Web Services: How to get the username token?

Hello everybody,
I wrote an EJB, Exposed it as a web service.
I'm using encryption+username as the inbound policy.
The client is adding a username token to the message.
I understood that the userpassword are checked automatically and I don't need to implement that myself but I need the userpassword from this token for another reason.
How can I get this information in the EJB's code?
Thanks, Adi.

You can get the user from Session Bean's context.
myContext.getCallerPrincipal();
I think you cannot get the password. That way, it would be easy to disguise your WS as another one you could want to crack.
Regards.

Similar Messages

How to get the device token in windows phone 8 sliverlight application?

Hi,
I am developing a windows phone 8 silverlight application . For my application I want to add push notification service , for this service I have to call one web service in my app . This api requires device token , device id ..etc , I am able to get the all
the things except devicetoken .
How to get the device token of a device ?
any help?
Thanks...
Suresh.M

Most probably device token is the push channel url which is returned by MPNS when a request is made to it.
Step 3 here: Push notifications for Windows Phone 8
http://developer.nokia.com/community/wiki/Using_Crypto%2B%2B_library_with_Windows_Phone_8

*** How to get the username in a custom password change routine....

How to get the username in a custom password change routine / procedure / form when a user's password has expired and is redirected automatically to this custom program?
We use the 2nd parameter in LOGIN_URL column in WWSSO_LS_CONFIGURATION_INFO$ table to get to this custom change-password proc.

OK !
Use that maybe good :
select USERID into v_user from sys.aud$
where ntimestamp#=(
select max(ntimestamp#)
from sys.aud$ );

HttpSessionListener: how to get the username?

When a session is created, I want to read some data from database
and store it as session variables. What data is to be read depends
on the user name.
I use the HttpSessionListener.
How can I get the username from within the sessionCreated method?
I could getRemoteUser() from HttpServletRequest, but how do I get
the request?
J2EE API documentation says:
public interface HttpSession
Provides a way to identify a user across more than one page request or
visit to a Web site and to store information about that user.
Therefore, my problem ought to have a solution, oughtn't it?

You'd like to think so.
Unfortunately, the Servlets 2.3 spec does not appear to address combining deployer-based authentication with deployer-based listener classes. This means it's pretty much up to the vendors whether you can do this.
I'm using jetty/jboss, and the situation is as follows:
Authentication info is stored in the session only if you use form-based authentication (which, as I found, means you're forced to use form-based authentication if you want your users to be able to log off.)
However, even if you are using form-based authentication, there are two problems.
1. your HttpSessionListener implementing class gets called BEFORE they login (i.e. before the login page is presented). So there's nothing in the session yet.
2. How the container stores the authentication info in the session is entirely up to the vendor. In the case of jetty, the login is stored in the session property "org.mortbay.jetty.Auth".
So in the case of Jetty, you'd need to implement HttpSessionAttributesListener, wait for that property to be set, and then get the stuff from the db based on that setting. Needless to say, this is highly non-portable. sigh.
I think the only way to do what we want is to forget HttpServletRequest and use a filter instead. Bummer.
Did you come up with any bright ideas in the end?

How to get the username/password of the current owner of the running code

Dear friends,
Our product is running on the App Server(weblogic/websphere...) and we also use security provider(OpenLDAP) and kerberos to support SSO. Before, when a user tyies to login in the first time, the way we use to authenticate the user is:
1) Accept the username/password
2) Query the security provider(OpenLDAP) to get the principles.
3) verity if the username/password is corrent or not.
As we know, to query the principles, we need to provide a search user(both username and password) if we configured the access control of the ldap server:
I have configured my envirioment as follows
1) In the LDAP server, configured the Middle Tire user(The Operating System user running the App Server) to have the permission to query principles.
2) The server is configured to runing on SSO envirioment.
My question is could I get the username/password of the OS user running the App Server at runtime so that I can query the ldap server without explicitly providing the search user?
Thanks,
RR
Edited by: Ricky Ru on Oct 9, 2011 1:50 AM

