NAM 3.2.1 Custom Authentication Class for BASIC not loaded

Hi!
Im trying to write a custom authentication class for
BASIC/PROTECTED_BASIC, so I started with the PasswordClass sample from
SDK novell-nacm3_2-devel-2012.08.10.tar.gz, stripped out the
STSAuthenticationClass and changed the type to
AuthnConstants.PROTECTED_PASSWORD --> and it works!
public String getType() {
return AuthnConstants.PROTECTED_PASSWORD;
Next I wanted to create a custom BASIC auth class by changing the type
to AuthnConstants.BASIC / AuthnConstants.PROTECTED_BASIC
public String getType() {
return AuthnConstants.PROTECTED_BASIC;
but now IDP complains about the unsupported type.
<amLogEntry> 2012-12-20T15:11:17Z WARNING NIDS Application:
AM#300105006: AMDEVICEID#FC77EC2A45509E7B: Failed to load
authentication class due to unsupported type: ITdBasicTestClass
</amLogEntry>
Im running NAM 3.2.1 single box appliance for development/testing.
There is an old thread here, that looks like the same issue:
http://tinyurl.com/c6eawj6
Any hits?
regards
Thomas
PS: What i really want to solve is strip out the Domain from the
username on basic authentication since most MS apps/clients provide the
username in format DOMAIN\USER...
reibenwein
reibenwein's Profile: https://forums.netiq.com/member.php?userid=1382
View this thread: https://forums.netiq.com/showthread.php?t=46430

hmmm, well try writing the value out to stderr and see if you can at least make sure you are getting
a good read.
Like a System.out.println(AuthnConstants.PROTECTED_PASSWO RD);
I ran into some strange stuff where some constants had no values for no apparent reason when they
should.
I would also try supplying the actual value instead of the constant and see if it goes through that
way. ("ProtectedBasic")
On 1/10/2013 11:14 AM, reibenwein wrote:
>
> Hi!
>
>
> I copied com.novell.nam.authentication.PasswordClass to start with my
> test custom auth class. It includes a method getType() like this:
>
> /**
> * Get the authentication type this class implements
> *
> * @return returns the authentication type represented by this
> class
> */
> public String getType() {
> return AuthnConstants.PROTECTED_PASSWORD;
> }
>
>
> --> IDP loads my custom auth class, as long as a leave getType()
> returning AuthnConstants.PROTECTED_PASSWORD! But this is form base
> authentication. According to the API documentation (see page 17 in
> namc_enu.pfd within the sdk download), getType should
> returnAuthnConstants. PROTECTED_BASIC for secure Basic authentication
> (or AuthnConstants.BASIC for non SSL Basic auth). So i changed getType()
> like this:
>
>
> /**
> * Get the authentication type this class implements
> *
> * @return returns the authentication type represented by this class
> */
> public String getType() {
> return AuthnConstants.PROTECTED_BASIC;
> }
>
>
> --> and then IPD comes with the error "Failed to load authentication
> class due to unsupported type"...
>
>
> regards,
> Thomas
>
>

