HTTP header variable

Hello

No matter who has successfully implemented SSO using the new type of scheme HTTP header Variable?

I need to have Novell Access Manager manage access to the APEX applications (recently upgraded to version 4.1). Application Express listener is used.

For SSO, I inject the username in the authentication headers. The first question I have is that the default value for $remote_user@-part is always set to APEX_PUBLIC_USER, then I put a custom header (X-APPUSER) in place and created a new authentication scheme using this variable. After will be authenticated through NAM, APEX always sees me as APEX_PUBLIC_USER. I checked the headers sent using OWA_UTIL. PRINT_CGI_ENV(). X - APPUSER has my user name, but $remote_user@-part is set to APEX_PUBLIC_USER.

Did I miss a step?

Best regards
Adrian

Hi Adrien,.

It would be useful to get debug output full of the initial session that triggered the authentication, then the output of the callback call.

I can send scripts SQL get you a debug output more detailed that would help me a lot to diagnosis this. Just send a mail to wolf point patrick at oracle dot com, while I have your e-mail address.

Concerning
Patrick

Tags: Database

Similar Questions

  • Authentication HTTP header Variable

    APEX 4.2 or 5.0.1 Oracle 11.1

    We have several older applications in our everyday environment version 1.x that are still chugging along. They use an authentication scheme customized to set APP_USER based on the header HTTP REMOTE_USER variable and a function page_sentry lovingly crafted by none other than Scott Spadafore itself (may he rest in peace).

    Since APEX 4.1 introduced this as a built-in/declarative choice, of course, there is no need to maintain this as a custom scheme.

    The only wrinkle is that the middle tier web server used to connect to the APEX (SST or ADR) engine, the REMOTE_USER could be in one of the 3 formats) a username domain\username b) c) username@domain. Sentinel current page function code has a logic to extract only the username part to define APP_USER. If we were to change to use the integrated authentication scheme, how this logic "post processing" be welcomed? The Authentication Procedure after would change APP_USER or just read?

    Thank you

    Hi Vikas,

    Yes, you can create a procedure after the authentication that uses APEX_CUSTOM_AUTH. SET_USER change: APP_USER. At the end of the authentication process (which is once this procedure being executed), APEX will save: APP_USER in the session.

    Kind regards

    Christian

  • Change APP_USER after authentication using HTTP header

    At our office, we switch to smart card authentication via a type of minder of the site that defines variables to specific header for user authentication access.  One of the headers is the identity card which is just a number and doesn't mean anything to the user and the other is the user id.  We run our account access with a user management site that contains the roles for each application and for each user within our Organization.  This user management system will always contain the generic user number but may not contain their user id (since it is not necessarily the name of the windows account but is put in place on the cover page of the site) and so I can't use it for authentication header HTTP since it can not exist in our system.  What I want to do is authenticate using the generic number, update our management system user with the user entered on the header id (since it will always match the generic number), and then set: APP_USER variable username.  Any suggestions?  Or is there a better way to do this?

    Apex 4.2.6.00.03

    Oracle 11.2 g

    Hello

    'Name of the procedure after authentication' is what you're looking for. It is an attribute of your HTTP header authentication.

    Here is an example. Insert the following code in the attribute "Code PL/SQL.

    procedure post_auth is
    begin
        apex_custom_auth.set_user (
            p_user => regexp_replace(:APP_USER, '@.*', null) );
    end;
    

    and you enter the "name of the procedure after authentication.

    post_auth
    

    If you use the HTTP header authentication, it is important that you set "Check Username" to "after the Login. Otherwise you would get in trouble because APP_USER will never match the user to HTTP header variable.

    Concerning

    Patrick

  • How to return an * optional * custom http header with a resource model?

    Is it possible to return a http header custom optional with a resource of Apex (v1.1.4) earphone model?

