Using Oracle Users in Realms and DataSource.getConnection

Is it possible to authenticate using an Oracle User via JAASRealm and also retrieve connections specific to that user from a DataSource?
I currently have an application which doesn't use either, but rather sets up a OracleDataSource. So basically I just want to allow the container to administer both the authentication and data source setup, while still allowing the getConnection(user,password):
CODE
ocpds = new OracleConnectionPoolDataSource();
ocpds.setURL(connectionString);
ocpds.setConnectionProperties(props);
ods = new OracleDataSource();
ods.setURL(connectionString);
ods.setConnectionCachingEnabled(true);
ods.setConnectionProperties(props);
// Pool and Cache
Properties poolProps = new Properties();
poolProps.setProperty("AbandonedConnectionTimeout", "60");
poolProps.setProperty("InactivityTimeout", "5");
poolProps.setProperty("TimeToLiveTimeout", "60");
poolProps.setProperty("ConnectionWaitTimeout", "60");
ods.setConnectionCacheProperties(poolProps);
ods.setConnectionProperties(props);
Util.logln("Connection Cache Properties");
cache = OracleConnectionCacheManager.getConnectionCacheManagerInstance();
cache.createCache(cacheName, ods, poolProps);
cache.setConnectionPoolDataSource(cacheName, ocpds);
........later in the BatCave (JSP or a servlet).....
conn = (OracleConnection) ods.getConnection(username, password);
ENDCODE
This section from OAS Containers for J2EE Services Guide worries me:
(from: http://download-east.oracle.com/docs/cd/B14099_19/web.1012/b14012/datasrc.htm#sthref572 )
Using Different User Names for Two Connections to a Single Data Source
When you retrieve a connection from a DataSource object with a user name and password, this user name and password are used on all subsequent connection retrievals within the same transaction. This is true for all data source types.
For example, suppose an application retrieves a connection from the jdbc/OracleCMTDS1 data source with the scott user name. When the application retrieves a second connection from the same data source with a different user name, such as adams, the second user name (adams) is ignored. Instead, the original user name (scott) is used.
Thanks for reading all of this, and I appreciate any help!

Update:
I'm still not quite sure what to do. Where I am now:
1. I don't know how to authenticate against Oracle database users (non-ldap) via JNDI/JAAS/whatever
2. Proxy authentication (ALTER USER...CONNECT THROUGH...) seems to be promising for using connection pools, and in addition, once realm authentication happens, I can just pass the username and piggyback on the middletier connection without knowing the password used in authentication
3. I'm not sure if proxy addresses the issue that OAS Containers for J2EE Services Guide talks about in the original post
4. I'd prefer not to use OID
Again, if you have any little information, I'd really like to hear it.

Similar Messages

  • Not able to login using ORACLE USER in Linux

    I am not able to login using OS user ORACLE in linux,
    I am getting following error when trying to login
    /etc/X!!/gdm/PreSession/Default : Registering your session with wtmp and utmp
    /etc/X!!/gdm/PreSession/Default :running : /usr/bin/X11/sessreg -a -w /var/log/log/wtmp -u /var/run/utmp -x "/var/gdm/:0.Xservers" -h "" -1" : 0" "oracle"
    /etc/profile: line 17 : syntax error near unexpected token 'then'
    /etc/profile: line 17 ' if[ $USER = "oracle" ]; then'
    Failed to execute message bus daemon : No such file or directory
    EOF in dbus-launch reading address from bus daemon
    I tried to edit /etc/profile file but not sucessfull. Please help me out . This installtion is on VM ware
    Edited by: user12356407 on Dec 16, 2009 3:21 AM

    user8896383 wrote:
    I am not successful to login using Oracle User .
    I tried to edit /etc/profile file on Line 17 , but of no use.
    could you please be more precise about what exactly i should look in or edit in that file.
    Thanks for your immediate response.My car doesn't start
    I tried to fix it
    It still doesn't start.
    Can you be more precise in telling how to fix it.

  • Using RDBMSRealm as backup realm and filerealm as primary realm

    I want to use filerealm as primary realm and RDBMSRealm as backup realm in
    my custom realm. How can I do that?
    Or how can I get access to filerealm from RDBMSRealm so that I can call
    filerealm.getUser() before I try to get it from database.
    Thank you.
    Tero Järvinen.

