Using APEX as SSO redirect for existing web application

Hi,
I have an existing PHP based Web Application hosted on an Apache server. I want to protect these web pages by authenticating users via Oracle SSO.
I tested this by creating a simple APEX web page with redirect <Meta> tag to route traffic to my application upon successful SSO login. This works fine if request comes directly to APEX page....
So my question is how do I protect php pages from being directly accessed and still be able to get sso user login information (like username) coming from APEX page?
Do I still need to set up mod_sso.so in osso.conf for my Apache Server or should I just register my php web application as partner application with SSO server without going through APEX?
Any advice on this is greatly appreciate.
Thanks,
james

Tony,
Sorry for taking so long to respond as I got side tracked with other tasks.
Thank you so much for the link. The provided link is very helpful.
One difference in my situation is that I am using a generic Apache installation (version 2.2.11) and not Oracle Apache Server from OAS.
So I copied mod_osso.so from OAS 10.1.3.1.0 installation to my generic Apache location. As I tried to startup Apache instance I got following error while loading mod_osso.so.
... Cannot load /apache-2.2.11/modules/mod_osso.so into server: /apache-2.2.11/modules/mod_osso.so: undefined symbol: ap_configtestonly
I did some search and found that other folks are reporting success of using mod_osso.so on generic Apache (without saying which version of Apache). I wonder if mod_osso.so can only work with older version of Apache?
Do you have insights on this by any chance?
Thanks again,
James

Similar Messages

How to use two different ojdbc14.jar for two web application.

Hi,
I have two web application running in same tomcat, I need to use the two different ojdbc14.jar for two application, now both are taking the jars from tomcat common/lib directory, I tried copying the new ojdbc14.jar in web-inf/lib folder of one application, but it is not working.
Could you please let me know whether this will take the jar from tomcat by befault or from web-inf, and a solution how to proceed with this.
Thanks in advance.

Yes, I tried removing the jars from common/lib, but as the connection string is mentioned inside the server.xml it is showing db connection error while trying to connect to the database

Office Web Apps - how to disable office web apps features for one web application

ENV: Sharepoint 2010 farm with office web apps + fast search
I have the requirement for one web application to open all its documents in client applications - I can enable feature "OpenInClient". This web application uses team site template and other web application also uses team site template. ( feature
stapling ruled out) Now I can run powershell cmdlet to enable this feature on all the currently existing site collections. But the requirement is to enable this feature for all the future site collections. This web applications has 60 k site collections
and atleast more than 10 site collections get created each day and they dont like the option to run a powershell script each day to activate this solution.
Is there any other way to by default activate new site collections on this WA to open in client applications by default (can we disable this office webapps features only on one web app)?
VM

I have learnt from this forum that it is not possible to turn off Office web apps on single web application. The line of control lies at farm level and then at site collection.
Disable
Office Web Apps on web application
VM

Creating a offline version of an existing Web application

Hi,
I'm working on converting a small portion of an existing web application into offline version (using Webtogo platform and Oracle Lite 9i) . The Web application is developed using active server pages and Oracle 9i is used as backend. The offline version will be developed using Java Servlets and JSP's.
To give a small background, the existing system is used by the salesman to capture lead and contact informations. This system also provides the salesman with their customer details and sales history.
I would need some more details on DB triggers and stored procedure.
1. How to create DB triggers in Oracle Lite 9i.
2. My application has many triggers associated with a table. Do i need to created all of them in my offline version?
I don't need these in my offline version. But, if i don't include all the triggers, i get error while publishing an application.
Pls post you reponse.
regards,
Deepak

jeffsese:
I have used the "duplicate the whole project" route with one variation, to moderate success. I use DollyXs to create the CS4 project and then copy the source files, one by one, to the new project/directory. After creating the project and before I move the source, I compile/link the project just to make sure I have everything pointing at the right place.
I know that some will scoff at my duplication of the codebase and sometimes I agreed with them, but we had one individual who tried to use the same codebase for all versions of InDesign, and whereas it took one of us a couple of days to make a simple change to all six different projects (Mac and Win) it took him three weeks to a month.
In the end you will have to decide for yourself.
R,
John

Portal Integration of an existing Web Application

Dear all,
we are preparing for the pbnw certification. Our way is to deploy our existing web application on the J2EE engine and make it accessible via the portal, i.e. where are taking the certification scenarios J2EE-DEP and BP-EP.
Up to now, my idea is to integrate the web surface of our application into the portal as far as this is possible without too much effort. Alternatively it would be possible to access our application via an URL-iView however to my feeling this is not a real integration. Did I get things right assuming that would meet the requirements for pbnw certification?
I read that it is necessary to follow the portal's look and feel by applying SAP's CSS. Does anyone know where to obtain these? And what is the easiest way to replace the currently used stylesheets by them?
Millions of questions...
Thanks a lot!
Regards,
Angela Grüner.

Dear Angela
Please have a look at the following Weblog link which gives a detailed description of the method to create a URL iView using Application Integrator:
/people/markus.pfeffer/blog/2005/12/14/integrating-your-web-front-ends-into-the-sap-enterprise-portal-using-the-application-integrator
If you adopt this method to create the URL iView, then it meets the requirement for EP-BP Certification.
The blog also includes an example of HTML code with applied SAP CSS. Please go through this section to implement EP look and feel.
Hope this helps!
Regards
Atima

Can I run existing web application on portal 4.0?

