WebLogic 6.0 and NT security – HOW?

WebLogic 6.0 and NT security – HOW?
Info
- Windows NT 4.0 SP6
- WebLogic 6.0
- JDK 1.3
The WebLogic instance is running as a service under the system account, c:\bea\wlserver6.0\bin
is in the path.
We have several Primary Domain Controllers, so we made a NTRealm entry per PDC. We
rebooted the server.
Now, I would expect to see the NT users and groups in the security tab but I only
see the filerealm users and groups. Is this normal that they don’t show up?
I understand that you have to use the NT Admin tools for creating users and groups,
but I would expect to SEE them in the security tab.
We created an NT group BEA_TEST on that machine and we would like to give only members
of that group access to our application. (See files below.) It doesn’t work.
If we create a filerealm group it works fine, NTRealm not.
What are we missing here?
Regards,
Merg
----- web.xml -----
<security-constraint>
<web-resource-collection>
<web-resource-name>TEST</web-resource-name>
<description>Test</description>
<url-pattern>*</url-pattern>
<http-method>POST</http-method>
<http-method>GET</http-method>
</web-resource-collection>
<auth-constraint>
<description>Test</description>
<role-name>TESTUSERS</role-name>
</auth-constraint>
<user-data-constraint>
<description>SSL not required</description>
<transport-guarantee>NONE</transport-guarantee>
</user-data-constraint>
</security-constraint>
<security-role>
<description>TESTUSERS</description>
<role-name>TESTUSERS</role-name>
</security-role>
----- weblogic.xml -----
<security-role-assignment>
<role-name>TESTUSERS</role-name>
<principal-name>BEA_TEST</principal-name>
</security-role-assignment>

Darkit,
I have the same problem. Let me know if you find a solution to this problem.
Thanks,
Bharathi

Similar Messages

  • Weblogic 6.1 and -Djava.security.manager license failed

    I just tried to run (under jbuilder6), weblogic 6.1 sp3 (evaluation) and I have
    got a :
    $$$$$$$$$$$$$$$$ License Exception $$$$$$$$$$$$$$$$
    Unable to start WebLogic Server !!
    Null public key
    $$$$$$$$$$$$$$$$ License Exception $$$$$$$$$$$$$$$$
    The VM parameters I use are :
    -ms64m -mx64m
    -Djava.library.path=C:/bea/wlserver6.1/bin
    -Dbea.home=C:/bea
    -Dweblogic.Domain=cyradeladomain -Dweblogic.Name=name
    -Djava.security.policy==C:/bea/wlserver6.1/lib/weblogic.policy --Dweblogic.management.password=xxxxxxx
    -Djava.security.manager
    -Djava.security.debug=failure
    Did I missed some VM parameters ? What should I do to bypass this error?
    thanks!

    I'm getting the same problem running weblogic 7.0 with sp 1.
    Any other ideas on how to solve it?
    "kirann" <[email protected]> wrote:
    do you need to run the server with java security manager if not required
    then remove -Djava.security.manager
    else given full permission to the code based weblogic is in!
    thanks
    kiran
    "ezablith" <[email protected]> wrote in message
    news:3ddce60a$[email protected]..
    I just tried to run (under jbuilder6), weblogic 6.1 sp3 (evaluation)and I
    have
    got a :
    $$$$$$$$$$$$$$$$ License Exception $$$$$$$$$$$$$$$$
    Unable to start WebLogic Server !!
    Null public key
    $$$$$$$$$$$$$$$$ License Exception $$$$$$$$$$$$$$$$
    The VM parameters I use are :
    -ms64m -mx64m
    -Djava.library.path=C:/bea/wlserver6.1/bin
    -Dbea.home=C:/bea
    -Dweblogic.Domain=cyradeladomain -Dweblogic.Name=name
    -Djava.security.policy==C:/bea/wlserver6.1/lib/weblogic.policy --Dweblogic..management.password=xxxxxxx
    -Djava.security.manager
    -Djava.security.debug=failure
    Did I missed some VM parameters ? What should I do to bypass this error?
    thanks!

  • ASO cubes and dimensional security, how???

