How to set v$session.program ?

Hi,
I would like to set the v$session.program value to audit this after logon.
In sqlplus I can see some program entries : plsqldev.exe, sqlplusw.exe, oem etc
but I can not find the program entry for Forms & Reports 6i.
How can I set this v$session.program value ?
Many thanks and regards,
Friedhold

You cannot set the program; it is automatically filled with the OS executable that has created the session.
If I enter Forms Builder and connect, then I see "ifbld90.exe" in the program column.
Regards,
Rob.
Edited by: Rob van Wijk on 28-aug-2009 13:05
Note that I was unaware of the information in Mohan Nair's referred thread.
Here is a nice article: http://www.integrigy.com/security-resources/analysis/Integrigy_Spoofing_Oracle_Session_Information.pdf
Quote: +"The program name is supplied directly by the client and can be set to any value by an attacker. The program value is set during the session initialization. Using the Oracle JDBC driver, the value can be set prior to the connection initialization. With the Oracle OCI driver, simply renaming the “exe” file will allow you to manipulate the program name."+

Similar Messages

  • How to set a session variable

    Hi,
    I would like to know how to set a session variable for the following purpose.
    At the top of my application I have a "Welcome <username>" I'd like it instead to have "Welcome <firstname> <lastname>".
    So the concept would be after the user logs in succesfully this session variable is dynamically set so it can be displayed.

    Hi Scott,
    I realize that I can set items etc in pages. The case I'm referring to is a reference in a template. My template has a "Welcome <user name>" ... so the code looks like "Welcome &APP_USER." Anyway to make it say "Welcome first_name last_name" in the template? Note I'll have to get the first/last names from a query
    Thanks,
    Marty

  • Setting v$session.program with javax.sql.DataSource unsing JNDI

    I am trying to set v$session's program column while connecting to database.
    It works like charm when i use :
    java.util.Properties params = new java.util.Properties();
    params.put("v$session.program", "MyApp");
    DriverManager.registerDriver(new oracle.jdbc.driver.OracleDriver());
    conn = DriverManager.getConnection("jdbc:oracle:thin:user/[email protected]:1521:myDB",params);
    It just doesn't SET anything when i use, JNDI :
    java.util.Properties params = new java.util.Properties();
    params.put("v$session.program", "MyApp");
    Context ctx = new InitialContext(params);
    DataSource ds = (DataSource)ctx.lookup(datasourceName);
    conn = ds.getConnection(userName,password);
    Just couldn't figure out why its not setting in the 2nd Case. Any ideas ??

    Valid..
    But then, even if i set v$session.program in my JDev environment or even on app server's connection pool Its NOt getting set.
    Am i doing something worng.
    Btw, i am using jdbc thin 10.1.0.3 driver. I read somewhere that this was a bug and its fixed with jdbc thin driver 10.2.x versions.
    Has anyone tried on 10.2.x versions ?

  • How to set the session using onClick event?

    Dear All,
    I have a link, which once the user click on it, I want to set the session.
    <a href="link.jsp" > Link </a>How to set the session? Where should I put <%session1.setAttribute ("test", "1234"); %>?
    Any idea?
    Thanks

    when u click on Link
    the control goes to link.jsp/.
    and in this page u can write the session related code.

  • Setting v$session.program property in application module config

    How can I set the v$session.program property in the AM config, so that when a new connection is created, the v$session.program field is documented with the property value.
    I added the following in JClient JCLoginDialog:
    ((Hashtable)connEnvironment).put("v$session.program", "my program name");
    I traced the V$SESSION TABLE:
    The added connection has "my program name" in the program field but if I open other application module instances, the new connections have an empty v$session.program field.
    I suppose that a property must be added to all application module configurations.
    Can somebody help me on this one?
    The v$session.program field is helpful when sessions must be killed.
    Thanks
    Fred