    Reading the documentation does not indicate how this works:
    http://docs.Oracle.com/CD/E21611_01/ doc.11 /e21058/rest_api.htm#BGBDFBJF

    A test, I set up a model of resource to try it. I use the handler method is POST, type is 'PLSQL Block', and my custom settings are:

    Name: personnalisee01
    Aliasing: x-personnalisee01
    Source: header
    Access: EXIT
    Type: String

    PL/SQL block:
    BEGIN
      :custom01 := 'my string';
    END;
    And of course, I get a custom header in the response http like this:
    x-custom01 : my string
    Then, taking a hypothesis that the NULL value for the parameter may cause the listener to Apex do not send the custom header, I changed the PL/SQL this:
    BEGIN
      :custom01 := NULL;
    END;
    This time, however, the url announcement causes Apex listener to return a 500 status and in the log file, I get:
    INFO: null: Invalid column index
    java.sql.SQLException: Invalid column index
    In any case is to make my custom http header exist as an option? The most intuitive way to just return null to the variable binding, but of course, this does not work!

    Thank you
    Jack

    Yes, to be clear, the issue is that binds through comments (- or / * /) are not handled correctly, I have not yet verified, but I think that the problem will occur in 2.0.x so.

  • The HTTP header response

    I want to see the vary: user-agent in HTTP header response. Can anyone suggest me steps to implement this pls

    It depends on the requirements when you want to see it?
    If you want to a particular page, then you can write a droplet, getHeader variable User-Agent and set the header of the response of the dynamo.
    If you wish for any application then you write a servlet pipeline User-Agent getHeader variable and set the response header in the request pipeline (pipeline DAF).

  • Adds an HTTP header

    The following header must be added to the HTTP response:


    X-FRAME-OPTIONS: SAMEORIGIN


    I'm looking for an easy way set up the HTTP headers in WebLogic 11 g.


    Thanks for your help!

    Take a look at this post, he changes a http header. You can try to do the same thing in the filter.

    Jonas de Graaff weblog: how to run your application of 11.1.x ADF under IE 11: workaround

    Kind regards

    Ruben

  • Com.oracle.httpclient.HttpRequestBuilder and http header defined by the user

    Hello

    In Java ME embedded 8, I would like to send an HTTP request containing an identifier defined by the user in the (X-header type) http header, using the com.oracle.httpclient package.

    HttpClient client = clientBuilder.build ();

    RequestBuilder (http://my_uri) client.build = HttpRequestBuilder;
    requestBuilder.setHeader (HttpHeader.ACCEPT, "text/plain");

    Here, I would like to add a header as user-defined value:
    requestBuilder.setHeader ("MyHeader", "myHeaderValue");

    It seems there only predefined values for the headers in the com.oracle.httpclient.HttpHeader class.

    Is it possible to add a header defined by the user in the application?

    Thanks in advance.

    Bruno

    Hi Bruno.

    have you tried myHeader = new HttpHeader ("MyHeader") Httpentete;?

    / Sergey

  • BC Ecommerce SOAP error: server did not recognize the value of the SOAPAction HTTP header

    I am trying to add a product to an ecommerce with this soap action site: Product_UpdateInsert

    I followed this very brief instruction: . https://jollyrogers.worldsecuresystems.com/catalystwebservice/catalystecommercewebservice asmx? op = Product_UpdateInsert

    I have an html page in a secure area with a SOAP ajax jQuery script.

    I get this error when I run the script:

    " <? xml version ="1.0"encoding ="utf-8"? > < envelope soap: xmlns:soap = ' http://schemas.xmlsoap.org/SOAP/envelope/ "" xmlns: xsi = " " http://www.w3.org/2001/XMLSchema-instance "container =" " http://www.w3.org/2001/XMLSchema ' > < Customer: soap soap: Body > < soap: Fault > < faultcode > < / faultcode > < faultstring > server did not recognize the value of the SOAPAction HTTP header: . https://jollyrogers.worldsecuresystems.com/CatalystDeveloperService/CatalystEcommerceWebse m/Product_UpdateInsert . < / faultstring > < detail / > < / soap: Fault > < / soap: Body > < / envelope soap: >

    I also tried to add a header with the Soap action with the beforeSend in the ajax call.

