Multi point access portal

Hi, I try to setup a multi access system from extranet and intranet.
The extranet access must be only accessible for guest users, in the extranet it's forbiden for the internal user to login into the portal.
The intranet access must be accessible to both users : guest and internal.
Is there any way to implement this scenario with JAAS stack configuration ?

Hi,
I think the external facing portal option is not a good idea because the portal is an intranet portal, the change of access right must be done inside our firm but outside our local organization.
For the group i don't know how to manage this to have the correct behavior.
I try to explain you my problem more precisely,
Our firm containt an internal organization.
In the organization network the user named "A" could be login as authenticated user with Kerberos portal facility.
If this user left the organization, but stay inside the firm, the authentication capability must be forbiden, the only way to access information must be the anonymous user.
Kerberos authentication work,
Anonymous authentication work,
but the problem is when the authenticated user left the organisation and go the global firm network, he keep the Kerberos ticket, and the SAP logon ticket.
I have managed the authentication problem with filter the login access page from the firm network with IIS rules, but with the ticket and the browser historic the user is nevertheless able to log them into the netwok.
So how could I manage with that ?

Similar Messages

  • Error while accessing portal.....

    Hi Experts,
       We have installed EP 7.0 SP 9.  It's working fine, but yesterday we met the problem, we can't able to access portal.
      After giving username and password, its opening the portal homepage with the following JavaScript Error on the taskbar.
    <b>1. 'disable personalize' is undefined
    2. 'EPCM.getSAPTop().gHistoryFrameworkObj' is null or not an object
    3. 'ActiveTrackingEntryIndex' is null or not an object</b>
      After showing errors above, its showing the portal HomePage.  If we click on any roles is loading with busy symbol, we can't able to navigate to any role or any workset after that.
      Please tell me some solution for this, it's very urgent.
      Points will be awarded.
    Regards,
    Chinnadurai.R.

    I also recieved this error.  It took me a while to discover the problem.  It is caused by the order in which .Net is installed.  If when you go to Applicaiton Pools you do NOT see: 
    - ASP.NET v4.0
    - ASP.NET v4.0 Classic
    If you only see
    - Classic .NET AppPool
    - DefaultAppPool
    - MBAMSitesAndSvcsAppPool
    Then you need to re run the setup of .NET using the commands below:
    Type cd C:\Windows\Microsoft.NET\Framework\v4.0.30319\ and press <kbd>ENTER</kbd>.
    Type aspnet_regiis.exe -ir and press <kbd>ENTER</kbd> again.

  • How to access portal activity report information in webdynpro

    Hi All, I want to display portal activity report table in webdynpro screen, for which I am using following tables
    WCR_USERSTAT,WCR_WEBCONTENTSTAT,WCR_USERFIRSTLOGON,WCR_USERPAGEUSAGE.How to fetch data from these table in webdynpro.?
    Is there any alternative for accessing Portal Activity report to webdynpro screen.
    Thanks &  regards
    Poonam

    Hi,
    http://help.sap.com/saphelp_nw2004s/helpdata/en/58/728ea01cf64fff996b827f2a06f9b1/frameset.htm
    http://help.sap.com/saphelp_nw04/helpdata/en/fb/144120ea5b4e9c9385d493a578d6c9/frameset.htm
    *******please reward points if the information is helpful to you*************

  • 802.1x per host authentication under one port with multi-host access by hub

    Dear,
    While multi-host connect to one port by hub, it seems that in multi-host mode, after one host passed the authentication, the port change state to up, and the other hosts do not need to authenticate any more. And in single host mode, only one host could access to the network under one port.
    In the situation with multi-host access to one port by hub, is it possible that we could control per user access by authentication for each?
    We did some test on 3550, it seems that the 3550 doesnot support what we need. And what about 4506?
    Thanks!

