Novell Client patch kills authentication to middle tier

Hi,
There was a recent patch for the novell client which replaces the file nicm.sys due to a security vulnerability. When I install this patch onto servers which have the Zenworks Middle Tier software installed it prevents the client machines from authenticating to edirectory via the middle tier servers.
Once I put the old vulnerable nicm.sys file back then the authentication begins working again.
I've had dig around to see if any one else is experiencing this problem but I haven't found anything.
Any suggestions on how I might fix this. I would ideally like to resolve this as I don't like my servers being vulnerable.
Thanks in advanced
Liz

You can install a server that only has Middle-Tier.
The rest of the stuff requires the client IIRC.
If you have upgrade protection, you may be able to test with a ZDM7 SP1 IR3
version of the middle-tier.
The problem is that Novell is no longer patching/testing against ZDM6.5, so
even if there was a code issue, its not likely you could get a fix.
Craig Wilson - MCNE, MCSE, CCNA
Novell Support Forums Volunteer Sysop
Novell does not officially monitor these forums.
Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human.
"enegro" <[email protected]> wrote in message
news:[email protected]..
>
> Hi,
>
> There was a recent patch for the novell client which replaces the file
> nicm.sys due to a security vulnerability. When I install this patch
> onto servers which have the Zenworks Middle Tier software installed it
> prevents the client machines from authenticating to edirectory via the
> middle tier servers.
>
> Once I put the old vulnerable nicm.sys file back then the
> authentication begins working again.
>
> I've had dig around to see if any one else is experiencing this problem
> but I haven't found anything.
>
> Any suggestions on how I might fix this. I would ideally like to
> resolve this as I don't like my servers being vulnerable.
>
> Thanks in advanced
>
> Liz
>
>
> --
> enegro
> ------------------------------------------------------------------------
> enegro's Profile: http://forums.novell.com/member.php?userid=24444
> View this thread: http://forums.novell.com/showthread.php?t=335789
>

Similar Messages

Client Authentication via middle tier to database.

Is it possible to pass through the Identity of the Real User
to the database when using an Application Server that uses
connection pooling to connect to the database.
Note. The Application server is running EJBs that connect to the
database using JDBC, with any driver type (eg OCI, thin).
null

Trevor,
What type of OS is the app server running on? How is the user
logging into the app? There are middleware packages that can
map the currently logged in user to the database on a per-
connection basis. Openlink provides a middle-tier security
layer that dispatches a connection to the database based on a
combination of factors (client app, client IP, username,
servertype).
HTH,
Stephen
Trevor (guest) wrote:
: Is it possible to pass through the Identity of the Real User
: to the database when using an Application Server that uses
: connection pooling to connect to the database.
: Note. The Application server is running EJBs that connect to
the
: database using JDBC, with any driver type (eg OCI, thin).
null

MTS Client Library Configuration (Case: Two middle tier servers)

One of Oralcle document states:
(a) If you need to configure Oracle Services for MTS on 2 middle tier computers (say #1, #2)then you have to install OraMTS on #1 middle tier system. The #2 middle tier system can use OraMTS which exists on middle tier system #1.
(b) For achieving this you have to configure Oracle Services for MTS client library on system #2.
Can any expert provide more information about how to configure the step (b) above.
My environment:
Oacle Services for MTS version: 8.1.7
Database: Oracle 8.1.6
Middle Tier: Windows NT 4.0
A fast reply will be highly appreciated.
Thanks in advance.

Vivek Raja
3) On machine 1 use the MMC snapin to create the Oracle service For MTS for database DB1.
You mean below
On machine 1>>
[start->programes-> oracle-oraHOME81->application development->oracle manager for microsoft transaction server]
make new service for DB1.
(oracleMTSService0 started)
On machine 2>>
[oracle manager for microsoft transaction server]
I add a new computer-"machine 1".
Then automatically OracleMTSServices0 on
"machine 1" displays.
and "Microsoft management console" dialogue box appears and ask save the change when i exit oracle manager for MTS. I choose YES.
that's all?
Am i right?
On machine 3>>
like machine 2.
You might be boring but Any documents offered by oracle doesn't say it clearly.
rf)) I read "using microsoft transaction server with oracle8-A73029".

