PKCS#11 Read Access

Hi,
I have a simple question. Using the SunPKCS11 it is possible access to the public certificate (or other public objects) in the smartcard without the user PIN?
Thank�s.

At the PKCS#11 standard (PKCS#11 v2.20, Cryptografic Token Interface Standard), the attribute used to specify if a object present in the token is o not public is the CKA_PRIVATE attribute.
I am testing diferent PKCS#11 implementations (SafeSign-GYD (aetpkss1.dll), Siemens-CardOS (CardOS_PKCS#11.dll), etc), and when I access to the diferent tokens using PKCS#11 API, I read the public certificates open a read session.
This is the information I get opening a read session on the smartcard:
Enter user-PIN or press [return] to list just public objects:
listing all public objects on token using session:
State: Read-Only Public Session
Device Error: 0x0
Read/Write Session: false
Serial Session: true
Object with handle: 1
Object Class: Certificate
Token: true
Private: false
Modifiable: true
Label: EDUARDO
Certificate Type: X.509 Public Key
Trusted: false
Subject (DER, hex): 3081a4310b3009060...204d415254494e455a
ID (hex): 14224f159a27f5063c11f114a57152e730dd2d10
Issuer (DER, hex): 30820131310b30090603...845432d4944436174
Serial Number (DER, hex): 2994
Value (BER, hex): 3082081b30820703a003...dadd1fa56622a990
................................................................................

Similar Messages

Shared Services, create read access to a cube into an application us a grou

Hi,
I have an application with 3 cubes. I have created a group in Shared Services, and i want to give read access only to one cube.
If i give provision to this group , i only can give read to all the application, so all the cubes are going to have read access.
How must i do to give only read access to one cube and not to all,
Thnx
Guillermo

Hi,
This post will help answer your question :- Assigning database access using Shared Services
If you are using Shared Services access is applied at application level and you can't select individual access to each database.
Cheers
John
http://john-goodwin.blogspot.com/

How to fix: Unhandled page fault on read access to 0x00000000 at address 0x00aa4088 .

hi
i recently downloaded a game (assassins creed I), i opened it and the intro showed up after that the screen went white, then black and a window came up calld exception raised and then below it, it said, Unhandled page fault on read access to 0x00000000 at address 0x00aa4088.
i have tried opening it many times and the same results come up.
i've looked everywere and found that other people have had this same problem but no one has fixed it yet
any help will be appreciated
thanks

I did try the OP's solution, but it proved to be only temporary. Take a gander at my proposition, and if you are experiencing many issues with your MBA and WiFi Connection, try doing all of the possible fixes located on these forums to see which one (hopefully) works for you. Here's my attempt at a solution.
Well, after toying around with many of the settings on the MBA, I then began to work on the AirPort Extreme (Gigabit Version) and I discovered that the MBA would only connect when I selected "Interference Robustness" when configuring the MBA. This made a difference no matter what "Wireless Mode" the AE was in, be it 802.11n(b/g) Support, plain 802.11n(5Ghz), ect. So, try that out if you have an AirPort Extreme/Express and MBA, and post your results. The MBA is running 10.5.5 with only one update remaining (10.5.6).
{This has posted in various threads by me, myself, and I, and I am only reposting so that many threads are aware of this. Hope it helps at least one person.}

How to find from the data dict if a user has read access on a directory

How to find "dynamically" if a user has READ access to a directory object.
I want to know if there is a data dictionary table that holds if a user/schema has read access to a directory object.
I know there is an dba_directories table and an all_directories table but they dont give information as to which user has read access granted to the directory.

Not so difficult.
select 'YES'
   from all_tab_privs A, all_directories B
   where a.grantee = 'USERNAME'
       and a.table_name = b.directory_name
       and b.directory_path = 'PATH YOU ARE LOOKING FOR'
How to find "dynamically" if a user has READ access to a directory object.
I want to know if there is a data dictionary table that holds if a user/schema has read access to a directory object.
I know there is an dba_directories table and an all_directories table but they dont give information as to which user has read access granted to the directory.

Error message Indesign:Either the file does not exist, you do not have read access to it, or use the file in another application.

I've got problem with opening a file in InDesign. The file type is an InDesign Markup Document. The error message is: Either the file does not exist, you do not have read access to it, or use the file in another application. What's wrong?

Users with read access to the site unable to view Managed Metadata Navigation

Hi everyone,
I created a Managed Metadata service and created group, term-set and terms
I gave read access to users
I set up navigation to use Managed Navigation
I am logged in as farm admin and able to view the navigation when i browse site. But user are not seeing navigation.
One thing i noticed is when i give users full access or designer access to site they will be able to see the navigation. but i don't want to give users full access or designer access to the site.
How can users with read only access to site can view Managed Metadata Navigation...Please help?

