Question about authentication scheme plugin parameter

Hi, 
Could anyone kindly tell me what the below quoted "password" means ? 
 validate_password userPassword="password" 
Is it the value of userPassword in my directory or just a parameter name that I should use when I use the HTTP form based call. It would be even great if there is an example. Thanks!

Hi Sino,
When the values from the form reach the authentication scheme (e.g. name1=value1&name2=value2&name3=value3), it selects the values it wants its plug-ins to process by passing them in the "creds" challenge parameter (e.g. creds: name3 name2). "password" is just one such parameter name passed to the plug-ins so that the value can be used to process authentication.
This value is used by the validate_password plug-in to bind to the user directory for authenticating the user who has been identified by preceding plug-in(s).
So both your guesses are partly correct - it is related to the HTTP form field and it is related to the userPassword attribute in your directory. Hope the explanation helps in understanding the caveats to the guesses. Also, it would help if you experiment with these parameters a little and observe the changes in behaviour and any errors displayed.
One other thing..shouldn't it be -
validate_password obCredentialPassword="password"
-Vinod

Similar Messages

Question about WListBoxComposite sample plugin

Hello everyone,
I have a palette based on the WListBoxComposite sample plugin, now I need to change it(or completely replace it ) cause of new requirement. I used to have constant number of fields or columns with variables number of records corresponding with those fields/columns in this palette, now I get the number of fields/columns in runtime . My question is what would be the best approach to implement this ? to be more clear of what I want to do consider to want to show the personal information fields like name, address,....(that you you get them in runtime from a database) and want to show this information for employees in each row.
Thanks,
Kamran

In your resource file you have a resource for the rows you put into the tree: >resource WLBCmpNodeWidget (kWLBCmpListElementRsrcID + index_enUS) >{ >> __FILE__, __LINE__, >< kWLBCmpListParentWidgetId, kPMRsrcID_None, // WidgetId, RsrcId >> kBindLeft | kBindRight, // Frame binding Place a frame (GenericPanelWidget) inside the this to contain the dynamic widgets. Now create resource type in the resource file for each type of widget you need in the line. At runtime you instantiate a widget for each field: >InterfacePtr<IControlView> iControlView ((IControlView*)::CreateObject(::GetDataBase(this), RsrcSpec(LocaleSetting::GetLocale(), kYourPluginID, kViewRsrcType, kYourWidgetRsrcID), IID_ICONTROLVIEW)); >iControlView->SetFrame(frame); // The frame is the place you want it inside the content panel >iControlView-> SetWidgetID(); // you need to calculate this also, as you don't know how many you will have >yourContentFrame->AddWidget(iControlView); // of type IPanelControlData which you can get in you TreeViewWidgetMgr If you dont want to use the resource files you can create it dynamically and set all the parameter through function calls: >IControlView* iControlView = (IControlView*)::CreateObject(kYourWidgetBoss,IID_ICONTROLVIEW); You can also use the kWLBCmpListParentWidgetId as a content frame for the widgets, but you then need to remember to take into account other "static" widgets you might have in the line.

Some question About title importer plugin

We are developing a title importer plugin for CS6, and have some question, hope forums could help me. Thank you very much.
1) Is there API to get title clip's in, out point in timeline ?
in imImageRec data structures, these is a in/out point, but it is trim in/out point, is not timeline in/out, how to get these point ?
2) Because we are also developing a subtitle importer for CS6, when user want to record the subtitle timecode, we hope we could control timeline play/stop, and get the playing/stopped callback, in same time, we could get the current playing position. But, it seems that these is no way to do this. I want to known, is there any plan to support these features in future ? Or, is there some work around methods to get these ?

