SCC Security Configuration (Application Connection)

Hi,
while creating a new application connection, one has to choose which kind of security configuration you should take. Per default you can choose "basic" and "admin". Is there any "best practice" for security settings on production systems? The only information I found is not to use "basic" on production systems...
How to configure the security setting for application connections?
Thanks, Chris

You should not use the default security profiles in production environment. Given below is the available built in securities you can configure for your app.
http://infocenter.sybase.com/help/index.jsp?topic=/com.sybase.infocenter.dc01703.0213/doc/html/aba1253113891962.html
Midhun VP

Similar Messages

You may need to configure the connection settings in the deployment descrip

Hi All
I am new to BPEL and going through Order Booking Tutorial (using 10.1.3.4 version of opmn ) .
I have a problem in 'Designing the Database Adapter to Insert Data' Chapter.
I have installed Oracle 10g Express Edition and BPEL Process Manager on my local system.
In the Example it has been asked to create a daabase connection with Third Party JDBC Driver. Instead I have created a database connection with Oracle(JDBC) Driver.So i didnt have to register any third party driver.
I cud access the Order/OrderItems table as well .
I Deployed the same on the server.But while running the process I get following error--
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
nested exception is:
     ORABPEL-11622
Could not create/access the TopLink Session.
This session is used to connect to the datastore. [Caused by: Listener refused the connection with the following error:
ORA-12519, TNS:no appropriate service handler found
The Connection descriptor used by the client was:
localhost:1521:XE
See root exception for the specific exception. You may need to configure the connection settings in the deployment descriptor (i.e. $J2EE_HOME/application-deployments/default/DbAdapter/oc4j-ra.xml) and restart the server. Caused by Exception [TOPLINK-4002] (Oracle TopLink - 10g Release 3 (10.1.3.4.0) (Build 080602)): oracle.toplink.exceptions.DatabaseException
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
I have checked several post on this error but every post talks about third party database.I have used Oracle Database only so why/What shud I change anything in oc4j-ra.xml?? This is my doubt .
Pls help me on this .Also Let me knowe in my case is there any need to create the datasource.?I am low at concept of database.
Pls help
Regards
Naveen

Hi
I am trying to insert orader and order Items as given in the Order booking tutorial..
Here are the files description
.wsdl file looks like
<service name="DBInsert">
<port name="DBInsert_pt" binding="tns:DBInsert_binding">
<jca:address location="eis/DB/MyConnection"
UIConnectionName="MyConnection"
ManagedConnectionFactory="oracle.tip.adapter.db.DBManagedConnectionFactory"
mcf.DriverClassName="oracle.jdbc.OracleDriver"
mcf.PlatformClassName="oracle.toplink.platform.database.oracle.OraclePlatform"
mcf.ConnectionString="jdbc:oracle:thin:@localhost:1521:XE"
mcf.UserName="system"
mcf.Password="6672B62098892995C8B651EFDF798A59"
/>
</port>
</service>
data source file looks like
<connection-pool name="MyConnection">

<connection-factory factory-class="oracle.jdbc.OracleDriver" user="orabpel" password="->pwForOrabpel" url="jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS_LIST=(LOAD_BALANCE=on)(ADDRESS=(PROTOCOL=tcp)(HOST=nakhanna)(PORT=1521)))(CONNECT_DATA=(SERVICE_NAME=XE)))"/>
</connection-pool>
<managed-data-source name="MyConnection" connection-pool-name="MyConnection" jndi-name="jdbc/MyConnectionDS"/>
</data-sources>
oc4j-ra.xml looks like
<connector-factory location="eis/DB/MyConnection" connector-name="Database Adapter">
          <config-property name="xADataSourceName" value="jdbc/MyConnectionDS"/>
          <config-property name="dataSourceName" value=""/>
          <config-property name="platformClassName" value="oracle.toplink.platform.database.Oracle9Platform"/>
          <config-property name="usesNativeSequencing" value="true"/>
          <config-property name="sequencePreallocationSize" value="50"/>
          <config-property name="defaultNChar" value="false"/>
          <config-property name="usesBatchWriting" value="true"/>
          <connection-pooling use="none">
          </connection-pooling>
          <security-config use="none">
          </security-config>
     </connector-factory>
##################################################################3
Still I get the same error .
<bindingFault xmlns="http://schemas.oracle.com/bpel/extension"><part name="code"><code>null</code>
</part><part name="summary"><summary>file:/C:/product/10.1.3.1/OracleAS_1/bpel/domains/default/tmp/.bpel_FulfillOrder_4.0_e77c64251e45eb4711a3a093f92e6a86.tmp/DBInsert.wsdl [ DBInsert_ptt::merge(OrdersCollection) ] - WSIF JCA Execute of operation 'merge' failed due to: java.util.MissingResourceException
java.util.MissingResourceException
; nested exception is:
     ORABPEL-00001
java.util.MissingResourceException
java.util.MissingResourceException
java.util.MissingResourceException
</summary>
</part><part name="detail"><detail>null</detail>
</part></bindingFault>
Pls let me know if something looks wrong in the above files
Thanks
naveen

