Monitor connected front end users

Hi ,
I have an application with access control list and table which holds application users / used for authorization etc ...
at the database level I would like to see and know which session belongs to which fron end users!
at the database level I can only see session id's and application's username which is htmldb_public_user.... and its unique for every user..
lookin at Utilities>Database Monitor>Sessions page I can only see one developer connected! but cant see session or session id for front end users? is there anyway to find out the session info for this user?
Thanks

its the same question with a diffrence that he is trying to have diffrent applications login as diffrent username so he can trace applications individually(which is what im intrested in too) where as im more intrested in knowing the session id for each front end users who are viewing/inserting or deleting data through the applications! hope this makes sense!
I dont undrestand below response!
Bill,
FYI, the engine does this for each database session:
begin dbms_application_info.set_client_info(g_user); dbms_session.set_identifier(substr(g_user,1,(64 - length(g_instance)-1))||':'||to_char(g_instance)); dbms_application_info.set_module('APEX:APPLICATION '||to_char(g_flow_id),'PAGE '||to_char(g_flow_step_id)); exception when others then null; end;
...where g_user is the authenticated user, g_flow_id is the application ID, g_flow_step_id is the page ID, and g_instance is the Application Express sessionID. I don't know where to tell you to look for these markers but they will be associated with the database sessions that you're seeing which are owned by APEX_PUBLIC_USER.
We are looking to move to a 4 RAC environment which is creating many questions concerning APEX architecture.
I've seen all your other posts about this and IMO, there are no questions to be answered about the architecture of Application Express vis-a-vis RAC, and vice versa.
Thanks
Message was edited by:
friendlier

Similar Messages

Unable to connect to: End User Layer Library - 10.1.2.48.18

Hi, I have a problem about the Discoverer Desktop connection using Application users. I'm working with Discoverer 10g and eBS 11.5.9
So.., all my application users work perfectly when I login with Discoverer Viewer, but when I try to login with Discoverer Desktop (the Oracle application user check box is checked),I have the following behaviour:
unable to connect to: End User Layer Library - 10.1.2.48.18
This happens in production where recently they changed the password of the user APPS.
In which way can I re-login with my previous Application users ?
Is there anywhere a connection with the APPS password and the definition of Application users ?
Thanks in advance
Alessandro

Hi Gianluca, thanks for your reply !
Yes the versions are the same...but the problem is another one...
When I connect with an application user from the Desktop, the connection on the DB is not made with the application user, but always with the user 'APPS' !!
The problem is that on the DB there is a control which automatically kills all the APPS sessions.....so I can't connect with the Desktop on the EUL.....
So, now my question is:
Why does Discoverer Desktop connect to the DB (and consequently to the EUL) with the user APPS, instead to make a connection with the application user I wrote into the initial connection form ???
Somewhere can I modify this behavior ?
Thanks
Alessandro

SQL Server 2005 replaced with SQL Server 2014 trying to connect front end Access as guest (read only ODBC)

We have replaced a SQL Server 2005 with a SQL Server 2014 (new physical server.) Have the new server set up to use SQL Server login OR Windows user login. Had old server connecting (for a particular DB) to front end Access (2010 or 2013) as guest for
anyone logged into the Windows NT Network with a read only ODBC connection. Have the DB in the new server set to include guest as db_datareader (with only SELECT permission for the securables of each table and view being linked) but when any Windows user not
specifically listed as a SQL DB user tries to use the front end they get an error of:
Microsoft SQL Server Login
Connection failed:
SQL State: '28000'
SQL Server Error: 18456
[Microsoft][OCBC SQL Server Driver][SQL Server] Login failed for user {domain\user}.
After closing that pop-up window a server login window appears. Of course, since the guest user is not specifically listed as a user in the DB that fails also. It seems like there should be a very simple solution to this, but I can't seem to find it. I want
to allow anyone logged in on the Windows system (locally) to be able to open the MS Access file (on their work station machine) and run their own (read only; select) queries on the SQL Server database. Any suggestions?
Thanks a billion in advance ----