Similar Messages

  • How to unconfigure a Custom Authentication Module for Convergence

    After flailing with the incomplete instructions for [Writing a Custom Authentication Module for Convergence|http://wikis.sun.com/display/CommSuite/Writing+a+Custom+Authentication+Module+for+Convergence]
    , I decided to try to revert back to the default.
    How do you remove the module and go back to the default? I tried to unset the options, but they did not seem to take effect.
    sudo /opt/sun/comms/iwc/sbin/iwcadmin -w xxxxx -o auth.custom.servicename -v ""
    sudo /opt/sun/comms/iwc/sbin/iwcadmin -w xxxxx -o auth.custom.callbackhandler -v ""
    sudo /opt/sun/comms/iwc/sbin/iwcadmin -w xxxxx -o auth.custom.loginimpl -v ""
    sudo /opt/SUNWappserver/bin/asadmin stop-appserv
    sudo /opt/SUNWappserver/bin/asadmin start-appserv
    AUTH: DEBUG from com.sun.comms.client.web.sso.SSOFilter  Thread httpSSLWorkerThread-80-1 at 14:45:25,951 - SSO is disabled
    AUTH: WARN from com.sun.comms.client.protocol.delegate.agent.LoginContextAgent  Thread httpSSLWorkerThread-80-1 at 14:45:25,953 - Subject not found in session, creating one
    AUTH: ERROR from com.sun.comms.client.protocol.delegate.agent.LoginContextAgent  Thread httpSSLWorkerThread-80-1 at 14:45:25,954 - Unabled to load the class due to 
    AUTH: ERROR from com.sun.comms.client.protocol.delegate.agent.LoginContextAgent  Thread httpSSLWorkerThread-80-1 at 14:45:25,956 - Unable to instantiate callback handler 
    AUTH: ERROR from com.sun.comms.client.protocol.delegate.LoginCommandDelegate  Thread httpSSLWorkerThread-80-1 at 14:45:25,957 - Failed to Login the user: Unable to instantiate callback handler 
    PROTOCOL: ERROR from com.sun.comms.client.protocol.delegate.LoginCommandDelegate  Thread httpSSLWorkerThread-80-1 at 14:45:25,960 - Protocol Error while login : Unknown Reason

    jessethompson wrote:
    After flailing with the incomplete instructions for [Writing a Custom Authentication Module for Convergence|http://wikis.sun.com/display/CommSuite/Writing+a+Custom+Authentication+Module+for+Convergence]
    , I decided to try to revert back to the default.
    How do you remove the module and go back to the default? I tried to unset the options, but they did not seem to take effect.After enabling the custom login module using the steps in the earlier thread (http://forums.sun.com/thread.jspa?threadID=5318615), I performed the following steps to disable the custom module and re-enable the ldap auth module:
    # Disable custom auth-module
    cd /opt/sun/comms/iwc/sbin
    ./iwcadmin -w <admin password> -o auth.custom.servicename -v ""
    ./iwcadmin -w <admin password> -o auth.custom.loginimpl -v ""
    ./iwcadmin -w <admin password> -o auth.custom.callbackhandler -v ""
    ./iwcadmin -w <admin password> -o auth.misc.CredentialFile -v ""# Re-enable the LDAP auth-module
    cd /opt/sun/comms/iwc/sbin
    ./iwcadmin -w <admin password> -o auth.ldap.callbackhandler  -v com.sun.comms.client.security.auth.AppCallbackHandler
    ./iwcadmin -w <admin password> -o auth.ldap.loginimpl -v com.sun.comms.client.security.auth.modules.impl.SunLDAPLoginModule# Restarte App Server
    cd /opt/SUNWappserver/bin/
    ./asadmin stop-domain; ./asadmin start-domain# Login to iwc interface as user shjorth with password oldpwd
    # Login successful with oldpwd -- custom auth module successfully disabled, LDAP re-enabled
    Regards,
    Shane.

  • Why won't adobe touch for ios not load all my pictures?

    Why won't adobe touch for ios not load all my pictures?

    Hi. As a workaround you can enable "Always use native photo browsers"  in the PS Touch settings. It's listed under "Preferences" -> "Access Local Photos setting". See attached screenshot
    We are working on a fix for the next release.
    Guido

  • URGENT help required : Custom Authentication Plugin for validation of users

    Hi Experts.
    I'm a newbie and am stuck in middle of nowhere.
    I have been asked to develop a custom authentication plug-in which would validate a user using the attributes such as a userid and a shared-userid.
    shared-userid is just a custom id that would be generated on the basis of some logic.
    Currently I'm using OAM 10.1.4.3.0 on WINDOWS server and as everybody, I'm also not able to find any sample files or sample folder structure.
    As per one of the other threads https://forums.oracle.com/forums/thread.jspa?messageID=3838474, sample code and sample folders are removed from this particular version and were present in some previous version.
    So, can anyone please help me out with the following:
    1. How can I proceed to accomplish this task, i.e. to check whether a user-id and a shared-userid both are validated and a user is granted access.
    2. Are all of these files required to create a custom authentication plug-in or can we proceed only with the ".c" file (i.e. make file, authn.c, and a dll file made using the make file and .c file)
    3. Can anybody provide me with a sample file or a sample code written in "C" wherein the plug-in connects to the LDAP and searches for a particular dn for comparison or something. Also a sample make file for windows to convert the .c file to .dll.
    PLEASEEEE help me ASAP.
    Regards
    Edited by: 805912 on Nov 15, 2011 7:18 PM

