Database access issue with EXECUTE AS with impersonated User account

Hello,
I have been facing one issue with EXECUTE AS option in SQL Server 2008 R2. Following is the scenario:
I have two databases TestDB1 and TestDB2 on the same SQL Server instance. I have SQL Admin level permissions on the server. I have written a stored procedure in TestDB1 which will execute the scripts(SELECT Statement) againest the table from TestDB2(using
three part query). To execute the proc from TestDB1 I have used EXECUTE AS option with a user (User1) having select permissions on table from TestDB2. The same proc working fine when I use table from TestDB1 but not working on TestDB2 database. Thorwing error
saying permission denied. I have tried enabling the Ownership chains on both the databases but no luck.
Please help me with the situation here.
Thanks!
Swami A Polnati.

You can also use EXECUTE AS. But then you need to set the database trustworthy, which is not good for security reasons.
Enabling cross-database chaining will not help, since you are using dynamic SQL.
Dan was kind to point you to my article. I recommend that you read it, and learn to embrace the technique with certificates. Yes, it is a long article and I understand that you are impatient to get a solution quickly. However, the article is written from
the point of view that the reader is interested in learning for the future and not only get a solution for the moment. Certificate-signing as a technique is very very useful in several contexts.
The article does also discuss EXECUTE AS, and I discuss in more detail why setting the database trustworthy may be a security risk. (And as long you don't fully understand what I'm talking about, it is a security risk.)
Erland Sommarskog, SQL Server MVP, [email protected]

Similar Messages

System Error:Database access error,rollback segment number with name "" too small

Hi Experts,
In SXMB_MONI XML messages for File2File scenario are failing
with the below message:
Database access error
com.sap.aii.utilxi.misc.api.ResourceException: ORA-01555: snapshot too
old: rollback segment number with name "" too small ORA-22924: snapshot
too old at com.sap.aii.utilxi.blob.api.AIIBlob.getByteArray
(AIIBlob.java:85) at
com.sap.aii.utilxi.blob.api.AIIBlobImpl.getByteArray
(BlobServices.java:156)
I have refered this link http://scn.sap.com/thread/3147106
Kindly suggest,
Gagan.

This may be due memory issue on the server. refer the note/thread as
http://scn.sap.com/thread/3456694
3807 - Error messages regarding rollback and undo segments
Regards
Ramg

How to run IE with administrator privileges on limited user account?

Hello,
I have a domain user who needs to access a certain web application on the internet using IE and to do so we have to add this website to IE Trusted Sites Zone and also allow Pop-ups, the issue now is that the domain user has a limited account on this PC (Windows
8.1) and changing these settings is not available. I only have (General-Connections-Programs) taps available under IE Internet Options for this user.

web application is not working just like before. Did i miss something?
Not necessarily. Some users have a problem with security packages which are "protecting" their registry. Also, during a beta I discovered that elevation of the Internet Options dialog and trying to do a RIES had resulted in the
Administrator's Profile being nuked, not the one that was being targeted. Perhaps you are seeing a symptom from something like that?
FWIW I would run ProcMon to find out what is going on. It would be best if you had two cases, one which worked and one which was the problem case. Then you could save both traces as .PML files and open them later to compare them in two separate
ProcMon tasks. That way you can just filter coarsely to find a significant divergence in the two traces and then refine your analysis from there. Otherwise, if you don't have a clear hypothesis to test or know exactly what you are looking for you
could try using the Category Is Write filter. That would show changes which were being done in both the Registry and File system.
Good luck
Robert Aldwinckle

Help with setting up a new user account

What is the solution to file sharing on the same computer with two separate User Accounts? I want to set up a new user account, but I want to be able to access the Documents, Music, Movies and Pictures folders, as well as others possibly in the original account. Is this easy to do, and/or possible without messing around too much with permissions and the like?
Thanks,
Mac

Setting up read only access for other users is pretty easy. Just change a few permissions and you're done. I'll show you how to do it if you like.
Setting up full read+write, well, that's a little trickier. It's because of how Mac OS X sets up permissions on new files and folders. By default, any new file or folder that is created gets full read and write permissions for the user that created it, and read-only for everyone else.
Changing permissions on the two users' home folders to that both users have full read+write for everything inside can be done, and it's not too hard. The problem is when new files are added - they will be read only for the other user. So the procedure has to be repeated again and again, every time a new file is created.
Having said that, it is possible to set up Access Control Lists on certain folders, so that anything that is created in to copied to the folder automatically gets read+write for both users. This is a little trickier to set up, but it can be done. I use it to share iMovie projects, and an iPhoto library between my and my wife's user accounts and it works well.
The latter solution requires entering some scary-looking Terminal commands. If you bro is scared to ask for help in web forums then he sounds likely to be scared of Terminal commands too. :/