Thanks for the response Olaf. I have now spent weeks researching this. I realize that using the guest account in most situations is not advised. As mentioned, I have restricted the guest account to allow the db_datareader role only, and have explicitly denied
all other roles, as well as allowing select only, and still have no access for the guest account.
The suggested fix in the second link you provided, of using Windows groups is not plausible for my situation either. We are a scientific field research institution, with a few long term users and lots of users that may have Windows accounts for a few months,
and then they are gone. It would be a nightmare for the network tech to try to keep a group account up to date, and we need to give access (read only, of course) to anyone logged into the system. Realize that the ONLY access of any kind to this database is
thru MS Access ACCDB, using a (by default) read only OCDB connection.
This type of access is used particularly because researchers need to be able to set up their own queries, and the MS Access query interface is particularly convenient for people who are not themselves SQL experts, yet are trying to get some very advanced
levels of output. Putting the database online is not practical because then we are back to the need for a comprehensive query interface, and just picking up general subsets of the data online (from a basic web page search feature) would be out of the question,
since the result set would involve hundreds of thousands if not millions of records.
So - that said - what exactly would you suggest, assuming we don't have the funds to buy a whole new system, and have spent plenty of money with Microsoft's Enterprise level MS Office so that all work stations have MS Access, and Microsoft's SQL Server,
as well as running our network on Microsoft's network software.

Ports connected to End Users.

Hi,
Do you know any monitoring tool where I can see how many ports is using any Cisco switch and that I can export it to any software like Excel ?.
Thank you, best regards.

Yes, this is exactly the purpose of CiscoWorks Campus Manager's User Tracking component. User Tracking will find end users connected to switch ports by their MAC addresses. It will then correlate ARP table entries from managed routers to populate IP information. Finally, using a small piece of software running on Windows end hosts, UT can show the username of the user connected to the port.
A 90-day eval of CiscoWorks LAN Management Solution can be downloaded from http://www.cisco.com/go/lms/ .

How to track the APEX Web front-end Users ?

Hi All,
I would like to track who uses my Web front-end and hence, would like capture a list of all NT logins when they login for the first time. I would also like to capture the date they last logged in.
Can I keep this record somewhere in the background where it can be accessed by key people.
Please suggest the way out for this?
Thanks,
Himanshu Tiwari

Hi,
Yes you could quite easily incorporate this as part of your own custom Authentication routine, you can read more about writing your own authentication routine here -
http://www.oracle.com/technology/products/database/application_express/howtos/how_to_change_auth_method.html

SRM front end user cannot see buyer information in PO Print Preview

Hello,
In our SRM system, our purchasing users are not able to see the 'BUYER' information in the Print Preview screen within a PO.
Previously, users with a requistioner role were running into the same issue, but this was resolved by added the following authorizations:
S_USER_GRP ACTVT = 03 CLASS = *
The purchasing users currently have access to the authorizations above, but are still not able to see the BUYER information in Print Preview.
Any information is greatly appreciated.
Thank you,
CJB

As the preview is showing info then print should be coming in same way. Try check in print properties or with other printer. In the same time try on a trace (ST01) while user is printing the PO. See if any relevant missing authorization is there or not.
Regards,
Arpan Paik

Hiding columns in the front end i.e. Oracle Answers

Hello,
I wonder if it is possible to hide the non-essential reporting colums such as ID from Answers so the front-end users only see the column that should
be exposed for reporting.
Thanks,

You should be ok as long as the joins and relationships are properly setup in the Business Layer.
It's also possible to 'secure/hide' specific columns within a Presentation Column in the repository by setting permissions to specific repository groups. This way some Answers users could see the columns while others would not.
JES

Imposible to login to an application like end user

I try to develop an application with Oracle Application Express together with Oracle XE.
Oracle XE is installed on a different computer.
I'm working to a different computer that is a client. Also the application is already (partial) created some users with different rights are also created (developers, end users and workspace administrator). When I try to connect like end user, I get this message you have below:
Logout (link to logout of application)
Access denied by Application security check (message)
Return to application. (link to return to application)
What is wrong that I cannot connect like end user?

