
Does it work in the new account?
How about these?
Reset Password 10.7, 10.8...
http://reviews.cnet.com/8301-13727_7-20087723-263/how-to-run-the-password-reset- utility-in-os-x-10.7-lion/
Then Reset your Keychain...
http://support.apple.com/kb/TS1544
https://discussions.apple.com/thread/5225064?tstart=0

Oracle e business suite user name and password to login oracle bi?

Hi,
it is possible to use oracle e bussiness suite user name and password to login oracle BI PUBLISHER SERVER.??
we are using 11.1.1.6.0 OBIEE and R12 (12.0.6) e business suite.

SAURAV KUMAR SINGH wrote:
During Oracle Installation i have given SID : RD1 & Password :admin@1234
... insert BUZZER sound here ...
Using "@" in a password for a DB User is not supported at all (allthough it works).
I did so myself once and I think it was possible to get a connection utilize quotes,
but I do not remember which ones in what way.
Could have been like
sqlplus "sapsr3/admin@1234"
but not very sure any more.
My be toy around with this, but more easy is to use brtools and change the
password to contain only valid oracle letters.
The problem with "@" is, that it delimits the SQLNET Connect identifier.
Volker
Oh, and for executing brtools, do not provide a user at all or only "-u /"
This should do a sysdba connect.
Edited by: Volker Borowski on Jan 30, 2012 7:25 PM

Login page user name and password for Oracle Database

Hi,
I created a login.jsp page with username,password and a submit button. How can I validate this username and password from my Oracle database username and password?
I am using NetBeans5.5 with Tomcat5.5.17. Right now I have hardcoded username and password in my persistence.xml.
Anyhelp?

Thnx BalusC for ur reply. Let me explain my issue.
I have created a login page. and user is able to enter user name and passowrd on this page. User is supposed to press a 'submit' button when user enters username and password to connect to database. What should I write in 'submit' button's action to let user allow to proceed if username and password are correct i.e. username and password of my oracle database. (usename=scott and passowrd=tiger).
plz help.

PowerBook G4 boots to unfamiliar login. List of known user accounts does not appear and original admin user name and password is rejected. What is going on here?

PowerBook G4 boots to unfamiliar login. List of known user accounts does not appear and original admin user name and password is rejected. What is going on here?

There are no children, nor other suspicious characters that have "played" with my computer. One moment I'm in, the next time I turn on/restart the powerbook I'm at a screen with the name of the hard drive and two fields: username and password. Not a list with pictures and names ie 'Katie Jo' with an orange icon and 'Guest' with a silhouette of a head.
In an attempt to remedy this problem, I backed up files using target disk mode and firewire cable. I then, rebooted in single user mode, typed in the correct script and essentially made the computer appear virgin again. Original start up welcome screen display with multiple languages, and then set up prompts such as language, network, and registration. After completing the cues and the "just a few more questions" page, I press continue and am left at a grey standstill, with the continue button greyed out, and no other actions. I'm only able to "go back" by clicking the go back button, all the way to the beginning of the set up, and as I proceed through the steps a second time, I'm greeted with the same halt. What is this?

Firefox will not save my user name and password for one of my sites. How can I fix this problem. It is getting annoying having to reenter every time I check this site. Is there a solution.

I had my user name and password saved for my library site. My grandson hit something and now the saved user name and password are gone. It asks me every time to enter it and it is getting annoying. How do I fix this. I want Firefox to remember these codes.

You can create a bookmark with the JavaScript code via a right-click on the "Remember Password" link on the squarefree.com website and choose "Bookmark This Link" and select the "Bookmarks Toolbar" as the destination folder for easy access.
* https://www.squarefree.com/bookmarklets/forms.html#remember_password
You need to use the "Remember Password" bookmarklet before or after filling the name and password field on the website with the <u>login form</u>, but before submitting the login form by clicking a button on the web page.
If the site is using autocomplete="off" then you see a number not equal to 0 (i.e. attributes were removed) in the pop-up alert from the bookmarklet and Firefox should offer to remember the name and password via a drop down dialog of the key icon that will appear on the location bar (Firefox 4+) or via an info bar at the top (Firefox 3).