I really appreciate your reply, I will look for VideoSegmentSuite to get the in/out point.
Q: Why we need timeline in/out of title clip ?
A: Our titler could do animation, when user strench title clip in timeline, clip's length will be changed, we hope we could scale animiation to fit the new length. ( I means animation will be slower or faster with new length), in imImporterImageRec, there is a in/out point and postion, but, we found they are not correct in sometimes, and SDK help PDF tell me there is a API bug in it, is it fixed or not ?
In another, in ImportImage API, we use (Rec->pos + Rec->in) / Rec->sampleSize to get real frame number for out title clip rendering when our title is imNoDurationNoDefault, we test it, it seems that it is right. But if our title is imNoDurationStillDefault, then Rec->pos and Rec->in and Rec->out are all based 90000+, and Rec->out was not right in some times (when we strench clip's outpoint in timeline), it is a bug or we missed something ? In this situation, we have to use (Rec->pos - Rec->in) / Rec->sampleSize to get the rendering frame number, it seems that it is right too. But, we could not use Rec->out, because it was wrong in sometimes.
New questions:
1) When we dragdrop our title files to timeline directly from windows explorer, Premiere will call imGetInfo8 (in here, we will allocate a private data for this clip), imOpenFile8, and there is no chance to call imGetPrefs8, so, when we close Premiere, imCloseFile will not be called for this clip, memory leaks for our private data. If we drag the title files to Premiere Bin firstly, then Premiere will call imGetPrefs8, imGetInfo8, imOpenFile8, there is no problem, imCloseFile will be called when we release this title clip.
So, my conclusion is: Premiere must call imGetPrefs8, else imCloseFile will not be called, I think it was a bug, isnot it?
2) We have a title template library (they are all based template title file), and, we use OLE dragdrop (COleDataSource->DoDragDrop), when we drag-drop these files to Premiere Bin/Timeline/SourceMonitor/TargetMonitor, there is a lots of memory leaks in oledobj2.cpp (microsoft source code files for COleDataSource), we are sure our code is correct, because if we dragdrop to our windows or other NLE (for example, EDIUS), there is not any problem. So, I guess, because we use MFC, and Premiere did not support it fully? Do you have see this problem before ? Do you have another suggestion to do these drag-drops ?
3) About to get sequence start timecode, we see a thread in forum which said there is new sdk headers, use them, we could get it through PrSDKSequenceInfoSuite. But its downloading link is broken, so, how to get new SDK headers? could you give me a new link to download ?
BTW, we are useing CS6 SDK Release2 + CS6, and will upgrade to 6.03 to test.
Thank you very much. and Sorry for these lots of questions, I am new guy in Premiere plug-ins developing.

Question about xml schemas and the use of unqualified nested elements

Hello,
I have the following schema:
<?xml version="1.0" encoding="UTF-8"?>
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
 xmlns="http://xml.netbeans.org/examples/targetNS"
 targetNamespace="http://xml.netbeans.org/examples/targetNS"
 elementFormDefault="unqualified">
 <xsd:element name="name" type="xsd:string"/>
 <xsd:element name="age" type="xsd:int"/>
 <xsd:element name="person">
 <xsd:complexType>
 <xsd:sequence>
 <xsd:element ref="name"/>
 <xsd:element ref="age"/>
 <xsd:element name="height" type="xsd:int"/>
 </xsd:sequence>
 </xsd:complexType>
 </xsd:element>
</xsd:schema>I am just wondering why would someone have a nested element that is unqualified? here the "height" element.
Can anyone explain this to me please?
Thanks in advance,
Julien.
here is an instance xml document
<?xml version="1.0" encoding="UTF-8"?>
<person xmlns='http://xml.netbeans.org/examples/targetNS'
xmlns:xsi='http://www.w3.org/2001/XMLSchema-instance'
xsi:schemaLocation='http://xml.netbeans.org/examples/targetNS file:/E:/dev/java/XML/WebApplicationXML/web/newXMLSchemaThree.xsd'>
<name>toto</name>
<age>40</age>
<height>180</height>
</person>

Don't worry about it.
There are two different styles of schemas. In one style, you define the elements, attributes, etc. at the top, and then use the "ref" form to refer to them. (I call this the "global" style.) The other style is to define elements inline where they are used. ("local" style)
Within some bounds, they work the same and which you use is a choice of you and the tools that generate the schemas.
A warning about the local style. It is possible to define an element in two different locations in the schema that are different. It will get past all schema validation, but it seems wrong to my sense of esthetics. With the global style, this will not happen.
So, how did this happen? Probably one person did the schema when it only had a name and age. Then, someone else added the height element. They either used a different tool, or preferred the other style. I'm aware of no difference in the document you have described between the two styles.
Dave Patterson

