Web-auth using ASA and ACS 5.1

In order to restrict access to websites on our internal network, would we be able to put an ASA in front of the web server and force users to authenticate through the ASA and, once authenticated, allow only port 80 or 443 traffic for that use? The ASA would query the ACS 5.1 server for authentication/authorization using AD as the identity store. Is this even possible with TACACS?

Hello,
You might want to look for "Cut through proxy" on Cisco.com. That feature would allow you to accomplish the described scenario! Also, you might want to use RADIUS instead of TACACS+.
Regards.

Similar Messages

Building a best practice web application using ColdFusion and Jave EE

I've been tasked with rewriting a software using ColdFusion. I cannot seem to find a lot of information on best practice development in ColdFusion. I am an experience Java developer who has never used ColdFusion before. I want to build this application using a synergy of ColdFusion and Java EE technologies. Can someone recommend me a book that outlines how to developer in ColdFusion? Ideally this book assumes the reader is an experienced developer with no exposure to ColdFusion. Ideally the methods outlined in the book are still "best practice" methods.

jaisheela wrote:
Hello Friends,
I am also in the same situation.
I am a building a new web application using JSF and AJAX.
Requirement is I need to use IBM version of DOJO and JSF but I need to develop the whole application using Eclipse 3.3,2 and Tomcat 5.5.
With IBM version of DOJO and JSF, will Eclipse and Tomcat help to speed up the development or do you suggest me to go for Rational Application Developer and WebSphere Application Server.
If I need to go with RAD and WAS, then I am new to RAD and WAS, is it easy to use RAD and WAS for this kind of application and implement web applicaiton fast.
Any feedback will be great help.Those don't sound like requirements of the system to me. They sound more like someone wants to improve their CV/resume
From what I've read recently, if it's just fast you want, look at Ruby on Rails

Buling a new Web Application using JSF and Ajax.

Hello Group,
I am a building a new web application using JSF and AJAX. Planning to use Myfaces Tomahawk, Dojo for Ajax, Hibernate, Spring,Eclipse IDE and Jetty Server.Can some one please suggest me will this be a right one for
building complex UI and will it support for using the jsf features and would like to know any other free open
source framework, ide, tools which support the best way for an agile project..?. There is restriction like i have to use java1.4

jaisheela wrote:
Hello Friends,
I am also in the same situation.
I am a building a new web application using JSF and AJAX.
Requirement is I need to use IBM version of DOJO and JSF but I need to develop the whole application using Eclipse 3.3,2 and Tomcat 5.5.
With IBM version of DOJO and JSF, will Eclipse and Tomcat help to speed up the development or do you suggest me to go for Rational Application Developer and WebSphere Application Server.
If I need to go with RAD and WAS, then I am new to RAD and WAS, is it easy to use RAD and WAS for this kind of application and implement web applicaiton fast.
Any feedback will be great help.Those don't sound like requirements of the system to me. They sound more like someone wants to improve their CV/resume
From what I've read recently, if it's just fast you want, look at Ruby on Rails

Web Auth using 5760 Guest Anchor and ISE

I am trying to deploy a new guest wireless solution using a 3650s as the MA, a 5760 as the MC, and a 5760 as the guest anchor. ISE is being used as the guest auth server.
When no auth requirements are set on the guest wlan, everything works fine. I get an IP address and can get to the internet, VPN, etc. As soon as I enter the security web-auth command on the wlan, my client drops and goes into an Acquiring IP Address state. When I check the client on the controller, it is in a Policy Manager State of START.
As soon as I remove the security web-auth commamd from the wlan, I connect right up. It is my understanding that in guest, the client gets an IP address first in order to get redirected to the spoofed external web page, in my case ISE.
Any thoughts on what I am missing on my guest anchor, or MA config? Do I need to make any changes to the wlan on the MC? Any documentation about the relationship between the MA, MC, and guest anchor would be appreciated, I am not 100% sure which devices are required to have the client reach the guest anchor and get connected.

