Limiting a user to only 'x' concurrent logins

Hi,
Is there a way of limiting a user to only 'x' concurrent logins.
I've had a hunt around and the only mentions seems to be based on PAM ?
Thanks
al

remote DB admin should be able to log user's activity (I mean ACTUAL user). It does this already even if you use a common DB account - look at "osuser" - you can also get his computer name:
select distinct s.osuser, s.machine, s.username
from sys.v_$session s

Similar Messages

  • How to enable only a subset of LDAP users to be able to login to OBIEE

    We have enabled LDAP authentication. Now every single LDAP user can login to Presentation server. That is an issue. Not all LDAP users are OBIEE users. Only a small subset of the LDAP users should be able to access OBIEE. We have a database table that lists all OBIEE users. This table however does not have user password information. User Password information is stored in the LDAP.
    so question is how do we limit OBIEE access to only OBIEE users and not all LDAP users.
    Thank you

    Thanks for your suggestion. If i understand it correctly, user will still be able to login to Presentation server but will not have access to any content using your solution approach. Did i get it right?
    In my current setup, user gets authenticated against LDAP, then i extract user group for that user and assign it to GROUP. Only those users gets assigned to GROUP who have access to OBIEE. We have secured RPD and Catalogs so that user must be a member of at least one GROUP to be able to access content.
    Right now, a LDAP user who is not present in OBIEE user table, is able to login to BI Presentation server but is not able to see any thing. Because user gets authenticated, but does not have any authorization rights. So far so good.
    I would like to take next step, where use login to BI Presentation server is denied if user id does not exist in the OBIEE user table ( but exists in the LDAP).
    Thank you

  • Limited Financial User licenses are only good for two weeks

    I have repeatedly requested a license for a client who, according to their contractual info, both in my records and on the SAP B1 Portal 'Contractual Information' link, has
    3 Professional Users and 3 Limited Financial Users.
    Every time I get a license it is for 6 Professional Users, and it expires in 2 weeks because, so it says, I have exceeded my contractual license limitations.
    I have been working with SAP Support but so far I do not have a fix. With Support, we have repeatedly deleted all previous systems for the client (both as Partner and as Customer S number), created one and only one new system, and submitted the request for 3 Professional Users and 3 Limited Financial Users.
    And it still comes back with 6 Pros that expire in 2 weeks. I know that for now a Pro User is substituted 1 for 1 for the new limited license types, but why can't I get a permanent vs. a temporary 2 week license?
    Please do not write and tell me how to delete a system or how to apply for a license, etc. I know how to do those things and I have walked through the entire process with SAP Support with me via Webex, and we don't get a permanent license.  I just want to know if anybody has successfully got a standard license for the new limited types so I know that the process actually works. (Based on my experience, I don't think the Portal can handle the new license types. ) Then maybe Support and I can focus on a flaw in the contractual info as stored on the site, etc. as the source of my problem.

    Hi Cindy ,
    This is not a normal case. I have a lots of clients who are using limited license and their license are not expired .
    Might be something happening with SAP recently because I haven't requested any license recently .
    I had faced this issue one time when I didn't realise the date of expiration while ordering SAP license but I made correction and import it next time and it worked for me fine .
    I am not sure how can i be of help but this certainly bring my attention and would definely like to know the solution
    Thank you
    Bishal

  • The same user can only login once

    Hello,
    I have a problem with my system. I made a system where you must login.
    I use the following code:
    boolean login = false;
    String username= request.getParameter("username");
    String password= request.getParameter("password");
    User user= Usermutations.makeviaUsername(username);
    if (user.getPassword().equals(password) && !password.equals("")) login= true;
    if (login) ReqD = getServletContext().getRequestDispatcher("/Overview.jsp");
    else ReqD = getServletContext().getRequestDispatcher("/False.jsp");
    request.getSession().setAttribute("user",user);
    request.getSession().setAttribute("username",username);
    request.getSession().setAttribute("password",password);
    if (ReqD != null) ReqD.forward(request,response);
    //Clean up resources
    public void destroy()
    Now I want that the same user can only login once. So when a user login with his username and password, no one else can login with that user name and password.
    I don't wan't to put the username in the database and then validate if the user is already logged in, because then the user must logout and not close the webbrowser else the user stays in the system.
    Does anyone knows a solution top this problem.
    Thanks in advance,
    Henk