    Hi,
    I'm getting my feet wet with ASO, and I'm wondering how to implement security on dimensions in a way similar to a Planning application (which is BSO only, I understand). When administering a planning application, I can apply security to specific members in dimensions, then refresh security etc, but what can I do for an ASO cube? I'm assuming that ASO cubes can be created/administered only through EAS.
    I need to be able to control what groups/users can access certain members of dimensions of ASO cube, when they run reports on the cube.
    Thanks
    Mike

    Hi Mike,
    User management and security is the same either for ASO or BSO application from Essbase point of view.
    You can either use Native security mode or security through shared services based on the configurations done.
    Check out this link from dbag for security,
    [http://download.oracle.com/docs/cd/E12825_01/epm.111/esb_dbag/pt06.htm]

  • Weblogic 10 jaas and login.jsp and web.xml/weblogic.xml security constaints

    Hello,
    I struggled through and got the examples.security.jaas.SampleCallbackHandler.java and examples.common.utils.ExampleUtils.java/ExampleConstants.java into eclipse where they compile. A bean I made can call SambleCallbackHandler like such:
    mybean.logmein(username,password,url). I can then do a mybean.getStatus() or even a mybean.returnCode(). It does seem to correctly identlify that it is authenticating me (I see in stdout logs that it shows success or failures. The problem I have is I do not know how to apply this weblogic and web.xml/weblogic.xml so that if authentication works it redirects me to the page requiring the authentication. In web.xml I have the following set up:
    <security-role>
         <role-name>Admins</role-name>
    </security-role>
    <login-config>
         <auth-method>FORM</auth-method>
         <realm-name>default</realm-name>
         <form-login-config>
              <form-login-page>/login.jsp</form-login-page>
              <form-error-page>/badlogin.html</form-error-page>
         </form-login-config>
    </login-config>
    <security-constraint>
         <web-resource-collection>
              <web-resource-name>empower</web-resource-name>
              <description>These pages are only accessible by authorized users.</description>
              <url-pattern>/admin/*</url-pattern>
              <http-method>GET</http-method>
              <http-method>POST</http-method>
         </web-resource-collection>
    <auth-constraint>
    <description>These are the roles who have access</description>
    <role-name>Administrators</role-name>
    </auth-constraint>
         <user-data-constraint>
         <description>This is how the user data must be transmitted</description>
         <transport-guarantee>NONE</transport-guarantee>
         </user-data-constraint>
    </security-constraint>
    My weblogic.xml has:
    <?xml version="1.0" encoding="UTF-8"?>
    <wls:weblogic-web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:wls="http://www.bea.com/ns/weblogic/90" xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd http://www.bea.com/ns/weblogic/90 http://www.bea.com/ns/weblogic/90/weblogic-web-app.xsd">
    <wls:security-role-assignment>
    <wls:role-name>Admins</wls:role-name>
    <wls:principal-name>Administrators</wls:principal-name>
    <wls:principal-name>dashap</wls:principal-name>
    </wls:security-role-assignment>
    </wls:weblogic-web-app>
    With this set up, if I try to go to a page in /admin folder in my application, it correctly pops up the login page. The jaas in the bean is doing a loginContext.login(), which I thought does authentication too, but it never goes back to the /admin page I was going to that needed the authentication. With jaas, can I not use the web.xml FORM security option? Do I Need to use j_security in the login.jsp's form's action= option and j_username and j_password for the input type names? How do I use j_username/j_password things if I am using jaas? I could just ignore using the web.xml security stuff and put something in the pages that need authentication, but it would be easier if I could use jaas with the security featurs without doing all that. Note that my code above is using a realm called default just because that was what was in the example I got from the web. Does that need to be something else?

    Hi John,
    I would like magic of course. However, in this case I want something special: my authentication provider uses special means and contents of headers, cookies and service from external identity management systems to determine the user's identity.
    I do not want the application to present the login dialog! I want to derive the identity and the fact that the user is logged in from whatever the authentication provider returns in terms of Subject.
    Ideally, the flow is something like:
    - user accesses an unprotected resource - resource is shown, no interaction with authentication provider
    - user presses a link or button that takes him/her to a protected resource
    - the authentication provider is contacted to work with the identity asserter to establish the identity of the current user and create a subject object for this user
    - the application can access the subject and principals
    - ADF Security recognizes the identity and the roles (based on the principals) and coordinates access based on this.
    the authentication method is client certificate. presumably this prompts WebLogic/OPS to use an identity asserter to work with custom headers and cookies ("... when you configure a web application to use CLIENT-CERT authentication. In this case, WebLogic can perform identity assertion based on values from request headers and cookies. If the header name or cookie name matches the active token type for the provider, the value is passed to the provider."). No login form should be presented to the user, as all information required to perform the authentication is already available.
    I am trying to understand what I must do to have the ADF application adopt the subject set by the authentication provider - if anything?!
    If you more ideas to share - I would love to hear them.
    best regards,
    Lucas

  • My ipod wont let me buy apps etc... keeps saying this is the first time this device has been used and to sign in and answer security questions. I have had this account for years but cant remember the answer to the security questions. How can i fix it?

