Web-server: storing encrypted documents

Hello folks
I've to build a website on Lion server to store securely sensitive documents, and i'm looking a way to do it using encryption. The documents should be readable on the web once authenticated to the server with kerberos, so i can't just do a encrypted .dmg: i need something like encryption on-the-fly solution. Can anyone help me please?
Thanks in advance
–Mic

well, what kind of documents are you talking about here, and who are you seeking security from? Kerberos should keep unauthorized viewers from accessing files, so...
My first thought if you need to be paranoid is not to store files at all: store the file data in MySQL and create temprary files on the fly as you need them (putting the contents back in MySQL and secure deleting the files when done). But without knowing what you're trying to keep from whom, I have no idea if that's sensible.

Similar Messages

When viewing documents on a Web Server, IE automatically opens a blank page and then opens the document in the default program. The blank screen should close automatically but isn't happening.

So here is the situation, my company uses a third party scanning software, that puts documents scanned or created onto a webserver. We use a program that grants a user access to view the documents on the webserver. The user will have to log into the system
using credentials, we have Kerberos doing this. Once the user is logged onto the system they navigate to the document they want to view or edit. So the user wants to view a .pdf file, they click the document they want, and it is supposed to open in the default
program associated with file extension. ie: .doc would open Word, .xls would open Excel. When the document is loading in the default program Internet Explorer opens a blank page, this page is supposed to prompt the user if they want to open or save the document.
(I changed the registry to have the files selected to automatically open without this prompt.) The blank screen generated is still staying open, this screen is supposed to close automatically after the prompt or close automatically after the document is opened.
So when a user is looking at several documents, this floods the screen with all these blank Internet Explorer pages. This problem is only occurring for users that have Windows 7 PC's, XP users do not have this problem at all. My PC is the only one in the company
that is Windows 7 64-bit, and working properly with the IE blank page automatically closing. I'm wondering what can be done to fix this problem, is it as simple as registering some .dll files or do I need to make a registry change? Any help would greatly be
appreciated.

What is the registry change exactly? Sounds like one which is supposed to avoid the prompt. I know
that there used to be such a thing, before the new prompt and I know that some users think that there should be such a thing for any program but I'm not sure if that expectation is valid or not. I think this may also be related to a concurrent change
in the OS. E.g. in XP we had File Types Options editor but starting in Vista that was removed. You might get some more clues on this tack from NirSoft's FileTypesMan utility.
The registry change that I did was to remove the open and save prompt. I will be sure to look into that. Our company
isn't worried about the user's automatically opening the files since they are all trusted. They also do not have the ability to install anything, so if they were to download a potentially harmful file they could never install it. We monitor downloads as well,
if they download files off the internet that aren't work related we remove their download capabilities.
Sounds like a scenario for using ProcMon to take two traces and compare them for their essential differences.
I talked to my boss about using this tool and he is worried about using it. I'm only an intern at my office and do not have the authority to use a program without their knowledge or consent. I will run the idea by them again and see if it's okay I use this.
I'll maybe make some presentation about how it can help us with our problem and how much time and money it will save. Because I really want to get down to the bottom of this.
Probably the most significant thing is going to be the Content-type that the files are being served by.
You could use the Developer Tools, Network Capture to check on that and ProcMon could help explain what happens after that. A related workaround to change the symptom when the Content-type is not what is expected is to disable MIME Sniffing (e.g. in
Security options, Miscellaneous section). In fact, perhaps that could explain your machine's difference with anyone else? MIME Sniffing is a default, previously known as "save according to type not extension" (or some such wording).
Okay I will be completely honest I have no idea how to use Developer Tools (F12), yes I could google it, when I tried using it on the blank pages it would never work, I also have no idea what I'm looking at. I should mention that I do not have access to
the web server. Our programming and development side only has access to our AS400, which is where the web server is located. I do have MIME Sniffing enabled and so does everyone else. I may be wrong but, I believe it is needed in order to open the file extension
in the correct default program, yes? I thought MIME Sniffing would see a .docx file and then find the appropriate program to open that .docx file in. I may be wrong but I know it's used somehow along these lines.

