Meggaging server security problem

Hi All,
We have messaging server 7.3 and convergence 1_U3. Client site we are using Iexplorer 7.X and Mozilla 3.X . Now we are facing problem is, If we shut down the system with out logging messaging server console. Next login is not asking user name and password.Please help me where we have done the mistake.
Regards
kkdas

kkdas wrote:
From client side we are accessing mail using Mozilla web browser. But when the browser is closed with out logging off the mail account, Next time client is able to login mail account with out user name and password by accessing the mail server URL.
I don't see this behaviour with my Convergence patch 12 installation. Logging into Convergence using Firefox 3.6, then closing the browser without logging out, then starting Firefox 3.6 and going back to the Convergence URL results in the session being auto-expired.
I suggest you log a Sun support request if you need further assistance troubleshooting this issue.
Regards,
Shane.

Similar Messages

Flex on Oracle Application Server 10g - security problems

Hi,
I'm working with Flex components (swf files), I'm trying to view them in a browser and i'm facing some security problems.
The server i'm trying to run the files on is: Oracle application server 10g on Unix server.
Please help me with the server's configuration to allow running swf files on it.
In the relation of Flex, there is a file that must be on the server's root named: "crossdomain.xml". This file defines which IPs can the swf object can take/get data from. Maybe there are configurations to that file that needs to be done on the server?
Thank you,
Inbal

No. Not only it isn't certified, but it is also impossible to run forms compiled with the 11g compiler with the 10g runtime. For 11g there is a install bundle for the developer suite / application server.
cheers

Terminal Server Licensing Problems with GPO Security Group License Server

Hello,
I have two fresh installs of W2K12R2.
One is RD Session Host and the other one is the License Server. Everything is fine until I active the GPO Security Group License Server. After that the License Server gives no licenses
to die clients (we have User und Device CALs). TS Licensing Diagnostic’s shows no errors, the number of available licenses is displayed correctly, even the state of GPO Security Group License Server is correctly shown as "active" and die
Membership in the Group "RDS-Endpointserver" is "Yes". Eventlog shows no Errors. Log in on the session host is even possible, maybe because the RDS-Service is in evaluation time.
If the GPO Security Group License Server is disabled again, the server starts to serve licenses as expected.
I don’t know what I can do anymore, never had problems with exact the same setup under W2K8, but with W2K12 is the second time I notice this issue.
Thanks for your ideas,
Andreas

Hi Andreas,
Thank you for posting in Windows Server Forum.
Sorry to inform but there is no official document for server 2012 related to this event, you can go through below article for reference.
You cannot use a security group to add computer accounts to the Terminal Server Computers group. You must add each computer account explicitly. To verify whether an RD Session Host server is allowed to request RDS CALs from the Remote Desktop license server,
you can use the IsSecureAccessAllowed method of Win32_TSLicenseServer class. For more details about this method, click here.
1. License Diagnosis tool returns error "License server <computer name> cannot issue RDS CALs to the Remote Desktop Session Host Server because the 'License server security group' Group
Policy setting is enabled."
2.Control the Issuance of RDS CALs
Note: You should only enable this policy setting when the license server is a member of a domain. You can only add computer accounts for RD Session Host servers to the RDS Endpoint Servers group when the license server is a member of a domain.
Hope it helps!
Thanks,
Dharmesh

Need to solve serious security problem with Oracle Reports URL

As mentioned repeatedly on this forum, Oracle Reports allows serious security breaches that allow users to see reports that they did not generate -- it's easy to guess a legal URL by changing the getjobid parameter.
I've reviewed the JavaDocs to part of the rwrun.jar file and reviewed some of the example report plugins. This shows promise in helping to solve this security problem but critical pieces are missing.
1) The javadocs are accurate for only 10g (9.0.4) but not correct for 10g (10.1.2+), which we are currently using. I need access to the updated version of this javadoc.
2) Even with the updated version of the JavaDoc, I haven't found a class from which to inherit that would give me the opportunity to generate random jobid values, which then would effectively prevent users from guessing other jobid values, and thereby gaining access to other's reports (which in our cases, may contain sensitive information.
3) We have found that we can send the parameter=value of EXPIRATION=1 which helps protect such information, but this requires that every program which invokes a report be modified to add this parameter. It would be far better for the report server to be configured to use a java class we write that inherits from some rwrun.jar class that would by default, add the EXPIRATION=1 parameter.

