SOA10g: Encrypt Password in oc4j-ra.xml file.

I am using ftp adapter for SFTP operations. Is there any way to encrypt the password in oc4j-ra.xml file.
I was trying to use encrypt.bat to encrypt the password..but when i hit the enter button , the screen gets closed.
Pls tell me how to achieve this in soa 10g.
Thanks,
AB

This is done via the 'encrypt.bat' or 'encrypt.sh' script located in your SOA Suite install.
cd %ORACLE_HOME%\bpel\bin
encrypt.bat mypassword
Use the output of this command in your oc4j-ra.xml file.
(Thank You Ahmed!! http://blog.thisisahmed.com/)

Similar Messages

Encrypt passwords in cle-providers.xml

Hi,
I posted this question on JHeadstart forum but they advised me to find help here.
I have a JHeadstart application (say the shipped jhsdemo) use 9iAS R2 OC4J 9.0.3 and consider to use OEM for managing the application.
How can I use encryption to protect the user passwords in cle-providers.xml. I know I must enter encryption value BASE-64, but how can I get the password to be encrypted and how is it decrypted again?
Another question: why do I need to enter username+password once as part of the jdbc thin URL in "connectionstring" and once as separate arguments "user" and "password"? The same question for db host, sid and port.
Thnx,
Rinse Veltman
My cle-providers.xml:
<?xml version = '1.0'?>
<cle-providers>
<provider name="SomeServiceProvider" class="oracle.clex.persistence.bc4j.ApplicationModuleProvider">
<property name="persistencebase" value="comp.app.persistence.bc4j"/>
<property name="modulename" value="comp.app.persistence.bc4j.Bc4jModule"/>
<property name="connectionstring" value="jdbc:oracle:thin:<user>/<pwd>@<host>:1521:<sid>"/>
<property name="user" value="<user>"/>
<property name="password" value="<pwd>"/>
<property name="host" value="<host>"/>
<property name="sid" value="<sid>"/>
<property name="port" value="1521"/>
<property name="encryptiontype" value=""/>
<property name="drivertype" value=""/>
<property name="failover" value=""/>
<property name="scope" value="request"/>
<property name="managestate" value="false"/>
</provider>
</cle-providers>

Ahhh. The forum isn't showing it as I meant.
This is my connectionstring property:
<property name="connectionstring" value="jdbc:mysql://localhost:3306/opa?ultraDevHack=true& amp; user=root& amp; password=test"/>
<property name="connectionstring" value="jdbc:mysql://localhost:3306/opa?ultraDevHack=true& a m p ; user=root& a m p ; password=test"/>
(without the spaces)
(without the spaces)

I need detailed explanation of the OC4J config/*.xml files.

Anybody know where I can find good descriptions of the OC4J config files?? I've found some stuff on www.orionserver.com but they aren't good enough. Specifically, I have someone who wants a <lib> entry made for his app into the server.xml file. I want to know exactly what that tag means, how it is interpreted, etc... I want to have a complete understanding of all of the tags in all these files so I can deal with all the different methods of deploying applications...

Thanks, but I've seen those and they really don't help much. I've got a situation where many developers are deploying many different apps in different ways. One guy wants to add a <library> entry into server.xml for one of his application-specific jar files. I really think this is a bad idea but I can't say anything without documentation stating what the purpose of this tag in server.xml file is, and what the ramifications are if we mess with it. How might that affect the performance of OC4J, or how might it mess up other apps under OC4J?

Error while encrypting the xml file using asymmetric cipher...pls help

i am encryption the xml file using asymmetric cyper....
in one class , i am generating private key and public key using "RSA" algorithm..using 1024 byte initialization...
it is generating properly...
and after that in second class i am encrypting the xml file using "DESede" algorithm and i am using public key of above class..
but i am getting exceptione :
java.security.InvalidKeyException: Invalid key length: 162 bytes
at com.sun.crypto.provider.DESedeCipher.engineGetKeySize(DashoA6275)
at javax.crypto.Cipher.init(DashoA6275)
at XmlEncryption.getEncryptedData(XmlEncryption.java:147)
at XmlEncryption.encryptCompleteXmlFile(XmlEncryption.java:123)
at demoXmlEncApp.simulateBookSellersEnd(demoXmlEncApp.java:72)
at demoXmlEncApp.main(demoXmlEncApp.java:29)
so, what is that ?
i want to use RSA algo for key generatiion and DESede for cipher initialization .
is there any site for where source code of xml file encryption using asymmetric cipher is available?
pls, help me.....