Migrated and now 2 computers with same computer name?(user account)

I used the Migration Assistant to move info from iBook to my MacBook.
I don't know how but now on my MacBook I have a copy of my user account from my iBook.
Now, I have two user accounts on my MacBook, the original user account created when I started using the computer and now, my old iBook user account.
Is this normal?
Later, I would like to create a network using the two computers on my Airport Extreme n Base station.
Will it be a problem to have two computers with identical user accounts?

There is not a problem with having identical usernames on two different computers. You also suggested the "Computer name" was the same. Is this the computer name at the top of the "Sharing" preference panel? If so, those need to be different.

We are having sync issues when trying to use separate user accounts and Apple ID's on the same iMac. What can we do?

My wife and I share an iMac and we each sync to it using separate user accounts and separate Apple IDs. She has an iPad 2 and I have an iPhone 4. We upgraded the mac to Lion and the iphone to OS 5. Now itunes only recognizes my apple id no matter which user is logged in. Now if I download the Home Depot app to my phone it automatically gets pushed to my wife's iPad, which she does not want. We want to keep things separate. How can we do this?

You can sync devices with the same iCloud ID, not seperate ones.
If she has a different login on your Mac, make sure she has her own ID defined in System Prefs > iCloud

Database Access Issue

Host :localhost
Port:1521
SID:orcl
Whenever I try to connect by SQL Developer I get the following Error
ORA12505, TNS Listener does not currently know of SID given in connect descriptor.
My tnsnames.ora file
# tnsnames.ora Network Configuration File: C:\app\ANIRBAN\product\11.2.0\dbhome_1\network\admin\tnsnames.ora
# Generated by Oracle configuration tools.
ORACLR_CONNECTION_DATA =
(DESCRIPTION =
    (ADDRESS_LIST =
      (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1521))
    (CONNECT_DATA =
      (SID = CLRExtProc)
      (PRESENTATION = RO)
ORCL =
(DESCRIPTION =
    (ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1521))
    (CONNECT_DATA =
      (SERVER = DEDICATED)
      (SERVICE_NAME = orcl)
My listener.ora file
# listener.ora Network Configuration File: C:\app\ANIRBAN\product\11.2.0\dbhome_1\network\admin\listener.ora
# Generated by Oracle configuration tools.
SID_LIST_LISTENER =
(SID_LIST =
    (SID_DESC =
      (SID_NAME = CLRExtProc)
      (ORACLE_HOME = C:\app\ANIRBAN\product\11.2.0\dbhome_1)
      (PROGRAM = extproc)
      (ENVS = "EXTPROC_DLLS=ONLY:C:\app\ANIRBAN\product\11.2.0\dbhome_1\bin\oraclr11.dll")
LISTENER =
(DESCRIPTION_LIST =
    (DESCRIPTION =
      (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1521))
      (ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1521))
ADR_BASE_LISTENER = C:\app\ANIRBAN

Can you post the output of below cmd
# sqlplus
show parameter service_names
# cmd prompt
sqlplus [username]/[password]@ORCL
lsnrctl service

802.1X, you deployed with Certs, or used individual user accounts?

I'm looking at 802.1X to improve our internal network's security posture to prevent unauthorized access by non-authorized users. The solution I am looking at is 802.1X only, not any vender's NAC solution which rides upon 802.1X, but 802.1X solely. We currently have no plans nor budget for Cisco's NAC appliance, Clean Access, CSA, or any other type of similar program. Out systems are XP or Vista, our JetDirect's purchased over the years have 802.1X capability per HP's specs. I have about 3,500 desktops.
I had initially considered having the switches query a radius server (like ACS for example)which would in turn query the Windows AD for account authentication. This would prevent those without an account access to the network via a switchport.
I've been looking at some of the ways to perform this and it looks like some people say the best way (for security's sake) to actually utilize a certificate authority (internal CA) to authenticate user access in lieu of the username and password. Keep in mind, our current AD password policy requires a username's password change every 60 days, 8 chars or more, requiring uppercase, lowercase, and a number in that password. This is much stronger than it used to be.
So, I'm on the fence here and I am in the early stages of exploration. Can some of you tell me what you chose to do and why?
Much thanks.

