SSL and login form for form based login over ldap

Hello,
i have configured an apache reverse proxy with virtual named host and the the webgate is also running on this server.
On a second server i have configured a webserver with the login form.
Access to the protected ressources is working when i use the following parameters in my Authentication schema
form:/form/login.html
action:/dummy
creds:userid password
ssoCookie:httponly
passthrough:no
SSL Required No
Challenge Redirect http://dummyserver.dummy.org
Changing the SSL required to yes and the url to https has the following result.
After filling out the login form and pressing the submit button "the requested URL /dummy was not found on this server"
Any hints are welcome.
Kind regards

Hi Colin,
Yes the dummy url is protected. Otherwise it should not work when using http.
I assume that i am not redirected back to the origin source. The obSSOCookie should do this in some way, when i remember that correctly.
I can see that the obSSOCokkies are created for both urls but the content is "loggedoutcontinue". Thats the difference to the http communication.
Is there anything else to configure when using SSL with a form based login. Have i missed some basics?
In the documentation it looks really simple - just trning it on - looking for access - and everything works :-)
KR

Similar Messages

Aperture forgets it license and asks me for the serial number over and over again

Hi,
This is getting ridiculous to the point where I'm thinking of just ditching Aperture. It's continually forgetting is license and asking me for the serial number over and over again. I have the original serial number and an upgrade number when I upgraded to v3, but right now, it's not accepting either of them. What's going on and how do I fix it permanently?
Thanks,
Rob

Rob, have you upgraded to Aperture 3.4.3? This is supposed to have fixed the serial number problem:
http://support.apple.com/kb/DL1610
About Aperture 3.4.3
Addresses an issue that could cause a licensed copy of Aperture to prompt for a serial number with each launch
Be sure to enter the serial number, when you are logged in from an account with Administrator priveleges - otherwise can it not be stored.
Aperture is installed for all users on your mac, so the serial number is written to the system library, not the user library, and this requires read/write access for administrators. Do you enter your serial number using an administrator account?
When did this start? Have you migrated your system from from another mac? Then you still may have an older ProAppSystemID file or Aperture cannot write to the System Library.
To stop Aperture asking for the serial number, first check, if you still have an old file "ProAppSystemID" in your System Library.
Quit Aperture.
Go to your MacintoshHD and open the folder "Library", then "Application Support", then "ProApps".
Remove the File "ProAppsSystemID" to the Desktop, if it exist and restart Aperture.
Reenter your serial number, hopefully for the last time.
Sometimes Aperture writes this file to a temporary directory, when it cannot write to the Library. If the above does not work, look at the temporary directory /tmp
Use the Finder's "Go" menu
Go > Got to folder and enter /tmp into the textfield. If you see the file there, move it to its proper location.
In this case you may want to repair the permissions on your system drive; you can do this using the "First Aid" tools in "Disk Utility" (located in Applications > Utilities)
Regards
Léonie

JSF/JAAS j_security_check for role-based login pages

I'm looking for a way to take the login request after j_security_check is through and invoke logic in a backing bean somewhere to redirect the user (using Faces) to the appropriate view (via an outcome defined in the faces-config.xml, of course) based on the user's role. Is there a "JSF" (i.e. non-filter) way to do this that I'm missing? If not, I suppose I could try a filter if it will work.
I've thought of just going to the same page and displaying different components, but I don't like that a lot, even using subviews. I thought about having two web apps, but find that to be a poor option. I really don't like trusting the user to remember/get a URL right beyond http://xyz.com or something similarly simple, as much to save them from frustration as anything else.
Any ideas would be appreciated. I've scoured forums and Googled all day without much success, so I apologize if this is posted somewhere already. This seems like something that should be pretty simple and I may want to kick myself when I see the answer.

