Role names in 8.1 with '-' characters

role names with '-' in the middle in DDs worked in 7.0 but I can't deploy
same applications in 8.1. I get the following exception:
Any ideas?
Thanks
[weblogic.entitlement.data.EnCreateException: Character '-'not allowed.].>
<May 13, 2003 4:33:32 PM EDT> <Error> <HTTP> <BEA-101199> <Could not deploy policy
for resource: type=<url>, application=_appsdir_dfc_ear, contextPath=/dfc, uri=/oem/product/*,
httpMethod=POST.
weblogic.entitlement.data.EnCreateException: Character '-'not allowed.
at weblogic.entitlement.engine.EEngine.setResourceEntitlements(EEngine.java:775)
at weblogic.security.providers.authorization.DefaultAuthorizationProviderImpl.deployPolicy(DefaultAuthorizationProviderImpl.java:276)
at weblogic.security.service.AuthorizationManager.deployPolicy(AuthorizationManager.java:835)
at weblogic.servlet.security.internal.ResourceConstraint.<init>(ResourceConstraint.java:128)
at weblogic.servlet.security.internal.WebAppSecurity.setConstraints(WebAppSecurity.java:238)
at weblogic.servlet.internal.WebAppServletContext.prepareFromDescriptors

I believe you need to specify your application name "/webapp/myservlet"
          Joe wrote:
          > I am trying to configure a servlet in my 81 app. I have it under my web app root
          > under a folder
          > as follows
          >
          > /approot/folder1/myServlet.java.
          >
          > It is compiled also in the project under
          > \sources\App\.workshop\output\AppWeb\WEB-INF\classes
          >
          > In web.xml I have the following
          >
          > <servlet>
          > <servlet-name>myServlet</servlet-name>
          > <servlet-class>folder1.myServlet</servlet-class>
          > </servlet>
          >
          > <servlet-mapping>
          > <servlet-name>myServlet</servlet-name>
          > <url-pattern>myServlet</url-pattern>
          > </servlet-mapping>
          >
          > When I call my servlet from my jsp as follows I get a 404 page not found error
          >
          > response.sendRedirect("/myServlet");
          >
          > What is wrong. Please help soon. I need to get this in production today.
          >
          > Thanks

Similar Messages

Role names with spaces (6.1 to 8.1)

Hi All
I'm working in an organization that has group and role names within their LDAP
repository such that the group and role names contain spaces. Hence, for example,
within a web.xml file lines like the following exist:
<role-name>Some Role Name</role-name>
This has worked without problem in Weblogic 6.1 but given some prelimanary work
within 8.1 we are noticing that Weblogic 8.1 does not appear to like spaces within
the <role-name> element.
Is this just the way it is with Weblogic 8.1? Or is there a way to continue to
use role names with embedded spaces within Weblogic 8.1?
Thanks,
Rob

"Peter" <PeterB> wrote:
>
"Rob" <[email protected]> wrote in message
news:3f57d329$[email protected]..
Hi All
I'm working in an organization that has group and role names withintheir
LDAP
repository such that the group and role names contain spaces. Hence,for
example,
within a web.xml file lines like the following exist:
<role-name>Some Role Name</role-name>
This has worked without problem in Weblogic 6.1 but given some prelimanarywork
within 8.1 we are noticing that Weblogic 8.1 does not appear to likespaces within
the <role-name> element.
Sounds like a bug. File a support case.
Hi,
A workaround exists :
1 - in web.xml, update your role-name element by replacing spaces with "_"
2 - in weblogic.xml, add :
<security-role-assignment>
     <role-name>Some_Role_Name</role-name>
     <principal-name>Some Role Name</principal-name>
     </security-role-assignment>
Regards
Christophe

