Multiple Apps using same security system -  Attn: Frank

Hi Frank:
Based on what you suggested for a scenario with different apps/databases using one "application_users", "application_roles" tables and one "system-jazn-data.xml" file, does the following setup sound right?
(1) APPLICATION_ROLES table
Add an additional column "APPLICATION_REALM". This will have "app_one_realm", "app_two_realm" etc.
(2) System_jazn_data.xml
<application>
<name>current-workspace-app_one</name> (***App One wrkspace****)
<login-modules>
<login-module>
<class>oracle.security.jazn.login.module.db.DBTableOraDataSourceLoginModule</class>
<control-flag>optional</control-flag>
<options>
     <option>
     <name>data_source_name</name>
     <value>jdbc/BDTestDS_App_One</value> (***Points to connection for App One. Does this sound right?****)
</option>
<option>
<option>
<name>realm_column</name> (***is this correct?**)
<value>application_realm</value> (**Is this correct?***)
</option>
</options>
</login-module>
</login-modules>
</application>
<application>
<name>current-workspace-app_two</name> (****App Two wrkspace. Make sense*** )
<login-modules>
<login-module>
<class>oracle.security.jazn.login.module.db.DBTableOraDataSourceLoginModule</class>
<control-flag>optional</control-flag>
<options>
     <option>
     <name>data_source_name</name>
     <value>jdbc/BDTestDS_App_Two</value> (***Does this sound right? Coonection for App Two*****)
</option>
<option>
<name>realm_column</name> (***is this correct?***)
<value>application_realm</value> (***Is this correct?***)
</option>
</options>
</login-module>
</login-modules>
</application>
(3) system-application.xml (Points to absolute path for system-jazn-data.xml)
<jazn provider="XML" location="<absolute address>/system-jazn-data.xml" default-realm="jazn.com"/>
(4) jazn.xml (Points to absolute path for system-jazn-data.xml)
<jazn
location="<Absolute address>/system-jazn-data.xml"
default-realm="jazn.com">
</jazn>
(5) I am not clear about your comment "Regarding Application Context when assigning roles to a J2EE authenticase case see jaassec/index.htm doc" Are you talking about something in the web.xml for each app?
How does (a)
<option>
<name>realm_column</name>
<value>application_realm</value>
</option>
in "system-jazn-data.xml"
and (b) "APPLICATION_REALM" in APPLICATION_ROLES table
and (c)      
<application>
<name>current-workspace-app_one</name>
</application>
<application>
<name>current-workspace-app_one</name>
</application>
in "system-jazn-data.xml" all tie in?
In other words, how are the roles tied to the appropriate application context? Each app needs to know its role?
Thanks

Hi,
please note that application_realm only works with the LoginModule provided with the document. It doesn't work with the OC4J oracle.security.jazn.login.module.db.DBTableOraDataSourceLoginModule. Note that the how-to document I pointed you to explains the use of custom LoginModules by example of custom login modules I wrote.
The way it works is that the application_realm if provided is used when querying the application specific roles. If a realm is not provided then all roles are queried for the user.
Frank

Similar Messages

  • Multiple apps using same files, how to lock them?

    Hi all,
    I have a unique situation (or so I think). We are running our apps in Citrix servers, such that many users log in to a single citrix server and run our java apps. The problem is, it will be possible that more than one user might use the same app and start to work with the same file.
    I have seen the new NIO package, read that it has better file locking and stuff. I guess what I am after is a way to graphically display the user using a given file, with some other features. Basically, if user 1 runs the app, and clicks on a file, they have sole access to it. Now, if user 2 runs the same app, what I would like to see if I can do is in user 2's view of the file system, they see somethine like:
    xxxx.txt
    yyyy.xml (user1)
    zzz.bat
    So, somehow, I want to update the JList view of each users view either every so often, or when they click on a file that is being used by another, to let them know that it is locked AND the user who has locked it. This way, they can at least ask that user if they can "unlock" their use of it.
    Ideally, if there is some way for two or more copies of the same program (running on the same or different citrix servers) could communicate with one another to constantly update each other of file lock status, that would be great. However, if this is more complex than a few hundred lines, it is a rare occassion that this will happen so it is not worth the effot. Mainly, I need to minimally make sure that if a file is locked by one user, when another user tries to use it they are notified that it is locked.
    Thanks.

