Any option to set 'Password minimum age' for EBS user
Hi,
Do we have any option in Oracle apps to set the password minimum age? (eg. a password once reset successfully cannot be changed again within a 24 hour window)
Regards,
Vijay
Hi;
Please check below and see its helpful:
Subject: Unable to Change Password when Password Policy Set to Min Age 1 and Next Logon Also Set . Doc ID: 752040.1
Re: Password policy in Oracle E-Business suite - Financials
http://oraclever.blogspot.com/2009/05/password-policies-in-oracle-e-business.html
Regard
Helios
Similar Messages
-
How to set password never expires for a user?
Hello,
I can't seem to find in the Administrative Console a place to enable "Password never expires".
I know that if I edit the USR_PWD_NEVER_EXPIRES field in the OIM DB and put the value '1' it will work.
However, I'd like to know how and if it is possible to activate this option on a user via OIM.
Thanks in advance,
TomicHi,
Now I got it.Try this one.
In FormMetaData.xml you will find.
<Attribute name="-13" variantType="String" dataLength="1" map="Users.Password Never Expires" />
Modify it to.
<Attribute name="-13" variantType="String" dataLength="1" displayComponentType="CheckBox" map="Users.Password Never Expires" />
Add this in.
<Form name="3">
<AttributeReference editable="true" optional="true">-13</AttributeReference>
I never need this but I hope above will work.
About disabling the resource I have few suggestion for you.
1.You can have your password policy consistent across the resources you are integrating in OIM.
2.Write an entity adapter so that when ever password is expired then can disable all provisioned user.
3.Alternatively you can also write a schedule task which will check for password expire date and disable the resource.
4.You will also need to enable the resources when password is changed.You can catch change password event through event handler or entity adapter.
Please let me know if you have fllow up questions.
Regards
Nitesh -
I have two facebook accounts availible when I click the facebook icon in aperture it tries to log into the disabled account. It doesn't give me any option to continue making an album for the enabled account. Why?
I suppose I could delete it, but the whole point of multiple accounts is so I can post to either. One is mine, one is my wife's. If it is not enabled why would I need to log into it to post to my own account. The system has no problem associating existing albums with my account, I is only failing to allow me to choose only my account to create an new one. It is clearly designed to handle multiple accounts, but seems to have a bug directing it to ask for the password for a disabled account instead of allowing selection of and posting to the enabled one.
-
Setting a minimum height for a dyanmic subform
I am creating a form that is reading in a set of instructions from XML. I would like to limit the instructions to 2 per page. Is there a way I can set a minimum height for the subform, so it will at least be 1/2 the page?
Hi,
If that's the case, then you could size each field in the Design view so that each field takes up have a page. Then in the Layout tab select "expand to fit height" (should also have allowed multiple lines in the Object / Field tab).
Then when you import the XML, short instructions will appear two per page, while longer ones will flow onto following pages. If the fields are set to half a page then you should not get more than 2 on a page.
Hope that is of help,
Niall -
Is there any way to set password to protect the location service, to keep GPS open? so, the theft cannot turn it off so easy, because once the location service is turn off, all GPS track is useless...
That is what Activation Lock of iOS 7 does
In addition, it renders the iPhone totally useless to anyone who doesn't know your Apple ID and password.
Allan -
Hi i use iphone 4 with iso 6.1.3!! Am not getting an option to register my phone number in imsg!! Am just getting an option to set my email address for sending and receiving the imsgs!! How do i register my phone number??
Hello Nikkii,
Thanks for using Apple Support Communities.
For more information on this, take a look at:
iOS: Troubleshooting FaceTime and iMessage activation
http://support.apple.com/kb/ts4268
Troubleshooting telephone-number activation (iPhone only)
After each step, toggle FaceTime and iMessage off and then on in Settings > Messages and Settings > FaceTime.
Update to the latest version of iOS.
Ensure that your iPhone is set to the correct time zone. Tap Settings > General > Date & Time.
Note: If Set Automatically is on but the incorrect time zone is displayed, turn Set Automatically off and then choose the correct time zone, date, and time. Then turn Set Automatically on again.