    Hi,
    Regarding question 2, you also need the header file is supplied in the Access Server installation directory, under ...access\oblix\sdk\authn_api and is called authn_api.h. you need this to build the dll which must then be placed in the Access Server's ...\access\oblix\lib directory.
    Regarding question 3, if you install an earlier version of the Access Server, ie 10.1.4.2 or less, then you will get a \access\oblix\sdk\authentication\samples\authn_api directory that contains a basic sample authentication plugin. However, there is still documented in the 10.1.4.3 Developer Guide another sample plugin, simplapi.c, in the 10.1.4.3 Developer Guide with instructions on how to use it. It does work, but unfortunately requires a couple of edits to get it working after copy&pasting it (no code changes, just fairly obvious case changes eg changing ObanPlugin* to ObAnPlugin*). I used the following commands to get it to compile into a .so file on unix:
    g++44 -c -fPIC -Wno-deprecated -m32 simpleapi.c
    g++44 -shared -nostdlib -lc -m32 simpleapi.o -o simpleapi.so
    but I really would not know if or how these translate into a Windows environment.
    Regards,
    Colin
    Edited by: ColinPurdon on Nov 15, 2011 2:50 PM

  • Customized java class for an external Java function activity

    Hi,
    how can i customize my jdeveloper in order to build my own classes for external Java function activities ?
    because any time i try to build my class the compiler tells me that it doesn't know WFFunctionAPI! And i do not have any idea neither which libraries i have to reference nor where i can find them. i tried to reference the *.jar file from my <ORACLE_HOME>.Wf.Java\Oracle\Apps\Fnd\Wf path, but the compiler still was mocking at me!
    Thanks for your help
         abi

    In the "Project" menu, select "Project Properties";
    In the "Libraries" tab, click the "Add" button;
    Click "New";
    Type "Oracle Workflow" (or any other name) in the Name field;
    In the "Class path" field, click the "..." button;
    Click "Add path" and select <ORACLE_HOME>/wf/java;
    Click "Add ZIP/Jar" and select wfjava.jar and wfapi.jar from the <ORACLE_HOME>/wf/java/oracle/apps/fnd/wf/jar directory.
    Click "Ok" in all those windows and compile your class.
    Regards,
    Daniel Viero - [email protected]
    iProcess Solugues em Tecnologia
    Porto Alegre, RS - Brasil

  • How can you specify a custom style class for an ADF component (column)?

    We are using ADF 10_1_3_3_0 on Tomcat.
    We would like to specify an additional style class for a column header. We have specified the following style:
    {color:#808080}af|column.formHeader::header-text
    text-align: right;
    background-color:brown;
    border-color:#999999;
    font-family:Verdana,Arial,Helvetica,sans-serif;
    color: blue;
    }{color}
    {color:#808080}&lt;af:column sortable="true" formatType="text" styleClass="formHeader"&gt;{color}
    This does not seem to work. In our tests, the CSS gets generated but the new style class for the column header does not seem to be generated/mapped. I reveiwed this post: Re: Jdev 11g: how to set width of some components on panel form layout. Is this specification (component.className::selector) applicable for the 10g version of ADF?
    Additionnaly, are their specifcations/details for these selectors (e.g. ora-rule-ref, -rt-rule-ref, -tr-rule-ref). I am not clear on what they are mapped to and how they are used.
    Thanks
    Edited by: user10477345 on Oct 27, 2008 6:48 AM

    Hi,
    The column's style classes will be added on the <td> elements, not the header sadly. So for your use case you'll have to place the class on the table itself then use the selector
    af|table.MyStyleClass af|column.formHeader::header-text{}Sadly this will affect all columns, not just one so I don't know if it's going to fir your need.
    Regards,
    ~ Simon

  • Loading classes for basic information on them.

