Security witn external application

I've an external application (an old web application) made with Oracle Designer (Web Generator).
It has a security model based on security level of Oracle 8i (i mean rules that made a certain user to see only some rows of a table).
I've asigned a dad to the application (to execute the procedures in the database) and passed to portal the information on the form to bypass the application password page.
But i've a big problem, i don't connect to database with the database user, portal uses the db_user of the dad.
In the doc "Oracle portal secutity overview" i've read that have to implement the package "wpg_session_private", BUT HOW? WHERE DO I PUT IT??
I need help on this.
Thanks in advance

Actually you do use a servlet. The code that compiles and runs JSPs is a servlet, and JSPs are compiled into servlets anyway
It makes no difference to a filter class, if the URL matches the filter's pattern in web.xml then the filter will be applied to JSPs or servlets alike.

Similar Messages

Adding an External Application that uses J2EE Form Based Security

I'm trying to add an External application that uses the J2EE Form based security. i.e. uses j_username, j_password and posts to j_security_check.
I don't really see how Oracle SSO will support this. The container needs to take control of a clients request and determines when the "Login" page is presented to establish credentials. Posting directly to j_security_check isn't working for me.
I'm using Sybase EAServer 4.12 as the external application.
Is this supported in Oracle SSO?
Do I need to provide a different mechanism for logging user's in?
Also, can someone explain what the benefit would be if I configured the EAServer app as a "Partner" app? I would still have to provide an interface for login. The input would be different but the end result would be the same I guess. What advantages does a Partner app have?
Lastly, is there an NNTP server for these forums?
Thanks.
Darrell

The cure for the symtops described below was to simply add a welcome-file-list
element with appropriate welcome pages to the web.xml descriptor. It makes sense
now that I have worked it out.
Todd
"Todd Gould" <[email protected]> wrote:
>
I have an application comprised of several JSPs that are protected via
Form based
security and enforce an SSL connection via the appropriate declarations
in the
web.xml. This aspect of the application seems to be working with the
exception
of one small quirk.
If a user presses that back button until such time as the receive the
container
provided login page once again, and subsequently provide a valid user
id and password,
they are NOT successfully logged in. Rather, they receive the ugly 403
Forbidden
error that states that the server understood the request, but is refusing
to fufill
it. This only seems to happen given the above course of events involving
the
use of a back button in the browser (or selection of an item from the
history
list). I suspect that this has something to do with the session id being
cached
or something, but I'm not sure? Can anyone offer any assistance on this
one?
Also, does anyone know of a way of preventing the user from bookmarking
this container
provided login page as this also seems to be causing problems for users.
If they
bookmark the first protected page of the application all is fine, but
if they
bookmark the login page they receive the 403 error.
Thanks in advance!

The Secure Store Service application Secure Store Service Proxy is not accessible

I am working on setting up a new SharePoint 2013 Farm for our external web site which is currently running on 2010 SharePoint. Because this is an External Website for our organization we have an internally available Publishing Site and there is an Web App
Extension to provide Anon Access to users using the www address. Currently I am doing everything on a single server for testing with HOSTS entries to loop back so I can test with real host headers and not impact the 2010 prod environment. We will be setting
up 2 more WFEs with a NLB before moving this into prod but it isn't there yet. We brought the Site Collection Databases over but are still running in 2010 mode for now.
I migrated a copy of the Secure Store Database over from 2010 and had it put on the 2013 Farm's Database Server. Set up Secure Store and the Secure Store Proxy. I went into the Secure Store Proxy in CA and refreshed the Key with the proper Pass Phrase. After
doing that I could see the Target Application IDs listed. Everything was looking good so I went off to test. If I am on the publishing site I can go to a page that has the solution on it and it operates as expected. It does a query to a non SharePoint database
and returns information filtered based on the search parameters. The only odd thing I see is if I click on the "Site Actions" I get a message "An error has occurred with the data fetch. Please refresh page and retry." Need to look into
that more but it only happens on pages that have these solutions. Maybe a clue. If I go to the Anonymous Access page (www......) and try and use the solution, it immediately (way too quick to appear like it is doing anything) comes back with "The security
token request cannot be completed."
If I dig through the usage logs I am finding the following.
The Secure Store Service application Secure Store Service Proxy is not accessible. The full exception text is: The security token request cannot be completed.
Unexpected exception from endpoint address : https://[Servername]:32844/4e87fd3aabb640fb8cc3ed52188cf5c0/SecureStoreService.svc/https
Logging unknown/unexpected client side exception: InvalidOperationException. This will cause this application server to be removed from the load balancer queue. Exception: System.InvalidOperationException: The security token request cannot be completed.
at Microsoft.SharePoint.SPSecurityContext.SecurityTokenForServiceContext(Uri contextUri) at Microsoft.SharePoint.SPChannelFactoryOperations.InternalCreateChannelActingAsLoggedOnUser[TChannel](ChannelFactory`1 factory, EndpointAddress
address, Uri via) at Microsoft.Office.SecureStoreService.Server.SecureStoreServiceApplicationProxy.GetChannel(Uri address) at Microsoft.Office.SecureStoreService.Server.SecureStoreServiceApplicationProxy.Execute[T](String operationName,
Boolean validateCanary, ExecuteDelegate`1 operation).
Initially I was fighting a firewall issue because it wasn't working (different errors) on both sides. Had Network Engineers open firewall ports needed and now it works on the publishing side. Still the same error on the Anon side. I suspect I have missed
something when it comes to configuring the Secure Store to allow access to anonymous connections.
Let me know if you need any more information but that should paint a pretty good picture as to how things are set up.
Thanks for any help on this one. Searches haven't found much that has helped so far.

