Database Account Credentials

I have the following questions:
1. I currently have APEX 2.0 in 3 databases. How can I upgrade them to APEX 2.2? APEX 2.0 uses the tablespaces called HTMLDB and FILES.
2. How can I use database account credentials in APEX 2.2? Is there any detailed instruction on the Website?
Thanks.
Andy

Download 2.2 and use the upgrade installation option. I don't understand the part about tablespaces.
About the authentication scheme, just create an authentication scheme and select the new method and try it out.
Detailed instructions on the website? What website or URL?
Scott

Similar Messages

Database Account Credentials Authentical Failure

Hello All,
I've set my Authentication Scheme in APEX to Database Account credentials (I have Oracle 10+ installed). However, when I login I get the following errors. Can someone please advise?
ORA-28007: the password cannot be reused
ORA-06512: [b]at "FLOWS_020200.WWV_FLOW_SECURITY", line 221
ORA-06512: at "SYS.WWV_FLOW_VAL", line 49
ORA-06521: PL/SQL: Error mapping function
Error ERR-10480 Unable to run authentication credential check function.
Thanks

Hi Scott:
Thanks for the clarification with Default User profile.
In my database, the authetication works for all the profiles that have DEFAULT PROFILE. However, doesn't work for DB accounts that don't belong to DEFAULT profile(these users have profile called ENDUSER_PROFILE).
So, how and where can I define multiple profiles as VALID for the Database Account authentication?
Thanks for your help!
Muni

Database Account Authentication to a few users.

Good Morning, apex teachers.
I have one more doubt about apex.
This time is related to Database Account Authentication.
I was wondering if it would be possible to filter which database users
can logon to my application?
For instance I have this users on my database: John, Paul, Ringo and George.
But I only want to John and Paul be able to logon, if Ringo or George try to
do the same, they would have their access denied.
Thanks for all the help you guys have been giving to me.
Regards, Leandro Freitas.

"Database Account Credentials
Database Account Credentials utilizes database schema accounts. This authentication scheme requires that a database user (schema) exist in the local database. When using this method, the user name and password of the database account is used to authenticate the user.
Database Account Credentials is a good choice if having one database account for each named user of your application is feasible and account maintenance using database tools meets your needs"
You are trying to use schemas or do you have a table with the beatles users and passwords? Don't let Ringo out man... ;)

Connect to DataBase programmatically with Integrated Security in SharePoint - which account credentials are used?

Hi to All!
I have a simple question. I connect to DataBase programmatically, using SqlConnection and Integrated Security in connection string. It works! But I cannot understand - which account credentials are used? My Windows account(under which I was logged
in) or NetworkService Account, or something else?
If I was logged in as FBA user in SharePoint - what in this case?

Hi MaryBath,
When you use integrated security = true it means the same as integrated security = SSPI and in this case the current Windows account credentials are used for authentication and if you set the integrated
security = false you have to provide UserName and Password . so for your question it uses the current windows account credentials.
here is the Microsoft link for the same...
https://msdn.microsoft.com/en-us/library/system.data.sqlclient.sqlconnection.connectionstring(VS.71).aspx
If your code is executing on server in SharePoint (in webparts or features or application page). it will take the windows account of the server to connect to the database because all are executing on server not on client machine. your
login credentials has nothing to do with it.
Note: there are 2 authentication Windows Authentication and SQL Authentication so make sure that on database windows authentication is enabled (it will only work when windows authentication is enabled....
Please 'propose as answer' if it helped you, also 'vote helpful' if you like this reply.

APEX Database Account Authentication Problem

Hi There
I'm developing an application in APEX 3.1 on top of an Oracle 10g database. The schema account ABC has full control of all objects but additional users have been added USER1 for example. When I set the authentication of the APEX application to Database Account I am able to login as ABC but not when I use USER1. The errors I receive are:
ORA-28007: the password cannot be reused ORA-06512: at "APEX_030200.WWV_FLOW_SECURITY", line 248 ORA-06512: at "SYS.WWV_FLOW_VAL", line 55 ORA-06521: PL/SQL: Error mapping function
ERR-10480 Unable to run authentication credential check function.
I haven't used any custom funtions, pages or procedures, even tried starting a new app from scratch and still am not able to login.
Thanks
Daniel

Thanks Varad, but I was able to log in to PL/SQL Developer using the USER1 credentials. I have found the problem though, the Oracle database was an older version than this APEX functionality could work with. We upgraded the database and now I can log in fine.

