Security-role and security-role-assignment not working in WL7.0

Hello all..
Some EJB components that worked fine in WebLogic 6.1 no longer work in
WL7.0. It has to do with the security-role and security-role-assignment
descriptor elements no longer allowing anonymous users to be included in the
authorization for a bean.
For example, in WL6.1 placing these items in ejb-jar.xml:
<assembly-descriptor>
<security-role>
<role-name>Employees</role-name>
</security-role>
<method-permission>
<role-name>Employees</role-name>
<method>
<ejb-name>CustomerEJB</ejb-name>
<method-name>*</method-name>
</method>
</method-permission>
and mapping WebLogic default users to this role in weblogic-ejb-jar.xml:
<security-role-assignment>
<role-name>Employees</role-name>
<principal-name>guest</principal-name>
<principal-name>system</principal-name>
</security-role-assignment>
worked fine for clients creating their context using a simple
InitialContext() constructor without specifying SECURITY_PRINCIPAL or
SECURITY_CREDENTIALS. These users were basically "guest" to WebLogic, and
the security-role-assignment element above told WebLogic that "guest" was in
the Employees role for purposes of this EJB archive.
Worked in WL6.1, no longer works in WL7.0. Client receives typical
permission exception:
java.rmi.AccessException: Security violation: insufficient permission to
access method 'create'
If I explicity connect as "system" things are fine, or I can create a new
user in the default realm in WebLogic, put a matching <principal-name>
element in the section above, and connect as that user. Note that if I leave
off the <security-role> section completely, or set the required role name to
"everyone", the anonymous access works fine. Apparently the anonymous user
is a member of "everyone" behind the scenes even though "everyone" does not
appear in the realm list of groups or roles.
So, my question boils down to this: Is there a "magic" username in WL7 like
"guest" was in WL6.1 that can be mapped to the required role name, or must
every client connection use a true weblogic-created user with appropriate
role assignments used to map it to the required role name.
-Greg
P.S. Note that none of the EJB examples provided with WL used
<security-role>..
Check out my WebLogic 6.1 Workbook for O'Reilly EJB Third Edition
www.amazon.com/exec/obidos/ASIN/1931822468 or www.titan-books.com

Below are the screen shots for PFCG:

Similar Messages

Another FPN Thread: Remote role assignment not working

Hi all,
We have successfully implemented FPN for use in our ESS and BW environment and we are experiencing very little problems with it. We now want to start implementing it for our eRecruitment and SRM systems (as producers). For some reason we are not able to use the Remote Role Assignement functionality.
We have set up trust for the systems and use SSO.
Connection test for the producer is successfull.
We can see the Producer content in the pcd on the consumer.
Server times are the same.
As far as I know I have correctly set permissions on producer and consumer.
Possible cause: We are in the process of upgrading our consumer Portal to NW 7.0 SPS15 and have encountered some problems. The system is partially upgraded, so some components are SP15 and some others are still SP13. This is currently under investigation by SAP. Can this be an issue as our producer portals all are still on SP13?
I hope to hear from you soon. Please ask if you need any screenshots. Thanks in advance.
Best regards,
Jan Laros

Hi Jan,
if remote role assignment not works, you can also use remote delta links. I only work with remote delta links because i have more options and a better performance.
If your connection works you can go to Content Administration ->Portal Content-> NetWeaver-Content-Producer. Hier you can see your remote system. Now you can copy the role and add it to your portal-content.
If you can not see the content make sure that you have the same user on both sides also check the premissions on the portal-content of your remote system. To test the connection it is easier to add Everyone group to the content of your remote system.
regards,
Sharam

Security and privacy system preferences not working after Lion install. What to do?

Security and privacy system preference not working after Lion install. Not sure if it happen with Lion installer or after updating. What to do?

