Simplifing WsSecurity to JaxWS metro Implementation

I'm using JaxWs Metro project implementation and i'm using this tutorial to add Ws Security feature to my web services. http://java.globinch.com/enterprise-java/web-services/jax-ws/secure-usernametoken-java-web-services-using-metro-wsit/
What i have understand is that to add a Ws Security to your web service.You must first generate manually the wsdl file then add WSIT configuration part to your web service then put that modified wsdl in your project and modify sun-jaxws.xml so that take care of your modified wsdl file(so that it will not generate a new one). I think it's extremley difficult to do all that for all my web services.In addition,i'm using eclipse so there is no generating tool(like netbeans). I want to know is there any simple solution ?

On 9/10/2013 5:26 AM, Joseph Hwang wrote:
> I am struggling with jbossws-cxf-4.2.0.Final ws-security implementation
> with eclipse ide.
> [snip]
> I try to jbossws-cxf ws-security in eclipse ide.But there is no document
> or reference site.
> Pls, check this issue, https:/community.jboss.org/thread/232031
> Your advice will be appreciated! Thanks in advance
This would be more a topic to take up in the Eclipse web tools platform
forum.

Similar Messages

Trying to deploy a Metro JAX-WS Endpoint with UsernameToken wsit in Weblogic 12c

Hi,
we just try to deploy a Metro based Jax-WS Endpoint to Weblogic 12c.
The Webservice itself is successfully deployed on Tomcat with Metro 2.3 and Weld.
For security the wsit file is used in combination with the UsernameToken policy.
For Validation an implementation of PasswordValidator (com.sun.xml.wss.impl.callback.PasswordValidationCallback.PasswordValidator) is used,
Unfortunately this class is not present in the weblogic jax-ws implementation, despite the fact that the implementation is based upon metro.
Is there a possibility to use the standard metro implementation for jax-ws in Weblogic 12c (12.1.2.0).
We found an user guide here: https://metro.java.net/guide/ch02.html#weblogic-10 but it doesn't work for us.
Maybe there is an problem with 12.1.2.0, because the user guide is for 12.1.1.0.
Has anyone tried something similar?
Thanks

because using sun-jaxws.xml is a non-standard deployment descriptor. You need to use just the web.xml and instead of pointing at the JAX-WS RI servlet, point it at your endpoint implementation class. The AS 9 tutorial should show an example of this.

MTOM best practices

I use Weblogic 10.3.2 ( so jaxws metro based )
The web app I have is uploading and downloading large files (PDF's) via a WS (i know is not the optimum way for doing this but this is how it is now)
NOW the files that are uploaded and downloaded are inside the payload (base64).
10 simultaneously users can cause easily OOME , with some large payloads.
So for download operation I would like to stream the the pdf from the database to the user
For this I changed the WS in order to use MTOM :
@Mtom+ changed the wsdl
minOccurs="0" xmime:expectedContentTypes="*/*"
xmlns:xmime="http://www.w3.org/2005/05/xmlmime" />
The ws returned this time DataHandler and I instantiated
return new DataHandler(new InputStreamDataSource(null, "*/*", inputStreamFromOracleBlob));
Code for InputStreamDataSource http://tny.cz/7122db2b
After I generate the client I use
DataHandler dh = port.download(id);
StreamingDataHandler sdh = (StreamingDataHandler)dh;
InputStream in = sdh.readOnce();
FileOutputStream fos = new FileOutputStream(new File("c://test.pdf"));
org.apache.xmlbeans.impl.common.IOUtil.copyCompletely(in, fos);
So things look ok….
What I fear is that I am mot applying the best practices and I am stuck a little bit with upload.
On upload I do not know how can I stream the content to the server and then into DB. (maybe I should create OutputStreamDataSource ?)
Any idea for upload ?
Should I use better the already done ByteArrayDataSource ? not the custom InputStreamDataSource ?
Do I have to use @StreamingAttachment(parseEagerly=true, memoryThreshold=4000000L)?
What if I don’t use @StreamingAttachment on WS , it will not use streaming ?
Thanks a lot.
Cris
PS.
I took a look on InputStreamDataSource and javax.mail.util.ByteArrayDataSourceand i realized that they acutal hava a byte[] of the 'document' in memory meaning the streaming ideea is in vain, cause what i try to avoid is to have multiple docs in the same time fully in memory.
So how can I stream from DB via WS and MTOM to a WS client ?

Your data is bigger than I run, but what I have done in the past is to restrict their accounts to a separate datafile and limit its size to the max that I want for them to use: create objects restricted to accommodate the location.