Thanks EJP.
I have made some progress on this. But I have met another issue.
*1) Using JAAS to login.*
loginContext.login();
 Subject subject = loginContext.getSubject();
 ldapContext = (LdapContext) Subject.doAs(subject, this);
*2) Init the ldapContext to use the GSSAPI authentication*
// this is called automatically by login()
 public Object run() {
 Hashtable ldapEnv = new Hashtable();
 ldapEnv.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
 ldapEnv.put(Context.PROVIDER_URL, "ldap://9.30.215.197");
 ldapEnv.put(Context.SECURITY_AUTHENTICATION,"GSSAPI");
 ldapEnv.put(Context.SECURITY_PRINCIPAL,"");
 ldapEnv.put(Context.SECURITY_CREDENTIALS,"");
 //System.setProperty("sun.security.krb5.debug", "false");
 // This tells the GSS-API to use the cached ticket as
 // credentials, if it is available
 System.setProperty("javax.security.auth.useSubjectCredsOnly", "false");
 try {
 InitialLdapContext ctx = new InitialLdapContext(ldapEnv,null);
But I got the following exception when excuting new InitialLdapContext(ldapEnv,null);
Debug is true storeKey false useTicketCache true useKeyTab false doNotPrompt false ticketCache is null isInitiator true KeyTab is null refreshKrb5Config is false principal is null tryFirstPass is false useFirstPass is false storePass is false clearPass is false
Acquire TGT from Cache
Principal is [email protected]
Commit Succeeded
javax.naming.AuthenticationException: GSSAPI [Root exception is javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Integrity check on decrypted field failed (31))]]
 at com.sun.jndi.ldap.sasl.LdapSasl.saslBind(LdapSasl.java:150)
 at com.sun.jndi.ldap.LdapClient.authenticate(LdapClient.java:214)
 at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2694)
 at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:293)
 at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:175)
 at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:193)
 at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.java:136)
 at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.java:66)
 at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:667)
 at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:288)
 at javax.naming.InitialContext.init(InitialContext.java:223)
 at javax.naming.ldap.InitialLdapContext.<init>(InitialLdapContext.java:134)
 at LDAPKerbService.run(LDAPKerbService.java:66)
 at java.security.AccessController.doPrivileged(Native Method)
 at javax.security.auth.Subject.doAs(Subject.java:337)
 at LDAPKerbService.login(LDAPKerbService.java:40)
 at LDAPKerbService.main(LDAPKerbService.java:82)
Caused by: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Integrity check on decrypted field failed (31))]
 at com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:194)
 at com.sun.jndi.ldap.sasl.LdapSasl.saslBind(LdapSasl.java:105)
 ... 16 more
Caused by: GSSException: No valid credentials provided (Mechanism level: Integrity check on decrypted field failed (31))
 at sun.security.jgss.krb5.Krb5Context.initSecContext(Krb5Context.java:663)
 at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:230)
 at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:162)
 at com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:175)
 ... 17 more
Caused by: KrbException: Integrity check on decrypted field failed (31)
 at sun.security.krb5.KrbTgsRep.<init>(KrbTgsRep.java:61)
 at sun.security.krb5.KrbTgsReq.getReply(KrbTgsReq.java:185)
 at sun.security.krb5.internal.CredentialsUtil.serviceCreds(CredentialsUtil.java:294)
 at sun.security.krb5.internal.CredentialsUtil.acquireServiceCreds(CredentialsUtil.java:106)
 at sun.security.krb5.Credentials.acquireServiceCreds(Credentials.java:562)
 at sun.security.jgss.krb5.Krb5Context.initSecContext(Krb5Context.java:594)
 ... 20 more
Caused by: KrbException: Identifier doesn't match expected value (906)
 at sun.security.krb5.internal.KDCRep.init(KDCRep.java:133)
 at sun.security.krb5.internal.TGSRep.init(TGSRep.java:58)
 at sun.security.krb5.internal.TGSRep.<init>(TGSRep.java:53)
 at sun.security.krb5.KrbTgsRep.<init>(KrbTgsRep.java:46)
 ... 25 more
Do you have any clue on this? Thanks.

