Question - EM and OSB keystore configuration for encryption

Hello everyone,
I've been configuring EM and OSB's security key provider by using the manuals ( [Setting keystores|http://download.oracle.com/docs/cd/E14571_01/web.1111/b32511/setup_config.htm#WSSEC1970] ) but I came up with a problem. In both configurations the tools require an encryption key, however in my case I receive soap requests with X.509 client certificates in them (and so their public, encryption key). So, potentially every request will have a different encryption key, not a single hard one like the configurations require. How should I configure this scenario??
Thanks !

short answer: Using a policy will force the wsdl to include the server's public key to be used for message encryption. So the incoming message should have a Security element in its header and is encrypted with the server's public key. Since the server has the private key, it can decrypt the message.
soapUI ( 3.5 ) gives a good view of the client side of the process.

Similar Messages

Idoc Communication Configurations and Proxy Runtime Configurations for PI

We have a fresh PI 7.1 system, fresh ECC6 system, and an existing 4.6C system.
is there any blog/doc with step-by-step instructioins/screenshots for following tasks:
1. Configuring Abap proxy runtime between ECC6 and PI 7.1 Systems, for using sproxy from ECC6.
2. Configuring for IDOC communication between ECC6 and PI 7.1
3. Configuring for IDOC communication between 4.6C system and PI 7.1
It involves creating of sm59 rfc destination creations, usage of idoc related transactions on PI system and the other system.. I searched on sdn/forum, but it seems to be addressing specific issues faced.
Pls suggest any step-by-step instructions docs/blogs available.
thanks in advance.
Madhu.

Madhu,
Refer the links below:
1. /people/vijaya.kumari2/blog/2006/01/26/how-do-you-activate-abap-proxies
2& 3 :
https://wiki.sdn.sap.com/wiki/display/XI/SAPR3%28Idocs%29ToXI--Steps+Summarized
http://www.riyaz.net/blog/xipi-settings-in-r3-partner-system-to-receive-idocs/
/people/swaroopa.vishwanath/blog/2007/01/22/ale-configuration-for-pushing-idocs-from-sap-to-xi
https://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/877c0d53-0801-0010-3bb0-e38d5ecd352c&overridelayout=true
http://www.riyaz.net/blog/beginners-guide-to-ale-and-idocs-a-step-by-step-approach/
Also, I think u hv just started learning XI ..so following link might help:
http://wiki.sdn.sap.com/wiki/display/NWTech/QAforPI-Onestopforall%28Part-1%29

Releted to h\w and s\w configuration for SAP B1

HI
please tell me exat hardware and software configuration for SAP
B1
becouse i am going to implement on (bled server) so is it possible?
please replay with configuration
regards
sandip

Hi,
If you are authorize to sign in with Service partner portal you can download the sizing guide thru' the following link. You need S-user id (given to partner)
You can down load sizing guide for B1 vesion 2005 X version from the Document resource center.
https://websmp103.sap-ag.de/~form/sapnet?_SHORTKEY=01100035870000706510&_SCENARIO=01100035870000000183&_ADDINC=011000358700001192682007E&
Regards,
Venkatesan G.

SSL and custom domain configuration for cloud service

Hi,
I am doing custom domain mapping and SSL configuration for a cloud service web role. Another important aspect is Cloud service web role uses ADFS in between for authentication.
I have custom domain mapped, SSL uploaded on cloud services Certificates
tab in management portal, certificate .pfx and chaining certs .CER are added as below -
<Certificate name="UATCert" thumbprint="A" thumbprintAlgorithm="sha1" />
<Certificate name="Certificate1" thumbprint="B" thumbprintAlgorithm="sha1" />
<Certificate name="Certificate2" thumbprint="C" thumbprintAlgorithm="sha1" />
I see these certificates getting added properly to Azure cloud service web role instance VM.
The problem is, when I access the custom domain,
https://mysite.com/default.aspx in the browser ultimately after ADFS login I see
https://cloudservice.cloudapp.net/default.aspx. My understanding is, cloudapp.net should not be seen in the browser to the client. Also I keep getting error of certificates stating "There is
a problem with this website’s security certificate" when browser shows cloudapp.net url.
How can I avoid display of cloudapp.net in browser and show only custom domain Url. Also how can I avoid this certificate error ?
Thoughts?
http://sanganakauthority.blogspot.com/

