Problem in SSO with a Designer Generated Portlet

Trying to evaluate Designer 6i Release4's portlet genration functionality for Oracle Portal.
Problem with the SSO features.
Completed all of the preconfiguration tasks:
- Installed PL/SQL SSO enabler packages for the SSOSDK from
the June Portal Developers Kit.
- Installed the WSGSSO Packages and a created some users with
the default 'administrator' role.
- Registered the application with the Portal Login Server.
- Developed a PL/SQL form in Desginer and generated with
MODPTL pref as 'Yes' and MODFOU with the correct DAD.
As described here, all is well. Refreshing the Portlet
Provider list will display the generated form as a new
portlet. However, the problem occurs when turning on the SSO
functionality - Set SECVAL to 'Yes' and SECPKG to 'WSGSSO'.
Regenerate, refresh the Portlet provider list and the form
is no longer available as a portlet!
Has anyone else tried this and had the same problem?
Any ideas?

have you ensure that when using logon tickets, the user logging in has relevant backend access...
perhaps in user mapping, the particular userid might have necessary backend access..and hence its working fine ..
just check if the loggin in user has necessary authorization during logon ticket method..
Regards,
Abhijeet

Similar Messages

SSO with Query Designer

Hi all,
I need to add a link to SAP Query Designer in Portal that will launch Query Designer using SSO.
We have SSO with R/3 and with BI already implemented (the user will click on the link and launch SAP GUI without having to type username/password), but we don't know how to do that for Query Designer.
Can anyone help us? Is there any documentation on the subject that we didn't find?
Thanks,
Daniel

Apparently there needs to be some kind of certificate to add.
Anyone know anything about this?

XML alignment problem when opening with notepad - XML generated from SAP

Hi all,
I am sending a mail with attachment as XML format by using the function module SO_NEW_DOCUMENT_ATT_SEND_API1.
I am getting the xml file in mail and it was properly aligned when i open it. But when i open it with notepad the alignments are changing.
Below is the code for sending a mail. The content of the XML file populaed in int. table lt_attachment.
lt_attachment[] = pt_attachment[].
LOOP AT lt_attachment INTO ls_attachment.
    ls_objtxt-line = ls_attachment-container.
    APPEND ls_objtxt TO lt_objtxt.
    CLEAR : ls_attachment, ls_objtxt.
ENDLOOP.
Creating the document to be sent
ls_mailsubject-obj_name     = 'MAILATTCH'.
ls_mailsubject-obj_langu    = sy-langu.
ls_mailsubject-obj_descr    = 'You have got mail'.
ls_mailsubject-sensitivty   = 'F'.
lv_cnt = LINES( lt_objtxt ).
ls_mailsubject-doc_size     = ( lv_cnt - 1 ) * 255 + STRLEN( ls_objtxt ).
DESCRIBE TABLE lt_objtxt LINES lv_tab_lines.
Header of the email
ls_objpack-transf_bin = space.
ls_objpack-head_start = 1.
ls_objpack-head_num   = 0.
ls_objpack-body_start = 1.
ls_objpack-body_num   = lv_tab_lines.
ls_objpack-doc_type   = lc_raw.
APPEND ls_objpack TO lt_objpack.
CLEAR ls_objpack.
ls_objpack-transf_bin = lc_x.
ls_objpack-head_start = 1.
ls_objpack-head_num   = 1.
ls_objpack-body_start = 1.
ls_objpack-body_num   = lv_tab_lines.
ls_objpack-doc_type   = 'XML'.
ls_objpack-obj_name   = 'data'.
ls_objpack-obj_descr = 'data'.
ls_objpack-doc_size   = ls_objpack-body_num * 255.
APPEND ls_objpack TO lt_objpack.
CLEAR ls_objpack.
Add Recipients
ls_reclist-rec_type = 'U'.
ls_reclist-com_type = 'INT'.
ls_reclist-receiver = pv_mail.
APPEND ls_reclist TO lt_reclist.
Mail Contents
ls_mailtxt-line = 'Please find attached your XML doc.'.
APPEND ls_mailtxt TO lt_mailtxt.
CLEAR ls_mailtxt.
ls_mailtxt-line = lc_regards.
APPEND ls_mailtxt TO lt_mailtxt.
CLEAR ls_mailtxt.
ls_mailtxt-line = lc_dewa.
APPEND ls_mailtxt TO lt_mailtxt.
CLEAR ls_mailtxt.
Sending the document
CALL FUNCTION 'SO_NEW_DOCUMENT_ATT_SEND_API1'
    EXPORTING
      document_data              = ls_mailsubject
     put_in_outbox              = lc_x
     commit_work                = lc_x
    TABLES
      packing_list               = lt_objpack
      contents_bin               = lt_objtxt
      contents_txt               = lt_mailtxt
      receivers                  = lt_reclist
    EXCEPTIONS
      too_many_receivers         = 1
      document_not_sent          = 2
      document_type_not_exist    = 3
      operation_no_authorization = 4
      parameter_error            = 5
      x_error                    = 6
      enqueue_error              = 7
      OTHERS                     = 8.
IF sy-subrc EQ 0.
    COMMIT WORK.
    SUBMIT rsconn01 WITH mode = 'INT' AND RETURN.
    pv_return = 'Success'.
ELSE.
    pv_return = 'Failed'.
ENDIF.
CLEAR: ls_objtxt,ls_reclist, ls_objpack ,ls_doc_chng.
REFRESH: lt_objtxt,lt_reclist,lt_objpack.
Could any one help me on this.
Thanks & Regards,
Vineel.