Cannot edit any roles in CUP5.2 due to "Enter a valid Role Name" error

We are running CUP 5.2.
I am having a problem with our Roles after they were uploaded into CUP; I cannot make any changes to the Role Details because CUP returns an error stating that our Role Names are invalid.
First I uploaded the roles (I continued to receive errors when trying to use the template, so I did them by uploading with the "Selected Roles" option).
Once they were uploaded, from the menu, I select: Roles --> Search Role and then I choose a role from the resulting list. When the next screen appears (the "Role Details" screen), I added all of the respective details (Business Process, Sub-Process, Detailed Description, Role Approver, Functional Area, etc.). When I pressed the SAVE button, I received the following error:
Please correct the following errors:
Please enter a valid "Role Name". Only Alpha-numeric, Space or Underscore characters are allowed
So I realize what the problem is - the "Role Name" field is automatically populated with our security role name as it exists in our SAP system ... and because our security roles all begin with Z:, it does not follow the CUP naming convention.
I'd like to just update the "Role Name" field but when you are in the "Role Details" screen, the "Role Name" field cannot be edited.
I saw the "Export" button and used that, in an attempt to edit the file to replace each occurence of Z: with Z_, and then upload it again.
So I updated the file accordingly, and then did an upload, selecting the "Overwrite Existing Roles" box.
It returned a successful message:
Import Status: 133 successfully imported out of 133 records found
Yet, when I go back to the list of roles, the roles still exist as Z: instead of Z_ so I still cannot edit any of the roles to add the required details ... has anyone had a similar issue and know how to work around this?
Thanks!

Hello Alpesh,
Thank you for replying!
I had already tried to export the roles and replaced the Z: with Z_ before creating this message, but the upload attempts failed due to the explanation above. But this time, I followed your (good) advice to delete the original Z: roles first, before uploading the corrected file.
Sadly, even after I deleted the original Z: roles prior to uploading the corrected file, I am still having no luck ... when I uploaded the file, again it (falsely) reports that the import was successful:
Import Status: 133 successfully imported out of 133 records found
After seeing that message, I quickly checked the roles, and none of the roles had uploaded. So now I have ZERO roles.
Any further ideas? I am thinking it may be something very small that is being overlooked ... perhaps certain buttons must be selected/not selected on the import screen? Or could it be an issue with the file itself?
When I do the import, I only select the button for "From File ..." and retrieve the file from my desktop via the Browse button. I do not select any other button, nor do I make a selection from the System or Role Source boxes. I have just selected that one button only ... I've tried it with and without checking the "Overwrite Existing Roles" box, but neither one works.
The part that bugs me the most is that I receive what I perceive to be an inaccurate/bogus "successful" status each time I attempt the upload of the file. At least if I had an error message, I might have something to work with to troubleshoot this.

Role Name and Profile Name

What are advantage and disadvantage of having same role name and profile name .

Alex Ayers wrote:>
> Advantages
>
> consistent naming when reporting (though this is not really a problem in ECCn systems)
I allways point out the disadvantage of that one which is (in my oppinion) that one typo may ruin the system.
Imagine selecting a large set of profiles from the database, based on a list of rolenames. If one of the profilenames is mistyped said profile is not in your selection and that may remain unnoticed in large batches but does influence the outcome of security investigations.....
I'd rather trust the one-to-one database link between roles and profiles (AGR_PROF) rather than a 'fake' link created by a human.
Also limiting yourself from 30 to 12 characters in the role name, as pointed out, is quite a price to pay for creating this visible relation where the technical one already exists. You can call this one of my pet peeves and I'm very unlikely to leave the standpoint that meddling with profile names (as far as PFCG profiles are concerned, not the structural stuff) is a waste of time to say the least.
Edited by: Jurjen Heeck on Feb 20, 2008 1:33 PM

How to obtain Role name in OIM 11g using API's

Hello,
I have a scenario in which I create Role/Group in OIM 11g & it gets provisioned in AD [=works fine] & other part is when i delete role in OIM 11g then it should
get deleted from AD.I have written postprocess event handler to achieve this.
In role creation part i get all parameters using "orchestration.getParameters();" , but when i delete role then "orchestration.getParameters();" is empty,so i am
not able to get role name.
Is there a way to get role name while deleting roles using API ?
Thanks,
Rahul Shah