Hi kunal,
Based what you described, I understand that you want to use the custom domain for cloud service web role and apply azure active directory authentication to the web role application.
>>>The problem is, when I access the custom domain,
https://mysite.com/default.aspx in the browser ultimately after ADFS login I see
https://cloudservice.cloudapp.net/default.aspx.
As for above issue, I think you should make sure you have registered the web application in azure AD both "SIGN-ON URL" and "Reply URL" are
https://mysite.com/default.aspx
>>>Also I keep getting error of certificates stating "There is a problem with this website’s security certificate" when browser shows cloudapp.net url.
Try to upload a valid certificate (provided by CA) to cloud service for your custom domain.
Best Regards,
Fuxiang
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place. <br/> Click <a
href="http://support.microsoft.com/common/survey.aspx?showpage=1&scid=sw%3Ben%3B3559&theme=tech"> HERE</a> to participate the survey.

OSB / RMAN configuration for recovery area backup

Hi
I am having trouble performing a recovery area backup to tape.
Current config
Media server - attached tape library (OSB installed as media server, admin and client - Contains RMAN Repository) - configured as per guide. I can see the library tapes and have tested an OSB filesystem backup to tape which was fine, this was done from the OSB GUI.
Server 1 - databaseA, DatabaseB (OSB client installed) .
ZFS device - Shared storage where the FRA for DatabaseA belongs. All databaseA backups go here (currently databaseA is running in nonarchivelog mode).
I have set the tape details for databaseA, done a backup to the FRA but the backup recovery area to tape backup just hangs, no real errors and the job list through the obtool and list the job it always has state as 'retryable', I am wondering if I have missed some configuration somewhere? I am using Grid control for this.
I did have a couple of RMAN messages tried to resolve this as per some metalink notes to no avail, I am assuming this is causing the problem? Or am I missing something else?
specification does not match any archived log in the repository
specification does not match any datafile copy in the repository
Can anyone help?

Rest the times on the servers and now get the following errors:
RMAN-00571: ===========================================================
RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
RMAN-00571: ===========================================================
RMAN-03009: failure of backup command on ORA_SBT_TAPE_1 channel at 10/28/2011 16:22:55
ORA-19506: failed to create sequential file, name="16mq8bjj_1_2", parms=""
ORA-27028: skgfqcre: sbtbackup returned error
ORA-19511: Error received from media manager layer, error text:
shmcheck: obscheduled reports that job 'oracle/16.1' has terminated with status 'failed'.
The action at time of failure was 'wait_for_resource'.
The error message was 'unknown'.
exit;

I can not remmember my security question answers and when I ask for changing the answers there is no support email to my email address

I have charged my account with a gift card. but when i am to use it the app stores asks for security questions. i dont remember the answers and when I ask to send me a supportive email there is no answer. 25 USD is blocked usefulness in my account. please help me.

You've checked the spam folder as well as the inbox on your rescue email account, and tried clicking the reset link again ? If you still don't receive it then you will have to contact Support in your country to get the questions reset.
Contacting Apple about account security : http://support.apple.com/en-us/HT5699
When they've been reset check that you've spelt your rescue email address correctly for potential future use : http://support.apple.com/en-us/HT201356

This is oceans804, I sent my question earlier and set up account for your response, but get msg from you that something was wrong.

''Your question is over here - https://support.mozilla.com/en-US/questions/829698''
You sent email to my account and I clicked the link you sent but your msg. indicated a problem and that you didn't set up my account.

I'm waiting for your response to my question.

Video Card and Video Card Configurations for MacBook Pro

Does anyone know where I look to confirm which video card is in my MacBook Pro and also examine the current configurations and possibly look at configuration values for the video card.
I'm kind of new to Mac, but on the Windows world I would right click on the screen and then navigate to the Advanced Video card configurations. Is there something analogous in the Mac world?
Thanks again.

