SSO SDK does not monitor expired SSO sessions

I am currently integrating APEX 4.2 with Oracle Single Sign-on server 10g using the SSO SDK. I have configured multiple applications and I am able to authenticate with 1 then seamlessly authenticate into the others.
What I am attempting to resolve is the SSO SDK’s inability to detect when an SSO session has expired and requires re-authentication. The scenario is as follows:
1. SSO Global Inactivity Timeout set to 30 minutes.
2. APEX application Idle times set to 30 minutes.
3. Authenticate with SSO using Self Service Console.
4. Leave console idle for 30 minutes.
5. Click tab in Self Service console. Session expiry page displayed and user asked to re-authenticate.
6. Open partner APEX application. APEX session is not authenticated, so redirects to SSO server.
7. As the session has expired and requires re-authentication then user should be directed to login screen, but is authenticated and returned to the APEX application.
Is this expected behaviour with the SSO SDK and APEX?
Oracle’s recommendation is to incorporate the SSO SDK with Apex for SSO authentication. However, it seems like session management within the SSO SDK has been neglected. We really need someone at Oracle to provide best practise for APEX, SSO and session management.
Thanks in advance

Scott,
Thanks for your reply. I double check instruction and re-done all steps. I try to start demo application (I didn't even go further tneh step 4 in Install.txt!)
from ...\ssosdk307_032101\demo\plsql\Readme.txt 5. To verify the web server setup, go to the following URL to see the test page:
http://<hostname>:<port>/pls/<dad_name>/<schema_name>.test_setup
, but I receive the same error messages in IE and in Apache error_logs.
I see at this point one weak area - this is DAD. As I understand I need to create dad in dads.conf, am I right?
Maybe I didn't created it right?
Could you post some working dad for SingleSignOn?
Thanks,
Sergiy

Similar Messages

The selected Flex SDK does not support building mobile projects

I am unable to create a new Actionscript Mobile project. The new project dialogue gives the error: "The selected Flex SDK does not support building mobile projects." I tried seting the default Flec SDK both to the SDK included with Flash Builder 4.7, and also to a version of the 4.6.0 SDK (build 23201) with AIR 3.3 SDK overlayed on it, which already existed on my computer. Both resulted in the same error. Any ideas?

Hi ,
Actionscript Mobile projects use AIR SDK by default in Flash Builder 4.7 . Flex SDK won't be used for Actionscript projects.
Could you please try creating an Actionscript project in fresh workspace and let me know if the issue still exists.
Also attach screenshot and error log if any.
Thanks,
Sanjay

The "Logout" button does not appear my Sakai sessions. I have to mouse over the blank area to find the link to logout. The Logout button does appear in Safari. Firefox version 10.0. Mac OS 10.7.2

The "Logout" button does not appear my Sakai sessions. I have to mouse over the blank area to find the link to logout. The Logout button does appear in Safari. Firefox version 10.0. Mac OS 10.7.2

To make sure that all required media is in the library contain the project you need to "Consolidate media" see: http://help.apple.com/imovie/mac/10.0/#mov882dee351
You can then copy the library to your laptop with the Finder and open it with the same version of iMovie. The last phrase is important since Apple has made changes in the project format several times even between minor updates of iMovie 10. Earlier versions may not be able to read the library and later versions (not possible in this case) may cause the project to be updated so that it is no longer readable by the desktop version. iMovie on the laptop will not at first find the copied library - you will have either to double click on it or File - Open library - Other and navigate to its location.
Geoff.

IOS Sdk does not seem to download with Xcode. I am using Mac OS X Lion 10.7.3. Why not?

The IOS SDK does not seem to download with XCode. There is no IOS template in XCode. I am using
Mac OS X Lion 10.7.3 on a Mac mini. Do you have to pay $99 to get this?

Another similar one here. I've updated ios7 and usb tethering doesn't work. I use it at my office connecting to a XP machine. It connects, iphone asks me to 'trust' the computer (which I do) and the driver is installed. However the connection shows a status of 'LAN Cable disconnected'.
However the version of itunes on the machine is a versions back (I don't use itunes on that machine).
Because the usb tethering is a universal network driver connection then it should still work on any machine even if there is no itunes installed (i.e. as long as hotspot is enabled).
looking at other forums it appears this is very much ios7 related. Was working perfectly on ios6.

Time machine icon does not rotate and back up icon on desktop does not show during backup session.

Time machine icon does not rotate and back up icon on desktop does not show during backup session since I installed Maverick. Why? How do I fix it?

