Provider : Authorization Required (Workflow Provider)

I am trying to use Oracle Workflow as a provider.
I have defined an external application (using basic authentication) - that works fine.
I have created a provider.xml, it is registered, the config files modified etc - the test page works fine.
I have linked the provider to the external application.
When I add the portlet to a page I always get the following error message (from the Workflow Application Server) :
Authorization Required
This server could not verify that you are authorized to access the document requested. Either you supplied >the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials >required.Here is my provider.xml :
<provider class="oracle.portal.provider.v1.http.URLProvider">
<session>true</session>
<authentication class="oracle.portal.provider.v1.http.Authentication">
<authType>basic</authType>
</authentication>
<portlet class="oracle.portal.provider.v1.http.URLPortlet">
<id>1</id>
<name>CCC_PROV_WF_JMR_2</name>
<title>Job Manager Workflow Provider</title>
<description>Job Manager Workflow</description>
<timeout>100</timeout>
<timeoutMessage>Job Manager Workflow timed out</timeoutMessage>
<showEdit>false</showEdit>
<showEditDefault>false</showEditDefault>
<showPreview>false</showPreview>
<showDetails>false</showDetails>
<hasHelp>false</hasHelp>
<hasAbout>false</hasAbout>
<acceptContentType>text/html</acceptContentType>
<registrationPortlet>false</registrationPortlet>
<accessControl>public</accessControl>
<renderer class="oracle.portal.provider.v1.RenderManager">
<showPage class="oracle.portal.provider.v1.http.URLRenderer">
<contentType>text/html</contentType>
<pageExpires>60</pageExpires>
<pageUrl>http://sirius.caprion.com:7777/pls/wf_drep</pageUrl>
</showPage>
</renderer>
<securityManager class="oracle.portal.provider.v1.http.URLSecurityManager">
<authorizType>public</authorizType>
</securityManager>
</portlet>
</provider>
ANY IDEAS ?
Thanks

The relative links need to be converted to absolute links. You can use a filter to achieve this. You need to define your filter similarly to this after the pageURL definition:
                    <filter class="oracle.portal.provider.v2.render.HtmlFilter">
                         <headerTrimTag>&lt;body</headerTrimTag>
                         <footerTrimTag>/BODY></footerTrimTag>
                         <baseHRef>your_page_url</baseHRef>
                         <convertTarget>true</convertTarget>
                    </filter>

Similar Messages

  • Providing authorization for parameter transaction

    hello all,
              I have created a parameter transaction for a table maintainance generator(table a z-table). the requirement is, we want to provide authorization only for few users so how can we go forward...
    with regards,
    sandeep akella.

    When you are parametrizing any TCoe then there is no changes happen in the Authorization checks from the original. So you need to take care this in the following way:
    1. Go to table TDDAT and find out the Authorization Group of that z-table. If nothing found, please create a Custom Auth group and assign the table to that grp in SE54.
    2. Now go to the role through which you want to provide access to that table to the users or create a new role and add the Parametrized Tcode in the menu of the Tcode.
    3. In authorization data, please assign the Authorization group for that particular table in S_TABU_DIS and provide the activity as per your requirement.
    4. Assign the role to the users.
    Regards,
    Dipanjan

  • Why was I required to provide credit/debit card information in order to obtain an Apple ID?

    I Have and At&t account with four phones and two tablets. When I tried to create an Apple ID for my mother on her iPhone 4, it required credit/debit carinformation. However, on all my other devices (under the same account ), I was not required to provide credit or debit information. I had the option not to enter that information.
    Also, I am very hesitant to put any information if that type on the Internet. I will never. I was hacked into very badly and have spent a lot of money to resolve the issue. I feel it is still not resolved. On one of my new iPhone 6, it crashed and said it was due to a third party. What does that mean... I am resorting to you guys for help. No one has helped nor cares to help me with this problem. My laptops are junk, my phones were junk, etc. All of this due to one person who I am 99.9% sure of his identity. However, authorities do not care nor Internet companies hacking department nor Dell's hacking department. I have changed my router, passwords, web key, phones, tablets. I have paid Dell to resolve the problem on my laptops. Nothing has stopped this person. I do not know what to do... I am simply frustrated and do not trust anything anymore online. I do not even trust asking this question because he will probably answer....