Metro Ethernet implementation questions

I am planning a Metro Ethernet upgrade for a network I manage. This is the first time I’ve implemented Metro on any network. I’m looking for some suggestions and answers to a couple questions regarding this upgrade.
The current network is Hub and spoke connected by copper lines to 17 different locations from a DS3 @ our HQ. HQ also has a DS3 to the internet which the branch locations go out for internet. At our branches we have a private and public network on different subnets. Each branch location has either a T1 or bonded T1 connected to a Cisco 2801 router then to Netgear PoE managed switch(s).
The upgrade of the DS3 for internet is going to 100 meg. The data side will also be 100meg at HQ, 10meg to our small locations and 100meg to the large.
My question is what do I need to be aware of on our existing network that must change to get this working?
1)      Will I simply go from the layer2 Metro Switch to our router?
2)      Should I remove the router and go directly to the Netgear switch?
3)      Do I need to VLAN the private and public networks?
4)      Do I need to change routing tables?
Thoughts and/or suggestions welcome.
Let me know if more information is required to assist in answers.
Thanks

Hi,
I think it would be better to include Cisco Account Manager/SE for this upgrade, they can guide you better and can come up with LLD for this upgrade, otherwise upgrading your 17 sites without proper planning can cause you serious issues.
Yasir

Metro Ethernet Switches Network Implementations

I wish that Cisco would collect as many as network scenarios and pratical configurations for 3750ME, Metro Ethernet, and MPLS, starting with few basic one.
Cut down the marketing materials. It will benefits all customers and cut down supports.

There are lot of such materials.
http://www.cisco.com/en/US/products/hw/switches/ps5532/tsd_products_support_series_home.html
http://www.cisco.com/en/US/netsol/ns341/ns396/ns223/ns227/networking_solutions_sub_solution.html
http://www.cisco.com/en/US/tech/tk436/tsd_technology_support_category_home.html
Hope this helps

The Excel-Mania - Best Ways of Implementing Excel-Like ADF

Hello people, good afternoon!
I would like to share with you a doubt i have implementing complex, matrix-like forms in ADF. More often than i'd like to hear, users ask for input forms that closely resemble Microsoft Excel, where the dimensions are layered both vertically and horizontally, and the intersection between them must contain an input or output component, allowing themselves to rapidly input the data they need or to create a web version of Oracle Reports' Matrix Report. Some cases are:
1) The user wishes to associate the employees (located in table EMPLOYEES) to the projects (located in table PROJECTS) in a screen that lays out the employees as columns and the projects as rows in a table. The intersection between them must contain a checkbox, which will insert a third record when selected, on a table called EMP_PROJ, which associates the employees to the projects.
2) The user wishes to input a timecard in a time control system. This system must have a screen that shows the days in the week as columns, and the projects the employee is working on as rows. On the intersection, we must provide an input text where he will enter the hours he worked on that specific project on that day.
3) The user wishes to see a screen that shows the Open Auctions they have in a Purchasing system as rows in a table, crossed with the suppliers that have bidded on these (as the columns). The intersection must contain the price each supplier bidded on each Auction.
As you can see, i run across this requirement A LOT =). And, as much as i have polished my "Web-Like-Applications-Are-Not-Like-This" and "You-Are-Not-Working-With-Excel" speeches, our beloved users never learn ;)
Nevertheless, i have been looking for a consistent way to implement this behavior, and i have found some options along the way. I would like to know your impressions on this matter, and if you have any "Best-Practices" that you imagine for this case.
CASE 1: Creating a Dynamic, On-The-Fly View Object by using ADF BC APIs and using af:table component to do the trick on the page
PROS: Less work in the View layer, Preservation of the Table CSS Layout (very nice blue header and light brown cells)
CONS: A LOT of work on the BC layer, creates an awful lot of View Objects, and generates tons of java code on the Application Modules.
CASE 2: Creating the model as usual and working with repeating layouts on ADF Faces (for example, enclosing an af:cellFormat on an af:forEach to repeat each column)
PROS: Simplifies the BC layer, making it much cleaner and maintainable.
CONS: Loses a lot of the declarative wonders of ADF Faces and also the CSS Layouts, since we are using cellFormat, rowLayout and tableLayout instead of table tag we have to manually apply the styles to the columns and rows.
Of course, both implementations take an awful lot of time. Any other implementation styles are quite welcome (ADF Wizards, step in!)
Anyone wants to discuss better ways of doing it?
Best Regards,
Thiago Souza

Well, you could do the following:
1) Create a stored procedure that assembles the data into a rowset with rows and fields like the format you want.
2) Create stored procedures that handle insert, update, and delete.
3) Create an entity object definition with all transient attributes. Make the attributes match the elements of one row.
4) Override doDML() in the entity object class to call your procedures (the doc explains how to do this). You might also need to do a bit of research and figure out if you need to override some other method so you can report rows with transient attribute changes only as needing posting. (getPostState(), maybe?)
5) Create a view object definition with entity-derived attributes based on your EO attributes.
6) Override the appropriate methods to call your data assembly procedure rather than execute a query (this is also in the doc).
Still kind of kludgy, but it keeps your business components pretty clean, especially if you use framework classes to do most of the work for you. (I have a partial example of how to do that here.) Of course, it keeps your business components clean by moving the real work to the DB, but some people find that more maintainable that a kazillion business components.
Hope this helps,
Avrom

How can I get rid of jaxws-engine threads after processing asyncHandler?