Imgexp.exe proplem with Novell Client 4.91SP5

I have Novell Client 4.91SP5 and the Novell Application Launcher Version 7.0.1.4. I am trying to use imgexp.exe v7.0.1.0 to create zmg files for addons. I can add individual files but I can not add folders. When I drag the folders to imgexp it does nothing. If I click on the folder icon, with the plus next to it, within image explorer and select a folder I get: ZENworks Image Explorer has encountered a problem and needs to close. We are sorry for the inconvenience. When I click on Don't Send, I get: The instruction at "0x73dd1c7" referenced memory at "0x00000004". The memory could not be "read". Click on OK to terminate the program. I have tried running it from the server and the hard drive and have the same problem. Thanks.

I am running Windows XP SP3 with all hotfixes. Drive Y is a network drive. This is a SLES 10SP2, OES2SP1 server. However I also have the same problem with a NW6.5SP8 server. All volumes are NSS. I have installed imgexp on both my hard drive and the server and have the same problem from both locations. I also have the Novell Client patches through May of 2009. I noticed that there are 3 new beta patches for the client after August that I have not installed. Is there a client setting that may affect this?

Oracle forms 10g (win Xp middle tier IE 8 Win 7- IE 8 client)

forms services 10.1.2.0.2
Database 11gR2 also on Win Xp pro SP3
Hi
I have a problem with java and Jinitiator and my understanding of what is / should be happening.
In the file forms/server/formsweb.cfg see below. I can alter the parameter
baseHTMLjinitiator=basejini.htm
###baseHTMLjinitiator=basejpi.htm
between the two alternatives. As it stands as shown the IE8 on the middle tier and on the database PC both work as near correctly as i can tell. On the Win 7 client IE 8 however crashes. switch it to the other way around and the
win 7 works and the win xp on the database server stops with frm-92095 error version number too low. while on the middle tier Xp PC a blank doucument is displayed.
How can i have both working at the same time please. I you need more information i will happily supply it.
Neill
# $Id: formsweb.cfg 15-apr-2005.13:17:30 pkuhn Exp $
# formsweb.cfg defines parameter values used by the FormsServlet (frmservlet)
# This section defines the Default settings. Any of them may be overridden in the
# following Named Configuration sections. If they are not overridden, then the
# values here will be used.
# The default settings comprise two types of parameters: System parameters,
# which cannot be overridden in the URL, and User Parameters, which can.
# Parameters which are not marked as System parameters are User parameters.
# SYSTEM PARAMETERS
# These have fixed names and give information required by the Forms
# Servlet in order to function. They cannot be specified in the URL query
# string. But they can be overridden in a named configuration (see below).
# Some parameters specify file names: if the full path is not given,
# they are assumed to be in the same directory as this file. If a path
# is given, then it should be a physical path, not a URL.
# USER PARAMETERS
# These match variables (e.g. %form%) in the baseHTML file. Their values
# may be overridden by specifying them in the URL query string
# (e.g. "http://myhost.mydomain.com/forms/frmservlet?form=myform&width=700")
# or by overriding them in a specific, named configuration (see below)
[default]
# System parameter: default base HTML file
baseHTML=base.htm
# System parameter: base HTML file for use with JInitiator client
baseHTMLjinitiator=basejini.htm
###baseHTMLjinitiator=basejpi.htm
# System parameter: base HTML file for use with Sun's Java Plug-In
baseHTMLjpi=basejpi.htm
# System parameter: delimiter for parameters in the base HTML files
HTMLdelimiter=%
# System parameter: working directory for Forms runtime processes
# WorkingDirectory defaults to <oracle_home>/forms if unset.
workingDirectory=
# System parameter: file setting environment variables for the Forms runtime processes
envFile=default.env
# Forms runtime argument: whether to escape certain special characters
# in values extracted from the URL for other runtime arguments
escapeparams=true
# Forms runtime argument: which form module to run
form=test.fmx
# Forms runtime argument: database connection details
userid=scott/xxxxxxxxxxx@orcl
# Forms runtime argument: whether to run in debug mode
debug=no
# Forms runtime argument: host for debugging
host=
# Forms runtime argument: port for debugging
port=
# Other Forms runtime arguments: grouped together as one parameter.
# These settings support running and debugging a form from the Builder:
otherparams=buffer_records=%buffer% debug_messages=%debug_messages% array=%array% obr=%obr% query_only=%query_only% quiet=%quiet% render=%render% record=%record% tracegroup=%tracegroup% log=%log% term=%term%
# Sub argument for otherparams
buffer=no
# Sub argument for otherparams
debug_messages=no
# Sub argument for otherparams
array=no
# Sub argument for otherparams
obr=no
# Sub argument for otherparams
query_only=no
# Sub argument for otherparams
quiet=yes
# Sub argument for otherparams
render=no
# Sub argument for otherparams
record=
# Sub argument for otherparams
tracegroup=
# Sub argument for otherparams
log=
# Sub argument for otherparams
term=
# HTML page title
pageTitle=Oracle Application Server Forms Services
# HTML attributes for the BODY tag
HTMLbodyAttrs=
# HTML to add before the form
HTMLbeforeForm=
# HTML to add after the form
HTMLafterForm=
# Forms applet parameter: URL path to Forms ListenerServlet
serverURL=/forms/lservlet