I hope this may help you
http://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/117742-configure-wlc-00.html
HTH
Rasika
*** Pls rate all useful responses ****

Guest Anchor with web auth using ISE guest portal

Hello All,
Before launching into my exact issues, could anyone confirm if they have completed a wireless Guest anchor setup using 2504 controllers on 7.4 as the anchor (5508 is the foreign) with webauth external redirection at ISE 1.1.3 using ISE Guest Services?
I am attempting this for an internal POC and have hit a couple of issues. Firstly I am looking for correct configuration confirmation prior to going in depth with a couple of the issues. I've been using the TrustSec 2.1 how to guides to build the parts I am not strong on so if anyone has actual completed this setup, I'd love to go through it with you.
massive thanks to anyone that can assist.
JS.

Thanks for the reply RikJonAtk.
so to start with, based on the trust sec documents, of the guest WLAN on the anchor I need to configure mac filtering at the layer 2 security menu as well as enable RADIUS NAC under the Advanced tab. But when I do this, I get an error message that states that mac filitering and RADIUS NAC cannot be enable at the same time.
Additionally, if I just enable the RADIUS NAC setting under the Advanced tab in the WLAN, I get another error message that states that the priority order for Web-Auth can only be set for radius, so I go to the AAA server tab and send local and LDAP to the not use column and hit apply. If I move to another menu then check the priority order again under the AAA servers tab, the local and LDAP have been moved back to the menu field to be used again. So I initially though it might be a bug, but I was hoping to find someone here that has done this already and can look at my issues and maybe walk me through their configs, which I'll mirror and see how it goes.
Thanks in Advanced,
JS

Web-auth page alterations and tweaking on WLC 4404

Hi,
As I mentioned in a previous post I'm running two guest WLANs through a C4404. One of them requires a Lobby Admin to generate a user for a 'less restricted' network and the other requires entry of some personal details into the capture screen before you get onto the filtered, web and secureweb only network.
I've got the registration one working fine and managed to create a login page tailored to suit.
What I'm having trouble with is altering the web-auth passthrough page. Currently it just asks for an email address (not verified) and then allows access to the network. I really want to capture an email, name and other details but it doesn't seem like I can easily upload another page to replace the default as the login.html file is being used for the other WLAN.
Has anyone else done a similar thing or managed to use a page called something other than login.html. My web skills are fairly weak, but I can work my way through most pages and make minor alterations.
Any info would be great...even better would be some page examples.
Thanks

It seems that every time you wish to use a customised page (either for webauth or passthrough) you need to name it login.html.
The email passthrough uses the WLC default page, but just includes an email field rather than the user/pass that's configured by a lobbyadmin.
So, without using any external server, do you think it's possible to have a customised webauth login page and a customised passthrough w/ email page AT THE SAME TIME?
As a side note, has anyone got the downloadable logo to fit in to the default page without problems. I can't seem to get the image size right and end up with blue borders around my customised logo?
Any help would be greatly appreciated.
Thanks

ASA and ACS 5 multiple VPN profiles for one user

Hi there
I have a question about ACS 5.3 and ASA VPN profile authorization. I am not sure if it is possible to allow one single user for a set of VPN profiles on ASA, let's make an example:
ACS 5.3 group hierarchy:
- VPN users global
-- VPN users A
-- VPN users B
ASA VPN profiles:
- VPN profile A
- VPN profile B
- VPN profile Z
VPN authorizations:
1. VPN users global should have access to VPN profiles A, B and Z (here we create an authorization profile with no class an no lock attributes, so the group is allowed for all VPN profiles)
2. VPN users A should have access to VPN profile A (here we create a authorization profile with class and lock attributes for profile A)
3. VPN users B should have access to VPN profiles B and Z (is this possible and how does the authorization profile have to look like?)
Thanks a lot in advance and best regards
Dominic