Question about comapring schema by toad

Hi all ,
I've tried to figure out what is this mean but i couldn't find the answer.
i've got a file that is a result of comparing bewteen two schemas by Toad.
there is something that i couldn't realize :
Object Name Object Type Parent Table (if any) Differs by
orders_units_fk Index orders visibility i couldn't understand what visibility means ?
i thought about index visible and invisible ,
so i was trying to check it like this :
select visibility from user_indexes where index_name = 'orders_units_fk';
I got the error
ORA-00904 -"visibility" Invalid identifier can someone please tell me what is this mean i'm stuck here.
Thanks In Advanced
Naama
Edited by: Naamas on 23:32 11/12/2012

Naamas wrote:
Hi
thanks for your response ,
i'm looking at my oracle version and its 10g and not 11g ,
i'll be glad if you'll give me the link of toad forum cause, i couldn't find it , Didn't look very hard then did you.
In TOAD, go to Help -> About and it tells you all about your version of toad and provides links to the website: http://www.quest.com
Or a simple google for "Oracle TOAD" would have got you to the quest website or the toadworld website. (Seems Quest is now owned by DELL.... never knew that)

Question about Authentication on item-level

If you set authentication for a page item, am I correct in assuming that it does get processed (i.e. the value in the item can be used for example in the where-clause in a query), but it just does not get displayed?

i mean a normal item on a page. For example a selectlist, or textfield.
In the app I'm currently developing, I have a few user levels. Normal users should only see their own records in a report, admins should be able to see all records.
So what I have for the admins, is a select-list with the usernames, so they can choose whose records they can see. A normal user can't see the select-list.
When a user logs in, I set the value of the select-list to their user-id (and the select-list displays the corresponding name, based on a LOV). The query which displays the report looks at the select-list to see for which user it must show records. So, when an admin selects a different username, it will show the records for that user. When a normal user logs in, he/she won't see the select-list, but the query does use the value of that select-list in the query.
Now what I want to know for sure, is that the select-list is always processed upon loading, and not that it's just a coincidence in this case that it's working.
I'm asking because if you check the help for the Authorization-option in the item, it says "Optionally select an authorization scheme which must evaluate to TRUE in order for this component to be rendered or otherwise processed."
From this I would think that it won't contain a value if the authorization is false (which would be in the case of a normal user).
I'm using HTML DB 1.6, by the way.

Questions about acrobat sdk plugins...

Can a plugin developed for adobe acrobat professional 9.0 extended with acrobat 9 sdk, run in adobe acrobat professional 8.0, 7.0 or previous versions?
I try to do that, and a error ocurs.
And the other one, is not about the plugin itself, but about an option of acrobat professional 9.0 extended . It's possible to edit a pdf, add annotations.. with acrobat professional 9.0 extended when the pdf is open in a browser view?
I try, but the options to do that were not available like "advanced editing".
Thks,
César

No. You must use the version of the SDK for the LOWEST version of Acrobat you wish to support.
A plugin is not limited between browser and stand-alone - you can do the same things in both.

Question about Windows Media plugin(s) for MBP

I like to listen to baseball games via Gameday Audio at MLB.com; however, it seems that I am unable to do so using my MacBook Pro because their service requires a Windows Media Player plugin for your web browser, and the WMP installer does not install one.
I tried installing Flip4Mac, but that's not universal yet, so I've come up empty. Any other suggestions as to how I can work around this problem and listen to the games?
Thanks in advance,
Crissy
MacBook Pro 2GHz Intel Core Duo Mac OS X (10.4.6) 1 GB DDR2 SDRAM