# Forms applet parameter
codebase=/forms/java
# Forms applet parameter
imageBase=DocumentBase
# Forms applet parameter
width=750
# Forms applet parameter
height=600
# Forms applet parameter
separateFrame=false
# Forms applet parameter
splashScreen=
# Forms applet parameter
background=
# Forms applet parameter
lookAndFeel=Oracle
# Forms applet parameter
colorScheme=teal
# Forms applet parameter
logo=
# Forms applet parameter
restrictedURLparams=HTMLbodyAttrs,HTMLbeforeForm,pageTitle,HTMLafterForm,log,allow_debug,allowNewConnections
# Forms applet parameter
formsMessageListener=
# Forms applet parameter
recordFileName=
# Forms applet parameter
serverApp=default
# Forms applet archive setting for JInitiator
archive_jini=frmall_jinit.jar
# Forms applet archive setting for other clients (Sun Java Plugin, Appletviewer, etc)
archive=frmall.jar
# Number of times client should retry if a network failure occurs. You should
# only change this after reading the documentation.
networkRetries=0
# Page displayed to Netscape users to allow them to download Oracle JInitiator.
# Oracle JInitiator is used with Windows clients.
# If you create your own page, you should set this parameter to point to it.
jinit_download_page=/forms/jinitiator/us/jinit_download.htm
# Parameter related to the version of JInitiator
jinit_classid=clsid:CAFECAFE-0013-0001-0022-ABCDEFABCDEF
# Parameter related to the version of JInitiator
jinit_exename=jinit.exe#Version=1,3,1,22
# Parameter related to the version of JInitiator
jinit_mimetype=application/x-jinit-applet;version=1.3.1.22
# Page displayed to users to allow them to download Sun's Java Plugin.
# Sun's Java Plugin is typically used for non-Windows clients.
# (NOTE: you should check this page and possibly change the settings)
jpi_download_page=http://java.sun.com/products/archive/j2se/1.4.2_06/index.html
# Parameter related to the version of the Java Plugin
jpi_classid=clsid:CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA
# Parameter related to the version of the Java Plugin
jpi_codebase=http://java.sun.com/products/plugin/autodl/jinstall-1_4_2-windows-i586.cab#Version=1,4,2,06
# Parameter related to the version of the Java Plugin
jpi_mimetype=application/x-java-applet;jpi-version=1.4.2_06
# EM config parameter
# Set this to "1" to enable Enterprise Manager to track Forms processes
em_mode=0
# Single Sign-On OID configuration parameter
oid_formsid=%OID_FORMSID%
# Single Sign-On OID configuration parameter
oracle_home=E:\DSHome_1
# Single Sign-On OID configuration parameter
formsid_group_dn=%GROUP_DN%
# Single Sign-On OID configuration parameter: indicates whether we allow
# dynamic resource creation if the resource is not yet created in the OID.
ssoDynamicResourceCreate=true
# Single Sign-On parameter: URL to redirect to if ssoDynamicResourceCreate=false
ssoErrorUrl=
# Single Sign-On parameter: Cancel URL for the dynamic resource creation DAS page.
ssoCancelUrl=
# Single Sign-On parameter: indicates whether the url is protected in which
# case mod_osso will be given control for authentication or continue in
# the FormsServlet if not. It is false by default. Set it to true in an
# application-specific section to enable Single Sign-On for that application.
ssoMode=false
# The parameter allow_debug determines whether debugging is permitted.
# Administrators should set allow_debug to "true" if servlet
# debugging is required, or to provide access to the Forms Trace Xlate utility.
# Otherwise these activities will not be allowed (for security reasons).
allow_debug=false
# Parameter which determines whether new Forms sessions are allowed.
# This is also read by the Forms EM Overview page to show the
# current Forms status.
allowNewConnections=true
# EndUserMonitoring
# EndUserMonitoringEnabled parameter
# Indicates whether EUM/Chronos integration is enabled
EndUserMonitoringEnabled=
# EndUserMonitoringURL
# indicates where to record EUM/Chronos data
EndUserMonitoringURL=
# Example Named Configuration Section
# Example 1: configuration to run forms in a separate browser window with
# "generic" look and feel (include "config=sepwin" in the URL)
# You may define your own specific, named configurations (sets of parameters)
# by adding special sections as illustrated in the following examples.
# Note that you need only specify the parameters you want to change. The
# default values (defined above) will be used for all other parameters.
# Use of a specific configuration can be requested by including the text
# "config=<your_config_name>" in the query string of the URL used to run
# a form. For example, to use the sepwin configuration, your could issue
# a URL like "http://myhost.mydomain.com/forms/frmservlet?config=sepwin".
[sepwin]
separateFrame=True
lookandfeel=Generic
# Example Named Configuration Section
# Example 2: configuration forcing use of the Java Plugin in all cases (even if
# the client browser is on Windows)
[jpi]
baseHTMLJInitiator=basejpi.htm
# Example Named Configuration Section
# Example 3: configuration running the Forms ListenerServlet in debug mode
# (debug messages will be written to the servlet engine's log file).
[debug]
serverURL=/forms/lservlet/debug
# Sample configuration for deploying WebUtil. Note that WebUtil is shipped with
# DS but not AS and is also available for download from OTN.
[webutil]
WebUtilArchive=frmwebutil.jar,jacob.jar
WebUtilLogging=off
WebUtilLoggingDetail=normal
WebUtilErrorMode=Alert
WebUtilDispatchMonitorInterval=5
WebUtilTrustInternal=true
WebUtilMaxTransferSize=16384
baseHTMLjinitiator=webutiljini.htm
baseHTMLjpi=webutiljpi.htm
archive_jini=frmall_jinit.jar
archive=frmall.jar
lookAndFeel=oracle

