Using resource management in LSO (4.7)

Hi
For a very large danish customer we are setting up resource management in LSO(version 4.7). In doing that we have experienced a functional deficit:
If I create a course with max. capacity of 4 persons and link a 4 diff. resources each with max capacity of 1 person (ex. 4 single bedrooms for a two-day seminar) then the first allocated single room overrules the course capacity of 4. So after booking one person to the course, no more can be booked due to the max of 1 person pr. resource.
Has anyone out there experienced the same kind of limit in std. SAP? If so I will very much like to hear from you.
Thank you in advance.
Kind regards
HanneHH

hi
check this article , may be this could help you in some regard or give some idea
I guess you have to go with the remote portal conneting CE 7.1 with EP 7.0 ,
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/3095f14c-29c5-2b10-f69e-edcb6f0f1367
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/80891da2-6c90-2a10-8d89-e7b36c9b6a8f

Similar Messages

Preparing to use resource manager

Hi, we would like to use resource manager to help manage resources on the database server. We currently do not have grid control running in this environment which is 10g rac on unix.
I was looking for suggestions on the best method to understand current resource usage by session on the database server. I have looked at awr reports but I do not see the data I would need to decide how I would configure resource groups and what limits I should put on them.
Is there a best practice method for collecting data to help in designing an affective resource manager configuration? Maybe some collection scripts?
I know this is probably vague.
Thanks.

Two quick ways to do this. In finder pick your Macbooks Icon for the drive. Then right click and choose get info. This will bring up a window and you will see the capacity , how much is available, and how much is used.
The other way is to click the Apple in the upper left corner and choose *About This Mac* A window will open. Now look under Hardware and choose Serial-ATA You will then see something like this as you scroll the info window.
Capacity: 297.77 GB
Available: 179.58 GB
Writable: Yes
File System: Journaled HFS+

How to configure ex90 for use with polycom resource manager GAB

My customer has a Polycom infrastructure, including using Resource Manager for the GAB server. I also have several Cisco endpoints deployed (EX90 and C40) and I need to get these units configured to use the GAB. Polycom documentation sucks and only says:
1. At the endpoint, enter the information required for directory set up including the Polycom Global Address Book/RealPresence Resource Manager system IP address and the path.
For example, http://<RPRM_IP_ADDRESS>/TMS/Public/external/phonebook/PhoneBookService.asmx.
To do this on Cisco endpoints, go to System Configuration> Phone Book Server.
2. Wait for the connections to take effect
When I go to the EX90 phone book server setup page, I only have ID, Type and URL fields. The type field has a drop down that only has Cisco options available (VCS, TMS, Callway and CUCM)
No matter what combination I use, I haven't been able to get the EX90 to pickup the Polycom directory.
Any suggestions? Thanks

What happens when you try that URL (http://<RPRM_IP_ADDRESS>/TMS/Public/external/phonebook/PhoneBookService.asmx) from a Web Browser - do you see anything, or get an error?
You'll need to make sure that's accessible first before trying to configure your endpoints to use it.

USER PROFILE OR RESOURCE MANAGER

If we want to use Resource Manager to control the usage of system resources, and the DB users are already assigned profiles that limits the resource usage, so in this case which one (Resource Manager settings OR User Profile) will be used?

Use the APIs to check if the user is enabled or disabled?
As the disable event usually cascades there shouldn't be any issues with race conditions.
Best regards
/Martin

Resource manager experts, kindly advise!

Hi All,
Currently our database server (with 8 CPUS) is having 2 database 'A' and 'B'. Database 'A' has no problem as it's a small instance with not much users. However, for database 'B', the online users encounter slowness frequently as some reports are generating at that time as well. As such, we would like to limit reporting schema to 20% of the CPU, online users 60% and the remaining 20% to the rest of the schemas.
However for our case, since there are 2 databases in the server, using resource manager ALONE for database 'B' won't helps right? As 2 databases are sharing the 8 CPU, we are unsure how will resource manager work in this case in percentage allocation since only the problem database will be using resource manager adding up 100% of CPU Allocation.
Anything needed to be configured in OS level? Kindly advise as i do not have much system admin exposure.
OS: AIX 5.3
DB 10.2.0.3
thanks

