Windows NT - Weblogic 12c Form based Auth ?

Hello,
I am migrating an EAR from Websphere to Weblogic. One of the WARs inside the EAR uses a Login that is written with Form based authentication. In Windows, I have set up the users and groups. The client browser for WAR should be able to login with the local OS username.
The code and cofig are written as specified in a [weblogic |http://docs.oracle.com/cd/E24329_01/web.1211/e24485/thin_client.htm#i1034590] tutorial. One difference between the example in the tutorial and my config is, the tuitorial relies on the default security realm is considered but my code, there is 'ES Manager realm'. I believed the ES Manager realm will provide the link between weblogic-my WAR-Local Win NT OS-users & groups. I have configured the Auth provider as WinNT and expected to choose the Win NT users that I wanted my WAR to use. But that did not happen.
The web.xml, weblogic.xml, java code and jsp are fine. I guess the configuration in the weblogic admin console is the missing link.
Can you please help me on what has to be done in the admin console.
regards,
Raj

Hello,
I entered the values at Home >Summary of Security Realms >ESP Manager Application >Users and Groups >Providers >MyDomain for the 'Provider Specific' values. The provider is LDAP. I have no clue what values are expected, as my context based help is not working in the admin console. I managed to fill values using a client called Microsoft Active Directory Explorer for LDAP. I should have filled the wrong values because when I access the Users and Groups, I get the following error in the startWeblogic command prompt.
<01-Feb-2013 16:14:01 o'clock GMT> <Warning> <Security> <BEA-099117> <The LDAP authentication provider named "MyDom
ain" failed to make connection to ldap server at ldaps://192.168.0.125:389, the error cause is: Connection reset.>
<01-Feb-2013 16:14:01 o'clock GMT> <Error> <Console> <BEA-240003> <Administration Console encountered the following erro
r: weblogic.security.providers.authentication.LDAPAtnDelegateException: [Security:090294]could not get connection
at weblogic.security.providers.authentication.LDAPAtnDelegate.getConnection(LDAPAtnDelegate.java:3492)
at weblogic.security.providers.authentication.LDAPAtnDelegate.getConnection(LDAPAtnDelegate.java:3479)
at weblogic.security.providers.authentication.LDAPAtnDelegate.listUsers(LDAPAtnDelegate.java:2267)
at weblogic.security.providers.authentication.LDAPAuthenticatorImpl.listUsers(LDAPAuthenticatorImpl.java:178)
at weblogic.security.providers.authentication.LDAPAuthenticatorMBeanImpl.listUsers(LDAPAuthenticatorMBeanImpl.ja
va:328)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:601)
at weblogic.management.jmx.modelmbean.WLSModelMBean.invoke(WLSModelMBean.java:437)
at com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.invoke(DefaultMBeanServerInterceptor.java:819)
at com.sun.jmx.mbeanserver.JmxMBeanServer.invoke(JmxMBeanServer.java:791)
at weblogic.management.jmx.mbeanserver.WLSMBeanServerInterceptorBase$16.run(WLSMBeanServerInterceptorBase.java:4
49)
at java.security.AccessController.doPrivileged(Native Method)
at weblogic.management.jmx.mbeanserver.WLSMBeanServerInterceptorBase.invoke(WLSMBeanServerInterceptorBase.java:4
47)
at weblogic.management.mbeanservers.internal.JMXContextInterceptor.invoke(JMXContextInterceptor.java:263)
at weblogic.management.jmx.mbeanserver.WLSMBeanServerInterceptorBase$16.run(WLSMBeanServerInterceptorBase.java:4
49)
at java.security.AccessController.doPrivileged(Native Method)
at weblogic.management.jmx.mbeanserver.WLSMBeanServerInterceptorBase.invoke(WLSMBeanServerInterceptorBase.java:4
47)
at weblogic.management.mbeanservers.internal.SecurityInterceptor.invoke(SecurityInterceptor.java:444)
at weblogic.management.jmx.mbeanserver.WLSMBeanServer.invoke(WLSMBeanServer.java:323)
at weblogic.management.mbeanservers.internal.JMXConnectorSubjectForwarder$11$1.run(JMXConnectorSubjectForwarder.
java:663)
at java.security.AccessController.doPrivileged(Native Method)
at weblogic.management.mbeanservers.internal.JMXConnectorSubjectForwarder$11.run(JMXConnectorSubjectForwarder.ja
va:661)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:363)
at weblogic.management.mbeanservers.internal.JMXConnectorSubjectForwarder.invoke(JMXConnectorSubjectForwarder.ja
va:654)
at javax.management.remote.rmi.RMIConnectionImpl.doOperation(RMIConnectionImpl.java:1486)
at javax.management.remote.rmi.RMIConnectionImpl.access$300(RMIConnectionImpl.java:96)
at javax.management.remote.rmi.RMIConnectionImpl$PrivilegedOperation.run(RMIConnectionImpl.java:1327)
at java.security.AccessController.doPrivileged(Native Method)
at javax.management.remote.rmi.RMIConnectionImpl.doPrivilegedOperation(RMIConnectionImpl.java:1426)
at javax.management.remote.rmi.RMIConnectionImpl.invoke(RMIConnectionImpl.java:847)
at javax.management.remote.rmi.RMIConnectionImpl_WLSkel.invoke(Unknown Source)
at weblogic.rmi.internal.ServerRequest.sendReceive(ServerRequest.java:201)
at weblogic.rmi.internal.BasicRemoteRef.invoke(BasicRemoteRef.java:299)
at javax.management.remote.rmi.RMIConnectionImpl_1211_WLStub.invoke(Unknown Source)
at javax.management.remote.rmi.RMIConnector$RemoteMBeanServerConnection.invoke(RMIConnector.java:1017)
at weblogic.management.jmx.MBeanServerInvocationHandler.doInvoke(MBeanServerInvocationHandler.java:544)
at weblogic.management.jmx.MBeanServerInvocationHandler.invoke(MBeanServerInvocationHandler.java:380)
at $Proxy72.listUsers(Unknown Source)
at com.bea.console.utils.security.UserUtils.getUsers(UserUtils.java:78)
at com.bea.console.actions.security.users.UserTableAction.getCollection(UserTableAction.java:100)
at com.bea.console.actions.security.ManagementBaseTableAction.execute(ManagementBaseTableAction.java:82)
at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431)
at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.access$201(PageFlowRequestProcessor.java:97)
at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor$ActionRunner.execute(PageFlowRequestProcessor.java
:2044)
at org.apache.beehive.netui.pageflow.interceptor.action.internal.ActionInterceptors.wrapAction(ActionInterceptor
s.java:91)
