Webdav using Client Certificates
Hello all
Finder (10.5.6) seems not to be able to use Webdav with client certificates. Especially in conjunction with Alfresco Share this would be nice.
Any ideas?
Pascal.
Hi,
> have a question, if we use this mechansim do we have to mainatin User's cerificate in user master or >this is not needed as we are accepting the connection from the intermediary server which is trusted by >the J2EE engine.
I think it depends from your Biller Direct application.
In my company we use Rosettanet B2B with SAP XI and have this setup :
Internet -- https --> Apache -- https --> Web dispatcher -- https --> SAP J2EE PI
The client certificate from the B2B partner is sent up to SAP PI and we did not have to set the certificate in the user mast.
We did have to import the certificate in the J2EE keystore and to configure the Rosettanet connector.
Regards,
Olivier
Similar Messages
-
Logon to BI using client certificate (SmartCard)
It is possible to configure BI for logon using client certificate (for example stored on chip card). Can somebody tell me how? Thank you very much...
It is certainly possible to have an external authentication method plug-in into your BI Installation. Therefore I would assume that could also include something you can integrate with your smart card. You will have to use and setup SSO though. We use SSO with a fully external user database. We use a custom Java authenticator module that uses JCIFs libraries to authenticate users over NTLM against a Windows Domain Controller (http://jcifs.samba.org/src/docs/ntlmhttpauth.html). It's a very neat solution that I think Oracle should incorporate in OBIEE since it means there is no need to setup LDAP or maintain group membership in your Active Directory. This basically does the "authentication" bit. For authorisation we use Init Blocks. The user is validated against a database which confirms it's "authorised" to login to OBIEE and gets all the user groups that it should get from our DB.
-
Sun Directory Server 6.0 doesn't use client certificate
Hi All,
From a program, if I try to connect twice to a directory server 6.0 over SSL, first with simple anonymous bind and 2nd with client certificate, both the time it goes through, but 2nd time it doesn't use the client certificate. From the access log we get to know that it's not using the client certificate as it is expected for the 2nd attempt.
Here is the sample code that I have -
int main()
int ret;
char host[] = "xxx";
int port = 1234;
char path[] ="/home/xxx/certs";
int version = LDAP_VERSION3;
ret = ldapssl_client_init(path, NULL);
if(ret) printf("ldapssl_client_init failed"), exit(1);
LDAP *handle = ldapssl_init(host, port, 1);
if(!handle) printf("ldapssl_init failed"), exit(1);
ret = ldap_set_option( handle, LDAP_OPT_PROTOCOL_VERSION, &version);
if(ret) printf("ldap_set_option failed"), exit(1);
ret = ldap_simple_bind_s(handle, NULL, NULL);
if(ret) printf("ldap_simple_bind_s failed"), exit(1);
ret = ldap_unbind_s(handle);
if(ret) printf("ldap_unbind_s failed"), exit(1);
printf("1. Successfully connected and disconnected\n");
ret = ldapssl_clientauth_init(path, NULL, 1, path, NULL);
if(ret) printf("ldapssl_clientauth_init failed"), exit(1);
LDAP *ldaph = NULL;
ldaph = ldapssl_init(host, port, 1);
if(!ldaph) printf("ldapssl_init failed"), exit(1);
ret = ldap_set_option( ldaph, LDAP_OPT_PROTOCOL_VERSION, &version);
if(ret) printf("ldap_set_option failed"), exit(1);
ret = ldapssl_enable_clientauth(ldaph, (char*) "", (char*) "password", (char*) "nickname");
if(ret) printf("ldapssl_enable_clientauth failed"), exit(1);
struct berval* sc = NULL;
ret = ldap_sasl_bind_s(ldaph, NULL, LDAP_SASL_EXTERNAL, NULL, NULL, NULL, &sc);
if(ret) printf("ldap_sasl_bind_s failed"), exit(1);
ret = ldap_unbind_s(ldaph);
if(ret) printf("ldap_unbind_s failed"), exit(1);
printf("2. Successfully connected and disconnected\n");
return 0;
}Any help/pointers in this regard will be highly appreciated.
Thanks in advance.
Regards,
// RahulThe program works absolutely fine. Both the times it binds to the directory server. But the 2nd time it doesn't use the client certificate as we expect.
Here is the output -
1. Successfully connected and disconnected
2. Successfully connected and disconnected
and here is the access log contents -
[13/Jul/2010:17:31:45 +0530] conn=1074 op=-1 msgId=-1 - fd=39 slot=39 LDAPS connection from 1.2.3.4:1234 to 1.2.3.4
[13/Jul/2010:17:31:45 +0530] conn=1074 op=-1 msgId=-1 - SSL 128-bit RC4
[13/Jul/2010:17:31:45 +0530] conn=1074 op=0 msgId=1 - BIND dn="" method=128 version=3
[13/Jul/2010:17:31:45 +0530] conn=1074 op=0 msgId=1 - RESULT err=0 tag=97 nentries=0 etime=0 dn=""
[13/Jul/2010:17:31:45 +0530] conn=1074 op=1 msgId=2 - UNBIND
[13/Jul/2010:17:31:45 +0530] conn=1074 op=1 msgId=-1 - closing from 1.2.3.4:1234 - U1 - Connection closed by unbind client -
[13/Jul/2010:17:31:45 +0530] conn=1075 op=-1 msgId=-1 - fd=40 slot=40 LDAPS connection from 1.2.3.4:1234 to 1.2.3.4
[13/Jul/2010:17:31:45 +0530] conn=1074 op=-1 msgId=-1 - closed.
[13/Jul/2010:17:31:46 +0530] conn=1075 op=-1 msgId=-1 - SSL 128-bit RC4
[13/Jul/2010:17:31:46 +0530] conn=1075 op=0 msgId=1 - BIND dn="" method=sasl version=3 mech=EXTERNAL
[13/Jul/2010:17:31:46 +0530] conn=1075 op=0 msgId=1 - RESULT err=0 tag=97 nentries=0 etime=0 dn=""
[13/Jul/2010:17:31:46 +0530] conn=1075 op=1 msgId=2 - UNBIND
[13/Jul/2010:17:31:46 +0530] conn=1075 op=1 msgId=-1 - closing from 1.2.3.4:1234 - U1 - Connection closed by unbind client -
[13/Jul/2010:17:31:46 +0530] conn=1075 op=-1 msgId=-1 - closed.
Thanks and Regards,
// Rahul -
Authentication using Client Certificates
Has anyone implmented client certificate authentication where after user has entered her certificate id/pwd they get direct access to the portal without getting the portal logon page again.
I am using EP6 SP2, i get the request for client certficates but after that i get directed to the portal form based logon page. How do i bypass this and gain access to the portal.