    The "hacker" was a friend I mine, I thought until I started to notice unusual activity and my internet settings were changed. About a year ago, I asked him for help with setting up my computer, iPhone 4, and tablet for my company. My brother and I run a small HVAC company. I trusted this individual and left my laptop at his house. At that time I never thought he would do what he did. I stupidly gave him my email password and Apple ID. Whenhe returned my computer, I started to notice that my internet settings were changed. He changed my Internet from being a"home" wifi connection to a "business" with DNS, adapters, etc. I am not computer savy on how they operate and all of the different Internet options. I just know how to use computers, not programing or changing the operating system, like DOS. However, I noticed the change in my Internet settings along with other things. An administrator account was made, certificates were installed, and I was unable to change certain things on my phone and computer. I called Dell for help, I pleaded with them to let me send the laptop to them because I do not know enough to be able to tell you everything that needs to be fixed/changed. They would not let me and said it coyld be fixed over the phone. I paid $400 and they said, the problem is fixed and my internet/computer issues are resolved. I only think they got my computer back on line and increased the security. I do not think they fix the problem and currently one of my laptops is blue screened. I also believe he put something in my CD drive and believe he reversed the camera to look through it. Hence, I put post its over it to block the view. To this day, I cover the camera. I do not know what he did nor everything he did. I been reading up on security and hacking. I think he may have installed a key stroke logger but I do not know enought to truely know if he did. I have called authorities, spoken with many internet companies, talked with Verizon (my wifi provider), At&t my phone/tablet company, apple and many other people. I have changed passwords, my router, my web key, my phones, my tablets, apple id, and enabled two-step verification. I do not know where to go or what to do....... I have been dealing with this for over a year know.  Yesterday, I noticed that there were phone numbers blocked from calling my phone. I did not do it and took a picture so I can call the numbers to see find out who's numbers  were blocked. He tries to get on my Facebook and I know he can access my emails. I found another password that worked to log in to my yahoo business email. I want to make this person be held responsible for his actions. He has cost me a lot of money and interfered with the daily operations of my business. Sorry for writing a book but I am looking for any advice on where to go and what to do....... I welcome and appreciate any and all replies that can help in any way !!!

  • To read COMTRADE file in Labview there is an example provided. Can somebody provide the sample .cfg and .dat files required for its working?

    To read COMTRADE file in Labview there is an example provided. Can somebody provide the sample .cfg and .dat files required for its working?

    Thanks for the reply.
    But this library doesn't contain any sample .cfg and .dat files which can be read and understood. Can you please provide the same?

  • The token provider was unable to provide a security token

    I am configuring workflow for SharePoint 2013. For that I am creating a workflow farm and selected custom settings and selecting certificates from personal store. When I am select the option where it will auto generate the certificate configuration 
    successful.
    while selecting the certs from personal store, configuration failed to add host to workflow farm and throwing below error
    Configuring Workflow Manager runtime settings.
    The token provider was unable to provide a security token while accessing 'https://hostname:9355/WorkflowDefaultNamespace/$STS/Windows/'. Token provider returned message: 'The underlying connection was closed: Could not establish trust relationship for the
    SSL/TLS secure channel.'.
    Thanks,
    Neetu
    neetu

    Hi,
    When I am trying to receive the same messages from a Azure service bus subscription using .net (C#) client,
    BusSubscriberbusSubscriber =
    newBusSubscriber("TestTopic2",
    "Endpoint=sb://overcasb.servicebus.windows.net/;SharedSecretIssuer=owner;SharedSecretValue=wqYlT4yHZimeUZacH+1V1hj/ZrKu7zK9ELaaLYDxqjc=",
    "AssetMovement",
    "AssetMovement");
    I am getting the same error here also.
    "The token provider was unable to provide a security token while accessing 'https://overcasb-sb.accesscontrol.windows.net/WRAPv0.9/'.
    Error Code: 407 Proxy Authentication Required. The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied. (12209)
    By setting  <defaultProxy useDefaultCredentials="true" /> in appconfig, I got rid of the above error. And now its working fine with .net(C#) client.
    <configuration>
      <system.net>
        <defaultProxy useDefaultCredentials="true" />
      </system.net>
    </configuration>
    The same setting I tried in BTSNTSvc.exe config file and ofcourse restarted the host instance but still getting the same error. Any help?
    gautam

  • Authorization Required for RFC user  in R/3-APO system.

