Database authentication & database account profiles

Hi,
Is anyone aware of any sample applications that uses database acccount profiles for password policies like ageing, length, reuse and so on.
I've searched the forums but havn't found any links
Has anyone experience in this field
Many thanks
Pete

Roger,
The authentication code and the general steps to hook it up are posted in this thread: Re: Custom Authentication
As far as checking profile settings and account status, I would run these checks in processes on your after-login page. If there are exceptions, the user can respond to them on that page. If there are no exceptions, the page should branch to the start-of-application page of your choice. How you access this profile/account information for the authenticated user is up to you to figure out. Keep in mind that you will not be connected as the database account you authenticated against, so there is really no "active" profile involved. Your application's parsing schema will need to be granted access to whatever dictionary views it needs for this purpose.
Good luck,
Scott

Similar Messages

Database Authentication Schema Setup

Hi, Page 13-17 in the User Guide talks about setting up DAD credentials verification. Text is copied below
About DAD Credentials Verification
DAD database authentication uses the Oracle database native authentication and user
mechanisms to authenticate users using a basic authentication scheme. To use DAD
credentials verification:
■ Each application user must have a user account in the Oracle database.
■ You must configure a PL/SQL DAD for basic authentication (without account
information).
how do i setup the dad without account information ?
- thanks
neelesh

nevermind, i just removed the PlsqlDatabaseUsername and Password and it worked.

Restricting developer toolbar when database authentication

hi,
When definying an application with authentication=database, and as I do not mark any database user as developer or not, I am not sure how to restrict the access to the developer toolbar. Could you please help me?
Thanks,

If you create a user you can set
User is a developer to "No"
User is a workspace administrator to "No"
Then the user will be an end-user (shows up as a green puppet if you go to Manage Users and set the View to "Icons").

External database Authentication Issue

Hello Experts
I have omplemented external database authentication in my PC and somehow its not working
Do we have to configure the details in NQSconfig file in the security section for implementing External Database Authentication .

Hello Thanks for your concern .
Steps i have followed
*1)* use that table. If not, create the following table in your database.
CREATE TABLE OBI_USER
USERNAME VARCHAR2(255 BYTE),
PASSWORD VARCHAR2(255 BYTE),
GROUPNAME VARCHAR2(255 BYTE),
DISPLAYNAME VARCHAR2(255 BYTE),
LOGLEVEL NUMBER,
CREATED_DT DATE sysdate,
**2)**Created New ODBC Connection to use Separate Connection pool for OBIEE Security .
*3)* Created New Session Initialization Block for Authentication and gave
(SELECT USERNAME, GROUPNAME, DISPLAYNAME, LOGLEVEL FROM CPR_OBI_USER WHERE UPPER( USERNAME) =UPPER(':USER') AND UPPER(PASSWORD) =UPPER(':PASSWORD') ) by selection the new BI Security connection pool
In the variable Traget i have defined 'USER', 'GROUP', 'LOGLEVEL','DISPLAYNAME'
*4)* Created another Session Initialization Block for Authorization and gave (SELECT 'GROUP', GROUPNAME FROM OBI_USER WHERE UPPER( USERNAME) =UPPER(':USER'))
And selected row wise initialization in variable target AND assigned Authentication Initialization block in the Execution Precedence .
*5)* Created Groups in Manage-> Security-> Groups with the same group names as given in OBI_USER Table
*6)* Added Groups in Manage Catalog and groups in Presentation Services .
*7)* When i log on with the user which is assigned to the group in the OBI_USER Table then its giving
(Unable to Log In
An invalid User Name or Password was entered.
Please enter your User ID and Password below, and then press the Log In button.)
Edited by: newbi on Sep 28, 2010 9:53 AM

DAD and Database Authentication with db link

I have a report that access a table via dblink and displays the result set.
I am trying to implement the database authentication for this using DAD. I created the new DAD without the plsqlusername and password. When I run this application with the valid apex_public_user I get a
ORA-00942: table or view does not exist ORA-02063: preceding line from DB1
But I can run the same SQL from sqlplus for the same user. What am I doing wrong? Any help appreciated.
Thanks

Found what was causing the problem. I had not given the workspace user the necessary permissions on the remote database.