    This should have been resolved before I guess?

    Here is my script:

    <! DOCTYPE html >

    < html lang = "en" >

    < head >

    < title > asks SOAP Test < /title >

    "< script type =" text/javascript"src="//code.jquery.com/jquery-1.10.2.min.js "> < / script >

    "< script type =" text/javascript"src="//cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.3.1/jquery.cookie.min.js "> < / script >

    "< script type =" text/javascript"src="//cdnjs.cloudflare.com/ajax/libs/underscore.js/1.5.1/underscore-min.js "> < / script >

    "< script type =" text/javascript"src="//cdnjs.cloudflare.com/ajax/libs/backbone.js/1.0.0/backbone-min.js "> < / script >

    "< script type =" text/javascript"src="//cdn.worldsecuresystems.com/bcapi/bcapi-0.0.1.min.js "> < / script >

    < / head >

    < body >

    < script >

    var wsUrl = " " asmx https://jollyrogers.worldsecuresystems.com/catalystwebservice/catalystecommercewebservice. ";

    var = soapRequest

    ' <? XML version = "1.0" encoding = "utf-8"? >------.

    " < soap12:Envelope xmlns: xsi =" http://www.w3.org/2001/XMLSchema-instance "container =" " http://www.w3.org/2001/XMLSchema "xmlns:soap12 =" " http://www.w3.org/2003/05/soap-envelope "> \

    < soap12:Body >.

    " < Product_UpdateInsert xmlns =" interface https://jollyrogers.worldsecuresystems.com/CatalystDeveloperService/CatalystEcommerceWebse "> \

    < user name > myEmailAdress < / name >.

    password <>mySecretPassw < / password >.

    < siteId > 1894001 < / siteId >------.

    < productList >------.

    < Products >------.

    < productCode > ZJAWEyuuyN < / productCode >.

    < productName > my product test < / productName >------.

    dolor in < description > Lorem ipsum sit amet, 195kgs adipisicing elit, sed eiusmod tempor storage developed and pain ut magna aliqua. < / description >.

    /images/Product1/small.jpg < smallImage > < / smallImage >------.

    < largeImage > /images/product1/large.jpg < / largeImage >------.

    < cataloguesArray >.

    < string > /Store/ < / string >.

    < / cataloguesArray >.

    < pricesSaleArray >.

    < string > US/19.95,3/17.96,7/16.96 < / string >.

    < / pricesSaleArray >.

    < pricesRetailArray >.

    < string > US/20.5/19.8/20 < / string >.

    < / pricesRetailArray >.

    < pricesWholesaleArray >.

    < string > US/20.5/19.8/20 < / string >.

    < / pricesWholesaleArray >.

    < wholesaleTaxCodeArray >.

    < String > en / 0.00 < / string >.

    < / wholesaleTaxCodeArray >.

    < taxCodeArray >.

    < string > GB/VAT < / string >.

    < / taxCodeArray >.

    < groupProducts >.

    < string > 580H0036BL < / string >.

    < string > ACAI60 < / string >.

    < string > ABC-123 < / string >.

    < / groupProducts >.

    < groupProductsDescriptions >.

    Lorem ipsum dolor sit amet < string > < / string >.

    < string > 195kgs adipisicing elit < / string >.

    < / groupProductsDescriptions >.

    < 1234 > supplierEntityId < / supplierEntityId >.

    < supplierCommission > 0 < / supplierCommission >.

    < weight > 30 < / weight >------.

    tags <>NEW! < / tags >------.

    < unitType > string < / unitType >------.

    < minUnits > 0 < / minUnits >.

    < maxUnits > 2 < / maxUnits >------.

    < inStock > 43 < / inStock >------.

