Using not default Realm in my apllication

Hi!
I have created another Realm on WLS70 named ApplicativeRealm, it's not the default
Realm, I have created some Users,Groups and Roles specifics of my Application.
Now I wish using this user in the authentication process this is my login-config:
<login-config>
<auth-method>FORM</auth-method>
<realm-name>ApplicativeRealm</realm-name>
<form-login-config>
<form-login-page>Login.html</form-login-page>
<form-error-page>Error.html</form-error-page>
</form-login-config>
</login-config>
when i try of authenticate with a valid user of ApplicativeRealm Error.html is
displayed, but it's possible using a not default Realm?
Thanks for any help...
Angelo

there's no limit to the number users/groups in the properties file, it's all
read into memory at startup.
if the password is too short, an error log message is dumped, but usually
goes unseen in the mass of startup log messages.
.paul
Jin Group wrote:
Hello
Do you know if there is any problem with the size of the default realm in
WLS 5.1 ?
How many users could I have in the weblogic.properties ?
are there some problems when these users try to log-in ?
I have some reportes from my users that in some cases the WLS 5.1 doesn't
recognize the password ?
is it a bug ?
Thanks in advance

Similar Messages

Need send PO to the vender by e-mail using not default e-mail (ex. 2-nd ID)

Hi Friends!
I have two configurations setup which triggered an e-mail notification for external user.
One configuration triggered e-mail notification for the vendor when electronic payment is made and another one when PO is created or changed. Both configurations made using standard SAP way (using medium 5).
My problem that e-mail notification in both cases goes to the same e-mail address which is standard for this vender (three e-mails are maintained for one vender in my case).
I assume that should be standard way to specify which e-mail address should be used for payment Advice and which for Purchasing order as in a real word usually it should go to different clerks.
Is any one can help me with this?
Thank you in advance.
Yutah

Hello,
Realised that you want to send PO to a 2nd email address. Here's what you should do.
1. Using transaction XK01 create a new vendor with exactly same data as your original vendor except with the new email address. While creating remember to enter account group as "PTNR" (partner).
2. After successful creation you should get a new vendor code.
3. Using transaction XK02, change the original vendor. Go to purchasing org data --> partners, and replace the OA (ordering address) partner with the new code you created.
Assuming that the PO output condition record is set to send output to the OA vendor, the PO should go to the new email address.
Cheers !

Using the WLS 7.0 default realm can users/groups be added/deleted within a web app?

If I use the default realm provided in WebLogic Server 7.0,
is it possible for me to programatically add/delete users/groups
from within a web application? Is there an API I can use to
add/delete users/groups from the embedded LDAP server? Or can
you only add/delete users/groups using the WebLogic Admin Console?

Tom,
The below is the program for creating a new user:
import weblogic.management.MBeanHome;
import weblogic.management.configuration.DomainMBean;
import weblogic.management.configuration.SecurityConfigurationMBean;
import weblogic.management.security.RealmMBean;
import
weblogic.management.security.authentication.AuthenticationProviderMBean;
import weblogic.management.security.authentication.UserEditorMBean;
import weblogic.management.security.authentication.GroupEditorMBean;
import weblogic.management.utils.InvalidParameterException;
import weblogic.management.utils.AlreadyExistsException;
import weblogic.servlet.security.ServletAuthentication;
import javax.naming.NamingException;
import javax.naming.Context;
import javax.naming.InitialContext;
MBeanHome mbh;
try{
Hashtable env = new Hashtable();
env.put( Context.INITIAL_CONTEXT_FACTORY,
"weblogic.jndi.WLInitialContextFactory" );
// use administrator account in order to create a user
env.put( Context.SECURITY_PRINCIPAL, "system" );
env.put( Context.SECURITY_CREDENTIALS, "weblogic" );
Context ctx = new InitialContext( env );
mbh = (MBeanHome)ctx.lookup( "weblogic.management.home.localhome" );
catch( NamingException e ){
throw new ServletException( e.toString() );
DomainMBean dmb = mbh.getActiveDomain();
SecurityConfigurationMBean scmb = dmb.getSecurityConfiguration();
RealmMBean rmb = scmb.findDefaultRealm();
AuthenticationProviderMBean providers[] = rmb.getAuthenticationProviders();
for( int i = 0; i < providers.length; i++ ){
if( providers[i] instanceof UserEditorMBean ){
UserEditorMBean uemb = (UserEditorMBean)providers;
uemb.createUser( username, password, "dynamically created user" );
hope this helps,
Koji
"Tom" <[email protected]> wrote in message
news:[email protected]...
>
If I use the default realm provided in WebLogic Server 7.0,
is it possible for me to programatically add/delete users/groups
from within a web application? Is there an API I can use to
add/delete users/groups from the embedded LDAP server? Or can
you only add/delete users/groups using the WebLogic Admin Console?