Please read this whole message before doing anything.
This procedure is a diagnostic test. It won’t solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.
Third-party system modifications are a common cause of usability problems. By a “system modification,” I mean software that affects the operation of other software — potentially for the worse. The following procedure will help identify which such modifications you've installed. Don’t be alarmed by the complexity of these instructions — they’re easy to carry out and won’t change anything on your Mac.
These steps are to be taken while booted in “normal” mode, not in safe mode. If you’re now running in safe mode, reboot as usual before continuing.
Below are instructions to enter some UNIX shell commands. The commands are harmless, but they must be entered exactly as given in order to work. If you have doubts about the safety of the procedure suggested here, search this site for other discussions in which it’s been followed without any report of ill effects.
Some of the commands will line-wrap or scroll in your browser, but each one is really just a single line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, and you can then either copy or drag it. The headings “Step 1” and so on are not part of the commands.
Note: If you have more than one user account, Step 2 must be taken as an administrator. Ordinarily that would be the user created automatically when you booted the system for the first time. The other steps should be taken as the user who has the problem, if different. Most personal Macs have only one user, and in that case this paragraph doesn’t apply.
Launch the Terminal application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ If you’re running Mac OS X 10.7 or later, open LaunchPad. Click Utilities, then Terminal in the page that opens.
When you launch Terminal, a text window will open with a line already in it, ending either in a dollar sign (“$”) or a percent sign (“%”). If you get the percent sign, enter “sh” (without the quotes) and press return. You should then get a new line ending in a dollar sign.
Step 1
Copy or drag — do not type — the line below into the Terminal window, then press return:
kextstat -kl | awk '!/com\.apple/{printf "%s %s\n", $6, $7}'
Post the lines of output (if any) that appear below what you just entered (the text, please, not a screenshot.) You can omit the final line ending in “$”.
Step 2
Repeat with this line:
sudo launchctl list | sed 1d | awk '!/0x|com\.(apple|openssh|vix)|edu\.mit|org\.(amavis|apache|cups|isc|ntp|postfix|x)/{print $3}'
This time, you'll be prompted for your login password, which won't be displayed when you type it. You may get a one-time warning not to screw up. You don't need to post the warning.
Note: If you don’t have a login password, you’ll need to set one before taking this step. If that’s not possible, skip to the next step.
Step 3
launchctl list | sed 1d | awk '!/0x|com\.apple|edu\.mit|org\.(x|openbsd)/{print $3}'
Step 4
ls -1A /e*/mach* {,/}L*/{Ad,Compon,Ex,Fram,In,Keyb,La,Mail/Bu,P*P,Priv,Qu,Scripti,Servi,Spo,Sta}* L*/Fonts 2> /dev/null
Important: If you synchronize with a MobileMe account, your me.com email address may appear in the output of the above command. If so, anonymize it before posting.
Step 5
osascript -e 'tell application "System Events" to get name of every login item' 2> /dev/null
Remember, steps 1-5 are all drag-and-drop or copy-and-paste, whichever you prefer — no typing, except your password. Also remember to post the output.
You can then quit Terminal.

Security report with native roles and the roles they have access to.

We need a security report that shows the Native/Custom Roles and the roles that they have access to.
So, an example would be the role US_Acct, and the report would show what roles that has access to (Post Journals, Consolidate, etc).Can this be done?

Export the Provision report from Shared Services.
Upload report to Excel or Access.
Build Tables to show what tasks each Role has access to.
Build a report that links the provision report and the xref tables.
You should also do this with Security Classes.

SharePoint's role and its task assignment

SharePoint's role and its task assignment list below:
*Workflow
*App
*PowerShell
*SharePoint migrering
*Enterprise Content Managment
*Business Intelligence
*social business platform
*SharePoint analyst
*SharePoint Enterprise Search
*Document management
*SharePoint Cloud
*SharePoint BDC (Business Data Catalog)
What more am I missing that is important to add?
Please remember that I'm a newbie in SharePoint 2013.

I understand you have added ECM but I would also add Records Management, Machine Translation Service and Community Sites.
If you want to add features then you should also include Office Web Apps, Cross Browser Support and Responsive Web Design.
Amit

Hello:I forget my security questions and answers .I do not know how to correct this problem.Thx a lot.

