Problems in jazn security

Hi , I'm having troubles to configure my embedded oc4j application in jdeveloper I create a class which implements LoginModule , I generate a jar file for this class and put this in my JDEV_HOME/jdev/lib , in jdeveloper in put in Tools ->Embedded OC4J Preferences -> Global ->Authentication(JAZN) -> Login Configuration and create a new Login Configuration I called com.security.CustomizedLoginModule (the application name) and the login modules class I put the full qualified name (with the same name) of my class which extends the LoginModule, so I edited the myapplication-oc4j-app.xml and looks like this.
<jazn provider="XML" location="myapplication-jazn-data.xml" >
<property name="custom.loginmodule.provider" value="true"/>
<property name="role.mapping.dynamic" value="true"/>
</jazn>
And the myapplication-jazn-data.xml .
<jazn-loginconfig>
<application>
<name>com.security.CustomizedLoginModule</name>
<login-modules>
<login-module>
<class>com.security.CustomizedLoginModule</class>
<control-flag>required</control-flag>
<options>
<option>
<name>addAllRoles</name>
<value>true</value>
</option>
<option>
<name>debug</name>
<value>false</value>
</option>
</options>
</login-module>
</login-modules>
</application>
</jazn-loginconfig>
When I start my web application (the web.xml is configured to use form authentication and the form html contains j_security_check ,this part it's ok) my application doesn't call my customized login module class, anyone knows how what's going on or if is missing something ?
Thanks.

Doesn't work still in the same problem .
Looks like the embedded oc4j is using another class to do the authentication.
21/02/2007 21:32:03 oracle.security.jazn.oc4j.OC4JUtil doJAASLogin
WARNING: User [test] does not exist in system.
javax.security.auth.login.LoginException: User [test] does not exist in system.
     at oracle.security.jazn.login.module.RealmLoginModule.authenticate(RealmLoginModule.java:113)

Similar Messages

  • 10g: Bug with XML\Jazn Security

    For days I've been trying to get my migrated apps (from 9.0.3.1) to run with the internal JDev OC4J using JAZN security. I've been able to deploy to the packaged OC4J just fine, yet whenever I run it internally, it's never accepted my username and password.
    I just now found that JDev added a...
    <jazn provider="XML" location="[AppName]-jazn-data.xml" default-realm="jazn.com"/>
    to my App-oc4j-app.xml. I'm guessing this is for the Current Workspace settings, which is fine... however, for the Global settings, JDev never looks into system9.0.5.0.0.1375 \ oc4j-config for the global jazn-data.xml file when you run your app. (It will obfuscate passwords and everything, just won't look up your credentials)
    To fix the problem, I ended up copying my global jazn-data.xml file to my app's main directory (where App-oc4j-app.xml exists) from the system directory, then changing the location of the jazn provider in the App-oc4j-app.xml file to jazn-data.xml. (I suppose I could have just changed the location to point to the System directory as well).
    Anyways, figured this might help someone.