Database Account and User Groups

Hello,
Currently, I am using DATABASE ACCOUNT for an authentication scheme for all of my applications but, I would like to setup User Groups as well to limit users to thier prospective pages and/or objects within the application for easy maintenance of users. I have read that, in order to apply user groups in an application, you must use APPLICATON EXPRESS ACCOUNT credentials.
Another developer has modified the "APEX_ACCESS_CONTROL" table with an additional column(s) that would allow access to specific pages. I am not sure if this is good practice to modify Apex tables.
Is there a way to create user groups while using DATABASE ACCOUNT for authentication? What is the best practice in a case like this?
Can anyone please shed some light on this? Thanks.
- Dee

Dee,
I would like to setup User Groups as well to limit users to thier prospective pages and/or objects within the application for easy maintenance of users.I'm not clear on what your purpose is, just runtime authorization, or something more?
Another developer has modified the "APEX_ACCESS_CONTROL" table with an additional column(s) that would allow access to specific pages. I am not sure if this is good practice to modify Apex tables.Those tables belong to your application's parsing schema and they are accessed only by code in applications you develop. The Application Express machinery knows nothing about them.
Is there a way to create user groups while using DATABASE ACCOUNT for authentication?You can create your own tables to define groups and to keep track of which named accounts belong to which groups. And you can write an API for applications to use to query this information and to maintain it from custom applications built for that purpose.
All

How to find out who is locking my database account ?

Hi,
Which dynamic view can help me to find out who is locking my database account ?
Thanks

Yoav wrote:
Hi,
Which dynamic view can help me to find out who is locking my database account ?
Thanksdoes account have PROFILE?
if so, repeated failed logons can result in locked account.
enable AUDIT to see from where logins originate.

How to create an database account authentication scheme in apex

Dear
I have an apex installation (embeded) on oracle 11g.
I want to create a database account authentication scheme in apex. I have seen the page with different tab like name,subsription,source,session not valid, login processing, logout URL,session cookie attributes and comments.
I want to know what are the things to be specifed on these tabs and the effects. I have gone thru the documentation 'Application Builder User’s Guide Release 4.1' , but the functionalities of these tabs are not mentioned.
Please help.
Dennis
Edited by: Dennis John on Feb 28, 2012 10:57 PM

Thanks to dear Jit
I am new to apex.
I have gone thru that documents but I couldn't find any detailed documentation about the database account authentication scheme configuration
The database account authentication scheme creation interface will show tabs like name,subsription,source,session not valid, login processing, logout URL,session cookie attributes and comments.
I want to know what are the things to be specifed on these tabs and how it will reflect in the login. The specified documentation is not giving any detail about the above mentioned tabs of authentication scheme creation iwizard.
And also I want to know how the applciation user will be mapped to the database account?
As per my understanding a database user (for each run time user) is required for to authenticate the apex run time login other than the applciation schema user (holds the objects of applicaiton)
run time user means - end user who uses the applcaition, not the developer.
Please help.
Dennis

Database Accounts AR, AP, GL

Do the AR, AP, GL Database accounts have access to all Oracle EBS receivables, payabales, ledger data in the Database, or are some tables/views restricted from these accounts?
Is there any document that details which AR, AP, GL tables/views contain the more sensitive data?

user599292 wrote:
Do the AR, AP, GL Database accounts have access to all Oracle EBS receivables, payabales, ledger data in the Database, or are some tables/views restricted from these accounts?
Is there any document that details which AR, AP, GL tables/views contain the more sensitive data?Hi user i suggest check [e-trm site|etrm.oracle.com] for table relations in EBS, i belive it can be helpful for you
Regard
Helios

Using HTML DB account credentials

Using HTML DB account credentials and login page, I created two groups - one for managers and one for users. The schema is to be shared and has other groups that should not be allowed to view the application. When setting rights on the page items (queries, tabs), only one group can be added. I would like managers to be able to view pages 1,2, and 3 and users to be able to view pages 1 and 2. When granting the managers rights to page 3 and users rights to page 1 and 2, this works fine for the users, but managers cannot view pages 1 and 2. If I add managers to the users group, they cannot access page 3. What is the best practice for doing this?

Thank you for responding. I apologize for being Anonymous, that was not my intention. I implemented the authentication scheme by going to the Page Definition and selecting the Region. Going down to the Authorization section, I selected an Authorization Scheme with the users that I wish to have permissions. The ability to use compound rules sounds like what I need.
Doris

Run As Account Credentials Distribution (More Secure option)

Hi
I am bit confused "in which scenarios, we should distribute Run as Account credentials to Resource Pool".
I mean we have bydefault three Resource Pools (AD Assignment, All Management Servers and Notification Resource Pool) in SCOM and we create two more pools basically for Network Device Monitoring and Unix/Linux Monitoring.
Lets take an example- I have to discover and monitor Unix computers and Network devices. So I have configured one Run As Account for Unix Monitoring and one SNMP v2 Run as account for Network Device Monitoring. So in these both scenarios, on which basis
I should distribute these Run as Account credentials and to which computers/resource pools?
Please let me know if anybody know about this.
Thanks in advance.
Abhinav | MCTS-Server Virtualization

