OIM 11 g R2PS2 - how to decipher the user password while calling the OIMClient API

Hello

I have a client application that connects to OIM 11 g R2PS2. Users connect in the client application to trigger a request for service and the client application will submit applications to the IOM.

Connection to the end users to the client application using OAM authentication. So I need to find a mechanism to get the end-user password so that I can use the same in the OIMClient API to connect to IOM.

If I login as XELSYSADM in the client application, is it possible that I can ask the user password and decrypt the same? I tried to use the code below, but I'm getting null pointer exception.

RS = stmt.executeQuery ("select USR_PASSWORD from USR where upper (USR_LOGIN) ='" + id + "'");

If (rs! = null & & RS.) Next {}

String encPwd = rs.getString ("USR_PASSWORD");

System.out.println ("get the DB password:" + encPwd);

try {}

String decryptPwd = String.valueOf (CryptoUtil.getDecryptedPassword (encPwd, null));

tcCryptoUtil.decrypt (encPwd, "DBSecretKey");

System.out.println ("decrypted password:" + decryptPwd);

oimClient.login (id1, decryptPwd.toCharArray ());

} catch (Exception e) {}

e.printStackTrace ();

e return;

}

}

Exception:

< 13 November 2015 12:29:01 EST > < error > < XELLERATE. ACCOUNTMANAGEMENT > < BEA-000000 > < class/method: tcDefaultDBEncryptionImpl/initKeyStore some problems: {1}

java.lang.NullPointerException

at com.thortech.xl.crypto.tcCryptoHelper.loadKeyStore(tcCryptoHelper.java:145)

at com.thortech.xl.crypto.tcDefaultDBEncryptionImpl.initKeyStore(tcDefaultDBEncryptionImpl.java:67)

at com.thortech.xl.crypto.tcDefaultDBEncryptionImpl.getCipher(tcDefaultDBEncryptionImpl.java:99)

at com.thortech.xl.crypto.tcDefaultDBEncryptionImpl.decrypt(tcDefaultDBEncryptionImpl.java:218)

at com.thortech.xl.crypto.tcCryptoUtil.decrypt(tcCryptoUtil.java:122)

at com.thortech.xl.crypto.tcCryptoUtil.decrypt(tcCryptoUtil.java:200)

at oracle.iam.platform.utils.crypto.CryptoUtil.getDecryptedPassword(CryptoUtil.java:132)

If you want to use the client of the IOM to send the request as long as the logged on user, IE of OAM session, then you might just get the context of the session of the user so the IOM customer queries will be made in this context. There is no need to decrypt the password for the user in this scenario.

See rest of URL of excellent example illustrating this: Oracle Fusion Middleware security: authentication IOM API without the end user password

Tags: Fusion Middleware

Similar Questions

  • Can someone explain how to use the addProcessFormChildData API?

    Hi gurus:
    I have a scenario where; I need groups implemented in AD using AD connector as part of provisioning of the IOM to AD users. These Don t groups are already available in IOM, but these are received as parameters of authoritative source.
    I read the different thread, but can not find how to use the addProcessFormChildData API to perform these forms of child.
    Any help would be greatly appreciated!
    PD: My English is very bad!

    Use this post

    How to remove data from the user for the child form?

    How to find the key to AD provisioning process instance

    These will be useful.

  • NLS Explorer: How to decipher the NLSSORT output

    I want to understand the linguistic nuances of
    How Oracle implements various character sets (language and territory). I have
    found a number of useful books of whites, metalink notes (and of course the)
    Docs online of globalization are good), but I tripped over a barrier of
    sorts (tongue in cheek).

    MetaLink notes 13882.1 (< strong > linguistic sorting data in Oracle 7 and )
    Oracle8 < facilities >) talks about major and minor values, and also mentions
    the WB # (internal use). I guess that this information is still valid in 9i
    and 10g, because there is no other more recent metalink document covering these
    Specific details (that I found). Therefore, for instance, capital A grave (& Agrave ;))
    with a value of 20, minor 5 (WB # = 300). I also noticed that the
    online documentation has a small sample glyph
    table
    with slightly different values (and despite the small NOTE following the)
    table, I get the same results in a game as a unicode one of non-unicode characters).
    How to expose that in sql? I guess that NLSSORT Gimme the number correct, but I
    don't know how to debone the output. The following example is from
    10 gr 2 AMERICAN_AMERICA. WE8ISO8859P1:

    < p >
    < color = "#333399" > SQL & gt; change
    session set nls_comp = LINGUISTIC; < / make >
    < /p >
    < p >
    < color = "#333399" > Session
    altered. < / make >
    < /p >
    < p >
    < color = "#333399" > SQL & gt; change
    session set NLS_SORT = generic_m; < / make >
    < /p >
    < p >
    < color = "#333399" > Session
    altered. < / make >
    < /p >
    < p >
    < color = "#333399" > SQL & gt;
    Select nlssort ('A') of double; < / make >
    < /p >
    < p >
    < color = "#333399" > NLSSORT ('A') < / make >
    < /p >
    < p >
    < color = "#333399" > - < / make >
    < /p >
    < p >
    < color = "#333399" > 01EA0000020006 < / make >
    < /p >
    < p >
    < color = "#333399" > SQL & gt;
    Select nlssort ("& Agrave ;') Double; < / make >
    < /p >
    < p >
    < color = "#333399" > NLSSORT ('& Agrave ;') < / make >)
    < /p >
    < p >
    < color = "#333399" > - < / make >
    < /p >
    < p >
    < color = "#333399" > 01EA0000020D0006 < / make >
    < /p >


    I have
    set the nls_comp and nls_sort, because by default (binary sort)
    gave me basic ascii values for sorting numbers, which are not what I want.
    I'm not too familiar with no parameters and yet, so it is possible that I could be
    using a 'better' or more easy nls_sort than generic_m.

    I'm assuming that the
    baseletter is wrapped in 01EA000002,
    Since it is the same for other diacritics has as well.

    If anyone knows of
    a better way to get the values of type major/minor, please let me know. The reason
    why I am pursuing this small nuance is designed to work in a laboratory that
    I demo to others, and I personally learned a lot better when I have concrete
    I can put my hands on examples.

    Oracle local Builder shows you the definition of a language object with the parameters of different flags, etc. NLSSORT function (in SQL * Plus or any other query tool) shows you the end result of the application of the definition of a string in order to get a sort key. As a result, two sources have an informative character. You can use NLSSORT trying to decipher the language definition, but it can be very difficult. For example: If you look the sort keys of the strings 'c', 'h' and 'ch' to SPANISH_M, you will see that the key to the 'ch' is not a 'c' and 'h' key combination This is because "ch" is sorted in a letter in Spanish. It is difficult to discover the dependency in the NLSSORT results, but it is visible in the definition of SPANISH_M.

    -Sergiusz

  • How to use the Teststand API DisplayEditNumericFormatDialog method

    Hello

    I have to create a report for Teststand coustom generator plugin using c#. In the Teststand API is a built-in method called 'DisplayEditNumericFormatDialog '.

    http://zone.NI.com/reference/en-XX/help/370052M-01/tsapiref/reftopics/propertyobject_displayeditnume...

    Is there a way to set the value of the sample of the window that appears if the method is called?

    I do the following things:

    private void button1_Click (object sender, EventArgs e)
    {
    mChanged = true;
    bool tempbool;

    PropertyObject tempobject = mEngine.NewPropertyObject (PropertyValueTypes.PropValType_Number, false, "", 0); creates a temporary PropertyOgject to view the EditNumericFormatWindow

    tempobject. NumericFormat = mConfig.GetValString (P_PluginSpecific_Options_NumericFormat, 0); read the digital format of the plugin options
    tempobject. DisplayEditNumericFormatDialog ("Digital Format", out (tempbool), 1); View the EditNimericFormatWindow

    If (tempobject. NumericFormat == "") mConfig.SetValString (P_PluginSpecific_Options_NumericFormat, 0, "%$.13g");
    else mConfig.SetValString (P_PluginSpecific_Options_NumericFormat, 0, tempobject.) NumericFormat);

    MessageBox.Show (tempobject. NumericFormat.ToString ());
    }

    Thanks in advance

    Hello f4bo,

    attached is a sequence that shows how this can be done.

    Locals.Local = RunState.Engine.NewPropertyObject (PropValType_Number, False, "", 0x1),.
    Locals.Local.AsPropertyObject.NumericFormat = "%b"
    Locals.Local.AsPropertyObject.SetValNumber ("", 0, 20),.
    Locals.Local.AsPropertyObject.DisplayEditNumericFormatDialog ("false title", False, 0)

  • How to use the vStorage API?