How to get the username in "atfer serverror" trigger ?

Hi folks;
How to get the name of the user who just miss his connection to the database in a "after serverror" trigger ?
The code of the trigger :
create or replace
TRIGGER TRG_LOGGON_FAILURES
AFTER SERVERERROR ON DATABASE
BEGIN
IF (IS_SERVERERROR(1017)) THEN
UPDATE utilisateur_ora SET UTO_STA='BLOQUE', UTO_DATE_STATUT=sysdate WHERE UTO_USR_GPL=<var_user>;
COMMIT;
END IF;
END;

OK !
Use that maybe good :
select USERID into v_user from sys.aud$
where ntimestamp#=(
select max(ntimestamp#)
from sys.aud$ );

Problem calling web service: Error while getting the ORACLE user account

Hi All!
I was able to call the service EGO_ITEM_PUB-PROCESS_ITEM, but after implemented some patches, suddenly I get this error as result:
- <env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/">
- <env:Body>
- <OutputParameters xmlns="http://xmlns.oracle.com/apps/ego/soaprovider/plsql/ego_item_pub/process_item__1/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<X_INVENTORY_ITEM_ID xsi:nil="true" />
<X_ORGANIZATION_ID xsi:nil="true" />
<X_RETURN_STATUS>U</X_RETURN_STATUS>
<X_MSG_COUNT>1</X_MSG_COUNT>
<X_MSG_DATA>Encountered an error while getting the ORACLE user account for your concurrent request. Contact your system administrator.</X_MSG_DATA>
</OutputParameters>
</env:Body>
</env:Envelope>
Any ideas?
Thanks,
Konrad

hsawwan wrote:
Hi,
I was able to call the service EGO_ITEM_PUB-PROCESS_ITEM, but after implemented some patches, What are those patches?
# Patch 8407693:R12.TXK.B ISG: Service Generation Failure - Java Compiler Could Not be Found
# Patch 8459663:R12.OWF.B : Mandatory Consolidated One-Off Fixes for ISG on Top of 12.1.1
# Patch 8916358:R12.OWF.B : Service Timeout When Invoking Services Deployed to Integrated SOA Gateway
# Patch 9349321:R12.OWF.B : Issue with item Bulk Load in Oracle Product Hub PIP 2.4
# Patch 9446625:R12.FND.B : 1OFF:8995921:12.1.1:12.1.1:PERF : LoginModules Performance Issue
# Patch 9070077:R12.OWF.B : 1OFF:9045280:12.1.1:12.1.1:Invoking a Web Service Requires NLS Lang When It Should be Optional
# Patch 9153106:R12.OWF.B : IREP_Parser.PL Exits with GETPWUID Function IS Unimplemented in PARSER.PM -> Wichtig für ISG (für custom pl/sqls im ISG)
# Patch 9004712:R12.OWF.B : One-Off for IREP PARSER on Top of Oracle E-Business Suite Release 12.1.1 -> Wichtig für ISG (für custom pl/sqls im ISG)
IAS:
# Patch 8607523 for the AS version 10.1.3.4
Oracle Support told me that I need this patches because of some other problem (generating wsdl and deploy for BOM_BO_PUB package does not work in my environment) and since that, the process_item call stopped working!
btw: The EGO_ITEM_PUB-PROCESS_ITEM call for an existing item still works (I can modify the description), but creating a new item does not work anymore. Here are the parameters I send to the web service:
Header:
<wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
<wsse:UsernameToken>
<wsse:Username>sysadmin</wsse:Username>
<wsse:Password
Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">sysadmin</wsse:Password>
</wsse:UsernameToken>
</wsse:Security>
<q0:SOAHeader/>
Body:
<q1:InputParameters>
<q1:P_API_VERSION>1.0</q1:P_API_VERSION>
<q1:P_INIT_MSG_LIST>T</q1:P_INIT_MSG_LIST>
<q1:P_COMMIT>T</q1:P_COMMIT>
<q1:P_TRANSACTION_TYPE>CREATE</q1:P_TRANSACTION_TYPE>
<q1:P_ITEM_NUMBER>KHR_WS_05</q1:P_ITEM_NUMBER>
<q1:P_DESCRIPTION>desc2</q1:P_DESCRIPTION>
</q1:InputParameters>
Thanks,
Konrad