    So I wan't the database and when the user is logged in
    the name is set in the database. But when the user
    clicks on the X (close button in the browser his
    username must be deleted from the database)You can't tell when the user does that (or perhaps you can sometimes, with difficulty). But even if you could it doesn't solve your problem. Many people keep their browsers open all day, and -- you may find this shocking -- they go to sites other than yours.
    So basically, if you don't provide them with a logout button you can't tell when they "leave" your site. And even if you do provide them with a logout button, they won't necessarily bother to use it. So you're left with waiting until the session expires, and then logging them out. This also means that if they come back to your site while the session is still active, then they are still logged in. This is not an error and you should not treat it as one.
    PC²

  • Users are not able to login to BPM worklist application from one of the AD.

    Hi ,
    We are using FMW11g ( 11.1.1.6.0) and configured 2 AD's.( AD-1 & AD-2). We are able to see users from both AD's in the weblogic admin console. Users present in AD-1 are able to login to BPM worklist application without any issue but users from AD-2 are not able to login to BPM application. Could any one please answer 1) Can we configure 2 AD's to FMW11g ? 2) If "YES" , what configuration needs to change to users login from AD-2.
    Please let me know if any more information need.
    Regard's
    Naveen

    Hi
    NO. You CANNOT use more than One Security Provider for a BPM Workspace Application. Only the top most first Security Provider will work. In your case you have 2 ADs security providers and only users from top most can login. Yes, you can see the Users from both and infact all the Security Providers that are configured. It is the limitation of the bpm workspace application and its corresponding security framework.
    Out of box, if you use default AD Configuration then there is nothing you can do. Only the first top most will work. If you really really want you need to use totally custom authentication provider where you will write your own code for authentication. Remember this development is pure weblogic security related one and you need to have good understanding of internal weblogic security. I would not recommend this.
    Here is one old post. This old post has 2 other old posts worth visiting to get more details:
    Re: Use multiple ActiveDirectory as authenticator provider
    Re: oracle soa and active directory integration (Different requirement/usecase)
    Thanks
    Ravi Jegga

  • Limit concurrent logins on a WS 2008 environment

    Hi all
    I'd like to ask if there is any way you can limit concurrent logons on a WS2008 AD domain.
    Thing is i want my users (1500+) to only be able to log in on one machine at a time.
    I saw a program called LimitLogon.exe but i'm not going to use that because it is unsupported, it requires IIS, it's quite old and it requires a OU structure in AD. I also saw a program called UserLock but we cannot afford that here since we would have to
    buy too many licenses.
    I was also wondering why this feature isn't in server 2008? It's a quite common problem in many different branches in which IT has been applied (my case, a hospital).
    Any help on this?
    (I don't mean concurrent logins on remote, i mean just be able to log onto one machine with their account at a time)
    Thanks in advance.
    Alex

    Hi Alex,
    As far as I know, there is no build-in feature to limit number of logins of users from many machines in Active Directory Domain. Microsoft has released the LimitLogin
    tool. The tool stores logged-on information in a custom AD partition via a Microsoft IIS hosted Web service, a client component, and a logon and logoff script. To run the tool, IIS must be installed along with ASP.NET.
    For more information on the tool, please refer to the following link:
    Limit Login Attempts With LimitLogin
    http://technet.microsoft.com/en-gb/magazine/2005.05.utilityspotlight.aspx
    If you do not want to run the tool, there is also ways to only allow users to log into certain machines which can help limit where they are logged into as a workaround.
    For example:
    1. Go to AD Users and Computers, find the user who you want to restrict, right click and choose Properties, click the Account tab, choose “Log On To”.
    Select “This user can log on to:” “The following computers”, then add the computers as you want.
    2. Use group policy to restrict some domain users to log on certain computers
    Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment
    Deny logon locally
    If you consider using LimitLogin, you can refer to the following links on how to install and use the tool:
    http://sgwindowsgroup.org/forums/t/586.aspx
    http://rahuldpatel.wordpress.com/2009/08/03/limitlogin-step-by-step/
    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
    Thanks.
    Nina
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