at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.processActionPerform(PageFlowRequestProcessor.java
:2116)
at com.bea.console.internal.ConsolePageFlowRequestProcessor.processActionPerform(ConsolePageFlowRequestProcessor
.java:261)
at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236)
at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.processInternal(PageFlowRequestProcessor.java:556)
at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.process(PageFlowRequestProcessor.java:853)
at org.apache.beehive.netui.pageflow.AutoRegisterActionServlet.process(AutoRegisterActionServlet.java:631)
at org.apache.beehive.netui.pageflow.PageFlowActionServlet.process(PageFlowActionServlet.java:158)
at com.bea.console.internal.ConsoleActionServlet.process(ConsoleActionServlet.java:262)
at org.apache.struts.action.ActionServlet.doGet(ActionServlet.java:414)
at com.bea.console.internal.ConsoleActionServlet.doGet(ConsoleActionServlet.java:134)
at org.apache.beehive.netui.pageflow.PageFlowUtils.strutsLookup(PageFlowUtils.java:1199)
at org.apache.beehive.netui.pageflow.PageFlowUtils.strutsLookup(PageFlowUtils.java:1129)
at com.bea.portlet.adapter.scopedcontent.framework.internal.PageFlowUtilsBeehiveDelegate.strutsLookupInternal(Pa
geFlowUtilsBeehiveDelegate.java:43)
at com.bea.portlet.adapter.scopedcontent.framework.PageFlowUtils.strutsLookup(PageFlowUtils.java:108)
at com.bea.portlet.adapter.scopedcontent.ScopedContentCommonSupport.executeAction(ScopedContentCommonSupport.jav
a:707)
at com.bea.portlet.adapter.scopedcontent.ScopedContentCommonSupport.renderInternal(ScopedContentCommonSupport.ja
va:265)
at com.bea.portlet.adapter.scopedcontent.StrutsStubImpl.render(StrutsStubImpl.java:103)
at com.bea.netuix.servlets.controls.content.NetuiContent.preRender(NetuiContent.java:292)
at com.bea.netuix.nf.ControlLifecycle$6.visit(ControlLifecycle.java:428)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:727)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
at com.bea.netuix.nf.ControlTreeWalker.walk(ControlTreeWalker.java:146)
at com.bea.netuix.nf.Lifecycle.processLifecycles(Lifecycle.java:399)
at com.bea.netuix.nf.Lifecycle.processLifecycles(Lifecycle.java:361)
at com.bea.netuix.nf.Lifecycle.runOutbound(Lifecycle.java:208)
at com.bea.netuix.nf.Lifecycle.run(Lifecycle.java:162)
at com.bea.netuix.servlets.manager.UIServlet.runLifecycle(UIServlet.java:465)
at com.bea.netuix.servlets.manager.UIServlet.doPost(UIServlet.java:291)
at com.bea.netuix.servlets.manager.UIServlet.doGet(UIServlet.java:231)
at com.bea.netuix.servlets.manager.UIServlet.service(UIServlet.java:216)
at com.bea.netuix.servlets.manager.SingleFileServlet.service(SingleFileServlet.java:275)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:844)
at com.bea.console.utils.MBeanUtilsInitSingleFileServlet.service(MBeanUtilsInitSingleFileServlet.java:64)
at weblogic.servlet.AsyncInitServlet.service(AsyncInitServlet.java:125)
at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:242)
at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:216)
at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:132)
at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:338)
at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:25)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:74)
at weblogic.servlet.internal.RequestEventsFilter.doFilter(RequestEventsFilter.java:27)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:74)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.wrapRun(WebAppServletContext.java:3288
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3254)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
at weblogic.servlet.provider.WlsSubjectHandle.run(WlsSubjectHandle.java:57)
at weblogic.servlet.internal.WebAppServletContext.doSecuredExecute(WebAppServletContext.java:2163)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2089)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2074)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1513)
at weblogic.servlet.provider.ContainerSupportProviderImpl$WlsRequestExecutor.run(ContainerSupportProviderImpl.ja
va:254)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:256)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:221)
Caused by: java.lang.reflect.InvocationTargetException
at weblogic.security.providers.authentication.LDAPAtnDelegate$LDAPFactory.newInstance(LDAPAtnDelegate.java:4166)
at weblogic.security.utils.Pool.newInstance(Pool.java:37)
at weblogic.security.utils.Pool.getInstance(Pool.java:33)
at weblogic.security.providers.authentication.LDAPAtnDelegate.getConnection(LDAPAtnDelegate.java:3487)
... 128 more
Caused by: netscape.ldap.LDAPException: Connection reset (91); Cannot connect to the LDAP server
at weblogic.security.providers.authentication.LDAPAtnDelegate$AtnLDAPSSLSocketFactory.makeSocket(LDAPAtnDelegate
.java:4647)
at netscape.ldap.LDAPConnSetupMgr.connectServer(Unknown Source)
at netscape.ldap.LDAPConnSetupMgr.openSerial(Unknown Source)
at netscape.ldap.LDAPConnSetupMgr.connect(Unknown Source)
at netscape.ldap.LDAPConnSetupMgr.openConnection(Unknown Source)
at netscape.ldap.LDAPConnThread.connect(Unknown Source)
at netscape.ldap.LDAPConnection.connect(Unknown Source)
at netscape.ldap.LDAPConnection.connect(Unknown Source)
at netscape.ldap.LDAPConnection.connect(Unknown Source)
at weblogic.security.providers.authentication.LDAPAtnDelegate$LDAPFactory.newInstance(LDAPAtnDelegate.java:4141)
... 131 more
Caused by: java.net.SocketException: Connection reset
at java.net.SocketInputStream.read(SocketInputStream.java:189)
at java.net.SocketInputStream.read(SocketInputStream.java:121)
at weblogic.socket.JSSEFilterImpl.readFromNetwork(JSSEFilterImpl.java:445)
at weblogic.socket.JSSEFilterImpl.handleUnwrapResults(JSSEFilterImpl.java:616)
at weblogic.socket.JSSEFilterImpl.unwrapAndHandleResults(JSSEFilterImpl.java:498)
at weblogic.socket.JSSEFilterImpl.doHandshake(JSSEFilterImpl.java:93)
at weblogic.socket.JSSEFilterImpl.doHandshake(JSSEFilterImpl.java:71)
at weblogic.socket.JSSESocket.startHandshake(JSSESocket.java:170)
at weblogic.security.providers.authentication.LDAPAtnDelegate$AtnLDAPSSLSocketFactory.makeSocket(LDAPAtnDelegate
.java:4644)
... 140 more
>
Can you please tell me some information link for Oracle 12c.
Thanks,
Raj

