Text_io permissions on iAS
Hi,
I've got a form containing text_io. Because I'm using webforms text_io is executed on the middle-tier.
When I use text_io it does not work because of permissions to write on the iAS.
Where can I set write permissions for text_io on the application-server?
Regards,
Meine Dijkstra
If you want, you can get the text_io to run on the client using WEBUTIL?
Would that help?
Grant Ronald
Forms Product Management
Similar Messages
-
File permissions for a deployed ias 6.5 app
i am running ias 6.5 on HP-UX 11.1
I have ear files deployed on 3 different servers and all of the in house developed apps are deployed with 775 permissions.
/iplanet/ias6/ias/APPS/$APP_NAME
Such that $APP_NAME is 775 and so are all files recursively under it.
This week our developer deployed some test apps and they are deploying with 755 permissions. I then noticed that the default test apps like 'fortune' are also 755.
I want the test apps deployed as 775. Does anyone know how to control this? Outside of recursively chmod after deployment.
What causes some to deploy at 755 and some at 775?Well, it looks like you haven't actually configured a datasource with that name. You've only configured the use of the datasource were it to exist. I don't know iPlanet, so you'll have to consult the docs to find out how to create the DS.
-
File permissions ias902, text_io, unix again
Is there any good reason why the permissions for a file written by text_io gets the permission "rw r" and not "rw r r" when the umask is set to 022 for the oracle user.
It seem that the umask is not used at all when using text_io. How can we get the correct protections without having to include a chmod in 100+ applications using the text_io?
Regards,
Jens Degnrepost, i want know this...
-
Install IAS 9.0.3 Error on RedHat linux 7.3 & 8.0
Hi all,
I get an error when the installer comes to "Configuring Tools" - automatically starts the following tools, the OC4J Instance Configuration Assistant fails.
The error is:
ERROR: Caught exception during deploy
java.io.IOException: Permission denied
at java.ioUnixFileSystem.createFileExclusively (Native Method)
at java.io.File.checkAndCreate
at java.io.File.createTempFile
at java.io.File.createTempFile
at oracle.ias.sysmgmt.deployment.j2ee.console.j2eeDeploymentImpl.fetchEar
at oracle.ias.sysmgmt.deployment.j2ee.console.j2eeDeploymentImpl.getEarDeployer
All the other components (HTTP server, java security, oc4j & bc4j configuration assistant, Oracle 9iAS instance Configuration Assistant) have been started without any problems.
Any help is appreciated.
Regards,
RaghuLooks like some file that's present in tmp or
/var/tmp during deployment cannot be overwritten
because of permissions issue. Please make
sure you don't have previous installation temp files
in /var/tmp or /tmp before doing new installation or
use the same use that installed the first instance.
You can try cleaning up tmp and /var/tmp and retry.
Also try setting umask 00 before installations. -
I have a pix 501, with vpn users authenticating off of MS 2000 IAS. Works great although I want to filter a few users to only be able access a couple PC's when they come in through the pix.
I created a new group on NT called Vendors, added the users to that group. I then created a new remote access policy that when the IP of the pix is used, and the vendor group condition is met, to only permit traffic to a certain subnet.
The users in that group can still login, but they can get to all the subnets. Not sure what I am missing here, any help would be appretiated.I read through it, still a little curious on how this can work. The radius part is working, all of my users are authentication useing their MS2000 logins. What isn't working is group restrictions, again these are NT restrictions.
Currently as long as they are allowed to have remote access on the server they can get in. Regardless of what Remote access policy I put on the account it still seems to let them through.
I did stumble on something about how the Radius server needs to download an access list off the pix, and it can do this by adding an atribute on the Remote access settings within IAS. I haven't tried that method yet.
The only other thing I can think of is to have two groups, one local one through radius. All the users except the ones that need restrictions use radius.
