Securing a jar for shipment

Has anyone tried to secure a jar for packaging it up and shipping it off to
a customer to avoid decompilation of the classes? For example, WinZip offers
a password protection for a zip file, using the Zip 2.0 standard, which is
not very secure.
To BEA, do you know of a way of securing jars, but still having them read by
WL at run time?
Thanks,
Evan Child
[email protected]

AFAIK this is impossible in Java. There are various tools such as obfuscators, and you can even encrypt the .class files if you supply a decrypting class loader, but at some point the byte codes have to appear in memory and from there they can be decompiled.

Similar Messages

Signing a trusted jar for use with forms

I have not found sufficient documentation on how to sign a new jar for use in conjunction with forms.
I have read the descriptions in the getCLientInfo bean.
This doesn't cover the whole subject.
What must be done in Jinitiator? for instance.
Can someone direct me to a more exhaustive source of information?
I've done everything I can think of and /or discover and I'm still getting Security exceptions.
Mick

Adrienk wrote:
is the a tutorial on how to open a .jar file and use it with in eclipse by keeping the same file structure?Is your shift key broken, or are you just too lazy to apply once at the start of each sentence?
In any case, for Eclipse problems, see [http://www.google.com/#q=eclipse+forum].

SimpleCallbackHandler no longer in weblogic.jar for WebLogic 10.3g

I was using the weblogic.security.SimpleCallbackHandler in WebLogic 9.2 to authenticate users. I looked at the documentation for 10.3g and it still mentions this class is available, however it is not in the weblogic.jar file nor in the javadocs. Here is the URL where I was looking. http://e-docs.bea.com/wls/docs103/security/thin_client.html#wp1035574.
The only CallbackHandler in the 10.3g release seems to be the weblogic.security.URLCallbackHandler class. I tried replacing the SimpleCallbackHandler with this class. When I put the weblogic.jar in my classpath and build, I get the following error.
class file for weblogic.security.acl.internal.AuthenticatedSubject not found
ServletAuthentication.runAs(mySubject, request);
Indeed, this class is not in the weblogic.jar file. Both SimpleCallbackHandler and AuthenticatedSubject were in the weblogic.jar for WebLogic 9.2
<code>
import javax.security.auth.Subject;
import weblogic.security.SimpleCallbackHandler;
import weblogic.security.services.Authentication;
public ActionForward execute(ActionMapping mapping, ActionForm form, HttpServletRequest request, HttpServletResponse response) throws Exception {
LoginForm loginForm = (LoginForm) form;
Subject subject = Authentication.login(new SimpleCallbackHandler(loginForm.getUsername(), loginForm.getPassword().getBytes()));
weblogic.servlet.security.ServletAuthentication.runAs(subject, request);
<./code>
Why were these removed and not deprecated???

SimpleCallbackHandler does not exist in weblogic.jar. Used the following code to get around this. WebLogic documentation offers this as an alternative to using SimpleCallbackHandler.
Subject subject = Authentication.login(new URLCallbackHandler(uid, pwd));
weblogic.servlet.security.ServletAuthentication.runAs(subject, request);
This code agrees with the snippet provided in WebLogic documentation
Project does not compile with the following error:
Project: C:\apps\11g\PrismMainApp\ViewController\ViewController.jpr
C:\apps\11g\PrismMainApp\ViewController\src\adr\prismmain\view\managed\PrismLogin.java
Error(70,28): cannot access weblogic.security.acl.internal.AuthenticatedSubject

[J2ME Polish] How to generate jad/jar for all devices?

Hello,
I've developed a J2ME Polish application using Netbeans 6.1 as IDE.
Now I'd like to generate the corresponding jad/jar for all the existing devices. How can I do that?
Furthermore, as soon as I'll have generated all these jar/jad, I'd like to put them all in a Web directory in order to make each device able to download the jad/jar corresponding to its configuration. How can I switch a given device towards the appropriate jad/jar in this Web directory?
Help me please, I'm really confused!
Thanks you in advance.
/arkienou

Even though JDK1.4 is not officially shipping the
Java Plugin 1.4 documents on Security are fairly
good. Check out :
http://java.sun.com:80/j2se/1.4/docs/guide/plugin/developer_guide/contents.html
http://java.sun.com:80/j2se/1.4/docs/guide/plugin/developer_guide/rsa_how.html
regards,
atsSun
Sun Microsystems

[svn:bz-trunk] 20680: Tomcat 7 Login Module work, due to the Tomcat 7 Security framework change we need to work out the security integration piece for tomcat 7 .

