Auditing oracle applications

Dear all,
We have r12.0.4 installed on solaris..
Now the management is asking to audit all the financial users, basically they want
to know the user login ,log0ut, transactions he/she did, daily activities.
Told them that this will be heavy on the systems..need some additional
points about auditing ...is the above achieveable through auditing ?
Kai

Kai,
It is not feasible to enable auditing on all applications users and all transactions as this would have a big impact on the system performance.
Enabling auditing on the application users can be achieved by setting "Sign-On:Audit Level" profile option.
Note: 395849.1 - How do you audit an Oracle Applications' user?
https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=395849.1
Note: 436316.1 - Auditing: How Do I Audit Responsibilities and Data?
https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=436316.1
For data auditing, it is recommended you enable it on appropriate tables so you will not have any measurable performance impact.
Note: 60828.1 - Overview of Oracle Applications AuditTrails
https://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=60828.1
Note: 105624.1 - Troubleshooting (Audit Trail)
https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=105624.1
You may also review:
Note: 171830.1 - What is the Potential Impact on Performance When Implementing the Profile Option Signon Audit Users?
https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=171830.1
Note: 580281.1 - How Many Columns Of A Table Can Be Made Audit Enabled ?
https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=580281.1
E Business Suit Health/Audit?
E Business Suit Health/Audit?
Guide to Auditing in Oracle Applications
http://www.integrigy.com/security-resources/whitepapers/Integrigy_Oracle_11i_Auditing.pdf
Regards,
Hussein

Similar Messages

Warehousing Historical Oracle Application Data

We are considering using the Oracle Data Warehousing to store historical data from multiple older 10.7 Oracle Application instances and well as several other vendor systems. The Oracle instances only have G/L, AP or G/L, AP, Purchasing and Inventory applications. We would then use SQL-Plus or PL SQL to extract data, report on data for historical reporting or extracting data for audit purposes. Are there pre-defined processes to copy whole schema from Oracle application databases or would one need to define the process and how much time would be involved to do that? I am trying to decide if this is the best tool to use for the archiving of multiple Oracle instances for historical access.
Thanks for your input.

is there any specific scenarios to be covered or all data is to be migrated blindly. If so, then take a dump of all the data and put in gl_interface for the upload.

