OSB 11g with PASS-THROUGH PROXY

hello all,
I my designing on latest Fusion Middleware 11g Release 1 (11.1.1.5.0)
a http soap based osb proxy service wraped around owsm saml2.0- sender- vouches-message-protection service policy
a http soap based osb business service wrapped around owsm saml2.0- sender- vouches-message-protection client policy
a standalone client is calling this Passive Intermediary Proxy
In case of pass-through proxy service,
I would like to know that is it necessary that the policy contract between client --->proxy should be similar to proxy--->backend
I think so, because proxy is not atall touching the entire stuff starting from <soap:envelope>.........</soap:envelope>
So client-sent tokens etc. must match with what back end service requires.
In general, what am I buying by routing the client call through pass-through proxy service if the back-end webservice requires that entire message must by encrypted. In this case there is nothing open for the proxy to view and make any decisions based on that through its pipeline pairs etc.

Check out the following link...
http://www.cisco.com/en/US/products/ps6120/products_configuration_guide_chapter09186a0080450b5e.html

Similar Messages

How to create pass-through-proxy?

How do I create some kind of pass-through proxy that can listen and receive OCI, and then forward the commands to the oracle database (sometimes where the SQL is slightly altered). What is the best way to do this?
I failed to find any relevant help in the docs. :-(
Thanks in advance!

Anyone? I guess what I'm looking for is how to receive instead of just sending OCI commands, and extract the SQL from the received OCI commands/packages for possible modification/refactoring.

Hasn't anyone out here worked with cut-through proxy

hasn't enyone out here worked with cut-through proxy with acs. is there no one out here to help me out with cut-through proxy.
sebastan

Hi Sebastan,
For your case, what's the scenario looks like?
Rgds,
AK

Juniper Secure Access Pass Through Proxy?

Has anyone tried to enable external access to Filr via a Juniper Secure Access Pass Through Proxy?
Cheers
David

djbrightman,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://www.novell.com/support and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Forums Team
http://forums.novell.com

Using OSB 11g with OEPE

Hi,
I have downloaded oepe-galileo-all-in-one-11.1.1.5.0.201003170852-win32 stand-alone from http://www.oracle.com/technology/software/products/oepe/oepe_11115.html?rssid=rss_otn_soft. I am planning to install Oracle Service Bus 11.1.1.3.0 on a remote server and use the OEPE IDE in my local system to develop the proxy and business services to deploy on the remote OSB server. My first question is are there any plugins that need to be installed in OEPE 11.1.1.5.0 to use it as the IDE for OSB ? And how do I connect from the IDE to the remote OSB server?
Or is it a better option to get the OEPE by installing the OSB 11g server and then abandon the installed server and use the OEPE IDE to connect to a remotely installed OSB server? By doing this, will I get all the plugins that I need for the OSB development pre-configured in the OEPE IDE?
Thanks,
sathish

My first question is are there any plugins that need to be installed in OEPE 11.1.1.5.0 to use it as the IDE for OSB ?Yes. While installing the OSB, go to custom options and you should have a choice to install OSB plugins in any pre-existing OEPE. Personally I have not tried this method.
Or is it a better option to get the OEPE by installing the OSB 11g server and then abandon the installed server and use the OEPE IDE to connect to a remotely installed OSB server?I'm not sure what you meant by "OSB 11g server" but you should use
Oracle WebLogic Server 11gR1 (10.3.3) + Coherence + OEPE - Package Installer to get the weblogic bundled with OEPE, then install Service Bus (11.1.1.3.0)
on this install. OSB plugins required for OEPE will be installed. Now you can use this OEPE to connect to remote OSB server. This is what I personally prefer.
By doing this, will I get all the plugins that I need for the OSB development pre-configured in the OEPE IDE?Yes.
Manoj

Using OSB 11g with OEPE 11.1.1.5.0

Hi,
I have downloaded oepe-galileo-all-in-one-11.1.1.5.0.201003170852-win32 stand-alone from http://www.oracle.com/technology/software/products/oepe/oepe_11115.html?rssid=rss_otn_soft. I am planning to install Oracle Service Bus 11.1.1.3.0 on a remote server and use the OEPE IDE in my local system to develop the proxy and business services to deploy on the remote OSB server. My first question is are there any plugins that need to be installed in OEPE 11.1.1.5.0 to use it as the IDE for OSB ? And how do I connect from the IDE to the remote OSB server?
Thanks,
sathish

My first question is are there any plugins that need to be installed in OEPE 11.1.1.5.0 to use it as the IDE for OSB ?Yes. While installing the OSB, go to custom options and you should have a choice to install OSB plugins in any pre-existing OEPE. Personally I have not tried this method.
Or is it a better option to get the OEPE by installing the OSB 11g server and then abandon the installed server and use the OEPE IDE to connect to a remotely installed OSB server?I'm not sure what you meant by "OSB 11g server" but you should use
Oracle WebLogic Server 11gR1 (10.3.3) + Coherence + OEPE - Package Installer to get the weblogic bundled with OEPE, then install Service Bus (11.1.1.3.0)
on this install. OSB plugins required for OEPE will be installed. Now you can use this OEPE to connect to remote OSB server. This is what I personally prefer.
By doing this, will I get all the plugins that I need for the OSB development pre-configured in the OEPE IDE?Yes.
Manoj