Hi Sennister,
I recommend to verify the things below:
Did this issue occur with all the pages in the anonymous side?
Check if the Claims to Windows Token Service is started.
Change the <identity impersonate="true" /> in the web.config to see if the issue still occurs.
Thanks,
Victoria
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Victoria Xia
TechNet Community Support

How to deal with credentials for external applications using a Java Client/

Hi Guys,
This is the case. I am integrating an external application with an ADF Application. I have implemented some programmatic ViewObjects that are being filled up by a REST Java Client Wrapper. Everything is working fine but the issue is that the credentials the wrapper is using are hard coded inside the java class. I am thinking to ask for the credentials at the beginning of my taskflow and then store them somewhere and use them then to create my client wrapper (passing them in the constructor).
However, I don't know if my approach is good and I would like you to share your experiences or how to deal with this.
Regards

You can use Credential Store Framework to store the credentials securely in the weblogic server instead of hardcoding in the java class.
The Credential Store Framework:
- enables you to manage credentials securely
- provides an API for storage, retrieval, and maintenance of credentials in different back-end repositories
Check the documentation on CSF API -
http://docs.oracle.com/cd/E29505_01/core.1111/e10043/devcsf.htm
Major Steps -
1. Create a credential map and key in em console to store the password (http://docs.oracle.com/cd/E25054_01/core.1111/e10043/csfadmin.htm)
2. Use CSF API to retrieve the stored password
3. In jazn-data.xml give permissions to access CSF key and map

How do you harness URL external application in a JSP?

I have successfully deployed the Yahoo Finance sample URL External Application. However, I do not understand how to utilize the URL classes (in the pdkjava.jar) to harness the external application information once a user has authenticated. I am building a JSP portlet that displays and applet, however the applet requires a username and password. I need to get the Username and Password from external application, which it gets from the user via External Application. How do I get these values in my JSP (that is defined in my provider.xml)? I keep seeing documentation regarding the ExternalPrincipal object however I don't understand how to utilize this object in my JSP. I beleive the ExternalPrincipal object is what I need in my JSP, seeing that it has the methods for getting the user and password. Unless is there a better way of achieving this, can anyone shed some light on getting the ExternalPrincipal object for an External Application session?
Thanks,
Laith E.H.

