Function to validate APEX password entered after login within an app.

Hi Folks.
I have a requirement that, one or two functions in my app require a password to be entered.
What I'd like to do is provide the user a password field where they enter their APEX password and I can then call a function to validate the password entered against the user's APEX password.
I know, if they have logged in then they have already entered their password! But this is to cater for the 'unattended' PC scenario where a malicious user if trying to impersonate a restricted user.
I'd like a simple way of incorporating APEX password validation from within the application on an ad-hoc basis for security sensitive tasks/actions.
If anyone has any suggestions, I'd be most grateful.
Many thanks.
Simon.

Simon,
Use apex_util.is_login_password_valid.
function is_login_password_valid (
   -- Checks the wwv_flow_fnd_users table to see if
   -- username/password combo is valid within the current workspace (checking by security_group_id)
   p_username in varchar2 default null,
   p_password in varchar2 default null)
   return boolean
   ;Scott

Similar Messages

Oracle9i Startup Password box after login??? Cant bypass

I just installed Oracle 9i Personal Edition. I logged in with scott and tiger and that works, but then the Oracle 9i database tries to startup and there is a password box prompt that comes up on the screen. It asks for a password and none of these work
internal
oracle
scott
tiger
Someone please tell me what the password is or how to bypass it.
Thanks in advance!!!

My problem is exactly the same. I have tried manager as well. Doesn't work.
Raj.

Session state always invalid after login

Hello community,
i have a functional login process which uses my own login with username and password. After login i branch to application start page, but this session now is different from the start login session, so every login is invalid and will branch to authentication scheme invalid page.
My login url is: f?p=100:100:123456
After correct login (i have tested in the database with a lot of inserts into tmp_table)
i want to branch with the standard login procedure wwv_flow_custom_auth_std.login() to page 1000.
The correct url is shown in the browser, but the current page is the login page 100, because (i think) the session is invalid. In the authentication theme the invalid session page is set to page 100.
I have tested several pages and always this page is branched.
So im shure, that the session state is always invalid after login.
But why ????
Has anyone an idea ?
Thank you for responding.
Frank

Hi Jari,
problem was solved.
The IE8 has cached an invalid site.
I know now were it is come from.
I have an after submit process which sets the cookie with following code:
owa_util.mime_header('text/html; charset=UTF-8;', FALSE);
owa_cookie.send(
name=>'DHW_COOKIE',
value=>utl_raw.cast_to_raw(dbms_obfuscation_toolkit.md5(input_string => ':P100_REGCODE' || :P100_USERNAME ))
owa_util.http_header_close;
But this results in display on the screen like html text without tags, so it looks like text on the screen header.
It shows "content-type=text/html charset=WINDOWS 1252 .......
The cookie is not set to the disk and now the IE8 explorer is dead.
The described problem of this thread is shown.
If you close all sessions and restart IE8 then the error is fixed.
Also i have disabled the after submit process with setting the cookie.
So i live now without having a cookie set.
Do you have any idea for this behaviour ?
Frank

Error Message while login via iPhone App.

Hello,
after login at iPhone App an error message occurs.
"Server connection not possible: Please verify Server host and Port settings."
Where I could check it?
Used login:
Account -> corporate mail
Password -> new password from OIM
Server -> https://oradocs-corp.documents.us2.oraclecloud.com
Thank you for help!
Regards
Daniela

Hi Daniela,
You should try again because I've tried the mobile app on iphone and android on the same identity domain and it is working with the following credentials:
Account: corporate mail
Pass: permanent password
Server: https://oradocs-corp.documents.us2.oraclecloud.com/
Regards,
Cristiana.

IMac G5 Goes to Darwin Prompt after User Password is Entered at Login! Help

I have just made a fresh installation of the Mac OSX in my iMac G5 after some problems of its repeated powering off. It worked fine after the re-installation but when I tried to boot it up the morning after and after logging in on the start-up page, it took me to a prompt again asking for a user name and password. After Darwin identifies me, I expected it to boot up but it does'nt and keeps me on a prompt. Please help! I am a layman and I do not know these things. Any help will be appreciated. Thank you.

Sarbit, welcome to the discussions!
I had my midplane and PSU replaced back last August and have not seen anything that would make me believe that I will have a recurrence of the problem. Fortunately, if I do I am still covered for another year under the warrantee extension, as are you.