Hi,
Thanks for our replies. I will ask to an administrator about this security problem, now I know it depends of a security parameter.
But I would know if it could be possible to hide the technical name of the query in the url. It could improve the security level of our reports in a first time in this way.
Thanks a lot,
JW.

Javascript security problem in IE/Netscape

I am facing with the javascript security problem in IE/Netscape. I have solved this problem partially, but there are more issues involved.
Here's the scenario:
There is an HTML page on client's hard disk (main.htm) containing two frames:
frame 1 contains a page that lies that is deployed from my server, say
src="http://127.0.0.1:8080/MyApplication.htm"
frame 2 contains a page that lies on the client's server, say
src="http://www.clientside.com/clientPage.htm"
My page in frame 1 wants to access the URL of the page in frame 2 (through a button click, say ). This is done in MyApplication.htm through javascript as:
window.parent.frame2.location.href;
Now when the above line is executed, i get the following error:
In IE(5.0): "permission denied"
In Netscape(4.7): "access disallowed from scripts at http://127.0.0.1:8080/MyApplication.htm to documents at another domain."
(which is understandable)
I have partially solved the above problem in Netscape, by granting access permissions to MyApplication.htm (page on my server) to access the
"http://www.clientside.com/clientPage.htm" page at client's domain.
This is done as follows:
1. First enable code base principals in client's Netscape by adding the following line in prefs.js file of Netscape
"user_pref("signed.applets.codebase_principal_support", true);"
2. Secondly i must add the following line in java script of "MyApplication.htm"
"netscape.security.PrivilegeManager.enablePrivilege("UniversalBrowserAccess");"
Now when the client clicks the button on my frame he'll get a netscape window asking him to grant permissions to MyApplication.htm.
After granting permission, MyApplication.htm can retrieve the URL of clientPage.htm (even if he browses to another url)
As you can see this problem is solved partially, but i want that the page "main.htm" (which is now on the client's hard disk),
must be deployed at client's server (in which case not even the above technique works).........what should i do? any alternates or other solution?
Secondly i want this to work with IE too, (which should according to their documentation, but does not and is therfore a big IE bug-as mentioned on the net)
Any sort of help in this case would greatly appreciated.
Thanks
Faisal Moin Khan

i believe you are posting in the wrong forum.
This forum is foro XML web services.

Applet problem with FileWriter() (security problem?)

btBut1.addActionListener(new ActionListener()
   public void actionPerformed(ActionEvent e)
       FilePermission perm = new FilePermission("<<ALL FILES>>" , "write");
      try {
            FileWriter outputStream = null;
            outputStream = new FileWriter("./bandiere/testouno.txt");
       catch (IOException eX) {
   });This is a bit of code from an APPLET which I'm working on. The code does not work...
I smell it is a security problem, but I'm not sure...

You are trying to write to the local file system which is not allowed unless the applet is signed.
Unless you think you are trying to write to the server, in which case, you can't do that with FileWriters. You'd have to make a connection to the server via a socket or URLConnection or something to pass the data over.

Ethernet active, airport also active... how to stop this security problem.