ORACLE APPLICATIONS AUDITTRAILS에 대한 이해

제품 : AOL
작성날짜 : 2003-11-24
ORACLE APPLICATIONS AUDITTRAILS에 대한 이해
========================================
PURPOSE
I. AuditTrail은 무엇인가?
II. AuditTrails 을 설정하는 방법
III. AuditTrail Shadow Tables, Triggers, Procedures, and Views
IV. AuditTrail 사용을 위한 요구사항 및 제약사항
V. AuditTrails 을 해제시키는 법
Explanation
I. AuditTrail은 무엇인가?
AuditTrail 은 데이타의 변화에 대한 히스토리를 가진다.
주로 아래와 같이 3가지 부분에 대한 정보를 가진다.
o 무엇이 변했는지
o 누가 바꾸었는지
o 언제 자료가 바뀌었는지
오라클 폼상에서 자료를 수정한 경우, 로그한 유저정보와 변경한
데이타베이스 테이블상의 정보를 저장한다.
II. AuditTrails 을 설정하는 방법
a.) Define Audit Installations
Define Audit Installations Form에서 정의한다.
b.) Define Audit Groups
Define Audit Groups Form 에서 Audit을 할 테이블과 칼럼정보를
정한다.
c.) Audit Trail Update Tables Report을 실행하여 Audit이
동작되도록 한다.
III. AuditTrail Shadow Tables, Triggers, Procedures, and Views
a.) Shadow Tables
Original Table명의 앞에서 26자리까지의 문자와 "_A"로
생긴다. ( 예를 들어 FA_BOOKS => FA_BOOKS_A )
o AUDIT_USER_NAME - Applications User Id
( OPERATIONS )
o AUDIT_TIMESTAMP - 발생시간
o AUDIT_TRANSACTION_TYPE
I - Insert
U - Update
D - Delete
L - Last
C - Current
o AUDIT_TRUE_NULLS - NULL에서 값이 바뀐 칼럼리스트
o PRIMARY KEY
b.) Auditing Triggers and Procedures
o Audit trigger 이름은 Original Table의 앞 26자리문자에
"_AI"/"_AU"/"_AD"가 붙는다 ( I/U/D 는 Insert/Update/
Delete를 의미한다. )
o Procedure trigger이름은 Original Table의 앞 26자리문자에
"_AIP"/"_AUP"/"_ADP"가 붙는다( I/U/D 는 Insert/Update/
Delete를 의미한다. )
c.) Views
o View 이름은 Original Table의 앞 26자리문자에
"_AC#"/"_AV#" ( C/V 는 View의 성격을 의미한다.)
o Each view allows slightly different access to the data.
_AC로 끝나는 뷰는 특정시간의 해당레코드의 값을 보여주고,
_AV로 끝나는 뷰는 언제 값이 변했는지에 대한 정보를
보여준다.
IV. AuditTrail 사용을 위한 요구사항 및 제약사항
o 한 테이블당 최대 240칼럼.
o LONG/RAW/LONG RAW칼럼에 대해서 할 수 없다.
o primary key칼럼을 받드시 포함하여야한다.
o 한번 Audit에 포함된 칼럼은 뺄 수 없다.
V. AuditTrails 을 해제시키는 법
System Administrator권한에서 Define Audit Groups라는 폼에서
State라는 칼럼의 값을 아래 3가지 값중 하나로 선택하고
"Audit Trial Update Tables report"를 실행한다.
옵션들
1. Disable Prepare for Archive
Audit대상 테이블의 현재 값을 모두 Shadow Table로 카피하고,
Auditing trigger들을 중지시킨다.
2. Disable Interrupt Audit
Audit대상 테이블의 마지막 수정된 값을 Shadow Table에 넣도록
Trigger를 수정한다. 더이상 trigger가 실행되지않는다.
3. Disable Purge Table
모든 Auditing Trigger들을 중지시키고, showdow table의 데이타를
삭제한다.
Example
Reference Documents
Note:60828.1

DBA_USERS of Oracle Applications

Hi Team,
I have EBS 11.5.10.2 on DB 11.0.7.1.
How Can I identify the dba users on dba_users of oracle applications?
Thanks

935299 wrote:
Hi Team,
I have EBS 11.5.10.2 on DB 11.0.7.1.
How Can I identify the dba users on dba_users of oracle applications?
ThanksWhat do you mean by identify the dba users? DBA_USERS store the information of the database accounts and FND_USER store the information of the application users.
If you need more details about the sysdba privilege, please see these docs.
All About Security: User, Privilege, Role, SYSDBA, O/S Authentication, Audit, Encryption, OLS, Database Vault, Audit Vault [ID 207959.1]
Roles and Privileges Administration and Restrictions [ID 13615.1]
Thanks,
Hussein

Unsuccessful logins to Oracle Applications

Last Saturday the user received the following email regarding an login attempt through his username to oracle applications:
Dear JOSE DIAS,
There were 3 unsuccessful login attempts using your account JDIAS yesterday.
If this not you attempting to log into the account, please notify the oracle helpdesk immediately to address this issue.
Do we have a means to get the IP of the user that attempted the below?

user503988 wrote:
Last Saturday the user received the following email regarding an login attempt through his username to oracle applications:
Dear JOSE DIAS,
There were 3 unsuccessful login attempts using your account JDIAS yesterday.
If this not you attempting to log into the account, please notify the oracle helpdesk immediately to address this issue.
Do we have a means to get the IP of the user that attempted the below?Please see old threads.
https://forums.oracle.com/forums/search.jspa?threadID=&q=Audit+AND+IP&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
https://forums.oracle.com/forums/search.jspa?threadID=&q=IP+AND+Address+AND+Audit&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
Thanks,
Hussein

Report does not display data in Oracle Applications

I created a custom report and registered the same under Oracle Order Entry. The report uses 1 parameter and whereas everything is registered in Oracle apps. correctly, the report draws a blank upon completion. The only visible thing is the header part.
This report though works fine if run directly from Reports Designer.
Anybody know what specific setting (if required) needs to be made in Oracle Applications? Further in order that you can know the picture, whatever is enclosed in the Repeating Frame does not show up in App. but as pointed earlier works just fine from Reports Designer.
Any help would be greatly appreciated.

