How to Kick Duplicate Active User Logins?

Hello,
At certian times during the day we are hitting our user license limit. After further investigation we are noticing two things. One is that some users are logging into the system in more than one browser which in turn is taking up multiple licenses. Two sometimes the user leaves for the day (or lunch) and closes the browser window instead of pressing the Logout button.
So my question is: Is there a way (or utility) that will allow administrators to kick users off the system which will free up the license?
As always thanks,
Mike

Hello Mike,
Pop-up windows for browses are automatically closed upon selection or via the cancel button and with the close button from within the application for report pop-ups.
If IE is used for other things,then we can discard this workaround.
About the second question,in Netweaver there is capability to terminate an HTTP session,when we click the button "Terminate" -the http session is terminated and a license slot released.
Not sure about the underlying mechanism and if this causes a servlet with that session to be destroyed freeing up a license.The same functionality is not available in weblogic.
The license mechanism is handled by the application logic not by weblogic if I correctly understood your question.
About the customization,I believe that it is possible to port it to your branch.
Thank you,
German

Similar Messages

How to see the active users in the AS JAVA?

Hi Experts,
In as java how to see the active users in the system.Kindly,tell me step by step details to find the active users.As I'm new to the Netweaver administration.
Thanks,
Reddy

Hi,
You can find the login sessions with Timestamp and User in Visual Admin under SecurityProvider and tab Runtime and Login sessions. You might also get these details in NWA->Monitoring->Availability.
Regards, Rahul

How can I restrain the user login portal once, in the same time ???

Hi
I need to restrain the user can't repeat to login portal ....
to reduce portal loading
How can I restrain the user login portal once, in the same time???
Which attributs in Identity Manager or amconsole I can do it to restrain the user ??
tks

Does your portal support anonymous access? If so, make sure you are using the authlessanonymous mode. This mode only creates one session that is shared for all anonymous users. This is much more efficient than anonymous access, which creates a session for each anonymous user.
I have no other recommendation for limiting users to a single login. In general, web applications do not behave like this. What if a user closes their browser without logging out? Does the user have to wait until the session times out in order to log back in again?
The same thing is true for users that are mobile. If a user leaves their office without logging out and then attempts to log in with a laptop in the conference room, then access will be denied in your implementation. Users do not expect this type of limitation being built into the system.
If you are having problems scaling, then you need to look at your architecture and perhaps add some more resources. Also, make sure you are making efficient use of the authlessanonymous access mode as stated above.
- Jim

How do I add Another "User" login to my wife's Mac Book Pro?

How do I add Another "User" login to my wife's Mac Book Pro?

System Preferences>Accounts. Unclick the lock and add away.

How can I duplicate a user?

I have a small lab of Macs running Snow Leopard.
There is an existing user on each machine (Student) and I want to create a duplicate of that user (Student 2) on each machine using ARD.
I can see how to add a new user, but I'd like to duplicate the existing user with all the "bits and pieces" (dock icons, permissions, files, etc) of that user on each machine.
I can't find any way to do that with ARD... or at least I can't find any place that this operation is documented.
Any help would be most appreciated.
Thanks!

Ones you create the user you can copy the account from one user to another user
ie:
send unix command as root
ditto /Users/Student1 /Users/Student2
if you wanted to create the account and copy it, then you can do some thing like:
dscl / -create /Users/Student2 <--- must not conflict with another user
dscl / -create /Users/Student2 UserShell /bin/bash
dscl / -create /Users/Student2 RealName "Student2"
dscl / -create /Users/Student2 UniqueID "1015" <--- must not conflict with another user
dscl / -create /Users/Student2 PrimaryGroupID 80
dscl / -create /Users/Student2 NFSHomeDirectory /Users/Student2
dscl / -passwd /Users/Student2 SamePasswordAsStudent1
ditto /Users/Student1 /Users/Student2

How difficult to create a user login area, and where to start?

I have a website which I created in Microsoft Expression Web 4. I would like to add a user login area and tie it to an existing SQL database which is updated frequently. I am not sure where to start or how likely I am to succeed. It is for a client's
website, so I am willing (and hopefully able) to learn, but do not want it to turn into a long drawn out project.
I can code in html and css and use java scripts. I don't know visual basic or how to work within the database (it will be provided by the client). I'm open to any advice on how easy or difficult this will be without other forms of coding knowledge, and would
love any advice on the best place to start. I have found some tutorials and downloaded MS Visual Studio Express 2013, since it was coming up as the best program for this.
Thank you for any advice!

You want to create a login in SQL? any way you need one to access the database. You may need to contact your DBA to do it as you maynot be authorized to do it. Use below link to know creating SQL logins/Users.
http://www.blackthornesw.com/robo/projects/blackthornepro/HOWTO_-_Creating_a_SQL_Server_Database_Login_Account.htm
Thanks
Swapna

How do I duplicate a user account?

I have the main admin account which I installed all the software and I want to create a user account that is also an admin that I will work in. When I go to this new account some of the previously installed software is no longer registered. I don't want to have to reauthorize all the software. Is there a way to make this work? Is there a way to duplicate a user? Or is there a way to make sure my software will work in newly created users?
thanks,
chris

What you can try is to copy the "~/Library" folder from the "old" user accout to the new one. But back up the new user's library first, I can't guarantee that the new user will work AT ALL after this procedure, so be sure to have a backup....

