Using username and password used in UME

Hi
    i have used UME to authenticate the user and now i want to do as follows.
    call a web service and if that logged in user has right to access that web service he will get the result else he will not.
   right now i have hard coded the a user to call the web service and every one who has logged in can see every thing i don't want such things now.
so please give me suggestion for this
Thanks in advance

Hi nk,
In case you are using WS-over-EJB you can try to implement something like described in this <a href="http://help.sap.com/saphelp_nw04/helpdata/en/21/f8424089ff2571e10000000a155106/frameset.htm">tutorial</a>.
If you need user cridentials, check
Get the current client-user password
Reading User Logon and Password on Web Dynpro Application
retrieving password.........
Best regards, Maksim Rashchynski.

Similar Messages

How to automlog into webside using username and password using java program

I am trying to log in to a website using password and username. What libraries i can use. I searched online and came to know that i can use Apache's commons HttpClient library to do that. I am new to this please let me know what can i use.
For starting purpose i wrote this code:
public static void main(String[] args) throws URIException {
     try {
          HttpClient client = new HttpClient();
          GetMethod method = new GetMethod("http://www.google.com");
               int returnCode = client.executeMethod(method);
               System.err.println(method.getResponseBodyAsString());
          method.releaseConnection();
          } catch (HttpException e) {
               e.printStackTrace();
          } catch (IOException e) {
               e.printStackTrace();
but this is giving me an error. please see below,
java.net.UnknownHostException: www.google.com
     at java.net.AbstractPlainSocketImpl.connect(Unknown Source)
     at java.net.PlainSocketImpl.connect(Unknown Source)
     at java.net.SocksSocketImpl.connect(Unknown Source)
     at java.net.Socket.connect(Unknown Source)
     at java.net.Socket.connect(Unknown Source)
     at java.net.Socket.<init>(Unknown Source)
     at java.net.Socket.<init>(Unknown Source)
     at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80)
     at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122)
     at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707)
     at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:387)
     at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:171)
     at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397)
     at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:323)
     at com.verizon.zoeott.ingest.PropertyFileReader.main(PropertyFileReader.java:48)
Another thing is that we use proxy to get internet connection. In internet explorer-->internet options-->LAN Settings-->using automatic configuration script to connect to the internet.
I don't know how to configure this into java program. please help.
Thanks,
amol
Edited by: 877846 on Jan 20, 2012 9:16 AM
Edited by: 877846 on Jan 20, 2012 9:21 AM

Also please let me know about how to connect internet through proxy server.As I said above, if you are using the Apache HTTP client, no we can't, as this is not an Apache forum. I also told you where to find that answer.
If on the other hand you don't want to use that client any more, setting the system properties http.proxyHost and http.proxyPort will do it for java.net.HttpURLConnection. See the Java Custom Networking tutorial for examples.

How to pass Username and password using Invoke to a webservice

Hi Guys,
Please tell me how can I pass Username and password using Invoke to a webservice, I am using SOA 11G.
Thanks
Yatan

Hi Yatan
I suppose you want to use basic HTTP authentication.
Try to lookup in the SOA docs this property
oracle/wss_http_token_client_policy
http://download.oracle.com/docs/cd/E17904_01/web.1111/b32511/configuring.htm#WSSEC2261
Regards
Mihai

Write code for authentication of username and password using struts

write code for authentication of username and password using session using struts with jdbc connection..

write code for authentication of username and
password using session using struts with jdbc
connection..and please, allow me to spoon feed you!