This is probably a conversation you want to have with your AIX admins. Any high end Unix is going to have some ability to partition the system to prevent one user's processes from overwhelming the system. But these tools may require additional licensing, may require substantial configuration, may require changes to your Oracle setup (i.e. the two databases may need to be in different homes owned by different users), etc. The AIX folks would be the ones to have this conversation with.
A 30-second Google search turns up [this discussion of partition load manager in AIX|http://publib.boulder.ibm.com/infocenter/systems/index.jsp?topic=/iphat/iphbkconfigureplm.htm] that seems like it may be what you want.
Justin

How could i use resource bundle in managed bean instead of harding coding?

component is created in managed bean programmatically, so how to set attributes(e.g. text, value) using resource bundling instead of hard coding, as like coding on the page directlly?
Thanks for your help!
Kevin.

component is created in managed bean programmatically, so how to set attributes(e.g. text, value) using resource bundling instead of hard coding, as like coding on the page directlly?
Thanks for your help!
Kevin.

CPU used under Resource Manager.

Hi,
in 10g R2, I have created a Plan for DBMS resource manager :
EXEC DBMS_RESOURCE_MANAGER.CREATE_PENDING_AREA();
EXEC DBMS_RESOURCE_MANAGER.CREATE_SIMPLE_PLAN(SIMPLE_PLAN => 'simple_plan1',CONSUMER_GROUP1 => 'mygroup1', GROUP1_CPU => 80,CONSUMER_GROUP2 => 'mygroup2', GROUP2_CPU => 20);
ALTER SYSTEM SET RESOURCE_MANAGER_PLAN ='simple_plan1';
EXEC DBMS_RESOURCE_MANAGER.SWITCH_CONSUMER_GROUP_FOR_USER ('SCOTT', 'MYGROUP2');
EXEC DBMS_RESOURCE_MANAGER_PRIVS.GRANT_SWITCH_CONSUMER_GROUP ('SCOTT', 'MYGROUP2', TRUE);
EXEC DBMS_RESOURCE_MANAGER.SUBMIT_PENDING_AREA;
EXEC DBMS_RESOURCE_MANAGER.CLEAR_PENDING_AREA;Now SCOTT runs the following ( exemple from 24 Using the Database Resource Manager) :
DECLARE
m NUMBER;
BEGIN
FOR i IN 1..100000 LOOP
FOR j IN 1..100000 LOOP
* The following query does a cartesian product without
* a predicate and takes up significant CPU time.
select count(*) into m from v$sysstat, v$system_event;
END LOOP;
END LOOP;
END;
END;
/And CPU comsumption goes up to 100%. Why ? According to his consummer group shouldn't he just have 20% of CPU ?
Any explanation ?
Thank you.

Thanks to all.
Ok, we will run the same script by SYS to have CPU load to 100%. Then SCOTT will run that script. How much CPU will he have ? And where can I see it ?
And of course , SCOTT is just waiting :
SQL> SELECT se.sid sess_id, co.name consumer_group,
2   se.state, se.consumed_cpu_time cpu_time, se.cpu_wait_time, se.queued_time
3   FROM v$rsrc_session_info se, v$rsrc_consumer_group co
4   WHERE se.current_consumer_group_id = co.id
5 and sid=137;
   SESS_ID CONSUMER_GROUP                   STATE
CPU_TIME CPU_WAIT_TIME QUEUED_TIME
       137 MYGROUP2                         WAITING FOR CPU
   3473688     130618354           0I created another user for MYGROUP1 and he runs the same script, now both are waiting :
SQL> SELECT se.sid sess_id, co.name consumer_group,
2   se.state FROM v$rsrc_session_info se, v$rsrc_consumer_group co
3   WHERE se.current_consumer_group_id = co.id
4 and sid=108;
   SESS_ID CONSUMER_GROUP                   STATE
       108 MYGROUP1                         WAITING FOR CPU
SQL> SELECT se.sid sess_id, co.name consumer_group,
2   se.state FROM v$rsrc_session_info se, v$rsrc_consumer_group co
3   WHERE se.current_consumer_group_id = co.id
4 and sid=137;
   SESS_ID CONSUMER_GROUP                   STATE
       137 MYGROUP2                         WAITING FOR CPU

Apps use of Resource Manager

We have a client that would like to limit system resources utilized within the Apps (11.5.10.2) so that a group of users does not run a request that brings the system to a standstill. I know that the individual request should be setup to minimize this possibility, but I'm wondering if the database Resource Manager can be utilized to limit resource for users in Apps?
Thanks,
Brian