  • Block concurrent  logins

    Hi, I'm trying to block concurrent logins.
    What I've done so far:
    I've added a new column in the login table called logged, which holds values 1 or 0
    When a user logs in, it updates the value to 1.
    It will login user's who's status is 0.
    When users click logout, it changes the status to 0
    The Problem
    If the user just closes the browser, how is the system supposed to know that the user's logged status needs to be 0?
    I reasoned that the onSessionEnd method would do the trick. When the session expires, it simply updates the database for that user to 0. So I put in the code, but nothing.
    <cffunction name="onSessionEnd" returnType="void">
        <cfquery name="updateloggedstatus" datasource="datadsn">
                    UPDATE usermanagerlogin
                    SET logged = <cfqueryparam cfsqltype="CF_SQL_INTEGER" value="0">
                    WHERE userid = <cfqueryparam cfsqltype="CF_SQL_VARCHAR" value="user1">
        </cfquery>       
    </cffunction>
    In another application, I have used the onSessionEnd method succesully. I have used it to delete the items that were in the shopping cart, which were in the database, who's order was not complete.
    <cffunction name="onSessionEnd" returnType="void">
        <cfargument name="SessionScope" required=True/>
    <cfquery name="deletesessionendticket" datasource="tickdsn">
        DELETE FROM tbltick
       WHERE oid = '#Arguments.SessionScope.oid#'
        AND ordered = <cfqueryparam cfsqltype="CF_SQL_INTEGER" value="0">
    </cfquery>
    </cffunction>
    The difference between the two is that the new app is being developed in cf9, while the older app was built in cf8
    In the current app, the session does end succesfully, in that it asks me to login, but the onSessionEnd method is not executed.
    Any Ideas?
    Much appreciated.

    n_kip wrote:
     What I have done is I have tried to have the status for the logged in user to be updated to "1" just when the user logs in, and then update the status to "0" when the user logs out. When some one tries to use the same account from another location, and the status for that account is "1", that user would not be logged in.
    I would strongly suggest you go the other way.  Instead of not allowing the current logon, end the previous login state.  Otherwise you are dooming people who may have logged in on a computer that they no longer have access to from being able to use another computer.  For example, somebody logs on at work, goes home and can not logon from there because they are logged on at work.
    What are you tryting to do in the OnSessionEnd event?  HOW is it not working?
    P.S.
    Have you ever noticed the important differences between these two WHERE clauses?
    n_kip wrote:
    WHERE userid = <cfqueryparam cfsqltype="CF_SQL_VARCHAR" value="user1">
    WHERE oid = '#Arguments.SessionScope.oid#'
    The first one is using a string litteral "user1", the second one is using a variable "#Arguments.SessionScope.oid#".  Also the first one would be using an unscoped variable if changed to "#user1#" while the second one is using a variable in the 'SessionScope" structure that is passed into the "Arguments" scope when the session end event fires.
    It is important to remember that when the session event fires there are several variable scopes that no longer exists, most critically the session scope itself.  The session has ended, the scope is no longer valid.  Thus what was in the scope is passed into the function's argument so the data can be used within the event handler.
    P.P.S.
    I just wanted to reiterate from your original post that the onSessionEnd event has little to nothing to do with when a user closes a browser.  Your browser does not go back to all the web sites you have visited and tell each and every one "Kip has closed me", and you would probably not want it to do so.  All the servers can do is wait and wait and wait, and if it receives no new requests containing known identification data of an existing session in a given time frame then end the session.  This is when the session end event will fire and the onSessionEnd handler be executed.
    You CAN configure that the identification data -- (CFID and CFTOKEN) or JSESSIONID -- normally stored in cookies to be "session cookies" that are only stored in memory by the browser and discarded by the browser when it is closed.  Thus if a user opens a new browser and connects to your server before the previous session has timed out, the browser will not present the previous cookies but rather be presented new ones by the server, thus creating a new session.  And the old one will be left to die when its timeout period expires.