Hi Dominic,
first of all, let's clarify that on the ASA you have tunnel-groups (named connection profiles in ASDM) and group-policies. These often, but not always, have a one-to-one mapping.
The Tunnel-Group (TG) is either selected by the user (either from a drop down list or by entering a specifiv group-url), or automatically selected by a certificate map (i.e. based on a certain field in the user cert, the user is mapped to one TG or another). The TG mainly specifies what kind of authentication is used.
The Group-Policy (GP) by default is the one specified in the TG, but it can be overridden by e.g. Radius.
So from the ASA's standpoint itself your posibilities are rather limited: the ASA will just apply whatever group-policy you push from Radius (in IETF attribute 25 aka "Class"), and in addition it will deny access to a user if the TG he selected does not match the value of the group-lock attribute. Group-lock can only contain one TG name, so you cannot do something like "allow both B and Z".
In other words you can not achieve your goal if the Radius server has a "static" set of attributes per user.
However, as of ASA 8.4.3 the ASA now sends 2 vendor-specific attributes in the Access-Request:
vendor ID = 3076, attribute 146 is "Tunnel Group Name" (string).
vendor ID = 3076, attribute 150 is "Client Type" (integer)
0 = No Client specified 1 = Cisco VPN Client (IKEv1) 2 = AnyConnect Client SSL VPN 3 = Clientless SSL VPN 4 = Cut-Through-Proxy 5 = L2TP/IPsec SSL VPN 6 = AnyConnect Client IPsec VPN (IKEv2)
So if you can configure the Radius server to "dynamically" permit/deny access based on the TG attribute I suppose you could achieve what you want.
If/how ACS can do this, I personally don't know; I suggest you ask in the AAA forum if you need help with that part.
hth
Herbert

How to inspect web app using safari and ipad and USB cable?

On my mac I have
OSX 10.10.2 (14C109)
Safari Version 8.0.3 (10600.3.18)
On my Ipad 2 (MC769X/A) i have
OS 8.1.3 (12B466)
Safari Web Inspector "on"
Javascript "on"
There are no "privacy" or "private mode" settings that I can see.
I physically connected my iPad to my Mac and chose that I trust this computer. Confirmed that it's connected by looking in iTunes (and quit iTunes afterwards).
I opened a web app on my iPad that's running on my local server, and then opened safari on the mac.
I then opened the Develop menu and can see the ipad. The menu does not contain any other entries other than "Use for development..."
My mac also shows "No inspectable applications", whatever that means.
If I choose "Use for development" under the iPad menu, nothing at all happens and the menu item disappears.
To get the iPad sub-menu back again I have to quit Safari and then re-open it.

I'm sorry I don't buy this as an answer because:
it's for a question that is 2 years old and for older devices. My devices are all the latest version
I have XCode and I'm a member of the develop program already.
XCode does not offer a way to create a project or other pairing between safari on the mac and on the ipad, since that is a built in feature of Safari
It works with IOS Simulator, but not with the actual device even when all correct steps have been followed to pair / connect them
The problem I'm trying to resolve works in IOS Simulator but does not work on an actual device.

Opening new web page using servlet and jasper report. ?

Hello,
I am developing one small web application and implementing jasper report in it. I am using jasper report with servlet. Which is generating one pdf file and displaying in same browser. But I want to open this report in new browser. Which is only display that report window. I am trying it. response.setContentType("application/pdf");
               /response.addHeader("Content-Disposition", "attachment; filename=" // this is basically for downloading pdf file.
                         + request.getParameter("D:/rnext/30-oct-2009/sms/web/jsp/Reports/allstudentsofwholecollege.jasper") + "");
      response.setContentType("application/pdf");
      response.setContentLength(bytes.length);
      servletOutputStream.write(bytes, 0, bytes.length);
      servletOutputStream.flush();
      servletOutputStream.close();In this code it is showing me attachement file of report.
When I changed the response.addHeader(Content-Disposition", "inline; filename=" // this is basically for downloading pdf file.)
It is opening in same window. Please help if you can. It is urgent. please help.
Thanks in advance.
Manveer

Use target attribute with link you have placed on you JSP page. [Look Here|http://www.w3schools.com/tags/att_a_target.asp]
Also remove Content-Disposition header if you want to open file in browser.
In latest browsers it might be possible you will see new tab opened rather then whole new browser window, This depends on browser settings.