Time Capsule won't accept my user name and password for access - Help!

Hi all,
My Time Capsule seemed to stop working one day and I had to do a hard reset with the little button at the back. After that it worked and I restored my wireless network settings but now I can't access the Time Capsules hard drive with Time Machine.
When I try to choose it as my Backup Disk in the Time Machine preferences it says "Enter your user name and password so Time Machine can access the file server "Our Time Capsule" (the name of my time capsule). However, every time I try to enter my password I get "Sorry, you entered an invalid username or password".
I've already tried several resets of the Time Capsule and I've also tried logging on my computer as the Root user and changing my administrator account password back and forth but no go.
Help! and Thanks.

Norman & Harry,
Consider the following:
*_Time Capsule Keeps Asking Me For a Password_*
It will be important to know what is going on, or what you are doing when it asks for the password. Is it asking for a password only when Time Machine attempts a backup? Consider this:
It is NOT your username and password it wants when you try accessing the Time Capsule. (I know... it SAYS "username and password") But it means the Time Capsule's Name and Password.
You will find that by launching Airport Utility.
Select the TC on the left.
Click "Manual Setup".
Click the "Time Capsule" Tab.
You will see "Time Capsule Name:" and "Time Capsule Password".
Make sure “Remember password in keychain" is checked.
That is the information you need to enter when it asks for "username & password."
*I Don’t Remember What My Time Capsule Password Is*
You can see what your current TC password is by going into Keychain.
Open your Keychain and select "login" from the Keychains pane in the top left. Highlight "Passwords" in the Category pane from the lower left.
Sort all the items by Kind. Note everything labeled "Airport...". How many do you have listed? There should only be one "Airport base station password" for each base station that you have active. Also, there should only be one "Airport network password" for each network you have created. If there are more than these, then delete all but the ones with the most recent Modification date.
To see what passwords are being stored, double-click your Time Capsules' entry. A new window will appear.
Put a check beside "Show Password". You may be asked for your own Admin password so enter that.
Now the Password field will display the password you entered into Airport Utility for your Time Capsule
*It Still Won’t Accept the TC Name and Password*
Launch Airport Utility --> Manual Setup.
Select "Disks" in the tool bar above.
Click the "File Sharing" tab.
Is "File Sharing" checked? It should be.
What is selected beside "Secure Shared Disks"? If it says "With Accounts" or "With a Disk Password" then the system will ask you for a password every time it mounts the TC hard disk. If you switch it to "With Time Capsule Password" then use the password you designated earlier in the “Time Capsule" tab. It should only ask you once and then never again - because you had checked "Remember password in keychain".
If you have made any changes then click "Update".
Let us know if this resolves your issue.
Cheers!

HT204053 I did not know my kids had set up an Itunes account for me with one user name and password. then i got an i phone and set it up with a different email address and new password. how can i get my accounts to merge so i can have all of my music on

I did not know my kids had set up an Itunes account for me with one user name and password. then i got an i phone and set it up with a different email address and new password. how can i get my accounts to merge so i can have all of my music on my iphone

Quote: "You cannot merge two or more Apple IDs into a single one. You can, however, use one Apple ID for iCloud services and another Apple ID for store purchases (including iTunes in the Cloud and iTunes Match). See “Using one Apple ID for iCloud and a different Apple ID for Store Purchases” above for details." See also Apple ID & iCloud FAQ: http://support.apple.com/kb/HT4895?viewlocale=en_US&locale=en_US
You can set up your iCloud account on your iOS device under: "Settings > iCloud" and a other account for store purchases under "Settings > iTunes & App Stores". Unfortunately merging accounts is not possible but you could transfer all of your music manually via iTunes from your Mac or PC.

I tried to share a photo using e-mail and when I set up my gmail account I typed in the wrong user name and password. Now i can't share photos using e-mail.

