text:
Firemint has announced Real Racing 2 HD for the iPad and iPad 2. This iPad-only version takes full advantage of the new A5 chip and faster graphics found in the iPad 2 and it looks fantastic.
Real Racing 2 has been limited to the iPhone and iPod touch since its debut last year, and I for one have always wanted to bring the experience over to my iPad. The idea of using the iPad as a steering wheel for a game like this has always been appealing. The only downside is that you'll need to purchase Real Racing 2 HD separately from the App Store, even if you've already purchased Real Racing 2 for your iPhone. The upside is that you'll be able to play it on both the original iPad and the new iPad 2 because of how the game adjusts graphics output between the two devices.
If you need any Real Racing tips then be sure to check out our TiPb TV Interview with Firemint Founder and CEO Rob Murray, and hit the jump for more Real Racing 2 HD eye candy below!
[iTunes -- $9.99]
[gallery columns="2"]
This post may contain affiliate links. See our disclosure policy for more details.


text:
Max B & French Montana Clownin On Eminem Gettin Nut Sacked On + Reaction To Spectacular's Grind Off Video (Max B's Last Days Before Being Found Guilty For Murder Charge In Court)
Uuncut-Raw TV reports "THey watch n comments on M and M clip as well as spectacular cartoon and dancing clip! Max b last days going to court before the guilty verdict!" Free Max B
Please click the "Report" button below if the video on this page is not working properly.
Comments will only be displayed by verified emails. No Spamming or Racism.

subset: commoncrawl


text:
From Proteopedia
Optimization of Potent, Selective, and Orally Bioavailable Pyrrolodinopyrimidine-containing Inhibitors of Heat Shock Protein 90. Identification of Development Candidate 2-amino-4-{4-chloro-2-[2-(4-fluoro-1H-pyrazol-1-yl)ethoxy]-6-methylphenyl}-N-(2,2-difluoropropyl)-5,7-dihydro-6H-pyrrolo[3,4-d]pyrimidine-6-carboxamide
Structural highlights
[HS90A_HUMAN] Molecular chaperone that promotes the maturation, structural maintenance and proper regulation of specific target proteins involved for instance in cell cycle control and signal transduction. Undergoes a functional cycle that is linked to its ATPase activity. This cycle probably induces conformational changes in the client proteins, thereby causing their activation. Interacts dynamically with various co-chaperones that modulate its substrate recognition, ATPase cycle and chaperone function.[1] [2]
Publication Abstract from PubMed
A novel class of heat shock protein 90 (Hsp90) inhibitors was discovered by high-throughput screening and was subsequently optimized using a combination of structure-based design, parallel synthesis, and the application of medicinal chemistry principles. Through this process, the biochemical and cell-based potency of the original HTS lead were substantially improved along with the corresponding metabolic stability properties. These efforts culminated with the identification of a development candidate (compound 42) which displayed desired PK/PD relationships, significant efficacy in a melanoma A2058 xenograft tumor model, and attractive DMPK profiles.
Optimization of Potent, Selective, and Orally Bioavailable Pyrrolodinopyrimidine-Containing Inhibitors of Heat Shock Protein 90. Identification of Development Candidate 2-Amino-4-{4-chloro-2-[2-(4-fluoro-1H-pyrazol-1-yl)ethoxy]-6-methylphenyl} -N-(2,2-difluoropropyl)-5,7-dihydro-6H-pyrrolo[3,4-d]pyrimidine-6-carboxam ide.,Zehnder L, Bennett M, Meng J, Huang B, Ninkovic S, Wang F, Braganza J, Tatlock J, Jewell T, Zhou JZ, Burke B, Wang J, Maegley K, Mehta PP, Yin MJ, Gajiwala KS, Hickey MJ, Yamazaki S, Smith E, Kang P, Sistla A, Dovalsantos E, Gehring MR, Kania R, Wythes M, Kung PP J Med Chem. 2011 Apr 20. PMID:21438541[3]
From MEDLINE®/PubMed®, a database of the U.S. National Library of Medicine.
See Also


text:
MINCEMEAT - Perseverance Pie
(real mincemeat pie recipe!)
2 lbs. lean beef in 2 inch or smaller chunks (or ground beef)
1 lb. suet
4 cups currants or raisins or half and half
2 cups chopped citron
6 cups unpeeled, chopped cooking apples (about 6)
8 cups sugar
1 pint molasses
1 pint cider vinegar
1 Tablespoon ground cloves
2 Tablespoons ground cinnamon
1 Tablespoon ground nutmeg
Salt to taste
Generous 1/2 cup Grant's 8 Scotch (after all it was their ad I saw in the NY Times magazine section over 35 years ago.)
Cook beef in salted water until tender. Remove from bones and grind in food chopper (or cheat as I do and use ground beef). Grind suet and citron. Add remaining ingredients. Mix well. Place in large baking dish in roaster containing 2 inches of water. Bake in very slow oven, 200 degrees (or use same setting on electric roaster) for 4 hours (or until apples are tender). Stir often. Taste the Scotch. After mixture has cooled to completion, add Grant's 8 Scotch. Mixture will be quite dark in color. Place in crocks when cool and refrigerate for about 3 weeks. Makes enough for about five 9 inch pies.
When ready for Perseverance Pie, place filling in unbaked pie shell. Top filling with latticework. Bake at about 400 degrees for 50 minutes or until crust is golden.
To serve flambé, ignite 1/4 cup warmed Grant's 8 Scotch in long-handled container and pour over pie.
Whiskey Butter Topping:
Cream together:
1 stick sweet butter
1 cup sifted confectioner's sugar
2 Tablespoons Grant's 8 Scotch
After the flame has died, decorate pie with whiskey butter run through a cake decorator. Or forget the cake decorator and give each pie a generous gob.
I have several dessert wines to choose from. I'm so excited!


text:
External sharing overview
If your organization performs work that involves sharing documents or collaborating directly with vendors, clients, or customers, then you can use the external sharing features of SharePoint Online to share content with people outside your organization. Or, if this is not the case, you may want to limit the use of external sharing in your organization. In this article, we look at the SharePoint Online sharing options and how to plan for them.
(If you want to get straight to setting up sharing, see Turn external sharing on or off for SharePoint Online. If you're trying to share a file or folder, see Share OneDrive files and folders or Share SharePoint files or folders in Office 365.)
Planning for external sharing should be included as part of your overall permissions planning for SharePoint Online.
Note that external sharing is turned on by default for your entire SharePoint Online environment and the site collections in it. You may want to turn it off globally before people start using sites or until you know exactly how you want to use the feature.
What are the external sharing features of SharePoint Online?
SharePoint Online has both global (organization-wide) and site collection settings for external sharing. The organization-level settings override any settings at the site collection level, and also affect OneDrive.
For your organization and each individual site collection, you can choose from the following basic sharing options:
No external sharing - sites and documents can only be shared with internal users in your Office 365 subscription.
Sharing only with external users in your directory - sites, folders, and documents can only be shared with external users who are already in your Office 365 user directory. For example, users who have previously accepted a sharing invitation or users who you have imported from another Office 365 or Azure Active Directory tenant.
Sharing with authenticated external users - sites can be shared with external users who have a Microsoft account or a work or school account from another Office 365 subscription or an Azure Active Directory subscription. When folders or documents are shared, the user is not required to log in using a Microsoft Account or a Work or School Account - they are sent a one-time code that they can use to verify their identity.
Sharing with anonymous users - documents and folders (but not sites) can be shared via an anonymous link where anyone with the link can view or edit the document, or upload to the folder.
The list above is in the order of most to least restrictive. Whichever option you choose, the more restrictive functionality is still available to you. For example, if you choose to allow sharing with anonymous users, you can still share with authenticated external users and users already in your directory, including internal users.
Sharing and security
If you have confidential information that should never be shared with external users, consider having one or more site collections where external sharing is turned off where you keep your confidential information. Create additional site collections as needed to use for external sharing. This helps you to manage security risk by preventing external access to sensitive information.
Note that when you share a folder with external users, the external users will be able to see each other's name and email address in the sharing properties.
What is an external user?
An external user is someone from outside your Office 365 subscription to whom you have given access to one or more sites, files, or folders. There are two types of external users:
Authenticated users with Microsoft accounts
You can share sites, files, and folders with users who have a Microsoft Account or a work or school account from another Office 365 subscription in much the same way that you share sites and documents with your internal users. Permissions and groups work the same for authenticated external users with Microsoft accounts as they do for internal users.
Because external users with Microsoft accounts do not have a license to your Office 365 subscription, they are limited to basic collaboration tasks:
They can perform tasks on a site consistent with the permission level that they are assigned. For example, if you add an external user to the Members group, they will have Edit permissions and they will be able to add, edit and delete lists; they will also be able to view, add, update and delete list items and documents.
They can use Office Online for viewing and editing documents. If your plan includes Office Professional Plus, they cannot install the desktop version of Office on their own computers unless you assign them a license.
They will be able to see other types of content on sites, depending on the permissions you give them. For example, they can navigate to different subsites within the site collection to which they were invited. They will also be able to do things like view site feeds.
If your authenticated external users need greater capability such as OneDrive for Business storage or creating a Microsoft Flow, you must assign them an appropriate Office 365 license. To do this, go to the Active users page of the Microsoft 365 admin center, select the external user, click More, and then click Edit product licenses.
Authenticated users without Microsoft accounts
You can share files and folders with anyone who has an email address. If the person you're sharing with doesn't have a Microsoft Account or a work or school account, they will be sent a one-time access code for authentication each time they access the file or folder. You can't share sites with users unless they have a Microsoft account.
Anonymous users
Anonymous users are users who have a shareable link to a folder or document and can view or edit the document or upload to the folder (depending on the type of link) without having to log in with a username or password. Anonymous links can be freely passed around between users and are valid until you disable them or they expire (if you've set an expiration date).
Anonymous users cannot access sites, and you cannot assign them licenses. They can only view or edit the specific document or folder for which they have an anonymous access link. You cannot verify the identity of anonymous users, but their IP address is recorded in audit logs when they access or edit shared content.
What happens when I share a site or document?
When you share a site, folder, or document, what happens behind the scenes depends on whether you choose to share with authenticated external users or anonymous users.
Sharing sites with authenticated external users
When you share a site with an authenticated external user, an invitation is sent to them via email which contains a link to the site or document. When they click the link, they are asked to log in using the username and password of their Microsoft account or their work or school account. When they log in, they are added to the users list in your Office 365 subscription (you'll see them listed with #EXT# in their user name) and given access to the site or document.
Once they are in the user list in your Office 365 subscription, you can grant them access to other sites or documents without sending them additional invitations. (You may need to send them a link to the site or document so they can find it.) You can also assign them an Office 365 license if you want.
You can discontinue sharing with an authenticated external user by removing their permissions from the site, or by removing them from the user list in Office 365.
Sharing files and folders with authenticated external users
When you share a file or folder with an external user who has their own Office 365 email address (a work or school account), an email is sent to them which contains a link to the file or folder. The first time they access the file or folder using the link, they are sent a time-sensitive code via email that they can use to verify their identity. They must enter the code to access the file or folder. Once they have accessed the file or folder for the first time, these external users are added as guests to your Office 365 directory and thereafter they can access the file using thier work or school account.
When you share a file or folder with an authenticated external user who does not have a work or school account, an email is sent to them which contains a link to the file or folder. Each time they access the file or folder using the link, they are sent a time-sensitive code via email that they can use to verify their identity. They must enter the code to access the file or folder. These external users are not added to your Office 365 directory.
You can discontinue sharing with an authenticated external user by deleting the sharing link that was sent to them.
Sharing with anonymous users
When you share with anonymous users, you can allow them to edit or to view a document or upload to a folder. View and edit links are created separately and can be set to expire at a specified time. Once you have created these links, they can be reused and passed around freely. Anyone with the link can access the document.
Anonymous users are not added to the user list in Office 365. You can discontinue sharing with them by going to the document or folder that you shared and deleting the anonymous link.
Collaborating with external business partners
If you have business partners or vendors with whom you need to collaborate or share documents, consider setting up a SharePoint Online extranet site. An extranet site is a dedicate site collection that you use for business-to-business collaboration with a particular partner or vendor. You can lock this site down so that only site owners can invite external users and only external users from specific domains can be invited.
SharePoint Online extranet sites are very easy to set up and much easier and less expensive to maintain than on-premises extranet sites. For details, see Use Office 365 SharePoint Online as a business-to-business (B2B) extranet solution.
See also
Coaching your guest users through the External Sharing Experience
Set up and manage access requests
We'd love to hear your thoughts. Choose the type you'd like to provide:
Our feedback system is built on GitHub Issues. Read more on our blog.
Loading feedback...