Hi,
this question evolved from forum thread
[t-5404241]
In the current JAX-WS 2.1 (from Netbeans 6.7.1) implementation I see the following behaviour / bug:
If you use the async Jax-WS API (AsyncHandler and Future) to send a SOAP request, there will be a thread named jaxws-engine-xx-thread and one unnamed
thread generated by Jax-WS. Both threads stay running for 60 seconds after the soap response is processed.
This leads to high memory consumption, if requests are made often.
Is there a way to stop these threads?
Stefan

If it's asking for the original owner's credentials, you cannot "get rid" of it.
http://support.apple.com/kb/PH13695

Help-kerberos works with spnego keytab file but not in netbeans and Metro

Hi,
Appreciate if someone can shed some light on this problem and guide on what else am I missing.
I'm trying to call .NET based WCF webservice (MS Dynamics CRM - OrganizationSvc) from a java client. Started looking at Metro framework for interoperability. I was able to generate all the proxy classes and was able to write the code to invoke web service. However the challenge was using Kerberos based authentication and related setup.
I primarily followed the link below which was very helpful but had to dig more to get more specific details.
http://blogs.sun.com/enterprisetechtips/entry/building_kerberos_based_secure_services
Tried to follow netbeans route and hit some roadblocks in verifying the setup (krb5.conf & login.conf & wsit-client.xml). So, came across SPNEGO and used their examples, made changes accordingly and after experimenting with various configuration settings(krb5.conf and login.conf), finallyI was able to run HelloKDC & HelloKeytab files successfully.
krb5.conf_
[libdefaults]
default_realm = NA.CONVERGYS.COM
[realms]
NA.CONVERGYS.COM = {
kdc = CDCWW13.na.convergys.com
admin_server = CDCWW13.na.convergys.com
[domain_realm]
.na.convergys.com = NA.CONVERGYS.COM
login.conf_
spnego-server {
com.sun.security.auth.module.Krb5LoginModule required
useKeyTab=true
keyTab="C:/WINDOWS/orldwv705_feb03.keytab"
doNotPrompt=false
storeKey=true
principal="HOST/ORLDWV705.na.convergys.com"
debug=true;
C:\spnego-r7>klist -k C:\WINDOWS\orldwv705_feb03.keytab
Key tab: C:\WINDOWS\orldwv705_feb03.keytab, 1 entry found.
[1] Service principal: HOST/[email protected]
KVNO: 7
With these settings, I was able to successfully make the call & Hello Keytab was able to get the Ticket and authenticate.
http://spnego.sourceforge.net/index.html
http://spnego.sourceforge.net/client_keytab.html
http://spnego.sourceforge.net/troubleshoot_hellokeytab.html
However, when I run the example in Netbeans with the setup mentioned in the link below, I run into following exception...
http://metro.java.net/guide/Developing_with_NetBeans.html#wsit_example_with_nb-creating_wsit_client
http://metro.java.net/guide/_Configuring_Kerberos_for_Glassfish_and_Tomcat.html
1) noticed that sc:KerberosConfig element in wsit-client.xml does not get updated automatically in netbeans ide, so manually edited to put the entries.
2) also followed the setup required in glassfish domain.xml & login.conf xml.
3) also noticed that netbeans setup requires us to use C:\Windows\krb5.ini file which is nothing but krb5.conf file referred elsewhere.)
wsit-client.xml_
<wsp:Policy wsu:Id="ClientKerberosPolicy"
xmlns:sc="http://schemas.sun.com/2006/03/wss/client"
xmlns:wspp="http://java.sun.com/xml/ns/wsit/policy"
xmlns:scc="http://schemas.sun.com/ws/2006/05/sc/client"
xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy"
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
<wsp:ExactlyOne>
<wsp:All>
<sc:KerberosConfig wspp:visibility="private"
loginModule="KerberosClient"
servicePrincipal="HOST/ORLDWV705.na.convergys.com"
credentialDelegation="true" />
</wsp:All>
</wsp:ExactlyOne>
</wsp:Policy>
ERROR
INFO: WSP5018: Loaded WSIT configuration from file: file:/C:/Documents%20and%20Settings/rchoppal/My%20Documents/NetBeansProjects/TestOrgSvc/build/web/WEB-INF/classes/META-INF/wsit-client.xml.
WARNING: [failed to localize] WSP_0075_PROBLEMATIC_ASSERTION_STATE({http://schemas.microsoft.com/xrm/2011/Contracts/Services}AuthenticationPolicy, UNKNOWN)
WARNING: [failed to localize] WSP_0019_SUBOPTIMAL_ALTERNATIVE_SELECTED(PARTIALLY_SUPPORTED)
INFO: >>>KinitOptions cache name is C:\Documents and Settings\rchoppal\krb5cc_rchoppal
INFO: >>> KrbCreds found the default ticket granting ticket in credential cache.
SEVERE: WSITPVD0050: Error while Securing Request Message.
com.sun.xml.wss.XWSSecurityException: Unexpected Exception in Kerberos login - unable to continue
at com.sun.xml.ws.security.impl.kerberos.KerberosLogin.login(KerberosLogin.java:94)
at com.sun.xml.wss.impl.misc.WSITProviderSecurityEnvironment.doKerberosLogin(WSITProviderSecurityEnvironment.java:3049)
at com.sun.xml.wss.provider.wsit.WSITClientAuthContext.populateKerberosContext(WSITClientAuthContext.java:911)
at com.sun.xml.wss.provider.wsit.WSITClientAuthContext.secureRequest(WSITClientAuthContext.java:318)
at com.sun.xml.wss.provider.wsit.WSITClientAuthContext.secureRequest(WSITClientAuthContext.java:291)
at com.sun.enterprise.security.webservices.ClientSecurityPipe.process(ClientSecurityPipe.java:158)
Caused by: javax.security.auth.login.LoginException: java.lang.NullPointerException
at sun.security.krb5.Credentials.acquireDefaultCreds(Credentials.java:451) (i tried to search open source code, but this line did'nt match exactly)
at sun.security.krb5.Credentials.acquireTGTFromCache(Credentials.java:272)
at com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:589)
at com.sun.security.auth.module.Krb5LoginModule.login(Krb5LoginModule.java:542)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at javax.security.auth.login.LoginContext.invoke(LoginContext.java:769)
at javax.security.auth.login.LoginContext.access$000(LoginContext.java:186)
at javax.security.auth.login.LoginContext$4.run(LoginContext.java:683)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680)
at javax.security.auth.login.LoginContext.login(LoginContext.java:579)
at com.sun.xml.ws.security.impl.kerberos.KerberosLogin.login(KerberosLogin.java:85)
SEVERE: SEC2004: Container-auth: wss: Error securing request
javax.xml.ws.WebServiceException: WSITPVD0050: Error while Securing Request Message.
at com.sun.xml.wss.provider.wsit.WSITClientAuthContext.secureRequest(WSITClientAuthContext.java:299)
at com.sun.enterprise.security.webservices.ClientSecurityPipe.process(ClientSecurityPipe.java:158)
Caused by: javax.xml.ws.soap.SOAPFaultException: Unexpected Exception in Kerberos login - unable to continue
at com.sun.xml.wss.provider.wsit.WSITAuthContextBase.getSOAPFaultException(WSITAuthContextBase.java:1617)
at com.sun.xml.wss.provider.wsit.WSITAuthContextBase.getSOAPFaultException(WSITAuthContextBase.java:1633)
... 42 more
WARNING: StandardWrapperValve[TestOrgSvcServlet]: PWC1406: Servlet.service() for servlet TestOrgSvcServlet threw exception
javax.xml.ws.WebServiceException: Cannot secure request for {http://schemas.microsoft.com/xrm/2011/Contracts}CustomBinding_IOrganizationService
at com.sun.enterprise.security.webservices.ClientSecurityPipe.process(ClientSecurityPipe.java:165)
Caused by: javax.xml.ws.WebServiceException: WSITPVD0050: Error while Securing Request Message.
at com.sun.xml.wss.provider.wsit.WSITClientAuthContext.secureRequest(WSITClientAuthContext.java:299)
at com.sun.enterprise.security.webservices.ClientSecurityPipe.process(ClientSecurityPipe.java:158)
... 40 more
Caused by: javax.xml.ws.soap.SOAPFaultException: Unexpected Exception in Kerberos login - unable to continue
at com.sun.xml.wss.provider.wsit.WSITAuthContextBase.getSOAPFaultException(WSITAuthContextBase.java:1617)
at com.sun.xml.wss.provider.wsit.WSITAuthContextBase.getSOAPFaultException(WSITAuthContextBase.java:1633)
... 42 more
Edited by: user6748004 on Feb 3, 2011 5:36 PM
Edited by: user6748004 on Feb 3, 2011 5:38 PM