Similar Messages

Problem with JAAS Form Based Auth

Hello
I have JAAS form based auth almost working. I have an app and when I try to access it the login page comes up as planned. So far so good. Then problem is when I feed it a bad login password, it comes up with a 403 forbidden error (you are not authorized). What I want (and expected) to have happen was my custom jsp AuthFailed.jsp to come up.
If i go directly to /AuthFailed.jsp it comes up just fine (without logging in). Is there something else i need to do to get this to come up? Any help greatly appreciated. I configured these two forms by right clicking web.xml and choosing properties then under the proper menu I picked form based.
Thanks
troy

Hi,
You'll want to add something similar to the following in your web.xml file:
<login-config>
    <auth-method>FORM</auth-method>
    <form-login-config>
      <form-login-page>Login.jsp</form-login-page>
      <form-error-page>LoginError.jsp</form-error-page>
    </form-login-config>
</login-config>

Form-based Auth for DefaultWebApp

I'm using WLS 6.0 SP2 on WIN2K. I tested the sample security
web app that uses form-based auth and am trying to do something
similar w/ the default web app in mydomain.
Here's my web.xml:
<?xml version="1.0" ?>
<!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 1.2//EN"
"http://java.sun.com/j2ee/dtds/web-app_2_2.dtd">
<web-app>

<security-constraint>
<web-resource-collection>
<web-resource-name>Default</web-resource-name>
<url-pattern>/*</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>system</role-name>
</auth-constraint>
</security-constraint>
<login-config>
<auth-method>FORM</auth-method>
<form-login-config>
<form-login-page>/login.jsp</form-login-page>
<form-error-page>/fail_login.html</form-error-page>
</form-login-config>
</login-config>

<security-role>
<role-name>administrators</role-name>
</security-role>
</web-app>
When I try to access a web page, http://localhost:7001/res/hello.html,
the browser keeps trying to open that
page. It goes on and on.... I never
get challenged w/ the login form, nor
seeing the page. However, when I change
FORM to BASIC, and delete the "form-login-config"
settings, I get challenged w/ the HTTP
basic auth dialog. Enter my credentials
and I get the page.
How do I config the default web app to use form-based
auth?
Thanks for any help you can provide.
-Muwon

Problem solved. The definition of your <url-pattern>
(within <web-resource-collection>) can't inlcude where
your logon form is.
"Muwon" <[email protected]> wrote:
>
I'm using WLS 6.0 SP2 on WIN2K. I tested the sample security
web app that uses form-based auth and am trying to do something
similar w/ the default web app in mydomain.
Here's my web.xml:
<?xml version="1.0" ?>
<!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application
1.2//EN"
"http://java.sun.com/j2ee/dtds/web-app_2_2.dtd">
<web-app>

<security-constraint>
<web-resource-collection>
<web-resource-name>Default</web-resource-name>
<url-pattern>/*</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>system</role-name>
</auth-constraint>
</security-constraint>
<login-config>
<auth-method>FORM</auth-method>
<form-login-config>
<form-login-page>/login.jsp</form-login-page>
<form-error-page>/fail_login.html</form-error-page>
</form-login-config>
</login-config>

