CLIENT-CERT authenitcation works does not in the env WLP 10.3 cluster

Hello
Can someone help me please to solve this issue.
I use the following configuration in my application, and I defined "Testrole" global role in the Kingdom secuiry server admin console, in this role
I added a condition where I have included a group name defined in the oracle virtual directory that will fetch all users who can access the application, since we defined as a global role in the field of security server admin, I added < externally defined / > in weblogic.xml, we use a custom authenitcator to connect to oracle virtual directory.
If I deploy the application in a single server environment it works fine, but if I deploy in a clustered environment, application does not, is forbidden error.

is there a difference between the single server environment and environment cluster of parameters?



Thank you
JN

Published by: 836203 on February 24, 2011 19:46

I don't think that there should be no difference.
The only reason could be that the role information may not have been replicated to the other servers.

Why don't you reboot your servers with active replica refresh?

Let me know how it goes?

Also can u send me the steps on how you have configured OVD with WLS?
[email protected]

Thank you very much
Faisal
http://www.WebLogic-wonders.com

Tags: Fusion Middleware

Similar Questions

  • 11g ws client proxy and Stub does not recognize the property (policy)

    Hello

    I did a web service in 11g with a security policy and has been at wls and generate a proxy web service with java oracle.j2ee.ws.tools.wsa.Main - genProxy

    When I try to add security in proxy ws client I had this error Stub does not recognize the property: weblogic.wsee.security.wss.CredentialProviderList
    or this javax.xml.rpc.JAXRPCException error: Stub does not recognize the property: weblogic.wsee.security.bst.serverEncryptCert

    Without policies, everything works and credProviders has valid values.

    Thanks Edwin

    Code of WS

    @WebService
    @Policy (uri = "policy:Wssp1.2-2007-Wss1.0-UsernameToken-Plain-X509-Basic256.xml")


    public class CreditCheck2 {}

    @WebMethod
    public String echo (String s) {}
    return s;
    }
    }


    client proxy WS

    private nl.ordina.ws.client.CreditCheck2 _port;

    Public CreditCheck2PortClient() throws Exception {}
    ServiceFactory factory = new ServiceFactoryImpl();
    _port = ((nl.ordina.ws.client.CreditCheck2Service) factory.loadService (nl.ordina.ws.client.CreditCheck2Service.class)) .getCreditCheck2Port ();
    }

    /**
    @param args
    */
    Public Shared Sub main (String [] args) {}
    try {}
    nl.ordina.ws.client.CreditCheck2PortClient myPort = new nl.ordina.ws.client.CreditCheck2PortClient ();
    System.out.println ("calling" + myPort.getEndpoint ());

    String username = "weblogic";
    String password = "weblogic";

    String clientKeyStore = "d:/oc4jssl.jks";
    String clientKeyStorePass = "Welcome";
    String clientKeyAlias = "oc4jssl";
    String clientKeyPass = "Welcome";
    String serverCertFile = "d:/demoidentity.cer";


    List CredProviders = new ArrayList();
    X509Certificate serverCert = (X509Certificate), CertUtils.getCertificate (serverCertFile);

    CredentialProvider cp = new ClientBSTCredentialProvider (clientKeyStore,
    clientKeyStorePass,
    clientKeyAlias,
    clientKeyPass,
    "JKS"
    serverCert);
    credProviders.add (cp);
    CP = new ClientUNTCredentialProvider (username, password);
    credProviders.add (cp);

    Heel heel = myPort._port (heel);

    stub._setProperty (WSSecurityContext.CREDENTIAL_PROVIDER_LIST, credProviders);
    stub._setProperty (StubPropertyBSTCredProv.SERVER_ENCRYPT_CERT, CertUtils.getCertificate (serverCertFile));

    stub._setProperty (WSSecurityContext.TRUST_MANAGER,
    new TrustManager() {}
    {public boolean certificateCallback (X509Certificate [] string, int validateErr)
    Returns true;
    }
    } );


    Add your own code here

    } catch (Exception ex) {}
    ex.printStackTrace ();
    }
    }

    JDeveloper gives you the opportunity to select the type of proxy you want to generate.
    You have found this exception because you try to use the heel on a proxy of JAX - WS.
    You must either use a JAX - RPC proxy, if you want to use the same code
    OR
    If you want to use JAX - WS proxy, you must change your code for:
    Import javax.xml.ws.BindingProvider;
    :

    Card rc = (port) .getRequestContext ((BindingProvider));
    RC.put (WSSecurityContext.CREDENTIAL_PROVIDER_LIST, credProviders);

    whenever you use something like:

    stub._setProperty (WSSecurityContext.CREDENTIAL_PROVIDER_LIST, credProviders);

    Because your service is JAX - WS, I suggest you create JAX - WS only proxy and change your code and try.
    In the case of JAX - WS, you don't need
    Heel heel = myPort._port (heel);

  • Code 31, Microsoft IASATAP adapter doesn't work does not correctly, the yellow exclamation point, no internet

    I have Emachines E620, Microsoft Vista and service pack 1. My PC cannot connect to the internet and stop a yellow exclamation point error message. My internet providers technical support, I lost my IP address and cannot be recovered. My PC shows that my card Microsoft ISATAP does not work, but when we try to update, it says I have the updated version of the adapter.