regards
antonHi Kyle,
Here is my authscheme.xml file....i placed the CreateTicketLoginModule after the CertLoginModule but it didnt work. Have i done this correctly. By the way i am using EP6sp2 J2EE 6.20 pl 28
thanks anton
authschemes>
<!-- authschemes, the name of the node is used -->
<authscheme name="uidpwdlogon">
<!-- multiple login modules can be defined -->
<loginmodule>
<loginModuleName>com.sap.security.core.logon.imp.CertLoginModule</loginModuleName>
<controlFlag>SUFFICIENT</controlFlag>
<options></options>
</loginmodule>
<loginmodule>
<loginModuleName>com.sap.security.core.logon.imp.CreateTicketLoginModule</loginModuleName>
<controlFlag>SUFFICIENT</controlFlag>
<options></options>
</loginmodule>
<loginmodule>
<loginModuleName>com.sap.security.core.logon.imp.DefaultLoginModule</loginModuleName>
<!-- specifying whether this LoginModule is REQUIRED, REQUISITE, SUFFICIENT, or OPTIONAL -->
<controlFlag>REQUISITE</controlFlag>
<options></options>
</loginmodule>
<loginmodule>
<loginModuleName>com.sap.security.core.logon.imp.CertPersisterLoginModule</loginModuleName>
<controlFlag>REQUIRED</controlFlag>
<options></options>
</loginmodule>
<priority>21</priority>
<!-- the frontendtype TARGET_FORWARD = 0, TARGET_REDIRECT = 1, TARGET_JAVAIVIEW = 2 -->
<frontendtype>2</frontendtype>
<!-- target object -->
<frontendtarget>com.sap.portal.runtime.logon.default</frontendtarget>
</authscheme>
<authscheme name="certlogon">
<loginmodule>
<loginModuleName>com.sap.security.core.logon.imp.CertLoginModule</loginModuleName>
<controlFlag>REQUISITE</controlFlag>
<options></options>
</loginmodule>
<priority>20</priority>
<frontendtype>2</frontendtype>
<frontendtarget>com.sap.portal.runtime.logon.certlogon</frontendtarget>
</authscheme>
<authscheme name="basicauthentication">
<loginmodule>
<loginModuleName>com.sap.security.core.logon.imp.DefaultLoginModule</loginModuleName>
<controlFlag>REQUIRED</controlFlag>
<options></options>
</loginmodule>
<priority>20</priority>
<frontendtype>2</frontendtype>
<frontendtarget>com.sap.portal.runtime.logon.basicauthentication</frontendtarget>
</authscheme>
<authscheme name="header">
<loginmodule>
<loginModuleName>com.sap.security.core.logon.imp.HeaderVariableLoginModule</loginModuleName>
<controlFlag>OPTIONAL</controlFlag>
<options>Header=remote-user</options>
</loginmodule>
<priority>5</priority>
<frontendtype>2</frontendtype>
<frontendtarget>com.sap.portal.runtime.logon.header</frontendtarget>
</authscheme>
<authscheme name="guest">
<loginmodule>
<loginModuleName>com.sap.security.core.logon.imp.AnonymousLoginModule</loginModuleName>
<controlFlag>OPTIONAL</controlFlag>
<options></options>
</loginmodule>
<priority>1</priority>
<frontendtype>2</frontendtype>
<frontendtarget>com.sap.portal.runtime.logon.anonymous</frontendtarget>
</authscheme>
<!-- Reserved 'anonymous' authscheme added for being in the list of authschemes -->
<authscheme name="anonymous">
<priority>-1</priority>
</authscheme>
</authschemes>
<!-- References for Authentication Schemes, this section must be after authschemes -->
<authscheme-refs>
<authscheme-ref name="default">
<authscheme>uidpwdlogon</authscheme>
</authscheme-ref>
</authscheme-refs>
<authscheme-refs>
<authscheme-ref name="UserAdminScheme">
<authscheme>uidpwdlogon</authscheme>
</authscheme-ref>
</authscheme-refs>
</document> -
I am a doctor and using a laptop to login into an SSL server for secure communication.
I was using an old asus with win 8.1 without a problem. 2 weeks ago I got my new Y2P installed the certificate I got from the IT guys and all worked like a charm! What a wonderful laptop.
And then, my SSD vanished suddently from the system could not boot, so I replaced the first Yoga with and identical one from the store. This time- win 8.1 an IE cannot recognize the newly issued ceertificte and getting an SSL error so cannot open the htpps website.
Tried onekey recovery, isntalling all windows updates, using a new user nothing works. Back to the old ASUS all working fine. The IT guys said they never had such a problem, after hundreds of certificates issued the same way.
First Y2P worked without a glitch second one does not.
Any ideas?I had the same problem with my new Yoga Pro 2 when trying to connect to some https sites that worked fine with my previous computer. I asked a friend that's a systems administrator for help and he had me look for marketing / adware type software that came pre-installed on my machine. He warned me that more and more new computers are coming pre-loaded with this type of software that many people would consider malware. He said that such software can cause this type of problem because of how it sits inbetween you and the sites you visit (how your information passes through it).
I found Superfish Visual Discovery, which fits this description, was pre-installed on my machine. As soon as I uninstalled it my https connection problems went away. You should check your list of installed programs (go to your Control Panel > Progams > Programs and Features). If you see "Superfish Inc. VisualDiscovery" in your list of installed programs, that is likely the casue of the problem (at least it was for me). Hope this helps... -
Safari 5.1 crashes when using Client Certificate
I just upgraded to OS X 10.6.8 and Safari 5.1; Safari crashes when hitting a web site that uses a client-side cert. Tried reinstalling the cert, still nothing. It works fine on Chrome, so something screwy is going on.
Any workarounds?Here is the latest crash report. Thanks:
Process: Safari [91637]
Path: /Applications/Safari.app/Contents/MacOS/Safari
Identifier: com.apple.Safari
Version: 5.1 (6534.50)
Build Info: WebBrowser-75345000~1
Code Type: X86-64 (Native)
Parent Process: launchd [89726]
Date/Time: 2011-08-01 15:39:36.819 -0700
OS Version: Mac OS X 10.6.8 (10K549)
Report Version: 6
Interval Since Last Report: 260514 sec
Crashes Since Last Report: 6
Per-App Interval Since Last Report: 212028 sec
Per-App Crashes Since Last Report: 6
Anonymous UUID: 0DB2D63B-CCE6-4A6E-B088-CAA343E3A6A0
Exception Type: EXC_BAD_ACCESS (SIGSEGV)
Exception Codes: KERN_INVALID_ADDRESS at0x0000000000000019
Crashed Thread: 0 Dispatch queue: com.apple.main-thread
Thread 0 Crashed: Dispatch queue: com.apple.main-thread
0 libstdc++.6.dylib 0x00007fff85a7e798 __dynamic_cast + 36
1 com.apple.security 0x00007fff8012d18dSecurity::KeychainCore::Identity::required(OpaqueSecIdentityR ef*) + 43
2 com.apple.security 0x00007fff8012d07eSecIdentityCopyCertificate + 54
3 com.apple.Safari.framework 0x00007fff893099b0SecIdentityCopySSLClientAuthenticationChain + 70
4 com.apple.Safari.framework 0x00007fff8914c553Safari::useIdentityForChallenge(OpaqueSecIdentityRef*,Safari: :WK::AuthenticationChallenge const&) + 32
5 com.apple.Safari.framework 0x00007fff8914d280Safari::BrowserContentViewController::useClientCertificatesFo rAuthenticationChallenge(Safari::WK::AuthenticationChallengeconst&) + 354
6 com.apple.Safari.framework 0x00007fff891415e2Safari::BrowserContentViewController::didReceiveAuthenticatio nChallenge(Safari::WK::AuthenticationChallengeconst&) + 78