    Hey guys,
    I'm creating a custom deployment application. Basically the developer will select all of the .class files he wants to roll out to production. They are put into a JList and then I go through them and place them in their appropriate packages to be rolled out at a future date.
    The problem arises when there is a .class file that is not in the right directory structure as the package it's supposed to be in.
    Translation:
    Example:
    the package the class is in com.test.MyPackage
    But the class siting on root of C:\
    What I'm hoping to accomplish is to load the class briefly enough into the JVM to get the package name of it and place it in the correct deployment directory. Remember i'm only dealing with .class files.
    I have thought of decompiling and searching for the package name in a regex but then I saw URLClassLoader and ClassLoader but have had a crazy time trying to get the class loaded at all.
    In Short: I won't know the package name of the file. I don't care where it's eing loaded from and I don't know where it's going to. I'm hoping I can load the class into the JVM, get the package name, and move the class to the correct package.
    Thanks for your help!
    Any thoughts on what I can do, even if it's totally different (programs that will do it for me, the RIGHT way I should be doing it, ETC), would be greatly appreciated.
    -Ryan

    If you are completely sure you can trust the classes not to do anything on load (and many do), you can load the class file into a byte array and pass that to a classloader to load the class, without knowing the package. But it is far safer to use a bytecode library, eg BCELimport org.apache.bcel.*;
    import org.apache.bcel.classfile.*;
    public class WhichPackage {
      public static void main (String[] args) {
        try {
          System.out.println(new ClassParser(args[0]).parse().getPackageName());
        } catch (Exception ex) {
          ex.printStackTrace(System.out);
    }Pete

  • Custom object class attributes are not provisioning in oID thru OIM

    Hi,
    I have connected OIM with oID user provisioning is also taking place. I have made one custom structure class with some attributes in OID.
    In form designer,in OID usr form i have made feild UD_OID_USR_Custom
    In OId .config lookup i have mentioned that custom class as well as attributes of class[in code Custom in decode name of attribute at target]
    In process form recon mapping of OID i mapped this feild name .
    Also in resource object recon mapping also i mentioned this attribute.
    But while creating user till process form value of attribute is populating and not provisiong that attribute in OID.
    Please tell me where i went wrong or exact steps of mapping in form designer,Process definition,Lookup.OID.configuration,Resource objects.
    Thanks

    process form recon mapping of OID i mapped this feild nameHave you made attribute entry in Provisioning Lookup AttrName.Prov.Map.OID ?
    Have you followed each step :
    http://download.oracle.com/docs/cd/E11223_01/doc.904/e10436/extnd_func.htm#CACICHDH

  • Custom Authentication Tokens for HTTP transport in OSB

    Hi,
    I have a http type proxy service.
    I want to secure the proxy service with an Username and Password that will be passed as HTTP user defined headers and I dont want to use "HTTP Basic Authentication".
    Can you guide me how this can be done.
    Thanks.

    Getting it to the front ...

  • Custom icon image for folders not showing up in dock

    I have used custom icons for years for various folders so I don't have to read through names of folders to know what's in them. With Leopard (10.5.2), the folder icons are visible up on the desktop and everywhere else; however, when I drag a folder with a special icon to the dock,it becomes a normal blue folder again. Why can't the folder in the dock retain the special icon I have assigned to it?

    right click on the folder after placing it on the dock and choose display as folder.

  • Authentication disable for Lotes Notes

    Hi,
    We are facing a problem where we cant see the images coming within email (Lotus Notes). I have configured proxy setting in lotus notes but we want to disable authentication when request coming through lotus notes browser.
    I think this can be possible with user agent, does any one have idea about what could be user agent of lotus notes 8.0. i have tried below user agent but no success...
    Mozilla/4.0 (compatible; Lotus-Notes/6.0; Windows-NT)
    Mozilla/4.0 (compatible; Lotus-Notes/5.0; Windows-NT)
    Please suggest on this...