    Multiauthentication Mode
    Available in Cisco IOS Release 12.2(33)SXI and later releases, multiauthentication (multiauth) mode allows one 802.1X/MAB client on the voice VLAN and multiple authenticated 802.1X/MAB/webauth clients on the data VLAN. When a hub or access point is connected to an 802.1X port (as shown in Figure 60-5), multiauth mode provides enhanced security over the multiple-hosts mode by requiring authentication of each connected client. For non-802.1X devices, MAB or web-based authentication can be used as the fallback method for individual host authentications, which allows different hosts to be authenticated through different methods on a single port.
    Multiauth also supports MDA functionality on the voice VLAN by assigning authenticated devices to either a data or voice VLAN depending on the data that the VSAs received from the authentication server.
    Release 12.2(33)SXJ and later releases support the assignment of a RADIUS server-supplied VLAN in multiauth mode, by using the existing commands and when these conditions occur:
    •The host is the first host authorized on the port, and the RADIUS server supplies VLAN information.
    •Subsequent hosts are authorized with a VLAN that matches the operational VLAN.
    •A host is authorized on the port with no VLAN assignment, and subsequent hosts either have no VLAN assignment, or their VLAN information matches the operational VLAN.
    •The first host authorized on the port has a group VLAN assignment, and subsequent hosts either have no VLAN assignment, or their group VLAN matches the group VLAN on the port. Subsequent hosts must use the same VLAN from the VLAN group as the first host. If a VLAN list is used, all hosts are subject to the conditions specified in the VLAN list.
    •After a VLAN is assigned to a host on the port, subsequent hosts must have matching VLAN information or be denied access to the port.
    •The behavior of the critical-auth VLAN is not changed for multiauth mode. When a host tries to authenticate and the server is not reachable, all authorized hosts are reinitialized in the configured VLAN.
    NOTE :
    •Only one voice VLAN is supported on a multiauth port.
    •You cannot configure a guest VLAN or an auth-fail VLAN in multiauth mode.
    for more information :
    http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/dot1x.html

  • Error WS-32141 while  accessing portal help in 3.0.9.8.4 after  installing intermedia

    Hi All,
    I'm hitting the error, "No page has been created for this Content Area (WWS-32141)" while accessing portal help in 3.0.9.8.4.
    This error is coming after installing intermedia in my 8.1.7.3 database (not the enable intermedia option in GUI). Is this a known issue?
    Thanks in advance.
    With best regards,
    Nevin

    Zdenek,
    I had the same thing happen. What I did was abandon the install, uninstall ALL Oracle from my machine (I had Oracle reports, JDeveloper and other stuff installed). This included uninstalling 8.1.7 (Don't know if I needed to go that far but I did). Once my machine was clean I installed 8.1.7, created a minimal database and installed 9iAS. I didn't get that error again, but the Portal install failed miserably and I'm to the point of starting over again.
    One problem I'm having is a recurring blue screen of death with NTOSKRNL.EXE having an unhandled exception, never had that till I installed 9iAS so I am thinking that the error is somehow related. Have you seen that?

  • Restrict multi login in Portal

    Hi,
    I want to restrict multi login in Portal.
    I have java + abap dual stack.
    Please give me the solution.
    "award point waiting..for  solution......"

    I don't want to restrict multiple person.
    I want to provide single session for each user.
    More than single session will terminate , when the same user login for second session.
    I think, now u understand my issue.

  • How to set up reverse proxy to allow user access portal site from internet

    Hi all,
    I have installed 10g(10.1.2.0.2) AS on same machine(single IP for both mid and infra with different users respectively). there is a DMZ on which windows IIS is working through which we need to redirect the request to application server such that users access portal page from internet (within intranet all URLs are working fine). I have went through technet documentation where i found 3 ways : through this link
    http://download.oracle.com/docs/cd/B14099_19/core.1012/b13998/variants.htm
    Section 9.2.1.1, "Configuring OracleAS Web Cache as a Reverse Proxy"
    Section 9.2.1.2, "Configuring the Oracle HTTP Server as a Reverse Proxy"
    Section 9.2.1.3, "Configuring Internet Information Services as a Reverse Proxy"
    I am confused to which option to use. Also i went through the metalink document 270160.1
    Please help me which option to choose to do this.
    Thanks.

    Hi Hozy,
    May be it's too late, I am thinking to go in the same route for our sap portal access to external customers. Please can you share your experience , like what are the challenges have you faced? what is the complexity? what are all the resources we need to configure this?
    I appreciate your feedback.
    Thanks
    Krish

  • Error while accessing portal via internet

    Hi all,
    I am having problems when accessing portal through internet. I have installed NW04 SR1(WAS, EP & KM). Then I created some iviews and pages.
    Now <u>when I open the portal through internet(using its ip address)</u> and try to access PCD, it is showing <b>undefined</b> in place of the loading message and it is not loading anything. Also <b>the detailed navigation is empty</b> in all pages(eg. System Administration, Monitoring, etc.). But <u>when i access it locally(using machine name) everything works fine</u>. Any idea what the problem is?
    Another problem is with the KM Navigation IView. I have created a custom layout set for this iview. In the iview I am displaying the documents in a folder along with a link for approval process. But <b>when i click on the link, it shows javascript error "Access is denied"</b>. <u>This happens when I access it through internet. When I access it locally, it works fine and show me the context menu for approval</u>. Any idea?
    Please reply fast as it is urgent.
    Thanks in advance.
    Ranjith

    hi
    just check this out
    http://help.sap.com/saphelp_ep60sp2/helpdata/en/37/c1513c388d8f0ce10000000a11405a/content.htm
    http://help.sap.com/saphelp_ep60sp2/helpdata/en/e9/83d5f20ea845b587be83de8554191e/plain.htm

