Webutil doesn't install certificate on client
Hi,
i try to install webutil package in my computer using the 9ids configuration.
When i execute the the form who use this package in the computer wich i installed the webutil package it run so find.
Now when i try to execute the same form with the http address of my computer, from another computer, the Webutil package doesn't install the certificate to use Webutil and Jacob package. It doesn't install nothing to this client..
What happend ?
Need some help.
Regards
Phil
Hi Franck,
It's exacty the problem. The client computer doesn't have any .dll like jacob.dll and d2kwut60.dll.
When i take a look on one client computer wich run correctly, the Jinitiator console have the the correct certificat.
The first time i execute the form wich use webutil, an install progress bar appear and on moment after a certificat java window appear. I click that i want to accept for all sessions this certificat and now all run find.
But when i try to execute the same forms on other client computer, the install progress bar doesn't appear, and the certificats have never been installed.
The form stopped on the webutill.pll, and i must abort the transaction.
Regards
Philippe
Similar Messages
-
Error 500 when installing Certificate Registration Point
Hello,
I am trying to create a testlab for Certificate Profiles in SCCM 2012 R2. I'm following http://technet.microsoft.com/en-us/library/dn270539.aspx but i'm stuck at the last part. I installed the Certificate Registration Point but I get the following error
in SCCM Component status: Certificate Registration Point is not responding to HTTP requests. The error encountered was 500. Please refer to crpctrl.log for further details.
When I check crpctrl.log:
Checking CRP service availability state
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:27:59
6040 (0x1798)
Machine name is 'SCCM.domain.local'.
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:27:59
6040 (0x1798)
Begin validation of Certificate [Thumbprint 6c7a51e1584fa851e3888dc633563cbc671bf57f] issued to 'SCCM.domain.local'
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:27:59
6040 (0x1798)
Certificate doesn't have "SSL Client Authentication" capabilities.
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:27:59
6040 (0x1798)
Completed validation of Certificate [Thumbprint 6c7a51e1584fa851e3888dc633563cbc671bf57f] issued to 'SCCM.domain.local'
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:27:59
6040 (0x1798)
Skipping this certificate which is not valid for ConfigMgr usage.
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:27:59
6040 (0x1798)
Begin validation of Certificate [Thumbprint 213e97a48ffbc19402df6d4d6dd840c92d341053] issued to 'SCCM.domain.local'
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:27:59
6040 (0x1798)
Completed validation of Certificate [Thumbprint 213e97a48ffbc19402df6d4d6dd840c92d341053] issued to 'SCCM.domain.local'
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:27:59
6040 (0x1798)
Skipping this certificate which is not valid for ConfigMgr usage.
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:27:59
6040 (0x1798)
There are no certificate(s) that meet the criteria.
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:27:59
6040 (0x1798)
Performing machine FQDN to SAN2 search.
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:27:59
6040 (0x1798)
Certificate SAN2 extension doesn't have DNS name.
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:27:59
6040 (0x1798)
Begin validation of Certificate [Thumbprint 213e97a48ffbc19402df6d4d6dd840c92d341053] issued to 'SCCM.domain.local'
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:27:59
6040 (0x1798)
Completed validation of Certificate [Thumbprint 213e97a48ffbc19402df6d4d6dd840c92d341053] issued to 'SCCM.domain.local'
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:27:59
6040 (0x1798)
Begin validation of Certificate [Thumbprint 1c9623d4708d59b008b2e3c8e1c1bab1a4e9248f] issued to 'SCCM.domain.local'
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:27:59
6040 (0x1798)
Certificate doesn't have "SSL Client Authentication" capabilities.
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:27:59
6040 (0x1798)
Completed validation of Certificate [Thumbprint 1c9623d4708d59b008b2e3c8e1c1bab1a4e9248f] issued to 'SCCM.domain.local'
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:27:59
6040 (0x1798)
Begin validation of Certificate [Thumbprint 17fb1e28e875df2a88ad7d692334f19e740bc500] issued to 'SCCM.domain.local'
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:27:59
6040 (0x1798)
Certificate has "SSL Client Authentication" capability.
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:27:59
6040 (0x1798)
Completed validation of Certificate [Thumbprint 17fb1e28e875df2a88ad7d692334f19e740bc500] issued to 'SCCM.domain.local'
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:27:59
6040 (0x1798)
Begin validation of Certificate [Thumbprint 0f6747ffedf3f8920470c3847b5af7048c58fe4d] issued to 'SCCM.domain.local'
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:27:59
6040 (0x1798)
Certificate has "SSL Client Authentication" capability.
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:27:59
6040 (0x1798)
Completed validation of Certificate [Thumbprint 0f6747ffedf3f8920470c3847b5af7048c58fe4d] issued to 'SCCM.domain.local'
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:27:59
6040 (0x1798)
>>> Selected Certificate [Thumbprint 0f6747ffedf3f8920470c3847b5af7048c58fe4d] issued to 'SCCM.domain.local' for HTTPS Client Authentication
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:27:59
6040 (0x1798)
CRP's previous status was 1 (0 = Online, 1 = Failed, 4 = Undefined)
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:28:00
6040 (0x1798)
Health check request failed, status code is 500, 'Internal Server Error'.
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:28:00
6040 (0x1798)
STATMSG: ID=10202 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_CERTIFICATE_REGISTRATION_POINT" SYS=SCCM.domain.local SITE=S01 PID=2988 TID=6040 GMTDATE=vr mrt 14 12:28:00.163 2014 ISTR0="500"
ISTR1="Internal Server Error" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:28:00
6040 (0x1798)
Completed the CRP availability check against local computer.
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:28:00
6040 (0x1798)
Starting CRP certificate maintenance...
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:28:00
6040 (0x1798)
Successfully granted permission to certificate
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:28:00
6040 (0x1798)
CRP website is using PKI issued certificate
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:28:00
6040 (0x1798)
Finished certificate maintenance...
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:28:00
6040 (0x1798)
Waiting for changes for 600 seconds
SMS_CERTIFICATE_REGISTRATION_POINT
14-03-2014 13:28:00
6040 (0x1798)
The certificate that CRP uses according to the logfile is a PKI certificate with Client Authentication so that should be OK.
When I browse to https://sccm.domain.local/CMCertificateRegistration I get HTTP Error 403.7 - Forbidden, but according to the Technet article I should get HTTP Error 404. I'm a bit lost now where to look next. Thanks.Hi,
For HTTP Error 403.7 - Forbidden, please have a look on the KB below.
http://support.microsoft.com/kb/942067
And make sure the prerequisites for Certificate Registration Point and Certificate Profiles have met.http://technet.microsoft.com/en-us/library/c1e93ef9-761f-4f60-8372-df9bf5009be0#BKMK_SupConfigSiteSystemReq
http://technet.microsoft.com/en-us/library/dn261205.aspx
Best Regards,
Joyce Li
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place. -
Is it possible to have 64-bit 11g Full Install and 32-Client on 1 computer?