Sachin,
What sabre150 is trying to explain to you, is that encrypting data (such as an XML file) is a 2-step process. In the first step, you generate a symmetric key (such as DES, 3DES, AES) and encrypt your file with this key (and the appropriate mode and padding).
In order to ensure that your encrypted data cannot be decrypted by unauthorized individuals, you now need to protect the symmetric key. Encrypting your symmetric key with another symmetric key does not solve the problem, since you have a chain of symmetric keys that need to be encrypted into infinity.
Cryptographers solve this problem by encrypting the symmetric key with an asymmetric key, such as as RSA. To perform this second step, you generate an RSA key-pair, encrypt the symmetric key you generated in step 1 with the Public key of the RSA key-pair, and give the recipient of the encrypted XML file, access to the Private key of the RSA key-pair as well as the encrypted symmetric key.
The recipient, then uses the RSA Private key to decrypt the symmetric key first, and then uses the "plaintext" symmetric key to decrypt the XML file.
What sabre150 was also attempting to explain to you, is the traditional way of transporting an encrypted "blob" that consists of data + symmetric key. With a modern key-management system, combining the two would be unnecessary.

Connection has no password, -jdbc.xml file not generated for connection

Hi,
I'm migrating a jdev 10g web application (with EJB) to 11g, i did the automatic migration tool offred by 11g, i'm using the integrated weblogic server but it seems there is a *-jdbc.xml file missed, and it must be generated, this is the log file of the start of server :
IntegratedWebLogicServer started.
[Running application SAB_ADMIN on Server Instance IntegratedWebLogicServer...]
[09:14:15 AM] ---- Deployment started. ----
[09:14:15 AM] Target platform is (Weblogic 10.3).
[09:14:18 AM] Retrieving existing application information
[09:14:19 AM] Running dependency analysis...
[09:14:19 AM] Deploying 4 profiles...
[09:14:21 AM] Wrote Web Application Module to C:\Users\Moshe\AppData\Roaming\JDeveloper\system11.1.1.3.37.56.60\o.j2ee\drs\SAB_ADMIN\ViewControllerWebApp.war
[09:14:21 AM] Wrote Web Application Module to C:\Users\Moshe\AppData\Roaming\JDeveloper\system11.1.1.3.37.56.60\o.j2ee\drs\SAB_ADMIN\ModelWebApp.war
[09:14:25 AM] Wrote EJB Module to C:\Users\Moshe\AppData\Roaming\JDeveloper\system11.1.1.3.37.56.60\o.j2ee\drs\SAB_ADMIN\ModelEJB.jar
[09:14:25 AM] WARNING: Connection DBConnectionSAB has no password. DBConnectionSAB-jdbc.xml file not generated for connection DBConnectionSAB.
[09:14:26 AM] Wrote Enterprise Application Module to C:\Users\Moshe\AppData\Roaming\JDeveloper\system11.1.1.3.37.56.60\o.j2ee\drs\SAB_ADMIN
[09:14:26 AM] Deploying Application...
<14 oct. 2010 09 h 14 GMT+01:00> <Notice> <EclipseLink> <BEA-2005000> <2010-10-14 09:14:28.065--ServerSession(40464643)--property eclipselink.jdbc.user is deprecated, property javax.persistence.jdbc.user should be used instead.>
<14 oct. 2010 09 h 14 GMT+01:00> <Notice> <EclipseLink> <BEA-2005000> <2010-10-14 09:14:28.299--ServerSession(40464643)--property eclipselink.jdbc.driver is deprecated, property javax.persistence.jdbc.driver should be used instead.>
<14 oct. 2010 09 h 14 GMT+01:00> <Notice> <EclipseLink> <BEA-2005000> <2010-10-14 09:14:28.299--ServerSession(40464643)--property eclipselink.jdbc.url is deprecated, property javax.persistence.jdbc.url should be used instead.>
<14 oct. 2010 09 h 14 GMT+01:00> <Notice> <EclipseLink> <BEA-2005000> <2010-10-14 09:14:28.299--ServerSession(40464643)--property eclipselink.jdbc.password is deprecated, property javax.persistence.jdbc.password should be used instead.>
<14 oct. 2010 09 h 14 GMT+01:00> <Warning> <EJB> <BEA-012035> <The Remote interface method: 'public abstract java.lang.Object oracle.user.Session_user.mergeEntity(java.lang.Object)' in EJB 'SessionEJB' contains a parameter of type: 'java.lang.Object' which is not Serializable. Though the EJB 'SessionEJB' has call-by-reference set to false, this parameter is not Serializable and hence will be passed by reference. A parameter can be passed using call-by-value only if the parameter type is Serializable.>
<14 oct. 2010 09 h 14 GMT+01:00> <Warning> <EJB> <BEA-012035> <The Remote interface method: 'public abstract java.lang.Object oracle.user.Session_user.persistEntity(java.lang.Object)' in EJB 'SessionEJB' contains a parameter of type: 'java.lang.Object' which is not Serializable. Though the EJB 'SessionEJB' has call-by-reference set to false, this parameter is not Serializable and hence will be passed by reference. A parameter can be passed using call-by-value only if the parameter type is Serializable.>
