Password protecting a thick Java client

Any ideas on the best way to password protect a thick Java client?
I write a standalone application. In the current version, I give users a password, but that password can easily be shared from host to host.
I need a mechanism that makes it much more difficult for joe nobody to simply get the password from his buddy.

James
eTester can record thick client app HTTP requests, you should use:
A external proxy recorder:
- Options -> Current Script -> Recording -> Proxy and select record navigations in a external application.
- Remove the ;application/* from the exclude statement
- Set the proxy of the thick Java app to point to, localhost on port 7777
If the thick java app is a Java Applet you will need to set the JVM to point to the porxy at locahost 7777 to do so:
- Start -> Control Panel -> Double click on Java -> under the general tab select network settings, select use proxy server and enter the proxy settings.
Happy recording !!!!
Alex
Edited by: aamat on Dec 10, 2008 9:42 AM
Edited by: aamat on Dec 10, 2008 9:43 AM

Similar Messages

Recording a thick java client app

Can eTester record a thick java client application? I've tried using proxy but that doesn't appear to work.

James
eTester can record thick client app HTTP requests, you should use:
A external proxy recorder:
- Options -> Current Script -> Recording -> Proxy and select record navigations in a external application.
- Remove the ;application/* from the exclude statement
- Set the proxy of the thick Java app to point to, localhost on port 7777
If the thick java app is a Java Applet you will need to set the JVM to point to the porxy at locahost 7777 to do so:
- Start -> Control Panel -> Double click on Java -> under the general tab select network settings, select use proxy server and enter the proxy settings.
Happy recording !!!!
Alex
Edited by: aamat on Dec 10, 2008 9:42 AM
Edited by: aamat on Dec 10, 2008 9:43 AM

Unzip a password protected file in java where the passwd is known

How do i unzip unzip a password protected file in java n the password is known.
Unzipping a simple zip file in java can be done thru Zip package but it provides no option for password protected files.
If anybody knows plse help me out.

You can't with Java standard classes.

How to create password protected zip in java?

I want to create a password protected zip file in java...java.util.zip does not support this...how to do this???
Someone please help...

Thanks for Reply"[email protected]"
Till today whatever i got is this------
In java there is no way to make a password protected zip...java.util.zip package does not support this thing...
To do this we require Third party API---
Two third party Api i got...
one is "CHILKAT API for java"
and another one is "IPWORKS"http://www.componentsource.com/products/ipworks-zip-java-desktop/index.html
but both of these API are paid...
Even this problem has been reportd as bug in the bug database....
And the other way is related with Class Process Builder of java...
If someone knows more about this then tell me...

Recommended solution for password protecting a page for clients only

Hello,
I am using Dreamweaver CS6 on Mac (Mavericks).
I am building a new website for my business and I want to create a page where only my clients can access information after using an id and password that I provide them with. I do not want them to register online, etc. to access the page.
I was instructed to not use Dreamweaver's solution because it is outdated.
Can anyone provide me with advice on how to best do this? Use/Not use Dreamweaver functionality? Recommended extension?
Thanks,
Joshua

OK. If you have 50 to 100 clients and you want all of them to have different passwords, then the solutions recommended so far would be a pain to maintain.
I'm going to give you a solution that is easy to maintain. You will simply add new passwords to the "array" at the top of the script. This is of course not a secure method, but it will work for you. You can edit the design and text, etc. Simply paste all the code into a new file and call it "access.php.
This is not the method I use for password access. I use a method that handles hundreds of thousands of passwords easily, but it's far more complex. . .and secure. But I think this simple method should work for you:
<?php
// All the PHP code is in these first few lines at the top except a few lines that all begin with <?php -- watch out about editing those lines.
// this is where you create the set of passwords. Simply follow the pattern below to add new passwords to the list. Note that the final item does not have a trailing comma:
$passwords = array(
    "client1",
    "anotherclient",
    "lastclient"
?>
<!DOCTYPE HTML>
<html>
<head>
<META HTTP-EQUIV="CACHE-CONTROL" CONTENT="NO-CACHE">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">
<title>Reports</title>
<style type="text/css">
fieldset {
border:solid 10px #edebe4;
border-top:20px solid #edebe4;
width:700px;
margin-bottom:10px;
padding:20px;
fieldset legend {
background-color:#edebe4;
color:#468cb7;
padding:0 5px 0 5px ;
font-family: Verdana, Sans-serif;
a {
color:#468cb7;
font-family: Verdana, Sans-serif;
a:hover {
color:red;
li {
font-family: Verdana, Sans-serif;
color:#666666;
font-size:13px;
margin-left:50px;
</style>
</head>
<body class="body_admin">
<div id="admin_wrapper">
<div class="content" style="padding-left:50px;padding-bottom:25px">
<?php if (in_array($_POST['view'], $passwords)){ ?>
<h1>You have access!</h1>
<fieldset><legend>Choices</legend>
<h2>Do the following</h2>
<ul><li><a href='page.html'>A link (you will need to change link url)</li>
<li><a href='page.html'>Another link (you will need to change link url)</li>
</ul>
<p> </p><p>
</fieldset>
<?php } else { ?>
<h2 style='text-align:center'>Enter Password</h2><form action='access.php' method='post'><p style='text-align:center'><input type = 'text' name='view' required style='margin-top:25px'/><br/><input type='submit' name='submit' value='SUBMIT' style='margin:15px'/></p></form>";
<?php } ?>
</div></div>
</body>
</html>