  • Exchange 2010 all mail clients with internal cached and internal non-cached mode users having connection status issues, login prompt -- external is fine either way

    Hello,
    I'm seeing an issue that started this past Monday with no recent change to our environment. 
    External Outlook Anywhere users and Mobile users, OWA users are unaffected.
    Internal Users are affected when using Outlook of any version, 2010 or 2013.
    -Internal Users normally log into their workstation with their ad credentials, domain joined machines. Outlook opens without credentials prompting ideally.
    1 . Using Cached Mode:
    a. Login Prompts, slowness - Since Monday, users are getting prompted to login. The prompt goes away after logging in at startup. It is also causing high CPU
    on the workstations.
    b. Free/Busy, Out of Office doesn't work. I can, however complete auto-setup for a new user, so autodiscover is not completely down for internal users.
    c. Checking Connection Status shows connecting status on highlighted entry below without ever establishing connection (just goes away).
    The outlook icon in the system tray says "Outlook is requesting data from the server":
    2. Using Non-cached mode 
    a. No Login Prompt at startup, business as usual
    b. Free/Busy, Out of Office works fine. Autodiscover is fine.
    c. Checking Connection Status shows normal except, it has "casarray URL, then status is referral" it seams to flicker this constantly then go away intermittently.
    d. Main issue in non-cached mode is, sometimes a user will log into windows, open outlook and it will not open and says "server is unavailable. Retry, work offline, or cancel" I can try re-opening, same message.
    Only after logging out of windows, logging back in, I can get back into outlook. This is not every time, or consistent with specific users, but random. 
    3. Lync Pop up  for credentials often, though entering the password.
    URLs are correct. Autodiscover, EWS, etc. 
    Already tried bypassing our loadmaster load balancer with host files on clients. same issue regardless of casarray node. 
    Not sure what is going on.
    Josh

    You have a hybrid configuration with Office 365, right?  You didn't provide this valuable piece of information.
    In Exchange Online PowerShell run this command:
    Get-OrganizationConfig | FL PublicFoldersEnabled
    If the value is "Remote" then users with Exchange Online mailboxes are looking to on-premises public folders.  Be sure that you have legacy pubic folder interoperability properly configured.
    http://technet.microsoft.com/en-us/library/dn249373(v=exchg.150).aspx
    Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

  • How can i create a new user with only read rights ?

    How can i create a new user with only read rights ?

    You are asking about a Database User I hope.
    You can look into the Oracle 8i Documentation and find various privillages listed.
    In particular, you may find:
    Chapter 27 Privileges, Roles, and Security Policies
    an intresting chapter.
    You may want to do this with the various tools included with 8i - including the
    Oracle DBA Studio - expand the Security node and you can create USERS and ROLES.
    Or use SQL*Plus. To create a
    user / password named John / Smith, you would login to SQL*Plus as System/manager (or other) and type in:
    Create user John identified by Smith;
    Grant CONNECT to John;
    Grant SELECT ANY TABLE to John;
    commit;
    There is much more you can do
    depending on your needs.
    Please read the documentation.
    -John
    null

  • Itunes unknown error [-50] but only on my login...

    o my fricken god this thing is driveing me crazy. I have had an ipod nano since christmas with everything working perfectly till about a month ago. right about then my itunes stoped opening. whenever i tried to open itunes it would give me this error message that says
    "the iTunes application could not be open. An unknown error occured(-50)."
    about three days after that when my ipod batery died and i went to charge it it wouldnt charge but the charge screen would flicker as if it were trying to do it but couldnt. then it compleatly stoped doing anything. so i went and traded it in for a new one. i wiped itunes from my computer and reinstalled it. this did absolutly nothing the error message still came up. not only that but to load it i had to log on as anyone else but me, because when i tried to load it it would give me this error saying
    "1608: Unable to create InstallDriver instance, Return code: -2147024894"
    well i went onto the disscussions page and spent the beter part of an houre searching for someone that had the same problme as me, and found one. in his the same error was showing up so what he did was he wiped and reinstalled quicktime and it worked fine after that. so i tried to do this. well that same error that came up when i tried to install itunes came up when i tried to install quicktime. so once again i had to go onto someone elses login and load it. this time it worked fine under their log in and after puting a few songs into it i tried to attach my ipod to it to stick the songs on it but it wouldnt recognize it no mater what. the worst part is that that same error(-50) is still there but only on my login.
    Will someone please help me eather fix this or at least help me get my songs onto my ipod.
    P4   Windows XP Pro  