<14 oct. 2010 09 h 14 GMT+01:00> <Warning> <EJB> <BEA-012035> <The Remote interface method: 'public abstract java.lang.Object oracle.bouton.Session_bouton.mergeEntity(java.lang.Object)' in EJB 'Session_bouton' contains a parameter of type: 'java.lang.Object' which is not Serializable. Though the EJB 'Session_bouton' has call-by-reference set to false, this parameter is not Serializable and hence will be passed by reference. A parameter can be passed using call-by-value only if the parameter type is Serializable.>
<14 oct. 2010 09 h 14 GMT+01:00> <Warning> <EJB> <BEA-012035> <The Remote interface method: 'public abstract java.lang.Object oracle.bouton.Session_bouton.persistEntity(java.lang.Object)' in EJB 'Session_bouton' contains a parameter of type: 'java.lang.Object' which is not Serializable. Though the EJB 'Session_bouton' has call-by-reference set to false, this parameter is not Serializable and hence will be passed by reference. A parameter can be passed using call-by-value only if the parameter type is Serializable.>
<14 oct. 2010 09 h 14 GMT+01:00> <Warning> <EJB> <BEA-012035> <The Remote interface method: 'public abstract java.lang.Object oracle.operation.Session_operation.mergeEntity(java.lang.Object)' in EJB 'Session_operation' contains a parameter of type: 'java.lang.Object' which is not Serializable. Though the EJB 'Session_operation' has call-by-reference set to false, this parameter is not Serializable and hence will be passed by reference. A parameter can be passed using call-by-value only if the parameter type is Serializable.>
<14 oct. 2010 09 h 14 GMT+01:00> <Warning> <EJB> <BEA-012035> <The Remote interface method: 'public abstract java.lang.Object oracle.operation.Session_operation.persistEntity(java.lang.Object)' in EJB 'Session_operation' contains a parameter of type: 'java.lang.Object' which is not Serializable. Though the EJB 'Session_operation' has call-by-reference set to false, this parameter is not Serializable and hence will be passed by reference. A parameter can be passed using call-by-value only if the parameter type is Serializable.>
<14 oct. 2010 09 h 14 GMT+01:00> <Notice> <EclipseLink> <BEA-2005000> <2010-10-14 09:14:29.656--ServerSession(42285779)--property eclipselink.jdbc.user is deprecated, property javax.persistence.jdbc.user should be used instead.>
<14 oct. 2010 09 h 14 GMT+01:00> <Notice> <EclipseLink> <BEA-2005000> <2010-10-14 09:14:29.656--ServerSession(42285779)--property eclipselink.jdbc.driver is deprecated, property javax.persistence.jdbc.driver should be used instead.>
<14 oct. 2010 09 h 14 GMT+01:00> <Notice> <EclipseLink> <BEA-2005000> <2010-10-14 09:14:29.656--ServerSession(42285779)--property eclipselink.jdbc.url is deprecated, property javax.persistence.jdbc.url should be used instead.>
<14 oct. 2010 09 h 14 GMT+01:00> <Notice> <EclipseLink> <BEA-2005000> <2010-10-14 09:14:29.656--ServerSession(42285779)--property eclipselink.jdbc.password is deprecated, property javax.persistence.jdbc.password should be used instead.>
<14 oct. 2010 09 h 14 GMT+01:00> <Error> <HTTP> <BEA-101371> <There was a failure when processing annotations for application C:\Users\Moshe\AppData\Roaming\JDeveloper\system11.1.1.3.37.56.60\o.j2ee\drs\SAB_ADMIN\ModelWebApp.war. Please make sure that the annotations are valid. The error is oracle.adf.view.faces.webapp.ResourceServlet>
<14 oct. 2010 09 h 14 GMT+01:00> <Error> <Deployer> <BEA-149265> <Failure occurred in the execution of deployment request with ID '1287044066833' for task '0'. Error is: 'weblogic.application.ModuleException: Failed to load webapp: 'SAB_CRUD-Model-context-root''
weblogic.application.ModuleException: Failed to load webapp: 'SAB_CRUD-Model-context-root'
     at weblogic.servlet.internal.WebAppModule.prepare(WebAppModule.java:404)
     at weblogic.application.internal.flow.ScopedModuleDriver.prepare(ScopedModuleDriver.java:180)
     at weblogic.application.internal.flow.ModuleListenerInvoker.prepare(ModuleListenerInvoker.java:199)
     at weblogic.application.internal.flow.DeploymentCallbackFlow$1.next(DeploymentCallbackFlow.java:508)
     at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:41)
     Truncated. see log file for complete stacktrace
Caused By: java.lang.ClassNotFoundException: oracle.adf.view.faces.webapp.ResourceServlet
     at weblogic.utils.classloaders.GenericClassLoader.findLocalClass(GenericClassLoader.java:280)
     at weblogic.utils.classloaders.GenericClassLoader.findClass(GenericClassLoader.java:253)
     at weblogic.utils.classloaders.ChangeAwareClassLoader.findClass(ChangeAwareClassLoader.java:56)
     at java.lang.ClassLoader.loadClass(ClassLoader.java:303)
     at java.lang.ClassLoader.loadClass(ClassLoader.java:248)
     Truncated. see log file for complete stacktrace

