Post Auth Plugin classloader?

Does anyone know which classloader is used to instantiate access manager PostAuthentication plugins.
Is it:
A) The same class loader that is used to load AMLoginModules?
B) The class loader for the Access Manager Webserver Agent?
C) Some other classloader?
I cannot figure it out from the docs, however some debugging has proven interesting:
I have written a simple post auth plugin and put it in a jar file (MyPostAuth.jar), I'm trying to deploy it like so:
1) put that MyPostAuth.jar into <Access Manager>/web-src/WEB-INF/lib/
2) redeploy the Access Manager
3) restart my webserver
I'm getting class not found when Access Manager tries to load the post authentication plugin.
java.lang.ClassNotFoundException: com.SuggarGlider.TestPostAuthPlugin
        at java.net.URLClassLoader$1.run(URLClassLoader.java:200)
        at java.security.AccessController.doPrivileged(Native Method)
        at java.net.URLClassLoader.findClass(URLClassLoader.java:188)
        at java.lang.ClassLoader.loadClass(ClassLoader.java:306)
        at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:276)
        at java.lang.ClassLoader.loadClass(ClassLoader.java:251)
        at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:319)
        at java.lang.Class.forName0(Native Method)
        at java.lang.Class.forName(Class.java:169)
        at com.sun.identity.authentication.service.LoginState.getPostLoginProcessInstance(LoginState.java:3102)
          ....To me this looks like Access Manager is NOT using the thread context class loader to load these classes.
Am I missing something?

If you used the JES installer to install and configure AM then the J2EE containers classpath was modified and the AM server classes are loaded in the web app's parent classloader. This means they can't see your custom classes in the web-app classloader. You will need to jar up your classes and place them somewhere on the server and then modify the appserver classpath to point to your custom classes. Alternatively, you can deploy Access Manager 7.1 as a single war file. To do this you will need to download AM 7.1 directly from the Sun download site and follow the instructions in the AM 7.1 technical note on deploying AM as a single war file. This seems to be the direction opensso (I.E AM 8) is going and if you do this AM should be able to pickup your custom classes in the war file.

Similar Messages

Get Page Count of PDF using Publication Post Processing Plugin

Hi,
I am using the publiching functionality of BOXI 3.1 to create a large volume of PDFs. I have a report that I am publishing using a publication with a post processing plugin applied after distribution. I need to get the total page count of the pdf and store this value in the database. Becuase I am already using a post processing plugin after distribution, it would be ideal to extract it there...but I cannot figure out how to get the value at this point.
Currently we parse the actual binary pdf file, but I know that Crystal and BOXI know this total page count and some point in the processing cycle. Does anyone know how to get at the total page count of each pdf/report instance?
Thanks,
Kristina

I would post-process the PDF file as you're doing.
The total page count isn't metadata - it's something computable from the report instance, that is lost after the PDF is generated.
Trying to work with that would lead to a more complex workflow - i.e., schedule to report format, open the report instance using a reporting SDK, calculate the total page count, export using the reporting SDK to PDF, add the PDF to the publication artifact and remove the report instance, other steps I may have missed....
Sincerely,
Ted Ueda

Error while logging in `ERR-10740 Unable to run custom post-auth process.'

Hi there,
I get the following error only with specific users; some can login, some can't. There is consistency is who receives this error.
Error ERR-10740 Unable to run custom post-auth process.
the text of the "Post-Authentication Process" field in the my authentication schemes is as follows:
begin
bare_auth.session_init;
end;
The bare_auth package has no errors:
select object_type, status
from user_objects
where object_name = 'BARE_AUTH';
OBJECT_TYPE STATUS
PACKAGE VALID
PACKAGE BODY VALID
2 rows selected
The error message isn't very helpful and I can't see why Apex can't run it. Why is Apex unable to run the custom post-auth process?
Robert

Thats just the message when you get when there is an unhandled exception in your post-auth process. Apex wraps your code with its own and if you hit any error it just raises that error to the screen. If you were to go into your post-auth and do:
declare
v number;
begin
v:= 1/0;
end;You can see that it raises the same error message to the screen instead of an excepted pl/sql exception about dividing by zero.