text: I've been looking into MPP programs as well, but I'm in the opposite boat. I'm hoping getting into a top law school will provide some more clout in applying for an MPP program.I have some decent experience which would get me a close look at some great MPP programs, but nothing to overawe.John Galt: If you don't mind my asking, where are you pursuing your MPP? Did you apply to the program before/during/after beginning law school?


text:
by Lou Mancinelli
Thanks to Wyndmoor musician Brian Walker, 25 Philadelphia bands have contributed songs to an album that, through sales, will benefit Rock To The Future, a youth music education program launched in 2010 by Jessica McKay, a Business Administration graduate from Temple University who left a job in the financial services industry to begin it. "Rock" provides free music education for underserved inner-city kids.
A few bands featured on the album will perform at a listening party Thursday, Aug. 29, 8 p.m., at the Philadelphia Mausoleum of Contemporary Art (PhilaMOCA), 531 N. 12th St. (at Spring Garden). Located in a former showroom for mausoleums and tombstones, PhilaMOCA is a gallery space complete with stage and screen.
"Growing up I never had music education," said Brian Walker, 25, who attended Our Mother of Consolation and Springfield Township High School.
This year Walker founded The Quarterly Project, the goal of which is to unify the diversity of the Philadelphia music scene while also serving the youth of the community. "Musicians are not just entertainers," he explained. "It is our responsibility to bring communities together and to help them grow."
The aforementioned album was released this month and is now available online at Bandcamp.com for $5. It features bands like Toy Soldiers, who played at the Pastorius Park Wednesday night concert series this summer, as well as Walker's band, A Day Without Love.
The inspiration to start the organization was the massive cuts to the arts in Philadelphia public education. Facing a $304 million gap, the City laid off 76 itinerant music teachers in June, according to the Philadelphia Inquirer.
"I wanted to use my resources to actually help people," said Walker, who earned his master's degree in industrial organizational psychology this year from Hofstra University in New York.
When Walker moved back to the area after school, he encountered a Philadelphia music scene he said he found hard to navigate. While an undergrad at Penn State University, he experienced the same. Thousands of musicians who hardly know one another. So he started The Songwriters Club, a way for local musicians to network.
Though Walker only learned to play music his freshman year at college, he has played almost 100 shows. But he struggled to meet people. He said he found a community that was diverse and friendly but disconnected.
He experienced promoters who seemed more interested in filling space than creating a cohesive evening. He has sent out emails and made phone calls that go unanswered. That's a part of the business he wants to make easier.
Walker is also credited with starting the Philadelphia Do-It-Yourself Collaborative, an independent citywide Facebook group for artists, musicians and independent business owners.
Throughout the city are countless private houses that host shows almost every weekend and even during the week.
There are basements and family rooms that serve as networking nexuses for a generation of musicians and artists who might have otherwise gone to New York or L.A. For someone starting out, the only way to network is to keep playing. "I kind of want to bring back the face-to-face thing between musicians," Brian said, adding that Facebook could turn into a lifeless platform.
Walker's agenda is to have The Quarterly Project serve as a larger networking framework for the people who run, perform and attend those shows. At the same time, he decided he could create album compilations that showcased the dynamic talent of Philly bands and raise money for youth music education.
His vision for The Quarterly goes beyond the music. "I think a big part of keeping small business alive is not just the fiscal side," he said. "It's the networking side as well."
Walker's day job is as a human relations specialist with Comcast. That's a skill he can leverage in his endeavors as The Quarterly Project evolves. The organization is in the process of acquiring nonprofit status.
For more information about the Aug. 29 concert, call 267-519-9651 or visit www.philamoca.org. More information about The Quarterly Project is at thequarterlyproject.tumblr.com or email@example.com. To purchase the album, visit thequarterly.bandcamp.com.


text:
Latest on Witnesses
Originals, Oscar-winners, and Star Wars, oh my! Netflix sure does know how to sweeten up the summer.
What's New On Netflix, Hulu, Amazon Prime Video, And HBO This Weekend: 'Okja', 'Loving', '20th Century Women', And More
Some of the best movies of the last year are finally available to stream.


text:
To the Editor:
I support the Geneva teachers' determination to convince the school board to develop a stronger contract that will make the most of our community's investment in our children, our future – that will retain and attract strong, phenomenal teachers and that will allow teachers to feel respected and supported.
If we peruse the websites of the Geneva Education Association and the Geneva school board or speak to individuals from each group, we will see that the GEA has valid arguments for what it's requesting in its contract. We also see a school board attempting to show fiscal responsibility. What I personally have seen missing is respect for – and support of – teachers from some in the community. Even the board's press releases have carried a tone of offense and disappointment at the union's actions. I believe this tone is simply a result of a process that has been difficult and upsetting for all parties. I trust that individual board members do have a great deal of respect for teachers, and I hope remembering this helps them come to an agreement in the near future.
Going back to the community's investment in our future – the children of our community and our nation will be those we turn to in the future to teach other generations, to make decisions about laws and roads and safety, to repair our cars, to help us when our technology fails us, to create new technology, to save our green spaces, to sell us our groceries, our clothes and our medicine, and to take care of us, each other and our
Teachers happen to be our link to those future leaders. I want teachers to receive support, respect and a fair contract. It's worth it, to me, to team up with other residents and make that investment.
I hope for the parties to come to agreement soon. However, I am most hopeful that the support and respect our schools deserve is given by the whole community, no matter how we feel about how our tax dollars should be spent or how high we believe they should be. No matter the outcome, no matter how hard the fight, our future is directly connected to teachers. I support their hard work. I respect their dedication today and always.
Heidi Gibbons


text:
iStringSet Struct Reference
General string ID string set. More...
#include <iutil/strset.h>
Inheritance diagram for iStringSet:
Detailed Description
General string ID string set.
Definition at line 199 of file strset.h.
The documentation for this struct was generated from the following file:
- iutil/strset.h
Generated for Crystal Space 2.0 by doxygen 1.6.1


text:
Jump to:
Page 0
Pop-up large image
Cite web page as: John Quincy Adams diary 25 (almanac), 1800, inside front cover
[electronic edition]. The Diaries of John Quincy Adams: A Digital Collection. Boston, Mass. : Massachusetts Historical Society, 2005. http://www.masshist.org/jqadiaries
Original manuscript:
Adams, John Quincy.
John Quincy Adams diary 25 (almanac), 1800.
164 pages total (pages 1-161 are published pages of a pocket almanac,
39 of these pages include manuscript notations and accounts; the three pages
prior to page 1--the inside front cover, and two additional pages--contain
manuscript notations).
Page dimensions: 11.5 cm x 7.2 cm (4-1/2 in. x 3 in.).
Original manuscript from the Adams Family Papers, Massachusetts
Historical Society.


text:
|Summary of 10 reviews :
|Room :
|Facilities :
|Service :
|Location :
|Hotel room status:
Located just south of Hua Hin, a picturesque provincial town on the
Gulf of Siam, long favored by the "old families" of Thailand. Less than
200 kms from Bangkok, on a beautiful sandy tree-lined beach dominated
by the rocky hills of Khao Takiab.
Walk several hundred yards to a working fishing village where a variety of fresh seafood is available every day. And only a short ride from Hua Hin Town where shops, restaurants and other attractions await the visitor. For golf enthusiasts, there are seven world-class courses within a half hour ride from Anantasila.
Small, friendly and intimate with a wide choice of accommodations. Elegant poolside rooms, seafront apartments, and bungalows to suit almost every taste. A private beachfront and 25 meter swimming pool provide for carefree relaxation in the sun. Our beach bar and terrace offer soothing views of the sea while sipping a cocktail or sampling the food from our excellent restaurant.
The decor features artwork from the North of Thailand and the garden displays a wide selection of tropical plants, palm trees and native orchids. The Rose Bar is available for evening get-togethers and features semi-classical and romantic mood music aimed at preserving the serenity of the location.
Perhaps, most important, we are a family-run hotel where we strive to make hospitality our greatest asset.
Garden Room
Room size is 30 sq.m. | Two queen size beds, shower/bathroom and outdoor sitting area
Standard Room, Annex Building
Room size is 25 sq.m. | One king size or two queen size bedsThese rooms are situated in our Annex Building directly opposite the entrance to our hotel. It is approximately 70 meters from the beach.
1 Bedroom Apartment, Annex Building
Room size is 72 sq.m. | Two queen size bedsThese rooms are situated in our Annex Building directly opposite the entrance to our hotel. It is approximately 70 meters from the beach.
Very spacious one bedroom with two queen size beds, shower, large living dining table, kitchenette.
Pool View Double Room
Room size is 40 sq.m. | Two queen size beds | Have Balcony | Overlooking swimming pool
Deluxe Pool Side Room
Room size is 40 sq.m. | Two queen size beds | Ground Floor| Direct terrace access to swimming pool
Deluxe Junior Suite
Room size is 70 sq.m. | Two queen size bedsTwo queen size beds, full bath, dining/sitting area, and kitchenette. It is a large and well-appointed room suitable for a family with children.
Pool Villa 6 Persons
Size is 108 sq.m. plus 56 sq.m. for Pool area and 35 sq.m. for roof topTwo-storey building with small private swimming pool.
|Set on a beautiful sandy tree-lined beach surrounding by a lush tropical garden
& native orchids. Fabulous family atmosphere by day, yet the serene ambiance provides a very romantic spot by night.
Experience our luscious French & Thai Cuisine while taking in the soothing view of the sea or just relax in our Beach Bar while sipping your favorite cocktails.
Live Acoustic Music every Saturday from 19:00 - 21:00 hrs.
Recreation and outdoor facilities :
Hotel facilities include :
Wedding Ceremony :
There are plenty of activities around Hua Hin including :
|Swimming Pool
|Table around pool area
|Horse riding
|Tuktuk Service
|Mini Golf
|Soft sandy beach
Anantasila located right on the beach in Khao Takiab, 5km south of Hua Hin town center.


