ORA-24247: network access denied by access control list (ACL)error-UTL_HTTP
I am getting following ACL error while executing following procedure:
create or replace procedure sat_proc as
http_req utl_http.req;
http_resp utl_http.resp;
BEGIN
http_req := utl_http.begin_request('www.yahoo.com');
http_resp := utl_http.get_response(http_req);
utl_http.end_response(http_resp);
END;
exec sat_proc;
ORA-29273: HTTP request failed
ORA-06512: at "SYS.UTL_HTTP", line 1130
ORA-24247: network access denied by access control list (ACL)
ORA-06512: at "TRANSDBA.SAT_PROC", line 5
ORA-06512: at line 1
I am able to execute successfully while executing above code as PL/SQL block:
DECLARE
http_req utl_http.req;
http_resp utl_http.resp;
BEGIN
http_req := utl_http.begin_request('www.yahoo.com');
http_resp := utl_http.get_response(http_req);
utl_http.end_response(http_resp);
END;
PL/SQL procedure successfully completed.
Could help me find why I am getting error while executing same code in a procedure? Is there any privilege missing?
GRANT EXECUTE ON SYS.UTL_HTTP TO <your_user>;
SQL> set time on
17:21:01 SQL> set role none;
Role set.
17:21:23 SQL> @utl_http.sql
17:21:34 SQL> DECLARE
17:21:34 2 http_req utl_http.req;
17:21:34 3 http_resp utl_http.resp;
17:21:34 4 BEGIN
17:21:34 5 http_req := utl_http.begin_request('www.yahoo.com');
17:21:34 6 http_resp := utl_http.get_response(http_req);
17:21:34 7 utl_http.end_response(http_resp);
17:21:34 8 END;
17:21:34 9 /
PL/SQL procedure successfully completed.
17:21:35 SQL> connect / as sysdba
Connected.
17:22:47 SQL> connect dbadmin/admindb
Connected.
17:23:06 SQL> @utl_http.sql
17:23:22 SQL> DECLARE
17:23:22 2 http_req utl_http.req;
17:23:22 3 http_resp utl_http.resp;
17:23:22 4 BEGIN
17:23:22 5 http_req := utl_http.begin_request('www.yahoo.com');
17:23:22 6 http_resp := utl_http.get_response(http_req);
17:23:22 7 utl_http.end_response(http_resp);
17:23:22 8 END;
17:23:22 9 /
PL/SQL procedure successfully completed.
17:23:23 SQL> set role none;
Role set.
17:23:29 SQL> @utl_http.sql
17:23:31 SQL> DECLARE
17:23:31 2 http_req utl_http.req;
17:23:31 3 http_resp utl_http.resp;
17:23:31 4 BEGIN
17:23:31 5 http_req := utl_http.begin_request('www.yahoo.com');
17:23:31 6 http_resp := utl_http.get_response(http_req);
17:23:31 7 utl_http.end_response(http_resp);
17:23:31 8 END;
17:23:31 9 /
DECLARE
ERROR at line 1:
ORA-29273: HTTP request failed
ORA-06512: at "SYS.UTL_HTTP", line 1130
ORA-24247: network access denied by access control list (ACL)
ORA-06512: at line 5
17:23:31 SQL> above is from test user
Below is from SYSDBA account
SQL> set time on
17:20:53 SQL> revoke execute on sys.utl_http to dbadmin;
revoke execute on sys.utl_http to dbadmin
ERROR at line 1:
ORA-00905: missing keyword
17:22:03 SQL> revoke execute on sys.utl_http from dbadmin;
revoke execute on sys.utl_http from dbadmin
ERROR at line 1:
ORA-04020: deadlock detected while trying to lock object
ACLiLZU+w09hR7gQAB/AQAjcw==
17:22:32 SQL> /
Revoke succeeded.
17:22:52 SQL> Edited by: sb92075 on Jun 10, 2010 5:24 PM
Similar Messages
-
HR User, REST example - network access denied by access control list (ACL)
Hi,
I am new to APEX and am running the 'Oracle Developer Days' vm. I'm logged into APEX as the default HR/oracle account and I've been following the 'Creating and Using a RESTful Web Service in Application Express 4.2' training video, however when I try to retrieve information by entering a dept no. and clicking submit I get:
ORA-29273: HTTP request failed ORA-06512: at "SYS.UTL_HTTP", line 1130 ORA-24247: network access denied by access control list (ACL)
I've seen the following thread:
ORA-24247: network access denied by access control list (ACL)error-UTL_HTTP
and I've tried running the command:
GRANT EXECUTE ON SYS.UTL_HTTP TO HR;
but I'm not getting anywhere, presumably the HR user does not have permissions to access 'http://localhost:8888/apex/hr/employee_test'
Any help much appreciated, also if this is the wrong forum for this question please let me know.