Unable to login to apex as admin after apparent successful installation

I am unable to login to apex as admin after an apparent successful installation.
I have an existing Oracle database 11.2.0.1.0 with Oracle Text running on Windows 7 Professional with hundreds of gigabytes of free disk space available. I did everything as an operating system user with administrator privileges. I downloaded the latest version of apex 4.0.2 for all languages, unzipped the downloaded zip file, extracting all files to an apex directory. I changed the working directory to apex and started sql*plus, connected sys as sysdba, ran apexins.sql installation, apex_epg_config.sql and apexconf.sql configuration, apexchpwd.sql to change the admin password, and apxldimg.sql to copy the images, and exec dbms_xdb.sethttpport(8080), unlocked accounts, and granted connect privileges.
The installation log did not show any errors and included:
"Thank you for installing Oracle Application Express.
Oracle Application Express is installed in the APEX_040000 schema.
The structure of the link to the Application Express administration services is as follows:
http://host:port/pls/apex/apex_admin (Oracle HTTP Server with mod_plsql)
http://host:port/apex/apex_admin (Oracle XML DB HTTP listener with the embedded PL/SQL gateway)
The structure of the link to the Application Express development interface is as follows:
http://host:port/pls/apex (Oracle HTTP Server with mod_plsql)
http://host:port/apex (Oracle XML DB HTTP listener with the embedded PL/SQL gateway)
JOB_QUEUE_PROCESSES: 1000"
When I use either browser, Firefox 3.6.12 or Internet Explorer 8.0, and go to http://localhost:8080/apex/apex_admin I get a screen that says:
"Enter Application Express internal administration credentials"
and has boxes for a username and password. When I enter admin and the admin_password that I selected, then click on login nothing happens. I don't get logged in. I don't get an error message. It does not show any signs of anything running. It just sits there. I also don't get any messages from Windows or Norton 360 indicating that a pop-up window was blocked or any such thing. I checked that the services are running and also tried shutting down the computer and re-starting (cold boot), but was still unable to login.
I am a retired developer, not a DBA, so if there is anything else that I should do or check or provide, then please let me know. I have provided a copy and paste of everything that I could think of below. Oddly I don't see an admin user.
SQL> select * from v$version
2 /
BANNER
Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - 64bit Production
PL/SQL Release 11.2.0.1.0 - Production
CORE     11.2.0.1.0     Production
TNS for 64-bit Windows: Version 11.2.0.1.0 - Production
NLSRTL Version 11.2.0.1.0 - Production
SQL> select status from dba_registry where comp_id = 'APEX'
2 /
STATUS
VALID
SQL> select username, account_status
2 from   dba_users
3 where username = 'ANONYMOUS'
4 or     username like 'APEX%'
5 or     upper (username) = 'ADMIN'
6 order by username
7 /
USERNAME                       ACCOUNT_STATUS
ANONYMOUS                      EXPIRED
APEX_030200                    EXPIRED
APEX_040000                    OPEN
APEX_PUBLIC_USER               OPEN
SQL> select dbms_xdb.gethttpport from dual
2 /
GETHTTPPORT
       8080
SQL> select owa_util.get_version from dual
2 /
GET_VERSION
10.1.2.0.8
SQL> show parameter memory_target
NAME                                 TYPE        VALUE
memory_target                        big integer 1536M
SQL>

Are you sure you did give right path to script ? Yes.
>
If you extract files to folder c:\temp, you have after that folder c:\temp\apex and bunch of sub folders.
For script to update images, you give path to folder where you did extract apex install files.
In above case that is then c:\temp .
>I created a directory c:\apex on my laptop. I downloaded the zip file to that directory. When I extracted the files to folder c:\apex, the result was c:\apex\apex with a bunch of sub folders and files. When I ran the script, I gave the path c:\apex as indicated in my copy and paste. So, I did everything the same as in the quote above, except that I used apex instead of temp.
Try extract Apex install zip to c:\temp and give c:\temp as path for scriptAre you suggesting that I redo the entire installation using c:\temp instead of c:\apex? What difference would that make? Would I need to do some sort of uninstall first?

How to redirect to different page after login in APEX 4.1

Dear All,
Here my Requirement is,When the users login,
when they entered their username and password and pressed login button,
they have to redirected to different pages based on the type of user.
Here my LOGIN_TABLE has following 3 columns,
1.Username
2.Password
3.Type.
The TYPE has 2 values, employee and admin.
when the type is admin they should be redirected to page 2,
reaining i.e employee users has to be redirected to page 3.
How can I do this? please give some suggestion.
Thank you.
regards,
Gurujothi

