Act As Proxy User

Hello,
I am implementing act as proxy functionality in obiee 10g but after all steps when I select user in act as drop down list & clicked ok button
I got following Error
Error Codes: OPR4ONWY:U9IM8TAC
State: 08004. Code: 10018. [NQODBC] [SQL_STATE: 08004] [nQSError: 10018] Access for the requested connection is refused. [nQSError: 13024] Successful completion of init block 'Authentication' is required. (08004)
Please any body know solution for above error
Thanks,
Pradip

Hi,
You probably have "Required for authentication" option checked in your init block and for some reason this init block failed.
1. Check DB connection
2. Try for a moment to uncheck "Required for authentication" option and see wha hapens.
3. Maybe there is user name spelling problem in your PROXY table

Similar Messages

OBIEE 10g Act-As Proxy Error

Hi,
I have configured the “act-as” proxy function in OBIEE 10.1.3.4.1 and from the drop down list I am ok to act-as for some users but for some the following error appears (and I am logged out of Answers):
Unable to Log In
Odbc driver returned an error (SQLDriverConnectW).
Error Details
Error Codes: OPR4ONWY:U9IM8TAC
State: 08004. Code: 10018. [NQODBC] [SQL_STATE: 08004]
[nQSError: 10018] Access for the requested connection is refused.
[nQSError: 13023] An external user ‘A33369′ can not run as an internal user ‘K2824′. (08004)
Any ideas why this error comes for some users and what I need to do to mitigate?
I have checked the proxy users table in the DW and there is a row for A33369 and K2824.
All help is appreciated!!!
Many thanks.

Basically my proxy users table is (and the row the error is referring to is row 8 i.e. when A33369 tries to act-as K2824):
(1) M18219     R15398     full
(2) M18219     V0539     restricted
(3) Administrator     M18219     full
(4) Administrator     A33369     full
(5) Administrator     R15398     full
(6) Administrator     K2824     full
(7) A33369     R15398     full
(8) A33369     K2824     full
(9) R15398      K2824     restricted
(10) R15398     V0539     full
(11) Administrator     V0539     full
(12) A33369     V0539     full

Act as Proxy option

Hi ALL,
i m using a "Act as Proxy" option in obiee.
i have configured it using following link
"http://debaatobiee.wordpress.com/2009/11/01/obiee-act-as-proxy-feature/"
but when i select "Act as" option from adminitrator setting then i get following error.
"This functionality has not been correctly configured by your administrator (Can't retrieve the list of target users).
The account entered does not exist or you do not have permission to view this account."
Pls help me to solve this issue.
Regards,
SAP
Edited by: SAP on Jul 6, 2010 4:07 AM

Hi
I hv started all sevices properly and i m nt using SSO.
but i tried it and i got some success. and still i hv a problem.
in my case proxy_table is:
PROXY_USER TARGET_USER ACCESS_TYP
proxyuser1 targetuser1 FULL
proxyuser2 targetuser2 restricted
proxyuser3 targetuser3 full
proxyuser1 targetuser4 restricted
when i login with proxyuser1 then i can see targetuser1,targetuser4.
when act as targetuser1 then proxyuser1 can see the dashboard created by targetuser1 but cant not edit it.
while ACCESS_TYP for targetuser1 is FULL.
Regards,
SAP

Proxy User In OBIEE

Hi Folks,
I was trying to Implement Proxy User Environment in my machine. I did all the corresponding steps Even though i am getting below errors
When i clicking on "Act As" tab under setting of Presentation Layer it rising below error
" This Functionality has not been Enabled by Yor Administrator"
even though i have given the ri8 permissions in "Manage Privilege" tab under settings--> Administration
Proxy ---> Act As Proxy --------------> Everyone, Presentation Server Administrators
Any help on this would be appreciated. Thanks in Advance
Cheers,
Siva Kumar Budagam

Hi Siva,
Did you try to give the priviliege to the user explicitly instead of the group?
Here is a link in how to configure, make sure that you followed all the steps
http://gerardnico.com/wiki/dat/obiee/actas
Regards
Adil
PS: Please don't forget to close the thread and assign points when your question is answered

Can't change user preferences when Acting As a user

I've configured the 'Act As' functionality so as an administrator (Proxy User) I can log in as another user. However when I attempt to change any of target user's preferences I get the following message :-
"Exception occurred when saving user preferences to the catalog access denied for user to path /users/[email protected]/_prefs/userprefsxmlstore"
Proxy Level is set at full for all users.
I've tried changing the permissions on the users folders via the Catalog manager but doesn't seem to make any difference.
Any help would be great!
Edited by: 876718 on 28-May-2012 03:56