Here's why I ask:
I have installed a full 64-bit 11g R2 install on my Windows 7 D: drive, installed two DB's, worked great. Then I realized application I need to support (Cognos 10.1) requires 32-bit client (for drivers) so I installed the 11g client also on D: drive as well (for space reasons).
My problem is that my registry only shows one ORACLE_HOME--the 64-bit full install whereas Cognos reqs to point to 32-bit client.
My sqlplus in the 64-bit OH worked fine (D:\oracle\app\dock\product\11.2.0\dbhome_1\BIN\sqlplus.exe) whereas the 32-bit client sqlplus (D:\oracle\client\app\dock\product\11.2.0\client_1\BIN\sqlplus.exe) did not work. The error was:
SQL*Plus: Release 11.2.0.1.0 Production on Mon Sep 26 18:02:30 2011
Copyright (c) 1982, 2010, Oracle. All rights reserved.
Enter user-name: cognos
Enter password:
ERROR:
ORA-12560: TNS:protocol adapter error
Any login id (sys, system, etc) gave same error. 64-bit sql-plus worked fine. If I opened a cmd prompt and navigated to the 32-bit sqlplus under the client this WOULD work to login (but then I noticed it was using the 64-bit ORACLE_HOME and PATH settings if I typed set). In order to fix Cognos, I changed my ORACLE_HOME and path to point to the 32-bit client (i.e. from D:\oracle\app\dock\product\11.2.0\dbhome_1 to
ORACLE_HOME = D:\oracle\client\app\dock\product\11.2.0\client_1
PATH = D:\oracle\client\app\dock\product\11.2.0\client_1\bin;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\ThinkPad\Bluetooth Software\;C:\Program Files\ThinkPad\Bluetooth Software\syswow64;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\
Guess what? This stopped both the 64-bit and 32-bit sqlplus from working, even after bouncing the computer. Now the listener (64-bit) OracleOraDb11g_home1TNSListener will also not start either.
Sooooo, I think I need to set the OH and PATH back to the 64-bit as that is what the Listener requires but any ideas how to get the 32-bit sqlplus to also work?!? The Cognos application appears to use the default server settings (most likely from ORACLE_HOME and Path) and in it I just type the name of the database and connection string, there's no real way to point it anywhere to differentiate. If it doesn't find 32-bit drivers it throws an error hence the reason I need the client sqlplus, etc to work.
Thanks in advance for any help!
Dave
Edited by: lo**** on Sep 26, 2011 4:20 PMDuplicate post.
{thread:id=2290122} -
LaserJet 2550n network printer on XP host PC, can't install Windows 7 client laptop
Have Color LaserJet 2550n network printer connected to XP host PC. I can't install Windows 7 client laptop for printer. The wireless network is fine, I can access documents back and forth, merely the printer doesn't work and there's no way to download 64bit drivers for this printer from HP.
Resolved, not solved.
I talked to HP product support. The Officejet Pro 8500 A910 will not install on Windows XP (at least the Home Edition) when networked through a router. It will install through USB. I uninstalled the program and reinstalled it with only USB connected to clean out all the network printer/scanner information. Product support claimed it would install through an ether net cable connected between the printer and computer but this does little good if you need internet access. -
How can I check what version of Java Web Start is installed on the client ?
hi,
Can anyone tell me how can I check what version of java web start is installed on the client and display a message if the client has not the good version ?
I mean:
I'd like all people running my application use java 5 and if someone using java 1.4 try to run the application get a nice screen telling him to download the latest version of Java Web Start.
Is this possible ?
Thanks in advance.Of course, I put this on my jnlp file,
<resources>
<j2se version="1.5+"/>
<jar href="..... "/>
</resources> But even with that, it doesn't display a nice message but a kind of exception instead.
Thanks in advance. -
Problems Installing Oracle 9i Client
I got problems while I'm trying to Install Oracle 9i Client on a Windows 98 PC.
When I run Setup.exe file, nothing happens, I cant See Setup dialogs.
Somebody knows what is happening.
I appreciate some help
Best regardsThis was posted by someone else sometime ago. I'm posting it again for your reference. hope this helps.
raja
You must read carefully the following steps here. If you previously installed any Oracle's products on your machine, I strongly recommend you to clean up thoroughly before install the new products.
================================================================
Uninstallation
The easiest way to remove ALL traces of Oracle software, for an 8i installation, is:
(1) Using regedit, remove the key \\HKEY_LOCAL_MACHINE\\SOFTWARE\ORACLE.
(2) Remove all the Oracle services (usually called Ora-something) from \\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services.
(3) Go to the ORACLE_HOME directory (usually C:\Oracle\Ora81). Go to the BIN directory beneath this. Rename the file OCIW32.DLL to something like OCIW32.OLD.
(4) Reboot your box.
(5) Once you have logged on again, delete the directories C:\Program Files\Oracle and C:\Oracle.
(6) Right-click on My Computer, select Properties->Environment. Edit the environmental variable PATH to remove all refernces to files in the two directories you have just deleted.
(7) Remove the Oracle folders from your Start menu.
*** Obviously, using regedit on your machine always entails risks, and I won't be held responsible if you end up trashing your system. However, the above procedure is one I have used many times with complete success. You have been warned! ;) ***
As to logging on, the "standard" Oracle accounts are:
SYS/change_on_install (SYSDBA - database owner)
SYSTEM/manager (Owns various VIEWs and utility PACKAGEs)
and (optionally):
SCOTT/tiger (Training account containing some sample tables)
If you're using PO8i on the local machine, you shouldn't need to worry about setting up NET*8 (Oracle's networking protocols)
=================================================================
Windows 95 and 98
This will remove all Oracle products, Oracle services, and Oracle registry entries from your computer.
Complete the following steps to create a Clean Machine. Backup any relevant databases before proceeding!
On Windows 95 and Windows 98:
1. Ensure you shutdown your Oracle. Right click on the Oracle Icon in the toolbar and click on the shutdown option.
2. Un-install all your Oracle products if possible. Use universal installer to do that. Ignore this step if you dont have universal installer on your machine.
3. In regedit, go to HKEY_LOCAL_MACHINE\SOFTWARE\ORACLE.
4. Delete the ORACLE key.
5. Edit your AUTOEXEC.BAT file and remove your %ORACLE_HOME%\bin and JRE paths from the path setting.
6. From the Windows Explorer (or from the command prompt), delete the Oracle directory (Oracle Base).
7. Delete <system_drive>:\Program Files\Oracle (from the Windows NT Explorer or from the command prompt).
8. Delete Icons from <system_drive>: \Windows\Start Menu\Programs\Oracle - <HOME> and <system_drive>:\Windows\StartMenu\Programs\Oracle Installation Products. Where <HOME> is the previous HOME name.
9. Reboot your computer.
On Windows NT:
1. Ensure you are logged in as a user with Administrator privileges.
2. Stop all Oracle Services through Control Panel Services. Use universal installer to un-install your Oracle products. Ignore un-install if you dont have universal installer on your machine.
3. Using regedit (at the command prompt, type regedit), go to HKEY_LOCAL_MACHINE\SOFTWARE\ORACLE and delete the ORACLE key.