<security-role>
<role-name>administrators</role-name>
</security-role>
</web-app>
When I try to access a web page, http://localhost:7001/res/hello.html,
the browser keeps trying to open that
page. It goes on and on.... I never
get challenged w/ the login form, nor
seeing the page. However, when I change
FORM to BASIC, and delete the "form-login-config"
settings, I get challenged w/ the HTTP
basic auth dialog. Enter my credentials
and I get the page.
How do I config the default web app to use form-based
auth?
Thanks for any help you can provide.
-Muwon

Form Based Auth Scheme on IIS not working

Hi All
I am facing some issues while using Form Based Authentication scheme to protect a resource which is on IIS 6.0. The problem comes only when the action URL is other than "/access/oblix/apps/webgate/bin/webgate.dll".
The form reappears even after submitting the correct credentials. The login form also having a same action URL as of Authentication scheme and also it (action URL) has been protected with Anonymous Authentication scheme.
The same scenario works when there is GET in the login form. But when I use POST, it does not work. I have also made sure that the registry entry HKEY_LOCAL_MACHINE\SOFTWARE\Oblix\Oblix COREid\version\WebGate\postdata="yes" has been correctly set. Policy Manager and WebGate have been installed in the same folder.
Any suggestion on what I might be missing in the configuration?

Hi,
Thank you very much for your valuable inputs on this topic. I tried the changes to my web service configuration as per your suggestions & also made the remote web application adhere to form based authentication but i still see the login page everytime i create a new session with the portal. My web.xml file for remote web app looks like this now:
<web-app>
<security-constraint>
<display-name>Example Security Constraint</display-name>
<web-resource-collection>
<web-resource-name>Protected Area</web-resource-name>
<url-pattern>/protected/*</url-pattern>
<http-method>DELETE</http-method>
<http-method>GET</http-method>
<http-method>POST</http-method>
<http-method>PUT</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>admin</role-name>
</auth-constraint>
<user-data-constraint><transport-guarantee>NONE</transport-guarantee></user-data-constraint>
</security-constraint>

<login-config>
<auth-method>FORM</auth-method>
<realm-name>Example Form-Based Authentication Area</realm-name>
<form-login-config>
<form-login-page>/login.jsp</form-login-page>
<form-error-page>/error.jsp</form-error-page>
</form-login-config>
</login-config>
<security-role>
<description> An administrator </description>
<role-name>
manager
</role-name>
</security-role>
</web-app>
Now, my portlet url is http://pc:8080/TestLoginApp/protected/index.jsp
& login & post urls are:
http://pc:8080/TestLoginApp/login.jsp &
http://pc:8080/TestLoginApp/protected/index.jsp respectively.
What is it that i am still missing? Any help in resolving this would be greatly appreciated.
Thanks
Ankur

Sun AppServer 9.0 Update 1 on Solaris not supporting form-based auth

Ok, I installed Appserver 9 on a Solaris box and then started up the default domain1. When I point the browser to http://localhost:4848 I am not pointed to the login page for the admingui, it just bypasses the authentication and I am allowed to perform all admin actions without logging in. I then deployed a custom web application that uses form-based authentication that works correctly on Sun Appserver 8.1. However it behaves the same way as the admingui application (I am not presented with a login page). After setting some of the log levels to FINEST and looking at the logs it appears that when these requests are coming in they are not matching any constraint (but the constraints are defined in the web.xml). Installing Appserver 9 on a win2k box does not have this issue. Has anyone else seen this problem? Is there some security setting that is not turned on by default from the solaris install????

Ok if anyone is interested I was able to fix my problem. It looks like the issue is the version of java used with Appserver 9 on Solaris. The latest version of java i have on the machine is Java 1.5.0_06, but everytime I try to install the Appserver with this version it hangs at 39% into the installation. The next latest version of Java i have on the machine is 1.5.0_02, so that is the version I was using to install and the install works perfectly. However, after the install the form-based authentication does not work with this version of Java on Solaris.
They way I fixed this was to modify the asenv.conf file in the Appserver_Install dirrectory to point to the Java 1.5.0_06 installation and started the domain, now the form-based authentication is working as expected.
I guess my question now is does anyone know why I can't install the server with Java 1.5.0_06? But it looks like I need that version to actually run things correctly.

SP6 breaks form based auth

In a new and interesting manner, sp6 has broken fba. This seems to be
and even numbered service pack thing.
My application which works as expected with sp3 and sp5 now always
requires the user to be logged in. This includes for pages which
have no security-constraint.
Also, when I actually type in my username and password, it should post
to 'j_security_check'. However, I get the "Cannot find resource
'j_security_check' in document root ... error instead.
What's up with that?
[bryon.vcf]

Oh well, it was worth a try... The only other thing I can think of is issue
34634:
ISSUE 34634: Now web.xml files should reference Web Application 2.2 in their
public id (as per the spec).
but I don't suppose that's it either.
Good luck!
-Dominic
"Bryon G. Rigg" wrote:
I have always been deploying as a webapp. It seems strange. Sp3 and
sp5 work fine.
Dominic Tulley wrote:
Bryon,
I've installed SP6 and fba seems to work OK for me. I have a front
page with no auth required and I get to it OK. I then get a login form
before getting to the restricted pages.
The "cannot find resource j_security_check" message came up for me when I
tried to use fba while not deployed in a webapp...
-Dominic
"Bryon G. Rigg" wrote:
In a new and interesting manner, sp6 has broken fba. This seems to be
and even numbered service pack thing.
My application which works as expected with sp3 and sp5 now always
requires the user to be logged in. This includes for pages which
have no security-constraint.
Also, when I actually type in my username and password, it should post
to 'j_security_check'. However, I get the "Cannot find resource
'j_security_check' in document root ... error instead.
What's up with that?