Using iPlanet Web Server 6.0 (with ASP or JSP), is it possible to create a StarOffice, Word or Acrobat document using a template and merging it with data from a database (say Oracle)?

Hi,
It is possible, But it has to be done through codes and iPlanet Web Server has nothing to do with it. But if you want to create the word document by ASP you have to install ASP plugin like ChilliASP (from Chilisoft) with iPlanet Web Server.Merging with database can be done through your code.
To know more abt creating word doc through ASP try this link
http://web.ukonline.co.uk/vance/code/aspworddoc.pdf
Regards,
T.Raghulan.

Smartforms: how can I include a jpg picture stored an a web server ?

I want do include a business graphic (JPG) in a smartforms window. The picture is created by a web serves and stored on a web server.
the jpg-picture can be loaded on by an http-adress.
How can I include the picture in the smartforms form ?
thanks
Richard

hi,
use transction SE78 to upload the picture .
Then use it in smartforms.
regards,
guru

Document Web Server Agent

Hi all,
we are trying to attach documents to notifications, but we need a Document Web Server Agent.
This agent is not documented neither in OTN nor in OWF Help.
How can we write such an agent? What should it do actually?
Any code example?
Our agent should simply browse a directory and send the file list to the attachment selection window.
TIA
Maurizio Lippa
[email protected]

Hi Maurizio
The Document Management features described in the Workflow Guide and the associated screens are reserved for future use, this feature is not currently available. This was not in the original Workflow Guide, a documentation update was released via Metalink with this update.
The Oracle Workflow product will provide Document Management integration via iFS in future releases, there is a whitepaper on the OTN iFS website describing how you can get this documentation to work right now. You can also linnk to documents from notifications right now using hyperlinks.
Cheers
Mark
Hi all,
we are trying to attach documents to notifications, but we need a Document Web Server Agent.
This agent is not documented neither in OTN nor in OWF Help.
How can we write such an agent? What should it do actually?
Any code example?
Our agent should simply browse a directory and send the file list to the attachment selection window.
TIA
Maurizio Lippa
[email protected]

Migrating to Web Server 7.0 from Apache HTTPd document

We've [made available|http://wikis.sun.com/display/WebServer/Migration+from+Apache+HTTP+Server] a work-in-progress document on our Wiki page discussing some of the common problems people have when they migrate from Apache HTTPd server to Sun Java System Web Server 7.0.
We'd love to get your feedback. What are we missing? Have some information you'd like to add? The comments section is open to all feedback.
Thanks!

can this be made as a topic rather than a post in the forum ?

Web Server rendering pages no in document root

A developer approached me today with this problem. The website was displaying the intended page, but the document root had a older version of the page present.
I moved to the "generated" directory of the website and removed the the class and java files then refreshed the page. the server is now displaying the page (jsp) that is in the document root.
Is there anyone that can explain what is going on in this situation so that i can make the proper adjustments and pass it on to my devs?

The web server caches content and if a JSP is compiled will serve up the compiled version until it either detects that the source JSP has been updated and recompile it again, or the content of the compiled directory is removed and it needs to be regenerated. This detection is done by checking the timestamp on the file, so if someone copies an older version of the file to the document root, it will get ignored since the timestamp is older. If you want to force a recompilation, update the timestamp of the file by using the touch command if you are on Solaris/Linux

Posting documents from application/jsp server to web server

I need to allow users to upload documents (ie. pdf, doc, ppt, etc) on the application I am building. I am using the FileUpload classes from Jakarta's commons fileUpload. The application that the commons-fileupload-1.0.jar resides on is on the application server. The directories where the documents need to post to are located on the Web Server. Does anyone have any methods or resources for doing this?

You could specify a remote directory for upload... the one on the web server.

Make Fusion Middleware document available on the web server

I'd like to set up so that Fusion Middleware document that were shipped with the software is available on the local web server where Weblogic is running. What do I need to do?

