Once per session, connected anyway

I have an authentication scheme that is set to once per session. The users are defined in oid and have to logon using sso.
So far so good. But in following scenario it goes wrong.
1. User enters the htmldb url
2. User gets the logon screen from sso
3. User logs in and is than forwarded to the application where the authorisation scheme says him he has no access and he is redirected to a public page that tells him this.
4. the user presses the 'Back' key on the browser, so he gets the login screen again.
5. he enters again his username and password, and enters.
-> now he is logged in and gets the screen he is not allowed to.
What goes wrong here? Why does the session not remember that this user has no access ?
Grtz,
Chris.

Scott,
The solution of htmldb_util.reset_authorizations works fine. But in the end we choose another option.
We are using the error page now to display wether the user has no access to the application. It looks like the user has access to the error pag even if he has no access to any of the application pages. Now it works fine.
Now the authorization also returns false.
Tnx for the replies,
Chris.

Similar Messages

Public and Authenticated App with Authorization Scheme once per session

I have a question . . .
Let's say I have an application and at the application level I have an authorization scheme (auth1). If auth1 is set up to evaluate once per session, does it authenticate for the public user, then pass me back to the page and then check then evaluate the auth1 scheme. Or does it evaluate the auth1 scheme, then log in, then return to the page. Is it the same regardless of authentication scheme (e.g. Oracle SSO).
It may make a big difference. If the authorization sheme is based upon the user (most will be) then setting it to evaluate once per session can be a real problem. If it evaluates before the user logs in, then it won't really work.
This is an even bigger question when the application does not have a authorization scheme at the application level and allows public pages. If a page that is not public has an authorization scheme set, and the user goes directly to that page, it seems to authenticate the authorization scheme and then logs you in, but does not re-evaluate authorization scheme after you are logged in. Is this accurate? I realize that I could set it up to evaluate for every page view, but I really only need it once after login.
Is this clear?

Anton,
It seems that all authorization schemes that are set to evaluate once per session are evaluated with the beginning establishment of a session.Sort of correct. Authorization schemes don't get evaluated until the component that uses them is considered for rendering or processing. So if the authorization scheme is attached to a page, it won't fire until the page is requested. If another component uses that scheme first, the evaluation will happen then and will not happen again during the session.
What if I have another page that is not public. If it is the first page I go to, what happens. Obviously, I get redirected to login, then login. Do the authorization schemes get evaluated at this point?Yes, assuming the authorization scheme is used by the page, the scheme is evaluated during the first rendering or processing of the page in the session, after the authentication step.
Now, what if I have a page that is public, but also has an auth scheme (odd, but could happen). Now what happens, does the auth scheme get evaluated before or after login?During the rendering or processing of the page after the authentication step. For a public page, the authentication step is performed up to the point where it determines that no authentication is required.
OK, now let's add in Application level auth scheme. I can have public or private pages. If I go to a private page, when does the app level auth scheme kick in? How about for a public page?When an application uses an authorization scheme, it gets evaluated before the authorization scheme (if any) for the page that is being requested, so the public/private property of the page doesn't matter.
General advice: when an authorization scheme uses :APP_USER, it doesn't work well to have it fire once per session because it'll get run before authentication to the application occurs, which sets APP_USER. You can have such schemes fire once per page view and for PL/SQL function-type schemes, have them give a "pass" when the current page is the login page, that kind of thing.
In addition, if the overhead of running a scheme is high, one can set an application-level item to indicate that a once-per-page scheme has already run satisfactorily. The PL/SQL-type schemes can access the value of such an item to skip the expensive part of the evaluation and return true immediately.
Finally, the htmldb_application.reset_security_check API can be called in order to reset the "fired" status of all authorization schemes in the session, allowing them to be re-evaluated if/when they are encountered again in the session.
Hope this helps,
Scott

Sort by columns once per session

Hi there, I am using apex 3.1 and I have a report generated by a pl/sql function. There are several columns on which the user might sort. Is it possible to reset the sorting preferences when the user logs in? (like: a process running once per session?)
thx in advance
Edited by: 814932 on 23-Nov-2010 08:00

You can use the <tt>apex_util.remove_sort_preferences</tt> method (although it is a bit of a blunt instrument). See the Admin guide for more information on user preferences.
To run it once per session, code the call as an Application Process with execution point On New Session After Authentication.