Hi Gasha,
The only change I did after this, was to try and use 'KerberosServer' configuration from the wsit-client.xml. Atleast, this enabled the glassfish application to load the configuration related to keytab etc, and use it to communicate with the WCF service for negotiation.
<sc:KerberosConfig wspp:visibility="private"
loginModule="KerberosServer"
servicePrincipal="HOST/ORLDWV705.na.convergys.com"
credentialDelegation="true" />
login.conf has
KerberosServer {
com.sun.security.auth.module.Krb5LoginModule required
useKeyTab=true
keyTab="C:/WINDOWS/orldwv705_feb03.keytab"
doNotPrompt=false
storeKey=true
principal="HOST/ORLDWV705.na.convergys.com"
debug=true;
fyi.. Used the following way to create the keytab
Keytab was created using below instructions
ktpass -princ HOST/[email protected]
-mapUser [email protected]
-mapOp set
-pass *
-crypto DES-CBC-MD5
-pType KRB5_NT_PRINCIPAL
-out orldwv705.keytab
Targeting domain controller: CDCWW13.na.convergys.com
Successfully mapped HOST/ORLDWV705.na.convergys.com to svcMSCRMDev.
Key created.
Output keytab to orldwv705.keytab:
Keytab version: 0x502
keysize 75 HOST/[email protected] ptype 1 (KRB5_NT_PRINCIPAL) vno 8 etype 0x3 (DES-CBC-MD5) keylength 8 (0x0bc27ca83891dc2a)
Also realised that we need to add 'HTTP/ORLDWV705.na.convergys.com' & 'http/ORLDWV705.na.convergys.com' using set SPN commands on the AD of the server where CRM is installed.
With these changes, the negotiate authentication seems to have happened using the Kerberos token from the keytab, but later ran into an error for which I was not able to get any clue to go forward. Someone in another post about this error suggested that it worked once they changed principal names, but when I tried I did'nt get any success.
This is where I'm struck now. What I don't know is if there is another setup from which we can try a similar interoperability example for ex.. weblogic 10.1 & eclipse which is more close to our real environment.
SEVERE: SEC2004: Container-auth: wss: Error securing request
java.lang.IllegalArgumentException: Missing argument
at javax.crypto.spec.SecretKeySpec.<init>(DashoA13*..)
at com.sun.xml.ws.security.impl.kerberos.KerberosContext.getSecretKey(KerberosContext.java:91)
at com.sun.xml.wss.impl.filter.SignatureFilter.process(SignatureFilter.java:525)
Edited by: user6748004 on Apr 8, 2011 10:39 AM