Hi Raghav,
Following is my code :
tcRODetails = orgOpInterface.getObjects(organizationKey);
for(int i = 0;i < tcRODetails.getRowCount();i++){
tcRODetails.goToRow(i);
// resourceName=AD Group
if(resourceName.equalsIgnoreCase(tcRODetails.getStringValue("Objects.Name"))&&
tcRODetails.getStringValue("Objects.Object Status.Status").equalsIgnoreCase("Provisioned")||
tcRODetails.getStringValue("Objects.Object Status.Status").equalsIgnoreCase("Enabled")) {
System.out.println("<<<FOUND>>>");
processKey = tcRODetails.getLongValue("Process Instance.Key");
provisionObjectKey = tcRODetails.getLongValue("Objects.Key");
tcProcessSet = oimFormUtility.getProcessFormData(processKey);
for(int j=0;j<tcProcessSet.getRowCount();j++){
tcProcessSet.goToRow(j);
if(grpName.equalsIgnoreCase(tcProcessSet.getStringValue("UD_ADGRP_NAME"))){
System.out.println("MATCH FOUND!!!!!");
orgOpInterface.removeObjectAllowed(organizationKey,provisionObjectKey);
break;
& i get following error :
<Mar 22, 2012 1:54:43 PM IST> <Error> <XELLERATE.APIS> <BEA-000000> <Class/Method: tcOrganizationOperationsBean/removeObjectAllowed encounter some problems: Object with key=7 is not already set as an allowed object for Organization with key=1>
Thanks
Rahul Shah

Cluster resource ' Disk Name' of type 'Physical Disk' in clustered role 'Role Name' failed.

We have been observing issues with our file Cluster (Windows Server 2012 R2 Std Clustered with 2 Nodes) where File Server gets
unresponsive for SMB access request event id 30809 in Microsoft-Windows-SMBClient/Connectivity is observed
and when we try to failover the role clustered disks fail to get offline with an error in event id 1069 Cluster resource ' Disk Name' of type 'Physical Disk' in clustered role 'Role Name' failed, we have to force fully reboot the node which faces this
issue. It works properly for a week and again we get the same issue, this happens with all the disks in different file server roles.
Regards Ajinkya Ghare MCITP-Server Administrator | MCTS

we didn't found any thing in the cluster logs, in the WitnessClientAdmin logs we found errors related to failed registration
Witness Client failed registration request for \\fileserver\sharename with error (The request is not supported.)
Regards Ajinkya Ghare MCITP-Server Administrator | MCTS

Role Name Server defined in SLD but no CimomURL maintained

Hello gurus!
We have a problem with our NWDI setup.
What I want to do is to update an existing track DFODEV02 with the software package EP-RUNTIME.
I synchronize with the SLD. However when I try to save, I get the following error:
"SLD (URL http://<NWDI_server>:<port>)
server exception: Invalid Name Server null - Check SLD configuration -> Role
Name Server defined in SLD but no CimomURL maintained."
I am not familiar with the customizing for this but I have looked into a couple of customizing steps related to Data Supplier:
1) Under administration on SLD I see the following:
Update Namespaces is marked as sld/active; but
Update Other SLDs is an empty list.
2) From the configuration on NWA:
Target URL: <RuntimeSLD_server>/sld/ds
Both 'Automatic send' and 'success' are both "true".
Hope that you can guide us on the right “track”
In advance, thank you very much!
Best regards,
Elias

Hi Elias,
1) Under administration on SLD I see the following:
Update Namespaces is marked as sld/active; but
Update Other SLDs is an empty list.
This is something else, your error message is not about this one.
What you need to make sure is that you have a name server defined.
You can check it in various ways:
A). go to CMS -- Track Data -- select the track in question -- tab Build Variants -- Display/Download the Development Configuration --> This will be an XML file. If you see a tag "sld-nameserver" then you are ok, however I assume this tag is missing or points to a wrong SLD in your case.
B)
Go to the initial page of the SLD.
2. Choose Landscapes.
3. Choose New Landscape…
4. In the page that appears, select the landscape type NWDI System.
5. Specify NWDI as the name of the landscape. Choose Create.
The new landscape is displayed.
6. Select the new landscape.
You see the details about the landscape.
7. Choose Systems and then choose Add System to Landscape.
8. Choose the hosted system type System Landscape Directory. Choose OK.
You see the installed SLD.
9. Select the SLD.
The details view appears.
10. Select the roles Landscape Server and Name Server and save your changes.
The name server is now known to the NWDI and can be used there. Only now can you create valid development configurations.
Could you please confirm this way whether you have a name server specified and that points to the correct SLD ?
I hope this guides you to the right "track"
Regards,
Ervin

ORA-01935: missing user or role name

Hello. I'm trying to change a users password, logged in as SYS. I'm using the script:
ALTER USER dross IDENTIFIED BY 1111;
Also tried:
ALTER USER "dross" IDENTIFIED BY "1111";
ALTER USER 'dross' IDENTIFIED BY '1111';
ALTER USER 'dross' IDENTIFIED BY 1111;
ALTER USER "dross" IDENTIFIED BY 1111;
Any suggestions on what I could do?

sb92075 wrote:
is username 'DROSS' or 'dross'?Makes no difference. If user doesn't exist ALTER USER spits out
ORA-01918: user 'XXX' does not existnot
ORA-01935: missing user or role name To get the above error username must be omitted:
SQL> ALTER USER IDENTIFIED BY XYZ
2 /
ALTER USER IDENTIFIED BY XYZ
ERROR at line 1:
ORA-01935: missing user or role nameSo ALTER USER statements OP posted doesn't add up with error that is raised. Have a feeling ALTER USER is generated dynamically and somehow username is NULL.
SY.

