Customized authentication scheme unauthorized when using help

I am receiving an unauthorized message when clicking on help on a label. The message was not being received until the customized authentication scheme was enabled.

If you still need help with this, please provide all the usual information: a complete description of the situation, an example on apex.oracle.com if possible, your version of apex and database, all custom code, all authentication scheme details, etc.
Also, please tell us your first name and put it into your handle and/or profile to help us.
Scott

Similar Messages

Apex Custom Authentication Schema Page Sentry Error

Hi,
I am using Application Express 4.0.0. I am struggling with a strange problem while trying to implement custom authentication schema.
I declare a page sentry function 'page_sentry' which returns TRUE or FALSE based on certain conditions. My page_sentry is as follows:
FUNCTION PAGE_SENTRY RETURN BOOLEAN
IS
l_username VARCHAR2(512);
l_session_id NUMBER;
BEGIN
IF USER != 'APEX_PUBLIC_USER' THEN
RETURN false;
END IF;
l_session_id := wwv_flow_custom_auth_std.get_session_id_from_cookie;
-- check application session cookie.
IF wwv_flow_custom_auth_std.is_session_valid THEN
apex_application.g_instance := l_session_id;
l_username := wwv_flow_custom_auth_std.get_username;
wwv_flow_custom_auth.define_user_session(
p_user => l_username, p_session_id => l_session_id);
RETURN true;
ELSE
--redirect to login page using OWA_UTIL.REDIRECT_URL
END IF;
RETURN false;
END page_sentry;
And Cookie Name : _AUTH
At first, It always returned FALSE. I wasn't getting any error. However, even after forcibly returning TRUE from the page_sentry function the redirect was still not happening. I tried to look into what cookies were being set for the same and I found this:
Name: ApexLibErrorStack1
Content: page%3D1%3Cbr%20%2F%3EERR-1201%20session%20ID%20not%20set%20on%20custom%20authentication
I couldn't find any relevant help for this. Worst of it is I cannot set any cookie from the page_sentry function at all. Please help!

Hi all.
Can someone please help me out with the above issue. I am not sure if things are wrong at my end or is this an apex bug.
--Update:
The source of my problem perhaps lies in the manner in which I have configured my Oracle HTTP Server. When I disable port HTTP server on port 80 and run apex without it on default port 8080, the custom authentication schema cookie gets set.
Executing the following with Oracle HTTP Server:
OWA_UTIL.PRINT_CGI_ENV;
gives:
HTTP_COOKIE = ApexLibErrorStack1=page%3D1%3Cbr%20%2F%3EERR-1201%20session%20ID%20not%20set%20on%20custom%20authentication.; ORA_WWV_R1=%23ALL; ORA_WWV_R2=%23ALL; ORA_WWV_R3=%23ALL
And without HTTP Server:
gives:
HTTP_COOKIE = WWV_CUSTOM-F_1420403886791332_100=9625AAC49B9951D8;......
Did I miss something in my HTTP server configuration ?
Edited by: pc on Jan 2, 2012 3:15 AM

Restful Web Services - First Party Authentication with custom authentication schemes

Hi
I've successfully enabled security using first party authentication on our Restful web services however these only work with the built in Apex accounts and not other authentication schemes.
Ideally I'd like to authenticate against LDAP, however when I enable this authentication scheme the restful services don't work as they only support the Apex accounts.
Has anyone implemented LDAP authentication for Apex restful web services, either directly or using Glassfish ? Does anyone know if support for custom authentication schemes on the feature roadmap for a future Listener release ?
I attempted to configure the glassfish application against LDAP but am still working on it.. glassfish never challenged the client to authenticate (it's only to be for the web service endpoints and nothing else), so any pointers on how to set that up for Apex would be appreciated.
Thanks
Kes

Hi Gemma,
unfortunately at the moment you are caught between a rock and a hard place:
- As you point out there is no way in APEX for a user to self-register themselves, short of developing your own table to store users and configuring APEX custom auth to authenticate against that table
- Listener can only authenticate against the the APEX user repository, it cannot integrate with custom APEX authentication.
There may be other options though, by leveraging the authentication capabilities in the JRE and/or WebLogic/GlassFish application servers. We're interested in addressing this use case, so if you wish to investigate further please send me an email ( colm <dot> divilly <at> oracle <dot> com).
Thanks,
Colm Divilly