That's the new look of it. No way to change it other than file a complaint with Apple. If ENOUGH people do thst they may "fix it".
http://www.apple.com/feedback/macosx.html

[SOLVED] slim does not set a default session

Hi everybody
I think slim does not set the default session (first entry in sessions in /etc/slim.conf):
My /etc/slim.conf:
login_cmd exec /bin/bash -login ~/.xinitrc %session
sessions openbox
So the default session (and %session) should be openbox.
My ~/.xinitrc:
DEFAULT_SESSION=openbox
# urxvt -e screen &
(sleep 1;
eval `cat ~/.fehbg`;
conky &
xbindkeys &
volwheel &
pidgin &
case $1 in
awesome|fluxbox|icewm|i3|dwm|wmii|fvwm|twm|wmfs)
exec ck-launch-session $1
openbox)
/usr/bin/tint2 &
exec ck-launch-session openbox-session
exec ck-launch-session $DEFAULT_SESSION
esac
So. When my sessions option is only "openbox" and .xinitrc is started with $1 = "openbox", it should execute tint2. But it doesn't.
Workaround 1:
When I set openbox directly in login_cmd, it works and tint2 is executed.
login_cmd exec /bin/bash -login ~/.xinitrc openbox
Workaround 2:
In slim, when I hit F1 to change the session and the words "openbox" appears at the screen, it does also work fine.
That means, that slim does not set the default session correctly. Or am I wrong?
I think this is since the last update.
Thanks for your feedback.
mindfuckup
Last edited by mindfuckup (2013-02-12 19:24:39)

Slim never set the default session, but there always was a comment in the default config suggesting that it would. This was well known and everybody simply set their own default (I'll get back to this in a second). Instead of simply modifying this comment, Arch included a patch to change Slim's behavior, but this led to new unexpected behavior so it was removed (recently).
You could also have found this in the wiki, which also provides a solution. Another way to fix your .xinitrc is to replace $1 in the case statement by ${1:-openbox}.
Edit: I just noticed you actually had the DEFAULT_SESSION as used in the wiki example. I think the solution in the wiki is a bit strange, and your .xinitrc (where tint2 should only be started for openbox) is an example where the alternative I suggested is simpler. Yet another way is to use the *) case for the default session (so you would not include openbox as a separate case and just start tint2 and openbox unless the $1 is set to awesome).
Last edited by Raynman (2013-02-12 17:52:33)

Partner App OAS SSO integration does not work

Hi All,
I try to make OAS SSO work. I have app I built in HTML DB, I try to make it work as Partner Application for OAS SSO. I've done all requierments to install SSO SDK and try to make it work - it was fruitless.
Then I try to make Test App work (\ssosdk307_032101\demo\plsql\) - it was fruitless also.
I received the same error messages in Apache error_logs:
[Thu Nov 4 12:06:54 2004] [error] [client 192.168.83.43] [ecid: 1099562814:192.168.83.197:9461:0:1,0] mod_plsql: /test2/test_setup HTTP-503 ORA-6550 Call to WPG_SESSION API Failed.
[Thu Nov 4 12:06:54 2004] [error] [client 192.168.83.43] [ecid: 1099562814:192.168.83.197:9461:0:1,0] mod_plsql: ORA-06550: line 4, column 2:
PLS-00201: identifier 'FLOWS_010500.WPG_SESSION' must be declared
ORA-06550: line 4, column 2:
PL/SQL: Statement ignored
ORA-06550: line 5, column 16:
PLS-00201: identifier 'WPG_SESSION_PRIVATE.CREATE_SESSION' must be declared
ORA-06550: line 5, column 2:
PL/SQL: Statement ignored
ORA-06550: line 6, column 15:
PLS-00201: identifier 'WPG_SESSION_PRIVATE.GET_LW_USER' must be declared
ORA-06550: line 6, column 2:
PL/SQL: Statement ignored
ORA-06550: line 7, column 2:
PLS-00201: identifier 'FLOWS_010500.WPG_SESSION' must be declared
ORA-06550: line 7, column 2:
PL/SQL: Statement ignored
Could someone point me what to do in order to make it work? I guess I miss some step but I don't know what one I've missed :(((
Thanks,
Sergiy

Scott,
Thanks for your reply. I double check instruction and re-done all steps. I try to start demo application (I didn't even go further tneh step 4 in Install.txt!)
from ...\ssosdk307_032101\demo\plsql\Readme.txt 5. To verify the web server setup, go to the following URL to see the test page:
http://<hostname>:<port>/pls/<dad_name>/<schema_name>.test_setup
, but I receive the same error messages in IE and in Apache error_logs.
I see at this point one weak area - this is DAD. As I understand I need to create dad in dads.conf, am I right?
Maybe I didn't created it right?
Could you post some working dad for SingleSignOn?
Thanks,
Sergiy

WebDav does not work while SSO is turned on.