Windows 8.1 official offline upgrade package & GPO question related to Metro & UAC

Hello!
I am testing pre-deployment of Windows 8.1 in our 2008R2 domain. So far only my workstation is upgraded to win8x64 (from win7x64) and I am assessing if all of our LOB aps and servers will work fine with it. A few questions
1. We use workstations coming with OEM win8 license (all currently running win7 downgrade). I noticed that oficially there is no win8.1 offline upgrade package! Does that mean that Microsoft officially wants people to sing into Windows Store with a Microsoft
account to perform online upgrade with administrative privileges? That's pretty awkward ...
I figured that I could use win 8.1 installer ISO/UFD that I created in past (for home computer actually), but am not sure if that works out with our win8 OEM license keys tied to BIOS/UEFI on each desktop computer.
Was actually expecting an 8.1 Service Pack package that I could publish to WSUS, so it could take care of upgrade on win8 computers, but there is no such thing ... and no official package for 8.1 offline deployment either ... weird ...
Currently I am actually about to upgrade my own/test workstation to 8.1 (from 8.0, using Windows Store online), then sysprep it and create a reference WIM image and see if I can deploy 8.1 thick image (with all updates and company apps installed) this way
via WDS. anybody tested if it works this way? any gotchas?
2. win8 GPOs
Can somebody enlighten me where in Group Policies I can find a setting to re-assign ALL file/media extensions (e.g. jpg, tiff, png, bmp, mp4, WMV, etc.) back to Desktop applications instead of the horrible Metro UI equivalents?
We are actually about to bypass Metro UI completely on each computer so it boots straight to desktop and all file upon double-click must open an application within Desktop (no Metro UI for end users).
I know how to do this manually one by one via Group Preferences, but am asking if there is some specific GPO ADMX setting that would replace Metro UI apps with Desktop application in any and all file associations.
Personally I see no point in using the clunky Metro UI without a touchscreen.
3. is UAC enabled required for Windows Store to work?
Seems like it needs at least the Low security setting, so the Windows Store and Metro UI stays operational. no workaround for that for disabled UAC environment?
Just asking, it's not a big deal, people can learn to live with UAC, but am curious if that's by design.
Thanks for answers!

Hi,
1. For upgrading to Win8.1, please refer the following link:
http://windows.microsoft.com/en-in/windows-8/update-from-windows-8-tutorial As I know, Win8 activated using KMS, cannot upgrade to Win8.1
2. No, there is no such GPO settings added into Admin template. You will have to work around this using GPP...
3. There is no way to bypass UAC and allow Windows Store at one time. UAC is headache since Vista times and we have to live with the Protection :) Believe me, it does good to PC safety.
Regards, Brian
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
thanks for the answers!
Yeah, UAC is a bit of a headache especially with legacy software. When deploying our Win7 domain clients however I got away by simply disabling it to make it easier for all users coming straight from XP environment.
for future win8.1 deployments however, I will set the UAC level to Low and keep it there, so modern apps and winstore stays operational if anybody wanted it or needed it. not a big deal, plus an added security layer, I agree with that.
As per default win8 file extension associations ... well, that's a bummer, and yeah, the GPP is what I had in mind to work around that manually.
I am running on upgraded win8.1 right now and so far I like it more or less in work environment, after adjustments that is :)
My only problem is related to win 8.1 clean installation and imaging and deployment however, wanted to use Lite Touch via WDS for w8.1, but problem is that I have no image of win8.1 that can activate with OEM licenses tied to BIOS.
Sysprep doesn't work on upgraded 8.1 (from 8.0), so I can't image that with generalization and on other hand the only generalized image I can take is from bare win 8.0 without the 8.1 upgrade. What I mean is that our computer vendor (HP) switched to OEM
win8 licenses tied to UEFI/BIOS (no more case stickers) and that doesn't activate when I try to clean install 8.1 even though it should, but the build ID string in BIOS must be changed ... need to open a case with HP to work it out, I am sure it's still possible
to achieve even without volume licensing.
We use a Basic Infrastructure model so far with retail+OEM keys (no KMS so far but it's in plans if Office deployment plans get approved by CFO). I thought for 8.1 actually it was a good idea to implement Standardized Infrastructure with thick images, as
manual upgrade to win 8.1 from win 8.0 is painful.