Can't you PREVIEW your question before posting? Here you have more than 2500 characters, so we can't read your code.
Your "problem" seems normal to me (you shouldn't open an XML file with Notepad). Could you give an example how it looks like and how you'd like to make it appear?

Problem about SSO using logon ticket with user mapping

Hi everyone ,
I had done SSO with Portal , BW and R/3 system.
I use logon ticket with user mapping .
When user name is same in Portal as in R/3 system, or user name is same in Portal as in BW , user can access R/3 transactions and BW report without logon.
There are some Portal users name which are different with R/3 user and BW user. And I done the user mapping for these user.
But some user mapping works fine,but most of them can't work,means that most of them need to enter mapped user ID and password.
What's the reason?
When SSO using logon ticket with user mapping, the Portal user which is different with R/3 user and BW user, can they access R/3 transaction iview and BW report iview without logon?

Hi Chen,
What you have done is correct. But the problem lies here.
Since you are using the same system object for accessing the iview, where the ticket method is set to SAPLOGONTICKET in the user Management property of the system object.
To avoid this create another system object like the previous one but set the logon method to UIDPW and select admin, user from the drop down box. Also create a system alias for this system.
Now create another iview like the previous one but link this iview to the new system. Now do the user mapping for the users which are different in portal compared with R/3. Now you should be able to login without any problems.
Another important point is login to portal with Fully qualified domain name. In the ITS property of the system object also give the FQDN.
Hope this helps
Regards
Arun

Migration Jdev 11.1.1.1 to Jdev 1.1.2, IDE visual problems with ADF design

Migration Jdev 11.1.1.1 to Jdev 1.1.2, IDE visual problems with ADF design
CONTEXT
I’ve been working my project with Jdev11.1.1.1, when I migrate to JDev 11.1.1.2. I realized that my project didn’t compile successfully as before besides I couldn’t see the design view in a WYSIWYG mode on my JSF pages.
I had installed (initially) in C:\oracle\Middleware Jdev 11.1.1.1 with WLS 10.3 (default in Installer)
A couple days ago I realized about the new Jdev release JDev 11.1.1.2 and I decided to migrate because of the IDE improvements such as Bugs Solutions, Maven support, code templates, etc).
The new version seemed to be non-compatible with WLS 10.3 because I couldn’t mount it in the same middleware so I installed the new one in C:\oracle\Middleware11g2, JDev 11.1.1.2 with WLS 10.3.1 (default in Installer).
EXAMPLE
I have created a new sample Project named JDev112App, it only has 1 java class, 1 ADF template and 1 JSPx to show the errors and differences between releases of the IDE… However, I also have added the screenshots of the Project in each IDE, also I have included a screenshot of my real project (Business App).
NOTE. Business APP project is under subversion SVN and the migration was done successfully when JDEv 11.1.1.2 opened it (it migrated automatically).
What should I do?? .. thanks
Best Regards,
Screenshot1
http://comunidadoraclehispana.ning.com/forum/attachment/download?id=2315969%3AUploadedFi38%3A15778
Screenshot2
http://comunidadoraclehispana.ning.com/forum/attachment/download?id=2315969%3AUploadedFi38%3A15779
Example APP
http://comunidadoraclehispana.ning.com/forum/attachment/download?id=2315969%3AUploadedFi38%3A15784