I can't get Gameday Audio to play on my MacBook Pro either. I've intalled the Flip4Mac patch (via Rosetta); the Flash plugin; Windows Media Player; Firefox for Intel-based Macs. I've tried opening Safari in Rosetta. I've had some success playing free video and audio from Major League Baseball in both Safari and Firefox. But whenever I log into the subscription audio service, it fails. Firefox tells me, "Additional plugins are required" but, when I agree to install them, it informs me that "no suitable plugins were found." For its part, Safari says, "Some content on this page requires an Internet plug-in that Safari doesn’t support. The application “Windows Media Player” may be able to display this content. Would you like to try?" I do try, but WMP is never up to the task: the rainbow spinner goes round and round and Force Quit confirms that WMP is "not responding." I'm invariably reduced to pulling out my old computer to hear the game. I've talked to MLB about this, and suspect that their stock advice for Mac users does not yet take into account Intel-based Macs. Do I have to wait on Flip4Mac to produce a patch specifically for Intel-based Macs. Can anyone recommend anything else?
MacBook Pro Mac OS X (10.4.6)

A question about Authentication Provider

I integrate OID with WLS, provide user information to BPM, but I find in BPM Identity Lookup window, it only search and use users in the first Authentication Provider.
I add real employees info in OID,now I need some virtual user in BPM process,I dont want to add them into OID.
From BPM support document e10226 Administrator' Guide for Oracle SOA Suite and Oracle Business Process Management Suite P104 6.8 Listing Oracle Internet Directory as the First Authentication Provider,I know OID must be the first provider in realm,but I know in Weblogic console authentication, it will use all providers from top to down. why BPM can only recognize the first provider? I think support document only says OID must be the first,not the only one.
From document e15176--Modeling and Implementation Guide for Oracle Business Process Management P394 bottom of the page, it says "select an application server,realm,and ....",but in the Identity Lookup window, the jazn.com is not my realm name,I think it's OC4J default realm name,but why ?

Any one who know this ?

A question about database schema when creating JClient Form

Sir,
I created a JClient Form application using the wizard, in which a JCLoginDialog was generated. Then I modified the JCLoginDialog.java file so that it works with JDBC instead of with the OracleAS JAAS Provider. My name is the database schama name, and I created the form using my name.
When I log in using my name, It is fine. But when my colleague log in using her name, it is failed. The error message said that the table is not found. My colleague has access of the related database table through a database role.
I think it is the schema problem when I create the model project. I do not know how to add the schema name before the table name, such as stephen.mytable .
Please help me. Thanks
Stephen

I have solve the problem. That was a mistake I made.
Stephen

Questions on Authentication, Security, and APEX_PUBLIC_USER

Hello,
I’m evaluating APEX and my DBA’s have some questions about authentication and database connections. I have audit tables in my schema (created using Oracle Designer) and I’ve noticed that APEX_PUBLIC_USER is the user recorded in my created_by and modified_by columns. I’ve read several posts about this expected behavior and its solution - (UPPER(NVL(V('APP_USER'),USER)). See:
Re: User in journal
Re: DB connection by apex_public_user or by registered schema name?
How can I store the user name, not APEX_PUBLIC_USER
I’m ok making the changes in my triggers, but my question is what is the consequence from the DBA’s perspective? If there are 100 users in my application and the DBA’s look at current database connections it will show 100 APEX_PUBLIC_USERs correct? What about any internal Oracle auditing? This is really my first true venture into web style programming. Maybe this is expected behavior.
I also noticed that there are 157 PUBLIC grants to objects in the FLOWS_030000 schema. This means that any DB account has access to these objects by default. Is this a security risk? I would have expected the objects to be granted directly to APEX_PUBLIC_USER. My company is heavily audited in both in an internal and a Sarbanes-Oxley (Sox) sense. This may not be a concern to everyone, but it may be a concern to us. How do other people explain/justify this?
Are we expected to not make DB accounts and only create users inside of APEX? I know APEX supports the DB authentication, but I haven’t seen any definitive “best practice” recommendations on this. I have looked at all the documentation here:
http://download-west.oracle.com/docs/cd/B32472_01/doc/nav/portal_booklist.htm
Is there more documentation with a better explanation than this?
Can anyone explain how APEX_PUBLIC_USER has no direct privilege on tables in my schema, yet it is the user recorded for DML changes?
I know this is alot of questions; we're just trying to get a better understanding of APEX before we make the commitment to begin using it.
Thanks for the help.
Message was edited by:
jabolen