You have a mixture of problems here.
1. Oracle Jinitiator is not supported for use on Windows 7
2. JRE 1.7 is not supported for use with any version of Forms on any platform. Be sure you do not have this version installed.
3. JRE 1.6 is not supported for use with Forms 10.1.2.0.2, however is supported with 10.1.2.3 (10.1.2.0.2 + patch ID 5983622) and only with IE 8
4. In order to use Win 7 with Forms 10 in a certified and supported manner, you must use 10.1.2.3 (meaning 10.1.2.0.2 + patch ID 5983622).
In short, my recommendation would be the following:
o Patch to 10.1.2.3 (assuming you have access to MyOracleSupport)
o Don't bother trying to use Oracle Jinitiator as it is old and has been desupported for a long time.
o Uninstall any instances of Jinitiator as it can cause conflicts with other JRE installations.
o Uninstall all instances of JRE 1.7. Reconfig your formsweb.cfg to use the JRE (Java Plugin) 1.6.0
baseHTMLJInitiator=basejpi.htm
jpi_classid=clsid:8AD9C840-044E-11D1-B3E9-00805F499D93
jpi_mimetype=application/x-java-applet;version=1.6
jpi_download_page=http://www.oracle.com/technetwork/java/javase/downloads/jre-6u27-download-440425.html
jpi_codebase=http://javadl-esd.sun.com/update/1.6.0/jinstall-6u27-windows-i586.cab#Version=1,6,0Finally, refer to this:
http://www.oracle.com/technetwork/middleware/ias/downloads/as-certification-r2-101202-095871.html#BABGCBHA

Control without client or middle tier server

Is it possible to remote control/view workstations without having the
client OR a middle tier server set up? We only want to be able to control
our workstations from inside our firewall, so the middle tier server
would not be needed.
Another question, is it also possible to run naldesk the same way to push
applications out to workstations without the client installed (with or
without the middle tier server). Thanks in advance.

