Identity Management , SOA, Testing, Monitoring

JVM Statistics

Om — Fri, 06 Jan 2012 00:13:48 +0000

JProbe from Quest is a good tool

VisuamVM

Protected: Perl Code to get query paramter and re-direct user based

Om — Thu, 20 Oct 2011 22:45:36 +0000

This post is password protected. You must visit the website and enter the password to continue reading.

HomeAboutView.js

Om — Wed, 05 Oct 2011 18:07:39 +0000

App.views.HomeAbout = Ext.extend(Ext.TabPanel, {

    fullscreen: true,
    styleHtmlContent: true,

    launch: function(){

     // store with data
        var data = {
            text: 'Groceries',
            items: [{
                text: 'Drinks',
                items: [{
                    text: 'Water',
                    items: [{
                        text: 'Sparkling',
                        leaf: true
                    },{
                        text: 'Still',
                        leaf: true
                    }]
                },{
                    text: 'Coffee',
                    leaf: true
                },{
                    text: 'Espresso',
                    leaf: true
                },{
                    text: 'Redbull',
                    leaf: true
                },{
                    text: 'Coke',
                    leaf: true
                },{
                    text: 'Diet Coke',
                    leaf: true
                }]
            },{
                text: 'Fruit',
                items: [{
                    text: 'Bananas',
                    leaf: true
                },{
                    text: 'Lemon',
                    leaf: true
                }]
            },{
                text: 'Snacks',
                items: [{
                    text: 'Nuts',
                    leaf: true
                },{
                    text: 'Pretzels',
                    leaf: true
                },{
                    text: 'Wasabi Peas',
                    leaf: true
                }]
            },{
                text: 'Empty Category',
                items: []
            }]
        };

       Ext.regModel('ListItem', {
            fields: [{name: 'text', type: 'string'}]
        });

     var store = new Ext.data.TreeStore({
            model: 'ListItem',
            root: data,
            proxy: {
                type: 'ajax',
                reader: {
                    type: 'tree',
                    root: 'items'
                }
            }
        });

     var nestedList = new Ext.NestedList({
            fullscreen: true,
            title: 'Groceries',
            displayField: 'text',
            dock: 'top',
            store: store
        });

        var btnSpecTop = [
            { ui: 'back', text: 'Back'},
            { xtype: 'spacer' },
            { ui: 'default', text: 'Login' }
        ] // end btnSpecTop

        var tapHandler = function (btn, evt) {
            alert("Button '" + btn.text + "' tapped.");
        }        

        var dockedItems = [{
            xtype: 'toolbar',
            dock: 'top',
            title: 'Demo',
            items: btnSpecTop,
            defaults: { handler: tapHandler }
            },
            {
                xtype: 'tabpanel',
                layout: 'card',
                dock: 'top',
                fullscreen: true,
                items:[{
                    title: 'test1',
                    html: 'test 1'
                },
                {
                    title: 'test2',
                    html: 'test 2',
                    dockedItems: nestedList
                },
                {
                    title: 'test3',
                    html: 'test 3'
                }]
            }
        ]

        var appPanel = new Ext.Panel({
            id: 'appPanel',
            fullscreen: true,
            dockedItems: dockedItems
        });

},   // end onReady 

  items: [{this.nestedList},{
          title: 'Tab1 ',
          html: 'Place the list here',
          cls: 'card card5'
      },
      {
          title: 'Tab 2',
          html: 'Tab 2 ',
         // cls: ''
      },
      {
          title: 'Tab 3',
          html: 'Videos',
          cls: 'card card3'
    }]

});

Ext.reg('HomeAbout', App.views.HomeAbout);

Sencha Touch :: Meetup in SantaClara with James Pearce

Om — Thu, 29 Sep 2011 15:13:20 +0000

It was a great presentation last night by Sencha Touch guru :: here are the high lights,

James Pearce from Sencha coded the entire application in front of us. If you have developed some Apps in sencha touch previously this tutorial would have been a fantastic one,
Sencha Touch can be run on either Chrome or Safari as they are browsers based on Web Kit.
The powerpiont slides used during the presentation are here ::
http://www.slideshare.net/jamesgpearce/create-a-mobile-web-app-with-sencha-touch

List always needs a store.
itmTpl :: Itemple Template.
xtype:: is used for creating a new instance. Generally it is placed in a function so the object is created only when the users goes to that place. This will ensure that not all objects are created every time the application is opened( PERFORMANCE TIP). Shorthand for Instantiating. LIke String str = new String();
SASS( sass-lang.com ) and Compass ( compass-style.org ) are used for styling and css. Compass will generate the css file from .sass file.
Editors that are used :: Komado, Aptana. ( There are not many HTML 5 editors out there)
Ext.List Always needs a Store and itemTpl for sure. Even if there is none you just create a and assign a null value

Ext.List( {
Store : null,
itemTpl: ” .. “
}

Use Apigee to see what is in a Json.
How to create a data store

this.data = {}
this.data.business = Ext.reg.Model();

STORE

this.data.restore = new Ext.data.store.
model: this.data.business
proxy : { type: scripttag”
}

When the Json is hosted on a different domain then use JSONP this is done by setting the type= scripttag

reader : {
type: ‘json’
autoload: true }

Then it would load the json asynchrnonous.