Thanks for the example. I have a better understanding now, however I'm still having trying to comprehend the flow of executing in this portal model.
I have a problem with:
PortletRenderRequest pr = (PortletRenderRequest) request.getAttribute("oracle.portal.PortletRenderRequest");
ProviderUser prUser = pr.getUser();
ProviderSession pSession = prUser.getSession(true);
I get a NullPointerException on the second line when trying to getUser(). I'm not sure where the problem could be. In the provider.xml, my ExternalProviderInstance, or the JSP itself? I have another JSP portlet on the same page that calls the same method with success.
Thanks,
Laith E.H.
provider.xml:
<?xml version="1.0" encoding="UTF-8"?>
<?providerDefinition version="3.1"?>
<provider class="oracle.portal.provider.v2.http.URLProviderDefinition">
     <providerInstanceClass>com.cox.portal.provider.ExternalProviderInstance</providerInstanceClass>
     <session>true</session>
     <authentication class="oracle.portal.provider.v2.security.Authentication">
          <authType>ExternalApp</authType>
          <userFieldName>Username</userFieldName>
          <userPwdName>Password</userPwdName>
          <errorPageMessages>Invalid ID,Invalid Password</errorPageMessages>
     </authentication>
     <portlet class="oracle.portal.provider.v2.http.URLPortletDefinition">
     <id>1</id>
     <name>ExternalAnalyzer</name>
     <title>Main Analyzer</title>
     <description>This portlet logs into analyzer</description>
     <timeout>100</timeout>
     <timeoutMessage>analyzer timed out</timeoutMessage>
          <showEdit>false</showEdit>
          <showEditDefault>false</showEditDefault>
          <showPreview>false</showPreview>
          <showDetails>false</showDetails>
          <hasHelp>false</hasHelp>
          <hasAbout>false</hasAbout>
          <acceptContentType>text/html</acceptContentType>
          <registrationPortlet>false</registrationPortlet>
          <accessControl>registered</accessControl>
          <renderer class="oracle.portal.provider.v2.render.RenderManager">
               <showPage class="oracle.portal.provider.v2.render.http.URLRenderer">
                    <pageUrl>http://catl0dv31.corp.cox.com/bic/analyzerIFrame.jsp?ap_doc=analyzer&ap_id=105</pageUrl>
                    <contentType>text/html</contentType>
               </showPage>
          </renderer>
          <securityManager class="oracle.portal.provider.v2.security.URLSecurityManager">
               <authorizType>registered</authorizType>
          </securityManager>
     </portlet>
</provider>
ExternalProviderInstance:
package com.cox.portal.provider;
import oracle.portal.provider.v2.*;
import oracle.portal.provider.v2.http.*;
import oracle.portal.provider.v2.externalApp.*;
public class ExternalProviderInstance extends URLProviderInstance
public static final String EXTERNAL_APP = "externalapp.object.key";
ProviderSession pSession = null;
public Object[] initSession(ProviderUser user, ExternalPrincipal externalApp)
throws ProviderException {
//UrlServicesUtils.logMessage("BasicURLProvider : Entering initSession.", getDebugLevel());
//Create/Retrieve provider user session.
if (mProviderDefinition.getHasSession()) {
// Create the session if it doesn't already exist.
pSession = user.getSession(true);
// Store external app in provider session so that other modules
// can extract it later.
if (pSession != null) {
pSession.setAttribute(EXTERNAL_APP, externalApp);
// Get javax.servlet.http.Cookie[] from user
javax.servlet.http.Cookie[] cookies = ((ServletProviderUser)user).getCookies();
if(cookies != null)
return cookies;
else
return null;

Reader 9.3.3 (Vista) : problem to launch external application

Hello!
I have a file which have links to start external application.
In Adobe Reader 9.3.3 (Windows Vista), I have that dialog box (in french, sorry) :
How can I activate launching external applications?
Thank you for your help.
François

This is a security issue. Try looking at the Preferences under the Trust Manager.

Run External Application

Does anyone know the best way to connect to an external (non-Oracle) application via SQL or PL/SQL?? I have to run external applications such as MS Word from within an Oracle application. There are several applications which may be used, so I plan to start with a page of options with selection of an option connecting to the external application. Any proven options will be considered.

This may be be very hard to accomplish...
If users are accessing an HTMLDB application, they persumably using a browser. Browsers, by design, aren't allowed to spawn external applications on the client machine-- imagine what would happen if I could put up a web site that opened an arbitrary application on your desktop. In theory, you could probably write an ActiveX/ Java component that could be embedded on pages from HTMLDB and will, with the right security settings, open up application windows. This would be a very complex development, deployment, and maintenance problem, though.
Perhaps if you explain why you want to spawn these applications, we could provide more assistance. It may be as simple as providing a link to a .XLS file stored in the database. When the user clicks on that and downloads the file, the server can identify the content-type of the file and the browser will open the file in whatever application is registered to support that file type.
Justin
Distributed Database Consulting, Inc.
http://www.ddbcinc.com/askDDBC

Username and Password is sent as clear text while accessing external Application

While accessing external application from SSO, the username and the password is sent as a clear text even though the form method is given as POST. Actually the potal opens a new window and it disables the address bar. Still the user name and password is visible in the status bar. Is there any wor around for the same

<S12:Envelope xmlns:S11="..." xmlns:wsse="..." xmlns:wsu= "...">
<S12:Header>
<wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
<wsse:UsernameToken xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
<wsse:Username>TestUser</wsse:Username>
<wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">TestPassword</wsse:Password>
</wsse:UsernameToken>
</wsse:Security>
</S12:Header>
</S12:Envelope>

