OAM 10g - access to resource is not authorized, but no login form displayed

Hi,
Here's another one. Let's say I access some (protected) page which redirected me to login form page. Login form page immediately creates a obssocooke (for user obanonymous). Instead of logging in, I just change URL to my protected application (I actually did it because I changed my mind and not while purposely testing).
I am getting "not authorized" error, instead of being redirected to login page. This is very confusing and bad user experience. The obssocookie appears to point to a valid session (I checked status in my app for user session and it appears to be ObUserSession.LOGGEDIN) but obviously the user anonymous is not authorized.
So the question is - Is there any way OAM would not create a valid session cookie for anonymous user when I just load login form page? How do you guys solve this issue? Should I somehow use auth level?
Thanks,
Alex

Hi Sagar,
What you've described is exactly my intention. I want only users with auth level > 0 to access the protected application. Plus for the resource I define my form based login as default authentication scheme (which has level=1). I think that the issue is that I protect the application with my own access gate (not a web gate). And there I have the following logic:
if(sso cookie is present and status of the session = "logged in") then validate whether user has access to the requested resource. So in my case the sso cookie is found, and belongs to anonymous user, session state = logged in, and I fail at authorization check. I think I need to implement some kind of auth level check, or compare actual user's auth scheme with the one required for the resource, right?
Thanks,
Alex

Similar Messages

RECEIVER: ERROR: Access to requested resource is not authorized for user

Hi,
I installed two instances of COREid Federation in my machine. Also installed SiteMinder and LDAP. Source Domain of COREid (8101) uses LDAP as IdMBridge and Destination Domain (9101) uses SiteMinder as IdMBridge. I am trying to access the resource protected by the SiteMinder from the source domain using the URL which is constructed using the pattern given in the PDF:
http://mymachine.domain.com:8101/shareid/saml/ObSAMLTransferService?DOMAIN=DestinationDomain&method=POST&TARGET=http://mymachine.domain.com:8887/Source/Source.html
Assertions are generated and I can see the assertion in the Source domain and transferred to the Destination Domain.
when i try to access the Source.html protected with siteminder, I get the following error in the Destination Domain Shareid Log file:
ERROR - [http10113-Processor3] - RECEIVER: ERROR: Access to the requested resource is not authorized for user uid=username, ou=People, dc=xyz,dc=com
Please help me to solve this issue?
Note: When the resource is accessed directly, siteminder authorizes the same user.

We also occationaly have this error. See my log for an example :
Transaction completed successfuly for DocEntry = 54358 : In company FIXTHISPLEASE on 3/2/2010 9:48:49 AM
Transaction completed successfuly for DocEntry = 54365 : In company FIXTHISPLEASE on 3/2/2010 10:24:55 AM
Transaction completed successfuly for DocEntry = 54403 : In company FIXTHISPLEASE on 3/2/2010 12:14:53 PM
-5006 - The requested action is not supported for this object. for DocEntry = 0 : In company FIXTHISPLEASE on 3/2/2010 1:38:45 PM
Transaction completed successfuly for DocEntry = 54424 : In company FIXTHISPLEASE on 3/2/2010 2:40:44 PM
Transaction completed successfuly for DocEntry = 54425 : In company FIXTHISPLEASE on 3/2/2010 3:01:51 PM
Transaction completed successfuly for DocEntry = 54426 : In company FIXTHISPLEASE on 3/2/2010 3:03:41 PM
Transaction completed successfuly for DocEntry = 54427 : In company FIXTHISPLEASE on 3/2/2010 3:05:12 PM
As you can see from 9:48am to 3:05pm, one occurance of this error occured. And they say that the transaction was
tried a few seconds later and it worked.
the STARTTRANSACTION() and ENDTRANSACTION() are used by the DI API so I'm really in the blank about this error and it starts to anoy the customer. Their SAP is 2007 SP01 PL08
Any concrete ideas about this ?

Apple TV does not recognize my Apple account username (email) and password, but ITunes, my iPad and iPhone does. I have rest my password three times, same results. Also, ATV says my computer is not authorized, but I-Tunes says it is.