  • How to access Portal Logged in user in Web Service application

    Hi Experts,
    I have created one Deployable Proxy and based on that i have created Web Based (WAR) project. to consume the proxy i have created Servlet based java file which invokes Web services. Based on this WAR project i created EAR application which deploys on J2EE server.
    I am facing issue while accessing Portal Logged in user in my Servlet Class in WAR project so can  you please provide inputs for how we can access Portal Logged in user in our Servlet class? also how we can access LDAP detailes of portal Logged inuser ?
    I tried to fetch the Logged in user from servlet request but i can't access it giving me null value. Following is the method details that i am using in my servlet.
    protected void doGet(HttpServletRequest request,HttpServletResponse response)throws ServletException, IOException                
    IUser user = UMFactory.getAuthenticator().getLoggedInUser();
    String strName = user.getFirstName();
             If I checked in LDAP values First name for logged in user is present but in my code its giving Null value.
    Can you please provide your inputs on above issue.
    Regards,
    Rahul

    have you found a solution this problem yet?

  • Need info on Accessing portal services within a Web Dynpro application

    Hi,
    I need information on Accessing portal services within a Web Dynpro application.I want to explore this topic.Can anyone give useful links?
    Thanks in advance.
    Rajani N

    Hi
    how to reference  a portal service with web dyn pro ?
    https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/ep/how%20to/how%20to%20access%20a%20portal%20service%20within%20a%20web%20dynpro%20java%20application.pdf
    http://help.sap.com/javadocs/NW04S/current/wd/com/sap/tc/webdynpro/clientserver/portal/WDPortalUtils.html
    Best Regards
    Jakub Krecicki

  • Error while trying to access portal

    Hi All,
    I have installed NetWeaver CE 7.1 in my system. But when i tried to access portal with the url
    http://<server name>: <port number>/irj/portal
    im getting the following error
    Error component failed , reason : Error while retrieving service: com.sap.portal.runtime.system.authentication.authentication Original Exception : Error while retrieving service: com.sap.portal.runtime.system.authentication.authentication
    Can anyone tell me what could be the reason for this error and how to resolve this?
    Please guide me........
    Regards,
    Padmalatha.K

    HI padmalatha kontham,
    If there is no any ignore option in the dilog box, just try to close it and try again. If u get that again, check the portnumber and hostname are correct or not.
    there won't be any problem other than that.
    example
    http://<host>:<port>/irj/portal
    Thanks
    Suresh

  • How to handle and manage a multi Database access in runtime with LCDS?

    Hello there
    I got several customer working with the same application and I wonder how,  with LCDS,  to manage  in a runtime a multi dataBase access; without creating a configuration "mxl" file in
    the folder catalina for each database.
    Indeed, each customer have their own dataBase, and so far, I did not find out how to avoid creating a config xml file in catalina for every single database; which force me to create as well for each customer a  folder application, since the name of the config file in catalina require a folder application to be ran under tomcat....
    Thus, my question is :
    Is there anyway to create only one configuration mxl file in catalina (in the server side) and then from the client side (application) let the user select its environment (meaning its database) to run the application.... this technic can be also used for multi database environment such as : Dev / Test / Prod   environment (or database) where the same application can access to.
    Please if any one have an idea or already delt with; just let me know, because I'm entering in a bootle neck and the situation is getting serioulsy critical....
    Regards

    Hello Ulrich,
    with compact and repair I mean the MSAccess function "Compact and Repair".
    Please follow the link below for more details:
    http://office.microsoft.com/en-us/access-help/compact-and-repair-an-access-file-HP005187449.aspx
    Normally you can execute this function directly in Access or with the Windows ODBC Data Sources Administrator  => "Control Panel" => "Administrative Tools" => "Data Sources (ODBC)"...
     I want to execute this function via cvi code and not by hand ;-).
    Thank you for your support.
    Frank