    What I've done does set the RDBMSRealm as the default realm.
    What had me worried and doubting this was that if there is an authentication
    problem, the console still says that there was a problem in "realm
    weblogic" -- a little misleading.
    "fnord" <[email protected]> wrote in message
    news:[email protected]..
    >
    I could have sworn that setting the RealmClass in weblogic.properties set
    the default realm for the server (or for the cluster in the
    weblogic.properties in mycluster), as this seemed to be how it worked with
    our test cases....
    Now that I've set up a webapp on its own and am trying to test our beansin
    it, it appears that the beans/webapp are trying to use the weblogic realm.
    Here's the error:
    principal: 1234
    javax.naming.AuthenticationException. Root exception is
    java.lang.SecurityException:
    Authentication for user 1234 denied in realm weblogic
    at weblogic.security.acl.Realm.authenticate(Realm.java:183)
    Here's what I have in weblogic.properties:
    weblogic.security.realmClass=examples.security.rdbmsrealm.RDBMSRealm
    Should this set the RDBMSRealm as the default realm, or do I have to domore
    to set the RDBMSRealm as the default for the webapp?
    thanks,
    John Stotler

  • Can i  use Oracle Database Audit Vault and Oracle Database Firewall on Solaris?

    Can i  use Oracle Database Audit Vault and Oracle Database Firewall on Solaris?

    4195bee8-4db0-4799-a674-18f89aa500cb wrote:
    i dont have access to My Oracle Support can u send text or html of document please?
    Moderator Action:
    No they cannot send you a document that is available only to those with access to MOS.
    That would violate the conditions of having such service contract credentials.
    Asking someone to violate such privileges is a serious offense and could get that other person's organization banned from all support and all their support contracts cancelled.
    Your post is locked.
    Your duplicate post that you placed into the Audit Vault forum space has been removed (it had no responses).
    This thread which you had placed in the Solaris 10 forum space is moved to the Audit Vault forum space.
    That's the proper location for Audit Vault questions.

  • How to verify OC4J uses Oracle Toplink 10.x and not Toplink Essentials

    Hi,
    We dont want to use the default JPA provider "Toplink *Essentials*" that comes with OC4J. Rather we want to use Oracle Toplink 10.x
    I downloaded [Oracle Toplink 10.x|http://www.oracle.com/technology/software/products/ias/htdocs/1013topsoft.html] and followed the installation instructions:- http://www.oracle.com/technology/products/ias/toplink/doc/10131/install/install.html#CHDBBIFB
    When i deploy my EJB 3.0 appliation and invoke a JPA Entity, i can see the server log:- NOTIFICATION TopLink, version: Oracle TopLink Essentials - 2.0.1 (Build b09d-fcs (12/06/2007))
    Do i have to do any other configuration/setting to ensure that i use Oracle Toplink and not Toplink Essentials in OC4J?
    Thanks in Advance,
    Prashant Tejura
    Edited by: user1186295 on May 26, 2009 10:33 AM