Hi Sunil,
Have you given your users permissions to actually read the MMS data from the service application?
http://technet.microsoft.com/en-us/library/ff625176.aspx covers permissions on the MMS.
Regards
Paul.
<<edit>> On reflection you might be hitting the issue in this Stackexchange post..
http://sharepoint.stackexchange.com/questions/75636/permissions-and-managed-metadata-in-navigation Is yours behaving the same way?
Please ensure that you mark a question as Answered once you receive a satisfactory response. This helps people in future when searching and helps prevent the same questions being asked multiple times.

How can i get on my iMAC read access to BPF devices in /dev/bpf*

Ls.
How can i get/change on my iMAC read access to BPF devices in /dev/bpf*
I want to use Wireshark.
Thanks in advance.
Loekie.

...any app launched from /Applications holds only the permissions of the user launching the app, regardless of the owner (presumably because anyone, including "root" can install applications into /Applications).
It has nothing to do with where the application is installed. Any executable runs with the permissions of the user who runs it. The only exception is a binary executable with the SUID or SGID bit set, and then only if it's on the root device, and only if it's not an Aqua application. The SG/UID bits are ignored otherwise.
So, anyone who has installed Wireshark from the "native .dmg" by drag-and-dropping won't be able to use the suid trick because the OS will ignore the suid permissions.
Sorry, I don't understand this at all. Wireshark invokes dumpcap as a child process to capture packets. If dumpcap is installed anywhere on the root device as SUID root, then it will run as root regardless of who invokes it.
The suid method will only work for Macports and Fink installations...
That's not correct. There are many SUID or SGID executables in a default installation of the Mac OS, and none of them comes from MacPorts or Fink.

I have connected an external hard drive to my new macbook pro. I only have read access. How do I copy folders to the external hard drive?

I have a new Macbook pro retina. I have connected a WD external hard drive, but have only read access. I want to back up my computer, and have the ability to archaive files. Any suggestions?

I have connected a WD external hard drive, but have only read access.
As ds store already pointed out, if the drive is formatted as NTFS, you can't write to it. Fortunately, the fix is easy, just erase the hard drive using Disk Utility as Mac OS Extended (Journaled).
I want to back up my computer, and have the ability to archaive files. Any suggestions?
Backups and archival backups are not necessarily the same thing. An archival backup is to be kept indefinitely far into the future, and should never be changed after it is created. That does not mesh well with being on the same drive as a backup maintained day-to-day. Ideally, archival backups should be written to one drive - possibly multiple backups, but each one should never be touched after it is written - and other backups should be maintained with greater frequency on one or more other drives.
You can get a bit of compromise with an incremental backup, like what Time Machine does. That will keep old data as long as there's still free space on the drive, then will start removing the oldest copies of files to make space for newer stuff when necessary. Another alternative is the way Carbon Copy Cloner does incremental backups, where the data keeps piling up until the drive is full and then the backups fail until you remedy the situation. (This could allow you to fill up a drive and then put it on a shelf as an archival backup and start a new backup on a new drive.)
If you can specify more what you want to do, we can advise you better.