text:
Jim Gill, Ph.D., inaugural chair of Water Australia and past chief executive officer of the Water Corporation of Western Australia, will be the keynote luncheon speaker at the WaterSmart Innovations Conference and Exposition, Oct. 7-9 in Las Vegas.
In 2009, following 13 years as head of the Water Corporation of Western Australia, Gill was selected to chair Water Australia, a joint public-private organization created to disseminate Australian technology and expertise in water resource management. Gill will make his presentation during the conference luncheon on Oct. 8.
At the Water Corporation, Gills' achievements include a desalination plant that uses renewable energy, programs to enhance water supplies through agricultural irrigation efficiency, and a system for aquifer storage and recovery of treated wastewater. His agency also achieved an annual systemwide water use reduction of 45 gigaliters (approximately 12 billion gallons).
In 2008, Gill received the International Water Association's prestigious Grand Award for mastering the implications of climate change in Australia, and this year he was made an Officer in the Order of Australia, one of the nation's highest honors. He was named Australian Civil Engineer of the Year for 2006.
He holds degrees from the University of Western Australia, University of Cambridge, and Harvard University.
Presented by the Southern Nevada Water Authority (SNWA) in conjunction with the U.S. Environmental Protection Agency's WaterSense Program, WaterSmart Innovations is a non-profit event that serves to broaden knowledge of innovations in urban water efficiency and water conservation including products, programs, and outreach. More information is available at www.WaterSmartInnovations.com.
"Early bird" conference registration is available through July 9 at a discounted rate of $330. After that date, full conference registration is $390. WaterSmart Innovations will be held at the South Point Hotel and Conference Center, at the south end of the Las Vegas Strip.


text:
Total: $0.00View Recent
The Solar Leggings are a dancer legging with an athletic, superior fit, comfort for any performance or the day to day. Made out of 100% polyester for a sheer, soft and chic feel and vivid performance. Easy to slip on with an elastic waistband, wear as a separate bottom or layer with your favorite skirt or short. Putting style and edge in a dancer classic - custom designs from the exclusive Alexandra Collection.
Share your favorite products with friends around the world!
Follow Us online, join our conversations, engage with our teams around the world!
Our agents are currently offline, but we can get back to you ASAP if you leave your email and phone# in the live chat widget below.
Here you can find additional information about our services:


text:
Sumo's Omni Reloaded offers comfort and versatility on the go!
What better way to spend a milestone 10 year anniversary for a successful business than to launch an all-new revolutionary product? That's exactly what the folks at SumoLounge.com did with the ultra-cool Omni Reloaded. We chill on other Sumos that we tested, but the new Omni Reloaded is a really super product that could be their best to date! Sumo Reloaded is the latest and most revolutionary product Sumo Lounge has ever produced. A logical evolution from the signature Omni beanbag, it features the same quality craftsmanship but is designed for those who value comfort and versatility on the go.
The magic is in the flexible, durable and easy-to-clean materials it is made with; Reloaded effortlessly adjusts into a number of positions to suit your needs. And just as easily, it packs away in its matching carry case for convenient transport or storage. We couldn't believe how easy it was to adjust and store for on the run fun!
You can follow us on Twitter and Facebook for content updates. Also, sign up for our email list for weekly updates and check us out on Google+ as well.
Posted in: Gear, Stuff to Buy
Tags: Sumo chair, Sumo chair review, Sumo Lounge, Sumo Omni Reloaded