With a document open password - is there a way to ask only once per session?

Here's my scenario: User is reading a "password to open" document that contains links to other web pages, etc. The user clicks on a link, goes to the new page, then uses the back button/back key to return to the password protected document, where they must type in the password to open again, and must do this every time they click a link then later attempt to return to the document.
Is there a way around the repeated retyping / reentering / rekeying the password? (My guess is no, but I'll ask anyway). The user did type in their password, most of the time just a minute or two earlier, before they clicked on the link in the password protected document.
P.S. I have a couple other questions, indirectly related (byproducts) to this general topic. I'll post those in their appropriate forum, then edit this post with links to those posts. FYI, the other posts are/will be:
Is there a better way than manually adjusting each and every link in a document to use javascript and repeating that process each time the document is updated, to make links open in new windows, (when viewing a pdf from within a browser window). [Edit: here's that link: http://forums.adobe.com/message/5055202#5055202 ]
Is there a way from an html page or from something within a PDF document (at the discretion of the document's author) to open a pdf in the acrobat reader window instead of in the browser, without asking each user to change their reader settings? [Edit: I ended up asking this question in the same post listed above]

Once the instance of Acrobat or Reader containing a password-protected PDF file has been closed, you can't avoid having to re-enter the password. If the links don't target a new tab or window, then the browser will unload the plugin - and aside from changing all the link targets, you can't prevent that.

Browser does not seem to prompt for more than once per session, to accept untrusted sites. I have to close/open firefox to visit multiple untrusted sites in one sitting. Is there a way to fix?

I use firefox to connect to the console of different Sun/Oracle servers. The www pages are "untrusted" and I get a question to continue to connect or not. When I say continue, it pops up a window to either accept or deny the cert. This window, once I accept it, to continue to do my work. When I'm finished with that server and continue to another one, that window no longer pops up for me when another untrusted www page is loaded. But when I quit firefox, and then revisit the page, the dialogue pops up and I can accept the new cert and continue to work.
I'm considering going back to the older version of firefox as this is severely impacting my day to day use of it. I'm still trying to see if I can get around it by fiddling with different firefox options.

Thanks. I tested it, and found that I can create a bookmark in FolderA, and them manually copy it to FolderB, FolderC, and FolderD.
Once that is done, I tried the old method of "Bookmarks" --> "Bookmark This Page" and added it to FolderE. When I did that, it deleted the copy in FolderD but left the other three alone!
This is fine with me. I personally think this is a bug, because I don't think that Firefox should ever delete a bookmark without asking me (or at least, informing me). But now that I understand the algorithm, I can work around it. Thanks!

PCMICA Media Card Reader only mounts once per session

After I restart and insert my PCMICA media card reader will show up on the desktop but only once. After I eject the card and reinstall it will not show up on the desktop. The card appears in the menu bar but no where else not on the desktop or in a finder sidebar. It acts like it is permanently ejected. The only solution is to restart which is time consuming during a photo-shoot (Sleep/Wake and Finder Relaunch do not solve this). I have two media card readers one for CF cards and a 4in1 for smaller cards. Both act in the same way and once one has been ejected the other wont mount as well. Both cards worked fine in system 10.3.9. System log does not show any difference in loading when it mounts and when it doesn't.