    Could you please help regarding one authorization issue. I want to know the authorization required for one RFC user. Now this RFC user used for RFC connection of SAP R/3 - SAP APO system. user type is given dialog type and SAP_ALL profile has been given to this user  id. Now I have to remove SAP_ALL from this user id in R/3 and APO system and  provide the required the authorization in R/3 and APO system.
    Regard
    Auroshikha

    The RFC authorisation depends completely on what the user is doing (ALEREMOTE?).  We can't tell you what RFC auths your connection requires. 
    There is a guide to doing this here: https://wiki.sdn.sap.com/wiki/display/Security/BestPractice-HowtoanalyzeandsecureRFC+connections

  • Authorization requirement

    hi,
      this is my requirement
    how to provide authorization to be primarily based on
    plant code
    purchasing group
    material group
    incoterm
    vendor account group.
    please provide me the procedure and if there is any code for it please provide.
    thanks in advance

    PARAMETERS carr TYPE spfli-carrid.
    AT SELECTION-SCREEN.
      AUTHORITY-CHECK OBJECT 'S_CARRID'
        ID 'CARRID' FIELD carr
        ID 'ACTVT'  FIELD '03'.
      IF sy-subrc <> 0.
        MESSAGE 'No authorization' TYPE 'E'.
      ENDIF.
    AUTHORITY-CHECK OBJECT auth_obj [FOR USER user]
                            ID id1 {FIELD val1}|DUMMY
                           [ID id2 {FIELD val2}|DUMMY]
                           [ID id10 {FIELD val10}|DUMMY].
    Addition:
    ... FOR USER user
    Effect
    This statement checks whether authorization is entered in the user master record of the current user or the user specified in user for the authorization object entered in the field auth_obj, and whether this authorization is sufficient for the request specified in the statement. A flat character-type field that contains the name of an authorization object is expected for auth_obj. Without the addition FOR USER, the authorization of the current user is checked.
    With id1 ... id10, you must have at least one and can have a maximum of 10 authorization fields listed for the authorization object specified. With id1 ... id10, "flat", character-type fields are expected that contain the name of the authorization fields in uppercase letters. If an authorization field is specified that does not appear in the authorization object, no check can be executed and sy-subrc is set to 4. For each specified authorization field, you must specify with FIELD either a value to be checked in a flat, character-type field val1 ... val10 or the addition DUMMY.
    The authority check is carried out if the check indicator for the specified authorization object for the current context is set to check with any proposal status. If the check indicator is set to no check, no authority check is carried out and sy-subrc is set to 0, as with a successful check.
    The authorization check is successful if one or several authorizations are created for the authorization object in the user master record and if - for at least one of the authorizations - each of the value sets defined there for the authorization fields specified using FIELD includes the value val1 ... val10 to be checked. Authorization fields that are not included in the statement or that have DUMMY specified for them are not checked. If the check is successful, sy-subrc is set to 0. Otherwise, it is set to a value not equal to 0 (see below).
    System Fields
    sy-subrc Meaning
    0 Authorization successful or no check was carried out. An authorization for the authorization object was found in the user master record. It's value sets include the specified values.
    4 Authorization check not successful. One or several authorizations were indeed found for the authorization object in the user master record and they include the value sets, but not the values specified, or incorrect or too many authorization fields were specified.
    12 No authorization was found for the authorization object in the user master record.
    24 Incorrect authorization fields or an incorrect number of authorization fields was found. This return value is no longer set since Release 6.20. Up to Release 4.6 it is set only if the profile parameter "auth/new_buffering" has a value less than 3.
    40 An invalid user ID has been entered in user.
    Notes
    The authorization fields of an authorization object are fields for data and a field with the name ACTVT for activities. Activities are represented by abbreviations with two characters that are defined in the ACTVT column of the database table TACT or have a customer-specific definition in TACTZ. Possible activities are assigned to the authorization field ACTVT in the authorization object. In the user master record, you have authorizations for data and activities in the form of operands for logical expressions stored as value sets. Here, masking characters can be used for generic authorizations.
    When checking the authorization of the current user without the addition FOR USER, the content of the system field sy-uname is not evaluated, but the actual user name is used instead.
    The most important contexts for which check indicators can be set are transactions. The execution of a statement AUTHORITY-CHECK can have different results depending on how the current program flow was started. In general, a check indicator should always been set to check.
    For authorization objects of the areas SAP NW AS ABAP (BC) and human resources management (HR), a check indicator cannot be set to no check.
    Addition
    ... FOR USER user
    Example
    Check as to whether the current user has the authorization required for displaying the airline that he specifies on the selection screen. The used authorization object is called S_CARRID and includes the authorization fields CARRID for the name of an airline and ACTVT for the activity. The abbreviation "03" stands for the "Display" activity and is one of the activities that are assigned to the authorization object S_CARRID.
    PARAMETERS carr TYPE spfli-carrid.
    AT SELECTION-SCREEN.
      AUTHORITY-CHECK OBJECT 'S_CARRID'
        ID 'CARRID' FIELD carr
        ID 'ACTVT'  FIELD '03'.
      IF sy-subrc <> 0.
        MESSAGE 'No authorization' TYPE 'E'.
      ENDIF.