I'm in the middle of a deployment of .1X authentication for the exact same reasons you are.
I'm assuming you are using Catalyst switches, just make sure you're using a good version of the IOS, I have 4507's in my IDF's and use 12.2(37)SG. Prior to this I had some very weird problems, inconsistent authentication.
I didn't use certs, I use the XP supplicant and use the hardware machine name to authenticate with AD + MAC address authentication. I had to go this route because my user base would just allow a guest machine to log in with their AD creditials.
Unfortunately it's a head-ache to trouble shoot. My desktop team uses a handheld tester from Fluke and I have to reset the MAC table everytime they need to test.

Trouble with using WoW on Mutable User Accounts with new MacBook Pro

My son just got a new MacBook Pro*. I installed WoW on his account and created an account for me; both are admin accounts. He can startup WoW just fine, but when I start the Launcher, I get a message that the launcher can't download information about the next patch, and to check my network. If I launch the game directly, the icon just bounces on the dock and then quits.
I have checked the permissions and they look good.
The console log reads:
11/18/10 12:48:40 PM Firewall[58] Launcher is listening from 0.0.0.0:9112 proto=6
11/18/10 12:48:43 PM Launcher[490] nRet = 1
OR without the firewall
11/18/10 12:55:58 PM Launcher[544] nRet = 1
* Model Name: MacBook Pro
Model Identifier: MacBookPro6,2
Processor Name: Intel Core i7
Processor Speed: 2.66 GHz
Number Of Processors: 1
Total Number Of Cores: 2

I have posted to the Mac Tech support forum, and heads are being scratched. I was wondering if 10.6 was different from 10.5 with regard to mutable users. NOTE that WoW will only work on intel based macs now. so this poor tired old box is done for.
Besides, as I hear it, it is a legacy machine now.

Problems with Adobe CS5 on mobile user accounts

Hello Everyone,
I'm a high school web design teacher and I’m having trouble getting Adobe CS5 to run on my student workstations when they are logged in as a “mobile” user.
Workstation 10.5.8
Server 10.4.9
Workgroup manager 10.5.3
Students can browse the web, use Microsoft products and everything else. They are only having trouble with CS5. If I log into the workstation as “administrator” I can use any Adobe product without problems.
Any Ideas?
Thanks,
Todd

First thing I would suggest is to upgrade your server OS to a newer version if possible. Secondly try removing the apps out of the allowable apps list and instead change it so that you allow the apps that are within the specific application folder, ex: Applications/Adobe Photoshop CS5
I had similar problems with CS5 apps and by adding the apps by allowable folder instead it corrected my problem. Granted, if you have savvy users, there is the potential to open a can of worms here but it was the only way I could get it to work for "standard" non-admin user types.

With Lion I had 2 user accounts. Why do I have three user accounts after upgrading to Mountain Lion?

I had consistenlty had a master admin user account for myself under Lion, plus the "Guest" account recommended and created by Lion. After upgrading to Mountain Lion, I now have the same 2 accounts, plus a new one called "Other." Why do I have that? Why was it created? How do I get rid of it if it is not needed?

I meant to include this info from the System Profile:
Maybe easier to read:
Canon MF4400 Series:
Status:          Idle
Print Server:          Local
Driver Version:          1.1.0
Default:          Yes
Shared:          Yes
URI:          usb://Canon/MF4400%20Series?serial=0122F5200302
PPD:          Canon MF4400 Series
PPD File Version:          1.1.0
PostScript Version:          (3010.000) 550
(3010.000) 651
CUPS Version:          1.6svn (cups-327)
Scanning support:          Yes
Scanning app (bundleID path):          -
Scanning app version:          -
Scanner UUID:          00000000-3031-3232-4635-323030333032
Printer Commands:          none
CUPS filters:
capdftopdl:
Path:          /Library/Printers/Canon/CUPS_MF_Printer/Bins/capdftopdl
Permissions:          rwxr-xr-x
Fax support:          No
PDEs:
BasicSettingsPDE.plugin:
Sandbox compliant:          Yes

How to give a user access to just 2 fields in a user account properties

Is it possible to create a user that has basic access rights in Active Directory but give it access to just the users name and telephone number of every user in Active Directory? We have a Windows 2003 AD level at the moment.
Thanks.