BPEL Server can not start after jazn default realm has been modified

Hi, everyone:
In order to customize my user task assigneeGroup, I set up a new realm in the jazn-data.xml using the shell (java -jar jazn.jar -shell). I tried to modify the jazn.xml file in %OraBPELPM%\integration\orabpel\system\appserver\oc4j\j2ee\home\config, and set the default-realm attribute to my new realm.
After these modification, the BPEL Server can not start, the server seems to stop after loading the first two EJB.
Does anyone ever encounter this problem? Could anyone help me?

It appears that I had the wrong oracle home and as a result some of the steps were skipped by the Universal Installer during installation, but installation was still claimed as successful. Even by launching the 'Mobile Server Repository Wizard' manually by running 'repwizard.bat' did not provide all the necessary window boxes to provide the details such as the SID, hostname, port number. I re-installed.
After starting the back-end database and then starting mobile server and testing in IE to see if the server was working by typing in http://<host name>:80/webtogo, I got the screen displaying mobile server.
Many thanks for your help.
Mark

'configuration file does not specify default realm'

Hi,
I am using below solaris 10 OS version:
[root@nlxsl009 ~]$ cat /etc/release
Solaris 10 5/09 s10s_u7wos_08 SPARC
Copyright 2009 Sun Microsystems, Inc. All Rights Reserved.
Use is subject to license terms.
Assembled 30 March 2009
The Kerberos version available on our Solaris 10 OS is: MIT Kerberos V5.
I had installed the Kerberos from the instruction given at MIT Kerberos site but getting following error:
'configuration file does not specify default realm'.
I tried to configure my KDC but it seems my Kerberos was not installed properly.
Can you refer any site from where I can properly install Kerberos from Solaris10 OS DVD?
Thanks and Regards
Anand Deshmane
Edited by: ananddeshmane on Apr 1, 2010 7:20 AM

I think you need to post this question to a Solaris forum, it is definetely not a Oracle Database Installation question.
-Andy

Oracle BPEL - Does not cater for not null columns and use of "default".

Oracle BPEL - Does not cater for not null columns and use of "default".
BPEL fails with message:
ORA-01400: cannot insert NULL into ("EDDB"."SEISMIC_LINES"."COORD_SYSTEM_ID")
But SQL*PLUS command works:
INSERT into EDDB.SEISMIC_LINES
(etc)
regards
Allan Ford
Analyst / Programmer - IT Application Services, IT Services, Shared Business Services
Santos Ltd
Level 4, 91 King William Street, Adelaide SA 5000
Phone: 08 8224 7944 Fax: 08 8218 5320
Email: [email protected]

note: BPEL keeps it's own "offline" copy of table and database items. A column that is marked not null in the database can be marked as nullable in this area. (if you kmow that a trigger is going to cater for this ..)
One workaround is to use a trigger to provide value rather than use the column default ..

