Simple Authentication with SMP 10.1 and FMS 3.5

Good day all,
I am looking to add simple authentication to the SMP player for use with FMS 3.5. I recently came across a technical paper published by Adobe titled, "Video content protection measures enabled by Adobe Flash Media Interactive Server 3.5". Within this document are three examples of user authentication with code samples. I am starting with the "simple" client verification using a unique token authentication key method first.
I've noticed that SMP doesn't have any FMS security mechanisms built-in at least that I've been able to identify in the documentation or feature specs. Did I miss something? I am looking for assistance in getting started with adding this feature to SMP. So my question is where could I add the client side Actionscript within the SMP structure?
I'd very much like to hear about others' experiences with adding security mechanisms to SMP used with FMS.
Thank you.

Andrian - Thank you for the quick reply. I'm gald SMP has support for the playback of protected content. Is there more documentation than this demo on this topic?
I'll explain what I'm doing. I am implementing SMP as the default video player application used in online courses at the Savannah College of Art and Design. Identifying the player and implementing its use in our production workflow is the first step in a strategy to deliver a better video experience and leverage the scalibility and flexibility of SMP. On the back end integration with our FMS I have been asked to implement some user authentication. We don't need to re-auth the students as they have already been authenticated through our LMS. What is desired is each player instance authenticates with our server to prevent stream ripping.
The simple user token authentication key example from the linked document seems to best suit this intial need.

Similar Messages

Implemeting simple authentication with J2EE

Hi All,
i am converting a .NET web app to Java.
The application is is a very simple one including registration page, login, logout , password recovery , etc..
Registration and login also have a captcha on the page.
The application also needs to create users and roles programmatically.
All info should be stored in a DB
I consider all these features to be basic enough that every web app will require them , but when researching J2EE approach to those , I am stumped by the lack of information and simple implementation mechanisms.
After reviewing the docs for JAAS , Glassfish , J2EE , I still have not figured out a simple way to implement an architecture that will provide me with the features and flexibility described above, except for developing everything from scratch.
can someone please recommend to me an approach or a technology (or a set of them), that will fulfill the java promise and allow me to avoid messing about with implementation and focus on the business logic.
Thanks,
Shay

Hi Kaupo,
ill repeat my findings for the benefit of other readers.
1) JAAS forces you to use specific entry points , for example J_Secuirty for form authentication this approach wont work for an Ajax.RIA application.
2) JAAS provides no programmatic control over authentication , and no support for authorization.
3)some app servers complement JAAS by adding their own API's for programmatic control , but that forces you to another learning curve , and their implementations are very basic at best. for example Glassfish cant handle cross component sessions if you use a programmatic login.
4) after writing numerous prototypes i also decided to stear clear from EJB , and stick with POJO, since EJB forces unnecessary complexity for very little benefit.
5) the funniest thing i ran into was all the commotion about Spring , which at its best behaves like ASP.Net 4 years ago.
yes i know that it plugs so many holes in the poor implementations that EJB provides , but i found that library to be overly complex , with benefits for simple web development , not so much for serious enterprise work , and definitely not for RIA/AJAX.
one thing for sure ,Spring marketing is stellar :) , my recommendation would be to avoid the hype.
6) Acegi was swallowed by Spring , and now if you want to use Acegi, you need to learn Spring .
Results:
my research led me to the Jsecuirty framework which i am now customizing for my own needs.
1) its pojo based
2) no need for all the noise that Spring generates .
3) the framework is dedicated to 2 specific aspects authentication and authorization , and doesn't try to solve world hunger on the way(a problem which seems to plagues many open source products, please forgive the sarcasm)
4) friendly dev team , which actually enjoys answering questions .
5) the project is live , and i believe it will stay so for a while.
6) proper documentation
Thanks
Shay
Edited by: shay1680 on Feb 27, 2009 7:11 AM