7 com.apple.Safari.framework 0x00007fff892bf06aSafari::WK::didReceiveAuthenticationChallengeInFrame(OpaqueWK Page const*,OpaqueWKFrame const*, OpaqueWKAuthenticationChallenge const*, void const*) + 99
8 com.apple.WebKit2 0x00007fff87bfd2f9WebKit::WebPageProxy::didReceiveAuthenticationChallenge(unsig ned long long,WebCore::AuthenticationChallenge const&, unsigned long long) + 133
9 com.apple.WebKit2 0x00007fff87bfcc49 voidCoreIPC::handleMessage<Messages::WebPageProxy::DidReceiveAuthenticationChal lenge,WebKit::WebPageProxy, void (WebKit::WebPageProxy::*)(unsigned long long,WebCore::AuthenticationChallenge const&, unsigned longlong)>(CoreIPC::ArgumentDecoder*, WebKit::WebPageProxy*, void (WebKit::WebPageProxy::*)(unsignedlong long, WebCore::AuthenticationChallenge const&, unsigned long long)) +172
10 com.apple.WebKit2 0x00007fff87bb4eb0WebKit::WebProcessProxy::didReceiveMessage(CoreIPC::Connectio n*,CoreIPC::MessageID, CoreIPC::ArgumentDecoder*) + 162
11 com.apple.WebKit2 0x00007fff87bb4d9cCoreIPC::Connection::dispatchMessage(CoreIPC::Connection::Mes sage<CoreIPC::ArgumentDecoder>&)+ 138
12 com.apple.WebKit2 0x00007fff87bb4cfbCoreIPC::Connection::dispatchMessages() + 121
13 com.apple.WebKit2 0x00007fff87bb1bef RunLoop::performWork()+ 135
14 com.apple.WebKit2 0x00007fff87bb1b3dRunLoop::performWork(void*) + 83
15 com.apple.CoreFoundation 0x00007fff82bf5401__CFRunLoopDoSources0 + 1361
16 com.apple.CoreFoundation 0x00007fff82bf35f9 __CFRunLoopRun +873
17 com.apple.CoreFoundation 0x00007fff82bf2dbfCFRunLoopRunSpecific + 575
18 com.apple.HIToolbox 0x00007fff850737eeRunCurrentEventLoopInMode + 333
19 com.apple.HIToolbox 0x00007fff850735f3 ReceiveNextEventCommon +310
20 com.apple.HIToolbox 0x00007fff850734acBlockUntilNextEventMatchingListInMode + 59
21 com.apple.AppKit 0x00007fff89944eb2 _DPSNextEvent + 708
22 com.apple.AppKit 0x00007fff89944801 -[NSApplicationnextEventMatchingMask:untilDate:inMode:dequeue:] + 155
23 com.apple.Safari.framework 0x00007fff89131452-[BrowserApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 177
24 com.apple.AppKit 0x00007fff8990a68f -[NSApplication run]+ 395
25 com.apple.AppKit 0x00007fff899033b0 NSApplicationMain +364
26 com.apple.Safari.framework 0x00007fff892ebf62 SafariMain + 200
27 com.apple.Safari 0x0000000100000f1c 0x100000000 + 3868
Thread 1: Dispatch queue: com.apple.libdispatch-manager
0 libSystem.B.dylib 0x00007fff85c9ec0a kevent + 10
1 libSystem.B.dylib 0x00007fff85ca0add_dispatch_mgr_invoke + 154
2 libSystem.B.dylib 0x00007fff85ca07b4_dispatch_queue_invoke + 185
3 libSystem.B.dylib 0x00007fff85ca02de_dispatch_worker_thread2 + 252
4 libSystem.B.dylib 0x00007fff85c9fc08 _pthread_wqthread+ 353
5 libSystem.B.dylib 0x00007fff85c9faa5 start_wqthread +13
Thread 2: WebCore: IconDatabase
0 libSystem.B.dylib 0x00007fff85cc0a6a __semwait_signal +10
1 libSystem.B.dylib 0x00007fff85cc4881 _pthread_cond_wait+ 1286
2 com.apple.WebCore 0x00007fff83815749WebCore::IconDatabase::syncThreadMainLoop() + 265
3 com.apple.WebCore 0x00007fff83812c88WebCore::IconDatabase::iconDatabaseSyncThread() + 296
4 libSystem.B.dylib 0x00007fff85cbefd6 _pthread_start +331
5 libSystem.B.dylib 0x00007fff85cbee89 thread_start + 13
Thread 3:
0 libSystem.B.dylib 0x00007fff85c85d7a mach_msg_trap + 10
1 libSystem.B.dylib 0x00007fff85c863ed mach_msg + 59
2 com.apple.QuartzCore 0x00007fff81281396CA::Render::Server::server_thread(void*) + 177
3 com.apple.QuartzCore 0x00007fff812812d6 thread_fun + 34
4 libSystem.B.dylib 0x00007fff85cbefd6 _pthread_start +331
5 libSystem.B.dylib 0x00007fff85cbee89 thread_start + 13
Thread 4: Safari: SafeBrowsingManager
0 libSystem.B.dylib 0x00007fff85c85d7a mach_msg_trap + 10
1 libSystem.B.dylib 0x00007fff85c863ed mach_msg + 59
2 com.apple.CoreFoundation 0x00007fff82bf3932 __CFRunLoopRun +1698
3 com.apple.CoreFoundation 0x00007fff82bf2dbfCFRunLoopRunSpecific + 575
4 com.apple.Safari.framework 0x00007fff892a4d39Safari::MessageRunLoop::threadBody() + 107
5 com.apple.Safari.framework 0x00007fff892a4d73Safari::MessageRunLoop::threadCallback(void*) + 9
6 libSystem.B.dylib 0x00007fff85cbefd6 _pthread_start +331
7 libSystem.B.dylib 0x00007fff85cbee89 thread_start + 13
Thread 5: Safari: SnapshotStore
0 libSystem.B.dylib 0x00007fff85cc0a6a __semwait_signal +10
1 libSystem.B.dylib 0x00007fff85cc4881 _pthread_cond_wait+ 1286
2 com.apple.JavaScriptCore 0x00007fff8863f690 ***::ThreadCondition::timedWait(***::Mutex&,double) + 64
3 com.apple.Safari.framework 0x00007fff8931ef6dSafari::MessageQueueWaitResultSafari::MessageQueue<***::RefPt r<Safari::SnapshotStore::DiskAccessMessage>>::waitForMessageFilteredWithTimeout< bool ()(***::RefPtr<Safari::SnapshotStore::DiskAccessMessage>&)>(***::RefPtr<Safari: :SnapshotStore::DiskAccessMessage>&,bool (&)(***::RefPtr<Safari::SnapshotStore::DiskAccessMessage>&),double) + 149
4 com.apple.Safari.framework 0x00007fff8931d36d Safari::SnapshotStore::diskAccessThreadBody()+ 379
5 com.apple.Safari.framework 0x00007fff8931db27Safari::SnapshotStore::diskAccessThreadCallback(void*) + 9
6 libSystem.B.dylib 0x00007fff85cbefd6 _pthread_start +331
7 libSystem.B.dylib 0x00007fff85cbee89 thread_start + 13
Thread 6: com.apple.CFSocket.private
0 libSystem.B.dylib 0x00007fff85cc9932select$DARWIN_EXTSN + 10
1 com.apple.CoreFoundation 0x00007fff82c15498 __CFSocketManager+ 824
2 libSystem.B.dylib 0x00007fff85cbefd6_pthread_start + 331
3 libSystem.B.dylib 0x00007fff85cbee89 thread_start + 13
Thread 7:
0 libSystem.B.dylib 0x00007fff85c9fa2a __workq_kernreturn+ 10
1 libSystem.B.dylib 0x00007fff85c9fe3c _pthread_wqthread+ 917
2 libSystem.B.dylib 0x00007fff85c9faa5 start_wqthread +13
Thread 8:
0 libSystem.B.dylib 0x00007fff85cc0a6a __semwait_signal +10
1 libSystem.B.dylib 0x00007fff85cc4881 _pthread_cond_wait+ 1286
2 com.apple.CoreVideo 0x00007fff889f9342CVDisplayLink::runIOThread() + 804
3 com.apple.CoreVideo 0x00007fff889f8fe3 startIOThread(void*) +139
4 libSystem.B.dylib 0x00007fff85cbefd6_pthread_start + 331
5 libSystem.B.dylib 0x00007fff85cbee89 thread_start + 13
Thread 0 crashed with X86 Thread State(64-bit):
rax: 0x0000000000000019 rbx:0x0000000000000019 rcx:0x0000000000000000 rdx: 0x00007fff7000caf0
rdi: 0x0000000000000019 rsi:0x00007fff70023d30 rbp:0x00007fff5fbfe1b0 rsp:0x00007fff5fbfe160
r8: 0x000000010055af78 r9:0x0000000100163490 r10:0x0000000000000001 r11:0x00007fff800ac330
r12: 0x00007fff70023d30 r13: 0x0000000000000000 r14: 0x00007fff7000caf0 r15: 0x00007fff5fbfe448
rip: 0x00007fff85a7e798 rfl:0x0000000000010206 cr2:0x0000000000000019
Binary Images:
0x100000000 - 0x100000fff com.apple.Safari 5.1(6534.50) <1F791A92-0E1B-FA63-8447-AD69C689F0D3>/Applications/Safari.app/Contents/MacOS/S afari
0x114c10000 - 0x114da3fe7 GLEngine ??? (???)<53A8A7E8-4846-D236-F3D9-DA3F2AF686D8>/System/Library/Frameworks/OpenGL.fr amework/Resources/GLEngine.bundle/GLEngine
0x114dea000 - 0x11520dfef libclh.dylib 3.1.1C (3.1.1)<432F5475-F934-92A0-FB49-78F03DA82176>/System/Library/Extensions/GeForce GLDriver.bundle/Contents/MacOS/libclh.dylib
0x115297000 - 0x1152bdfff GLRendererFloat ??? (???)<490221DD-53D9-178E-3F31-3A4974D34DCD>/System/Library/Frameworks/OpenGL.fr amework/Resources/GLRendererFloat.bundle/GLRendererFloat