HTTP SERVICE - How to get the value of my params on the server side

I am new to flex and with the url limitation i was trying to
do the following ....send a bunch of ids... using params variable
var myservice:HTTPService = new HTTPService();
myservice.url = url;
myservice.method = "POST";
myservice.resultFormat = "e4x";
myservice.send(params);
The question is how do i get the value i passed on using
params on the server side? can the variable params be a string or
array or does it have to be object type?
Any help would be greatly appreciated.

Most server side languages have a function or an array where
you extract the variables. in PHP they arrive in global arrays
called $_POST and $_GET.
Other languages have methods like request.formvars or
request.query. Check your serverside language on how that is
done.

Web services : how to measure the volume and numbers WS sent and received

Hello,
I have to know the numbers of WS used (and which one ?) to make some statistics.
Which transactions or tools can I use ?
Transaction WSADMIN is not enough.
Thanks a lot.

At moment we haven't any consulting request open to SAP .
We want use SAP Hana XS because all the datawarehouse data are stored into the Hana Database and at moment we don't have other software like ESP .
The basic idea is to
- Receive the client requests via HTTP REST in the XSJS
- Resolve the request via Hana SQL in pushdown
- Sent the resolved request by consuming an external web services on another server (non SAP) .
we can do all of this task in hana XS but at moment the problem is that the transaction betwen CLIENT/ SERVER XS the remain open...
what do you think about that ?

How to query the username....

Hello folks,
please can anyone help me on how to get the username of a user who is locking a specific row, for example if a user in a multi-user application is locking the record where emp_id=10 and name=X, how can I get his name?????
and thank you in advance

Hi fish,
deadlocks are different things. Oracle documentation says : "A deadlock can occur when two or more users are waiting for data locked by each other" and "Oracle automatically detects deadlock situations and resolves them by rolling back one of the statements involved in the deadlock"
See http://download-uk.oracle.com/docs/cd/B19306_01/server.102/b14220/consist.htm#sthref2043
See my example (ora102 is OS user and lock1 is my script above) :
Session 1 :
SCOTT@db102 SQL> update emp set sal=3000 where empno=7902;
1 row updated.
SCOTT@db102 SQL>Session 2 :
SCOTT@db102 SQL> update emp set sal=3000 where empno=7902;
... hangsSysdba session :
SYS@db102 SQL> @lock1
TO_CHAR(SYSDATE,'DD
17/05/2006 16:25:54
BLOCKER                     SID 'BLOCKS' BLOCKEE                     SID USERNAME
ora102                      148 blocks ora102                      158 SCOTT
OBJECT_NAME                           SID ORACLE_USERNAME      TY      LMODE    REQUEST
EMP                                   148 SCOTT                TX          6          0
SYS@db102 SQL>

How to get the list of values for a dynamic parameter using Web Services SDK?

I am struggling to get the list of values for a dynamic parameter of a report.I am using Java Web Services SDK ... I tried to use PromptInfo.getLOV().getValues() method but it does not work.First of all ... is this possible (to get the list of values for a dynamic param) using Web Services?Second of all, if this is possible, how should I do it ... it seems it works fine when running the report from CMC. It asks for DB logon info and after that it provides a list of values.Thx 

Your assumption is correct. We are trying to get the LOVs from the Crystal Report. I was not aware that this is not supported by Web Services SDK.We used Web Services SDK to integrated the Crystal Reports in our web application. We implemented some basic actions for reports: schedule, view instances, run ad-hoc reports.We encountered this problem when trying to run/schedule reports with dynamic parameters (a list of values from DB). We were unable to get the LOVs.Please let me know if you can think of an alternative to look at.Thanks a lot,Catalin