Farm Remote App 2012 R : Your system administrator does not allow the use of default credentials to log on to Work Resources

Hi
Here is the situation:
I have a Farm with 3 servers W2012R2 in a Domain
Server1                           Server 2
Server3
RDSession Host            RDSession Host
RDSession Host
Connection Broker        Connection Broker (Passive)
RD Web Access
2 DNS Alias : - poc.mydomain.local (Use for the RD Web Access and points to Server1
                  -poccb.mydomain.local (Use for the Connection Broker and points to Server1)
I have setup the Connection broker in HA with Server2 as Passive Server : DNS Round Robin poccb.mydomain.local (Server1)
The certificate Manager has generated 2 CA certificates :
- 1 for the RD Web Acc (poc.mydomain.local
-1 for Connection Broker SSO and for publishing
I have created 1 Group Policy for these 3 servers and 1 GP for my client Windows 7 SP1.
Server GPO :
Computer/Administrative Templates/Windows Components/Remote Desktop Services/Remote Desktop Session Host/Security
Always prompt for password upon connection=Disabled
Require use of specific security layer for remote (RDP) connections : SSL (TLS 1.0)
Set client connection encryption level : High Level
Client GPO
Computer/Administrative Templates/System/Credentials Delegation = Allow delegating default credentials (Concatenate OS defaults with input above)
TERMSRV/POCCB.mydomain.local
I use no Gateway and in my collection,I have activated SSL (Like in my Server GPO)
I have now problem with SSO.
Connection with remote desktop client with server name = poccb.mydomain.local
Your system administrator does not allow you the use of default credentials to log on to the remote computer poccb.mydomain.local because its identity is not fully verified
If in my client GPO I add the physical name of the 3 servers, it works :
TERMSRV/Server1
TERMSRV/Server2
TERMSRV/Server3
Open RDP Files with server name = poccb.mydomain.local
if my connection broker connects me on Server1 , no problem
But If I arrive on Server2 & Server 3=
Your system administrator does not allow the use of default credentials to log on to Work Resources
I have searched on internet. No result for " to log on to Work Resources"
Any idea ? Thanks for your help

Hi,
Thank you for posting in Windows Server Forum.
Firstly check that, your user is using domain\username to enter the credential in the dialog box.
Now for a try, you can edit .rdp file with notepad and just place “enablecredsspsupport:i:0” line in it, save it an launch to check whether you are facing same issue.
As you are using windows 7 then upgrade to RDP 8.1. Also as you have already enter the FQDN name of server under “Allow delegating default credentials”. For a try please enable and configure for all the remaining settings as follow and check the result.
Start / Run / gpedit.msc / Computer Configuration / Administrative Templates / System / Credentials Delegation, and make sure you have the following four options enabled and configured:
Allow Delegating Default Credentials with NTLM-only Server Authentication
Allow Delegating Default Credentials
Allow Delegating Saved Credentials
Allow Delegating Saved Credentials with NTLM-only Server Authentication
Finally, open a command prompt and use “gpupdate /force” command to apply the policy directly.
More information:
Remote desktop credentials did not work
Hope it helps!
Thanks.
Dharmesh Solanki

Leading in Pages. I've just discovered that different typefaces seem to have different auto-leading in Pages. I am used to default leading being 120% of point size, but it seems this is not so any more. The same text in 10pt Times New Roman, which I would

I've just discovered that different typefaces seem to have different auto-leading in Pages. I am used to default leading being 120% of point size (or some consistent rule), but it seems this is not so any more. The same text in 10pt Times New Roman, which I would expect to line up with 10pt Palatino, for example, doesn't. I've tried using the inspector, at least to get both faces to behave the same for given settings, but I haven't been able to. How much control does Pages allow for this type of settings, and are there any hidden secrets as to how to do so? Many thanks
Message was edited by: Just me then

If you set the line spacing in the inspector to Exactly and 12 points for 10 point type, it will work the way you want.

Is this possible to use no default security realm?

Hi,
I created new security ReadOnlySQLAuthentication provider in the default realm and it works. Now I have all the users from all applications in one realm. If they use the same enterprise roles, user can log to one application with login and password from another application. To prevent it I created another security realm. I've added ReadOnlySQLAuthentication provider, set in my application new realm name - in jazn-data.xml and web.xml. But it doesn't work. My questions are:
It is possible to use few realms? So one application will use default realm, another no default realm.
If so, how to bind an application to no default realm?
Bart

Hi,
A WLS instance only supports a single realm. So the answer unfortunately is no (was different with OC4J)
Frank

ICal not using the default email application?!??

