[problem] Access to BI-Publisher 11g is always "anonymous"

Question

Hi,
I have a problem using the BIP-WebApplication:
BIP 11.1.1.3 is installed successful.
Login to http://<my_machine>:9704/xmlpserver/servlet/home is possible, but only with "anonymous" user. No Login prompt available.
The signout link does not work, I will be redirected (again) to anonymous workspace...
Any help?
How to disable anonymous account?
Thank you!

Answer 1

in addition, server log says:
<28.03.2011 11:30 Uhr MESZ> <Notice> <WebLogicServer> <BEA-000360> <Server start
ed in RUNNING mode>
Seeking ESAPI.properties
Not found in 'org.owasp.esapi.resources' directory: D:\Oracle\Middleware11g\us
er_projects\domains\bifoundation_domain\ESAPI.properties
Not found in SystemResource Directory/resourceDirectory: .esapi/ESAPI.properti
es
Not found in SystemResource Directory/.esapi: .esapi/ESAPI.properties
Not found in SystemResource Directory: ESAPI.properties
Not found in 'user.home' directory: C:\Users\Administrator\.esapi\ESAPI.proper
ties
Found on classpath
Loaded properties file
Seeking validation.properties
Not found in 'org.owasp.esapi.resources' directory: D:\Oracle\Middleware11g\us
er_projects\domains\bifoundation_domain\validation.properties
Not found in SystemResource Directory/resourceDirectory: .esapi/validation.pro
perties
Not found in SystemResource Directory/.esapi: .esapi/validation.properties
Not found in SystemResource Directory: validation.properties
Not found in 'user.home' directory: C:\Users\Administrator\.esapi\validation.p
roperties
Found on classpath
Loaded properties file
========Master Configuration========
ResourceDirectory: .esapi
| Authenticator.AbsoluteTimeoutDuration=120
| Authenticator.AllowedLoginAttempts=3
| Authenticator.IdleTimeoutDuration=20
| Authenticator.MaxOldPasswordHashes=13
| Authenticator.PasswordParameterName=password
| Authenticator.RememberTokenDuration=14
| Authenticator.UsernameParameterName=username
| ESAPI.AccessControl=org.owasp.esapi.reference.DefaultAccessController
| ESAPI.Authenticator=org.owasp.esapi.reference.FileBasedAuthenticator
| ESAPI.Encoder=org.owasp.esapi.reference.DefaultEncoder
| ESAPI.Encryptor=org.owasp.esapi.reference.JavaEncryptor
| ESAPI.Executor=org.owasp.esapi.reference.DefaultExecutor
| ESAPI.HTTPUtilities=org.owasp.esapi.reference.DefaultHTTPUtilities
| ESAPI.IntrusionDetector=org.owasp.esapi.reference.DefaultIntrusionDetector
| ESAPI.Logger=org.owasp.esapi.reference.Log4JLogFactory
| ESAPI.Randomizer=org.owasp.esapi.reference.DefaultRandomizer
| ESAPI.Validator=org.owasp.esapi.reference.DefaultValidator
| Encoder.AllowMultipleEncoding=false
| Encoder.DefaultCodecList=HTMLEntityCodec,PercentCodec,JavaScriptCodec
| Encryptor.CharacterEncoding=UTF-8
| Encryptor.DigitalSignatureAlgorithm=DSA
| Encryptor.DigitalSignatureKeyLength=1024
| Encryptor.EncryptionAlgorithm=AES
| Encryptor.EncryptionKeyLength=256
| Encryptor.HashAlgorithm=SHA-512
| Encryptor.HashIterations=1024
| Encryptor.RandomAlgorithm=SHA1PRNG
| Executor.ApprovedExecutables=C:\Windows\System32\cmd.exe,C:\Windows\System
32\runas.exe
| Executor.WorkingDirectory=C:\Windows\Temp