How to retrieve the username/password of logged user so to use web services

Hi Experts,
we are using web services from a web dynpro application, the web services we use are CAF web services; actually we are "hardcoding" username and password so to be able to execute these web services, using this code before calling the web service:
wdContext.currentRequest_ReporteDeRendicionDetallada_RElement().modelObject().setInvokerProperty(javax.xml.rpc.Stub.USERNAME_PROPERTY,"testuser");
wdContext.currentRequest_ReporteDeRendicionDetallada_RElement().modelObject().setInvokerProperty(javax.xml.rpc.Stub.PASSWORD_PROPERTY,"testpassword");
but as this is not a very good practice, we want to replace the "testuser" with the logged user and, of course, retrieve the password and use it instead of "testpassword".
How can we achieve this? I couldn´t find any tips on this.
Best regards,
Marco.

Hello,
thanks for your anwsers, although I´ve followed both links I couldn´t find the answer to my problem.
I need to know how to retreive user and password from the UME of the portal so to be able to execute web services in the java stack, the UME is connected to a LDAP in our corporation.. so may be the passwords are not stored in the UME?
If it is not possible to retrieve the passwords of the users , which is the best practice to deal with username/passwords to execute CAF webservices from web dynpro java? Hardcoding is not a very good practice..
Best regards,
Marco.

How can I get the username displayed in BW Web-Report?

Hello all,
I try to get the username displayed in BW-Report such as 'welcome <username>'.
Maybe you can give me a suggestion how to do it.
I appretiate your answer.
Regards
Vivian

you can use the following javascript within the webtemplate to get the user id
<script language=javascript>
var user_name ='<object>
 <param name="OWNER" value="SAP_BW"/>
 <param name="CMD" value="GET_ITEM"/>
 <param name="NAME" value="TEXTELEMENTS_USER"/>
 <param name="ITEM_CLASS" value="CL_RSR_WWW_ITEM_TEXT_ELEMENTS"/>
 <param name="DATA_PROVIDER" value="DP"/>
 <param name="GENERATE_CAPTION" value=""/>
 <param name="ELEMENT_TYPE_1" value="COMMON"/>
 <param name="ELEMENT_NAME_1" value="SYUSER"/>
 <param name="ONLY_VALUES" value="X"/>
 ITEM: TEXTELEMENTS_USER
</object>';
</script>
Regards
Raja

How to Get the Debugger Screen in WEB Front end of SRM

Hi Gurus,
I have couple of questions for SRM.
1. How to Get the Debugger Screen in WEB Front end of SRM so i can debug the application which is running in EBP system??
2. How to set the flag for external debugging (HTTP)??
3. Using SICF how to set the ITS services ( Like BBPSC01 )for internal ITS so as soon as i place the order it should stop at the break point which i have set in the application.
Thanks.
Regards,
Manoj Tiwari

Setting up Debugging for Integrated ITS
Tcode SICF.
Select service (e.g. default_hostàbcàguiàsapàitsàbbpsc01).
Change service settings and insert parameter ~GENERATEDYNDPRO=1.
Find program to debug. E.g. SE93. Enter bbpsc01 à Display and get Program field (SAPLBBP_SC_UI_ITS)
Execute SE38 and enter program name.
Turn HTTP Debugging ON. UtilitiesàSettingsàDebugging. Click Actv and username.
Add HTTP Breakpoint. Display source code and select Utilitiesàbreakpointsàset.
On External Debugging select HTTP Breakpoint.
Remember to remove breakpoints, deactivate debugging and remove parameter GENERATEDYNPRO.
Can run program RSBREAKPOINTS to find which programs you have breakpoints set in.
Have fun with EBP
If you have any more questions i would be happy to help you. Send me mail on [email protected]

How can a web service be compliant with the WTK2.1?