Java networking from windows to password protected unix server

How to execute unix shell scripts on a unix box which is password protected, from a java application running on windows? help for the solution

You need to know the password. Or set up ssh to use client certificates (read the manual page & google).

Using Portable datasource lookup for a java client in OC4J 10g

Hi,
I'm in the process of porting a standalone java client to j2ee. At the moment I have a thick java client which uses jndi to access a global datasource configured on the OC4J server (10.1.2.0.2) and it works fine.
Using the 'Services Guide' I decided the next step was to deploy the client as a J2EE application. At the moment the j2ee application only contains the descriptors (i.e application-client.xml and orion-application-client.xml packaged under META-INF in a .jar. This is, in turn, packaged in an .ear along with application.xml (again under META-INF.)
This is where I'm hitting problems. The following config produces a 'javax.naming.NameNotFoundException' error
application.xml
<application>
     <display-name>appName</display-name>
     <description>appDescription</description>
</application>
application-client.xml :-
<application-client>
     <display-name>appName</display-name>
     <resource-ref>
          <res-ref-name>jdbc/MaptoTest</res-ref-name>
          <res-type>javax.sql.DataSource</res-type>
          <res-auth>Container</res-auth>
     </resource-ref>
</application-client>
orion-application-client.xml :-
<orion-application-client>
     <resource-ref-mapping name="jdbc/MaptoTest" location="jdbc/Test"/>
</orion-application-client>
jndi.properties :-
java.naming.factory.initial=com.evermind.server.ApplicationClientInitialContextFactory
java.naming.provider.url=opmn:ormi://<machine>:6004:<OC4J_INSTANCE>/appName
java.naming.security.principal=<USERNAME>
java.naming.security.credentials=<PASSWORD>
client.class
ctx = new InitialContext();
ds = (DataSource)ctx.lookup("java:comp/env/jdbc/jdbc/MaptoTest"));
"jdbc/Test" was configured through OAS and is present in data-sources.xml (it is the ejb-location property).
I'm running the client through Jdeveloper. I've used SJSAS previously and was use to configuring and deploying a application module through it's own tool. SJSAS also has a tool (appclient) for running the client. Is there something similar I should be using in OC4J?
The services guide only mentions web.xml and ejb-jar for portable datasource lookup but I assume it's also possible using application-client.xml.
It seems to me that my descriptors don't mention the j2ee application explicitly. Am I missing an entry in one of the xml descriptors. Any help would be appreciated this is driving me crazy!
Thanks in advance for any advice.

Hi Geoff,
The configurations for your client.xml files look ok. Question: where did you configure the datasources.xml i.e. under j2ee/<OC4J_Name>/config or under the application-deployments/<appname>, kindly check and let us know.
Thanks,
Deepak

Accessing Coherence Extend* Proxy Deployoed on Weblogic Coherence Cluster from Java Client