Revision: 20680
Revision: 20680
Author:   [email protected]
Date:     2011-03-08 08:23:30 -0800 (Tue, 08 Mar 2011)
Log Message:
Tomcat 7 Login Module work, due to the Tomcat 7 Security framework change we need to work out the security integration piece for tomcat 7. So far the ValveBase and tomcat Realm had API changes which will impact on the Login integration with Tomcat 7
Modified Paths:
    blazeds/trunk/modules/opt/build.xml
Added Paths:
    blazeds/trunk/modules/opt/lib/catalina-708.jar
    blazeds/trunk/modules/opt/src/tomcat/flex/messaging/security/TomcatValve708.java

Revision: 20680
Revision: 20680
Author:   [email protected]
Date:     2011-03-08 08:23:30 -0800 (Tue, 08 Mar 2011)
Log Message:
Tomcat 7 Login Module work, due to the Tomcat 7 Security framework change we need to work out the security integration piece for tomcat 7. So far the ValveBase and tomcat Realm had API changes which will impact on the Login integration with Tomcat 7
Modified Paths:
    blazeds/trunk/modules/opt/build.xml
Added Paths:
    blazeds/trunk/modules/opt/lib/catalina-708.jar
    blazeds/trunk/modules/opt/src/tomcat/flex/messaging/security/TomcatValve708.java

Oracle Secure Backup Module for the Amazon cloud

I want to backup a 11g r2 database in the amazon cloud s3 service. I have on premise database
11g r2 on windows 2008 r2 64 bit OS.
Supported platforms for Oracle Secure Backup Module for the cloud are Windows 32 bit. linux 32 bit and 64bit. Does that mean I cannot use this on my Windows box. Cloud module seems like java jar files which should run on Windows 32 bit as well as 64 bit.

Pl do not post duplicate threads - Oracle Secure Backup MOdule for Amazon Cloud S3
Srini

Where to download wlst.jar and python.jar for weblogic 10

where to download wlst.jar and python.jar for weblogic 10 ? I am unable to find the links ..most of the prevoius ones point to dev2dev which are no longer valid

Hi,
I have written the below python script to list the user ,that was created in realms->myrealms->users.
It's not working it.
Kindly help to in this python script.
from weblogic.management.security.authentication import UserReaderMBean
from weblogic.management.security.authentication import GroupReaderMBean
file_loc='MbeanValues.properties'
file=java.io.File(file_loc)
if file.exists():
loadProperties(file_loc)
connect(dwlusr,dwlspwd,dwlsurl)
domain_name = cmo.getName()
print 'UserName='+dwlusr
print 'URL='+dwlsurl
print 'DomainName='+ domain_name
print 'welcome'
print 'Checking if isMember of a group'realm=cmo.getSecurityConfiguration().getDefaultRealm()
atns = realm.getAuthenticationProviders()
for i in atns:
if isinstance(i,UserReaderMBean):
userReader = i cursor = i.listUsers("*",0)
print 'Users in realm '+realm.getName()+' are: '
while userReader.haveCurrent(cursor):
print userReader.getCurrentName(cursor)
userReader.advance(cursor)
userReader.close(cursor)for i in atns:
if isinstance(i,GroupReaderMBean):
groupReader = i
cursor = i.listGroups("*",0)
print 'Groups in realm are: '
while groupReader.haveCurrent(cursor):
print groupReader.getCurrentName(cursor)
groupReader.advance(cursor)
groupReader.close(cursor)
disconnect()

Row Level Security not working for SAP R/3

Hi Guys
We have an environment where the details are as mentioned below:
1. Crystal Reports are created using Open SQL driver to extract data from SAP R/3 using the SAP Integration Kit.
2. The SAP roles are imported in Business Objects CMC.
3. Crystal Reports are published on the Enterprise as well.
3. Authorization objects are created in SAP R/3 and added as required for the row level security as mentioned in the SAP Installation guide as well. The aim is when the user logs into the Infoview and refreshes the report he should only see data that he is meant to so through the authorization objects.The data security works very much fine when the reports are designed directly on the table but when the reports are built on the Business View it doesnt work hence the user is able to see all data.
Any help in this issue is greatly appreciated.
Thanks and Regards
Kamal

Hi,
In order for row level security to work for you using the OpenSql driver, you need to configure the Security Definition Editor on your SAP server. This is a server side tool which the Integration solution for SAP offers as a transport.
This tool defined which tables are to be restricted based on authorizations.
However since you are seeing the issue on reports based on Business Views, you need to identify whether the Business View is configured in such a way where the user refreshing the report is based on the user logging into Infoview. If the connection to your SAP server is always established with the same user when BV is used then you security definition is pointless.
You can confirm this by tracing your SAP server to identify what user is being used to logon to SAP to refresh the reports.
thanks
Mike

A/R process flow with notice of readiness for shipment

Hi,
I'm trying to implement the following A/R process flow:
- sales order
- xx% A/R down payment invoice
- notice of readiness for shipment
- incoming payment
- delivery
- A/R invoice (xx% down payment to be deducted here)
What's the best way to implement it?
Thanks
Fabio

Hi,
no, it's something different. It is because we want to be paid before shipping anything.
In more detail:
- we request a certain amount of down payment after the order and before starting production
- we request final payment before we deliver goods
Thanks
Fabio

Deployment Issues, Different Jars for Diff Java in one application.