    hiya!
    hmmmmm. the fact that the (-50) is happening in one account but not the others suggests some possibilities. there's components of itunes that are unique to each different account on the PC.
    there's a different set of library files in each account, for example. a damaged library file can sometimes cause odd issues.
    What are the iTunes Library files?
    perhaps we could try a "library recreation" in your user account:
    How to recreate your iTunes Library
    iTunes: How to backup and restore playlists
    can you get itunes to launch in your account with a recreated library file in place?
    love, b

  • Oracle express hang up when two or three users are using the same login.

    For developer purposes, we installed the last version of XE, and we are trying to run a small client-server application, but using the same user: login and password in two different remote PC's. The database is installed in an PC dual core with Windows XP SP2 the other PC´s are in the same local area network. The application works fine when the first (doesn't matter wich PC) but when the second or third user tries to connect the database the access from the others crashes.
    Is there a security issue or user limitation in XE to avoid the same login in several remote PC´s.? Have I change a parameter?

    You're right I found "alert_xe.log".
    I don't understand all the messages, but I notice: the "Warning: inbound connection time out". and "LICENSE_MAX_SESSION = 0 LICENSE_SESSIONS_WARNING = 0"
    I copied part of the alert_xe.log as following:
    Fri Feb 08 20:30:51 2008
    WARNING: inbound connection timed out (ORA-3136)
    Fri Feb 08 20:32:27 2008
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2208K exceeds notification threshold (2048K)
    KGL object name :XDB.XDbD/PLZ01TcHgNAgAIIegtw==
    Fri Feb 08 20:32:58 2008
    WARNING: inbound connection timed out (ORA-3136)
    Fri Feb 08 20:38:19 2008
    WARNING: inbound connection timed out (ORA-3136)
    Dump file c:\oraclexe\app\oracle\admin\xe\bdump\alert_xe.log
    Fri Feb 08 20:39:28 2008
    ORACLE V10.2.0.1.0 - Production vsnsta=0
    vsnsql=14 vsnxtr=3
    Windows XP Version V5.1 Service Pack 2
    CPU : 2 - type 586
    Process Affinity : 0x00000000
    Memory (Avail/Total): Ph:758M/1014M, Ph+PgF:2289M/2444M, VA:1944M/2047M
    Fri Feb 08 20:39:28 2008
    Starting ORACLE instance (normal)
    LICENSE_MAX_SESSION = 0
    LICENSE_SESSIONS_WARNING = 0
    Picked latch-free SCN scheme 2
    Using LOG_ARCHIVE_DEST_10 parameter default value as USE_DB_RECOVERY_FILE_DEST
    Autotune of undo retention is turned on.
    IMODE=BR
    ILAT =24
    LICENSE_MAX_USERS = 0
    SYS auditing is disabled
    ksdpec: called for event 13740 prior to event group initialization
    Starting up ORACLE RDBMS Version: 10.2.0.1.0.
    System parameters with non-default values:
    processes = 200
    sessions = 225
    __shared_pool_size = 79691776
    __large_pool_size = 8388608
    __java_pool_size = 4194304
    __streams_pool_size = 0
    spfile = C:\ORACLEXE\APP\ORACLE\PRODUCT\10.2.0\SERVER\DBS\SPFILEXE.ORA
    sga_target = 268435456
    control_files = C:\ORACLEXE\ORADATA\XE\CONTROL.DBF
    __db_cache_size = 171966464
    compatible = 10.2.0.1.0
    db_recovery_file_dest = C:\oraclexe\app\oracle\flash_recovery_area
    db_recovery_file_dest_size= 10737418240
    undo_management = AUTO
    undo_tablespace = UNDO
    remote_login_passwordfile= EXCLUSIVE
    dispatchers = (PROTOCOL=TCP) (SERVICE=XEXDB)
    shared_servers = 4
    job_queue_processes = 4
    audit_file_dest = C:\ORACLEXE\APP\ORACLE\ADMIN\XE\ADUMP
    background_dump_dest = C:\ORACLEXE\APP\ORACLE\ADMIN\XE\BDUMP
    user_dump_dest = C:\ORACLEXE\APP\ORACLE\ADMIN\XE\UDUMP
    core_dump_dest = C:\ORACLEXE\APP\ORACLE\ADMIN\XE\CDUMP
    db_name = XE
    open_cursors = 300