Ensure that FaceTime has not been restricted: Settings > General > Restrictions > FaceTime.
Verify that you can send SMS messages. You need a valid SMS messaging plan to activate FaceTime.
Contact your carrier to verify that there are no restrictions or blocks on text messages. Blocks on text messaging will prevent iMessage and FaceTime registration.
If you are unable to activate iMessage or FaceTime on a device after remote wiping it, wait at least 24 hours and try again.
If "Waiting for Activation" is displayed, leave FaceTime and iMessage enabled for 24 hours. Toggling FaceTime or iMessage off and on will cause the registration process to start over.
Best of luck,
Mario -
Please recommend any app to set up heath data for iPhone 6+
please recommend any app to set up heath data for iPhone 6+
See "Interactive Notifications ..." here:
http://www.apple.com/ios/whats-new/design/ -
How to set password expiration for EBS users
how to set password expiration for EBS users .
Regards .Please follow below steps:-
This is available starting in RUP4.
The script to expire all passwords in the fnd_user table is $FND_TOP/patch/115/sql/AFCPEXPIRE.sql.
It can be executed from SQL*Plus or as a Concurrent Program: sqlplus -s APPS/ @AFCPEXPIRE.sql
or Submit concurrent request: CP SQL*Plus Expire FND_USER Passwords
This script sets the fnd_user.password_date to null for all users which causes all user passwords to expire.The user will need to create a new password upon the next login.
Thanks,
JD -
Set a default layout for all users via DIAPI
Hello everyone,
I am attempting to set a default report for all users/business partners using the DI-API.
I can accomplish this in the B1 application via Tools> Layout Designer...>Set as Default
If there are entries in the RDFL table for this layout, I am prompted to delete these entries and set this layout as the default for all users/BP's
Based on the SDK Documentation, the following code should accomplish the same thing via the DI-API
(stripped down for clarity)
Dim oDefaultReportParams As DefaultReportParams
oDefaultReportParams = oLayoutService.GetDataInterface(ReportLayoutsServiceDataInterfaces.rlsdiDefaultReportParams)
oDefaultReportParams.LayoutCode = sMyLayoutCode
oDefaultReportParams.ReportCode = sMyReportCode
Me.oLayoutService.SetDefaultReport(oDefaultReportParams)
Code executes fine, but it doesn't have the expected impact on settings. The above code adds an entry to the RDFL table rather than changing the DfltReport field in the RTYP table like I expected, so instead of setting the default report globally for all bps/users, its adding an entry to the RDFL table to set the value for a specific user/bp
I experimented by including and setting the following properties to every combination I could think of with the same results
oDefaultReportParams.UserID = 'tried 1, 0, -1
oDefaultReportParams.CardCode = 'tried "", "0", "-1"
Am I misunderstanding the API, or using the wrong objects/calls...? If all else fails I could accomplish this via the UI-API instead, but the application was intended to be a stand alone app that didn't rely on SAP B1 application running, so any help or suggestions would be much appreciated.
Thanks!Hi,
Please repost at SDK forum to get quick response. Close this thread here with helpful answer.
Thanks. -
How to set a welcome message for a user when he is login
in my server i am creatin a user "john" in solaris10 box when ever he logins in to the server he should get a message like "welcome john" what is the option to set the message ....
how can i set a welcome message for a user in solaris
please guide me the process how i can do
Thanks in AdvanceTHANK YOU FOR YOUR REPLY
i have checked it out in /etc/motd
its working fine but the message is coming for every user when they login
i want message lilke
if john is looged in
than message like "welcome john"
can u please tell me the procedure where to change in /etc/profile and /etc/.login -
Recommendation for setting up Data Guard for EBS R12 12.1.3
Hello Experts,
I would like to get some experts opinion and recommendation on setting up Data GUARD for EBS R12.1.3 running on Linux based systems.
Firstly I would wanna let you all know that I am just geek in this subject matter so do excuse me for any mistakes.
While we are planning on setting up Data Gurad fro R12 what are the best practices to consider ?.