Spaces allowed in role names for access credentials?

Are spaces allowed in role names for access credentials?
We have a credential from our Leanring Management Sustem (Sakai) that is named "Project Owner."
We would, most likely, need to url encode this name when we send a credential over http post or get, but my question is on what the role should be named inside iTunes U itself.
Would the role be "project owner," "project%20owner," or other?
Many thanks,
~David Poindexter

David,
I haven't tested this, but ... if you can use spaces ... they are definitely going to have to be URL encoded. Recall that any credentials are going to have to, eventually, be made a part of an iTunes U request URL. Like any other URL, you have to follow basic URI rules about things like spaces.
If I can squeeze some time for this, I might try to see if I can created a credential with spaces. I'm not hopeful about the result ... but you can't win if you don't play.

Wf_engine.context_text for a role returns a role name

wf_engine.context_text for a role returns a role name on forward or transfer of a notification but i need to capture the username of the person in that role. Do we have any API for that?
Thank you all.
Kumar

Hi,
If the notification is being actioned from a worklist, then you can find out the current user using FND_GLOBAL.
If the notification is being actioned from an email then you will have the email address of the responder and will need to resolve that manually by looking in WF_USERS / WF_ROLES to find who is responding to the notification.
HTH,
Matt
WorkflowFAQ.com - the ONLY independent resource for Oracle Workflow development
Alpha review chapters from my book "Developing With Oracle Workflow" are available via my website http://www.workflowfaq.com
Have you read the blog at http://www.workflowfaq.com/blog ?
WorkflowFAQ support forum: http://forum.workflowfaq.com

[SOLVED] Cannot resolve role-Name UserRole

hello community,
while trying to deploy a j2ee-application to weblogic 10 i got following error message:
weblogic.management.DeploymentException: Cannot resolve role-Name UserRole
i guess that this deals with the ejb-jar.xml wherein is these beneath another role defined.
this is the content of the ejb-jar.xml:
<ejb-jar>
<assembly-descriptor>
<security-role>
<role-name>AdminRole</role-name>
</security-role>
<security-role>
<role-name>UserRole</role-name>
</security-role>
<method-permission>
<role-name>AdminRole</role-name>
<method>
<ejb-name>EJBClientInterfaceEJB</ejb-name>
<method-name>*</method-name>
</method>
<method>
</method>
</method-permission>
<method-permission>
<role-name>UserRole</role-name>
<method>
<ejb-name>EJBClientInterfaceEJB</ejb-name>
<method-name>*</method-name>
</method>
</method-permission>
</assembly-descriptor>
<enterprise-beans>
</enterprise-beans>
</ejb-jar>is there anything to insert in the weblogic-ejb-jar.xml?
thanks in advance,
maik
#edit 1:
FYI it uses ejb version 2.0
<!DOCTYPE ejb-jar PUBLIC '-//Sun Microsystems, Inc.//DTD Enterprise JavaBeans 2.0//EN' 'http://java.sun.com/dtd/ejb-jar_2_0.dtd'>
Edited by sqlworktask at 10/25/2007 6:38 AM

hello monduke,
yes, these lines of code are the same as in the weblogic-ejb-jar.xml
but the error remains...
a brief look in the log-file and the following was detected:
Caused by: weblogic.management.DeploymentException: Cannot resolve role-Name UserRole
     at weblogic.servlet.security.internal.WebAppSecurity.getRunAsPrincipalName(WebAppSecurity.java:413)
     at weblogic.servlet.internal.WebAppServletContext.registerServlets(WebAppServletContext.java:1403)
i do not know what to do next...
#edit 1:
the security-section of the weblogic-ejb-jar.xml:
<security-role-assignment>
    <role-name>AdminRole</role-name>
    <principal-name>Admins</principal-name>
</security-role-assignment>
<security-role-assignment>
    <role-name>UserRole</role-name>
    <principal-name>Users</principal-name>
</security-role-assignment>but as i mentioned... the error remains the same
Edited by sqlworktask at 10/24/2007 11:52 PM

Custom Role Names

Good Morning All,
We have created our role names to reflect:
- Custom VS SAP template
- Type of role (Composite, Master..)
-System (ECC, BI < PI...)
-Module (FI, CO...)
I wanted to know what is most seen across industry, how companies name their security roles. Our company is going global so wanted to make standards which make sense to users and IT.
Your suggestions are much appreciated.
Thanks.