    I have the same problem. My app works fine with Stand alone OC4J. I tried to migrate my app into 10g Env.
    But I had the problem the JAZN Authentication. I tried all solutions, it still failed. I decided to create
    very simple EJB project to test Embedded OC4J debugging.
    I create a simple Test Workspace and testEJB project.
    I followed the steps to create a simple TestSesssionEJB with one method: insert.
    I right clicked on the TestSesssionEJB to generate New Sample EJB Client, named TestSessionEJBClient.
    1) To start the debug EJB, I right cliked the TestSesssionEJB and selected Degug TestSesssionEJB.
    2) Embedded OC4J Server started fine.
    3) I ran TestSessionEJBClient I got javax.naming.AuthenticationException
    javax.naming.NamingException: Lookup error: javax.naming.AuthenticationException: Invalid username/password for current-workspace-app (admin); nested exception is:
         javax.naming.AuthenticationException: Invalid username/password for current-workspace-app (admin). Root exception is javax.naming.AuthenticationException: Invalid username/password for current-workspace-app (admin)
         at com.evermind.server.rmi.RMIConnection.connect(RMIConnection.java:2298)
         at com.evermind.server.rmi.RMIConnection.connect(RMIConnection.java:2129)
         at com.evermind.server.rmi.RMIConnection.lookup(RMIConnection.java:1665)
         at com.evermind.server.rmi.RMIServer.lookup(RMIServer.java:680)
         at com.evermind.server.rmi.RMIContext.lookup(RMIContext.java:134)
         at javax.naming.InitialContext.lookup(InitialContext.java:347)
         at test.TestSessionEJBClient.main(TestSessionEJBClient.java:17)
    Here is TestSessionEJBClient generated by JDeveloper
    package test;
    import javax.naming.Context;
    import javax.naming.InitialContext;
    import javax.rmi.PortableRemoteObject;
    import test.TestSessionEJB;
    import test.TestSessionEJBHome;
    import javax.naming.NamingException;
    public class TestSessionEJBClient
    public static void main(String [] args)
    TestSessionEJBClient testSessionEJBClient = new TestSessionEJBClient();
    try
    Context context = getInitialContext();
    TestSessionEJBHome testSessionEJBHome = (TestSessionEJBHome)PortableRemoteObject.narrow(context.lookup("TestSessionEJB"), TestSessionEJBHome.class);
    TestSessionEJB testSessionEJB;
    // Use one of the create() methods below to create a new instance
    testSessionEJB = testSessionEJBHome.create();
    // Call any of the Remote methods below to access the EJB
    // testSessionEJB.insertClob( );
    catch(Throwable ex)
    ex.printStackTrace();
    private static Context getInitialContext() throws NamingException
    // Get InitialContext for Embedded OC4J.
    // The embedded server must be running for lookups to succeed.
    return new InitialContext();
    Test-oc4j-app.xml content
    <?xml version = '1.0' encoding = 'windows-1252'?>
    <!DOCTYPE orion-application PUBLIC "-//Evermind//DTD J2EE Application runtime 1.2//EN" "http://xmlns.oracle.com/ias/dtds/orion-application.dtd">
    <orion-application>
    <ejb-module path="file:/C:/jdev905WorkSpaces/testEJB/classes/"/>
    <library path="C:\jdev905WorkSpaces\testEJB\classes">jdev-generated</library>
    <library path="C:\Tools\oracle\jdev905\jdev\system9.0.5.0.1349\oc4j-config\.client">jdev-generated</library>
    <library path="C:\Tools\oracle\jdev905\lib\xmlparserv2.jar">jdev-generated</library>
    <library path="C:\Tools\oracle\jdev905\lib\xmlcomp.jar">jdev-generated</library>
    <log>
    <file path="Test-oc4j-app.log"/>
    </log>
    <jazn provider="XML" location="Test-jazn-data.xml" default-realm="jazn.com"/>
    <data-sources path="Test-data-sources.xml"/>
    </orion-application>
    Test-jazn-data.xml content
    <jazn-data>
    <jazn-realm>
    <realm>
    <name>jazn.com</name>
    <users>
    <user>
    <name>jdevuser</name>
    <credentials>!jdevuser</credentials>
    </user>
    </users>
    <roles>
    <role>
    <name>jdevrole</name>
    </role>
    </roles>
    </realm>
    </jazn-realm>
    </jazn-data>
    .../system9.0.5.0.1349\oc4j-config/server.xml
    <application-server application-directory="applications" deployment-directory="application-deployments" connector-directory="connectors" transaction-log="log/transaction.state" recovery-procedure="ignore" taskmanager-granularity="5000" taskmanager-interval="5000" auto-unpack-applications="true">
         <rmi-config path="./rmi.xml"/>
         <sep-config path="./internal-settings.xml"/>
         <!-- JMS-server config link, uncomment to activate the JMS service -->
         <jms-config path="./jms.xml"/>
         <log>
              <file path="log/server.log"/>
         </log>
    <java-compiler name="ojc" in-process="false" bindir="C:\Tools\oracle\jdev905\jdev\bin\"/>
         <global-application name="default" path="application.xml"/>
    <application name="bc4j" path="C:\Tools\oracle\jdev905\jdev\system9.0.5.0.1349\oc4j-config\applications\bc4j.ear"/>
    <application name="larcis" path="C:\larcis3\jdev905\larcis3-oc4j-app.xml"/>
    <application name="current-workspace-app" path="C:\jdev905WorkSpaces\Test-oc4j-app.xml"/>
         <global-web-app-config path="global-web-application.xml"/>
         <!-- <web-site path="./secure-web-site.xml" /> -->
         <web-site default="true" path="./default-web-site.xml"/>
         <!-- Compiler, activate this to specify an alternative compiler such
              as jikes for EJB/JSP compiling. -->
         <!-- <compiler executable="jikes" classpath="/myjdkdir/jre/lib/rt.jar" /> -->
    </application-server>
    I think this is a bug in XML/JAZN that Tim mentioned in the first post.
    I also tried the solution suggested by Tim. But it still did not work.
    Any one have another suggestion?