Hi Jason,
use the System Profiler app from the Applications/Utilities Folder to 'examine' the insides of your MBP.
You can also click on the Apple Icon in the Top Menu, choose About This Mac and the the More (Further) Informations button. (I have a german OSX...).
The only avaiable configuration options are found in the System Preferences (Display and Energy Savings).
Have Fun
Stefan

QoS Configuration for NME-AIR-WLC

Hello,
I have a question on the correct QoS configuration for a VoIP deployment. I have followed the steps referenced here but have two questions..
1) The last recommendation in the list is to set DCA channel sensitivity to High to avoid changes during business hours. I think this should be Low? The manual states "Low—The DCA algorithm is not particularly sensitive to environmental changes."
2) The recommendation is to trust dscp on AP uplinks and to trust cos on the WLC uplink. However I can't find any configuration guidelines for configuring QoS if the WLC in question is an NME hosted in a 2921.
2a) The link between the switch and the 2921 is an 802.1q trunk so should I trust cos on this link rather than dscp?
2b) What configuration should be on the 2921? Create a policy-map and apply it to the uplink port?
2c) Should there be a service policy assigned to the In1/0 interface for the WLC itself?
Any thoughts appreciated.
Thanks,
Dave

Well I appear to have answered question 2 after I stopped being lazy and did some packet captures.
No configuration required on 2921 as packets captured from In1/0 and Gi0/0 show correct DSCP markings on RTP and SCCP packets.
Would still be interested to know on question 1 though.

JDeveloper and its IntegratedWeblogicServer configuration

Hello
When we create a new domain in Weblogic (not Integrated with JDeveloper) there are some default configurations for example there is a default JMS servers
and some default configuration for JMS Module , JMS resources
But in default domain of JDeveloper integrated WeblogicServer there aren't these configurations
Now my question is how can I create these default configurations or import them from another domain (for instance from a domain that not integrated with JDeveloper)
I'm new in J2ee and Weblogic it's hard for me to creating them manual
thanks

You might want to ask this on the WebLogic forum - might have something to do with WebLogic Templates.
Note that you can access the console for the integrated WebLogic at http://localhost:7101 weblogic/weblogic1

SAP DMS - How to do an external DMS configuration for the existing system ?

Hi All.
Greetings.
Request help and understanding.
Am new to the world of SAP. And request SOME clarity for understanding of DMS.
We are wanting to put an external DMS server and wish to configure for the same.
So that the load on the production SAP R/3 database is reduced.
We are now wanting to test the same on Dev environment.
From SDN Link :
I understand that :
DMS basically has a content server. which stores documents.
That can be accessed through Web, SAP R/3 Gui , SAP Portal.
I have gone thro various links and the following links i have found to be informative and helpful :
http://help.sap.com/saphelp_erp60_sp/helpdata/en/c1/1c31a243c711d1893e0000e8323c4f/frameset.htm
http://wiki.sdn.sap.com/wiki/display/PLM/DMS+Customizing
http://help.sap.com/saphelp_nw70/helpdata/en/59/fba637fcf7dc39e10000009b38f8cf/frameset.htm
However, would like to know the following because am not getting the clarity :
1) Is there any supported platform / compatibility guide for DMS ?
if yes, can someone send me the link?
2) We have oracle 11g as our for SAP R/3 backend.
Windows 2003 server 64 bit system.
When i check the system status on the dev server of sap.
It says. ECC 6.0 Rel 7.00 update 20 (hOpe am reading it correctly)
After much search on the SMP site,
we finally discovered and downloaded the DMS software for unicode and / 64 bit.
Which we saw under the maintenance components separately seen for DMS 7.0
Now for this DMS content server which we would like to make it external for storage of documents -
do we need to have a separate database for this purpose as a repository.
If i run a setup of DMS - will that automatically install any default repository for this or
will it allow me to choose any other repository for the same ?
Can anyone advise on this.
Because this link says content server is based on Instance of MAXDB : http://help.sap.com/saphelp_nw70/helpdata/en/59/fba637fcf7dc39e10000009b38f8cf/frameset.htm
3) I read some thing like this on some of the SDN links :
P40 - Integration of DMS
P62 - R&D Document Manage¬ment and Workflow
P71 - Document management
What are they referring to.
4) We would be accessing these thro web, gui, customised portal.
This content server configuration is a bit confusing.
5) Is SNC configuration required to be done for the separate DMS server setup.
If yes, how to do that ? any configuration link for that please ?
Can anyone advise on the things to do.
Steps to do.
What all are the pre-requisites to check, before we start the set up of DMS.
Can anyone help me understand this whole thing regarding the DMS installation and configuration.
Step-wise.. from the start to end.
Because it gives me a lot of uneasiness without having everything in place before we could say we could start the whole process of configuration / installation.
Many thanks for your help in advance.
Wishing you a happy and relaxed weekend.
Kind regards
Indu