HTTP redirection with Auth Plugin

Hi Guys,
I am relatively new to the FMS World, so bear with me if this is a silly question.
I have an external service which tells me that a particular stream for a customer cannot be allowed and I need to redirect the URL to some http:// page.
This happens in the E_PLAY Event on the auth plugin. My question is, can the auth plugin redirect the entire page to another HTTP page? I know that with the auth plugin you can rewrite the stream name so that another stream is played, but not sure if it is capable of redirecting the entire page.
If the auth plugin by cannot redirect by itself, will the serverside actionscript be able to do so? I can pass the http:// URL to the server side action script via the notify event.
Please suggest the best way to do this. I am using FMS 3.0
Thanks,
AK

That is odd. It worked for me. Can you paste your entries that are dealing with weblogic? This includes your <IfModule> tag.
So, when you try to hit the url, you get a 404 from Apache?
Eric
"Laurent PAILLARD" <[email protected]> wrote in message news:[email protected]..
Same problem. Apache still handles the request and does not proxy it.
"Eric Gross" <[email protected]> a écrit dans le message news: 3c61876c$[email protected]..
I hope you mean the Apache plugin and not the isapi plugin.
Try this:
<Location /*/servlets>
SetHandler weblogic-handler
</Location>
Regards,
Eric
"Laurent PAILLARD" <[email protected]> wrote in message news:[email protected]..
System :
Solaris 8
Weblogic 6.1 SP2
Apache 1.3.19 with weblogic ISAPI plugin
For performance purposes, we want to separate static content from our web application. We deploy a pipo.ear with a pipo.war file inside for Weblogic and we unjar the war file in a '/pipo' directory in the HTTP server document Root.
To redirect JSP files there are no problems. The problems occur with servlets. We decided to register all our servlets in web.xml with a 'servlets/' prefixe so that Apache should redirect requests with it.
All our HTTP requests became :
http://www.myweb.com/pipo/servlets/myServlet
The problem is that ISAPI plug-in never proxy servlet requests to Weblogic. It only works when '/servlets' prefixe is placed just behind the domain name such as http://www.myweb.com/servlets/* and never with http://www.myWeb.com/*/servlets/*.
I hope it's just a problem of configuration with Apache. I've already tried :
<Location */servlets*>
SetHandler weblogic-handler
</Location>
but nothing changed. We don't have such problem with NSAPI plugin for iPlanet but as we must use Apache ...
[att1.html]

Plugin Classloader and Web Start

Our application JAR currently contains a Class-Path: entry pointing to another JAR that contains plugins. Now since the user shall be able to use other plugins than that one we provided, we need to remove the Class-Path: entry from the application JAR and instead provide a facility that names the JARs to scan for plugins. In fact, this should be as easy as providing a external properties file read by a Plugin Classloader.
Now the problem is that we like to deploy our application and the plugins using JNLP. So we think the planned solution is incompatible with JNLP due to two reasons: (a) It would require to access a properties file, (b) it would require that the JARs not beeing renamed (as Web Start does it).
So what can be a possible solution?
Are we the only ones that use plugin architectures together with JNLP?

You might want to take a look at the Java Plug-in Framework (http://jpf.sourceforge.net/).

OAM Post Authentication plugin

Hi All,
Can anybody please suggest me how to develop and configure Post Authentication plugin.
Thanks

Hi Sagar,
Thanks For the Reply.
Once the user accesses the protected resource then I have to store that UserID in some DataBase.
And one more thing, Can we write plugin's in Java. As i know we can write in c but not sure about the java compatability.
Thanks

Preventing Plugin Classloader Web Server Fetches?

I have java plugin application that runs within a much larger html app. Every now and then, the classloader will try and fetch a class or resource from the page that it thinks that the applet was loaded from. Unfortunately, that gets caught by the html frameworks servlet and it's behaviour when it gets a strange/null request is to reset the users session, which essentially breaks my application. Is there any way I can prevent this, or change the url that it tries to use?

Your could set a different code base of your applet class.
For example:
<applet codebase="http://java.sun.com/applets/jdk/1.4/demo/applets/SortDemo" cod
e=SortItem.class

Java Post-Operation Plugin

We are running Sun One Directory Server 5.2.
I have the distinct honor of inheriting a number of Post-Operation plug-ins written by a person who just left the company. Unfortunately, this person was also the only person that knew how they worked.
These plug-ins were written with Java. The only documentation I have found thus far have been for c programs. Is there a manual available with how to build/deploy post-operation plug-ins written in Java?

Sun Directory Server 5 (and 6.0) only exports a C API for its plug-in interfaces.
I've never heard of any customer having written DS post-operation plug-ins in Java. I'm surprised and curious to hear that it actually happened.
Regards,
Ludovic.

Response.sendRedirect doesn't work

Hi,
I implemented the post authentication class. I added some code to the onLoginFailed method and i am trying to redirect user for my own page and not the standard error page of opensso (IdP). When using response.sendRedirect("/my_page") i got an error message telling me that redirection has failed because record already committed.
I think the problem is due to the original redirection done by the IdP, isn't it? Is there a solution to redirect user for my own login failure page?
Thanks.