This is the content of my web.xml file where i found the markup <servlet> and i tried to run without the first one but the error still like it was :
<servlet>
<servlet-name>Faces Servlet</servlet-name>
<servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
<load-on-startup>1</load-on-startup>
</servlet>
<servlet>
<servlet-name>resources</servlet-name>
<servlet-class>oracle.adf.view.faces.webapp.ResourceServlet</servlet-class>
</servlet>
<servlet>
<servlet-name>resources</servlet-name>
<servlet-class>org.apache.myfaces.trinidad.webapp.ResourceServlet</servlet-class>
</servlet>
<servlet>
<description>Web Service MyConnexionServiceSoapHttpPort</description>
<display-name>Web Service MyConnexionServiceSoapHttpPort</display-name>
<servlet-name>MyConnexionServiceSoapHttpPort</servlet-name>
<servlet-class>oracle.controll.ConnexionBaseDeDonnees</servlet-class>
<load-on-startup>1</load-on-startup>
</servlet>
<servlet>
<servlet-name>ResultatRequetePort</servlet-name>
<servlet-class>oracle.controll.ResultatRequete</servlet-class>
<load-on-startup>1</load-on-startup>
</servlet>
<servlet-mapping>
<servlet-name>Faces Servlet</servlet-name>
<url-pattern>/faces/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>resources</servlet-name>
<url-pattern>/adf/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>MyConnexionServiceSoapHttpPort</servlet-name>
<url-pattern>MyConnexionServiceSoapHttpPort</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>ResultatRequetePort</servlet-name>
<url-pattern>/ResultatRequetePort</url-pattern>
</servlet-mapping>
Thanks...

Multiple Domains with oc4j-ra.xml

Hi, I am using the oc4j-ra.xml file in the /oracle/app/10Gias/j2ee/OC4J_BPEL/application-deployments/default/DbAdapter/ directory to my database connection. I have now created a second domain for a TEST environment and want to use a seperate oc4j-ra.xml file for it. Is this possible? Should'nt there be a seperate oc4j-ra.xml file for each domain? Or is there another way to handle this with multiple domains?
Thanks