We have 2 node rac enabled database and would wanna have non-rac based physical standby, based on this I believe that having db tier on remote or standby site is enough ?
if db node is enough for standby location what are things to be done when a fail over / switch over / role transitioned to standby for the app node from primary site to point db on the
standby location or do we have to have both apps and db tier @ stand by location
--However having a apps tier/node at standby will be of no use as we are planing to run db on mounstate meaning not a active data guard setup.
Please do reply with your recommendation/suggestions/pointers
Thanks in Advance.Service Provider Access resulted in exception 'oracle.apps.fnd.soa.util.SOAException: SystemError: Error while sending message to server. http://ec2-107-22-78-224.compute-1.amazonaws.com:8000/webservices/SOAProvider/EbizAuth?Generate=1132&soa_ticket=Tu2z7GYoWPwq-VdgimKRFg..' when attempting to perform 'GENERATE'. Please view Service Provider logs for more details
Can you find any details about the error in the log?
I have looked at the following Note as well:
Error using the Generate WSDL Button in Oracle E-Business Suite Integrated Soa Gateway Release 12.1.1 [ID 1090946.1]Did the doc help?
Any one know what may be causing this issue? Do we have to do additional setup for SOA gateway after the standard install of the OVM? I tried to follow the steps in the note above but I do not see any entry for "<jdbc_url oa_var="s_apps_jdbc_connect_descriptor"/>" in the file data-sources.xml.
Anyone have any ideas?Have you reviewed these docs?
Oracle E-Business Suite Integrated SOA Gateway Troubleshooting Guide, Release 12 [ID 726414.1]
Oracle E-Business Suite Integrated SOA Gateway 12.1.1 Consolidated One-Off [ID 815196.1]
Thanks,
Hussein -
Edit password rules only for BCC user
Hi all,
our customer has requested some changes on the password rules only for BCC users.
So, i should change the follow component:
/atg/userprofiling/passwordchecker/PasswordMinLengthRule
/atg/userprofiling/passwordchecker/PasswordMixedCaseRule
/atg/userprofiling/passwordchecker/PasswordMustIncludeNumberRule
/atg/userprofiling/passwordchecker/PasswordMustIncludeSymbolRule
/atg/userprofiling/passwordchecker/InternalPasswordMustNotIncludeLogin
/atg/userprofiling/passwordchecker/InternalPasswordNotInPreviousNRule
But the component password rules above, should be changed only for the BCC users. How can i do this?
Edited by: user7618461 on 30-set-2011 3.45Hi Christoph,
in your Identity Store, you can use LDAP Server as authentification method (Tab Workflow). You need an attribute which contains the DN of the users and fill out port and host of your directory. That means that the PW can remain in the AD. Just try it, haven't used this possibility yet. You could also use Kerberos via AD instead. These scenarios don't cover your requirement that some might be without an AD account (which is not that common).
Otherwise it's getting difficult again to get all passwords at once from your AD. You have to decrypt the passwords without a key... AD could store a lower encrypted password for NT4, which makes this a bit easier, but still "unesthetic". You get these hashes via SSL and not with the common initial load jobs.
The PW-Hook gets the passwords before they are set. That's why you could store and ecrypt the new passwords in the Identity Store and wait for 1 or 2 months till everyone had to change their password (if you use this policy).
Best regards,
Nils
Edited by: Nils Sibold on Jul 18, 2008 3:10 PM -
HI,
We are running Exchange 2010 and are migrating users from 2003 to 2010 with no problems. The client has asked me to set OWA font to LuidaSans which I can do for individuals with no problems. However, when I try and run the following command
Get-Mailbox -Resultsize Unlimited | Set-MailboxMessageConfiguration -LucidaSans but then got a message to state
"property composefontname can't be set on this object becuase it requires the object to have version 0.1 <8.0.535.0> or later. The object's currant version is 0.0 <6.5.6500.0>"
What object is this reffered to? Can anyone help please?
Thanks
PaulHi,
To set a default font for all users, you can use this command: -
Get-Mailbox | Set-MailboxMessageConfiguration -DefaultFontName "Trebuchet"
You can use any font style in place of “Trebuchet”.
