Security Manager Missing

Welcome,
I've installed Oracle 10g EE on Win XP and Enterprise Security MAnager is missing. I don't have esm.bat. How can I install ESM. Enterprise Manager works fine. I did not installed Internet Directory nor Single Sign On. Is that a problem?
Thank You,
Peter

Enterprise Security Manager won't be found as an executable or batch script as you pretend. You have to install the administrative client and invoke this as:
oemapp esm
Enterprise security manager is a component launched with the Oracle Enterprise Manager Java console infrastructure.
For a demo on esm you may want to read this Oracle By Example article: Enterprise User Security.
~ Madrid

Similar Messages

Results Table (2.2.2) export missing Security Manager filters

Hello OEID forum,
I'm working with the Results Table portlet (v2.2.2), and notice that my exports are not including security filters which we have added in a custom Security Manager.
When I trace through the ResultsExportPortlet (doExport method) and AbstractExport classes (source included in the endeca-results-export-portlet.war) I seem to see 2 different implementations:
1. For MDEX 7...
This code will craft the request to the MDEX web service. I don't see it calling the Security Manager anywhere.
2. For MDEX 6...
This code will eventually call com.endeca.portal.data.DataSource.execute, which I believe will call the Security Manager.
Can anyone confirm that this is correct? So Results Table export for MDEX 7 will not invoke the Security Manager, while the MDEX 6 implementation will?
Thanks,
Jerome

Hi Jerome,
Thanks for your post. It's worthwhile raising a Service Request for this, so it can be investigated.
Best
Brett

Using the Security Manager to restrict access to a single package

After reading up on the Security Manager, the package.access property and the use of the [accessClassInPackage RuntimePermission|http://java.sun.com/javase/6/docs/technotes/guides/security/permissions.html#RuntimePermission] , it seemed to me that it would possible to set up the following: I have a security-sensitive code base packaged in a jar, and I want to make sure that only one client code base that I specify is permitted to access it. The idea here is to prevent malicious code from executing anything in the sensitive code base; the sensitive code is only accessible to one client that I name in a security policy file. Perhaps rather foolishly, I advised a client to consider this before testing out a sample myself, because much to my surprise, it appears to me that it isn't possible to get the Security Manager to do this at all. Am I missing something? I'm a bit startled by this conclusion -- it seems like such an obvious use for the Security Manager, I'm hard-pressed to be believe that it can't be done, and more inclined to suspect that I'm going about it wrong.
Here's what I thought I could do: set up the package.access property so that it denies access to any package; then in the policy file, grant the RuntimePermission/accessClassInPackage to the client code base that is permitted to access the sensitive code.
Of course, you wouldn't want the package.access property to exclude all packages in the global java.security file, because then no code could be accessed at all. It would be necessary to use the trick of resetting the package.access property within the code, as [illustrated in the secure coding guidelines|http://java.sun.com/security/seccodeguide.html#1-1a] .
But the problem lies in the idea of "use the package.access property to deny access to +any+ package". There doesn't seem to be any way to use wildcards or the like with the property -- it has to specifically name packages (or package prefixes) to which access is forbidden. It wouldn't do to try to name the packages to which I'm trying to prevent access, since we're trying to prevent access from malicious code -- the attacker could just choose package names that aren't on the list. I'd really need to say that access is denied to all packages, except for those in the permitted code base, but the security mechanisms for package access don't seem to allow that.
Moreover, the trick of changing the value of package.access can't be done within the client code -- otherwise, the attacker client would just set the property to his own purposes. But it can't really be done within the sensitive package either, because the whole idea is to prevent access to that package, and by the time it's busy setting the property, it's already too late, because the package has to have been accessed by a client to get there at all.
It seems to me that this a symptom of something I've never really understood about the design of the Security Manager -- you can grant permissions to specific code bases, but you can't revoke permissions from specific code bases, let alone all code bases. What I want to do here is grant access permission to one specific code base and revoke it from all others. There doesn't seem to be any way to express that with the mechanisms of the Security Manager.
The more I look at it, the more it seems that there's just no way to use the Security Manager this way -- set up package access so that a specific code base can only be accessed by one specific client code base. There are surely other ways to get the effect that I'm looking for, but as far as I can tell, none of them involve restricting package access (for example: define a custom permission, grant it only to the permitted client. and check against that permission within the sensitive code base; meaning that the sensitive code has to be accessible to anyone in the first place). This conclusion really surprises me (not to mention my bit of embarrassment with the client); wouldn't this be precisely the sort of thing the Security Manager ought to be good for?

