DATABASE_LINK with CURRENT_USER for user identified externally
Hi,
My database is in standard edition 10.2.0.5 on windows.
I have a user OPS$xxx identified externally.
the connection with this user "sqlplus /@service_name" is ok.
A database link has been created with these options :
select * from dba_db_links;
OWNER DB_LINK USERNAME HOST CREATED
OPS$xxx TEST_DB CURRENT_USER SERVICE_NAME 19/10/11
This database link references the same database
( it is an external application which has created it).
if we test with sqlplus, we have :
sqlplus /@service_nameSQL*Plus: Release 10.2.0.5.0 Production on Fri. Oct. 21 09:58:40 201
Copyright (c) 1982, 2010, Oracle. All rights reserved.
Connected to :
SQLPLUS> select count(*) from user_tables@TEST_DB;
ORA-1017: invalid username/password; logon denied
So is it possible to use this type of database link ? And if it is, how can you do that ?
Or only "user identified globally " can use database links with current_user...
Thank you in advance for your help.
Best regards
Marie
A connected user link should work per the reference:
The ability to use a connected user database link depends on several factors, chief among them whether the
user is authenticated by the database using a password, or externally authenticated by the operating system or
a network authentication service. If the user is externally authenticated, then the ability to use a connected user link
also depends on whether the remote database accepts remote authentication of users, which is set by the
REMOTE_OS_AUTHENT initialization parameter.HTH -- Mark D Powell --
insert line breaks to try to limit width
Edited by: Mark D Powell on Oct 21, 2011 9:17 AM
Edited by: Mark D Powell on Oct 21, 2011 9:18 AM
Similar Messages
-
SSO and Form 10g, Setting RAD of OID for DB users identified externally
Please Help!
Current environment:
- All users were created with identified externally in Database (OPS$)
- SSO was setup correctly according to OID admin guide Ch 43 and SSO admin guide ch 8 for App10g. (user login orasso without seeing basic auth/sso login form)
- DB parameters:
remote_os_authent=TRUE
os_authent_prefix=' '
issues:
- set ssoDynamicResourceCreate = true
When user hit the form link, i.e. http://host:port/forms90/f90servlet?config=test&form=appwelcome
it redirects to http://host:7777/oiddas/ui/oracle/ldap/das/mypage/AppCreateResourceInfo?...
where it shows Resource Name TEST and prompts username/password/database
when user inputs window logon /password/database value (same as in form6i)
it returns ORA-01017: invalid username/password; logon denied.
- set ssoDynamicResourceCreate = false
manually set RAD for the end user (I am not sure if I am doing this correctly):
Name = test
TYPE = oracledb
username = (blank)
password = (blank)
datebase = prod
When enduser hits the form link, it returns ORA-01017.... same errors.
Any ideas how to trouble shoot and configure RAD for users with OPS$ auth?
thank you in advance!
KanThank you for your input!
This is how our current production is setup that users use os authent (OPS$) to access forms/reports 6i. I'm just trying to migrate it to app10g environment.
I did configure SSO with WNA, it works fine. Any users can access NON-DB connected forms/reports. Only when forms/reports require DB conn, users who
have db password can access them with one click. But users identified externally will keep seeing Oracle Logon and Ora-01017 after authent into MidTier.
Setup RAI with one real db user account is not ideal since there are 1000+ OS authent users who have different database roles. Turn off the OPS$ and setup dummy password for 1000+ users may be the last solution.
v/r
Kan -
Connecting with java2 1.4 & user identified externally
Hi,
I try to connect to the Oracle DB 8.1.7. in my java-program (url : <
jdbc:oracle:oci8:@ >) with a user that is identified externally (OS-unix
SUN) . The version of java2 is 1.4
My java-connection work correctly with the Oracle jdbc-driver
"classes12.zip" in my CLASSPATH.
But is NOT work with the last jdbc driver of Oracle "ojdbc14.jar" in my
CLASSPATH. I assume that I have to install also the OCI shared
libraries. But which version of the OCI libraries : 9.2.0.1 or 9.0.1 or
8.1.7 ? Can I use the OCI libraries 9.* for a connection to Oracle
Database 8.1.7?