I hope this information will be helpful for you.
Thanks and regards
Ashish@S
Ashish@V -
How can I set up my Mac for two users to share photos, music etc
How can I set up my Mac for two users to share photos, music etc?
On the Mac with the libraries you want to share:
iTunes Preferences click on the Sharing tab and put a tick in 'Share by library on local network'.
iPhoto Preferences click on Sharing and put a tick against 'Share my photos'.
When launching the same apps on other Macs on the network the libraries should be available, listed on the left. -
Setting Application Context Attributes for Enterprise Users Based on Roles
Hello,
We have an Oracle 11g database with a table containing data from multiple sites (a SiteID field identifies the site for a record). Since application users can have access to different subsets of sites, we would like to use Oracle's Virtual Private Database feature to enforce row-level security on the table.
I did a successful proof-of-concept with database users. I created a role for each site (example: USER_SITE_A, USER_SITE_B, ...), and then assigned the appropriate site roles to each database user. I then created a package (run via a logon trigger) which set application context attributes for each site. If the current database user has been assigned a role for a given site, then the corresponding attribute named "SITE_PRIVILEGE_SiteID" is set to 'Y'... otherwise, it is set to 'N'. Here is the code which worked to set application context attributes for database users:
-- For each record in my RoleSitePrivileges table, set
-- an attribute named 'SITE_PRIVILEGE_<SiteID>'.
-- If the current user has been assigned a role matching
-- the value in the 'RoleName' field, set the corresponding
-- attribute to 'Y'... otherwise, set it to 'N'.
FOR iPrivRec IN (SELECT RoleName, SiteID
FROM RoleSitePrivileges
ORDER BY SiteID)
LOOP
SELECT COUNT(*)
INTO roleExists
FROM dba_role_privs
WHERE granted_role = UPPER(iPrivRec.RoleName)
AND grantee = USER;
IF roleExists > 0 THEN
DBMS_SESSION.set_context(
namespace => 'my_ctx',
attribute => 'SITE_PRIVILEGE_' || iPrivRec.SiteID,
value => 'Y');
ELSE
DBMS_SESSION.set_context(
namespace => 'my_ctx',
attribute => 'SITE_PRIVILEGE_' || iPrivRec.SiteID,
value => 'N');
END IF;
END LOOP;To finish things off, I created a security policy function for the table which returns the following:
RETURN 'SiteID IN (SELECT TO_NUMBER(SUBSTR(attribute, 15))
FROM session_context
WHERE attribute LIKE ''SITE_PRIVILEGE_%''
AND value = ''Y'')';This setup worked great for database users. I am now working to do a comparable proof-of-concept for enterprise users created in Oracle Internet Directory (OiD). I have Enterprise User Security (EUS) up and running with OiD, global roles created in the database, enterprise roles defined in EUS with global role assignments, and enterprise roles assigned to OiD users. The enterprise users are able to successfully login to the database, and I can see the appropriate global role assignments when I query the session_roles view.
I tried using the same application context package, logon trigger, and security policy function with the enterprise users that I had used with the database users. Unfortunately, I found that the application context attributes are not being set correctly. As you can see from the code above, the applicaiton context package was referencing the dba_role_privs view. Apparently, although this view is populated for database users, it is not populated for enterprise users.
I tried changing the application context package to use invoker's rights and to query the session_roles view instead of the dba_role_privs view. Although this package sets the attributes correctly when called manually, it does not work when called from the logon trigger. That was an oops on my part, as I didn't realize initially that a PL/SQL procedure cannot be called with invoker's rights from a trigger.
So, I am now wondering, is there another view that I could use in code called from a logon trigger to access the roles assigned to the enterprise user ? If not, is there a better way for me to approach this problem? From a maintenance standpoint, I like the idea of controlling site access from the LDAP directory service via role assignments. But, I am open to other ideas as well.
Thank you!Hello,
We have an Oracle 11g database with a table containing data from multiple sites (a SiteID field identifies the site for a record). Since application users can have access to different subsets of sites, we would like to use Oracle's Virtual Private Database feature to enforce row-level security on the table.