4. Open HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services, and remove all keys under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services that begin with ORACLE.
5. Open HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application, and remove all keys under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application that begin with ORACLE.
6. Close regedit.
7. From the Control Panel, open System.
8. If JRE was installed by Oracle, remove the %ORACLE_HOME%\BIN path and the JRE path. For example, you may see a path similar to this one: C:\ORACLE\ORAxx\BIN;G: \Program Files\Oracle\jre\1.1.7\bin. Go to Start > Control Panel > System > Environment tab. Click on the system variable path and modify the path.
9. Delete Icons from <system_drive>:\Winnt\Profiles\All Users\Start Menu\Programs\Oracle - <HOME> and <system_drive>:\Winnt\Profiles\All Users\Start Menu\Programs\Oracle Installation Products. Where <HOME> is the previous HOME name.
10. Delete <system_drive>:\Program Files\Oracle (from the Windows NT Explorer or from the command prompt).
11. Reboot your computer.
12. Delete all ORACLE_BASE directories (You can find the Oracle homes listed in HKEY_LOCAL_MACHINE\SOFTWARE\ORACLE\ORACLE_HOMES).
================================================================
Doc ID:
Note:131299.1
Subject:
Oracle Installer 8.1.X Hangs on Machines with Pentium 4
Processors
Type:
ALERT
Status:
PUBLISHED
Content
Type:
TEXT/PLAIN
Creation
Date:
02-JAN-2001
Last
Revision Date:
18-APR-2001
This alert was modified 16-January-2001 by specifying specific
Oracle Universal
Installer Versions in the the Versions Affected section.
Oracle Universal Installer (OUI) for 8.1.x Hangs on Machines
with Pentium 4
Processors
~~~~~~~~~~~~~~~~~~
Versions Affected
~~~~~~~~~~~~~~~~~
Oracle 8.1.5
============
Oracle Universal Installer 1.6.0.9.0
Oracle 8.1.6
=============
Oracle Universal Installer 1.7.0.19.0
Oracle 8.1.7
==============
Oracle Universal Installer 1.7.1.9.0
Platforms Affected
~~~~~~~~~~~~~~~~~~
Any platform that uses the Intel Pentium 4 processor, with the
Sun JRE
and Symmantec JIT will encounter this problem. Windows NT,
Windows 2000
and NetWare platforms are confirmed to be affected.
Description
~~~~~~~~~~~
When installing Oracle Products with the Oracle Universal
Installer (8.1.x)
on machines that use the Sun JRE and Symmantec JIT, the
installer hangs.
Specifically for the Windows platform, the following version
of the Symmantec
JIT or earlier will encounter the failure:
Symantec Java! JustInTime Compiler Version 3.10.107 for JDK
1.2.
Details regarding this issue can be found at:
http://developer.intel.com/design/processor/future/manuals/knowni ssue.htm
How to determine if you have Symmantec Java for JDK 1.2:
1. Select the file "symcjit.dll" and right click on it.
2. Select Properties, then the Version tab.
3. Under Microsoft Windows*, the properties of the DLL are:
"Symantec Java! JustInTime Compiler Version 3.10.107 for
JDK 1.2 Copyright (C)
1996-99 Symantec Corporation Dynamic Link Library file".
DLLs older than this will also not work. "
Likelihood of Occurrence
~~~~~~~~~~~~~~~~~~~~~~~~
Any platform that uses the Intel Pentium 4 processor, with the
Sun JRE
and Symmantec JIT will encounter this problem. Windows NT,
Windows 2000 and NetWare platforms are confirmed to be
affected.
Possible Symptoms
~~~~~~~~~~~~~~~~~
The failure typically is that the affected application simply
terminates.
Workaround
~~~~~~~~~~
Not only will OUI be affected by this bug, most of the
post-install
configuration tools will also be affected. Running these
tools with "-nojit"
specified will avoid the hang, but it is not simple to specify
"-nojit" for
some of the products.
The following workaround works for the Windows operating
system:
a. Copy only the install directory from the CD to the hard
disk ,say, e:\temp.
b. Open oraparam.ini and make the following modifications
(Assuming CD
drive is f:)
* Change the "SOURCE=" line to use the full path to the CD
instead of a
relative path. (i.e., SOURCE=f:\stage\products.jar)
* Change the "JRE_LOCATION" line to use the full path to the
CD instead of a
relative path. (i.e.,
JRE_LOCATION=f:\stage\Components\oracle\swd\jre\1.1.7\1\DataFiles
\Expanded)
* Change the "OUI_LOCATION" line to use the full path to the
CD instead of a
relative path. (i.e.,
OUI_LOCATION=f:\stage\Components\oracle\swd\oui\1.6.0.9.0\1\DataF
iles\Expanded
* Change the "JRE_MEMORY_OPTIONS" line to add "-nojit" as the
first argument.
(i.e., JRE_MEMORY_OPTIONS=-nojit -ms16m -mx32m)
^^^^^^
* Other entries should remain the same
c. Launch setup.exe from the temporary location on your hard
drive (i.e.
e:\temp\install\win32\setup.exe). This will use the
modified
oraparam.ini and pick up the information from the CD since
the absolute
locations are specified.
Choose a Custom install and choose not to create a database
during the
install. This way, the Database Configuration Assistant will
not be launched
during installation.
The Net8 Configuration Assistant will still be launched, and
there is no way
to suppress it. You will need to kill the Net8 Configuration
Assistant if it
hangs due to the bug. The installation still will have been
successful, and
you can run the DBCA and NetCA after installation.
To kill NetCA if it hangs during installation:
In the "Configuration Tools" window, highlight the "Net8
Configuration
Assistant" and click "Stop". If that does not work, look for
the most recent
JRE process using the Task Manager, and kill it manually.
NOTE: the OUI
itself will also have a jre process. Be sure to kill the one
with the most
recent date, which should be the jre process being used for
Net8CA, not the
one for OUI itself.
After killing the configuration tools and continuing through
the installation
to the "End of Installation" screen, you should modify the
configuration tools
to use "-nojit", then call the appropriate tools from the
Start Menu.
Once installation is complete, each of the following files in
the ORACLE_HOME
needs to be modified:
assistants\dbca\dbassist.cl
assistants\dbma\dbmig.cl
assistants\ifa\ifa.cl
bin\elogin.cl
bin\owm.cl
ldap\oidamdin\oidadmin.cl
network\tools\netasst.cl
network\tools\netca.cl
owm\install\instelogin.cl
owm\install\instowm.cl
Edit the contents of the above files to add "-nojit" as shown
below:
Command=("C:\Program Files\Oracle\jre\1.1.7\BIN\JREW" -nojit
-classpath ....
this is the only thing you need to add --> ^^^^^^
Then, launch the necessary tools, like Net8CA and DBCA from
the Start Menu.
Patches
~~~~~~~
Currently there is not a patched installer available to deal
with this
problem, the workaround listed above must be used.