    rashant,
    Hi, there are currently the following providers to choose from - you may want to consult your rep for any details on moving from 10.1.3.4 to 10.1.3.5.
    1) TopLink or EclipseLink using EclipseLink JPA - the RI for JPA for WebLogic, OC4J and GlassFish
    - EclipseLink JPA is focus of all current JPA development as part of EclipseLink and TopLink
    2) Another open-source JPA implementation like OpenJPA or Hibernate
    Deprecated:
    3) TopLink using TopLink JPA - replaced by (1) TopLink using EclipseLink JPA
    4) TopLink using TopLink Essentials JPA - replaced by (1) TopLink using EclipseLink JPA
    Changes to server.xml as follows:
    http://wiki.eclipse.org/EclipseLink/Examples/JPA/OC4J_Web_Tutorial#Modify_server.xml
    <shared-library name="oracle.persistence" version="1.0" library-compatible="true">
              <code-source path="../../../eclipselink/eclipselink.jar"/>
              <code-source path="../../../eclipselink/javax.persistence_*.jar"/>
              <import-shared-library name="oracle.jdbc"/>
         </shared-library>
    Changes to persistence.xml as follows: (container-managed JTA datasource)
    http://wiki.eclipse.org/EclipseLink/Examples/JPA/OC4J_Web_Tutorial#Persistence.xml
    <persistence version="1.0" xmlns="http://java.sun.com/xml/ns/persistence" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/persistence http://java.sun.com/xml/ns/persistence/persistence_1_0.xsd">
    <persistence-unit name="example" transaction-type="JTA">
    <provider>org.eclipse.persistence.jpa.PersistenceProvider</provider>
    <jta-data-source>jdbc/OracleDS</jta-data-source>
    <class>org.eclipse.persistence.example.jpa.server.business.Cell</class>
    <properties>
    <property name="eclipselink.target-server" value="OC4J"/>
    <property name="eclipselink.logging.level" value="FINEST"/>
    </properties>
    </persistence-unit>
    </persistence>
    You should see output similar to the following in your server log:
    http://wiki.eclipse.org/EclipseLink/Examples/JPA/OC4J_Web_Tutorial#Console_Output
    [EL Finest]: 2009-02-26 14:04:34.464--ServerSession(8634980)--Thread(Thread[HTTPThreadGroup-4,5,HTTPThreadGroup])--Begin deploying Persistence Unit example; state Predeployed; factoryCount 1
    [EL Info]: 2009-02-26 14:04:34.542--ServerSession(8634980)--Thread(Thread[HTTPThreadGroup-4,5,HTTPThreadGroup])--EclipseLink, version: Eclipse Persistence Services - ***
    [EL Fine]: 2009-02-26 14:04:35.213--Thread(Thread[HTTPThreadGroup-4,5,HTTPThreadGroup])--Detected Vendor platform: org.eclipse.persistence.platform.database.oracle.Oracle10Platform
    [EL Config]: 2009-02-26 14:04:35.26--ServerSession(8634980)--Connection(5230779)--Thread(Thread[HTTPThreadGroup-4,5,HTTPThreadGroup])--Connected: jdbc:oracle:thin:@//1y.yyy.yy.yy:1521/ORCL
         User: SCOTT
         Database: Oracle Version: Oracle Database 11g Release 11.1.0.0.0 - Production
         Driver: Oracle JDBC driver Version: 10.1.0.5.0
    [EL Finest]: 2009-02-26 14:04:35.385--UnitOfWork(5746770)--Thread(Thread[HTTPThreadGroup-4,5,HTTPThreadGroup])--PERSIST operation called on: org.eclipse.persistence.example.jpa.server.business.Cell@9107088( id: null state: null left: null right: null parent: null references: null).
    [EL Fine]: 2009-02-26 14:04:35.807--ClientSession(5748500)--Connection(6653899)--Thread(Thread[HTTPThreadGroup-4,5,HTTPThreadGroup])--INSERT INTO EL_CELL (ID, STATE, TSEQ, RIGHT_ID) VALUES (?, ?, ?, ?)
         bind => [551, null, null, null]
    thank you
    /michael
    www.eclipselink.org

  • Trying to use Oracle Locator for latitude and longitude proximity searches

    I am prototyping using Oracle Locator to do proximity searches and other spatial operations within the database in our software products. I’ve got it working fine in SQL Server, where geodetic is built in as well as geometric features, but with Oracle we’re trying to restrict ourselves to the Locator features so our customers are forced to buy the add-on. I am getting perplexing results, as you can see if you run the little test program I wrote.
    I am using lat and long as the point coordinates. I am inserting the data using
    SDO_GEOMETRY(2001, 4326, SDO_POINT_TYPE(?, ?, null), null, null
    Then I am doing the search with
    SELECT pointname, SDO_NN_DISTANCE (1) distance_in_miles
    FROM geotest g
    WHERE SDO_NN(g.geopoint, sdo_geometry(2001, 4326, SDO_POINT_TYPE(38.683, 123.083, NULL), NULL, NULL), 'distance=1000 unit=mile', 1) = 'TRUE'
    ORDER BY distance_in_miles
    I am getting distances from 56 to 86 units, whatever the units are.
    Am I attempting the impossible with Locator, to use lat and long and then expect the sdo_nn function to work in miles?
    Select results:
    POINTNAME DISTANCE_IN_MILES
    Point number 19 56.8497254738894
    Point number 17 57.0758802885512
    Point number 5 62.096857977487
    Point number 3 67.3555572959989
    Point number 16 70.8005407529483
    Point number 1 73.0370426667902
    Point number 9 73.1047740624495
    Point number 14 73.1451566004902
    Point number 11 74.9344307572887
    Point number 10 75.3710529989389
    Point number 2 75.423714095366
    Point number 8 77.2121183101138
    Point number 4 77.6458963754559
    Point number 18 80.4569749046142
    Point number 6 81.0025026191188
    Point number 20 81.8444977200089
    Point number 13 83.4095236051998
    Point number 15 86.9333533902019
    Point number 7 88.9312783958262
    Point number 12 98.72957787982
    Point number 0 98.9999489634554
    21 rows selected