0x200000000 - 0x200787fe7 com.apple.GeForceGLDriver 1.6.36 (6.3.6) <4F23289A-D45A-0630-8D7F-4C35A4D2AA00>/System/Library/Extensions/GeForceGLDrive r.bundle/Contents/MacOS/GeForceGLDriver
0x7fff5fc00000 - 0x7fff5fc3bdef dyld 132.1 (???)<69130DA3-7CB3-54C8-ABC5-423DECDD2AF7> /usr/lib/dyld
0x7fff80003000 - 0x7fff80088ff7 com.apple.print.framework.PrintCore 6.3(312.7) <CDFE82DD-D811-A091-179F-6E76069B432D>/System/Library/Frameworks/ApplicationSer vices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore
0x7fff80089000 - 0x7fff80312ff7 com.apple.security 6.1.2 (55002)<4419AFFC-DAE7-873E-6A7D-5C9A5A4497A6>/System/Library/Frameworks/Securit y.framework/Versions/A/Security
0x7fff80313000 - 0x7fff8035aff7 com.apple.coreui 2(114) <923E33CC-83FC-7D35-5603-FB8F348EE34B> /System/Library/PrivateFrameworks/CoreUI.framework/Versions/A/CoreUI
0x7fff80471000 - 0x7fff804efff7 com.apple.CoreText151.10 (???) <54961997-55D8-DC0F-2634-674E452D5A8E>/System/Library/Frameworks/ApplicationSer vices.framework/Versions/A/Frameworks/CoreText.framework/Versions/A/CoreText
0x7fff804f0000 - 0x7fff804fffef com.apple.opengl1.6.13 (1.6.13) <516098B3-4517-8A55-64BB-195CDAA5334D>/System/Library/Frameworks/OpenGL.framewo rk/Versions/A/OpenGL
0x7fff80500000 - 0x7fff80543ff7 libRIP.A.dylib545.0.0 (compatibility 64.0.0) <5FF3D7FD-84D8-C5FA-D640-90BB82EC651D>/System/Library/Frameworks/ApplicationSer vices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resource s/libRIP.A.dylib
0x7fff80544000 - 0x7fff8054aff7 com.apple.DiskArbitration 2.3 (2.3)<857F6E43-1EF4-7D53-351B-10DE0A8F992A>/System/Library/Frameworks/DiskArbit ration.framework/Versions/A/DiskArbitration
0x7fff8054b000 - 0x7fff80689fff com.apple.CoreData102.1 (251) <9DFE798D-AA52-6A9A-924A-DA73CB94D81A>/System/Library/Frameworks/CoreData.frame work/Versions/A/CoreData
0x7fff806e4000 - 0x7fff80880fff com.apple.WebKit6534 (6534.50) <05AEA122-3F31-0F56-4AA6-E84140C53785>/System/Library/Frameworks/WebKit.framewo rk/Versions/A/WebKit
0x7fff80881000 - 0x7fff80883fff libRadiance.dylib??? (???) <A9DB4D5D-4072-971B-DEF6-DDE645F415EA>/System/Library/Frameworks/ApplicationSer vices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/lib Radiance.dylib
0x7fff80884000 - 0x7fff8088ffff com.apple.CrashReporterSupport 10.6.7 (258)<A2CBB18C-BD1C-8650-9091-7687E780E689>/System/Library/PrivateFrameworks/Cr ashReporterSupport.framework/Versions/A/CrashReporterSupport
0x7fff80890000 - 0x7fff80891ff7 com.apple.audio.units.AudioUnit1.6.7 (1.6.7) <53299948-2554-0F8F-7501-04B34E49F6CF>/System/Library/Frameworks/AudioUnit.fram ework/Versions/A/AudioUnit
0x7fff808c2000 - 0x7fff80fbeff7 com.apple.CoreGraphics 1.545.0 (???)<58D597B1-EB3B-710E-0B8C-EC114D54E11B>/System/Library/Frameworks/Applicati onServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Cor eGraphics
0x7fff80fbf000 - 0x7fff81074fe7 com.apple.ink.framework 1.3.3 (107)<8C36373C-5473-3A6A-4972-BC29D504250F> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework /Versions/A/Ink
0x7fff8107d000 - 0x7fff8110dfff com.apple.SearchKit 1.3.0 (1.3.0)<4175DC31-1506-228A-08FD-C704AC9DF642> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchK it.framework/Versions/A/SearchKit
0x7fff8110e000 - 0x7fff8122dfe7 libcrypto.0.9.8.dylib 0.9.8 (compatibility 0.9.8)<14115D29-432B-CF02-6B24-A60CC533A09E> /usr/lib/libcrypto.0.9.8.dylib
0x7fff8122e000 - 0x7fff815cbfe7 com.apple.QuartzCore 1.6.3 (227.37)<16DFF6CD-EA58-CE62-A1D7-5F6CE3D066DD>/System/Library/Frameworks/Quartz Core.framework/Versions/A/QuartzCore
0x7fff81698000 - 0x7fff816bbfff com.apple.opencl12.3.6 (12.3.6) <42FA5783-EB80-1168-4015-B8C68F55842F>/System/Library/Frameworks/OpenCL.framewo rk/Versions/A/OpenCL
0x7fff816bc000 - 0x7fff81705fef libGLU.dylib ???(???) <1C050088-4AB2-2BC2-62E6-C969F925A945>/System/Library/Frameworks/OpenGL.framewo rk/Versions/A/Libraries/libGLU.dylib
0x7fff81706000 - 0x7fff81747fef com.apple.QD 3.36(???) <5DC41E81-32C9-65B2-5528-B33E934D5BB4>/System/Library/Frameworks/ApplicationSer vices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD
0x7fff8177d000 - 0x7fff81bc4fef com.apple.RawCamera.bundle3.7.1 (570) <5AFA87CA-DC3D-F84E-7EA1-6EABA8807766>/System/Library/CoreServices/RawCamera.bu ndle/Contents/MacOS/RawCamera
0x7fff81bc5000 - 0x7fff81bc5ff7 com.apple.Cocoa6.6 (???) <68B0BE46-6E24-C96F-B341-054CF9E8F3B6> /System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa
0x7fff81cb2000 - 0x7fff81d31fe7 com.apple.audio.CoreAudio 3.2.6 (3.2.6)<79E256EB-43F1-C7AA-6436-124A4FFB02D0> /System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio
0x7fff81d32000 - 0x7fff81deffff com.apple.CoreServices.OSServices 359.2 (359.2)<BBB8888E-18DE-5D09-3C3A-F4C029EC7886> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServi ces.framework/Versions/A/OSServices
0x7fff81df0000 - 0x7fff81e18fff com.apple.DictionaryServices 1.1.2 (1.1.2)<E9269069-93FA-2B71-F9BA-FDDD23C4A65E>/System/Library/Frameworks/CoreSer vices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/Di ctionaryServices
0x7fff81e19000 - 0x7fff81e5afff com.apple.SystemConfiguration 1.10.8 (1.10.2)<78D48D27-A9C4-62CA-2803-D0BBED82855A>/System/Library/Frameworks/System Configuration.framework/Versions/A/SystemConfiguration
0x7fff81e98000 - 0x7fff81e9cff7 libCGXType.A.dylib545.0.0 (compatibility 64.0.0) <DB710299-B4D9-3714-66F7-5D2964DE585B>/System/Library/Frameworks/ApplicationSer vices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resource s/libCGXType.A.dylib
0x7fff81e9d000 - 0x7fff81f82fef com.apple.DesktopServices1.5.11 (1.5.11) <39FAA3D2-6863-B5AB-AED9-92D878EA2438>/System/Library/PrivateFrameworks/Desktop ServicesPriv.framework/Versions/A/DesktopServicesPriv
0x7fff81ffb000 - 0x7fff82010ff7 com.apple.LangAnalysis 1.6.6 (1.6.6) <1AE1FE8F-2204-4410-C94E-0E93B003BEDA>/System/Library/Frameworks/ApplicationSer vices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnal ysis
0x7fff82011000 - 0x7fff82011ff7 com.apple.Accelerate.vecLib 3.6 (vecLib 3.6) <4CCE5D69-F1B3-8FD3-1483-E0271DB2CCF3>/System/Library/Frameworks/Accelerate.fra mework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib
0x7fff82012000 - 0x7fff8212cfef libGLProgrammability.dylib ??? (???)<8A4B86E3-0FA7-8684-2EF2-C5F8079428DB> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLProgramma bility.dylib
0x7fff8212d000 - 0x7fff82131ff7 libmathCommon.A.dylib 315.0.0 (compatibility 1.0.0)<95718673-FEEE-B6ED-B127-BCDBDB60D4E5> /usr/lib/system/libmathCommon.A.dylib
0x7fff82132000 - 0x7fff8293cfe7 libBLAS.dylib219.0.0 (compatibility 1.0.0) <FC941ECB-71D0-FAE3-DCBF-C5A619E594B8>/System/Library/Frameworks/Accelerate.fra mework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib
0x7fff8297d000 - 0x7fff829c7ff7 com.apple.Metadata10.6.3 (507.15) <2EF19055-D7AE-4D77-E589-7B71B0BC1E59>/System/Library/Frameworks/CoreServices.f ramework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata
0x7fff82ba7000 - 0x7fff82d1efe7 com.apple.CoreFoundation6.6.5 (550.43) <31A1C118-AD96-0A11-8BDF-BD55B9940EDC>/System/Library/Frameworks/CoreFoundation .framework/Versions/A/CoreFoundation
0x7fff82e30000 - 0x7fff82e3bff7 com.apple.HelpData2.0.5 (34.1.1) <24DC6CD3-02B7-9332-FF6D-F0C545857B55>/System/Library/PrivateFrameworks/HelpDat a.framework/Versions/A/HelpData
