Send authenticated(from java) user information to IIS

We are using webSphere 4.0/Servlet to authenticate users and store userid/password information in session. We have a link, on the same domain, which accesses IIS server. How do we pass the user's id/password to IIS so that the user does not get to dialog box from IIS to login again?
Thanks in advance
Sam

I would highly recommend not putting the user's id/password in the URL for authentication. If the user happens to have a proxy server between their browser and your application, that proxy will have logged their userid/password which would be seen by someone looking at those proxy logs.
It sounds like you are using basic authentication mechanisms built into the webservers and not creating your own. Basic authentication requires the username and password to be sent over the wire as part of the request. For that reason, the user must be prompted for it in order for it to be sent.
So, with that in mind, I think you have a few choices:
a) use the integrated authentication that IIS has. If the user is logged into their workstation as an authorized user and they are using IE, the authentication between the client and server will be transparent. However, that does not give you a nice cross-platform solution.
b) use something like client certificates for authentication on both your application and the other servers
c) have your websphere application also act as a gateway between the user and the other webserver. The websphere application would make the request to the IIS server on the user's behalf and then return the resulting page for the user. This is basically a proxy.
d) user a single sign-on mechanism such as Netegrity's Siteminder or build your own using cookies that both your websphere application and the IIS application will understand and can use. Don't put the person's username and password in the cookie, however. If you want to build your own, you should take a look at the "dos and dont's" paper at http://cookies.lcs.mit.edu/pubs.html.

Similar Messages

  • Send email from PA30 user exit

    When I try to send an email from user exit in ZXPADU02 it never makes it to SOST.  WIll always go to SBWP outbox if I set the flag but never gets sent to receiver address.
    If I paste the following code into a report it works fine.  Is there some other parameter for this FM or some additional process needed to send email from a user exit?
        DATA: maildata TYPE sodocchgi1.
        DATA: mailtxt  TYPE TABLE OF solisti1 WITH HEADER LINE.
        DATA: mailrec  TYPE TABLE OF somlrec90 WITH HEADER LINE.
          CLEAR maildata.
          REFRESH: mailtxt, mailrec.
          maildata-obj_name = 'SRVC_EMAIL'.
          maildata-obj_descr = 'Email test'.
          maildata-obj_langu = sy-langu.
          mailtxt-line = 'Test line from user exit'.
          APPEND mailtxt.
          mailrec-receiver = '[email protected]'.
          mailrec-rec_type  = 'U'.
          APPEND mailrec.
          CALL FUNCTION 'SO_NEW_DOCUMENT_SEND_API1'
            EXPORTING
              document_data              = maildata
              document_type              = 'RAW'
              put_in_outbox                = 'X'
              commit_work                  = 'X'
            TABLES
              object_header                = mailtxt
              object_content               = mailtxt
              receivers                       = mailrec
            EXCEPTIONS
              too_many_receivers            = 1
              document_not_sent            = 2
              document_type_not_exist    = 3
              operation_no_authorization  = 4
              parameter_error                  = 5
              x_error                              = 6
              enqueue_error                    = 7
              others                           = 8.

    Put the function call 'SO_NEW_DOCUMENT_SEND_API1'
    in a report Program & SUBMIT that report from ZXPADU02.
    Arya

  • How to send SMS from Java program?

    Hello,
    I want to know, how can I send SMS from Java program.I dont have any idea about SMS gateways. Can any one give me Sample code for sending the SMSs from Java Program.
    Thanks,
    -BR

    hi,
    refer javamail concepts
    http://www.google.co.in/search?q=javamail+simple+example&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-a

  • OS Authentication from Java Program

    We are getting the below error while trying to get oracle connection using OS authentication.
    from the unix shell, we are able to "sqlplus /" . ie., invoke a sqlplus session using / account
    java.sql.SQLException: ORA-01004: default username feature not supported; logon denied
    echo $TNS_ADMIN
    /data/oracle/product/8.1.7.4/network/admin
    We gave the below options
    Option 1:
    DriverManager.registerDriver(new oracle.jdbc.driver.OracleDriver());
    conn = DriverManager.getConnection("jdbc:oracle:oci8:@database","","");
    Option 2:
    DriverManager.registerDriver(new oracle.jdbc.driver.OracleDriver());
    conn = DriverManager.getConnection("jdbc:oracle:oci8:/@database");
    However when substituted with actual user id and password the connection works
    conn = DriverManager.getConnection("jdbc:oracle:oci8:@database", user , password);
    The 8.1.7.4 oracle client is installed and am using classes12.jar of oracle8i version
    Can you pls. help

    Karthikeyan,
    The error message says it all: feature is not supported.
    For your information, your question has been asked (and answered) several times previously in this forum. Did you try searching the forum archives?
    Personally, I just live with this limitation -- it's not critical for me. Have you tried the MetaLink Web site?
    Good Luck,
    Avi.