    My iPod touch wont let me buy anything, i've beem using this account for a couple of years and now it says that this is the first ime this id has been used on my device... it's not.... and to sign in and answer security questions. i cant remember the answers to the questions. How can i fix this without making a new account and losing all my stuff???

    From a Kappy  post
    The Three Best Alternatives for Security Questions and Rescue Mail
       1. Use Apple's Express Lane.
    Go to https://expresslane.apple.com ; click 'See all products and services' at the
    bottom of the page. In the next page click 'More Products and Services, then
    'Apple ID'. In the next page select 'Other Apple ID Topics' then 'Forgotten Apple
    ID security questions' and click 'Continue'. Please be patient waiting for the return
    phone call. It will come in time depending on how heavily the servers are being hit.
    2.  Call Apple Support in your country: Customer Service: Contact Apple support.
    3.  Rescue email address and how to reset Apple ID security questions.
    A substitute for using the security questions is to use 2-step verification:
    Two-step verification FAQ Get answers to frequently asked questions about two-step verification for Apple ID.

  • I have forgotten my Apple ID and my security question. How can I change it. When I try to verify it through email it never goes through...

    I've forgotten my Apple ID and my security question. I've tried to receive the Apple ID through email but I never receive the email.

    The Best Alternatives for Security Questions and Rescue Mail
        a. Send Apple an email request at: Apple - Support - iTunes Store - Contact Us.
        b. Call Apple Support in your country: Customer Service: Contact Apple support.
        c. Rescue email address and how to reset Apple ID security questions.

  • How to maintaing E-Business suite with latest product levels and bug/securi

    Hi All,
    How to maintaing E-Business suite with latest product levels and bug/security fixes?
    backup strataegies for database and E-BS suite?
    what is mean by gather user requirements?
    Please some one explain briefly...........
    Thanks

    Please post your question in the appropriate forum.
    E-Business Suite
    http://forums.oracle.com/forums/category.jspa?categoryID=3
    Thanks,
    Hussein

  • I'm running10.8.5. I have tried to install a programme but can't because it is from an unidentified developer. the box says-Your security preferences allow installation of only apps from the Mac App Store and identified developers.how do i install the pro

    i'm running10.8.5. I have tried to install a programme but can't because it is from an unidentified developer. the box says-Your security preferences allow installation of only apps from the Mac App Store and identified developers.how do i install the programme

    macjack gave you the easiest solution. Need to have admin privilieges to change this option.

  • HT5622 Will I have to awnser my security questions every time I get an app? And if so how do I get rid of them?

    Will I have to awnser my security questions every time I get an app? And if so how do I get rid of them?

    If you forgot them:
    From a Kappy  post
    The Three Best Alternatives for Security Questions and Rescue Mail
       1. Use Apple's Express Lane.
    Go to https://expresslane.apple.com ; click 'See all products and services' at the
    bottom of the page. In the next page click 'More Products and Services, then
    'Apple ID'. In the next page select 'Other Apple ID Topics' then 'Forgotten Apple
    ID security questions' and click 'Continue'. Please be patient waiting for the return
    phone call. It will come in time depending on how heavily the servers are being hit.
    2.  Call Apple Support in your country: Customer Service: Contact Apple support.
    3.  Rescue email address and how to reset Apple ID security questions.
    A substitute for using the security questions is to use 2-step verification:
    Two-step verification FAQ Get answers to frequently asked questions about two-step verification for Apple ID.

  • How to reset the Apple ID password when the emails are not received and the security questions not right?

    My foolish husband put his apple password on a website. Apple has suspended his account. He is not getting the reset password emails and the security questions are not the ones he used. We live in Malawi where there is no phone support access. How can he contact apple by chat or email (through a different account) to start getting his emails back?