  • Oracle OleDB Provider VS MS OleDB Provider

    I am using Stored Procedures in Oracle Packages and Microsoft ADO for data access.
    My Stored Procedure use a Ref Cursor output parameter to make data available to ADO's recordsets.
    A big difference in network traffic is found between "Microsoft OLEDB Provider for Oracle" and "Oracle OLEDB Provider" (the native driver provided by Oracle).
    The main issue :
    <<Oracle OLEDB Provider>>
    1) A stored procedure is put into an empty package for testing and returning no row, the result is 4KB downstream traffic.
    2) When the SAME stored procedure is put into a large package (a package that already contained 30 other stored procedures, > 1000 lines codes), the result is 70KB downstream traffic for same call that return no row.
    <<Microsoft OLEDB Provider>>
    1) and 2) both use approximately 4KB downstream traffic.
    However, for a query that return large number of rows (~2000 rows), Oracle OLEDB Provider used 143KB but MS OLEDB Provider used 400KB downstream.
    The behaviours for upstream are similar.
    My application is required utilize limited bandwidth, the the strange behaviour of the Oracle OLEDB Provider make my development of "Packaged" Stored Procedures a big problem.
    Does anyone know if there are any tricky on the Oracle OLEDB Provider? Please advice, thanks in advance.
    Regards,
    Jeff

    Sounds like the bug 2597418 that was fixed and released in 9.2.0.2 of Oracle OLEDB Provider

  • Content Server Error: 407 Proxy Authorization Required

    Hi Experts,
    I am new to Content Server and have recently installed Content Server 6.40 with MaxDB 7.8 database on a Windows 2008 server.
    The installation completed successfully and IIS server was configured as per guide. The Content server is running when checked through URL on server.
    Next, we created a new repository with following details, but are facing "HTTP error: 407 Proxy Authorization Required" while testing the connection.
    Settings in OAC0
    Content Rep.    A1
    Document Area: ArchiveLink
    Storage type: HTTP Content Server
    Version no.: 0046
    HTTP server: <IP of Windows server where CS is intalled>
    Port Number     1090
    HTTP Script     ContentServer/ContentServer
    Transfer drctry C:\temp
    HTTP Port 1090 is open from SAP system(HP-UX) to Content Server(windows) and there is no firewall between the 2 servers, but we still see the error in OAC0 and CSADMIN. I also tried setting the security parameter to 0 in contentserver.ini file, but that didn't help either.
    The content server was installed using administrator user.
    Would appreciate your inputs on what am I missing?
    Thanks.
    Regards,
    Varun

    Hi Varun,
    Please change Document Area: ArchiveLink .
    Remove Archive link and change it to Document Management system ( DMS)
    Check the results and post the output.
    Regards,
    Deepak Kori

  • Hello, I am attempting to install Camera raw from a .zip file provided via a link provided by adobe for a Nikon D810. The .zip file unzips fine and I moved the files to the recommended folder. But the operation is failing

    I am attempting to install Camera raw from a .zip file provided via a link provided by adobe for a Nikon D810. The .zip file unzips fine and I moved the files to the recommended folder. But the operation is failing

    Can you describe what “the operation is failing” means?  What is happening and how is it different than what you expect?
    Also, what product are you trying to update manually, and do you have a link to the page of instructions, so we know what your attempting to do?

  • Hi  I am using iPhone 4s.ATT confirmed my iPhone is unlocked. I am india now and I am using a simcard provide by a service provider in india. I followed the following steps. 1.     Open iTunes on your Mac or PC and verify that you have internet connectivi

    Hi
    I am using iPhone 4s.ATT confirmed my iPhone is unlocked. I am in india now and I am using a sim card provide by a service provider in india.
    I followed the following steps.
    Open iTunes on your Mac or PC and verify that you have internet connectivity.
    Connect your iPhone using the dock connector to USB cable that came with your iPhone.
    Backup your iPhone.
    Erase the contents of your iPhone
    Restore your backup.
    Swap the old SIM card with one for the new carrier.
    Complete the Setup Assistant.
    I am getting the following message
    The Sim Card that you currently have installed in this iphone is from carrier that is not supported under the activation policy that is currently assigned by the activation server. This is not a hardware issue with iphone Please insert another SIM card from a supported carrier od request from this iPhone be unlocked by your carrier. Please contact apple for more information.
    Can some one please help with me on this.
    Regards
    Titto

    You are attempting to use the iPhone on a wireless provider that is not
    supported. You will have to work with them to resolve any issues or
    switch to a supported wireless provider. Which wireless provider are
    you attempting to use?