Desktop4 can use any of the options.
It really is a bit cumbersome to use at the moment, but drop me a note at
my email address of craig_d_wilson at yahoo dot com in about 2 weeks.
I'm in the process of writing a small front-end program for use in
clientless environments. I should have something going by then.
Normally the Workstation Object gives rights to the local SYSTEM account
when the Novell Client is around to access NetWare shares.
In a Windows Domain Environment, you can use the Windows Domain workstation
object to do the same thing.
Otherwise you may have issues accessing system resources when process are
running in System mode.
FYI, you will 100% need a middle-tier server to get your App Objects.
It will not be needed to RC or transfer files, but you will need at least
one mid-tier server.
Craig Wilson
Novell Product Support Forum Sysop
Master CNE, MCSE, CCNA
http://www.ithowto.com
Editor - http://www.ithowto.com
<[email protected]> wrote in message
news:[email protected]...
>> Yes to all of your questions.
>>
>> In regards to remote control you have two options.....
>>
>> 1) Use Desktop4.exe with password based remote control to connect to
> the
>> remote PC.
>> 2) Have the remote PC use the option to Request a remote control
> session
>> from the support personnel.
>>
>> Search support.novell.com for desktop4.exe and there should be a couple
> tids
>> that go into detail.
>>
>> In regards to distributing applications.....................
>> 1) Are you in a Domain or Non-Domain environment. This controls what
>> options you have.
>>
>> --
>> Craig Wilson
>> Novell Product Support Forum Sysop
>> Master CNE, MCSE, CCNA
>>
>> http://www.ithowto.com
>>
>> Editor - http://www.ithowto.com
>
> Thanks for the response! We are currently strictly netware with no
> domain, but we were looking at moving towards a domain (we are testing
> both OES cores to act as a PDC to authenticate through edir, both of
> which we got to function correctly :-) So we were just looking at the
> rest of the stuff we may or may not lose by going that route. We
> currently use ZENworks mostly to remote view student workstations,
> control admin machines, and image all the machines. We also occasionaly
> push out small apps or registry changes with Nal, but not that often. Can
> you simply remote view the workstation (without the user knowing) or does
> desktop4.exe only control the machine? I will have to check it out.
> Thanks again

After applying middle tier patch 9593176, form POXPOVPO will not load...

We applied middle tier patch 9593176 to help resolves some of the myriad of forms glitches we are seeing after our upgrade from 11i to 12.1.3.
1.     Applied patch 9593176.
2.     Regenerated all form files (regenerate/recompile…same thing)
3.     Started application using seeded start script ($INST_TOP/apps/edev_ppcm04/admin/scripts/adstrtal.sh)
4.     Received warning while running the startup script (log sent to you earlier) which referenced note 397174.1
5.     Stopped all processes using seeded stop script
6.     Followed instructions on not 397174.1
7.     Restarted using seeded start script
8.     Did not receive any errors.
9.     POXPOVPO freezes now.
Versions:
IBM AIX 64 bit 6.1
Oracle Database 11g Enterprise Edition Release 11.2.0.3.0 - 64bit
Forms Applet version is : 10.1.2.3
EBS 12.1.3
Anyone else see this or have any ideas?

Richard,
I have just applied patch to upgrade from Portal 3.0.9 to 3.0.9.8.1 (Patch applied to loginserver and portal schema) and the External Applications that were previously set up have gone from the portlet.
Does this relate to your note at the bottom:
"Minor issues with Bulk action. 1840420 CUSTOM WRITTEN EXTERNAL AUTH MODULE NEED TO BE UPDATED AFTER 3.0.9 UPGRADE SSOXOID.PKB DOESN'T LOAD.
External authentication modules that were written before 3.0.9 need to be updated after upgrading to 3.0.9. ssoauthx.pks is updated in 3.0.9 and contains additional routines that need to be implemented." ??
If I go to the "Login Server Administration" portlet and select the link "Administer External Applications" I get a list of 5 External Applications that have previously been set up.
If I go back to the Home Page and select "customize" on the "External Applications" portlet I get the message "Your Login Server administrator has not registered any external applications".
Does that mean I should just run 'ssoauthx.pks' & 'ssoxoid.pkb' or do I need to do something else ??
Thanks
Simo

