Use of HeaderVariableLogonModule with ISA (Proxy server)

Hi,
We are planning to use the ISA 2010 Server as as reverse proxy to acess the SAP Portal 7.0 (EHP1). We are going to use the ISA authentication to access the SAP Portal. If we use ISA authentication, I don't want the Portal login page to appear. Once user is authenticated in the ISA server, it should come directly to portal without asking the Portal authentication again..
Can I achieve this scenario with HeaderVariableLogonModule ?.
Thanks

Hi,
You can prevent Header Spoofing this by writing your own login module on top of HeaderVariable login module or by having proper firewall rules in place which allows access of Portal only through the ISA server.
Check the link below for further details:
http://help.sap.com/saphelp_nw70ehp1/helpdata/en/d0/a3d940c2653126e10000000a1550b0/content.htm
Regards,
Vijith

Similar Messages

Using a Mac with a proxy server

Hi I’m very new to Macs to apologies if this is a really silly question. I’m
trying to setup a Mac on our network and I’m having an issue getting it to work
properly with our proxy server. I have connected the Mac to the network and
selected automatic proxy configuration in the network settings using the URL of
our Pac file. I am asked for a proxy username and password when I initially try and
access a website but once I have entered my credentials they are saved in
keychain and anyone coming after me can browse using my account. I work in a
hospital so there are many different people accessing different devices. We
monitor and trace all users internet browsing so my question is can I configure
the Mac to ask for proxy credentials for different users? On our windows devices
a login box will appear if the browser has been closed and reopened. Can I do
this with the Mac?????
Any help you can offer will be very much appreciated.
Thanks

Do NOT store the proxy server username and password in Keychain.
Easy to say, but by default, the next person to enter their password is likely to store their username password in the Keychain.
You can use Applications -> Utilities -> Keychain Access to give the Keychain a separate password and to auto-lock it after 'n' minutes. If you are the only one to know the Keychain password, then no one will be able to add the Proxy server username/password to the keychain.
Keychain Access -> Edit -> Change Settings for Keychain Login...
Keychain Access -> Edit -> Change Password for Keychain Login... (this is NOT required; you can keep the keychain set to use the same password you use for your login, as long as no one else knows that password; changing the settings to lock the keychain is sufficient for your needs)
The good news is that only you will be able to access stuff stored in the Keychain. The bad news is that if you do need stuff in the Keychain, you will need to enter the keychain password everytime you need to get at them.

Web Clipping proxy error with ISA Proxy server

hi
i'm trying to prepare web clipping in portal .
and fill in http proxy in webclipping test page option like this:
HTTP Proxy: isa.sazehgostar.com(fill in http proxy in internet option,with port 8080 )
port :8080
Requires Authentication:yes
type :Basic
Realm:sazehgostar.com (our domain name)
my username:474
my password :.....
but when i trying to connect to http://www.yahoo.com i get this error message:
An exception has occurred : oracle.portal.wcs.transport.http.HttpTransportException WCS-519 -- HTTP Proxy Authentication failed for proxy isa.sazehgostar.com:8080 with authentication of type "Basic" at realm "sazehgostar.com". Update your proxy login information in the Edit Defaults / Personalize page to
authenticate.
but my username and password is correct.
our application server is 10.2.
and oracle portal 10.1.2 that upgrade to 10.1.4
and our proxy server is isa server

I have the same problem with isa server.
Did you sovle it?

