Skip to Main Content
Forums

Java Security

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Can't load applet from a kerberized server

alabala_kirilOct 5 2011 — edited Aug 13 2012
Hi there,

I have the following problem:
There's a java applet served as part of a web application. The User accessing the java applet should be authenticated by the web application. When this is done with basic authentication - the applet works fine.
However when a kerberos authentication is configured on the webserver(using spnego module) - the applet can't be loaded.
I log in to Windows XP using my user and pass. Then using IE I am automatically logged into the web application. I open the page on which the applet is embed, but the JRE can't load it(saying a ClassNotFoundException) The server's access log reveal that the jar can't be loaded because of authentication error:

- - [05/Oct/2011:15:19:54 +0200] "GET /peria/Grid.jar HTTP/1.1" 401 490
- - [05/Oct/2011:15:19:54 +0200] "GET /peria/Grid.jar HTTP/1.1" 401 490
- - [05/Oct/2011:15:19:54 +0200] "GET /peria/Grid.jar HTTP/1.1" 401 490

It seems as if the JRE is having problems authentication itself in front of the server? Could it be that or it is another issue?

Note that I can access the jar file directly via the browser. But when I open the page that has it embed - the applet could not be loaded due to ClassNotFound

Would anyone be so kind as to point me in the right direction?

Comments

Nick Gorman-Oracle

Supanut,

See the processor help here:

http://www.oracle.com/webfolder/technetwork/data-quality/edqhelp/index.htm

The details are only added when used in a real time [i.e. web services] call or run as part of a job.

regards,

Nick

2 people found this helpful
S_Srisaksakul

Thank you for your helpful reply.

I make a test and it is really as you and the help file stated.

It is working on realtime data input.

If you would be kind to help me more,

My destination data table has a field named "UPDATE_USER" to record  name of who put  or update the data.

Are there anyway to link EDQ username to be put in the output data so that non EDQ user know which of the edq user put the data in?

Nick Gorman-Oracle

Hi,

If you're talking about writing the EDQ data back to a database table then you need to read the help topic on Exports.

regards,

Nick

1 person found this helpful
S_Srisaksakul

thanks again

I forgot to mention that  the input data is non-real time and  the problem that I currently have is to aqquire the username from EDQ user since from what i understand  "User data detail" only work  on  real time data. I have no problem writting data back to the database.

regards,

T

Nick Gorman-Oracle

Yes, this processor is specifically designed for real-time mode. The username that invoked a batch job is stored in the event log [which can be snapshotted - see System Information - Event log data store] but it's not easy to add this to batch data [as this would require some post-processing to do the lookup].

Mike-Matthews-Oracle

Batch jobs that write data to external targets are normally run from a schedule by a system user (with rights to execute batch jobs) in any case, rather than by a specific 'user' who is logged into EDQ. Depending on your use case, it might therefore be that you need to identify the update as from EDQ rather than from anyone specific?

1 - 6
Locked Post
New comments cannot be posted to this locked post.

Post Details

Locked on Sep 10 2012
Added on Oct 5 2011
#applet, #authentication, #java, #kerberos-java-gss-jgss
2 comments
1,562 views