text:
This chapter describes issues associated with Oracle Access Manager 11g Release 1 (11.1.1). It includes the following topics:
This section describes patch requirements for Oracle Access Manager 11g Release 1 (11.1.1). It includes the following sections:
Section 32.1.1, "Plain Text Credentials Exposed in Diagnostic Logs when Creating an Identity Store"
Section 32.1.2, "java.lang.NullPointerException: Cannot Set Value to Null at javax.naming.ldap.Rdn.<init>(Rdn.java:178)"
See Also:The latest Oracle Access Manager 11g Release 1 (11.1.1) updates and related release notes on My Oracle Support at:
To work around this issue:
Go to My Oracle Support at
Click the Patches & Updates tab, and search for bug 9824531.Download the associated patch and install it by following the instructions in the
README file included with the patch.
On the Patches & Updates tab, search for bug 9882205. Download the associated patch and install it by following the instructions in the
README file included with the patch.
If you encounter a
java.lang.NullPointerException: Cannot set value to null at javax.naming.ldap.Rdn.<init>(Rdn.java:178) error in your WebLogic Server Administration Console or managed server logs, it is mostly likely caused by Oracle JRockit.
In certain cases involving try-catch-clauses, JRockit will apply an incorrect optimization such that a null check always returns false. To avoid this issue, ensure that you are running JVM version R28.0.1 or later.
R28.0.1 is available as patch 9847606, which you can download from My Oracle Support at:
This section describes general issue and workarounds. It includes the following topic:
Section 32.2.1, "Replacing oamreg Scripts with Remote Registration Home."
Section 32.2.2, "Incorrect SSO Agent Date/Time Shown to User"
Section 32.2.3, "The oamreg.sh File Missing Execute Permission After Configuring"
Section 32.2.4, "Initial Messages After WebGate Registration Are Not Shown in the User's Locale"
Section 32.2.5, "Error While Browsing Resources Table in the ResourceType Tab"
Section 32.2.6, "Single-Click to Open Child Node is Not Supported in the Navigation Tree"
Section 32.2.7, "User Credential for OAM Registration Tool Does Not Support Non-ASCII Characters on Native Server Locale"
Section 32.2.8, "Turkish and Greek Character Issues on OAM Authentication Page"
Section 32.2.9, "OAM Authentication Does Not Support Non-ASCII Passwords on Locales Other than UTF8"
Section 32.2.10, "Error Message of Create Agent Shows as Server Locale"
Section 32.2.12, "Diagnostic Information Is Not Being Displayed on the Administration Console"
Section 32.2.13, "Non-ASCII Resources Require OHS To Restart To Make Protection Take Effect"
Section 32.2.14, "Non-ASCII Characters on Success/Failure URL Results in Garbled Redirect URL"
Section 32.2.15, "Resource with Non-ASCII Characters Cannot Be Protected by an OSSO Agent"
Section 32.2.16, "Error in Administration Server Log from Console Logins"
Section 32.2.17, "Translation Packages Use the Term, Agents, Instead of WebGates."
Section 32.2.18, "Special Character Limitations in Response Attribute Names"
Section 32.2.19, "Application Domain Subtree in the Navigation Tree Is Not Rendered and Does Not Respond to User Actions"
Section 32.2.20, "Error in the "Evaluate Single Sign-On Requirements" Help Topic"
Section 32.2.21, "EDITWEBGATEAGENT Command Does Not Give An Error If Invalid Value is Entered"
Section 32.2.22, "WLST Command DISPLAYWEBGATE11GAGENT In Offline Mode Displays the WebGate Agent Entry Twice"
Section 32.2.23, "Message Logged at Error Level Instead of at INFO When Servers in Cluster Start"
Section 32.2.24, "Help Is Not Available for WLST Command REGISTEROIFDAPPARTNER"
Section 32.2.25, "User Must Click Continue to Advance in Authentication Flow"
Section 32.2.26, "Login Page Throws Exception in the OAM-SERVER1 Log After Restarting the Servers."
Section 32.2.27, "After RREG User Required to Click Refresh Domain Twice for Changes to Be Visible."
Section 32.2.29, "Database Node is Non-Functional in the System Console"
Section 32.2.30, "Online Help Provided Might Not Be Up To Date"
Section 32.2.31, "Agent Key Password Should Be Mandatory for Both the Console and Remote Registration Tool in Cert Mode."
Section 32.2.32, "OAM Audit Report AUTHENTICATIONFROMIPBYUSER Throws a FROM Keyword Not Found Where Expected Error."
Section 32.2.33, "Custom Resource Types Should Not be Created"
Section 32.2.34, "Oracle Access Manager IDM Domain Agent Provides Single-Sign On."
Section 32.2.35, "Use of a Non-ASCII Name for a WebGate Might Impact SSO Redirection Flows"
Section 32.2.36, "Authentication Module Lists Non-Primary Identity Stores"
Section 32.2.37, "Unable to Stop and Start OAM Server Through Identity and Access Node in Fusion Middleware Control."
Section 32.2.38, "ADF Applications Using ADF Security Fail to Work in OAM 11g."
IM_ORACLE_HOME/oam/server/rreg/bin contains the scripts (
oamreg.bat and
oamreg.sh) for performing remote registration. Prior to execution, the scripts need to be edited to point the attribute
OAM_REG_HOME to the absolute file location for
RREG_HOME will be one directory above where the scripts exist.
For example,
IM_ORACLE_HOME in a particular Linux environment is:
The entry for the attribute
OAM_REG_HOME in
oamreg.sh will be:
export OAM_REG_HOME=MW_HOME/Oracle_IDM/oam/server/rreg
The default start date on the Create OAM Agent page is based on the Oracle Access Manager server date/time. The date/time shown to the end user is based on the Oracle Access Manager server timezone rather than on the user's machine.
Out of the box, execute permissions are not set for the
oamreg.sh and
oamreg.bat files in the Oracle Access Manager install location. Before you perform remote registration (
rreg), you need to set the execute permissions on the scripts by using the following commands:
chmod +x oamreg.sh OR chmod +x oamreg.bat
Then, you can proceed with the regular remote registration steps.
After OAM Web Gate registration, the description fields in the initial messages for related components are not shown in the user's locale.
The description field does not support Multilingual Support (MLS).
While browsing across the Resources table in the ResourceType tab, the following error message is displayed:
<Error> <oracle.adfinternal.view.faces.model.binding.CurrencyRowKeySet> <BEA-000000> <ADFv: Rowkey does not have any primary key attributes. Rowkey: oracle.jbo.Key[], table: model.ResTypeVOImpl@620289.>
This message is harmless and does not hinder any functionality.
Single-click to open a child node in the navigation tree is not supported, but double-click is supported.
The user credential for the OAM registration tool
oamreg.bat does not support non-ASCII characters on the Linux Non-UTF8 server locale and the Windows native server.
In some cases if a user has Turkish, German, or Greek special characters in the user name and the login name only differs in the special characters, he might pass authentication because of case mappings and case-insensitivity.
Some internationalization characters should have special capitalization rule so that characters do not convert back to the lower case.
For example, there is the case with SS and ß in German, where ß only exists as a lower case character. When performing "to Upper" against ß, ß will be changed to SS. And if the upper case text is then converted back to lower case, the SS becomes ss and not the original ß.
When the server locale is not UTF-8 and using WebLogic Server embedded LDAP as an identity store, the SSO Authentication page does not support Non-ASCII passwords.
When an administrator creates an agent with the same name as one that already exists, the language of the error message displayed is based on the server locale rather than on the browser locale.
Oracle Access Manager 11g Release 1 (11.1.1) cannot operate directly with LDAP servers returning referrals.
The workaround is to use Oracle Virtual Directory.
Diagnostic information is not displayed in the Oracle Access Manager Administration Console for monitoring Agents when one or more nodes of the cluster are down.
This information can be retrieved using the Oracle Dynamic Monitoring Service (DMS). The steps are as follows:
Using WebLogic credentials, log in to the DMS application
On the navigation tree, click OAMS.OAM_Server.OAM_Agents under the DMS Metrics node.
When you add a resource with a non-ASCII name to the protected authentication policy, it will require the 11g OHS Server to restart to make the protection take effect, whereas in adding resources with English characters, protection takes effect in real time without having to restarting the OHS Server.
If an on success or on failure URL configured for an authentication policy contains non-ASCII characters in the URL specified, then the URL specified will be garbled when it is used during a user authentication. This will happen only when the authentication scheme is Basic Authentication and the end user's browser is the Simplified Chinese version of IE8 running on the Chinese version of Windows.
The OSSO Agent cannot protect a resource because it does not encode the entire resource URL to UTF-8 format.
To work around this issue, use the WebGate Agent instead of the SSO Agent.
WebGate is able to convert the entire resource URL to UTF-8 format.
If you log in to the OAM Administration Console as an administrator and then log in to the Console as an administrator in a new tab, the following error appears in the administration logs:
------------------------------------------------------------ <May 20, 2010 10:12:47 AM PDT> <Error> <oracle.adfinternal.view.page.editor.utils.ReflectionUtility> <WCS-16178> <Error instantiating class - oracle.adfdtinternal.view.faces.portlet.PortletDefinitionDTFactory> ------------------------------------------------------------
The error message does not impact functionality.
The term Agents has been changed to WebGates.
The issue is that because of this late change, the translation packages are not updated and will continue to use the term, Agents, instead of the preferred term, WebGates.
The "
:" special character should not be used in response attribute names.
For example, "
This is not supported in 11g Release 1 (11.1.1).
If the Application Domain subtree on the navigation tree does not render or respond to user interface actions over a period of time, it may be the result of multiple refreshes.
To work around these issues, restart the administration server and log in to the OAM Administration Console again.
In the help topic, "Evaluate Single Sign-On Requirements," "Configuring Single Logout for 10g WebGate with OAM 11g Servers" was listed twice under "Review steps to configure single sign-off."
The English version has been corrected to read:
"Step 7 Review steps to configure single sign-off
Configuring Single Logout for 10g WebGate with OAM 11g Servers. More.
Configuring Single Logout for 11g WebGate with OAM 11g Servers. More.
Configuring Single Logout for Oracle ADF Applications. More
The translated version will be fixed in a future release.
The WLST command
editWebgateAgent does not give an error when a invalid value is entered for the state field in both online and offline mode. The OAM Administration Console does show the state field value as neither enabled nor disabled, though it is a mandatory field.
In the offline mode, the WLST command,
displayWebgate11gAgent, displays the 11g WebGate Agent entry in the System Configuration tab twice.
When starting Oracle Access Manager servers in a cluster, the following message is displayed:
<Jun 22, 2010 3:59:41 AM PDT> <Error> <oracle.jps.authorization.provider.pd> <JPS-10774> <arme can not find state.chk file.>
The correct level of the message is
INFO, rather than
The Help command is not available for the WLST command,
The online and offline command registers Oracle Identity Federation as a Delegated Authentication Protocol (DAP) Partner.
For information, refer to "registerOIFDAPPartner" in the Oracle Fusion Middleware WebLogic Scripting Tool Command Reference.
registerOIFDAPPartner(keystoreLocation="/scratch/keystore" logoutURL="http://<oifhost>:<oifport>/fed/user/sploosso?doneURL= http://<oamhost>:< oam port>/ngam/server/pages/logout.jsp", rolloverTime="526")
|Parameter Name
Location of the Keystore file. The file generated at the OIF Server. (mandatory)
The OIF Server's logout URL. <mandatory>
The Rollover Interval for the keys used to enc/decrypt SASSO Tokens (optional)
The following invocation illustrates use of all parameters. registerOIFDAPPartner(keystoreLocation="/scratch/keystore", logoutURL="http://<oifhost>:<oifport>/fed/user/sploosso?doneURL=http://<oamhost>: <oam port>/ngam/server/pages/logout.jsp", rolloverTime="526")
In a native integration with Oracle Adaptive Access Manager, the resource is protected by an Oracle Access Manager policy that uses the Basic Oracle Adaptive Access Manager authentication scheme.
When a user tries to access a resource, he is presented with the username page.
After he enters his username, he must click Continue before he can proceed to the password page. He is not taken to this page automatically.
The workaround is for the user to click Continue, which might allow him to proceed to the password page.
In OAM out of the box, login failures might occur during failover mode or when the user tries to submit credentials to a login page before the OAM Servers were restarted.
To work around the issue, set the cache type as Cookie by executing the following online WLST command:
Then, restart the OAM managed servers if they had been running before the execution of the WLST command.
After performing
rreg (through the console/
rreg scripts), the user must click the Refresh button twice on the Policy Configuration Console for any policy-related changes to be visible.
In the X509 authentication modules, the following OCSP-related fields are no longer mandatory:
OCSP Server Alias
OCSP Responder URL
OCSP Responder Timeout
If OCSP is enabled
The OCSP-related fields should be filled in by the administrator. If they are not filled, there will not be an error from the Console side.
It is the responsibility of the administrator to provide these values.
If OCSP is not enabled
The OCSP-related fields need not be filled in this case. If there are values for these fields, they will be of no consequence/significance, as OCSP itself is not enabled.
In the default out of the box configuration, the OCSP responder URL is
http://ocspresponderhost:port. If you make changes to other fields and leave this as is, you will see a validation error, since this value is still submitted to the back end and at the Console, the layer port should be a numeric field. You can either modify the field, with the port being a numeric field or delete the entire value.
The Databases node under the Data Sources node of the System Configuration tab is not functional. It does not create datasource entries that are consumed by the OAM Runtime.
The OAM Data Source needs to be managed using the WebLogic Server Administration Console. Oracle Access Manager 11g includes a data source named oamDS which is configured against the database instance extended with the OAM Schema. To navigate to oamDS in the WebLogic Server Administration Console, go to domain_name, select Services, select JDBC, and select DataSources in the navigation tree.
Online help is available in the console, but you should check OTN to ensure you have the latest information.
Providing the Agent Key Password during registration should be mandatory for both the OAM Console and the Remote Registration tool. Currently it is mandatory for one and not the other.
When registering the 11g WebGate in cert mode through the remote registration tool, the Agent Key Password must be provided. If it is not, the
password for cert mode cannot be null. Please enter the valid password message is shown.
The Agent Key Password is not mandatory when registering the 11g WebGate in cert mode through the OAM Administration Console. The
password.xml is generated regardless of whether the Agent Key Password is provided or not.
The OAM audit report AuthenticationFromIPByUser uses an Oracle Database 11.2.0 feature and will not work with older versions of database. The following error is displayed if an older version is used:
ORA-00923: FROM keyword not found where expected
For OAM 11g, creating custom resource types should not be attempted even though the button to create/edit/delete resource types is not disabled.
The domain consoles are the Oracle Identity Manager, Oracle Adaptive Access Manager and other Identity Management servers created during domain creation.
The Oracle Access Manager IDM Domain Agent provides Single-Sign On for the IDM domain consoles. It does not provide Single-Sign On protection for Fusion Middleware Control and the WebLogic Server Administration Console. Thus, policies configured for Fusion Middleware Control and the WebLogic Server Administration Console (provided for use in production deployments when using OAM WebGates) must be removed when using the IDM Domain Agent. Remove these policies as follows:
Access the OAM Administration Console
Navigate to Policy Configuration, select Application Domains, select IDMDomainAgent, select Authentication Policies, and select Protected Higher Level Policy.
Open the policy and the list of resources for the policy will display on the right panel.
Remove the following resources from the authentication policy:
Click Apply.
Navigate to Policy Configuration, select Application Domains, select IDMDomainAgent, select Authorization Policies, and select Protected Resource Policy.
Open the policy and the list of resources for the policy will display on the right panel.
Remove the following resources from the authorization policy:
Click Apply.
Removing the actual "urls" from the Resources list is not necessary nor advised should you need to restore the policies.
To add these policies back should you later want Single-Sign On to protect Fusion Middleware Control and WebLogic Server Administration Console when using a WebGate:
Navigate to Policy Configuration, select Application Domains, select IDMDomainAgent, select Authentication Policies, and select Protected Higher Level Policy.
Open the policy and the list of resources for the policy will display on the right panel.
Add the same resources (removed in Step 4 above) to the authentication policy.
Click Apply.
Navigate to Policy Configuration, select Application Domains, select IDMDomainAgent, select Authorization Policies, and select Protected Resource Policy.
Open the policy and the list of resources for the policy will display on the right panel.
Add the same resources (removed in Step 8 above) to the authorization policy.
Click Apply.
When using the OAM 11g server with WebGates and when the WebGate ID is registered with a non-ASCII name, the OAM server may reject that authentication redirect as an invalid request.
To work around this redirection issue, use an ASCII name for the WebGate.
Note:Resources are protected and error messages do not occur when the administration server and oracle access servers are started on UTF-8 locales.
The redirection issue only occurs on native server locales (Windows and Non-UTF8 Linux server locales)
In the user interface under the Authentication Module, only the primary identity store should be selected in the dropdown since only primary identity stores can be used for authentication/authorization. Currently, the OAM Console allows you to select identity stores that are not primary.
The following OAM operations are not supported through using the oam_server node under Identity and Access in Fusion Middleware Control:
Start up
Shut down
View Log Messages
However, these operations are supported per the Oracle Access Manager managed server instance through using the oam_server node (for the specific server) under Application Deployments in Fusion Middleware Control.
Due to a bug, when accessing a protected resource (protected by 11g WebGate) with query parameters containing encoded URL strings, an error is displayed in browser:
Action failed. Please try again
This section describes configuration issues and their workarounds. It includes the following topics:
Section 32.3.1, "For mod-osso Value for RedirectMethod Should be "POST""
Section 32.3.2, "User Wrongly Directed to the Self-User Login after Logging Out of the Oracle Identity Manager Administration Console"
Section 32.3.3, "11g WebGate Fails to Install with Compact Configuration."
Section 32.3.4, "Auditing Does Not Capture the Information Related to Authentication Failures if a Resource is Protected Using Basic Authentication Scheme"
Section 32.3.5, "WNA Authentication Does Not Function on Windows 2008"
Section 32.3.8, "What to Avoid or Note in OAM Configuration"
Section 32.3.9, "OAM_REMOTE_USER Set to Value of USERPRINCIPALNAME and Not Value of CN."
Section 32.3.10, "Install Guides Do Not Include Centralized Logout Configuration Steps"
Section 32.3.11, "Case Issue Between Host Identifier and Agent URL Prevents Recreation of WebGate Definition."
Section 32.3.12, "NULL Pointer Exception Shown in Administration Server Console During Upgrade."
Section 32.3.13, "Using Access SDK Version 10.1.4.3.0 with OAM 220.127.116.11.0 Servers."
For WebGate to support long URLs, the following code sample was added under
<Setting Name="AgentConfig" Type="htf:map"> <Setting Name="OSSO" Type="htf:map"> <Setting Name="RedirectMethod"Type="xsd:string">GET</Setting> <Setting Name="Delimiter" Type="xsd:string">AND</Setting> </Setting>
mod-osso, the value for
RedirectMethod should be
POST, however, the values shipped out of the box is
GET. Follow these steps to perform the modification, as this change needs to be performed manually and there is no user interface or WLST commands available to do so.
Stop the OAM Administration Server and managed servers.
Enter cd
Enter vi
Go to the following line in
<Setting Name="AgentConfig" Type="htf:map"> <Setting Name="OSSO" Type="htf:map"> <Setting Name="RedirectMethod"Type="xsd:string">GET</Setting>
GET to
POST as follows:
<Setting Name="RedirectMethod"Type="xsd:string">POST</Setting>
Save the changes and start the OAM Administration and managed servers.
The user is directed to the self-user login after logging out of the Oracle Identity Manager Administration Console.
To be redirected correctly, the logout must work properly.
The workaround for logout with 10g WebGate is to:
logout.html (for example, from
Oracle_IDM1/oam/server/oamsso/logout.html) to
Update logout URL in the file to
If redirection to specific page has to occur after logout, change the logout URL to
A compact configuration is an installation with all identity management components on a machine with limited hardware capacity.
On trying to install the 11g WebGate with compact configuration, the following error occurs during the configure step:
Configuring WebGate... There is an error. Please try again. Preparing to connect to Access Server. Please wait. Client authentication failed, please verify your WebGate ID. cp: cannot stat `$ORACLE_HOME/ohs/conf/aaa_key.pem': No such file or directory cp: cannot stat `$ORACLE_HOME/ohs/conf/aaa_cert.pem': No such file or directory cp: cannot stat `$ORACLE_HOME/ohs/conf/aaa_chain.pem':
The error occurs because the following entries were not initialized in
oam-config.xml during the installation:
<Setting Name="oamproxy" Type="htf:map"> <Setting Name="sslGlobalPassphrase" Type="xsd:string">changeit</Setting> <Setting Name="SharedSecret" Type="xsd:string">1234567812345678</Setting> </Setting>
To initialize
oam-config.xml properly:
Delete the
OAM entry from CSF repository by performing the following steps:
Start the WebLogic Scripting Tool:
In the WLST shell, enter the command to connect to the domain and then enter the requested information.
A sample is given below.
wls:/offline> connect () Please enter your username [weblogic] : Please enter your password [welcome1] : Please enter your server URL [t3://localhost:7001] : Connecting to t3://localhost:7001 with userid weblogic ... Successfully connected to Admin Server 'AdminServer' that belongs to domain 'imdomain86'.
Change to
A sample is given below.
wls:/imdomain86/serverConfig> domainRuntime () Location changed to domainRuntime tree. This is a read-only tree with DomainMBean as the root.
Check whether an entry exists in the CSF repository with the map name as
OAM and key as
A sample is given below.
wls:/imdomain86/domainRuntime> listCred(map="OAM_STORE",key="jks") {map=OAM_STORE, key=jks} Already in Domain Runtime Tree . [Name : jks, Description : null, expiry Date : null] PASSWORD:1qaldrk3eoulhlcmfcqasufgj2 .
Delete the
OAM map entry from the CSF repository.
wls:/imdomain86/domainRuntime> deleteCred(map="OAM_STORE",key="jks") {map=OAM_STORE, key=jks} Already in Domain Runtime Tree .
Exit from wlst shell.
A sample is given below.
wls:/imdomain86/domainRuntime> exit () . . .
Go to DOMAIN_HOME/config/fmwconfig and delete the file
A sample [on linux] is given below.
[aime@pdrac09-5 fmwconfig]$ rm .oamkeystore .
Stop the Managed Server and Admin Server.
Start the Admin Server.
Start Managed Server.
Steps to verify
Go to DOMAIN_HOME/config/fmwconfig/oam-config.xml.
Verify that all the WebLogic Server server instances are configured under DeployedComponent > Server > NGAMServer > Instance
Verify that the OAM Managed Server protocol, host and port are available at:
DeployedComponent > Server > NGAMServer > Profile > OAMServerProfile > OAMSERVER
Verify that the SSO CipherKey is generated and available at:
DeployedComponent > Server > NGAMServer > Profile > ssoengine > CipherKey
Verify that the
oamproxy entries for
SharedSecret and
sslGlobalPassphrase is generated and available at:
DeployedComponent > Server > NGAMServer > Profile > oamproxy
SharedSecret should have a value different from
1234567812345678 and
sslGlobalPassphrase different from
Although a resource can be protected using the BASIC scheme, the WebLogic server has a feature by which it first authenticates the user and then sends it to the server.
If you add the following flag under
<security-configuration> in
config.xml and restart the server, you will be able to bypass WebLogic server's authentication
<enforce-valid-basic-auth-credentials>false</enforce-valid-basic-auth-credentials>. Once the credentials are submitted back to the OAM server, it will be audited.
The WebLogic Server Administration Console does not display or log the
enforce-valid-basic-auth-credentials setting. However, you can use WLST to check the value in a running server. You must modify this value by setting this in
To do so, refer to the following documentation:
"Developing Secure Web Applications" at:
The default Kerberos encryption supported by Windows 2008 Server and Windows 2007 machines are "AES256-CTS-HMAC-SHA1-96", "AES128-CTS-HMAC-SHA1-96" and "RC4-HMAC".
If the clients are configured to use DES only encryption, users will not be able to access protected resources with Kerberos authentication. The error message,
An incorrect username and password was specified might be displayed.
Because the initial Kerberos tokens are not present, the browser sends NTLM tokens, which the OAM 11g server does not recognize; therefore, the user authentication fails.
The workaround is to enable the encryption mechanisms, and follow the procedure mentioned in:
When you install the Oracle Access Manager 10g WebGate, do not replace the current version of
msvcirt.dll with a newer version when prompted. If you do so, there may be incompatibility issues. Later, when you try to install OSSO 10g (10.1.4.3), the
opmn.exe command might fail to start and the
OracleCSService might time out because the required
.dll file is missing.
The supported topology for OAM 11g is shown below.
WebGate10g or WebGate 11g and protected applications on IPv4 (Internet Protocol Version 4) protocol host
OHS (Oracle HTTP Server) reverse proxy on dual-stack host
Client on IPv6 (Internet Protocol Version 6) protocol host
Dual-stack is the presence of two Internet Protocol software implementations in an operating system, one for IPv4 and another for IPv6.
The IPv6 client can access WebGate (10g or 11g) through the reverse proxy on IPv4/IPv6 dual-stack.
This section contains scenarios and items to note in OAM Configuration
WLST scripts for OAM 10g and OAM 11g WebGates do not support changing Agent security modes.
Unsupported operations for the OAM Administration Console and WLST are described in the following subsections.
OAM Server
Use Case: Concurrent Deletion and Updating
Open an OAM Server instance in edit mode in Browser 1.
Using the OAM Administration Console in another browser (Browser 2) or using a WLST script, delete this server instance.
Return to Browser 1 where the server instance is opened in edit mode.
In Browser 1, click the Apply button.
Current Behavior
The OAM Administration Console displays the message, "Server instance server_name might be in use, are you sure you want to edit it?" along with the confirmation that the update succeeded.
This server instance node is removed from navigation tree.
The behavior is incorrect.
Use Case: Two OAM Server Instances with Same Host Cannot have the Same Proxy Port.
For this use case, there are two instances of the OAM Server: oam_server1 and oam_server2.
Open oam_server1 in edit mode and specify a host and OAM proxy port.
Now open oam_server2 in edit mode and specify the same host and proxy port as oam_server1.
The changes are saved without any error message.
Current Behavior
The OAM Administration Console does not display any error and allows the update.
The behavior is incorrect.
Use Case: Log Statements Detailing the Server Instance Creation, Update and Delete are not Present on the OAM Administration Console
If you create, edit, or delete an OAM Server instance from the OAM Administration Console, the log statements corresponding to create, edit and delete are not displayed by the Console.
LDAP Authentication Module:
Use Case: Concurrent Deletion/Creation of User Identity Store does not Reflect in the Dropdown of Identity Stores in the LDAP Authentication Module Create and Edit
Open create/ edit for the LDAP authentication module.
A dropdown list displays the identity stores present in the system.
Now create a user identity store using another tab.
Return to the create/edit tab for the LDAP authentication module and check the dropdown list for user identity stores.
Current Behavior
The newly added user identity store entry is not added to the dropdown list.
The entry of the user identity store that was deleted appears on the list.
An error message is not displayed when you select the deleted user identity store in the dropdown list and click Apply.
The OAM Administration Console does not change and the configuration is not updated in back end.
LDAP, Kerberos and X509 Authentication Module
Use Case: Concurrent deletion and updating
Open an LDAP/Kerberos/X509 authentication module in edit mode in OAM Administration Console in Browser 1.
Using OAM Administration Console in another browser (Browser 2) or using a WLST script, delete this authentication module.
Now return to Browser 1 where the authentication module is opened in edit mode.
Click the Apply button.
Current Behavior
The OAM Administration Console updates this authentication module configuration and writes it to back end.
The behavior is incorrect.
Use Case: Log Statements Detailing the Server Instance Creation, Update and Delete are Not present on OAM Administration Console side.
When you create, edit or delete an authentication module from OAM Administration Console, the log statements corresponding to create, edit and delete are not written by the Console.
OAM 11G WebGate
Use Case: Concurrent Deletion and Update
Open an OAM 11g WebGate instance in edit mode in OAM Administration Console in Browser 1.
Using the OAM Administration Console in another browser (Browser 2) or using a WLST script, delete this OAM 11g WebGate.
Now return to the Browser1 where the server instance is opened in edit mode.
Click on the Apply button.
Current Behavior
The OAM Administration Console for edit OAM11g WebGate does not change and the tab does not close.
A OAM11g WebGate configuration not found error dialog is displayed by the OAM Administration Console.
However, the navigation tree is blank and attempts to perform any operation results in a javax.faces.model.NoRowAvailableException".
The behavior is incorrect.
OSSO Agent
Use Case: Concurrent Deletion and Update
Open an OSSO Agent instance in edit mode in the OAM Administration Console in Browser 1.
Using the OAM Administration Console in another browser (Browser 2) or using a WLST script, delete this OSSO Agent.
Now return to the Browser 1 where the OSSO Agent instance is opened in edit mode.
Click on Apply button.
Current Behavior
Editing the OSSO Agent in the OAM Administration Console results in a null pointer exception.
The behavior is incorrect.
When using OAM 11g Native Windows Authentication support, the logged in
userid that applications display may appear in a domain qualified format rather than a simple user name format. For example:
If your deployment makes use of both Windows Native Authentication and OAM form authentication, access to applications running on a WebLogic Server container authentication after a form based Single-Sign On may fail and thus not allow access. To correct this problem:
Configure a second Active Directory Authenticator for your WebLogic Server domain.
The configuration of the second Active Directory Authenticator will be identical to the first Active Directory Authenticator except the values of the
UserFromNameFilter and
UserNameAttribute configuration fields should be changed as follows:
UserFromNameFilter: (&(CN = %n)(objectclass=user) UserNameAttribute: CN
Order the second Active Directory Authenticator below the first authenticator and make sure that the
JAAS flag for both is set to
Single-Sign On is enabled after Oracle Access Manager is installed; to complete configuration of Single-Sign On out of the box, centralized log out must be configured post-install. Configure centralized log out by following direction from these sections:
Configuring Centralized Logout for ADF-Coded Applications with OAM 11g
In order for the ADF logout to work correctly, Single Sign-On Server Patch 9824531 is required. Install this patch, as described in the
readme file that is included in the patch.
When you try to recreate the WebGate definition and try to associate it with the same host identifier as before (with auto create policies unchecked), the creation is not successful because the Host Identifier fields are case sensitive whereas the WebGate base URL is case insensitive. The mismatch in case due to case sensitivity issue prevents the creation. Regardless of whether the definition was created or not, the OAM Administration Console will display a message that the operation was successful.
A NULL pointer exception occurs because of the configuration events trigger when the identity store shuts down. The upgrade is successful, however, and error messages are seen in administration server console. There is no loss of service.
If the NULL pointer is seen during upgrade, there is no loss of service, you can ignore the error.
If the NULL pointer is seen during WLST command execution, you must restart the administration server.
In general, the Sun Microsystems JDK 1.4.x compiler is the JDK version used with the Java interfaces of Access SDK Version 10.1.4.3.0.
As an exception, the Java interfaces of the 64-bit Access SDK Version 10.1.4.3.0, specifically for the Linux operating system platform, requires the use of Sun Microsystems JDK 1.5.x compiler.
The new Session Management Engine capability within OAM 188.8.131.52.0 will create a session for every Access SDK version 10.1.4.3.0 call for authentication.
This may cause issues for customers that use Access SDK to programmatically authenticate an automated process. The issue is the number of sessions in the system that is generated within Access SDK will increase dramatically and cause high memory consumption.
This section describes documentation errata.
Section 32.4.1, "Correction for proxySSLHeaderVar Section of Administration Guide."
Section 32.4.2, "Steps for Configuring Logout for WebLogic Administration Console and Fusion Middleware Control (using an OAM 10g WebGate against an OAM 11g Server)."
Updated OAMCfgTool Requirements for Oracle Access Manager 10g (10.1.4.3)
Missing Requirement: Converting Oracle Access Manager Certificates to Java Keystore Format While Configuring SSO Solutions for Fusion Middleware
Missing: Oracle Access Manager 10g Authorization Rule Required for Authenticator When Configuring SSO Solution
Missing: Configure mod_osso when Integrating with Oracle Identity Federation
The following corrected Header Variable, Default, Syntax will appear in Table 6-6, "Elements Common to Full Remote Registration Requests" of the "User Defined Parameters" section in the next release of the Oracle Fusion Middleware Administrator's Guide for Oracle Access Manager:
.... The value of the header variable must be "ssl" or "nonssl". If the header variable is not set, the SSL state is decided by the SSL state of the current Web server.
Default: IS_SSL
The WebLogic Administration Console and Fusion Middleware Control process logout in a way that requires the following workaround to ensure that when logout is selected that an SSO logout completes successfully.
Note:This workaround will not clear the application session associated with the WebLogic Administration Console or Fusion Middleware Control. Despite the session not being cleared, any access attempt after logout will result in the user needing to reauthenticate. The application session will automatically time out after some time depending on the application's session configuration.
Configure Rewrite URLs in the Web Server configured with 10g WebGate as below:
Note:This step for configuring Rewrite URLs should be performed only if this Web server is to be configured with OAM WebGate. For example, if you later intend to configure OSSO Agent on this Web server, then you should remove these
Edit the file under ohsinstance/config/OHS/ohs-inst-id/modules/admin.conf (or any other relevant file).
RewriteRule ^/console/jsp/common/logout.jsp /oamsso/logout.html RewriteRule ^/em/targetauth/emaslogout.jsp /oamsso/logout.html
Configure Logout URLs parameter for the 10g WebGate as below:
Go to the OAM Administration Console.
Click the System Configuration tab.
Click on the 10g WebGate profile (listed under Agents > 10g WebGates).
Locate the List box titled Logout URL in the details page for the selected WebGate profile.
Append (keep any existing values as it is) the following values to this list.
Note that you have to enter each value in a new line:
/console/jsp/common/logout.jsp /em/targetauth/emaslogout.jsp
Click the Apply button in the top right.
Restart the Web Server hosting this WebGate.
This step is not mandatory. If not restarted, the WebGate configuration will take a few minutes to refresh.
The WebLogic Administration Console and Fusion Middleware Control should always be accessed over a Web Server configured with an OAM WebGate.
When you want to log out, click the logout link displayed by the Console or the Fusion Middleware Control applications.
OAMCfgTool can be used only if you are deploying the Oracle Access Manager 10g Identity Asserter for single sign-on, as described in the Oracle Fusion Middleware Security Guide.
OAMCfgTool launches a series of scripts to request information and set up the required profiles and policies in Oracle Access Manager 10g. In Validate mode, OAMCfgTool requires the ldap_base parameter be specified for all directory servers, including Oracle Internet Directory. This parameter species the base from which all LDAP searches are performed.
Although the ldap_base parameter parameter is required for Validate mode, the Oracle Fusion Middleware Security Guide lists this as an optional parameter in Table 16–6 OAMCfgTool VALIDATE Mode Parameters and Values.
The topic "Converting Oracle Access Manager Certificates to Java Keystore Format" is missing and required to deploy the Oracle Access Manager 10g and 11g single sign-on solutions described in:
Oracle Fusion Middleware Security Guide E10043-05
Oracle Fusion Middleware Application Security Guide E10043-07
Following are the missing details, which will appear in the next release of the manual, immediately after:
Oracle Access Manager 10g Solution: Converting Oracle Access Manager certificates to Java Keystore format immediately follows "Installing Components and Files for Authentication Providers and OAM 10g" in the chapter "Configuring Single Sign-On Using Oracle Access Manager 10g".
Oracle Access Manager 11g Solution: Converting Oracle Access Manager certificates to Java Keystore format immediately follows "Installing the Authentication Provider with Oracle Access Manager 11g" in the chapter "Configuring Single Sign-On with Oracle Access Manager 11g".
Oracle recommends that all Java components and applications use JKS as the keystore format. This topic provides steps to convert Oracle Access Manager X.509 certificates to Java Keystore (JKS) format. These steps, when followed properly, generate the JKS stores that can be used while the Java NAP client wants to communicate with an Oracle Access Manager Access Server in Simple or Cert (certificate) mode.
When communicating in Simple or Cert mode, the Access Server uses a key, server certificate, and CA chain files:
aaa_key.pem: the random key information generated by the certificate-generating utilities while it sends a request to a Root CA. This is your private key. The certificate request for WebGate generates the certificate-request file aaa_req.pem. You must send this WebGate certificate request to a root CA that is trusted by the Access Server. The root CA returns the WebGate certificates, which can then be installed either during or after WebGate installation.
aaa_cert.pem: the actual certificate for the Access Server, signed by the Root CA.
aaa_chain.pem: the public certificate of the Root CA. This is used when peers communicating in Simple or Cert mode perform an SSL handshake and exchange their certificates for validity. In Simple Mode, the aaa_chain.pem is the OpenSSL certificate located inAccessServer_install_dir/access/oblix/tools/openssl/simpleCA/cacert.pem
Here, aaa is the name you specify for the file (applicable only to Cert and chain files).
You can edit an existing certificate with a text editing utility to remove all data except that which is contained within the
CERTIFICATE blocks. You then convert the edited certificate to JKS format, and import it into the keystore. Java KeyTool does not allow you to import an existing Private Key for which you already have a certificate. You must convert the PEM format files to DER format files using the OpenSSL utility.
To convert an Oracle Access Manager certificate to JKS format and import it
Install and configure Java 1.6 or the latest version.
Copy the following files before editing to retain the originals:
cacert.pem, only if configuring for Simple mode
Edit aaa_chain.pem using TextPad to remove all data except that which is contained within the
CERTIFICATE blocks, and save the file in a new location to retain the original.
Run the following command for the edited aaa_chain.pem:
JDK_HOME\bin\keytool" -import -alias root_ca -file aaa_chain.pem -keystore rootcerts
Here you are assigning an alias (short name)
root_ca to the key. The input file aaa_chain.pem is the one that you manually edited in step 3. The keystore name is
You must give a password to access the keys stored in the newly created keystore.
Note:To ensure security, Oracle recommends that you allow the keytool to prompt you to enter the password. This prompt occurs automatically when the "-storepass" flag is omitted from the command line.
Enter the keystore password, when asked. For example:
Enter keystore password: <keystore_password> Re-enter new keystore password: <keystore_password>
Enter Yes when asked if you trust this tool:
Trust this certificate? [no]: yes
Confirm that the certificate has been imported to the JKS format by executing the following command and then the password.
JDK_HOME\bin\keytool" -list -v -keystore "rootcerts" Enter keystore password: <keystore_password>
Look for a response like the following:
Keystore type: JKS Keystore provider: SUN Your keystore contains n entries Alias name: root_ca Creation date: April 19, 2009 Entry type: trustedCertEntry Owner: CN=NetPoint Simple Security CA - Not for General Use, OU=NetPoint, O="Oblix, Inc.", L=Cupertino, ST= California , C=US Issuer: CN=NetPoint Simple Security CA - Not for General Use, OU=NetPoint, O="Oblix, Inc.", L=Cupertino, ST= California ,C=US Serial number: x Valid from: Tue Jul 25 23:33:57 GMT+05:30 2000 until: Sun Jul 25 23:33:57 GMT+05:30 2010 Certificate fingerprints MD5: CE:45:3A:66:53:0F:FD:D6:93:AD:A7:01:F3:C6:3E:BC SHA1: D6:86:9E:83:CF:E7:24:C6:6C:E1:1A:20:28:63:FE:FE:43:7F:68:95 Signature algorithm name: MD5withRSA Version: 1 *******************************************
Repeat steps 3 through 7 for the other PEM files (except aaa_chain.pem unless there is a chain).
Convert the aaa_key.pem file to DER format using the OpenSSL utility in the Access Server installation directory path. For example:
AccessServer_install_dir\access\oblix\tools\openssl>openssl pkcs8 -topk8
-nocrypt -in aaa_key.pem -inform PEM -out aaa_key.der –outform DER
Here the input file is aaa_key.pem and the output file is aaa_key.der. Additional options include:
Table 32-1 Options to Create DER Format Files from PEM
Reads a traditional format private key and writes a PKCS#8 format key. This reverses the default situation where a PKCS#8 private key is expected on input and a traditional format private key is written.
An unencrypted PrivateKeyInfo structure is expected for output.
Specifies the input format. If a PKCS#8 format key is expected on input, then either a DER or PEM encoded version of a PKCS#8 key is expected. Otherwise the DER or PEM format of the traditional format private key is used.
Specifies the output format. If a PKCS#8 format key is expected on output, then either a DER or PEM encoded version of a PKCS#8 key is expected. Otherwise the DER or PEM format of the traditional format private key is used.
Simple or Cert Mode: In the PEM file (in this case, aaa_cert.pem), enter the pass phrase for the Oracle Access Manager Access Server if it is configured for Simple or Cert mode.
Passphrase for the certificate
Run the following command to convert the aaa_cert.pem file to DER format.
AccessServer_install_dir\access\oblix\tools\openssl>openssl x509 -in
aaa_cert.pem -inform PEM -out aaa_cert.der -outform DER
Import the DER format files into a Java keystore using the ImportKey utility. For example:
Java_install_dir\doc>java -Dkeystore=jkscerts ImportKey aaa_key.der
Review the results in the window, which should look something like the following example:
Using keystore-file : jkscerts
One certificate, no chain
Key and certificate stored
Alias:importkey Password:your_password
Proceed as described in the book
The step to configure a default authorization rule for the Authenticator is missing and required to deploy the Oracle Access Manager 10g Authenticator function as described in:
Oracle Fusion Middleware Security Guide E10043-01 and E10043-05
Oracle Fusion Middleware Application Security Guide E10043-07
The following new Step 7 will appear in the next release of the manual in the procedure "To create a policy domain for the Oracle Access Manager Authenticator". See also the Oracle Access Manager Access Administration Guide, topic "Configuring Authorization Rules".
To create a policy domain for the Oracle Access Manager Authenticator
Authorization Rule: Click the Authorization Rules tab, click Add and:
Specify a rule name and, optionally, a brief description. For example:
Default rule for Authenticator.
Default rule enables Authenticator function for anyone.
Select Yes from the Enabled list and then click Save.
Click the rule, click the Allow Access tab, and then click Add.
Under Role, select Anyone to allow anyone access to the protected resources.
Click Save.
A missing step must be added to the procedure for integrating Oracle Access Manager 11g with Oracle Identity Federation, as described in the Oracle Fusion Middleware Integration Guide for Oracle Access Manager, part number E15740-02.
In Section 4.2, "Register Oracle HTTP Server with Oracle Access Manager", prior to executing Step 4 to copy the osso.conf file, you must configure mod_osso with static directives. The instructions for configuring mod_osso appear in Section 10.3.2.3.1, "Configuring mod_osso with Static Directives" of the Oracle Fusion Middleware Security Guide, part number E10043-04, at:


text:
Some of Dale Earnhardt Jr.'s earliest NASCAR memories came at Charlotte Motor Speedway in Concord, N.C. and he hopes to add another big one by winning the Coca-Cola 600 tonight.
Earnhardt grew up watching his late father, Dale Earnhardt, race here more than 30 years ago and has long wanted to win NASCAR's longest race as he dad accomplished three times, the last in 1993.
Dale Jr. has come close, most notably in 2011 when he broke free from a late restart to take the lead. He got the white flag just fine, then ran out of gas on the front straightaway and coasted through the final turn before Kevin Harvick passed him for the win. Earnhardt finished seventh, his sixth top-10 finish in the Memorial Day weekend race.
•Sprint Cup points leader Jeff Gordon cut short his practice because of back spasms and the No. 24 team has Regan Smith on standby should the four-time champion not be able to run the Coca-Cola 600.
Gordon went just 11 laps Saturday before he told his crew he couldn't continue.
NASCAR Nationwide
Kyle Larson raced to his second Nationwide Series victory of the season Saturday, holding off Brad Keselowski and Kyle Busch in the History 300 at Charlotte Motor Speedway.
The 21-year-old Larson passed Keselowski on the 118th lap in the 200-lap race and led the rest of the way. Larson also won at Fontana.
Keselowski was second, followed by Busch, Kevin Harvick and Brian Scott.
Busch won the previous three Nationwide Series races at Charlotte and has eight victories at the track, but wasn't much of a factor after leading the first 23 laps.
Larson won on car owner Chip Ganassi's 56th birthday, and one week after Jamie McMurray won the Sprint Cup All-Star race.
Formula One
Nico Rosberg took the pole position for today's Monaco Grand Prix ahead of his Mercedes teammate Lewis Hamilton and Red Bull's Daniel Ricciardo.
Hamilton has won the past four races and leads the overall standings by three points over Rosberg, who won the season opener in Australia, where Hamilton retired with engine failure.
The Mercedes pair went out for one final lap with less than a minute remaining. Rosberg lost control coming out of the Mirabeau turn and slid down an escape road. A yellow flag came up, meaning that Hamilton could not improve on his time and Rosberg clinched his second pole of the season. Hamilton has the other four.
Four-time defending champion Sebastian Vettel of Germany finished fourth.