Metro Apps don't open on Local and Domain account. Works on Microsoft Live account. Windows 8.1 Pro

This is Happening on Three different computers.
All computers are Windows 8.1 Pro. This is a clean install.
When the computer is initially setup, I first sign on with my Windows Live ID and everything seems to work fine there.
After Joining the computer to the domain, none of the Metro UI apps will open, they open briefly and close.
Added a local account and found that it also does not work there.
Steps I have tried to resolve this:
Modified owner and permissions on registry Key: HKCR\AppID\{3EB3C877-1F16-487C-9050-104DBCD66683}
Changed owner to Local Administrator and gave full controll to Local Admin and Domain user account.
Ran DCOMCNFG and under Computers ->My Computer-> WinInetCacheServer Properties I went to the IDENTITY TAB and changed
it to the Interactive User.
That did not help.
Ran this command: "powershell
-ExecutionPolicy Unrestricted Add-AppxPackage -DisableDevelopmentMode -Register $Env:SystemRoot\WinStore\AppxManifest.xml" from elevated command prompt and also did not help.
I tried downloading the App troubleshooter but it would not run.
I also tried "wsreset.exe" and got an error saying: " Windows cannot find 'ms-windows-storePurgeCaches'. Make sure you typed the name
correctly, and then try again"
When Trying to open the app and it fails I get this error under Applications in Event Viewer:
"Activation of app winstore_cw5n1h2txyewy!Windows.Store failed with error: This app does not support the contract specified or is not installed. See the Microsoft-Windows-TWinUI/Operational log for additional information."
Anyone know how to resolve this.
We are looking to implement Windows 8.1 Pro to our clients pretty soon and need to get this resolved asap.
Thanks

This is Happening on Three different computers.
All computers are Windows 8.1 Pro. This is a clean install.
When the computer is initially setup, I first sign on with my Windows Live ID and everything seems to work fine there.
After Joining the computer to the domain, none of the Metro UI apps will open, they open briefly and close.
Hi,
Did you mean that this problem only after you join the computer to the domain? if so, you may need to check whether you domain controller would install any program to your system. or you can contact domain adminstrator for further assistance.
In addition, run the following in a Command Window (CMD) to re-register the Store App:
powershell -ExecutionPolicy Unrestricted Add-AppxPackage -DisableDevelopmentMode -Register $Env:SystemRoot\WinStore\AppxManifest.XML
Roger Lu
TechNet Community Support

Implementing DOM Interface with existing Java classes

I had planned on using some tree-like Java classes as a Document Object Model, which would give me access to all sorts of XML and DOM tools like parsers and XSLT transformers. Initially, I thought all that would be neccessary is to implement all the DOM Interfaces in org.w3c.dom and then I would have a set of classes that conformed to DOM Level 1. It was my understanding that interfaces such as DOMImplementation and Document would interface with various XML tools, allowing creation of a class that implements Document and then Document would have its various factory methods that know how to create the various DOM nodes such as Element, Attr, Text, NamedNodeMap, NodeList, etc.
The problem I'm seeing now is that the JAXP specification (which is what the latest Xerces and Xalan tools conform to) has something called a DocumentBuilder and DocumentBuilderFactory that appear to be necessary to tell the framework what type of class to instantiate that implements the Document DOM interface. Those appear to have a lot of methods that deal with parsing of XML documents and I didn't really want to write or even subclass any existing Parsers in order to get the functionality of traversing and transforming a set of classes that implement the DOM interface.
Am I missing something here? Is it possible to plug in any (set of classes for) DOMImplementation and get them to work with the various DOM and XML tools out there?
Is there an easier way to allow parts of an application access to internal data structures but have the more generic tools or APIs, such as XSL transformers, access that same set of classes as a DOM with the generic DOM interface methods?
Can someone provide me with some guidance here? I'm in the process of finalizing some design on a system and need to know if this is possible or if I need to alter my design.
Thanks.