I am using a browser (FireFox v2) based InfoView so I guess it is the DHTML viewer.
On the server it is java (Tomcat). The report uses a custom driver (crdb_ado).
Currently all the servers (RAS, page, cache etc) are running under LocalSystem account. I don't understand what a domain account is, is it administrator?
The interesting part is, I was able to upload and run 8 other reports before I experienced this problem. Have I hit some limit?
I appreciate your help. Please share any other ideas/insights on this issue.
Regards

Emulating Oracle Applications Environment in BI Publisher Enterprise Server

Hi there,
I think I know what the answer is going to be to this post but for reasons outwith my control I'm trying to understand if there is a workaround to achieve the resultant report output I require.
Background
Oracle E-Business on Demand 11.5.10.2
Oracle BI Publisher 10.1.3.2
My client has Oracle E-Biz on Demand but rather than utilising the integrated XML Publisher engine they have gone down the path of installing BI Publisher Standalone Enterprise Server for their report generation.
Now this works to an extent but I am experiencing problems trying to emulate the setting of an Apps context when I run a report so that I can utilise the Apps security within the Stanalone Enterprise Server. Is this even possible?
Example, basing a data model on PO_VENDOR_SITES (multi-org view) returns 0 (zero) rows but basing it on PO_VENDOR_SITES_ALL returns all rows (for all Orgs).
I can hear you all now yelling, "Use the Oracle Applications XML Publisher" version but in this "On Demand" arena that practice hasn't been adopted so i am raising this post in the hope that someone may be able to suggest a workaround or solution.
Actually, no BI Publisher security model has been adopted and all users use the GUEST account to run reports.
All comments and suggestions are appreciated :-)
Kind Regards,
Gary.

Gary, create a data template and call your own db function to initialise these. The beforeReport trigger will fire and set the enviro prior to the query being executed (as in Reports) Something like this below:
<dataTemplate name="BasicQueryDT" description="Simple query data template" defaultPackage="xxbi_setenviro">
     <dataQuery>
          <sqlStatement name="basicQuery">
               <![CDATA[
select max(last_update_date) today from apps.pa_projects_v]]>
          </sqlStatement>
     </dataQuery>
     <dataTrigger name="beforeReport" source="xxbi_setenviro.before_rep"/>
     <dataStructure>
          <group name="G_Main" source="basicQuery">
               <element name="TheDate" value="today"/>
          </group>
     </dataStructure>
</dataTemplate>

How to generate an excel spreadsheet from an Oracle Application forms runni

I need URGENT generate an Excel spreadsheet with rows and columns populated from a forms that is running on Oracle Application R11.5 and open this worksheet for the User save.
I want to include a PL*SQL code on a button and this button to run the spreadsheet open save for the User.
Sorry my poor English, thanks for the comprehension

909356 wrote:
I need URGENT generate an Excel spreadsheet with rows and columns populated from a forms that is running on Oracle Application R11.5 and open this worksheet for the User save.
I want to include a PL*SQL code on a button and this button to run the spreadsheet open save for the User. This functionality is already available in the application (File > Export) and you do not need to write a code to do that.
How To Export Form Data To a CSV Format File [ID 779079.1]
How To Setup Action Export Functionality in Release 11i [ID 136074.1]
Thanks,
Hussein