Hi Paul,
This is the setting in this moment for my application. I tried also to set different security check for every one page and then try to connect only to that page only.
Also I have some endusers that must to connect to my application like enduser. Answer is same.
I try to setup authorisation schema properly using database users (I've done some users in my XE database with same name and same password). Also, I get same answer.
I'll try step by step all possible combinations for security check, because there is no logic answer for my mind in this moment with all these security schemas. See here what they are saying in help files:
Application Express Authentication checks the user name and password against the Oracle Application Express account repository.
There is a nonsense answer that I get from application part, because a developer account is working very well.
Best regards to you,
Daniel

SQ01: Creating Front end for a set of query programs

Hi,
I need to create a front end to display a set of queries or query programs.
We can use SQ01 to open all queries, but my task is to create a front end
and let the users only acccess the queries i want( e.g some 50 queries).
Using the new front end users should be able to access only these 50 queries.
Any ideas.
Thanks,
Rao

Hi Rao,
Assign that particular user group or the role to the infoset of those query using SQ02. In this way they will be able to access those queries.
Regards,
Atish

L2 stack switch - to end-user devices

Hi all,
I came across a design in my project today and realize that there are 3 x L2 stack switches which will be connecting to end-user computers.
According to the client, for end-user devices, he intend to just connect 1device/interface.
Q1) I am wondering, in this design, the only intention is to increase the number of interfaces/ports , am i right ? as there is only 1 physical cable for each connected device.
==========================================================================================
In the same design, there is 2 x L3 switches which are meant for core network connecting to servers computers. They are stacked as well.
In this case, etherchannels are configured on the switches and servers which the 2 interfaces in 1 server are connecting to separate switches' interface in the stack.
Q2) Can I check, for this kind of switch stacking setup, are the etherchannels configure as active, active or it can be configure as active,passive ? or it is switches and servers dependable ?
Regards,
Noob

Hi Reza,
Thanks for the reply.
Q1) I am wondering, in this design, the only intention is to increase the number of interfaces/ports , am i right ? as there is only 1 physical cable for each connected device.
That is correct. The end devices (printers, PCs, laptops) usually have one physical cable and you can only connect them to one switch, but sometimes for mission critical environments engineers deploy multiple switches in case one of them goes out for any reason.
What if in the event that 1 of the switch go down, as the switches are stacked, can i just plug out the cable @ interface let's say at switch1 fe0/1 and insert it into switch2 fe0/1 ? (provided it is not occupied)
Q2) Can I check, for this kind of switch stacking setup, are the etherchannels configure as active, active or it can be configure as active,passive ? or it is switches and servers dependable ?
If you issue "sh etherca summay" on the stack, it will show you the port number that are part of that etherchannel. As for active or passive, usually the switch is configured as active and servers as passive but you can also configure both sides as active.
Do you mean on the server side, only 1 port will be receiving/sending information, but on the switch side, each interface at each of the 2 switches is able to receive/send ?
Regards,
Noob

How to implement Oracle user/role security with Access front end?

Hi,
We have successfully migrated our Access database tables to Oracle 10g using SQL developer. We've recreated all the users and roles(i.e., access groups) in Oracle and granted rights to tables.
In the Access front end database, in the Database window we have saved linked Oracle tables which replaced the Access tables. The forms, reports, queries run fine with the linked Oracle tables. All the linked table use one ODBC DSN to the Oracle database with the same Oracle user id.
We need to be able to authenticate users into the Oracle database and RE-link the tables based on their own unique user id. By during so we can allow users to use the Oracle standard user id/role and system privileges to control select, update, ect. rights to the database.
I've been able to use the VB code within Access to logon into the database with a unique id, but I have not been able to find out how to RE-link the tables to the unique user id using VB. There should be some way to relink tables dynamically, based on users login into the Access front end.
I don't know a great deal about Access projects, but I do know with SQL server allows login into your Access project and link tables dynamically.
Can someone give me some assistance or point me in the right direction?
Thanks in advance,
Larry