    I tried everything the system fixed but did not work. Can't try bugs online because I can not connect to internet. My research on the Internet, maybe I need service pack 2. Can someone tell me if this could work? If so, what is the way least costly to achieve? What does it mean that my PC is undesirable?

    http://social.answers.Microsoft.com/forums/en-us/vistahardware/thread/e5f8973b-0079-4E2B-8da4-7bbd345b9426

    Read the info above from Microsoft Support.

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    http://www.eMachines.com/support/drivers.html

    Go to the Web site of emachine'ss to the above link > drivers and downloads Section > key in your model number > look for the latest Vista drivers > download/install them.

    The computer you are using now that you have no Internet connection with the other > download / save drivers > copy them into Flash Drive > transfer / install on another computer/laptop.

    See you soon.

    Mick Murphy - Microsoft partner

  • BBC iPlayer works does not on the Surface RT

    Just noticed today that I am not able to play bbc iplayer on my rt surface. This worked days ago but now won't work at all. I get a message saying that my device does not support BBC iplayer. It says to turn off the desktop to the browser option. Cannot find it anywhere. Any advice?

    Paul,

    You mention what Jessen has suggested in previous post?

    If so, then it has helped?

    Thank you.

    Hello

    The problem has been solved.  I think it was a problem with the bbc website (and a few others) who saw the 11 ie like mobile browser.
    Paul
  • Canon LBP 2900 works does not in the Sierra

    Hey,.

    Guys, 2900 canon printer worked very well... .but after sierra update does not

    no idea...

    Thank you

    It is possible that Canon is no longer support for this printer

    for macOS Sierra.  Wouldn't be surprising.  They dropped

    support for a large number of their printers in OS X and newer versions of Windows.

  • Win 7 search - works does not on the mapped network drive

    Hi all

    I saw that a lot of people have had problems with W7 search on indexed locations, but I have problems with research on a mapped network drive.

    I'm looking for a file with the word "work" in the name of the file (file Excel) and I can see it in Explorer but research doesn't seem to be able to find it. I have not indexed location and only want it is a network drive and is big enough and I rarely research it so what I want to search Windows to do is trawl in the files at this location and tell me when it finds one that matches my search criteria. I don't like how long it takes, just that it works reliably, otherwise I can't use it at all...

    Any ideas as to why it cannot find the file? Or if someone can tell me what happened to search Assistant? He's been very good to do this simple task...

    Thank you very much

    Thinqer.

    I had the same problem, but I found that when I typed in the search box and clicked on the "see more results", I could click on custom and define which drive I wanted it looks without having to be indexed. It took a while for her to run, but he has finally found the file I was looking for.

  • DW 2015 - Emmet works does not in the .asp files

    I can create a new HTML document and use the Emmet codes very well.

    But as soon as I try the same code in a. ASP file and hit tab it does nothing.

    Is there a setting somewhere that off Emmet for ASP files or something?

    It is an asset, but I can't believe that it won't work on non-HTML pages.

    Emmet in DW only works with the CSS, Sass, SCSS, HTML and PHP files. Support of DW for ASP was abandoned long ago.

    Using Dreamweaver | Writing and editing code

    Nancy O.

  • A lot of codecs works does not in the CC company for education

    I have a private CC acount and a company at work. At my work I don't get not all codecs in Ae, Media Encoder and PR. why? How can I solve this? Its very frustrating to work with the video with my students at the moment.

    Johan

    Hi Johan,.

    It seems that you used no (Non-video) serial No. royalties to create the Package in first Pro CC. Please use video series to enable the first Pro CC and then you will receive all the necessary codecs.

    Please connect to http://licensing.adobe.com and download video series not for activation of first CC pro.

    Once get you it then copy Adobe Provisioning Tool Enterprise Edition (APTEE) to create a license file, and then run the same on the infected computer.

    You can check this link for APTEE.

    Using creative cloud | With the help of Adobe Provisioning Toolkit Enterprise Edition

    It will be useful.

    Kind regards

    Abhijit

  • Satellite L450D - 11 H - WLan works does not during the execution of a battery

    Hello world

    I have a portable Satellite L450D - 11: running the Windows 7 operating system.