  • Oracle e business suite user name and password to login oracle bi?

    Hi,
    it is possible to use oracle e bussiness suite user name and password to login oracle BI PUBLISHER SERVER.??
    we are using 11.1.1.6.0 OBIEE and R12 (12.0.6) e business suite.

    SAURAV KUMAR SINGH wrote:
    During Oracle Installation i have given SID : RD1 & Password :admin@1234
    ... insert BUZZER sound here ...
    Using "@" in a password for a DB User is not supported at all (allthough it works).
    I did so myself once and I think it was possible to get a connection utilize quotes,
    but I do not remember which ones in what way.
    Could have been like
    sqlplus "sapsr3/admin@1234"
    but not very sure any more.
    My be toy around with this, but more easy is to use brtools and change the
    password to contain only valid oracle letters.
    The problem with "@" is, that it delimits the SQLNET Connect identifier.
    Volker
    Oh, and for executing brtools, do not provide a user at all or only "-u /"
    This should do a sysdba connect.
    Edited by: Volker Borowski on Jan 30, 2012 7:25 PM

  • The kerberos PAC verification failure when all users of only one RODC Site, trying to get access iis webpage of different site using Integrated Windows Authentication

    The kerberos PAC verification failure when all users of only one Site which having only one RODC server(A), trying to get access iis webpage of different site which having WDC server(B) using Integrated Windows Authentication. But when they accessing the
    website using IP address, it is not asking for credentials as I think it is using NTLM Authentication at that time which is less secure than Kerberos.
    Note that:- All user accounts and Computers of the RODC has been allowed cache password on the RODC. Nearest WDC for the RODC (A) is the WDC (B).
    The website is hosted on a windows server 2003 R2 and generating below system event log for those users of the RODC site :-
    Event Type: Error
    Event Source: Kerberos
    Event Category: None
    Event ID: 7
    Date:
    <var style="color:#333333;font-family:'Segoe UI', Arial, Verdana, Tahoma, sans-serif;font-size:13px;line-height:normal;">date</var>
    Time:
    <var style="color:#333333;font-family:'Segoe UI', Arial, Verdana, Tahoma, sans-serif;font-size:13px;line-height:normal;">time</var>
    User: N/A
    Computer:
    <var style="color:#333333;font-family:'Segoe UI', Arial, Verdana, Tahoma, sans-serif;font-size:13px;line-height:normal;">computer_name (the 2003 server)</var>
    Description: The kerberos subsystem encountered a PAC verification failure. This indicates that the PAC from the client<var style="color:#333333;font-family:'Segoe
    UI', Arial, Verdana, Tahoma, sans-serif;font-size:13px;line-height:normal;">computer_name</var> in realm <var
    style="color:#333333;font-family:'Segoe UI', Arial, Verdana, Tahoma, sans-serif;font-size:13px;line-height:normal;">realm_name</var> had
    a PAC which failed to verify or was modified. Contact your system administrator.
    This issue has been raised for last one week. Before that everything was fine. No Group Policy changed, Time also same.
    In this situation do I need to do Demotion of the RODC and re-promote it as RODC again  or is there any other troubleshooting to resolve it.
    Thanks in Advanced
    Souvik