I did a successful proof-of-concept with database users. I created a role for each site (example: USER_SITE_A, USER_SITE_B, ...), and then assigned the appropriate site roles to each database user. I then created a package (run via a logon trigger) which set application context attributes for each site. If the current database user has been assigned a role for a given site, then the corresponding attribute named "SITE_PRIVILEGE_SiteID" is set to 'Y'... otherwise, it is set to 'N'. Here is the code which worked to set application context attributes for database users:
-- For each record in my RoleSitePrivileges table, set
-- an attribute named 'SITE_PRIVILEGE_<SiteID>'.
-- If the current user has been assigned a role matching
-- the value in the 'RoleName' field, set the corresponding
-- attribute to 'Y'... otherwise, set it to 'N'.
FOR iPrivRec IN (SELECT RoleName, SiteID
FROM RoleSitePrivileges
ORDER BY SiteID)
LOOP
SELECT COUNT(*)
INTO roleExists
FROM dba_role_privs
WHERE granted_role = UPPER(iPrivRec.RoleName)
AND grantee = USER;
IF roleExists > 0 THEN
DBMS_SESSION.set_context(
namespace => 'my_ctx',
attribute => 'SITE_PRIVILEGE_' || iPrivRec.SiteID,
value => 'Y');
ELSE
DBMS_SESSION.set_context(
namespace => 'my_ctx',
attribute => 'SITE_PRIVILEGE_' || iPrivRec.SiteID,
value => 'N');
END IF;
END LOOP;To finish things off, I created a security policy function for the table which returns the following:
RETURN 'SiteID IN (SELECT TO_NUMBER(SUBSTR(attribute, 15))
FROM session_context
WHERE attribute LIKE ''SITE_PRIVILEGE_%''
AND value = ''Y'')';This setup worked great for database users. I am now working to do a comparable proof-of-concept for enterprise users created in Oracle Internet Directory (OiD). I have Enterprise User Security (EUS) up and running with OiD, global roles created in the database, enterprise roles defined in EUS with global role assignments, and enterprise roles assigned to OiD users. The enterprise users are able to successfully login to the database, and I can see the appropriate global role assignments when I query the session_roles view.
I tried using the same application context package, logon trigger, and security policy function with the enterprise users that I had used with the database users. Unfortunately, I found that the application context attributes are not being set correctly. As you can see from the code above, the applicaiton context package was referencing the dba_role_privs view. Apparently, although this view is populated for database users, it is not populated for enterprise users.
I tried changing the application context package to use invoker's rights and to query the session_roles view instead of the dba_role_privs view. Although this package sets the attributes correctly when called manually, it does not work when called from the logon trigger. That was an oops on my part, as I didn't realize initially that a PL/SQL procedure cannot be called with invoker's rights from a trigger.
So, I am now wondering, is there another view that I could use in code called from a logon trigger to access the roles assigned to the enterprise user ? If not, is there a better way for me to approach this problem? From a maintenance standpoint, I like the idea of controlling site access from the LDAP directory service via role assignments. But, I am open to other ideas as well.
Thank you!
Maybe you are looking for
-
Dear All can any one give the list for standard reports available for day book regards sree
-
Hi Experts, I have one issue in PO tax pricing is that. I have created one TAX code and maintained Rates for Service tax Condtion types as well as VAT condition type JIPL. When I created PO with this TAX code only the service tax rates are being show
-
Problem with retrieving a value from the import parameter of a method
Hi Friends, I have a problem accessing the field. I have a import paramter in the method of my Z class. The import paramter is of type ANY. In my method I get the value of this import paramter as . In this I have a field Catalog Id which is a z field
-
Folio Builder panel missing in InDesign CC
I have installed InDesign via Creative Cloud, and when I go to the folio builder, no dialog box appears. I was looking for the presence of the DPSGraphics plug-in "digital publishing" plug-in and it also cannot be located. Do i have to run the DPS up
-
IMessage and FaceTime saying "waiting for activation.." I've tried many times and it still says "can't activate check your network and try again later" please help.