  • There is a problem with the security certificate of the proxy server. Error code 18 and 38.

    Hi All,
    After several hours and a short night of sleep I'm out of ideas and hopefully someone here can help me trying to solve this one. First of all the situation:
    Exchange 2013 on a remote location with a CA-certificate.
    Outlook 2010 and 2013 on different locations, locally installed and on RDS.
    When I open Outlook on my laptop all is fine, no errors, good sync, no problem. But when I open Outlook on our Remote Desktop Servers with Outlook 2013 I'm getting errors like "There is a problem with the security certificate of the proxy server. The
    name on the security certificate is invalid or does not match the name of the site. Outlook is unable to connect to this server. (Error code 18)". Opening Outlook 2010 the message is the same, but the error code now is 38.
    After this Outlook opens and is working, there's one more error though. After a while an security warning pops up with the message: "Information you exchange with this site cannot be viewed or changed by others. However, there is a problem with the
    site's security certificate. * The security certificate was issued by a company you have not chosen to trust. View the certificate to determine whether you want to trust the certifying authority. * The security certificate is valid. * The name on the security
    certificate is invalid or does not match the name of the site."
    Strangest thing is, it is the certificate of my RDS! It isn't my valid en officially bought certificate from my mailserver. What's going on? I'm out of options, what I've tried so far (in random order):
    - restarting mailserver and AD;
    - restarting switches;
    - restarting routers;
    - restarting RDS, AD and all other servers;
    - bypassed proxyserver for RDS;
    - created a new profile;
    - checked recently installed updates;
    - checked certificate on mailserver;
    - checked RDS on a different location, working fine.
    Nothing helped, what can I do next? Please advice.
    Regards.

    Found a thread that solves half my problem (https://social.technet.microsoft.com/Forums/office/en-US/70d18244-889a-4d95-ac3f-e234672a82b2/there-is-a-problem-with-the-proxy-servers-security-certificate-error-when-starting-outlook?forum=exchangesvrclients).
    The first message can be suppressed by adding this to the Exchange config:
    set-outlookprovider -Identity EXCH -CertprincipalName msstd:webmail.domain.tld
    set-outlookprovider -Identity EXPR -CertprincipalName msstd:webmail.domain.tld
    Giving the command get-outlookprovider, gives me empty information regarding the certprinipalname. Filled
    this and after recreating the profile or deleting the ost-file I still have the second alert with the local certificate of my RDS.
    Not completely where I want to be, any help regarding the second alert is greatly appreciated!