    When my laptop is plugged my wireless connection works fine.
    But when I unplug the unit and just run using the battery, my wireless connection works.

    I examined the power settings and changed the battery option of "Performance Maximum when wireless.

    But I still have the same problem. This could be a driver problem?

    Any ideas?

    Thank you.

    Hello

    Eventually the Wlan card settings are defined security power when the laptop is running on battery power.
    Try this:
    Go to Device Manager-> select WLan card-> properties-> advanced

    Check if there are a few options that could disable energy saving.
    In addition, you should take a look in the last tab. There should be such option also.

    See you soon

  • After removing the Trojan horse, banking online drop-down list menu settings is so more work does not accept the password.

    To try to get rid of some Trojans, I seem to have changed a setting on my pc.  Trying to access my online bank account, the homepage accepts my ID and password, but when I fill the page next (with the drop down menu 3 letters), I am sent initially. I can't clear the checkpoint.

    I have changed and how can I solve this problem?

    Have you tried resetting Internet Explorer?

    If this is not the case, use the following article:

    Article number: 923737 - how to reset Internet Explorer settings
    http://support.Microsoft.com/kb/923737

    There is an automatic FixIt so all you have to do is click on the button.

     
    I hope this helps.
     

  • SE connect Blackberry 10 Simulator and BBM works does not in the Simulator

    Hi all

    I use QNX momentics IDE for development and blackberry 10 Simulator.

    I use the simulator using VMWare workstation. A problem that occurs is that my Simulator is impossible to connect to BBM. Although the Internet is there on Simulator (checked with the browser on Simulator). As far as newspapers are concerned in the case of the blackberry simulators 9900 and 9930 counted out newspapers and event logs.

    But in this Blackberry 10 Simulator, I could not find newspapers where they are generated.

    Please tell me the location where in 10 blackberry Simulator logs are generated.

    Thank you best regards &,.

    Tushar

    for newspapers, check out this link

    http://supportforums.BlackBerry.com/T5/native-development-knowledge/debug-on-the-device-with-console...

    Please mark as solution if it helps

  • Fingerprint utility does not recognize the password website - Satellite U400

    Problems with the password Bank (TrueSuite Access Manager, 2.5.29.0 latest version;) Vista); Utility does not work, does not recognize the Web site password entry, doesn't react at all. Tried it in IE8 and Opera 10, tried to reinstall Truesuite Access Manager. The fingerprint login works fine, very well file protection works.

    Someone at - it the same problem? Any ideas on a solution?

    Thank you.

    Thanks for the comments.
    If you have questions try to find answer using the advanced search options.
    In this forum, you'll find helpful advice a lot or comments about so many different issues with Toshiba laptops.

  • The HP Client Manager Security extension does not work

    I have a red shield on the top right of my address bar saying"

    The HP Client Security Manager extension does not work because the HP Client Security Manager plug-in has not been activated.
    Open the HP Client Security Manager Console browser integration user Page for additional instructions.

    How can I find a user control panel browser integration page? do not see it anywhere? help needed please thanks Bill

    Hello

    Unfortunately, you may have to contact HP support for more help:

    http://h30434.www3.HP.com/

    Kind regards

  • can I track a pop3 server on a system that does NOT have the client insta

    Can I track a pop3 server on a system that does NOT have the client.
    With the new serfvice on a system and specifying the name of the intellectual property of a remote control in the config file
    running pop3 system. In the config file, it asks a unsername and password. Is it necessary
    and if so what are the permissions the user must?

    > Can 3.0.3 hyperic Open Source apop monitor (which takes place
    > on 1110. I tried to use the pop3 plugin but got the
    > errors I listed to the original problem. We do not run pop3
    > but run they apop.
    > Is - can anyone help with that?

    The pop3 Checker will not work with apop.  Apop Protocol requires that we send a MD5 hash with the user name.  We can, adding this ability.  In the meantime, you can simply use the Socket TCP Checker to make sure that the port is up and listening.

    -Ryan

  • Power mac g4 does not recognize the DVD/CD drive.  It has worked very well in Leapard

    I just newly installed Tiger on my PowerMac G4, and now it does not recognize the DVD/CD drive.  I did all the updates and it does not see the DVD in the DVD drive.  It works perfectly before a new clean install DVD of the Tiger.

    What is your indication that the DVD is not recognized?

    Run the utility disc with the disc in the optical drive.  The drive will appear in the sidebar of disk utility?

    I did all the updates and it does not see the DVD in the DVD drive.

    If you put another type of disc in the optical drive, as a music CD, it is recognized?

Maybe you are looking for