Windows Integrated Authentication Help From Middle Tier

We are trying to enable single sign-on using Windows Integrated Authentication so that the user does not have to enter a username or password, they just get logged in automatically. I created the current Oracle account on the database and it works just fine when I try to connect from my local computer to the database. Our problem is that our application calls an application that runs as a Windows services on the middle tier, and so it gets an invalid username/password error. I can see in the audit logs that it is trying to connect to the database as NT AUTHORITY\ANONYMOUS LOGON.
The client, middle tier, and database are all Windows based operating systems. The applications is a .Net application and we turned on Impersonation which we read will help pass the client OS user to middle tier so that the application runs as them. And that appears to be working correctly. Again we can get this working when we host the windows service locally, it just wont work when it is hosted on the middle tier. Any ideas how to get this to work?
Oracle version 11.2.0.2 and 11.2.0.3
Windows Server 2008 R2

Hi, jeff81.
I had same problem with Win2003 server. Try this:
Start -> Settings -> Control Panel -> Administrative Tools -> Services
then select "PROPERTIES/LOGON" for necessary service.
Change "Local System account" to your user account.
Make sure that user account have necessary grants.
ps. sorry my poor english :(

Disable autostart of middle tier whily patching OAS

Hi,
I have an OAS installation of 10gR2(10.1.2.0.2) with Bussiness Intelligence Middle Tier and ready to install patch 5983622 10g Release 2 Patch Set 3 (10.1.2.3.0).
The readme says that only the database, listener and infrastructure should be running.
I make sure the middle tier is down, but after a little time elapses, the middle tier services automatically start up. How can I prevent them from starting up until patching is complete?
I'd very much appreciate if someone could please explain.
Pat

Oracle instances do not automatically go up or down. Either a user or a process starts or stops them.
Just do the following and the server would stay down unless some cron job or another user would bring it up.
set and export your ORACLE_HOME to midtier;
$ORACLE_HOME/bin/emctl.bat stop iasconsole
$ORACLE_HOME/opmn/bin/opmnctl stopall
thanks,
AMN

Undo 9iAS Rel 2 Middle-tier patch

Does anyone know whether the middle-tier Interoperability patch can be undone?
HTTP server won't start up with error message ADMN-100999 after the patch was applied.
There is a script "undo_pre2334975_c_9.0.1.3.0.sh" in the patch folder rdbms_bundled_patch. It seems to be restoring the original files.
Thanks.
Wade.

No, the patch cannot be undone. However,I am surprised you are getting this error. Can you give more details about the steps you have done so far?
Pavna Jain
Oracle9iAS Product Management

Client-middle tier communication.

We'd like to inform the middle tier of some choices made in the client but I'm not sure how this communication should be achieved.
For example, the user logs-on using a (non BC4J) method which establishes the user-name and access level.
I want an EntityObject (An AuditTrailEntity) to be able to set the username in any new rows created.
I want ViewObjects to restrict the rows returned based on the access level.
I see I can create some ViewObject methods and export them to the client but can these be class (static) methods? If not, then I must use object methods that set class variables but this doesn't feel like the "right" solution.
Can I set some properties in a Cookie somewhere (how)?
Is there another (better) method?
Any advice gratefully received.
Tony.
P.S.
As part of my investigations, I've tried adding a RowSetListener:
panelBinding.addRowSetListener(new HistoryRowSetListener());
class HistoryRowSetListener extends JUPanelRowSetAdapter
{ public void rowInserted(JUIteratorBinding aIterBinding, InsertEvent aEvent)
{ super.rowInserted(aIterBinding, aEvent);
Row lRow = aIterBinding.getCurrentRow();
lRow.setAttribute("UserName", sCurrentUserName);
But the getCurrentRow() returns the row that's current when the insert was performed, not the row that's being inserted. Is this intended? If so, How can I get the row that's being inserted?

In the client some properties are acquired (from a legacy system) and we want to communicate these to the middle tier. We'll want certain
ViewObjects (in several ApplicationModules) to behave differently.What are the client properties? Are they like read/write access priviledges?
If the client properties change, then we need to re-communicate with the middle tier to alter the ViewObjects behaviour again. For example,
the user is only permited to see their own (or their own region's data). For the most part this can be achieved by modifying the SQL but for
some attributes, we may show the row but hide the value.In 9.0.5 release of BC4J we will have access privilege support in both design time and runtime. We plan to have api for obtaining read/write access based on the logged in user role(s). You can use this info to map the ui.
I think our client could probably call ViewObject.setWhereClause() but I'd rather have this functionality encapsulated in the Business
components.
If you want to set username
then it should be on the session or root AM.
This sounds near the solution. Can I access the Session in both the client and middle-tier. I saw ApplicationModule.getSession() which I'm
hopi[i]Long postings are being truncated to ~1 kB at this time.