OSB Authentication using username and password (plaintext or digest)

Hi,
I want to implement a simple osb authentication using username/password (plain text or digest) , so that client required to provide username password token in soap header (message Level security) to access our webservices. I have read some of articles which shows how to create custom ws policy, but received following error during deployment.
weblogic.wsee.ws.init.WsDeploymentException: The WebLogic Server 9.x-style policy is not supported in JAX-WS web services
Please note - I can not install OWSM as part of my requirement
=======
<?xml version="1.0"?>

<wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy"
xmlns:wssp="http://www.bea.com/wls90/security/policy"
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
xmlns:wls="http://www.bea.com/wls90/security/policy/wsee#part">

<wssp:Identity>
<wssp:SupportedTokens>

<wssp:SecurityToken IncludeInMessage="true"
TokenType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#UsernameToken">
<wssp:UsePassword Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest"/>
</wssp:SecurityToken>
</wssp:SupportedTokens>
</wssp:Identity>
</wsp:Policy>

You can use the default Auth.xml WS policy in OSB and be able implement the authentication using username and plain text password.
Just assign the Auth.xml on the Request Policies of the Proxy Service (under Policies).
Then use any user credentials that has access to the domain for testing.
If you want to restrict access for each operation then in the Security tab, under Message Access Control, specify a Role.
Then in the OSB > Security Configuration, create the appropriate role with the specific role conditions like User is User1 or User is User2 etc ...
Hope this helps.
Thanks,
Patrick

Avoid using Username and password in SOAP Envelope

Hi Team
I am working on calling the sercured web-service from PLSQL and able to call it successfully and get the response.
In the SOAP envelope, I have header and body.
Header contains the WS Security which includes username and password to authenticate the web-service and body contains the actual input pay load for service.
Currently, header has username and password as 'hard-coded', is there a way to avoid the usage of username and password.
We already tried to SIF for EBS methodology where in following steps are done:
1) Create and event in EBS.
2) Pass the event along with payload to SOA.
3) SOA receives the event and triggers web-service and gets the response.
4) Pass the response to EBS.
This technique does avoid usage of username and password but takes 20 seconds to do the job. However, the appraoch above takes hardly 1 second.
Please let me know in case any one has any idea on how to avoid credentials usage in SOAP envelope.
Thanks
Mirza Tanzeel

How about doing away with that approach entirely?
Password authentication requires one to keep a secret, secret. And that is the primary problem as how does one safely guard the secret, and manage the secret (by regularly changing)?
Relying on secrets is a problem. I have never been a fan of password based security.
Instead:
a) use HTTPS to secure communication between sender and receiver
b) use robust firewall rules to ensure that only sender is allowed to communicate with receiver
c) implement sound network management and exception reporting (to detect and prevent violations on network infrastructure level)
If you lack in the network infrastructure and administration areas, then:
a) make the web service endpoint on server on localhost only (do not expose it to the outside world)
b) establish a trusted ssh connection between sender and receiver using strongly encrypted RSA/DSA keys
c) configure sender with a service that opens a reverse tunnel to target, exposing the web service as a local port on its localhost

How to configure JMS-Server to use username and password

Hi
Maybe this is a real stupid question, but please help me, I'm not very experienced using JMS:
I'm using JMS (provided by OC4J / Application Server 10.1.3). I configured a ConnectionFactory (without username and password) and a Queue and there is also a application, which successfully opens the JMS-Connections.
This works well as long as I do not provide a username und password in the ConnectionFactory (EnterpriseManager: OC4J/Admin/Services/JMS-provider...). If I do this, my application terminates with the following stacktrace:
javax.jms.JMSSecurityException: JMSServer[aplora2:12602]: failed to authenticate "myuser/mypassword", no such user.
     at com.evermind.server.jms.JMSUtils.make(JMSUtils.java:1034)
     at com.evermind.server.jms.JMSUtils.toJMSSecurityException(JMSUtils.java:1090)
     at com.evermind.server.jms.JMSServer.getJMSServer(JMSServer.java:1237)
     at com.evermind.server.jms.JMSServer.getJMSServer(JMSServer.java:1213)
     at com.evermind.server.jms.InContainerProxy.getJMSServer(InContainerProxy.java:93)
     at com.evermind.server.jms.EvermindConnection.<init>(EvermindConnection.java:103)
     at com.evermind.server.jms.EvermindQueueConnection.<init>(EvermindQueueConnection.java:62)
     at com.evermind.server.jms.EvermindQueueConnectionFactory.unprivileged_createQueueConnection(EvermindQueueConnectionFactory.java:98)
     at com.evermind.server.jms.EvermindQueueConnectionFactory.access$000(EvermindQueueConnectionFactory.java:42)
     at com.evermind.server.jms.EvermindQueueConnectionFactory$1.execute(EvermindQueueConnectionFactory.java:78)
     at com.evermind.server.jms.InContainerProxy.doSecureOp(InContainerProxy.java:157)
     at com.evermind.server.jms.EvermindQueueConnectionFactory.createQueueConnection(EvermindQueueConnectionFactory.java:75)
     at com.evermind.server.jms.EvermindQueueConnectionFactory.createQueueConnection(EvermindQueueConnectionFactory.java:66)
     at sam.model.messages.MessageManager.<init>(MessageManager.java:74)
where "myuser" and "mypassword" are the username and password I entered in the ConnectionFactory. (My Application certainly uses the same username and password)
I expected, that by entering username and password here I would configure my Queue to be protected by them. But obviously there are some very basic things I didn't understand. Can anyone give me a hint, how I can protect the (OC4J-) JMS-Server or the Queue by username and password?
Thanks for your help
Frank Brandstetter