How to integrate Oracle Portal running on Oracle Application Server 10.1.2

I have an Oracle Portal running on a Oracle Application Server 10.1.2.
Portal is responsible ( along with OID ) for the users authentication and authorization.
There is a new JEE application that was developed recently, which the Portal users must have access to.
HOW can I put a link into a page of the Portal, that redirects the portal user to a new browser window displaying my new application?
HOW can this new application, running in a separate weblogic 11g (10.3.5) server, automatically authenticate with the same username/password previously authenticated when the user logged into the portal?
Any ideas?
I´ve already thought in a bunch of ways to do it:
- put a link into the portal with a sessionId, then when opening the new app, it automatically tries to use the same session. How can I configure this session id during the creation of the portal's page? How can I use it from the new app to use the same session?
- put a link into the portal with a userid, then when opening the new app, it automatically tries to authenticate using a different authentication provider configurated in WL, which points to Portal´s OID. In this situation, how can I ensure that the user is already logged in and the session has not timed out?
- Should I use OSSO?
- Should I use OAM?
Any help would be appreciated!
Murilo

Hi Murilo,
A portletized version of your J2EE app would probably have been ideal for your purpose as it would handle both authentication (through SSO) and session information (through Portal framework as the framework can pass session information to the provider/producer). This would require changes to the application however.
Easiest approach would be to use mod_osso to protect your J2EE application. SSO would then handle the authentication for your Portal and your J2EE application.
Thanks,
EJ

Developing for a Oracle Application Server with SSO

Hello there,
I'm developing an application (Java) that will be deployed as a partner application within an Oracle Application Server 10g at my client. This Oracle instance has a SSO already configured, and my app will use this Identity Manager (consuming the cookie). The problem is that at my company we don't have a SSO system configured, not even an Oracle Application Server, just a simple Oracle XE 10g to hold data. So I'm wondering how can I do to develop my application and test it.
I was looking forward to install an OAS and configure an SSO to validate my implementation, but the download link provided by Oracle is broken (http://www.oracle.com/technology/products/ias/index.html). Another alternative that I thought of was to install an OC4J and configure a Java SSO to simulate the behavior of OSSO, and make my app the cookie set by it. But OC4J supports only til Servlet 2.4 and my app is using 2.5...
And to complete, I cannot access my client's environment. I'm supposed to write a Deploying document telling him how to deploy my app and then try to access it through Internet.
Does anyone have an idea of how can I develop and test my app in my company's environment?
Thanks in advance,
Bruno Krebs.

Apache 2.0 based OHS is located in Oracle Application Server Companion CD.
Pavna

Oracle application server release 2

hi
i am trying to download oracle 10g application server Release2 from the link
http://www.oracle.com/technology/software/products/ias/htdocs/101202.html
but everytime when it starts downloading,it remains on 0% only..
is there any other link by wich i can download the oracle application server release2.....plz help

hi
install download manager and after that try to download application server.
sarah

Oracle Application Single Sign-On

Dear All,
We have a requirement that there should be single sign-on for the users to use both the Oracle and non-Oracle Applications. We are using Oracle Application Server 10g at the back end.
How to enable single sign-on. Is there any tool that we need to install.
Pls guide us as we are entirely new to this process.
Regards,
Rajani

Hi,
You need to install and configure Oracle Internet directory and Single Sign On compontents of Oracle Application server 10g in order to have the Single Sign On working with Oracle Applications. After the Oracle Application Server Infrastructure tier installation there is addition integration steps you need to follow to integrate the Single Sign on with Oracle E-business suite. You can use DIP features ( Directory Integration and Provisiotion) to integrate with Third party directory server like Micrososft AD, Sun directory server etc. for Integrating the non oracle based application i think you have to use oracle single sign on API and you need to do bit of coding as well. You can also enble single sign on for database users but this requires advance security option enabled on the Database side and finally you can integrate Single sign on for OS users as well.
Raj