We are using UCM 10gR3,and Oracle db 10gR2 with OHS 10.1.3 in a linux env.
Webdav was working fine earlier with stellent native authentication.
Recently we integrated Oracle Single Sign On. SSO works fine. But while SSO is turned on we are not able to access webdav.
Please advise how we can resolve this issue.
Regards,
Debasis
Mob: +919886712043

sounds like a bug... WebDAV needs a special cookie to be set so it can identify the users. It appears that whatever SSO integration you're using is not setting this cookie correctly, or maybe not at all.
You should probably contact Oracle support...

Firefox does not re-initiate TCP session when receiving RST-ACK

Hello guys,
I’m writing to report a disparity between firefox and IE/Chrome when receiving RST-ACK.
To mitigate SYN flood attack, one of the countermeasures of anti-ddos appliance is to reset the first 3-way handshake and expect a re-initiated new tcp session from that client. If the real client, browser for example, automatically re-initiate a new session, users won’t feel too much differences except time of delay. If a browser does not automatically start a new session, users have to manually refresh the page within an interval, like 60 seconds.
We got reports from customers that firefox gave notifications of connection reset, as Graph 1 is. I tested with IE11, Chrome and firefox. It’s found that Chrome and IE will automatically started a new session, while firefox does not. For firefox users, they had to manually refresh the page.
Anti-ddos appliance (A10 TPS, Arbor & HUAWEI secospace) does provide another option to avoid seeing this notification. I understand there must be consideration and good reasons for firefox to design the browser this way. May I ask whether it is possible to adjust a little on firefox to let it automatically re-fresh the page when seeing a RST-ACK please? Guess it’s quite common for firefox users to see the notification when access URLs during DDos attacks, because for A10 TPS & Arbor, the default setting is to reset the first 3-way handshake.
Feel free to let me know if I missed something and got things wrong.
Appreciate it much for your time!
Graph 1 Notification seen on screen
Graph 2 Screen shot of the captured packets
Graph 3 How it works for Arbor TMS to authentication a client by default.

ops, seems packets are not allowed to be uploaded. anyone willing to check my question, kindly reach me at [email protected]
Best regards,

ALLOWED Cookies Exception List does not retain entries from session to session.

YES, I've searched the KB for an answer...no joy. I want to manage my cookies by adding the few sites that I want to allow cookies for, with all other sites being denied, and me being prompted every time a site wants to dnld a cookie. I believe I understand all the available settings, but I can't bet FF to retain the list of allowed sites from session to session, and sometimes FF won't retain them even immediately after I save them. I never had a problem with FF3, but now I'm having this problem with FF4.

Issue unsolved. Hoping to receive deeper analysis.
Thank you cor-el, that's a good suggestion, but, something I already knew. I didn't execute Clear Recent History...Clear Recent History is NOT the cause of the problem.
Additional Information: In Options\Privacy\History my settings are: "Use custom settings for history", Permanent Private Browsing mode = ON, Accept cookies from sites = OFF. Should I expect to be able to click on the Exceptions button, and enter urls into the exceptions pop up window as ALLOW, and expect them to be there in subsequent FF sessions? I've noticed that the Exceptions pop up window does not have an "OK" button as I would expect from observed FF convention...should there be one? After entering a url, my only choice is a "Close" button or the Red "X".
Follow on question: Is it possible that a data error occurred during install, preventing an applet from loading correctly, which would prevent the retention of list entries into the permissions.sqlite file? My permissions.sqlite file is located where the KB says it should be, shows a size of 2K, and a Date Modified of today. Note: I have continued to try to enter and save urls into the Exceptions List with an ALLOW value with no success.
Or, perhaps I should migrate back to FF 3.xx?

TOC does not retain bookmarking between sessions

Hello,
One of my complete courses developed in Captivate for SumTotal LMS is not retaining bookmarking between sessions.
When you re-enter the course, some of the bookmarking is lost.
Does anyone know of a fix for this issue?
Thank you ahead of time.
Chuck

Hello Lilybiri,
Yes, Self Paced Learning is selected in TOC settings.
The individual that was testing the functionality was viewing the content linear.
He left the course after viewing about 10 slides out of 85.
When he returned to the course, the first 10 slides did not have a checkmark.
It did return him to the spot that he left off, and started placing checkmarks from their.
No issues with the knowledge checks or final quiz not working.
Only issue is that the checkmarks were no longer present for previously viewed section.
He stated that this is an issue.
I do not see it as such as long as performance is not compromised.

