Securing webpages on the site with username and password
whats the best way to secure web pages on a web site.
if the users are given user name and password and are required to autheticate before accessing the information on the secured pages
It depends on many parameters. Like what is the nature of business transacted on the web site, how many end users are to be supported, whether its and intranet sote or is exposed to all on the internet, are there users who can perform opertions using multiple roles, can the authentication mechanisms built into the web server(s) be used etc, etc.
See http://java.sun.com/j2ee/blueprints/apmTOC.html Specifically chapters 9.2 and 9.3 for getting some kind of orientation towards web application security.
Similar Messages
-
I have a iphone 5 and I can login with my apple id to purchase music. However, when I try to login into icloud using the very same username and password that I use in the apple store it does not work to enter icloud, so what what gives???
I could do that, however when I select the icloud button (or whatever the heck it is) I am asked to enter the apple id and password. So if you are suppose to create another one for icloud you'd think it would give you the option at this point which would be logical.
-
[Deployment] How NOT to hard code the Database SID, Username, and Password
Hi, I'm new in J2EE so be easy on me. :)
How can I parameterize the database SID, username, and password in my J2EE application? So that anyone can change the SID, username, and password without the need to modify my code? I use Oracle 10g, ADF BC, JSF and JDeveloper 10.1.3.1.
My friend said that I can use XML for this. But he didn't go to detail for doing this. Is it true? Is there any [or better alternative]?
Any help or pointer to a simple tutorial would be fine.
Thanks in advance.Hi -- this is quite easy to do with J2EE.
In your application code, you declare "logical" references to resources (such as datasources, security roles, etc.) and use those in your application code so all it depends on is the logical name
On the server where the application is deployed, "physical" resources are created that point to the actual resource -- in the case of a database, this would be the JDBC URL, username, password.
At deployment time of the application, you then use the facilities of deployment tool to "map" the logical references in the application, to the physical references that exist on the server. So you connect the dots between your application needing something and the server providing the something. That way all the "details" are abstracted out of the your application code.
I don't know how this works in ADF, BC4J, etc. but I presume that since they are based on standard/J2EE, it must be available somehow.
I wrote something about this a while back using direct JDBC as an example:
http://buttso.blogspot.com/2006/06/datasource-lookup-using-javacompenv.html
-steve- -
I am unable to connect to my RackSpace Windows Server via ARD. I have added a computer entering the ip address, username, and password but I can't establish a connection. I am missing a setting or to step that is different in ARD?
ARD only works with Windows computers if the Windows computer is running VNC server software. Even then it can only control and observe. Do you have this installed?
-
"I have one workstation with static IP, Wants to create batch file to log in to this,using user name and password, copy back up files from that workstation to my desktop with batch file, please help
I am currently using batch file for back up for domain servers with robocopy commands in batch file but one of the workstation is not in domain and has static ip , also it has username and password,
Wants to create batch file on my desktop to log in this server---with username and password,, copy files from particular folder and paste it on my desktop in particular folder or auto create that folder,
please help, "
P DaveJRV,
I can understand that, 1stly I am not a scripting guy, I know very very basic of this,
2ndly, I need help , I am not asking anyone here to write code for me, I have already wrote that but its not doing which its suppose to do,
check below screen shot, after running suggested script, it has mapped drive ,
now I do not want to do that, I want just files to copy from that machine to my machine, and want script which I can run from any PC,
Tried with UNC PATH as well, but not making any difference, its keep mapping that server drive to my computer
P Dave
JRV,
I can understand that, 1stly I am not a scripting guy, I know very very basic of this,
2ndly, I need help , I am not asking anyone here to write code for me, I have already wrote that but its not doing which its suppose to do,
check below screen shot, after running suggested script, it has mapped drive ,
now I do not want to do that, I want just files to copy from that machine to my machine, and want script which I can run from any PC,
Tried with UNC PATH as well, but not making any difference, its keep mapping that server drive to my computer
P Dave
Bill - he still sees that "connection" although it isn't mapped it is attached temporarily.