Im not sure if anyone else is noticing this but this is becoming a problem in an enterprise environment.
In the "Network Port Configurations"
I have "Built in Ethernet" as the top, then Airport below that.
The problem is that when the Ethernet is working (active) AND the airport is turned on and connected to a network it is ALSO active, grabbing an IP# and essentially bridging the two networks.
I have tested this many times and it works every time.
For example:
My MBP is connected to the LAN using Ethernet, and traffic is going through the Ethernet and has it's own IP (192.168.0.104) given by DHCP. If I turn on Airport and it finds (and connects) to a network (for example... Linksys? LOL) it will also grab an IP from that Airport network.
Now... if any services (AFS, Windows Sharing, WebSharing..etc) is turned on, you can access the MBP from EITHER network (Since the Airport grabbed and assigned an IP)!!! Even though in the "Network port configurations" it is setup to use the "Built-in Ethernet" first, if it can't find that then use Airport... BUT from what I can see this ONLY applies to Outgoing traffic and not necessarily both incoming and outgoing. It is essentially bridging the two networks
I cannot find a way to prevent this network security gap automatically. (If Ethernet is active then do not connect to any airport network, even if it's in my preferred list or an open network)
Another side effect...in an office environment which has Wireless services on the LAN, if your Airport is turned on and your using your Ethernet connection, your computer is using up 2 IP#'s out of your DHCP pool!
Anyone else having or notice this problem?

If I turn on Airport and it finds (and connects) to a network (for example... Linksys? LOL) it will also grab an IP from that Airport network.
And why would you do this? If you are connected to the LAN through the ethernet port why turn on Airport too? Or why have your Mac connect to an unknown WLAN by default?
When I take my MacBook to school I only have one connection active. On my Mac Mini that is running MacOS Server I have both ports enabled but I guess this is not the most common situation.
Now... if any services (AFS, Windows Sharing, WebSharing..etc) is turned on, you can access the MBP from EITHER network (Since the Airport grabbed and assigned an IP)!!!
People will be able to access your /Library/WebServer/Documents/ folder (or any of the users web documents folder) but that's not a security problem unless you have changed (and messed up) the default Apache definitions, changed the web server documents ownership and/or permissions or have some problematic PHP code or CGIs. As for AFS, Windows Sharing or FTP people won't get into your Mac unless you have and empty password or they know your password.
Even though in the "Network port configurations" it is setup to use the "Built-in Ethernet" first, if it can't find that then use Airport...
When you place the ethernet port first it really means "use this port first and use the others too whenever they are available".
PowerMac G5 1.8 Mac OS X (10.4.9) MacMini (10.4.9 Server), MacBook 2.0, 2nd internal HD, FW 500GB, FW 80GB

BI Publisher Using BI Server Security

I have setup BI Publisher to use BI Server security which works well, I can even see the Admin Tab ;-)
My problem is that I can no longer access the Security>Roles and Permissions Tab. I get a HTTP 500 error.
Has anyone else come across this problem?
Thanks,
Matt

i managed to resolve with the help of this thread
Re: BI publisher security mged by OBIEE can't access role (500 internal err
Basically the SA System is the key.

BI Publisher configured with BI Server Security not working for the admins.

Hello Everyone,
I have configured the BI publisher to work with the BI server security. Everything is working well with the exception that all users part of the BI Server "Administrators" group are unable to login and get the following error message (message displayed below). If a user is removed from the "Administrators" group then they are able to access the BI Publisher. As indicated everything else is working for exemple all users part of the 'XMLP_Admin' group all have access to the "ADMIN" tab in BI Publisher. The issue seems to be limited to the users part of the BI Server "Administrators" group.
- Has anyone else ever had this issue?
- Is this a normal behaviour of BI Publisher?
- Or the security groups for the BI Server and BI Publisher conflicting?
Thanks in advance for everyone's help.
Best regards,
FBELL
*********************** Error Message ***************************************
Oracle BI Publisher Enterprise
Reporting Login: Login failed: Please contact administrator for your username/password.
Error Details
Error Codes:
***************************************************************************

Thanks Madan for your help.
The group XMLP_Admin was already created and working. The conflict was with security groups outside BI Publisher. What I ended up doing was recreating the principals.xml and security.xml files and rsetting the roles and permissions. Surprisingly that fixed my problem.
Best regards,
FBELL.