Comcast does not monitor motion sensors

Motion sensor sets off alarm and it registers the intrusion with Comcast and is visible on the web portal, but Comcast advises me that motion sensors are not monitored. Stacy with Comcast Home Security advises me that the only time their system will protect me from an intruder is if the intruder enters my house by the way of a door or window with a sensor installed on it. The installers advised me differently and I never would have purchased service or a system from a company that does not have the capabilities to monitor the motion sensors. I certainly wouldn’t by motion sensors that are ineffective. I asked to speak to supervisor for clarification, but after 45 minutes on the phone I gave up. I’m filing a complaint with the Washington State Attorney General’s office for fraud and want a full refund for my alarm costs.

the motion sensors are most certainly monitored by comcast. however the motion sensor is only active when in the arm away mode. when in arm stay or arm night modes the motion sensor is not active, however

Message or chat window does not appear in ARD session

i have 4 computers:
imac, pro, pro, mini
when running ARD on imac and trying to send message or chat - everything ok with all computers, but mini does not working properly.
it seems thats something wants to appear in doc but it is just a small action in it without popup.
looks like it opening somewhere in background or something does not let it open.
no additional icon in doc. just doc line is blinking somewhere in the right side of doc line.
when it happens - ARD telling me thats message were delivered successfully. but it is not true :(
where to check?
all computers are with latest OS and i am using lates ARD on master mac.

Hi friends,
I have the same problem.
Mountain Lion + Office 2011 + Safari 6.1.2 (8537.74.9)
It is not clear to me what is the relation between Safari and this problem.
I have Chrome installed as well and it is set as default browser. Is this involved?
If yes how can I solve the problem?
Please let me know.
Many thanks.
Best regards
Peval

SCCM 2012 MP does not monitor anything but the central site

Hi,
We've tried implementing the SCCM 2012 MP (5.0.7804.1000) to monitor our SCCM 2012 SP1 setup running on Server 2012 from our SCOM 2012 SP1 setup.
Everything imports fine and after ~30 minutes the servers are discovered and appears.
After a while longer the central site and the SDK-service shows up as monitored but the resto of the 5 DPs and all other server roles remains unmonitored even after 3 days.. ..?
All the agents are set to enable proxy.
The SCOM servers runs with one service accounts and the agents with different action accounts.
The SCOM action accounts on the SCCM-servers all run with the same domain service account with administrator-privileges on the SCCM-servers but no permissions within SCCM.
Does the action account need any specific permissions in the SQL DB or in SCCM? To be part of any specific role?
Any advise is greatly appreciated :)

We have resolved this issue, I'm not exactly sure how we resolved it but what I think fixed the problem for us was creating overrides for the object discovery rules contained in the MP.
See my blog on our implementation: http://damonjohns.com/2014/07/01/monitoring-configuration-manager-2012-r2-with-the-scom-2012-r2-management-pack/
My blog contains a screen shot and all the values I changed.
You may ask why we increased the rate at which the hierarchy discovery rule executed with an override? Well
in part it was due to:
A. Us having the issue and
B. I was sick of trying to trouble shoot the event log error that by default only registered every 6 hours.
After I created the overrides, the MP started discovering data. It wasn't immediate though, it took another 6 hours or so for it to start working correctly. I think what might be happening is that one of the discovery rules is not completing correctly which
causes the others to fail - hence no data. I have no idea why shortening the time on the discovery objects made any difference. But...it worked for me.
Cheers
Damon

Webi document prompts order from Java SDK does not refresh correctly?