Thanks christoph & pradeep kumar.
did a few more research and atleast have come to understand that.
DMS server installation has content server which works only with MAXDB.
So my understanding is correct.
And what we see as Easy DMS is a client installation.
which probably i would look at at a later stage.
Found this link to be a little more informative :
http://www.sapfans.com/forums/viewtopic.php?f=12&t=330558
I really wish. That life were to be so easy. To call a consultant and finish it off
Wishful thinking
thanks and cheers
indu

ERROR: user is not configured for keystore 'service_ssl'

hi experts:
System environment:
pi7.0 j2ee sp09
ECC6.0 patch level11
Here is my scenarios..
ECC6.0-->(IDOC)XI(CIDX)--
>External system.
External system-->(CIDX)XI(IDOC)--
>ECC6.0
1.we have got there certificates from external system (rootCA.DER,intermedia.DER,Server.DER), imported the 3 certs files to TrustedCAs view using VA tool after we configured the SSL enable.
2.We generated the CSR file and got the response from CA. we import the CSR response to SERVICE_SSL service
3.I have assigned the role(keystoreadministrator) to user(PIAFUSER,PIAPPLUSER) in security provide service.
4.I configured the IR and ID for the first sceniro. I Selected the "service_ssl" view and "TrustedCAs" view in received agreement in ID, and selected the "service_ssl" view in comunication channeland. actived all of them.
issue :
as soon I trigger the message to external. It is OK in monitor for processed XML Message.
BUT I got the error message in runtime workbench/adapter engine/communication channel mornitoring.
Channel Name: Buyer_Send_OrderChange
Receiver Agreement: |com_sap_abap_r3_200|Sell_elemic|CIDX_E45_20_seller|OrderChange
Security Settings > Current certificate configured for signing:
ERROR: user is not configured for keystore 'service_ssl'
Security Settings > Partner certificate configured for signing:
ERROR: user is not configured for keystore 'TrustedCAs'
Thanks!!.

The question have been solved ..
thanks!
xixi

Oracle hardware and storage solution configuration questions

Hi all,
I am configuring hardware and the storage solution for a project and am hoping to have some questions answered about using Oracle as the storage solution.
The current setup will have 2 Dell NX3100 NAS gateways each with dual quad core processors, 24GB of RAM, 12x2TB data disks, and running Windows Storage Server 2008 64bit as the OS.
Will also have direct attached storage of 2 Dell PowerVault MD1200 disk arrays, each disk array with 12 x 2Terabyte SAS disk drives giving a total of 36TB of storage space for each NAS Gateway.
Based on this information, is there any problem with two Oracle Standard Edition installation (1 per NAS) holding up to 36TB of data (mostly high res images) in this hardware configuration?
Does Oracle have a built in solution for replicating data between the 2 NAS heads and down to the disk arrays? Where the application sever will write to one of the NAS+disk arrays and then that data is written from the first NAS to the 2nd NAS+disk array? Currently I've used DoubleTake in other projects but am wondering if Oracle has something similar that is built in.
Finally, will Backup Exec Oracle agent work with this configuration for backing up the data to a Dell PowerVault ML6020 Tape backup device?
Thanks in advance for any insight.