Using a Mac on windows network with a proxy server

Hi I’m very new to Macs to apologies if this is a really silly question. I’m
trying to setup a Mac on our network and I’m having an issue getting it to work
properly with our proxy server. I have connected the Mac to the network and
selected automatic proxy configuration in the network settings using the URL of
our Pac file. I am asked for a proxy username and password when I initially try and
access a website but once I have entered my credentials they are saved in
keychain and anyone coming after me can browse using my account. I work in a
hospital so there are many different people accessing different devices. We
monitor and trace all users internet browsing so my question is can I configure
the Mac to ask for proxy credentials for different users? On our windows devices
a login box will appear if the browser has been closed and reopened. Can I do
this with the Mac?????
Any help you can offer will be very much appreciated.
Thanks

The short answer is that the IT department is a strict Microsoft shop and also incompetent. Almost everything in that message is patently false. Unfortunately, when accessing Microsoft Server services like this, you will need the support of the IT staff to tell you various settings to use. I think it is pretty clear that they have no intention of doing that.
There is nothing "special" about bootcamp. It is just a boot loader. A Mac running Windows via bootcamp is a Windows PC, not a Mac. As such, it will work perfectly fine in the network. You could also try running Parallels. I believe Parallels can be configured to use a bootcamp partition so you could run Windows via either bootcamp or Parallels.
One of the few things that is correct is that Apple does have to provide driver support for bootcamp and there is the possibility of random incompatibilities - but no more so than any other PC manufacturer. Parallels/VMWare may work around that with a different set of incompatibilities. Don't be too worried about this part. These "incompatibilities" are minor and almost always with funky hardware devices. What you want to do should work perfectly with either Parallels/VMWare or Bootcamp.

Update fails behind a MS ISA proxy server

We have all our clients behind a MS ISA proxy server. When
Flash player tries to update itself, or when you try to install it
from the download site, a network connection for the update times
out over and over. The only way to get around this has been to set
the configuration on the ISA server so that the workstation is
allowed to use anonymous authentication through the ISA server.
This is a royal pain in the neck and not something I can leave
configured for 60+ users. Anyone know of a fix or work around for
this? Even downloading the installer through a browser other than
IE and installing it doesn't seem to install the whole player.
Thanks in advance!
ML

Hum,
I've got the same problem with any kind of proxies.
And this is not news. Every other apple apps use the proxy config, but not mail since Tiger.
Why?
There is an ugly method by using some proxifier to open outgoing ssh tunnel, but, as i said, that's ugly and this solution needs to have an access to SSH server.
so, UP

Intermittent proxy error "There is a problem with the proxy server's security certificate. Outlook is unable to connect to the proxy server "

Hi all,
From time to time (at least once a day), the following message pops up on the user's screen:
"There is a problem with the proxy server's security certificate. Outlook is unable to connect to the proxy server . Error Code 80000000)."
If we click "OK" it goes away and everything continues to work although sometimes Outlook disconnects. It is quite annoying...
Any ideas?
Thank you in advance

Hi,
For the security alert issue, I'd like to recommend you check the name in the alert windows, and confirm if the name is in your certificate.
Additionally, to narrow down the cause, when the Outlook client cannot connect again, I recommand you firstly check the connectivity by using Test E-mail AutoConfiguration. For more information, you can refe to the following article:
http://social.technet.microsoft.com/Forums/en-US/54bc6b17-9b60-46a4-9dad-584836d15a02/troubleshooting-and-introduction-for-exchange-20072010-autodiscover-details-about-test-email?forum=exchangesvrgeneral
Thanks,
Angela Shi
TechNet Community Support

There is a problem with the proxy server's security certificate. The name on the security certificate is invalid or does not match the name of the target site "Mailserver"

Good day Guys
First of all I am not an Exchange Expert, and I might be asking a very stupid question, but please bare with me. :)
While I was on leave our Mail server fell over and The company got a Specialist to help out for the time being.
We where\are on Microsoft Exchange 2007 , which Fell over, and the specialist was able to recover as much data as he could.
They then installed Exchange 2013 and tried to migrate everything from 2007 to 2013 and not everything migrated over.
But the problem is, Outlook Anywhere was enable on 2007 and worked a 100% (before the disaster)
With Exchange 2013 I get the following error message when trying to connect With Outlook 2013, using an external connection:
"There is a problem with the proxy server's security certificate. The name on the security certificate is invalid or does not match the name of the target site "Mailserver"
Outlook is unable to connect to the Proxy server. (Error Code 0)"
Has anyone had the Similar when migrating over from 2007 to 2013 or is this an Issue on IIS and nothing to do with Exchange migration?
Your assistance will be greatly appreciated.