    < onOrder > 3 < / onOrder >------.

    < reorder > 2 < / reorganize >------.

    < inventoryControl > true < / inventoryControl >.

    < canPreOrder > true < / canPreOrder >.

    Text < custom1 > in the custom field 1 < / custom1 >------.

    Text < custom2 > in the custom field 2 < / custom2 >------.

    < custom3 > custom text in the field 3 < / custom3 >------.

    < custom4 > custom text in the field 4 < / custom4 >------.

    < popletImages > / images/image1.jpg;/images/image2.jpg; < / popletImages >.

    < enabled > true < / enabled >------.

    < deleted > false < / deleted >.

    < captureDetails > true < / captureDetails >.

    < downloadLimitCount > 20 < / downloadLimitCount >.

    < limitDownloadsToIP > 0 < / limitDownloadsToIP >.

    < isOnSale > true < / isOnSale >.

    < hideIfNoStock > true < / hideIfNoStock >.

    < productAttributes > size * | 5. Y:L | UK/2 | US / 20, S | UK/1 | U.S. / 10 < / productAttributes >.

    < isGiftVoucher > false < / isGiftVoucher >.

    < enableDropShipping > true < / enableDropShipping >.

    < productWeight > 0 < / productWeight >.

    < productWidth > 0 < / productWidth >------.

    < productHeight > 0 < / productHeight >.

    < productDepth > 0 < / productDepth >.

    < excludeFromSearch > false < / excludeFromSearch >.

    < productTitle > my product title < / productTitle >------.

    < cycletypeId > 3 < / cycletypeId >.

    < cycletypeCount >-1 < / cycletypeCount >.

    produced my < slug > < / slug >------.

    < hasVariations > true < / hasVariations >.

    variations of <>.

    < ProductVariation xsi: Nil = "true" / >.

    < ProductVariation xsi: Nil = "true" / >.

    < / variations >------.

    < / product >.

    < / productList >------.

    < / Product_UpdateInsert >.

    < / soap12:Body >.

    < / soap12:Envelope > ';

    $.ajax({)

    type: 'POST',

    beforeSend: function (xhr) {xhr.setRequestHeader ("SOAPAction ','https://jollyrogers.worldsecuresystems.com/CatalystDeveloperService/CatalystEcommerceWebse m/Product_UpdateInsert '"); } },

    URL: wsUrl

    contentType: "text/xml",

    data type: "xml."

    data: soapRequest;

    success: processSuccess,.

    error: processError

    });

    function processSuccess (data, status, req)

    {

    If (status is 'success')

    Alert ("Success!");

    }

    function processError (data, status, req)

    {

    Alert ("Failed!");

    Alert (req.responseText + "" + status);

    }

    < /script >

    < / body >

    < / html >

    This line is a target namespace, so it should not be changed:http://tempuri.org/CatalystDeveloperService/CatalystEcommerceWebservice"> It is very easy to think that it's a placeholder and that it should be replaced with your own url, which it should not and which will fail.

    It works now:

    SOAP test 7 request

  • How custom in the SOAP of APEX application HTTP header sent?

    Hello

    I need to send the values of username and password in the HTTP header with request to Webservice.
    It is possible to do with APEX?
    Or I have no choice and I have to use the PL/SQL, UTL_HTTP?


    Thank you
    Vitalijus

    Vitalijus salvation,

    Please take a look at "Setting Cookies and HTTP headers" - http://docs.oracle.com/cd/E23903_01/doc/doc.41/e21676/apex_web_service.htm#BABDFEJG
    I think that's what you're looking for.

    Concerning
    Patrick
    -----------
    My Blog: http://www.inside-oracle-apex.com
    APEX Plug-Ins: http://apex.oracle.com/plugins
    Twitter: http://www.twitter.com/patrickwolf

  • Header variable for books

    I asked this a month ago and I'm still looking and hoping for an answer on the possibility:

    I have a lot of manuals the user set up as books with chapters in individual files.