Many ThanksHi,
Thank you for the link; I executed the first block of code to 'grant connect privileges to any host for the APEX_040200 database user' that did not work so I changed the user to HR within the code and re-executed and that seems to have done the trick. I guess the HR user is now in the power_users list/group?
Thanks again! -
ORA-24247: network access denied by access control list (ACL)
Hi All,
I am sending a mail thru OWB 11g ( and using database 11g) after successful or failure of process. My process is completing successfully but am not able to send mail. At the time of sending mail it is giving me error as below
ORA-24247: network access denied by access control list (ACL)
ORA-06512: at "SYS.UTL_TCP", line 17
ORA-06512: at "SYS.UTL_TCP", line 246
ORA-06512: at "SYS.UTL_SMTP", line 115
ORA-06512: at "SYS.UTL_SMTP", line 138
ORA-06512: at line 8
I have created ACL using the following code
BEGIN
dbms_network_acl_admin.create_acl(acl => 'oramail.xml',
description => 'Network permissions for mail.oracle.com',
principal => 'OWF_MGR', is_grant => TRUE, privilege => 'connect');
DBMS_NETWORK_ACL_ADMIN.ADD_PRIVILEGE(acl => 'oramail.xml',
principal => 'OWF_MGR',
is_grant => true,
privilege => 'resolve');
DBMS_NETWORK_ACL_ADMIN.ASSIGN_ACL(acl => 'oramail.xml',
host => '141.146.46.30');
END;
commit;
where 141.146.46.30 is my mail server IP. I am still not able to send mail by OWB. Please let me know if I have missed any steps in this.
Thanks.For Oracle Warehouse Builder 11g running in 11g dB you need to set the ACL for the OWBSYS user. For example:
EXECUTE DBMS_NETWORK_ACL_ADMIN.CREATE_ACL('acl_for_owb_cc.xml', 'ACL for Control Center', 'OWBSYS', TRUE, 'connect');
For Oracle Warehouse Builder 10.2.0.4 running in 11g dB you need to set the ACL for the OWB repository owner. For example:
EXECUTE DBMS_NETWORK_ACL_ADMIN.CREATE_ACL('acl_for_owb.xml', 'ACL for OWB', 'MY_OWB_REPO_OWNER', TRUE, 'connect');" -
APEX and ORA-24247: network access denied by access control list (ACL)
Hi,
I try to send email with APEX.
I have enter the parameters of my mail server and activate the email on my application.
I have follow the APEX installation guide and apply the script given in the "Granting Connect Privileges" section.
When I try to send email or make a subscription, I don't receive any email and can see this error in the table "WWV_FLOW_MAIL_LOG"
+"MAIL_TO","MAIL_FROM","MAIL_REPLYTO","MAIL_SUBJ","MAIL_CC","MAIL_BCC","MAIL_SEND_ERROR","LAST_UPDATED_BY","LAST_UPDATED_ON","SECURITY_GROUP_ID"+
+"[email protected]","[email protected]","[email protected]","Suivi de Besoins","","","ORA-24247: network access denied by access control list (ACL)","SYS",05/03/12,3210210578052219+
+"[email protected]","[email protected]","[email protected]","Suivi de Besoins","","","ORA-24247: network access denied by access control list (ACL)","SYS",05/03/12,3210210578052219+
+"[email protected]","[email protected]","[email protected]","Suivi de Besoins","","","ORA-24247: network access denied by access control list (ACL)","SYS",05/03/12,3210210578052219+
+"[email protected]","[email protected]","[email protected]","Suivi de Besoins","","","ORA-24247: network access denied by access control list (ACL)","SYS",05/03/12,3210210578052219+
+"[email protected]","[email protected]","[email protected]","Suivi de Besoins","","","ORA-24247: network access denied by access control list (ACL)","SYS",24/02/12,3210210578052219+
+"[email protected]","[email protected]","[email protected]","Suivi de Besoins","","","ORA-24247: network access denied by access control list (ACL)","SYS",05/03/12,3210210578052219+
Do you see what is wrong in my configuration ?