OAM: Form based auth IIS6, problem with form action

This should be really simple, reading all the docs and forums, they all say that the form action should be
/access/oblix/apps/webgate/bin/webgate.dll
but this doesn't exist.
Virtual dir /access points to
c:\progfiles\netpoint\webcomponent\access
in there, there is no webgate folder under apps
I do find a webgate folder here:
c:\progfiles\netpoint\webgate\access\oblix\apps\webgate\bin\webgate.dll
I tried copying the webgate folder from the 2nd to the webcomponents one but getting a 404 when trying to access the webgate.dll. I can access a test.html file in that same folder.

Hi,
I believe the thread at Help with OAM Form login on IIS please should help.
-Vinod

Question on form based authentication - beginner

Hi
I am currently tracing the flow of a web -app.
The form based auth has been configured.
My doubt is ..
Incase the user is valid he is redirected to the home page of that app.
Pls help me to know where exactly this will be configured.
Thanks in advance.

It looks like the header variable (XXX_REMOTE_USER or whatever you're using) is not getting passed, so that the SSO login page appears. Given that the Basic over LDAP scheme works (I'm assuming that you simply switch schemes in the OAM Policy Domain to verify this?) the only thing I can think of is that you are setting the header variable in the authentication actions only. If this is the case, please try adding the header variable also to the Authorisation Success actions in the Policy Domain that protects /sso/auth/ and see if that makes a difference.
Regards,
Colin

Creating Form Based Authentication

Hi,
When i am creating Form Based Authentication then i am giving in the action field of the login and the scheme as "webgate.dll" but when i am using it then i am getting 403 error for any user.
Can anybody help me

There is a metalink note on how to configure form based auth. Pretty straightforward.
COREid 7.0.4: SettingUp Authentication Scheme in a NutShell
Doc ID: Note:401944.1

Forcing specific clients or groups to use forms based authentication (FBA) instead of windows based authentication (WIA) with ADFS

Hi,
We are have a quite specific issue. The problem is most likely by design in ADFS 3.0 (running on Windows Server 2012 R2) and we are trying to find a "work-around".
Most users in the organization is using their own personal computer and everything is fine and working as expected, single sign-on (WIA) internally to Office 365 and forms based (FBA) externally (using Citrix NetScaler as reverse proxy and load
balancing with the correct rewrites to add client-ip, proxy header and URL-transformation).
The problem occurs for a few (50-100) users where they are sharing the same computer, automatically logged on to the computer using a generic AD-user (same for all of them). This AD-user they are logged on with does not have any access to Office365
and if they try to access SharePoint Online they receive an error that they can't login (from SharePoint Online, not ADFS).
We can't change this, they need to have this generic account logged on to these computers. The issue occurs when a user that has access to SharePoint Online tries to access it when logged on with a generic account.
They are not able to "switch" from the generic account in ADFS / SharePoint Online to their personal account.
The only way I've found that may work is removing IE as a WIA-capable agent and deploy a User-Agent version string specific to most users but not the generic account.
My question to you: Is there another way? Maybe when ADFS sees the generic user, it forces forms based authentication or something like that?
Best regards,
Simon

I'd go with your original workaround using the user-agent and publishing a GPO for your normal users that elects to use a user-agent string associated with Integrated Windows Auth.. for the generic accounts, I'd look at using a loopback policy that overwrites
that user agent setting, so that forms logon is preferred for that subset of users. I don't think the Netscaler here is useful in this capacity as it's a front-end proxy and you need to evaluate the AuthZ rules on the AD FS server after the request has been
proxied. The error pages in Windows Server 2012 R2 are canned as the previous poster mentioned and difficult to customize (Javascript only)...
http://blog.auth360.net

Form based security in WebLogic 7.0

I'm sorry for the beginner level question, but I seem to be missing a critical step
in getting Form based security to work. I have a Web application comprised of several
JSPs. I want to attache simple FORM based security contrainsts to all pages in the
app. Here are the exceprts from my web.xml:
<security-constraint>
<web-resource-collection>
<web-resource-name>DTSTAT</web-resource-name>
<url-pattern>/StateServlet/*</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>Sysops</role-name>
</auth-constraint>
<user-data-constraint>
<transport-guarantee>NONE</transport-guarantee>
</user-data-constraint>
</security-constraint>
<login-config>
<auth-method>FORM</auth-method>
<form-login-config>
<form-login-page>/StateServlet/login.html</form-login-page>
<form-error-page>/StateServlet/login-error.html</form-error-page>
</form-login-config>
</login-config>
<security-role>
<role-name>Sysops</role-name>
</security-role>
The app deploys correctly and I have verified that the constrinsts, etc. are recognized
by WebLogic by inspecting the content displayed from the Admin console under the
"Edit Web Apllication Deployment Descriptor" link - all looks as I had expected and
matches the XML configuration above.
I then use the "Define Resources and Roles for Web Resource Collections" link. Under
the "Define Policies" section I see the constraints as defined above. I then use
the "Define Roles" link to define the "Sysops" role for this application and add
the condition "Caller is a member of the group" and use Administrators as the Group.
From this point, I invoke one of the JSPS in the app and presented with the Login
page as expected. However, no matter what I enter for user and password, I always
get the login-error page back. I'm purposely trying to keep this simple so that
I can use the system user as a test case (who is a member of the Administartors group).
However, I have also created an additional separate user and added them to the Administartors
group as well with the same unsuccessful results.
Can anyone help me out please? I've been reading the docs and seem to be missing
a key element somewhere.
Thanks in advance,
Todd