    I don't believe there is a built-in mechanism for that.
    But you can easily do it yourself. In you AM class:
    public void prepareSession( Session session ) {
        super.prepareSession( session );
        setDatabaseClientInfo( Bc4jConstants.APPLICATION_NAME );
        setDatabaseModuleInfo( moduleInfo );
    }And then:
      public void setDatabaseClientInfo( String clientInfo ) {
        try {
          this.getTransaction( ).executeCommand(
            "BEGIN dbms_application_info.set_client_info('" + clientInfo + "'); END;" );
        } catch( Exception e ) {
          // uncritical error
          log.warn( "Error setting the database client info: " + clientInfo, e );
      }and
      public void setDatabaseModuleInfo( String moduleInfo ) {
        if( moduleInfo != null ) {
          try {
            this.getTransaction( ).executeCommand( "BEGIN dbms_application_info.set_module('"
              + moduleInfo + "', NULL); END;" );
          } catch( Exception exception ) {
            // uncritical error
            log.warn( "Error setting the database module info: " + moduleInfo, exception );
      }In a similar fashion you can set the client identifier. We use the moduleInfo to identify the module of the session. The client info helps us to identify the application.
    Sascha

  • Internationalization: How to set the session locale manually

    Hello,
    one more question from me.
    So I have my Web Dynpro application and it gets the current language either from the user profile or the browser settings, which is fine. I can switch what String or image to display with a "getLocale()" call if neccessary, but can I also SET the locale? I want to be able to change the language for internationalization, f.ex. a German user should be able to view the page in English if he chooses to do so. Is there a way to accomplish this and if yes, how?
    Thank you,
    Lukas.

    Hi,
    you can set the Locale. means after getting the default you can overwrite this with the desire one.
    But,your application is going to reside in the portal and in portal one Personalize link is present at the MasHead, in that User Profile link is present where user can reset few data regarding  the user profile and Language is one of them.
    So try to use that one,the scenario you are expalining for that no need to touch the code you can do directly from the personalize link coz this change is for time being.
    Hope this may help you.
    Deepak

  • How to set a session in Java Filter?

    I make a filter,in this filter,I check a request parameter,if this parameter equals a assigned name,I put a flag into a session,like follows:
    public void doFilter(ServletRequest request,ServletResponse response,FilterChain chain) throws IOException,ServletException
    String name=request.getParameter("name");
    if(name.compareTo("John")==0){
    session.setAttribute("isLogin","true");
    But when I run above program,I will get a error,because session is not defined. I know HttpSession is get by HttpServletRequest.getSession(),
    but public void doFilter is only provide ServletRequest,not HttpServletRequest! I want to know whether there is a method which I can get HttpSession in Filter?
    Any idea will be appreciated!

    Hi. You should be able to simply cast The ServletRequest like this:
    (HttpServletRequest)request
    If you run a webcontainer, you're pretty sure its a Http-request.

  • How to set database session info

    Jdev 9.0.3.3
    My app manages user logins via a custom jaas implementation, but it connects to the db using a shared username/password. I capture the real username password of the logged in user in my app and want to add that info to some audit columns on my tables like Created_By, Updated_By, etc.
    How do I pass in a value stored in my Java code to the db session so I can use that data in a trigger or whatever.
    I understand there is a way to access the db session from the app mod, but I am unclear on how to do this.
    TIA

    Jdev 9.0.3.3
    My app manages user logins via a custom jaas implementation, but it connects to the db using a shared username/password. I capture the real username password of the logged in user in my app and want to add that info to some audit columns on my tables like Created_By, Updated_By, etc.
    How do I pass in a value stored in my Java code to the db session so I can use that data in a trigger or whatever.
    I understand there is a way to access the db session from the app mod, but I am unclear on how to do this.
    TIA

  • How to set what email program Safari uses when there is a link

    When I click a link in a browser window that is supposed to open my email programme it opens Mail.  How do I set Safari to use an other mail programme?

    From the Mac Mail menu bar click Mail / Preferences the select the General tab.
    Click the pop up menu next to:  Default email reader.
    Select your email client.