Security problem - javascript?

Hi
I have a tabular multi row, where I have this javascript (in the header of the page) to validate the form:
<script language="JavaScript1.1" type="text/javascript">
function validate_tabularform()
// for each question
var submit = true;
for (i=0; i<document.wwv_flow.f01.length; i++)
// get value of importance and performance
var DISC_PERCENT = parseFloat(document.wwv_flow.f05.value);
var OFFER_PRICE = parseFloat(document.wwv_flow.f03[i].value);
if(DISC_PERCENT>100 || DISC_PERCENT<0)
alert ("&IMARS_ERROR_00001.")
submit = false;
break;
if(OFFER_PRICE<0)
alert ("&IMARS_ERROR_00002.")
submit = false;
break;
if(submit)
doSubmit('SUBMIT');
</script>
On my update/submit button i have this code for a url:
javascript:validate_header();
Is there some security problems with this method?
Best Regrads
Jesper Vels

Hello,
What do you mean by security problems?
Javascript can be manipulated any number of ways on the client machine. You never want to do is only trust 'only' javascript for your validations. Javascript validations are a convenience for the user , so they don't have to do a submit before they see something is wrong, but data should always be revalidated on the server side before you put that data in.
Carl

HT201412 I have a problem connecting to the server (SSL problem) on my new Apple ipad. I was supplied with a new ID password, but I am unable to get into my settings and email. Could someone please offer a suggestion? Thanks! A.A.

I have a problem connecting to the server (SSL problem) on my new Apple Ipad (iOS6). When submitting my Apple ID password, I am prevented from signing in to a secure connection due to an SSL problem. Any suggestions ?? Thank you!

Sounds more like you have a problem with your apple id. For starters go to that page click manage my apple id and singn in. If you can't sign in reset password.
https://appleid.apple.com
if you can sign in there, try to sign in to itunes on your computer.

Error getting license. license server communication problem: e_adept_document_type_unknown

I began this day with ADE 17.2 and tried every proffered solution to no avail. The last suggestion was to update to ADE 3.0.
The exact error message is:
Unable to download. error getting license. license server communication problem: e_adept_document_type_unknown
I have tried completely disabling the firewall (domain, public, private) and the problem persists. I have tried running ADE as system admin with same results.
I've read all the posts on this forum and it appears no one has found a solution.
Please note: I do not have a proxy, currently all firewalls disabled, no anti-virus software used.
Windows 7 SP 1 32 bit home premium
Firefox 27.0.1
Shockwave flash 12.0.0.70
Network connection is wifi home network
Content to be downloaded is PDF from Google Play Books
Is there anyone who can offer a solution ....
UPDATE:
My husband figured out how to disable the firewall on the router and we tested again (and simultaneiously with software firewall disabled). Still didn't work.
I also created a Firewall Rule specifically for this application:
GENERAL
Name: Adobe Digital Editions 3.0
[x] Enabled
Action: Allow the connection
PROGRAMS AND SERVICES
This program: [local path to]\DigitalEditions.exe
Services: apply to all programs and services
COMPUTERS
[nothing selected]
PROTOCOLS AND PORTS
Protocol type: any
local port: all
remote port: all
ICMP: [default]
SCOPE
local IP: any
remote IP: any
ADVANCED
Profiles: domain, public, private
interface types: [default]
Edge traversal: defer to application
USERS
[defaults]
Authorized: [nothing entered]
Exceptions: [nothing entered]
UPDATE:
I was reading other posts on similar topics and one of the suggestions was to try OverDrive. Since I already have it, I tried it and received the following error message:
The specified OverDrive media file "[local path]\AppData\Local\Temp\Seams-Unlikely-epub-2.acsm" is not valid. (The OverDrive media file root element is not valid.)
According to OverDrive's help forum that means the ACSM file can ONLY be downloaded with ADE!
http://help.overdrive.com/article/0644/What-to-do-if-you-get-an-ACSM-The-OverDrive-media-f ile-root-element-is-not-valid-error-when-using-OverDrive-Media-Console-for-Windows-or-Mac
UPDATE
Have learned we have a WNDR4500 router with built-in firewall which can not be disabled. On the NetGear forums, there was the uninformative suggestion to "use DMZ in the router settings" to disable the firewall. In looking at the settings for our firewall, the nearest screen I could find to resemble that suggestion contained the following:
[ ] Disable Port Scan and DoS Protection
[ ] Default DMZ Server [192.168.1.0]
[ ] Respond to Ping on Internet Port
[x] Disable IGMP Proxying
MTU Size(in bytes) 1500 bytes
NAT Filtering [x] secured [ ] open
[ ] Disable SIP ALG
I'm afraid this is beyond the scope of my understanding and have no idea what I should be doing here so have made no changes.