You are supposed to be able to use the Database Resource Manager Integration for this, page 69 of Ahmed Alomari's Open World talk. When configured, set the FND: Resource Consumer Group profile option for certain responsibilities or users.
Database Resource Manager Integration
• Define Resource Consumer Groups and associate specific concurrent programs with a resource group.
• Allows an administrator to constrain the amount of CPU resources used by a concurrent program.
• Resource Groups can also be defined for online users and concurrent requests using the profile:
• "FND: Resource Consumer Group".
• Useful for Discoverer users or ad-hoc reporting users.
Tuning Oracle E-Business Suite
http://www28.cplan.com/cbo_export/PS_S281393_281393_139-1_FIN_v1.pdf
Session Abstract:
This presentation offers tips and techniques on tuning all the layers of the Oracle E-Business Suite stack, including the suite's various tiers, namely, the data server and the middle-tier services, such as Oracle Forms, Oracle's concurrent managers, Apache JServ, Oracle Java virtual machine, and Oracle Discoverer. The presentation also covers applications-level-tuning solutions, such as Oracle Workflow, Oracle Order Management, and Oracle Payroll.
Speakers: Ahmed Alomari, Oracle
Username: cboracle
Password: oraclec6

Over of using Database Resource Manager

Hi All,
I am currently, doing a research on Database Resource Manager for implementing it in one of the Warehouse project database. Before, implementing it I would like to know few things. My Question is:
Q. Does using Database Resource Manager cause any overhead? Any extra background process? any extra CPU Usage overhead? Any resource cost of using Database Resource Manager? Does it have any impact on resources and does it impact performance of the database?

Hi Madrid,
Thank you for your reply. Currently, we are looking into to implement Resource Manager in a dataware house environment because there are some ad-hoc users who execute really bad queries which puts lot of load on the database server which in turn slows down the performance. And there are few other reasons too. I not the primary for that environment though. This Resource Manager came up we thought that it might help us in controlling the ad-hoc users bad queries and also the environment.
I have one more question in regards to resource manager. I have written a shell script which generates a report for stats of a resource plan from V$RSRC_CONSUMER_GROUP - which has stats data. But my concern is it stores historical stats too. For example, I have implemented resource manager and ran some queries and generated report and terminated all the sessions.
Next day when I again run some queries and generate a report it gives stats combined with previous days stats. Is there any solution for this? So, that I can generate a report for stats at a point of time. For OEM I can reset the stats and get most current stats but this is not the case with the view I mentioned above. Please let me know if there is any other alternative for this. Hope you got my question.

I need to inventory software on my corporate Macs. What software can I use? If it includes Antivirus, and other corporate resource management tools, that woudl be a plus.

I need to inventory software on my corporate Macs. What software can I use? If it includes Antivirus, and other corporate resource management tools, that woudl be a plus.
I have 50-60 Mac OSX devices on my corporate network. I woudl like to install an "agent" on them that would allow me to report on how many have X copies of this or that software.
I also need a corporate Antivirus solution.
For PC, we have used things like MAAS360, Kaseya, Dell eSmart, etc....
What is a comparable Apple product for small business?

Scott if you are trying to install the Adobe Creative applications included with your Creative Cloud Membership then please see Install and update apps - https://helpx.adobe.com/creative-cloud/help/install-apps.html.

How to use quota on a desktop folder for all users with File Server Resource Manager.

Hi there,
I'd like to know if there is a posibility to use variables in the path with File Server Resource Manager if you want to set the quota.
The path I'd like to use is d:\home\%username%\desktop.
Like to hear from you all if there is a solution or workaround for this one :)
Thanks for your time.
Ben.
Ben van der Meer

That's a question about Automator, so I'd pop that one here
http://discussions.apple.com/forum.jspa?forumID=1339
Regards
TD

Lso resource managment

hallow experts ,
i need <b>frinedly</b> solotion to the
resource managment for sap lso.
did some one now ,
it will be halfull
regards

Hi Antonio,
What is it that you want to know exactly?
Regards,
Neha

Unable to add File Server Resource Manager Tools on Windows Server 2012 - Errors on restart and roll back install

Unable to install Windows Server 2012 Feature - [Tools] File Server Resource Manager Tools.
Installs, however when I restart the server error messages appears saying feature unable to install, windows reverting changes.
In the Setup event logs have the following information message "Update FSRM-Infrastructure of package FSRM-All failed to be turned on. Status: 0x800f0922"
Does anyone have any idea's on why this Feature can not be installed ??
Scott