Oracle Application Server Release 2 (10.1.2) Deployment Notes question

Hi!
I'm following the Oracle Application Server Release 2 (10.1.2) Deployment Notes (http://download-uk.oracle.com/docs/html/B25947_01/deployment_topics006.htm) for deploying an application, built in Jdeveloper 10.1.3 to AS 10.1.2. I have a question about Configuring JDeveloper to Generate Configuration Files That Are J2EE 1.3-Compliant. Do I need all the files in table 34-3? (http://download-uk.oracle.com/docs/html/B25947_01/deployment_topics006.htm#CIHHBJAI)
I already have some of these files. Can I change the version of existing files or do I need new ones? How can I change the version of existing files?
Here are the headers of some of these files:
web.xml: (Here I probably just change version="2.4" to version="2.3")
<?xml version = '1.0' encoding = 'windows-1250'?>
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd"
         version="2.4" xmlns="http://java.sun.com/xml/ns/j2ee">
orion-application.xml: (Is version="10.0" the version I need to change to "1.2"?)
<?xml version = '1.0' encoding = 'windows-1252'?>
<orion-application xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                   xsi:schemaLocation="http://www.oracle.com/technology/oracleas/schema http://xmlns.oracle.com/oracleas/schema/orion-application-10_0.xsd"
                   version="10.0"
                   xmlns="http://www.oracle.com/technology/oracleas/schema">
data-sources.xml.xml: (This file has only XML version, I don't believe this is the version I need to change)
<?xml version = '1.0' encoding = 'windows-1250'?>I only have these three files from the table in my application. Do I need application.xml and oc4j-connectors.xml too?
Thank you in advance!
BB

Found some more details on this error in emias.log:
2007-11-21 09:22:54,538 [EMUI_09_22_54_/console/ias/oc4j/deployWiz/webModuleMappings$ctxType1=oracle*_ias$target=MY_AS_INSTANCE*_home$type=oc4j$ctxName1=MY_AS_INSTANCE$selectedStep=1]
ERROR ias.oc4j doWebModulesNavigation.920 - DeployWiz: Caught exception in doWebModulesNavigation
2007-11-21 09:23:49,054 [Thread-24] ERROR ias.oc4j doDeployWork.2628 - DeployWiz: Caught exception in doDeploy
java.lang.NoClassDefFoundError: oracle/dms/instrument/CorrelationContext
at oracle.ias.sysmgmt.task.TaskMaster.setContextECID(Unknown Source)
at oracle.ias.sysmgmt.task.TaskMaster.evaluate(Unknown Source)
at oracle.ias.sysmgmt.deployment.j2ee.console.ApplicationDeployment.deployCommon(Unknown Source)
at oracle.ias.sysmgmt.deployment.j2ee.console.ApplicationDeployment.deploy(Unknown Source)
at oracle.ias.sysmgmt.deployment.j2ee.console.EarDeployerImpl.deploy(Unknown Source)
at oracle.sysman.ias.sta.oc4j.DeployAppAdminObj.deploy(DeployAppAdminObj.java:164)
at oracle.sysman.ias.sta.oc4j.DeployWiz.doDeployWork(DeployWiz.java:2594)
at oracle.sysman.ias.sta.oc4j.DeployWiz.access$000(DeployWiz.java:179)
at oracle.sysman.ias.sta.oc4j.DeployWiz$DeployBean.doWork(DeployWiz.java:3098)
at oracle.sysman.emSDK.eml.util.iAS.ProcessingBean$ProcessingThread.run(ProcessingBean.java:264)
at java.lang.Thread.run(Thread.java:534)
2007-11-21 09:23:49,054 [Thread-24] ERROR ias.IASUtil displayError.753 -
java.lang.NoClassDefFoundError: oracle/dms/instrument/CorrelationContext
at oracle.ias.sysmgmt.task.TaskMaster.setContextECID(Unknown Source)
at oracle.ias.sysmgmt.task.TaskMaster.evaluate(Unknown Source)
at oracle.ias.sysmgmt.deployment.j2ee.console.ApplicationDeployment.deployCommon(Unknown Source)
at oracle.ias.sysmgmt.deployment.j2ee.console.ApplicationDeployment.deploy(Unknown Source)
at oracle.ias.sysmgmt.deployment.j2ee.console.EarDeployerImpl.deploy(Unknown Source)
at oracle.sysman.ias.sta.oc4j.DeployAppAdminObj.deploy(DeployAppAdminObj.java:164)
at oracle.sysman.ias.sta.oc4j.DeployWiz.doDeployWork(DeployWiz.java:2594)
at oracle.sysman.ias.sta.oc4j.DeployWiz.access$000(DeployWiz.java:179)
at oracle.sysman.ias.sta.oc4j.DeployWiz$DeployBean.doWork(DeployWiz.java:3098)
at oracle.sysman.emSDK.eml.util.iAS.ProcessingBean$ProcessingThread.run(ProcessingBean.java:264)
at java.lang.Thread.run(Thread.java:534)
2007-11-21 09:23:49,054 [Thread-24] ERROR util.iAS displayError.369 - An internal error occurred during the operation.
java.lang.NoClassDefFoundError: oracle/core/ojdl/query/LogQueryException
at oracle.sysman.ias.sta.oc4j.DeployWiz.removeAdminObjectsFromCache(DeployWiz.java:2708)
at oracle.sysman.ias.sta.oc4j.DeployWiz.doDeployWork(DeployWiz.java:2648)
at oracle.sysman.ias.sta.oc4j.DeployWiz.access$000(DeployWiz.java:179)
at oracle.sysman.ias.sta.oc4j.DeployWiz$DeployBean.doWork(DeployWiz.java:3098)
at oracle.sysman.emSDK.eml.util.iAS.ProcessingBean$ProcessingThread.run(ProcessingBean.java:264)
at java.lang.Thread.run(Thread.java:534)