    Couple of things that we found out using sdo_nn here...
    It works...but the knobs need to be turned in the right order...
    You may have done this already...but here is what we have...
    a. we create our table containing the location sdo_geometry column ..( in our case the column is called location )
    b.We loaded the data..If you elected to use a partitioned table for your spatial data and created the corresponding spatial index as local...your sql will need to account for that.if your index is global ..don't worry about it
    c. We inserted the metadata...this needs to be done once per table...by either the dba or the schema owner...
    INSERT INTO USER_SDO_GEOM_METADATA (TABLE_NAME, COLUMN_NAME, DIMINFO, SRID)
    VALUES ('<YOUR TABLE NAME>', '<SPATIAL COLUMN NAME>',
    MDSYS.SDO_DIM_ARRAY
    (MDSYS.SDO_DIM_ELEMENT('LONGITUDE', -180.0, 180.0, 0.5),
    MDSYS.SDO_DIM_ELEMENT('LATITUDE', -90.0, 90.0, 0.5)
    8307);
    COMMIT;
    If this is not done before the spatial index is created...stuff won't work...
    d. create your spatial index
    e. our query looked something like this...( I changed the table names )
    This returns the top 30 results sorted by distance in feet...
    SELECT LOCATION_KEY,
    result_center_distance
    FROM
    SELECT LOCATION_KEY,
    SDO_NN_DISTANCE(1) result_center_distance
    FROM LOCATION_OWNER.D_LOCATION dlocation
    WHERE SDO_NN(dlocation.LOCATION,
    MDSYS.SDO_GEOMETRY(2001,8307,MDSYS.SDO_POINT_TYPE(-97.07845,33.138006,null),null,null), 'SDO_NUM_RES=31 unit=FOOT distance=5800.0 SDO_MAX_MEMORY=50000000', 1) = 'TRUE'
    ORDER BY 2
    WHERE ROWNUM <= 31
    We had to use this structure because our index is local...and sdo_nn will return the sdo_num_res results for each partition...so you need to get the results first..then treat it as a top-n query...
    If you index is global...this should work
    SELECT LOCATION_KEY,
    SDO_NN_DISTANCE(1) result_center_distance
    FROM LOCATION_OWNER.D_LOCATION dlocation
    WHERE SDO_NN(dlocation.LOCATION,
    MDSYS.SDO_GEOMETRY(2001,8307,MDSYS.SDO_POINT_TYPE(-97.07845,33.138006,null),null,null), 'SDO_NUM_RES=31 unit=FOOT distance=5800.0 SDO_MAX_MEMORY=50000000', 1) = 'TRUE'
    ORDER BY 2
    If you want the distance in MILE...replace FOOT by MILE...
    good luck...
    Edited by: user5431290 on Oct 23, 2011 9:36 AM

  • Oracle user .profile change and running Database

    We have 1 Oracle Database (9i) running on AIX Server for long time. Now we are making some room to create second database. We would like to make change to Oracle User .profile , so it would prompt to specify ORACLE_SID upon login under oracle to UNIX. Also we would add new entry in oratab for new database. However we will not be creating this database for another couple of weeks. Could this cause some trouble for currently running Database? Could existing backup jobs, stats job and other monitor jobs fail on existing running DB?
    Let me know if you need more information to help us on this question