Hi All,
You can check this topic on suppot.oracle.com
https://support.oracle.com/epmos/faces/ui/km/SearchDocDisplay.jspx?id=1474923.1&type=DOCUMENT&displayIndex=1&returnToSrId=&srnum=&org.apache.myfaces.trinidadinternal.webapp.AdfacesFilterImpl.IS_RETURNING=true&_adf.ctrl-state=sixc8by79_9

Proxy User Feature

Hi All,
Can Oracle9iAS Release 2 Portal handle proxy or designate user?
For example, PortalUserA wants to designate PortalUserB to do do some tasks inside the Portal for PortalUserA. PortalUserB will act as a proxy user for PortalUserA.
Has anyone able to implement this on Oracle Portal?
Thanks.
Regards,
Thanh

Can you pls be more clear. What are you trying to do/achieve?Within Oracle Portal, there can have a lot of portlets, which may have many different levels of privacy (e.g. confidential, internal used only, public, etc.).
Some managers have access to all of these portlets. When they are on vacation or are busy, they will designate others to help them do their work by accessing these portlets . For example, they can designate their administrators to work on non-sensitive portlets. On other times, they can designate their peers to work on confidential portlets.
By having the proxy/designate feature, it will allow the Portal users to accomplish their work done by others.
Does anyone know if Oracle Portal has this feature?
Thanks.
Regards,
Thanh

OSB db-adapter: how to pass a proxy user or something like this?

Hello, on OSB with a Oracle db-adapter, I'd like to do some database updates. Usually the db-adapter is set up with a technical database user.
But on database side, this way I don't know exactly which user has been updating my table because only the technical user will be inserted into "Created_by" Column
(select USER from dual ==> technical user).
Now I thougt about using Proxy Users. But there exists some other Problems:
- every proxy user has to be initially created in the database
- how can I pass proxy user and technical user from OSB to the database?
(using JCA, JNDI and JDBC Data Sources)
... on JDBC datasources I can only specify hard coded userid/password (--> technical user)
Any help would be appreciated. Maybe some good white papers or tutorial exists in the web, but I can't finde a good one.
Thanks
Best regards

You can pass in the adapter header property "jca.db.ProxyUserName". That way you can specify a user for each invoke.
I got confirmation that OSB supports setting these properties. The sample adapters-db-201-MovieImages on soasamples.samplecode.oracle.com > Adapters shows working with header properties but with Mediator.
Thanks
Steve

Proxy User - Forms 11.1.2 and Oracle Database (version 10.1.0.5) ??

Hi,
we are migrating from Forms 6i to 11.1.2. Our database version is very old (Enterprise Edition, version 10.1.0.5) because this is the latest version of the DB that Forms 6i runs, and we will migrating to 11g in phases. So 6i and 11g will co-exists for a while (accesing the same DB).
I am trying to use proxy users feature to login to database.
So I did this:
- I created a user PROXY_USR to be the proxy user:
SQL> create user PROXY_USR identified by PROXY_PASW;*
- I grant create session for the user:
SQL> grant create session to PROXY_USR;*
- I changed the application users (eg APPUSER01), to connect via proxy user:
SQL> alter user APPUSER01 grant connect through PROXY_USR;*
The comand in Forms module to login is:
+LOGON('PROXY_USR[APPUSER01]','PROXY_PASW@DB01');+*
The logon built is being performed and the connection being made, without erros.
But when I verify in what user the application is logged on, the result is not
what was expected:
I did the follwing PL/SQL inside Form module:
begin*
select user into v_user_DB from dual;*
MESSAGE('User Connected: '||v_user_DB,ACKNOWLEDGE);*
exception*
when others then*
MESSAGE('ERR: '||SQLERRM,ACKNOWLEDGE);*
end;*
The result from this select, is PROXY_USR and not APPUSER01 (that would be the correct):
*>>Result: "User Connected: PROXY_USR"*
Some more commands that were also performed inside Forms module:
begin+
select sys_context('userenv','current_user') v_current_usr from dual+
MESSAGE('Current User: '||v_current_usr,ACKNOWLEDGE);+
exception+
when others then+
MESSAGE('ERR: '||SQLERRM,ACKNOWLEDGE);+
*>>Result: "User Connected: PROXY_USR"*
begin+
select sys_context('userenv','proxy_user') v_proxy_user from dual;+
MESSAGE('Current User: '||v_proxy_user,ACKNOWLEDGE);+
exception+
when others then+
MESSAGE('ERR: '||SQLERRM,ACKNOWLEDGE);+
*>>Result: "Proxy User: "*
OBS: when a connect via SQL*Plus, in a 11g database (Express), and run the commands above, the results are OK. The
APPUSER01 is returned.
Any ideas ?? I will open a SR in Metalink, but I think they will first request a database upgrade,
which is not feasible for us at the moment ...
Thanks in Advance.
Franco