I think that the problem could be preferences/settings migration from Jdev 11.1.1.1.0 to JDev 11.1.1.2.0, because I migrated not only the application but also the JDev preferences ( "Documents&Settings...Jdeveloper..." ).
I have installed in a new machine without previous version of Jdev the new release JDev 11.1.1.2.0 and when I deploy my test application with errors ( showed in this post ), it works fine and also the design view is correct.
I am not SURE but I think the bug or problem could be also the preference/settings migration between JdeveloperS.
Can anybody tell me the real reason?? How can I fix it ... I don’t want to import each of my settings manually in JDev 11.1.1.2.0 ( I mean templates, javadocs settings, connections, repositories, etc).
Thanks in advance for your help,

Headstart Designer generated form crashes with Java EOF error

When closing a form while in Enter Query mode, the form crashes & user is
disconnected from the database with error:
FRM-92100: Your connection to the server was interrupted.
Details:
Java Excepton
java.io.EOF Exception
at java.io.DataInputStream.readUnsignedByte(Unknown Source)
at oracle.forms.engine.Message.readDetails(Unknown Source)
at oracle.forms.netStreamMessageReader.run(Unknown Source)

Designer generates the ON-ERROR block level trigger. It has
execution style of BEFORE. Therefore, both the block level and
form level ON-ERROR triggers will fire.
Normally, in the block level trigger, Designer will generate
calls to its own message handling package to display any
constraint errors. However, Designer also allows you to specify
your own custom message handling package.
The package must contain:
- a procedure called PUSH
- a function called MSGGETTEXT, and
- a procedure called RAISE_FAILURE.
The preference MSGSFT, Package Used for Messaging, allows you to
record the name of the custom package.
Once you have recorded this in the preference, whenever you
generate a form, Designer will use your package and procedures
for its error handling code. That is why you see calls to
Headstart specific code in the block level ON-ERROR triggers.
If you want to customize the ON-ERROR triggers, you need to make
sure you understand how the MSGSFT preference is used. Read the
online help. Then, you can customize individual blocks by adding
application logic to the block, or you can add your own ON-ERROR
trigger to the object library in the CG$BLOCK object.
However, be warned that the Headstart error handling mechanism
depends on this code. Depending on what you do, you could end up
breaking things.

Problem with a design when open in firefox like

problem with a design when open in firefox like http://3a6aayer.com/Default.aspx

What kind of problems do you have?
Can you attach a screenshot?
*http://en.wikipedia.org/wiki/Screenshot
*https://support.mozilla.org/kb/how-do-i-create-screenshot-my-problem
Use a compressed image type like PNG or JPG to save the screenshot.

Problem with Oracle Designer 10

Hi,
I have a problem with Oracle Designer 10 version 9.0.4.7 installed in Windows 2000 platform.
I don't know if the origin of the problem is at the server side or client side. I try to launch the repository reports but it doesn't work. The screen never appear. I have to finish the client process but the oracle session remmains:
SID SERIAL# LOGON_TIME PROGRAM
============================
36 13137 01-12-2008 des2k61.exe
38 15583 01-12-2008 ckrpt61.exe
The second line belongs to repository report process.
I have to kill Oracle session manually. Do you know if the problem is in the server side or client installation??
SGA VALUES
=============================
Total System Global Area 320302432 bytes
Fixed Size 736608 bytes
Variable Size 285212672 bytes
Database Buffers 33554432 bytes
Redo Buffers 798720 bytes
Client values
=============================
1Gb RAM
Windows 2000 SP4
3Gb Virtual Mem
2 GHz AMD
Thanks in advance.