P - Log off and log back on and the attached connection will be gone. It is temporary. Again - knowing the basics of WIndows would let you know this.
We have given you all of the answers that are possible. There is no other way unless you have installed things like PowerShell and PowerShell remoting or an FTP server.
If you do use a drive it can be just as easily deleted after you have finished the copy.
Again: "NET USE /?" will tell you all of the options.
Saying you know nothing is not an excuse for not thinking or looking more deeply into the suggestions made by those trying to help you. This is not a MIcrosoft support forum or help desk. It is a forum for admiinistrative scripting and assumes
that those coming here are technically trained or experienced in the basics of Windows technology.
¯\_(ツ)_/¯ -
Using url with username and password in URL class
Hi,
I'm writting an applet in which I use getAppletContext().showDocument with an URL.
The problem is that I'm using URLs with username and password (http://user:[email protected]/page) and it isn't working because the browser is getting the URL http://user/page.
Is this a bug in the URL class? Or in the showDocument method?
Is there any way to make this work?
Thanks for any help,
Pedro Prospero Luis ([email protected])I'm not sure whether this is supported behaviour. I've had this syntax fail to work in the Netscape address bar so I can't recommend it as an approach for authentication.
If you want to authenticate the user before redirecting to the page, though, you could try creating a connection to another page on the same server and sending the authorization information then. Your browser may then be successfully authenticated.
See http://www.javaworld.com/javatips/jw-javatip47.html for information on this.
You might not need to read back the page from the server, just connect to it. Might work. -
Adobe Revel? I have forgotten: the URL; my username and password. How do I ask Adobe for these items? Thanking your reply !!!
[email protected]Dave,
No worries, this link will help you with your issues. You do have a revel account with that email, so resetting your password should be all you need to do. Just click on the "I forgot my password" link on the web page listed below:
http://helpx.adobe.com/x-productkb/policy-pricing/account-password-sign-faq.html
Once you reset your password, you should be able to login to revel at adoberevel.com on a browser or from one of our apps on mac, ios, win8, or android.
Pattie -
What is the print server username and password?
I am trying to install a Kodak ESP 5210 printer.
I set up the printer - it is on my wireless network.
I installed the Kodak printer software - it too installed correctly.
At the final step I need to "add printer" I click + in the printer window.
I then choose the kodakaio directory under "Windows".
I then choose kodakesp5200_00.
I am asked for the print server username and password.
I tried my log in password with just my first name in lowercase as username as this field was filled out by default.
I tried lots of different things, including no password, but the printer "Add" button never becomes not greyed out.
Would appreciate help. Kodak were no help.
I have pinged the printer successfully so its definitely on the network.
ThanksBecause nothing is listed in the default printer directory
-
My mail (hotmail) has stopped receiving emails and keeps saying the IMAX server username and password is wrong when I haven't changed anything?
Hello ,Marshyy96
That is not good, lets see if we can get your email back up and running again. Take a look at the article below to go over the settings to just make sure nothing is out of the ordinary. You may end up needing to remove the email account and add it back in.
Get help with Mail on iPhone, iPad, and iPod touch
http://support.apple.com/en-us/TS3899
Regards,
-Norm G. -
Sign in with username and password every time I want to check emails on my PC using iCloud?
Signing in with username and password every time I want to check emails on my PC using iCloud
Having convinced my parents to get rid of their old AOL account and sign up for iCloud to sync their new iPhone with their old PC running Windows 7, I thought I was on to a winner. All working OK but is there any other way to get into emails besides going on iCloud website and signing in with name and password everytime? Can it be set up as a Mail account directly like on a Mac? Or using Outlook or Entourage? Help! I'm not a PC person!!
ELFIf they have Win 7 or 8, and Outlook 2007 or newer then you can.
Just download the iCloud Control Panel for Windows. Install and select the services you want (Mail Contacts and Calendars will appear in Outlook) -
Can I use the same icloud username and password for multiple phones?