    This is very unlikely, though it would depend on how you developed the jobs you discuss. Without these jobs: no problem.
    What I do with multiple databases on Unix boils down the following.
    In /etc/profile, I set up a env var DEFDB
    In .profile of Oracle I set ORACLE_SID to the value of this DEFDB, and I set
    ORAENV_ASK to "NO". I run oraenv (which is in /usr/local/bin), and I leave ORAENV_ASK set.
    I don't want oraenv asking for a database during login, and I want to issue
    export ORACLE_SID=<some value> prior to running oraenv manually.
    Sybrand Bakker
    Senior Oracle DBA

  • Using oracle's connection pools and transactional context

    Hi!
    I have an implementations of existing interfaces ( let's call this layer as
    data access layer) which abstracts the connection and transactional session
    from the calling application. This implementaion makes use of Oracles JVM
    inside the oracle database (8.1.7) to create and maintain the connection
    pools and the transactional session (transactional context). I would like
    to create differenent implementation, if the calling application is a
    session bean running inside the weblogic application server. is there way I
    can still use the connection pools and transactinal context that I got from
    the oralce if the calling application is a session bean running inside the
    weblogic app.. server?
    do I have to change any configuration settings in weblogic?. there might
    be two scenarios..
    the data access layer (the classes which deal with the connection pools and
    transactions) might be running inside the oracle's JVM..
    the data access layer might be running inside weblogic application server...
    thanks...
    Srinivas

    Certainly this from SPAM. Now from anothe user :). Note sure whether I should mark you as you as SPAM as you're posting questions which are available in stackoverflow
    http://stackoverflow.com/questions/26531161/biztalk-and-odp-net-connection-pools-and-connection-strings
    Details provided in the other forum should provide you the answer.
    I don’t want to duplicate this thread just for the sake of giving reply.
    If this answers your question please mark it accordingly. If this post is helpful, please vote as helpful by clicking the upward arrow mark next to my reply.

  • Could not boot TMS_ORA using Oracle 8.1.6 and WLE 5.1 on AIX 4.3

    Hello group members,
    When I tried to start a simple tuxedo application with oracle 8.1.6 in AIX
    4.3 I get
    this error on booting
    exec TMS_ORA -A :
    CMDTUX_CAT:1685: ERROR: Application initialization failure
    my environment:
    WLE 5.1,
    Oracle 8.1.6,
    AIX 4.3
    my RM string was Oracle_XA:xaosw:-L${ORACLE_HOME}/lib -lclntsh
    TMS was built successfully -- using buildtms command.
    TLOG was built successfully -- using tmadmin command.
    my ULOG gives other errors also such as
    TMS_ORA.38262: 07-25-2001: TUXEDO Version 6.5forWLE5.1
    TMS_ORA.38262: LIBTUX_CAT:262: INFO: Standard main starting
    TMS_ORA.38262: LIBTUX_CAT:318: ERROR: Log start cannot get tlog information
    TMS_ORA.38262: LIBTUX_CAT:250: ERROR: tpsvrinit() failed
    CAN anyone please tell me what to do to solve the problem?
    thanks Claudio
    =================================================
    CLAUDIO CONTI
    Office: CAD s.r.l. - via Torricelli, 37
    37136 - VERONA - ITALY
    Email: [email protected] (preferred)
    or
    [email protected]
    Http: http://www.cad.it
    Phone: +45-9211.111
    Direct: +45-9211.156
    Fax: +45-9211.110

    Have the same problem in Mandrake 7.1 Any suggestions please ?
    thanx,
    -Ram
    [email protected]
    <BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by Frank Ansari ([email protected]):
    I installed Oracle 8.1.6 on Debian "Potato" and wondered why the database won't start up after rebooting. The dbstart script was called and it gave the message that the database was started. But when I wanted to make a connection I always got the message ORA-01034: ORACLE not available.
    ps ax showed me that no ora_* tasks were started. Finally I solved the problem. The $ORACLE_HOME/bin/dbstart script searches for the version of Oracle with an awk request. This request is wrong for the Linux version. It checks for $ORACLE_HOME/bin/svrmgrl and then makes an awk request. The correct request is:
    awk '
    /Edition (Release|Version)/ { print substr($5,3,1) }'
    Frank<HR></BLOCKQUOTE>
    null

  • Why did the default save location use the users appdata location and not create an Adobe Premiere Folder in documents.