References
~~~~~~~~~~
[BUG:1507768] INSTALLER FAILS WHEN RUNNING ON NEW PENTIUM 4
(IV) PROCESSORS
[BUG:1507946] INSTALLER FAILS WHEN RUNNING ON NEW INTEL
PENTIUM 4 (IV) PROCESSORS
@[BUG:1518935] SYMCJIT.DLL DOESN'T WORK WITH THE NEW P4
PROCESSORS
Oracle
Support Services.
Copyright (c) 1995,2000 Oracle Corporation. All Rights
Reserved. Legal Notices and Terms of Use.
================================================================
The solution of making a local copy of the installation CD on
the hard disk and renameing symcjit.dll to symcjit.old does
work to allow installation of Oracle Client 8.1.7 on a Pentium 4
This function is useful and you can find two file to rename
===============================================================
Windows ME
Solution to the installation of Oraclei8.1.7 PE in Windows Millennium
Oracle does not support installing version 8.1.7 PE into
Windows Millennium.
As an unsupported workaround, you may add the following line
to the [compatibility95] section of win.ini prior to
installation:
Jrew=0x00080000
After setup is complete, Oracle will recommend a reboot.
There is one additional step necessary prior to reboot;
Oracle may add a non-standard path statement to the
autoexec.bat file. Please modify this SET PATH
statement to use short-filenames if you find a quoted
LFN string represented as part of the path. You can
confirm that the path was merged successfully into the
registry after reboot by examining the PATH variable
in the registry at
HKLM\System\CurrentControlSet\Control\SessionManager\Environment
Symptoms of a missing Oracle path statement in the registry are that Net8 Easy Config will not launch.
Please note that Oracle does not support the use of this
product in Windows ME, but have authorized these workarounds
for testing purposes only.
===============================================================
Windows XP Home Edition
Oracle 8i is not certified on windows XP. Even if yes, it must be Windows XP Professional.
You can install Oracle8i on windows XP Home Edition, try like this:
1 - Copy your Oracle CD into hard disk in your
machine. For example Copy from oracle8i CD into C:\Oracle\ ...
2 - Search the two files named Symcjit.dll on the D drive (where you have copied Oracle8i. You can found them in (example):
C:\Oracle\stage\Components\oracle.swd.jre\1.1.7.30\1
\DataFiles\Expanded\jre\win32\bin\symcjit.dll
3 - Rename this file (Example): symcjit_back.dll (make sure to find two files and rename them)
4 - Execute the Oracle setup.exe from C:\Oracle\setup.exe
===============================================================
When Oracle 8i dies on the install or the installer hangs, here is the fix for this, make sure that you have Service Pack 2 installed.
1. \JRE\1.3.1\ From Sun. (You can download java program at http://java.sun.com/products/jdk/1.1/jre/download-jre-windows.html)
2. Install the java file.
There is also a problem in the installation disk.
3. Make a copy of the Oracle 8i disk on the local hard disk.
4. Do a search for the two files called symcjit.dll and rename them for example: symcjit.old.
5. Install Oracle from the win32 directory.
================================================================
PLEASE NOTE THAT ORACLE DOESN'T SUPPORT THE USE OF THOSE PRODUCTS IN WINDOWS ME, BUT HAVE AUTHORIZED THESE WORKAROUNDS FOR TESTING PURPOSES ONLY -
Error installing certificate with Cisco 5508 7.4.110
hi All,
I am getting Error while installing the web certificate on a WLC.
(Cisco Controller) >transfer download start
Mode............................................. TFTP
Data Type........................................ Site Cert
TFTP Server IP................................... 10.225.5.11
TFTP Packet Timeout.............................. 6
TFTP Max Retries................................. 10
TFTP Path........................................ ./
TFTP Filename.................................... final-cert.pem
This may take some time.
Are you sure you want to start? (y/N) y
TFTP Webauth cert transfer starting.
TFTP receive complete... Installing Certificate.
Error installing certificate.
the Copy works fine but for some reason installation doesnt complete. I am having issues even with GUI mode.
Please let me know what is should do.What I mean is that you can't take another customers certificate and load it onto another customers WLC. The certificate is assigned to a FQDN (Fully Qualified Domain Name) whcih will be a DNS entry for the customer who it was registered to, so you can't and shouldn't use it for any other client. You need to generate one certificate per client.
Thanks,
Scott
Help out other by using the rating system and marking answered questions as "Answered" -
Error installing certificate - help
Hi
I am trying to install a webauth certificate on a WLC (5508 6.0.188).
I followed the "Generate CSR for Third-Party Certificates and Download Unchained Certificates to the WLC" document.
But when I try to upload the .pem file i get "the" "error installing certificate" promt.
I did not have any errors using OpenSSL.
Is there any debug commands that can help clearify the issue.
The Solution provided in this discussion has been added in the following Blog:-
https://supportforums.cisco.com/community/netpro/wireless-mobility/security-network-management/blog/2011/11/26/generate-csr-for-third-party-cert-and-download-unchained-cert-on-wireless-lan-controller-wlcI was having the same problem and worked on it for probably 8 hours trying numerous different solutions and this is what fixed it for me.
The OpenSSL versions available from www.openssl.org do not create a final.pem that work with the WLC.
I downloaded OpenSSL using this link http://www.ingate.com/files/Win32OpenSSL-0.9.6-1.0.zip and installed into C:\OpenSSL (It tries to install to program files, install location doesn't matter I just like it on the root of C)
I then followed all of the steps outline on Cisco.com http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00806e367a.shtml
Uploaded the final.pem file and it install without any problems.
My Cert was purchased from RapidSSL I don't know if that matters or not.