I think the role naming is a choice you make based on the client operations and the way they are structured, there is no internationally accepted standard as such. It is like taking an opinion on what colour car should i buy - well it depends,isnt it.
Anyway, coming to the discussion:
We have European operations controlled from the official headquarters and users are spread across 21 countries. My role naming has been based on the domians we work. for a start let me inform that we do not allow local role assignments. local administrators are empowered to maintain users locally (create/change/delete) but not assign/delete/restrcit role authorizations - it is managed centrally after due approvals are taken care of.
My master roles are defined as ZSMSLSX001, ZSMSLSX002 .......for sales, ZSMRDCX001, ZSMRDCX002.....for the local regional distribution centres owned by the local countries (these are the various plants in the loca countries), we have European distribution centres owned by the headquarters and the naming convention is ZSMELCX001........ZFMSXXX001, for Finance sales operations and ZFMMXXX001....for Finance manufacturing opearations
these master roles are derived to the local countries using the SALES ORGANIZATION for the sales roles (ex: ZSMSLSX001 is derived to ZSISDL1001, for Germany - ZSISFR2001 for France and so on, ZSMRDCX001 is derived as ZSIRDK1001 for the Danish plant, ZSICFR2001 is derived from ZFMMXXX001 for Finance manufacturing of France).........I dont know if it is an accepted appraoch in the forum, but it makes life easy at our end and i like it
bottom line: there is no right or wrong in the naming convention, trying to keep them as simple as you can and reflecting the operations and the domain they are created for, would make sense
With the approach you suggested of having the country "US" specifed in the role - can make life difficult if you want to create a role for India and Indonesia (or) Begium and Belarus , following ISO codes could be an option but then you would have to consider the Spanish feelings about using "HP" in the naming (atleast the set of users at our end hate having HP mentioned in the user Id (or) in the role name.........(i am told that it has a not so nice meaning when HP is expanded to its gloriest best).......many things to consider, isnt it?
I wish you luck for your search on the "IDEAL" naming convention

Not specify servlet tag role-name - web.xml

          Hi all,
          I would like to know the servlet configuration in web.xml file. What is the difference
          between specification tag <role-name> and do not have tag <role-name> in web.xml
          file.
          Please advise me.
          Thanks and Best Regards,
          Kwanjai


difference          > between specification tag <role-name> and do not have
          > tag <role-name> in web.xml
          > file.
          <role-name> is usually used for security of a resource in a web application. This is generally used in conjunction with <security-role-ref> and <security-constraint> tag in the deployment descriptor.
          There are some docs on the BEA web-site on the same : http://e-docs.bea.com/wls/docs81/security/thin_client.html#1037337
          http://e-docs.bea.com/wls/docs81/webapp/weblogic_xml.html#1040908
          -Pankaj

Setting the role name dynamically

Hi,
I have defined 4 roles in the application. In the workflow navigation, i have created a notification. How can i set the role name property of the Notification message dynamically so that as soon as the control comes to that notification, all the users in that role gets the notification message?
Thank you.

Hello,
Define a attribute which holds the value of one of the four defined roles.Then create some activity (with some defined function) which will select the role and assign to the attribute.
In the notification give the performer value as attribute name.
This will solve your purpose.
Kind Regards,
Kumar.

To find Role Name for a Query

Hi,
I want to find the Role Name associated with a given query. Can you please help me out, how can i find it?
Best Regards,
Venkata C

Hi,
in the QueryDesigner, press the "Where used button" (a little square with three arrows - or: seventh button from the right.) This should provide (among others) the roles.
Hi
sorry,
I checked it myself. Doesn't work. Sorry again, no other idea
cheers
sven
hth
sven
Message was edited by: Sven Muntermann

Role names in 8.1 with '-' characters

Similar Messages

Maybe you are looking for