    How about doing file maangement through your server? Keep a database of what files are checked out by whom

  • How to update software on multiple iPhones using same iTunes account?

    How to update software on multiple iPhones using same iTunes account?

    SeanB15 wrote:
    Here are more details on my situation which should help clarify things...
    I purchased three iPhone 4 models back when they first came out (for my family) that all share the same iTunes account for access to apps and music, but each phone/user still has his/her custom contact list, email accts, and select lists of apps and music from the one iTunes acct library.  The problem is (as I understand it) that I can only update the software on one of the three iPhones – the primary phone I used to setup the iTunes acct without wiping out the separate contact lists, etc. As it stands today... the first (primary) iPhone associated with the iTune acct has been updated with the latest software version 5.1.1 and sync'd up with all the apps, music, etc from the one iTune acct, while the other two iPhones are still running on the original software version 4.0.2 and are experiencing problems now. I was advised by AT&T back in January that it would be necessary to setup separate iTunes accts for the second and third iPhones in order to receive system updates and still be able to manage separate contact lists, etc. If I go this route, I assume we will lose all the apps on phones #2 and #3 that we have been "sharing"... correct? Since this AT&T advice was prior to iCloud coming out, would iCloud be a better solution or at least part of the solution? I really don't yet understand how iCloud works. Hopefully, one of you can help me??
    we have 2 iphone 4's synced to the same itunes account for apps and music since the day we bought them, but each has a different icloud acct. they have both been updated on the same itunes account with every update that has come out since we bought them in december of 2010. nothing on either phone has ever been lost or duplicated. having said all that, maybe i'm missing something here, but we have had no problems. we do have itunes setup to sync manually. i do believe i'm a piker compared to lawrence finch, but i'm just telling you what happens in my house. maybe check with apple? is there a store near you?

  • Office 365 App using NAPA - "The system cannot find the file specified. (Exception from HRESULT: 0x80070002)"

    Hello,
    I am creating an app using NAPA tool in Office 365. I am trying to "Add an attachment" to a custom list item using SPServices. When I am using my code  (jquery code) in content editor web part on a page, its working fine, but when I am adding
    the same code in an app, its giving me error :  "The system cannot find the file specified. (Exception from HRESULT:
    0x80070002)" - 500 Internal Server error.
    (function () {
    // This code runs when the DOM is ready and creates a context object which is
    // needed to use the SharePoint object model
    $(document).ready(function () {
    //alert('In doc ready');
    $('.attachmentButton').change(function(event){
    var listName = 'UploadTest',
    itemId = 2;
    handleFileChange(listName,itemId,event.target.files);
    function handleFileChange(listName,itemId,files){
    alert('In handleFileChange :=' + listName + "" + itemId + "" + files[0]);
    alert('files.length :=' + files.length);
    var filereader = {},
    file = {},
    i=0;
    //loop over each file selected
    for(i = 0; i < files.length; i++) {
    alert('In for loop');
    file = files[i];
    filereader = new FileReader();
    filereader.filename = file.name;
    alert('filereader.filename :=' + filereader.filename);
    filereader.onload = function() {
    var data = this.result;
    var n=data.indexOf(";base64,") + 8;
    //alert('n :=' + n);
    //removing the first part of the dataurl give us the base64 bytes we need to feed to sharepoint
    data= data.substring(n);
    //alert('data :=' + data);
    alert('Above SPServices this.filename :=' + this.filename);
    $().SPServices({
    operation: "AddAttachment",
    listName: listName,
    asynch: false,
    listItemID:itemId,
    fileName: this.filename,
    attachment: data,
    completefunc: function (xData, Status) {
    console.log('attachment upload complete',xData,status);
    alert('Status :=' + Status);
    if (Status.toLowerCase() == "error"){
    alert(xData.responseText);
    alert(xData.status);
    alert(xData.statusText);
    filereader.onabort = function() {
    alert("The upload was aborted.");
    filereader.onerror = function() {
    alert("An error occured while reading the file.");
    //fire the onload function giving it the dataurl
    filereader.readAsDataURL(file);
    alert(xData.responseText); - gives error - " "The system cannot find the file specified. (Exception from HRESULT: 0x80070002)""
    alert(xData.status); - gives error - "500"
    alert(xData.statusText); - gives error - "Internal server error"
    Server Publishing infrastructure and Server publishing features are activated on site collection and site respectively.
    Any suggestions, why I am getting this error in NAPA ?