OBIEE 11.1.1.7 external database authentication fails with hashed passwords.

Hi .
I use an external database ( Oracle database 11g release 11.2.0.1.0) to authenticate user with OBIEE 11.1.1.7.
I configured SQL Authentication provider as my provider ,It works OK with :enabled Plaintext Passwords Enabled option and password is stored as plain text.
But It fails when I disable this option and want to authenticate with hashed passwords.It gives Authenticate Denied error.
In Provider Specific tab there are some parameters which might need changes:
1-Password Algorithm:??
2-Password Style:??
3-SQL Get Users Password:SELECT U_PASSWORD FROM USERS WHERE U_NAME = ?
How can I find correct values for options 1 and 2 form my external database?
And Is it need to rewrite query in option 3 ?
Please find attach files.

Hi,
I too faced same issue when I was installing OBIEE 11.1.1.7.0 on windows7 64bit.
Please refer the below links.
http://satyaobieesolutions.blogspot.in/2013/05/configuration-action-creating-domain.html
http://satyaobieesolutions.blogspot.in/2013/05/obiee-111170-simplesoftware-installation.html
http://satyaobieesolutions.blogspot.in/2012/06/obiee-11.html
Hope this help's
Thanks,
Satya

Database authentication with 9iAS

Hi,
I was wondering if anyone nows when it will be possible to use database authentication with 9iAS. I don't mean just removing the password from the DAD configuration and authentication that way. I want to be able to have basic Oracle authentication like in OAS.

In the next release of iAS (towards end of year) single signon will be integrated with apache. At that time, it will be possible to do this.

Java Database Authentication

Hi :
I work on web application depends on EJB 3.0 and ADF Faces.
I don't want to use basic form authentication and authorizations for users...!!??
I heard about Java Database authentication and authorization...??
How can I use it...?? somebody helps me please...!!!
Send me any tutorial or anything related with it..
Thanks

Hi,
and the database authentication uses JAAS LoginModules with basic or form based authentication. See the oC4J Security guide
Frank

Can I change the database authentication

Hi,
I have created an application with database authentication. Can I change this to use application users authentication? Or can I import pages from aon application to another?
Thank you

in your application go to shared components-->Authentication Schemes
And choose tab "Change Current"
regards
jean marc

Using Database Authentication

We have 1000's of users in an Oracle Database 10g. I would like to use their Id/Password to login to an ApEX application (Version 1.6). When I use the DAD scheme, the authentication works fine but the user is identified as HTMLDB_PUBLIC_USER. I need the actual ID of the DB user in the session. Any suggestions? Thanks!

I not sure this is the same case. I just want to use the Oracle UserID/Pwd to authenticate. However, I need to get a login screen. Is there an easy way to do this? If I have already chosen the Database authentication scheme, why isn't there a simple way to connect the application to the Oracle users? The docs indicate the need to configure the dad file and I am not sure I have priviledges to do this. Is there a problem with modifying this file?