Sure, by default a user you create in Active Directory is going to be apart of Domain Users. This user will be an Authenticated User and will have Read permissions over all other users in AD, meaning they can see all other users information.
If you want you can delegate control to a user or group and limit or expand what the user can do. For instance you can right-click the name of your domain in Active Directory Users and Computers and click Delegate Control then click Next. Click
add to add a user or test user, then click Next. Click the Create a custom task to delegate then click Next, select Only the following objects in the folder, then select account objects and click Next. Click Property-specific and there you'll find things like
Read displayName. Check Read displayName and Click next then click Finish. So you've delegated that to that user or group.
How to Delegate Basic Server Administration To Junior Administrators.
http://support.microsoft.com/kb/555986
Best Practices for Delegating Active Directory Administration
http://technet.microsoft.com/en-us/library/cc773318%28v=ws.10%29.aspx
If it answered your question, remember to “Mark as Answer”.
If you found this post helpful, please “Vote as Helpful”.
Postings are provided “AS IS” with no warranties, and confers no rights.
Active Directory: Ultimate Reading Collection

Using ops$ accounts with Database Access Descriptors

Hi, I have installed and configured the Photo Album demo under 9i on Windows 2000 with no problems. I wish to use the operating system via oracle ops$ accounts to provide access to the Db through the Database Access Descriptor using the Gateway Database Access Descriptor Configuration tool. While the ops$ accounts I have configured work as expected under sqlplus, i.e. I am able to login to the Db without manually supplying a username and password e.g. sqlplus / , there does not seem to be a way of configuring the DAD to accept ops$ accounts for access to the photo album demo. Please can anyone confirm this to be the case and/ or provide an alternative solution. Kind regards.

I am pretty sure if you specify a DB username and password in dads.conf, you will not need to log in. Also, there is a tool to encrypt the password so it is not in clear text in the config file.
From the dads.README For 10:
- One or more mod_plsql specific directives. For example:
PlsqlDatabaseUsername scott
PlsqlDatabasePassword tiger
PlsqlDatabaseConnectString orcl
PlsqlAuthenticationMode Basic
I am on 10 now, so I don't personally know if it the same on 9. I don't use the DADs tool either, but you should be able to set a username/password for the dad so that there is not a need to login.
It would be best to ask in the HTMLDB forum, they would know better.
Larry