Custom authentication scheme: Invalid Session Target

Yesterday I spent a lot of time figuring out what was happening and I'm not sure if this is a bug or a feature...
Create an application with some public pages (1,2,101) and some non-public pages (3,4).
Created a list on page 0 listing all pages but only listing page 3 and 4 when user is logged in.
Created a custom authentication scheme.
Running the application showed me the page 1 and the list containing 1,2,101.
I could navigate to 101 and then log in after which I was taken to page 1 showing only 1,2,101.
I changed page 101 so that it would take me to page 3 after logging in and it did. The list showed me 1,2,101,3,4 and the username was also visible.
I could visit all pages correctly except page 1. Whenever I navigated to page 1 I effectively got logged out.
Finally I discovered that I had set "Invalid Session Target" to page 1 in my authentication scheme.
Is this the intended effect ?

Rene,
When a page is selected in the authentication scheme's Invalid Session Page LOV, it gets designated as "the login page". Whenever this page is rendered, APP_USER is null and APP_SESSION is a new session ID. This accounts for what you saw. It's sort of a quirk more than a bug or feature and we ought to properly document this behavior. If, for some reason, you needed a login page that you could navigate back to (after login) in the current session and using the current APP_USER value, you can deselect the page from the Invalid Session Page LOV in the authentication scheme and instead code this in the Invalid Session URL:
f?p=&APP_ID.:101:&APP_SESSION.
...using 101 as the login page, but it can be any page ID as long as it's a public page.
Scott

Strange problem when using custom authentication schema

Hello,
I'm building a custom authentication system for the application. Basically, I followed the blog post from Martin: http://www.talkapex.com/2009/03/custom-authentication-status.html
However, the authentication seems working fine at the beginning when running the page 101 from Application Builder and log in, but when I log out from the application (redirect back to page 101) and try to log in with the same credentials, it gives error message "Invalid Login Credentials ". Also, when the application is accessed from public (open page 101 directly using another computer), the authentication doesn't work at all.
Furthermore, I checked the table apex_workspace_access_log and found out that it has "AUTH_SUCCESS" even if using the fake credentials and the login failed (I use "apex_util.set_authentication_result (p_code => 3);" when auth function return false).
I couldn't find the cause of the problem, then I created the same custom authentication in apex.oracle.com. The problem doesn't appear anymore. To make sure they are same, I have double checked the custom authentication in both the development environment and the apex.oracle.com.
This is very strange to me and I don't know where to looking for the problem. Could you give me some advice of what may cause this problem. Thanks in advance!

I found the problem myself. The cause is the VPD, the account table has VPD policy applied, which prevented public access.

Setting up a custom authentication scheme

Hello APEX Community,
I'm working on creating an RSVP site for an upcoming event, but I want to limit the number of "random" users that try to sign in by implementing some sort of password system.
I am running this on apex.oracle.com...
What I have currently set up is the following:
I have a table (user_auth) that stores a list of passwords. I will send individual people one password that they will type in on the login page.
The issue I have right now is how to implement the authentication scheme...
Based on the authentication drop down options, I should be choosing "Custom"... But I am stuck at this point...
I have created a function called "my_authentication" (code provided below) and entered "my_authentication" as the Authentication Function Name, but when I test it, it keeps failing. I left the Login page as is, I don't enter a user name but I enter a valid password from the user_auth table. When I hit Login, it just boots me back to the login page. Do I need anything for Sentry Function?
create or replace function my_authentication (
p_username in varchar2 default null,
p_password in varchar2)
return boolean
is
l_count number;
l_return_value boolean;
begin
select count(*) into l_count from user_auth t where t.user_password = upper(p_password);
if (l_count > 0) then
    l_return_value := true;
else
    l_return_value := false;
end if;
return l_return_value;
exception
when no_data_found then
    return false;
end my_authentication;Please let me know if you want me to elaborate further...
Thanks and regards,
Ivan

Hi Scott,
Thanks for replying and sorry it took so long to get a reply back.
I hope the following makes sense.
1: When I say "it keeps failing", what happens is when I enter just the password, and hit "Login" it just boots me back to the Login page and no error is displayed.
2: Yes, I don't have any encryption at all but I have x number of randomly generated strings stored in that table, and what I was hoping to do was have the user enter the password and then have it go and confirm that that is one of the x number of strings in the table.
The problem I'm starting to realize with this approach is that the passwords are not displayed. Users just see *'s instead. My approach now is to use an Open door authentication and have them enter the password there to log in, and upon logging in, it will assign value to a global value that checks to see if it's a valid password... (passes back user_id for a matching user_password). If the password is invalid, it will pass a -100 or something...
This seems like a somewhat effective way of getting around the authentication. I guess my next challenge is to figure out how to boot invalid users back to the login page in an Open Door Authentication scheme.
Ivan