Hi Shaun
Tried both of your suggestions, however neither strategy worked.
Strategy 1
Tried installing via powershell - "install-windowsfeature -name fs-resource-manager -includemanagementtools"
Feature un-installed itself during the restart.
Attempted to use the command "DISM /online /remove-feature /featurename:FSRM-Infrastructure-Services". However
this did work because one the Service was'nt installed or two because there was no command option for "/remove-feature"
PACKAGE SERVICING COMMANDS:
/Add-Package - Adds packages to the image.
/Remove-Package - Removes packages from the image.
/Enable-Feature - Enables a specific feature in the image.
/Disable-Feature - Disables a specific feature in the image.
/Get-Packages - Displays information about all packages in the image.
/Get-PackageInfo - Displays information about a specific package.
/Get-Features - Displays information about all features in a package.
/Get-FeatureInfo - Displays information about a specific feature.
/Cleanup-Image - Performs cleanup and recovery operations on the image.
Strategy 2
Tried installing via powershell, using the following command DISM
/online /enable-feature /featurename:FSRM-Infrastructure-Services, however got the same result, the install backed out during the restart.
All up back to where I started?

File Server Resource Manager 2012 - Fails to generate storage report - Event ID: 8242 and 602

Installed file server resource manager roll on new 2012 file server.   When I attempt to run a dup report on the local volume, I received an error message: "the report generation task failed with the following errors: Error generating report
job with task name". "
Event ID 8242 and 602 are logged in the event viewer.
Log Name:      Application
Source:        SRMSVC
Date:          6/24/2013 11:11:03 AM
Event ID:      8242
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      xxxxxxxxxxxxxxxxx
Description:
Reporting or classification consumer '' has failed.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="SRMSVC" />
    <EventID Qualifiers="32772">8242</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2013-06-24T16:11:03.000000000Z" />
    <EventRecordID>1276</EventRecordID>
    <Channel>Application</Channel>
    <Computer>xxxxxxxxxx</Computer>
    <Security />
</System>
<EventData>
    <Data>
    </Data>
    <Data>
Error-specific details:
   Error: (0x80131501) Unknown error</Data>
    <Binary>2D20436F64653A20434E534D4D4F444330303030303234332D2043616C6C3A20434E534D4D4F444330303030303231322D205049443A202030303030333036302D205449443A202030303030333734382D20434D443A2020433A5C57696E646F77735C73797374656D33325C73726D686F73742E657865202D20557365723A204E616D653A204E5420415554484F524954595C53595354454D2C205349443A532D312D352D313820</Binary>
</EventData>
</Event>
Log Name:      Application
Source:        SRMREPORTS
Date:          6/24/2013 11:11:03 AM
Event ID:      602
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      xxxxxxxxxxxxxxxxxxxx
Description:
Error generating report job with the task name ''.
Context:
- Exception encountered = System error.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="SRMREPORTS" />
    <EventID Qualifiers="0">602</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2013-06-24T16:11:03.000000000Z" />
    <EventRecordID>1277</EventRecordID>
    <Channel>Application</Channel>
    <Computer>xxxxxx</Computer>
    <Security />
</System>
<EventData>
    <Data>Error generating report job with the task name ''.
Context:
- Exception encountered = System error.
</Data>
</EventData>
</Event>
When I click on schedule a new report task, I get an error "Class not registered".
nada

Hi,
When we schedule a new job, we add a scheduled task to the c:\windows\tasks folder.
The scheduled task will contain the following command line
"c:\WINDOWS\system32\storrept.exe reports generate /scheduled /Task:"FSRM_Report_Task{GUID.......}"
There is also a folder on the system drive
C:\StorageReports\Scheduled
We Also store information in the system volume information folder in the following files:
c:\system Volume Information\SRM\Settings\ReportSettings.xml (we use .old and .alt extentions}
c:\system Volume Information\SRM\reports\reportX.xml (where X = an incrementing number set, in writing to these files, we also use .old and .alt extentions}
When experiencing issues relating to scheduled report jobs, you will want to examine these files and check for NTFS permissions issues on these locations also.
Make sure you check the volume that you will be running the report on.
TechNet Subscriber Support in forum |If you have any feedback on our support, please contact [email protected]