Hi,
Firstly, I would suggest we use Exchange 2013 FE as the Outlook Anywhere proxy server.
For the certificate issue, it mostly occurs because the host name that Outlook are trying to access does not match the certificate SAN. Please check with this point. If they do not match, you
can change the host name by referring to the following article:
https://support.microsoft.com/kb/940726/en-us?wa=wsignin1.0
Thanks,
Simon Wu
TechNet Community Support

I have microsoft outlook installed on my Mac book pro, I can only use the outlook with the office server where it was setup, I can't use outlook else where, is there any way I can reset the settings in order to be able to use outlook every where?

I have microsoft outlook installed on my Mac book pro, I can only use the outlook with the office server where it was setup, outlook won't work out of office, is there any way I can reset the settings in order to be able to use outlook every where?

I can see my folders by clicking the X next to my name on the Inbox Folder. So I have my folders now, just cannot see them in the left colum or see multiple windows on Outlook. At this point, I can use the folders, just with limited functionality. Thanks -Gina

"Setting up ISA Proxy Server" White Paper

Hello
I'd like to receive this white paper "Setting up ISA Proxy Server" as mentionned in "SAP_BPC_70_SP03_M_Install.pdf" guide.
Can someone send it to me ?
Thanks

You can find the Microsoft ISA Server whitepapers here:
[http://www.microsoft.com/forefront/edgesecurity/isaserver/en/us/white-papers.aspx|http://www.microsoft.com/forefront/edgesecurity/isaserver/en/us/white-papers.aspx]
SAP also has a blog on ISA Servers here:
[/people/kishor.gopinathan/blog/2008/07/12/isa-server-as-reverse-proxy-for-sap-applications|/people/kishor.gopinathan/blog/2008/07/12/isa-server-as-reverse-proxy-for-sap-applications]

Does PI need a direct connection to third party or can work with a proxy server based connection to third party?

does PI need a direct connection to third party or can work with a proxy server based connection to third party?

Hi,
It basically includes 3 systems, one is our ECC sender system, middle one is PI box and third one is the receiver system. Data is successfully reaching to PI system from our sender system.Now we want to forward this to our third party system from PI box.
I want to know that such sending of data requires direct connection to third party or it can be done by proxy server based connection to third party.If it is possible then what are the steps to do this?
Regards-
Anuj Nogja

Trying to use with TOR - 'Proxy Server is refusing connections' but TOR is connected.

Added TOR button to Firefox. It could be a TOR problem, but the TOR control panel shows it as connected. When I make TOR enabled and try to go to a website, I get the 'Proxy Server is refusing connections' message.

In Firefox 3.6.4 and later the default connection settings have been changed to "Use the system proxy settings".<br />
See "Firefox connection settings" in [[Server not found]]
You can find the connection settings in "Tools > Options > Advanced : Network : Connection"
If you do not need to use a proxy to connect to internet then select No Proxy

Web Clipping proxy error ISA proxy server

hi everybody.
help me please
i'm using web clipping in portal .Our proxy server is ISA server.
http proxy in webclipping test page option like this:
HTTP Proxy: webproxy.domain.ru
port :8080
Requires Authentication:yes
type :Basic
Realm:domain.com (our domain name)
my username:domain\user1
my password :***
but when i trying to connect to http://www.blabla.com i get this error message:
An exception has occurred : oracle.portal.wcs.transport.http.HttpTransportException WCS-519 -- HTTP Proxy Authentication failed for proxy webproxy.domain.ru:8080 with authentication of type "Basic" at realm "domain.ru". Update your proxy login information in the Edit Defaults / Personalize page to
authenticate.
in isa server logs we can see that webclipping try to authenticate as anonimous
my username and password is correct.
application server is 10.2.
oracle portal 10.1.2 that upgrade to 10.1.4
Edited by: user12104721 on Nov 29, 2010 2:47 AM

I have the same problem with isa server.
Did you sovle it?