Consuming an External Web Service using HTTPS and WS Security

Hello everyone,
I'm having a problem setting the security information in a SOAP header using a generated ABAP Client Proxy to consume an external web service that requires a User ID and Password in the Header section of the SOAP message. I need to use HTTPS. I'm on a WAS 7.01 SP08 system so from my readings, SAP is supposed to be able to add the username and password into the header section of the message. I can't seem to get SAP to add this information added to the header.
Here are the steps that I have taken to set the security values.
1) Created the client proxy from the WSDL in SE80. Basic Authentication on the Configuration tab was turned on automatically.
Note, Transport Security is set to None. I cannot change it.
2) Created an outbound set user name profile in transaction WSPROFILE with the appropriate username and password.
3) Added the profile to the default port in transaction LPCONFIG as an outbound under the WS Security section of the screen.
When I called the external Web Service, I got back the following error message:
com.ibm.wsspi.wssecurity.SoapSecurityException: WSEC5509E: A security token whose type is [http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#UsernameToken] is required.
So, after reading through this Forum, I saw that I needed to use the SOAMANAGER. I set up a Proxy in the SOAMANAGER and manually created the Logical Port. This was the only way I could figure out how to set the Authentication Settings in the Logical Port to "User ID / Password". I then entered the User ID and Password.
However, I am still getting the same error message. I feel I am close but missing some small configuration to tell SAP to use WS Security with a Username token.
I'm not sure what I'm doing wrong, so any help would be appreciated.
Thanks,
Stephen

I had this error again so I thought I would post my solution:
The issue is SAP needs to know the certificates being used by the web site being called. These certificates are automatically installed in your browser but need to be manually installed in SAP. This is what I did:
How to find/install new certificates
Make sure you run Internet Explorer as an Administrator so you can export the certificates
Go to the web site that SAP is trying to call in Internet Explorer
Double click on the lock in the address bar
View certificates
Find the certificates that are being used
Tools --> Internet Options --> Content --> Certificates
Click on the “Trusted Root Certification Authorities” tab
Find the certificate identified in step iii
Export as a CER certificate
Click on the “Intermediate Certification Authorities” tab
Find the certificate identified in step iii
Export as a CER certificate
Go to STRUST in SAP
Import the Certificates in the “Anonymous” or “Standard” SSL client
Save
RESTART the ICM via t-code SMICM <-- Critical!!!
Test