Finding the master user records , how to find the active users

Hi friends,
i want master user information, which table consists master user information and also which table consists active users ,
like address ADRC is the master table like that for users which is the master table .
can any one help me urgently.

Hi,
check the below tables
USR01                          User master record (runtime data)
USR02                          Logon Data (Kernel-Side Use)
USR03                          User address data
USR04                          User master authorizations
USR05                          User Master Parameter ID
USR06                          Additional Data per User
Edited by: Velangini Showry Maria Kumar Bandanadham on Apr 24, 2008 3:31 PM

How to know the active users per HRMS module?

Dear all,
I am looking for a good way to find the number of concurrent active users per HRMS modules like payroll , human resources, etc ...
What is the best way to do that calculation?
Kindly advice,
Thank you and best regards,
C.

See the old posts..
Re: USERS CONNECTED
Re: No of Apps users log-in.
Hope this helps,
http://www.oracleracexpert.com
IPC Send timeout issue and Solution
http://www.oracleracexpert.com/2009/09/ora-29740-evicted-by-member-0-group.html
Unable to start RAC instance after applying patch.
http://www.oracleracexpert.com/2010/03/unable-to-start-rac-instance-after.html

How to forcibly exit (logout/kill) an active user login ?

Hello,
We have a requirement wherein all active already logged in users of a particular application need to be kicked out during certain maintenance times.
We can prevent users from logging in using web dispatchers (URI filters), locking in UME etc, BUT how to kill already logged in users?

Try to terminate the session using J2EE visual admin.
Visual Admin -> Services > Security Provider > Runtime > Login Sessions.
Also Try using NWA >System Mangement > Monitoring > Session Monitoring.
Regards
Puneet

How can I use active user session that's in an application scope Hashtable?

First of all, is it possible to use the same session after a user exits and then returns?
Second, if it is possible, then please tell me what I need to do. So far, this is what I have been doing...
1.) The user submits login credentials
2.) The user is authenticated.
3.) The user does not have an existing session, so a new one is created.
4.) The user closes the browser.
5.) The user returns to login page and submits login credentials.
6.) The user is authenticated.
7.) The user has an existing session, so it should be used.
This is where I'm having trouble. All active sessions for my application are stored in a Hashtable. I have been using <%@ page session="false" %> so that a new session is not automatically created. Each time before I create a new session, I check my Hashtable to see if that user has an existing session. If a session exists for that user, then I would like to continue using that session if possible. I have used the methods request.getSession() and request.getSession(false), but a new session is always returned.
I could create a new session, copy the attributes from the old session(which is stored in my Hashtable) to the new session, and then invalidate the old session, but I'd rather not do that.
Is there a way that I can use existing sessions that I have stored in my Hashtable?

First of all, is it possible to use the same session after a user exits and then returns?No, I don't think so. Let me explain why. When the server creates a session object for each client, it needs to know which client is making the request. Remember that HTTP is a stateless protocol. Every time a client makes a request, it sends some sort of session id to the server to let the server know who is trying to make the request. The server will then check to see if a session object exists for that particular client and if so, it will make sure that the max inactive interval (maximum time alloted for that client's session) has not been exceeded. If every thing is okay, then the client can access the session object to get values that were previously placed there. There are many ways that servers try to keep track of clients. One way is to have the clients write the session ID using cookies. But, many people like disallow cookies. So some servers do what is known as URL rewriting. That is, they will write the session ID on the end of the query string. This can also be accomplished programmatically, but it can be taxing to do. Anways, the point is that the client and the server have to have some sort of link between each other and that link is the session ID. So, if the browser is closed, the session ID is lost. That particular client will be forced to get a new session ID the next time the following code is executed:
//create a session object and set its values
HttpSession session = request.getSession(true);>
Second, if it is possible, then please tell me what I
need to do. So far, this is what I have been doing...
1.) The user submits login credentials
2.) The user is authenticated.
3.) The user does not have an existing session, so a
new one is created.
4.) The user closes the browser.
5.) The user returns to login page and submits login
credentials.
6.) The user is authenticated.
7.) The user has an existing session, so it should
be used.If you really want to do something like this, you could make up your own ID and store it as a cookie on the client. I've never tried anything like this before so you would have to do your own research. Are you sure you want to do something like this. There is a reason why it works the way it does. There is also a reason why you want to keep the session timeout value some what small. Let me give you an example of some craziness with sessions. A client we once had wanted to keep their sessions open for 4 hours because they said there clients simply did not like to log in all the time. I nearly gasped when I was told we needed to do this. When you make the session time out large (i.e. the maxInactiveInterval( )), then session objects stick around longer in the server. Let's say a client logs into the server and receives a session object. Then, the client makes a few requests. The server knows to keep the session alive as long as the time between requests has not exceeded 4 hours. Then the client closes the browser. How is the server suppose to know that the browser was closed. Well, it doesn't. It just knows to check times between requests. So, that particular session object won't be garbage collected until the session times out. What if a whole bunch of clients did this. Yucko. The server would have a whole bunch of session objects living in memory. What a waste. This is all above and beyond the typical security problems that can arise from having a session open for so long. To make a long story short, you really shouldn't do what you are trying to do unless it is the nature of the app.
>
This is where I'm having trouble. All active sessions
for my application are stored in a Hashtable. I have
been using <%@ page session="false" %> so that a new
session is not automatically created. Each time
before I create a new session, I check my Hashtable
to see if that user has an existing session. If a
session exists for that user, then I would like to
continue using that session if possible. I have used
the methods request.getSession() and
request.getSession(false), but a new session is
always returned.
I could create a new session, copy the attributes from
the old session(which is stored in my Hashtable) to
the new session, and then invalidate the old session,
but I'd rather not do that.
Is there a way that I can use existing sessions that I
have stored in my Hashtable?