Hi,
Does Oracle have a built in solution for replicating data between the 2 NAS heads and down to the disk arrays? Where the application sever will write to one of the NAS+disk arrays and then that data is written from the first NAS to the 2nd NAS+disk array? Currently I've used DoubleTake in other projects but am wondering if Oracle has something similar that is built in.NAS - I still doubt during the network issues (In case of RAC - all nodes would get afftected), I would not suggest certainly for this. Let the other experts reply back.
- Pavan Kumar N

OER Atrifacts Store Setup and Configuration for CVS.

Hello,
My question is related to proper configuration of a CVS based Artifact Store in Oracle Enterprise Repository.
I've attempted to configure a CVS Artifact Store from within OER's Asset Editor (as described on page 27 of the OER Configuration Guide & pages 92-93 of the OER Admin Guide.) I have also ensured that this new Artifact Store is selected in the dropdown for the Submission Upload Artifact Store system setting on the OER Admin page. However, my configuration settings for the Store appear to be incorrect and I haven't found a CVS example that has been thorough enough to infer the proper settings.
So I'm hoping someone can assist me who has been through configuring a CVS Artifact Store for OER. I'll try to provide detailed information below with the hope that it may be of assistance.
First, analogous CVS settings that are configured for my standard CVS plug-in in Oracle Workshop. These settings are for the pserver protocol, but I think they will provide some value to someone who has experience in configuring a CVS Artifact Store.
The standard Eclipse CVS plug-in settings for our enterprise repository location:
Connection Type: pserver
User: sampleuser
Password: Pa55wd
Host: dev003
Repository Path: /cvs/Integration
This translates to repository location --> :pserver:sampleuser:Pa55wd@dev003:/cvs/Integration
(Which is the root of our enterprise CVS repository)
Now…within this repository location above there is a module (Development/OER-POC) that is located in:
/cvs/Integration/Development/OER-POC
…and checked out into a project called "Sandbox" located in the default workspace in Oracle Workshop.
Additionally, within the organization we also have HTTP access to CVS. This previous example XSD I just mentioned has an HTTP URI of:
http://dev003:8080/viewcvs/viewcvs.cgi/Development/OER-POC/src/schemas/ExtOfAddrRef/v1/ExtOfAddrRef.xsd?cvsroot=Integration
Now as I have attempted to properly set up the configuration for the OER Artifact Store I have "translated" the above information into the following entries on the Artifact Store setup screen:
Name: CVS Enterprise Store
Type: Raw SCM
Hostname: dev003
SCM Location: Integration (??? Not sure if this has been inferred correctly. If not what should be specified here.)
SCM Type: CVS
Download Path URI Suffix: cvsroot=Integration (??? Not sure if this correct based in previous information?)
Download Path URI: (??? Not sure what should be specified here. I have inferred several logical options but they have not worked.)
Finally, when I referenced page 62 of the ORE Core Registrars Guide PDF the "Additional Development documentation" link (http://devwiki.flashline.com/index.php/B02831) states:
• "All files from an SCM will be URL addressable. The SCM (or a third party) must provide a way to get a particular file based on a URL. In other words, we are not going to use any client libraries to write code that will retrieve us a file from an SCM. "
• "Added concept of a 'download path' to an artifact store. For example, consider our development environment. Eclipse will have SCM information (i.e. cvs.flashline.com), eclipse/cvs project information (i.e. projects/framework/modules/com.flashline.geneva.rbac), and file/cvs file information (i.e. /code/com/flashline/geneva/rbac/base/RoleContextPersistBroker.java?rev=1.66). Using this info, a fileinfo's uri can be set. The artifact store will then allow us to specify a download base path such as http://cvs.flashline.com/viewcvs/viewcvs.cgi/."
To conclude my questions are:
1) Based on the comments in the Registrar's Guide it seems clear that the intent of an Artifact Store is purely for the support of downloading the physical artifact that corresponds to an OER asset. I would conclude that "Raw SCM" based Artifact Stores do not intend to support direct check-ins for the various SCM systems. (rather assets/artifacts in Eclipse would be manually checked in from within the IDE environment). If someone could confirm whether this is correct that would be much appreciated.
2) Based on the information I supplied for the example enterprise CVS repository...what would the appropriate settings be for these fields on the Artifact Store setup screen:
a) SCM Location
b) Download Path URI Suffix
c) Download Path URI
3) Since the "CVS" SCM Type does NOT specify fields for username and password (unlike when you select other potential SCM Types in the Store setup screen); how should one handle credentials in CVS repositories?
Thanks in advance to any assistance.
~Todd