I use APEX 4.1, Oracle 11g.
The script that I have apply is :
DECLARE
ACL_PATH VARCHAR2(4000);
ACL_ID RAW(16);
BEGIN
-- Look for the ACL currently assigned to '*' and give APEX_040100
-- the "connect" privilege if APEX_040100 does not have the privilege yet.
SELECT ACL INTO ACL_PATH FROM DBA_NETWORK_ACLS
WHERE HOST = '*' AND LOWER_PORT IS NULL AND UPPER_PORT IS NULL;
-- Before checking the privilege, make sure that the ACL is valid
-- (for example, does not contain stale references to dropped users).
-- If it does, the following exception will be raised:
--+
-- ORA-44416: Invalid ACL: Unresolved principal 'APEX_040100'
-- ORA-06512: at "XDB.DBMS_XDBZ", line ...
--+
SELECT SYS_OP_R2O(extractValue(P.RES, '/Resource/XMLRef')) INTO ACL_ID
FROM XDB.XDB$ACL A, PATH_VIEW P
WHERE extractValue(P.RES, '/Resource/XMLRef') = REF(A) AND
EQUALS_PATH(P.RES, ACL_PATH) = 1;
DBMS_XDBZ.ValidateACL(ACL_ID);
IF DBMS_NETWORK_ACL_ADMIN.CHECK_PRIVILEGE(ACL_PATH, 'APEX_040100',
+'connect') IS NULL THEN+
DBMS_NETWORK_ACL_ADMIN.ADD_PRIVILEGE(ACL_PATH,
+'APEX_040100', TRUE, 'connect');+
END IF;
EXCEPTION
-- When no ACL has been assigned to '*'.
WHEN NO_DATA_FOUND THEN
DBMS_NETWORK_ACL_ADMIN.CREATE_ACL('power_users.xml',
+'ACL that lets power users to connect to everywhere',+
+'APEX_040100', TRUE, 'connect');+
DBMS_NETWORK_ACL_ADMIN.ASSIGN_ACL('power_users.xml','*');
END;
+/+
COMMIT;
Thanks for your help,Hi,
You need to grant privilege to the user.
i.e add principal
You can use script :
DECLARE
ACL_ID RAW(16);
CNT NUMBER;
BEGIN
-- Look for the object ID of the ACL currently assigned to ''*
SELECT ACLID INTO ACL_ID FROM DBA_NETWORK_ACLS
WHERE HOST = '' AND LOWER_PORT IS NULL AND UPPER_PORT IS NULL;*
-- If just some users referenced in the ACL are invalid, remove just those
-- users in the ACL. Otherwise, drop the ACL completely.
SELECT COUNT(PRINCIPAL) INTO CNT FROM XDS_ACE
WHERE ACLID = ACL_ID AND
EXISTS (SELECT NULL FROM ALL_USERS WHERE USERNAME = PRINCIPAL);
IF (CNT > 0) THEN
FOR R IN (SELECT PRINCIPAL FROM XDS_ACE
WHERE ACLID = ACL_ID AND
NOT EXISTS (SELECT NULL FROM ALL_USERS
WHERE USERNAME = PRINCIPAL)) LOOP
UPDATE XDB.XDB$ACL
SET OBJECT_VALUE =
DELETEXML(OBJECT_VALUE,
*'/ACL/ACE[PRINCIPAL="'||R.PRINCIPAL||'"]')*
WHERE OBJECT_ID = ACL_ID;
END LOOP;
ELSE
DELETE FROM XDB.XDB$ACL WHERE OBJECT_ID = ACL_ID;
END IF;
END;
REM commit the changes.
COMMIT;
Or you need to add privilege to specific user/schema using following script:
BEGIN
DBMS_NETWORK_ACL_ADMIN.ADD_PRIVILEGE (
acl => 'aclfilename.xml',
principal => 'databaseuser',
is_grant => TRUE,
privilege => 'connect',
position => null);
COMMIT;
END;
Please execute this code after connect as sysdba user.
Thanks & Regards,
Jaydipsinh Raulji
Web: [www.oracleapexconsultant.com|www.oracleapexconsultant.com] -
Another ORA-24247: network access denied by access control list (ACL)
Hi
We have just upgraded from 10g to 11g (DB version is 11.2.0.1.0), and i've have nothing but problems with ACL.