Strange problem with cut-through proxy

hi
i have configured cut- through proxy on the router with acs.i am facing a strange problem .
my routers's ethernet 3/0 interface ip add is 10.1.1.1/24 and the acs server is 10.1.1.2/24 and the host ip is 10.1.1.3/24
my routers' e2/0 interface is connected a server running a website .
int e2/0
no shutdown
ip add 20.1.1.1/24
exit
the webserver is running on 20.1.1.2
my router's config
aaa new-model
aaa authentication login default group tacacs+
aaa authorization auth-proxy default group tacacs+
aaa authorization exec default group tacacs+
tacacs-server host 10.1.1.2
tacacs-server key cisco
ip http server
ip http authentication aaa
ip access-list 101 permit tcp host 10.1.1.2 eq tacacs host 10.1.1.1
ip auth-proxy name auth http
int e3/0
no shutdown
ip add 10.1.1.1/24
ip access-group 101 in
ip auth-proxy auth
exit
on the acs server in the tacacs+ ios
i have selected auth-proxy in the services for users and groups
i have created a user john with privilege level 15
have selected auth-proxy and custom attributes
proxyacl#1=permit tcp any any priv-lvl=15
i get the auth-proxy login page when the host on 10.1.1.3 is trying to access 20.1.1.2 web site .
after putting the login credentials i get authentication failed
i tried the debug. i see the router is sending the authentication login and password and getting the status from the acs as pass. i also see the auth-proxy triggered. in there i see
AUTH-PROXY PROTOCOL NOT CONFIGURED.
could someone pls help me what could be the problem. i am have tried many times to get this work. but not fortunate enough.
am i missing on any commands on the router or on the acs. i tried doing as the example mentioned in the student guide but still failed. pls help. waiting for some reply.
sebastan

Check out the following link...
http://www.cisco.com/en/US/products/ps6120/products_configuration_guide_chapter09186a0080450b5e.html

Problem with "Pass Through Chapters" Theme

I was searching old post to get some help and this one help a little but there was still one problem unanswered. I have highlighted in red;
Nov 14, 2008 3:41 PM Re: Pass Through Theme problem
Re: Pass Through Theme problemin response to Glo H
My smaller text which appears in white says Scenes 1-6. The pass through text which is larger and has a different image in it says "Pass Through Chapters" and it rolls by while the smaller text stays put. I notice the image that shows through the pass through text is the same image I set on the main DVD screen. On that one my name of my disc roll past in giant see through letters. I like that but I just don't want that same effect on my chapters screens.
Can the image behind the rolling text be changed to the current window and not the main menu image?

Thanks for the tip and figured out to delete my "Scenes 1-6" that was automatically created when, in iMovie, I shared the movie to iDVD with chapters. The menu title text block doesn't like cut/paste and I had to retype the "Scenes 1-6" text for the motion/peek-through scrolling text to refresh.
Hmmm, but how tricky is that and where is it mentioned in the help/faq files etc?
cheers

Passing through Proxy

hi,
I am new to network programming. I wanted to make a client exe that can talk to a server through a proxy server. How do I pass the proxy?
From what I got to understand, the PlainSocketImpl supports SOCKS!! How do I support other proxies. Do I need to extend SocketImpl and make my own implementations for each proxy type?? and how would I do that?
Anyone can help?
Thanks a lot

So, if I just set the system properties, I do not need to do any special implementation?
That is good.
Thanks a lot.

Code to run a query in SQL from Access with pass through query

I have a query in SQL Server 2008:
[Auto Null Up Date].sql. I want to run this query from Access 2007 using a Pass Through Query. What is the command/code to run this query from Access? I have used Pass Through Queries but never in this capacity so I am somewhat lost. I have
already established the OBDC link and tested.

Naomi,
Here are a few lines of the SQLCMD code in the [Auto Null Update].sql query:
USE [Archive Master]
Go
:r "\\10.200.1.60\c$\Users\bkreft\My Documents\SQL Server Management Studio\Projects\Null BackPress 2 update.sql"
GO
:r "\\10.200.1.60\c$\Users\bkreft\My Documents\SQL Server Management Studio\Projects\Null CHWR 3 update.sql"
GO
:r "\\10.200.1.60\c$\Users\bkreft\My Documents\SQL Server Management Studio\Projects\Null CHWR 4 update.sql"
When this code is pasted into a Create Procedure, (the USE [Archive Master] is not used), the procedure will run, but once saved here is what is left of the procedure once I attempt to modify:
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
-- =============================================
-- Author:
<Author,,Name>
-- Create date: <Create Date,,>
-- Description:
<Description,,>
-- =============================================
Create PROCEDURE [dbo].[NullTest2]
AS

OSB 11g with service tuxedo 8.1

Hi,
I'am using OSB version 11.1.1.3 on HP-UX and i want to integrate OSB with Tuxedo 8.1.
When traying to invoke tuxedo services from OSB i got the following erreur: The invocation resulted in an error: TPESYSTEM(12):0:0:Unknown(94779):QMNONE(0):0.
What is the source of the error ? what to do to resolve this error ?
BR,