  • I have a problem in the security question I hope a solution as soon as Lee does not respond change ÓćÇá Secretariat

    I have a problem in the security question I hope a solution as soon as Lee does not respond change ÓćÇá Secretariat

    Welcome to the Apple Community.
    Start here (change country if necessary) and navigate to 'Password and Security', reset your security questions using the link provided, you will receive an email to your rescue address, use the link in the email and reset your security questions.
    If that doesn't help, you don't receive a reset email or you don't have a rescue address, you should contact AppleCare who will initially try to assist you with a reset email or if unsuccessful will pass you to the security team to reset your security questions for you.
    If you are in a region that doesn't have international telephone support try contacting Apple through iTunes Store Support.

  • Secure Empty Trash Problem After Installing Security Update 2010-005

    Some items in trash were locked, selected option to remove all items and nothing was deleted. Rebooted twice, no change. Unsecure empty trash works fine. Any ideas?

    Hello, i have the same problem. After security update the Mailprogram is polling my imap accounts (which requires SSL) endless. My workarround was to install Thunderbird. TB did the job. Any solution?
    thh001

  • Now I had to restart my Ipod all over again and when I want to get apps I can't because of a billing information problems. What security code do they want on my account settings information?

    Now I had to restart my Ipod all over again which because of that i lost all my data. When I want to get apps I can't install them because of a billing information problems. What security code do they want on my account settings information? And how do you delete purchased apps that you install, but didn't want?

    Maybe the three or four digit security code on your credit card card
    http://www.creditcards.com/credit-card-news/credit-card-verification-numbers-sec urity-code-1282.php
    or maybe the answers to your security questions. If you do not remember them:
    From a Kappy  post
    The Best Alternatives for Security Questions and Rescue Mail
    1.  Send Apple an email request at: Apple - Support - iTunes Store - Contact Us.
    2.  Call Apple Support in your country: Customer Service: Contact Apple support.
    3.  Rescue email address and how to reset Apple ID security questions.
    An alternative to using the security questions is to use 2-step verification:
    Two-step verification FAQ Get answers to frequently asked questions about two-step verification for Apple ID.

  • Problem assigning Essbase Security filters in Shared Services

    We recently upgraded Planning/Essbase to System 9 version 931 in Test. Everything went smoothly except for few users Security didn't migrate properly.
    In Shared Services, it shows that user has access to Planning & Native Essbase Applications. But in Essbase, only Planning Application access is shown.
    Also when I try to apply security filters for these users in Native Essbase Applications (in Shared Services), I don't see these particular users.
    There is no problem with Planning security, except when I refresh Security from Shared Services in Analytic Admin Console it wipes out Planning Application access in Essbase.
    For other users there are no issues. Only for few users this is the problem. I have tried to deprovision user & provision back, but no use.
    Please Help

    Essbase/Planning security is multi tiered. In Shared Services you setup your groups. You provision your groups with adequate security access. Depending on whether you have updated a cetain .css file(to fix bug) you may have to assign the read, write calc access to the group not just calc, but all three if your users need the access to actually, read, write & calc. of need user to just read & write etc... then you have to go to EAS refresh, run maxl script to assign environment access to user, go back to shared services go into projects assign any needed access to calc & filter groups and essbase is setup. For planning you also have to go to workspace and migrate identities within the security setup for any of your dimensions. this comes into play when adding or removing users as filters are created in planning workspace. I just learned this from one good tech that helped me setup & remove users as I had issues getting them in and out of the system..Now to move on to actually getting security reports that make sense for planning with the associated access. If anyone has the maxl code let me know.

  • There is a problem with this connection's security certificate The remote computer cannot be authenticated due to problems with its security certificate. Security certificate problems might indicate an attempt to fool you or intercept any data you send

    Hi,
    I have this Windows 2008 R2 on which I installed remoteapp some years ago.
    Now the certificate expired and I get the message
    "There is a problem with this connection's security certificate
    The remote computer cannot be authenticated due to problems with its security certificate.
    Security certificate problems might indicate an attempt to fool you or intercept any data you send to the remote computer."
    How should I renew the certificate? I already went to certification store and tried to renew certificate with same key but then it says "the request contains nor certificate template information".
    Please advise.
    J.
    J.
    Jan Hoedt