Only Pro owners get the disclosure triangle option to "Save" your files.
If you use the kioskmode="true" html tag in your page code it will be turned off.
http://docs.info.apple.com/article.html?artnum=61011
This will not keep determined viewers from getting a copy of your file, however. Anything you view on the Web can be saved.

Stored on document server

sap script> what is the function of stored on document server and stored as text?

This is a bit tricky. I spent lots of hours about this .
You have to set PF_HOSTNAME with your name of your AS and gives the path to the file on the server.
You wrote
*PF_HOSTNAME = w_host
But beware: if you have more thän one AS you have to fix one AS for upload or you have to find the servers name of the file. A better way can be to share one folder by each AS.
You also have to decide between HTTP or FTP.
You wrote:
PF_FTP_DEST = 'SAPFTPA'
PF_HTTP_DEST = 'SAPHTTPA'
You must define only one ! Then you have to check your settings in SM59 about working right.
Pls rate, if this was helpful.
Regards,
Markus

Reading a csv file stored on a resin web server

String line = null;
                                                       URL url2 = new URL ("http://localhost:8080/FYP/"+WebCourse2+".csv");
                                                       URLConnection conn2 = url2.openConnection();
                                                       BufferedReader in = new BufferedReader(new InputStreamReader(conn2.getInputStream()));
                                                       out.println("conn2: "+conn2.getResponseCode());
                                                       while((line=in.readLine())!=null)
im using the following code to try and find out whether the csv file is available on the web server but getting the following errors:
C:\resin-2.0.5\doc\WEB-INF\classes\FYP\exam3.java:294: Class FYP.URL not
found.
                                                       URL url2 = new URL ("http://localhost:8080/FYP/"+WebCourse2+".csv");
                                                       ^
C:\resin-2.0.5\doc\WEB-INF\classes\FYP\exam3.java:294: Class FYP.URL not
found.
                                                       URL url2 = new URL ("http://localhost:8080/FYP/"+WebCourse2+".csv");
                                                       ^
C:\resin-2.0.5\doc\WEB-INF\classes\FYP\exam3.java:295: Class FYP.URLConnection
not found.
                                                       URLConnection conn2 = url2.openConnection();
                                                       ^
3 errors
can anyone help?
thanks
tzaf

now its telling me that:
C:\resin-2.0.5\doc\WEB-INF\classes\FYP\exam3.java:300: Method getResponseCode()
not found in class java.net.URLConnection.
                                                       out.println("conn2: "+conn2.getResponseCode());
can you help?
thanks
tzaf

Client access to Server application using Web Server

Hi there.
I'm working on a LabView application that controls several devices, read data from them and show their measures on the front panel, using different graphs and indicators. All the items defined in the project and the collected data is stored in a SQL Server database. The application includes another module ("Reports Module"), which consists of several windows (VIs Front Panels) where queries to the SQL Server database are made and displays lists of the selected data. This module can be accessed by the main menu of the software.
Our intention is to deploy the application in a PC placed in the working site (server), and access the registered data using remote PCs (clients). The idea is to access the "Reports Module" via web.
For this purpose, we are using the Web Server feature of LabView. The main VI of the "Reports Module" is defined with "Reentrant execution" (so that it can be accessed by multiple clients), and we create an HTML document of it using the Web Publishing Tool. We make an executable of the application (using the Application Builder) and, to create a Web Server in the deploy machine, we make use of what is stated in the following link:
http://digital.ni.com/public.nsf/allkb/7F95D43D3F50FCAC8625710E000068E1?OpenDocument
The problem we find is that when the main application is running in the server computer, if we access the "Reports Module" and begin selecting the queries options through its different windows, the same windows are opened in the server computer screen, so that it's difficult for an operator to control the main application on the server side if someone its accessing simultaneously through a remote client.
Is there a way to do prevent this behaviour?
Could you suggest me a different method to accomplish what we intend to do?
Thanks in advance.
Regards,
Francisco