Custom Authentication scheme

Hello,
I am building a custom auth. scheme that actually checks username/password in a custom table (app_users) [ not DB acocunts] . I have created a package with a login function as follows:
PROCEDURE login ( p_uname IN VARCHAR2 ,p_password IN VARCHAR2 ,p_session_id IN VARCHAR2 ,p_flow_page IN VARCHAR2 ) IS
lv_goto_page NUMBER DEFAULT 1;
BEGIN
IF UPPER(p_uname) = 'ADMIN' THEN
lv_goto_page := 1;
ELSE lv_goto_page := 100;
END IF;
wwv_flow_custom_auth_std.login ( p_uname => p_uname,
p_password => p_password,
p_session_id => p_session_id,
p_flow_page => p_flow_page || ':' || lv_goto_page );
EXCEPTIONWHEN OTHERS THEN
RAISE;
END login;
and a valid_user function in that package that simply returns TRUE if username/password are correct in APP_USERS table.......
and then I have changed the 101 login page login process to :
app_security_pkg.login(
P_UNAME       => :P101_USERNAME,
P_PASSWORD    => :P101_PASSWORD,
P_SESSION_ID => v('APP_SESSION'),
P_FLOW_PAGE   => :APP_ID||':1'
+);+
and created my own auth. scheme and enterd this in the auth. function field :
return app_security_pkg.valid_user
My question is , this is not working when I enter a valid username/pass from APP_USERS because I think it still points to oracle's db users .... Where should I make the built in function wwv_flow_custom_auth_std.login point to my APP_USERS table instead ????
Thanks,
Sam K

Gus,
The only code I have is for the authentication package and here it is :
create or replace PACKAGE BODY app_security_pkg AS
PROCEDURE login ( p_uname IN VARCHAR2 ,p_password IN VARCHAR2 ,p_session_id IN VARCHAR2 ,p_flow_page IN VARCHAR2 ) IS
lv_goto_page NUMBER DEFAULT 1;
BEGIN
IF UPPER(p_uname) = 'sam' THEN // just for test. sam is a username in app_users
lv_goto_page := 1;
ELSE lv_goto_page := 100;
END IF;
wwv_flow_custom_auth_std.login ( p_uname => p_uname, p_password => p_password, p_session_id => p_session_id, p_flow_page => p_flow_page || ':' || lv_goto_page );
EXCEPTION WHEN OTHERS THEN
RAISE;
END login;
PROCEDURE add_user ( p_username IN VARCHAR2,p_password IN VARCHAR2) AS
BEGIN
INSERT INTO app_users (username, PASSWORD)VALUES (UPPER (p_username),get_hash (TRIM (p_username), p_password));
COMMIT;
EXCEPTION WHEN OTHERS THEN ROLLBACK;
RAISE;
END add_user;
FUNCTION get_hash (p_username IN VARCHAR2, p_password IN VARCHAR2) RETURN VARCHAR2 AS
BEGIN
RETURN DBMS_OBFUSCATION_TOOLKIT.md5 (input_string => UPPER (p_username)||'/'||UPPER (p_password));
END get_hash;
PROCEDURE valid_user2 (p_username IN VARCHAR2, p_password IN VARCHAR2) AS
v_dummy VARCHAR2 (1);
BEGIN
SELECT '1' INTO v_dummy FROM app_users
WHERE UPPER (username) = UPPER (p_username) AND PASSWORD = get_hash (p_username, p_password);
EXCEPTION WHEN NO_DATA_FOUND THEN
raise_application_error (-20000, 'Invalid username / password.');
END valid_user2;
FUNCTION valid_user (p_username IN VARCHAR2, p_password IN VARCHAR2) RETURN BOOLEAN AS
BEGIN
valid_user2 (UPPER (p_username), p_password);
RETURN TRUE;
EXCEPTION WHEN OTHERS THEN
RETURN FALSE;
END valid_user;
END app_security_pkg;and in the shared components >> current auth. scheme is myscheme >> Auth. Function : return app_security_pkg.valid_user
and in page 101 login process :
app_security_pkg.login(
P_UNAME => :P101_USERNAME,
P_PASSWORD => :P101_PASSWORD,
P_SESSION_ID => v('APP_SESSION'),
P_FLOW_PAGE => :APP_ID||':1'
);Thats it ! I hope this helps you figuring it out ;)
Thanks,
Sam