    I have a user that started working on a premiere pro project 2 weeks ago.  She then received an update from adobe which she ran and the next day the premiere pro project she was working on was gone.  After I looked at found that the save location was in the users AppData\Adobe\Premiere\6.0 folder (which was empty).  I would first like to know why by default did it store the saves in the AppData folder?  Why was the folder over written after the update?

    I have a user that started working on a premiere pro project 2 weeks ago.  She then received an update from adobe which she ran and the next day the premiere pro project she was working on was gone.  After I looked at found that the save location was in the users AppData\Adobe\Premiere\6.0 folder (which was empty).  I would first like to know why by default did it store the saves in the AppData folder?  Why was the folder over written after the update?

  • Oracle User Type Mappings

    I have inherited an application system where all of the business logic takes place in the database. All of the application calls to the database interface with Functions and Stored Procedures and use Oracle User Data Types as both IN and OUT parameters. I'm working on converting the front end to use Spring w/ Hibernate and I am extending the org.springframework.jdbc.object.StoredProcedure class to interact with the database.
    If I define the datasource in the Spring configuration file I am able to call getConnection().setTypeMap(Map<String, Class<?>> on the datasource and everything works fine.
    However I would like to configure the datasource in JBoss and use a JNDI lookup to get a connection from the pool. When I do this, the .setTypeMap(Map<String, Class<?>> method no longer seems to work. I keep getting the exception:
    java.lang.ClassCastException: oracle.sql.STRUCT cannot be cast to ............
    I tried editing the standardjbosscmp-jdbc.xml file and adding the mappings there but that did not work.
    So how can I set the Type Map for the JBoss DataSource?
    JBoss 5.1
    Spring 3.0
    Hibernate 3.3
    JDK 6
    Thanks
    Edited by: user1711713 on Jul 14, 2010 10:45 AM

    Hi,
    perhaps it's because with spring you are getting an oracle connection instead the Jboss pool is giving you different kind of connection oject.
    My suggestion is to print the connection class name (i.e. getConnection().getClass().getName()) and see if they are different.
    if they are different you could try with then connection unwrap method in order to get the real connection.
    ciao,
    Giovanni

  • How to implement Oracle user/role security with Access front end?

    Hi,
    We have successfully migrated our Access database tables to Oracle 10g using SQL developer. We've recreated all the users and roles(i.e., access groups) in Oracle and granted rights to tables.
    In the Access front end database, in the Database window we have saved linked Oracle tables which replaced the Access tables. The forms, reports, queries run fine with the linked Oracle tables. All the linked table use one ODBC DSN to the Oracle database with the same Oracle user id.
    We need to be able to authenticate users into the Oracle database and RE-link the tables based on their own unique user id. By during so we can allow users to use the Oracle standard user id/role and system privileges to control select, update, ect. rights to the database.
    I've been able to use the VB code within Access to logon into the database with a unique id, but I have not been able to find out how to RE-link the tables to the unique user id using VB. There should be some way to relink tables dynamically, based on users login into the Access front end.
    I don't know a great deal about Access projects, but I do know with SQL server allows login into your Access project and link tables dynamically.
    Can someone give me some assistance or point me in the right direction?
    Thanks in advance,
    Larry