This FLOWS_xxxxxx schema has enough privilege to do DML in my schema (probably why FLOWS_xxxxxx is locked). Is that about right?
Sort of. It has privilege to dynamically execute your DML (and other code) using your schema, so it is your schema that parses the code. (search: sys.dbms_sys_sql)
...enterprise-level identity management solutions...Is one example of that creating DB accounts? I assume others are SSO, LDAP, etc. Where can I read about the pro’s and con’s of these choices?
Good topic for another thread: Best tools for managing user populations (tens, hundreds, thousands, internal company vs. internet/public, etc.) One key factor is who's going to do the work and how does that fit with your business, e.g., user forgets password -> user calls help desk (24/7?) -> help desk accesses admin account and resets password...Will help desk admin use EM, Application Express admin app, SQL*Plus, OID admin, ...?
About authorization and roles, be aware that roles are useful in an Application Express environment only if you have a database user account for each application user (presumably named the same as the account the application user uses to authenticate, regardless of how the username/password lookup is performed, i.e., using the database account's password, LDAP, or something else) and your authorization code has enough privileges to check the current user's default roles, again the roles assigned to the database user account that corresponds to the application user name. This precludes the use of dynamically enabled roles. It also requires your application parsing schema to be able to access global views like dba_tab_privs. So, IMO, it's not the most streamlined approach unless you already have (or don't mind maintaining) a database user account for every named application user, a provision that may be unnecessary to support your authentication (vs.authorization) requirements.
About ref cursors, there wouldn't be any privileges problems - your application's parsing schema must have the privilege to execute whatever definer's rights packages are to be called and these packages, as you said, would do the DML.. As to other issues involving the use of ref cursors, we'd need to know more about your approach and how you want to define reports. I suggest you build a small prototype app and try it out.
Scott

Question about setting cookies and custom authentication

I have a question about setting cookies.
I have two different 'projects' in HTMLDB - we will call them App1 and App2.
I also have two different connection configurations setup in the DADs.conf file. - we will call them Connect1 and Connect2.
App1 is setup to use database authentication (no user is specified in the DAD) and uses Connect1. Once the user successfully logs in, we set a username cookie (this is a persistent connection).
We created a custom authenticatoin scheme for App2 - this scheme checks for the username cookie (set by App1). We would like for App2 to use Connect2 (HTMLDB_PUBLIC_USER is the default user specified and it uses connection pooling).
Is it possible to set a cookie from App1, Connect1 for App2, Connect2 - then redirect to App2 and pick up that cookie?
Here is an example of what we are trying to accomplish:
A user loggs into App1, we set a cookie, and the user is redirected to App2. If the cookie exists, we allow them access to the home page in App2, if no cookie, we redirect back to a 'Login Failed' page in App1. We don't want App2 to use the same database connection as App1 though, we need App2 to use connection pooling.
Is this possible? OR...Is there a better way to accomplish what we want to do?
This is an enhancement to an existing app. Our requirements are to use Database Authentication (setup where pass expires after 60 days or so, cannot reuse last 3 passwords, etc.) - which is already setup and being used by other applications in our organization. All of our users have accounts in the database. We don't want users to have a new username/pass - and we don't want to manage a separate group for HTMLDB apps.
The existing application uses HTMLDB's built in authentication - which uses database username/pass, and it uses connection pooling, but we cannot handle the pass expire stuff in it, unless there's something we're not seeing or understanding - at least that's how our DBA explained it to us.
Any help with this will be appreciated so much. I can send you the code we have if needed.
Thanks!

Same problem here. I have so many problems with this remote app. Is there an iTunes API? I would like to write my own remote app that actually works.