Errors trying to Invoke web service using BES and SIF

Moved this up from the Integration Forum to see if I can get some visibility on it.
Description : When an invoice get's approved we need to pass on the details of the invoice and approval to the 3rd party customer.
So far I have been able to test the business event which calls the web service that writes the information to a file. However, although the file is created there is no content in the file.
So the steps up to this point
1. Create a simple web service that takes a string as an input parameter and writes this out to a file.
2. Locate the Approve Invoice event [oracle.apps.ap.event.invoice.approval] and add a new subscription that will invoke my web service.
I have a number of issues at the moment.
From the business event page I can test the event which writes a record to the wf_java_deferred queue. I have been able to call the service and create a file however that seems to have stopped working. Where do I look to see what's going wrong? Is the diagnostics the best place to start
If I go into Status Monitoring I can see the last Business Event test I did is now having errors when it tries to invoke the web service. The error I get is
Error Activity ID
Error Activity Label
Error Assigned User
Error Item Type
Error Item Key
Error User Key
Error Message          oracle.apps.fnd.wf.bes.InvokerException: Event payload is not available
Error Name
Error Notification ID
Error Result Code
Error Stack          oracle.apps.fnd.wf.bes.InvokerException: Event payload is not available at oracle.apps.fnd.wf.bes.WebServiceInvokerSubscription.onBusinessEvent(WebServiceInvokerSubscription.java:236) at
oracle.apps.fnd.wf.bes.EventDispatcher.executeSubscription(EventDispatcher.java:870) at oracle.apps.fnd.wf.bes.EventDispatcher.processSubscription(EventDispatcher.java:556) at
oracle.apps.fnd.wf.bes.EventDispatcher.dispatch(EventDispatcher.java:335) at oracle.apps.fnd.wf.bes.AgentListenerProcessorNew.processMessage(AgentListenerProcessorNew.java:373) at
oracle.apps.fnd.cp.gsc.SvcComponentProcessor.process(SvcComponentProcessor.java:659) at oracle.apps.fnd.cp.gsc.Processor.run(Processor.java:283) at java.lang.Thread.run(Thread.java:619)
Error Monitor URL
Timeout Value          0
Event Name          oracle.apps.ap.event.invoice.approval
Event Details          PLSQL:WF_STANDARD.EVENTDETAILS/WFERROR:332124
Event Message          View Event Message
Event Key          3134525_1
Event Data URL     http://hostname.co.nz:8000/OA_HTML/RF.jsp?function_id=18157&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&
params=.tut9vCLHp8BRzYkdaLWV3ekOnBGTRSUSr1RYBqw0ISKruqT5nAzoOSzIkWSQrzWO8z23dyX31GlRw75r21ich1KC4hE2KL.ZedjIDcPalm8f.akDClydWkRR3w2eGuk
Event Subscription http://hostname:8000/OA_HTML/RF.jsp?function_id=26058&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&
params=fR9VOZbtfJEdYQNb645CRU3kD39os3CZwt7XUpbOYb1RImgFkWaeDFEV0SCaVn1M
Error Type          UNEXPECTED
Error Details          PLSQL:WF_STANDARD.ErrorDetails/WFERROR:332124
Administrator Role          SYSADMIN
Subscription Details          PLSQL:WF_STANDARD.SubscriptionDetails/WFERROR:332124
Error Person ID
Error Person Username
How do I get access to the payload? I only really need 2 or 3 items at this time. Do I need to extend a seeded java function? For example in my initial tests I only want to pass across the Invoice Id so how do I get the value of this attribute out of the wf_event_t (Is this the correct object name) and into the payload that is being passed across to the service call.
Cheers
Owen

Hello Owen
I am experiencing the exact same issue as you are (missing payload) when invoking a web service and was wondering if you have resolved this issue or gotten any new useful information?
Regards,
Magnus

Create and manage multiple web sites using iWeb and GoDaddy

Now that Mobile Me is going away and the other comments in this discussion relate to iwebsites were written several years ago, I am looking for new and up-to-date information.
I have been building and maintaining a website using my MobileMe account and porting it over to GoDaddy.
I need to re-write the site if for no other reason than it is getting cluttered and needs freshining.
I would also like to create some other seperate web sites with their own URL
1) Is iWeb capable of doing this?
2) All the information I have found on iWebsites is at least 3 years old and there does not seem to be updates to that software.
3) Are there other tools that will allow me to do this?
And finally, does the group have any words of wisdom for me.
Thanks Dunc