Only catch to this, can the pix 501 handle 2 groups, and if it does, in what order does it authenticate, meaning does it look in local then go to radius or the opposite. -
IAS 10.1.2.0.2 on Enterprise Linux
hi all,
we are venturing into the world of oracle on linux (without any real knowlege on linux), so ive decided on installing Enterprise Linux 5 rather than ubuntu or similar.
ive installed standard Enterprise Linux 5 setup on a server and included the base addon of 'Oracle Validation' which created the user, group and permissions etc, so the oracle installer kinda works out of the box.
ive had no issue installing DB 10.1.0.2 this way, but when i try with IAS 10.1.2.0.2 infrastructure i seem to get an "OPMN process manager failed to start" warning at 66% and to check /home/oracle/infra/opmn/logs for the cause. below is the HTTP_server~1 file.
09/07/08 13:22:23 Start process
/home/oracle/infra/Apache/Apache/bin/apachectl start: execing httpd
/home/oracle/infra/Apache/Apache/bin/httpd: error while loading shared libraries: libdb.so.2: cannot open shared object file: No such file or directory
can anybody offer any advice?
thanks
Edited by: mickbarlow on Jul 8, 2009 5:59 AMSeen similar problems before and the solution was to ge tall the required RPMs installed. I remember I had a problem with not having a 32 bit version of a RPM installed (sometimes both the 64-bit and the 32-bit) is required.
--Andy -
How can i put two domains with IAS
Hi!!
I have IAS in Win NT and i publish www.mycompany.com published with it, but now i want to publish other domain www.myproduct.com in the same machine and i dont know how because in the http.conf servername parameter i only can put one server, if i install two networks cards and with two IP's can i do this? or is impossible?
Could anyone help me?
Regards.Hi!!!
Thnaks for your help!!
But if with these two domains i need to publish pages generated with the pl/sql toolkit how this works?
If i publis /pls/myapp and /pls/myapp2 where i see this in this, in two domains? can i give permissions or something to only see myapp in domain1 and app2 in domain2?
Thanks in advance. -
Ias 60 sp2 - install - error message during start up of web server
I am installing ias60 sp2 on solaris 2.6.
I have following issues:
(1)
While installing the ias 60 at the end of the installation while starting
the web server I got the following
error message.
libthread panic: systhread_create():alloc_thread returns 0 (no mem) (PID:
1566
4 LWP 1)
stacktrace:
ef3c31e8
1329c
1236c
0
(2) I want to make the ias60 to communicate with the external web server.
But the 'setup' utility does not allow me to do the selective install. It
foreces the web server to be on the same machine as the appserver. I have
installed the iws41 web server and proceed with the installation. In the
installation doc it looks like by installing 'web connector' we can make the
ias communicate with the external web server. Since the setup utility does
not permit selective install how do i install the 'web connector' on the
external web server. I am using the ias60 test drive for the installation.
Is it a limitation on the 'test drive'.
I apprciate your suggestions on the above.
Thanks
Palani
Thanks
PalaniI'm not sure what the problem is with alloc_thread.
But, yes, the installer limitation is because you are using the TestDrive bits.
TestDrive is designed for ease of installation, and many of the installer
options are not available in TestDrive.
David
(2) I want to make the ias60 to communicate with the external web server.
But the 'setup' utility does not allow me to do the selective install. It
foreces the web server to be on the same machine as the appserver. I have
installed the iws41 web server and proceed with the installation. In the
installation doc it looks like by installing 'web connector' we can make the
ias communicate with the external web server. Since the setup utility does
not permit selective install how do i install the 'web connector' on the
external web server. I am using the ias60 test drive for the installation.
Is it a limitation on the 'test drive'. -
Fine grained security permissions
I think fine grained security permissions are needed. If I use all permissions on a signed jar, that would grant too many permissions to the application. If I do not use all permissions, I can not use System.setSecurityManager(myOwnSecurityManager).
When all permissions are used, after my own security manager is set, the old security policy appears to be valid still.