I have two homes for oracle developer ..
old ---- C:\*DevSuite*
new -- C:\>C:\*DevSuite_1*
I have executed the below statement .........
C:\>C:\*DevSuite_1*\bin\tnsping disd9i
TNS Ping Utility for 32-bit Windows: Version 10.1.0.4.2 - Production on 09-SEP-2
010 19:29:22
Copyright (c) 1997, 2003, Oracle. All rights reserved.
Used parameter files:
C:\*DevSuite*\network\admin\sqlnet.ora
Used TNSNAMES adapter to resolve the alias
Attempting to contact (DESCRIPTION = (ADDRESS_LIST = (ADDRESS = (PROTOCOL = TCP)
(Host = VHRTY76.ASPNDT.NET)(Port = 1521))) (CONNECT_DATA = (SID = POU)))
OK (720 msec)
I think the new one is point to the old version 9 - sqlnet.ora and tnsnames.ora .
How to point the new one..?
Can I have two tns_admin as env variable ?
Edited by: user12045030 on Sep 9, 2010 7:12 AM

Problem with Time Dimension generating

Hello, everybody.
I have a problem with Time Dimension generating with the help of the Standard Wizard.
1. I choose Dimensions -> New -> Using Time Wizard
2. Set Name as "Time"
3. On the next screen I choose ROLAP: Relational Storage
4. On the next screen set Start year: 2003, Number of years: 3
5. On the next screen choose all levels of the Normal Hierarchy
On the 6-th step Wizard complete 60% of job and hang up doing nothing (buttons "Cancel" and "Help" is active).
chapter "Create REL_TIME Dimension Using the TIME Dimension Wizard", step 1-6 of tutorial =(
http://www.oracle.com/technology/obe/11gr1_owb/owb11g_update_getting_started_intro/lesson3/less3_relational.htm
My system characteristics:
Builder client 11.1.0.7.0, warehouse at local computer.
can anybody give me any advice about this problem? =(
thanks in advance.

Had this issue been solved please?
I have just come across the exact same problem and this post is the only one i managed to find which describes exactly what is happening to me.
Thanks

Problems with App Design Transformer in Designer 9i

I've run into 2 problems using the ADT in Designer on Windows 2000. I've got 9i Developer Suite version 9.0.2.0.0 installed with no patches. Designer version is 9.0.2.80.10. Version control is not enabled.
1. Inside the RON, when I select a Business Function then Utilities->Designer->Application Design Transformer, I get a message "There is no selected workarea." From that point on, when I click on some other item (function, entity, etc.) I get "ORA-01008: Not all variables bound." It seems to have some problem trying to select the properties for the selected item.
2. I can get the ADT to work from the front panel or from the Funtion Hierarchy Diagrammer. However the function Description ends up in the Notes for the resulting module, and the function Notes do not show up in the module at all. This is different than what I'm used to in Designer 2.1, where the Description and Notes go right into the corresponding fields in the module.
I've searched all over OTN and MetaLink but couldn't find anything resembling these problems. Should I just apply the latest patch and hope for the best?

Hello,
We could solve it and the problem was that the url for sap-cssurl did not have domain:port included!
The old usage worked for SP9 but not anymore for SP13.
SP13 - not working
sap-cssurl=http:/webdynpro/resources/application.company.com/myapp~app1/Applications/com.company.app1.main.APP1/sap_standard
SP13 - working (with domain + port)
cssurl=http://<domain:port>/webdynpro/resources/application.company.com/myapp~app1/Applications/com.company.app1.main.APP1/sap_standard
A similar issue seems to have the Theme Editor in for the preview mode, since exactly the same error occurs! Hope SAP looks at this and corrects it soon.
Thanks,
Robert