Using container managed form-based security in JSF

h1. Using container managed, form-based security in a JSF web app.
A Practical Solution
h2. {color:#993300}*But first, some background on the problem*{color}
The Form components available in JSF will not let you specify the target action, everything is a post-back. When using container security, however, you have to specifically submit to the magic action j_security_check to trigger authentication. This means that the only way to do this in a JSF page is to use an HTML form tag enclosed in verbatim tags. This has the side effect that the post is not handled by JSF at all meaning you can't take advantage of normal JSF functionality such as validators, plus you have a horrible chimera of a page containing both markup and components. This screws up things like skinning. ([credit to Duncan Mills in this 2 years old article|http://groundside.com/blog/DuncanMills.php?title=j2ee_security_a_jsf_based_login_form&more=1&c=1&tb=1&pb=1]).
In this solution, I will use a pure JSF page as the login page that the end user interacts with. This page will simply gather the input for the username and password and pass that on to a plain old jsp proxy to do the actual submit. This will avoid the whole problem of having to use verbatim tags or a mixture of JSF and JSP in the user view.
h2. {color:#993300}*Step 1: Configure the Security Realm in the Web App Container*{color}
What is a container? A container is basically a security framework that is implemented directly by whatever app server you are running, in my case Glassfish v2ur2 that comes with Netbeans 6.1. Your container can have multiple security realms. Each realm manages a definition of the security "*principles*" that are defined to interact with your application. A security principle is basically just a user of the system that is defined by three fields:
- Username
- Group
- Password
The security realm can be set up to authenticate using a simple file, or through JDBC, or LDAP, and more. In my case, I am using a "file" based realm. The users are statically defined directly through the app server interface. Here's how to do it (on Glassfish):
1. Start up your app server and log into the admin interface (http://localhost:4848)
2. Drill down into Configuration > Security > Realms.
3. Here you will see the default realms defined on the server. Drill down into the file realm.
4. There is no need to change any of the default settings. Click the Manage Users button.
5. Create a new user by entering username/password.
Note: If you enter a group name then you will be able to define permissions based on group in your app, which is much more usefull in a real app.
I entered a group named "Users" since my app will only have one set of permissions and all users should be authenticated and treated the same.
That way I will be able to set permissions to resources for the "Users" group that will apply to all users that have this group assigned.
TIP: After you get everything working, you can hook it all up to JDBC instead of "file" so that you can manage your users in a database.
h2. {color:#993300}*Step 2: Create the project*{color}
Since I'm a newbie to JSF, I am using Netbeans 6.1 so that I can play around with all of the fancy Visual Web JavaServer Faces components and the visual designer.
1. Start by creating a new Visual Web JSF project.
2. Next, create a new subfolder under your web root called "secure". This is the folder that we will define a Security Constraint for in a later step, so that any user trying to access any page in this folder will be redirected to a login page to sign in, if they haven't already.
h2. {color:#993300}*Step 3: Create the JSF and JSP files*{color}
In my very simple project I have 3 pages set up. Create the following files using the default templates in Netbeans 6.1:
1. login.jsp (A Visual Web JSF file)
2. loginproxy.jspx (A plain JSPX file)
3. secure/securepage.jsp (A Visual Web JSF file... Note that it is in the sub-folder named secure)
Code follows for each of the files:
h3. {color:#ff6600}*First we need to add a navigation rule to faces-config.xml:*{color}
    <navigation-rule>
<from-view-id>/login.jsp</from-view-id>
        <navigation-case>
<from-outcome>loginproxy</from-outcome>
<to-view-id>/loginproxy.jspx</to-view-id>
        </navigation-case>
    </navigation-rule>
NOTE: This navigation rule simply forwards the request to loginproxy.jspx whenever the user clicks the submit button. The button1_action() method below returns the "loginproxy" case to make this happen.
h3. {color:#ff6600}*login.jsp -- A very simple Visual Web JSF file with two input fields and a button:*{color}