0x7fff82e7a000 - 0x7fff82e80fff libCGXCoreImage.A.dylib 545.0.0 (compatibility 64.0.0)<D2F8C7E3-CBA1-2E66-1376-04AA839DABBB>/System/Library/Frameworks/Applica tionServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/R esources/libCGXCoreImage.A.dylib
0x7fff82f82000 - 0x7fff83043fff libFontParser.dylib ??? (???)<A00BB0A7-E46C-1D07-1391-194745566C7E> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ATS.framework/Versions/A/Resources/libFontParser.dylib
0x7fff83804000 - 0x7fff83805ff7 com.apple.TrustEvaluationAgent 1.1 (1)<5952A9FA-BC2B-16EF-91A7-43902A5C07B6> /System/Library/PrivateFrameworks/TrustEvaluationAgent.framework/Versions/A/Tru stEvaluationAgent
0x7fff83806000 - 0x7fff8380cff7 IOSurface ???(???) <6AF28EC1-BCC4-9F65-AF7D-ABE60B91072A>/System/Library/Frameworks/IOSurface.fram ework/Versions/A/IOSurface
0x7fff8380d000 - 0x7fff84847fff com.apple.WebCore 6534 (6534.50)<8B0BB24A-C84C-A4F2-5544-C8071A35BBC5>/System/Library/Frameworks/WebKi t.framework/Versions/A/Frameworks/WebCore.framework/Versions/A/WebCore
0x7fff84848000 - 0x7fff84859ff7 libz.1.dylib 1.2.3(compatibility 1.0.0) <97019C74-161A-3488-41EC-A6CA8738418C>/usr/lib/libz.1.dylib
0x7fff8485a000 - 0x7fff84877ff7 libPng.dylib ???(???) <6D8E515B-E0A2-2BA1-9CAC-8CB8A8B35879>/System/Library/Frameworks/ApplicationSer vices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/lib Png.dylib
0x7fff84d7f000 - 0x7fff84d8efff com.apple.NetFS3.2.2 (3.2.2) <7CCBD70E-BF31-A7A7-DB98-230687773145>/System/Library/Frameworks/NetFS.framewor k/Versions/A/NetFS
0x7fff84f39000 - 0x7fff84f39ff7 com.apple.CoreServices 44 (44)<DC7400FB-851E-7B8A-5BF6-6F50094302FB>/System/Library/Frameworks/CoreServic es.framework/Versions/A/CoreServices
0x7fff85045000 - 0x7fff85343fff com.apple.HIToolbox 1.6.5 (???) <AD1C18F6-51CB-7E39-35DD-F16B1EB978A8>/System/Library/Frameworks/Carbon.framewo rk/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox
0x7fff85344000 - 0x7fff8537aff7 com.apple.framework.Apple80211 6.2.5 (625.6)<B67C7A65-E4FB-4419-3F31-4482E17EF203> /System/Library/PrivateFrameworks/Apple80211.framework/Versions/A/Apple80211
0x7fff8537b000 - 0x7fff8543cfef com.apple.ColorSync 4.6.6 (4.6.6)<BB2C5813-C61D-3CBA-A8F7-0E59E46EBEE8> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ColorSync.framework/Versions/A/ColorSync
0x7fff8543d000 - 0x7fff85492ff7 com.apple.framework.familycontrols 2.0.2(2020) <F09541B6-5E28-1C01-C1AE-F6A2508670C7>/System/Library/PrivateFrameworks/FamilyC ontrols.framework/Versions/A/FamilyControls
0x7fff85493000 - 0x7fff8554cfff libsqlite3.dylib9.6.0 (compatibility 9.0.0) <2C5ED312-E646-9ADE-73A9-6199A2A43150>/usr/lib/libsqlite3.dylib
0x7fff8554d000 - 0x7fff85599fff libauto.dylib ???(???) <F7221B46-DC4F-3153-CE61-7F52C8C293CF> /usr/lib/libauto.dylib
0x7fff8559a000 - 0x7fff855cdff7 libTrueTypeScaler.dylib??? (???) <69D4A213-45D2-196D-7FF8-B52A31DFD329>/System/Library/Frameworks/ApplicationSer vices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/libTrue TypeScaler.dylib
0x7fff855ce000 - 0x7fff855f5ff7 libJPEG.dylib ???(???) <46A413EA-4FD1-A050-2EF0-6279F3EAD581>/System/Library/Frameworks/ApplicationSer vices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/lib JPEG.dylib
0x7fff855f6000 - 0x7fff85696fff com.apple.LaunchServices 362.3 (362.3)<B90B7C31-FEF8-3C26-BFB3-D8A48BD2C0DA>/System/Library/Frameworks/CoreSer vices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/Launch Services
0x7fff85697000 - 0x7fff85697ff7 com.apple.Accelerate 1.6 (Accelerate 1.6)<15DF8B4A-96B2-CB4E-368D-DEC7DF6B62BB>/System/Library/Frameworks/Accelerate .framework/Versions/A/Accelerate
0x7fff8580a000 - 0x7fff85820fe7 com.apple.MultitouchSupport.framework 207.11 (207.11)<8233CE71-6F8D-8B3C-A0E1-E123F6406163> /System/Library/PrivateFrameworks/MultitouchSupport.framework/Versions/A/Multit ouchSupport
0x7fff85821000 - 0x7fff85833fe7 libsasl2.2.dylib3.15.0 (compatibility 3.0.0) <76B83C8D-8EFE-4467-0F75-275648AFED97>/usr/lib/libsasl2.2.dylib
0x7fff85834000 - 0x7fff85969fff com.apple.audio.toolbox.AudioToolbox 1.6.7 (1.6.7)<E5D7DBDB-6DDF-E6F9-C71C-86F4520EE5A3>/System/Library/Frameworks/AudioTo olbox.framework/Versions/A/AudioToolbox
0x7fff859af000 - 0x7fff859dffef com.apple.shortcut1.1 (1.1) <A99C9D8E-290B-B1E4-FEA5-CC5F2FB9C18D>/System/Library/PrivateFrameworks/Shortcu t.framework/Versions/A/Shortcut
0x7fff859e0000 - 0x7fff859e3ff7 com.apple.securityhi 4.0 (36638)<EABABBA8-AB59-599A-1884-0010C059DE62> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SecurityHI.fr amework/Versions/A/SecurityHI
0x7fff859e4000 - 0x7fff859f8ff7 com.apple.speech.synthesis.framework 3.10.35 (3.10.35)<621B7415-A0B9-07A7-F313-36BEEDD7B132>/System/Library/Frameworks/Appli cationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Version s/A/SpeechSynthesis
0x7fff85a33000 - 0x7fff85ab0fef libstdc++.6.dylib7.9.0 (compatibility 7.0.0) <35ECA411-2C08-FD7D-11B1-1B7A04921A5C>/usr/lib/libstdc++.6.dylib
0x7fff85aba000 - 0x7fff85c78ff7 com.apple.ImageIO.framework 3.0.4 (3.0.4)<0A4F51A1-4502-767B-8A4E-F14C6214EF88>/System/Library/Frameworks/Applica tionServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/ImageI O
0x7fff85c85000 - 0x7fff85e46fef libSystem.B.dylib 125.2.11 (compatibility1.0.0) <9AB4F1D1-89DC-0E8A-DC8E-A4FE4D69DB69> /usr/lib/libSystem.B.dylib
0x7fff85e47000 - 0x7fff85f1bfe7 com.apple.CFNetwork 454.12.4 (454.12.4)<C83E2BA1-1818-B3E8-5334-860AD21D1C80> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwo rk.framework/Versions/A/CFNetwork
0x7fff85f1c000 - 0x7fff85f27fff com.apple.corelocation 12.3 (12.3)<A6CFB410-2333-8BE3-658B-75A93C90A9CC> /System/Library/Frameworks/CoreLocation.framework/Versions/A/CoreLocation
0x7fff86051000 - 0x7fff86094fef libtidy.A.dylib??? (???) <2F4273D3-418B-668C-F488-7E659D3A8C23> /usr/lib/libtidy.A.dylib
0x7fff86118000 - 0x7fff861c8fff edu.mit.Kerberos6.5.11 (6.5.11) <085D80F5-C9DC-E252-C21B-03295E660C91>/System/Library/Frameworks/Kerberos.frame work/Versions/A/Kerberos
0x7fff861c9000 - 0x7fff86204fff com.apple.AE 496.5(496.5) <208DF391-4DE6-81ED-C697-14A2930D1BC6>/System/Library/Frameworks/CoreServices.f ramework/Versions/A/Frameworks/AE.framework/Versions/A/AE
0x7fff86205000 - 0x7fff86539fef com.apple.CoreServices.CarbonCore 861.39 (861.39)<1386A24D-DD15-5903-057E-4A224FAF580B> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonC ore.framework/Versions/A/CarbonCore
0x7fff869d9000 - 0x7fff86a04ff7 libxslt.1.dylib3.24.0 (compatibility 3.0.0) <8AB4CA9E-435A-33DA-7041-904BA7FA11D5>/usr/lib/libxslt.1.dylib
0x7fff86a05000 - 0x7fff86a07fff com.apple.print.framework.Print 6.1 (237.1)<CA8564FB-B366-7413-B12E-9892DA3C6157>/System/Library/Frameworks/Carbon. framework/Versions/A/Frameworks/Print.framework/Versions/A/Print
0x7fff86c0a000 - 0x7fff86c10ff7 com.apple.CommerceCore 1.0 (9.1)<3691E9BA-BCF4-98C7-EFEC-78DA6825004E>/System/Library/PrivateFrameworks/Co mmerceKit.framework/Versions/A/Frameworks/CommerceCore.framework/Versions/A/Comm erceCore
0x7fff86c11000 - 0x7fff86c12fff liblangid.dylib ??? (???)<EA4D1607-2BD5-2EE2-2A3B-632EEE5A444D> /usr/lib/liblangid.dylib