     Hi Amy,
    Thanks for your response
    I noticed that Logon server could become incorrect again after user re-login or restart of a workstation.
    It seems root cause is different.  Need a permanent solution.
    The Workstations of the RODC site are getting IP from a DHCP server by automatic distribution of IP from a specific subnet for the site only.  The RODC is
    the Primary DNS server for the site.
    I have checked the subnet and it is properly bound with only with that AD site. The group of users and workstations are in the same site AD organisational Unit.
    Sometime I restarted the NET LOGON service and DNS server service on ther RODC server and sometime rebooted the server. But the Logon server issue has not fixed permanently.
    The internal network bandwidth of the site is better than the bandwidth to communicate with other site.  
    The server is Windows server 2008 R2 standard and hosting the below roles
    RODC
    DNS
    File server
    The server performance is Healthy in core times when maximum users usually logins. 
    Any further support would be much appreciated Amy
    Thanks
    Souvik

  • No user other than root can login with Java Desktop System

    Dear guys,
    I have a issue with loging in Oracle Solaris 10 using X-Browser and need your help.
    I can login to console login using X-Browser but only root can login that use Java Desktop Release 3 and
    all rest user cannot login with the session use Java Desktop Release 3.
    I have tried to rename .dt directory to reinitialize the user's environment but still not work.
    Any person have occurred this problem ? Can u suggest me an idea to solve this :(
    Thx for all !
    Edited by: ThangTT on Jul 18, 2011 12:29 AM

    Dear Nik,
    You're right ;) but no solved the problem when I change permission for /tmp dir. :(
    Let I show to u the log from .dt/startlog
    $more .dt/startlog
    --- Mon Jul 18 16:40:22 ICT 2011
    --- /usr/dt/bin/Xsession starting...
    --- starting /bin/true
    --- Xsession started by dtlogin
    --- starting /usr/dt/bin/dtsession_res -load -system
    --- sourcing /oracle/home/.dtprofile...
    --- sourcing /usr/dt/config/Xsession.d/0010.dtpaths...
    --- sourcing /usr/dt/config/Xsession.d/0015.sun.env...
    --- sourcing /usr/dt/config/Xsession.d/0020.dtims...
    --- sourcing /usr/dt/config/Xsession.d/0030.dttmpdir...
    --- sourcing /usr/dt/config/Xsession.d/0040.xmbind...
    --- sourcing /usr/dt/config/Xsession.d/1001.swupnot...
    --- sourcing /usr/dt/config/Xsession.d/1099.br...
    /usr/dt/bin/Xsession[659]: /var/tmp/brlog: cannot create
    --- starting /usr/dt/bin/dtsearchpath
    --- starting /usr/dt/bin/dtappgather &
    --- starting /usr/dt/bin/dsdm &
    --- session log file is /dev/null
    --- DTSOURCEPROFILE is 'true' (see /oracle/home/.dtprofile)
    --- execing /usr/dt/config/Xsession2.jds with a /usr/bin/bash login shell ...
    --- starting desktop on /dev/pts/10
    Oracle Corporation SunOS 5.10 Generic Patch January 2005
    Couldn't open /tmp/_sttyFile_fGaO1i
    /usr/dt/bin/Xsession[788]: 4518 Hangup
    X connection to 172.24.30.34:1.0 broken (explicit kill or server shutdown).
    Have any idea from u :(

  • Error "User Expiry Date Overlaps" while login into system

    Dear Consultants,
    A strange problem started occurring in our System.When we are trying to
    login in SAP system from any user apart from SAP*, after giving user name
    and password it gives error:- "user expiry date overlaps".
    I want to mention here our both licenses NetWeaver_ORA & Maintenance_ORAare still valid. and we are also able to login only from SAP* login
    System - SAP ECC with EHP5
    O.S       - Linux RHEL 5.4 X86_64
    Kernel  - 720
    Regards
    Gagan sharma
    Basis Consultant

    System Time and Server Time is Exactly same
    System time          21.02.2012  19:32:01 INDIA
    Server Time          Tue Feb 21 19:32:29 IST 2012
    I also want to mention here this problem started occurring immediately without doing any change on System or Server Side
    Regards
    Gagan sharma

Maybe you are looking for