You're looking at this back to front. The security policy file is there for the client to decide how much access he is going to give this application, not for to application to restrict who can use it. If you want to control what used to be called 'state orientation' you can do that directly by looking down the stack trace inside your code.

Hp client security manager 8.2 or later

Hi, I have Windows 7 Professional 64 bit OS installed and I have downloaded and installed all drivers from hp website shown specifically against my "HP ProBook 450 G2 NOTEBOOK PC" Device manager shows that all the drivers are installed correctly I have installed the driver for the fingerprint scanner from this file p66915.exe. So far i couldn't see anything happening with the Fingerprint scanner. On Device manager under "Biomatric" it is showing as Validity Sensor with driver version 4.5.133.0 with the device status "This device is working properly". But in Control Panel under the "Biomatric Devices" it is saying that "Windows did not find any biomatric devices on this computer. You might need to attach your device or install device drivers" What am i missing? to enable the fingerprint scanner. From some blog, i could see that its asking to install "HP Device Access Manager" , which i have downloaded from HP site again. But this time, when i tried installing "sp65592exe", it gives me an error saying "This security application cannot be installed until the HP Client Security Manager or later is installed."I couldn't find any link for the same which is having a version that is greater than 8.1. I have also tried installingDigital Persona Identity and also HP Simplepass 8.0 but with no luck Please help me out for the same. Regards, Sanoob

Thank you paul. This one did trigger the finger print scanner and allowed me to enroll my finger prints and also enables to log on with it to the system. Still strange that, why it is showing like this on control panel Thank you though...

Advanced Security manager- Error Initializing the Essbase API.

Hi,
I have installed OLAPUnderground> Advanced Security manager for exporting all the User security. when i try to click connect it throws a connection error "error Initializing the Essbase API, cannot connect." Has any one seen this error before? please let me know if i am missing anything.
We are currently using 11.1.2.3.500.
Thanks,
Sankeerth

Sounds like you have not created the windows environment variable:
ESSBASEPATH
D:\Oracle\Middleware\EPMSystem11R1\common\EssbaseRTC\11.1.2.0
That is just an example path update to match your environment
Cheers
John
http://john-goodwin.blogspot.com/

EWA does not report security notes missing and java systems

Hello guys,
Our early watch report don't contain section 7.1 with security notes missing in the system.
We have solution manager 7.0 with ST-SER 700_2008_1 SP4.
What do we need to configure so that ewa reports security notes missing?
Another doubt, how can I get the list of security notes missing in java stack system like portal?
thanks.
regards,
Filipe

hello Filipe
Below is a line from the SAP note 888889.
"In the SAP EarlyWatch Alert report, the "Service Preparation Check" unit complains that Note 888889 is not implemented. As a result, the check for security-relevant notes can only be carried out partially in the "Security" section."
Looks like that could be the reason for that.
For JAVA stack there is no note concept.
Thanks & regards
bala

Custom Security Manager or Security Event Interception from WebLogic Console

Hello,
I have built my own Security Manager and implemented custom preference/property mechanism for every Principal, so when I use my Swing client to create new User and new Group, as well as addMember to a Group, I know what to do with those properies/preferences.
Now, I want to use WebLogic Console to manage users and groups. I want to intercept events in my Security Manager about new User or Group creation or changing their memberships as Principals in order to handle their Preference/properties stuff myself...
I wonder what should I "listen" in order to understand that someone has changed membership of Users or Groups or about creation of new User or Group?
I use Weblogic Server 6.0 sp2
serge

Hi Daniel,
> a custom security manager for the standard CM Repository
And this dictates you indeed to use the old API, as the CMRepositoryManager itself is using the old API.
The standard AclSecurityManager is implemented by com.sapportals.wcm.repository.manager.generic.security.AclSecurityManager. If you check out Configuration - Content Management - Repository Managers - Security Manager, you will see "ACL Security Manager" (the one from above) and "ACL Security Manager (for new Manager-API)". This is implementing / using the new API, but needs also a RM using the new API.
> java.lang.NoSuchMethodException: MySecurityManager.<init>
This exception only complains about a missing constructor!? Have you implemented a default constructor?!
> If this is the case, where can I find the API for IUMPrincipal? It is not included in any provided API because of deprecation.
The methods of the old EP5 user management are more or less similar to the new UME, so using the old deprecated API should be more or less straight forward.
There are also transformer methods for example to transform a "new" user object to an old EP5 one, see https://forums.sdn.sap.com/thread.jspa?threadID=235656&tstart=0
Hope it helps
Detlev

Security manager: what is it for?

