Integrate Oracle BIEE Server with LDAP(OID) over SSL

Surfing on the web I found a lot of guides to integrate Oracle BIEE Server with LDAP Repos but I didn't find any guide to integrate Oracle BIEE Server with LDAP Repos over SSL so I decided to write a little HOW-TO to describe how to do it.

There are two ways to integrate BIEE with a LDAP repo, the first one is to entrust to OID the authentication user list, the second one is to sync the BIEE user repo with LDAP repo. In this article I'm  describing the first way!

Config SSL on OBIEE:

1. Install GSKit7 on Server machine and Client machine


2. Create the key_file with the utility sk7ikm ( for details follow Generating a CMS Key Database Using IBM GSKit ), when you generate the key file you need to import the OCA cert of OID


3. Copy the generated file "key.kdb" to Server machine in the path $BIEE_HOME/server/Config


4. In BIee Administrator`s Menu go to:  Tools –> Options –> Repository and fill out the form with the Key File Name and Password like the image below:
   

Config OBIEE LDAP server:

1. Go to Manage -> Security -> LDAP Server


2. Select "New LDAP Servers..." and fill out the two tabs as follow:
   
   
   It's very important to check the SSL option!!!

Now your BIEE is integrated with your ldap repo.

The next step is to configure your Initialization Block, this isn't a topic of my article so if you need an exhaustive guide about Initialization Block of BIEE you can read the section "Configure initialization block for user authentication" in this page.

I hope you find this article useful for you,  feel free to comment it!

bye bye!

Encrypt/Decrypt String in Java Property File

Hi all,
I think It would be very useful to know how to encrypt/decrypt a password/general string when we store it in flat file.

In java the common way to store settings properties, like a username or a password,  is to use the Java Property File class using the standard methods:  setProperty, getProperty or  put.  Below a simple example of text file generated from  java:

 username=MyUsername
 password=MyPassword
 host=myhost

The evident security problem is that password string is readable by everybody, this is not a good thing :) , the solution is to encrypt the password into the file.  We can do it simply with few rows of code.  The follow example explains how encrypting end decrypting string when we are working with Property Files.

We need to write a "helper" class in order to encrypt/decrypt a string through the use of a custom key. In the following  sample the class name is  EncryptionHelper.  In this case we use a source written by Jakelite not by me (PS: thanks Jakelite). You can download it from here.

With the following code I'm writing a property file with the password field encrypted:

 ...
 String prefFileName= "config.ini"; //Name of file
 Properties prop=new Properties();
 FileInputStream file=null;

 file =new FileInputStream(prefFileName);
 prop.load(file);

 EncryptionHelper encryptionHelper; //Class wrote by Jakelite
 prop.put("username", "MyUsername");
 prop.put("password", encryptionHelper.encrypt(":!MyPassword!:"));
 prop.put("host", "myhost");
 ...

This is the content of generated  file "config.ini":

 username=MyUsername
 password=xRS5JsvgsdFv1dFj5HBZVpHhk+FfesDKyXPTAR3hY\=
 host=myhost

the rows below show how to read the encrypted password field from property file:

 ...
 String prefFileName= "config.ini"; //Name of file
 Properties prop=new Properties();
 FileInputStream file=null;

 file =new FileInputStream(prefFileName);
 prop.load(file);

 String username;
 String password;
 String host;

 EncryptionHelper encryptionHelper; //Class wrote by Jakelite
 username = prop.getProperty("username");
 password = encryptionHelper.decrypt( prop.getProperty("password");
 host = prop.getProperty("host");
 ...

I hope I  made myself clear, feel free to comment and/or suggest me everything!

Cheers!

New Adium 1.3.7 and MSNPlus xtra

New version of Adium is out, you can download it from officiale site.
The new release solves a bug on iChat and some bug on libpurple. Details:

• Updated libpurple
  
  
  
  • Fix a crash when some clients send contacts in a format we don't understand on ICQ.
  
  
  • Fix blocking and other privacy lists on AIM/ICQ.
  
  
  • Fixed CAPTCHA not working properly on Facebook.


• Fixed iChat emoticons on Snow Leopard.

Now the Xtra of Tiziano Carotti ( MSNPlus ) works perfectly, the msnplus nick names have been decoded  perfectly so we don't need  the patched release of Adium any more.

You can download the MSNPlus Xtras here or  you can install it directly!

Grazie mille Tiziano! ;)

bye bye

NEW Adium 1.3.6 With colored nick ( SDK 10.4 )

I built the new release of  Adium 1.3.6 with GIANDREA`s patch with SDK 10.4, I didn't test it, I hope It works perfectly, if not you can write me for fix the package!

Click here for download!



bye bye

Middiu

Adium 1.3.5 With colored nick ( SDK 10.4 )

I re-built  Adium 1.3.5 with GIANDREA`s patch with SDK 10.4, I can't try it, I hope It works perfectly...

Click here for download!

I'll be waiting for your comments!!!

bye bye

Middiu

MIDDIU.DYNDNS.ORG IN SCIOPERO

La legge sulle intercettazioni è una chiaro bavaglio alla Rete.
Questo blog aderisce allo sciopero.

ADIUM 1.3.5 WITH COLORED NICK

I built the new version of Adium 1.3.5 with GIANDREA`s patch, so the Adium`s user can see the Colored Nick like MSN Plus! I hope that GIANDREA and you like my (little) work!

Click here for download! Thanks to GIANDREA!!! bye bye

Hi folks,
this isn't my principal blog, I have opened this blog only to reserve my nick Middiu.

You can follow me on my official blog: Middiu's Blog

bye bye