Possible Sequential Read Access for a Sorted Table

Hi All,
I have the following warnings in Code inspector check.
'Possible Sequential Read Access for a Sorted Table'
Kindly provide me the solution to overcome this warning message.
This is my code in BAdi : CRM_ORDER_FIELDCHECK , Method : FIELDCHECK
I am getting the above warning at
READ TABLE lt_status INTO ls_status WITH KEY status = 'E0001'
                                               user_stat_proc = 'ZITRHDQT'
                                               object_type = 'BUS2000114'.
and at
    MODIFY ct_input_field_names FROM ls_input_field_names
                                TRANSPORTING changeable
                                WHERE fieldname NE lv_field.
Please see the below code .
DATA : lt_header_guid TYPE crmt_object_guid_tab,
         lt_item_guid TYPE crmt_object_guid_tab,
         lt_order_i     TYPE crmt_orderadm_i_wrkt,
         ls_order_i     LIKE LINE OF lt_order_i,
         lt_status      TYPE crmt_status_wrkt,
         ls_status      LIKE LINE OF lt_status,
         ls_input_field_names TYPE crmt_input_field_names.
DATA : lv_header_guid TYPE crmt_fieldcheck_com-guid,
         lv_chng_no   TYPE c VALUE 'A',
         lv_field(10) TYPE c VALUE 'ACT_STATUS'.
DATA: lv_status_completed     TYPE crmt_boolean.
To Get GUID
IF is_fieldcheck_com-guid IS NOT INITIAL.
    lv_header_guid = is_fieldcheck_com-guid.
ELSE.
    lv_header_guid = is_fieldcheck_com-ref_guid.
ENDIF.
IF is_fieldcheck_com-ref_kind EQ 'A'.
    INSERT lv_header_guid INTO TABLE lt_header_guid.
    ELSE.
      SELECT SINGLE header FROM crmd_orderadm_i INTO lv_header_guid
                            WHERE guid = is_fieldcheck_com-ref_guid.
      INSERT lv_header_guid INTO TABLE lt_header_guid.
ENDIF.
*To Get the required details
CALL FUNCTION 'CRM_ORDER_READ'
    EXPORTING
      it_header_guid       = lt_header_guid
    IMPORTING
      et_status            = lt_status
    EXCEPTIONS
      document_not_found   = 1
      error_occurred       = 2
      document_locked      = 3
      no_change_authority = 4
      no_display_authority = 5
      no_change_allowed    = 6
      OTHERS               = 7.
IF sy-subrc <> 0.
MESSAGE ID SY-MSGID TYPE SY-MSGTY NUMBER SY-MSGNO
        WITH SY-MSGV1 SY-MSGV2 SY-MSGV3 SY-MSGV4.
ENDIF.
READ TABLE lt_status INTO ls_status WITH KEY status = 'E0001'
                                               user_stat_proc = 'ZITRHDQT'
                                               object_type = 'BUS2000114'.
IF sy-subrc = 0.
    ls_input_field_names-changeable = lv_chng_no.
    MODIFY ct_input_field_names FROM ls_input_field_names
                                TRANSPORTING changeable
                                WHERE fieldname NE lv_field.
ENDIF.
ENDMETHOD.
Regards
Venkat

Hello Blake,
Try this:
READ TABLE lt_action_fld WITH KEY STATUS = '0' BINARY SEARCH.
wf_index = sy-tabix.
loop at lt_action_fld from wf_index.
if lt_action_fld-status ne '0'.
exit.
endif.
delete lt_action_fld index wf_index.
endloop.
Let us know, if this helps.
Rgds,
Raghu.

Error while reading access data (URL, user,password) for the Adapter Engine

Hi,
Any idea on below message? I am doing file to file scenario and got the below tarce from sxmb_moni.
<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
- 
- <SAP:Error xmlns:SAP="http://sap.com/xi/XI/Message/30" xmlns:SOAP="http://schemas.xmlsoap.org/soap/envelope/" SOAP:mustUnderstand="">
<SAP:Category>XIServer</SAP:Category>
<SAP:Code area="INTERNAL">AE_DETAILS_GET_ERROR</SAP:Code>
<SAP:P1>af.pi1.piserver1</SAP:P1>
<SAP:P2 />
<SAP:P3 />
<SAP:P4 />
<SAP:AdditionalText>no_messaging_url_found: Unable to find URL for Adapter Engine af.pi1.piserver1</SAP:AdditionalText>
<SAP:ApplicationFaultMessage namespace="" />
<SAP:Stack>Error while reading access data (URL, user, password) for the Adapter Engine af.pi1.piserver1</SAP:Stack>
<SAP:Retry>M</SAP:Retry>
</SAP:Error>
Thanks
Balaji

It looks like the adapter engine is not able to register him self on SLD, you have to check in the SLD the "Exchange Infrastructure" domain, you have to verify restarting the J2EE the adapter engine update the entries in the SLD related to the specific XI Domain.
Launch Visual Administrator >> Server >> Services >> SAP AF CPA Cache
Enter the appropriate values for:
SLD.selfregistration.hostname (Use fully qualified hostname)
SLD.selfregistration.httpPort
SLD.selfregistration.httpsPort
Sandro

How can WMI Read access on all workstations in domain

Hi All
Please help me get WMI Read access to my service account.
http://social.technet.microsoft.com/Forums/en-US/523dcf15-2ec7-4fbc-8a14-5007fa297604/wmi-read-access-to-my-one-service-account?forum=winserverDS

Thanks JRV
I got below article which is working fine to me.
http://wiki.splunk.com/Deploy:HOWTO_Enable_WMI_Access_for_Non-Admin_Domain_Users
But in this article, How can i achieve it through GPO:
Distributed Component Object Model rights assignments

What is Read Access Logging and how does it work!