Well, I tried the hardware test and now we know it is a software problem(hardware checks out fine).
I checked out the Delkin website. That was disappointing. Looks like I need to buy more hardware to solve this one. Worse yet if I spend the $100 for two cards they wont work in my next laptop as I plan to get a MacBook as soon as PhotoShop is Intel ready.
So now the question is what do I do with this growing mountain of unusable peripherals. My business is small but we've bought a lot of macs. Close to 50 now. We had a few before Y2K and just before we replace all the PCs with iMacs and G4's. System 8.6 was great and every printer and reader and camera and scanner and external storage device (some going back to 1989) worked great. Now that we have "upgraded" the software so we can do really complicated things like properly viewing web pages and send authorized email nothing works right. I have faxes (Apple 56k in a G4) that can't detect detect dial tone when faxing but can connect to the internet as a modem. Printers that print fine in TextEdit (PS fonts and all) but can't print out of Excel. Dont even get me started about fonts. The list keeps growing and the only answer I hear is to replace perfectly good hardware with new stuff. Then when I do I find the software wont work. (I had to use a old laptop with 10.3 to run the latest software from Version to set up a friends home DSL.) I need to get out of this loop it is costing more than it's worth.

Dreamweaver CS4 on Win7x64 only starts once per session

Hello.
I use DW only occasionally so I didn't notice that whenever I exit DW I am unable to restart it during the same windows session. If I try to open it a second time, nothing happens. However, if I log off as a windows user and then log back in, I can run DW again (but only once).
Does anyone else have this problem on windows 7 64 bit ? Is there a work around ?
If it matters, my version is 10.0 build 4117.

Ok. While trolling thru other posts, someone asked about using different compatibility settings.
So, ..... I right clicked my desktop icon to start Dreamweaver and selected Troubleshoot compatibility.
During the windows wizard that runs, I eventually established the successful compatibility settings "Compatibility mode: Windows Vista Service Pack 2" and "User Account Control: run as Administrator".
After saving these settings, I am now able to run DW multiple times without any problems.
I will be interested to see if I do not experience the other Windows 7 problems I see in the forum postings.
Compatibility settings may be a way to avoid these issues.

My rMBP HDMI display cuts out once per session

I have a rMBP (15 inch) that I use mostly with the lid closed and connected to dual monitors, (both identical ASUS monitors with HDMI and DVI-D connections). I use the Thunderbolt DVI-D adapter and a HDMI cable. When either running Windows 7 via Bootcamp or using Mountain Lion, the HDMI connection goes dark for about 3-5 seconds when I first start using the computer, then the picture reappears. The DVI-D connection is not affected.
All software updates are current and I've switched monitors and cables to no avail. Has anyone else encountered this issue?

Thanks. We are using the same setup the salesman sad he had at home: Mac Mini as media server with TV as monitor. We bought the server, not for the services, rather for the two 500GB drives. We let the default services run when we first set it up. I suppose I could shut everything non-essential down and see what happens.
I finally isolated the problem to today to either the HDMI cable, the miniDVI-to-HDMI adapter, or the Mac Mini itself. I would love for it to be just the adapter. Funny thing is the guy who sold us the system didn't know an adapter came with it so he sold us another one--which we promptly took back. Blergh!
This was supposed to be an easy migration. Imagine the naivete!
-starkravingchad

Applet load once per session

Hello All,
I make a simple application has only 2 jsf pages(page1.jsp and page2.jsp) and I make a page template.
in page template I put an applet as chatting applet. when I run page1.jsp the page is open and I found the applet but when I navigate to page2.jsp applet will reload again.
I want when user open application the applet will load only once. if user navigate between pages I want this applet not reload again.
How can I make this?
I use JDeveloper 11.1.1.4.0
Regards,

Hi,
Applets are implemented through an Applet tag on a page. If the page loads, an instance of the applet is created. In your case, you dismiss a page and the re-load it again. I am not sure what you are trying to do will work, but you can give partial navigation a try:
http://docs.oracle.com/cd/E23943_01/web.1111/b31973/ap_config.htm#sthref409
use onWithForcePPR
This will perform navigation using an implicit iframe. Chances are that the template doesn't change and the applet thus stays. If this doesn't work then I think you need to work on a new strategy for setting up your chat application
Frank