  • ESYU: R12 - Order Management를 위한 Multi Org Access Control(MOAC) setup 방법

    Purpose
    Oracle Order Management - Version: 12.0 to 12.0
    Information in this document applies to any platform.
    R12의 Order Management에 대핸 Multi Org Access Control(MOAC) setup 방법에 대해 알아본다.
    Solution
    일반적인 MOAC Setup:
    1. HRMS에서 Security Profile을 정의:
    a. HRMS Management responsibility 선택
    b. HRMS Manager> Security> Profile로 이동
    c. Security Profile이 정의되어 있는지 확인 (OM responsibility 혹은 Site level로)
    d. 만일 아직 setup 되어져 있지 않다면 Operating Units를 입력
    e. 저장
    Note: 만일 위 d step과 같이 새로운 security profile을 생성하였다면 concurrent program 'Security List Maintenance'를 꼭 실행해야 한다.
    그렇지 않으면 multiple operating units가 OM forms의 LOV에 나타나지 않을 것이다.
    이 program은 multi-org access를 validating 하기 위해 사용하는 table에 data를 생성한다.
    Navigation: HRMS Management> HRMS Manager> Processes & Reports> Submit Process & Report> Security List Maintenance
    2. MO Profile Options setup:
    a. MO: Security Profile - 이 profile setting은 MOAC functionality를 활성화 한다.
    b. MO: Default Operating Unit - 이 Operating Unit는 OM forms과 report에서 default가 될 것이며, 이를 clear 하거나 변경하기 위해 LOV를 사용할 수 있다.
    Keep the MO profiles in sync:
    MO: Security Profile은 site와 responsibility level로 setting 할 수 있다.
    MO: Default Operating Unit은 site, responsibility, user level로 setting 할 수 있다.
    Application이 원하는대로 동작되지 않는것을 발견하면 이 profile options의 setting 값을 확인한다.
    3. OM setup:
    R12 upgrade 시 OM Profile에서 migrate 된 새로운 OM System Parameters를 확인:
    Order Management Super User> Setup> System Parameters> Values
    (See <<NOTE 393646.1>>-R12 Readiness Cheat Sheet: Migrated OM Profile Options)
    4. Form에서 hidden field 'Operatin Unit'를 활성화시키고 default folder로 저장:
    Sales Order and Order Organizer forms
    Quick Sales order and Organizer forms
    Sales Agreement forms
    Pricing and Availability form
    Other forms
    Note: Sales Order form에서 hidden field 'Operating Unit'를 'Show' 하기 전에 fotm안에 이 field를 위한 공간을 만들어 놓아야 한다.
    예를 들면 Customer Number field를 짧게 하거나 Operating Unit field로 이 field를 덮어씌울수 있다.
    Reference
    Note 393634.1

    Hi Larry,
    Have you considered adding the exec apps.mo_global.set_policy_context call to your connection's start-up script?
    Tools -> Preferences -> Database -> Filename for connection startup scriptNot the most flexible approach, so I'm not sure if it is appropriate for your application, but just a thought. You might create distinct connection names with different start-up scripts for each org_id.
    Regards,
    Gary
    SQL Developer Team

  • How to handle and Manage Multi DataBase access with LCDS in runtime ?

    Hello there
    I got several customer working with the same application and I wonder how,  with LCDS,  to manage  in a runtime a multi dataBase access; without creating a configuration "mxl" file in
    the folder catalina for each database.
    Indeed, each customer have their own dataBase, and so far, I did not find out how to avoid creating a config xml file in catalina for every single database; which force me to create as well for each customer a  folder application, since the name of the config file in catalina require a folder application to be ran under tomcat....
    Thus, my question is :
    Is there anyway to create only one configuration mxl file in catalina (in the server side) and then from the client side (application) let the user select its environment (meaning its database) to run the application.... this technic can be also used for multi database environment such as : Dev / Test / Prod   environment (or database) where the same application can access to.
    Please if any one have an idea or already delt with; just let me know, because I'm entering in a bootle neck and the situation is getting serioulsy critical....
    Regards

    Hello Ulrich,
    with compact and repair I mean the MSAccess function "Compact and Repair".
    Please follow the link below for more details:
    http://office.microsoft.com/en-us/access-help/compact-and-repair-an-access-file-HP005187449.aspx
    Normally you can execute this function directly in Access or with the Windows ODBC Data Sources Administrator  => "Control Panel" => "Administrative Tools" => "Data Sources (ODBC)"...
     I want to execute this function via cvi code and not by hand ;-).
    Thank you for your support.
    Frank

  • How do I create a group of channels for input to a AI multi point

    Hi,
        How do I create a group of channels for input to a AI multi point, so that I can output it to 3 different graphs.I figured out the graphs but I am not able to figure out how to create the group of channels for the input.I saw many examples where a group of channels is given as an input.

    hello
    You have to put Daq Mx Create virtual channel.vi in a For loop. out side that u should give an array of virtual channel which ever you need to acquire. i am sending the vi in 7.0 too.
    Attachments:
    read_channel.vi ‏40 KB

Maybe you are looking for