Hi Brian,
I do not believe it is j_security_check's job to check for blank
passwords.
In many security realms, it is "legal" for a user to have a blank
password. j_security_check forwards whatever password was entered so that
even users with blank passwords can be authenticated by the realm on the
backend. For this reason I believe that j_security_check is "doing the
right thing" by just forwarding whatever is presented to it, rather than
having its own logic. It is best if j_security_check just acts as a very
dumb middle man.
If behavior was altered, it is true that your particular problem would be
solved, but then many other people would have a problem with their users
with blank passwords authenticating properly...
Try looking into how to disable anonymous logins on the LDAP end of
things. Hope this helps.
Cheers,
Joe Jerry
brian wrote:
I am using the LDAP Security Realm to authenticate against an iPlanet
Directory Server. All works as expected when a user-id and password
are entered for form-based authentication.
However, when a userid is entered but no password, j_security_check
logs the user in successfully. Aparently, this is correct LDAP
behaviour as anonymous login to the LDAP server is permitted. It seems
that the j_security_check servlet should check for blank passwords
before trying to authenticate against the LDAP server and fail
authentication if this is the case.
Has anyone else experienced this problem?

Oracle Forms Look and Feel project for Forms 6i

Hello everybody,
Recently I find a web site that introduce Oracle Forms Look and Feel project,
Oracle Forms Look and Feel project
http://sheikyerbouti.developpez.com/forms-pjc-bean/LAF/doc/Oracle_Forms_Look_and_Feel_project.htm
Can I use the PL/SQL library (laf.pll) , Java Beans and PJCs grouped in a jar file (laf.jar) for Oracle Forms 6i?
thx

Hi Francois,
I find one website mention the following,
"PL/SQL tables reside in the private PL/SQL area of the Oracle Server database instance; they are not available as client-side structures at this time. As a result, you cannot declare and manipulate PL/SQL tables in your Oracle Developer/2000 environment."
from http://www.unix.org.ua/orelly/oracle/prog2/ch10_01.htm#SQL2-CH-10-SECT-1
Cheers,
Gary

Windows 2003 and windows 2008 for forms

hi all.
i want to know about windows that which one is better for forms server.
which one is better windows server 2003 or windows 2008?
please if anyone knows about the difference and about the performance please help me out thanks.
sarah

hi
Thanks for reply but i think forms forum are still alive and i do not think so if anyone reply me in a sec in other forum.Anyways thinks for suggestions.
well i want to install forms R2 in windows server 2008 but do not know about the performance may be there will be bugs?
i was thinking may be it will be like windows vista or windows 7 because some softeware is not supportable with windows 7 and with windows vista...
any suggestion?
sarah

How to Use a Certificate for Two Way SSL and another certificate for WS Security Header at Client Console Application(C# Dotnet)

Hi,
I want to consume a Java Web service from Dotnet based client Application. The service require one Certificate("abc.PFX") for Two Way SSL purpose and another certificate("xyz.pfx") for WS security purpose to be passed from client Application(Dotnet
Console based). I tried configuring the App.config of Client application to pass both the certs but getting Error says:
Could not establish secure channel for SSL/TLS with authority "******aaaa.com"
Please suggest how to pass both the certs from client Application..

Hi,
This problem can be due to an Untrusted certificate. So you need just full permissions to certificates.
And for more information, you could refer to:
http://contractnamespace.blogspot.jp/2014/12/could-not-create-secure-channel-fix.html
Regards

Firefox does not remembe the login name for the user login name on secure sites.

My user got a new computer and I installed the latest version of firefox. It no longer remembers user names on secure sites and the employee does not like the fact that she has to type in her user name every time she needs to log into the site. The browser is set to automatically save user names and passwords.

Please first update your plugins, Flash has a new version.
Does this happen in Safe Mode?
*[[Troubleshoot Firefox issues using Safe Mode]]
First troubleshooting steps are:
*[[Control whether Firefox automatically fills in forms]]
It is also possible to check the saved passwords to make sure that the information is saved. On an https site that does not autofill the information for logging in , the username is blank. I removed the entry by right cicking on the page, selecting "Page Info" and under "Security" viewing the saved passwords.

Where can we see invoice doc. and payment doc. for asset based on its no.