I've tried:
Creation code (as dba-user):
begin
DBMS_NETWORK_ACL_ADMIN.CREATE_ACL(’netacl.xml’,
‘Allow usage to the UTL network packages’, ‘ACLTEST’, TRUE, ‘connect’);
DBMS_NETWORK_ACL_ADMIN.ADD_PRIVILEGE(’netacl.xml’ ,’ACLTEST’, TRUE, ‘resolve’);
DBMS_NETWORK_ACL_ADMIN.ASSIGN_ACL(’netacl.xml’,'*’);
commit;
end;
Execution code (as ACLTEST):
declare
l_conn UTL_TCP.connection;
v_file ftp.TStringTable;
l_list ftp.t_string_table;
begin
l_conn := ftp.Logind('DOMAIN', 21, 'USERNAME', 'PASSWORD');
ftp.logout(l_conn);
end;
Error stack
ORA-24247: network access denied by access control list (ACL)
ORA-06512: at “SYS.UTL_TCP”, line 17
ORA-06512: at “SYS.UTL_TCP”, line 246
ORA-06512: at “COMMON.FTP”, line 784
ORA-06512: at line 7
i've tried to add the domain in the acl with full port range with no luck:
begin
DBMS_NETWORK_ACL_ADMIN.ASSIGN_ACL(’netacl.xml’,'DOMAIN’,1,65000);
commit;
end;Hi;
First what below query return
SELECT acl,
principal,
privilege,
is_grant,
to_char(start_date) ,
to_char(end_date)
FROM dba_network_acl_privileges;
Regard
Helios -
ORA-24247: network access denied by access control list (ACL) using FTP
What used to work on our 10g server now doesn't work on 11g. We recently migrated to a new server and this FTP download process is the only thing that is giving me problems.
I have tried using the IP Address and Domain name, opened up the ports 10 to 80 (just in case) and even tried FTPing to a local FTP site and cannot seem to get past the ORA-24247 error. At this point I am not sure what else to try. The FTP process worked great in 10g...
begin
dbms_network_acl_admin.create_acl (
acl => 'cwtoto_acl_file.xml',
description => 'FTP Access',
principal => 'CWT_OPERATOR',
is_grant => TRUE,
privilege => 'connect',
start_date => null,
end_date => null
dbms_network_acl_admin.add_privilege (
acl => 'cwtoto_acl_file.xml',
principal => 'CWT_OPERATOR',
is_grant => TRUE,
privilege => 'resolve',
start_date => null,
end_date => null
dbms_network_acl_admin.assign_acl (
acl => 'cwtoto_acl_file.xml',
host => '69.30.63.173',
lower_port => 10,
upper_port => 80
dbms_network_acl_admin.assign_acl (
acl => 'cwtoto_acl_file.xml',
host => 'ftp.rmpc.org',
lower_port => 10,
upper_port => 80
dbms_network_acl_admin.assign_acl (
acl => 'cwtoto_acl_file.xml',
host => 'ftp.taglab.org',
lower_port => 10,
upper_port => 80
dbms_network_acl_admin.assign_acl (
acl => 'cwtoto_acl_file.xml',
host => '146.63.252.61',
lower_port => 10,
upper_port => 80
commit;
end;
Edited by: tfrawley on Jan 20, 2011 10:23 AMSo, I have contacted support to fix my inability to login to Oracle Support. In the meantime I'll just run through this problem one more time:
I executed the following:
begin
dbms_network_acl_admin.create_acl (
acl => 'cwtoto_acl_file.xml',
description => 'FTP Access',
principal => 'CWT_OPERATOR',
is_grant => TRUE,
privilege => 'connect',
start_date => null,
end_date => null
dbms_network_acl_admin.assign_acl (
acl => 'cwtoto_acl_file.xml',
host => 'ftp.rmpc.org',
lower_port => 1,
upper_port => 1000
commit;
end;
This should give me an ACL xml file and permission for CWT_OPERATOR to connect to ftp.rmpc.org on ports 1 through 1000.
I can look and see if the creation was successful: SELECT host, lower_port, upper_port, acl FROM dba_network_acls t ;
HOST LOWER_PORT UPPER_PORT ACL
1 ftp.rmpc.org 1 1000 /sys/acls/cwtoto_acl_file.xml
Looks good right?