MRS Push with SMP 3.0 and Service Manager 4.2 is not working

Hi All,
I am working on SMP 3.0 SP 06 Service Manager 4.2 application .
I have configured MRS Push which is not working . Service Order push is working fine.
If anyone has configured MRS push with any one the Syclo mobile products ,Please share the steps.
Thanks in advance.
Thanks
Neha

Neha,
Can you refer this OSS note: 2014454 for MRS setup.
Thanks,
Manju

Simple authentication and authorization with a servlet and a filter

Could somebody point me to code example that do simple authentication/authorization using one servlet and one filter? (without Spring, Struts, JSF or any framework)
I’m having a lot of problems with that, apparently, easy task.
These are the rules:
- A simple login page
- Two roles (admin, registered).
- If the user loged is an admin, redirect to his entry page (private/admin/index.jsp).
- If the user loged is of role registered, redirect him to his entry page (private/registered/index.jsp).
- If it’s not a valid user, redirect again to login page.
- Admin’s users cannot go to private/registered/ area.
- Registered users cannot go to private/admin/ area.
- Non authenticated user cannot go to private/ area
Thanks a lot in advance!
Edited by: JLuis on 25-ago-2010 15:27

AccessControl.java:
package com.tlsformacion.security;
import java.io.IOException;
import javax.servlet.RequestDispatcher;
import javax.servlet.ServletConfig;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import com.tlsformacion.utils.Log;
public final class AccessControl extends HttpServlet {
     private static final long serialVersionUID = 5741058615983779764L;
     private static final String USERNAME_ATTR = "username";
     private static final String PWD_ATTR = "password";
     private static final String LOGIN_PAGE_ATTR = "login_page";
     private static final String ROL_ATTR = "role";
     private boolean isAuthentic = false;
     private String role = null;
     private String loginPage = null;
     public AccessControl() {
        super();
     public void init(ServletConfig config) throws ServletException {
          loginPage = config.getInitParameter(LOGIN_PAGE_ATTR);
     protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
          debug("Inside doGet");
          doAccessControl(request, response);
     protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
          debug("Inside doPost");
          doAccessControl(request, response);
     private void doAccessControl (HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
          debug("Inside doAccessControl");
          doAuthentication(request, response);
          if (isAuthentic) { //Authentic user
               doAuthorization(request, response);
          } else { //User NOT authentic
               doRejection(request, response);
     private void doAuthentication(HttpServletRequest request, HttpServletResponse response) {
          debug("Inside doAuthentication");
        String requestedURI = request.getRequestURI();
        if (requestedURI.contains("/AccessControl")) { //Comes from login page
             debug("Comes from login page");
              String username = request.getParameter(USERNAME_ATTR);
            String pwd = request.getParameter(PWD_ATTR);
             role = getRole(username, pwd);
             if (role != null) {
                  isAuthentic = true;
                  request.getSession().setAttribute(ROL_ATTR, role);
        } else { //Doesn't comes from login page
             debug("Doesn't comes from login page");
             if (isInSession(request)) {
                  debug("Rol is in session");
                  isAuthentic = true;
             } else {
                  debug("Rol is NOT in session");
     private void doAuthorization(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
          debug("Inside doAuthorization");
          String requestedURI = request.getRequestURI();
          debug("requestedURI: " + requestedURI);
          if (requestedURI.contains("/AccessControl")) { //Comes from login page
               goHomePage(request, response);
          } else if (requestedURI.contains("/private/" + role)) { //Trying to access his private area
               goRequestedPage(request, response);
          } else { //Trying to access other roles private area
               goLoginPage(request, response);
    private void doRejection(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
         debug("Inside goRejection");
         role = null;
          goLoginPage(request, response);
     private void goHomePage(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
          debug("Inside goHomePage");
          String homePage = "private/" + role + "/index.jsp";
          goPage(request, response, homePage);
     private void goLoginPage(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
          debug("Inside goLoginPage");
          goPage(request, response, loginPage);
     private void goRequestedPage(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
          debug("Inside goRequestedPage");
          String contextPath = request.getContextPath();
          debug("contextPath: " + contextPath);
          String requestedPage = request.getRequestURI().replace(contextPath + "/", "");
          goPage(request, response, requestedPage);
     private void goPage(HttpServletRequest request, HttpServletResponse response, String page) throws IOException, ServletException {
          debug("Inside goPage ...trying to go to: " + page);
          //Option A
          response.sendRedirect(page);
          //Option B
          //RequestDispatcher requestDispatcher = request.getRequestDispatcher(page);
          //requestDispatcher.forward(request, response);
     private boolean isInSession(HttpServletRequest httpRequest) {
         boolean inSession = false;
          role = (String)httpRequest.getSession().getAttribute(ROL_ATTR);
          if (role != null && !role.equals("")) {
               inSession = true;
         return inSession;
    //PENDIENTE: mock method!
    private String getRole(String username, String pwd) {
         String role = null;
         if (username.equals("admin") && pwd.equals("admin")) {
              role = "administrator";
         } else if (username.equals("regis") && pwd.equals("regis")) {
              role = "registered";
         return role;
    private void debug(String msg) {
         Log.debug(msg);
}Proyect Folder Structure:
WebContent
     login.html
     private
          administrator
               index.jsp
          registered
               index.jspBasically, the problem is that if you try to log as admin/admin (for example) the servlet AccessControl executes infinitely
Edited by: JLuis on 26-ago-2010 8:04