          Try to refer to the documentation for
          Configuring Security in Web Applications at
          http://e-docs.bea.com/wls/docs70///webapp/security.html
          Does the weblogic.log file contain any error or warning
          messages corresponding to your problem ?
          If you have a test case to reproduce the problem, you
          can contact BEA support at [email protected]
          Thanks
          Developer Relations Engineer

Creating a windows Service for Weblogic 12c Domain hosting Apex 2.2 listener

Hi Guys,
Does anyone have experience of Weblogic 12c under windows?
I have some difficulties to create a windows service for a domain.
Here is the script to create the service:
echo off
SETLOCAL
set DOMAIN_NAME=PMU
set USERDOMAIN_HOME=C:\Oracle\Middleware\user_projects\domains\PMU
set SERVER_NAME=LICORNE2012
set WL_HOME=C:\Oracle\Middleware\wlserver_12.1
set PRODUCTION_MODE=true
set JAVA_OPTIONS=-Dweblogic.Name=LICORNE2012
set WLS_USER=weblogic
set WLS_PW=password
set ADMIN_URL=http://LICORNE2012:7001
set MEM_ARGS=-Xms256m –Xmx256m
call "C:\Oracle\Middleware\wlserver_12.1\server\bin\installSvc.cmd"
ENDLOCAL
The service is created and when I start the service, it start then stop few second after.
Here is the error I am getting.
[Tue Jun 25 23:36:01 2013] [I] [initLog] initializing logger
[Tue Jun 25 23:36:01 2013] [E] [initLog] No 'ROTATION_TYPE' header found. 'TIME' based rotation will be used by default.
[Tue Jun 25 23:36:01 2013] [E] [initLog] No 'TIME_START_DATE' header found or value is invalid. Rotation will take place every 24 hours beginning today at 23:59:59
[Tue Jun 25 23:36:01 2013] [E] [initLog] No 'TIME_INTERVAL_MINS' header found. Using the default value of 24 hours.
[Tue Jun 25 23:36:01 2013] [I] [initLog] TIME based log rotation is ON
[Tue Jun 25 23:36:01 2013] [I] [trigger] First rotation due in 1438 secs
[Tue Jun 25 23:36:01 2013] [I] [ServiceStart] console allocation successful. THREAD_DUMP redirection enabled
[Tue Jun 25 23:36:01 2013] [I] [ServiceStart] About to execute CreateThread()
[Tue Jun 25 23:36:01 2013] [I] [ServiceStart] lpszCmdLine = -client -Xms32m -Xmx200m -XX:PermSize=128m -XX:MaxPermSize=256m -XX:+UseSpinning -Dweblogic.Name=LICORNE2012 -Xverify:none -Djava.endorsed.dirs=C:\Oracle\MIDDLE~1\JDK160~1/jre/lib/endorsed;C:\Oracle\MIDDLE~1\WLSERV~1.1/endorsed -classpath "C:\Oracle\MIDDLE~1\patch_wls1211\profiles\default\sys_manifest_classpath\weblogic_patch.jar;C:\Oracle\MIDDLE~1\patch_oepe101\profiles\default\sys_manifest_classpath\weblogic_patch.jar;C:\Oracle\MIDDLE~1\patch_ocp371\profiles\default\sys_manifest_classpath\weblogic_patch.jar;C:\Oracle\MIDDLE~1\JDK160~1\lib\tools.jar;C:\Oracle\MIDDLE~1\WLSERV~1.1\server\lib\weblogic_sp.jar;C:\Oracle\MIDDLE~1\WLSERV~1.1\server\lib\weblogic.jar;C:\Oracle\MIDDLE~1\modules\features\weblogic.server.modules_12.1.1.0.jar;C:\Oracle\MIDDLE~1\WLSERV~1.1\server\lib\webservices.jar;C:\Oracle\MIDDLE~1\modules\ORGAPA~1.1/lib/ant-all.jar;C:\Oracle\MIDDLE~1\modules\NETSFA~1.0_1/lib/ant-contrib.jar;" -Dweblogic.Name=LICORNE2012 -Dweblogic.management.username=weblogic -Dweblogic.management.server="http://LICORNE2012:7001" -Dweblogic.ProductionModeEnabled= -Djava.security.policy="C:\Oracle\MIDDLE~1\WLSERV~1.1\server\lib\weblogic.policy" weblogic.Server
[Tue Jun 25 23:36:01 2013] [I] [ServiceStart] lpszJavaHome = C:\Oracle\MIDDLE~1\JDK160~1
[Tue Jun 25 23:36:01 2013] [I] [ServiceStart] lpszExecDir = C:\Oracle\Middleware\user_projects\domains\PMU
[Tue Jun 25 23:36:01 2013] [I] [ServiceStart] lpszOldPath = C:\app\oracle\product\11.2.0.3\jko\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\ManagementStudio\;C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\;C:\Program Files (x86)\Microsoft SQL Server\110\DTS\Binn\;
[Tue Jun 25 23:36:01 2013] [I] [ServiceStart] lpszNewPath = C:\Oracle\MIDDLE~1\WLSERV~1.1\server\native\win\32;C:\Oracle\MIDDLE~1\WLSERV~1.1\server\bin;C:\Oracle\MIDDLE~1\JDK160~1\jre\bin;C:\Oracle\MIDDLE~1\JDK160~1\bin;C:\Oracle\MIDDLE~1\WLSERV~1.1\server\native\win\32\oci920_8;C:\app\oracle\product\11.2.0.3\jko\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\ManagementStudio\;C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\;C:\Program Files (x86)\Microsoft SQL Server\110\DTS\Binn\;
[Tue Jun 25 23:36:01 2013] [I] [ServiceStart] lpszDelay = 0
[Tue Jun 25 23:36:01 2013] [I] [ServiceStart] lpszStopClass = []
[Tue Jun 25 23:36:01 2013] [I] [ServiceStart] lpszLog = [c:\temp\web.log]