    Several chapters are used in more than one book.

    The challenge: is there a way to set up a Variable header to collect the name of the book ?

    For example:

    The footer was named file/chapter: "Getting Started".

    The heading should reflect the name of the book , not the file/chapter: "Setup Guide".

    Thank you!

    A file can be used in multiple directories without problems (other than those that you might introduce per clock styles with different definitions, but the same names, or synchronize the numbers), but you want to do something that is not supported in any form.

    Cross-references could be put in place t a single document that contains the text of a single name book, but, apart from the lack of reliability of references between documents, that will not help you because the reference would be an absolute link, not a variable that would change with the name of the book that the file was currently residing.

    One thing that might work would be to make a 'master' file that has no header or page numbering information. Instead of linking this file via the book panel, place the master file pages in several other required documents and add headings and numbering in the files when you place them. They behave similarly to the linked graphics. Edit Master, and then update the links.

  • Adding custom information in the HTTP header in a request out of GWWS

    Is it possible to send information to custom header with the webservice (HTTP post) request that arrives via a GWWS Server?

    All the methods that I've read about deal with management of the SOAP envelop that is sent.
    We are looking for ways that will enable us to custom information in the headers.

    I know there is something we can do by using the Plugins of salt.
    For example, we can write only an Out bound plugin that has a capacity to put the "Authentication: Basic...» "in the header.
    Then there is message conversion plugin which deals with the transformation of the message, which allows us to control the soap body.

    Is it possible to put information in the header of outgoing (from GWWS) request to a web service?

    Thank you and best wishes,
    Christelle

    It was enhanced salt11gR1 and addressed in edocs as below:

    http://docs.Oracle.com/CD/E18050_01/salt/docs11gr1/admin/config.html#wp1094154

  • Running header Variable Question

    FrameMaker 11

    I would like to show a hierarchy in the headers of my (manual system) document as a quick reference to the drive location in the document.

    The look I'm going to do is something like this: title 1 > section 2... results by...

    Planning > creating a Plan

    I have inserted variables. Heading 1 is my chapter name and occurs only once in each file. When I get to the section 2... It works very well. But...

    The first pages look like this:

    Planning >

    because the FM has yet to see the first instance of heading 2.

    Question No. 1: Is there a way to 'hide' the arrow (longer than symbol) until there is a second helping of the flat string variable?

    I don't know if this would be considered conditional text? Sorry, my FM vocabulary is rusty. It's been a few years and a few versions I was working regularly in FrameMaker.

    Question 2: Anyone know of an 'arrow' better that I can use (keystrokes of shortcut or ascii) rather than the > character?

    You can see what is happening to the headers running when you move from one page to another:

    3rd & 4th levels always show what was on the previous page! This would be very complicated to your readers.

    What you need to do is at each entrance to top title, also push empty markers for the next levels of reset these to get the following instead:

    It may take a bit of tweaking on certain pages according to the headers are also displayed. But at least you can control this by adding or removing content in the marker (just don't remove markers, since always FM looks backward to the beginning of the flow to satisfy the requested condition and can take the content of the previous sections).

  • Application date HTTP header can be set via ActionScript.

    Hi all

    I'm moving urlrequest liaison with 'Date', 'Licence' to amazon s3 to flex 4.5 web application. However, it is unable to connect and get the error as,

    Error #2096: Could not set the request header HTTP Date via ActionScript.

    So, please tell me what I need to use or that flash player supports to add "Date" at the request of the header.

    Sory for the late reply. I used presigned url to download files from s3.

  • The substitution of text running header Variable

    When you override a running header text variable, is it possible to keep this header "running"? I needed my head to two lines so I made a substitution, but now it is not flow with the rest of the text. He became a fixed header?

    N ° when you convert a text variable, it's no like "variable".

    You can try and wait until your layout is completely finished before converting text tot.