I tried to share a photo using e-mail and when i set up my gmail account I typed in the wrong user name and password.
Now I can't send a photo because i get an error message saying the user name and password do not match.
How do i save a new gmail user name and password??

iPhoto Menu ->
Preferences ->
Accounts ->
Delete and recreate your email settings.
Alternatively, use Apple's Mail for the job. It has Templates too - and more of them.

AppleScript: Waiting for a user to enter user name and password

I'm currently working on an AppleScript designed to automate binding a computer to Active Directory and another script to install a login certificate. While you can create a UNIX shell script for the Active Directory binding, I found that you have to have your user name and password in the script itself and this system will be deployed by multiple people.
So instead I'm doing an GUI Automation AppleScript of Directory Utility. What I'd like to do is have the script to wait for the admin user (who will be remoting in by ARD) to enter their Network user and password, click okay and then continue the script to quit the program and then run a self-destruct (which I'd also appreciate any advice about doing in AppleScript)
Here's the script so far, which I've set up successfully:
activate application "Directory Utility"
tell application "System Events"
click text field 1 of row 1 of table 1 of scroll area 1 of group 1 of group 1 of window "Directory Utility" of application process "Directory Utility"
click button 1 of group 1 of group 1 of window "Directory Utility" of application process "Directory Utility"
click text field 2 of sheet 1 of window "Directory Utility" of application process "Directory Utility"
keystroke "EXAMPLE.COMPANY.com"
click UI element 3 of sheet 1 of window "Directory Utility" of application process "Directory Utility"
click radio button "Administrative" of tab group 1 of sheet 1 of window "Directory Utility" of application process "Directory Utility"
click checkbox "Allow administration by:" of tab group 1 of sheet 1 of window "Directory Utility" of application process "Directory Utility"
click button 1 of tab group 1 of sheet 1 of window "Directory Utility" of application process "Directory Utility"
click row 1 of table 1 of scroll area 1 of tab group 1 of sheet 1 of window "Directory Utility" of application process "Directory Utility"
keystroke "GroupExamplePS NA"
click button 1 of tab group 1 of sheet 1 of window "Directory Utility" of application process "Directory Utility"
click row 2 of table 1 of scroll area 1 of tab group 1 of sheet 1 of window "Directory Utility" of application process "Directory Utility"
keystroke "GroupExampleNA"
click button 1 of tab group 1 of sheet 1 of window "Directory Utility" of application process "Directory Utility"
click row 3 of table 1 of scroll area 1 of tab group 1 of sheet 1 of window "Directory Utility" of application process "Directory Utility"
keystroke "GroupExampleNATemps"
click button 1 of tab group 1 of sheet 1 of window "Directory Utility" of application process "Directory Utility"
click row 4 of table 1 of scroll area 1 of tab group 1 of sheet 1 of window "Directory Utility" of application process "Directory Utility"
keystroke "GroupExampleTeam 1"
click button 1 of tab group 1 of sheet 1 of window "Directory Utility" of application process "Directory Utility"
click row 5 of table 1 of scroll area 1 of tab group 1 of sheet 1 of window "Directory Utility" of application process "Directory Utility"
keystroke "GroupExampleTeam 2"
click button 1 of tab group 1 of sheet 1 of window "Directory Utility" of application process "Directory Utility"
click row 6 of table 1 of scroll area 1 of tab group 1 of sheet 1 of window "Directory Utility" of application process "Directory Utility"
keystroke "GroupExampleTeam 3"
click button 1 of tab group 1 of sheet 1 of window "Directory Utility" of application process "Directory Utility"
click row 7 of table 1 of scroll area 1 of tab group 1 of sheet 1 of window "Directory Utility" of application process "Directory Utility"
keystroke "GroupExampleDesktop Admins"
click button 1 of tab group 1 of sheet 1 of window "Directory Utility" of application process "Directory Utility"
click row 8 of table 1 of scroll area 1 of tab group 1 of sheet 1 of window "Directory Utility" of application process "Directory Utility"
keystroke "GroupExampleDomain Admins"
click button "Bind…" of sheet 1 of window "Directory Utility" of application process "Directory Utility
<<WAIT LINE HERE FOR NETWORK ADMIN AND AND PASS, THEN USER WILL CLICK OKAY, THEN CONTINUE SCRIPT>>
<<QUIT ACTIVE DIRECTORY>>
<<SELF-DESTRUCT>>
end tell
It isn't a real command prompt like if you're changing System Preferences or something. It's a specialized prompt specifically for Directory Utility. However, I do need to know how to make AppleScript wait for a password for a standard Password Prompt for adding a certificate to the login keychain through Keychain Access. I've also done pretty much the same thing as above for that script.
Any tips would be GREATLY appreciated.