Login issues with xelsysadm along with ORA-01000 (cursor exceeded) error

Hi,
I am facing an strange problem.
Because of below error i am facing an intermitant issues for login to OIM web console and Design console with user xelsysadm. Some time the login in successfull else the error is generated.
For the error -- ORA-01000: maximum open cursors exceeded
We had talked to DB team an increased the cursor limit from 300 to 800. But still the same issue.
So, let me know whether this can be resolved if i take bounce of the web logic server or there is some other solution?
Thanks in advance and some respond ASAP as this is production server and this issue need to be resolved soon.
Getting below errors in the system:
ERROR,20 Apr 2011 08:35:19,613,[XELLERATE.WEBAPP],Class/Method: tcLogonAction/execute encounter some problems: User account is invalid. Username: xelsysadm
ERROR,20 Apr 2011 08:40:00,056,[XELLERATE.ACCOUNTMANAGEMENT],Class/Method: Authenticate/connect encounter some problems: ORA-01000: maximum open cursors exceeded
java.sql.SQLException: ORA-01000: maximum open cursors exceeded
at oracle.jdbc.driver.SQLStateMapping.newSQLException(SQLStateMapping.java:70)
at oracle.jdbc.driver.DatabaseError.newSQLException(DatabaseError.java:112)
at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:173)
at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:455)
at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:413)
at oracle.jdbc.driver.T4C8Oall.receive(T4C8Oall.java:1030)
at oracle.jdbc.driver.T4CPreparedStatement.doOall8(T4CPreparedStatement.java:194)
at oracle.jdbc.driver.T4CPreparedStatement.executeForDescribe(T4CPreparedStatement.java:785)
at oracle.jdbc.driver.T4CPreparedStatement.executeMaybeDescribe(T4CPreparedStatement.java:860)
at oracle.jdbc.driver.OracleStatement.doExecuteWithTimeout(OracleStatement.java:1186)
at oracle.jdbc.driver.OraclePreparedStatement.executeInternal(OraclePreparedStatement.java:3381)
at oracle.jdbc.driver.OraclePreparedStatement.executeQuery(OraclePreparedStatement.java:3425)
at oracle.jdbc.driver.OraclePreparedStatementWrapper.executeQuery(OraclePreparedStatementWrapper.java:1490)
at com.thortech.xl.security.Authenticate.getPropertyValue(Authenticate.java:459)
at com.thortech.xl.security.Authenticate.connect(Authenticate.java:117)
at com.thortech.xl.security.Authenticate.connect(Authenticate.java:71)
at com.thortech.xl.security.wl.XellerateLoginModuleImpl.login(XellerateLoginModuleImpl.java:159)
at com.bea.common.security.internal.service.LoginModuleWrapper$1.run(LoginModuleWrapper.java:110)
at java.security.AccessController.doPrivileged(Native Method)
at com.bea.common.security.internal.service.LoginModuleWrapper.login(LoginModuleWrapper.java:106)
at sun.reflect.GeneratedMethodAccessor7737.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at javax.security.auth.login.LoginContext.invoke(LoginContext.java:769)
at javax.security.auth.login.LoginContext.access$000(LoginContext.java:186)
at javax.security.auth.login.LoginContext$4.run(LoginContext.java:683)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680)
at javax.security.auth.login.LoginContext.login(LoginContext.java:579)
at com.bea.common.security.internal.service.JAASLoginServiceImpl.login(JAASLoginServiceImpl.java:113)
at sun.reflect.GeneratedMethodAccessor132.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.common.security.internal.utils.Delegator$ProxyInvocationHandler.invoke(Delegator.java:57)
at $Proxy16.login(Unknown Source)
at weblogic.security.service.internal.WLSJAASLoginServiceImpl$ServiceImpl.login(Unknown Source)
at com.bea.common.security.internal.service.JAASAuthenticationServiceImpl.authenticate(JAASAuthenticationServiceImpl.java:82)
at sun.reflect.GeneratedMethodAccessor143.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.common.security.internal.utils.Delegator$ProxyInvocationHandler.invoke(Delegator.java:57)
at $Proxy34.authenticate(Unknown Source)
at weblogic.security.service.WLSJAASAuthenticationServiceWrapper.authenticate(Unknown Source)
at weblogic.security.service.PrincipalAuthenticator.authenticate(Unknown Source)
at weblogic.security.acl.internal.Security.authenticateLocally(Security.java:127)
at weblogic.security.acl.internal.Security.authenticate(Security.java:165)
at weblogic.security.acl.internal.Security.authenticate(Security.java:146)
at weblogic.security.auth.Authenticate.authenticate(Authenticate.java:112)
at weblogic.security.auth.login.UsernamePasswordLoginModule.login(UsernamePasswordLoginModule.java:184)
at sun.reflect.GeneratedMethodAccessor7746.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at javax.security.auth.login.LoginContext.invoke(LoginContext.java:769)
at javax.security.auth.login.LoginContext.access$000(LoginContext.java:186)
at javax.security.auth.login.LoginContext$4.run(LoginContext.java:683)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680)
at javax.security.auth.login.LoginContext.login(LoginContext.java:579)
at Thor.API.Security.LoginHandler.weblogicLoginHandler.login(Unknown Source)
at Thor.API.tcUtilityFactory.<init>(Unknown Source)
at com.thortech.xl.scheduler.core.quartz.QuartzWrapper.execute(Unknown Source)
at org.quartz.core.JobRunShell.run(JobRunShell.java:178)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:477)
ERROR,20 Apr 2011 08:40:00,058,[XELLERATE.ACCOUNTMANAGEMENT],Class/Method: XellerateLoginModuleImpl/login encounter some problems:
com.thortech.xl.security.tcLoginException:
at com.thortech.xl.security.tcLoginExceptionUtil.createException(tcLoginExceptionUtil.java:96)
at com.thortech.xl.security.tcLoginExceptionUtil.createException(tcLoginExceptionUtil.java:67)
at com.thortech.xl.security.Authenticate.connect(Authenticate.java:269)
at com.thortech.xl.security.Authenticate.connect(Authenticate.java:71)
at com.thortech.xl.security.wl.XellerateLoginModuleImpl.login(XellerateLoginModuleImpl.java:159)
at com.bea.common.security.internal.service.LoginModuleWrapper$1.run(LoginModuleWrapper.java:110)
at java.security.AccessController.doPrivileged(Native Method)