    We had one of our programmers here come up with a VB code solution for re-linking table within Access. However the relinking takes 3-4 minutes for 100+ tables.
    In an effort to help you understand the situation better, I will attempt to elaborate on the problem:
    We have an Access 2003 application which currently has a front end using Access(forms, reports, queries, & VB code) and a MS Access 2003 backend.
    We have migrated the backend tables to Oracle. However, we still have a need to maintain the front end in Access, since we have over 60 forms, 40 reports, 200+ queries in Access. Its easy to understand, we have a significant investment in the front end(Obviously, the plan is to migrate the front end also at some future date).
    In order to utilized the existing front end, we have to validate and modify the current front end connections to the new Oracle backend. One of the features of Access is that you can "link" tables and save the link for runtime. Each Access table can have its own link which is a separate ODBC/JET connection. As such, each separate link has its own userid/database information.
    The other issue with using the Access front-end is that Access utilizes a workgroup file to implement user and group security. The workgroup file contains all the users and which groups the users belong to in Access. Then within Access, you allow users access to object(tables, queries, ect) by their userid and or group. When users open an Access database with Access security enabled, they are required to log into Access. The login is authenticated by the workgroup file. Once, logged into Access, users have rights to Access objects based on their rights granted to their userid and groups they belong. The problem here is that when you remove the linked Access tables and replace them with linked Oracle tables, Access has knowledge about Oracle table rights granted to users; nor would you expect it to.
    The dilema is the disconnect between Access and the fact Oracle utilizes a similar but much more sophisticated security model. It creates users and roles(which are similar to Access groups), and again this is independent of Access security.
    Our solution was to still use the Access workgroup file security along with the Oracle security model. By using the Access userid and then creating a similar Oracle userid with similar table rights granted in Access, you could apply security within Access and also with the Oracle database.
    For example, a user BOB logs into Access via the workgroup file, using VB code, Access then establishes a Oracle connection logining into Oracle using the same unique userid BOB into Oracle.
    After connecting and validating user BOB into Oracle, then the Access tables are relinked to Oracle using the user BOB userid and table rights.
    This Oracle userid has been granted table rights specific for this userid.This allows the user BOB to use the Access application and still be authenticated into the Oracle database.
    The problem with this solution is that the relinking of the saved Access tables takes 3-7 minutes for about 100+ tables. This is not acceptable for users each time they log into the application.
    Our current alternative is to use one Oracle userid to login each user, and use Access form restrictions/security to allow/prevent users from updating/viewing data. Obviously, this is not the optimal solution in respect to security, but it at least allows us to control access to the data(via the forms) by using one logon required for each user, and quick startup time for the application.
    I understand SQL server does a better job in integration, but we use Oracle which is what I am trying to work with.
    Larry

  • Three tier architecture using oracle dev suite 10g & oracle database 9i

    hi ,
    I am trying to build a software which will manage the database of a hospital through usual form design .
    The tools I am using for these are
    (1) oracle server database 9i (2) oracle developer suite 10g (3) windows xp professional service pack 2 .
    I have designed the form modules in developer suite , created the tables in the database , connected those tables to the form modules using dml statements, now data can be inserted , updates and deleted through the form design . I have also deployed the forms using "run forms through web" and thereby other computers connected to the main computer through lan can also access the software using the web port address and the name of form to be used , these computers are not having oracle developer suite or oracle database installed , but they can access the software through the browser .
    In this scenario my question is that , is this a three tier architecture as oracle database is the first tier , oracle developer suite is the middle tier where I am puting all the bussiness logics and oc4j instance is used to connect the database and the dev suite , and for user interaction we have the browser as the third tier ?
    or this is a two tier architecture ? if this is a two tier architecture please let me know how can I implement a three tier architecture using oracle developer suite 10g and oracle server database 9i .
    Thanks a lot for showing ur interest to read this

    You need Oracle Application Server to deploy the forms when you go live.
    What you are currently using OC4J which came in the developer suite. It is used only for development purpose and can not have capacity to handle higher load.
    3 tier arch
    1. Thin Client :-> Browser
    2 Middle tier -> Oracle Appln Server /OC4j(in ur case)
    3 Database Tier -> Oracle Database
    Rajesh

  • Fully_qualified_remote_host_name while Configuring the oracle User's Enviro

    Hello All,
    I am installing Oracle 11g R2 on HP-UX server.
    I am connected to the HP-UX server through putty.
    On the Quick Installation guide i reached the section "Configuring the oracle User’s Environment" and i have the below questions:
    In the below
    Enter the following command to ensure that X Window applications can display
    on this system:
    $ xhost fully_qualified_remote_host_name
    what is the fully_qualified_remote_host_name ? is it the IP address of the my own PC where i am connecting to the remote server? or the IP address of the server it self?
    and in the below example
    $ export DISPLAY=local_host:0.0 -- local host is the IP of the PC i am connecting from it to the server?
    Regards,

