URGENT : Unprotect a virtual directory from basic authentication
All,
Server : Weblogic 8.1
OS : Windoes 2000 Adv Server SP4
I am very successfull in configuring a web application with basic authentication
and all works fine for me. Now i have a virtual directory for downloading certain
files. These i have to unprotect meaning no authentication mode should be enabled
for this virtual directory.
Unfortunately i am using weblogic as both web and appserver. I know how to do
the same with webservers like IIS or Apache.
IS it possible to do this config with weblogic 8.1 ? To configure a web application
with basic auth and ignore or unprotect (enable anonymous access) for a virtual
directory.
Thanks in Advance
Viswanathan
Hi,
I agree with Tim that we can ask for better help in the following IIS forum.
IIS.NET forum
http://forums.iis.net/
Best regards,
Frank Shen
Similar Messages
-
Get Username/Passwd from Basic Authentication in Handler
Is it possible to extract the username/password in a JAX-RPC Handler chain in a
Web Service after a Basic Authentication ?Yes, it gives me a string like [[email protected] ?
-
Migration of legacy Customer from Basic Authentication to OAuth 2.0
Hi Team,
I have tested OAuth 2.0 and able to fetch and insert data. The user I have created is 1 month back, so both Basic and OAuth 2.0 is working.
What about the legacy customers, who are using Basic as their authentication mechanism. Can they use OAuth 2.0?
And if not, how much time it will take to migrate to the OAuth 2.0?
Is there any cost involved?
Awaiting your response.
Thanks & Regards,
BrajmohanWhat do you mean by "legacy"? OAuth can be used with any of our RESTful APIs, so unless you are using the SOAP API (which only supports Basic), you can move to OAuth.
-
Calling web service with basic authentication from EP "unauthorized"
Hello,
I need to call a .NET web service with basic authentication on the IIS from my portal application (no http proxy between portal and IIS). But always I get the following exception:
<b>com.sap.engine. services.webservices.jaxm.soap.accessor. NestedSOAPException:
Problem in server response: [Unauthorized].</b>
I'm using the following code for calling the .NET web service:
<b>...</b><i>Licence_GetList lParameter = new Licence_GetList();
lParameter.setStatus(CEnvironment.TransformStatus_WebService(search));
ILicenceManager lLicMan = (ILicenceManager) PortalRuntime.getRuntimeResources().getService("LicenceManager");
ILicenceManager lLicManSecure = lLicMan.getSecurisedServiceConnection(request.getUser());
Licence_GetListResponse lGetListResponse = lLicManSecure.Licence_GetList(lParameter);</i><b>...</b>
I've also configured a http system in the portal system landscape using the following parameters:
<i>Authentication Method : Basic Authentication
Authentication Type : Server
User Mapping Type : admin,user</i>
The user mapping is also personalized for this system!
What's wrong? Please help! This is really urgent!
Kind Regards
Joerg LoechnerHello Renjith,
here is a small cutout of my "portapp.xml";
<services>
<service alias="LicenceManager" name="LicenceManager">
<service-config>
<property name="className" value="de.camelotidpro.
pct.xi.scm.webservice.LicenceManager"/>
<property name="startup" value="false"/>
<property name="WebEnable" value="false"/>
<property name="WebProxy" value="true"/>
<property name="SecurityZone" value="de.camelotidpro.
pct.xi.scm.webservice.LicenceManager/
DefaultSecurity"/>
</service-config>
<service-profile>
<property name="SystemAlias" value="LicMan_NET"/
</service-profile>
</service>
</services>
I'm using a http system created in the system landscape (alias LicMan_NET). But it seems that this system is not used by the web service call (No error, even if I delete this system!). The code used to call this web service can be found at the top of this threat...
Regards
Joerg Loechner -
Oracle Virtual Directory vs. Oracle External Authentication Plug-in
I am working in Windows 2003 Server platform and I have Oracle Portal 10g R2 with Oracle Single Sign On 10g R2 setup. I also have Microsoft Active Directory setup. I want to use Microsoft Active Directory users from Oracle Portal and as per my understanding I could use Oracle External Authentication Plug-in or Oracle Virtual Directory for this purpose. I would like to use Oracle Virtual Directory if possible. Could someone please tell me if I could use Oracle Virtual Directory or not?
Thanks.Yeah, I could use Oracle External Authentication Plug-in, but I am having issues with running the oidspadi.sh script on my Windows 2003 server environment. I am running this script using Cygwin's latest software, but for some reason I get the following error message.