It is now generally acknowledged that iWeb, and iDVD, has been discontinued by Apple. This is evidenced by the fact that new Macs are shipping with iLife 11 installed but without iWeb and iDVD.
However, iWeb will still continue to work but without the following:
Features No Longer Available Once MobileMe is Discontinued:
◼ Password protection
◼ Blog and photo comments
◼ Blog search
◼ Hit counter
◼ MobileMe Gallery
All of these features can be replaced with 3rd party options.
I found that if I published my site to a folder on my hard drive and then uploaded with a 3rd party FTP client subscriptions to slideshows and the RSS feed were broken. If I published directly from iWeb to the FPT server those two features continued to work correctly.
There's another problem and that's with iWeb's popup slideshows. Once the MMe servers are no longer online the popup slideshow buttons will not display their images.
Click to view full size
However, Roddy McKay and I have figured out a way to modify existing sites with those slideshows and iWeb itself so that those images will display as expected once MobileMe servers are gone. How to is described in this tutorial: #26 - How to Modify iWeb So Popup Slideshows Will Work After MobileMe is Discontinued.
It now appears that the iLife suite of applications offered on disc is now a discontinued product and the remaining supported iApps will only be available thru the App Store from now on. However, the iLife 11 boxed version that is still available at the online Apple Store (Store button at the top of the page) and those still on the shelves of retailers will include iWeb and iDVD. Those two apps were listed in small, gray text on the iLife 11 box that I bought.
Personally, if I didn't already have a copy I would purchase one to have it for reinstallation purposes if ever needed.
This might be of some interest to you at this time: Life After MobileMe.
If you're running or planning on running Lion the following will be of some interest to you:
In Lion the Library folder is now invisible. To make it permanently visible enter the following in the Terminal application window: chflags nohidden ~/Library and hit the Enter button - 10.7: Un-hide the User Library folder.
For opening your domain file in Lion for the first time or to switch between multiple domain files Cyclosaurus has provided us with the following script that you can make into an Applescript application with Script Editor. Open Script Editor, copy and paste the script below into Script Editor's window and save as an application.
Just launch the applicaiton, find and select the domain file you want to open and it will open with iWeb. It modifies the iWeb preference file each time it's launched so one can switch between domain files.
do shell script "/usr/bin/defaults write com.apple.iWeb iWebDefaultsDocumentPath -boolean no"delay 1
tell application "iWeb" to activate
You can download an already compiiled version with this link: iWeb Switch Domain. This applicaiton can be use with earlier versions of the OS to select and open multiple domain files.
WARNING: iWeb Switch Domain will overwrite an existing Domain.sites2 file if you select to create a new domain in the same folder. So rename your domain files once they've been created to something other than the default name.
OT

Web access using Macbook and cellphone (Telus)

I have a web-enable cell phone that I would like to have my Macbook use to access the internet using Bluetooth to communicate with the phone. I'm running Mac OS X (10.5.3), the phone is an LG Chocolate and my cell carrier is Telus (Canada).
Has anyone had any luck with this?
null

It sounds to me like your ISP only allows one PC per internet connection. This can easily be solved by spoofing the MAC address of your Windows XP on your router. So to the ISP your router looks like a PC, and the only PC on the network. I can't be certain that this is your issue as your across the pond.
You should contact the place you purcahsed your MacBook, or call Apple - I am sure they would be more than happy to send you a Hardware Test CD.
Good Luck!