    FWIW, multi-line headers is one of the benefits of power headers...

    Substances

  • Reading HTTP header in

    Hello

    I created a package and it exposed via mod_plsql and I am called by using curl , it is purely to test the code is so very simple.

    What I have to do is to read the value of the header X-HTTP-method-Override: PUT , I add on demand

    Appeal of CURL
    $ curl -i --proxy "" -H "X-HTTP-Method-Override: PUT" -X GET http://ww.sample.com/portal/my.atom.test
    procedure My.Atom.test
      procedure test as
      begin
    
        htp.p ('request_method='|| owa_util.get_cgi_env('request_method'));
        htp.p ('remote_addr='     || owa_util.get_cgi_env ('remote_addr'));
        htp.p ('remote_user='      || owa_util.get_cgi_env ('remote_user'));
        htp.p ('http_host='      || owa_util.get_cgi_env ('http_host'));
        htp.p ('server_name='      || owa_util.get_cgi_env ('server_name'));
        htp.p ('server_port='      || owa_util.get_cgi_env ('server_port'));
        htp.p ('owa_util.get_owa_service_path=' || owa_util.get_owa_service_path);
        /*
        htp.prn('PLEASE GIVE ME X-HTTP-Method-Override HERE AHHHG!!! ');
        */
        
      end test;
    Thanks in advance.

    Kind regards
    Carl

    Carl,

    This one is easy. Just make use of the PlsqlCGIEnvironmentList directive in your definition of database Access descriptor. Add the following to your DAD in mod_plsql dads.conf:

    PlsqlCGIEnvironmentList X-HTTP-METHOD-OVERRIDE

    For DAD to Application Express example, here's what I have:

    
     Order deny,allow
     PlsqlDocumentPath docs
     AllowOverride None
     PlsqlDocumentProcedure      wwv_flow_file_manager.process_download
     PlsqlDatabaseConnectString  stbdc20.us.oracle.com:1521:apx11w ServiceNameFormat
     PlsqlNLSLanguage            AMERICAN_AMERICA.AL32UTF8
     PlsqlAuthenticationMode     Basic
     SetHandler                  pls_handler
     PlsqlDocumentTablename      wwv_flow_file_objects$
     PlsqlDatabaseUsername       APEX_PUBLIC_USER
     PlsqlDefaultPage            apex
     PlsqlDatabasePassword       secret
     PlsqlSessionStateManagement StatelessWithFastResetPackageState
     #PlsqlRequestValidationFunction wwv_flow_epg_include_modules.authorize
     PlsqlCGIEnvironmentList     X-HTTP-METHOD-OVERRIDE
     Allow from all
    
    

    In this place, I can now get the value via: owa_util.get_cgi_env ('X-HTTP-METHOD-OVERRIDE")

    Joel

Maybe you are looking for

  • How to get a string changed to be reassessed

    Hello, I am very new to TS and do not know if I express the problem clearly. However the question below: Trying to change a numeric variable before it is evaluated at execution, and what I have is: Val (searchandreplace ("FileGlobals.I_LB_bin [FileGl

  • Picasa is unbootable

    Picasa I use google picasa to organize the photos on my computer. It does not start and gives me the random error. Any help would be appreciated.

  • Make new password questions

    While making a new password to the password reset Wizard would not accept the new password

  • Cannot print in windows 7 Home premium 64-bit

    I have a new PC with Win 7. I can't print from MS 13 office (Outlook, Word, etc.) 11 Explorer IE, Chrome, etc. The printer is communicating with the PC, I can scan a document to your computer. I reinstalled the HP printer driver for my Photosmart 638

  • BlackBerry smartphones a FIX! -Desktop Manager 7.0

    HELO all - after 2 days was also frustrated that hundeds of you were, I have my running Desktop Manager 7.0 (version 44). Thanks to a certain number of you who gave me clues. I tried to roll back to a restore point in order to obtain the return - 6.1