Security Deprecated from WL 8.1 to 11g

Hello,
I am upgrading from weblogic 8.1 to 11g, the security model we used in 8.1(DefaultAuthenticatorMBean) has been deprecated in 11g . I have done a lot of reading on JMX, yet still haven't been able to successfully re-write our security. We have two bits of code that interact with the weblogic container, one class loads all of our users from the database, loads all of the groups from the database and also links the users with their associated groups. The second is handling all of the user management, ie validating a user against the container, updating the users password, deleting a user etc.
Does anyone have any working code that does something similar I can take a look at?
Thank you in advance.
Keith

Since the users/groups are in the database, consider using SQLAuthenticator. See http://download.oracle.com/docs/cd/E12840_01/wls/docs103/secmanage/rdbms.html
If user management capability in WLS is a must have (CRUD on users/groups), then very likely there is a need for a custom Authentication provider. See http://download.oracle.com/docs/cd/E12839_01/web.1111/e13718/atn.htm#i1154044

Similar Messages

How can I access my home security DVR from the internet?

My Time Capsule (as a router and not a bridge) blocks me from accessing my home security DVR from the internet. I can access it from other computers connected to my LAN but not from the internet. I guess it's a firewall setting issue. I can't add the home security application to the list of firewall allowed incoming connections since it's a Windows app that I cannot install on my Mac. On the other hand, the app is installed on my old PC but I can't access the Mac firwall settings from the PC and add the security app (If that's the problem).
My DVR is connected to a Netgear switch which is connected to the Time Capsule which is connected to a Cisco modem provided by Comcast. I thought one of the modem ports had to be opened by Comcast. That was not the issue. After spending 2 hours on the phone with Comcast going in circles talking to 10 different overseas agents, they concluded the Netgear switch was blocking me from accessing the DVR. I think they are wrong and that it's a Mac firewall problem. HELP!!! Does anyone know what could be the problem and how to solve it?

Did you forward the required ports in the TIme Capsule? If not it won't work.. it has nothing to do with firewall unless the DVR is plugged into the Mac. If it is plugged into a switch you need to lock the IP of the DVR and find out what ports are required.. usually just port 80, ie html.. but it could be some others.
Since Apple do not use upnp to open ports.. the TC will have to manually be provided with the ports.. Apple use PMP-NAT that is not used by the rest of the known world.. Just to ensure you stay in the camp.

How to get security token from a URL in BPM

Hi,
I need to get a security token from a url in a business process.
The URL is like:
https://services.sapo.pt/STS/GetToken?ESBUsername=test&ESBPassword=test1
If I paste it on the browser i get the token in the form:
<ESBToken>
a7d1cd4e20c9c1b437513d434abbfee83b1f8f32839b54e6632f2865631303b815547cf898...
</ESBToken>
What is the best way to get and map the token in an Integration Process in SAP XI? Is it possible by user defined function in mapping? How?
Thanks in advance.

I am not sure what you want to do!? Do you want to display the image file, save the image file? When you say you don't want it to exit, do you want it to be a persistant application?

How to call a detail report from a master report in 11g?

How to call a detail report from a amster report in 11g?
We have a requirement to call a detail report based on the invoice id that will parsed from the master report in OBIEE 11g. Any ideas sugegstions will be greatly appreciated.
Thanks,
Edited by: user8957415 on Jul 31, 2012 9:04 AM

Check these links
http://gerardnico.com/wiki/dat/obiee/master_detail
http://prasadmadhasi.com/2011/11/13/master-detail-event-in-obiee-11g-and-pass-multiple-events-to-one-detail-report/
Hope these helps

Error while Export from 10g and import to 11g

Hi,
I get the following error on few tables when i try to export from 10g and import to 11g DB.
import done in US7ASCII character set and AL16UTF16 NCHAR character set
import server uses AL32UTF8 character set (possible charset conversion)
. importing TBAADM's objects into TEST
. . importing table "ACCT_AUTH_SIGN_TABLE"
IMP-00019: row rejected due to ORACLE error 12899
IMP-00003: ORACLE error 12899 encountered
ORA-12899: value too large for column "TEST"."ACCT_AUTH_SIGN_TABLE"."MODE_OF_DESPATCH" (actual: 3, maximum: 1)
How to over come this ?
Regards,
jibu