Questions about CIN tax procedure choice and pricing schemas

Hi all,
I have to implement SAP on a Indian company and I'm verifying all particularity about this country (in particular tax procedures and the great number of differents tax conditions used).
I have two questions about tax procedures and pricing schemas. Every feedback about thse points will be appreciated.
a) To choose tax procedure TAXINN or TAXINJ which are the elements that I have to consider?
I have read lot of documentation about CIN implementation and Iu2019m oriented to choose TAXINN schema, but If possible I would to understand better which are on behalf of one choice or another.
b) To define pricing schemas for India, after check with local users and using examples of documents (in particular tax invoice) actually produced, I have understood that taxes have to be applied on amount defined starting from price list, minus discounts recognized to customer plus surcharges eventually to bill (packing, transport, etc.).
Itu2019s correct for any type of taxes that tax amount is calculated on u201Cnet valueu201D defined at item level or there are exceptions to this rule?
Thanks in advance
Gianpaolo

hi,
this is to inform you that,
a) About point 1 I know the difference between the 2 tax procedures (conditions or formulas). I also have read in others post in the FORUM that TAXINN is preferable. So I would to understand which are the advantages to choose instead TAXINJ. There are particular reasons or it'a only an alternative customizing setting?
a.a. for give for posting the link : plese give me the advantages of TAXINJ and TAXINN
CIN - TAXINN and TAXINJ
b) About point 2, to define which value has to be used as base amount to calculate taxes isn't a choice, but is defined depending by fiscal requirement of the country, in this case India fiscal requirement. I know that, as Lakshmipathi
write as answer on my question, exception could be, but it was important for me to understand if I have understood correctly the sequence of the pricing condition in the schema in "normal" situation.
b.b. you can create your own pricing procedure for this and go ahead.
hope this clears your issue.
balajia

The HTTP Request is unauthorized with client authentication scheme negotiate - MDS Excel Plugin error

Hi,
Some users in my company are experiencing a strange issue when connecting to our MDS server using the MDS Excel plugin. They receive the error message:
"The HTTP Request is unauthorized with client authentication scheme negotiate. The authentication header received from the server was "NTLM,BASIC real="DOMAIN NAME IWA"
They are receiving this error when first trying to connect. For some reason they only receive this error when connected to the work network via the VPN. They don't receive this error from within our network.
Does anyone know what might be causing this issue and how to resolve?
Many Thanks,
Phil

Try the following links and see if it helps:
https://support.microsoft.com/en-us/kb/896861/
https://social.technet.microsoft.com/Forums/projectserver/en-US/912c7179-8858-4c48-a71d-d9a21ff10a1b/the-http-request-is-unauthorized-with-client-authentication-scheme-ntlm-the-authentication?forum=project2010custprog
-Nithesh Shetty Software Engineer, C & E -> IMML -> MDS, Microsoft.

A few questions about the design of the scheme

Hello, all!
I want ask some question about design of the scheme.
1) If i store info about user (for example: /Smith/Bob - /phone values{+1 964 258 46 52}), i can request information by user (input parameters: /Smith/Bob - /phone, output:+1 964 258 46 52), but if i want get username by phone i must generate in store second string /19642584652 values{Smith Bob}. But I must duplicate any string - very prodigally. Are existing some work aruond?
2) if i want store some string with different minor key i put: ( /Smith/Bob - /phone, /Smith/Bob - /image, /Smith/Bob - /adress), but i already get duplicate date. Are existing any compressin major`s key? If yes - how it works
3) Are existing in Oracle NoSQL something like secondary index? If exist - how it works?
4) If i want get value by major key, im use get function(for example /Smith/Bob - /phone). How works searching algoritm? What mathematical basis of search?

>
So, some a few clarifying questions.
1) Request comes from the client(to cluster). It identifies the major key. And any rep group understand: contained in it is this line?
2) If contains - they use b-tree map to find the right key (as local index in Oracle DB).
Is it correct?
>
No. Please read the doc and the other forum threads. They explain this issue.
>
Can i use any different algoritm to search, different indexes(function based) for example (on step 2)?
>
No.
when the expected release of this option?Oracle employees cannot talk about future release dates and contents.
What algorithm used to compress the prefix of the key. And how it work`s.If you're interested in the implementation details you can read the BDB JE documentation on key prefixing and the BDB JE source code. See com.sleepycat.je.DatabaseConfig.setKeyPrefixing.
http://docs.oracle.com/cd/E17277_02/html/index.html
--mark

Question about authentication scheme plugin parameter

Similar Messages

Maybe you are looking for