Web service request ....one db connection per session OR all share one...

in servlet i use
public void init(ServletConfig config) throws ServletException { }
so it only gets the db connection once per session
now that I am working on a web service....im not sure how to do something similiar
I want to either have all request coming in to use the same ONE connection OR maybe one created per session
I have way too many web service requests and it creates too many jdbc connections....what can i do to pervent this?
I dont care if they have to wait longer;
I just want to cut down the number of jdbc connections to 1 to 2
any help appreciated, thanks

You want to use a connection pool. If you just use one connection, your web users are likely to be waiting on the availabilty of the connection. A pool will let you set whatever maximum you want; 1 or 100...
There are a number of database connection pooling options. One of the morepopular is DBCP, part of the Apache project, which is free and open source.
http://jakarta.apache.org/commons/dbcp/
There are other such "drop in" poolers and some database vendors are now supplying connection pooling in their drivers.

Start systemd --user once after first login, not per session?

Hey guys,
So I've been toying around with using systemd to manage user daemons and some oneshot processes, it seems like it could be really nice
Here's what I'm thinking I would like to do:
I would have two user targets, `console.target` and `graphical.target`.
The console target will start things like pulseaudio, ssh-agent (envoy), transmission, stuff like that.
The graphical target will start xorg and then other things like the WM, set the wallpaper.. you get the idea. Obviously the graphical target will want the console target.
Now, the part I wanted to get some feedback on is this: I would like a systemd --user instance to only be started once after my first login, not once per session.
So for example, I login from vt1 and it brings systemd --user up to the graphical.target. Then if I later SSH in from somewhere, it won't start a new systemd --user session (Ie, won't start pulse-audio, transmission-daemon, etc).
However, if I haven't logged into my machine yet and I SSH in, it will start up systemd --user and will start the console.target. If I then later login via vt1 it will see that there's already a systemd --user session started and start the graphical.target
Does this make sense? Is it a bad idea?

You could make a column in the database, and when the
information is set (emailed) make the value to be 0, then when they
first register use a IF recodset("column_name") = 0 Then
reponse.redirect("filloutpage.asp") end if, then when they fill out
the info have a hidden form field thats updates the value to 1. on
the login page after the first if make another IF
recordset("column_name") = 1 Then response.redirect("index.asp")
end if.
i have forms that have three different redirect based on user
input, and you could do the same thing you could add the one for
the first time to dw made code, here is an example, you could
change the request.form to a recordset value and it will work.
If Request.Form("select") = "Self" Then
MM_editRedirectUrl = "FridaySchedule.asp"
Response.Redirect(MM_editRedirectUrl)
End IF
If Session("MM_AdminEdit") = "True" Then
MM_editRedirectUrl = "FridayScheduleAdmin.asp"
Response.Redirect(MM_editRedirectUrl)
End IF
MM_editRedirectUrl = "FridayScheduleDept.asp"
If (Request.QueryString <> "") Then
If (InStr(1, MM_editRedirectUrl, "?", vbTextCompare) = 0)
Then
MM_editRedirectUrl = MM_editRedirectUrl & "?" &
Request.QueryString
Else
MM_editRedirectUrl = MM_editRedirectUrl & "&" &
Request.QueryString
End If
End If
Response.Redirect(MM_editRedirectUrl)

Redirected printers using Remote Desktop Easy Print driver work only once during session