Kerberos authentication with Active Directory

I have tried using JAAS to authenticate to MS Active Directory and keep getting "javax.security.auth.login.LoginException: Pre-Authentication Information was invalid"
I have tried authenticating with multiple user accounts and on three different realms (Active Directory domains).
How do I need to format the username? I know that when using JNDI to access Active Directory I have to use the format "[email protected]" or the RDN. I have tried it both ways with JAAS kerberos authentication as well as with just the username by itself. I don't think that the username format is the problem though because if I set the account lockout policy to 5 failed attempts, sure enough my account will be locked out after running my code 5 times. If I give a username that doesn't exist in Active Directory I get the error "javax.security.auth.login.loginexception: Client not found in Kerberos database" Is there something special that I have to do to the password?
I know that there is just something stupid that I'm missing. Here is the simplest example of code that I'm working with:
import java.io.*;
import javax.security.auth.callback.*;
import javax.security.auth.login.*;
import javax.security.auth.Subject;
import com.sun.security.auth.callback.TextCallbackHandler;
public class krb5ADLogin1 {
public static void main(String[] args){
LoginContext lc = null;
try {
lc=new LoginContext("krb5ADLogin1", new TextCallbackHandler());
lc.login();
catch(Exception e){
e.printStackTrace();
Here is my config file:
krb5ADLogin1 {
com.sun.security.auth.module.Krb5LoginModule required;
The command I use to start the program is:
java -Djava.security.krb5.realm=mydomain.com
-Djava.security.krb5.kdc=DomainController.mydomain.com
-Djava.security.auth.login.config=sample.conf krb5ADLogin1

Hi there ... the Sun web site has the following snippet:
http://java.sun.com/j2se/1.4/docs/guide/security/jgss/tutorials/Troubleshooting.html
+ javax.security.auth.login.LoginException: KrbException::
Pre-authentication information was invalid (24) - Preauthentication failed
Cause 1: The password entered is incorrect.
Solution 1: Verify the password.
Cause 2: If you are using the keytab to get the key (e.g., by
setting the useKeyTab option to true in the Krb5LoginModule entry
in the JAAS login configuration file), then the key might have
changed since you updated the keytab.
Solution 2: Consult your Kerberos documentation to generate a new
keytab and use that keytab.
Cause 3: Clock skew - If the time on the KDC and on the client
differ significanlty (typically 5 minutes), this error can be
returned.
Solution 3: Synchronize the clocks (or have a system administrator
do so).
Good luck,
-Derek