This was a renewal cert, so it was my second time install a cert to my WLC and I made the mistake of not keeping my original copy of OpenSSL that worked for me the first time. Don't make the mistake I made and KEEP a copy of the OpenSSL version that works for you. That will make cert renewal much easier for you. -
Saml2 error validateArtifactRequester: certificate from client is null
Hi,
I got this error ArtifactResolutionService.validateArtifactRequester: certificate from client is null, authentication is failed.>
If you see the log then you can see the handshaking between assertion and indentity works but somehow the assertion refuses the response of the identity
assertion provider
####<12-sep-2009 17:30:24 uur CEST><SAML2Filter: Processing request on URI '/appB/faces/aut/restricted.jspx'>
####<12-sep-2009 17:30:24 uur CEST><getServiceTypeFromURI(): request URI is '/appB/faces/aut/restricted.jspx'>
####<12-sep-2009 17:30:24 uur CEST><getServiceTypeFromURI(): request URI is not a service URI>
####<12-sep-2009 17:30:24 uur CEST><getServiceTypeFromURI(): returning service type 'SPinitiator'>
####<12-sep-2009 17:30:24 uur CEST><SP initiating authn request: processing>
####<12-sep-2009 17:30:24 uur CEST><SP initiating authn request: partner id is null>
####<12-sep-2009 17:30:24 uur CEST><weblogic.security.service.internal.SAMLKeyServiceImpl.getKeyInfo>
####<12-sep-2009 17:30:24 uur CEST><weblogic.security.service.internal.SAMLKeyServiceImpl.getKeyStore>
####<12-sep-2009 17:30:24 uur CEST><weblogic.security.service.internal.SAMLKeyServiceImpl.getKeyStore Checking if the Keystore file was modified>
####<12-sep-2009 17:30:24 uur CEST><SP initiating authn request: use partner binding HTTP/Artifact>
####<12-sep-2009 17:30:24 uur CEST><store saml object org.opensaml.saml2.core.impl.AuthnRequestImpl@168c85b, BASE64 encoded artifact is AAQAAMRtlWqk3m9VqV3ySu7qjJcGo08PSwH/NaPWjnhgmqYEpXMWX2STBHg=>
####<12-sep-2009 17:30:24 uur CEST><post artifact: false>
####<12-sep-2009 17:30:24 uur CEST><local ARS binding location: http://laptopedwin.wh.lan:8001/saml2/idp/sso/artifact>
####<12-sep-2009 17:30:24 uur CEST><post form template url: null>
####<12-sep-2009 17:30:24 uur CEST><URL encoded artifact: AAQAAMRtlWqk3m9VqV3ySu7qjJcGo08PSwH%2FNaPWjnhgmqYEpXMWX2STBHg%3D>
####<12-sep-2009 17:30:24 uur CEST><URL encoded relay state: null>
####<12-sep-2009 17:30:24 uur CEST><artifact is sent in http url:http://laptopedwin.wh.lan:8001/saml2/idp/sso/artifact?SAMLart=AAQAAMRtlWqk3m9VqV3ySu7qjJcGo08PSwH%2FNaPWjnhgmqYEpXMWX2STBHg%3D>
####<12-sep-2009 17:30:24 uur CEST><SAML2Servlet: Processing request on URI '/saml2/sp/ars/soap'>
####<12-sep-2009 17:30:24 uur CEST><getServiceTypeFromURI(): request URI is '/saml2/sp/ars/soap'>
####<12-sep-2009 17:30:24 uur CEST><getServiceTypeFromURI(): service URI is '/sp/ars/soap'>
####<12-sep-2009 17:30:24 uur CEST><getServiceTypeFromURI(): returning service type 'ARS'>
####<12-sep-2009 17:30:24 uur CEST><ArtifactResolutionService.process: get SoapHttpBindingReceiver as receiver and SoapHttpBindingSender as sender.>
####<12-sep-2009 17:30:24 uur CEST><ArtifactResolutionService.validateArtifactRequester: certificate from client is null, authentication is failed.>
####<12-sep-2009 17:30:24 uur CEST> <Warning> <Security> <LAPTOPEDWIN> <DefaultServer> <[ACTIVE] ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1252769424812> <BEA-000000> <[Security:096565]Artifact requester authentication failed.>
####<12-sep-2009 17:30:24 uur CEST><SoapHttpBindingSender.sendResponse: Set HTTP headers to prevent HTTP proxies cache SAML protocol messages.>
####<12-sep-2009 17:30:24 uur CEST><SoapHttpBindingSender.send: the SOAP envelope to be sent is :
>
####<12-sep-2009 17:30:24 uur CEST> <<?xml version="1.0" encoding="UTF-8"?><soap11:Envelope xmlns:soap11="http://schemas.xmlsoap.org/soap/envelope/"><soap11:Body><samlp:ArtifactResponse xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="_0xf34d9596cf9f8d37715fdf3529266b40" InResponseTo="_0xe219b059e77568bc835736caa94d6855" IssueInstant="2009-09-12T15:30:24.812Z" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">jdev_wls</saml:Issuer><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/><samlp:StatusMessage>[Security:096565]Artifact requester authentication failed.</samlp:StatusMessage></samlp:Status></samlp:ArtifactResponse></soap11:Body></soap11:Envelope>>
####<12-sep-2009 17:35:24 uur CEST> <authn_request - item: _0x9061f430c89cd074398250c710c83045 expired.>
identity provider
####<12-sep-2009 17:30:24 uur CEST><SAML2Servlet: Initialized logger service>
####<12-sep-2009 17:30:24 uur CEST><SAML2Servlet: Initialized SAML2 service>
####<12-sep-2009 17:30:24 uur CEST><SAML2Servlet: setConfigKey called with key 'default'>
####<12-sep-2009 17:30:24 uur CEST><SAML2Servlet: Processing request on URI '/saml2/idp/sso/artifact'>
####<12-sep-2009 17:30:24 uur CEST><Redirect URI cache updated.>
####<12-sep-2009 17:30:24 uur CEST><weblogic.security.service.internal.SAMLKeyServiceImpl.getKeyInfo>
####<12-sep-2009 17:30:24 uur CEST><weblogic.security.service.internal.SAMLKeyServiceImpl.getKeyStore>
####<12-sep-2009 17:30:24 uur CEST><weblogic.security.service.internal.SAMLKeyServiceImpl.getKeyStore Checking if the Keystore file was modified>
####<12-sep-2009 17:30:24 uur CEST><getServiceTypeFromURI(): request URI is '/saml2/idp/sso/artifact'>
####<12-sep-2009 17:30:24 uur CEST><getServiceTypeFromURI(): service URI is '/idp/sso/artifact'>
####<12-sep-2009 17:30:24 uur CEST><getServiceTypeFromURI(): returning service type 'SSO'>
####<12-sep-2009 17:30:24 uur CEST><Request URI: /saml2/idp/sso/artifact>
####<12-sep-2009 17:30:24 uur CEST><Method: GET>
####<12-sep-2009 17:30:24 uur CEST><Query string: SAMLart=AAQAAMRtlWqk3m9VqV3ySu7qjJcGo08PSwH%2FNaPWjnhgmqYEpXMWX2STBHg%3D>
####<12-sep-2009 17:30:24 uur CEST>< Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/x-shockwave-flash, application/xaml+xml, application/vnd.ms-xpsdocument, application/x-ms-xbap, application/x-ms-application, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*>
####<12-sep-2009 17:30:24 uur CEST>< Referer: http://127.0.0.1:7101/appB/faces/appBStart.jspx;jsessionid=TtbvKr5Myy7hC5y2j9YVZMLp2dxvYlGP3nV8KnJPtnB5svv4cnDL!-453074333?_adf.ctrl-state=m6b65gdxq_4>
####<12-sep-2009 17:30:24 uur CEST>< Accept-Language: nl>
####<12-sep-2009 17:30:24 uur CEST>< User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB6; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; OfficeLiveConnector.1.3; OfficeLivePatch.0.0)>
####<12-sep-2009 17:30:24 uur CEST>< Host: laptopedwin.wh.lan:8001>
####<12-sep-2009 17:30:24 uur CEST>< Accept-Encoding: gzip, deflate>
####<12-sep-2009 17:30:24 uur CEST>< Connection: Keep-Alive>