I played with remote front panels a really long time ago snd it was nothing but problems. I hear they have improved but what I did was abandon them for an extJS application to do what you are doing. It is now called Sencha. Sorry but I can't help with a pure LabVIEW solution.
=====================
LabVIEW 2012

NetBeans and Sun ONE Web Server 6.1

I have a JSP / Beans / Servlet Web application working in Tomcat on my local machine, a Macintosh laptop. I used NetBeans to create it all, and everything works fine there. I have tried to upload everything to another computer (Solaris based) which is running Sun ONE Web Server 6.1, but am having problems.
I uploaded the WAR file that NetBeans created, and uploaded the 'web' directory that NetBeans created. I can access HTML files from that web folder, but when I ask it to go to the first page, index.jsp, it has a problem with the beans. In my JSP file I do:
<jsp:useBean id="db" class="drc.database" scope="session" />
It seems to be having problems loading that class. What do I need to do? Here is the error code:
[04/Aug/2005:17:15:36] fine (15708):      for host 129.147.40.215 trying to GET /index.jsp, ntrans-j2ee reports: mapped uri "/index.jsp" in context "" to resource "jsp"
[04/Aug/2005:17:15:36] fine (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: context = StandardEngine[null].StandardHost[drc].StandardContext[]
[04/Aug/2005:17:15:36] fine (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: contextPath =
[04/Aug/2005:17:15:36] fine (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: wrapper = StandardEngine[null].StandardHost[drc].StandardContext[].StandardWrapper[jsp]
[04/Aug/2005:17:15:36] fine (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: servletPath = /index.jsp
[04/Aug/2005:17:15:36] fine (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: pathInfo = null
[04/Aug/2005:17:15:36] info (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: WEB2798: [] ServletContext.log(): JspEngine --> /index.jsp
[04/Aug/2005:17:15:36] info (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: WEB2798: [] ServletContext.log(): ServletPath: /index.jsp
[04/Aug/2005:17:15:36] info (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: WEB2798: [] ServletContext.log(): PathInfo: null
[04/Aug/2005:17:15:36] fine (15708):      for host 0.0.0.0 trying to GET /index.jsp, ntrans-j2ee reports: mapped uri "/index.jsp" in context "" to resource "jsp"
[04/Aug/2005:17:15:36] info (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: WEB2798: [] ServletContext.log(): RealPath: /www/html/drc/index.jsp
[04/Aug/2005:17:15:36] info (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: WEB2798: [] ServletContext.log(): RequestURI: /index.jsp
[04/Aug/2005:17:15:36] info (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: WEB2798: [] ServletContext.log(): QueryString: null
[04/Aug/2005:17:15:36] failure (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: StandardWrapperValve[jsp]: WEB2792: Servlet.service() for servlet jsp threw exception
     org.apache.jasper.JasperException: WEB4000: Unable to compile class for JSPWEB4124:
     An error occurred at line: 3 in the JSP file: /index.jsp
     WEB4126: Generated servlet error:
     /opt/SUNWwbsvr/https-kesin.Central.Sun.COM/ClassCache/drc/default-webapp/_jsps/_index_jsp.java:66: package drc does not exist
     drc.database db = null;
     ^
     WEB4124:
     An error occurred at line: 3 in the JSP file: /index.jsp
     WEB4126: Generated servlet error:
     /opt/SUNWwbsvr/https-kesin.Central.Sun.COM/ClassCache/drc/default-webapp/_jsps/_index_jsp.java:69: package drc does not exist
     db= (drc.database)
     ^
     WEB4124:
     An error occurred at line: 3 in the JSP file: /index.jsp
     WEB4126: Generated servlet error:
     /opt/SUNWwbsvr/https-kesin.Central.Sun.COM/ClassCache/drc/default-webapp/_jsps/_index_jsp.java:74: package drc does not exist
     db = (drc.database) java.beans.Beans.instantiate(this.getClass().getClassLoader(), "drc.database");
     ^
     3 errors
     at org.apache.jasper.compiler.Compiler.compile(Compiler.java:312)
     at com.iplanet.ias.web.jsp.JspServlet$JspServletWrapper.loadJSP(JspServlet.java:764)
     at com.iplanet.ias.web.jsp.JspServlet$JspServletWrapper.access$000(JspServlet.java:624)
     at com.iplanet.ias.web.jsp.JspServlet.serviceJspFile(JspServlet.java:412)
     at com.iplanet.ias.web.jsp.JspServlet.service(JspServlet.java:363)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:908)
     at org.apache.catalina.core.StandardWrapperValve.invokeServletService(StandardWrapperValve.java:771)
     at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:322)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
     at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:212)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
     at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:209)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
     at com.iplanet.ias.web.connector.nsapi.NSAPIProcessor.process(NSAPIProcessor.java:161)
     at com.iplanet.ias.web.WebContainer.service(WebContainer.java:578)