0x7fff86c13000 - 0x7fff86c8fff7 com.apple.ISSupport 1.9.7 (55)<BAE839AB-9DBD-FB23-F1F1-39445F04D8DA> /System/Library/PrivateFrameworks/ISSupport.framework/Versions/A/ISSupport
0x7fff86c90000 - 0x7fff86c93ff7 libCoreVMClient.dylib ??? (???)<E03D7C81-A3DA-D44A-A88A-DDBB98AF910B> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCoreVMClien t.dylib
0x7fff86c94000 - 0x7fff86cdcff7 libvDSP.dylib 268.0.1 (compatibility 1.0.0)<98FC4457-F405-0262-00F7-56119CA107B6>/System/Library/Frameworks/Accelera te.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib
0x7fff86d58000 - 0x7fff86d78ff7 com.apple.DirectoryService.Framework3.6 (621.11) <AD76C757-6701-BDB5-631E-1CB77D669586>/System/Library/Frameworks/DirectoryServi ce.framework/Versions/A/DirectoryService
0x7fff86d84000 - 0x7fff86d93fff libxar.1.dylib ???(???) <CBAF862A-3C77-6446-56C2-9C4461631AAF> /usr/lib/libxar.1.dylib
0x7fff86de2000 - 0x7fff86e7cfe7 com.apple.ApplicationServices.ATS 275.16 (???)<4B70A2FC-1902-5F27-5C3B-5C78C283C6EA> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ATS.framework/Versions/A/ATS
0x7fff86e7d000 - 0x7fff870fffe7 com.apple.Foundation 6.6.7 (751.62)<6F2A5BBF-6990-D561-2928-AD61E94036D9> /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
0x7fff87100000 - 0x7fff87217fef libxml2.2.dylib10.3.0 (compatibility 10.0.0) <1B27AFDD-DF87-2009-170E-C129E1572E8B>/usr/lib/libxml2.2.dylib
0x7fff87218000 - 0x7fff87229fff SyndicationUI ???(???) <117F0971-8B7E-DC2A-84C1-C8B5FA15E421>/System/Library/PrivateFrameworks/Syndica tionUI.framework/Versions/A/SyndicationUI
0x7fff8722a000 - 0x7fff87241fff com.apple.ImageCapture 6.1 (6.1)<79AB2131-2A6C-F351-38A9-ED58B25534FD> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ImageCapture. framework/Versions/A/ImageCapture
0x7fff87244000 - 0x7fff872faff7 libobjc.A.dylib227.0.0 (compatibility 1.0.0) <03140531-3B2D-1EBA-DA7F-E12CC8F63969>/usr/lib/libobjc.A.dylib
0x7fff87307000 - 0x7fff8730efff com.apple.OpenDirectory 10.6 (10.6) <4FF6AD25-0916-B21C-9E88-2CC42D90EAC7>/System/Library/Frameworks/OpenDirectory. framework/Versions/A/OpenDirectory
0x7fff87370000 - 0x7fff873d0fe7 com.apple.framework.IOKit 2.0 (???)<4F071EF0-8260-01E9-C641-830E582FA416> /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
0x7fff874e7000 - 0x7fff874ecff7 com.apple.CommonPanels 1.2.4 (91)<4D84803B-BD06-D80E-15AE-EFBE43F93605> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CommonPanels. framework/Versions/A/CommonPanels
0x7fff875e5000 - 0x7fff877a3fff libicucore.A.dylib40.0.0 (compatibility 1.0.0) <4274FC73-A257-3A56-4293-5968F3428854>/usr/lib/libicucore.A.dylib
0x7fff877a4000 - 0x7fff877e1ff7 libssl.0.9.8.dylib0.9.8 (compatibility 0.9.8) <F743389F-F25A-A77D-4FCA-D6B01AF2EE6D>/usr/lib/libssl.0.9.8.dylib
0x7fff87b18000 - 0x7fff87b49fff libGLImage.dylib??? (???) <7F102A07-E4FB-9F52-B2F6-4E2D2383CA13>/System/Library/Frameworks/OpenGL.framewo rk/Versions/A/Libraries/libGLImage.dylib
0x7fff87b7a000 - 0x7fff87b9bfff libresolv.9.dylib 41.0.0 (compatibility1.0.0) <9F322F47-0584-CB7D-5B73-9EBD670851CD> /usr/lib/libresolv.9.dylib
0x7fff87b9c000 - 0x7fff87d4dfe7 com.apple.WebKit26534 (6534.50) <1D20EA7A-C33B-BF9A-C58A-D40B8CA7F1AA> /System/Library/PrivateFrameworks/WebKit2.framework/Versions/A/WebKit2
0x7fff87d4e000 - 0x7fff88191fef libLAPACK.dylib219.0.0 (compatibility 1.0.0) <0CC61C98-FF51-67B3-F3D8-C5E430C201A9>/System/Library/Frameworks/Accelerate.fra mework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib
0x7fff88192000 - 0x7fff88296ff7 com.apple.PubSub1.0.5 (65.28) <C99BB1FE-46EA-237F-55A3-48CC2FE1F755>/System/Library/Frameworks/PubSub.framewo rk/Versions/A/PubSub
0x7fff88297000 - 0x7fff882adfef libbsm.0.dylib ???(???) <42D3023A-A1F7-4121-6417-FCC6B51B3E90> /usr/lib/libbsm.0.dylib
0x7fff885f2000 - 0x7fff885fffe7 libCSync.A.dylib545.0.0 (compatibility 64.0.0) <1C35FA50-9C70-48DC-9E8D-2054F7A266B1>/System/Library/Frameworks/ApplicationSer vices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resource s/libCSync.A.dylib
0x7fff88635000 - 0x7fff88842ff7 com.apple.JavaScriptCore 6534 (6534.49)<1D418EF7-CDBE-3832-0157-D853073948D0> /System/Library/Frameworks/JavaScriptCore.framework/Versions/A/JavaScriptCore
0x7fff88843000 - 0x7fff88896ff7 com.apple.HIServices1.8.3 (???) <F6E0C7A7-C11D-0096-4DDA-2C77793AA6CD>/System/Library/Frameworks/ApplicationSer vices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices
0x7fff88897000 - 0x7fff88897ff7 com.apple.ApplicationServices 38 (38) <10A0B9E9-4988-03D4-FC56-DDE231A02C63>/System/Library/Frameworks/ApplicationSer vices.framework/Versions/A/ApplicationServices
0x7fff88898000 - 0x7fff888d2fff libcups.2.dylib2.8.0 (compatibility 2.0.0) <539EBFDD-96D6-FB07-B128-40232C408757> /usr/lib/libcups.2.dylib
0x7fff888d3000 - 0x7fff888ecfff com.apple.CFOpenDirectory 10.6 (10.6)<401557B1-C6D1-7E1A-0D7E-941715C37BFA> /System/Library/Frameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpen Directory.framework/Versions/A/CFOpenDirectory
0x7fff888ed000 - 0x7fff888fbff7 libkxld.dylib ???(???) <8145A534-95CC-9F3C-B78B-AC9898F38C6F>/usr/lib/system/libkxld.dylib
0x7fff888fc000 - 0x7fff889d9fff com.apple.vImage4.1 (4.1) <C3F44AA9-6F71-0684-2686-D3BBC903F020> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.fr amework/Versions/A/vImage
0x7fff889f6000 - 0x7fff889f6ff7 com.apple.Carbon150 (152) <C0E61968-57F3-6EE1-8524-32A18955BAF0>/System/Library/Frameworks/Carbon.framewo rk/Versions/A/Carbon
0x7fff889f7000 - 0x7fff88a1cff7 com.apple.CoreVideo 1.6.2 (45.6)<E138C8E7-3CB6-55A9-0A2C-B73FE63EA288> /System/Library/Frameworks/CoreVideo.framework/Versions/A/CoreVideo
0x7fff88c67000 - 0x7fff88cb6fef libTIFF.dylib ???(???) <1E2593D1-A7F6-84C6-DF8F-0B46AE445926>/System/Library/Frameworks/ApplicationSer vices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/lib TIFF.dylib
0x7fff88cb7000 - 0x7fff88d00ff7 com.apple.securityinterface 4.0.1 (40418) <77FDB498-B502-050C-6AF4-1DAB17F64B6F>/System/Library/Frameworks/SecurityInterf ace.framework/Versions/A/SecurityInterface
0x7fff88d89000 - 0x7fff88df3fe7 libvMisc.dylib268.0.1 (compatibility 1.0.0) <AF0EA96D-000F-8C12-B952-CB7E00566E08>/System/Library/Frameworks/Accelerate.fra mework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib
0x7fff88df4000 - 0x7fff88e00fff libbz2.1.0.dylib1.0.5 (compatibility 1.0.0) <6FB0A8F4-72A1-D28F-E801-DE2C7498AFB9>/usr/lib/libbz2.1.0.dylib
0x7fff88e01000 - 0x7fff88e3eff7 libFontRegistry.dylib ??? (???)<4C3293E2-851B-55CE-3BE3-29C425DD5DFF> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ATS.framework/Versions/A/Resources/libFontRegistry.dylib
0x7fff890d1000 - 0x7fff898fafef com.apple.Safari.framework 6534 (6534.50)<5E989098-BEA0-9DF9-EDFA-CF05BDDEB895>/System/Library/PrivateFramework s/Safari.framework/Versions/A/Safari
0x7fff898fb000 - 0x7fff89900fff libGFXShared.dylib??? (???) <1D0D3531-9561-632C-D620-1A8652BEF5BC>/System/Library/Frameworks/OpenGL.framewo rk/Versions/A/Libraries/libGFXShared.dylib
0x7fff89901000 - 0x7fff8a2fbff7 com.apple.AppKit6.6.8 (1038.36) <4CFBE04C-8FB3-B0EA-8DDB-7E7D10E9D251>/System/Library/Frameworks/AppKit.framewo rk/Versions/C/AppKit
0x7fff8a347000 - 0x7fff8a35bfff libGL.dylib ???(???) <2ECE3B0F-39E1-3938-BF27-7205C6D0358B>/System/Library/Frameworks/OpenGL.framewo rk/Versions/A/Libraries/libGL.dylib