Hi,
I am sorry it is not oc4j-ra.xml rather it is OraHome_1\j2ee\OC4J_BPEL\config\data-sources.xml where we have jndi location of all datasources.
i think here we can define multiple datasource elements pointing to diffrent databases say one for Development and one for Testing like:
for Development:
<data-source class="com.evermind.sql.DriverManagerDataSource"
     name="BPELServerDataSource"
     location="jdbc/BPELServerDataSourceWorkflowDev"
     xa-location="BPELServerDataSource"
     ejb-location="jdbc/BPELServerDataSource"
     connection-driver="oracle.jdbc.OracleDriver"
     max-connections="50"
     min-connections="10"
     connection-retry-interval="30"
     max-connect-attempts="10"
     username="orabpel"
     password="->pwForOrabpel"
     url="jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS_LIST=(LOAD_BALANCE=on)(ADDRESS=(PROTOCOL=tcp)(HOST=101.11.50.51)(PORT=1521)))(CONNECT_DATA=(SERVICE_NAME=esb)))"/>
for Testing:
<data-source class="com.evermind.sql.DriverManagerDataSource"
     name="BPELServerDataSource"
     location="jdbc/BPELServerDataSourceWorkflowTest"
     xa-location="BPELServerDataSource"
     ejb-location="jdbc/BPELServerDataSource"
     connection-driver="oracle.jdbc.OracleDriver"
     max-connections="50"
     min-connections="10"
     connection-retry-interval="30"
     max-connect-attempts="10"
     username="orabpel"
     password="->pwForOrabpel"
     url="jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS_LIST=(LOAD_BALANCE=on)(ADDRESS=(PROTOCOL=tcp)(HOST=101.11.50.52)(PORT=1521)))(CONNECT_DATA=(SERVICE_NAME=esb)))"/>
after that, modify the domain.xml in Development domain to point
<property id="datasourceJndi">
<name>Domain datasource JNDI</name>
<value>jdbc/BPELServerDataSourceWorkflowDev</value>
<comment><![CDATA[
The JNDI name for the domain datasource. This datasource may refer to any datasource (JTA not required).
]]></comment>
</property>
and modify the domain.xml in Testing domain to point
<property id="datasourceJndi">
<name>Domain datasource JNDI</name>
<value>jdbc/BPELServerDataSourceWorkflowTest</value>
<comment><![CDATA[
The JNDI name for the domain datasource. This datasource may refer to any datasource (JTA not required).
]]></comment>
</property>
I hope this will help you.
Thanks,
-Vidya

Question about oc4j-ra.xml

Hi
Under what scenario we need to change the contents of oc4j-ra.xml file for the DBAdapter?
Thanks
BS

Hi,
read this
http://download-uk.oracle.com/docs/cd/B31017_01/integrate.1013/b28994/adptr_db.htm#BDCBIGJG
In production environments, it is recommended that you add the JNDI entry to the adapter deployment descriptor (oc4j-ra.xml). This way, the database adapter is more performant by working in a managed mode. In a nonmanaged mode, the database adapter uses the design-time connection information.
and
Connection information in the oc4j-ra.xml file is not generated by the Adapter Configuration Wizard. You must manually update this file and restart Oracle BPEL Server for updates to oc4j-ra.xml to take effect.

How to encrypt login details inside GG parameter files

Hi anybody can tell me how to encrypt the DB login details and GG credetials inside the GG parameter files, so external users cannot read from them?
Thanks in advance.

GGSCI (dbstandby) 11> ENCRYPT PASSWORD TEST ENCRYPTKEY DEFAULT
Using default key...
Encrypted password: AACAAAAAAAAAAAEAKASIDFQHAGGEEIRFThen on the param file :
USERID <user>, PASSWORD AACAAAAAAAAAAAEAKASIDFQHAGGEEIRF ,ENCRYPTKEY DEFAULTYou can generate your own keys if you want and specify the key while encrypting and changing the param file.

Encrypted Password in AIAConfigurationProperties.xml

Hi,
During the installation of Primavera P6 to EBS Projects PIP, the Password is getting encrypted in the Service Configuration in AIAConfigurationProperties.xml. Is there any script that we can run so that we can avoid the encryption of the password there by having the flexibility to change the un-encrypted Password as and when required?
<Property name="User.P6EPPM_01.Name">primavera</Property>
<Property name="User.P6EPPM_01.pwd">Se8bfsuMJNvYmKB4mg9L3w==</Property>
Your pointers will be highly appreciated!
Regards,
Chaitanya

Try this:
There's a script that can be used to re-encrypt a new password. If the cleartext password is, say, welcome1, do the following -
- Go to AIA_HOME/Infrastructure/install/install/wlscripts/config
- Run command: ./encrypt.sh welcome1
This is useful for re-encrypting any of the passwords that are captured during installation in the deploy.properties file. I can't say for sure that it is the same encryption that is used for the P6 credentials, but it's worth a try.