For List use the STORE Object
For NetstedList use the TreeStore object.
To use the images or change the image size and also for performance reasons use the SENCHA.IO
http://src.sencha.io/{give the image URL} ( or ) if you know the size then use the below
http://src.sencha.io/40/40/{give the image URL}
For Android the rendering might be different like “back” button might not work in Android. Use the Ext.is.Android to know if it is Android and make the corresponding code changes.
For Events use the “selectionchange” even function that was used in list.

selectionchange: function(s, record)

I will add the Video below if it is published. I am hoping they will have a video of the presentation….

Sencha 2 :

will be coming up in the next one month.
Hoping they will be announced before the Sencha Conference
There is a Sencha touch Desinger so this will make things easy to code and get the application up and running in no time.

SiteMinder :: How to make the FCC Files ready for a Mobile User

Om — Thu, 22 Sep 2011 16:16:51 +0000

Introduction ::

.fcc is the file extension which SiteMinder users for Forms based Authentication
fcc which is stands for ”Forms Credential Collector”

SiteMinder by default provides a sample of fcc files which work out of box for PC users.

With a majority of users now going mobile i thought it might be a good idea to come up with a sample fcc files which work out of box for MOBILE users.

Request to CA :: I request that CA use the samples and bundle with WebAgent. So other people can use it.

For the Impatient

Open the following URL in your browser(Works with Chrome or Safari firefox)
Open the following URL in your Mobile Browser

Detailed Story

In the /webagent/samples/form/ directory. Create a new Directory called “m”
Copy all the files listed here
Create a New Authentication scheme as shown below and you are all set

Please find the screen shots of the FCC file on Various Mobile Phones,

i-Phone

Android

WebLogic challenging for Basic Authentication Again

Om — Thu, 15 Sep 2011 22:48:35 +0000

Options 1

Work Arounds :: Re-set the Authorization header on Apache as

RequestHeader unset Authorization

in httpd.conf

Option 2: Change the WebLogic

Add the element to config.xml within the element. :

false

Start or restart all of the servers in the domain.

HTTP Authorization header passed thru WebLogic

Step by Step installing Oracle Identity Manager 11g

Om — Tue, 09 Aug 2011 16:04:55 +0000

In this Post I am going to show you the process of Installing / Configuring Oracle Identity Manager 11g. I have prepared this Tutorial based on the Documentation Provided by Oracle. I really wish they could have simplified it a bit but the goal of this tutorial is the same.

In this tutorial i have used

VMware workstation.
Oracle Enterprise Linux 6.0 ( Note Oracle 11g is not support on Linux 6.0 but it works so don’t worry).
Oracle 11g Fusion Middleware

Kids Summer camp

Om — Thu, 14 Jul 2011 21:52:15 +0000

http://www.internaldrive.com/locations/ca-summer-camps-california-computer-camps/

Ruby on Rails :: Getting started

Om — Wed, 13 Jul 2011 17:31:49 +0000

http://net.tutsplus.com/articles/web-roundups/essential-ruby-rails-3-reading-3/

My mail to Google on CSRF

Om — Sat, 02 Jul 2011 20:32:17 +0000

I am regular google user and found an instance where one of your functionality could be vulnerable for CSRF Attacks,

The following page is not protected ::

https://www.google.com/accounts/IdvChallenge?idvContinueHandler=SERVICE&idvContinueUrl={Any Target URL can be given}

Issue :: This should be protected URL. Else regular users can be sent this Link with parameter(idvContinueUrl) can be manipulated by the attacker to specify a potentially malicious Web page This can allow the attacker to carry out phishing type attacks.

As the user is likely to trust this location, arbitrary script code execution in the client browser and other attacks as possible as well.

Also, the Verification page even though it is POST the phone number can be manipulated using the Query parameter,

Please check the link below,

https://www.google.com/accounts/IdvVerify?idvContinueHandler=SERVICE+idvGivenAnswer%3D73608&submitbutton=Verify&dsh=3257339550046959531&idvContinueHandler=SERVICE&idvContinueUrl=https%3A%2F%2Fwww.google.com%2Faccounts%2FMarkIdVerified%3Fcontinue%3Dhttp%253A%252F%252Fwww.blogger.com%252Fcreate-blog.g%253Fhca%253Dtrue&dsh=3257339550046959531&idvType=CTC&MobileNumber=408-xyz-xxxx

MY Suggestions,

Here are couple of issues i found and thought which can be done, As this is not protected resource a 1 line perl script or curl can call 1000′s or 100 of people across US and spam them with a SMS or a phone call. I just tried with one more cell phone of mine and was able to make more than 1 call.

As you might know “Luzsec” has relased lot of phone numbers( From X-Factor, Snoy) it is easy to call or send SMS to all of them with just 1 line of code as shown below from google. I just treid calling myself like 4 or 5 times in a row in less than 2 min.

Replace the “MobileNumber” with the number you want to call.

Please find the screenshot below,

curl -d “dsh=-6321207345901540308&idvToken=&sft=&idvContinueHandler=UNKNOWN&idvContinueUrl=&dsh=-6321207345901540308&idvType=CTC&MobileCountry=US&MobileNumber=40822323&submitbutton=Call+my+phone+with+verification+code” https://www.google.com/accounts/IdvChallenge