: command not found8:
: command not found8:
: command not found3:
: command not found7:
: command not found1:
: command not found8:
: command not found9:
: command not found0: clear
OID Active Directory Plug-in Configuration
Please make sure Database and OID are up and running.
: command not found7:
: command not found0:
oidspadi.sh: line 103: syntax error near unexpected token 'fi'
'idspadi.sh: line 103:' fi
Therefore, I was trying to find an alternative solution, which will be using Virtual Directory. Right now, I have installed Oracle Virtual Directory on my testing system and I have both Active Directory server and OID server part of LDAP Browser. My goal is to using Oracle Portal to log-in and first look for the user in OID if not found then look in Active Directory. Can this be accomplished using Oracle Virtual Directory?
Please let me know. -
Upload client to server virtual directory - Urgent
Hai experts,
Now i am doing a intranet project.
In that project, user has to upload his
own datas. That data has to be stored in
my virtual directory(c:\ramesh). From the
virtual directory i will take the user
files thru my procuedures.
How to copy the client file to my virtual
directory thru Portal.
It is very urgent me, Please give me
any solution
Regards
Ramesh.GCGI PERL Example to Upload Files
Step 1:
add two directories on httpd.conf file:
/example_cgi/html/ NR /html/
/example_cgi/cgi-bin/ CR /cgi-bin/
Restart Apache.
Step 2:
Copy the ex.html to the /example_cgi/html/ directory.
Copy the ex.pl to the /example_cgi/cgi-bin/ directory.
(both files are listed in the bottom of this NOTE)
Step 3:
Edit the ex.pl file to change the destionation directory on the Web Server,
the user that launched the file must have written permissions in this
directory. Set execute permissions on this file via chmod. Change also the
first line of the file to the directory where you installed the PERL
interpreter. Also change the donepage, to some result page that you want.
Step 4:
Call the page, by using http://host:port/html/ex.html, browse and find 1 or 2 files in the local
system, and press the Upload button, the files will be written in the Web
Server machine in the directory specified in the ex.pl file.
Files:
ex.html:
<html>
<body>
<form method="POST" action="/cgi-bin/ex.pl" ENCTYPE="multipart/form-data">
File 1:
<input type="file" name="FILE1">
<br>
File 2:
<input type="file" name="FILE2">
<br>
<input type="submit" value="Upload!">
</form>
</body>
</html>
ex.pl:
#!/usr/local/bin/perl
## Path to where you want your files written to.
## Attention: do not use a trailing slash
$basedir = "/tmp";
## The page you wish it to forward to when done:
## I.E. http://www.mydomainname.com/thankyou.html
$donepage = "http://www.oracle.com/";
# Do you wish to allow all file types? yes/no (no capital letters)
$allowall = "yes";
# If the above = "no"; then which is the only extention to allow?
# Remember to have the LAST 4 characters i.e. .ext
#$theext = ".gif";
use CGI;
$onnum = 1;
while ($onnum != 11) {
my $req = new CGI;
my $file = $req->param("FILE$onnum");
if ($file ne "") {
my $fileName = $file;
$fileName =~ s!^.*(\\|\/)!!;
$newmain = $fileName;
if ($allowall ne "yes") {
if (lc(substr($newmain,length($newmain) - 4,4)) ne $theext){
$filenotgood = "yes";
if ($filenotgood ne "yes") {
open (OUTFILE, ">$basedir/$fileName");
print "$basedir/$fileName<br>";
while (my $bytesread = read($file, my $buffer, 1024)) {
print OUTFILE $buffer;
close (OUTFILE);
$onnum++;
print "Content-type: text/html\n";
print "Location:$donepage\n\n";
Good Luck. -
How to call a web service from BPEL that requires HTTP basic authentication
Hi All,
I need to calling some Web Services from BPEL (SOA 10.1.3.1 production running on XP machine). The services require HTTP basic authentication.
I have tried adding httpUsername and httpPassword properties to the ParnterLink, and I see in BPEL Console that they are deployed by checking the descriptor page. But I still get a SOAP fault, HTTP 401: Unathenticated.
I have also tried using basicHeaders (from memory) = credentials, httpBasicUsername, and httpBasicPassword. Same result.
I have done a packet trace using Ethereal, and the headers do not seem to contain the userid and password at all.
Can anyone help?