Dear all,
For a particular asset, based on its number, is there any report which shows invoice, payment and other relevant documents.
Can any of you suggest me on this?
Thanks,
Kumar

HI
There is no direct standard report in Asset accounting for your requirement , but you can try the below--
Asset invoice means , if you have acquired your asset through raising a PO , then you have MIRO docnumber which is linked to Asset number, with the help of this FI document linked withh asset number you can find out the invoice documents against assets acquired.
Go to Bseg and search with asset number fields and doc type of MIRO I believe it will be RE ,it will show you the invoice docuemnts against the selected asset , then search for the clearing docs against these invoices in bseg , that will be your payment document.
So now have asset number ,invoice number ,payment doc number.
More logic you may apply like search for the link through MM tables , since PO is also having asset number , just check the link of Asset number with various documents and tables, you may ask your ABAPER to create a report or query for this.
cheers
Mukta

SSL and Credentials configuration for webas

Hi..
I got a doubt in SSL certificate configuration.When i need to configure a JAVA engine for activating SSL.I would create .CSR and get signed from Trust center which inturn gives three certificate root,intermediate and original certificate and so we can configure the JAVA URL as https://<hostname>:<port no>:500001/...
Now the same can also can be configured for ABAP WEBAS engine.my doubt is as per note : 510007,SAP has said to generate .PSE file and SSL configuration which will work in 443 port and HTTPS port as in SMICM transaction
But I have two instances running on single host.I have already configured HTTPS 443 for one instance say for ABAP webas.And If i need to configure for another instance, can i change the HTTPS port as per my requirement ????,because 443 has been assigned to another instance (earlier) .And Can i generate PSE file from that new port and get the certificate installed that is obtained from Trust center ???
Expecting you Ideas and solution for this scenario..
Thanks
Gopalakrishnan M

Hello Gopalakrishnan,
To specify the https port of ABAP, you can use paramenter
icm/server_port_<X> as PROT=HTTPS,PORT=<port>
I think the default port for http is like below
icm/server_port_0 as PROT=HTTP,PORT=80<instance_number>
Then you can just specify icm/server_port_1 for https.
Good luck,
Victor

SSL and mutual auth. for webservice

Does anyone have a simple example that runs OOTB to demonstrate calling a webservice
using SSL with mutual auth.? We are using WLS7.0.1. Thanks....

To get mutual authentication working over SSL, try the SSLClient example shipped
with WLS. Once you get this connecting to your remote HTTPS endpoint it is relatively
straighforward to make sure your web service activation code configures SSL in
the same way.
One gotcha is when creating certificate chains in PEM files, make sure you concatenate
the certificate files in the order of trust i.e. cert followed by CA cert.

HT1420 After updating to 11 for itunes and ios 7 for phone - I lost over 3500 songs from my itunes. My ipod still has 4100 songs on it less the most recent ones I have purchased. Can't my ipod be used to recreate the library in itunes?

After updating itunes to 11.1 and phone to ios7, I lost more than 3500 songs from my library. My ipod has 4185 songs less the most recent I purchased.
Is there no way an ipod can be used to restore the lost music? Yes, some of it was from cds but were done a long time ago. Obviously it was acceptable for me to compile this music then, now they want to say since it all wasn't purchased, I can't have what was already mine? Plus I do not use nor want to use the cloud, but it keeps creeping up even though I don't want or use it. HELP!

See Recover your iTunes library from your iPod or iOS device.
tt2

How to configure login modules for certificate logon

Hello,
perhaps someone of you has also tried to implement SSO via Client Certificates and is able to help me...
I have configured the login modules for rule based authentication with the option Rule1.getUserFrom = wholeCert and I have attached my certificate to my user in useradmin.
And also added the login module to the template ticket, as suggested by the documentation at help.sap.com
But when I logon to the portal or other application (for example useradmin) via https the authentication doesn't work (but I'm still able to logon via password).
I also tried auto. certifcate mapping and mapping by subject name but in every case the system ignores the configured login module. There are no errors in the log files.
Thank You,
Frank

Hi Frank,
did you configure the SSO for an individual policy configuration or did you edit and save the changes the ticket policy config? I ask, b/c if you applied the changes to the individual policy config then the SSO with certificates will be used only when you access the applications for that policy config.
You can also double check the login module flags - perhaps the authentication check doesn't reach the ClientCertLM at all.
Since you followed the help portal instruction I assume you've enabled strong crypto - it is required for client cert SSO. Ano easily committed mistake is to also not use the HTTPS port in the access URL.
Let me know if this helps...
Yonko

Is there a utility to import security for Forms?

