nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Is there any option for impersonation on JSP/Java as like CGI Wrapper class?

jagadesh

Is there any option for impersonation on JSP/Java as like CGI Wrapper class?
For example
I have to run some CLT commands from JSP/Java through Runtime, but its executing as iwui user. Is there any option to run as session user instead of iwui?

I have gone through some couple of existing devnet thread , but no clue on anywhere.

Find more posts tagged with

Comments

Rick Poulin

Yes. In many places (e.g. workflow) you'll already be handed a CSClient running as the user. If you're writing your own piece, just apply the filter named "authentication" (provided by iwov) to your servlet in the web.xml.

Your Java itself will always run as iwui (or SYSTEM on Windows) which is why everything you do must go through the CSClient. If you're looking to write to the filesystem, there is no such impersonation in Java.

jagadesh

Yes. In many places (e.g. workflow) you'll already be handed a CSClient running as the user. If you're writing your own piece, just apply the filter named "authentication" (provided by iwov) to your servlet in the web.xml.

Thanks Rick for the information. I have one more quick question. Whether i have add one more authentication entry for Runtime Class in web.xml(Runtime.exec(clt cmd) in JSP)?

For example I am trying to set the metadata using the below CLT command in JSP
iwextattr -s -x vpath < extattr.xml

I checked web.xml
[HTML]

authentication

com.interwoven.ui.base.impl.auth.AuthenticationFilter

authentication.context.class

com.interwoven.ui.teamsite.auth.CSClientContext

nologinauthentication

com.interwoven.ui.base.impl.auth.NoLoginAuthenticationFilter

authentication.context.class

com.interwoven.ui.teamsite.auth.CSClientContext

authentication

*.jsp

authentication

CommandServlet

authentication

CommandServletMapper

authentication

LaunchpadServlet

nologinauthentication

CommandLineServlet

[/HTML]

Crsb

is there a reason why you have to run the CLT?
if you are already in custom jsp, use cssdk to set your EAs. you won't have to worry about impersonation when using CSSDK APIs. I can't think of anything that I can do using clt and can't do using cssdk which is the right way to do things when using java.
sample code:
[html]
...some CSSimpleFile file...
CSExtendedAttribute EA = new CSExtendedAttribute(name,value);
CSExtendedAttribute[] EAs= {EA};
file.setExtendedAttributes(EAs);
[/html]

Rick Poulin

is there a reason why you have to run the CLT?
if you are already in custom jsp, use cssdk to set your EAs. you won't have to worry about impersonation when using CSSDK APIs. I can't think of anything that I can do using clt and can't do using cssdk which is the right way to do things when using java.

Seconded. The CSSDK API supersedes the CLT as the 'preferred API' because it's faster and more extensive by quite a margin. Not only is this the 'right' way from a programming and maintenance perspective, but it's also considerably faster because you're not forking a new process every time you need to talk to the iwserver.