Creating an AVCHD DVD with Nero Vision 5 and Premiere Pro

This seems to work pretty well as a workflow (using AVCHD clips from a Panasonic SD5):-
Get your AVCHD clips onto your hard drive using the camcorder's software.
Run Nero 8 "StartSmart", choose "Author Edit and Capture Video"
Choose "Make Movie"
Using the "Browse For Media" button, navigate to where your AVCHD clips are and select.
When they are in the media file list, drag them to the Nero Vision timeline.
Click on the "Export" button and choose "Export Video to File"
Choose format "MPEG-2" and profile "HDV HD2 (1080i)"
Specify filename for output and click on "Export".
Run Premiere Pro and choose "New Project" and "Adobe HDV"
Choose HDV 1080i 25 (Sony 50i)
Edit as normal. On my quad core (Q9300) PC it's easily possible to use 3 video tracks at once and preview full screen smoothly, or add effects etc - a much better experience that using AVCHD with the costly Mainconcept plugin IMHO.
When done, choose File > Export > Adobe Media Encoder
Choose format MPEG2, Range "Entire Sequence" and Preset "HDV 1080i 25"
In the Video tab, Basic Video Settings area, you might care to up the quality to 5.0
Click OK and supply output filename.
Repeat the earlier stuff relating to Nero Vision but this time you want to select the file you've just output from PPro.
When you click "Next" once your file is on the Nero Vision timeline, choose "Make DVD with Edited Movie" > "AVCHD"
In the next screen choose "Create Chapters"
Well, follow your nose from there to create the chapters, then choose the menu and customise it, and burn to normal DVD in AVCHD quality.
What you end up with is an AVCHD DVD which will play on a Playstation 3 and probably on a Blu Ray player (I haven't got the latter to test). The finished quality is very close to the original quality - on the test material I've just been trying (playing back on a 42" full HD Bravia) I had to play repeatedly alternating original and edited footage to spot any differences - such that could be seen were pretty subtle.
While there are cheaper conversion programs to get AVCHD into PPro, I don't think any of them take the finished edit and do the AVCHD DVD creation and layout part like Nero does.
Hope that helps a new AVCHD user wanting to stick with PPro. If an experienced PPro user can see an obvious technical fault in what I'm doing I'd be glad to stand corrected.

Mick,
I got a simple project with a Play all and Scene select menu and then a scene menu. There was about 15 minutes of video, but it only seemed to cover about half the disk.
Encore seems tempermental, so I had to be very careful not to change any of the assets, etc.
I never could get Encore CS3 to recognize regular disks, and that's why I went to ImgBurn (burning either Bluray image or folder).
I tried Nero at first, and it seemed like a long process to get it to burn a UDF 2.5 format, but IMGBurn does that automatically.
This summarizes my experience, for what that's worth, with this.
http://www.wrigleyvideo.com/forum/index.php?showtopic=29665
Also, apparently,Sony will include this capability in DVD Architect Pro http://www.sonycreativesoftware.com/vegaspro/bluray.
Finally, some work by others is being done to attempt to burn the BluRay project to a dual layer SD DVD which might double the capacity, but I haven't heard if that has been successful.
Let me know what you think.
JOhn

Getting stuck at - Authenticating with the iTunes Store

I am trying to upload new version of my app. It validated successfully and then we tried to publish through Xcode Organiser. But it took ages and finally we had to cancel after 1 hour. Its a small app less then 1 MB.
Next we tried to upload using Application Loader and found the same problem, but it displayed "Authenticating with the iTunes Store" and was stuck there forever. Did not return any error, but did not upload as well.
Please someone help me, its really urgent.

Please view answer posted by me below to solve this issue. I tried to solve it in may ways and follow two methods worked for me.
http://stackoverflow.com/a/19996704/1227485
I hope it helps.