    Does the computer account have Enroll permission to the certificate template?
    From the Server running your CA, run mmc, click File then Add/Remove Snap-in...
    Add Certificate Templates and click OK.
    Find the certificate template, then right click and select properties.  On my CA its call ed RemoteDesktopComputers but might be called something different depending on what what template your certificate is based on.
    On the security tab, click Oblect types, check Computers then OK. Enter the Computername and click OK.  Then give your computer account Enroll permisssion.
    HTH,
    JB

  • Hi all, I'm still having problems with my security questions as they were not the ones I answered. Now I'm confused

    Still having problems with my security questions as they were not the ones I answered and now I'm confused.

    Howdy Paul,
    If you are having an issue with your Apple ID security questions, you can reset them using the steps in this article -
    If you forgot the answers to your Apple ID security questions - Apple Support
    Thanks for using Apple Support Communities.
    Best,
    Brett L 

  • Hi i have i problem with my iphone and the problem is the security question i have forgot the answers

    Hi i have i problem with my iphone and the problem is the security question i have forgot the answers
    I understand German and Italian i littlebit English

    You need to ask Apple to reset your security questions; this can be done by phoning AppleCare and asking for the Account Security team, or clicking here and picking a method, or if your country isn't listed in either article, filling out and submitting this form.
    They wouldn't be security questions if they could be bypassed without Apple verifying your identity.
    (106626)

  • I have a problem in retrieving security question

    I have a problem in retrieving security question because of the lack of an option that can restore him to question the safety of e-reserves .. Please solution

    for security question issue u will need to contact applecare at 1800aplcare
    they will need to verify ur identity so have access to id.apple.com when u call

  • HELP... problem establishing a secure connection when trying to get to Hotmail from browser

    I have a Blackberry Curve.  I could sign in to Hotmail fine up until the other day when I received the error message "problem establishing a secure connection".  When I click details, it says untrusted certificate and unable to determine the certificate orgin.  I contact my service provider Wind who were NO HELP at all.  Someone, please help me!!???

    Hi and Welcome to the Community!
    Here is a KB that discusses that error:
    Article ID: KB35687 Certificates issued by the GlobalSign Root CA show as untrusted
    Hopefully it contains something useful! There also are multiple existing threads on this site that discuss that exact error...your review of those might prove useful, and a search of this site, using the error message, error code, or symptom, should reveal all applicable existing threads to you.
    Good luck and let us know!
    Occam's Razor nearly always applies when troubleshooting technology issues!
    If anyone has been helpful to you, please show your appreciation by clicking the button inside of their post. Please click here and read, along with the threads to which it links, for helpful information to guide you as you proceed. I always recommend that you treat your BlackBerry like any other computing device, including using a regular backup schedule...click here for an article with instructions.
    Join our BBM Channels
    BSCF General Channel
    PIN: C0001B7B4   Display/Scan Bar Code
    Knowledge Base Updates
    PIN: C0005A9AA   Display/Scan Bar Code