  • Clear text  password - how to send it from java.

    I am trying to reset the password of a user from java.
    So I have to open a socket connection to Unix box and send a packet in following format
    "<adminUserid> <adminPassword> PASSWORD <target-userId> <new-passwd>\n"
    So they say that user credentials are to be send in cleartext
    Please tell me how i can send above string as cleartext
    thanks in advance.
    Renjith.

    But this is not working for me , UNIX gurus please help
    import java.net.InetAddress;
    import java.net.Socket;
    import java.net.UnknownHostException;
    import java.io.BufferedWriter;
    import java.io.OutputStreamWriter;
    import java.io.IOException;
    public class TestUnix {
    public static void main(String args[] ) {
         try {
                 InetAddress addr = InetAddress.getByName("x.x.x.x");
                 int port = 6546;
              System.out.println("Address IP : "+addr);
                 // This constructor will block until the connection succeeds
                 Socket socket = new Socket(addr, port);
              BufferedWriter wr = new BufferedWriter(new OutputStreamWriter(socket.getOutputStream()));
              String command = "<Admin><admin-pwd>PASSWORD<user><user-pwd>\n";
              System.out.println(command);
                     wr.write(command);
                 wr.flush();
              socket.close();
              System.out.println("Finished executing");
             } catch (UnknownHostException e) {
             } catch (IOException e) {
    }

  • Send message from java not client

    I have a java app running on my server and I'd like to send
    messages to subscribed clients. All the messaging examples I find
    have the messages originating from a flex producer. I want java to
    be the producer.

    I used this example to get it done.
    http://western-skies.blogspot.com/2006/07/flex-sending-messages-from-server-side.html

  • How to send parameters from java to perl

    I have a java program which is executing a perl script. I m using
    Runtime.getRuntime().exec method to execute the perl script. Now I have to send some parameters to the perl script from java which will be processed there. can you help me how to do it?

    nitu007 wrote:
    Then there is no solution for this .Not true.
    Actually the perl script was preety big and to convert it to java it will take time.That's no excuse not to do it.
    So i thought i could execute it througn java.You can. CGI is basically a protocol on how to invoke programs and deal with their output; so other programs than web servers can follow it to invoke CGI scripts.
    However, (1) you may find that implementing the CGI protocol from the invoker's side may be a bigger pain than it's worth, and (2) in the long run, you'll end up with a hack that will be a pain to maintain.
    In your case, because the script uses CGI.pm, implementing the full CGI protocol probably won't be necessary. But you'll still be doing some klugery to run the CGI script at all, and you'll be buying yourself pain in the long run. Even if you do run it this way, I'd advise that once you have that working and have some breathing room, you start to work porting the script.

  • Sending email from a user in another AD Domain

    Hi All
    I have two AD domains, domainA and domainB.  domainA is running Exchange 2010, domainB has no exchange at present. 
    I have users that exist in both domains.  I have setup trusts between domains.
    I want to be able to send emails from an outlook client and user in domainB using Exchange in domain.
    I have the user setup with Outlook 2010 and can see emails coming in but cannot send emails.  I get the message " Delivery has failed to these recipients. You cannot send a message on behalf of this user unless you have permission to do so. 
    Please make sure your sending on behalf of the correct sender or request the necessary permissions."
    As far as I can see I have granted rights to send.  Can anyone give me a step by step guide as to how I can achieve what I'm looking for.
    Thanks in advance
    Darren

    Hi  Ware
    Thank you for your question.
    By your state, I think you can configure exchange 2010 to accept e-mail for more than one authoritative domain ,
    you can refer to the following link:
    http://technet.microsoft.com/en-us/library/aa996314(v=exchg.141).aspx
    you can refer to the following link ,because he has similar error with you.
    https://social.technet.microsoft.com/Forums/exchange/en-US/3b19cc0f-724d-4564-99ed-022db97ef15e/configuring-exchange-2010-to-send-and-receive-email-from-multiple-domains?forum=exchange2010
    If any questions, please let me know.
    Best Regard,
    Jim Xu

  • How to send sms from java code

    hi
    I have involved in a project where I need to send sms to mobile from java code.Can anyone help me.if u have code please send me.
    thanks
    dhinesh

    Hi,
    there are several methods to do so but using Web Services is an easier one. Google will help you to find a provider. (E.x. http://www.remotemethods.com/home/communic/sms .)
    Best wishes,
    Christian Ullenboom | http://www.tutego.com/

  • Sending mail from java program

    I want to send mail from my java program.
    does anyone have the sample code?

    http://forum.java.sun.com/thread.jsp?forum=31&thread=266116

  • How to Send Fax from Java Code ?