    Hi,
    According to your post, my understanding is that you have an issue about adding attachments to list items in app.
    To add attachment to list item in the host web, we should first get the list and the list items from the host web, then add the attachments to the list items.
    There are two articles about retrieve the list and list items in the host web, you can refer to them.
    http://www.dotnetcurry.com/showarticle.aspx?ID=1028
    http://www.c-sharpcorner.com/UploadFile/93cb27/retrieve-sharepoint-app-host-web-list-items-in-sharepoint-ho/
    What’s more, we can also use the REST API to achieve the same scenario.
    http://www.c-sharpcorner.com/UploadFile/472cc1/add-attachments-to-list-items-in-sharepoint-2013-using-rest/
    Thanks & Regards,
    Jason
    Jason Guo
    TechNet Community Support

  • How can I download eBooks to multiple iPads using same apple ID?

    How can I download eBooks to multiple iPads using the same apple ID?

    Those are called iBooks. On the devices go to iTunes app and then to the Purchased section in bottom row and find the media and tap install

  • Multiple apps (instances) same server?

    Hi all,
              Are there any known issues with having multiple apps share the same weblogic.jar file?
              I have a Tomcat server that has the same app installed twice; Productive and Test.
              When both are started, they seem to be unable to read from their queues. The following exception was thrown:
              [Security:090398]Invalid Subject: principals=[jndi, Deployers, Monitors, Operators]
              When we only started one instance (either Productive or Test) the single instance worked perfectly.
              Now, we have installed both instances on seperate servers and have started both and they also appear to be working perfectly - however, it would be more ideal for us if we could get them working in harmony on the same server.
              Is it not possible to share the weblogic.jar file?
              Cheers,

    barnes,
              Thanks your response.
              The application (both) do create their own threads (daemons), but I can not see how they could be intertwined.
              I've ran tests to make sure they do reference their own settings (memory) and all seems to be ok.
              What I can't test is the internal workings of Tomcat, maybe somehow something goes awry internally there!?
              When I get a chance, I'll run some more tests... If I get something working, I'll post the results here (if I get the time).
              Cheers

  • Multiple Apps of Same App?!?

    Is it possible to have multiple apps of the same thing? For example is it possible to have two facebook apps installed?
    Solved!
    Go to Solution.

    It shouldn't be but it depends on how the apps have been written.  I did have it happen where I had two Facebook apps installed but one was a beta version.  When it happened I wasn't able to use both, as only one showed an icon but two showed in the list of apps.  I deleted the older one and the newer one still worked.  The short answer is no, but it does happen on rare occasion.
    1. Please thank those who help you by clicking the "Like" button at the bottom of the post that helped you.
    2. If your issue has been solved, please resolve it by marking the post "Solution?" which solved it for you!

  • Multiple users using same email account

    I'm the computer tech for a volunteer fire department. We have multiple officers using this computer and each one wants access to the same email account under their personal user accounts. Can this be done?