Like title says...when sm is active I have to give explicit authorization for every sensible operation.
Now, say in my program I want to open a socket: why introduce a security managar and tell it I want to open it?I mean...I need to open this socket, so it's obvious I'll give my ok and this goes for every sensible operation I'll need to do!
Final user will have my program and use it: he/she can't modify my code and introduce some other sensible operation so I guess security manager is for me, the programmer...
In the end I feel like building a wall and soon after pierce through it...so why to build it in the first place?
What am I missing??

The key thing to keep in mind is that the person creating a program and the person on running the program or on whose behalf the program is run are often not the same.
Here is a sample flow.
1. Person A create a program and for sensitive operation invoke the Security Manager (SM)
2. Person B deploys the program in step 1. They may choose to run it with/without SM depending upon their risk analysis.
3. Person B, deploys a policy for the program that might allow User A some operation, while not allowing the same operation to user B.
While the default SM and the default Java Policy file is geared towards code source, there is support for subject based policy. Hope this helps.

Cannot find security providers when using a security manager.

Hi all,
I've done stuff with JAAS and JSSE before, but this is the first time I've combined the two :o)
I have some code for an application server and I'm using SSL sockets in order to communicate with the outside world. These all work fine, no problems at all.
However, I want to control what code is executed on the server using the security framework. When I load my server using a security manager and custom security policy it seems that my app can no longer find the security providers.
Exception in thread "SSLServer" java.lang.RuntimeException: Could not generate DH keypair
     at com.sun.net.ssl.internal.ssl.DHKeyExchange.generateKeyPair(DHKeyExchange.java:137)
     at com.sun.net.ssl.internal.ssl.ServerHandshaker.getEphemeralDHKeys(ServerHandshaker.java:132)
     at com.sun.net.ssl.internal.ssl.ServerHandshaker.trySetCipherSuite(ServerHandshaker.java:707)
     at com.sun.net.ssl.internal.ssl.SSLServerSocketImpl.checkEnabledSuites(SSLServerSocketImpl.java:292)
     at com.sun.net.ssl.internal.ssl.SSLServerSocketImpl.accept(SSLServerSocketImpl.java:253)
     at com.essar.hikesoft.server.netio.SSLConnectionServer.run(SSLConnectionServer.java:126)
     at java.lang.Thread.run(Thread.java:595)I start my app as follows:
java -Djava.security.manager -Djava.security.policy==security.policy -classpath... and I have the following lines in my security.policy file
permission java.security.SecurityPermission "insertProvider.*";
permission java.security.SecurityPermission "putProviderProperty.*";I know that the providers are defined in the java.security file, do I have to implement my own Security manager in order to load these providers? Or have I missed something else?
Am currently chewing through the docs at http://java.sun.com/j2se/1.5.0/docs/guide/security/spec/security-spec.doc6.html but any further assistance greatly appreciated!

That seems to have cured it cheers - sure I copied the double '=' from somewhere, thought it was wierd at the time.
Now to solve the odd MySQL errors :-)
Thanks for your help.

Essbase Advanced Security Manager

Importing/Exporting: I have played with exporting and importing all of the security information using the Essbase Advanced Security Manager tool. (olapunderground.com) Everything exported and imported except for the user passwords. Did I miss something or is that one of the limitations of the tool?

I found a way to work around the problem. I copied the user section out of the export file and added the passwords by manipulating it in Excel. We have an external file with userids and passwords that we maintain. I used the vlookup to find the password. You can paste the user info back in your spreadsheet once you have obtained the passwords. It works well.

CSM Cisco Secure Manager - deploy a Blank configuration!

Hi all,
need some help. Its just installed a CSM, v.4.8. It adds a device and its configuration from the network, a FW ASA 8.3 correctly.
i make a change on the local policy and as soon i make a deploy to device it start doing a:
no xxxx
no xxxx1
no xxxx2
for each line of the current configuration! so it deletes all!
I am missing a point in here. User guide says that i have to bind a policy to the device but that easy step i do not know how to do it.
thanks in advance for the help
Regards
José

Security Manager does not currently leverage object groups for ACL objects used in VPNs. An enhancement bug has been filed under CSCsl20196 and is something we are looking to address in the upcoming Security Manager 3.2 release due late 1QCY08.

Weblogic 6.1 and -Djava.security.manager license failed

I just tried to run (under jbuilder6), weblogic 6.1 sp3 (evaluation) and I have
got a :
$$$$$$$$$$$$$$$$ License Exception $$$$$$$$$$$$$$$$
Unable to start WebLogic Server !!
Null public key
$$$$$$$$$$$$$$$$ License Exception $$$$$$$$$$$$$$$$
The VM parameters I use are :
-ms64m -mx64m
-Djava.library.path=C:/bea/wlserver6.1/bin
-Dbea.home=C:/bea
-Dweblogic.Domain=cyradeladomain -Dweblogic.Name=name
-Djava.security.policy==C:/bea/wlserver6.1/lib/weblogic.policy --Dweblogic.management.password=xxxxxxx
-Djava.security.manager
-Djava.security.debug=failure
Did I missed some VM parameters ? What should I do to bypass this error?
thanks!