Calling External Application from BPM 11g

I am new to BPM 11g and need to create the ability to call an external application (UCM) from within BPM. Will a web service adapter, with a type of Reference, accomplish this? How can I add security to this web service.
The second question is how can I add an adapter that alllows me to specify our own source code? In this scenario we would write the Java to formulate the SOAP call directly, thus allowing us to add the security into the call directly.
Any information is much appreciated.
Thanks,
Randy

Hi Randy,
You can call an external application using a spring component integration, I was just able to get that to work with a help from another forum member here is a viewlet that demos the spring integration:
http://bpel.us.oracle.com/BPM/11gR1/howtos/spring-component/oow-2010-Beijing-viewlet/springdemo_v2_viewlet_swf.html
Alex.

External Application without portal ?

Hi all
I have several applications built in JSP + BC4J , deployed in Oracle Application Server 10G (9.0.4) , operating system is windows 2000 server.
Application server middle tier and infrastruture are in the same server.
I have added all applications to SSO as External Application
I'm not using Portal, so, how can i make this applications "visible" to end user ?
Should i built and JSP page wich lists all External Applications, asks for login/password if authentication cookie not exits ??
is there any other way of doing it without portal ???
Best Regards
Rui Madaleno

Rui,
actually the External Applications implementation is completely separate from the Portal and does not require it to function. (The external Applications Portlet is a simple interface to expose the list of external applications.
If you are looking for a simple interface to expose the list, it is much as you describe. Building a simple Partner application which has links referencing the appropriate SSO server URLs. Storing the links in a table and simply querying them allows for a simple interface that can be secured/modified withour haveing to change the page itself.

Error : Import Security Failed - The application is invalid.

I am getting the following error while importng security in planning through secfile.txt
Error : Import Security Failed - The application XPLAN is invalid.