Unfortunately besides trying on a certified combination (maybe use the Developer Database VM and import the required schemas for trial) and going through the documentation at http://docs.oracle.com/cd/E24269_01/doc.11120/e24477/sso.htm I can't offer more. I don't have a 10gR1 database anymore and also I don't have OID to play with.
cheers

How do i set the proxy user in FF 3.6.13, this entry was existing earlier its gone now. using IE with entries in user account pwds works while FF doesn't.

How do i set the proxy user in FF 3.6.13.
previous versions had an entry for proxy user.
its gone now.
using IE with entries in user account pwds works while FF doesn't.
too bad have to change back to IE :-(

You can find the connection settings in Tools > Options > Advanced : Network : Connection
See "Firefox connection settings":
*[[Firefox cannot load websites but other programs can]]

Error when connect proxy user

i using ODP.NET connect to oracle database with proxy user, when i connect with a password not correct then i can't again connect with password correct after.
string[] cs = new string[2];
cs[0] = "Data Source=orcl;User Id=user1;Password=pass1;"+
"Proxy User Id=proxyuser;Proxy Password=pass;Pooling=true";
cs[1] = "Data Source=orcl;User Id=user1;Password=pass2;"+
"Proxy User Id=proxyuser;Proxy Password=pass;Pooling=true";
using (OracleConnection oc = new OracleConnection(cs[0]))
try
oc.Open();
catch (OracleException ex)
oc.Close();
using (OracleConnection oc = new OracleConnection(cs[1]))
try
oc.Open();
catch (OracleException ex)
oc.Close();
using (OracleConnection oc = new OracleConnection(cs[0]))
try
oc.Open();
catch (OracleException ex)
oc.Close();
Part 3: always wrong. it can't open
Please help me.
Message was edited by:
bvnhan

Hi,
I tested the following and got the expected results (doenst connect). I'm using 10.2.0.2 ODP, and got the same behavior pointing to 9206 db and 10.2.0.2 db.
I did a quick check and dont see any obvious related bug fixes in ODP, but if you're not using 10.2.0.2 ODP, you might want to try that.
Here's exactly what I tested.
Cheers
Greg
CODE
==========================
drop user proxyacct cascade;
drop user puser1 cascade;
create user proxyacct identified by pass;
create user puser1 identified by pass;
grant connect, resource to proxyacct;
grant create session to puser1;
ALTER USER puser1 GRANT CONNECT THROUGH proxyacct AUTHENTICATED USING PASSWORD;
using System;
using System.Data;
using Oracle.DataAccess.Client;
public class testproxy
public static void Main()
string goodstring ="data source=orcl;user id=puser1;password=pass;proxy user id=proxyacct;proxy password=pass";
string badstring = "data source=orcl;user id=puser1;password=;proxy user id=proxyacct;proxy password=pass";
using (OracleConnection oc = new OracleConnection(goodstring))
try
     oc.Open();
     Console.WriteLine("con1 connected");
catch (OracleException ex)
     Console.WriteLine("exception caught1 " + ex.Message);
using (OracleConnection oc = new OracleConnection(badstring))
try
     oc.Open();
     Console.WriteLine("con2 connected");
catch (OracleException ex)
     Console.WriteLine("exception caught2 " + ex.Message);
     // still need this to work around the problem
     // of next connection getting the same error this one did
     OracleConnection.ClearPool(oc);
using (OracleConnection oc = new OracleConnection(goodstring))
try
     oc.Open();
     Console.WriteLine("con3 connected");
catch (OracleException ex)
     Console.WriteLine("exception caught3 " + ex.Message);
MY OUTPUT
===============================
con1 connected
exception caught2 ORA-28183: proper authentication not provided by proxy
con3 connected

A network error when i tested the connection of a proxy user

Good evening
I 'd created a 3 appliances Filer system . Filer 1.1.0.653
The Filr Apl is in DMZ and every ports are open between it and the 2 Windows boxes (AD and File Sharing)
Every thing seems well. I could inport AD users, create filr users, and work ...
But when i want to create a NetFolder server, impossible to pass the connection test
Name : Cn=Administrateur, cn=Users,dc=arcdom,dc=arcane-inf,dc=com (Administrateur because i'm French :=)
or
Name : Administrateur
or
Name = arcdom\Administrateur
Click on test connection => an network error occurs
I'd try with a "Filr" ADuser with same ACL as Administrateur, same ...
The Novell-FAMT is running. (I tried to restart it without succes)
Help .......
LP Irovetz