at com.bea.common.security.internal.service.LoginModuleWrapper.login(LoginModuleWrapper.java:106)
at sun.reflect.GeneratedMethodAccessor7737.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at javax.security.auth.login.LoginContext.invoke(LoginContext.java:769)
at javax.security.auth.login.LoginContext.access$000(LoginContext.java:186)
at javax.security.auth.login.LoginContext$4.run(LoginContext.java:683)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680)
at javax.security.auth.login.LoginContext.login(LoginContext.java:579)
at com.bea.common.security.internal.service.JAASLoginServiceImpl.login(JAASLoginServiceImpl.java:113)
at sun.reflect.GeneratedMethodAccessor132.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.common.security.internal.utils.Delegator$ProxyInvocationHandler.invoke(Delegator.java:57)
at $Proxy16.login(Unknown Source)
at weblogic.security.service.internal.WLSJAASLoginServiceImpl$ServiceImpl.login(Unknown Source)
at com.bea.common.security.internal.service.JAASAuthenticationServiceImpl.authenticate(JAASAuthenticationServiceImpl.java:82)
at sun.reflect.GeneratedMethodAccessor143.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.common.security.internal.utils.Delegator$ProxyInvocationHandler.invoke(Delegator.java:57)
at $Proxy34.authenticate(Unknown Source)
at weblogic.security.service.WLSJAASAuthenticationServiceWrapper.authenticate(Unknown Source)
at weblogic.security.service.PrincipalAuthenticator.authenticate(Unknown Source)
at weblogic.security.acl.internal.Security.authenticateLocally(Security.java:127)
at weblogic.security.acl.internal.Security.authenticate(Security.java:165)
at weblogic.security.acl.internal.Security.authenticate(Security.java:146)
at weblogic.security.auth.Authenticate.authenticate(Authenticate.java:112)
at weblogic.security.auth.login.UsernamePasswordLoginModule.login(UsernamePasswordLoginModule.java:184)
at sun.reflect.GeneratedMethodAccessor7746.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at javax.security.auth.login.LoginContext.invoke(LoginContext.java:769)
at javax.security.auth.login.LoginContext.access$000(LoginContext.java:186)
at javax.security.auth.login.LoginContext$4.run(LoginContext.java:683)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680)
at javax.security.auth.login.LoginContext.login(LoginContext.java:579)
at Thor.API.Security.LoginHandler.weblogicLoginHandler.login(Unknown Source)
at Thor.API.tcUtilityFactory.<init>(Unknown Source)
at com.thortech.xl.scheduler.core.quartz.QuartzWrapper.execute(Unknown Source)
at org.quartz.core.JobRunShell.run(JobRunShell.java:178)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:477)
ERROR,20 Apr 2011 08:40:00,060,[XELLERATE.ACCOUNTMANAGEMENT],Class/Method: tcUtilityFactory/tcUtilityFactory(Hashtable env, tcSignatureMessage poUserIDMessage) encounter some problems: javax.security.auth.login.LoginException: java.lang.SecurityException: [Security:090304]Authentication Failed: User xelsysadm javax.security.auth.login.FailedLoginException: [Security:090302]Authentication Failed: User xelsysadm denied
javax.security.auth.login.LoginException: javax.security.auth.login.LoginException: java.lang.SecurityException: [Security:090304]Authentication Failed: User xelsysadm javax.security.auth.login.FailedLoginException: [Security:090302]Authentication Failed: User xelsysadm denied
at weblogic.security.auth.login.UsernamePasswordLoginModule.login(UsernamePasswordLoginModule.java:199)
at sun.reflect.GeneratedMethodAccessor7746.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at javax.security.auth.login.LoginContext.invoke(LoginContext.java:769)
at javax.security.auth.login.LoginContext.access$000(LoginContext.java:186)
at javax.security.auth.login.LoginContext$4.run(LoginContext.java:683)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680)
at javax.security.auth.login.LoginContext.login(LoginContext.java:579)
at Thor.API.Security.LoginHandler.weblogicLoginHandler.login(Unknown Source)
at Thor.API.tcUtilityFactory.<init>(Unknown Source)
at com.thortech.xl.scheduler.core.quartz.QuartzWrapper.execute(Unknown Source)
at org.quartz.core.JobRunShell.run(JobRunShell.java:178)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:477)
ERROR,20 Apr 2011 08:40:00,060,[XELLERATE.SERVER],Class/Method: QuartzWrapper/execute encounter some problems: javax.security.auth.login.LoginException: javax.security.auth.login.LoginException: java.lang.SecurityException: [Security:090304]Authentication Failed: User xelsysadm javax.security.auth.login.FailedLoginException: [Security:090302]Authentication Failed: User xelsysadm denied
Thor.API.Exceptions.tcAPIException: javax.security.auth.login.LoginException: javax.security.auth.login.LoginException: java.lang.SecurityException: [Security:090304]Authentication Failed: User xelsysadm javax.security.auth.login.FailedLoginException: [Security:090302]Authentication Failed: User xelsysadm denied
at Thor.API.tcUtilityFactory.<init>(Unknown Source)
at com.thortech.xl.scheduler.core.quartz.QuartzWrapper.execute(Unknown Source)
at org.quartz.core.JobRunShell.run(JobRunShell.java:178)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:477)
[CMGR WARNING] Removing connection pool siebel.tcpip.None.none://172.30.16.51:2321/UW_PROD/eCommunicationsObjMgrClone_enu/!b.3c26
<com.siebel.common.common.CSSException>
<Error><ErrorCode>8716601</ErrorCode> <ErrMsg>Socket had incorrect word size: 0.(SBL-JCA-00313)</ErrMsg></Error>
</com.siebel.common.common.CSSException>
at com.siebel.om.conmgr.Connection.readPacket(Connection.java:550)
at com.siebel.om.conmgr.Connection.run(Connection.java:286)
at java.lang.Thread.run(Thread.java:619)
[CMGR FATAL] Error: <com.siebel.common.common.CSSException>
<Error><ErrorCode>8716601</ErrorCode> <ErrMsg>Socket had incorrect word size: 0.(SBL-JCA-00313)</ErrMsg></Error>
</com.siebel.common.common.CSSException> connection:d0214e
*************************************************************************************************************