Hello all
We are running Windows Server 2012 R2 Remote Desktop Services Sessions hosts with printer redirection allowed using only the Easy Print Driver, we have no other drivers installed on the servers. All client printers are redirected and can print fine, but
only once per session! We have tested with several different client printers and they all work a single time in each session. After that the user needs to log off and then back on again to be able to print once again, but only once. Needless to say, our users
are annoyed. If I look at the c:\windows\system32\spool\printers folder while jobs are printing, but failing, I can see the spool files appearing and disappearing as jobs are spooled. No errors in the event logs accompany the behaviour. Our clients are running
Windows 7, 8 and 8.1. All exhibit the same problem. The error looks a little like what is described here:
http://support.microsoft.com/kb/2925429
While similar, this problem describes a scenario where Easy Print is not used, but XPS is, and since Easy Print is based on XPS and the behaviour is very similar, I am tempted to make a connection.
I have checked all the usual stuff with permissions etc, and no manufacturer provided drivers are present. The problem appears on newly installed systems as well as one that have been running for some time. Restarting the spooler services does not resolve
the problem. Actually I do not think it is related to the spooler service or driver framework at all, but rather is an Easy Print driver issue that is occurring much later in the process, if not I would see some errors in the logs and no jobs would print at
all.
Anyone ever heard of something like this?
Thanks
Morgan

Hi Morgan,
Based from your description, users can only print once during single RDP session, I suggest you check if this issue also happens locally.
In addition, after the first print attempt, does any other issue exist on the RDP session?
Is the server fully patched? If there are any available driver updates, please also apply them. If there are any third party software installed, try disable/uninstall them to see if the issue persists.
You can also enable print auditing to get more detailed information about this issue.
More information for you:
Auditing Printing Events
https://technet.microsoft.com/en-us/library/cc976774.aspx
Logging Spooler Events
https://technet.microsoft.com/en-us/library/cc976746.aspx
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]

Increasing max-streaming-connections-per-session has slow acknowledge response?

Our application is a Flex GUI with a WebLogic Server (BlaseDS) on a private network. We were originally using IE 6, but have upgraded to IE 8.
I am trying to use publish/subscribe messaging to monitor lengthy processes on the server and received incremental data. With 1 such process everything works fine. But we want to allow the user to subscribe to more than 1 message destination. So I increased the "max-streaming-connections-per-session" (default is 1) in the services-config.xml file
     <channel-definition id="process-notification-streaming-amf"
          class="mx.messaging.channels.StreamingAMFChannel">
          <endpoint url=https://{server.name}:{server.port}/{context.root}/messagebroker/streamingnotificationamf"
          class="flex.messaging.endpoints.StreamingAMFEndpoint"/>
          <properties>
               <user-agent-settings>
                    <user-agent match-on="MSIE" kickstart-bytes="2048"
                         max-streaming-connections-per-session="3" />
               </user-agent-settings>
          </properties>
     </channel-definition>
If we leave max-streaming-connections-per-session as the default value of 1 and try to subscribe to another message destination we get an error indicating limit has been reached:
     [BlaseDS]Endpoint with id 'process-notification-streaming-amf' cannot grant streaming connection to FlexClient with id '7FFC82DE-etc ' because max-streaming-connections-per-session limit of '1' has been reached.
     We upgraded to IE8 as documentation indicates IE8 allows for an increase of max-streaming-connections-per-session, where IE 6 is limited to 1. But increasing max-streaming-connections-per-session does not quite solve the problem. We have 3 consumers; consumer1, consumer2, consumer3. For each of these consumers, we add event listeners for MessageAckEvent.ACKNOWLEDGE and MessageEvent.MESSAGE.
     We call consumer1.subscribe(). When we receive the acknowledge message, we call consumer2.subscribe() (likewise with consumer3)
     The problem is it takes over 2 minutes to receive the acknowledge message from the call to consumer1.subscribe(). (With max-streaming-connections-per-session set to 1, the acknowledge message is received in a few seconds.)
     So, increasing max-streaming-connections-per-session removes the error about reaching a limit, but it appears to come with a cost of a big delay in a long delay on the call to subscribe? Or is there something we are missing?

I guess I will answer my own question. Hopefully this will be useful to someone else in the future...
The problem was coming from IE being limited to 1 connection by the registry. The solution can be found at:
http://support.microsoft.com/kb/282402
I manually performed the steps to update the registry, though microsoft provides a "Fix It"; MicrosoftFixit50098.msi
One other key element was to make sure to have kickstart-bytes="2048".