Any comments? How can I easily apply my own policy to a WebStart based application?I did additional tests. It looks that when the security manager is activated, even the simplest JSP application is no longer working. It is simple to simulate (jdev 10.1.2 + ias 9.0.4.0.0):
1. Create a new Web project containing a jsp page
2. Deploy the application to the AS
3. Test the JSP page. It works.
4. Activate the security manager (add -Djava.security.manager into the Java options of the j2ee container)
5. Restart the j2ee container and test. Crash
Any idea?
thanks -
Using Cisco WCS with Microsoft IAS
Hi.
I have two 5508 and WCS 7.0.172. I want to user Active Directory users credintals to login on ther WCS. Have a configurated NPS role on server with windows 2008 r2.
I have read this http://zmq503o1.wordpress.com/2008/01/06/using-cisco-wcs-with-microsoft-ias/ and done the same.
I dont't agree with "on the "Encryption" tab and clear all the checkboxes except "No encryption" - wants an encryption connection but this didn't work till in user's properites in AD permit "Reversible encryption". This is not what that I want. Would I need to generate ssl-cert for the wcs as wroted this?http://www.cisco.com/en/US/docs/wireless/wcs/7.0MR1/configuration/guide/hard.html#wp1042471
or doing smth else? thxCamera is only supported for use with CUVA. Any other application attempting to utilize the camera is not tested and is not supported.
-
Hi
I am faced with a problem related to IAS 6.0 SP2 and iPlanet Portal
Server 3.0 SP2. I have deployed the beans on IAS and can access it from
a rich client.
I've servlets running in IPS and from these, I want to access the beans
on IAS. I'm getting an unsatisfied link error. The exception thrown is :
[03/Jul/2001:14:37:02] info (15110): PortalInterface: init
[03/Jul/2001:14:37:09] failure (15110): Internal error: exception thrown
from the servlet service function (uri=/PortalInterface):
java.lang.UnsatisfiedLinkError: specialLoadClass, Stack:
java.lang.UnsatisfiedLinkError: specialLoadClass
at
com.sun.corba.ee.internal.util.JDKClassLoader.loadClass(JDKClassLoader.java:58)
at
com.sun.corba.ee.internal.util.JDKBridge.loadClassM(JDKBridge.java:180)
at
com.sun.corba.ee.internal.util.JDKBridge.loadClass(JDKBridge.java:83)
at javax.rmi.CORBA.Util.loadClass(Util.java:215)
at javax.rmi.CORBA.Util.createDelegateIfSpecified(Util.java:306)
at <Unloaded Method>
at
javax.rmi.PortableRemoteObject.createDelegateIfSpecified(PortableRemoteObject.java:182)
at <Unloaded Method>
at
com.iplanet.portalserver.api.SabreFlightDetails.getPriceAvailabilityInfo(Compiled
Code)
at
com.iplanet.portalserver.api.SabreFlightDetails.getSabreFlights(SabreFlightDetails.java:74)
at com.iplanet.portalserver.api.PortalInterface.doPost(Compiled
Code)
at javax.servlet.http.HttpServlet.service(Compiled Code)
at javax.servlet.http.HttpServlet.service(Compiled Code)
at
com.netscape.server.http.servlet.NSServletRunner.Service(Compiled Code)
I've set classpaths for the rich client in kjs and also in jvm12.conf of
IPS 3.0. But going by the rich client examples given with IAS, like the
converter client example, we have to set
a LD_LIBRARY_PATH as in runclient.sh. There is no place in IPS where we
can set the LD_LIBRARY_PATH. Is that the reason ?
I would appreciate your thoughts on this issue.
ThanksHi Aslam
You will use class maps to divert the traffic to the module. Here are some basic steps.
!Identify the traffic that needs to be diverted to the IPS SSP.
access-list IPS permit ip any any
!Classify the traffic using a class map.
class-map IPS
match access-list IPS
!Specify the action to be taken on the traffic using a policy map. !Since there is already a policy map attached globally in the FW, !the class-map defined above will be added here !only.
policy-map global_policy
class IPS
ips promiscuous fail-close (or fail-open)
Once that is done, the rest of the configuration needs to be done on the IPS using CLI or preferrably the IDM.
HTH. Please rate if useful.