DS 5.2: Plugin to force SSL/TLS and simple authentication available!

Hi,
for privacy and security reasons I had to enforce TLS for simple authentication
in my organisation on all client connections to our directory servers.
As it turned out in thread
http://forum.java.sun.com/thread.jspa?threadID=5239916
there is no easy possibility to do this. Even though there seems to be a
way by using the directory proxy server (looks very complicated), described
in thread
http://forum.java.sun.com/thread.jspa?threadID=5240537,
I finally decided to write a plugin. To let you know what the plug-in does
exactly I paste the description here in:
DESCRIPTION
The plug-in checks every client connection if it is encrypted or not.
If the connection is encrypted, it accepts the connection.
If not, it rejects the connection.
It is possible to configure the plug-in to accept unencrypted
connections from certain IPs. With this feature enabled, you may
allow unencrypted connections from 127.0.0.1 or similar.
Additionally, this feature helps you to deploy the plug-in in
a production environment.
Another configuration option allows a dry-run of the plug-in.
This means, that the plug-in only logs (in the error log), but accepts
unsecured connections.
The configuration of the plug-in may be stored in an arbitrary DN of
your DIT. This way you are allowed to change the configuration
parameters without restarting the directory server.
By replicating the configuration entry you may enable and disable
the dry-run mode for all your replicas by one click. Adding IPs,
from where clients are allowed to connect unencrypted is also
configurable for all replicas at once.
END OF DESCRIPTION
In the source code there are also detailed installation instructions
and a configurable Makefile is also provided.
I brute-force tested the plugin and it causes no memory leaks or similar issues.
Now I want to publish the code, since I am sure, that other people may need it to!
Unfortunately there is no public code repository or similar for directory server
plugins. So if anyone is interested in the plugin, I will put the source code online.
best regards
Harald Strack

Hi Harald:
I'm interested in looking at the code of your plugin. Could you please share the source code to us.
Thanks-

How to solve the error message "Could not activate cellular data network: PDP authentication failure"when using 3g or gPRS on safari with an iphone 4 and latest software updates

Please can someone help me to solve the error message "Could not activate cellular data network: PDP authentication failure"when using 3G or GPRS on safari with an iphone 4GS and latest software updates. I have tried resetting the network and phone settings. I have restored the factory settings on itunes and still the problem persists.

All iPhones sold in Japan are sold carrier locked and cannot be officially unlocked by the carrier. If you unlocked it, it was by unauthorized means (hacked), and support cannot be given to you in this forum.
Hacked iPhones are subject to countermeasures by Apple, particularly when updating the firmware. It is likely permanently re-locked or permanently disabled.
Message was edited by: modular747

I there, my question is quite simple, I would like to know if the "apple remote control" can be used with a mac mini and , if so, it can be used to control also the "logic pro" functions (e.g. record, start, stop etc). Thks a lot, Danilo

I there, my question is quite simple, I would like to know if the "apple remote control" can be used with a mac mini and , if so, it can be used to control also the "logic pro" functions (e.g. record, start, stop etc). Thks a lot, Danilo

Good work, thanks for the report.