    Hi;
    In the below
    Enter the following command to ensure that X Window applications can display
    on this system:
    $ xhost fully_qualified_remote_host_name
    what is the fully_qualified_remote_host_name ? is it the IP address of the my own PC where i am connecting to the remote server? or the IP address of the server it self?
    and in the below example
    $ export DISPLAY=local_host:0.0 -- local host is the IP of the PC i am connecting from it to the server?If you use putty than you need to some program like VNCviwer or xming etc. to can see GUI screen on your desktop.Please check my previous post
    Re: 11gR2 Grid Infrastructure cannout launch installer OEL 5.5
    Still have some issue than update thread.
    Regard
    Helios

  • Changing passwords of oracle users

    Dear all
    I wander is there any problem if changing password of oracle users SAPOWNER, system,sys . (I guess command for that is brconnect -u system/<password> -f chpass -o <sapowner> -p <password>
    ). What about sys and system. (I hope that after changing passwords the system will be functional)
    Which user is used when "sqlplus / as sysdba"
    thank you in advance

    Hello Jan,
    I wander is there any problem if changing password of oracle users SAPOWNER, system,sys
    Well we already discussed the SAPOWNER here: http://forums.sdn.sap.com/message.jspa?messageID=10814500#10814500
    If you change the password of SYSTEM or SYS there will be no problem at all. These users/password combination is not used in a SAP environment unless you explicitly specify the SYSTEM user and password in some BR*Tools calls like brconnect. If you just use the "/" default approach, the OS authentication mechanism (OSDBA) is used - so no issue there at all.
    @Orkun:
    This is not a user, but a role. So when you connect to the database by using "/as sysdba" you will be able to connect to the system by sysdba role not by a user.
    If you use this apporach you are connected with the user SYS - so you are using a user for sure (and btw. you can only logon with SYS by using SYSDBA role). The only difference between "sqlplus / as sysdba" and "sqlplus SYS as sysdba" is, that you are using the specified OSDBA group with the first approach (so no password is required).
    shell> pwd
    /oracle/<SID>/11202/rdbms/lib
    shell> grep dba config.s
    #  SS_DBA_GRP defines the UNIX group ID for sqldba adminstrative access.
            .rename H.16.ss_dba_grp{TC},"ss_dba_grp"
            .globl  ss_dba_grp{RW}
    T.16.ss_dba_grp:
            .tc     H.16.ss_dba_grp{TC},ss_dba_grp{RW}
            .csect  ss_dba_grp{RW}, 3
    # End   csect   ss_dba_grp{RW}
            .string "dba"
    shell> sqlplus / as sysdba
    SQL> SELECT sys_context('USERENV', 'SESSION_USER') FROM DUAL;
    SYS_CONTEXT('USERENV','SESSION_USER')
    SYS
    shell> sqlplus SYS as SYSDBA
    Enter password:
    SQL> SELECT sys_context('USERENV', 'SESSION_USER') FROM DUAL;
    SYS_CONTEXT('USERENV','SESSION_USER')
    SYS
    Regards
    Stefan

Maybe you are looking for

  • How can I delete event files from iMovie to save disk space?

    I have been shooting a lot of HD video of my son's soccer games and am now realizing some of the problems with the newer iMovie 10.   It appears to not allow for partial video deletion of videos in events (really too bad because previous versions of

  • Kernel panic on mac pro while playing Starcraft 2

    Hello all, recently I had my second kernel panic since I bought my Mac Pro mid 2010 single core at 2.80 ghz, the computer was bought approximately 4 months ago. The crash occurred while I was playing the game Stacraft 2 with 3 other friends tonight,

  • FIle content conversion on receiver side

    Hey guys i m getting and XML file of the following form on the receiver side <?xml version="1.0" encoding="UTF-8"?> <ns0:MT_sender xmlns:ns0="urn:Nov:FileToFile">    <Emp_name>mark</Emp_name>    <Emp_Age>25</Emp_Age> </ns0:MT_sender> and i need to co

  • Query related to .tpz files

    Hi, I am having query related to .tpz files. I am having XI Development server on AIX. My XI Prd server will be on windows NT . <b>Can i transport .tpz file from development server to production server as both the servers are on different platforms.<

  • HT1369 iphone is not showing up in itunes

    i phone  dont  show up in  itunes and it use to  i have updated it