Custom Authentication Scheme - How To

For anyone who is interested in implementing your own Authentication Scheme, I have published an article on my blog. It covers the basic steps needed and can be extended in any number of ways to suit your additional needs.
http://djmein.blogspot.com/2007/07/custom-authentication-authorisation.html
Duncan

Hi Duncan, 
Thanks for your article. 
Regards, 
Gonçalo

Custom Authentication Scheme - call SSO or Local Process based on User Name

Hi,
We are looking at building a new application that allows employee and public user access.
For staff we want to use Single Sign On as we have for all our other ApEx applications.
For public users (who will register to create an account) we want to use our own Custom Authentication Function.
What I would like to do is to have an Authentication Function along the lines of:
If username like '%@%'
then call Custom Function
else call SSO Funcion.
How do I call the SSO Authentication Function progamatically?
Thanks,
Martin

Probably I don't explain myself clearly....sorry for that!
Anyway you are right, the role of the user can change after the user is initially provisioned.
I'll try to summarize to be sure to have understood your answer and to explain my scenario more in details:
1. After user identity creation, I'll assign the role "Project Manager". Before role assignment the user has not any role. So using a pre-populate adapter I can retrieve the assigned role and compose the right userid.
2. After step 1, I need to assign another role to the user, the new role should be "External Reseller" for example. In this case the user has a role already. What I would is: basing on the role that I'm assigning (External Reseller), the pre-populate should compose the right userid. Obviously this second userid will be different from the first one and this means a new account will be created for the user. At the moment I don't care to deprovisioning the first userid.
Is it possible with pre-populate adapter?
Sorry again for my not very clear explanations.
Daniele
Edited by: 886636 on Jan 24, 2012 4:10 AM

Access Denied Web Application with Claims authentication NTLM only when using secondary URL