[Tue Jun 25 23:36:01 2013] [I] [ServiceStart] Thread created successfully
[Tue Jun 25 23:36:01 2013] [I] [ServiceStart] Reporting SCM of SERVICE_START_PENDING with delay=0
[Tue Jun 25 23:36:01 2013] [I] [ServiceStart] lpszHost = []
[Tue Jun 25 23:36:01 2013] [I] [ServiceStart] lpszPort = []
[Tue Jun 25 23:36:01 2013] [I] [ServiceStart] Reporting SCM of SERVICE_RUNNING
[Tue Jun 25 23:36:01 2013] [I] [ServiceStart] waiting for multiple events
[Tue Jun 25 23:36:01 2013] [I] [StartJVM] Parsing JVM Arguments
[Tue Jun 25 23:36:01 2013] [I] [StartJVM] Initializing JVM
[Tue Jun 25 23:36:01 2013] [I] [RunJavaApp] Loading class - weblogic.Server
[Tue Jun 25 23:36:01 2013] [I] [RunJavaApp] Locating method "public static void main([]String)" in main class
[Tue Jun 25 23:36:01 2013] [I] [RunJavaApp] Building arguments for main class
[Tue Jun 25 23:36:01 2013] [I] [RunJavaApp] Invoking main class
<25 juin 2013 23 h 36 CEST> <Info> <Security> <BEA-090905> <Disabling CryptoJ JCE Provider self-integrity check for better startup performance. To enable this check, specify -Dweblogic.security.allowCryptoJDefaultJCEVerification=true>
<25 juin 2013 23 h 36 CEST> <Info> <Security> <BEA-090906> <Changing the default Random Number Generator in RSA CryptoJ from ECDRBG to FIPS186PRNG. To disable this change, specify -Dweblogic.security.allowCryptoJDefaultPRNG=true>
<25 juin 2013 23 h 36 CEST> <Info> <WebLogicServer> <BEA-000377> <Starting WebLogic Server with Java HotSpot(TM) Client VM Version 20.4-b02 from Sun Microsystems Inc..>
<25 juin 2013 23 h 36 CEST> <Info> <Management> <BEA-141107> <Version: WebLogic Server Temporary Patch for 13340309 Thu Feb 16 18:30:21 IST 2012
WebLogic Server Temporary Patch for 13019800 Mon Jan 16 16:53:54 IST 2012
WebLogic Server Temporary Patch for BUG13391585 Thu Feb 02 10:18:36 IST 2012
WebLogic Server Temporary Patch for 13516712 Mon Jan 30 15:09:33 IST 2012
WebLogic Server Temporary Patch for BUG13641115 Tue Jan 31 11:19:13 IST 2012
WebLogic Server Temporary Patch for BUG13603813 Wed Feb 15 19:34:13 IST 2012
WebLogic Server Temporary Patch for 13424251 Mon Jan 30 14:32:34 IST 2012
WebLogic Server Temporary Patch for 13361720 Mon Jan 30 15:24:05 IST 2012
WebLogic Server Temporary Patch for BUG13421471 Wed Feb 01 11:24:18 IST 2012
WebLogic Server Temporary Patch for BUG13657792 Thu Feb 23 12:57:33 IST 2012
WebLogic Server 12.1.1.0 Wed Dec 7 08:40:57 PST 2011 1445491 >
<25 juin 2013 23 h 36 CEST> <Info> <Management> <BEA-141223> <The server name LICORNE2012 specified with -Dweblogic.Name does not exist. The configuration includes the following servers {AdminServer}.>
<25 juin 2013 23 h 36 CEST> <Critical> <WebLogicServer> <BEA-000362> <Server failed. Reason:
There are 1 nested errors:
weblogic.management.ManagementException: [Management:141223]The server name LICORNE2012 specified with -Dweblogic.Name does not exist. The configuration includes the following servers {AdminServer}.
    at weblogic.management.provider.internal.RuntimeAccessImpl.<init>(RuntimeAccessImpl.java:149)
    at weblogic.management.provider.internal.RuntimeAccessService.start(RuntimeAccessService.java:41)
    at weblogic.t3.srvr.ServerServicesManager.startService(ServerServicesManager.java:461)
    at weblogic.t3.srvr.ServerServicesManager.startInStandbyState(ServerServicesManager.java:166)
    at weblogic.t3.srvr.T3Srvr.initializeStandby(T3Srvr.java:883)
    at weblogic.t3.srvr.T3Srvr.startup(T3Srvr.java:570)
    at weblogic.t3.srvr.T3Srvr.run(T3Srvr.java:469)
    at weblogic.Server.main(Server.java:74)
>
<25 juin 2013 23 h 36 CEST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to FAILED.>
<25 juin 2013 23 h 36 CEST> <Error> <WebLogicServer> <BEA-000383> <A critical service failed. The server will shut itself down.>
<25 juin 2013 23 h 36 CEST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to FORCE_SHUTTING_DOWN.>
[Tue Jun 25 23:36:11 2013] [I] [ExitHandler] Fire (-1)
[Tue Jun 25 23:36:11 2013] [I] [ServiceStart] done waiting for multiple events. Wait=0
[Tue Jun 25 23:36:11 2013] [I] [ServiceStart] Informing SCM about SERVICE_STOP
Thanks for your help
jko

- not sure about your script, but obviously it doesn't detect the name of your managed server LICORNE2012 since there seems to be an admin server only in that domain.
- alternatively you might try the approach posted by the AMIS guys
Weblogic Admin and Managed servers as a Windows service
- btw: having your domain under user_projects is not best practice (but not the problem here).
good luck!