  • How to return "HTTP/1.0 401 Authorization Required" from OSB's Message Flow

    How can I return "HTTP/1.0 401 Authorization Required" header from OSB's Message Flow?
    Using of "HTTP Transport -> Authentification" is not possible, because I need flow condition. Transports Headers activity from design palette doesn't allow to send such headers.
    Practical usage: request for kerberos ticket by sending two headers: 401 and WWW-Authenticate: Negotiate...

    Can you briefly expand the use case for better understanding?
    HTTP Client---> Hand Shakes or what ever ----> HTTP Proxy (OSB )---> Pipeline----
    Philosophy behind pipeline is that it is designed to work on the request. Correct me if I'm wrong.
    What you are asking is ability to control the hand shake either in Pipeline or some way during proxy configuration. Unfortunately there is no configuration that is exposed for HTTP proxies in OSB to control that behavior.
    Manoj

  • CE10 ; Crystal_webcompserver : Log message: NT Authorization Required.

    Post Author: gjmoyer
    CA Forum: Administration
    On our Crystal Enterprise 10 server.  We are getting thousands of Warning messages logged to the Application event log from Crysal_webcompserver with description "Log message: NT Authorization Required."
    What are these caused from, and how to I resolve this?

    Post Author: edoco
    CA Forum: Administration
    Having the same issue here...
    The symptom was removed after restarting all services related to Crystal..
    Seems to happen every few weeks.. Still investigating the actual problem.
    gjmoyer:
    On our Crystal Enterprise 10 server.  We are getting thousands of Warning messages logged to the Application event log from Crysal_webcompserver with description "Log message: NT Authorization Required."
    What are these caused from, and how to I resolve this?

  • Initially stating No authorization required using Adobe.  When I try to change it so I can transfer downloaded books by my Nook e-reader it I get an error message stating the Adobe user name and password is associated with another computer.  What gives?

    When I set up Adobe reader on my computer to be able to download books from a library and then transfer to my Nook e-reader, I initially stating No authorization required using Adobe.  When I try to change it so I can transfer downloaded books by my Nook e-reader it I get an error message stating the Adobe user name and password is associated with another computer.  What gives?

    This is pretty surprising and wierd that even Reader 10.1.1 is crashing on your system. It works pefectly for me.
    Would it be possible for you to get the crash dump, and upload it, so that I can have a look at the same.
    Download PROCDUMP from <http://technet.microsoft.com/en-us/sysinternals/dd996900.aspx> and extract it to a folder, say, c:\temp\procdump.exe
    Open cmd prompt and type "cd c:\temp".
    Launch the browser and open the PDF.
    Open task manager, sort processed by name. Two AcroRd32.exe instances  should have been launched. Note the PID (a small integer like 5588) corresponding to the AcroRd32.exe with the higher memory usage; this is the process that must be crashing. Note this PID.
    On the cmd window, type "procdump -e -ma 5588 c:\temp\01.dmp" (replace 5588 with the actual PID of the process noted in Step 4). Procdump will now wait for the aoolication to crash. If it throws a EULA, accept it.
    Perform your steps to cause the crash.
    Procdump will have created a dump file at "c:\temp\01.dmp". Zip it up (since it will be 100s of MBs otherwise) and share with me.
    Thanks in advance for all your help
    Ankit

  • Which authorization required?

    Hi experts,
    I believe that I have 2 problems with authorization.
    In my web dynpro, I have implemented the preview PDF from SMARTFORM as taught in the tutorial below:
    http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/f0de1eb8-0b98-2910-7996-8a3c2fcf6785
    Also, I have also called another function BAPI_OBJCL_GETDETAIL somewhere in my web dynpro.
    However, the function is returning me a no authorization for function error. Whereas the preview PDF page shows a blank page (which is working fine on my developer ID).
    Can anyone help me with what are the authorizations required?

    above mentioned BAPI requires autority object 'C_KLAH_BKL' to be added to your profile. Check on this.
    Regards
    Manas Dua

Maybe you are looking for