Thanks for giving me an solution..
The cursor limit was incresed from 300 to 800 then for some hours the things went with no issues, the login was successfull and no errors in the logs. But again the same issue had arrisen.
For now i have taken bounce of the welogic servers because of the bounce i hope the existing/stuckup connections have been released and now the application is working fine and with no issues.
But is taking the bounce of the application server is the only solution for getting the things back to normal
Or
whether we need to take some other steps even after increasing the cursor limit the things don;t work.
Thanks,

Printing Issues with HP D145 and multiple users from G5

Hi - I've a HP D145 All-In-One connected via USB to a G5 (as described below). The machine has multiple accounts on for different members of my family. The printer is directly connected to the G5 via USB connection but is shared with other Macs. Printing has become increasingly difficult, and we now have the following problems:
1. Printing will only work from the administrators account.
2. Printing periodically (daily, generally after a few hours of use) stops from the administrators account
Solutions tried:
a. Check set up for the non-administrators accounts....Looks OK for printing
b. When printing stops - I've tried repairing the permissions with the Disk Utility. This no longer works.
c. Run Printer Setup Repair (with option to repair all user accounts) - Works for the administrators account providing the computer and printer are restarted, otherwise no effect.
d. Reinstalling the software - No effect
It’s beginning to look like I need to replace this printer with one that works.
You can help me in two ways - how to solve the printer problems, or alternatively suggest a colour All-in-One printer that can work with multiple accounts and does not have the problems mentioned above.
Many thanks in advance,
Regards,
Melvyn