Problems with OC4J EJB deployment and the data-sources.xml file

I am running 2 Windows 2000 Machines one with the 8.1.7 database another with iAS 1.0.2.2.1 and OC4J.
I am trying to deploy a 3rd party EJB-based application whic seems to have deployed successfully except when I try to test the EJB deployment via a jsp it can't connect to the database, giving the error:
1/16/02 4:52 PM VerySimple: Servlet error
java.lang.NoClassDefFoundError: com.netexp.user.UserManagerHome
at com.netexp.beans.BeanHelper.class$(Unknown Source)
at com.netexp.beans.BeanHelper.getUserManagerBean(Unknown Source)
at /very_simple.jsp._jspService(/very_simple.jsp.java:48) (JSP page line 27)
at com.orionserver[Oracle9iAS (1.0.2.2.1) Containers for J2EE].http.OrionHttpJspPage.service(OrionHttpJspPage.java:54)
at com.evermind[Oracle9iAS (1.0.2.2.1) Containers for J2EE].server.http.HttpApplication.serviceJSP(HttpApplication.java:5459)
at com.evermind[Oracle9iAS (1.0.2.2.1) Containers for J2EE].server.http.JSPServlet.service(JSPServlet.java:31)
at com.evermind[Oracle9iAS (1.0.2.2.1) Containers for J2EE].server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:508)
at com.evermind[Oracle9iAS (1.0.2.2.1) Containers for J2EE].server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:177)
at com.evermind[Oracle9iAS (1.0.2.2.1) Containers for J2EE].server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:576)
at com.evermind[Oracle9iAS (1.0.2.2.1) Containers for J2EE].server.http.HttpRequestHandler.run(HttpRequestHandler.java:189)
at com.evermind[Oracle9iAS (1.0.2.2.1) Containers for J2EE].util.ThreadPoolThread.run(ThreadPoolThread.java:62)
I try to update the file using the installdatasource switch thus:
C:\Oracle\iSuites\j2ee\home>java -jar admin.jar ormi://localhost admin adm_pwd -application apptricityII -installDataSource -jar %ORACLE_HOME%\jdbc\lib\classes12.zip -url jdbc:oracle:thin:@db_host.unitas.com:1521:db_name -connectionDriver oracle.jdbc.driver.OracleDriver -location jdbc/pool/OracleDataSource -username scott -password tiger
And get the following error:
Exception passing by from remote server: java.lang.InstantiationException: No class specified for jdbc/pool/OracleDataSource
java.lang.InstantiationException: No class specified for jdbc/pool/OracleDataSource
<<no stack trace available>>
Error adding source: No class specified for jdbc/pool/OracleDataSource
Please advise.
I have followed the instructions in 'EJB Primer' and 'Using Oracle9iAS Containers for J2EE' to no avail. And I can't find any meaningfull data-sources.xml samples. I have been struggling with this for some time.
Is there any other file, do I need to bind anything?
I'd appreciate your assistance.
Thank you
Louiza

Hi Louiza,
Show us your web.xml and ejb-jar.xml files as well as your
data-source.xml file.
Thanks,
Avi.

Passwords in All-configuration backup XML file

Looking at the http://goo.gl/UU4cmx - for All configuration backup XML file in UCS Manager it says "This file does not include passwords for locally authenticated users."
When I create all configuration backup I can still see passwords when I look into the XML file but they are encrypted somehow.
So if I create a backup and import it to some other UCS system - how will the new system know how to decrypt the password so users will be able to login? Thanks.

Thanks for the elucidation.

Reading Encrypted Password from Configuration File and Decrypt it at login

Hi All,
My application reads a configuration file to connect to the ORACLE database. The values defined for password are clear text as given below:
user: 'mh'
password='abcd1234'
Is there is any way I can give an encrypted password in the configuration file instead of a clear text file and at the time of login ORACLE decrypts it. I am using ORACLE 11g Database.
My company have a requirement that passwords are not stored in the clear in properties files. the reason being I suppose that if the password is stored in plaintext someone could hit the property file directly, get the password and then connect to the database with it.
For a regular user connecting through an Oracle client or SQL Developer they would need to have the plaintext password in order to connect.
its based on the requirements of
International Standards Organization Guidance
ISO 17799 � 9.5.4 requires password management systems to:
� enforce the use of individual passwords
� allow users to select and change their own passwords if appropriate
� enforce a choice of quality passwords
� force regular changes of passwords
� maintain a record of previous user passwords to prevent re-use
� not display passwords when they are being entered
� store password files separately from application system data
� store passwords in encrypted form using a one way encryption algorithm
� alter default vendor passwords following installation of software
So if I can store the password encrypted using a one way algorithm then hacker/user couldn't decrypt it and then access the database.
I have feeling there is a way of configuring this in Oracle advanced Security, but just can't quite get it to work.
Edited by: user5568473 on 20-May-2013 00:05