text:
Jenni Rivera: Teen Mom, Abused Wife & Lonely Star on the Rise
Jenny Dolores Rivera Saavedra, or Jenni Rivera, was known as "La Diva de la Banda" for her work in banda and norteño music.
Rivera, killed early Sunday in a plane crash in Mexico, was at the peak of her career as perhaps the most successful female singer in grupero, a male-dominated regional style influenced by the norteño, cumbia and ranchero styles.
A 43-year-old mother of five children and grandmother of two, her music resonated with Latinos because she sang about her own difficult experiences – her battle with domestic violence, her struggle with weight, being a single mother and her failed marriages.
The singer was born on July 2, 1969, in Los Angeles, Calif. to Pedro and Rosa Rivera, Mexicans immigrants who decided to pursue their American Dream by moving to the U.S.
The Riveras eventually settled in Long Beach, Calif. Little did Don Pedro Rivera, a musician, know that all of his children would make a living in the music business, particularly his daughter Jenni, who rose to become one of the leading female singers in her musical genre.
Initially, Jenni Rivera had no interest in following her father's and brothers footsteps in the music industry. She had her first child while still in high school and married the father, José Trinidad Marin, and had two more children with him.
In an interview with Telemundo, Rivera spoke about how Marin physically abused her because while she wanted to attend college, he wanted her to quit school and be at home "cooking and cleaning." She said she grew up with four brothers so she knew how to fight back.
The rocky relationship, however, went from bad to worse when Rivera found out that Marin had sexually abused her younger sister and one of her daughters. For years, Marin ran from authorities, but was later caught in April of 2006 and was convicted on various sexual assault and rape counts.
Soon after, Rivera was on welfare, struggling to support her three children, Janney "Chiquis" Marin Rivera, Jacqueline Marin Rivera, and Michael Marin Rivera. She dabbled in real estate then took a second job in her father's record label, Cintas Acuario, which led to discovering her voice and path in the world of Regional/Banda/Norteño music.
In 1995, Rivera decided to change career paths and signed with Capitol/EMI's Latin division. That same year she released her breakthrough album "Chacalosa," which sold over a million copies. Rivera later switched to the Latin division at Sony records. In 1999, Rivera signed with Fonovosa's the leading regional music record label.
In the meantime, she married a second time, to Juan López, whom she was with for eight years, (from 1997-2003). She ended up leaving López, who died in 2009, after she caught him cheating on her. The couple had two children, Jenicka López Rivera and Johnny López Rivera.
Rivera put all of her emotions after the divorce into her 2007 album "Mi Vida Loca," which has unique Banda renditions of classics like Gloria Gaynor's "I Will Survive" and earned her both a gold and platinum. Other memorable songs from the record include "Dejame Vivir,""Inolvidable" and "Dama Divina."
Rivera's 2008 album "Jenni" rose to the charts becoming the No. 1 record in the Billboard charts, selling out major arenas such as the Staples Center and Nokia theaters in L.A.
Rivera sold 15 million records, and recently won two Billboard Mexican Music Awards: Female Artist of the Year and Banda Album of the Year for "Joyas prestadas: Banda." She was nominated for Latin Grammys in 2002, 2008 and 2011.
In 2008, Mun 2, a division of Telelmundo, launched Rivera's reality show "I Love Jenni" which was an instant success and showed the singer in her day-to-day life with her five children.
The spinoff reality show for her daughter Chiquis, called "Jenni Rivera Presents Chiquis & Raq-C" was also a major hit on Mun2, followed by the third spinoff "Chiquis N' Control," about Chiquis getting her own place.
ABC network was reportedly in talks with Rivera to begin a sitcom about her life titled "Jenni."
In 2010 Rivera joined the National Coalition Against Domestic Violence organization and was named their spokeswoman. The Los Angeles City Council named Aug. 6 "Jenni Rivera Day" for her philanthropic work.
That same year she married baseball player Esteban Loaiza. She filed for divorce this year after she reportedly caught him stealing large amounts of money from her.
It wasn't just in marriage that she had bad luck.
Rivera was detained at a Mexico City airport in 2010 after she was caught carrying tens of thousands of dollars in cash. She publicly apologized after her brother assaulted a drunken fan whom verbally attacked her in 2011.
"I am the same as the public," she told The Associated Press in an interview last March. "As my fans."
Contains material from the Associated Press.
Follow us on twitter.com/foxnewslatino
Like us at facebook.com/foxnewslatino