0x7fff8a35c000 - 0x7fff8a3abff7 com.apple.DirectoryService.PasswordServerFramework 6.1 (6.1)<01B370FB-D524-F660-3826-E85B7F0D85CD>/System/Library/PrivateFrameworks/Pa sswordServer.framework/Versions/A/PasswordServer
0x7fff8a3ac000 - 0x7fff8a3c7ff7 com.apple.openscripting 1.3.1 (?? -
Project Server 2010 Web services access with Client Certificate Authentication
We switched our SharePoint/Project Server 2010 farm to use client certificate authentication with Active Directory Federation Services (AD FS) 2.0, which is working without issue. We have some administrative Project Server Interface (PSI)
web service applications that no longer connect to server with the new authentication configuration. Our custom applications are using the WCF interface to access the public web services.
Please let us know if it is possible to authenticate with AD FS 2.0 and then call
Project Server web services. Any help or coding examples would be greatly appreciated.what is the error occurred when the custom PSI app connects?
can you upload the ULS logs here for research?
What is the user account format you specified in the code for authentication?
For proper authorization, the “user logon account” in PWA for the user needs to be changed from domain\username to the claims token (e.g.
'I:0#.w|mybusinessdomain\ewmccarty').
It requires you to manually call the UpnLogon method of
“Claims to Windows Token Service”. if (Thread.CurrentPrincipal.Identity is ClaimsIdentity)
{ var identity = (ClaimsIdentity)Thread.CurrentPrincipal.Identity; }
if (Thread.CurrentPrincipal.Identity is ClaimsIdentity)
var identity = (ClaimsIdentity)Thread.CurrentPrincipal.Identity;
Than you need to extract UPN-Claim from the identity.
Upload the verbose log if possible.
Did you see this?
http://msdn.microsoft.com/en-us/library/ff181538(v=office.14).aspx
Cheers. Happy troubleshooting !!! Sriram E - MSFT Enterprise Project Management -
How can I prevent client certificate information from being written to kjs log?
I have an application running on iPlanet Application server 6.0 that makes an SSL connection to an external site using client certificate. Problem : Every time the connection is wrapped in a client certificate, the entire SSL handshake including the key-exchange information is automatically being logged in the kjs log. How do I prevent the kjs from writing this inormation to the log ?
How are you making this SSL connection? Whatever library you are using must be writing to System.out().
You could avoid logging these messages by using file logs rather than console logs. But you could probably disable these messages by working with your SSL libraries as well. -
IOS prompts for a client certificate each time i change webpages on a site
The company intranet is published through a TMG 2010 box and we use client certificates as an extra level of authentication in addition to AD user / pass.
With any PC based browser you are prompted once for the certificate to use, however in IOS 5.1.1 on iphone and ipad we get a prompt each time you go to a new page, safari prompts for the certificate to use however the more times you change the page the more it relists the certificate in the selection window. The certificate you see in the screen shot is installed once. The first time I change the page, safari reprompts and lists 2 certificates (both the same) next time i change the page it then lists the certificate 3, then 4 then 5 times etc. The client certificate is issued directly from the root CA so this isnt the issue of IOS not supporting 2 or 3 tier certificates.
All other PC based browsers work fine and only prompt once then happily reuse that certificate when you change pages without reprompting.We're experiencing the same problem. We are also publishing internal web applications via TMG 2010, using forms based authentication with client SSL certificate authentication.
We see this problem on devices using iOS 5.1.1. Devices with iOS 6 are automatically selecting the client certificate. Unfortunately upgrading to iOS 6 is currently not an option. -
Client certificate based authentication
We have a JAVA web start application that needs to connect to an apache server and use client certificate based authentication. When javaws initiates a connection with apache server, it tries to retrieve the certificate/key from the PKCS12 keystore to present it to the apache server. We have made this work, however, javaws is prompting user to enter the password for accessing the keystore password. We do not want our users to enter this password and are looking into ways to either supply the password as one of the javaws deployment property or create an unprotected keystore. Both of our attempts have been unsuccessfull. We have tried the following
1. we passed the 3 discussed properties (javax.net.ssl.keyStore,
javax.net.ssl.keyStorePassword, javax.net.ssl.keyStoreType) in Java
Control Panel, according to the following procedure: open Control Panel,
select Java tab, click View under Java Applet Runtime Settings, set
values in Java Runtime Parameters table column. This operation added the
properties to the user's deployment file (in a new attribute named
deployment.javapi.jre.1.5.0_09.args, which held all 3 properties as a
value), but there was no effect (password window still popped up).
2. We setup the deployment.property file manually with the 3 attributes
[javax.net.ssl.keyStore, javax.net.ssl.keyStorePassword,
javax.net.ssl.keyStoreType], it didn't have any affect either.
3. When launching java applications you can set system properties as
part of the command line using the follwing format
"-D<property_name>=<property_value>", we failed to find the analogous in
javaws.
Has anyone got any ideas on how to workaround this problem? Really appreciate any help here.Hi, client cert auth is not realy the best way to protect your resources. It needs to install client cert on every workstation to access application. I think it conflict with javaws concept!
I have the same situation (protect resources and avoid password promt on start) and my solution is:
Using tomcat as web server:
Direct structure as follow:
/ApplicationRoot
/WEB-INF
/resources
- private.jar
- private.jnlp
/resources
- icon.png
- public.jarAs you can see there is no direct access to protected resources. All protected resources availiable only thrue ResourceProvider servlet, configured as follow (web.xml):
<servlet-mapping>
<servlet-name>ResourceProvider</servlet-name>
<url-pattern>/resources/secret/*</url-pattern>
</servlet-mapping>
<security-constraint>
<web-resource-collection>
<web-resource-name>protected resources awailiable from browser</web-resource-name>
<url-pattern>/resources/secret/browser/*</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>somerole</role-name>
</auth-constraint>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>
<security-role>
<role-name>somerole</role-name>
</security-role>
<login-config>
<auth-method>BASIC</auth-method>
<realm-name></realm-name>
</login-config>Code your ResourceProvider servlet to grant access only if:
- Connection is secure (ssl).