I have a SharePoint 2010 server farm with 2 web front ends, an application server and a database server. Both front ends are internal to
our network and are not behind a load balancer.
NOTE THAT I HAD TO SUBSTITUTE hzzp with hzzp so that I had no links in the body of this post since I am not verified
I setup a new web application called "SharePoint 41171" with:
Public URL:
hzzp://testserver1:41171
Claims authentication
NTLM only: no forms auth
No SSL
New web site "SharePoint 41171"
New app pool
New content database
I create a top level site collection and name mydomain\myusername as the primary site collection admin
I am able to access this site as expected at
hzzp://testserver1:41171 with the aforementioned site collection owner id: mydomain\myusername
I add an alternate access mapping for a secondary URL for this web application in the Intranet zone:
hzzp://iwatest.mydomain.com
So my AAMs for the site read as:
hzzp://testserver1:41171
Default     hzzp://testserver1:41171
hzzp://iwatest.mydomain.com
Intranet     hzzp://iwatest.mydomain.com
When I attempt to log on to
hzzp://iwatest.mydomain.com with the same user name and password, I get "access denied".
I can access this site using
hzzp://iwatest.mydomain.com if I log in as the farm account. This is the only account that seems to work.
Side Note: If I create a separate web application without claims - just NTLM and create the same AAMs, I can login fine with the same secondary
URL and the same user name
IP address properly maps to this machine.
I reviewed the ULS logs and find the following:
10/30/2012 16:20:23.45              w3wp.exe (0x0E78)
                0x1724       SharePoint Foundation              Monitoring
                nasq                        Medium Entering
monitored scope (Request (GET:hzzp://iwatest.mydomain.com:80/_layouts/AccessDenied.aspx?Source=hzzp%3A%2F%2Fiwatest%2Emydomain%2Ecom))
10/30/2012 16:20:23.45              w3wp.exe (0x0E78)
                0x1724       SharePoint Foundation              Logging Correlation Data
      xmnv                        Medium Name=Request (GET:hzzp://iwatest. mydomain.com:80/_layouts/AccessDenied.aspx?Source=hzzp%3A%2F%2Fiwatest%2Emydomain%2Ecom)
8f313b5e-8476-4dd4-9abe-0cb6dbe024b6
10/30/2012 16:20:23.45              w3wp.exe (0x0E78)
                0x1724       SharePoint Foundation              Logging Correlation Data
      xmnv                        Medium Site=/          8f313b5e-8476-4dd4-9abe-0cb6dbe024b6
10/30/2012 16:20:23.45              w3wp.exe (0x0E78)
                0x1724       SharePoint Foundation              General
                   8e2s                        Medium
Unknown SPRequest error occurred. More information: 0x80070005       8f313b5e-8476-4dd4-9abe-0cb6dbe024b6
10/30/2012 16:20:23.45              w3wp.exe (0x0E78)
                0x1724       SharePoint Foundation              Monitoring
                b4ly                        Medium Leaving
Monitored Scope (Request (GET:hzzp://iwatest.mydomain.com:80/_layouts/AccessDenied.aspx?Source=hzzp%3A%2F%2Fiwatest%2Emydomain%2Ecom)). Execution Time=8.66003919492561   8f313b5e-8476-4dd4-9abe-0cb6dbe024b6
Basically it tells me that access is denied. I didnt see anything that stood out here.
I found this article:
hzzp://social.technet.microsoft.com/Forums/en-US/sharepointadminprevious/thread/ded9188b-ee03-4ef0-bb50-3ad138110e0c, which pointed me in the direction of ensuring that the portal
super user and portal reader accounts were properly added to my web application. I followed the every popular article on doing this:
hzzp://technet.microsoft.com/en-us/library/ff758656.aspx, but still no luck. As per the thread, I added the 2 domain accounts to the user policy with appropriate privilege
and then set them as the super user and super reader accounts via powershell, and yes I did prefix those names with "i:0#.w|mydomain\". To be exta sure, I repeated this for all web applications on this server with slightly different powershell steps
depending on wether or not claims was enabled on the web application.
The Claims to Windows Token Service is running.
I saw some mention of ensuring that the secure token service is running with a proper application pool account, but we are not running that service
and I cant imagine what that would have to do with my situation.
I have deleted and readded the web application and repeated these steps to no better effect.
I gave the mydomain\myusername full control for the web application through the user policy, ensured that it was indeed the primary site collection
owner and added it to the default site owners group. None of this helped.
I changed the application pool account to the farm account. No change in behavior.
Rebooted IIS and the machines many times along the way.
Further, when I attempt to sign in as a different user after being denied, I get "an unexpected error has occured message. I found the following
in ULS:
10/30/2012 11:19:03.71 w3wp.exe (0x182C)
0x1210 SharePoint Foundation                 Logging Correlation Data
xmnv     Medium              Name=Request (GET:hzzp://iwatest.mydomain.com:80/_layouts/accessdenied.aspx?loginasanotheruser=true&Source=hzzp%3A%2F%2Fiwatest%2Emydomain%2Ecom)
cc409ec2-4889-42fa-aa7d-9cc4535e4f0e
10/30/2012 11:19:03.71 w3wp.exe (0x182C)
0x1210 SharePoint Foundation                 Logging Correlation Data
xmnv     Medium              Site=/    cc409ec2-4889-42fa-aa7d-9cc4535e4f0e
10/30/2012 11:19:03.72 w3wp.exe (0x182C)
0x1210 SharePoint Foundation                 General
         8e2s                Medium              Unknown SPRequest error occurred.
More information: 0x80070005      cc409ec2-4889-42fa-aa7d-9cc4535e4f0e
10/30/2012 11:19:03.72 w3wp.exe (0x182C)
0x1210 SharePoint Foundation                 Runtime
        tkau                Unexpected       System.NullReferenceException: Object reference not set to an instance
of an object.    at Microsoft.SharePoint.ApplicationPages.AccessDeniedPage.LogInAsAnotherUser()     at Microsoft.SharePoint.ApplicationPages.AccessDeniedPage.OnLoad(EventArgs e)     at System.Web.UI.Control.LoadRecursive()
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)            cc409ec2-4889-42fa-aa7d-9cc4535e4f0e
10/30/2012 11:19:03.74 w3wp.exe (0x182C)
0x1210 SharePoint Foundation                 Monitoring
b4ly                Medium              Leaving Monitored Scope (Request (GET:hzzp://iwatest.mydomain.com:80/_layouts/accessdenied.aspx?loginasanotheruser=true&Source=hzzp%3A%2F%2Fiwatest%2Emydomain%2Ecom)).
Execution Time=22.5439266722447           cc409ec2-4889-42fa-aa7d-9cc4535e4f0e
By the way, this occurs for the farm account also after a successful login and an attempt to sign in as a different user.
Any help would be greatly appreciated

Thanks spadminspadmin:
I have, though I am not sure that what I've added there is correct:
The URL that I am trying to use to access the web application's IIS site is hxxp://iwatest.mydomain.com. I added a binding to the IIS site as follows:
Type    Host name                      port        IP address
http     iwatest.mydomain.com     41171     *
Is that correct?