Other question: is it possible to connect with a user identified
externally with the thin driver?
Kind regards,
Kristoffel DE GEESTRalph_CC wrote:
If I want to connect to a user of this sort, can anyone tell me what I put in the
setPassword( passwd ); method for OracleDataSource getConnection please.
I cannot see any clue in the java API doc. (Using 11g & Java 1.6.30)You connect as a user,
you provide the password for the user using setPassword(),
as in this example;
http://www.rgagnon.com/javadetails/java-0545.html
which connects as user 'scott' using password 'tiger'. -
Hi all, i'm new to Mac book & Xcode. I'm learning and facing problems while creating a new file for Xcode. Before i upgrade the software, i have no issue to create simple steps in apps. After upgrade Xcode to 4.6 version, i'm facing lot's of issue eg.
1) "the identity "iphone developer" doesn't match any valid certificate/ private key pair",
2) can't select the box "with XIB for user interface" if the subclass is "UIViewController"..
Appreciate for any help rendered.Mikko777 wrote:So what is the best?
I wouldn't judge. I've been to Arch for a week, you know? But as said, it's VERY close to it.
What I dislike after a week is makepkg not handling dependencies automatically (which would be overhead, so probably not appropriate).
Mikko777 wrote:Also theres KDEmod for modular kde, dunno if its for 64 bits tho.
Don't actually need that as said ... I see no real benefit of having that other than not beeing a KDE user or having Gentoos useflags.
Mikko777 wrote:PS:You produce a lot of text and welcome smile
Yeah. Wonder why I'm still employed? So do I ... -
"With Xib for user interface" option Disabled
I was able to use the "With Xib for user interface" a couple of days ago but now when I try to create new object-c file with xib interface, I cant use the checkbox. It is disabled. What may be the problem? How can I create a file with xib again?
Does the following Stack Overflow question help you?
How to create new View Controllers in XCode 4.3
If not, you're going to have provide more information for anyone to help you. What version of Xcode are you using? What type of Objective-C file are you creating? What type of project are you adding the file to? -
I downloaded and installed Oracle Ex on Windows XP Professional SP 2 taking all of the defaults and all when swimmingly. Then I used sqlplus to create an externally identified user. The user was created. However if I enter "sqlplus /" to connect as the user I get
ORA-01017: invalid username/password; logon denied
This same procedure works under Linux. How do I get it to work under Windows?
Thanks,
johnCreating External users in Oracle
For example, consider the following user definition:
CREATE USER OPS$SCOTT IDENTIFIED BY TIGER;
Assuming that Scott has logged onto the operating system, Scott could enter SQL*Plus with or without a password:
sqlplus /
sqlplus scott/tiger
You can also create the user with the "identified externally" clause:
CREATE USER OPS$SCOTT IDENTIFIED EXTERNALLY;
Create Oracle External users in Windows
External users are easy to create in Linux because you need only create the user in /etc/passwd. It's a bit trickier in Windows:
1. Create the Windows user:
start --> settings --> control panel --> administrative tools --> computer management --> user
2. Add the new user to the Oracle group:
start --> settings --> control panel --> administrative tools --> computer management --> groups
3. Add user to OS Database Administrator:
start --> programs --> oracle home --> configuration and migration tools --> administration for windows NT --> OS database administrator
4. Add user to OS Database Operators:
start --> programs --> oracle home --> configuration and migration tools --> administration for windows NT --> OS database operators
5. Add user to OS Administrator:
start --> programs --> oracle home --> configuration and migration tools --> administration for windows NT --> OS administrator
6. Add user to OS Operators:
start --> programs --> oracle home --> configuration and migration tools --> administration for windows NT --> OS operators
7. Add os_authent_prefix=OPS$ to your initialization parameters (pfile or spfile) and bounce Oracle database, if necessary.