How about this.
Do a combination of the two.
Use the post auth plugin to do your work with LDAP it has access and has all the needed information.
Add the attributes to the ?session?header? in the post auth plugin maybe?
Use the default failrue url you are sending them to to pull the info out of the session headers and do whatever is needed at that point?
I would try just populating one attribute first and redirecting using the default failure url to some simple page that prints out to validate if it would work.
J

Problem with XMLDecoder and a custom ClassLoader

NOTE: Posted over in Serialization forum as more appropriate there, sorry for the crosspost but didn't notice that forum at first. Please direct any replies there.
I am implementing an application based around Java Plugin Framework (jpf.sourceforge.net). In short one consequence of this framework is that each plugin uses its own classloader with scope of that plugins classes.
One plugin I am using requires the ability to deserialize objects from a javabean xml file. I am using XMLDecoder to do this, and I used the constructor to pass the current plugin ClassLoader to it.
This however only partially seems to work, this is a shortened extract from an example xml
<java version="1.5.0" class="java.beans.XMLDecoder">
<object class="usermanager.javabeans.BeanUser">
<string>drftpd</string>
<void property="downloadedBytes">
   <long>737132544</long>
</void>
<void property="hostMaskCollection">
   <void method="add">
    <object class="usermanager.HostMask">
     <string>*@*</string>
    </object>
   </void>
</void>
   <void property="keyedMap">
   <void method="put">
    <object class="dynamicdata.Key">
     <class>commands.UserManagement</class>
     <string>slots</string>
     <class>java.lang.Integer</class>
    </object>
    <int>0</int>
   </void>
etc...Now without passing XMLDecoder a ClassLoader as would be expected I get a ClassNotFoundException for the first <object>.
However if I pass XMLDecoder the correct ClassLoader it reads the xml fine until it reaches <class>commands.UserManagement</class> at which point again I get a ClassNotFoundException.
Here is the stacktrace from that exception:
java.lang.ClassNotFoundException: commands.UserManagement
     at java.net.URLClassLoader$1.run(URLClassLoader.java:200)
     at java.security.AccessController.doPrivileged(Native Method)
     at java.net.URLClassLoader.findClass(URLClassLoader.java:188)
     at java.lang.ClassLoader.loadClass(ClassLoader.java:306)
     at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:268)
     at java.lang.ClassLoader.loadClass(ClassLoader.java:251)
     at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:319)
     at java.lang.Class.forName0(Native Method)
     at java.lang.Class.forName(Class.java:242)
     at com.sun.beans.ObjectHandler.classForName(ObjectHandler.java:67)
     at com.sun.beans.ObjectHandler.classForName(ObjectHandler.java:54)
     at java.beans.Statement.invoke(Statement.java:140)
     at java.beans.Expression.getValue(Expression.java:98)
     at com.sun.beans.MutableExpression.getValue(ObjectHandler.java:400)
     at com.sun.beans.ObjectHandler.getValue(ObjectHandler.java:106)
     at com.sun.beans.ObjectHandler.endElement(ObjectHandler.java:327)
     at com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.endElement(AbstractSAXParser.java:625)
     at com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanEndElement(XMLDocumentFragmentScannerImpl.java:1241)
     at com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl$FragmentContentDispatcher.dispatch(XMLDocumentFragmentScannerImpl.java:1685)
     at com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanDocument(XMLDocumentFragmentScannerImpl.java:368)
     at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:834)
     at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:764)
     at com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(XMLParser.java:148)
     at com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.parse(AbstractSAXParser.java:1242)
     at javax.xml.parsers.SAXParser.parse(SAXParser.java:344)
     at javax.xml.parsers.SAXParser.parse(SAXParser.java:120)
     at java.beans.XMLDecoder.readObject(XMLDecoder.java:205)
     at usermanager.javabeans.BeanUserManager.loadUser(BeanUserManager.java:128)
Now after looking through some of the source it appears to me at least that XMLDecoder when processing an <object> uses an ObjectHandler with the ClassLoader as a parameter, however a class contained within a <class> element gets handled by Statement.invoke() which uses an ObjectHandler without a ClassLoader specified thus using the standard ClassLoader.
I've managed to work around it for now by setting the contextClassLoader to the correct one before calling readObject() in XMLDecoder and then reverting it back immediately after, but this feels like somewhat of a hack to me.
I would've expected it to have been properly handled when passing the ClassLoader to XMLDecoder rather than like it is.
Anyone know if this is intended behaviour or a bug? and if the former is there any recommended way to deal with this other than the one I'm currently using.
NOTE: Posted over in Serialization forum as more appropriate there, sorry for the crosspost but didn't notice that forum at first. Please direct any replies there.
Message was edited by:
djb61
NOTE: Reposting to Serialization