Originally Posted by LPIROVETZ
Good evening
I 'd created a 3 appliances Filer system . Filer 1.1.0.653
The Filr Apl is in DMZ and every ports are open between it and the 2 Windows boxes (AD and File Sharing)
Every thing seems well. I could inport AD users, create filr users, and work ...
But when i want to create a NetFolder server, impossible to pass the connection test
Name : Cn=Administrateur, cn=Users,dc=arcdom,dc=arcane-inf,dc=com (Administrateur because i'm French :=)
or
Name : Administrateur
or
Name = arcdom\Administrateur
Click on test connection => an network error occurs
I'd try with a "Filr" ADuser with same ACL as Administrateur, same ...
The Novell-FAMT is running. (I tried to restart it without succes)
Help .......
LP Irovetz
From the docu:
Click the Authentication tab, then specify the following information:
Proxy name and password: Specify the fully qualified, comma-delimited name and password for the proxy user used to access the OES, NetWare or Windows, server. (You can use the Browse icon next to the Proxy field to browse the LDAP directory for the proxy user that you want to use.)
IMPORTANT:Before you specify a proxy name and password for the Net Folder server, ensure that you review the information in Section 8.1.2, Planning the Net Folder Server Proxy User.
Test connection: Click this button to ensure that the path is accurate and that the credentials are valid, then click OK after the test succeeds.
Sometimes proxy users with the incorrect context pass this test. Ensure that the context for your proxy user is correct, as described in Expected Name Format for File Servers.
Authentication type: Select the authentication service for the file server that you are connecting to. This option corresponds with the Server type setting that you selected on the Configuration tab. If you selected OES or NetWare as the server type, only Novell NMAS is available as the authentication type. If you selected Windows as the server type, you can select either Kerberos, NTLM, or Auto detect as the authentication type. (Auto detect means that it tries authenticating with Kerberos first, and if that fails, authenticates with NTLM.)
NOTE:If Kerberos is selected as the authentication type, ensure that the DNS name server is able to resolve DNS queries for the Active Directory domains.
If the Kerberos port (port 88) is disabled on the Windows server, select NTLM as the authentication type.
So you should use comma delimited name for the username... Did you also try browsing for the user using the icon there?
Does is log any specific error message in /opt/novell/filr/apache-tomcat/logs/appserver.log file when you try to test the connection?
Thomas

How to pass Proxy user dynamically in Toplink proxy authentication?

Hi,
I'm using Toplink Proxy Authentication with my ADF JSF application and want to pass the Proxy user dynamically to the preLogin(..) method of mySessionEventListener (Currently proxy user is hard coded).
This is to make my application user as the Proxy user.
I have tried to do this in two ways:
1) In my Login screen Backing Bean, I retrieve the session as
session = sessionFactory.acquireSession(); and set the application user in it as
session.setProperty("proxyUser1", inputText1.getValue());
But,
session.getProperty("proxyUser1") returns null in the preLogin(..) method
2) I add a loginUser property to the mySessionEventListener class and create a constructor to set it.
Then I call the constructor from my Login Backing Bean as
mySessionEventListener eventMgr = new mySessionEventListener(<proxy_user>);
session.getEventManager().addListener( eventMgr );
But, the loginUser property seeems to be transient and does not retain value when retrieved in preLogin(..) method.
Please indicate if anything is wrong. Also, is there any other way to get this done?
Thanks in advance.
Vikas

Hi Vikas,
Probably your sessions.xml defines a ServerSession, and acquireSession method returns a ClientSession. ServerSession is the object that connects to the database, it may have any number of ClientSessions associated with it - all of them use connections provided by ServerSession's connection pools.
So if you'd like to alter the serverSession before login, acquireSession is too late - it triggers login of the ServerSession and returns a ClientSession.
To get the ServerSession before login:
// the first param indicates that the session shouldn't be connected
Session serverSession = sessionFactory.getSharedSession(false, false);Now you have a serverSession on which login hasn't been called yet.
You can set the property into the session, or directly into its login.
In fact you may choose to do whatever you wanted to do in preLogin right here - in this case no preLogin event would be required of course.
Finally to get a ClientSession, call the same api did:
// the first param indicates that the session shouldn't be connected
Session clientSession = sessionFactory.getSession();On the first such call the ServerSession will be connected.
Note that because all the ClientSessions will connect through the connections provided by the same ServerSession they will all use proxyUser1.
If you are interested in using different proxy users for different ClientSessions http://www.oracle.com/technology/products/ias/toplink/doc/1013/main/_html/dblgcfg008.htm#BABDABCF lists several scenarios for that.
Andrei