Pinging an Application connection in SMP Cloud fails

Hello Experts,
I got one OData URL https://sapes1.sapdevcenter.com/sap/opu/odata/IWFND/RMTSAMPLEFLIGHT and i can access it in a browser using my NW demo system username and password.
in SMP cloud edition, i am trying to create one application connection:
And when i ping this newly created application id, i get two errors saying
Backend system cannot be reached
Security system cannot be reached
Did i miss something in between?
Rgrds,
Jitendra

Midhun VPMayur DharukiyaMidhun VP
Yes, correct. I am able to ping for HTTP but issue is with https.
Daniel,
Can you please share the steps how exactly i have to configure for https based odata url?
Rgrds,
JK

Need help to Configure FTPS connection for File Sender Adapter

Hi,
I want to Configure, FTPS connection (Secured Connection) for File Sender Adapter. Could anyone please guide me, what Information I require to configure. I just want to know what Information should I request the team inorder the configure FTPS so that it can be deployed properly.
I have checked with [SAP Help Link|http://help.sap.com/saphelp_nw04/helpdata/EN/e3/94007075cae04f930cc4c034e411e1/content.htm] and while configuring the communication channel found that I need Keystore and the X.509 Certificate and Private Key. which needs to be deployed on the J2EE server by using the Visual Administrator.
Is there anything else, I need to configure.
Any help would be appreciated in this regard.
Thanks & Regards,
Varun.K

The basic things are Certificate/Keys which you already know. Usually it is enough for running a sceanrio.
However, if you have additional requirements, like FTPS for "Connection Security" for encryption, then you may need additional details like commands. Rest all settings are same as FTP.
Regards,
Prateek

Different levels of security in application

Hi, this is the problem:
We want to create a web application that allows navigation througth "parts" with different security configuration.
Any idea about how to create and configurate each "part"?
Ex.
Sould we create a different web project for each "part"(then configuring web.xml)?
If yes, can we communicate those projects? How?
Thanks.
David.

Topomorto is entirely right that the only effect that will even things out is the use of compression. That's what compression is for--normalising just boosts the entire file to peak at the amount you've preset but does not change the balance between quiet and loud.
However, I have to say that part of your problem is your specification that you don't want to "manually increase or decrease volume". Although applying some compression (and you'll have to teach yourself how to drive it) is a good idea, for professional results you still have to manually adjust/mix your audio. Every TV show, radio show or film you watch has had somebody going through this process because only your ears can decide what's right on every second of the file.
I encourage you to have a play with the volume envelope function of Audition--you'll be amazed at how quick you can get at making the adjustments--and how much better the results will be than relying on any automatic effect.

Enable the security configuration for this panel

Why do my panels built with Configurator sometimes display
this in Ps Cs4?
"Please close all panels or restart Photoshop to enable the
security configuration for this panel"
Closing panels or restarting Photoshop does not enable the
panels but exporting from Configurator does enable them. Why do I
have to keep exporting?

I believe I have stumbled on the answer to this problem, so I
would like to pass it along to any other users who have a similar
problem.
My experience is that this is an intermittent problem, so I
asked myself what do I do from time to time that could be causing
this difficulty. The answer is I use a program called CC cleaner to
clean out temporary files (that in theory I don't need). I found
that after running CC cleaner, I have to re-export the
configuration file (as I get the error message described in an
earlier posting) so that the configurator panel subsequently opens
properly when I open up C S 4.
I immediately ran CC cleaner again and found that it wanted
to delete only one group of files that were located in the
following folder:
C:\Documents and settings\user's name\application
data\Macromedia\flash player\*.*
Accordingly, I instructed " CC cleaner", to exclude this
folder and everything in it (from deletion):
Now if I run CC cleaner to get rid of all my temporary
Internet files and other temporary files, but it leaves the above
folder untouched, and so far the configurator panel opens up
properly in Photoshop.
I don't use Windows "disk cleaner" so I'm not sure whether or
not this cleaner represents a potential problem. In any event it's
the Macromedia folder described above that causes the problem.
It's clear that Adobe configurator uses Macromedia flash to
do its thing, so hopefully I've solve this problem
long-term.