Hey Frank -
Assuming you've set up users in the "Security Manager" for your application, you can specify what JNDI resources they can "read" (and thus also connect to) via the orion-application.xml file. Look at the following snippet from the orion-application.xml file:
     <namespace-access>
<read-access>
<namespace-resource root="jms/firstQueue">
<security-role-mapping impliesAll="false" name="jmsSecurity">
<user name="scooter"/>
</security-role-mapping>
</namespace-resource>
</read-access>
<read-access>
<namespace-resource root="delme">
<security-role-mapping impliesAll="false" name="jmsSecurity">
<group name="messagingUsers"/>
</security-role-mapping>
</namespace-resource>
</read-access>
</namespace-access>
This would say that only the user "scooter" that you've set up would have access to the Queue whose JNDI name begins with jms/firstQueue. Anyone you've set up and added to a messagingUsers group would have access to any Queues whose JNDI name begins with "delme". (I'm honestly not sure what exactly this line does: <security-role-mapping impliesAll="false" name="jmsSecurity">)
This is the only way I've found to limit access to a particular Queue.
HTH.
Scott

Dial to a modem with username and password using serial modem

Hi, currently i am doing an application which use external modem to communicate with another modem. I am facing a problem that how to communicate with the modem which require username and password. The step i had tested was created a dial-up connection in first modem. The dial-up connection require me to insert the username, password and phone number. So i inserted all the parameters and can be connected with the second modem. The second modem was set an incoming call which is waiting an call with the correct username and password then only establish the connection. So how i started to do this application in labview ? i have search all the web but very less information about this. Can anyone help me ? I have attached the Incoming call setting photo.Thank you
Attachments:
Capture.PNG ‏7 KB
Capture2.PNG ‏39 KB
Capture3.PNG ‏74 KB

Use :
Properties prop = System.getProperties();
prop.put("proxySet","true");
prop.put("http.proxyHost","yourProxy");
prop.put("http.proxyPort","8080"); // change the port
//prop.put("https.proxyHost","yourProxy");
//prop.put("https.proxyPort","8080"); // change the port
Denis

Calling A Secured webservice using Username and password in the Soap header

I want to call a secured webservice.
The Username and password should be sent with the payload in the SOAP Header
as
<wsse:Security S:mustunderstand="0" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
<wsse:UsernameToken wsu:Id="SecurityToken-XXXXXXXXXXXXXXXXXXXXXXXXX" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
<wsse:Username>uname</wsse:Username>
<wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">pwd</wsse:Password>
</wsse:UsernameToken>
</wsse:Security>
Can you please send me the steps?
I tried with giving the username and password under Service Account.
I tried to create a wspolicy under business service. But nothing works...
Please help me at the earliest.
Also please give me steps in sequence.