Adobe Digital Editions Communications Error When Downloading PDF from Overdrive (and maybe elsewhere too):
If you get an “error getting license server communication problem” message in Adobe Digital Editions:
1. Try downloading any of the PDF files from Adobe here: http://www.adobe.com/products/digital-editions/eBook.html
2. Now re-download the book from Overdrive
3. Enjoy!!
I figured this out after many, many hours of frustration . . hope it helps!!

F-Secure PSB Server Security, Gatekeeper & Samba

Hi!I have a problem running F-Secure PSB Server Security on our Ubuntu server.I've managed to install the F-Secure. And I've also installed the Gatekeeper. Problems I'm having right now: Entering my activation code to the Gatekeeper. Same thing happens with the F-Secure PSB Server Security.License status: Invalid license.txt Samba share doesn't really work anymore. While trying to access the 'Staff' folder. So what Am I supposed to do now?Any ideas?

Hello,
There is a business products part in the Community. You posted is a the Home User section, which support probably doesn't check.
Best Regards: Tamas Feher, Hungary.

Error authSwf / authSwf.3329.10600: Internal DRM or DRM server security error

Watching XFINITY on xtv.comcast.net was working fine for the last few days until just recently - when I try to log in it says "adding device" even though they should already be added, and eventually comes up with this error: Error authSwf / authSwf.3329.10600: Internal DRM or DRM server security error I've reinstalled flash player, rebooted my computer, rebooted the DVR, cleared all cache/cookies, you name it. Nothing works. This is in both in the latest versions of Firefox and Chrome. Called XFINITY phone support twice and was told I was being "transferred" then disconnected twice...frustrating.

if you're having the error on Google Chrome, go to settings | then at the bottom click advanced settings | then under privacy click on content settings | scroll down about two thirds down and under protected content click on the allow identifiers box. Milage may vary but worked for me when nothing else would. Before I found this fix, Firefox worked for me so you could try that as well. Just FYI when Comcast says engineers are working on the problem, all that means is that every once in a while a rep comes online and says engineers are working on it. It's been way over a year and the only fix they've ever suggested is reinstall flash. Takes a brilliant engineer to make that suggestion. Hope this helps someone.

Hi, i am having trouble with my mac mail account, i cannot send or receive any emails because of the server connection problems. Message says it could not be connected to SMTP server. Thanks in advance for your help.

Hi, i am having trouble with my mac mail account, i cannot send or receive any emails because of the server connection problems. Message says it could not be connected to SMTP server. Thanks in advance for your help.

Hello Sue,
I have an iPad 3, iPad Mini and iPhone 5S and they are all sluggish on capitalisation using shift keys. I hope that Apple will solve the problem because it is driving me crazy.
I find using a Microsoft Surface and Windows 8 phone, which I also have, work as well as all the ios devices before the ios 7 upgrade.
It has something to do with the length of time that you need to hold the shift key down. The shift key needs to be held longer than the letter key for the capitalisation to work. For some reason, this is a major change in the way we have learnt to touch type on computers. I am having to relearn how to type!
Michael

Meggaging server security problem

Similar Messages

Maybe you are looking for