If I understand you correctly, I think I am working on a similar issue. I am unhappy with the methods given by the DOM for retrieving data from the XML file and for building a file. Our software has a bunch of code that uses these classes and it is extremely ugly. My solution was to create a facade on top of the DOM model. Essentially I have some simple classes that store all the pertinent info (for me) about the XML structure. Essentially that is the element or attribute name, its values and in the case of the element, it's children. This makes it easier for me to build and retreive the data. What I then built was a loader class and a builder class. The loader takes an XML file and parses it in using the DOM classes and builds a structure using my classes and returns the root element. The builder takes a root element and creates a DOM object out of it. This frees me of having to code around the DOM classes all over the place and makes it simple to upgrade our XML code if the DOM changes or a better DOM is released. I am using factories to facilitate this and allow me to have loaders for specific types of XML documents so that I can have a class for each which further simplifies the XML related tasks of other developers on my team.

Why can't I just get rid of the Metro UI altogether?

I don't want it, I just want Windows to function like 7 does, however since you've decided to make DX12 Windows 10 only, I'm going to HAVE to upgrade at some point.
The metro crap is so annoying, like when I right click to disable my Wifi adapter in Network connections, it pulls up the Metro UI............... why? Why can't I right click and have a bar pop up where I've right clicked like how Windows has always done
it. I fail to see how pulling up a different UI in another locations helps at all... just makes more button presses as I then have to do a few more clicks in there to get to where I just was on the Desktop.
Since I have 3 monitors, the Metro UI always opens up on another monitor, which makes it even more annoying.
I just want it all gone, I've never used it, I have no interest in your tablets or phone so I couldn't care less about it. Just give me a plain and simple Desktop for fuck sake!

That assumes Microsoft actually has both the intention and the talent to change it for the better.
Where's the evidence of that?
With the latest build, 9860, we see what changes, exactly, after 3 weeks of work?
Slight tweaks to the theme (which is ugly).
New/adjusted window transition animations (which are annoying and don't handle the drop shadow properly).
A new Notifications window that appears BEHIND an auto-hidden Taskbar.
A prototype zPC Settings app that implies they're re-implementing the control panel in Metro/Modern.
Event messages that are virtually all undocumented.
No build symbols available on the Microsoft online symbol server.
A Task Manager that still won't remember what tab it was last on.
Gargantuan CPU and GPU power and we still can't resize a Metro/Modern app to be small.
Ask yourself: Do we see ANY evidence at all that Microsoft has made ANY direction change from pursuing that which caused Windows 8 to fail?
Where is the innovation? Where is the effort? I'm just one engineer and I can tell you my own software products have changed more in the past 3 weeks than Windows has.
-Noel
Detailed how-to in my eBooks:
Configure The Windows 7 "To Work" Options
Configure The Windows 8 "To Work" Options

Des Moines, IA Metro LTE Slow

Hello,
Is there an issue or over saturation in the Des Moines, IA metro area (50309)? Everyday from about 9am-6pm the LTE speed/network is almost non-existent. Running speed tests from multiple verizon devices (iOS, Android and Windows Phone) in the area produce anywhere from 0Mbps-2Mpbs down with half-full LTE signal. Trying to browse and email is painful at best. Tests on other devices with T-Mobile "4G" are getting 5-6Mpbs consistently with no issues.
Is there an issue with this area? Is Verizon working on increasing tower coverage or implementing AWS to help with newer devices?
-Thanks
Branden

Hi Branden
I'd like to comment on this as well. I've been calling VZW numerous times only to be told that there is "no" capacity problems in the Des Moines area. But honestly that is not true. I work for a networking manufacturer and its unuseable in a large part of the city which is unacceptable.
Downtown des moines iowa (50309) full LTE bars dialup speeds. West Des Moines Jordan Creek area dialup speeds with full LTE bars. North side of des Moines in the beaverdale dialup speeds and little to no coverage.
Personally I think a call to the FCC is in order to lodge a complaint about this because this is unacceptable. Anyone else interested in lodging a complaint? I did get through to some woman who claims to have been in the executive team and she said I was free to cancel my contract and go with another company. So honestly you all have two choices, go with AT&T which is not as good as VZW or VZW fixes their capacity problems.
The VZ pop is on 6th and walnut downtown for crying out loud!
-a

Customer Equipment for Metro Ethernet Link

Hi All
It has been some time since I utilised Cisco network kit to provide private circuit point to point connectivity and I wonder if someone could give me a little guidence.
The customer is shortly to implement a new 100Mb Metro Ethernet link to connect two of their branches. They initially intend to use the link for data only traffic but eventually will want to route VOIP traffic across the link so bandwidth management and QoS will be essential components. It is unlikely that further links will be added to this link so built in expansion of the chosen routers may not be required.
Budget will be an issue on this so I would appreciate any advice or recomendations.
Thanks
J.