    I want to send Fax from my Java Program without using any third party tools like RFax etc.
    I have explore that it is possible by using Java Communication API , but I can''t get the exactly. Can anybody help me Please?

    Ankit_B wrote:
    I want to send Fax from my Java Program without using any third party tools like RFax etc.
    I have explore that it is possible by using Java Communication API , but I can''t get the exactly. Can anybody help me Please?Have you tried searching the web? These open-ended questions like "I don't know how to do X, can someone help me" are almost never answered.
    However, if you have some specific question, feel free to ask it here.

  • Send error from Java to Flex

    I need to throw errors from Java and to receive them in Flex.
    My idea is using xml with error id and message, and maybe the Flex
    component which should show the error.
    Is there any other way to do it? Another interaction between
    Java and Flex?
    Thanks in advance
    Tuli-O

    XML wrapping error info written to response when java code
    throws and having a common component on the flex to handle this
    situation -- maybe on the fault event.

  • Send signal from java program to Excel document

    Hi
    I have a Java-program that once a day brings information from a website on the internet. When this has been done, I want to send a signal to an Excel document to run a vba-macro. The "signal" can e.g. be to put a value in a certain cell in the Excel document.
    Any ideas on how to do this?

    Thanks gtRpr I didnt actually know what webservices are so I looked them up, below is one of definintions i got, and this is not what I want. The class that i write will be only used by me and only to extract data from one website.
    >
    Web services allow organizations to communicate data without intimate knowledge of each other's IT systems behind the firewall.
    secruity is not a problem, so there should be no need to encypt. Here is the kind of steps that I have put together so far, please could you comment on them...
    1. find out what the textfields are called on the website that need //do this by hand once
    2. parse the website username and password
    3. traverse to correct web page
    4. return page info in xml format //sorry im new to this side of programming, is it easy to convert html - xml
    5. need to strip out all unessary xml comments to reveal me with my specific data
    Thanks
    Edited by: calypso on Aug 8, 2008 2:15 AM

  • Running scripts from Java user permissions

    I have a web based application running on JBoss application server. It during its processing of certain requests has to call some cshell scripts using Runtime.exec(). Now it seems to be working fine in development environment, however on testing environment it seems to freeze. On further debugging, and digging up the issue it came up that it could be a permissions issue, as certain users have the permissions to run the scripts and some don't.
    The Question therefore would be that, once a script is executed from an app server, which user is used? and in order for the script to be executed who should be granted permissions.
    Thanks in advance.

    Peter__Lawrey wrote:
    When any application starts another application (java or otherwise) it does so as the same user by default.
    The user running the JBoss is the user used.
    This is how all OSes work (to my knowledge)
    Which operating system are you using?Thanks, in that case I have a second question. Is there a way to force a certain user? I mean somebody other than the one who started the app server programmatically?

  • How do I send email from Java?

    Is there a class in Java to send email? Is there a third party class to do this? I don't really want to have to implement my own class which connects to the mail server...

    If you want a class to send mail...
    Here's the code :
    import java.util.*;
    import javax.mail.*;
    import javax.mail.internet.*;
    import javax.activation.*;
    public class Mail
    // Attributs
    public String host = null;
    public String to = null;
    public String from = null;
    public String subject = null;
    public String messageText = null;
    public String protocol = null;
    public Mail()
    host = "<your host>";
    public void sendMail()
    String msgRetour = null;
    Properties props = System.getProperties();
    props.put( "mail.smtp.host", host );
    Session sessionMail = Session.getDefaultInstance( props, null );
    try
    Message msg = new MimeMessage( sessionMail );
    msg.setFrom( new InternetAddress( from ) );
    InternetAddress address[] = { new InternetAddress( to ) };
    msg.setRecipients( Message.RecipientType.TO, address );
    msg.setSubject( subject );
    msg.setSentDate( new Date() );
    msg.setText( messageText );
    Thread mailThread = new TransportThread(msg);
    mailThread.start();
    catch( MessagingException e )
    class TransportThread extends Thread
    public Message msgMail;
    public TransportThread(Message msg)
    msgMail = msg;
    public void run()
    send();
    public void send()
    try
    Transport.send(msgMail);
    catch( MessagingException e )

Maybe you are looking for