OBIEE 11.1.1.6 SSO with OAM 11.1.1.5: OID 11.1.1.6 attribute problem

Hi Everyone!
I have configured a OAM(webgate)+OID+OBIEE+OHS system.
The OBIEE is protected via OHS(weblogic module) and webgate. It is working very well.
The OAM authenticates from OID(default user identity store).
The *"User Search Base"* is same ( *"cn=Users,dc=mydomain,dc=com"* ) in identity store and in OBIEE's OID authentication provider too.
The SSO is enabled in OBIEE and the providers are:
OID (Provider that performs LDAP authentication     1.0) SUFFICIENT
OAM Provider (Oracle Access Manager Identity Asserter     1.0) REQUIRED
DefaultAuthenticator     (WebLogic Authentication Provider     1.0) SUFFICIENT
DefaultIdentityAsserter
IF the *"User Name Attribute"* is *"cn"* in OAM's user identity store and the OBIEE's OID provider's *"user name attribute"* is *"cn"* (default) too, everything is working fine.
But I have to use *"orclSAMAccountName"* instead of *"cn"* (OAM and OID provider). And in this case I have the problem.
In the OBIEE's OID provider are:
All Users Filter: (&(orclSAMAccountName=*)(objectclass=person))
User From Name Filter: (&(orclSAMAccountName=%u)(objectclass=person))
User Name Attribute: orclSAMAccountName
I made a test user:
cn=test
sn=test_sn
orclsamaccountname=test_sama
uid=test_uid
krbprincipalname=test_krb
I can authenticate with test_sama in OAM, but OBIEE say: *"You are not logged in here: Oracle BI Server."*
The bi log shows that:
+Default (self-tuning)'> <BISystemUser> <> <00093dFuR^HFW7PMye7i6G00052S000Tt7> <1345642607333> <BEA-000000> <javax.security.auth.login.FailedLoginException: [Security:090304]Authentication Failed: User test javax.security.auth.login.LoginException: [Security:090300]Identity Assertion Failed: User test does not exist+
+oracle.security.jps.internal.api.jaas.AssertionException: javax.security.auth.login.FailedLoginException: [Security:090304]Authentication Failed: User test javax.security.auth.login.LoginException: [Security:090300]Identity Assertion Failed: User test does not exist+
Why does search OBIEE the *"cn"* and why does not use the *"orclsamaccountname"* ?
Any idea???
Regards, Jani

Hello Jani,
This is a known issue in OBIEE 11.1.1.6.0 , Please refer to : OBIEE 11.1.1.6 Agent failed with Error Codes: IHVF6OM7:OPR4ONWY:U9IM8TAC [nQSError: 13039] The impersonator does not exist in the BI Security Service [ID 1446877.1]
We have configured OBIEE 11.1.1.6 on Linux and using Single Sign On (SSO) with Windows Native Authentication (WNA).
Configured AD Authenticator, selected sAMAccountName instead of CN for User Attribute. Enabled SSO in EM. When trying to access OBIEE Presentation services we have encountered the error below.
"You are not logged in here: Oracle BI Server."
When checking the biserver1 log file found : [Security:090300]Identity Assertion Failed: User OracleSystemUser does not exist
After applying the patch 13553428 on top of OBIEE 11.1.1.6.0 we have successfully logged into OBIEE Presentation services.
This works fine with OBIEE 11.1.1.5.0 and 11.1.1.6.1
Fixed in OBIEE 11.1.1.6.1. Apply Patch 13742915.
If you want to stay in OBIEE 11.1.1.6.0. Apply Patch 13553428.
Let me know if this solves the Asserter issue.
Pls mark if helpful or answered.
Thanks,
-SVS

URGENT ! JDEV 10.1.2 Problem with data control generated from session bean

I got a problem with data control generated from session bean which return a collection of data transfer object.
The dto's seem to be correct. The session bean load correctly the data into and the object's are plenty of data. Using the console to display the dto content is ok.
When generating a data control from this session bean and associate the dto included in the collection only the first object level and one-to-one dto object are correctly setted in the data control. Object that represent collection into the dto (one-to-many foreign key) are setted as collection with an iterator but the structure of the object is not setted. I don't know how to associate this second level of collection with the dto bean class to obtain the attributes definition.
I created a case with hr schema like the hrApp demo application in the tutorial with departments and employees table. I got the same problem.
Is it a bug ?
It exists a workaround to force the data control to understand the collection data structure ?
Help is welcome ! this is urgent !!!

we found the problem by assigning the child dto bean class to the node representing the iterator in the xml file corresponding to the master dto.

SAML 1.1 SSO with AM 7.1 (generating a test certificate)

Hello,
I am trying to use AM 7.1 to Federate with an SP (SalesForce.Com) and wondered if there
was a way to create a test certificate within AM 7.1 (as there is within OpenSSO Express 7) ?
With OpenSSO, it's fairly trivial to generate a test certificate and export it to the SP and
complete the SAML 1.1 SSO, but I see no indication that I can do this with AM 7.1. If anyone
has done something like this and could provide me with guidance, it'd be most appreciated.
As I said, getting SAML 1.1 based SSO with OpenSSO is fairly easy but I am not currently
finding that to be the case with AM 7.1 and would appreciate any help folks could provide.
Thanks.
--Vic.