  • How to get the session variable value in JSF

    Hi
    This is Subbus, I'm new for JSF framewrok, i was set the session scope for my LoginBean in faces-config.xml file..
    <managed-bean-name>login</managed-bean-name>
    <managed-bean-class>LoginBean</managed-bean-class>
    <managed-bean-scope>session</managed-bean-scope> like that...
    So all parameter in LoginBean are set in session right ?... for example i used userId is the Parameter...
    Now i need to get the the userId parameter from that session in my another JSP page.. how i get that ?..
    Already i tried
    session.getAtrribute("userId");
    session.getValue("userId");
    but it retrieve only "null" value.. could u please help me.. it's very urgent one..
    By
    Subbus

    Where i use that..is it in jsp or backend bean...
    simply i use the following code in one backend bean and try to get the value from there bean in the front of jsp page...
    in LogoutBean inside
    public String getUserID()
         Object sessionAttribute = null;
         FacesContext facescontext=FacesContext.getCurrentInstance();
         ExternalContext externalcontext=facescontext.getExternalContext();
         Map sessionMap=externalcontext.getSessionMap();
         if(sessionMap != null)
         sessionAttribute = sessionMap.get("userId");
         System.out.println("Session value is...."+(String)sessionAttribute);
         return (String)sessionAttribute;
         return "fail";
    JSP Page
    <jsp:useBean id="logs" scope="session" class="logs.LogoutBean" />
    System.out.println("SS value is ...."+logs.getUserID());
    but again it retrieve only null value.. could u please tell me first how to set the session variable in JSF.. i did faces-config only.. is it correct or not..
    By
    Subbus

  • Setting a session bean

    How do i set a session bean in my JSF action? I have defined this session bean in my faces-config.xml file:
    <managed-bean>
    <managed-bean-name>SelectedHistoryRecord</managed-bean-name>
    <managed-bean-class>com.myco.nps_history.model.NPSHistoryRecord</managed-bean-class>
    <managed-bean-scope>session</managed-bean-scope>
    </managed-bean>
    And so far I know how to retrieve it's value ...
    javax.faces.application.Application app = ctx.getApplication();
    NPSHistoryRecord selectedHistoryRecord = (NPSHistoryRecord)app.getVariableResolver().resolveVariable(ctx, "SelectedHistoryRecord");
    but I don't know how to set the session bean to be an instance of a different bean than that returned. Your advice is appreciated, - Dave

    Indeed, ExternalContext#getSessionMap() returns a modifable map of session attributes (backed by HttpSession#get/setAttrbute() in a Servlet environment), including the session scoped managed beans which are keyed by their managed bean name.
    You may find this article useful in general: [http://balusc.blogspot.com/2006/06/communication-in-jsf.html].

  • What info is stored by Oracle in v$session.program?

    Hi all,
    I was trying to query V$session.program, and it appears that Oracle sometimes stores valid values like for example:
    "PSAPPSRV@PSA1H31 (TNS V1-V3)"
    and sometimes just '?' instead, like for example:
    "? @PSA1H31 (TNS V1-V3)"
    Please I need to know when "PROGRAM" is populated by '?' and why? and what is the TNS V1-V3 ?
    Regards
    Wassim

    TNS V1-V3 signifies a client connection over the network.
    I believe v$session.program is set on connection or programatically and will depend on the program connecting on whether it gets set with useful information or not.
    See the following thread for more details on one way this can be set during the connection:
    Re: Setting  "v$session.program"  oracle JDBC   connection   property

  • How to execute a java program by clicking !?!?

    Just a click to execute a java program?!!
    Like the ".exe" in Windows or "x" permission in Unix ?!?!?!
    How can I do that?
    And how to set a java program file to display as a personal icon? (My Icon)
    :-)

    Well this is what I do in Windows (I use XP but it works in others):
    First you have to make sure all the class files are in the same folder (duh)
    Then you copy your java.exe from your jre folder into the folder with all your class files.
    Finally, you create a shortcut to java.exe and add your class name to the command line on the shortcut.
    Now all you have to do is double click on the shortcut and your program runs. Sure it's not that pretty but it works.

  • How to set the a  graphic ( 3 radio buttons ) in the report ?