    Hi all

    I heard that vStorage is a feature of vSphere 4.0 that can take backup of the virtual machine directly without using a Proxy VCB.

    Does someone know how to use it? as far as I know only commercial 3rd party backup software can use it, do not use any script solution or freeware.

    Kind regards

    AWT

    I've heard both sides of the story (even from VMware peeps)

    (1) vStorage API is today essentially vSphere API + VDDK (e.g. change block tracking feature is in the new vSphere API, accessible using the SDK)

    (2) vStorage API is reserved for VMware partners to develop 3rd party applications (not 100% sure on this subject, but I know that some people have said this)

    Probably best to contact your VMware representative if you have any questions or interest in development on the vStorage API (probably why there not a forum on the vStorage API developers forum)

    =========================================================================

    William Lam

    VMware vExpert 2009

    Scripts for VMware ESX/ESXi and resources at: http://engineering.ucsb.edu/~duonglt/vmware/

    repository scripts vGhetto

    VMware Code Central - Scripts/code samples for developers and administrators

    150 VMware developer

    Introduction to the vMA (tips/tricks)

    Getting started with vSphere SDK for Perl

    Twitter: @lamw

    If you find this information useful, please give points to "correct" or "useful".

  • How to use the 'sensors' api?

    Hi guys! I am a web-game developer but a beginner in developing blackberry applications.

    I intended to create a star atlas application and I've already finished most but failed to use the 'sensors' api.

    I referred to the example provided in the documentation of webworks 2.1 as below:

    function compassCallback(data) {
    document.write("Current azimuth:"+data.azimuth);
    }
    blackberry.sensors.setOptions("devicecompass", { delay: 1000 });
    document.addEventListener("devicecompass", compassCallback);
    

    and I added an element in the config.xml file:

    also, I added the plugin com.blackberry.sensors for the project.

    But I still can't azimuth compass...

    I really appreciate if someone could help me with this!

    I solved this problem by myself.

    The listener of the api should be placed in a "deviceready" event

  • How to blur a user password in OID?

    the user passwords are hashed, but how to get this password? Are kind there?

    Version of the OID = 10.1.4.2.0 / 10.1.2.0.2

    Hashed passwords cannot be retrieved as the hash is a one-way mathematical function. You can't compare the hashes. If you have any IOM you can decipher the password or use the API does it for you.

  • How ATG BCC admin user password is encrypted in ATG10.2

    Hello

    I migrate data from external system profile to ATG. The external system uses the SHA256 algorithm to hash the user password. And ATG also uses the same algorithm. But I found that the string encodings are different in the two systems. So I customized the implementation for the hash of the password in the ATG. I guess that the same hashing algorithm of password to use in publication environments and CSC also for internal users. But the user "admin" is created when data is imported into the system, initially using script CIM. I think that the admin user password is not chopped with OOB implementation (SHA256) because I consider than salt password 'admin' in the table dpi_user in the edition of schema. Can someone let me know how the admin user password is encrypted?

    Thank you

    Mohan

    Hi David,

    My problem is solved. ATG uses the value of connection as its salt value password instead of generating a random salt for admin, merchandising, users of the services.

    Concerning

    Mohan

  • Requirements of SOX-how do to apply user password changes in Hyperion Planning

    To the needs of SOX, we need configuration of end user accounts password policy. We configure users Hyperion as native users, our on-site Oracle consultants told us that the user password can not be changed and no strategy for renewal of password can be configured.

    We understand that Oracle e-business as a result of such facility but Oracle implements yet this interesting feature to Hyperion products.

    All Hyperion users have a workaround?

    Thank you!

    I guess that shares the group accounts would have implications of SOX as you cannot find a specific user activities.

    Best practice would be to use the AD accounts with and assign the right level of access with the backup people in the same group as the main and both having the ability to play the role of user groups.

    -John

  • How to decipher the PDF using the password

    I have a PDF document where "Page Extraction: unauthorized."

    I use Adobe Reader X (version 10.1.15) to open the document. I have the password used to encrypt the PDF file.

    How to decrypt PDF file (remove the restriction) and save it as "Extraction of Page: license"? I don't have the full version of Adobe.

    Please let me know.

    Thank you in advance!

    Not possible with Acrobat Reader.