You can provide a cell renderer to the JTree to paint the checkBox.
The following code checks or unchecks the box with each click also:
_tree.setCellRenderer(new DefaultTreeCellRenderer()
private JCheckBox checkBox = null;
public Component getTreeCellRendererComponent(JTree tree,
                                                Object value,
                                                boolean selected,
                                                boolean expanded,
                                                boolean leaf,
                                                int row,
                                                boolean hasFocus)
    // Each node will be drawn as a check box
    if (checkBox == null)
      checkBox = new JCheckBox();
      checkBox .setBackground(tree.getBackground());
    DefaultMutableTreeNode node = (DefaultMutableTreeNode)value;
    checkBox.setText(node.getUserObject().toString());
    checkBox.setSelected(selected);
    return checkBox;
});

Spry XML data set and dynamic post variables

Hi,
I am trying to create an XML data set that has dynamic post
variables.
Everytime something is pressed on the page a variable changes
and I then want to reload the XML data set using the new variable.
I know I can just pull in an XML with all possible variables
and filter client side but this would make it way too large.
Does anyone know what I may need to do.
I tried this:
var myVar = 0;
var dss = new Spry.Data.XMLDataSet (
'../../cgi-bin/server_details.pl' , 'top' , { method: 'POST' ,
postData: sid=ajaja21&ip=127.0.0.1&cid=' . myVar ,
subPaths: [ "auth" , "plugins" , "plugins/plugin" ] , keepSorted:
"true", sortOnLoad: "plugins/plugin/order", sortOrderOnLoad:
"descending", useCache: false, loadInterval: 10000 } );
onclick="myVar=1";
But the script doesn't understand the post variables sent (it
does when I remove the . myVar part and put in a static value). I
think it isn't sending that dynamic variable with the post
variables.
Any ideas anyone?
Thanks

Well I had it working when I stripped back everything and
just had the dss data set and a single onclick function, but now
that I put it back together it hash foobared again.
Here are the relevant bits of code that I've changed.
The function to change server id:
//function to run when changing the server id
function changeServer ( sid ) {
//set the url to use the current server id
dss.setURL = ( '../../cgi-bin/server_details.pl' , { method:
'POST' , postData:
'sid=7gv1m3vjvagfl7h7qeefb8iodj8evhmb&ip=127.0.0.1&cid='+sid
//force a reload of the server data
dss.loadData();
The inital load of the data set
var dss = new Spry.Data.XMLDataSet (
'../../cgi-bin/server_details.pl' , 'yams' , { method: 'POST' ,
postData:
'sid=7gv1m3vjvagfl7h7qeefb8iodj8evhmb&ip=127.0.0.1&cid=0' ,
subPaths: [ "auth" , "plugins" , "plugins/plugin" ] , keepSorted:
"true", sortOnLoad: "plugins/plugin/order", sortOrderOnLoad:
"descending", useCache: false, loadInterval: 10000 } );
And the part that changes the server id
<td align="left" style="cursor:default; width:174px;"
onclick="changeServer({dsv::servers/server/@id})">{dsv::servers/server/name}</td>
I checked that the function is receiving the correct server
id and I even tried hard coding the cid variable to 2 in the change
function but it still wasn't changing on the server side.
Any ideas?
Thanks

Setting session state post-authentication

Hi all,
This application uses DATABASE ACCOUNT authentication, and has a post-authentication process that sets a few application items using code such as
apex_util.set_session_state('F_MY_ITEM', v_my_value);These items are used to secure certain tab options within the application.
The post-authentication PL/SQL works fine, I can't see anything wrong the the logic. I've debugged it and I know the values are being set. I'm checking the value of session state straight after using v('F_MY_ITEM'), along with checking my session ID matches up - everything seems ok there.
The issue is that when I log in, the session state is not set for those items - even though the post-auth process is called with no errors raised. Apex debug states
... Session State: Save "MY_ITEM" - saving same value "Y"If I log out, then log in (without closing browser tab), the values are now set as expected (visual confirmation using conditionally displayed tabs, and of course checking session state from developer toolbar)
Notably, Debug states something slightly different
... Session State: Save item "MY_ITEM" newValue="Y" escape_on_input="Y"There are a few other differences with the debug output, this this seems the most pertinent.
The only difference I've been able to track down is if I'm logged into the application builder in the same browser.
If I attempt to log in with a freshly opened browser, navigate directly to application URL, the behaviour works as expected. Tabs appear as if items are set.
Could the fact I'm authenticated in the application builder be messing with session state behaviour?
This is with Apex 4.0.2.00.07; agnostic to browser (IE/FF/Chrome); 11gr2
Cheers,
Scott