So this was actually pretty easy and I should have located this earlier. One just simply can use
keytool -genkey ..... (need a few other flags - see Federation and SAML AM 7.1 guide for details of this).
to generate a self-signed 'test' cert. It's then just a simple matter of creating the .keypass and .storepass
files using ampassword ( do this as root) and the put them in the appropriate location as specified
in the AMconfig.properties file (save your original keystore and replace it with the one you create above).
You'll also have exported your test cert from the keystore to a file and that will be used on the SP-side.
Hope that this helps others.
--Vic.
Edited by: VicB on Oct 19, 2009 3:54 PM

Designer Generated web programs

Hi,
When I generate pl*sql based web programs and try run them I get the following errors:
OWS-05101: Execution failed due to Oracle error 4068
ORA-04068: existing state of packages has been discarded
ORA-04063: package body "WEBTOOLKIT.WSGL" has errors
ORA-06508: PL/SQL: could not find program unit being called
ORA-06512: at "HEA.MAINTAIN_INSTITUTE$", line 27
ORA-04063: package body "WEBTOOLKIT.WSGL" has errors
ORA-06508: PL/SQL: could not find program unit being called
ORA-06512: at line 5
I've got the htp and relate packages installed, and the WSGL packages installed under a new user WEBTOOLKIT. I've create public synonyms, granted execute on them to public but when I use them I get the messages above. I've checked and all the packages are valid. it's like some form of permissions problem. Any help would be appreciated.
If I've posted to the wrong group please let me know.
Many thanks
Mervyn Colton.

Hi,
You can use URL services of JPDK or URL component in webview to design the portlet and call the URL in it. This
will render the URL in the same page with other portlets.
Thanks,
Sharmila

CG_REF_CODES Fail to generate in Designer Generator

When generating domains from designer, CG_REF_CODES is being used to store dynamic domains.
JHeadstart seems to have a problem with CG_REF_CODES. There isn't any component generated to use the CG_REF_CODES. We created the business component for the CG_REF_CODES manually. This results in a Business Component where a rowid as primary key is added to the fields. When we start to use the designer generator, everything works fine. After that, with the application generator the processing stops immediately. Even if we pull out all the references from the module to CG_REF_CODES, this fails when applying the application generator.
Some notes must be made:
1. The forms in Designer are Headstart Forms, which means the forms were originally generated by Headstart and afterwards they were modified by the developer. We know this is not very correct, but this is what we have at the moment.
2. The forms can be found as source file only.
3. Through reverse engineering a module is generated from the src form file.
We have some questions:
1. Does JHeadstart work with reverse engineered forms, which were originally created with Headstart ?
2. Does JHeadstart work with reverse engineered forms anyhow ?
3. What's the deal with CG_REF_CODES ?
We spoke to Ton van Kooten (Oracle Netherlands) and he asked us to post this message.
So we did.
Hope to hear from you soon

Rokesh,
The answer to questions 1 and 2 is yes. JHeadstart reads the designer metadata, it doesn't care how this metadata is created.
Dynamic domains in CG_REF_CODES are migrated by the JDG to a static domain defined in DomainDefinitions.xml.
You can change this after running the JDG as you suggested:
- create View Objects for each domain in CG_REF_CODES (with the where clause filtering on the domain name)
- In the Application Structure editor create a Lookup element on the attribute that should have the dynamic domain. In the Lookup element you can specify the appropriate domain ViewObject
- Remove the static domain reference created by the JDG: open the JHeadstart BC4J property editor on the ViewObject, select the attribute that should have the dynamic domain and clear the "Domain" property.
I am not sure the problem you have with runing the JAG is related to CG_REF_CODES. Can you try it with a fresh migration:
- create new project
- run the JDG
- run the JAG
- compile and run the application
Does that work?
Steven Davelaar.

Problem in SSO with a Designer Generated Portlet

Similar Messages

Maybe you are looking for