    You just need to "move" the profile to a common access location.
    http://kb.mozillazine.org/Moving_your_profile_folder_-_Thunderbird

  • SQL Loader : Loading multiple tables using same ctl file

    Hi ,
    We tried loading multiple tables using the same ctl file but the data was not loaded and no errors were thrown.
    The ctl file content is summarised below :
    LOAD DATA
    APPEND INTO TABLE TABLE_ONE
    when record_type ='EVENT'
    TRAILING NULLCOLS
    record_type char TERMINATED BY ',' ,
    EVENT_SOURCE_FIELD CHAR TERMINATED BY ',' ENCLOSED BY '"',
    EVENT_DATE DATE "YYYY-MM-DD HH24:MI:SS" TERMINATED BY ',' ENCLOSED BY '"',
    EVENT_COST INTEGER EXTERNAL TERMINATED BY ',' ENCLOSED BY '"',
    EVENT_ATTRIB_1 CHAR TERMINATED BY ',' ENCLOSED BY '"',
    VAT_STATUS INTEGER EXTERNAL TERMINATED BY ',' ENCLOSED BY '"',
    ACCOUNT_REFERENCE CONSTANT 'XXX',
    bill_date "to_date('02-'||to_char(sysdate,'mm-yyyy'),'dd-mm-yyyy')",
    data_date "trunc(sysdate)",
    load_date_time "sysdate"
    INTO TABLE TABLE_TWO
    when record_type ='BILLSUMMARYRECORD'
    TRAILING NULLCOLS
    RECORD_TYPE char TERMINATED BY ',' ,
    NET_TOTAL INTEGER EXTERNAL TERMINATED BY ',' ENCLOSED BY '"',
    LOAD_DATE_TIME "sysdate"
    INTO TABLE BILL_BKP_ADJUSTMENTS
    when record_type ='ADJUSTMENTS'
    TRAILING NULLCOLS
    RECORD_TYPE char TERMINATED BY ',' ,
    ADJUSTMENT_NAME CHAR TERMINATED BY ',' ENCLOSED BY '"',
    LOAD_DATE_TIME "sysdate"
    INTO TABLE BILL_BKP_CUSTOMERRECORD
    when record_type ='CUSTOMERRECORD'
    TRAILING NULLCOLS
    RECORD_TYPE char TERMINATED BY ',' ,
    GENEVA_CUSTOMER_REF CHAR TERMINATED BY ',' ENCLOSED BY '"',
    LOAD_DATE_TIME "sysdate"
    INTO TABLE TABLE_THREE
    when record_type ='PRODUCTCHARGE'
    TRAILING NULLCOLS
    RECORD_TYPE char TERMINATED BY ',' ,
    PROD_ATTRIB_1_CHRG_DESC CHAR TERMINATED BY ',' ENCLOSED BY '"',
    LOAD_DATE_TIME "sysdate"
    Has anyone faced similar errors or are we going wrong somewhere ?
    Regards,
    Sandipan

    This is the info on the discard in the log file :
    Record 1: Discarded - failed all WHEN clauses.
    Record 638864: Discarded - failed all WHEN clauses.
    While some of the records were loaded for one table.
    Regards,
    Sandipan

  • Multiple app on same Run time engine

    Hello
    Can we run multiple application on same CVI run time engine?
    We have thin client desktop and want to run application on different terminals. Is it possible?
    Means on server there will be one application installed and 5 terminals will  use same desktop application.
    Thanks

    Yes, you can call multiple instances of the Run-Time Engine. 

  • How to send to multiple people using same port?

    I am trying to have one person send TWO audio sources to 10 others using same port- lets say 12345. I get "Can't open local data port:" error. The first audio is fine since I just use .addTarget(). Is there a way i can do the same for the 2nd audio source still using the same port? thanks!