Ref: http://www.dba-oracle.com/t_windows_external_user_authentication.htm -
Dropdown list (predefined list) along with provision for user to enter text
Hi,
Is there any provision in J2ME to have
" a drop-down list , which contains predefined variables. if the user does not want to use those predefined variables, then a provision for user to enter text."
thanks in advanceAppend Method
I would create a box / div in Animate then when you publish it and put it on your page just append a form with an email input ( <input type="email></input>" ) and submit button.
<form action="url">
<input type="email" name="usremail">
<input type="submit">
</form>
This page provides a lot of information on how to use Edge Animate and how to do more advanced things.
http://www.adobe.com/devnet-docs/edgeanimate/api/current/index.html -
Hi,
In our organization we have enabled the OS authentication and even having the DBA role is not possible edit views using SQL Developer.
Anybody knows if is there any workarround to enable this feature ?
Thanks in advance.
Edited by: user12099033 on Jul 15, 2010 9:44 PM
Edited by: user12099033 on Jul 15, 2010 9:45 PMThanks for getting back to me so quick!
You were correct to assume that I was referring to a View. All of our users have been added to a standard user role that providers that basic functionalities that they need. This particular user's access is exactly the same as the other users in his department,
yet he is the only one who has experienced this problem. All of the user roles that we have added this user to contain at least 10 other users who have not reported any issue like this.
I am wodering how this problem could only apply to this one user even after changing devices. I should also mention that with each of the devices that this user has worked on, there was a period of time when he was able to work in SCSM without
any issues. What could have changed that caused this error to arrise on two separate occasions for just one user?
The biggest issue is the fact that he is unable to edit activities. Am I correct to assume that these two issues are connected?
I hope this message helps to clarify the problem we are experiencing.
Thanks,
Nick -
Best way to pre-populate material variable with values for users
Hi, I have a requirement to prepopulate a material variable with about 5 materials and that is the materials that will default when the query is called. The users would also need the ability to change those values.
My thought is to create a User-exit variable that derives the values from a user maintained table (infoobject).
Does anyone else have any suggestions or ideas on the best way to handle this?I don't know if there is a best solution...
Infoobject
With this option you have to create a new infoobject (ZMATERIAL) without attribute (you need only a list material codes) and then to set the authorization profile for the user in order to manage the content.
The creation of an infoobject corresponds to a table creation, but you don't need any other specific options that belong to the infooject (as technical object)...
Table
With this option you have to create a Z table with only one field and then to allow the maintenance of the table by SM30....
In the ending, if you want to be a purist use the table, otherwise use an infoobject (but there are no significant differences !
Bye,
Roberto -
Assistance with prompting for users and then adding them to a command in PowerShell
I'm trying to create a very simple script to add members to a Distribution Group. I want to do something like I added below. I would like to prompt for user1, user2, user3, etc.. until I have no more users to add instead of manually typing out
the command below. Each time there will be a different number of users to be added. I do not want to do a csv import since it creates extra work when sometimes I only need to add 2-3 users. I find using a csv works great but takes too long when
I only have a few to add. I would like a way to just keep typing user aliases until I have no more and then hit enter and have it take my entries and enter them into the command below or some other similar command. I would like everything embedded
in the ps1 file with no other files to deal with. Any help will be appreciated. Thank you in advance.
$DLName = Read-Host "Enter the name of the DL that members will be added to."
"user1","user2","user3" | Add-DistributionGroupMember -Identity $DLNameHere's another option:
$DLName = Read-Host 'Enter the name of the DL that members will be added to.'
((Read-Host 'Member List, separated by commas').Split(',')) | ForEach { Add-DistributionGroupMember -Identity $DLName -Member $_.Trim() }
Don't retire TechNet! -
(Don't give up yet - 13,085+ strong and growing) -
Populate CL_GUI_TEXTEDIT editor with text for user to modify
Hi, What method of class CL_GUI_TEXTEDIT can I use to prepopulate the onscreen editor for someone to modify? Also, an example would be greatly appreciated!
Thanks
I am using this program to maintain a string field URL in a table. If you have a better way it would be greatly appreciated!