Dear Christian,
Thank you for your reply,
I would like to explain something,
When I using the following function,
*create or replace FUNCTION custom_auth_g (
p_username IN VARCHAR2,
p_password IN VARCHAR2)
RETURN BOOLEAN IS
BEGIN
FOR c1 IN (SELECT 1
FROM login_table
WHERE upper(username) = upper(p_username)
AND upper(password) = upper(p_password))
LOOP
RETURN TRUE;
END LOOP;
RETURN FALSE;
END;*
When login, It checks in the login_table table and if the username is exist with the pass word it successfully entered inside the application.
for all users only one page which we set.
My Login_table also contains type which has 2 type as I mentined above.
But As I mentioned earliar based on the user type it has to be redirected to 2 different page.
I found this Package but I cant understand,Can you please Explain?
*create or replace PACKAGE app_security_pkg
AS
PROCEDURE add_user
p_username IN VARCHAR2
,p_password IN VARCHAR2
PROCEDURE login
p_uname IN VARCHAR2
,p_password IN VARCHAR2
,p_session_id IN VARCHAR2
,p_flow_page IN VARCHAR2
FUNCTION get_hash
p_username IN VARCHAR2
,p_password IN VARCHAR2
RETURN VARCHAR2;
PROCEDURE valid_user2
p_username IN VARCHAR2
,p_password IN VARCHAR2
FUNCTION valid_user
p_username IN VARCHAR2
,p_password IN VARCHAR2
RETURN BOOLEAN;
END app_security_pkg;*
*create or replace PACKAGE BODY app_security_pkg
AS
PROCEDURE login
p_uname IN VARCHAR2
,p_password IN VARCHAR2
,p_session_id IN VARCHAR2
,p_flow_page IN VARCHAR2
IS
lv_goto_page NUMBER DEFAULT 1;
BEGIN
-- This logic is a demonstration of how to redirect
-- to different pages depending on who successfully
-- authenticates. In my example, it simply demonstrates
-- the ADMIN user going to page 1 and all other users going
-- to page 2. Add you own logic here to detrmin which page
-- a user should be directed to post authentication.
IF UPPER(p_uname) = 'ADMIN'
THEN
lv_goto_page := 1;
ELSE
lv_goto_page := 2;
END IF;
APEX_UTIL.SET_SESSION_STATE('FSP_AFTER_LOGIN_URL');
wwv_flow_custom_auth_std.login
p_uname => p_uname,
p_password => p_password,
p_session_id => p_session_id,
p_flow_page => p_flow_page || ':' || lv_goto_page
EXCEPTION
WHEN OTHERS
THEN
RAISE;
END login;
PROCEDURE add_user
p_username IN VARCHAR2
,p_password IN VARCHAR2
AS
BEGIN
INSERT INTO app_users (username, PASSWORD)
VALUES (UPPER (p_username),
get_hash (TRIM (p_username), p_password));
COMMIT;
EXCEPTION
WHEN OTHERS
THEN
ROLLBACK;
RAISE;
END add_user;
-- Function to Perform a oneway hash of the users
-- passwords. This cannot be reversed. This exmaple
-- is a very week hash and if been used on a production
-- system, you may want to use a stronger hash algorithm.
-- Read the Documentation for more info on DBMS_CRYPTO as
-- this is the supported package from Oracle and
-- DBMS_OBFUSCATION_TOOLKIT is now depricated.
FUNCTION get_hash (p_username IN VARCHAR2, p_password IN VARCHAR2)
RETURN VARCHAR2
AS
BEGIN
RETURN DBMS_OBFUSCATION_TOOLKIT.md5 (
input_string => UPPER (p_username)
|| '/'
|| UPPER (p_password));
END get_hash;
PROCEDURE valid_user2 (p_username IN VARCHAR2, p_password IN VARCHAR2)
AS
v_dummy VARCHAR2 (1);
BEGIN
SELECT '1'
INTO v_dummy
FROM app_users
WHERE UPPER (username) = UPPER (p_username)
AND PASSWORD = get_hash (p_username, p_password);
EXCEPTION
WHEN NO_DATA_FOUND
THEN raise_application_error (-20000, 'Invalid username / password.');
END valid_user2;
FUNCTION valid_user (p_username IN VARCHAR2, p_password IN VARCHAR2)
RETURN BOOLEAN
AS
BEGIN
valid_user2 (UPPER (p_username), p_password);
RETURN TRUE;
EXCEPTION
WHEN OTHERS
THEN RETURN FALSE;
END valid_user;
END app_security_pkg;*
And you said "assign an URL to FSP_AFTER_LOGIN_URL, depending on the Type column",
Where to assign,Could you please Explain?
Thank you.

When i type in my correct password on the login screen and press enter it just goes to a blue screen for a few seconds then goes back to the same login screen again, please i need help?

When i type in my correct password on the login screen and press enter it just goes to a blue screen for a few seconds then goes back to the same login screen again, please i need help?