Hi,
I am trying to access Extend Proxy through Thick Java Client
Followed steps as per below links and deployed a GAR on 3 Server ( 2 Storage Enabled Coherence Cluster and 1 Coherence Storage Disabled Extend Proxy Enabled). I could see ExtendProxyService using JMX and can see Port running on the System.
Ref :
Setting Up Coherence*Extend - 12c (12.1.2)
http://docs.oracle.com/middleware/1212/coherence/COHAG/deploy_options.htm#CHDJBJDI
Issue :
When I tried to Execute Java Client to Connect to Proxy Server it Connects to Port and then Disconnects with ConnectionException as below.
Observer below Lines in Box is show he Connected Socket with Port 9099 which is Extend Proxy Port
Error Message
2013-11-08 14:55:55.114/1.202 Oracle Coherence GE 12.1.2.0.0 <D5> (thread=TcpClientRemoteService:TcpInitiator, member=n/a): Started: TcpInitiator{Name=TcpClientRemoteService:TcpInitiator, State=(SERVICE_STARTED), ThreadCount=0, Codec=Codec(Format=POF), Serializer=com.tangosol.io.DefaultSerializer, PingInterval=0, PingTimeout=30000, RequestTimeout=30000, ConnectTimeout=10000, SocketProvider=[email protected], RemoteAddresses=WrapperSocketAddressProvider{Providers=[[DTC37446E9C6CBD/127.0.0.0:9099]]}, SocketOptions{LingerTimeout=0, KeepAliveEnabled=true, TcpDelayEnabled=false}}
2013-11-08 14:55:55.146/1.234 Oracle Coherence GE 12.1.2.0.0 <D5> (thread=main, member=n/a): Connecting Socket to 127.0.0.0:9099
2013-11-08 14:55:55.146/1.234 Oracle Coherence GE 12.1.2.0.0 <Info> (thread=main, member=n/a): Connected Socket to 127.0.0.0:9099
2013-11-08 14:55:55.161/1.249 Oracle Coherence GE 12.1.2.0.0 <Info> (thread=main, member=n/a): Error establishing a connection with 127.0.0.0:9099: com.tangosol.net.messaging.ConnectionException: TcpConnection(Id=null, Open=true, LocalAddress=0.0.0.0:54384, RemoteAddress=127.0.0.0:9099)
2013-11-08 14:55:55.161/1.249 Oracle Coherence GE 12.1.2.0.0 <Error> (thread=main, member=n/a): Error while starting service "TcpClientRemoteService": com.tangosol.net.messaging.ConnectionException: could not establish a connection to one of the following addresses: [127.0.0.0:9099]; make sure the "remote-addresses" configuration element contains an address and port of a running TcpAcceptor
    at com.tangosol.coherence.component.util.daemon.queueProcessor.service.peer.initiator.TcpInitiator.openConnection(TcpInitiator.CDB:121)
    at com.tangosol.coherence.component.util.daemon.queueProcessor.service.peer.Initiator.ensureConnection(Initiator.CDB:11)
    at com.tangosol.coherence.component.net.extend.remoteService.RemoteCacheService.openChannel(RemoteCacheService.CDB:7)
    at com.tangosol.coherence.component.net.extend.RemoteService.doStart(RemoteService.CDB:11)
    at com.tangosol.coherence.component.net.extend.RemoteService.start(RemoteService.CDB:5)
    at com.tangosol.coherence.component.util.SafeService.startService(SafeService.CDB:53)
    at com.tangosol.coherence.component.util.safeService.SafeCacheService.startService(SafeCacheService.CDB:5)
    at com.tangosol.coherence.component.util.SafeService.ensureRunningService(SafeService.CDB:27)
    at com.tangosol.coherence.component.util.SafeService.start(SafeService.CDB:14)
    at com.tangosol.net.ExtensibleConfigurableCacheFactory.startService(ExtensibleConfigurableCacheFactory.java:681)
    at com.tangosol.net.ExtensibleConfigurableCacheFactory.ensureService(ExtensibleConfigurableCacheFactory.java:599)
    at com.tangosol.coherence.config.scheme.AbstractCachingScheme.realizeCache(AbstractCachingScheme.java:50)
    at com.tangosol.coherence.config.scheme.AbstractBundlingScheme.realizeCache(AbstractBundlingScheme.java:31)
    at com.tangosol.net.ExtensibleConfigurableCacheFactory.ensureCache(ExtensibleConfigurableCacheFactory.java:254)
    at com.tangosol.net.CacheFactory.getCache(CacheFactory.java:205)
    at com.tangosol.net.CacheFactory.getCache(CacheFactory.java:182)