Apple TV does not recognize my Apple account username (email) and password, but iTunes, my iPad and iPhone does. I have rest my password three times, same results.
ATV says my computer is not authorized, but i-Tunes says it is.
I have i-Tunes open on my computer and have entered i-Tunes store, ATV says it can't access the store. Both on the same network!
I am so frustrated with this system! All these problems with Apple TV are not the end but the beginning.
In i-Tunes, songs are lost when they have not been moved. I lose whole albums I have ripped from CDs to iTunes
An audiobook book in two files are in the library but only one file is recognized by iTunes when I try to play it or transfer it to my iPhone

I Am having the same issue. Ie on the password issue.
I Am using a Macpro though.
i Have had no issues with the setup until recently.
However I think the hard drive is starting to fail as it keeps on losing the wireless connection and gas been stuttering a lot on playback.

The connection was denied because the user account is not authorized for remote login

Using Terminal Server 2008 not able to get non administrator users to login to the remote desktop. Have tried from Windows server 2008 and from Windows servers 2003. Get error login in "The connection was denied because the user account is not authorized for remote login" from Windows Server 2008. Error "The requested session access is denied" from Windows Server 2000.

Is that seriously the only way to do this? Doesn't this render the "Allow log on through Terminal Services" GP Setting useless?
I would like to know this answer, as well. I have created a new AD group for my assistant admins called "Domain Admins (limited)". I have added this group to the GP setting "Allow log on through Terminal Services", but the
assistant admins cannot log in through RDP. It 'feels like' this is all I would need to do.
Craig
Found some good info
here. There are really two things required for a user to connect to a server via RDP. You can configure one of them via Group Policy but not the other.
1) Allow log on through Terminal Services can be configured through Group Policy, no problem.
2) Permissions on the RDP-listener must also be granted. If your user is a member of the local Administrators group or the local Remote Desktop Users group then this is handled. If you are trying to utilize a new, custom group (as I am),
then there isn't a way to do this via group policy (that I have found).
EDIT: Found the answer. I am creating a blog post to outline the steps. They aren't hard, but they're not self-explanatory. It deals with the Restricted Groups mentioned above, but it's still automate-able using Group Policy so that you
don't have to touch each computer. I think the above poster (Andrey Ganev) got it right, but
I had trouble deciphering his instructions.
Here is my blog post that walks through this entire process, step-by-step.

You are not authorized to open the form ORA-01403: no data found

Hi,
I have created a new Oracle 10g forms. It compiles sucessfully but when it is opened it gives a error message : You are not authorized to open the form ORA-01403: no data found.
I am already connected to database. Can anyone please help what is the reason for this issue and any possible resolution?

Sounds like you have some kind of security enabled. However, because you didn't share the details about your environment or what you are doing there isn't much we can do is guess.
Exactly which Forms version are you using?
Exactly which database version are you using?
Are you using anything like Oracle E-Business (e.g. template.fmb)?
Did you create the form with Oracle Designer?
If you create a simple form using only the DataBlock and Layout Wizards against the Oracle demo schema (SCOTT), does this form run?
Any additional details outlining what you are doing or have already done might be helpful.

I am trying to sync my iPod, and while attempting it I am getting the error message "(whatever the song name is) cannot be downloaded because your computer is not authorized", but when I go to authorize my computer, it says it already is authorized. ???

While trying to sync my ipod, I keep getting the message "(songs) could not be downloaded because the computer is not authorized", but it is. It says there are 100 songs that will not download. What is the problem? Also, I have loaded some music from CDs onto my itunes, and some of them are not loading onto my ipod when I sync . . .

Maybe:
iTunes repeatedly prompts to authorize computer to play iTunes Store purchases

I am trying to sync my music from my computer to my iphone 6 but my computer keeps bringing up an error box "computer not authorized" but it is authorized. Please help!

I am trying to sync my music from my computer to my iphone 6 but my computer keeps bringing up an error box "computer not authorized" but it is authorized. Please help!