John:
Here is the error i am getting while extracting the security from planning
D:\Hyperion\Planning\bin>ExportSecurity.cmd /A=XPlan,/U=admin,/P=Pwd
Unable to get JDBC driver oracle.jdbc.driver.OracleDriverjava.lang.ClassNotFound
Exception: oracle.jdbc.driver.OracleDriver
java.lang.ClassNotFoundException: oracle.jdbc.driver.OracleDriver
at java.net.URLClassLoader$1.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(Unknown Source)
at java.lang.ClassLoader.loadClass(Unknown Source)
at sun.misc.Launcher$AppClassLoader.loadClass(Unknown Source)
at java.lang.ClassLoader.loadClass(Unknown Source)
at java.lang.ClassLoader.loadClassInternal(Unknown Source)
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Unknown Source)
at com.hyperion.planning.HspJDBCPool.<init>(Unknown Source)
at com.hyperion.planning.sql.HspSQLImpl.connectToJDBC(Unknown Source)
at com.hyperion.planning.sql.HspSQLImpl.<init>(Unknown Source)
at com.hyperion.planning.utils.HspJSHomePropsFactory.createHomeInstance(
Unknown Source)
at com.hyperion.planning.utils.HspJSHomePropsFactory.createHomeInstance(
Unknown Source)
at com.hyperion.planning.HspJSHomeImpl.loadProperties(Unknown Source)
at com.hyperion.planning.HspJSHomeImpl.<init>(Unknown Source)
at com.hyperion.planning.HspJSHomeImpl.getStaticHome(Unknown Source)
at com.hyperion.planning.HspJSHomeImpl.getStaticHome(Unknown Source)
at com.hyperion.planning.HyperionPlanningBean.<init>(Unknown Source)
at com.hyperion.planning.utils.HspExportSecurityCmd.execute(Unknown Sour
ce)
at com.hyperion.planning.utils.HspExportSecurityCmd.main(Unknown Source)
Unable to create JDBC connection. java.sql.SQLException: No suitable driver
Unable to set Planning's Oracle connection numeric character to '.'. java.lang.N
ullPointerException
Can not set database catalog name, skipping set of catalog name: CAT_NAM
Can not get JDBC connection.
Unable to create JDBC connection. java.sql.SQLException: No suitable driver
java.lang.Exception: No object were successfully created. This can be caused by
any of the following: The OLAP Server is not running, The DBMS is not running, t
he DBMS is running on a different machine that the one specified, the name and p
assword provided were incorrect.
at com.hyperion.planning.HspPool.getObject(Unknown Source)
at com.hyperion.planning.sql.HspSQLImpl.getConnection(Unknown Source)
at com.hyperion.planning.utils.HspJSHomePropsFactory.createHomeInstance(
Unknown Source)
at com.hyperion.planning.utils.HspJSHomePropsFactory.createHomeInstance(
Unknown Source)
at com.hyperion.planning.HspJSHomeImpl.loadProperties(Unknown Source)
at com.hyperion.planning.HspJSHomeImpl.<init>(Unknown Source)
at com.hyperion.planning.HspJSHomeImpl.getStaticHome(Unknown Source)
at com.hyperion.planning.HspJSHomeImpl.getStaticHome(Unknown Source)
at com.hyperion.planning.HyperionPlanningBean.<init>(Unknown Source)
at com.hyperion.planning.utils.HspExportSecurityCmd.execute(Unknown Sour
ce)
at com.hyperion.planning.utils.HspExportSecurityCmd.main(Unknown Source)
Unable to set Planning's Oracle connection numeric character to '.'. java.lang.N
ullPointerException
Can not set database catalog name, skipping set of catalog name: CAT_NAM
Exception while trying to load HspJSHome.properties: Connection was null
Unable to create JDBC connection. java.sql.SQLException: No suitable driver
java.lang.NullPointerException: Connection was null
at com.hyperion.planning.sql.HspSQLImpl.executeQuery(Unknown Source)
at com.hyperion.planning.sql.HspSQLImpl.executeQuery(Unknown Source)
at com.hyperion.planning.utils.HspJSHomePropsFactory.createHomeInstance(
Unknown Source)
at com.hyperion.planning.utils.HspJSHomePropsFactory.createHomeInstance(
Unknown Source)
at com.hyperion.planning.HspJSHomeImpl.loadProperties(Unknown Source)
at com.hyperion.planning.HspJSHomeImpl.<init>(Unknown Source)
at com.hyperion.planning.HspJSHomeImpl.getStaticHome(Unknown Source)
at com.hyperion.planning.HspJSHomeImpl.getStaticHome(Unknown Source)
at com.hyperion.planning.HyperionPlanningBean.<init>(Unknown Source)
at com.hyperion.planning.utils.HspExportSecurityCmd.execute(Unknown Sour
ce)
at com.hyperion.planning.utils.HspExportSecurityCmd.main(Unknown Source)
Unable to set Planning's Oracle connection numeric character to '.'. java.lang.N
ullPointerException
Creating rebind thread to RMI
Can not set database catalog name, skipping set of catalog name: CAT_NAM
java.lang.IllegalArgumentException: JDBC driver cannot be null
at com.hyperion.planning.HspJDBCPool.<init>(Unknown Source)
at com.hyperion.planning.sql.HspSQLImpl.connectToJDBC(Unknown Source)
at com.hyperion.planning.sql.HspSQLImpl.<init>(Unknown Source)
at com.hyperion.planning.HspJSHomeImpl.<init>(Unknown Source)
at com.hyperion.planning.HspJSHomeImpl.getStaticHome(Unknown Source)
at com.hyperion.planning.HspJSHomeImpl.getStaticHome(Unknown Source)
at com.hyperion.planning.HyperionPlanningBean.<init>(Unknown Source)
at com.hyperion.planning.utils.HspExportSecurityCmd.execute(Unknown Sour
ce)
at com.hyperion.planning.utils.HspExportSecurityCmd.main(Unknown Source)
java.lang.NullPointerException: Connection was null
at com.hyperion.planning.sql.HspSQLImpl.executeQuery(Unknown Source)
at com.hyperion.planning.sql.HspSQLImpl.executeQuery(Unknown Source)
at com.hyperion.planning.utils.HspJSHomePropsFactory.getApplicationsForC
luster(Unknown Source)
at com.hyperion.planning.utils.HspJSHomePropsFactory.getApplications(Unk
nown Source)
at com.hyperion.planning.utils.HspJSHomePropsFactory.createAppsInstance(
Unknown Source)
at com.hyperion.planning.utils.HspJSHomePropsFactory.createDecryptedApps
Instance(Unknown Source)
at com.hyperion.planning.HspJSHomeImpl.<init>(Unknown Source)
at com.hyperion.planning.HspJSHomeImpl.getStaticHome(Unknown Source)
at com.hyperion.planning.HspJSHomeImpl.getStaticHome(Unknown Source)
at com.hyperion.planning.HyperionPlanningBean.<init>(Unknown Source)
at com.hyperion.planning.utils.HspExportSecurityCmd.execute(Unknown Sour
ce)
at com.hyperion.planning.utils.HspExportSecurityCmd.main(Unknown Source)
Can not get JDBC connection.
java.lang.NullPointerException
at com.hyperion.planning.sql.HspSQLImpl.getConnection(Unknown Source)
at com.hyperion.planning.event.HspSysExtChangeHandler.actionPoller(Unkno
wn Source)
at com.hyperion.planning.event.HspSysExtChangeHandler.<init>(Unknown Sou
rce)
at com.hyperion.planning.HspJSHomeImpl.<init>(Unknown Source)
at com.hyperion.planning.HspJSHomeImpl.getStaticHome(Unknown Source)
at com.hyperion.planning.HspJSHomeImpl.getStaticHome(Unknown Source)
at com.hyperion.planning.HyperionPlanningBean.<init>(Unknown Source)
at com.hyperion.planning.utils.HspExportSecurityCmd.execute(Unknown Sour
ce)
at com.hyperion.planning.utils.HspExportSecurityCmd.main(Unknown Source)
Can not get JDBC connection for SYS external changed actions.
Can not get JDBC connection.
java.lang.NullPointerException
at com.hyperion.planning.sql.HspSQLImpl.getConnection(Unknown Source)
at com.hyperion.planning.event.HspSysExtChangeHandler.actionPoller(Unkno
wn Source)
at com.hyperion.planning.event.HspSysExtChangeHandler.run(Unknown Source
Can not get JDBC connection for SYS external changed actions.
Unable to find JDBC_CATALOG key for application: XPlan
com.hyperion.planning.InvalidApplicationException: The application XPlan is in
valid.
at com.hyperion.planning.HspJSHomeImpl.createHspJS(Unknown Source)
at com.hyperion.planning.HspJSHomeImpl.getHspJSByApp(Unknown Source)
at com.hyperion.planning.HyperionPlanningBean.Login(Unknown Source)
at com.hyperion.planning.HyperionPlanningBean.Login(Unknown Source)
at com.hyperion.planning.utils.HspExportSecurityCmd.execute(Unknown Sour
ce)
at com.hyperion.planning.utils.HspExportSecurityCmd.main(Unknown Source)
the prop file is ok and the catalog name and dsn is fine in Oracle.
The Oracle is running on a diff server.