Thanks,
Mark NelsonThanks Bas,
I have resolved the issue. The provider of the Web Service had not configured if for Basic Authentication. For some reason it worked when they tested, or maybe the did not test. The only thing I had to change was to use:
<property name="basicHeaders">credentials</property>
<property name="basicUsername">WMDATA</property>
<property name="basicPassword">WMDATA</property>
Instead of:
<property name="httpUsername">WMDATA</property>
<property name="httpPassword">WMDATA</property>
I don’t know why this is, maybe because it is an Axis Web Service.
Sorry for wasting your time.
Regards Pete -
Virtual Directory Change from Oracle HTTP Server to Embedded PL/SQL Gateway
We finally upgraded from htmldb 1.6 to ApEx 3.1.2 late last year. This was in conjunction with setting up a new server and installing Oracle 11g DB, while our production DB is still 10g. During this install, I opted for the Embedded PL/SQL Gateway, whereas our htmldb is running with the Oracle HTTP Server.
During the conversion of one of our applications I learned that Virtual Directory references to #IMAGE_PREFIX# are no longer valid for custom CSS so I had to change an entry in the page templates that I'm using to use #WORKSPACE_IMAGES#. Now I am importing another application from our htmldb 1.6 environment to our ApEx 3.1.2 environment, and I have a new problem that I think is related.
In this application we have been uploading report files for outside users to be able to download at their convenience. I think the upload is working OK, but when I try to download the report file I get the following:
Not found
The requested URL /apex/IMR.ofile was not found on this server.
The download is accomplished with a link on an SQL Report region. The Column Link info is:
Link Text = <img src="#IMAGE_PREFIX#edit_big.gif" border="0" alt="Icon 1">
Target = URL
URL = #OWNER#.ofile?p_file=#VIEW_REPORT#&v_auth=&APP_USER.
When I change the Link Text to <img src="#WORKSPACE_IMAGES#edit_big.gif" border="0" alt="Icon 1"> I lose the Edit Icon image. However, what I'm really concerned about is the URL not found error
Now, maybe I'm barking up the wrong tree, so if the problem isn't related to virtual directories, which tree should I be barking up?
Any suggestion?
Thanks,
GregoryIs the IMR.ofile a custom package for downloading files? If so, you might need to add it to the wwv_flow_epg_include_mod_local function.
I am not certain how this function also plays into the embedded pl/sql gateway, but do know it would affect this running through Oracle HTTP server when configured with the before proc.
With the embedded gateway it may very well be that you need to add this package into the ACL for outside availability. -
Disable weblogic basic authentication from application side
I am using a restful service for my application and i want to disable basic authentication of weblogic from application not from config.xml
please helpYou can comment out the security constraint and login config in the web.xml of your application.
<!--
<security-constraint>
<display-name>Constraint-0</display-name>
<web-resource-collection>
<web-resource-name>Constraint-0</web-resource-name>
<url-pattern>/*</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>admin</role-name>
</auth-constraint>
<user-data-constraint>
<transport-guarantee>NONE</transport-guarantee>
</user-data-constraint>
</security-constraint>
<login-config>
<auth-method>BASIC</auth-method>
</login-config> -->
-Faisal
http://www.weblogic-wonders.com -
Migration from 2003 - 2010, OAB errors on client, and OAB virtual directory does not contain any files.
Hi,
Please re-create the Outlook profile to have a try. If the issue persists, we can do the further checks in Exchange server.
Please make sure you have changed the OAB generation server to Exchange 2010 and enable Web distribution on the Exchange 2010 Client Access server:
Move-OfflineAddressBook "Default Offline Address List" -Server <MBX2010>
If all configurations are correct, please check whether there is any folder in the following path in Exchange sever 2010:
a. OAB generation in Mailbox:
\\Program Files\Microsoft\Exchange Server\V14\ExchangeOAB
b. OAB distribution in Client Access:
\\Program Files\Microsoft\Exchange Server\V14\ClientAccess\OAB
Thanks,
Winnie Liang
TechNet Community Support -
Problem while creating an OU from LDAP client, in Oracle Virtual Directory
Hi,
1. I have created a Custom Adapter with root (i.e. dc=mycompany,dc=co,dc=in)
2. Trying to create an "OU" under these above root (i.e. ou=test,dc=mycompany,dc=co,dc=in) using the LDAP client.
I have given following inputs for the second step:
Dn: ou=test,dc=mycompany,dc=co,dc=in
ou=test
objectClass: top
objectClass: organizationalunit
When I try to perform second step with above inputs its gives following error
"LDAP Error 32 : No Such Object"
Same inputs is valid for SunONE directory server.