Where are all Novell client 4.91 SP5 IR1 patches

If i search for novell client in my patch management then the only results it get is:
Novell 080930 Novell Client 4.91 SP5 for Windows XP,2K3 (All Languages) (Rev 2) Software Installer
Novell 080930 Novell Client 4.91 SP5 Update for Windows XP,2K3 (All Languages) (Rev 2) Critical
Novell 090409 Novell Client 2 for Windows Vista/2008 (All Languages) (See Notes) Software Installer
Where are all patches? for example the IR1 patch and after IR1 there was another new patch: 491psp5ir1_nwgina.zip
Can't find them.

Floort,
it's strange, and more than a little embarrassing that updates to
Novell products aren't always available via Patch Management. I know
that Product Management have been working to make this happen for a
long time, but it's not sorted, yet.
Shaun Pond

32-bit shell emulation for ALL patching of middle tier?

In the Oracle Fusion Middleware Infrastructure and Middle Tier April2009 Cirtical Update Patch 8298235, I found the following statement:
On Linux x86-64 computers, always use 32-bit shell emulation. Use the following command before running the installer and any other Oracle Application Server commands or scripts:
linux32 bash
I have seen the requirement for 32-bit emulation in individual steps in a patching or upgrade before, but this is the first time that I have found such an all-encompusing statement. I have never run into a problem that I know of running opatch in 64-bit mode.
What is the real meaning of the above statement and, if it really means ALWAYS, what possible problems might occur if 32-bit mode has not been used in all patching.

Hussein,
Thanks for your quick reply. I'm still a little confused. When installing r12 rup6 and upgrading to 11g there was lots of patching. Whenever the specific doumentation stated that linux32 was required, it was used. I only found this when actually running the Xwindows universal installer, and then even when installing 11g software. However, all other patching (lots) of the application tier using opatch was done without using linux32. We did download and install the latest 64-bit version of opatch. None of the patches produced any errors. Is this the correct thing to be doing? If not, what should be done to correct the problem? How might any problem manefest itself.
The statements in 564174.1 and in Patch 8298235 say "all commands and scripts". What does this really include? starting up services? autoconfig? etc. or is the only real worry when something is being compiled?
Also, your answer implies that if you have the 64-bit version of opatch you don't need to worry about linux32.

Applet clients accessing EJB middle-tier

Hello
I am trying to have an Applet access the stateless session EJBs on the middle tier (OC4J 9.0.3)
The applet works fine in the AppletViewer.
However in the IE browser version 5.5, I get java.security.AccessControlException.
Which I can understand because applet is not allowed to open a RMI-IIOP port on the remote server.
What steps do I need to take to allow the applet to open such a connection. Signing jars?, java.poclicy file ?
I know that this setup works fine on JBoss and also on WebSphere. (using certificates)
Is this not suported by OC4J? Does the server need to support something or is it strictly a client side issue?
Any comments will be highly appreciated.
Thanks
vijay

We are having Applet-clients with OC4J and it works fine. We sign all our client-jars (including oc4jclient.jar) and our application has all permissions at the client. Modifying java.policy works as well, but signing Jar-Files is simpler and doesn't need any client-changes.
For normal operations it seems ok to include oc4client.jar for the client application, but we are using JMS and therefore need a lot of classes of oc4j.jar - so I buildt my own deployment-jar out of oc4j.jar.
If you use the cache_archive and cache_version attributes in the html-tag, all the jar-files are only downloaded at application startup if they are changed on the server (und version-numbers are increased). So startup-time is comparable to a local application.
Gilbert

Middle Tier

Recently became unable to authenticate via Middle Tier on laptops with no Client installed. Able to do so in the past. Any thought on the most likely culprit? Have already rebooted Middle Tier/ZENworks server.

youngj,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Novell Client patch kills authentication to middle tier

Similar Messages

Maybe you are looking for