Fetch table value in BEX Web report using Javascripts, and assign condition

Hi Gurus,
I am currently using WAD 3.5. I need to change the web report to behave like below :-
1. Default layout (Field A B C) with condition A & B activated.
2. If the drilldown Field B and C is removed, leaving only field B alone in the report drilldown, deactivate condition A & B, Activate condition C & D.
3. the above can be reversed where user drilldown field B & C into the layout, the condition A & B need to then be activated back.
So I believe this can be done using Javascript. So my questions are below
1.) How do i fetch table value for the navigationblock ? with navigationblock i am able to know what are the columns are in the drilldown (i will not display free characteristics, so ignore this part). how do i read the content of NAVIGATIONBLOCK_1 as shown in following code? using javascript.
<object>
 <param name="OWNER" value="SAP_BW"/>
 <param name="CMD" value="GET_ITEM"/>
 <param name="NAME" value="NAVIGATIONBLOCK_1"/>
 <param name="ITEM_CLASS" value="CL_RSR_WWW_ITEM_NAV_BLOCK"/>
 <param name="DATA_PROVIDER" value="DATAPROVIDER_1"/>
 <param name="SHOW_FREE_CHARACTERISTICS" value=""/>
 <param name="SHOW_NAVIGATION_ICONS" value=""/>
 <param name="SHOW_FILTER_ICONS" value=""/>
 ITEM: NAVIGATIONBLOCK_1
</object>
2.) After question 1.) is done, please advice how do i activate/deactivate the conditions? based on the fields found in above. Maybe I can use IF navigationblock_1 contain field A only, then set condition A & B , etc.
<object>
 <param name="OWNER" value="SAP_BW"/>
 <param name="CMD" value="GET_ITEM"/>
 <param name="NAME" value="CONDITIONLIST_1"/>
 <param name="ITEM_CLASS" value="CL_RSR_WWW_ITEM_CONDITION"/>
 <param name="DATA_PROVIDER" value="DATAPROVIDER_1"/>
 ITEM: CONDITIONLIST_1
</object>
I would appreciate if we can solve Question 1 first before proceed to 2.)
Please advise. Thanks

Hi JTi,
what i have understood from your requirement is that you want to access the web item table_1 in javascript, you can get that as below:
Add

tag before your web item and set its id to table.

<param name="OWNER" value="SAP_BW"/>
<param name="CMD" value="GET_ITEM"/>
<param name="NAME" value="TABLE_1"/>
<param name="ITEM_CLASS" value="CL_RSR_WWW_ITEM_GRID"/>
<param name="DATA_PROVIDER" value="DATAPROVIDER_1"/>
<param name="GENERATE_CAPTION" value=""/>
<param name="CAPTION" value="jezel"/>
<param name="ONLY_HIERARCHY_NAVIGATION" value="X"/>
<param name="BLOCK_SIZE" value="0"/>
<param name="SHOW_PAGING_AREA_BOTTOM" value=""/>
ITEM: TABLE_1

In javascript access it as :
var mytable = document.getElementsById("table");
Hope this helps
Thanks
Dipika

Special Character in Web Service using OAS and Weblogic

In the project, we are using OAS be the app server, all the "<" in the context of xml in web service are converted to "<" automatically.
However, when we deploy it to weblogic, the "<" was converted to "&<;&"
Then another app try to unmarshalling it, but the app cannot handle the < the throw the exception. Do you know why the how to change it back to "<"?
OAS version:10.1.3.2.0
Weblogic version:11gR1
Spring Version:2.5
OAS XML
<?xml version='1.0' encoding='UTF-8'?>
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
<soapenv:Body>
<makeHTMLStrForAwardServiceResponse xmlns="http://com.makeHTMLStrForAward/types/">
<htmlStr><html><head><style type="text/css">
</html>
</htmlStr>
</makeHTMLStrForAwardServiceResponse>
</soapenv:Body>
</soapenv:Envelope>
Weblogic XML
<?xml version='1.0' encoding='UTF-8'?>
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
<soapenv:Body>
<makeHTMLStrForAwardServiceResponse xmlns="http://com.makeHTMLStrForAward/types/">
<htmlStr>&<;&html>;&<;&head>;&<;&style type="text/css">
;&<;&/html>;</htmlStr>
</makeHTMLStrForAwardServiceResponse>
</soapenv:Body>
</soapenv:Envelope>
Edited by: user1287019 on Apr 20, 2011 10:13 AM

Ha Ha,
I found that one of the Spring WS lib we were using is 1.5.4.
It seems OAS ship with WS lib and the app use the OAS lib.
But weblogic did not have WS lib, then app need to use it's own lib. Then problem occur.
After change to version 1.5.8, the problem solved.

Web-auth using ASA and ACS 5.1

Similar Messages

Maybe you are looking for