Is the above approach is valid for Oracle Virtual Directory?
Does any one faced same problem before?
Regards,
HardewYou're going to have to install the Oracle client on the Win2000 box before doing anything else. Once you've done that, simply add a TNS name that points to the database on the Solaris box (the Net8 Configuration Assistant) can walk you through this. Finally, you'll go to the ODBC Data Source Administrator and create a new DSN.
Note that if you install the latest ODBC driver, the 'service name' text box that you have to fill in when you actually create the DSN has been replaced with a combo box, which should make the process a little easier.
Justin -
Problem register Oracle Virtual Directory to WebLogic - urgent ... pls help
Hi,
I'm a new to Oracle product and would like to install and run Oracle Virtual Directory for the following purpose:
Using LDAP client that connects to OVD and to issue ldapsearch command line based on the attrbiutes and filters of each one of the two Directories behind the OVD..
|-- Tivoli LDAP directory
LDAP client -> OVD ---|
|-- MS AD
I have downloaded the identity management package 11g and install only the OVD on Windows 2003 standard machine.
I then realized that I have to install the WebLogic package to have WEB UI to the OVD admin.
So I downloaded the WebLogic 10.3.1.0 package and install it.
I followed the installation instructions of
'Installing and Configuring Only Oracle Virtual Directory Without a WebLogic Administration Domain' at http://download.oracle.com/docs/cd/E12839_01/install.1111/e12002/ovd.htm#CIHFFAFH
and complete the installation.
Notice that the OVD and the WeblOgic SW are installed on the same Windows machine.
After that I had to register Oracle Virtual Directory with the WebLogic Administration Server.
Running the command-line I got the following error:
Deploying NonJ2EEManagement Application...Done
Command failed: Exception while registering the instance
Details are logged in C:\....\provision.log
opmnctl registerintance: failed
The provision.log file has the following exception call stack:
Aug 18, 2009 4:08:05 PM oracle.as.config.provisioner.InstallerCmdLine logInitialCommand
INFO: Start of command: [registerinstance, -adminHost, 127.0.0.1, -adminPort, 7001, -adminUsername, weblogic, -oracleHome, C:\oracle\product\11.1.1\OracleIDM_1, -oracleInstance, C:\as_admin\asinst_1]
Aug 18, 2009 4:08:14 PM oracle.as.config.provisioner.InstallerCmdLine handleRunFailure
SEVERE: Command failed:
oracle.as.config.ProvisionException: Exception while registering the instance
at oracle.as.config.impl.OracleASInstanceImpl.register(OracleASInstanceImpl.java:239)
at oracle.as.config.provisioner.commands.RegisterInstanceCommand.execute(RegisterInstanceCommand.java:11)
at oracle.as.config.provisioner.InstallerCmdLine.run(InstallerCmdLine.java:86)
at oracle.as.config.provisioner.InstallerCmdLine.main(InstallerCmdLine.java:44)
Caused by: oracle.as.config.ProvisionException: Unable to validate NonJ2EEManagement Application deployment on admin server.
at oracle.as.config.impl.RuntimeServiceConnection.validateNonj2eeApplication(RuntimeServiceConnection.java:595)
at oracle.as.config.impl.OracleASInstanceImpl.register(OracleASInstanceImpl.java:219)
... 3 more
Caused by: oracle.as.config.ProvisionException: The AdminServer is not enabled for NonJ2ee applications.
at oracle.as.config.impl.RuntimeServiceConnection.isValidJrfInstall(RuntimeServiceConnection.java:547)
at oracle.as.config.impl.RuntimeServiceConnection.deployNonj2eeApplication(RuntimeServiceConnection.java:201)
at oracle.as.config.impl.RuntimeServiceConnection.validateNonj2eeApplication(RuntimeServiceConnection.java:587)
... 4 more
Any thoughts ?Hi,
I am also facing the same problem. I have oracle internet directory 11.1.1 installed without domain. I then installed weblogic 32bit exe on same windows server.
while registering getting the same error. I think it is because of bit compatibility. OID is 64bit and weblogic is 32bit. Not sure.
thanks -
Virtual directory path from weblogic.xml file in servlet
HI All,
I want to get the virtual directory path in servlet, which is specified in the weblogic.xml file
Regards,
AbhiSure, put it in your WEB-INF directory. That should be in your servlet's classpath when it runs. UseInputStream is = this.getClass().getResourceAsStream("/config.xml");to read it.