Dear all,
I was following a doument :http://scn.sap.com/docs/DOC-50184
Which shows how you can display list modification structure in a view! But in standard if you check (i.e Listmodification for Business partner in opportunity).
Address , Phone and Email gets pick up automatically as soons as you sellect Partner ID! As per my knowledge that is achieved by :
Read Access Logging
if you check the properties of Data model field , there is an option of Read Access logging
If you check the Read Field Group Data collection , you will see below screen.
This Functionality , I have to achieve in my CUSTOM list modification structure! but How to create field group and how to achieve this functionality ihave no clue!:(
Please help!
Regards,
Dhruvin

Hello Dhruvin,
Then you need some DataOperations in the event handler which starts the ListModification.
Place them before the Start operation
They should assign the PartyID related attributes (one by one) to the resp. fields in the ListModificationStructure.
See example below:
HTH,
Horst

Read access to procedures,function,packages and triggers

Hi,
I created a user with CREATE SESSION,SELECT ANY TABLE privilege. My objective is to create a user with read only access to other schemas. But the newly created user is not able to read procedures,function,packages and triggers. The new user need read access to procedures,function,packages and triggers. What is the priviege required for this access? Please help me to resolve this issue.
Regards,
Mat.

Hi,
Grant select all will give select privileges to all schema level objects except procedures,function,packages and triggers. But I need to grant read privileges on these objects to newly created user.
Regards,
Mat.

No read access to field string MKPF in SLIN

Hi Friends,
while checking my program through extended program check it is giving warning message as "No read access to field string MKPF" in the TABLES statement. How to correct this?

Hi
The system is just only giving warning as if said to you:
- Hey Abaper! You have declared to use the headerline of MKPF, but perhaps you aren't using it. Check your code and if you don't use you delete that declaretion.
So if you don't use MKPF in your program, you can delete the declaretion, if you use it you can do nothing or you put the string "#EC NEEDED at the end of declaretion. If you do it, while checking program through extend program check, the system skips that message and doesn't show you.
We often use header line of dictionary table only to do an existence query, in this case the system can give that warning message.
For example:
TABLES: BKPF.
SELECT SINGLE * FROM BKPF WHERE BUKRS = P_BUKRS
                            AND BELNR = P_BELNR
                            AND GJAHR = P_GJAHR.
IF SY-SUBRC = 0.
WRITE: 'Hello'.
ENDIF.
So I made a query on bkpf, but after I haven't read or used its headerline, so the system give me that message.
If I write:
SELECT SINGLE BUKRS FROM BKPF INTO P_BUKRS
                          WHERE BUKRS = P_BUKRS
                            AND BELNR = P_BELNR
                            AND GJAHR = P_GJAHR.
IF SY-SUBRC = 0.
WRITE: 'Hello'.
ENDIF.
I've done the same thing but now I haven't declared to use the headerline BKPF and so the system won't give me that warning message.
Max
Message was edited by: max bianchi
Message was edited by: max bianchi

No read access to system tables

Hi
i try to migrate access db to oracle and when testing connection it gives me error message says "no read access to system tables modify access db before retrying"
what to do?
thanks in advance.

Access tab
For a connection to a Microsoft Access database, click Browse and find the database (.mdb) file. However, to be able to use the connection, you must first ensure that the system tables in the database file are readable by SQL Developer, as follows:
Open the database (.mdb) file in Microsoft Access.
Click Tools, then Options, and on the View tab ensure that System Objects are shown.
Click Tools, then Security, and, if necessary, modify the user and group permissions as follows: select all tables whose names start with Msys, and give the Admin user at least Read Design and Read Data permission on these tables. Save changes and close the Access database file.
Create and test the connection in SQL Developer.

Giving a user read access to an account for all entities

Dear All,
We have a series of R&D accounts that a user with limited entity security needs to review for all entities.
We have security switched on for Accounts and Entities only.
All entites have security classes defined, only the R&D accounts have a security cless defined (all other accounts ahve a balnk security class).
The user is not allowed to see any other accounts for the entities which they have no access to.
is it possible in HSS to create an access path which allows a single user to view/read an account for entities which they have no other access rights to?
Thanks.

Hi and thanks for the response.
The user has 2 security groups.
The first allows them "All" access to their entity, default and the RD security class for R&D accounts.
This group means they have read/write access to all accounts, which for their own entity is acceptable.
If in the second group I give them read access to all entities then they can read all accounts for all entities.
I need to stop them from seeing all accounts except the RD accounts for the other entities.
Is this possible?

PKCS#11 Read Access

Similar Messages

Maybe you are looking for