text:
Alex Chapman had an inkling that something had changed toward the end of his marriage to the sultry young woman who was to become the glamorous public face of the Russian spy ring busted in several US cities.
"She became very secretive, going for meetings of her own with 'Russian friends,' and I guess it might have been because she was in contact with the Russian government," the trainee British psychiatrist recalled in an interview with the Daily Telegraph as the "London years" of Anna Chapman (formerly Anya Kushchenko) came under the spotlight.
The spy-ring affair that has transfixed both Americans and Britons should conclude with the quickly arranged prisoner swap July 9. The 10 people who were arrested and charged with spying in the United States landed at Domodedovo airport in Moscow today, even as four prisoners held for spying in Russia arrived in London.
But as her ex-husband's account would have it, Ms. Chapman's time in Britain from 2002 to 2007 was when she evolved from a naive but ambitious young student to a sophisticated jet-setter with a taste for intrigue and the high life.
Moscow on the Thames
Close watchers of British-Russian affairs were not surprised that London – dubbed variously as "Moscow on the Thames" or "Londongrad" because of its emergence as a magnet for Russians – quickly made an appearance in last month's cold-war-style narrative. Suspicion has been a feature of relations since the 2006 death of Alexander Litvinenko, a former Russian agent living in London who was poisoned with a rare radioactive isotope.
"You could argue that the spy ring in the US was a mere sideshow to the activities of the Russian security services in London," says Jonathan Eyal, director of International Security Studies at the Royal United Services Institute.
Indeed, recent reports in Britain quoted unnamed intelligence experts suggesting that Russia spies here with the same intensity as during the Soviet-era KGB.
The most obvious explanation is London's preeminent position as a base for rich oligarchs opposed to the power of Russia's prime minister and former president, Vladimir Putin, and Russia's secret service, now dubbed the FSB.
"If you look at the real opposition to the Kremlin," says Dr. Eyal, "it is not inside Russia, where the opposition is completely impotent, but in London. It is here that you have the people who have the money to actually put together any movement in the future."
Home to Putin enemies
Putin's foremost enemy in London is Boris Berezovsky, who fled to Britain in 2001 after falling out with the Kremlin, which has repeatedly failed to have him extradited. Mr. Berezovsky has survived at least one assassination attempt in London, from where he announced in 2007 that he was plotting a new Russian revolution. Now the holder of a British passport, his allies in London include a former Chechen warlord, Ahmed Zakayev. (At one stage Berezovsky employed Mr. Litvinenko, who came here in 2000 after turning whistle-blower on the FSB, claiming he had been ordered to assassinate the oligarch.)
"The history of relations between Britain and the USSR were full of intelligence problems and spats," says Alex Pravda, at the Chatham House think tank. "Recently though ... Britain has become seen in Moscow as a center for potential Russian opposition, and the presence of Berezovsky and Zakayev in London are seen as evidence that Britain is willing to give them safe haven."
Aside from dissidents, the Russian community is present at almost every level of London society. Tens of thousands of Russians have made Britain their home since the first waves of bankers, students, refugees, and others began arriving in the early 1990s. In some years, the British authorities issued more than 100,000 visas.
The sound of Russian is commonplace on the upmarket shopping thoroughfare of King's Road in Chelsea. At least four Russian-language newspapers have sprouted, along with grocery stores with Russian foods, Russian-language schools, and Russian legal firms.
Olga Yartseva, a student at University College London who moved here at age 11 when her father came here to work, tells of a trend: wealthy Moscow parents sending their children here for school. The children then return to Russia to work in the family business.
Admitting to a happy ambivalence about her own identity – "I spend half of my life in Moscow and the other half in London" – she admires how Russian oligarchs have connected with their adopted homeland. "What I like ... is the way that they contribute to British society, through charity but also by investing. They don't isolate themselves. They integrate."
The best-known oligarch is Chelsea Football Club owner Roman Abramovich, a self-made billionaire listed by Forbes as the 50th richest man in the world. He is joined by Oleg Deripaska, a banking and aluminum tycoon (the world's 57th richest man), and Alexander Lebedev, a former KGB spy in London in the 1980s. He owns London's Evening Standard newspaper and The Independent.
Economic interests growing
In some ways, a two-way flow of money between Britain and Russia is shifting relations to a post-Soviet level based more on economic interests. British firms accounted for $20.5 billion of the $265.8 billion Russia has attracted from abroad since the 1991 fall of the Soviet Union.
But among those released by Russia in return for the 10 agents arrested in the United States was Igor Sutyagin, a scientist convicted six years ago of passing atomic secrets to US intelligence. After being flown to London, via Vienna, he is expected to start a new life in Britain.
With yet another Kremlin enemy living in London, Russia's secret oversight is unlikely to fade anytime soon.