- URL pattern is "/resources/secret/browser/*" and client has pass realm.
- URL pattern is "/resources/secret/javaws/secretkey/*" (where secretkey is a pin kept both by client and server)
To Install app from browser (access private.jnpl) use "/resources/secret/browser/*" url pattern and basic auth.
To download app resources configure jnlp file as follow:
<jnlp spec="1.0+" codebase="https://host:port/AppRoot/resources/" href="secret/javaws/secretkey/private.jnlp
<information>
<icon href="icon.png"/>
</information>
<resources>
<j2se version="1.6+"/>
<jar href="secret/javaws/secretkey/private.jar" />
<jar href="public.jar" />
</resources>
</jnlp>
{code}
And last you need to do is configure ssl connector on tomcat server as follow:
{code}
<Connector port="port"
scheme="https"
secure="true"
SSLEnabled="true"
clientAuth="false"
sslProtocol="TLS"
/>
{code}
Pay attention to "clientAuth" param. Set it to "false" to avoid javaws splash cert choose dialog on every app update.
Hope it help! -
Problem with client certificate based authentication
Hello.
We are developing an AIR application that uses client
certificates for authentication. We have written a simple test case
to show the problem.
<?xml version="1.0" encoding="utf-8"?>
<mx:WindowedApplication xmlns:mx="
http://www.adobe.com/2006/mxml"
layout="absolute">
<mx:Script>
<![CDATA[
import mx.controls.Alert;
private function responseHandler(): void {
Alert.show("Response received");
]]>
</mx:Script>
<mx:HTTPService id="exampleService"
url="https://www1.aeat.es/pymes1/pacargoi.html"
showBusyCursor="true"
result="responseHandler()">
</mx:HTTPService>
<mx:Button label="Send"
click="exampleService.send()"/>
</mx:WindowedApplication>
When we click on the button, it sends the request to the
protected page and then (if you have CA emitted certificates) the
dialog appears requesting the client certificate. And it works
fine.
But next time we click on the button, the dialog requesting
the client certificate appears again.
Is there a way to stop showing the dialog every time?
Any help would be very appreciated.
Thanks a lot for your support.
Paco.I have just sent a Feature Request/Bug Report with the
following text:
"We are experiencing a problem using AIR with a server that
requires authentication via client certificate.
The dialog for selecting the client certificate appears every
time that the AIR application interacts with the server (not only
the first time).
Steps to reproduce bug:
1. Install Apache HTTP Server with SSL and require client
certificate in order to authenticate.
2. Develop an AIR Application that connects to this server
(HTTPService or RemoteObject have been tested with the same
result).
3. Every time that the AIR application connect to the
server, the dialog appears in order the user to select the client
certificate.
Results: This makes the AIR application unusable.
Expected results: The dialog requesting the client
certificate should appear the first time only."
Thanks,
Paco. -
Business Connector: present client certificate to webserver
Hello,
we are running a ssl-enabled BC 4.7 core fix 8. We want to establish a connection
from the BC to an external webserver (over https, Transport: XML). The external server requires authentication using client certificates (BC has to present it's certificate to the server).
How can I configure the BC to present a client cert to the webserver?
Currently I can find the following in the BC error log:
005AA1 B2BCORE.0009.0013 ChainVerifier: subjectDN ...
005AA2 B2BCORE.0009.0014 ChainVerifier: issuerDN ...
005AA3 B2BSERV.0048.9999 Peer sent alert: Alert Fatal: handshake failure
005AA4 B2BSERV.0048.9999 Peer sent alert: Alert Fatal: handshake failure
005AA5 B2BPCKG.0073.0039 Runtime: error in RR Flow wm.PartnerMgr.flows.605298.0000800037:ORDERS: com.wm.app.b2b.server.ServiceException: iaik.security.ssl.SSLException: Peer sent alert: Alert Fatal: handshake failure
005AA6 2BSERV.0048.9999 Peer sent alert: Alert Fatal: handshake failure
Seems like the SSL handshake fails because the BC doesn't present a client cert...
Thanks and best regards,
Jens
Edited by: Jens Wannenmacher on May 14, 2008 11:42 AM>Hello,
>did you check the logs on the server side? Are you sure the calls are arriving ? Can you switch for a first >test to HTTP to check if IP/Port are correct and nothing is blocked by a firewall ?
>The configuration you described in BC looks correct.
>Another idea is to increase the log level on BC to 8 and then retry. Then check the server log for new >interesting entries, for example of faclitities 0006 and 0009 (and maybe 0012).
>CSY
Hello,
yes the target is reachable correctly via SSL and asks for a client cert.
I started the BC with the following command line but I only get the error messages above in sapbc.log:
server.bat -log sapbc.log -debug 10
best regards,
Jens -
Lowest cost SSL accelerator for HTTPS client certificate auth testing
Hi,
I need to test some some https connections that use client certificate authentication and need a low cost ebay-purchasable cisco ssl box (I think).
My understanding is that some Cisco products can terminate https connections (once client cert auth is successful) and then pass on the http connection with a cookie value set with the Subject DN information from the client certificate - correct me if I'm wrong :).
So any suitable kit for this?
Thanks,
Marc.Hi Oliver,
Have a look at this http://forum.java.sun.com/thread.jsp?forum=2&thread=258908
You may find the answer to your question there.
Majid. -
JDBC Thin Connections with SSL and client certificates
Hi ,
we are going have a look at JDBC Thin Connections with SSL and client certificates.
I have two questions:
1. Is it possible to use SSL connections from JDBC Thin Driver and which release of the driver introduced it
2. Is it possible to use client certificates with JDBC Thin Driver and which release of the driver introduced it
Thanks for your help
regards
Markus ReichertI could not reproduce the error after appending the SSL certificate to the certdb.txt file available under $Jinitiator_Home/lib/security folder.
Steps to add the SSL Certificate:
1. Run the form with the https mode in the IE Browser.
2. Security Alert is raised.
3. Click on the View Certificate button.
4. In the Certificate Window, click on the Details tab.
5. Click on the Copy to File button to copy the certificate.
6. Copy the certificate and append to the certdb.txt file. -
IOS4, apple-mobile-web-app-capable and client certificates
IOS4 (4.0 and 4.0.1) seems to have broken apple-mobile-web-app-capable. I have a webbapplication using client certificates to authenticate the user. This worked flawless on IOS3.x. However, after having upgraded my iPhone to IOS4, the application fails when started from the springboard with an error message telling a client certificate is required (I have one installed). When I start the application from within Safari it works OK. I tracked the error down to the following line in the HTML code:
<meta name="apple-mobile-web-app-capable" content="yes" />
When I remove this line, the application works again flawless when started from the springboard. However the native look and feel are gone. As soon as I add this line to the HTML, the application works when started from Safari, but fails when started from the springboard.
Does anyone have a glue or is this a bug on the apple-mobile-web-app-capable function of IOS4?I have also experienced this problem on iOS 4.1. I want to authenticate access to a web-app using SSL client certificates but I get an error "Cannot Open ... requires a client certificate" when launching the app from the home screen. Very annoying!
Navigating to the page in Safafi prompts the user to choose which certificate to use and then loads the page successfully. Just as a side question, is there anyway to automatically associate a client certificate with a web site so that the user is never prompted to choose a certificate when accessing the site? I want an authentication process that is transparent to the user.
Maybe you are looking for
-
How can I view form details in a popup window?
Recently, something called Babylon assist took control of Firefox and I was forced to reset Firefox to get rid of this. As a consequence, I lost the ability to right click on a page and select from a list that allowed me to view form details in a pop
-
Re: system server is not running
Msconfig still not working. I still have not resoled the problem below. System Information Time of this report: 9/11/2013, 14:52:35 Machine name: YOUR-1CA66CCC78 Operating System: Windows XP Professional (5.1, Build 2600) Service Pack 3 (2600.xpsp
-
Radius authentication with ISE - wrong IP address
Hello, We are using ISE for radius authentication. I have setup a new Cisco switch stack at one of our locations and setup the network device in ISE. Unfortunately, when trying to authenticate, the ISE logs show a failure of "Could not locate Netwo
-
Change language in dictionary widget in Mavericks
Hello everyone. Does anyone know how to change the language in dictionary widget from italian to english? thanks
-
8.1 Disabled number keys and audio driver
I have a Lenovo G780 lap top that I just bought about a year in a half ago. I purchased it from Lenovo with Windows 8.0. When I updated to 8.1 recently, it wiped out the use of several of my numeric keys on both the number keys at the top across on