I have a pc and am trying to get my music through my iTunes on my computer. I didn't have any trouble syncing my iphone 5S but can't get it to sync with my 6. OS 8.1.3
I open iTunes on my pc, plug in my phone, then I click on the picture of a phone on the upper left hand corner of my music library. Then I get a box of options with sync at the lower right. I have clicked "automatically sync when phone is plugged in" and have also tried to do it manually by checking specific songs and albums. Every time I hit sync the box pops up that says, "The iPhone could not be synced because this computer is no longer authorized for purchased items that are on this iPhone. To authorize this computer for items purchased from the iTunes store choose Store>Authorize This Computer."
I took those steps and a box pops up that says "this computer is already authorized."
I have my recently purchased music on my phone that came through the cloud when I restored my phone. But I want my old music from CD's that I put on my iTunes library in my computer. I had all of this music on my old phone.
Thank you so much for your time! I'm obviously not very good at this!

HT1420 unable to import apps getting this computer not authorized, but music etc. will import

unable to import apps getting this computer not authorized, but music etc. will import

cougar78 wrote:
With me it transferred everything but music and videos. Also it required me to enter my email passwords again (I have several accounts setup). Every time I went to the music tab, it said it couldn't find the file with the name of my 3gs phone name. So now after it installed every app it had stored in my itunes (many I deleted off the phone), I am trying to start fresh and see if I can just add movies and music manually and be glad contacts, email accounts (sans passwords), and the other settings did carry over.
Were any of those email accounts POP email accounts?? I don't think emails that are locally stored on the iphone are saved when you backup.

Post import of 10g Website archive, resources are not found in path

Hi All,
I am trying to import WCM sample site into newly installed 11gR1 (11.1.1.7.0) using site studio back up and restore utility.
http://www.oracle.com/technetwork/middleware/webcenter/content/wcm-sample-site-131561.zip
Post importing the site, when i access the pages i could see that images and other resources are not rendering as paths for images could not be resolved.
For eg: the logo image. site is looking for the image at the following path.
/cs/groups/public/documents/wcmwebasset/oracle_logo_15h.png
Where as post import this image is found inside
cs\weblayout\groups\public\documents\wcmwebasset\x2xv\z29f\~edisp\oracle_logo_15h.png
How can we over come such problems?
To give you a a bigger picture, I am working on a POC to migrate a site from 10g to 11g. What is the good startegy to adopt. Right now i am trying to do the following.
1) Install 11g R1 install.
2) Use folder_g as network interface.
2) Export the website from 10g ( I am sure this could be split into multiple steps)
3) Import it into 11g
5) Use the migration utility to move folder interface from folder_g to framework folders.
I did not go for inplace upgrade primarily because customer wants to retain the 10g Install for some more time and did not want to corrupt the existing install.
I appreciate any help in this regard.
Thanks in advance,
Seshan K.

Hi Seshan ,
You are seeing the new path for the files because of dispersion rule principle in UCM 11g onwards (which is by default set for file store provider) . This behavior can be changed by the following steps :
1. Check whats the default rule you should navigate to Administration - admin Applets - Configuration Manager - select FileStorage field - Edit and check whats the value set in Default parameter .
It should be DispByContentId
2. Remove dispersion rule from the weblayout / web / vault paths from Administration - Providers - Default File Store - <FSP Rule > - Edit .
3. Update - Update
Before starting with the above action items , you should run a full export archive from the target server (11g) and select the option "Delete contents after successful export" . This will clear the server and it will be a completely clean instance .
Then after the changes to File store provider is completed , server restarted , import the archive created and then it will be with the same path as seen in 10g instance.
Reference posts :
https://forums.oracle.com/message/10058823
https://blogs.oracle.com/ecmarch/entry/working_with_the_new_fsp_dispe
https://blogs.oracle.com/ecmarch/entry/when_is_the_default_storage
Hope this helps .
Thanks,
Srinath

I can't sync my new purchases, saying computer not authorized, but when I try to authorize it says incorrect passcode when I know is correct. Already unistalled and reinstalled. help?

I am having trouble syncing my ipod nano with my desktop. I purchased new songs that show up on my desktop but cannot get them to sync to my nano. The computer keeps giving me the message it is not authorized. Then it asks for my passcode which it says is incorrect. Which how can that happen when I can still go into Itunes and purchases songs with the same passcode? The computer just keeps looping to "not authorized" and "incorrect passcode". But I was able to see my computer is 1 of 2 computers authorized but does not seem to be recognizing this. So, I called apple support and they had me unistall and reinstall itunes but I am still having the same problem. Does anyone have any suggestions how to get pass this? Any help would be great thanks!!