Fail to create External Application for Lotus Notes portlet (diiop_ior.txt)

I've downloaded the PDK-January today and I'm trying the Lotus Notes Portlet. I have been following the document located in the PDK directory pdk\pdk\solutions\lotusnotes\installation.html.
I encountered problem when I trying the section Publishing the Lotus Notes Portlets - Creating the External Application -> at the last 2 steps.
At first I think it's my fault until I keep finding other posts and monitoring the console log for my standalone OC4J server.
java.io.FileNotFoundException: http://dominalWebMailip:80/diiop_ior.txt
java.io.InputStream sun.net.www.protocol.http.HttpURLConnection.getInput
Stream()
HttpURLConnection.java:560
java.io.InputStream java.net.URL.openStream()
URL.java:798
java.lang.String lotus.domino.NotesFactory.getIOR(java.lang.String)
NotesFactory.java:314
lotus.domino.Session lotus.domino.NotesFactory.createSession(java.lang.S
tring, java.lang.String, java.lang.String)
NotesFactory.java:65
boolean oracle.portal.integration.lotusnotes.application.ApplicationLogi
n.authenticateUser(java.lang.String, java.lang.String, java.lang.String, java.la
ng.String, java.lang.String)
void oracle.p[i]Long postings are being truncated to ~1 kB at this time.

(Continued)
void oracle.security.jazn.oc4j.JAZNFilter.doFilter(javax.servlet.Servlet
Request, javax.servlet.ServletResponse, javax.servlet.FilterChain)
JAZNFilter.java:283
void com.evermind.server.http.ServletRequestDispatcher.invoke(javax.serv
let.ServletRequest, javax.servlet.ServletResponse)
ServletRequestDispatcher.java:560
void com.evermind.server.http.ServletRequestDispatcher.forwardInternal(j
avax.servlet.ServletRequest, javax.servlet.http.HttpServletResponse)
ServletRequestDispatcher.java:306
boolean com.evermind.server.http.HttpRequestHandler.processRequest(com.e
vermind.server.ApplicationServerThread, com.evermind.server.http.EvermindHttpSer
vletRequest, com.evermind.server.http.EvermindHttpServletResponse, java.io.Input
Stream, java.io.OutputStream, boolean)
HttpRequestHandler.java:767
void com.evermind.server.http.HttpRequestHandler.run(java.lang.Thread)
Thanks for any help and replies!