How can I maintain a user login/logout table

When I authenticate users via XSQL and grant them a session, what is the best way to log this event? I would also like to log when users logout or their session expires.
My setup includes Oracle 9i, with XSQL installed on JServ running within Apache.
Any comments appreciated.
Regards,

Thanks for reply
ya ~ i've got a solution ~
actually i am doing a server for mobile phone to get data. Sometime 1 single ID will send twice a message (usually nokXX mobile phones) .. i use milli sec to check those message ....
n it seems working ....

How to restrain the user login portal once, in the same time??

Hi
I need to restrain the user can't repeat to login portal ....
to reduce portal loading
How can I restrain the user login portal once, in the same time???
Which attributs in Identity Manager or amconsole I can do it to restrain the user ??
tks

Does your portal support anonymous access? If so, make sure you are using the authlessanonymous mode. This mode only creates one session that is shared for all anonymous users. This is much more efficient than anonymous access, which creates a session for each anonymous user.
I have no other recommendation for limiting users to a single login. In general, web applications do not behave like this. What if a user closes their browser without logging out? Does the user have to wait until the session times out in order to log back in again?
The same thing is true for users that are mobile. If a user leaves their office without logging out and then attempts to log in with a laptop in the conference room, then access will be denied in your implementation. Users do not expect this type of limitation being built into the system.
If you are having problems scaling, then you need to look at your architecture and perhaps add some more resources. Also, make sure you are making efficient use of the authlessanonymous access mode as stated above.
- Jim

Terminate Portal User Login with JSessionID or MYSAPSSO2 Cookie

Dear All,
I know using Visual Administrator , we can terminate the session.
Is it possible for the administrator to terminate a logged in portal user with his/her JsessionID or MYSAPSSO2 cookie value or User Id programmatically.?
Is it possible for portal admin to forcibly exit (logoutl) an active user login without logging onto visual administrator?
Regards,
Eben Joyson

The only complete mitigation for session hijacking is to run the entire site as SSL. This is Oracle's recommendation if you need a complete mitigation solution. And example of an ATG site running in full SSL is Dennis Kirk (denniskirk.com).
The problem with doing so is that SSL (a) takes more processing power in the system running the client's browser and (2) incurs latency that degrades the perceived page performance. This is particularly true for consumers running Internet Explorer, where speed-up measures like SPDY are either incomplete or don't work. And for a hard core eComemrce site, slower page performance means that you make less money.
Most sites, including those that you mention, use a mixture of SSL and non-SSL pages to overcome this. They use non-SSL for those areas of the site where penetration does not have a material negative impact. Browsing catalog pages as an anonymous user, for example. If someone hijacks my session and I'm browsing the catalog anonymously, they're welcome to it. There's nothing private in my session. Even robots can access that content.
Once I login or go to pages where private information is being exchanged, then you have to secure the session. That's where the protocol switcher servlet comes in. As you authenticate, you switch the user to SSL.
I've tried a number of additional mitigation steps. Unfortunately I can't discuss them here at this time.
And none of the servlets that you mention have any benefit with mitigating session hijacking.

Copy user login

Dear All,
I have a problem about user Login in SQL Server 2008.
because I restore database from another server, user Login for that database already created but not in instance user login. So when user login into instance name they have failed login.
what that i missed before restore database so when user login into instance they do not failed?
or how that i can copy user login from database to instance login? because when i add from add login wizard i have error user already created.
please help.
Best regards,
Surbakti

When a database is moved from one server to another server the login ids stored in the master database do not align with the login ids
stored in each user database or there is no login id or password associated with the user and user in the database becomes ORPHAN.
To fix this problem you need to transfer Logins & password refer below link to Transfer Logins & Passwords.
How to transfer logins and passwords between instances of SQL Server
once you transfer logins fix orphan users, refer below link to fix orphan users
http://blog.sqlauthority.com/2007/02/15/sql-server-fix-error-15023-user-already-exists-in-current-database/
Please mark solved if I've answered your question, vote for it as helpful to help other users find a solution quicker
Praveen Dsa | MCITP - Database Administrator 2008 |
My Blog | My Page

How to Kick Duplicate Active User Logins?

Similar Messages

Maybe you are looking for