Hello,
I use Thunderbird as my default (and only) email application. In the preferences of Apple's Mail application, I selected Thunderbird as the default email reader.
However, when sending email from iCal, it attempts to use Mail, not Thunderbird?!? This happens both when emailing an event and when sending an invite for a published calendar.
How do I make iCal use Thunderbird for sending mail?
Tried searching the forum and Apple Support site, but failed to find an answer.
Thanks,

I am also now having this issue. I didn't have this problem previously. Other apps (e.g. AddressBook) are using my default mail program, but iCal strongly prefers Mail.app? I am seeing this on my laptop that I don't use as often, but will confirm on my desktop machine tomorrow ...

Stagewebview is not using the default browser?

Hello community,
We encounter an issue regarding the userAgent we get with Javascript when our page is viewed from an Android App running Air and using the Stagewebview.
We noticed that despite the default browser set as Google Chrome (Webkit v.537), we identify that app using Webkit v.534.
After a lot of trouble shooting, it seems that there is a difference between "native" browser and "default" browser.
Is that correct?
If so, the question is: Is there a way to make Stagewebview use the user selected browser/engine ?
Our website needs to display text vertically (japanese text) and the form elements are not well recognized in the 534 version browser, but work perfectly in the last version of Chrome we can get running on those devices.
(We target Android 4.2+ users)
Any input will be appreciated.
Cedric Simon

Hello ArkadiuszOkoń,
I downloaded the 4.4W sdk and replaced the file as proposed, but I don't notice any change.
On Desktop, I can see that Air webkit 533 is used. did my compile really took the new file into configuration?
I'm using FlashDevelop, are there settings to change in the bat fie or in the manifest?
As you proposed about the <uses-sdk> settings, some are already setup and I didn' change them, should I higher the minSdkVersion for example?
Here is the current section:
<android>
<manifestAdditions><![CDATA[<manifest android:installLocation="auto">
<uses-sdk android:minSdkVersion="8" />
<uses-permission android:name="android.permission.INTERNET" />
<uses-feature android:required="true" android:name="android.hardware.touchscreen.multitouch" />
</manifest>]]></manifestAdditions>
</android>
Also, Jan-F-W, thank you for your proposal,
I should explain something else:
The app is using "stagewebviewbridge" package that one can find here : stagewebviewbridge - Extend Adobe AIR StageWebView ( Desktop, iOS, Android ) - Google Project Hosting
We do not have access to the source code of that app, but we have to investigate the case and propose a solution otherwise the development company in charge will not make a single move.
So I created a sample application that loads a page on my machine and that displays the userAgent to check what engine is running.
(in that case, I can use a StageWebView directly if I want)
I can see that depending on the useNative boolean parameter of StageWebView I get a different userAgent, which is great.
BUT, I had a doubt on mobile, as stated by Adobe Documentation: This parameter is ignored on mobile.
In doubt, I checked on the mobile device, and in both base, the device "native" browser is used, not the Chrome set as "default".
Maybe my tests are not accurate enough? I'm not a flash developer, so I feel a bit lost there.
Thank you for your guidance.

Excel 2010 not using the default print settings

Currently got an issue with Excel 2010 not using the default print settings for a couple of users on our network,
basically when pressing cntrl P or selecting the print option from the file menu the printer settings are different to the print settings selected in the devices and printers menu, we have checked the print drivers etc but this has still not resolved the
issue, all other office programs are fine and also other users are reporting this issue more and more with different printers,
tried restarting print spooler service and re-installing office but this has come to no avail,
any ideas would be much appreciated!