I'm using WTK2.1 to develop mobile clients consuming web services.
After published a web service by Apache Axis, I use WTK2.1's Stub Generator to
generate the stub class.
As required by JSR172, I use the "document/literal" encoding style.
The web service class has only one method:
public int newUser(String userName, String password) {
But when I use Stub Generator to generator the stub class, I get the following messages:
************************ Error messages begin *****************************
warning: R2716 WSI-BasicProfile ver. 1.0, namespace attribute not allowed in doc/lit for soapbind:body: "newUser"
warning: R2716 WSI-BasicProfile ver. 1.0, namespace attribute not allowed in doc/lit for soapbind:body: "newUser"
warning: ignoring operation "newUser": more than one part in input message
warning: Port "User" does not contain any usable operations
************************ Error messages end *****************************
And following is the wsdl file:
<?xml version="1.0" encoding="UTF-8"?>
<wsdl:definitions targetNamespace="http://localhost:8080/web/services/User" xmlns="http://schemas.xmlsoap.org/wsdl/" xmlns:apachesoap="http://xml.apache.org/xml-soap" xmlns:impl="http://localhost:8080/web/services/User" xmlns:intf="http://localhost:8080/web/services/User" xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/" xmlns:tns1="http://ws.mauction.scucdut.edu.cn" xmlns:wsdl="http://schemas.xmlsoap.org/wsdl/" xmlns:wsdlsoap="http://schemas.xmlsoap.org/wsdl/soap/" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><wsdl:types><schema targetNamespace="http://ws.mauction.scucdut.edu.cn" xmlns="http://www.w3.org/2001/XMLSchema"><element name="userName" type="xsd:string"/><element name="password" type="xsd:string"/></schema><schema targetNamespace="http://localhost:8080/web/services/User" xmlns="http://www.w3.org/2001/XMLSchema"><element name="newUserReturn" type="xsd:int"/></schema></wsdl:types>
<wsdl:message name="newUserRequest">
<wsdl:part element="tns1:userName" name="userName"/>
<wsdl:part element="tns1:password" name="password"/>
</wsdl:message>
<wsdl:message name="newUserResponse">
<wsdl:part element="impl:newUserReturn" name="newUserReturn"/>
</wsdl:message>
<wsdl:portType name="User">
<wsdl:operation name="newUser" parameterOrder="userName password">
<wsdl:input message="impl:newUserRequest" name="newUserRequest"/>
<wsdl:output message="impl:newUserResponse" name="newUserResponse"/>
</wsdl:operation>
</wsdl:portType>
<wsdl:binding name="UserSoapBinding" type="impl:User">
<wsdlsoap:binding style="document" transport="http://schemas.xmlsoap.org/soap/http"/>
<wsdl:operation name="newUser">
<wsdlsoap:operation soapAction=""/>
<wsdl:input name="newUserRequest">
<wsdlsoap:body namespace="http://ws.mauction.scucdut.edu.cn" use="literal"/>
</wsdl:input>
<wsdl:output name="newUserResponse">
<wsdlsoap:body namespace="http://localhost:8080/web/services/User" use="literal"/>
</wsdl:output>
</wsdl:operation>
</wsdl:binding>
<wsdl:service name="UserService">
<wsdl:port binding="impl:UserSoapBinding" name="User">
<wsdlsoap:address location="http://localhost:8080/web/services/User"/>
</wsdl:port>
</wsdl:service>
</wsdl:definitions>
So, can anybody tell me how to make the web service be used by the Stub Generator properly?

Hi,
I am new to WTK 2.1 and I am also using Axis to generate WSDL.
one thing I figured out was to remove the namespace info behind all body tags.
for instance in your code, replace:
<wsdlsoap:body namespace="http://localhost:8080/web/services/User" use="literal"/>
by
<wsdlsoap:body use="literal"/>
and it should work. don't ask me why but it worked for me.

Web Services: How to get the username token?

Similar Messages

Maybe you are looking for