Yeah, I know GUI Scripting is not the best way, but I couldn't find a successful variable system for the following script. The other issue is that I'd prefer to send this by ARD and have ARD ask for a User Name and Password, but I've found there's no way to do that. Then again, I can't send the AppleScript purely remotely either.
What I mean by self-destruct is simply I only want the Active Directory binding script to run once upon login to the primary admin user and then delete itself so it doesn't get run again. The login certificate script I want to run once on each new user who logs in (so I'll likely be putting it in the "User Template") and then delete itself so it doesn't run the next time they log in. I can't figure out any way to hit those buttons through a shell script.
Here's the original UNIX shell script: (This is what I'm using temporarily until I figure out a solution that doesn't require my user name and password to be embedded)
#! /bin/bash
MACNAME=$(scutil --get ComputerName)
dsconfigad -add "CORP.DOMAIN.NET" \
-username USER \
-password PASS \
-computer $MACNAME \
-mobile disable \
-mobileconfirm disable \
-localhome enable \
-useuncpath enable \
-shell /bin/bash \
-ou OU=Macs,CN=Computers,DC=corp,DC=DOMAIN,DC=net \
-force \
-localpassword "PASSWORD" \
-groups "GROUPS"
And here is the Certificate Installation AppleScript
activate application "Keychain Access"
tell application "Finder" to open POSIX file "/FolderName/Certificate.crt"
delay (3)
tell application "System Events" to tell process "Keychain Access"
click button "Add" of window "Add Certificates"
click button "Always Trust" of group 3 of sheet 1 of window "Keychain Access"
end tell
Thanks for the help. I really appreciate it. This is a rather new field for me and most of my knowledge comes from Google Searches and about a billion tabs trying to find answers.

Tiger to Leopard transition- user name and password not working. plz help!

Hi all. Last year I purchased a MacBook Pro with Tiger OSX. Anyways I wanted to switch to leopard, so I did. Now when I want to install updates, as usual it requires my user name and password. But after I installed leopard, my old user name and password does not work (my login name does not even show up in the box anymore). I can not install any new software on my computer because of this so called "new password." Any assistance would be greatly appreciated because this is very frustrating since I just purchased an iPhone and I can't sync it because I need the new version of itunes.

can you log in at all as another user? if not activate root and log in as root using [these instructions|http://support.apple.com/kb/TS1278]. then look in the /Users folder at the top level of the hard drive. do you see the home directory with your old username there? post back with what you find.

CIC0 - CRM system requests user name and password

Hi folks,
I am a BASIS gui am facing a peculiar problem with our production CRM system. It is a CRM 5.0 system and we have no java stack . The customer service users have reported on a daily basis when they are logged into CRM system and working with CIC0 transaction for several hours, suddenly a pop up comes up stating
"The server <CRM server server name> is requesting that a user name and password be sent in an insecure manner (basic authentication without a secure connection) "
This is happening when a user logged on the CRM system itself. There is no java stack on this system, pure ABAP system. When this popup comes up, the user then puts his/her user name and password and hits ok and is able to continue with work only to be interrupted the next day in the middle of work. So they are able to login , keep doing their for hours and suddenly are asked to revalidate their user name and password.
1. If the user is logged in for several hours and is working fine, what happens suddenly that the user name, password is forgotten and requires to be re-inputted?
2. Is this related to the browser? But the users only work on CIC0 abap system, they do not open a browser , and this is not via portal or a web-ic link...this is all pure abap login via a sapgui.
3. I have copied the same user and am testing to see if the pop up pops up on me...but so far this pop up is not comming up for me....can this be related to user's local desktop windows or browser settingis there any password cache setting ..if so does it mean every time user tries CIC0, a cached password is sent to the server ......I am confounded ...where is the issue, what settings is this related to...
Thanks for any help...
regards, Vikram