    As far as I know, you should transmit using even-numbered ports, eg. 22222 and 22224.
    I think a port numbered 22223 and 22225 are opened respectively to handle control information.
    Could be wrong, but try it anyway!
    StHogan

  • Multiple apps with same name

    With all the trouble I've been having with App Store update inconsistencies, I went and looked at the directory where the .ipa files are stored. (These are the actual application files.) I was already aware of the multiple generations of files that are kept in the directory when apps are updated, but I noticed something else...
    There are some applications that have the same name. In my case, I have more than one Solitaire game simply called "Solitaire" and I have more than one Sudoku game with the name "Sudoku". It looks like the way iTunes differentiates them is by giving them generational number. For example, one Sudoku program is called "Sudoku.ipa", and another is called "Sudoku 1.ipa". Then if there is an update to the first program, it gets the new name "Sudoku 2.ipa". You can see that different programs have different files sizes, but by looking at names there is no way to tell which is which.
    I wonder if this factors into some of the problems with application updates and synching them to the iPhone? It seems odd that the same sequential numbering scheme is used for two different purposes: 1. Distinguishing different applications that have the same file name, and 2. Keeping multiple generations of the same program in the directory. It could get pretty confusing.

    If I delete extra .ipa files when two different applications have the same name, then I need to keep track of which is the current version of what. "Sudoku 4.ipa" might be the latest version of one program, and "Sudoku 7.ipa" could be the latest version of another.
    I wish Apple would create a naming scheme where every application has a unique name, and sequential generations are not used. This would make it much cleaner, and there would be no ambiguity as to either which program is which, or which version is which.
    I find the safest way to get rid of all the dups is to just delete them all and re-download the app. The bugs in iTunes still make a mess of things, though.

  • Multiple Apps, Using Spaces, need more flexibility.

    Hello all,
    I am a novice web designer and still very new to mac os.
    Between the compliment of Adobe apps, an ftp client, firefox, bbedit and your random textedit, At timess, I 'm struggling to keep my apps in place. I'm quite literally using all of my screen real estate on most (if not all) of my spaces.
    I'm restricted into branching out into other spaces due to the fact that I'm a FireFox, FireBug, FireFTP kind of mac user and have yet to find a way to enable the usage of ONE application between multiple spaces (WITHOUT it 'following' me from to space to space).
    With so many applications open in a limited space, it seems like something is always getting knocked out of place, not to mention it's time consuming always having to setup the same configuration. I have yet to find a way to keep everything rigid and in place, does antyone know of a way to accomplish this?
    An "advanced tab" to further configure spaces, a file management program that enables more rigid application controls?
    Or is there just a much better way to accomplish this?
    Thank you.
    Mark.
    Message was edited by: MarkSKell
    Message was edited by: MarkSKell

    I've set all of the programs I need for normal projects to open on specific spaces using the Spaces preferences. I know where they will come up as soon as I launch them. Several of my programs are set to launch at boot because I use them all the time, and they are already open on their space desktop when I want to use them.
    I've been using dual monitors since OS 7.5 - Pretty nice for putting all of the menu's on a second monitor while working with graphics or pages on the main monitor. The adapter you buy for $20 can be for DVI or VGA monitors.
    Spaces works fine this way. I run 9 spaces (in a 3 X 3 grid) as a limit because I change spaces by using the Control + a number key combo, and you can only use single digits and can't choose 0... Still this does privide me with 18 working spaces and the programs stay where they belong. You can use the Arrow keys to change spaces, but I don't keep track of my app's spatially. I've got a list on the wall to remind me if I get rubber-headed.
    Finder is set to work on all spaces so that folder windows don't disappear on me while working with different files in a project folder.

  • Multiple Macs using same Apple ID for iTunes

    I have two macs, and I've been trying to download itunes purchased content onto one that I purchased on the other. I'm using the same Apple ID for iTunes access on both, but now it won't let me download, giving me that infuriating message about only being able to associate a device with one Apple ID over a three month period. I've neved used any other Apple ID for this, so I'm very confused about what could be happening. Only started after "upgrading" to iOS5 and iCloud.

    iTunes Match is associated with only one Apple ID and cannot be shared across Apple IDs. For your wife to make use of iTunes Match and see the music in the cloud she must login to your Apple ID on the iTunes Store and she will have to stay logged in. This may cause difficulty when updating apps purchased with her Apple ID.
    Also keep in mind that a computer can only be associated with one Apple ID for iTunes Match, automatic downloads and re-downloading of content once every 90 days: http://support.apple.com/kb/HT4627.