If this proxy design (not starting up due to a invalid entry in "authroized-hosts") is on-purpose from Coherence Engineers - then it should be re-visited.
I think the PROXY Server should just log a message stating about the invalid DNS entry for the Authorized-host and continue with the startup...Failing to start completely doesn;t make sense since one cannot rely completely on DNS to
say everything should be correct before a server start.
Ofcourse you can overcome by writing your own Custom Filter - but the issue pop's out as with any custom filter(s) is maintaining them along the road (with all minor/major coherence upgrades).
Also - this "Authorized-Hosts" concept should be carefully analyzed particularly for the following issues...
(1) if the client IP is changed in the DNS server - will the proxy-server allow the new Client connection without any issues? when will the PROXY server flush its CLIENT DNS entries or what is the TTL time-limit for a CLIENT cached through Authorized-hosts by the PROXY-SERVER?
(2) Suppose, we have a CLIENT in the "Authroized-Hosts" making a valid connection to the PROXY and putting some cache into the SERVER CACHE through the PROXY....now if the IP-address (DNS being the same) of the CLIENT is changed - can the CLIENT can GET the CACHE it just PUT into the SERVER without any ERRORS?
(3) How often we need to re-start PROXIES? Do we need to re-start them often for the DNS issues (if any) mentioned above?
Looks like the Limited documentation & examples for Coherence*Extend - particularly for .NET & C++ clients & *Extend Proxies is a point of concern.
vk

How do I password protect a directory without encrypting everything?

I'm trying to password protect a directory using the java 1.3jdk. I don't want to encrypt the contents just restrict all access to the directory, other than access via my application.
The directory should be password protected, which my java application will supply on starting. On shutdown of the computer the directory should revert to password protected.
Can anyone point me in the right direction.

I'm trying to password protect a directory using the
java 1.3jdk. I don't want to encrypt the contents
just restrict all access to the directory, other
than access via my application.
The directory should be password protected, which my
java application will supply on starting. On shutdown
of the computer the directory should revert to
password protected.It's really not clear to me what you're really trying to do, or at what level you're trying to protect at. Your last sentence ("on shutdown...") seems to imply you are after OS-level protection. This is something outside the scope of Java and will depend on your targeted platform.

Create password protected directory

Hi, everybody, i've got just one question:
is there any way to create a password protected directory, using java.
Or maybe i need to use some system tools. Whatever, i have like no idea, how i can do that.
Would be thankfull for any answer =)
P.S. I know the platform, it going to run on: Windows XP sp2
Maybe i posted this theme in the wrong thread - then please help me and give an advice^ where it should be posted.
Edited by: Antilless on Sep 10, 2010 10:05 AM
Edited by: Antilless on Sep 10, 2010 10:06 AM

Antilless wrote:
Hi, everybody, i've got just one question:
is there any way to create a password protected directory, using java.
Or maybe i need to use some system tools. Whatever, i have like no idea, how i can do that.
Would be thankfull for any answer =)
P.S. I know the platform, it going to run on: Windows XP sp2
Maybe i posted this theme in the wrong thread - then please help me and give an advice^ where it should be posted.You can't really password protect folder in Windows without using special tools, you can however
1) Make folders accessible to one or more users (and deny other users access)
This can be done on the commandline using the cacls tool
2) Encrypt files or folders so that only specific users can decrypt them
This can be done on the commandline using the cipher tool
For more advanced options you will probably need to make use of third party tools.

How can I login to a site that is .htaccess password protected with java

Forgive me if this is a dumb question. I am have never done this before and haven't been able to find out how to do this. I want to send some xml (passportRequest) to a server that is listening. The hard part is this server is password protected with htaccess. I have the username and password and I tried adding it to the url (ie https://user:password@server....) but not luck. I read somewhere that I can't do that anymore...is that right? I tried the code below but no luck there either. Any of you guys have any tutorials you could point me to or suggestions? Thanks!
String urlStr = "https://www.myserver.com/pathto/requestlistener";
URL url = new URL(urlStr);
HttpURLConnection con = (HttpURLConnection)url.openConnection();
con.setRequestMethod("POST");
con.setRequestProperty("Content-type", "application/x-www-form-urlencoded");
con.setRequestProperty("reqData", passportRequest);
sun.misc.BASE64Encoder encoder = new sun.misc.BASE64Encoder();
String encryptedPassword = encoder.encode((customerId+":"+password).getBytes());
con.setRequestProperty("Authorization", encryptedPassword);

con.setRequestProperty("Authorization", "Basic " +
encryptedPassword);should do the trick.AWESOME! I was so close. Thanks for the tip. Does
"Basic" just tell the server what type of
authentication to use? What are the other options
available? Where can I learn more about this stuff?
I figured it was something simple like that, but when
no one responded I was beginning to wonder if it was
possible. I didn't know why it would be (its setting
headers and that shouldn't matter where you are doing
it from, browser or code). Thanks again!All of this (including what you have to supply to log in from any client, Java or not) is in the information that the first link in my previous post displays. However - you have to read it.