Hello Vikram,
Apparently CIC0 makes use of WAS which requires separate authentication. This can possibly explain this issue. Just check if you have maintained the local SSL certificate. Also ensure SSO is also in place. Check STRUSTSSO2 for this.
Regards.
Ruchit.

CIC0 - asks for user name and password on CRM

Hi folks,
I am a BASIS gui am facing a peculiar problem with our production CRM system. It is a CRM 5.0 system and we have no java stack . The customer service users have reported on a daily basis when they are logged into CRM system and working with CIC0 transaction for several hours, suddenly a pop up comes up stating
"The server <CRM server server name> is requesting that a user name and password be sent in an insecure manner (basic authentication without a secure connection) "
This is happening when a user logged on the CRM system itself. There is no java stack on this system, pure ABAP system. When this popup comes up, the user then puts his/her user name and password and hits ok and is able to continue with work only to be interrupted the next day in the middle of work. So they are able to login , keep doing their for hours and suddenly are asked to revalidate their user name and password.
1. If the user is logged in for several hours and is working fine, what happens suddenly that the user name, password is forgotten and requires to be re-inputted?
2. Is this related to the browser? But the users only work on CIC0 abap system, they do not open a browser , and this is not via portal or a web-ic link...this is all pure abap login via a sapgui.
3. I have copied the same user and am testing to see if the pop up pops up on me...but so far this pop up is not comming up for me....can this be related to user's local desktop windows or browser settingis there any password cache setting ..if so does it mean every time user tries CIC0, a cached password is sent to the server ......I am confounded ...where is the issue, what settings is this related to...
Thanks for any help...
regards, Vikram

Hello Vikram,
Apparently CIC0 makes use of WAS which requires separate authentication. This can possibly explain this issue. Just check if you have maintained the local SSL certificate. Also ensure SSO is also in place. Check STRUSTSSO2 for this.
Regards.
Ruchit.

User Name and Password for JCO RFC call to BAPI

Hi all,
What I think I know:
--We do NOT have Single Sign On configured so don't tell me to use SSO please - I agree, but...
--We have a requirement to do a goods receipt which prints labels for the handling units
.....The printer to which the labels are directed depends on the user who is running the transaction
What I think this means
--We will need to specify a user name and password in the RFC call so the label will go to the correct printer
--I cannot use the IllumnLoginPassword (or whatever its name is) for the password
--I need to prompt the user for their password a second time after they login to our MII app
The problem
--I will need to store the password somewhere for the duration of the session
......In session variable that has been encryted
.............I didn't see an encryption action block so I could create my own
......In the database using database column encryption
.............A little bit of a pain, but not too bad
Any corrections, alternatives, ideas .... ???
Thanks,
--Amy Smith
--Haworth

Thanks for the attention guys. A little clarification.
1. I have been assuming that I cannot use the IllumnLoginPassword for the JCO SAP password in the action block. If this is NOT true, then it solves my whole problem.
2. It would not work to prompt a shop floor person for their password every time they do an operation completion. Well, at least
if I don't want to not get lynched!
3. I am planning on prompting people every time they log on for their ECC password and retaining it somewhere secure while they are logged on (and longer if they skip the logoff step.)
4. I have been focusing on how/where to retain the password, but also need a way to encrypt it during transmission. Jeremy said the applet/BLS would at least encode it for me. That is good.
--Amy Smith
--Haworth
Edited by: Amy Smith on Feb 18, 2010 1:30 PM

Match user name (login name) and token

Similar Messages

Maybe you are looking for