Hi,
This issue occurs because the Page Setup settings that you specify in your file override the settings that you specify in the printer driver properties.
To work around this issue, do not specify the paper size, page orientation, or page margins in the printer driver properties. Instead, specify these settings in your workbook.
To specify these settings, follow these steps:
1.Start Excel, and then open the workbook you want to change.
2.In Microsoft Office Excel 2010, click the sheet that you want to print, and then click the Page Layout tab. In the Page Setup group, click Page Setup to open the Page Setup dialog box.
3.Click the Page tab.
4.Under Paper size, click the paper size that you want.
5. Click Options button and in Printing Shortcuts tab, in the Paper source area, perform one of the following steps: ◦If the printer can automatically select the correct paper tray to use, click Default tray in the First page list, and then click Default
tray in the Other pages list.
Default tray is the default setting in both of these lists.
◦If the printer cannot automatically select the correct paper tray to use, you may have to select the paper tray that contains the paper size that you selected in step 4.
To do this, click the appropriate paper tray in the First page list and in the Other pages list.
6.If you want to change the page orientation or its page margins, click the Finishing tab.
7.Select the options that you want.
8.Click OK.
9.Repeat steps 2 to 8 for each sheet of your workbook for which you want to specify settings.
Jaynet Zhang
TechNet Community Support

My hotmail, using Firefox is asking to use the default.aspx but accessing it using iexplore there is not problem

Trying to open my hotmail, Firefox is asking to use the default.aspx and once I have tried to save or downoladed always shows a message telling "... GWNju492.aspx.part could not be saved, because the source file could not be read. " but if I try to do the same thing using iexplore is working without any problem and I can read my email.

The Google Toolbar '''7.1.20110512W''' version works in Firefox 5.0 by using the Compatibility Reporter extension, I tried it myself due to the large number of postings about the GTB this morning. <br />
https://addons.mozilla.org/en-US/firefox/addon/add-on-compatibility-reporter/

Using the same Realm for passwd auth and ssl auth

Hi,
does someone can tell me if it's possible to use the same Realm to authenticate
some client with username,password and other client with certificates.In other
word can a same realm support 2 different authentication method
Thanks a lot
romain

Yes.
The AbstractListableRealm, which I assume you're extending,
has three methods:
authUserPassword :
checks passwords
authSSLCertificate :
is passed in the certificate verified by the SSL
handshake. The default implementation of this
method hands the certificate to the CertAuthenticator
(if there is one). The CertAuthenticator typically
uses one of the fields in the certificate to come up with
a user name (eg. the email address minus the @ stuff),
then verifies that there is a user with that name in
the realm. Since SSL verfied the certificate, this
method doesn't do any further checking. I think we
ship a SimpleCertAuthenticator sample that you can
look at.
authCertificates :
Like authSSLCertificates except that the certificate
came from someplace else. I'm not sure under what
conditions this is called.
Normally, the realm worries about the user/password
authentication then relies on the CertAuthenticator for
the certificate stuff. The CertAuthenticator maps the
certificate to a user name then goes to the realm to
make sure that there really is a user with that name.
-Tom
"romain" <[email protected]> wrote:
>
Hi,
does someone can tell me if it's possible to use the same Realm to authenticate
some client with username,password and other client with certificates.In
other
word can a same realm support 2 different authentication method
Thanks a lot
romain

Function of the default realm in security settings?

What is the function of the default realm in the security settings of the app server?
what is the effect of specifying "ldap" as the realm-name in the login-config in web.xml? When specifying ldap, but leaving the default realm on "file", ldap is not used. only when changing the default realm to ldap, ldap authentication is attempted.
Is there a way to debug the actual query that is being sent to the configured ldap server? when setting the log-level to finest, some information is provided, but not enough.
TIA
Peter

Hi Peter,
Specifying the realm name in the web.xml won't help. The user will be authenticated with whatever the default realm set in the AppServer. So here the realm specified in web.xml doesn't have any use.
If you want to use LDAP for your user authentication change the DefaultRealm to LDAP instead of File. Also configure the LDAPRealm properties to point to the correct directory server and directory name.
Maximum information will be logged when the LOG Level is set to FINEST and Audit is enabled in the Secuirty node of the appServer adminGUI, that will contain the default realm set and any security related activities logged.
Do the following to enabled the Maximum logging.
Open up the AdminGUI and goto the security node under the server1 instance.Click on the General tab on the right frame and set the log level to FINEST and check the Audit checkbox . Save, apply the changes and restart the AppServer .During the startup the log will show what is the default realm set.
While the application is running all the security messages will be logged.
Sankar

Using not default Realm in my apllication

Similar Messages

Maybe you are looking for