We had one of our programmers here come up with a VB code solution for re-linking table within Access. However the relinking takes 3-4 minutes for 100+ tables.
In an effort to help you understand the situation better, I will attempt to elaborate on the problem:
We have an Access 2003 application which currently has a front end using Access(forms, reports, queries, & VB code) and a MS Access 2003 backend.
We have migrated the backend tables to Oracle. However, we still have a need to maintain the front end in Access, since we have over 60 forms, 40 reports, 200+ queries in Access. Its easy to understand, we have a significant investment in the front end(Obviously, the plan is to migrate the front end also at some future date).
In order to utilized the existing front end, we have to validate and modify the current front end connections to the new Oracle backend. One of the features of Access is that you can "link" tables and save the link for runtime. Each Access table can have its own link which is a separate ODBC/JET connection. As such, each separate link has its own userid/database information.
The other issue with using the Access front-end is that Access utilizes a workgroup file to implement user and group security. The workgroup file contains all the users and which groups the users belong to in Access. Then within Access, you allow users access to object(tables, queries, ect) by their userid and or group. When users open an Access database with Access security enabled, they are required to log into Access. The login is authenticated by the workgroup file. Once, logged into Access, users have rights to Access objects based on their rights granted to their userid and groups they belong. The problem here is that when you remove the linked Access tables and replace them with linked Oracle tables, Access has knowledge about Oracle table rights granted to users; nor would you expect it to.
The dilema is the disconnect between Access and the fact Oracle utilizes a similar but much more sophisticated security model. It creates users and roles(which are similar to Access groups), and again this is independent of Access security.
Our solution was to still use the Access workgroup file security along with the Oracle security model. By using the Access userid and then creating a similar Oracle userid with similar table rights granted in Access, you could apply security within Access and also with the Oracle database.
For example, a user BOB logs into Access via the workgroup file, using VB code, Access then establishes a Oracle connection logining into Oracle using the same unique userid BOB into Oracle.
After connecting and validating user BOB into Oracle, then the Access tables are relinked to Oracle using the user BOB userid and table rights.
This Oracle userid has been granted table rights specific for this userid.This allows the user BOB to use the Access application and still be authenticated into the Oracle database.
The problem with this solution is that the relinking of the saved Access tables takes 3-7 minutes for about 100+ tables. This is not acceptable for users each time they log into the application.
Our current alternative is to use one Oracle userid to login each user, and use Access form restrictions/security to allow/prevent users from updating/viewing data. Obviously, this is not the optimal solution in respect to security, but it at least allows us to control access to the data(via the forms) by using one logon required for each user, and quick startup time for the application.
I understand SQL server does a better job in integration, but we use Oracle which is what I am trying to work with.
Larry

ERROR 14614 on Front End when testing with Remote Connectivity Analyzer

Hello forum
Does the Lync Remote Connectivity Analyzer not support 128 encryption?
Reason im asking is the following:
When I test my Lync edge server. I get the following error on the RCA result page: RegisterException.
After this error on the RCA, the event 14614 is logged on my Standard Edition Front end server.
INFO:
User authentication with NTLM protocol failed with error SEC_E_UNSUPPORTED_FUNCTION. This indicates a potential mismatch between security policy settings on the client and server computers.
Cause: This error can occur if the settings in "Network security: Minimum session security for NTLM SSP based (including secure RPC) clients" policy on the client computer are not the same as the settings in the "Network security: Minimum
session security for NTLM SSP based (including secure RPC) servers" policy on this server. By default, the "Require 128-bit encryption" setting is disabled for computers running Windows Server 2008, Windows Vista, Windows Server 2003,
Windows 2000 Server, or Windows XP. For computers running Windows 7 or Windows Server 2008 R2, this setting enabled by default.
Resolution:
Ensure that the "Network security: Minimum session security for NTLM SSP based (including secure RPC) clients" policy settings on the computers from which users log on are the same as "Network security: Minimum session security for NTLM SSP based
(including secure RPC) servers" policy settings on this server.
All of our Lync servers are running on Windows 2012 R2. So why this error from the RCA?