<?xml version="1.0" encoding="UTF-8"?>
<jsp:root version="2.1"
xmlns:f="http://java.sun.com/jsf/core"
xmlns:h="http://java.sun.com/jsf/html"
xmlns:jsp="http://java.sun.com/JSP/Page"
xmlns:webuijsf="http://www.sun.com/webui/webuijsf">
    <jsp:directive.page
contentType="text/html;charset=UTF-8"
pageEncoding="UTF-8"/>
    <f:view>
        <webuijsf:page
id="page1">
<webuijsf:html id="html1">
<webuijsf:head id="head1">
<webuijsf:link id="link1"
url="/resources/stylesheet.css"/>
</webuijsf:head>
<webuijsf:body id="body1" style="-rave-layout: grid">
<webuijsf:form id="form1">
<webuijsf:textField binding="#{login.username}"
id="username" style="position: absolute; left: 216px; top:
96px"/>
<webuijsf:passwordField binding="#{login.password}" id="password"
style="left: 216px; top: 144px; position: absolute"/>
<webuijsf:button actionExpression="#{login.button1_action}"
id="button1" style="position: absolute; left: 216px; top:
216px" text="GO"/>
</webuijsf:form>
</webuijsf:body>
</webuijsf:html>
        </webuijsf:page>
    </f:view>
</jsp:root>h3. *login.java -- implent the
button1_action() method in the login.java backing bean*
    public String button1_action() {
        setValue("#{requestScope.username}",
(String)username.getValue());
setValue("#{requestScope.password}", (String)password.getValue());
        return "loginproxy";
    }h3. {color:#ff6600}*loginproxy.jspx -- a login proxy that the user never sees. The onload="document.forms[0].submit()" automatically submits the form as soon as it is rendered in the browser.*{color}
{code}
<?xml version="1.0" encoding="UTF-8"?>
<jsp:root xmlns:jsp="http://java.sun.com/JSP/Page"
version="2.0">
<jsp:output omit-xml-declaration="true" doctype-root-element="HTML"
doctype-system="http://www.w3.org/TR/html4/loose.dtd"
doctype-public="-W3CDTD HTML 4.01 Transitional//EN"/>
<jsp:directive.page contentType="text/html"
pageEncoding="UTF-8"/>
<html>
<head> <meta
http-equiv="Content-Type" content="text/html;
charset=UTF-8"/>
<title>Logging in...</title>
</head>
<body
onload="document.forms[0].submit()">
<form
action="j_security_check" method="POST">
<input type="hidden" name="j_username"
value="${requestScope.username}" />
<input type="hidden" name="j_password"
value="${requestScope.password}" />
</form>
</body>
</html>
</jsp:root>
{code}
h3. {color:#ff6600}*secure/securepage.jsp -- A simple JSF{color}
target page, placed in the secure folder to test access*
{code}
<?xml version="1.0" encoding="UTF-8"?>
<jsp:root version="2.1"
xmlns:f="http://java.sun.com/jsf/core"
xmlns:h="http://java.sun.com/jsf/html"
xmlns:jsp="http://java.sun.com/JSP/Page" xmlns:webuijsf="http://www.sun.com/webui/webuijsf">
<jsp:directive.page
contentType="text/html;charset=UTF-8"
pageEncoding="UTF-8"/>
<f:view>
<webuijsf:page
id="page1">
<webuijsf:html id="html1">
<webuijsf:head id="head1">
<webuijsf:link id="link1"
url="/resources/stylesheet.css"/>
</webuijsf:head>
<webuijsf:body id="body1" style="-rave-layout: grid">
<webuijsf:form id="form1">
<webuijsf:staticText id="staticText1" style="position:
absolute; left: 168px; top: 144px" text="A Secure Page"/>
</webuijsf:form>
</webuijsf:body>
</webuijsf:html>
</webuijsf:page>
</f:view>
</jsp:root>
{code}
h2. {color:#993300}*_Step 4: Configure Declarative Security_*{color}
This type of security is called +declarative+ because it is not configured programatically. It is configured by declaring all of the relevant parameters in the configuration files: *web.xml* and *sun-web.xml*. Once you have it configured, the container (application server and java framework) already have the implementation to make everything work for you.
*web.xml will be used to define:*
- Type of security - We will be using "form based". The loginpage.jsp we created will be set as both the login and error page.
- Security Roles - The security role defined here will be mapped (in sun-web.xml) to users or groups.
- Security Constraints - A security constraint defines the resource(s) that is being secured, and which Roles are able to authenticate to them.
*sun-web.xml will be used to define:*
- This is where you map a Role to the Users or Groups that are allowed to use it.
+I know this is confusing the first time, but basically it works like this:+
*Security Constraint for a URL* -> mapped to -> *Role* -> mapped to -> *Users & Groups*
h3. {color:#ff6600}*web.xml -- here's the relevant section:*{color}
{code}
<security-constraint>
<display-name>SecurityConstraint</display-name>
<web-resource-collection>
<web-resource-name>SecurePages</web-resource-name>
<description/>