Now i made sure that the endpoint is available!
Now am getting this error:
<soapenv:Fault>
<faultcode>soapenv:Server</faultcode>
<faultstring>BEA-380002: localhost1</faultstring>
<detail>
<con:fault xmlns:con="http://www.bea.com/wli/sb/context">
<con:errorCode>BEA-380002</con:errorCode>
<con:reason>localhost1</con:reason>
<con:location>
<con:node>RouteNode1</con:node>
<con:path>request-pipeline</con:path>
</con:location>
</con:fault>
</detail>
</soapenv:Fault>
Also in the invocation trace i can observe the following things:
Under Invocation Trace:-
========================
     Receiving request =====> Initial Message context
     ===============================================
     under added header:-
     ==================
     <soap:Header xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
     </soap:Header>
     under RouteNode1
================
     Route to "TargetMyService_BS"
$header (request):-
<soap:Header xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
</soap:Header>
Under Message Context changes:-
*===============================*
I can find this element also:-
con:security>
*<con:doOutboundWss>false</con:doOutboundWss>*
*</con:security>*
eventhough we enabled ws security, how the above tag can be false?
I think its getting failed to populate the header with the required login credentials.
The other doubt i have is:-
=================
I have chosen the service account type is static...is this right?

Username and password using page0 within

I have developed an application where in which i have to register new users,
by assigning them username password etc, the columns are username, password, confirmpassword in page zero or items in page zero on entering them
where these values will get submitted .i have to write code for this to check whether it is a valid username and password where shall i write the code for
this items after deleting the cookie package from login page .
plz help me
thanks in advance

http://forums.oracle.com/forums/ann.jspa?annID=283

HT1688 I cant sign into my YouTube app... forgot the username and password used

I can't sign into my youtube app.....forgot the username and password used

The original post said she alreadly signed into her account.
ChR15 Ch3N wrote:
You can either restore the iPod touch or you can go to the Settings app-> Store->Tap the account at bottom->Sign out->Login with own account.

Unable to log in Azure Linux VM using username and password

I tried creating a Linux VM (Cent OS based) using PowerShell. I was able to provision the VM, but when i tried to log in using the credentials in the VM using Putty, I get an error message stating "No supported authentication methods available
(server sent : publicKey).
Although when i create a VM through Azure portal using the same image i don't find any issues to login the VM. Please find below the PowerShell commands i used to provision Linux VM.
Option 1:
New-AzureQuickVM -Linux -ServiceName "customdatalinux" -Name "customdatalinux" -ImageName "0b11de9248dd4d87b1862
1318e037d37__RightImage-CentOS-7.0-x64-v14.2" -Password "******" -Location "East US" -LinuxUser "*****" -InstanceSize "ExtraSmall"
Option 2:
PS C:\> $vm1 = New-AzureVMConfig -Name "customdatalinux" -InstanceSize "ExtraSmall" -ImageName "0b11de9248dd4d87b18621318e037d37__RightImage-CentOS-7.0-x64-v14.2" | Add-AzureProvisioningConfig -Linux -LinuxUser "*****"
-Password "*****"
New-AzureVM -ServiceName "customdatalinux" -VMs $vm1
Option 3:
$vm1 = New-AzureVMConfig -Name "customdatalinux" -InstanceSize "ExtraSmall" -ImageName "0b11de9248dd4d87b1862131
8e037d37__RightImage-CentOS-7.0-x64-v14.2" | Add-AzureProvisioningConfig -Linux -LinuxUser "****" -Password "*****" | Set-AzureEndpoint -Name "SSH" -Protocol "TCP" -Loc
alPort "22" -PublicPort "22"
New-AzureVM -ServiceName "customdatalinux" -VMs $vm1
In the Azure portal i can see that there is an option to select credentials authentication alone, where i can enter the password and provision a VM. I try to do the same through PowerShell and VM gets provisioned, but am unable to log in the VM using those
credentials.
Can you please let me know how to resolve this issue?
Thanks,
Anish