Hello lenmin,
Thanks for using Apple Support Communities.
To help resolve this issue where you're repeatedly prompted to authorize with your Apple ID in iTunes when syncing, please follow the directions in the article below.
iTunes: Missing folder or incorrect permissions may prevent authorization - Apple Support
Have a great weekend,
Alex H.

When I try to sync to my ipad, tons of my music doesn't download. The error message tells me that my ipad is not authorized, but when I try to authorize it, it tells me it's already authorized.... what now?

I want to sync music to my ipad, but it tells me it can't because ipad is not authorized. when I go to authorize it, it tells me it's already authorized. I'm confused.

You use the iTunes app, but you authorize a computer to use items acquired from Apple with a specific iTunes account. Then any iOS devices that sync to that computer are also automatically authorized to use the items acquired from Apple when they are synced to the device.
If you are mixing stuff from various usuers individual iTunes accounts it can get a bit confusing. For example if you have apps from thre different users accounts, the apps can only be updated if that user signs into their iTunes account either on the specfic computer or the individual iOS devices.

Can't play purchased album because itunes says my computer is not authorized, but it is?

purchased an album yesterday and can only play 3 tracks off of it. the others, i am prompted to log in before playing them, saying my computer is not authorized to play the file. then, when i log in, i am told this computer is already authorized. so i go try to play the track and i am prompted to log in because my computer is not authorized...
talk about a headache!
running windows 7, itunes 10.
i've disabled windows firewall and all antivirus software.
only have one pc and only have one itunes account.
ANY help would be appreciated. thanks in advance.

iTunes repeatedly prompts to authorize computer to play iTunes Store purchases

ITunes says my computer is not authorized but when I sign in it says it is...but won't play purchaces

I am using a laptop from my home family of computers but when I try to play a movie I have transferred from my desktop, first iTunes says I am not authorized to play this movie. Then when I sign in to authorize the movie, it says that I am authorized on this computer but I still can't play the movie. When I try to play it again, the whole routine starts over again. Suggestions????

I'm having exactly the same problem. I just tried all the suggestions in the link from Jim and none of them made any difference. Tried calling Apple support but just got bounced round by people who didn't seem to know what they were talking about.

TS1389 I am trying to download some ringtones from zedge. My wife has an iphone and has done this with no problem. she did the same with my iphone and my computer and it is not syncing. it says my computer is not authorized but it is & it's my only com

I am trying to download ringtones using Zedge. My wife had no problem doing t his and she set up my computer and my phone but it won't sync. says my computer is not authorized. She did the same steps on my computer and phone as she did on her computer and phone but mine not working. Help.

If you really are running OS 10.4.6 you have a long way to go!
So, assuming you are not, what version of OS X do you have?

IMovie says iTunes music not authorized, but iTunes says it is authorized

A problem has developed in iMovie where it is not recognizing my iTunes authorizations, despite the fact that the songs are authorized and they do play in iTunes.
I have purchased songs in iTunes, and iTunes will play them. But iMovie has stopped playing any iTunes purchased music, claiming that "This computer is not authorized to play....." and suggesting that I open iTunes to authorize.
I've tried deauthorizing my computer and then authorizing it again, and that has not improved the problem.
I'm running:
iTunes 7.3.1 - last updated 2007-07-14
iMovie HD 6.0.3
Quicktime 7.2
iMovie has always played these songs in the past, so I know that they can play. This problem seems to have appeared since the last iTunes update.
Mac Mini Mac OS X (10.4.10)

I was born in Chicago. Maybe that's the
problem?
LOl! Probably!
To "authorize" playback requires an Internet
connection (now we know that, too).
That's why I asked about the Internet
connection.
Absolutely-I thought that was a good point-especially
the wireless thing...
As a side note, why would a wireless versus hardwired internet connection matter? I know I'm connecting to the Internet. And I've even deauthorized my computer (and then none of my songs will play in iTunes) and then reauthorized it (and they play again in iTunes). But iMovie still says they're not authorized.
And, in case anyone was wondering, I only deauthorized/authorized my computer in iTunes after iMovie started showing these symptoms.
The problem started after the last iTunes upgrade.

OAM 10g - access to resource is not authorized, but no login form displayed

Similar Messages

Maybe you are looking for