Hi,
I have existing web application running on tomcat server. Can I move it to portal
server ? If yes, what do I need to do?
Thanks in advance,
Meghana

You sure can. WLP4 requires WLS6.x (check the download site for correct
version). You can deploy your web app using the WLS console.
Subbu
Meghana wrote:
Hi,
I have existing web application running on tomcat server. Can I move it to portal
server ? If yes, what do I need to do?
Thanks in advance,
Meghana

Configuring the authentication scheme for a web application

Hi all,
We have a requirement to configure the authentication scheme for a web application where some set of users should access the application using basic LDAP (userid/password) authentication and some using digital certificate authentication.
Since the deployment descriptor (web.xml) allows only one directive for auth-method in logic-config, we want to know if there is any other way to achieve this requirement. We are thinking of a custom login module approach. But we are not able to figure out how to configure the auth-method at runtime from the login servlet.
Please let us know if there is any other approach to achieve this.
I will be thankful if any body shares any specific solution to this issue.

This forum is probably not the correct one to ask in. It's more related to the web container than Java Programming.
Kaj

One Search service application for multiple web applications in a single server

We are planning to host 17 Web applications in a single Server. Do I need to create search service application for each web application or I need to create one Search service application , create a Content source for each web
application and create a Result source for filtering. Which is the best approach. And which approach takes more RAM memory.
In my application I am using Search web part, "Recently Changed Items", "Popular Items" web parts. when I created only one one Search Service application for all web applications and using Result sources ,
I am not getting the results. What could be the problem.

Hi,
One SSA is ok, but you should think about access rights. If the access is clear cut between all the web apps you should be ok with one SSA. Multiple result sources limiting on content source also works, but could easily be bypassed.
Multiple SSA's will eat up RAM/CPU like a mother :)
As for popular etc.. it could be due to how those sources are set up, but haven't investigated or tested this much.
Thanks,
Mikael
Search Enthusiast - SharePoint MVP/MCT/MCPD - If you find an answer useful, please up-vote it.
http://techmikael.blogspot.com/
Author of Working with FAST Search Server 2010 for SharePoint

SharePoint 2013 Central Admin says port 80 for three web applications, but IIS says they have different ports

Hello,
I have three web applications on a SharePoint 2013 servers. In Central Administrators on the Application Management page where it lists all of the web applications, it shows Port 80 being used 2 3 sites. When I go to IIS, 2 of the 3 are using
different ports, 81 and 82. So, only one site IIS says is using port 80. Why is this? The host file has no entries in it. Where these web applications extended?
Thanks,
Paul
Paul

Hi Paul,
From the URL of the web application in Central Administration in the image, you have configured the Alternate Access Mapping for the web applications.
And the URL configured is by default using port 80 if you don’t
assign other ports for the web application, so the port is changed to 80 in Central Administration.
To be able to access the web application, you need to add binging for the web application in IIS(please make sure that you have added the host name in DNS).
For example, SharePoint – 32298, you need to create the binding for the web application in IIS as the image below:
Best regards.
Thanks
Victoria Xia
TechNet Community Support

Why an organization require SSL for Shared Web Applications?

Hi
what is ssl and why an organization require SSL for Shared Web Applications?
adil

Hi adil,
Secure Socket Layer (SSL) is an encrypted communication protocol which uses encryption certificates. For more information about SSL in SharePoint, please refer to:
http://technet.microsoft.com/en-us/magazine/2009.09.insidesharepoint.aspx
http://technet.microsoft.com/en-us/library/cc262366(v=office.15).aspx
SSL is supported for server-to-server authentication and app authentication.
Regards,
Rebecca Tu
TechNet Community Support

Query for log Parser to get number of hits in a day or week for particular web applications or site collection

Hi All,
Want to get the number of hits in a day for a web application with IIS logs. so need to know Query for log Parser to get number hits in a day or week for particular web applications or site collection. Kindly help
Regards,
Naveen

I'm trying to get this from WSS 3.0, Hence using the Log Parser

Configure Log File for each web application deployed in weblogic server usi

Hi All,
How do I configure Log4J to log separately for each web application? i.e. Assuming, I have a web application "AWeb" and a web application "BWeb". I need a log file to be created for AWeb Separately and BWeb Separately. i.e. All the log information for "AWeb" web application will be stored in AWeb.log and all the "BWeb" web application will be stored in BWeb.log
Do you have any sample code and configuration details for the above-mentioned requirement?
Thanks in Advance,
C R Baradwaj

You do not need to do anything strange, just use log4j the usual way with the exception that you do not need to init log4j (this is not necesary when using a log4j.xml.)
A minimal sample of a log4j.xml is
<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE log4j:configuration SYSTEM "log4j.dtd">
<log4j:configuration xmlns:log4j="http://jakarta.apache.org/log4j/">
<appender name="ConsoleAppender" class="org.apache.log4j.ConsoleAppender">
<layout class="org.apache.log4j.SimpleLayout"/>
</appender>
<root>
<priority value ="debug" />
<appender-ref ref="ConsoleAppender"/>
</root>
</log4j:configuration>
You just have to be sure that you have different log4j.xml in your classpath for different web applications.
Regards,
LG