I have used the importsecurity.exe utility to successfully import entity, account, and other dimension security. But it doesn't work for Form security. Is there another way or a way to trick the utility and use it for forms?
Version 9.2.1 Windows environment. SQL server is the database
Thanks
Wags

Thanks John.
I have over 200 forms for one application with over 700 lines of security.
As a test, I manually added a few rows of security directly into the HSP_access_control table and restarted the planning service and that worked. So it looks like I could load all the data directly via a SQL query to accomplish this. I merely need to match-up my object names and related object security from PROD to the object_id's and group ID's in Dev (which are slightly different due to dev and prod security being out of sync)
Any thoughts on what could go wrong??
Jeff

How to find out the last time login for a locked login account?

In ASE 15.4,there are many login account show as locked and unlocked. How to find out the last login time for those locked login account?

Thank you. The version of my ASE is 12.5.4.
This is what I got from select * from syslogins:
suid status accdate totcpu totio spacelimit timelimit resultlimit dbname name password language pwdate audflags fullname srvname logincount procid
1
30 2 10/25/2012 11:41:10.430 AM 0 0 0 0 0 . . ... us_english 02/24/2.0.08 12:55:38.640 PM 0 [NULL] [NULL] [NULL] [NULL]
this is what I got from exec sp_displaylogin 'mylogin':
1 Suid: 46
2 Loginame: mylogin
3 Fullname: FN LN
4 Default Database: mydb
5 Default Language: us_english
6 Auto Login Script:
7 Configured Authorization:
8 Locked: YES
9 Date of Last Password Change: Apr 17 2010 2:36PM
10 Password expiration interval: 0
11 Password expired: NO
12 Minimum password length: 6
13 Maximum failed logins: 0
14 Current failed login attempts:
15 Authenticate with: AUTH_DEFAULT
which one is for last login time?

GENERATING FORMS FOR 11i IN UNIX ( ifrun60)

GENERATING FORMS FOR 11i IN UNIX ( ifrun60)
How to generate forms for forms 6i.
Just like f45gen for Forms 4.5.
null

It is f60gen in the unix. It takes the following parameters.
f60genm Module=<formname> Userid=<userid/password> [Parameters].
Optional parameters are (default values given):
Module_Type=FORM Module type (FORM, MENU, LIBRARY, PECS).
Module_Access=FILE Module access (FILE, DATABASE).
Statistics=NO Show statistics.
Logon=YES Logon to database.
Batch=NO Don't display messages on the screen.
Output_File=<file> Write output to file.
Script=NO Write script file.
Parse=NO Parse script file.
Delete=NO Delete module from database.
Insert=NO Insert module into database.
Extract=NO Extract module from database.
Upgrade=NO Upgrade module to current version.
Upgrade_Roles=NO Upgrade SQL*Menu 5.0 role information.
Version=45 Version to upgrade (23, 30, 40, 45, or menu 50).
Crt_File=<crt file> CRT file for version 2.x form upgrade.
Build=Yes Build a runform/runmenu file when upgrading.
Add_Triggers=NO Add KEY-UP/DOWN triggers during upgrade.
Nofail=NO Add NOFAIL keyword to trigger steps.
Debug=NO Build/Run with debug information.
Compile_All=NO Compile all PL/SQL code.
Strip_Source=NO Strip pl/sql source code from library.
Window_State=Normal Root window state: (Normal, Maximize, Minimize.)
Help=NO Show this help information.
Options_Screen=NO Display Options window (on bitmap only).
Widen_Fields=NO Add one character to display width.
Print_Version=NO Print version used to save module.
Forms_Doc=NO Print Forms Doc report.
Make sure that ur .Profile is set in unix.
Thanks
Ram
null

SSL and login form for form based login over ldap

Similar Messages

Maybe you are looking for