When i login to MES operator resp..i get a error saying...You must setup an HR employee for this Oracle Application user...how to resolve this?

when i login to MES operator resp..i get a error saying...You must setup an HR employee for this Oracle Application user...how to resolve this?

Hey everyone in Apple world!
I figured out how to fix the flashing yellow screen problem that I've been having on my MBP! Yessssss!!!
I found this super handy website with the golden answer: http://support.apple.com/kb/HT1379
I followed the instructions on this page and here's what I did:
Resetting NVRAM / PRAM
Shut down your Mac.
Locate the following keys on the keyboard: Command (⌘), Option, P, and R. You will need to hold these keys down simultaneously in step 4.
Turn on the computer.
Press and hold the Command-Option-P-R keys before the gray screen appears.
Hold the keys down until the computer restarts and you hear the startup sound for the second time.
Release the keys.
I went through the 6 steps above twice, just to make sure I got rid of whatever stuff was holding up my bootup process. Since I did that, my MBP boots up just like normal. No flashing yellow screen anymore!!
(Note that I arrived at this solution when I first saw this page: http://support.apple.com/kb/TS2570?viewlocale=en_US)
Let me know if this works for you!
Elaine

SSL test in Oracle Application Server 10.1.2

Hi ,
we are using one Oracle Application Server Web Cache 10.1.2 as our web server.This redirects users to the Application Server.(EBS 12.0.4)
Now we need to implement SSL to secure user credentials.So i am planing to implement SSL in our web cacahe server.Will this be enough to secure user credentials??I dont have any idea.Please help.
Moreover our web cache is not configured in SSL during the time of installation.Can any body suggest me a place from where i could get one demo Certificate to put it onto my web server and test the SSL confiration.EBS has provided one demo for application tier(inside $ORACLE_HOME/apache/certs/).
But we will have to implement in web cahe tier not in application tier.
We are using EBS 12.0.4 in Hp-Ux v11.23.

Hi susmit;
Please chekc below note which could be helpful for your issue:
SSL Primer on Using OpenSSL as a Certificate Authority with E-Business Suite (with a Windows Example) [ID 1175193.1]
Enabling SSL in Release 12 [ID 376700.1]
R12.0.6+ : Oracle Application Object Library SSL Test Transaction Data Test [ID 732282.1]
R12.0.[3-4] : Oracle Application Object Library SSL Test Transaction Data Test [ID 564066.1]
Regard
Helios

Auditing oracle applications

Similar Messages

Maybe you are looking for