Deactivate FARM Feature for one web application

Hi All,
We have a third party product that installs and activates a Farm Level feature that adds some actions on the AdditionalPageHead delegate control.
this feature internally calls some load/set actions which adds to Page Load time on all SharePoint sites in Farm.
We don't want this controls to load on one of our web applications which has Performance sensitive sites. However given that other web apps are using this feature we cant disable the Farm level feature.
Is there a way to prevent/deactivate this feature just on one web application?
Thanks.
-http://lrathi.blogspot.com

I don't think this is possible. You can either request for the web application scoped feature.

Good exception handling policy for Java web application

I'm looking for a good exception handling policy for Java web application. First I found this Java exception handling best practices - How To Do In Java which says that you should never catch the Trowable class nor use e.printStackTrace();
Then I found this Oracle page The Message-Driven Bean Class - The Java EE 6 Tutorial, which does just that. So now I'm confused. Is there a good page online for an exception handling policy for Java EE Web applications? I have a hard time finding one. I've read that you should not catch the Exception class. I've been catching it previously to make sure that some unknown exception doesn't slip through early in the loop and stops all other customers from executing later on in the loop. We have a loop which runs once a minute implemented using the Quartz framework. Is it OK if you just change the implementation to catch the RuntimeException class instead of the Exception class? We're using Java 7 and the Jetty Servlet Container.

I'm looking for a good exception handling policy for Java web application.
If you have not done so I suggest you start by reviewing the several trails in The Java Tutorials.
Those trails cover both HOW to use exceptions and WHEN to use them.
This trail discusses the 'controversy' you mention regarding 'Unchecked Exceptions'
http://docs.oracle.com/javase/tutorial/essential/exceptions/runtime.html
Unchecked Exceptions — The Controversy
Because the Java programming language does not require methods to catch or to specify unchecked exceptions (RuntimeException, Error, and their subclasses), programmers may be tempted to write code that throws only unchecked exceptions or to make all their exception subclasses inherit from RuntimeException. Both of these shortcuts allow programmers to write code without bothering with compiler errors and without bothering to specify or to catch any exceptions. Although this may seem convenient to the programmer, it sidesteps the intent of the catch or specify requirement and can cause problems for others using your classes.
Why did the designers decide to force a method to specify all uncaught checked exceptions that can be thrown within its scope? Any Exception that can be thrown by a method is part of the method's public programming interface. Those who call a method must know about the exceptions that a method can throw so that they can decide what to do about them. These exceptions are as much a part of that method's programming interface as its parameters and return value.
The next question might be: "If it's so good to document a method's API, including the exceptions it can throw, why not specify runtime exceptions too?" Runtime exceptions represent problems that are the result of a programming problem, and as such, the API client code cannot reasonably be expected to recover from them or to handle them in any way. Such problems include arithmetic exceptions, such as dividing by zero; pointer exceptions, such as trying to access an object through a null reference; and indexing exceptions, such as attempting to access an array element through an index that is too large or too small.
Generally don't catch an exception unless you plan to HANDLE the exception. Logging, by itself is NOT handliing.
First I found this Java exception handling best practices - How To Do In Java which says that you should never catch the Trowable class nor use e.printStackTrace();
That article, like many, has some good advice and some poor or even bad advice. You get what you pay for!
I've read that you should not catch the Exception class.
Ok - but all that does is indicate that a problem of some sort happened somewhere. Not very useful info. Java goes to a lot of trouble to provide specific exceptions for specific problems.
I've been catching it previously to make sure that some unknown exception doesn't slip through early in the loop and stops all other customers from executing later on in the loop.
If the exception is 'unknown' then maybe it NEEDS to 'stop all other customers from executing later on in the loop'.
That is EXACTLY why you don't want to do that. You need to identify which exceptions should NOT stop processing and which ones should.
Some 'unknown' exceptions can NOT be recovered and indicate a serious problem, perhaps with the JVM itself. You can NOT just blindly keep executing and ignore them without risking data corruption and/or the integrity of the entire system Java is running on.
Is it OK if you just change the implementation to catch the RuntimeException class instead of the Exception class? We're using Java 7 and the Jetty Servlet Container.
No - not if you want a well-behaved system.
Don't catch exceptions unless you HANDLE/resolve them. There are times when it makes sense to log the exception (which does NOT handle it) and then raise it again so that it gets handled properly later. Yes - I know that is contrary to the advice given in that article but, IMHO, that article is wrong about that point.
If you have ever had to maintain/fix/support someone else's Java code you should already understand how difficult it can be to find WHERE a problem occurs and WHAT the exact problem is when exceptions are not handled properly.

How to import javafx into a existing web application??

how to import javafx into a existing web application in netbeans 6.5??

how to import javafx into a existing web application in netbeans 6.5??

Using APEX as SSO redirect for existing web application

Similar Messages

Maybe you are looking for