  • How to decipher the exception of certificate information

    I use Firefox 8 on Windows 7 Professional 64-bit.

    I was watching qriocity.com and received a notification that the identification information does not match (something to that effect). I chose the option to add an exception, thinking that I can easily find and delete the exception. After a lot of Googling, I found that the safe way to do this is got to tools-> Options-> advanced-> ViewCertificates encryption. The only tabs that are not empty are the servers and authorities tabs. On the servers tab, I found an entry under "Comodo CA limited" which looked related on qriocity website:

      Certificate Name: *.support.sonyentertainmentnetwork.com
      Server: qriocity-en-us.custhelp.com:443
    

    Without any other information, I decided to delete this entry. However, I'm wondering if these are in fact the certificate * exceptions * I look at. Thus, knowing * when * the exception has been added to eliminate any doubt that this is the exception, I added earlier. Is there a way to show the date added? Such a field does not seem to exist when I click on "show...". ».

    On a separate but related topic, I've also was looking for something relevant in the References tab. Are these all the powers that I have added, perhaps implicitly and unknowningly? Is it possible (and wise) to reduce this list to what it would be for a Virgin installation of Firefox?

    The entries you see in the Server tab are a permanent exceptions that you have accepted and those that are stored in the cert_override.txt file in the profile folder.

    Entered on the tabs authorities are build-in root certificates or intermediate certificates that Firefox automatically records.

    • Build-in root certificates show like "Builtin symbolic object" on the References tab, in the Certificate Manager.
    • Intermediate certificates stored show as "software security device.
  • How to see the public API java code (including police)

    Hello

    Excuse my noobishness, but I recently met {this} message and can't seem to find out how Mantaker (and other participants of the discussion) discovered the java code in the class of the police?

    Am I missing something? Is it possible for any public class?

    Please fill in my blanks of knowledge.

    Thank you.

    If you look at the post just above that you have linked to you will see that they used the javap command.  It's legal and it comes with the JDK.  Either way, you will notice that it does not give the complete code just the headers of the method and fields.

    For example, to get information, they passed the command line and navigate to the directory where your net_rim_api.jar file is.  Then type

    javap net.rim.device.api.ui.Font
    

    Of course, this assumes that the javap command is in your path.

  • How to apply the js API in external js?

    In the DC Acrobat javascript debugger, I can convert the pdf file to xml format using codes as below.

    myDoc = app.openDoc("/C/Users/EAGLE/Desktop/test.pdf var");

    myDoc.saveAs ("/ C/Users/EAGLE/Desktop/test.xml", "com.adobe.acrobat.xml - 1-00")

    I want to implement this function in the external js script for batch of my PDF files. Please tell me how to do this. THX ~ ~ ~

    No, Acrobat is not suitable for this type of automation.

    If you wish, you can place the code outside a function, however. In this way it will immediately run whenever you open the application...

  • How update you the Web/API/CLI password in the NSX Manager?

    I looked at several places and not seen how change the password to directly access the NSX (and not through vCenter) Manager:

    • NSX 6 Installation and Upgrade Guide.pdf
    • nsx_61_api.PDF
    • The NSX Manager CLI itself (in mode privileged or not)
    • configuration of the NSX in 'Networking and Security' Manager vcenter (a long shot)
    • The NSX Manager web UI

    Is there a way to change this?

    It should work with:

    Enable

    con t

    password CLI

    write memory

    (just tested with NSX - v 6.1.2)

    I think your order is trying to recreate the admin user.

    See you soon

    Richard

  • How to use the CWGPIB API

    Hello

    I want to use the CWGPIB component to control a GPIB device or spectrum.

    The first thing is to find what peripheral GPIB is on the bus, but I don't know what given API can be used to analyze the device by feeding back of settings such as address.

    Can someone help me?

    Thank you very much

    Hey JK,.

    I found an article on the Delphi application using programs 488.2.

    http://www.NI.com/white-paper/4873/en/

    http://digital.NI.com/public.nsf/allkb/F6E5713B040699E38625630600554D79

    I also found this http://www.ni.com/support/cw/cwtechspec.htm

    It seems that Borland Delphi and C++ Builder support Not IVI ComponentWorks ActiveX controls

    Because controls have been developed in Visual Basic (i.e., Delphi and C++ Builder do not support developed with Visual Basic ActiveX controls).

Maybe you are looking for