For Unix runas account, you should distribute the account to all UNIX machines and SNMP runas account is distributed to machines which run the network discovery rule.
Roger
This is not correct.
For UNIX/Linux monitoring, the credentials should be distributed to your custom "UNIX/Linux monitoring resource pool" or whatever your choose to call it. There is no UNIX/Linux monitoring resource pool out of the box - you need to create one, and
it can be any combination of management servers you want (or you certainly can use the all management servers resource pool if you have a small environment and no dedicate UNIX MS's).
For network monitoring (SNMP), the credentials are automatically distributed to the correct entities when you create the account in the discovery wizard (to network discovery servers class or something like that - I don't have a console in front of me...).
There is no need to manually set up distribution of these credentials.
Please answer responsibly.
Jonathan Almquist | SCOMskills, LLC (http://scomskills.com)

Error message: .Mac account credentials validation failed for account...

I have published via iWeb for some time, but after I created a new webpage, I have been unable to publish again. This is the latest error message...
".Mac account credentials validation failed for account “account name."
I have tried publishing via wireless internet and direct connect to router, with the same results. The apple support site recommendation is to upgrade to iWeb 1.1.1 or higher, but I'm already running 1.1.2.
Thanks!
Craig

I have this same problem SUDDENLY. I never have had issues before.I have not tried to publish since 10/04 so I don't know when this started...? what is the answer. My .mac account is fine and working.

Database authentication & database account profiles

Hi,
Is anyone aware of any sample applications that uses database acccount profiles for password policies like ageing, length, reuse and so on.
I've searched the forums but havn't found any links
Has anyone experience in this field
Many thanks
Pete

Roger,
The authentication code and the general steps to hook it up are posted in this thread: Re: Custom Authentication
As far as checking profile settings and account status, I would run these checks in processes on your after-login page. If there are exceptions, the user can respond to them on that page. If there are no exceptions, the page should branch to the start-of-application page of your choice. How you access this profile/account information for the authenticated user is up to you to figure out. Keep in mind that you will not be connected as the database account you authenticated against, so there is really no "active" profile involved. Your application's parsing schema will need to be granted access to whatever dictionary views it needs for this purpose.
Good luck,
Scott

Level of permission on database account

Hi All!
About to install RoboHelp Server 8.
We've created a SQL database and a RoboHelp username and password for that database.
For the install of RoboHelp Server 8 I'm assuming the db account needs DBO permissions (full owner).
Our DBA group however does not like leaving accounts with DBO permission.
After install can the level of permission for the database account be lowered? to say modify or read/write?
Thanks for the info!
Frank

Hi Frank and welcome to the RH forums.
When you first start the RHS it is not connected to the DB. You have to specify logon details for a user with full admin rights. This is used to create an Admin group and user complete with various permissions so the admin rights are definitely used there. You'd then be creating other users, groups, permissions requiring admin rights on the logon.
Perhaps (I'm not sure) that you could get away with read/write access if all you were doing was maintaining areas, running reports, etc. However you'd have to get admin rights each time you need to create/amend/delete users or contexts. Personally I wouldn't have thought it was worth the hassle.
If you go back to your DBA and remind them that only you has access to the Config Manager where the DB security can be compromised, would this appease them?
The RoboColum(n)
@robocolumn
Colum McAndrew

Authentication using database accounts (EJB)

Hi.
I'm developing a web app(struts, jsp). Users should log-in using their Oracle
database accounts (created with CREATE USER ...). Is it possible to accomplish that using EJB? How?
I've read that i can somehow map application server's users with database users
using sql authentication providers: Wouldn't then sql queries made by ejbs
still be executed with the same user every time?

Normally application servers use a shared login to allow using a shared connection pool, and avoid the cost of logging in and out.
Are you using JPA or the native TopLink API? Are you using JTA?
TopLink / EclipseLink have several features for user logins.
You can use Oracle proxy connections, these allow a shared connection pool to be used, but allow setting a proxy user on the connection.
See, org.eclipse.persistence.config.PersistenceUnitProperties.ORACLE_PROXY_TYPE
You can also use real database logins with JPA (or ServerSession) through using a JPA EntityManager properties or a ConnectionPolicy.
See, org.eclipse.persistence.config.EntityManagerProperties, org.eclipse.persistence.sessions.server.ConnectionPolicy.
You also have the option of using a shared login for reads, and a user login for writes.
If you are using the native API, you can also use DatabaseSessions.
James : http://www.eclipselink.org

Database Account Credentials

Similar Messages

Maybe you are looking for