Below I've copied the fix HP proposed and some additional information that they have sent me.
1. The proposed fix that we could not make work:
Hello Melvyn,
Thank you for contacting HP Total Care.
Simply reinstalling the software will not be enough to solve the
problem. Try these steps to resolve the issue at hand:
From the Administrator account:
Double-click on the Macintosh Hard Disk.
Open Applications.
Click and drag Hewlett Packard Folder to the trash.
Close all windows.
Double-click on the Macintosh Hard Disk.
Open the Applications folder.
Open the Utilities folder.
Double-click on Process Viewer/Activity Monitor
If Activity Monitor does not appear:
Choose Monitor in the toolbar across the top.
Check Show Activity Monitor.
Ensure the Activity Monitor shows "All Processes", instead of "My
Processes".
Single-click and quit each of the applications starting with HP, using
the Stop Sign that says "Quit Process" beneath it.
Close Activity Monitor.
Double-click Macintosh Hard Disk.
Open the Library folder.
Open the Preferences folder.
Click and drag either HP AIO Preferences or Hewlett Packard Preferences
to the trash.
Remove the HP Registry file.
Go back to the Library folder.
Open the Printers folder.
Remove the HP folder
Double click Macintosh Hard Disk.
Open the Users folder.
Choose the User logged into.
Open the Library folder.
Open the Preferences folder.
Click and drag either HP AIO Preferences or Hewlett Packard Preferences
to the trash.
Click and drag files beginning with com.hp to the trash.
Click and drag files beginning with HP to the trash.
Double-click the Macintosh Hard Disk.
Open the Applications folder.
Open the Utilities folder.
Double-click Printer Setup Utility.
Delete any HP All-In-One printers listed (click the printer name to
highlight it, then click the Delete button on the printer list)
Repeat process for all HP All-In-One Printers.
Remove HP Director/Image Zone from dock by dragging to the trash.
Restart the Macintosh.
Empty the Trash.
From each user account:
Double click Macintosh Hard Disk.
Open the Users folder.
Choose the User logged into.
Open the Library folder.
Open the Preferences folder.
Click and drag either HP AIO Preferences or Hewlett Packard Preferences
to the trash.
Click and drag files beginning with com.hp to the trash.
Click and drag files beginning with HP to the trash.
Double-click the Macintosh Hard Disk.
Open the Applications folder.
Open the Utilities folder.
Double-click Printer Setup Utility.
Delete any HP All-In-One printers listed (click the printer name to
highlight it, then click the Delete button on the printer list)
Repeat process for all HP All-In-One Printers.
Remove HP Director/Image Zone from dock by dragging to the trash.
Restart the Macintosh.
Empty the Trash.
From the Administrator account:
Download and install the latest software for this product. You can
obtain this software from the following link:
http://h10025.www1.hp.com/ewfrf/wc/softwareDownloadIndex?lc=en&cc=us⟨=en&os=219& product=64992&dlc=en&softwareitem=oj-35225-1
From each user account:
Double-click the Macintosh Hard Disk.
Open the Applications folder.
Open the Utilities folder.
Double-click Printer Setup Utility.
Click Add, ensure you are in the Default Browser.
Select the HP All-In-One Printer.
Click Add at the bottom-right corner of the screen.
Set this printer as the default.
You should now be able to print from all accounts.
Sincerely,
2. The reasons why it may not have worked:
We need to be sure that you are fully logging out of one account and
then back into the next. The fast user switching feature of the Mac OS
can create problems with our printer drivers. For this reason, fast user
switching is not supported by HP.
The other issue we may be running into would be the Mac OS itself. Over
the past few months the Mac OS has gone through several updates. When
the 10.4.4 version was released it created some issues with our existing
software. An updated version of our software has been developed which
works well with 10.4.4 and higher, but it is not available for this
printer.
It may be that as each new OS update is installed on your computers that
the issue becomes worse. If you are running the Mac OS 10.4.3 or lower
then the version 7.3.1 of our software should work fine. If it is 10.4.4
or higher there will be some issues as the new OS versions do not seem
to like the older drivers.
I would have to recommend retrying the full uninstall the Derek had
outlined. This time however, just install the downloaded 7.3.1 software
from our web site for the D145. Once it has been installed we need to
test it fully without adding the scanjet software. I am hoping that
without both version of our software installed it may work better.
This should resolve the issue. If you need further assistance, please
reply to this message and we will be happy to assist you further.
3. The repsonse to questions on switching and OS X 10.4.4
You are correct, since you are running the 10.4.4 I cannot guarantee
that the older software version will allow full functionality. It should
allow for printing and as long as you avoid the fast user switching,
when trying to print, it should keep working well.
I understand the convenience of fast user switching but you will have to
log completely out of one user, and then log properly into the next
before you can expect the printer to function.
I would still recommend trying the steps I had outlined as it really is
the only thing you can do that may work.
G5, 2 GHz dual processor, 2Gb RAM, 500GB Hard disk Mac OS X (10.4.3) Clarification of the issues from HP

Database access issue with EXECUTE AS with impersonated User account

Similar Messages

Maybe you are looking for