  • How to track session IDs for multiple apps in same server instance?

    All:
    We have 2 web applications (for example: app1,app2) running in one app
    server instance (weblogic 5.1). Both of those applications use the same
    cookie name (defined in weblogic.properties ) to keep the HttpSessionID.
    The tricky thing is that if a client logs in to app1 and then logs in to
    app2 with the same web browser, (for example, IE). The app1's
    HttpSessionID kept in the cookie will be overwritten by app2's
    HttpSessionID because they use the same cookie name.
    My question is this:
    Is there a way to specify a cookie name for each application running in
    an application server instance?
    The only way we know of to work around the problem is that we have to
    host the app1 and app2 in 2 different app server instances so we can
    config app1 and app2 to use different cookie names for the
    HttpSessionID. We are curious if there is a better way to do that.
    BTW, We must use Cookie because of the requirement of cluster and load
    balancer.
    Thanks,
    Ben

    Hi Ben,
    Which version of Weblogic are you using??
    In 5.1 sp8 the Cookie names of the Web Apps are different by default.
    Prasad Peddada <[email protected]> wrote:
    Why can't you add your own cookie?
    In 6.0 you can have different cookie names for different
    apps.
    -- Prasad
    "Benjamin D. Engelsma" wrote:
    All:
    We have 2 web applications (for example: app1,app2)running in one app
    server instance (weblogic 5.1). Both of those applicationsuse the same
    cookie name (defined in weblogic.properties ) to keepthe HttpSessionID.
    The tricky thing is that if a client logs in to app1and then logs in to
    app2 with the same web browser, (for example, IE). The app1's
    HttpSessionID kept in the cookie will be overwrittenby app2's
    HttpSessionID because they use the same cookie name.
    My question is this:
    Is there a way to specify a cookie name for each applicationrunning in
    an application server instance?
    The only way we know of to work around the problem isthat we have to
    host the app1 and app2 in 2 different app server instancesso we can
    config app1 and app2 to use different cookie names forthe
    HttpSessionID. We are curious if there is a better wayto do that.
    BTW, We must use Cookie because of the requirement ofcluster and load
    balancer.
    Thanks,
    Ben

Maybe you are looking for

  • Creative MediaSource setup.exe ha

    I downloaded CMS_PCAPP_LB_3_30_2.exe and tried to install it. After doing CRC checks and downloading some files, the setup program hangs. I see it on the taskbar, but all of the options (Move, Size, Close, etc.) are grayed out, and the Task Manager l

  • As of late, my COMPUTER has been shutting down Randomly.....

    Ok here is what is happening. I am on the compuer, and all of a sudden the whole screen goes black and the computer sort of shuts down. but not completely. i can't see anything or do anything, but when i hold down the power buttton and push it, after

  • How to find modulus(n) and public key exponent(e)Sor

    I did the following code: import java.security.*; class keypair public static void main(String args[]) try {         KeyPairGenerator keyGen = KeyPairGenerator.getInstance("RSA");         keyGen.initialize(1024);         KeyPair keypair = keyGen.genK

  • Is necessay run entire flat file

    in bdc flat file having 10000 records but in between means afere some records updated(5000) system crash.is necessary to run entire flat file or not. can anybody explain in detail in both methods.

  • Photoshop vs Illustrator...keeping it vector

    Hi all, I use photoshop ALL the time and love every feature. However, I've been forcing myself to use Illustrator (love it, but find it's limited compared to photoshop for many projects I do). I'm hoping you all can help with two questions that I hav