| HttpUtilities.ApprovedUploadExtensions=.zip,.pdf,.doc,.docx,.ppt,.pptx,.ta
r,.gz,.tgz,.rar,.war,.jar,.ear,.xls,.rtf,.properties,.java,.class,.txt,.xml,.jsp
,.jsf,.exe,.dll
| HttpUtilities.ForceHttpOnlyCookies=true
| HttpUtilities.ForceHttpOnlySession=false
| HttpUtilities.ForceSecureCookies=true
| HttpUtilities.ForceSecureSession=false
| HttpUtilities.MaxUploadFileBytes=500000000
| HttpUtilities.ResponseContentType=text/html; charset=UTF-8
| HttpUtilities.UploadDir=C:\ESAPI\testUpload
| HttpUtilities.UploadTempDir=C:\temp
| IntrusionDetector.event.test.actions=disable,log
| IntrusionDetector.event.test.count=2
| IntrusionDetector.event.test.interval=10
| IntrusionDetector.org.owasp.esapi.errors.AuthenticationHostException.actio
ns=log,logout
| IntrusionDetector.org.owasp.esapi.errors.AuthenticationHostException.count
=2
| IntrusionDetector.org.owasp.esapi.errors.AuthenticationHostException.inter
val=10
| IntrusionDetector.org.owasp.esapi.errors.IntegrityException.actions=log,di
sable,logout
| IntrusionDetector.org.owasp.esapi.errors.IntegrityException.count=10
| IntrusionDetector.org.owasp.esapi.errors.IntegrityException.interval=5
| IntrusionDetector.org.owasp.esapi.errors.IntrusionException.actions=log,di
sable,logout
| IntrusionDetector.org.owasp.esapi.errors.IntrusionException.count=1
| IntrusionDetector.org.owasp.esapi.errors.IntrusionException.interval=1
| Logger.ApplicationName=ExampleApplication
| Logger.LogApplicationName=true
| Logger.LogEncodingRequired=false
| Logger.LogFileName=ESAPI_logging_file
| Logger.LogServerIP=true
| Logger.MaxLogFileSize=10000000
| Validator.AccountName=^[a-zA-Z0-9]{3,20}$
| Validator.ConfigurationFile=validation.properties
| Validator.CreditCard=^(\d{4}[- ]?){3}\d{4}$
| Validator.DirectoryName=^[a-zA-Z0-9:\\!@#$%^&{}\[\]()_+\-=,.~'` ]{0,255}$
| Validator.Email=^[A-Za-z0-9._%-]+@[A-Za-z0-9.-]+\.[a-zA-Z]{2,4}$
| Validator.FileName=^[a-zA-Z0-9!@#$%^&{}\[\]()_+\-=,.~'` ]{0,255}$
| Validator.HTTPContextPath=^[a-zA-Z0-9.\-_]*$
| Validator.HTTPCookieName=^[a-zA-Z0-9\-_]{0,32}$
| Validator.HTTPCookieValue=^[a-zA-Z0-9\-\/+=_ ]*$
| Validator.HTTPHeaderName=^[a-zA-Z0-9\-_]{0,32}$
| Validator.HTTPHeaderValue=^[a-zA-Z0-9()\-=\*\.\?;,+\/:&_ ]*$
| Validator.HTTPJSESSIONID=^[A-Z0-9]{10,30}$
| Validator.HTTPParameterName=^[a-zA-Z0-9_]{0,32}$
| Validator.HTTPParameterValue=^[a-zA-Z0-9.\-\/+=_ ]*$
| Validator.HTTPPath=^[a-zA-Z0-9.\-_]*$
| Validator.HTTPQueryString=^[a-zA-Z0-9()\-=\*\.\?;,+\/:&_ ](1,50)$
| Validator.HTTPScheme=^(http|https)$
| Validator.HTTPServerName=^[a-zA-Z0-9_.\-]*$
| Validator.HTTPURI=^[a-zA-Z0-9()\-=\*\.\?;,+\/:&_ ]*$
| Validator.HTTPURL=^.*$
| Validator.IPAddress=^(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:2
5[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$
| Validator.Redirect=^\/test.*$
| Validator.RoleName=^[a-z]{1,20}$
| Validator.SSN=^(?!000)([0-6]\d{2}|7([0-6]\d|7[012]))([ -]?)(?!00)\d\d\3(?!
0000)\d{4}$
| Validator.SafeString=^[p{L}p{N}.]{0,1024}$
| Validator.SystemCommand=^[a-zA-Z\-\/]{0,64}$
| Validator.URL=^(ht|f)tp(s?)\:\/\/[0-9a-zA-Z]([-.\w]*[0-9a-zA-Z])*(:(0-9)*)
*(\/?)([a-zA-Z0-9\-\.\?\,\:\'\/\\\+=&amp;%\$#_]*)?$