REPORT ZDW_1ST_RX_LINK_MAINT.
DATA: DOCKINGLEFT TYPE REF TO CL_GUI_DOCKING_CONTAINER.
DATA: TEXT_EDITOR TYPE REF TO CL_GUI_TEXTEDIT.
DATA: REPID TYPE SYREPID.
DATA: TEXTLINES TYPE TABLE OF TLINE-TDLINE.
DATA: WA_TEXT TYPE TLINE-TDLINE.
DATA: REPORT_URL TYPE STRING.
DATA: TEXT_ITAB TYPE TABLE OF SOLISTI1.
DATA: TEXT_ITAB2 LIKE LINE OF TEXT_ITAB.
PARAMETERS: P_REPGRP TYPE ZDWRPTGRP. " Report
PARAMETERS: P_SFORCE TYPE /BIC/OIZDWSFORCE. " Report Qualifier
PARAMETERS: P_REPDES TYPE C LENGTH 60.
PARAMETERS: P_ACTION TYPE C. " Action
AT SELECTION-SCREEN OUTPUT.
REPID = SY-REPID.
CREATE OBJECT DOCKINGLEFT
EXPORTING REPID = REPID
DYNNR = SY-DYNNR
SIDE = DOCKINGLEFT->DOCK_AT_BOTTOM
EXTENSION = 280.
CREATE OBJECT TEXT_EDITOR
EXPORTING PARENT = DOCKINGLEFT.
START-OF-SELECTION.
CALL METHOD TEXT_EDITOR->GET_TEXT_AS_STREAM
IMPORTING
TEXT = TEXT_ITAB
EXCEPTIONS
OTHERS = 1.
LOOP AT TEXT_ITAB INTO TEXT_ITAB2.
CONCATENATE REPORT_URL TEXT_ITAB2-LINE INTO REPORT_URL.
ENDLOOP.
DATA: S_SFURL TYPE ZDW_SFURL.
S_SFURL-REPORT_GROUP = P_REPGRP.
S_SFURL-SALES_FORCE = P_SFORCE.
S_SFURL-REPORT_URL = REPORT_URL.
CASE P_ACTION.
WHEN 'I'.
INSERT ZDW_SFURL FROM S_SFURL.
WHEN 'D'.
DELETE FROM ZDW_SFURL
WHERE REPORT_GROUP = P_REPGRP
AND SALES_FORCE = P_SFORCE.
WHEN 'U'.
UPDATE ZDW_SFURL FROM S_SFURL.
ENDCASE.Or you can use the methods in this example.
report zrich_0001 .
data:
dockingleft type ref to cl_gui_docking_container,
text_editor type ref to cl_gui_textedit,
repid type syrepid.
data: itext type table of tline-tdline,
xtext type tline-tdline.
parameters: p_check.
at selection-screen output.
repid = sy-repid.
create object dockingleft
exporting repid = repid
dynnr = sy-dynnr
side = dockingleft->dock_at_left
extension = 1070.
create object text_editor
exporting
parent = dockingleft.
xtext = 'http:\www.sap.com'.
append xtext to itext.
call method text_editor->set_text_as_r3table
exporting
table = itext
exceptions
others = 1.
start-of-selection.
call method text_editor->get_text_as_r3table
importing
table = itext
exceptions
others = 1.
loop at itext into xtext.
write:/ xtext.
endloop.
Regards,
RIch Heilman -
Connect as user identified globally/externally?
Greetings! :)
I have an old app where fat SWING client app connects to the DB with Oracle DB user/pass. I would like to change this. I believe "user identified globally/externally" is the right choice. Is there any (Java) example of login as global/external user? I have read that for global/external users tokens are acquired, but I don't know how to acquire tokens?
Example: I have Java fat client which shows a dialog asking user for its user/pass. Then I send this user/pass to another Java web app, which check user/pass and asks DB (how?) for token. Then I send this token from my web app to the fat Java client app and it connects (how?) with DB.