Please check your settings on the client and on the server.
I know, this is a old blog info, but it discribed the problem.
http://blogs.technet.com/b/rogulati/archive/2011/04/30/lync-2010-ntlm-sec-policy-mismatch-error-cannot-sign-from-xp-clients.aspx
http://blog.ucomsgeek.com/2011/01/lync-2010-ntlm-client-authentication.html
regards Holger Technical Specialist UC
Thanks for the answer, but in this case the "Client" is the Remote Connectivity Analyzer. So my question was, why is it not working with that? Does the RCA not support 128 bit?

Is there a way for users to add products in the front-end using a Web-App?

I am racking my brains trying to figure out a way to let users add products to the front-end on their own.
I am building a site for a client who needs users to be able to create there own storefront, kind of like ebay. Here is exactly the functionality I want: Supplier Frontend Products Upload - Magento Connect
There HAS to be a way to do this with a web app even if it means writing in some code...can anyone suggest a way to do this?

In short, out of box no, but is possible.
Solution 1: Hosted on BC, external interface that interfaces with BC API, requires external hosted server.
Solution 2: Wait until v3 of the API comes out... no timeline from Adobe given. This would remove the need for the external API server.
Can do both solutions for you but solution 2 wont work until adobe allows it.

How Front End pool deals with fail over to keep user state?

   Hello to all, I searched a lot of articles to understand how Lync 2010 keeps user state if a fail happens in a Front Pool node, but didn't find anything clear.
     I found a MS info. about ths topic : " The Front End Servers maintain transient information—such as logged-on state and control information for an IM, Web, or audio/video (A/V) conference—only for the duration of a user’s session.
This configuration
is an advantage because in the event of a Front End Server failure, the clients connected to that server can quickly reconnect to another Front End Server that belongs to the same Front End pool. "
    As I read, the client uses DNS to reconnect to another Front End in the pool. When it reconnects to an available server, does he lose what he/she was doing at Lync client? Can the server that is now hosting his section recover all
"user's session data"? Is positive, how?
   Regards, EEOC.

The presence information and other dynamic user data is stored in the RTCDYN database on the backend SQL database in a 2010 pool:
http://blog.insidelync.com/2011/04/the-lync-server-databases/ If you fail over to another pool member, this pool member has access to the same data.
Ongoing conversations and the like are cached at the workstation.
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications

Front-End Loopback Test on Catalyst 2955 causes connected hardware to "die"

I have recently purchased a Cisco Catalyst model WS-2955C-12 switch. During POST (boot), the console reports that the switch undergoes what is known as a "FRONT-END LOOPBACK TEST". During this test the 14 port lights on the device light up amber for a moment, connectivity is lost, and after a second or two the lights go off and connectivity returns. We've found that the moment the lights go off at the end of this test, if we have a specific device (with a specific ethernet chip) directly connected to the switch the ethernet chip is adversely affected by this test - the device "goes dark" and is not capable of communicating with anything (including other switches, routers, etc...) until it is power-cycled. What exactly does this FRONT-END LOOPBACK TEST do, and what does it send across the wire that could be causing my ethernet chip onboard the device to go bonkers?
Thanks!
-Danny

Cisco IOS Release 12.1(22)EA1 runs on Catalyst 2955, Catalyst 2950, and Catalyst 2940 switches.
Review the new software features, open caveats, and resolved caveats sections for information specific to your switch. The information in this document refers to all the switches, unless otherwise noted.
These release notes include important information about this release and any limitations, restrictions, and caveats that apply to it. To verify that these are the correct release notes for your switch:
If you are installing a new switch, refer to the Cisco IOS release label on the rear panel of your switch.
If your switch is running, you can use the show version user EXEC command. See the "Finding the Software Version and Feature Set" section.
If you are upgrading to a new release, refer to the software upgrade filename for the Cisco IOS version.
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat2950/12122ea1/ol554602.htm

Monitor connected front end users

Similar Messages

Maybe you are looking for