Hello:I forget my security questions and answers.I do not know how to correct is.Can you help me to slove this problem.Thx a lot.
best!!!!!!!!!!!!!!!!!!!!!!!!

HUAI GUAN wrote:
I forget my security questions and answers
See Here > Apple ID: Contacting Apple for help with Apple ID account security
Ask to speak with the Account Security Team...
Or Email Here > Apple Support iTunes Store Contact
More Info > Apple ID: All about Apple ID security questions
Note:
You can only set up and/or change a Rescue Email Before you forget the questions/answers.

I forget the security question and my rescue email not verified

I forget the security question and my rescue email not verified?

If you still have problem, call Apple to help reset your Security Question.
http://support.apple.com/kb/HT5699

When to use "my role" and "partner role" in BPEL?

I'm a bit confused when to set/use partner role and my role.
Can anyone shed a little light,
regards, Henrik

Saurabh,
> I humbly disagree with your explanation of inputs
No need to be humble, you can boldy disagree. :)
You're right that I did technically use the wrong term in that sentence of my explanation. I updated the post and corrected it. However the gist of what I was saying is still true.
There are two invocation types. People use different terms but here I'll call them request-response and one-way. A request-response invocation type is used for what we typically think of as a "synchronous" process. That is, the service consumer is blocked until the service responds. It's like methodA() in Java calling methodB(). methodA() is blocked until methodB() completes. (In fact, this is exactly what it's like since all invocations on our BPEL engine ultimately go through our Java API.)
In the case of one-way, the service consumer is not blocked. This is often referred to as fire-and-forget. It simply sends its request, then it is free to continue or do whatever it wants. Moreover, nothing is returned to the client (you fired-and-forgot, remember). Typical "asynchronous" BPEL processes uses this invocation type.
So we have those two invocation types. Yet the problem before us how to have an asynchronous process return a result. You can't use request-response because the service consumer is blocked until the process finishes. You can't just use a one-way because nothing is returned to the caller. What to do?
The way the BPEL standard solved the problem is to use two one-way invocation types. The first one is to invoke the process. The second one is a one-way from the BPEL process to the service consumer to return the result. There are some glaring implications of this:
1. When the BPEL process returns it's result, things have now switched: The BPEL process becomes the service consumer, and the (original) service consumer becomes the service.
2. The service consumer has to be able to listen for one-way invocation type requests.
3. The BPEL process has to know how and where to call the service consumer back. This information is passed in the original request. As well as containing the data payload, it contains a callback address and unique identifier. This, in essence, is what the WS-Addressing standard is about.
Now the definition of a one-way invocation type in a WSDL is:
    <portType name="aaa">
        <operation name="bbb">
            <input message="tns:ccc"/>
        </operation>
    </portType>Compare that to a request-response invocation type:
    <portType name="aaa">
        <operation name="bbb">
            <input message="tns:ccc"/>
            <output message="tns:ddd"/>
        </operation>
    </portType>Let's look again out our example WSDL:
    <portType name="SelectService">
        <operation name="processRequestQuote">
            <input message="tns:RequestQuote_processRequestQuote"/>
        </operation>
    </portType>
    <portType name="SelectServiceCallback">
        <operation name="processRequestQuoteResponse">
            <input message="tns:RequestQuote_processRequestQuoteResponse"/>
        </operation>
    </portType>Here comes the good bit... Both portTypes have an <input> operation. But that's because they are both one-way invocation types, and there is no choice but use the <input> element -- that's the standard. You can't imply put <output> because there's no such thing in the standard. However we know that one of those is to actually return the result. That is, it's the output, even though it's labelled <input>.
Hopefully that's given you enough information now. Re-read my first post, above, and it should make more sense.
Incidentally, this is why you rarely see try asynchronous web services, because the caller has to also be a listener. And if you want to call a service, who wants to also have to write code to listen, to handle responses coming out of order, etc. This is one of the advantages of using an orchestration engine like Oracle BPEL Process Manager. The framework takes care of the hard work, and you can simply call an aysnchronous service and not have to worry about how to get the response back -- the engine does it for you.
Regards,
Robin.