Elicensing and ISA proxy server

Hello
Our organization uses Micrsoft ISA server to secure port 80 traffic. If we choose to have Adobe host our licensing service will this work with ISA. Does it pick up the IE proxy settings or can you specify this somewhere in the client configuration file.
thanks Daron

The license manager component embedded into Acrobat 8 picks up the IE proxy settings, so it should work fine without any settings in the Client Setup file (also know as configuration file or just Adobeconfig.xml)
Make sure to follow the instructions in the "Configuring Acrobat 8 with ALM" document to prepare your installation image. The document is available at: http://www.adobe.com/elicensing/licensemanagement/alm/pdfs/ConfiguringAdobeAcrobat8withAL M_EN.pdf

Version 3.6.6 and Internet explorer will not load sites, so I reloaded the older 3.6.3 of firefox and websites load fine. Internet Explorer still will not load. The error message corresponding with 3.6.6 was that there were problems with the proxy serve

Upgraded to 3.6.6 and no sites loaded, error in proxy server. Internet explorer will not load either. Reloaded firefox 3.6.3 and sites load fine, but internet explorer still will not load. I was only able to connect to yahoo messenger when websites were not loading.
== This happened ==
Every time Firefox opened
== I upgraded to 3.6.6

I have a problem with Firefox loading. It will not load and it says Firefox is using a proxy that refuses connection. Check with your network administrator. How do I get Firefox to work. I've uninstalled it and reinstalled it twice. Any help would be great thanks.

Outlook 2013: There is a problem with the proxy server's certificate

Hello!
One more question regarding Outlook 2013/Exchange2013SP1:
There are three lab PCs: DC, Exch1, Exchange2. There's a wildcard certificate installed on Exch1 (https://social.technet.microsoft.com/Forums/en-US/6a440c99-47bd-4f48-8cc5-9f92e6b06496/wildcard-certificate-for-exchange-2013?forum=exchangesvrgeneral).
OWA works perfect with this wildcard certificate.
I install Outlook2013 on Exch1 and get the error:
DC.Entreprise.Local is a computer certificate issued for the computer DC.Enterprise.Local.
DC.Enterprise.Local IS NOT (and never was) the proxy for Exch1 or Exchange2:
How Outlook could request DC's certificate if the proxy server = Exch1.Enterprise.Local???
Thank you in advance,
Michael

Hello all,
Thank you for your replies!
Since I'm using a wildcard certificate I changed Outlook providers according to this:
http://blogs.technet.com/b/exchange/archive/2013/08/02/part-2-reverse-proxy-for-exchange-server-2013-using-iis-arr.aspx
If you do choose to use a wildcard certificate, you should also make sure that you
change the EXPR Outlook Provider, so that Outlook Anywhere clients can successfully connect to the Exchange Server (this behavior can be a particular issue
if you have Windows XP clients). If you do not make this change then end users may continue to receive a prompt for a certificate mismatch."
...and EXCH and EXPR are both set to *.Enterprise.Local.
"I install Outlook2013 on Exch1" you mean you install Outlook on top of Exchange?" - on the same server as Exchange, and in this case Outlook must use SCP, not DNS (the server and the client are in the same AD domain).
"Without SCP, Exchange try DNS autodiscover lookup, first site it will try is
https://emaldomain/autodiscover/autodiscover.xml, which happen to be resolve to your domain controller." - I think that's the case... I just don't understand why
an internal client can't find the SCP that does exist and point to exch1.enterprise.local:
Regards,
Michael

Use of HeaderVariableLogonModule with ISA (Proxy server)

Similar Messages

Maybe you are looking for