  • Problem while loading security information (users/roles) from repository

    Iview have stopped connecting to our MDM, All repositories, all IViews Very strange
    Here is what I see in the logs.... Any ideas? Please if you have seen this before only
    Marty
    com.sap.mdm.extension.MetadataException: Problem while loading security information (users/roles) from repository 'PORTAL_CUSTOMERS'
    at com.sap.mdm.extension.MetadataManager.loadRoleCache(MetadataManager.java:559)
    at com.sap.mdm.extension.MetadataManager.internalGetRoleSet(MetadataManager.java:502)
    at com.sap.mdm.extension.MetadataManager.getRoleSet(MetadataManager.java:471)
    at com.sap.mdm.extension.MetadataManager.createMetadataKey(MetadataManager.java:464)
    at com.sap.mdm.extension.MetadataManager.getRepositorySchema(MetadataManager.java:197)
    at com.sap.mdm.uwl.MdmUwlConnector.createUserSessionContext(MdmUwlConnector.java:1463)
    at com.sap.mdm.uwl.MdmUwlConnector.new_retrieveItems(MdmUwlConnector.java:546)
    at com.sap.mdm.uwl.MdmUwlConnector.getItems(MdmUwlConnector.java:129)
    Caused by: com.sap.mdm.commands.CommandException: com.sap.mdm.net.ConnectionException: java.io.IOException: Unexpected socket read.  Result is -1.
    at com.sap.mdm.security.commands.GetUserListCommand.execute(GetUserListCommand.java:72)
    at com.sap.mdm.extension.MetadataManager.loadRoleCache(MetadataManager.java:526)
    Caused by: com.sap.mdm.net.ConnectionException: java.io.IOException: Unexpected socket read.  Result is -1.
    at com.sap.mdm.internal.protocol.manual.AbstractProtocolCommand.execute(AbstractProtocolCommand.java:102)
    at com.sap.mdm.security.commands.GetUserListCommand.execute(GetUserListCommand.java:69)
    at com.sap.mdm.internal.net.DataSocket.receiveData(DataSocket.java:62)
    at com.sap.mdm.internal.net.ConnectionImpl.readInt(ConnectionImpl.java:497)
    at com.sap.mdm.internal.net.ConnectionImpl.readInt(ConnectionImpl.java:490)
    at com.sap.mdm.internal.net.ConnectionImpl.nextMessage(ConnectionImpl.java:629)
    at com.sap.mdm.internal.net.ConnectionImpl.receiveMessage(ConnectionImpl.java:572)
    at com.sap.mdm.internal.net.ConnectionImpl.send(ConnectionImpl.java:233)
    at com.sap.mdm.internal.protocol.manual.AbstractProtocolCommand.execute(AbstractProtocolCommand.java:99)
    com.sap.mdm.commands.CommandException: com.sap.mdm.net.ConnectionException: java.net.SocketException: There is no process to read data written to a pipe.

    Early this month we upgraded the MDM server to:
    MDM Server version: 5.5.63.57
    And the portal components:
    MDM 5.5 SP06 Technology Patch 3 (Build 5.5.63.57)
    MDM 5.5 SP06 Application Patch 3 (Build 5.5.63.57)
    MDM 5.5 SP06 Java API Patch 3 (Build 5.5.63.57)
    However the issue just began 2 days ago?
    We started intgrating MDM Workflow with UWL and assigned Roles and Iviews to the Universal Worklist Configuration
    It seems the Iviews work for a while and then after some time everything gives up? Very confounding
    And yes we are using standard Iviews (search, Result and detail)
    Thanks
    Edited by: Marty Monroe on Oct 31, 2008 3:07 PM

  • HT5312 i am having problems editing the security questions i do not remember i specifically followed the steps and the "send to rescue email" option does not appear even though my rescue email is verified please help me

    i am having problems editing the security questions i do not remember i specifically followed the steps and the "send to rescue email" option does not appear even though my rescue email is verified please help me
    <Email Edited by Host>

    As these are public forums, you're not talking to iTunes Support,  I've asked the hosts to remove your email address from your post - it's not a good idea to post it unless you like spam email.
    The reset link will only show if you have a rescue email address on your account - a rescue email address is not the same as an alternate/secondary email address, they are different addresses/settings on an account.
    If you don't have a rescue email address (you won't be able to add one until you can answer 2 of your questions) then you won't get the reset option - you will need to contact iTunes Support / Apple to get the questions reset.
    Contacting Apple about account security : http://support.apple.com/kb/HT5699
    When they've been reset you can then use the steps half-way down the page that you posted from to add a rescue email address for potential future use

  • Hi i have problem in my security question email is blocked and i cant rested my security question in second emial becouse i cant see this linked

    Hi i have problem in my security question email is blocked and i cant rested my security question in second emial becouse i cant see this linked

    You need to ask Apple to reset your security questions. To do this, click here and pick a method; if that page doesn't list one for your country or you're unable to call, fill out and submit this form.
    (117310)

Maybe you are looking for