Max streaming connections per session error

I have a flex application that uses messaging with a streaming AMF connection, falling back to polling. When the max number of streaming connections on the server is reached, it does fall back to polling (at least it prints the max-streaming-clients error but the client connects, so I assume it is falling back - how can I tell?). However, occasionally the streaming connection will not initialize and it does not fall back - no messages are received on the client. The following error is logged on the server:
[EMST]09/25/2008 13:43:18.231 [ERROR] Endpoint with id 'my-streaming-amf' cannot grant streaming connection to FlexClient with id 'D5B8E3A1-1A1C-063E-84A6-6A743A1E4EE0' because max-streaming-connections-per-session limit of '1' has been reached.
This would make sense if the issue was caused by trying to initialize the streaming connection in two tabs of a browser, but I am only trying to initialize in one tab. Closing the browser (and thus destroying the session) does not fix it. The only solution I've found is to reboot the client machine. This has happened in both FireFox 3.0.2 and IE 7.
(1) What could cause the client to get in this state?
(2) When it happens, why doesn't it fall back to polling? Is the fallback only for when the server max connections is reached? When the streaming connection doesn't initialize, no messages are received.
(3) Is there a way to explicitly close the streaming connection on the client so we can fix this without rebooting?
Thanks!

Hi Mary. If you turn on Debug level logging on the client and the server you should be able to tell if you have fallen back to a polling channel after the attempt to connect over the streaming channel has been rejected. In the client log, you will see the flex application sending poll requests to the server at the polling interval configured in the channel and in the server log you should see that the server is receiving these requests.
The behaviour you are seeing seems very strange to me. The reason we have the max-streaming-connections-per-session limit on the server is because most browsers limit the number of active connections that can be made to a server from a single session. In IE for example, this is 2. What happens in most cases when the browser's connection limit is reached is that new connections are put on hold until one of the existing connections closes. This would cause your flex application to hang with no errors being reported on the client or the server. This is why we need the max-streaming-connections-per-session setting on the server. This prevents more than one persistent connection from being made from the same session, so the browser should never reach it's max connections per server limit and lock up.
It looks like you are somehow getting the browser to lock up even though the server is only limiting you to one streaming connection per session. It may be possible to do this if you reload the flex application in the browser (by doing a page refresh) in which case the browser could possibly briefly leave the streaming connection open in the background and when you tried to create a new streaming connection, the browser's connection limit to the server would have been reached and the application could hang. When the application hangs are you reloading the swf/page in the browser?
I really don't know why closing the browser wouldn't fix the problem. You're right that closing the browser should end the session. If you launch a new browser and load the swf do you get the same "cannot grant streaming connection" error on the server or is the browser just locked up, ie. no error is received on the client and the server?
You're not using a proxy server or anything like that are you that might be holding a connection open to the server?
-Alex

Max-streaming-connections-per-session limit

Hello,
i'm trying BlazeDS with Air app.
I set blazeDs on a Jboss Server with JMS adapter.
I configure it with a streamingAMF channel.
In user agent configuration i put msie, firefox value to 10 for the max-streaming-connections-per-session limit param.
In Air client configuration i instantiate a producer and a consumer on the same streaming AMF channel.
After the consumer.subscribe() i launch the producer.connect() on the server i get this error :
14:25:20,015 INFO [STDOUT] [BlazeDS] Endpoint with id 'my-streaming-amf' cannot grant streaming connection to FlexClient with id '497031A2-7B0D-019A-0E1D-7622A-A631D28' because max-streaming-connections-per-session limit of '1' has been reached.
Is it a limitation of use of blazeDs with Air app ?

First, if you change the limit to 10, then it should be 10 and not 1. If you still see 1, then please log a bug.
Second, you really want this limit to be 1 in IE and 4 in Firefox 2. But there's no reason to have more than 1 streaming connection from the server to the client unless you need to talk to two different endpoints.

Once per session, connected anyway

Similar Messages

Maybe you are looking for