Hi
I'm developping a standalone command-line Java program which will schedule a report with custom prompt values.
I am having a problem with Webi prompts ordering acquired from the SDK.
We are running BO XI R2 SP4 under Windows on Tomcat servers.
Here is the problem:
I have a Webi report called "Articles Racines" in a "Tests SDK" directory.
This report uses two prompts named "Type Article :" and "Code Marque :" (in this order).
Java SDK (code below) returns the right prompts in the right order.
Now, in Infoview, I modify the report in order to change the order of the prompts (in the "Properties" tab) making "Code Marque :" the first and "Type Article :" the second one and save the changes.
When I run the report, prompt order has changed but the prompts retrieved from the Java SDK are still in the old order.
I noticed that if I update the name of both prompts, the prompts retrieved from the SDK now are in the right order (with the updated names).
Am I doing something wrong? Is it a known issue?
Thanks in advance.
Guillaume
PS : I am aware that "select *" are very bad but I am still in research stage of developpment.
TestsScheduler.java:
import java.util.Iterator;
import java.util.List;
import java.util.StringTokenizer;
import com.businessobjects.sdk.plugin.desktop.webi.IWebi;
import com.businessobjects.sdk.plugin.desktop.webi.IWebiPrompt;
import com.crystaldecisions.sdk.exception.SDKException;
import com.crystaldecisions.sdk.framework.CrystalEnterprise;
import com.crystaldecisions.sdk.framework.IEnterpriseSession;
import com.crystaldecisions.sdk.framework.ISessionMgr;
import com.crystaldecisions.sdk.occa.infostore.IInfoObject;
import com.crystaldecisions.sdk.occa.infostore.IInfoObjects;
import com.crystaldecisions.sdk.occa.infostore.IInfoStore;
public class TestsScheduler {
     public static void main(String[] args) {
          String cms = "XXX";
          String username = "XXX";
          String password = "XXX";
          String authentification = "secEnterprise";
          String reportPath = "/Tests SDK/Liste des racines";
          try {
               ISessionMgr sessionManager = CrystalEnterprise.getSessionMgr();
               IInfoObjects objects;
               // Connexion
               System.out.println("Connexion à "+ username +"@"+ cms +" ("+ authentification +") en cours...");
               IEnterpriseSession session = sessionManager.logon(username, password, cms, authentification);
               System.out.println("Connecté à "+ session.getCMSName());
               // Récupération de l'infoStore
               IInfoStore infoStore = (IInfoStore) session.getService("InfoStore");
               // Récupération des informations d'un report
               StringTokenizer st = new StringTokenizer(reportPath, "/");
               int reportID = 0; // Le dossier "Dossiers Publics" est la racine (/)
               IInfoObjects infoObjects;
               IInfoObject infoObject;
               do {
                    String token = st.nextToken();
                    System.out.println("Recherche de l'objet '"+ token +"' en cours...");
                    infoObjects = infoStore.query("select * from CI_INFOOBJECTS where SI_NAME = '"+ token +"' and SI_PARENTID = '"+ reportID +"'");
                    if(infoObjects.size() != 1) {
                         throw new Error("Le dossier SI_ID='"+ reportID +"' possède "+ infoObjects.size() + " fils nommés '"+ token +"'.");
                    infoObject = (IInfoObject) infoObjects.get(0);
                    reportID = infoObject.getID();
                    System.out.println("Trouvé l'objet SI_ID='"+ reportID +"' nommé '"+ infoObject.getTitle() +"'.");
               } while(st.hasMoreTokens());
               if(infoObject instanceof IWebi) {
                    IWebi webi = (IWebi) infoObject;
                    List prompts = webi.getPrompts();
                    System.out.println("Le rapport Webi possède "+ prompts.size() +" invite(s).");
                    for(Iterator itPrompts = prompts.iterator(); itPrompts.hasNext();) {
                         IWebiPrompt prompt = (IWebiPrompt) itPrompts.next();
                         List values = prompt.getValues();
                         System.out.println("     L'invite '"+ prompt.getName() +"' possède "+ values.size() +"' valeur(s).");
                         for(Iterator itValues = values.iterator(); itValues.hasNext();) {
                              Object value = itValues.next();
                              System.out.println("          Valeur='"+ value +"'.");
               // Déconnexion
               System.out.println("Déconnexion en cours...");
               session.logoff();
               System.out.println("Déconnecté");
          } catch(SDKException e) {
               throw new Error("Erreur lors de la connexion : "+ e.getMessage());
Edited by: Guillaume L on Dec 10, 2008 3:22 PM

Here's the reason why:
Web Intelligence document prompting is handled properly if you open the doc using the ReportEngine Java (REBean) SDK.
When you set prompts and schedule, you'd first open the doc using REBean, set the prompts, then copy over the prompt values you've set to the IWebi you're scheduling using the PromptsUtil.populateWebiPrompts(...,...) helper method.
So the InfoObject IWebi doesn't know about the actual ordering of the prompts in the document itself - it's just receiving the prompts in order as it's fed from PromptsUtil.
It's not recommended to assume that the IWebi.getPrompts() will return a non-empty collection. The Web Intellligence document must be first opened in ReportEngine and the prompting values set using PromptsUtil to fill the collection.
Sincerely,
Ted Ueda

SSO SDK does not monitor expired SSO sessions

Similar Messages

Maybe you are looking for