Try this
azure vm create customdatalinux0b11de9248dd4d87b18621318e037d37__RightImage-CentOS-7.0-x64-v14.2 username password -l "West US"By default, linux VM on Azure has Port 22 opened so you don't have to configure those unless you want to change port. Also loose | and '' in commands.
Creating new VM creates new service unless you want to use one already created.
Mustafa Toroman

Changing a local administrator username and password using GP preferences permanently

Windows 2012 AD with W7 clients
I've recently set a group policy preference to rename the built in local administrator account (which was already renamed from the default Administrator) and set a new password for it. This seems to have worked.
However, if I remove the computer from the domain, the username reverts back to the previous one and the password seems to get corrupted and is neither the new one or the old one. As the local admin account is of most use when the computer is not connecting
to the domain for whatever reason this means that it is unusable. Am I doing something wrong or is the implementation of the Group Policy flawed? Any suggestions for a better way?

Hi Tim,
>>However, if I remove the computer from the domain, the username reverts back to the previous one and the password seems to get corrupted and is neither the new one or the old one.
How is it going? I agree with Idan that we can also try to use the setting
Accounts: Rename administrator account to change the name of administrator to see if the issue persists.
Regarding the deprecation of password changing function of GPP, this is mainly due to security concern that GPP stores password in Sysvol which is accessible to all domain users.
If the issue persists or you need further help, please don't hesitate to let us know.
TechNet Subscriber Support
If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.
Best regards,
Frank Shen

How-to access username and password protected Java EE Web services from ADF

The title of this post is exactly the same as this article by Frank Nimphius:
http://www.oracle.com/technology/products/jdev/howtos/1013/protectedws/access_protected_web_services_from_adf.htm
The article addresses the problem of securing web services using usernames and passwords, when those web services are accessed through a proxy or a data control. In the examples, the user names and passwords are specified, whether in the code or the definition of data controls. (SKING/SKING).
In a very common scenario, users login to reach a page, for example, A.jspx, which contains a button that calls a web service, for example displayDate. Suppose that user has logged in by username/pass of (AHUNOLD/AHUNOLD) and AHUNOLD has access to the service and the page. Is there any way to pass the logged in user name and password to the webservice ? Of course we can hard-code the username in the data control definition or proxy code, but this is just one of the thousands of users who have access to the service and the authentication is not dynamic this way.
Hope my question is clear. Wishing you all a great Christmas.
Farbod

Hi Frank, and happy new year.
Are you implying that it couldn't be done declaratively? What is your suggestion for this problem? You know the problem... As I described:
- I need to secure my web services, so when exposed, no one from inside network or the internet, can access the web service without proper permission
- The web services are shown as web controls on jspx pages. The user has logged in before reaching the page. It is irrelevant to ask him to enter user name and password again.
- I have user names, passwords and roles in Oracle Internet Directory (Identity Management). It provides some APIs and I can retrieve the usernames and attempt logging in programmically. But how can I get username and password from the session in ADF application?
I guess using SAML or certificate could be the solution, but I have a problem with SAML, described here:
Re: Webservices Security, SAML, and Identity Management (OID)
Best Regards,
Farbod

How easy to sniff a public FTP/HTTP username and password?

Hi IT Colleagues,
I understand that using plain FTP/HTTP , it is possible to sniff username and password using sniffer like wireshark.
However, I just to want know how easy to do it.
I know that in order to sniff , you should be in the same network or subnet as the website or ftp site.
Regards,
Jhun

It is trivially easy to sniff credentials out of FTP and HTTP due to the fact there is no encryption at play. One should also not simply consider the risks of someone running a sniffer on your local area network, or on the local area network of the remote
server, website or ftp site, but should consider the possibility for traffic to be sniffed along the way. The NSA is doing a rather good job of sniffing all of our traffic, credentials and all! Don't just worry about someone like the NSA though, a malicious
user on an ISP network, or an administrator of a proxy server could just as easily sniff the plain text traffic.
Kieran Jacobsen @kjacobsen http://aperturescience.su

Using username and password used in UME

Similar Messages

Maybe you are looking for