Java Security Configuration Assistant fails to install

Hello,
I have a problem because Oracle Application Server 10g for Windows doesnt install. I have tried several times on various systems, but every time I have the same error when the installer comes to the "Java Security Configuration Assistant"
The command being spawned is:
C:\oracle2\product\10.1.0\Db_1/jdk/bin/javaw -Djava.net.preferIPv4Stack=true -classpath C:\oracle2\product\10.1.0\Db_1\dcm\lib\dcm.jar;C:\oracle2\product\10.1.0\Db_1\j2ee\home\jazn.jar;C:\oracle2\product\10.1.0\Db_1\j2ee\home\lib\jaas.jar;C:\oracle2\product\10.1.0\Db_1\j2ee\home\oc4j.jar;C:\oracle2\product\10.1.0\Db_1\jlib\ojmisc.jar -Doracle.security.jazn.config=C:\oracle2\product\10.1.0\Db_1\j2ee\home\jazn\install\jazn.xml oracle.security.jazn.util.JAZNInstallHelper -log C:\oracle2\product\10.1.0\Db_1\cfgtoollogs\jaznca.log -realm jazn.com -user admin -oldpwd welcome -newpwd 05f2d5c792fb24147255fbe8169f54594b -oh C:\oracle2\product\10.1.0\Db_1 -clearpwd false
Only the first parameter is interesting :
C:\oracle2\product\10.1.0\Db_1/jdk/bin/javaw
It has a mixture of slahes (/) and backslashes (\), the first half C:\oracle2\product\10.1.0\ is ok but the second half Db_1/jdk/bin/javaw is not compatible with windows (slahes are for unix path only), so it obviously doesnt work because this path with a mixture of / and \ is not correct. At this point, the installation of Oracle AS fails.
Does anybody know a cause for this, or a workaround to get AS installed ? Thanks

The mixture of slashes and backslashes isn't an issue for Windows. I have examined the failure of the assistant, but with the new release of AS10g (release 2), I would like to know if you still have the problem you describe.

How to Migrate Row Level Security Configuration

Hi Guys,
Does anybody know how to migrate row level security configuration? I suppose PeopleSoft provided a data mover script, like securityexport.dms.
Thank you in advance,
Bob

Here are two options to achieve what you want.
A. You can do this by coding, that's if you are ready to. Are you? If yes then try the steps below:
1. create a security codes table. Say for example
001 - company a
002 - company b
2. create a security table that will list all users and which company they should have access to. You can also implement this by roles.
3. alter all tables in the application schema to add a security code column. This will be a foreign key reference to table created in 1 above.
4. update all data in the tables according to which company they belong to.
5. write a procedure or package that does a validity check whenever a user requests for data. This procedure/package determines which company data the user has access/rights to.
With this, you should be able to achieve what you want if you do not want to spend on VPD and FGAC. The problem comes where there are users who would have cross access to data from both companies. In this regard, then you have to modify your security table a little bit to handle this.
B. This option i will admit is not so clean. You can also achieve this by two different views for every table in the application schema. And on each of these views, create a private synonym for every user. For illustration purposes:
Table name = Employee.
Create a view employee_a on employee
create a view employee_b on employee
Let's say you have users x and y. X has access to employees of company a and y has access to employees of company b. You can now create private synonyms for each of these users as follows:
create synonym employee on employee_a in x schema.
create synonym employee on employee_b on y schema.
This i have not tried but believe should work.
Hope one of these options serve your purpose.

Can Air application connect behind a proxy server

Can Air application connect behind a proxy server using HTTP
or SOCKS.
thanks

I tried it but its not working. I am using XMLSocket
var socket:XMLSocket = new XMLSocket();
socket.connect( server, 5000 );
It returns "no response from server", It works fine if i
directly connected to internet.
My browser is able to connect to internet means all
configurations are fine.

I need help configuring a connection with asdm 5.2 for asa

Hi All
I am very much a novice with asdm 5.2 for asa and I urgently need to configure a connection but don’t know how to. I have 2 domains at work and someone is trying to connect their sql client from their pc in one domain to the sql server in the other domain (DMZ).
When he tries to connect he gets the error
Cant connect to MySql Server at "IP Address" (10060)
He is trying to connect on port 3306. Could anyone please give me any tips on how i can resolve this quickly? I know i am
trying a shortcut on this one but I recently started a new job and thrown in the deep end here and need to learn this asdm 5.2 for asa product from scratch with nothing more than the manual that come with the cd . My Cisco knowledge is from 2001 when i did half of a ccna course.
Any help would be greatly appreciated

Hi,
I'm not a security specialist but here is how I had it set up at home:
Essentially a NAT and a rule forwarding the port are needed. In this particular case I had an Oracle server running and a person requested remote access. So, for example, the source address was his external IP and the destination was the Oracle's external IP. For the NAT the source was the internal IP of the Oracle server and the interface was Outside.
Hope this points you in the right direction.