I have 6 iphones and wanted to use Apple Configurator to install the same apps on all 6 phones. Some of the apps though, also require further installation by email. Can I use the same iCloud username and password for all 6 phones to download the apps and also to configure email or do I need to create 6 different Apple IDs?
If different people will be using these phones, you might be better off using the same Apple ID for the iTunes content...apps, music, etc. on each of these devices, but create different ID's for iCloud on each device. You can use one ID for the iTunes/App store, & a different ID for iCloud. That way, messages, notes, contacts, calendars, etc will be kept separate on each device.
-
Can avoid the entering my username and password always when i click on URL
Hi,
Iam new to BSP,i developed a simple BSP application to display a list of orders on the second page when a cutomer is entered in the first page. it is working fine.
when i test the BSP application, it is asking for username and password.when i entered my username and password it is working fine.
Then my question is when i test the BSP application, can i avoid the entering the username and password always.
is there any way we can avoid the entering my username and password always when i click on the URL.
Thanks
Srinivas Mandasure.
You can include the password and the username in the BSP link :
<bsp_lnk>?sap-client=<client>?sap-user=<username>?sap-password=<password>
where:
<client> = client where the username and password are defined
<bsp_lnk> = your bsp link
<username> = your username
<password> = your password
Regards,
fabrizio -
Send Email for manager of the user with Login and Password the user.
Hello everyone,
I need to send an email to the manager of the user with login and password when it is created in AD.
I already have a mail server configured in the IT Resource. It has some component of the IDM that solve this issue?
Anyone you help me with the next steps?
Thank you.Thank you for your attention.
It did not work, I did another test to send email notifying you when the User change password.
The following error message appears in oim_server1-diagnostic.log:
[2011-08-08T19:21:30.865-03:00] [oim_server1] [NOTIFICATION] [] [oracle.iam.passwordmgmt.impl] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 88a924181f586e03:-25ab9c82:131aa884464:-8000-0000000000008862,0] [APP: oim#11.1.1.3.0] Resetting password
[2011-08-08T19:21:30.936-03:00] [oim_server1] [NOTIFICATION] [IAM-0080013] [oracle.iam.platform.kernel.impl] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 88a924181f586e03:-25ab9c82:131aa884464:-8000-0000000000008862,0] [APP: oim#11.1.1.3.0] Kernel executing default validation with process id, event id, entity and operation 59,612.0.User.RESET_PASSWORD
[2011-08-08T19:21:31.155-03:00] [oim_server1] [NOTIFICATION] [IAM-3050013] [oracle.iam.identity.usermgmt.impl] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 88a924181f586e03:-25ab9c82:131aa884464:-8000-0000000000008862,0] [APP: oim#11.1.1.3.0] Searching for users with the specified criteria.
[2011-08-08T19:21:32.018-03:00] [oim_server1] [WARNING] [] [oracle.iam.passwordmgmt.impl] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 88a924181f586e03:-25ab9c82:131aa884464:-8000-0000000000008862,0] [APP: oim#11.1.1.3.0] Sending Reset Password Notification is not successful
[2011-08-08T19:21:32.639-03:00] [oim_server1] [NOTIFICATION] [IAM-0080046] [oracle.iam.platform.kernel.impl] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 88a924181f586e03:-25ab9c82:131aa884464:-8000-0000000000008862,0] [APP: oim#11.1.1.3.0] Completed orchestration with action result - oracle.iam.platform.kernel.vo.EventResult@4fe0d018
[2011-08-08T19:21:32.642-03:00] [oim_server1] [NOTIFICATION] [IAM-0080011] [oracle.iam.platform.kernel.impl] [tid: [ACTIVE].ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: oiminternal] [ecid: 88a924181f586e03:-25ab9c82:131aa884464:-8000-0000000000008862,0] [APP: oim#11.1.1.3.0] Orchestration process with id 59,612 started running in a new thread.