My digital editions saying not working but I uninstalled and reinstalled and it is still not working, any ideas?

My digital editions saying not working but I uninstalled and reinstalled and it is still not working, any ideas?

Hi imtheozzman, check if your security software is the problem, see : [https://support.mozilla.org/en-US/kb/configure-firewalls-so-firefox-can-access-internet Configure firewalls so that Firefox can access the Internet ]
thank you

Finger print sensor and SimplePass Software is not working

Hey there,
I have a HP Pavilion dv7-6c95dx and the finger print sensor and SimplePass Software is not working. I am unable to find the relevant drivers/etc from the HP website. Any advise would be appreciated. The device was purchased in the USA.
Thanks.
This question was solved.
View Solution.

Hi:
I believe this driver from the dv7t-7000 will work as well as the security software to register your fingerprint.
http://h10025.www1.hp.com/ewfrf/wc/softwareDownloadIndex?softwareitem=ob-103013-1&cc=us&dlc=en&lc=en...
http://h10025.www1.hp.com/ewfrf/wc/softwareDownloadIndex?softwareitem=ob-117897-1&cc=us&dlc=en&lc=en...

Airplay on ATV and AX from Lion and ML: ML does not work...

Hi all,
I am having a problem with Airplay under Mountain Lion...but not under Lion.
On a MBP 13 (Summer 2009), I can use iTunes Airplay under Lion to stream music to both an Apple TV and to a Airport Express. In fact, I can play iTunes music on the MBP, the Apple TV, and the Airport Express simultaneously (all 3 or any 2 or any 1, individually). [Of course, Airplay display mirroring does not work under Lion, but iTunes Airplay does.]
On a MBP 15 (Early 2011), I can use Airplay under Mountain Lion to mirror the MBP's display on the Apple TV and thus through mirroring I can stream the music from iTunes to the Apple TV. I cannot stream from iTunes to the Airport Express, whether or not I an mirroring to the Apple TV. In other words, even when the mirroring to the Apple TV mirroring is Off and the Apple TV is off, I still cannot use iTunes to stream music to the Airport Express. Now the Airport Express speakers shows up as an option in the iTunes Airplay menu, but when I select it in the menu it does not do anything.
In summary, using Lion I can stream iTunes music to both an Apple TV and to an Airport Express speakers, individually or simulaneously. Using Mountain Lion, I can stream iTunes music to the Apple TV, but only through the use of Airplay display mirroring. I cannot stream music to the Airport Express speakers even though the AX shows up as an item in the iTunes Airplay menu.
Any ideas how to fix this for ML so that it works as in Lion? I checked and have the same Preferences set for both the Lion iTunes and ML iTunes.
Thanks,
Switon

...a little more experimentation...
I booted the MBP 15 (Spring 2011) from an external backup of Lion (made immediately prior to switching to ML). When I turn off the Server Firewall then I can iTunes Airplay to both the Apple TV as well as to the Airport Express. But when I turn on the Server Firewall, even after allowing ports 3689, 42000-42999 both TCP and UDP, the Airplay does not work. I could not determine which ports were needed for iTunes Airplay, all I could figure out is that when the Server Firewall is off then iTunes Airplay works but when the Server Firewall is on then iTunes Airplay does not work. I tried logging all denied packets, but to no avail, I still could not determine which ones were being denied.
Interestingly, when I turn off the Server Firewall and switch on the System Preference Security pane Firewall, I can still iTunes Airplay to both the ATV and AX. It makes me wonder if when I switched to ML from Lion that some ipfw rules were not left over from the Lion Server Firewall that then keeps ML from allowing iTunes Airplay to work. (I wonder if I restore my Lion Server, then switch off the Lion Server Firewall, then download and install ML once again, then download and install OS X Server once again, whether the iTunes Airplay would then work? Maybe when I have some more time I'll try this, in the meantime I'm going to try a little harder to figure out why the Lion Server Firewall stops iTunes Airplay from working. Dang nabbit, even "ipfw show" does not tell me which packets are being denied when the Server Firewall is ON and iTunes Airplay does not work...does anyone have any suggestions on how to figure out why the Server Firewall is stopping iTunes Airplay from working?)
Thanks,
Switon