    Hi  Exports,
    1.  How to set the a  graphic ( 3 radio buttons ) in the report ?
    Acutely  I  want to  fetch the record from MCHB-CLABS and MCHB-CSPEM , if the data read from MCHB-CLABS will show the green light otherwise if read from MCHB-CSPEM, it will show red light.
    (e.g :  if syntax error in report  it is showing red light signal , like that how to set in report program)
    Thanking you.
    Subash

    Hi,
    In your internal table declaration, include yet another field for lights..
    DATA: begin of itab,
               lights type light,
              end of itab.
    DATA: GV_LAYOUT TYPE SLIS_LAYOUT_ALV.
    GV_LAYOUT-LIGHTS_FIELDNAME = 'LIGHTS'.
    Use the GV_LAYOUT in your FM to display the ALV.
    IS_LAYOUT                         = GV_LAYOUT
    If itab-lights = 1 => Error
      itab-lights = 3 => Success
      itab-lights =2 => Warning

  • How to set session timeout per user

    Hi,
    Ho do I set the session timeout per User in the
    Application.cfm File??
    I tried using
    <cfif SESSION.UID EQ 1>
    <CFAPPLICATION NAME="appControl" SESSIONMANAGEMENT="Yes"
    sessiontimeout="#CreateTimeSpan(0,0,20,0)#">
    </cfelse>
    <CFAPPLICATION NAME="appControl" SESSIONMANAGEMENT="Yes"
    sessiontimeout="#CreateTimeSpan(1,0,0,0)#">
    </cfif>
    But this didnt work because the cfapplication seems to have
    to be at the top before I call the variable SESSION.UID which
    I set on my login page..
    Someone know how to do this??
    Regards
    Martin

    Martin,
    Your code example cannot work because the "session" scope
    doesn't exist until your application scope is defined. So you have
    to handle this manually. Here's how you can get it done. First,
    define your application to the maximum sessiontimeout you want to
    have.
    <CFAPPLICATION NAME="appControl" SESSIONMANAGEMENT="Yes"
    SESSIONTIMEOUT="#CreateTimeSpan(1,0,0,0)#">
    Then, I don't know how you are doing your login
    authentication but when you have authenticated the user, you need
    to define the userid and the most recent activity in the session.
    Also determine your timeout value based on the userid. See example:
    <CFIF IS_AUTHENTICATED>
    <CFSET session.user.uid = form.userid>
    <CFSET session.user.most_recent_activity = now()>
    <CFIF session.user.id eq 1>
    <CFSET session.user.timeout_mins = 20>
    <CFELSE>
    <CFSET session.user.timeout_mins = 1440>
    </CFIF>
    </CFIF>
    Now, all you have to do is check whether the user has been
    idle for too long and kill the session by purging all session
    variables. For example:
    <!--- if user id is defined, this means user is logged in
    --->
    <CFIF structKeyExists(session, "user") and
    structKeyExists(session.user, "id")>
    <!--- check if timeout has expired --->
    <CFIF datediff("n", session.user.most_recent_activity,
    now()) gt session.user.timeout_mins>
    <!--- timeout has expired, kill the session and log the
    user out --->
    <CFSET StructClear(session)>
    <!--- insert your logout code here --->
    <CFELSE>
    <!--- user hasn't timed out, so reset the most recent
    activity to now --->
    <CFSET session.user.most_recent_activity = now()>
    </CFIF>
    </CFIF>

Maybe you are looking for

  • Can't get SSL to work for WebVPN

    Hi all, I'm trying to get webvpn setup, and have it all configured correctly.... but there seems to be a problem with the SSL part. I can connect on port 80, it redirects to port 443... but never shows the login box, just keeps trying to load. I can

  • Mac is running very slow rainbow wheel is popping up all the time

    mac is running very slow rainbow wheel is popping up all the time

  • Reader XI does not diplay PDF-file

    I am unable to view this PDF with Adobe Reader: http://velorooms.com/files/teamgen.pdf It only shows white page page when opened. The result is same with both viewing it on Reader program and on browser. All other PDF files work well with Reader. I a

  • HT2486 How do I print out address labels?

    How do I print out address labels using the address book?

  • Regarding Intracompany STO

    Hi Gurus, Here my question is if we can transfer goods from one plant to another plant with in the same company (intracompany) by using movement types. Then why sometimes we are using STO process for intra company.And could you please explain me the