Hi Paul,
What problem? All versions of Tuxedo are compatible with all versions of databases. If XA transactions are being used, then the database must provide an XA library that Tuxedo can call. If XA transactions are not being used, Tuxedo isn't even aware a database is being used. The only caveat is that the platform being used must be support by both the Tuxedo version and the database version.
Are you running into some difficulty?
Regards,
Todd Little
Oracle Tuxedo Chief Architect

Balancing services with clients through Proxy

Hi ...
I have a infrastructure with Cisco ACE for balancing two Web Servers.
The inside users are using a proxy server.
We need to configure persistence for the sessions, but we can't use sticky ip-netmask because of proxy.
What is the best way to do this persistence and how we can configure it ?
I'll appreciate your help.
In the attachments, the schema and configuration of the ACE.

sticky http-cookie ACE-Insert web-sticky
cookie insert browser-expire
timeout 5
serverfarm XYZ
policy-map type loadbalance http first-match ABC
class class-default
sticky-serverfarm web-sticky
http://www.cisco.com/en/US/docs/interfaces_modules/services_modules/ace/vA4_2_0/command/reference/sticky.html#wp1010723
Please refer to the above example config and the config reference link which will tell you how to configure these cookie insert.
If the server is not setting any cookie , then you need to use cookie insert feature.
Hope this helps.
Regards
Abijith

AD Authentication - pass through?

Evening ladies and gents, really stuck and need some help with implementation of our new Apple network.
the story so far.....
We have Windows Server 2008 R2 AD running over a HSRP VLANed network. We've purchased 30 Apples and we want to be able to authenticate users against AD as well as map their Windows home areas.
Firstly I know nothing about the Apple OS and concerned direct integration into the AD network may pose security risks. As' I understand it' OD ignores NTFS permissions, the backbone of AD security.
I envisaged being able to use a multi-honed OSX Server as a 'pass through' / 'proxy' for AD kebros authentication and home area mapping. So firstly is this possible?
What is generally recognized as best practice in this kind of setup?
Many thanks

Hello Colin,
The response you get back indicates that the setspn tool detected an error in the attributes.
When the command is succesfull, you will get a message saying that registering the SPN is succesfull.
When using the setspn.exe tool, make sure you are logged on with Domain admin rights. I always run the tool on the domain controller itself.
Try including the domain name when you enter the service account, the command should read like this:
setspn -a HTTP/portal.customer.de DOMAIN\j2ee-SID
Replace portal.customer.de with the DNS name for your server, repeat the command with the different DNS names if you have more then one DNS name.
Replace DOMAIN with the name of your windows domain.
Replace j2ee-SID with the User Logon Name of your service account.
Make sure there are no spaces or special signs in the User Logon Name !
On Windows servers, the usage of SPNs is not case sensitive, but when calling the service from non-window systems, it is !
For more info on the setspn tool, look here:
[http://technet.microsoft.com/en-us/library/cc773257(WS.10).aspx]
I hope this helps.
Dagwin

Hosting WCF services on OSB 11G

Hi there,
I have been reading online to see if web services created through WCF can be hosted side by side in OSB 11G with Java services. I have found posts on how you can allow java web services hosted on OSB 11G to call wcf services, but i have found nothing on hosting WCF services.
Is this possible? If so, what are the advantages /disadvantages?
Thanks very much.
Rita

Oracle Service bus is all Java environment and I do not think you can host WCF web services(based on .NET) on Oracle Service Bus, however it may be possible for oracle service bus to inter operate with the WCF web services.
jayesh@yagna

OSB 11g: static service account customization

Hi all,
I'm currently evaluating OSB 11g with respect to our existing OSB 10g configuration and build process. For OSB 10g, we use a simple and straightforward method to customize service accounts between development stages. We have a plain text file with login and password inside which is applied to configuration in the same way as is the standard customization. In result, there is one configuration for all stages, one customization per stage and one plain text file with passwords per stage. For each stage this triplet is imported through JMX to OSB and we are very happy with that. Regarding service accounts we use a tool quite similar to the one described here:
customization for static service account
The problem is that in case of 11g there is probably no chance for us to go the same way any longer. There is no ServiceAccountConfigurationMBean to use. I went through all classes in http://download.oracle.com/docs/cd/E14571_01/apirefs.1111/e15033/index.html and didn't find anything useful for accounts customization.
The only one relevant idea I found is the trick based on <cus:externalReferenceMap> and described here:
What needs to be chnaged in ALSBCustomization.xml file
However, from usability point of view this is far from out current solution.
Please, isn't there a better way to customize static service accounts in OSB 11g? I have a terrible feeling that either me or somebody at Oracle went mental. :-)

Just to close this thread ...
I raised a service request on Oracle support and the answer was that our OSB 10g approach is no longer supported in 11g and that the recommended way is to customize accounts manually using service bus console.

OSB 11g with PASS-THROUGH PROXY

Similar Messages

Maybe you are looking for