Not Working-central web-authentication with a switch and Identity Service Engine

on the followup the document "Configuration example : central web-authentication with a switch and Identity Service Engine" by Nicolas Darchis, since the redirection on the switch is not working, i'm asking for your help...
I'm using ISE Version : 1.0.4.573 and WS-C2960-24PC-L w/software 12.2(55)SE1 and image C2960-LANBASEK9-M for the access.
The interface configuration looks like this:
interface FastEthernet0/24
switchport access vlan 6
switchport mode access
switchport voice vlan 20
ip access-group webauth in
authentication event fail action next-method
authentication event server dead action authorize
authentication event server alive action reinitialize
authentication order mab
authentication priority mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
authentication violation restrict
mab
spanning-tree portfast
end
The ACL's
Extended IP access list webauth
    10 permit ip any any
Extended IP access list redirect
    10 deny ip any host 172.22.2.38
    20 permit tcp any any eq www
    30 permit tcp any any eq 443
The ISE side configuration I follow it step by step...
When I conect the XP client, e see the following Autenthication session...
swlx0x0x#show authentication sessions interface fastEthernet 0/24
           Interface: FastEthernet0/24
          MAC Address: 0015.c549.5c99
           IP Address: 172.22.3.184
            User-Name: 00-15-C5-49-5C-99
               Status: Authz Success
               Domain: DATA
       Oper host mode: single-host
     Oper control dir: both
        Authorized By: Authentication Server
           Vlan Group: N/A
     URL Redirect ACL: redirect
         URL Redirect: https://ISE-ip:8443/guestportal/gateway?sessionId=AC16011F000000510B44FBD2&action=cwa
      Session timeout: N/A
         Idle timeout: N/A
    Common Session ID: AC16011F000000490AC1A9E2
      Acct Session ID: 0x00000077
               Handle: 0xB7000049
Runnable methods list:
       Method   State
       mab      Authc Success
But there is no redirection, and I get the the following message on switch console:
756005: Mar 28 11:40:30: epm-redirect:IP=172.22.3.184: No redirection policy for this host
756006: Mar 28 11:40:30: epm-redirect:IDB=FastEthernet0/24: In epm_host_ingress_traffic_qualify ...
I have to mention I'm using an http proxy on port 8080...
Any Ideas on what is going wrong?
Regards
Nuno

OK, so I upgraded the IOS to version
SW Version: 12.2(55)SE5, SW Image: C2960-LANBASEK9-M
I tweak with ACL's to the following:
Extended IP access list redirect
    10 permit ip any any (13 matches)
and created a DACL that is downloaded along with the authentication
Extended IP access list xACSACLx-IP-redirect-4f743d58 (per-user)
    10 permit ip any any
I can see the epm session
swlx0x0x#show epm session ip 172.22.3.74
     Admission feature: DOT1X
     ACS ACL: xACSACLx-IP-redirect-4f743d58
     URL Redirect ACL: redirect
     URL Redirect: https://ISE-ip:8443/guestportal/gateway?sessionId=AC16011F000000510B44FBD2&action=cwa
And authentication
swlx0x0x#show authentication sessions interface fastEthernet 0/24
     Interface: FastEthernet0/24
     MAC Address: 0015.c549.5c99
     IP Address: 172.22.3.74
     User-Name: 00-15-C5-49-5C-99
     Status: Authz Success
     Domain: DATA
     Oper host mode: multi-auth
     Oper control dir: both
     Authorized By: Authentication Server
     Vlan Group: N/A
     ACS ACL: xACSACLx-IP-redirect-4f743d58
     URL Redirect ACL: redirect
     URL Redirect: https://ISE-ip:8443/guestportal/gateway?sessionId=AC16011F000000510B44FBD2&action=cwa
     Session timeout: N/A
     Idle timeout: N/A
     Common Session ID: AC16011F000000160042BD98
     Acct Session ID: 0x0000001B
     Handle: 0x90000016
     Runnable methods list:
     Method   State
     mab      Authc Success
on the logging, I get the following messages...
017857: Mar 29 11:27:04: epm-redirect:IDB=FastEthernet0/24: In epm_host_ingress_traffic_qualify ...
017858: Mar 29 11:27:04: epm-redirect:epm_redirect_cache_gen_hash: IP=172.22.3.74 Hash=271
017859: Mar 29 11:27:04: epm-redirect:IP=172.22.3.74: CacheEntryGet Success
017860: Mar 29 11:27:04: epm-redirect:IP=172.22.3.74: Ingress packet on [idb= FastEthernet0/24] matched with [acl=redirect]
017861: Mar 29 11:27:04: epm-redirect:IDB=FastEthernet0/24: Enqueue the packet with if_input=FastEthernet0/24
017862: Mar 29 11:27:04: epm-redirect:IDB=FastEthernet0/24: In epm_host_ingress_traffic_process ...
017863: Mar 29 11:27:04: epm-redirect:IDB=FastEthernet0/24: Not an HTTP(s) packet
What I'm I missing?