Does weblogic 5.1 support form based authentication of servlets

          Hi,
          Does weblogic 5.1 support form based authentication?
          If yes is any setup need to be done?
          <HTML>
          <BODY>
          This is a test for form based authentication
          <FORM action="j_security_check">
          <input type="j_name" value="hi">
          <input type="j_password" value="hi">
               <input type="submit" value="hi">
          </FORM>
          </BODY>
          </HTML>
          If i submit a form to j_security_check, weblogic throws "404 file not found error".
          thanks


          you must add this to yor web.xml file:
          <login-config>
          <auth-method>FORM</auth-method>
          <realm-name>LDAPRealm</realm-name>
          <form-login-config>
          <form-login-page>/logon.jsp</form-login-page>
          <form-error-page>/logonerror.jsp</form-error-page>
          </form-login-config>
          </login-config>
          greetings
          "Cameron Purdy" <[email protected]> wrote:
          >Yes. You have to specify in web.xml per spec.
          >
          >Peace,
          >
          >--
          >Cameron Purdy
          >Tangosol, Inc.
          >http://www.tangosol.com
          >+1.617.623.5782
          >WebLogic Consulting Available
          >
          >
          >"antony" <[email protected]> wrote in message
          >news:[email protected]...
          >>
          >>
          >> Hi,
          >>
          >> Does weblogic 5.1 support form based authentication?
          >> If yes is any setup need to be done?
          >>
          >> <HTML>
          >> <BODY>
          >> This is a test for form based authentication
          >> <FORM action="j_security_check">
          >> <input type="j_name" value="hi">
          >> <input type="j_password" value="hi">
          >> <input type="submit" value="hi">
          >> </FORM>
          >> </BODY>
          >> </HTML>
          >>
          >> If i submit a form to j_security_check, weblogic throws "404 file not
          >found error".
          >>
          >> thanks
          >>
          >
          >

Window for Form-Based Authentication in web.xml for JAZN.

Whether probably to make so that the form-authorization in Form-Based Authentication in web.xml for JAZN opened in a separate window?
Thanks,
Alexandre

this is what i have so far...in my web.xml deployment descriptor
am using Jbuilder 6 with tomcat.....if i run it from IDE, will the featuresi have added to the web.xml file...eg Error page be used ...or only when i deplo the app ???
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.2//EN" "http://java.sun.com/j2ee/dtds/web-app_2_2.dtd">
<web-app>
<display-name>Java Pet Store</display-name>
<description>Web Application for Reseach</description>
<session-config>
<session-timeout>54</session-timeout>
</session-config>
<welcome-file-list>
<welcome-file>Default.jsp</welcome-file>
</welcome-file-list>
<error-page>
<error-code>500</error-code>
<location>/</location>
</error-page>
<taglib>
<taglib-uri>PetStoreTagLib</taglib-uri>
<taglib-location>/WEB-INF/PetStoreTagLib.tld</taglib-location>
</taglib>
<security-constraint>
<web-resource-collection>
<web-resource-name>SecurePages</web-resource-name>
<url-pattern>Checkout.jsp</url-pattern>
<url-pattern>OrderList.jsp</url-pattern>
<url-pattern>OrderDetails.jsp</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>LoggedInUser</role-name>
</auth-constraint>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>
<login-config>
<auth-method>FORM</auth-method>
<form-login-config>
<form-login-page>/Login.jsp</form-login-page>
<form-error-page>/ErrorPage.jsp</form-error-page>
</form-login-config>
</login-config>
<security-role>
<description>Logged In User</description>
<role-name>LoggedInUser</role-name>
</security-role>
</web-app>
in setting up the tomcat-users.xml file am i to add table to my database, to relate the user to the role.......

Using Windows Vista and IE7 with Forms based applications

A user has Vista & iexplorer 7 installed on their machine and when they attempt to access the Professional Buyer responsibility (forms based) they receive an error message stating that 'Internet Explorer has stopped working'. When they attempt the same thing using a machine with Windows XP Pro and IE6 they do not have a problem. Could anyone tell me if they have experienced a similar issue and how do you work around it whilst still using Internet Explorer?? Also we are using
j-initiator version 1.3.1.18

Microsoft IE 7 on Vista is certified with Apps 11i provided that you meet the following requirements:
- Applications 11.5.10 plus Maintenance Pack 11.5.10 CU2 or later
- Oracle Developer 6i Patchset 18 (6.0.8.27.x) or later (Metalink Note 125767.1)
- Oracle Applications Technology 11i.ATG_PF.H Rollup 4 (RUP 4) (patch 4676589) or later
- Microsoft Vista desktop clients running Internet Explorer 7
- Sun Java plug-in (JRE) 1.5.0_12
Windows Vista + IE7 Certified with E-Business Suite
http://blogs.oracle.com/stevenChan/2007/11/windows_vista_ie7_certified_wi.html

Windows NT - Weblogic 12c Form based Auth ?

Similar Messages

Maybe you are looking for