Zubair -
Hi All,
I am trying to start the iAS through the Start Server menu item in the
iAB. I am getting the following error.
java.lang.NoClassDefFoundError: Files/New
Exception in thread "main"
Thanks in advance.
naveenHi,
The user with which you are trying to run opmnctl does not have write permissions to the ons.log file (May be also to its parent folders). Hence try changing the permissions using chmod 777 <name/name> and then try using opmnctl.
Also check the below thread for more info:
Re: Can't start opmnctl
Regards -
Writing Files Access Denied JSP+IAS+W2K
Hi.
I'm trying to write a file from a JSP to a mapped share unit between a W2K Server (i: as mapped unit) with IAS and a W2K Server with Oracle (c:\loadDir as deposit unit which is mapped by the IAS server) . I already bring all security grants but when the JSP tries to write to the I: unit it answer "access denied".
both machines are in the same workgroup but not inside a domain.
tks for the help.I finally find the solutions in a TAR published in metalink. The problem is that the service of IAS runs as a user SYSTEM, this user don't have permissions on the other machine to write.
The solution is to make the service to start as another user that as the enough permissions to write.
hope this help some one else. -
File Permissions in 9ias Forms Services (unix)
Hi,
I am generating few files using text_io in a form running on a 9ias server on a solaris box.The file gets generated but is owned by ORACLE user and nobody else has any permission for this file (other than the ORACLE user). What should I do to make the file get generated with all permissions for all.
TIA
Elango.in the end of your file generation codes, add,
chmod +x yourfilename; -
IAS authentication with 200 series switches based on MAC addresses
Hi,
I try to implement a solution based on a 2003-Server with IAS and a switch (from the 200 series) just to authenticate machines with their MAC addresses.
I think the config on the switch is ok but I'm facing questions about parameters to put in IAS...
Can someone help me or give me a link to a good document that explains the 'how-to'?
Many thanksI have just done some more testing.
I added the authentication mac-move permit command to the switch and it now almost works as expected.
The scenarios now are:
Machine without dot1x supplicant plugged into phone, when unplugged the switch immediately deletes the mac address from the port.
Machine with dot1x supplied plugged into phone, exactly the same.
Machine without dot1x plugged directly into port exactly the same
Machine with dot1x plugged directly into port exactly the same.
The problem is if someone has a machine running a dot1x supplicant and hosting a VM.
In that case as long as you move to a different port on the same switch it works fine (as the workstation reconnects the mac-move process works).
If you move this machine from one switch to another with the IP phone installed. the de-auth message removes the VM or the host from the original switch mac table and leaves one of the old addresses behind.
I suppose a solution would be to ban all VMs but that won't go down well.
I don't want to change the authentication method as we will have machines without a supplicant that need to connect to resources (i.e. using mab)
Thanks for your help (and a faster reply than my support company who still haven't rung me back).
Giles
Maybe you are looking for
-
I have been using Firefox and Ebay for at least 12 years with no problems whatsoever. But in the last 10 days I have been having trouble with the Advanced Search link disappearing from the page on Ebay. If I do a search from the Ebay home page it wil
-
S_PL0_86000028 amounts are not tying with S_ALR_8701228
HI Gurus I have generated S_PL0_86000028- Financial Statement Actual/Actual Comparison and S_ALR_8701228-Financial Statement. Surprisingly amounts for GL accounts are not matching between two statements. I have selected same selection parameters for
-
Hi All Can you please provide me a solution for the below scenario: At the time of master data update from BW to BPC client wants to see the updated master data reports in excel file. Exmp: Existing number of Master data (IDs) before BW update : 1000
-
How disable PDFEdit combines text from multiple Tj operators
HI In http://help.adobe.com/livedocs/pdfl_sdk/9/PDFL_SDK9_HTMLHelp/API_References/Acrobat_API_Re ference/PDFEdit_Layer/PDEText.html mention that "PDFEdit combines text from multiple Tj operators into a single text run, when possible " how I can disab
-
I am trying to delete duplicate songs in my library, when I go to edit to delete it, it asks me if I want to delete the playlist!