<url-pattern>/faces/secure/*</url-pattern>
<http-method>GET</http-method>
<http-method>POST</http-method>
<http-method>HEAD</http-method>
<http-method>PUT</http-method>
<http-method>OPTIONS</http-method>
<http-method>TRACE</http-method>
<http-method>DELETE</http-method>
</web-resource-collection>
<auth-constraint>
<description/>
<role-name>User</role-name>
</auth-constraint>
</security-constraint>
<login-config>
<auth-method>FORM</auth-method>
<realm-name/>
<form-login-config>
<form-login-page>/faces/login.jsp</form-login-page>
<form-error-page>/faces/login.jsp</form-error-page>
</form-login-config>
</login-config>
<security-role>
<description/>
<role-name>User</role-name>
</security-role>
{code}
h3. {color:#ff6600}*sun-web.xml -- here's the relevant section:*{color}
{code}
<security-role-mapping>
<role-name>User</role-name>
<group-name>Users</group-name>
</security-role-mapping>
{code}
h3. {color:#ff6600}*Almost done!!!*{color}
h2. {color:#993300}*_Step 5: A couple of minor "Gotcha's"_ *{color}
h3. {color:#ff6600}*_Gotcha #1_*{color}
You need to configure the "welcome page" in web.xml to point to faces/secure/securepage.jsp ... Note that there is *_no_* leading / ... If you put a / in there it will barf all over itself .
h3. {color:#ff6600}*_Gotcha #2_*{color}
Note that we set the <form-login-page> in web.xml to /faces/login.jsp ... Note the leading / ... This time, you NEED the leading slash, or the server will gag.
*DONE!!!*
h2. {color:#993300}*_Here's how it works:_*{color}
1. The user requests the a page from your context (http://localhost/MyLogin/)
2. The servlet forwards the request to the welcome page: faces/secure/securepage.jsp
3. faces/secure/securepage.jsp has a security constraint defined, so the servlet checks to see if the user is authenticated for the session.
4. Of course the user is not authenticated since this is the first request, so the servlet forwards the request to the login page we configured in web.xml (/faces/login.jsp).
5. The user enters username and password and clicks a button to submit.
6. The button's action method stores away the username and password in the request scope.
7. The button returns "loginproxy" navigation case which tells the navigation handler to forward the request to loginproxy.jspx
8. loginproxy.jspx renders a blank page to the user which has hidden username and password fields.
9. The hidden username and password fields grab the username and password variables from the request scope.
10. The loginproxy page is automatically submitted with the magic action "j_security_check"
11. j_security_check notifies the container that authentication needs to be intercepted and handled.
12. The container authenticates the user credentials.
13. If the credentials fail, the container forwards the request to the login.jsp page.
14. If the credentials pass, the container forwards the request to *+the last protected resource that was attempted.+*
+Note the last point! I don't know how, but no matter how many times you fail authentication, the container remembers the last page that triggered authentication and once you finally succeed the container forwards your request there!!!!+
+The user is now at the secure welcome page.+
If you have read this far, I thank you for your time, and I seriously question your ability to ration your time pragmatically.
Kerry Randolph

If you want login security on your web app, this is one way to do it. (the easiest way i have seen).
This method allows you to create a custom login form and error page using JSF.
The container handles the actual authentication and protection of the resources based on what you declare in web.xml and sun-web.xml.
This example uses a statically defined user/password, stored in a file, but you can also configure JDBC realm in Glassfish, so that that users can register for access and your program can store the username/passwrod in a database.
I'm new to programming, so none of this may be a good practice, or may not be secure at all.
I really don't know what I'm doing, but I'm learning, and this has been the easiest way that I have found to add authentication to a web app, without having to write the login modules yourself.
Another benefit, and I think this is key ***You don't have to include any extra code in the pages that you want to protect*** The container manages this for you, based on the constraints you declare in web.xml.
So basically you set it up to protect certain folders, then when any user tries to access pages in that folder, they are required to authenticate.
--Kerry

Using resource management in LSO (4.7)

Similar Messages

Maybe you are looking for