I did consider this because I experienced the same thing with page processes.
However, in this case my post-auth function is within a package and I don't use bind variables.
I was essentially doing this in my package:
apex_util.set_session_state('F_MY_ITEM', 'Y');
my_log_proc(v('F_MY_ITEM'));And seeing Y in the debug log, yet once on my home page, viewing session state I see F_MY_ITEM as empty - unless in the scenario I described.
It's not a showstopper since the users won't be logged in to the application builder, but it would be nice to know the cause.

Finding good plugin settings

After purchasing Logic Pro, I was surprised the setting choices that came with plugins (EQ, Space Designer, etc...) were not very realistic. A Piano in a Space Designer "Piano Concert Hall" sounds more like it's in outer space. The EQ setting for piano also sounds muffled and unrealistic. I've been able to play around with the settings to make them more realistic, but I was wondering if there is a forum somewhere where people post their plugin settings. It would be nice to share in all the hard work it takes to fine-tune these settings.
Anyone know what I'm talking about?

We have never sent an email to any of our registered members unless contacted first by the member. No spam here.
I did take the time to visit the spamgourmet site and have to say it really sounds like a great idea!
But anyway yes, we welcome all of your Logic presets: plug-ins, channel strips, Environments or song templates... and we already have about 40 of those files posted by members. I'd actually like to hear your enhanced piano sound preset.
David.
G5 Dual 1.8GHz - Logic Pro 7.1 Mac OS X (10.3.5)

Query for list of supported auth mechanisms

Is there a way to query a BO server for a list of supported authentication mechanisms such as secEnterprise or trusted secret or secWinAD, etc?

I haven't tested but this should work:
InfoObject oIfoObject = (IInfoObject) oInfoStore.query("select si_id from ci_systemobjects where si_name='Auth Plugins'").get(0);
IInfoObjects authPlugins = oInfoStore.query("select * from ci_systemobjects where si_parentid=" + oInfoObject.getID());
for(int i=0; i<authPlugins.size(); i++)
       IInfoObject authPlugin = (IInfoObject) authPlugins.get(i);
       // above returns a specific plugin object: secLDAP, secWinAD, secSAPR3, secEnterprise all what your installation supports
// cast the InfoObject to IsecWinAD if si_kind=' secWinAD' or si_name is secWinAD
if(authPlugin.getTitle().equalsIgnoreCase("secWinAD"))
              IsecWinAD winad = (IsecWinAD) authPlugin;
              int availability = winad.getAvailaility(); //0 - if plugin is not configured\ready to use, 1 if ready to use and configured.
              String enabled =winad.properties().getProperty("SI_TRUSTED_AUTH_ENABLED").getValue().toString(); // returns true if trusted aut is enabled for this plugin, false otherwise.
I don't think you can read any property to retrieve the trusted key. The above code will give the auth plugins that are available in your install, which ones are ready and configured ( I have checked only the AD ones above) and if trusted auth is enabled. Check query builder properties if you are trying to get additional info for the auth plugins.

How to access Return Code sent to client from within a plugin

If the server sends back some kind of error to the client I want to be notified inside a plugin.
For this I know I can use the SLAPI_PLUGIN_POST_RESULT_FN.
But this function gets called every time the servers sends anything to the cleint. I want to set some kind of flag that indicates that the server sent a error code for the last operation. This way my other post operation plugins will not processs entries when they see this flag.
Any suggestions/advice to get the error code sent by the server would be appreciated.
Thanks,
Kamlesh

Hi Terry,
According to your description, my understanding is that you don’t want the yollow bar notification to display when you open Access documents.
This issue seems to be about the client application. Please compare the followings with the things that you did:
1.Open the documents
2.Click File->Options->Trust Center->Trust Center Settings
3.Click Protected View, unselect ‘Enable Protected View for originating from the Internet’
4.Click Message Bar, select ‘Never show information about blocked content’
5.Click Macro Settings, select ‘Disable all macros without notification’
In addition, as this issue is about Office, I commend you create a new thread in Office forum, more experts will assist you with this issue.
Office forum:
http://social.technet.microsoft.com/Forums/en-US/home?category=officeitpro
I hope this helps.
Thanks,
Wendy
Wendy Li
TechNet Community Support

Post Auth Plugin classloader?

Similar Messages

Maybe you are looking for