JRE 6u19 - security warning   external properties file

Hi,
I have an applet with several jars files, all jars are signed.
Since JRE 6u19, when launching my applet, I have the message "Java has discovered application components that could indicate a security problem".
6u19 has a new security approach for application/applet mixing Signed and Unsigned Code.
http://java.sun.com/javase/6/docs/technotes/guides/jweb/mixed_code.html
Nevertheless, in my case, all jars are signed and I still have the warning message.
I analyzed the code and noticed that the warning comes from the use of a properties file and a 'cacerts' file.
The property file is used through the common class: java.util.Properties
I think also that we have security warnings when using the following methods to get resources :
this.getClass().getClassLoader().getResourceAsStream(fileName)
or java.util.ResourceBundle.getBundle
JRE 6u19 is supposed to verify if the jars are signed (and all my jars are signed) but I don' t understand why I have a security warning when using a properties file.
I would appreciate to get help. thanks.
Regards,
Cédric

I read your reply as: It should work to use the context classloader to load resources from unsigned jars without getting the warning. Is that correct?
Unfortunately, I cannot attach context, so I am going to provide a small sample consisting of a handful of files, that produces a warning for me.
To run the example:
- Correct the codebase in the two jnlp-files
- Compile the java-file, jar it to a jar called webstart.jar and sign the jar.
- Jar the text file to a jar called resource.jar.
- Run the webstart.jnlp.
Main.java:
package com.virtubuild;
import java.io.*;
import java.net.*;
public class Main {
public static void main(String[] args) throws IOException {
    ClassLoader contextClassLoader = Thread.currentThread().getContextClassLoader();
    URL url = contextClassLoader.getResource("resource.txt");
    if(url==null) {
      System.err.println("Could not find external resource");
      return;
    readAndPrint(url);
private static void readAndPrint(URL url) throws IOException {
    BufferedReader in = openFile(url);
    String inputLine = null;
    while ((inputLine = in.readLine()) != null) {
      System.out.println(inputLine);
    in.close();
public static BufferedReader openFile(URL url) throws IOException{
    InputStream input = url.openStream();
    InputStreamReader ireader = new InputStreamReader(input,"UTF8");
    return new BufferedReader(ireader);
webstart.jnlp:
<?xml version="1.0" encoding="UTF-8"?>
<jnlp spec="6.0+" codebase="file:///C:/TEMP/webstart/" href="webstart.jnlp">
<information>
    <title>Webstart</title>
</information>
<security>
    <all-permissions/>
</security>
<update check="always" policy="prompt-update"/>
<resources>
    <java version="1.6+"/>
          <jar href="webstart.jar" main="true"/>
</resources>
<resources>
       <extension href="resource.jnlp"/>
</resources>
<application-desc/>
</jnlp>
resource.txt:
Test
Testing
Tested
resource.jnlp:
<?xml version="1.0" encoding="UTF-8"?>
<jnlp spec="6.0+" codebase="file:///C:/TEMP/webstart/" href="resource.jnlp">
<information>
    <title>Resource</title>
</information>
<update check="always" policy="prompt-update"/>
<resources>
<jar href="resource.jar"/>
</resources>
<component-desc/>
</jnlp>The better way you mention is not really an option for us right now, but we will keep it in mind if we create another product deployed through webstart.