I'm using Adobe Acrobat with the hope of editing a url on the graphic...a simple 3-letter change, save, close and send for printing..how do I get in edit mode to delete 3 letters and insert 3 new letters?

?I'm using Adobe Acrobat with the hope of editing a url on the graphic...a simple 3-letter change, save, close and send for printing..how do I get in edit mode to delete 3 letters and insert 3 new letters?

pkg4ibm wrote:
editing a url on the graphic...
Not sure what you mean by that: is that URL in an image, or is it actual text?
If it is in an image, then you need to extract the image, edit it with something like Photoshop, then add it back to the PDF.
If the URL is actual text, I suggest that you remove the entire URL, then add the corrected link.

HT201210 nowadays have many user have problem with update to ios7 and need active with apple id maybe in the future in order escape from these problems must be stop use these products else. Because of simple user don't know about this technology and somet

nowadays have many user have problem with update to ios7 and need active with apple id maybe in the future in order escape from these problems must be stop use these products else. Because of simple user don't know about this technology and sometime just hear from other user that it 's difficult to use then force they change phone that use to handle to another.

It is a feature to discourage the theft of iPhones by making them useless if resold. It's not going anywhere. It's simple: just don't buy a phone until you make sure that the activation lock has been disabled.

HTTP Basic Auth and Username Authentication with Symmetric Key

Hi,
I have a webservice happily running on tomcat 5.5 using "Username Authentication with Symmetric Key" I have certificates setup and everything works fine. I can even connect a .net client and use the service.
Now I have an additional requirement of authorization per operation basis so I'm planning on using the roles. My current setup uses tomcat-users.xml to configure users but I seem unable to identify the role of the user from within my code as wsContext.isUserInRole("briefing") always returns false even when it clearly isn't. Where wsContext = @Resource private WebServiceContext wsContext.
So I figure perhaps I need to add HTTP Basic Auth to tomcat for it to gather this information so I added security-constraints to the web.xml and this seems to do the trick: at least it does for my .net client.
If I do:
Service service = new Service();
Port client = service.getPort();
BindingProvider bp = (BindingProvider)client;
bp.getRequestContext().put(BindingProvider.USERNAME_PROPERTY, "myusername");
bp.getRequestContext().put(BindingProvider.PASSWORD_PROPERTY, "mypassword");Then it all works fine. However, I'd like a little less transparency: I don't want to have to do this every time I make a call.
My question(s) is:
1) Am I going about this the right way (perhaps I am somehow getting the incorrect reference to the WebServiceContext)
2) If I am going about this the right way I imagine the whole BindingProvider code needs to be added to as a policy configuration but I'm really not sure where to start especially as I'm using wsimport to generate everything: I'm not even sure where to configure this so it will not get overwritter.
Thanks for any help.

Doh! Ok So I've added a SOAP Handler to automatically add the username and password for the HTTP Basic Auth.
All in all does this setup sound right?

Creating A Simple Video With Music and A Picture Background

Some of you all may know that I am in a band. I am wanting to put some of my music on youtube and am wanting to make just a simple video- with the song playing in the background- and just some sort of nature picture, or only a few going in the background. I'm thinking I should use iMovie, but I haven't had a whole lot of luck figuring it out this morning, so I was wondering if anyone here could help me with the task that I mentioned. It would be so greatly appreciated!!!
Thanks So Much,
Ethan

Aluminum or not, there actually is an iMovie forum:
http://discussions.apple.com/forum.jspa?forumID=1307
Good luck!

Simple Authentication with SMP 10.1 and FMS 3.5

Similar Messages

Maybe you are looking for