You can take some of the steps here, #4, #5 or even trying a #18
Step by Step to fix your Mac
but I suspect your going to first have to create a data recovery drive
Create a data recovery, undelete boot drive
to get your data off the machine,
then do a #20 to eliminate the bad sectors as that's why your getting the "pinwheel" it's getting a delay reading from the drive, right when your trying to log in too, what a bad spot for it to happen.
Step by Step to fix your Mac

How do I disable a entering a password when I login to my Mac?

When I first got my MBA I was told to choose a password that i would enter at login, because it would make my computer safer. I have decided that since my computer never leaves my desk and I am the only one in my apartment. That I want to disable my password on my mac. The only thing close to this that I can find is how to change my password to something different. But I would just like to stop entering a password altogether.
I am not sure if this is possible, please help me. Thanks

I was just about to add what Babowa beat me to.
An option she forgot to mention is to set up two user accounts. One is an admin account only used to administer the computer. The second is the operating account. It is a Standard or Managed account in which the use of a password isn't so necessary because a standard account user cannot administer the computer. But whenever you want to make changes requiring the password, then you have to logout of your standard account and log into the Admin account.

I'm trying to install a cd application and I keep getting the message 'you do not have permission to use the application FSP OS X' Even after selecting always allow and entering my login details it still won't accept it. Help!!..

I'm trying to install a cd application and I keep getting the message 'you do not have permission to use the application FSP OS X' Even after selecting always allow and entering my login details it still won't accept it. Help!!..

Please repost in the Final Cut Pro forum. Have you considered upgrading your machine, if you are still running Leopard your machine may be as old as 5 years old. While this should not matter you probably won't get the performance you want out of a demanding app like FCP.
Best of luck.

After login but before I can access the internet I get a request for my login password so that - aosnotifyd - can access my login key chain. How can I get it to remember my password?

After login but before I can access the internet I get a request for my login password so that - aosnotifyd - can access my login key chain. How can I get it to remember my password?

Rephrase your question. Do you mean you keep getting login key chain errors?

Do u know how to prompt user to enter password and validate the password?

hi all,anyone knows how to prompt user to enter password and validate the password as well?I do not need the GUI.Can someone post the codes here?Thanks!

hi all,anyone knows how to prompt user to enter
password and validate the password as well?I do not
need the GUI.Can someone post the codes here?Thanks!Codes are
BufferedReader
System.in
if
else
System.out.

I was using firefox 5.0.1 & it was crashing frequently.I removed the installation & tried to reinstall.I getting a window asking for adminstrator password.Even after entering password,firefox was not getting installed

I was using firefox 5.0.1 & it was crashing frequently.I removed the installation & tried to reinstall.I getting a window asking for adminstrator password.Even after entering password,firefox was not getting installed

Sorry you are having problems. First of all try Fifrefox's safemode.
*[[Troubleshoot Firefox issues using Safe Mode]]
If that works post back for further advice.
Next step, if safe mode did not work.
First: Try a clean install, (you have had a none standard version installed previously) that involves deleting the program files. Then if necessary try troubleshooting by creating and using a clean empty Firefox profile.
See
* this recent post [/questions/940399#answer-377134]
* http://kb.mozillazine.org/Standard_diagnostic_-_Firefox#Clean_reinstall
Second: try a New Profile
*http://kb.mozillazine.org/Profile_Manager#Creating_a_new_profile
* this will be an additional profile, it is still worth backing up any existing or currently working profile on a regular basis
**[[Back up and restore information in Firefox profiles]]
* Until you are absolutely confident about the repercussions I suggest
** always use an empty folder when creating a new profile
** never delete or rename profiles, just disable or remove shortcuts
** after creating a new test profile open it and check for any addons or plugins that may be have been included by default

I can't update my apps. I touch the "Update All" button; it asks me for my Apple ID password but after I enter it nothing happens. I tried to update apps one by one but same problem continues.

I can't update my apps. I touch the "Update All" button; it asks me for my Apple password but after I enter it nothing happens. I tried to update apps one by one but same problem continues. Help please

The app that does not want to update was it originally downlaoded with a different ID? If so use that ID and hte password you set for it to update the app

I am trying to run page 192.168.0.170 for my IP Cameras but after login and password the page is not responding. Plz help!

I am trying to run page 192.168.0.170 for viewing IP Cameras but after login and password the page is not responding. Plz help!

I am trying to run page 192.168.0.170 for viewing IP Cameras but after login and password the page is not responding. Plz help!

Function to validate APEX password entered after login within an app.

Similar Messages

Maybe you are looking for