    Hey Debbie,
    Welcome to Apple Support Communities.
    It sounds like your husband’s Apple ID was disabled, so he tried to reset the password for the account and hasn’t received the password reset email. Take a look at the article linked below, it provides troubleshooting tips that will resolve most issues receiving password reset emails.
    If you didn't receive your verification or reset email - Apple Support
    And, to answer your question about contacting Apple for help with the disabled Apple ID, this article outlines the options for getting help with Apple IDs.
    Contact Apple for help with Apple ID account security - Apple Support
    Cheers,
    -Jason

  • My iPad with this security code and forgot it,how can I get him ?  Is that 4 digit code

    my iPad with this security code and forgot it,how can I get him ?  Is that 4 digit code.

    Recovery Mode
    1. Disconnect the USB cable from the device, but leave the other end of the cable connected to your computer's USB port.
    2. Turn off the device: Press and hold the Sleep/Wake button for a few seconds until the red slider appears, then slide the slider. Wait for the device to turn off.
    3.While pressing and holding the Home button, reconnect the USB cable to the device. The device should turn on.
    4. Continue holding the Home button until you see the "Connect to iTunes" screen. When this screen appears, release the Home button. iTunes should alert you that it has detected a device in recovery mode. Click OK, and then click Restore to restore the device.
    Note: Data will be lost. You may have to repeat the above many times.

  • I want to change my security questions.  Can this be done and if so --how?

    I want to change my security questions.  Can this be done and if so --how?

    Click here for information. If you've forgotten the answers to the security questions and can't get them emailed to you for some reason, contact the iTunes Store staff via the link in that article.
    (76248)

  • I plug my iphone into my new mac and it tells me it cant connect securely. how do i fix this?

    i plug my iphone into my new mac and it tells me it cant connect securely. how do i fix this? i want to be able to use the cloud

    Is it a new drive or do you already have data on it ? If it is a new one, you might just want to format it with the Disk Utility else try to check the partition with the disk utility, your partition could be damaged.

  • Is it possible to make donations or purchases via 3GS, and if so how secure is it to do so? thanks!

    is it possible to make donations or purchases via 3GS, and if so how secure is it to do so? thanks!

    As you suspect, that file cannot affect your Mac, so you don't really need to worry about it. As for removing it, you could let Sophos delete it. The .MobileBackups folder is, indeed, for backups. If you use Time Machine, you will have one week's worth of backups kept there if you don't keep the backup drive connected constantly. That file would be deleted automatically tomorrow, since it would be more than one week old at that point, although it's possible that Sophos will interfere with that. (Sophos prevents any kind of access to what it deems to be a malicious file. That includes moving it to the trash, but I'm not sure what will happen if the OS tries to delete it outright.)
    One note: since you have an Android phone, you should be aware that that is almost certainly how that file got on your machine. Your phone is probably infected. Malware is a serious epidemic on Android, so you should definitely be running some kind of anti-malware software on your Android phone.

  • I forgot my appleID security answers and dont know how to reset them

    I forgot my appleID security answers and dont know how to reset them

    You need to ask Apple to reset your security questions; ways of contacting them include phoning AppleCare and asking for the Account Security team, clicking here and picking a method for your country, and filling out and submitting this form.
    They wouldn't be security questions if they could be bypassed without Apple verifying your identity.
    (105555)

Maybe you are looking for

  • Hiding a table field

    I have a maintenance view for my custom table. I have a key field which i want to hide . In the layout,  the property is disabled,, i mean i cannot make it display->invisible ON. How to do this? do we have something like LOOP AT SCREEN here also . Re

  • Shocked ! Featured apps in adobe market place - 30 downloads quanp slideshow

    Hi, I am confused, how does adobe choose the featured app in adobe market place. I am shocked to see today morning that quanp slideshow an app which was downloded only 30 times and not even rated once was in featured app, now it has 90 downlods. Same

  • Can TDMS be used to do homogeneous database copy?

    I raise this question is that for our tarabyte size DB, BDLS is too long (days!). I know TDMS is also slow, however BDLS can be avoid. We want to try TDMS for homogeneous DB copy -- change SID during copy. Is it possible and feasible? Please help inp

  • Strange problem when editing green screen clips

    Hi all, I work as a technician in a High School. Recently I was doing some green screen work with a class, we were using 10 macbooks to edit. Out of the 10, 6 had this same problem; At some point after inserting the green screen clips and the backgro

  • RPC server unavailable error message when trying to load printer software (hpd1300inkjet), winxp

    When I try to load the sofware this is the error. I would imagine this would occur w/any printer--so its not specific to the inkjet that I have.