####<12-sep-2009 17:30:24 uur CEST>< Cache-Control: no-cache>
####<12-sep-2009 17:30:24 uur CEST><weblogic.security.service.internal.SAMLKeyServiceImpl.getKeyInfo>
####<12-sep-2009 17:30:24 uur CEST><ssl client key:Sun RSA private CRT key, 1024 bits
modulus: 135256530343776309493378499238723474761809537383354856443783031405724842963590896515127253614442774833330163469306346998433606124817086312759138932710087080464501074410925139095622741276531270633324573257815772267862467588496928149465417098076218732040047455958122894583653703895415828491462423303970267662119
public exponent: 65537
private exponent: 70314326087743699962454879977162652930937500017561071746336998641882377889887267410323718367396514008446506086626901479113065301623787031382331559843030136237857866934906267741351110674239213829006129063775109788707087302538026535943257466578949319062480441789214176315827916248430287133081293921721804088033
prime p: 11974625102832097583118096114610793613205242504983701060834332690026001982375077665162762308523793650653350947197100038932023730202787298553029195261347327
prime q: 11295262205059515784067784104204404656057034968759802138195417174670025481580489505249455835611140503620524999898446032906677280702668039750528726228078297
prime exponent p: 10636051419212951957075964614303506523311875298802298281157626077164099690190818102244374273181234298154969131746805474255337189050985724645168110919912251
prime exponent q: 9180707495599589343206474566470241653094376286920321960074362300079694178141042692915879784722129977674567430529173188898986608915112396683265394948155617
crt coefficient: 3999529359604887198322520465212803445668432210961019729502103914530388247742016641237995952808703712482862506414062073383339683451433625683775233168415551, ssl client cert chain:[Ljava.security.cert.Certificate;@767c0d>
####<12-sep-2009 17:30:24 uur CEST><get BASE64 encoded artifact from http request, value is:AAQAAMRtlWqk3m9VqV3ySu7qjJcGo08PSwH/NaPWjnhgmqYEpXMWX2STBHg=>
####<12-sep-2009 17:30:24 uur CEST><ArtifactResolver: sha-1 hash value of remote partner id is '0xc46d956aa4de6f55a95df24aeeea8c9706a34f0f'>
####<12-sep-2009 17:30:24 uur CEST><ArtifactResolver: found remote partner 'jdev' with entity ID 'jdev_wls'>
####<12-sep-2009 17:30:24 uur CEST><ArtifactResolver: returning partner: [email protected]779>
####<12-sep-2009 17:30:24 uur CEST><partner entityid isjdev_wls, end point index is:0>
####<12-sep-2009 17:30:24 uur CEST><find end point:[email protected]2a7, binding location is:http://laptopedwin.wh.lan:7101/saml2/sp/ars/soap>
####<12-sep-2009 17:30:24 uur CEST><<?xml version="1.0" encoding="UTF-8"?><samlp:ArtifactResolve xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="_0xe219b059e77568bc835736caa94d6855" IssueInstant="2009-09-12T15:30:24.671Z" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">soa</saml:Issuer><samlp:Artifact>AAQAAMRtlWqk3m9VqV3ySu7qjJcGo08PSwH/NaPWjnhgmqYEpXMWX2STBHg=</samlp:Artifact></samlp:ArtifactResolve>>
####<12-sep-2009 17:30:24 uur CEST><open connection to send samlp:ArtifactResolve. partner id:jdev_wls, endpoint url:http://laptopedwin.wh.lan:7101/saml2/sp/ars/soap>
####<12-sep-2009 17:30:24 uur CEST><isClientPasswordSet:false>
####<12-sep-2009 17:30:24 uur CEST><connect to remote ARS.>
####<12-sep-2009 17:30:24 uur CEST><SoapSynchronousBindingClient.sendAndReceive: begin to send SAMLObject to server.>
####<12-sep-2009 17:30:24 uur CEST><SoapSynchronousBindingClient.sendAndReceive: sending completed, now waiting for server response.>
####<12-sep-2009 17:30:24 uur CEST><SoapSynchronousBindingClient.sendAndReceive: response code from server is: 200>
####<12-sep-2009 17:30:24 uur CEST><SoapSynchronousBindingClient.sendAndReceive: get a HTTP_OK response, now receive a SOAP envelope message.>
####<12-sep-2009 17:30:24 uur CEST><SoapSynchronousBindingClient.sendAndReceive: found XMLObject in envelope, return it.>
####<12-sep-2009 17:30:24 uur CEST><http url connection disconnect.>
####<12-sep-2009 17:30:24 uur CEST><<?xml version="1.0" encoding="UTF-8"?><samlp:ArtifactResponse xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="_0xf34d9596cf9f8d37715fdf3529266b40" InResponseTo="_0xe219b059e77568bc835736caa94d6855" IssueInstant="2009-09-12T15:30:24.812Z" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">jdev_wls</saml:Issuer><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/><samlp:StatusMessage>[Security:096565]Artifact requester authentication failed.</samlp:StatusMessage></samlp:Status></samlp:ArtifactResponse>>
####<12-sep-2009 17:30:24 uur CEST><get samlp:ArtifactResponse and verify it.>
####<12-sep-2009 17:30:24 uur CEST><saml version:2.0>
####<12-sep-2009 17:30:24 uur CEST><inResponseTo:_0xe219b059e77568bc835736caa94d6855>
####<12-sep-2009 17:30:24 uur CEST><status code: urn:oasis:names:tc:SAML:2.0:status:Success>
####<12-sep-2009 17:30:24 uur CEST><status message: [Security:096565]Artifact requester authentication failed.>
####<12-sep-2009 17:30:24 uur CEST><[Security:096577]Failed to receive AuthnRequest document from the requester.>
####<12-sep-2009 17:30:24 uur CEST><Caused by: [Security:096502]There is no saml message in returned samlp:ArtifactResponse.>
####<12-sep-2009 17:30:24 uur CEST><exception info
com.bea.security.saml2.service.SAML2Exception: [Security:096577]Failed to receive AuthnRequest document from the requester.
at com.bea.security.saml2.service.sso.SSOServiceProcessor.receive(SSOServiceProcessor.java:301)
at com.bea.security.saml2.service.sso.SSOServiceProcessor.processAuthnRequest(SSOServiceProcessor.java:118)
at com.bea.security.saml2.service.sso.SSOServiceProcessor.process(SSOServiceProcessor.java:100)
at com.bea.security.saml2.service.sso.SingleSignOnServiceImpl.process(SingleSignOnServiceImpl.java:50)
at com.bea.security.saml2.cssservice.SAML2ServiceImpl.process(SAML2ServiceImpl.java:161)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.common.security.utils.ThreadClassLoaderContextInvocationHandler.invoke(ThreadClassLoaderContextInvocationHandler.java:27)
at $Proxy26.process(Unknown Source)
at com.bea.security.saml2.servlet.SAML2Servlet.service(SAML2Servlet.java:34)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:292)
at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:175)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3590)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2200)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2106)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1428)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
com.bea.security.saml2.binding.BindingHandlerException: [Security:096502]There is no saml message in returned samlp:ArtifactResponse.