I'm getting the same problem running weblogic 7.0 with sp 1.
Any other ideas on how to solve it?
"kirann" <[email protected]> wrote:
do you need to run the server with java security manager if not required
then remove -Djava.security.manager
else given full permission to the code based weblogic is in!
thanks
kiran
"ezablith" <[email protected]> wrote in message
news:3ddce60a$[email protected]..
I just tried to run (under jbuilder6), weblogic 6.1 sp3 (evaluation)and I
have
got a :
$$$$$$$$$$$$$$$$ License Exception $$$$$$$$$$$$$$$$
Unable to start WebLogic Server !!
Null public key
$$$$$$$$$$$$$$$$ License Exception $$$$$$$$$$$$$$$$
The VM parameters I use are :
-ms64m -mx64m
-Djava.library.path=C:/bea/wlserver6.1/bin
-Dbea.home=C:/bea
-Dweblogic.Domain=cyradeladomain -Dweblogic.Name=name
-Djava.security.policy==C:/bea/wlserver6.1/lib/weblogic.policy --Dweblogic..management.password=xxxxxxx
-Djava.security.manager
-Djava.security.debug=failure
Did I missed some VM parameters ? What should I do to bypass this error?
thanks!

Jsvc security manager

I am trying to set a security property for a portlet deployed in a pluto/tomcat container. The portlet fails with a security permission exception.
This is how I start the jsvc daemon:
jsvc.exec -Djava.security.manager -Djava.security.debug=access -Djava.security.policy=/opt/luminis/webapps/luminis/WEB-INF/config/server.policy
This is how I configured server.policy (eventually I will restrict it to a codebase and more specific permission):
grant {
permission java.security.AllPermission;
I have tried several types of permissions, locations of the policy, editing the default security policy, nothing works.
The only thing that worked so far was disabling the security manager. Then the portlet renders with no errors.
Is there a setting that I am missing? Thank you.

(a) What security exception?
(b) clearly your .policy file isn't being found.
(c) run it with java.security.debug=access,failure and you will see exactly what security policy is in effect and exactly what permissions you need to grant.

" plug-in name does not support the highest level of security for Safari plug-ins" appear for some plugins in Safari Security "Manage Website Settings"?

Hi,
Wondering why "<plug-in name> does not support the highest level of security for Safari plug-ins" appear for some plugins in Safari > Security > "Manage Website Settings"?
Have been trying to get to the root cause of the problem but did not find much on this. I am trying to figure out what can get the warning to go away completely than using the Allow/Always Allow options for the plug-in
Thanks,
Shyam

Hi Linc,
Thank you for your response. Here is the screenshot of the warning that I am talking about.
Here is what I do:
1. Launch Safari and open its Preferences. I have Safari 7.1 installed on my machine.
2. Click Security Tab and click Manage WebSite Settings
3. A window opens showing me all the Plug-ins that I have (listed on the left hand side).
4. One of them is the Adobe Reader plug-in. When I click Adobe Reader, the following details about the plug-in show up on the right
I was referring to the highlighted section that warns me about this plug-in not using the highest level of security for Safari Plug-ins.
Note: I do not see this for all my plug-ins (QuickTime, Adobe Flash Player don't give me this warning) which tells me that there is a way to make the warning go away.
Thanks again,
Shyam

Need security management software for OS 8.6 through 9.2

Are there any security management softwares available these days for OS 8.6 through OS 9.2? Something which lets the computer owner turn off firewire and USB is what I'm looking for. It would be nice to be able to allow only some selected USB devices, like a keyboard and a printer or scanner, and still disallow external drives or thumb flash drives, but turning off all USB would be useful on machines which don't need USB keyboards, like beige or B&W PMG3 computers or G3 iBooks.

Are there any security management softwares available these days for OS 8.6 through OS 9.2? Something which lets the computer owner turn off firewire and USB is what I'm looking for. It would be nice to be able to allow only some selected USB devices, like a keyboard and a printer or scanner, and still disallow external drives or thumb flash drives, but turning off all USB would be useful on machines which don't need USB keyboards, like beige or B&W PMG3 computers or G3 iBooks.

Security Manager Missing

Similar Messages

Maybe you are looking for