CONFIGURING OS AUTHENTICATION(OPS$ ACCOUNT) ON NT

제품 : ORACLE SERVER
작성날짜 : 1997-11-27
CONFIGURING OS AUTHENTICATION(OPS$ ACCOUNT) ON NT
=================================================
PURPOSE
다음은 Windows NT나 Windows 95 client에서 Windows NT server에
OS Authentication을 사용하는 방법에 대해 알아 본다.
Explanation
먼저, User Account는 Windows NT client와 Windows NT server에서 동일한
이름을 필요로 한다.
1. Oracle database가 있는 Windows NT server에 User Account를 생성한다.
1) Window의 '시작' -> '프로그램' -> '관리 도구' -> '사용자 관리자'
2) Menu의 '사용자' -> 'New User'
3) Windows NT Client에서 사용할 Username과 Password를 생성한다.
2. OPS$ Account를 생성한다.
1) startup된 db에서 sqlplus나 sqldba로 connect하여 user를 다음과 같이
생성한다.
CREATE USER OPS$<name> IDENTIFIED EXTERNALLY;
GRANT CONNECT TO OPS$<name>;
2) User에 대해 quotas와 더불어 default tablespace,temporary tablespace
를 지정할 경우는 다음과 같이 alter command로 setting한다.
ALTER USER OPS$<name>
DEFAULT TABLESPACE <tablespace1>
TEMPORARY TABLESPACE <tablespace2>
QUOTA 10M ON <tablespace1>
QUOTA 10M on <tablespace2>;
3) User생성에 대한 자세한 정보는 Server Administrator Guide를 참조한다.
3. Oracle database가 있는 Windows NT server에 Directory를 공유한다.
단, SQLNET Named Pipe를 사용한다면 Directory를 공유할 필요는 없다.
공유 parameter box에 공유 이름을 지정하고, 사용자 최대한 허용한다.
만약 사용자를 제한하고자 한다면 제한 버튼을 선택하여 지정한다.
4. 새로운 OS Authentication Account를 test한다.
단, SQL*NET 2.2 Named Pipe에 대해서는 아래의 1)단계를 할 필요 없음.
1) 공유된 NT server를 Network Drive 연결한다.
만약, 공유된 Directory를 선택하여 Password 확인하는 Message가 뜬다면
Client에 Logging한 Password와 User Password가 다르므로 재확인한다.
2) 마지막으로 Client에서 SQLPLUS를 실행하여 Database에 Logging 한다.
즉, username, password 를 입력하지 않고 '/@SQLNET2_DB_ALIAS'로서
OS Authentication Account connect를 사용하여 Database에 Connect할
수 있다.
Example
Reference Document
------------------

I can't think of a reason why transactions would affect this wait stat. I tried to repro your observations under SQL 2012 and SQL2014 without success. Could there be other activity against the instance during the test, such as SQL Server Agent or SSRS
background noise? As far as TRUSTWORTHY is concerned, are the Are the databases owned by the same login? Are the database owners Windows or SQL logins? What version of SQL Server?
PREEMPTIVE_OS_AUTHENTICATION_OPS is one of those wait stats I don't pay much attention to unless I suspect a problem related to Windows authentication. It is the times rather than the counts that are significant.
For example, I've seen high PREEMPTIVE_OS_AUTHENTICATION_OPS times as
a symptom of authentication traffic inadvertently routed to a DC in another data center, resulting in long connection times.
Dan Guzman, SQL Server MVP, http://www.dbdelta.com

Operating System authenticated Oracle account

Hi all,
Can i use the oracle built-in account "APPS" as the Operating System authenticated Oracle account? If I have an UNIX account "apps", then can i just alter user apps and set it to externally? Or I will need to create a new OPS$apps database account? Will there any conflict between the account apps and OPS$apps?
Thank you!

Can i use the oracle built-in account "APPS" as the Operating System authenticated Oracle account?
Yes
If I have an UNIX account "apps", then can i just alter user apps and set it to externally?
Yes.
I will need to create a new OPS$apps database account?
Yes, if your initialization parameter 'OS_AUTHENT_PREFIX' is set to 'OPS$'. Note that this parameter could be set to null. Also note that the text of the 'OS_AUTHENT_PREFIX' parameter is case sensitive on some operating systems.
Will there any conflict between the account apps and OPS$apps?
If the initialization parameter 'OS_AUTHENT_PREFIX' is set to 'OPS$', there are now two different Oracle users.
They are 'APPS' and 'OPS$APPS'. The following link will provide you a lot of information on authentication.
http://otn.oracle.com/pls/db10g/db10g.drilldown?remark=&word=AUTHENTICATION&book=&preference=
If I were you, I would try it on a development/test
system before implementing it in production.