text:
New Jersey on Monday became the second state after California to ban so-called conversion therapy aimed at changing the sexual orientation of gay minors after Gov. Chris Christie signed into law a bill to prohibit the controversial practice.
Christie, a Republican, had been expected to sign the legislation, which passed both houses of the state legislature in June.
In a signing letter released after Christie took action, he said that he took into account concerns about the government "limiting parental choice" in the treatment of their children.
"However, I also believe that on issues of medical treatment for children we must look to experts in the field to determine the relative risks and rewards" the governor added. "The American Psychological Assn. has found that efforts to change sexual orientation can pose critical health risks including, but not limited to, depression, substance abuse, social withdrawal, decreased self-esteem and suicidal thoughts.
"I believe that exposing children to these health risks without clear evidence of benefits that outweigh these serious risks is not appropriate. Based upon this analysis, I sign this bill into law."
Christie, a Roman Catholic who is considered a likely 2016 presidential contender, opposes same-sex marriage, and his state is one of two in the northeast that does not recognize gay marriages. In releasing his signing statement, however, Christie's office included a comment he made to CNN in which he said that despite his church's stance, Christie has "always believed that people are born with the predisposition to be homosexual."
The anti-conversion therapy bill, A-3371, declares that being "lesbian, gay or bisexual is not a disease, disorder, illness, deficiency or shortcoming," and it bans licensed therapists from providing gay-to-straight conversion therapy to children under age 18.
"There is no greater achievement than helping to stop the abuse of our youth," Troy Stevenson of the gay advocacy group Garden State Equality said in a statement immediately after the signing. "It will protect young people from being abused by those they should trust the most, their parents and their doctors."
John Tomicki of the conservative League of American Families has called the bill unconstitutional and vowed in June, after its passage, that opponents would sue to prevent it from taking effect.
A lawsuit prevented California's ban on conversion therapy for minors from taking effect as scheduled at the start of this year, and the legislation remains on hold. A three-judge panel of the U.S. 9th Circuit Court of Appeals agreed last December to block the law pending a decision on its constitutionality. Opponents have argued that it violates free speech rights.


text:
|Port Carbon, Pa.
|High School:
|Long Jump, Sprints
2013: Embarks on his final season with the Green and White . . . will look to continue to build off of last seasons success . . . strong competitor.
2012: INDOOR: At the Terrapin Invitational placed 12th in the long jump with a distance of 20'7.25" and ran the 60 meter dash with a time of 7.36 . . . came in fourth in the long jump with a 6.64 meter leap on his final attempt at the GMU Patriot Games and also finished 13th in the 200 meter dahs with a time of 24.11 . . . broke the school mark in the 60 meter dash with a time of 7.26 at the Crusader Indoor Meet and also came in second in the long jump with a posted jump of 6.34 meters . . . broke the 60 meter dash school record again with a time of 7.21 and finished third in the 200 with a time of 23.98 at the Susquehanna Invitational . . . during the CAC Championships finished second in the long jump, posting a best distance of 6.49 meters and also yet again brok the 60 meter dash record with a time of 7.16.
OUTDOOR: won the long jump with a distance of 6.25 at York's Intersquad Alumni Challenge . . . earned a victory in long jump against some tough competition at the Maryland Invitational with a jump of 6.81 meters, also finished fourth in the javelin (52.09) and ran the 100-meter dash in 11.15 . . . helped the 4X100 team to a victory at the York Quad Meet, as well as taking first in the long jump with a leap of 6.57 meters and second in javelin with a throw of 48.66 meters . . . at the Duke Invitational recorded a 12th place toss in the javelin with a throw of 48.66 and was the only DIII student-athlete to reach the finals in the long jump, finishing in seventh with a distance of 6.69 meters . . . grabbed 10th place in the 200 meters with a time of 22.70 at the LHU/Loyola Invitational and also helped the 1600 sprint medley relay crew finish in 3:41.01 . . . bested several DI student-athletes and won the long jump at the Greyhound Invitational with a leap of 6.95 meters, also finished the 100-meter dash in 11.38 for 12th place . . . took fifth in long jump with a distance of 6.88 meters at Shippensburg's Paul Kaiser Classic . . . at the CAC championships earned his third All-CAC honor and second conference championship victory in the long jump (6.72 meters), also placed in fifth in the javelin with a throw of 157'8", fifth in the 100 with a time of 11.21 and seventh in the 200 with a time of 23.08 . . . named to the All-CAC First-Team and earned CAC Athlete of the week two times (April 3, 11).
2011: At the CAC Championships jumped 6.80 meters in the long jump.
2010: Ran a personal best 11.22 meters in the 100 meter dash at the CAC Championships . . . also at the CAC Championships in the long jump he garnered a 6.99 . . . at the UNF Spring Break Open ran a 23.20 meters in the 200 meter dash . . . threw for a 53.64 in javelin at te Duke Invitational Track & Field Meet.
Personal: Is a finance major . . . is the son of Terrie Kellner and James Cavaluchi . . . was born on June 30, 1991.