Edited by: Piza on 08/08/2011 15:24
Edited by: Piza on 08/08/2011 15:26 -
Connecting printer to a secure wireless network which requires both username and password
I have the hp photosmart 6510. I have it in my college dorm, which has a secure network with requires both a user name and password. I need help setting it up as I can't seem to get the printer to enter a username and password. I know the printer works and I know that my computer can print wirelessly with the printer. My college game me this setup configuration.
Configuration Item Preferred Value Optional Value (less preferred)
Network Name of SSID umd-secure
802.1x Operating Mode
(note: 802.11b is no longer supported) Infrastructure or Network (not ad hoc)
Security Mode Enterprise (not Personal)
Network Authentication WPA2 WPA-less prefered
Data Encryption CCMP or AES (TKIP-less prefered)
Roaming Identity or Outer Identity anonymous
Authentication Type or Outer Authentication TTLS (PEAP-Less prefered)
Authentication Protocol or Inner Authentication PAP (MS-CHAPv2-less prefered)
Validate Server Certificate or Verify Server Name Yes
Certificate Issuer or Trusted Root CA Thawte Premium Server CA (Any Trusted CA -less prefered)
Server Name or Certificate Name wireless.umd.edu
Server Name must match YesHi @hatyai ,
Thank you for visiting our English HP Support Forum. We are only able to reply to posts written in English. To insure a quick response it would be advisable to post your question in English. The following links are here to assist you if you prefer to post in the following Language Forum.
English: http://h30434.www3.hp.com
Spanish: http://h30467.www3.hp.com
French: http://h30478.www3.hp.com
Portuguese: http://h30487.www3.hp.com
German: http://h30492.www3.hp.com
Korean: http://h30491.www3.hp.com/t5/community/communitypage
Simplified Chinese: http://h30471.www3.hp.com/t5/community/communitypage
Thank you for your understanding
I work for HP. However I speak only for myself, not for HP nor anyone else -
Configuring Basic Authentication with Username and password on BizTalk Schema Service
Hi,
I have published my schema as a webservice with WCF-BASICHTTP adapter in IIS 8.0.
I wanted to have a Basic Authentication(User name and password restriction).
I made the Receive location with Security mode as Transport and Transport Client Crediential Type as Basic.
I also set the Service in IIS with Basic Authentication only enabled.
But I don't know how to provide a UserName and Password Authentication.
Please provide your suggestions
Regards, Vignesh SHi,
Try & go through the below MSDN link as it explains configuring WCF BasicHttp adapter very well.
http://msdn.microsoft.com/en-us/library/bb246064(v=bts.80).aspx
HTH,
Sumit
Sumit Verma - MCTS BizTalk 2006/2010 - Please indicate "Mark as Answer" or "Mark as Helpful" if this post has answered the question
Maybe you are looking for
-
I dont know how this happened, but recently i have not been able to work on iWeb for a period of time (less than a couple of minutes) without it closing automatically. It gives me an error message saying 'iWeb quit unexpectedly while using the SFWord
-
This just started happening. All images I show in Preview are posterized. I did not change any settings or install new apps. Any suggestions as to how to correct this? Thank you. Steve G.
-
Siri Not Reading Back Texts...
With iOS 6, I could dictate a message to Siri while holding my iPhone to my ear. With iOS 7, Siri just asks, "ready to send it?" I can't figure out if this is no longer a feature (which would not be helpful!) or if there is a new setting I need to
-
Avahi conflicts with nss-mdns. [solved]
I'm confused. Went to update today, and got this message: :: avahi conflicts with nss-mdns. Remove nss-mdns? [Y/n] I thought 'Fair enough...' but I always check packages like this with -Si to know what's actually happening in my system. Soo, I run:
-
I would like to try 3.0 but of course I am hesitant after reading all the problems many are having. how do I download the trial version and keep my 2.7 version. If I don't like the trial is it easy to delete it or just avoid it until the bugs are fi