HI,
I need to put classpath (Jars) for my WEB-INF/classes. Different Jars for Diff files in one application.
The problem is , for one ofmy application, the lib files are x.jar and y.jar , x is older than y but have same
lib files. in x and y, there is one class , r.java , which have a method method1(). whey they are doing modifications in y.jar , the r.java has changed to new vertion, the method method1() they re-written the body.
My application have 5 java files, in which 2 files uses r.java imported from the x.jar earlier.
Now we need to use y.jar because , the y.jar have more files added with good futures. But the earlier 2 files are giving exception if i use y.jar.
I need solution for this. how can i put classpath for the 2 files to use the x.jar and other files to use y.jar in the same application.
I am using a Tomcat 4 server. only Servlets, JSPs I am using.
Thank you,
Kiran

I may be missing something here, is y.jar a newer version of x.jar? And if it is do you need x.jar at all? Are there classes in x.jar that do not exist in y.jar? Can you modify your application to provide the same functionality and only use y.jar?

How to use two different ojdbc14.jar for two web application.

Hi,
I have two web application running in same tomcat, I need to use the two different ojdbc14.jar for two application, now both are taking the jars from tomcat common/lib directory, I tried copying the new ojdbc14.jar in web-inf/lib folder of one application, but it is not working.
Could you please let me know whether this will take the jar from tomcat by befault or from web-inf, and a solution how to proceed with this.
Thanks in advance.

Yes, I tried removing the jars from common/lib, but as the connection string is mentioned inside the server.xml it is showing db connection error while trying to connect to the database

Issue in creating Invoice when route is not relevant for shipment cost.

Dear All,
We are facing a problem while creating an Invoice. The route used in shipment in not relevant for shipment costing. Shipment type is relevant for costing. So in normal scenario if I don't remove the tick mark from "Shipment cost relanace" at shipment type and proceed with Invoicing I get error as " SHipment costing is not complete", which is correct. The scenario works well if item/s in delivery are not batch split.
But, if items in delivery are batch split and "shipment cost relevance" check is not removed from shipment type then, only batch split items get copied in invoice. Header item is deleted and invoice gets saved, which should not happen.I don't get error in this scenario.
How should I make the error in invocie work in case of batch split items also? Could anyone please let me know?
Thanks!

Dear Manmeet Mohan K,
Can you please check the copy controls in between delivery document to invoice(VTFL)
Thanks&Regards
Raghu.k

Batch job for shipment and shipment cost doc

Dear all,
In case of our client, shipment docs and shipement cost docs are created using a batch job. There are some documents that have not been processed with this batch jobs as expected. Now i want to analyse the job log for thosse failures. For this i want to know the batch job names which i am unaware of. In SM37 i am unable to trace in a generic way.
I know that we can filter batch jobs using ABAP Prog. My question is that which programs have to be used here. are these RV56TRGN for shipment docs and RV56TRSL fir shipment cost docs?? Plz help as the issue needs serious attention ffom my side. also suggest how further i have to rectify this issue.
Regds,
Raghu

Hello,
The ABAP programs you have mentioned are correct and you can enter these in SM37 to check the job names, status etc.
RV56TRGN - creating shipment docs
RV56TRSL - Shipment costs
Check the spool for messages which will have the error docs.
Cheers !

I forgot my security question answers for my iTunes account and now it won't let me buy anything. What do I do?

I forgot my security question answers for my iTunes account. Now I can't buy anything with the 15 dollars I have in it. How do I regain access to my money?

The Three Best Alternatives for Security Questions and Rescue Mail
    1. Use Apple's Express Lane.
          Go to https://expresslane.apple.com ; click 'See all products and services' at the
          bottom of the page. In the next page click 'More Products and Services, then
          'Apple ID'. In the next page select 'Other Apple ID Topics' then 'Forgotten Apple
          ID security questions' and click 'Continue'. Please be patient waiting for the return
          phone call. It will come in time depending on how heavily the servers are being hit.
     2. Call Apple Support in your country: Customer Service: Contacting Apple for support or
          Apple ID- Contacting Apple for help with Apple ID account security. Ask to speak to
          Account Security.
     3. Rescue email address and how to reset Apple ID security questions.
How to Manage your Apple ID: Manage My Apple ID

Including External JARs for Java Application in OC4J

Hi Experts,
Here is my requirement.
I have developed my Java application using Tomcat Server & Eclipse. In my application I have used some External JARs & imported the classes in my JSP.
Now that I'm using OC4J Server instead of Tomcat I'v no clue as to where I have copy these External JARs for my application to work.
I have installed OBIEE-Client which includes OC4J server. The path where I have placed my application is as below
*"C:\OracleBI\oc4j_bi\j2ee\home\default-web-app"*
If I run my application the server does not import the classes in the JSP which we include using Import statement using JSP tags (*ex* - <%@ page import = "org.apache.commons.fileupload.*"%>).
This is the location which I found, where I need to put my Java-J2EE application. This OC4J_BI comes with OBIEE.
Kindly help me out on where to place these External JARs exact location in OC4J.
Also let me know if I have to alter any configuration/xml file (if so pls specify the file name & its location).
Thanks in advance,
Venky

You can either include the external libraries in the application, by placing them into WEB-INF/lib, or you can import them into the server as "shared libraries", normally you'd use the "enterprise manager" application to do this. Having loaded a shared library you then add it to the classpath when you're deploying the application.

Securing a jar for shipment

Similar Messages

Maybe you are looking for