So if I can store the password encrypted using a one way algorithm then hacker/user couldn't decrypt it and then access the database.... and neither can your application. Encryption is needed in this case. The decryption must be written into your application. I've written my own in some cases, but finding a library for your development language is a smarter solution.
One alternative is using an Oracle wallet. It doesn't fit every circumstance and does have some maintenance headaches.
You can set up a basic secure password store to encrypt and store the password for a given user@instance combination, and then connect to the database without passing a password. SQL*Net adds in the appropriate password from the wallet for when you connect.
http://www.oracle.com/technetwork/database/security/twp-db-security-secure-ext-pwd-stor-133399.pdf
Advanced Security Option also allows you to set up a Public Key Infrastructure connections (SSL encryption and/or authentication). It also uses a wallet to store the SSL certificates and credentials. I don't have personal experience on this approach.
SSL and the wallet allow you to connect to the database similar to CONNECT/@net_service_name or sqlplus /@net_service_namehttp://docs.oracle.com/cd/B28359_01/network.111/b28530/asossl.htm#CIHCBIEG

I am receiving the 'Could not sign you in [Access denied: 530]. Check your user name and password' problem on Adobe Muse CC 2014 and I cannot access the xml file that is supposed to fix this issue?

I am a PC user and I have Adobe Creative Cloud Muse 2014. I have received the 'Could not sign you in [Access denied: 530]. Check your user name and password' error when trying to upload my muse site to my ftp host, GoDaddy. I have successfully done this in the past and only recently it has stopped working. I looked online at the FAQ Adobe Muse Help | Uploading an Adobe Muse Site to a third-party hosting service and it said to download the ftpprefs.xml file but this file simply leads to a blank page that says /*Not found*//*Not found*/.
Can someone direct me to a working page with this file or provide a different solution? Thank you!

Hello,
As you are getting error [Access denied: 530] it means issue is with access. Either the username and password you are entering is incorrect or you do not have proper permissions.
I would suggest you to contact Godaddy to either reset password or reset the permissions.
Regards
Vivek

Encrypt & Decrypt XML files

Hi All,
I am new to the cryptography. I have one application which will transfer XML files from the machines which uses Windows/Java platform to the machines which uses Linux/C and also vice versa.
I want to encrypt the files before transfer and decrypt the files after transfer on both the sides. Is there a common technology for handling this? Any info? Thanks in adv.
-Bh_t_76

So, I thought of getting ideas from the people who
have already done similar work. I think the forums
are meant for that. The topic is too broad. The forums are normally for specific problems and your request requires at least one book as an answer.
If you know nothing about encryption then you need to find and read books on the subject. Not just Java books, but general encryption books. There are plenty out there of various standards.
One of the books in my library is http://www.schneier.com/book-applied.html but you may want to start with something a little less weighty. Visit http://www.crypteon.co.uk/cryptography-books.htm to get some ideas.
Once you have a basic understanding of modern cryptography then study the JCE tutorial and come back with specific questions.

Jazn-data.xml file, authentication in web.xml and embedded oc4j

I've defined new security-roles, security-constraints and an authentication method in my web.xml file and i've created a new jazn-data.xml file that holds the different users and their groups.
If I want to link the security-roles of the web.xml file to the roles in the jazn-data.xml file I always need an orion-application.xml file, is this correct?
If I want to deploy an application as this to the embedded container the security won't work, I'm always getting the '403 forbidden' page.
Can somebody point me out how I need to define security for an embedded and standalone environment when using authentication and jazn-data.xml file + how do I deploy this to a standalone oc4j and how to get this same application to work in the embedded oc4J.

hi "romanna"
Part of the answer to "Can somebody point me out how I need to define security ..." can probably be found in the "Oracle ADF Developer's Guide" that has "18 Adding Security to an Application".
success
Jan

SOA10g: Encrypt Password in oc4j-ra.xml file.

Similar Messages

Maybe you are looking for