So:
1. How to get token for external/global user?
2. Where to put token in DB connection string when connecting with DB (instead of password?)?
I have already asked this question in Oralce DB security and Java security forums without any results.
P.S. Is there any other way for app to connect to DB without giving password? I would'n like to use Kerberos or LDAP or some tools. I would like to make my own solution with JDBC.
Thank you in advance :)>
Is there any other way for app to connect to DB without giving password?
>
Maybe this doc has the info you are looking for.
See chapter 3 Configuring Authentication in the Database Security doc
http://oracle.su/docs/11g/network.112/e10574/authentication.htm#i1006269
Configuring Global User Authentication and Authorization and Configuring an External Service to Authenticate Users and Passwords
have the information.
You can also see the 'Proxy from Users Identified Externally' and 'Establish a Proxy Session' references in this link
http://books.google.com/books?id=BaRbj93G1XMC&pg=PA159&lpg=PA159&dq=oracle+java+identified+globally/externally+proxy&source=bl&ots=m75SfHNGe-&sig=LRhANCaoxVJ2Ovd8G8at3rp4wqI&hl=en&sa=X&ei=6y9zT6nCEaiYiAKN15yuCw&sqi=2&ved=0CDUQ6AEwAw#v=onepage&q=oracle%20java%20identified%20globally%2Fexternally%20proxy&f=false
And this AskTom link has an approach - see Followup September 24, 2004 - 9am Central time zone:
http://asktom.oracle.com/pls/apex/f?p=100:11:0::::P11_QUESTION_ID:21575905259251 -
Schema owner identified externally
I have an oracle 11g, apex 3, OHS implement. The schema assigned to my workspace has owner, identified externally. I can find no workspace/schema relation administering Oracle-XE. Looks like the database username that logs in to the Administration Home is the schema to be parsed. My trouble is that I cannot login to the Administration Home with the user identified externally.
Please advise.I've upgraded the version of Apex that was installed with Oracle-XE. I matched Apex version with that of the Oracle 11g environment; that is, version 3.1.2. So, now I can create developers and workspaces that reference schemas of the developers' choosing, than the one developer (database user) owning the schema it references.
-
How can I make (automatic) accounts for users of my adobe muse site?
Adobe, google, facebook and more site haves accounts for his users, but how can I make a system with accounts for users of my adobe muse site?
Hi,
Try some suggestion given in this thread
http://forums.adobe.com/message/5362643#5362643 -
Authorization for limited vendor for user in FBL1n
Hi,
I have certain user in my company, to whom, i want to give t-code FBL1N access. But for some vendors only.
Please let me know, how it can be done.Hi Durga
As far as I see I can suggest you 2 options:
1. You can create a validation with sets for users and vendors. This way you can restrict to only the t-codes you want the restriction to apply
2. You can co-ordinate with BASIS to restrict using authorization object F_BKPF_BEK. You have to assign authorization group to vendors and give authorization to users for specific authorization groups. In this case, you cannot restrict only to FBL1N. The restriction would be applicable to all the transaction codes for the users where vendors are impacted.
Regards
Sowmya
Maybe you are looking for
-
My mum has upgraded to the iPhone 5, she has given me her 4S with a new contract etc. the problem is all her contacts are still on here and calendar dates etc . All from her iCloud account. I have my own account but I don't know how to get my phone o
-
List boxes on selection screen
i have a selection screen on which there are two list boxes of which one should accept matnr, as soon as matnr is selected the werks in the other list box should be displayed for that matnr....
-
Command line parameters as args
Hi, My program expects configuration as parameter. for ex java Myclass url myURL u myUser --p myPwd now, In case of loadjava, how do i pass these parameters as command line arguments on oracle db server??? Regards Praveen
-
I want to rename a folder on server. How can I do this?
-
HT1923 Itunes 11.1.3 update crashed, uninstall not going well.
Itunes uninstall wont proceed as Apple Mobile Device wont uninstall in windows 7, downloaded Revo but it doesnt see it on program list but windows does but cant seem to remove, does apple have an uninstaller?