Hello James,
I think it would be better to get in touch with your Cisco Account Team as this question cannot be answered on a forum post.
Thanks,
Karim

Implementing a table

I need to have a static data structure inside my aplication. So, I'm trying to implement a class that simulates the behaviour of a table, with all its methods, like 'addRow', 'delRow'. A structure a little like a Recordset object in other languages, but not connected to any database, only the structure with methods and properties. I really believe that someone in the world has already done that. Does anyone know if it really exists and where i can get it? Thanks a lot.

I got it. I finally got to have it implemented. In case somebody should need it, here it goes:
     Classe que implementa ResultSet offline
     Esta classe serve como um objeto ResultSet offline. Isso quer dizer que o usu�rio
     poder� instanciar um objeto desta classe, fechar a conex�o com o banco de dados e
     continuar acessando o conte�do do ResultSet fechado com a conex�o.
Depois de compilado, copiar este arquivo para D:\j2sdk1.4.0\lib\tabela
package tabela;
import java.lang.*;
import java.util.*;
import java.sql.*;
public class rstOff {
     //Vari�vel que guarda a quantidade de colunas existentes no ResultSet
     private int numberOfColumns;
     //Vari�vel que guarda o n�mero de linhas existentes no ResultSet
     private int numberOfRows = 0;
     //Vari�vel que guarda a linha ativa do rstOff
     private int POS;
     //Este array de vetor � a tabela onde ficar�o guardados os campos do ResultSet
     private Vector[] vcBase;
     public rstOff(ResultSet rst) {
//          int numberOfRows;
          try {
               //Descobre o n�mero de campos que o ResultSet possui
               numberOfColumns = getNumOfColumns(rst);
               System.out.println("N�mero de colunas igual a " + numberOfColumns);
               //Inicializa a tabela para a qual o ResultSet ser� copiado
               inicializa();
               //Faz a c�pia de todos os campos do ResultSet para a tabela inicializada
               copia(rst);
               POS = 0;
          } catch(Exception e) {
     public rstOff() {
          numberOfColumns = 4;
          inicializa();
          for(POS=0;POS<2;POS++) {
               vcBase[0].add(POS, "a" + POS);
               vcBase[1].add(POS, "b" + POS);
               vcBase[2].add(POS, "c" + POS);
               vcBase[3].add(POS, "d" + POS);
          POS=0;
          System.out.println(POS);
     //Inicializa as vari�veis globais
     private void inicializa() {
          //Inicializa a vari�vel que percorre o ResultSet com 0
          POS = 0;
          //Define o tamanho do array de vetores
          vcBase = new Vector[numberOfColumns];
          //Instancia cada um Vector em cada uma das posi��es do array de vetores
          for(int count = 0;count<numberOfColumns;count++) {
               vcBase[count] = new Vector();
//               vcBase[count].add("Deu certo");
          System.out.println("Objeto instanciado");
     //Copia todos os campos do ResultSet para a tabela offline
     private void copia(ResultSet rstCopia) throws SQLException {
          //Move o cursor do ResultSet para antes da primeira linha porque
          //ser� utilizado o m�todo next()
          rstCopia.beforeFirst();
          //Percorre todas as linha do ResultSet com o m�todo next()
          while(rstCopia.next()) {
//               System.out.println("O numero de linhas e " + numberOfRows);
               numberOfRows++;
               //Percorre todas as colunas do ResultSet dentro da mesma linha
               for(int j=0;j<numberOfColumns;j++) {
                    //Faz a c�pia de cada campo na linha para a tabela offline
                    //O m�todo add insere o elemento na �ltima posi��o automaticamente
                    //Como se fosse "vcBase[j].add(ULTIMAPOSICAO, rstCopia.getObject(j));"
//                    System.out.println(rstCopia.getObject(j+1));
                    vcBase[j].add(rstCopia.getObject(j+1));
          System.out.println("N�mero de linhas igual a " + numberOfRows);
     //Recebe o ResultSet como par�metro e devolve a quantidade de colunas do ResultSet
     private int getNumOfColumns(ResultSet rstNumOfColumns) throws SQLException {
          ResultSetMetaData rsmd = rstNumOfColumns.getMetaData();
          return rsmd.getColumnCount();
     //Recebe a coluna da linha ativa e retorna o valor
     public Object getValue(int column) {
//          System.out.println(POS);
          return vcBase[column].get(POS);
     public boolean next() {
          if(POS<numberOfRows) {
               POS++;
               return true;
          } else {
               return false;
     public boolean previous() {
          if(POS>-1) {
               POS--;
               return true;
          } else {
               return false;
     public boolean first() {
          POS = 0;
          return true;
     public boolean last() {
          POS = numberOfRows-1;
          return true;
     public boolean beforeFirst() {
          POS = -1;
          return true;
     public boolean afterLast() {
          POS = numberOfRows;
          return true;
     public int rowCount() {
          return numberOfRows;
     public int columnCount() {
          return numberOfColumns;
     public int absolutePosition() {
          return POS;
Any questions, email me: [email protected]
Thanks for everything.

Simplifing WsSecurity to JaxWS metro Implementation

Similar Messages

Maybe you are looking for