Error: The specified mailbox database [Mailbox Database Name] does not exist, when you try to export mailbox in Exchange 2007

[Symptom]
======================
In Exchange 2007, when you want to export mailbox to a .pst file, you should run the
Export-Mailbox cmdlet from a 32-bit computer that has the following installed:
The 32-bit version of the Exchange management tools
Microsoft Office Outlook 2003 SP2 or later versions
If not, you may encounter the following error message:
You check that you have these required installed, but you get the error below when you run Export-Mailbox in EMS.
“The specified mailbox database [Mailbox Database Name] does not exist.”
[Cause Analysis]
=======================================
This is because that the account you use to run Export-Mailbox cmdlet don’t have the Exchange Server Administrator role assigned.
You can check if this account has been delegated the Exchange Server Administrator role through the following path.
EMC -> Organization Configuration-> Check permissions in the result pane.
To delegate this Exchange Server Administrator role, right click on the
Organization Configuration node and choose Add Exchange Administrator,
you will see the Add Exchange Administrator window.
[More Information]
==============================
Export-Mailbox
http://technet.microsoft.com/en-gb/library/aa998579(v=exchg.80).aspx
How to Export and Import mailboxes to PST files in Exchange 2007 SP1
http://blogs.technet.com/b/exchange/archive/2007/04/13/3401913.aspx
Exchange 2007 cannot export pst files via its powershell
http://social.technet.microsoft.com/Forums/forefront/en-US/b3bc0dce-35f3-4a69-9a33-4f2a855b9f94/exchange-2007-cannot-export-pst-files-via-its-powershell?forum=exchangesvrgenerallegacy
Please click to vote if the post helps you. This can be beneficial to other community members reading the thread.

Hi,
Based on my test, if you make the user the owner of the database (rather than a user with the db_owner role), when you create a query, it creates it under the dbo schema rather than DOMAIN\username.
Steps to do so (in Management Studio):
Right click database, select Properties
Click File
Change Owner in the textbox
OK to confirm
Downside - other users under db_owner role will still have their username appended. So schemas have to be created for these users.
Jaynet Zhang
TechNet Community Support

I want to connect SAP HANA database (Default database) using JDBC connection URL.

I am using trial account .at sap cloud server.
What will be my URL of SAP HANA database for Trail account.
For ex:
java.sql.Connection conn= java.sql.DriverManager.getConnection("jdbc:sap://<YOUR SAP HANA IP>:host","<YOUR SAP HANA USER>","<YOUR PASSWORD>");
I had User and password but what supposed to be used in place of IP and Host ?

Thanks .But iwant to use like this ..and below properties are not working
repliesd as connectin refused -813
please help onthis
<bean id="dataSource"
      class="org.springframework.jdbc.datasource.DriverManagerDataSource">
      <property name="driverClassName" value="com.sap.db.jdbc.Driver"/>
      <property name="url" value="jdbc:sap://localhost:30015/?currrentschema=TestSchema" />
      <property name="username" value="p1940828544"/>
      <property name="password" value="[email protected]"/>
   </bean>

I am running 4 ipod classica through one computer and one itunes account/profile. The ipods belong to me, husband and 2 kids. How can the kids now get their own accounts but keep the stuff I have already downloaded for them? They have their own laptops

I am currently running 4 ipod classics through my own account/profile on itunes. They belong to me, my husband and 2 kids.
The kids are getting older now and have their own laptops. I would like them to have their own itunes accounts as they will be away from home much of the time and will want to make their own puchases.
How can I set them up so that they are independent from my account, but not lose the content that I have downloaded for them over the years? (A lot of content).

You and your husband can share a store account and still have seperate iCloud accounts for your contacts, bookmarks and stuff like that. Click here for instructions to make an apple account without entering a credit card. Make sure you use a different email address for each apple account.
Set up your iPhone/iPad whatever using the new account for iCloud. Then go into settings/store and sign in with your purchasing account, you may need to sign out of the other account. To the best of my knowledge, your household is allowed to share purchased legally, someone please correct me if I'm wrong.
Once you each have your own devices set to your own accounts you can set them to backup to that account and it will keep all your contacts seperate.

Database authentication & database account profiles

Similar Messages

Maybe you are looking for