-
Help needed for using BASIC authentication through JDBCRealm
Help needed.
Hello,
I am doing a degree project, so far it works fine in my local machine, I need to try it on my virtual hosting (as it is a live server).
My project requires JDBCRealm, that is BASIC authentication loading access data from mysql database. Normally this setup can be done in Server.xml file, because my Tomcat hosting is a virtual one, I only have permission to access the web.xml file.
My question is: is it possible to get it done in an alternative way? In web.xml? Some properties file maybe?
Thank you very much.You can set this up for your context using META-INF/context.xml instead of working with server.xml.
Make a directory called META-INF under your webapp ( it'll be at the same level as WEB-INF ). Under this, add a context.xml with all your context specific configuration including the realm. A sample is below
<?xml version="1.0" encoding="UTF-8"?>
<Context path="/myApp" reloadable="true">
<Realm
className="org.apache.catalina.realm.JDBCRealm"
driverName="com.microsoft.jdbc.sqlserver.SQLServerDriver"
connectionURL="jdbc:microsoft:sqlserver://127.0.0.1:1433;DatabaseName=myDB;SelectMethod=Cursor;"
connectionName="username" connectionPassword="password"
digest="MD5" userTable="users" userNameCol="userid" userCredCol="userpassword"
userRoleTable="user_roles" roleNameCol="rolename"
/>
</Context>Hope this helps.
People on the forum help others voluntarily, it's not their job.
Help them help you.
Learn how to ask questions first: http://faq.javaranch.com/java/HowToAskQuestionsOnJavaRanch
---------------------------------------------------------------- -
Use of AppSet virtual directory in BPC70MS
We are running OutlookSoft CPM 4.2 and using appset virtual directory directly.
The appset virtual directory is created by default in OutlookSoft CPM 4.2.
For example:
- Open input schedule through the virtual directory by Workbook.Add method from another input schedule.
- Save some kinds of data through the virtual directory by Workbook.SaveAs method.
However, there is no appset virtual directory in BPC 7.0 MS by default.
Therefore we have created the virtual directory by hand.
It seems that the virtual directory works fine when the client is Windows XP.
But there is a problem when the client is Windows Vista.
When we access the input schedule directly from the virtual directory,
the authentication dialog box appears for the first time in the Excel session.
We would like to omit the authentication dialog box because it is annoying for users.
Does anyone have some idea to solve this problem?Using a virtual directory outside of osoft that's means you are not longer into SAP BPC.
So the authentication in that case it pure IIS authentication.
IIS authentication is Intergrated Windows authentication (using windows credential for login) or Basic authentication.
You are using IE for connection to IIS which means you have also security setttings from IE.
For example you have the setting for security that "prompt always user name and pwd" into IE.
Tools- Internet Option- Security
Click what kind of site it is your site: Intranet, or trusted site or Internet. and after that click to Custom Level and go to User Authentication.
If there is prompt user name and pwd then for sure every time when you will access any site (from coresponding group. Internet, Intranet or trusted sites) you will be always asked to input user name and pwd.
So first level of authentication for BPC is IE and IIS authetntication. In your case you don't pass this level of authetication.
I hope this will help.
Again it is not a good practice to have virtual directory outside of OSOFT. When you will do a transport into other enviroment it will represent again an issue.
Regards
Sorin Radulescu
Maybe you are looking for
-
We have one book that has no category. We would like to move it to a category. If I categorize the books in the "books" section, it is the only one that is not categorized. I would like to put it in the Poetry section. How do I do that? I suppo
-
Real time interview questions in XI
Hi guys, Can anyone send me Real time interview questions in XI to my mail id [email protected] will be awarded. Thanks in advance
-
This is the request: There is a statutory requirement in Belgium that accounting documents be in sequential order with no gaps. However, the SAP solution installed at the Belgium Engine Center follows existing accounting document number range config
-
Why do we use include in sap script text element
Hi SDNers, Why do we use include statement or what does that stands for in an text element of a sap script. Details with examples and explanation please Thanks & Regards, Ranjith N
-
Passing URL parameters to WD app in URL IView
Hi experts, I'm using EP 7.2 and as I found out this version doesn't support Web Dynpro Java iview template so I'm using URL iview template for my Web Dynpro Java application. My requirement is to somehow pass some URL parameter (which is id for some