it is certifying / authenticating that the secured
web site is owned by the genune party and the
transactions with the party is doing through a
encrypted format.
Am i correct up to this???Correct, that is what SSL/certificates are for.
>
Then my dowt is that
Is it possible to make my server SSL enabled with
h out using any certificate ????( the documents you
are given is telling about certificates)No it is not possible - the whole idea behind SSL communication is that it is based on TRUSTED secure communication. If a client can not check validity of server's certificate it is not trusted any more.
It might not seem to be the case when you create a self-signed certificate, but it really is so. In case of a self signed certificate you(i.e your browser) trust yourself with whatever you do with your application on your webserver.
After all can I install some certificates lateron ??
If you really need SSL with your webserver you have to either create a self signed certificate, see this: http://sial.org/howto/openssl/self-signed/
or request a test certificate from www.verisign.com or www.thawtee.com

Can I sync to a network share or personal web server?

Hello,
I really love the idea of FireFox Sync.
However I am very uncomfortable with storing that much personal information on a third party server, even one as trusted as yours.
Is there a way to sync up to my own web server (running linux) or sync up to a network share (on windows)?
Right now I'd be most interested in syncing the password file between my laptop and PC using a windows network share, and not having that sensitive data travel over the internet at all.
I know it is encrypted and everything but security breaches and flaws do occasionally happen and as a business owner with everything stored in my password file I cannot take that risk.
I have the staff available to write a addon to take advantage of this feature, if there is documentation available on how to leverage the sync code to connect to a different server or network share.
Thanks!

See this: <br />
http://docs.services.mozilla.com/howtos/run-sync.html

Web server and remote vi trouble

Hi to all,
after reading this :
http://zone.ni.com/reference/en-XX/help/371361B-01/lvhowto/embed_vi_in_html_doc/
Seem possible to have a Central Labview Web server where all Html pages are stored, each page have an object that point to a remote VI (located on a remote machine).
I tried to set up the parameters in HTML OBJECT as described, but don't work.
In red is the code that i have added/modified
<PARAM name="LVFPPVINAME" value="test.vi">
<PARAM name="IPADDRESS" value="http://192.168.1.100">
<EMBED src="http://192.168.1.100/.LV_FrontPanelProtocol.rpvi82"
LVFPPVINAME="test.vi" IPADDRESS="http://192.168.1.100"
TYPE="application/x-labviewrpvi82" WIDTH=x HEIGHT=x
PLUGINSPAGE="http://digital.ni.com/express.nsf/express?openagent&code=ex3e33&"></EMBED>
</OBJECT>
Any suggestion?
Both my computer have LabVIEW Professional Development System 8.2
Thanks
Daniele
Message Edited by derusc on 11-20-2007 04:27 PM

Hi,
the dev zone document says that if you already have an HTML document, you can embed a VI in the HTML document so a client computer can view and control the front panel of the VI in a browser. It doesn't speak about store multiple html pages in web server. So maybe you are not refering to the right document. I don't think that you can manage multiple html pages from LabVIEW.
Clara
AE Manager
NI Italy

Web-server: storing encrypted documents

Similar Messages

Maybe you are looking for