Jibu wrote:
Hi,
I get the following error on few tables when i try to export from 10g and import to 11g DB.
import done in US7ASCII character set and AL16UTF16 NCHAR character set
import server uses AL32UTF8 character set (possible charset conversion)
. importing TBAADM's objects into TEST
. . importing table "ACCT_AUTH_SIGN_TABLE"
IMP-00019: row rejected due to ORACLE error 12899
IMP-00003: ORACLE error 12899 encountered
ORA-12899: value too large for column "TEST"."ACCT_AUTH_SIGN_TABLE"."MODE_OF_DESPATCH" (actual: 3, maximum: 1)
How to over come this ?
Regards,
jibu
[oracle@localhost sql]$ oerr ora 12899
12899, 00000, "value too large for column %s (actual: %s, maximum: %s)"
// *Cause: An attempt was made to insert or update a column with a value
//         which is too wide for the width of the destination column.
//         The name of the column is given, along with the actual width
//         of the value, and the maximum allowed width of the column.
//         Note that widths are reported in characters if character length
//         semantics are in effect for the column, otherwise widths are
//         reported in bytes.
// *Action: Examine the SQL statement for correctness. Check source
//          and destination column data types.
//          Either make the destination column wider, or use a subset
//          of the source column (i.e. use substring).

Invoking Secured Services from BPEL - Build scripts

We are using SOA Suite 10.1.3.4 and JDeveloper 10.1.3.4 for BPEL process development. We are invoking secure web services from BPEL. In order to do this, we have imported the server certificates in the keystore of Oracle SOA Suite. These certificates are also imported into JDev keystore. In DEV environment, I have deployed the BPEL process from JDeveloper and the tested the https web service invocation. It works fine.
When taking this to PROD environment, we need to provide deployment scripts to the release team. Should the scripts contain any properties specific to SSL configuration? I want the deployment to happen the same way JDeveloper deploys BPEL process by makign use of SSL Certs in its keystore. What is the way to achieve this?
Thanks

Hi
You can deploy BPEL to BPEL process manager using ANT or Jdeveloper . I prefer ANT to deploy to prod.
Coming to security impmentation, you can use OWSM (Oracle Websevices manager) to assign security key before invoking secured webservice.
In OWSM follow the brief steps below.
1. create gateway
2. create service which points to secured webservice
3. create pipeline templates with assigning security key , before that import key store to your server
4. assign above pipeline template to service
5. now get the URL of service created.
In Jdev:
6.In BPEL process create partner link with above Service URL in step5 ( instead of directly pointing to secured webservice from BPEL, go thru OWSM)
7. use ANT or JDeveloper to deploy BPEL process to Prod.
Before deploying to PROD you need to above steps 1 to 5 on PROD OWSM
for more details on OWSM please see following link:
http://download.oracle.com/docs/cd/B31017_01/integrate.1013/b31008/toc.htm
Thanks
Seshagiri.Rayala
http://soabpel.wordpress.com/