Automatic update of RemoteApp and Desktop Connections does not work (while manual updates with "update now" is working)

Hello,
on several Windows 7 Clients the update/refresh of the RemoteApp and Desktop Connections stopped not working automatically. There is a Update failed error. When we do an "Update Now" manually, it gets synchronized without problems.
I am asking me if there is an issue with a stored Password as we Need to Change the Passwords regularily. The error is occuring for Connections to all RDS Servers (we have severals).
Does Windows store the user Password in the Task Scheduler? If yes, does the schedule Task Password Change automatically after the Domain Password Change?
Or what else could be the issue? The RDS Server and the certificate (Name the same as the URL) seems to be fine as not all Clients have this issue.
Thank you for your help

Hi,
Thank you for posting in Windows Server Forum.
By default it will automatically update the RemoteApp and Desktop Connections but if in any particular case it’s not happening then for a try you can restart the server and check the result again. In addition you can try running below command and check
the result.
Start-Process rundll32 -ArgumentList "tsworkspace,TaskUpdateWorkspaces2
More information:
Powershell to update "RemoteApp and Desktop Connections"
If a task is registered using the Administrators group for the security context of the task, then you must also make sure the Run with highest privileges check box is checked if you want to run the task. Please check “Task
Security Context” for more details.
Hope it helps!
Thanks,
Dharmesh

Amd suitchable graphics with hd6670 (and intell 3000 ) will not work on windows 10

hi there i have amd suitchable graphics with intell , and the amd will not work on windows 10 pro x64 the actual model of the amd is HD 6670 but is using the drivers of the hd6470. in any case it will not work in windows 10 pro x64 after a clean install. please any help thanks

Have you disabled the firewall in you security system? Windows firewall rarely gets in the way, but security systems' do.
Say thanks by clicking "Kudos" "thumbs up" in the post that helped you.
I am employed by HP

My home sharing and remote app does not work. How do I fix it? I am on a university network.

My home sharing and remote app does not work.
Here is my setup:
Macbook 2009 running Mac OS X 10.6.8
Itunes 10.6.1
Ipod Touch 4th gen Mac OS X 5.1
I am on a university secured network.

Hi Charles, chinese may be difficult, see our resident language ecxpert, Tom's reply here...
https://discussions.apple.com/message/20061347#20061347
On the slowness...
See if the Disk is issuing any S.M.A.R.T errors in Disk Utility...
http://support.apple.com/kb/PH7029
Open Activity Monitor in Applications>Utilities, select All Processes & sort on CPU%, any indications there?
How much RAM & free Disk space do you have also, click on the Memory & Disk Usage Tabs.
Open Console in Utilities & see if there are any clues or repeating messages when this happens.
In the Memory tab of Activity Monitor, are there a lot of Pageouts?
https://discussions.apple.com/servlet/JiveServlet/showImage/2-18666790-125104/AM Pageouts.jpg

My Hp Pavllion dv7 keyboard and touch pad will not work

Hi. My Hp Pavllion dv7 keyboard and touch pad will not work. Been going on for a few months now. Read in the support forum that replacing the battery might help however it hasnt. Ran updates for Windows Vista and Microsoft Security Ess. Boots up just fine however unable to place in my password to get to my user profile and always have to work from guest......unless I have a USB keyboard handly at the time. I use a USB wireless mouse as well.
Please help and thank you

The keyboard and mouse (touchpad) are separate devices which could go bad at the same time but that would be a huge coincidence. I would try reseating the ribbon cables to the motherboard for both. Here is the Service Manual:
Manual

Security-role and security-role-assignment not working in WL7.0

Similar Messages

Maybe you are looking for