Hello user642477,
I'm facing the same problem.
It seems to me that the Oracles's guide line don't give enough information. I'll try to fixed it and whether I'm able to do so far I'll be in touch...
By the way, how could you browse to the link: http://devwiki.flashline.com/index.php/B02831? When I try it so a page cannot be displayed message is displayed.
Regards
felipe

Problems Oracle 9iDB and ASO Configuration for Cybersafe

Oracle 9iDB installation on Solaris with ASO option
Objective
My objective is to configure Oracle 9iDB, Release 9.0.1 ASO on Solaris for external authentication using Cybersafe ActiveTRUST, which is a Kerberos, based authentication product.
Question
Getting ORA-12641: Authentication Service failed to initialize when trying to connect to Oracle 9iDB using sqlplus from a Oracle 9i Client machine, when ASO is configured for Cybersafe authentication on both Oracle 9iDB and Oracle 9i client
Can anyone help me setup Oracle 9iDB and Oracle 9i client for ASO using Cybersafe Authentication?
Environment
1. I have a Solaris box as my Oracle 9iDB server
2. I have an NT Server as my Authentication server and Oracle 9i Client.
Installation Procedure
I installed as per the steps given in the doc, Oracle Advanced Security Administrators Guide, Release 9.0.1
Authentication Server / Oracle Client setup (NT Server)
I installed on the NT Server the following
1. CyberSafe ActiveTRUST 4.0 Security Server on the NT Server, which acts as an Authentication server.
2. CyberSafe ActiveTRUST 4.0 Security Client
3. Cybersafe Application Security Toolkit (GSS runtime libraries) as needed by Oracle ASO setup procedures.
4. Oracle 9i Client, custom installations with ASO option.
Oracle 9iDB Server Setup (Solaris Server)
I installed on the Solaris Server the following
1. CyberSafe ActiveTRUST 4.0 Security Client
2. Cybersafe Application Security Toolkit (GSS runtime libraries)
3. Oracle 9iDB server, custom installation, with ASO option selected.
Installation of all the above components is successful.
Note: Installation of Oracle 9iDB server with ASO option never prompted me to choose a Authentication mechanism like Cybersafe, or Kerberos or Radius etc..,
Note: Oracle 8.1.7 DB installation on NT actually prompted for Authentication mechanism selection.
ASO Configuration:
I configured ASO on the Oracle server and client side as mentioned in chapter 5 of Oracle Advanced Security Administrators Guide, Release 9.0.1
I created an external user in Oracle, [email protected] as mentioned in http://download-uk.oracle.com/otndoc/oracle9i/901_doc/network.901/a90150/1004747
I configured the NT server, Oracle 9i client for ASO using Net8 Assistant and I have the sqlnet.ora file.
ASO Problems:
Once I have configured both Oracle 9i client and 9iDB server for ASO, I am not able to log in to the database using sqlplus /@cybr.
It returns with an error ORA-12641, saying Authentication Services Failed to Initialize.
I could not get much help from questions posted on metalink on ORA-12641.
It looks like Solaris 9iDB could not recognize cybersafe even though, Cybersafe is listed as one of the installed adapters, when I ran # $ORACLE_HOME/bin/adapters. From this, it looks like Cybersafe adapter is linked to ASO.
Oracle Server is not able to initialize authentication services and call the authentication server at all.
Can anyone help me setup Oracle 9iDB and Oracle 9i client for ASO using Cybersafe Authentication?

The problem has been resolved after providing cn=orcladmin instead of orcladmin for the OID user admin user. Now the overall sso solution is working fine with ADF applications.
Regards,
S R Prasad

Question - EM and OSB keystore configuration for encryption

Similar Messages

Maybe you are looking for