How to get the password of a password protected Excel Sheet using java/jxl

Hi ,
how to get the password of a password protected Excel Sheet using java / jxl program.
plz any one help me .
Ramesh P
[email protected]

If they've implemented the password system correctly there probably isn't a way of getting the password at all.

Password protected Excel file generation using Java

Hi,
I want to create password protected excel file using Java. So when you manually open this file it should prompt for password.
There are APIs but they are licensed and are for trial period. I want solution which is free.
I need this solution urgently..
:-)

Swati.S wrote:
Hi Administrator,
Moderator. Administrators post with the Sun logo.
I'm sorry I wasnt aware that we cannot have off forum communication. Can you please communicate how I can spread this message taht solution for this is available.If you like, you can post the code here or on [SDN Share|http://sdnshare.sun.com/]. Apart from that, there's no shortage of blog sites.

Copy and paste Java script for password protecting a page?

I need to password protect one page which I want to call my LOGIN page on a site I'm making in Dreamweaver CS5.5. Unfortunately I know that the hosting company I'm using does not have the ability to allow me password a single directory on the server end to accomplish this (I know STRANGE) .... SO
I found some code online - java script that I can just copy and paste into the <head> section of my page. This might be a silly question but is this a 'safe' way to do this? (I don't need anything fancy and the people whom will be accessing this page will all have the SAME password, so I don't need a registration form or anything fancier...)
Any thoughts?

Ugg I totally knew you would all say that (because I already knew that would offer me the easiest solution), change hosts and now I'm embarrassed to say that YES I am paying for the hosting; BUT, I have to explain that I'm with this hosting company because way back when I started that site I needed something super user friendly because I was just learning. Now I have learned more and have started to use Dreamweaver. I just stayed with the same hosting and will use FTP to upload my new more updated site. In the company's defense even though they do offer a way to FTP a site up, their main objective (I think) is to have a really easy way for people to get a site up without knowing anything about code or css or anything; and they operate under the assumption that MOST of their customers will be using their super easy software and not use FTP. That is why I think they are limited to what they offer, at least that is my take on it. My more recent sites do not use this company as I have tried to learn and 'move up'.
Anyway I guess if I don't want to switch hosting I still have the same problem. Is it really that difficult to make something that has just one use ID and password which would be the same thing for every person? Might be a great learning experience for me?
Yep it might be time for me to switch hosting.... sigh. What to do.....

How to set Password protection in excel using java

Dear all,
I have no idea to write a java program that how to set password protection in excel. Please give me some solution using java tools. Thank a lot!
Regards,
kzyo

Dear Bamkin ,
I used your code and paste it in my program. The error is as the follow:
Code:
     stmnt = c.createStatement();
               String query = "select StudentNumber, Email, New_Email_Address from [Sheet1$] where Len(New_Email_Address) > 0";
               System.out.println(query);
               rs = stmnt.executeQuery(query);
               stmnt.executeUpdate("SET PASSWORD=PASSWORD('Test')");
Error:
(Remark: Invalid SQL statement)
java.sql.SQLException: [Microsoft][ODBC Excel Driver] ��I SQL ��q��G�a��'DELETE'�A'INSERT'�A'PROCEDURE'�A'SELECT' �� 'UPDATE' �B
     at sun.jdbc.odbc.JdbcOdbc.createSQLException(JdbcOdbc.java:6958)
     at sun.jdbc.odbc.JdbcOdbc.standardError(JdbcOdbc.java:7115)
     at sun.jdbc.odbc.JdbcOdbc.SQLExecDirect(JdbcOdbc.java:3111)
     at sun.jdbc.odbc.JdbcOdbcStatement.execute(JdbcOdbcStatement.java:338)
     at sun.jdbc.odbc.JdbcOdbcStatement.executeUpdate(JdbcOdbcStatement.java:288)
     at hk.gov.edb.util.ExcelHandle.updateNewEmail(ExcelHandle.java:414)
     at hk.gov.edb.core.AppMain.doUpdate(AppMain.java:369)
     at hk.gov.edb.core.AppMain$7.construct(AppMain.java:584)
     at hk.gov.edb.util.SwingWorker$2.run(SwingWorker.java:127)
     at java.lang.Thread.run(Thread.java:595)

Password protecting a thick Java client

Similar Messages

Maybe you are looking for