ADF 11g - Proxy User

Hi,
We have configured our APP with a datasource but have a problem...
A lot of our database packages / triggers make use of the explicit 'user' which means that although our app is authenticating
as "tester" (against an LDAP V3 Repository - OID) , our triggers update with the underlying data source connection ('bto') rather than our authenticated user.
In 10.1.3.3 we had to use a custom proxy authentication class, which only worked with 1 app deployed in a container and required JDBC credentials
Does anyone know of any way to do this in 11g in a better fashion?
Any help is appreciated
Thanks

In 10.1.3, the way to use a Database Proxy User was to override the prepareSession() method of your application module to do something like this:
protected void prepareSession(Session session) {
    Statement st = null;
    try {
      st = getDBTransaction().createPreparedStatement("rollback",0);
      OracleConnection oConn = (OracleConnection)st.getConnection();
      Properties props = new Properties();
      props.put("PROXY_USER_NAME",   ___ActualUserName___ );
      oConn.openProxySession(OracleConnection.PROXYTYPE_USER_NAME,props);
    catch (SQLException s) {
      // ignore
    finally {
      if (st != null) {
        try {
          st.close();
        catch (SQLException s) { /* ignore */ }
    super.prepareSession(session);
}

Proxy users - oracle 9.2 - accessing via sql plus

I may be totally off track here, but here is what I want
to do.
I have 2 schema's (schema A and schema B).
schema A has multiple objects (tables) within it.
I want to allow another user, schema B to access these objects. Can I use the Proxy User settings to do this? By going in and allowing Schema B to proxy for this user (shcema a). "ALTER user schemaA GRANT CONNECT THROUGH schemaB"
I try this and then go into sqlplus and log in as
schemaB, but I can't see any of schemaA's objects.
Am I missing somthing here?
In the past I have always assigned the proper grants to a role and assinged them to schema B as needed which works fine. However, it seemed to me if the proxy user worked the way I thought it would you could do things for an entire schema at one time instead of object by object using the grants.
Thanks
John

The command "oemapp.bat" does not yield any output at the command line. Here comes a session log:
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
D:\oracle\ora92\bin>oemapp.bat
D:\oracle\ora92\bin>sqlplusw
Zugriff verweigert (= access denied)
D:\oracle\ora92\bin>dir oem*
Volume in Laufwerk D: hat keine Bezeichnung.
Volumeseriennummer: A0D5-BD0B
Verzeichnis von D:\oracle\ora92\bin
17.10.2006 11:15 4.971 oemapp.bat
26.04.2002 16:29 24.848 oemautil.exe
26.04.2002 16:29 20.752 oemevent.exe
3 Datei(en), 50.571 Bytes
0 Verzeichnis(se), 18.221.547.520 Bytes frei
D:\oracle\ora92\bin>dir sqlplus*
Volume in Laufwerk D: hat keine Bezeichnung.
Volumeseriennummer: A0D5-BD0B
Verzeichnis von D:\oracle\ora92\bin
27.04.2002 00:07 459.024 sqlplus.exe
26.04.2002 23:58 700.416 sqlplusw.exe
2 Datei(en), 1.159.440 Bytes
0 Verzeichnis(se), 18.221.547.520 Bytes frei
<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
I'm glad about your immediate response!
Message was edited by:
user542934

Using Proxy User Authentication in Sql Developer

Hi!
Is it possible to use proxy user authentication in SQL Developer? I'm thinking that if I'm clever enough, I can craft a custom jdbc URL that will allow my users to proxy authenticate into my Oracle 10gR2 database while using SQL Developer.
Unfortunately, I'm not feeling all that clever. ;)
Can anybody help me out here? Is it even in the realm of possibility?
Thanks!
Kevin Ferlazzo
DBA
VA Department of Juvenile Justice

I found the possibility that proxy authentication of both accounts can be enforced:
SQL> alter user appuser grant connect through personaluser AUTHENTICATION REQUIRED;
I guess that this is the motivation for implementing the 2-session proxy connection method in SQL Developer.
Regards,
Martin

Act As Proxy User

Similar Messages

Maybe you are looking for