Calling secured webservice from java

Hi Experts,
I am trying to call a secured webservice from java.
I got the code to call a non secured web service in java.
What changes do i need to do in this to call a secured webservice.
Please help me.
Thank you
Regards
Gayaz
calling unsecured webservice
package wscall1;
import java.io.BufferedReader;
import java.io.ByteArrayOutputStream;
import java.io.IOException;
import java.io.InputStream;
import java.io.InputStreamReader;
import java.io.OutputStream;
import java.io.StringBufferInputStream;
import java.io.StringReader;
import java.io.StringWriter;
import java.io.Writer;
import java.net.HttpURLConnection;
import java.net.MalformedURLException;
import java.net.URL;
import java.net.URLConnection;
import java.security.Permission;
import javax.xml.parsers.DocumentBuilderFactory;
import javax.xml.parsers.DocumentBuilder;
import javax.xml.parsers.ParserConfigurationException;
import org.apache.xml.serialize.OutputFormat;
import org.apache.xml.serialize.XMLSerializer;
import org.w3c.css.sac.InputSource;
import org.w3c.dom.Document;
import org.w3c.dom.NodeList;
import org.xml.sax.SAXException;
public class WSCall2 {
public WSCall2() {
super();
public static void main(String[] args) {
try {
WSCall2 ss = new WSCall2();
System.out.println(ss.getWeather("Atlanta"));
} catch (Exception e) {
e.printStackTrace();
public String getWeather(String city) throws MalformedURLException, IOException {
//Code to make a webservice HTTP request
String responseString = "";
String outputString = "";
String wsURL = "https://ewm52rdv:25100/Saws/SawsService";
URL url = new URL(wsURL);
URLConnection connection = url.openConnection();
HttpURLConnection httpConn = (HttpURLConnection)connection;
ByteArrayOutputStream bout = new ByteArrayOutputStream();
//Permission p= httpConn.getPermission();
String xmlInput =
"<soapenv:Envelope xmlns:soapenv=\"http://schemas.xmlsoap.org/soap/envelope/\" xmlns:ser=\"http://www.ventyx.com/ServiceSuite\">\n" +
" <soapenv:Header>\n" +
"     <soapenv:Security>\n" +
" <soapenv:UsernameToken>\n" +
" <soapenv:Username>sawsuser</soapenv:Username>\n" +
" <soapenv:Password>sawsuser1</soapenv:Password>\n" +
" </soapenv:UsernameToken>\n" +
" </soapenv:Security>" + "</soapenv:Header>" + " <soapenv:Body>\n" +
" <ser:GetUser>\n" +
" <request><![CDATA[<?xml version=\"1.0\" encoding=\"UTF-8\"?> \n" +
            "                        <GetUser xmlns=\"http://www.ventyx.com/ServiceSuite\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">\n" +
            "                        <UserId>rs24363t</UserId>\n" +
            "                        </GetUser>]]>\n" +
" </request>\n" +
" </ser:GetUser>\n" +
" </soapenv:Body>\n" +
"</soapenv:Envelope>";
byte[] buffer = new byte[xmlInput.length()];
buffer = xmlInput.getBytes();
bout.write(buffer);
byte[] b = bout.toByteArray();
String SOAPAction = "GetUser";
// Set the appropriate HTTP parameters.
httpConn.setRequestProperty("Content-Length", String.valueOf(b.length));
httpConn.setRequestProperty("Content-Type", "text/xml; charset=utf-8");
httpConn.setRequestProperty("SOAPAction", SOAPAction);
// System.out.println( "opening service for [" + httpConn.getURL() + "]" );
httpConn.setRequestMethod("POST");
httpConn.setDoOutput(true);
httpConn.setDoInput(true);
OutputStream out = httpConn.getOutputStream();
//Write the content of the request to the outputstream of the HTTP Connection.
out.write(b);
out.close();
//Ready with sending the request.
//Read the response.
InputStreamReader isr = new InputStreamReader(httpConn.getInputStream());
BufferedReader in = new BufferedReader(isr);
//Write the SOAP message response to a String.
while ((responseString = in.readLine()) != null) {
outputString = outputString + responseString;
//Parse the String output to a org.w3c.dom.Document and be able to reach every node with the org.w3c.dom API.
Document document = parseXmlFile(outputString);
NodeList nodeLst = document.getElementsByTagName("User");
String weatherResult = nodeLst.item(0).getTextContent();
System.out.println("Weather: " + weatherResult);
//Write the SOAP message formatted to the console.
String formattedSOAPResponse = formatXML(outputString);
System.out.println(formattedSOAPResponse);
return weatherResult;
public String formatXML(String unformattedXml) {
try {
Document document = parseXmlFile(unformattedXml);
OutputFormat format = new OutputFormat(document);
format.setIndenting(true);
format.setIndent(3);
format.setOmitXMLDeclaration(true);
Writer out = new StringWriter();
XMLSerializer serializer = new XMLSerializer(out, format);
serializer.serialize(document);
return out.toString();
} catch (IOException e) {
throw new RuntimeException(e);
private Document parseXmlFile(String in) {
try {
DocumentBuilderFactory dbf = DocumentBuilderFactory.newInstance();
DocumentBuilder db = dbf.newDocumentBuilder();
InputSource is = new InputSource(new StringReader(in));
InputStream ins = new StringBufferInputStream(in);
return db.parse(ins);
} catch (ParserConfigurationException e) {
throw new RuntimeException(e);
} catch (SAXException e) {
throw new RuntimeException(e);
} catch (IOException e) {
throw new RuntimeException(e);
} catch (Exception e) {
throw new RuntimeException(e);
static {
javax.net.ssl.HttpsURLConnection.setDefaultHostnameVerifier(new javax.net.ssl.HostnameVerifier() {
public boolean verify(String hostname, javax.net.ssl.SSLSession sslSession) {
if (hostname.equals("ewm52rdv")) {
return true;
return false;
}

Gayaz wrote:
What we are trying is we are invoking webservice by passing SOAP request and we will get soap response back.I understand what you're trying to do, the problem is with tools you're using it will take a while for you do anything a little away from the trivial... Using string concatenation and URL connection and HTTP post to call webservices is like to use a hand drill... It may work well to go through soft wood, but it will take a lot of effort against a concrete wall...
JAX-WS and JAXB and annotations will do everything for you in a couple of lines and IMHO you will take longer to figure out how to do everything by hand than to learn those technologies... they are standard java, no need to add any additional jars...
That's my thought, hope it helps...
Cheers,
Vlad

After having replaced the iMac hard drive I no longer can make iTunes security backups from my iPhone 4S?