Issue with authentication with RADIUS when using VPN

Our customer has a problem with auhtentication against Radius vhen he is using VPN or SSL VPN. Authentication on SSH or TELNET via RADIUS is working fine . When I configure on VPN (and SSL VPN) authentication against the local database, everything is working fine and tunnel is established.
In attachement is running-config of customer's gateway and capture file of communication between RADIUS server and gateway (radius access request starting at 85th line).
I found in this file at AVP attributes that the gateway is sending ipsec profile name (in this case "VPN") instead of username.

SSLVPN is configured to use the local database of usernames only in this config. It is not configured to use RADIUS.

Error 8 (file permissions) when using Help:Search

Hi there,
When I use the help system and do a search, I get the following error:
Error 8 occurred at Open File
Possible reason(s):
LabVIEW: File permission error. You do not have the correct permissions for the file.
=========================
NI-488: DMA hardware error detected.
This is Labview 8.2 running on Linux (Enterprise RHEL4), and I had the same problem with Labview 7.1. The problem seems to be caused by the permissions on some or all of the following files, which are written to the /tmp directory when the search is performed:
controls2.htm
index2.htm
js_buttons.htm
search_results.html
If I do a search, these files are written but not erased (with permissions -rw-r--r--). If someone else then does a search, they get the Error 8 problem listed above. If the owner of these files (or root) deletes them, the problem is solved -- until a different user than the owner of those temporary files wants to search the help system.
My guess is that if I could get Labview to either open up the write permissions on these files or delete them after the help session is complete, the problem would be solved.
Any advice? Has anyone else had this problem (you would need a multiple-user linux system to see it)?
Thanks,
Tobin

Hi Tobin-
The following KnowledgeBase articles provide some valuable insight. Check them out and reply if they don't help resolve the problem.
KB 3GFF9FBP: Why do I get "Error 8 Occurred at Open File" When Writing to or Reading From a File?
KB ...
And there are lots of discussions about this already. For other possible causes/solutions, try searching the forums for "file permission error 8".
Drew Pierce | District Manager, Central Texas | National Instruments

Custom contact ringtones removed when using Hotmail sync

I sync my Hotmail contacts with my iPhone. Every so often, custom ringtones that I've assigned to various contacts are removed from the contact ... kicking it back to the default ringtone. I'm guessing it's a problem in that Hotmail doesn't recognize them. And when manually (?) synced, Hotmail and/or the iOS remove them due to attribute incompatibility. Should and/or can Apple developers fix their software to accomodate this?

And upon upgrading to the (current) iOS 6 ... the custom ringtones and text alerts have once again disappeared.

Authentication asked for when using network printer... why

I have a printer set up on a windows vista PC, there is no password or authentication set up on this PC, But when I set up the printer from my iMac I am continually asked for authentication, however there is no password etc set up, just open sharing of printers. Coulsd some one asst please?

You say it's networked. How?

When use custom authetication it shows some characters on screen after logo

Dear All,
I have developed a application and use custom authentication schema for that. It works fine on my local pc and then I have moved it to another pc (export and then import) it works fine on that as well.
Now I have moved it to the production server. When authentication failed it shows error message and stay in log on page. But when I provide the correct user name and password, then it shows multiple occurance of login url in page body.
Did anyone has any idea about this.
When authenticate success I get below output.
Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?
p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?
p=ETLUI:COM_LOGIN:2888953545161107 Location: f?Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?
p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?
p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?
p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?
p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?
p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 Location: f?
p=ETLUI:COM_LOGIN:2888953545161107 Location: f?p=ETLUI:COM_LOGIN:2888953545161107 * ETLUI means my application alias and COM_LOGIN is my login page alias. So basically it shows link to the login screen multiple time. At this time url is looks like below
http://prodsrv:8080/apex/wwv_flow.accept Development and Production Apex Version: 4.0.2.00.07
Development OS: Windows 2000
Production OS : Linux
Thanks in advance.

Works ok after using Apex Listener.

Customized authentication scheme unauthorized when using help

Similar Messages

Maybe you are looking for