URL based portlet from external application

Hello,
I'm trying to integrate a forms 6i patch 10 application into SSO.
First, I created an external application, passing it the correct parameters.
Everything went ok, and I can successfully call it by entering
"Administer Enternal Application" link on Oracle Portal.
Now I want to make a portlet from this external application. For that I'm
using PDK URL Services. So I reused the urlexternalauth provider which is
included in the latest PDK. The provider.xml is included below. I successfully
registered the provider, by following the wizard "Register Portlet Provider" on
Oracle Portal. But when I call the portlet, the html startup file for the form
is base.htm. When I call the external application through the "Administer Enternal Application" link,
I get the right html startup file, which is basejini.htm.
So I need basejini.htm called from the portlet, and not base.htm.
Thanks,
Andri.
provider.xml
<?xml version="1.0" encoding="UTF-8"?>
<?providerDefinition version="3.1"?>
<provider class="oracle.portal.provider.v2.http.URLProviderDefinition">
     <providerInstanceClass>oracle.portal.provider.v2.http.URLProviderInstance</providerInstanceClass>
     <session>true</session>
     <authentication class="oracle.portal.provider.v2.security.Authentication">
          <authType>ExternalApp</authType>
          <userFieldName>username</userFieldName>
          <userPwdName>password</userPwdName>
          <errorPageMessages>Error Message!</errorPageMessages>
     </authentication>
     <proxyInfo class="oracle.portal.provider.v2.ProxyInformation">
          <httpProxyHost>proxy.br.odebrecht.com</httpProxyHost>
          <httpProxyPort>8080</httpProxyPort>
     </proxyInfo>
<portlet class="oracle.portal.provider.v2.http.URLPortletDefinition">
<id>1</id>
<name>iCorporate</name>
<title>iCorporate</title>
<description>iCorporate - aplicacao Forms6i</description>
<timeout>100</timeout>
<timeoutMessage>iCorporate time out</timeoutMessage>
<acceptContentType>text/html</acceptContentType>
<showEdit>false</showEdit>
<showEditToPublic>false</showEditToPublic>
<showEditDefault>false</showEditDefault>
<showPreview>false</showPreview>
<showDetails>false</showDetails>
<hasHelp>false</hasHelp>
<hasAbout>false</hasAbout>
<passAllUrlParams>true</passAllUrlParams>
<inputParameter class="oracle.portal.provider.v2.URLPortletParameter">
<name>config</name>
<displayName>config</displayName>
<value>icorp</value>
<isMandatory>true</isMandatory>
</inputParameter>
<inputParameter class="oracle.portal.provider.v2.URLPortletParameter">
<name>database</name>
<displayName>database</displayName>
<value>server1</value>
<isMandatory>true</isMandatory>
</inputParameter>
<renderer class="oracle.portal.provider.v2.render.RenderManager">
<showPage class="oracle.portal.provider.v2.render.http.URLRenderer">
<contentType>text/html</contentType>
<pageUrl>http://server1.rjo.br.odebrecht.com:7780/servlet/f60servlet</pageUrl>
</showPage>
</renderer>
<securityManager class="oracle.portal.provider.v2.security.URLSecurityManager">
<authorizType>public</authorizType>
</securityManager>
</portlet>
</provider>

Andrea,
Could you tell me if FORMS 6i authentication process is based on cookies? The reason being, URL based portlets SSO feature is primarily driven by External Application's cookies, which act as authentication tokens. Once a valid user information is submitted to the External Application, cookies (if any) are received and stored so that they can be re-used in further connections. A typical flow of events can be summarized as follows :
At provider level :
1. Connect to External Application.
2. Submit user information to url specified by External Application's login URL.
3. Fetch cookies
4. Store them for future use.
At portlet level :
1. Read cookies fetched through provider, pertaining to this portlet.
2. Open connection to url specified by <pageUrl> tag in provider.xml
3. Read content and display in the portlet.
From the provider.xml, I can see that we are trying to show content given by http://venezuela.rjo.br.odebrecht.com:7780/servlet/f60servlet servlet, which has two parameters called {config and database}. This makes the resulting URL as http://venezuela.rjo.br.odebrecht.com:7780/servlet/f60servlet?config=icorp&database=venezula. I guess when this URL is accessed directly, FORMS servlet will redirect the user to base.htm file. Important point to note here is that when URL based portlet makes connection to the above URL, user information is not directly sent along with the request. Instead, cookies fetched from External Application, if any, are sent. But when the same application is viewed through portal's External Application, user information is directly submitted to the login URL. So, before deciding on something, it is important to know how different is the loginURL specified through portal's External Application details, from <pageUrl> of URL based portlets?
-aMJAD.

How to access ucm table from external application?

Hi All.
Is it possible to access an ucm table (configuration manager-> tables) from of the other external application?
If yes, how to do it?
Regards,
Diovani

It's just another DB table so JDBC would work fine.
You can connect to the UCM schema using a free tool like Oracle SQLDeveloper and look at the tables this alos uses a JDBC connection.
HOWEVER
I would not really recommend you use this approach without knowing a lot more. Certainly you should not have an external application making changes to the UCM DB. If you just want to read data SQL over JDBC is fine
BUT
It is better really to use the existing UCM services to access the data - if there is not a service that does what you want then you create it. This keeps you within the same design pattern of UCM and means you can continue to benefit from security and other rich services that UCM provides over and obove JDBC
Tim

Security witn external application

Similar Messages

Maybe you are looking for