After having had my iMac's hard drive replaced (had a defect 1 TB Seagate) and the 10.8.2 reinstalled, I no longer can make security backups from my iPhone 4S. iTunes simply tells me that the backup cannot be saved on my computer (which it has done numerous times prior the replacement of the hard drive). Any suggestions on how to fix this?

Click the green jelly button at top left of iTunes window to resize the screen to fit.

Security Deposit from Vendor

Hi Experts - We have a program where the vendors sign-up promising to deliver according to a specific delivery schedule and quantity. We need to take a security deposit from the vendors, this will be returned after they have fulfilled their obligation.
Any input on how to do the security deposit / subsequent refund payment will be appreciated.
Thanks
Sam.

Hi Sam,
we had this scenario and the solution what we concluded is
via an new special GL indicator to carry this deposit and then
knock it later. Its really a process so you have to decide upon
after discussing with the user.
regards
pbb

How can i remove secure files from the trash? I tried click away the secure notification in info, but still i cann't remove them. Is there a buttoncombination to use?

How can i remove secure files from the trash? I tried click away the secure notification in info, but still i cann't remove them. Is there a buttoncombination to use?

If you are unable to empty the trash, try holding the Option key while selecting Empty Trash.
Otherwise, some steps in the following link may help you.
http://support.apple.com/kb/ht1526

How to pass Security Header from the Physical Service in ODSI

We have to call a secured Web service using ODSI. We are trying to build a physical service in ODSI using a WSDL which has username token with password text policy inside it. The requests to that web service are bound by the security policy. But ODSI is not allowing us to create a Physical service usin a WSDL with a security policy in it. How can we then pass the security header from the ODSI physical service to the external web service.

You would need to write a webservice handler for your physical data service to implement the security.
http://download.oracle.com/docs/cd/E13162_01/odsi/docs10gr3/datasrvc/How%20To%20Create%20SOAP%20Handlers%20for%20Imported%20WSDLs.html

TS2446 what do i do if i failed one of my security questions from forever ago from trying to buy a song after changing my password?

I have been locked out and am unable to purchase anything. I just got a new laptop, and it asked me my security questions from forever ago. How do i fix this?

Some Solutions for Resetting Forgotten Security Questions: Apple Support Communities

Error occurred while preloading classes of security providers from jre/lib/

Hello all,
We are Upgrading our BW Production System with EHP1 Package.
on the Step DEPLOY_ONLINE_DEPL the Upgrade stops and we get the error message
Error occurred while preloading classes of security providers from jre/lib/ext folder: java.util.zip.ZipException: A file or directory in the path name does not e*
*xist. jar:file:/usr/java14_64/jre/lib/ext/ibmjceprovider.jar
I have checked the file Path and the Permission exist
I have no Idea anymore
Can you help us ?
Best regards
Vito Cecere

Hi Vito,
This issue looks similar to the following thread I believe the problem was with the SAPJSF user
Cannot startup visual administrator due to UME logon client details changed

How do I prevent AVG Secure Search from reinstalling itself. (I've uninstalled it twice so far).

I accidentally downloaded the AVG Secure Search toolbar. I uninstalled it, but it reinstalled itself. I looked online for solutions to this problem, and multiple people have encountered it. However, none of them had a solution. How do I prevent this from happening?

Have you already seen here [http://kb.avg.com/articles/How_to/How-to-uninstall-AVG-Toolbar-homepage-and-Secure-Search-from-your-browser How to unistall AVG toolbar] See also [http://forums.avg.com/ww-en/avg-forums?sec=thread&act=show&id=157513 AVG support]

Security Questions from a Select List or Drop down Service Provider Edition

Hello,
Can we fetch security questions from the drop down or a select list in Service Provider Edition. We have a requirement to select multiple security questions during registration.
Please advise.
Regards
Vinod

HI
Welcome to the Forum...
You cannot put all the values in a single parameter field so you need to select each field for each parameter...
Better you post it in this link for more reponses:
Reporting and Printing

Security Deprecated from WL 8.1 to 11g

Similar Messages

Maybe you are looking for