    Hi,
    to find out the user agent
    you could put in %u in the Log Subscription --> accesslog --> Custom Field
    then you can see what user agent trys to connect as I know.
    Regards
    Achim

  • Firefox 3.5 for Mac not loading Apple Website

    Just wondering why the Apple website won't load at all in Firefox 3.5 for Mac. It works fine in Safari. But not at all in Firefox. It's the only website I know that flat out won't load in Firefox. I want my movie trailers back.

    Works just fine here for me. Maybe there's something broken in your Firefox installation. Try deleting it and downloading a fresh copy.

  • EJB deployment problem --New remote interface class files are not loaded

    Hi, I face a problem while deploying an ear file in oc4j. I basically get some problems like the method in the remote interface is not implemented in the EJB class. But the implementation is actually available in the EJB class.
    We get this problem when we actually change the signature of the EJB remote methods. The new methods are not referenced by oc4j. Only the old version of remote interface is referenced by oc4j. But the latest version of EJB class is taken. I am using 9.0.3 version of the oc4j. Could you pls help me regarding this problem ?
    Regards
    Solomon

    I have found the solution :-)
    You must add to the ejbCreate() method of the bean class throws javax.ejb.CreateException

  • Why won't my web page (for banks) not load?

    When I use internet explorer for banks i am getting a security certificate error. In firefox 3.6.15 the web page is blank. i have reset my explorer security settings to ignore certificate verification but this has not helped. any advice?

    No problem here with that page, it shows this:
    '''A Problem has occurred with your connection to Internet Banking''' <br />
    '''We are sorry you have been logged out of the Internet Banking service.'''
    Because I wasn't logged in - I don't bank there.
    See if an Addon is causing that for you. <br />
    Do you have that problem when running in the Firefox SafeMode? <br />
    [http://support.mozilla.com/en-US/kb/Safe+Mode] <br />
    ''Don't select anything right now, just use "Continue in SafeMode."''
    If not, see this: <br />
    [http://support.mozilla.com/en-US/kb/troubleshooting+extensions+and+themes]

  • Mail for Excahange not loading

    Currently have an N95 which for months has been running Mail for Exchange without a problem.  Suddenly now every time I try to launch MfE or synchronise my email the phone reverts back to the home screen and does not display the MfE interface at all.
    Has anyone had this problem?
    Would a hard reset help?
    Are there any logs available on the phone that would tell me what is going wrong? 
    Any advice on why this has just started happening would be useful.
    Thanks  

    This issue is with my SSL certificate. I have created self signed certificate and hosted in IIS. This certificate is not trusted by the IOS. So it is blocked the app.
    I hosted my site where the SSL certificate is available. Thne the app is working fine in all the devices.
    Regards,
    Kiran

Maybe you are looking for

  • Issue creating PDF using IE plugin (Web Capture 10.0)

    Hello, Hopefully someone can assist with this and /or confirm it is a bug. We are using Adobe X 10.1.4 with IE9 32bit. Problem: User creates a PDF using the "Covert" button located on the toolbar.  The issue is that this PDF is saved with permission

  • Is there any way to manipulate PDF documents in Adobe Reader?

    I need to manipulate a scanned document that is automatically saved as a PDF from our scanner. Is there any way? I have adober reader * becuase I havent updated yet. Do I need to do so? Thanks for any help!

  • The new update I just got states that Siri is available on my Ipad2. Is it true or false?

    My ipad2 just got a new update and I read that Siri was available. Will I be able to use Siri on my ipad2? "Yes or no?"

  • Unlocking iPhone4 Orange(UK)

    I'm wanting to unlock my iPhone 4 so I can use local sim cards when in Canada.  I called Orange and they said that's fine as long as I paid £20.  Although the girl on the phone said when the iphone is unlocked, if you put another sim card(from anothe

  • SIP and SMTP domains don't match

    Hi, We've a situation where SIP, SMTP and AD domain are different than each other and I am sure this will present integration issues at the least... Speaking from LYNC 2013 and exchange 2010/2013 integration standpoint, could someone please point out