How sap application connect oracle database

The gurus,
I just to known how sap application connect to oracle database. Where or what the configuration files at SAP level and oracle level.
Thank you
Edited by: Muzaidi Marjuki on Apr 28, 2011 8:58 AM

existing database to other database that also running on oracle ( right now we testing for recovery server) in case the existing server going down or have a problem that cannot been restore
Its similar to DR setup, then why don't you install application at time of initial installation of DR?
*Explain in detial with a clear query
Regards,
Nick Loy

Please help me configure authentic connection with Caller ID via ISDN 30B+D using Cisco ACS

/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin-top:0in;
mso-para-margin-right:0in;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0in;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;}
Hi all
I have set up a dial up connection between to PC's at remote site and center. It using ISDN 30B+D which is configured on Router 3845. Currently I have configured authentic connection with username and password using Cisco ACS. To enhance the security configuration I want to authenticate both the phone number which dialup with Cisco ACS. And currently I have not done this. Please help me solve this problem.
Thanks so much
Longn

1) I deleted bridge-utils, netcfg
2) I edited /etc/hostapd/hostapd.conf:
interface=wlan0
#bridge=br0
edited /etc/dnsmasq.conf:
interface=wlan0
dhcp-range=192.168.0.2,192.168.0.255,255.255.255.0,24h
and edited /etc/rc.local:
ifconfig wlan0 192.168.0.1 netmask 255.255.255.0
ifconfig wlan0 up
3) I added in autostart these daemons: hostapd, dnsmasq and iptables.
Profit!

Wireless 1410 Throughput Test and Security Configuration

Hi Team
Could you please address on the security configuration of the 1410 bridge and on how to test the bandwidth/throughput between two 1410 Bridges setup for point-to-point connectivity.
We have setup this in one of our Client sites.
Awaiting your reply.
Thanks in advance!
Regards
Unni Kannan
Systems Engineer

Bandwitdh testing is usually done with Iperf with an iperf PC standing at each side of the bridge.
I'm not sure what you mean with "address on the security configuration" though ...

How to secure my internet connection?

I have a linkseys wireless router which I use for my macbook and my two other imacs at home. The internet is really fast with the imacs, but so much slower with my macbook. Even when the two imacs are off and im only using the internet on my macbook, it is still considerably slower most of the time! Is it because I didnt secure my internet connection and other people might be using it? And it always shows a strong signal so I have no idea why the internet is so much slower on my macbook than on my imacs.

It doesn't make sense that your iMac's are working fast but your MacBook is not with respect to people stealing (or rather using) your Internet connection. I'm thinking there's a configuration problem with your MacBook.
I'd first like to say, do you realize you are responsible for what happens through your Internet connection?
Now let's get you secure.
Linksys makes some good stuff, but first let me understand more about your network. I'm assuming all three of your Mac's are wireless. If so then you'll have to secure all of them.
Depending on the age of your Linksys you could have a few options for securing it. I'll go in order of most secure to least secure.
1. WPA2 Personal encryption. If you can set this on your router, great. If not continue on...
2. WEP encryption. Better than nothing
3. No encryption but turn off SSID broadcasting. this makes your network hidden from casual users. Note: not from hackers!
Okay, you'll need to connect to your router. Usually 192.168.1.1 for Linksys. The login account will be admin with no password (or use password for the password). Sorry it's been awhile since I hacked into, er rather used a Linksys router.
Just open your web browser and type in the routers IP address (if you look at your network TCP/IP settings, the routers IP will be listed under, well... router.
Okay once you are connected to the router it should have a web based configuration. This is where you'll turn on encryption and turn off the SSID broadcast.
It would be best if you post back and let us know you've made it this far and to clarify any questions you have.
Greg

Inconsistent Security Configuration - SSL

The problem appears to be that the version of WLS your using is only for
export, not domestic.
You should contact your account rep to discuss how to obtain a domestic
strenght kit
Paul Patrick
"Waldemar Thiel" <[email protected]> wrote in message
news:[email protected]..
Hi all
I've got certificate for my server (WBL 5.1) and ...
<Security> 1 certificate(s): fingerprint = b566b9920c64eb6f55d2e... -that is
ok.
<Security> WARNING: Exportable (weak) WebLogic Server build running and
domestic (full) strength SSL license detected. Only exportable strengthSSL
connections will be accepted.
<SSLListenThread> Inconsistent Security Configuration,java.lang.Exception:
Using a domestic (full) strength certificate with an exportable (weak)
strength WebLogic Server build.
<Security> Not listening for SSL: java.io.IOException: InconsistentSecurity
Configuration, java.lang.Exception: Using a domestic (full) strength
certificate with an exportable (weak) strength WebLogic Server build.
What to do ? Thanks for any help.
Waldemar Thiel
PS. my key is 1024 length... and CA is thawte

SCC Security Configuration (Application Connection)

Similar Messages

Maybe you are looking for