at com.bea.security.saml2.artifact.impl.AbstractArtifactResolver.getSamlMsg(AbstractArtifactResolver.java:459)
at com.bea.security.saml2.artifact.impl.AbstractArtifactResolver.resolve(AbstractArtifactResolver.java:304)
at com.bea.security.saml2.binding.impl.ArtifactBindingReceiver.resolve(ArtifactBindingReceiver.java:77)
at com.bea.security.saml2.binding.impl.ArtifactBindingReceiver.receiveRequest(ArtifactBindingReceiver.java:40)
at com.bea.security.saml2.service.sso.SSOServiceProcessor.receive(SSOServiceProcessor.java:295)
at com.bea.security.saml2.service.sso.SSOServiceProcessor.processAuthnRequest(SSOServiceProcessor.java:118)
at com.bea.security.saml2.service.sso.SSOServiceProcessor.process(SSOServiceProcessor.java:100)
at com.bea.security.saml2.service.sso.SingleSignOnServiceImpl.process(SingleSignOnServiceImpl.java:50)
at com.bea.security.saml2.cssservice.SAML2ServiceImpl.process(SAML2ServiceImpl.java:161)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.common.security.utils.ThreadClassLoaderContextInvocationHandler.invoke(ThreadClassLoaderContextInvocationHandler.java:27)
at $Proxy26.process(Unknown Source)
at com.bea.security.saml2.servlet.SAML2Servlet.service(SAML2Servlet.java:34)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:292)
at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:175)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3590)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2200)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2106)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1428)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
>Tony,
Refer SAP Note: 730870. Q16.
Fyr from SAP Note:
Q 16: While sending a message to the RfcAdapter the error "... functiontemplate from repository was <null>" is shown. Which reasons are possible?
A: After receiving a message from the Adapter Engine, the RfcAdapter extracts the payload from the message. Normally this should be an XML document in the RFC-XML format. In this format the root element of the XML document represents the name of the function module and is enclosed in the fixed RFC namespace 'urn:sap-com:document:sap:rfc:functions'. But this only will be checked at a later point, when the conversion from XML to native RFC is done. As prerequisite of this conversion the structures and types of the function module parameters has to be known. This is also called metadata or function template. To get this function template the name of the function module is extracted from the root element of the XML document and is queried against the metadata repository of the communication channel. If the metadata repository doesn't have a function module with this name, the exception named above is thrown. Possible reasons are
The XML document, which was send to the RfcAdapter, is not a RFC-XML document. So the root element name of this document is not the name of a function module and thus can't be found in the metadata repository.
The metadata repository doesn't contain an entry for this function module name. Normally the metadata repository will be an R/3 system and it's function module repository can be searched with transaction code SE37.
raj. -
How to install certificate for B1if
Dear Experts,
I would like to know how do I install certificate for the B1if because the B1if currently behind a ISA server and when the B1if has any problem with the SSL the ISA server block the transfer and the mobile application doesn't work.
Thank you in advance.
NghiaHi,
you have to use the tomcat keytool C:\...\SAP Business One Integration\sapjre_6_64\jre\bin
(http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html) -
Finding Certificate in client's machine
Hi,
I wanted to know that my certificate is installed to the client's machine or not ? Please help me to get that registry entry for that or any other way to get the details wether certificate is installed on client machine ??.
Thanks...I have find out where the keystore resides but sometimes it is not storing in that keystore. for the different version of jdk may be it is intalling some another place. I found that keystore in default application data folder/Sun/java/deployment/security folder. keystore name is - deployment.certs
-
Install Certificate (.cer) to target machine's trustedpublisher Failed
I am attempting to use the following command to install a certificate to a client machine. This is the certificate that I am signing a silverlight XAP file with (exported as .cer without the private key).
certmgr.exe -add .\DigiCert.cer -s -r localMachine trustedpublisher
When I run this command, I get:
Error: Failed to open the distantion Store
CertMgr Failed
The cert is able to be opened and installed using the wizard just fine, however I'm trying to reduce the number of steps the end user has to take to use the silverlight application, and the 5 or so steps the wizard has just adds to their frustration.As I wasn't making any headway with this, I just decided to make my own cert installer. For those that need it, you can use the following code to install a certificate. I hard-coded the name of the cert file and which store to put it in, which could easily
be converted to parameters.
namespace MyCompany.Cert
using System;
using System.Diagnostics;
using System.IO;
using System.Security.Cryptography.X509Certificates;
using System.Security.Principal;
public class Program
enum ExitCode
Success = 0,
UnauthorizedAccess = 1,
FileNotFound = 2,
UnknownError = 10,
static int Main(string[] args)
try
var tr1 = new TextWriterTraceListener(File.CreateText(@"C:\Temp\CertificateInstallLog.txt"));
Trace.Listeners.Add(tr1);
Trace.WriteLine("Checking for admin rights");
if (!IsUserAdministrator())
Trace.WriteLine("Failed to install certificate: Requires Administrator rights");
return (int)ExitCode.UnauthorizedAccess;
Trace.WriteLine("Have Admin rights, installing certificate");
Trace.WriteLine("Create Store Reference: localMachine trustedPublisher");
var store = new X509Store(StoreName.TrustedPublisher, StoreLocation.LocalMachine);
Trace.WriteLine("Opening Store: Read/Write");
store.Open(OpenFlags.ReadWrite);
Trace.WriteLine("Adding Certificate from file");
var cert = GetCertificate();
Trace.WriteLine("Got certificate from file");
store.Add(cert);
Trace.WriteLine("closing store");
store.Close();
Trace.WriteLine("Exiting");
Trace.Flush();
return (int)ExitCode.Success;
catch (FileNotFoundException ex)
Trace.WriteLine("Failed to install certificate. File not found");
Trace.Flush();
return (int)ExitCode.FileNotFound;
catch (Exception ex)
Trace.WriteLine("Failed to install certificate. " + ex.Message);
Trace.Flush();
return (int)ExitCode.UnknownError;
public static X509Certificate2 GetCertificate()
X509Certificate2 cert;
try
Trace.WriteLine("trying path 'DigiCert.cer'");
cert = new X509Certificate2("DigiCert.cer");
catch (System.Security.Cryptography.CryptographicException)
Trace.WriteLine("Path 'DigiCert.cer' failed");
var path = string.Empty;
try
path = @"C:\Program Files" +
(Directory.Exists(@"C:\Program Files (x86)") ? @" (x86)" : string.Empty) +
@"\<someprogramfolder>\DigiCert.cer";
Trace.WriteLine("trying path " + path);
cert = new X509Certificate2(path);
catch (System.Security.Cryptography.CryptographicException ex)
Trace.WriteLine("Path '{0}' failed", path);
throw ex;
return cert;
/// <summary>Query if this object is user administrator.</summary>
/// <returns>true if user administrator, false if not.</returns>
public static bool IsUserAdministrator()
var user = WindowsIdentity.GetCurrent();
if (user == null)
throw new NullReferenceException("Could not determine windows identity");
var myPrincipal = new WindowsPrincipal(user);
if (myPrincipal.IsInRole(WindowsBuiltInRole.Administrator)) { return true; }
Trace.WriteLine("You need to run the application using the 'Run as Administrator' option");
return false;
Don't forget to include an app.manifest that tells the program to always request admin rights:
<?xml version="1.0" encoding="utf-8"?>
<asmv1:assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1" xmlns:asmv1="urn:schemas-microsoft-com:asm.v1" xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app" />
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<!-- UAC Manifest Options
If you want to change the Windows User Account Control level replace the
requestedExecutionLevel node with one of the following.
<requestedExecutionLevel level="asInvoker" uiAccess="false" />
<requestedExecutionLevel level="requireAdministrator" uiAccess="false" />
<requestedExecutionLevel level="highestAvailable" uiAccess="false" />
Specifying requestedExecutionLevel node will disable file and registry virtualization.
If you want to utilize File and Registry Virtualization for backward
compatibility then delete the requestedExecutionLevel node.
-->
<requestedExecutionLevel level="requireAdministrator" uiAccess="false" />
</requestedPrivileges>
<applicationRequestMinimum>
<defaultAssemblyRequest permissionSetReference="Custom" />
<PermissionSet class="System.Security.PermissionSet" version="1" ID="Custom" SameSite="site" Unrestricted="true" />
</applicationRequestMinimum>
</security>
</trustInfo>
<compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
<application>
</application>
</compatibility>
</asmv1:assembly> -
Certificate-Based Client authentication slowness (DSEE 6.3.1)?
I seem to be seeing very slow operations involving certain certificate-based client interactions.
I have a user with an application that connects via LDAPS (port 636), does an anonymous bind, and then binds as a specific user. This application is written using .Net (System.DirectoryServices.Protocols library) and housed on an IIS web server that has a certificate signed by Equifax.
The application performs relatively quickly (operations take an elapsed time of less than 1 second) if:
1. "Client Authentication" is set to "Allow Certificate-Based Client authentication" and there is no Equifax CA cert in the list of CA Certificates.
or 2. "Client Authentication" is set to "Do Not Allow Certificate-BAsed Client authentication".
If I have "Allow Certificate-Based Client authentication" and the Equifax CA cert installed, all operations by the application succeed but show an elapsed time of about 13-14 seconds.
The Equifax CA cert should be trusted (certutil shows flags: CT,, )
Has anyone seen anything like this? I've not been able to successfully figure out how to get additional logging RE: the certificate exchange other than grabbing the raw data from ssltap (which I'm not sure I correctly understand). I turned up the infolog levels to include connection managment and packets, but that didn't provide what I was looking for.
Additional troubleshooting info:
dsadm -V[dsadm]
dsadm : 6.3.1 B2008.1121.0308 NAT
[slapd 32-bit]
Sun Microsystems, Inc.
Sun-Java(tm)-System-Directory/6.3.1_RME_6915746 B2010.0112.1626 32-bit
ns-slapd : 6.3.1 B2008.1121.0308 NAT
Slapd Library : 6.3.1_RME_6915746 B2010.0112.1626
Front-End Library : 6.3.1 B2008.1121.0308
[slapd 64-bit]
Sun Microsystems, Inc.
Sun-Java(tm)-System-Directory/6.3.1_RME_6915746 B2010.0112.1631 64-bit
ns-slapd : 6.3.1 B2008.1121.0308 NAT
Slapd Library : 6.3.1_RME_6915746 B2010.0112.1631
Front-End Library : 6.3.1 B2008.1121.0308The only thing I can think of off the top of my head is if the server is doing a callout to an external site for something like a CRL. Even though the traffic is encrypted, you should be able to see something like that in a packet trace even so.
-
Computer stuck on "Installing Microsoft Intune Client Software"
Hi,
One of our computers installed Microsoft Intune again after his harddrive crashed. We remote wiped the specific device from the admin panel. The client installed but never really succesfully finished the installation. We tried to uninstall the agent again
using de admin console and the "ProvisioningUtil /UninstallAgents /WindowsIntune" cmd.
Now the client doesn't appear anywhere in the admin portal, Nor has the device been "enrolled" in the Company Portal-app. The agent reports with it's Icon in the tray (with Hourglass). When hovered above it states "Installing Microsoft Intune
Client Software".
Serveral days has been passed and still it hasn't resolved yet. Can someone help me here?
Note: OS: Windows 8.1 x64
Kind Regards,
UFadminPlease open a support case and they can help you remove the agents from the machine.
Thanks,
Jon L. - MSFT - This posting is provided "AS IS" with no warranties and confers no rights. -
Safari ignores installed certificates?
Hello
I'm a support technician working at AO Foundation in Switzerland, a non-profit organization researching bone fracture healing methods. Recently, we opened a surgery reference area of our website which requires the user to download and install security certificates for access. I've been having trouble with security certificates under Safari, having gone thru the following these steps:
1) goto www.aofoundation.org/subscribe/
2) Complete the subscription process
3) Using the username & password received in the emails, go to www.aofoundation.org/downloadcenter and download a security certificate
4) Install downloaded certificate to the keychain by double-clicking it.
5) goto www.aofoundation.org/surgery/ and click the blue "Enter AO Surgery" button
6) Because you've already installed the certificate, click the blue "Go!" button
Theoretically, that's all that's needed to make the certificate work, right?
Under Firefox, I have to import it to FFox's own, internal certificate store, and then I can enter the surgery reference without any problems. But I seem to be missing something in Safari? Why does Safari ignore the installed certificates?
Keychain mentions the certificate is from an untrusted source, and yet even setting it to "Always trust", Safari still ignores it. Or rather, it doesn't even let me select any security certificate, I just get rerouted to the "You have no certificate installed" web page.
Help?Problem still exist as of today...I updated my Safari 5.1 on Friday (7/22/11) and I'm also having this problem with no help on fixing it....
Maybe you are looking for
-
Report to see the g/l balance vendor wise
hi experts, i need to check the balance of one g/l "tds on contractor" vendor wise. but i am unable to get the information vendor wise.can anyone give me some idea by which t code i can see the report? Thanks Regards Konishko
-
Error message sending attachments using Comcast webmail and Safari
I'm using a G3 iMac, with 640MB memory (sorry, can't find the RAM free space), everything is working fine except that just last week, I all of a sudden cannot send attachements through my "comcast message center" webmail using Safari. I spent hours w
-
have 2 tables 1) Table X with 5 columns. 2) Table Y with 2 columns Table Y: Column 1 à Position of the columns in Table X Table Y: Column 2 à It has the data as column names of table X Is there any way to map the column names in Table Y with the col
-
I created a multiproivder on planned and actual cubes. Identified all the relevant characteristics. Key figures technical names are same in both plan and actual infocubes. How do I display my data for both plan key figures and actual key figures in t
-
Slow Safari and Firefox with sys. 10.4.11
Since installing sys. 10.4.11 both Safari and Firefox have become extremely slow. Safari can take 25, 30 or more seconds to open a page. I haven't noticed a speed change in other apps. I have a DSL router which serves 4 computers. Sys. 10.4.8 was muc