So I test it using the following:
DECLARE
l_conn UTL_TCP.connection;
BEGIN
l_conn := ftp.login('ftp.rmpc.org','21','[email protected]','anonymous');
ftp.logout( l_conn);
END;
And get the following errors:
ORA-24247: network access denied by access control list (ACL)
ORA-06512: at "SYS.UTL_TCP", line 17
ORA-06512: at "SYS.UTL_TCP", line 246
ORA-06512: at "SYSTEM.FTP", line 49
ORA-06512: at line 4
Has anyone else tried to use UTL_TCP and experienced a simliar issue? -
ORA-24247: Netzwerkzugriff von Access Control-Liste (ACL) abgelehnt
Hi,
I am trying to send email in APEX but all the emails are in APEX mail queue with error status,
ORA-24247: Netzwerkzugriff von Access Control-Liste (ACL) abgelehnt
I already configured smtp server in manage instance. Please suggest me why the error is happening.
Thanks & Regards,
SagarikaProbably you need to add the SMTP server address to the ACL list. There are numerous resources showing how to do that. Google on "how to create acl in oracle" and you will get many links showing up. This one is explaining a how to quite good:
http://www.oracleflash.com/36/Oracle-11g-Access-Control-List-for-External-Network-Services.html
Denes Kubicek
http://deneskubicek.blogspot.com/
http://www.apress.com/9781430235125
http://apex.oracle.com/pls/apex/f?p=31517:1
http://www.amazon.de/Oracle-APEX-XE-Praxis/dp/3826655494
------------------------------------------------------------------- -
Access control list (ACL)
hi,
I have upgraded from 8i to 11g. I am using a procedure to send email from forms10g.
After the upgrade, I am getting error.
ERROR at line 1:
ORA-24247: network access denied by access control list (ACL)
ORA-06512: at "SYS.UTL_TCP", line 17
ORA-06512: at "SYS.UTL_TCP", line 246
ORA-06512: at "SYS.UTL_SMTP", line 115
ORA-06512: at "SYS.UTL_SMTP", line 138
ORA-06512: at "HYBRID.SEND_MAIL", line 12
ORA-06512: at line 1
I created the ACL, see below .
begin
dbms_network_acl_admin.create_acl (
acl => 'utl_smtp.xml',
description => 'Allow mail to be send',
principal => 'username',
is_grant => TRUE,
privilege => 'connect'
commit;
end;
begin
dbms_network_acl_admin.add_privilege (
acl => 'utl_smtp.xml',
principal => 'username',
is_grant => TRUE,
privilege => 'resolve'
commit;
end;
begin
dbms_network_acl_admin.assign_acl(
acl => 'utl_smtp.xml',
host => 'smtp.abc.com'
commit;
end;
When i execute send_mail procedure i get the above error.
Exec send_mail('[email protected]','[email protected]','item Return','TEST MAIL') ;
Please helpPl see if MOS Doc 557070.1 (ORA-24247 Trying To Send Email Using UTL_SMTP from 11gR1 (11.1.0.6) or higher) can help
HTH
Srini -
Access Denied when access to File System Repository
Hi,
Our SAP Portal install in Windows 2003, and access to a unix's file system that created from File System Repository of Portal. When I access it in KM content, SAP Portal return the following message:
System Error
An exception occurred during the program execution. Below you will find technical information pertaining to this exception that you might want to forward to your system administrator.
Exception Class: class com.sapportals.wcm.repository...
Exception Message: Access denied
If I double-click any file,
IE return 403: The requested operation is forbidden for this resource.
Please help me to fix this problem?
PS: The unix's file system mode is 777.
The permission of folder in Portal File System Repository is everyone full control.
Message was edited by: Jeff Lien
Message was edited by: Jeff LienHi,
to my knowledege, this combination is not supported. You can integrated Windows-File-Shares in a Unix-Portal: http://help.sap.com/saphelp_nw04/helpdata/en/ed/b334ea02a2704388d1d2fc3e4298ad/frameset.htm but not the other way round
Kind reagrds
karin -
Access Denied when accessing ipc$ but not admin$ of a Windows 2008 R2 Standard server
From a Windows 2008 R2 Server,
c:\> net use * \\<winserver2008>\ipc$
System error 66 has occurred.
The network resource type is not correct.
c:\> net use * \\<winserver2008>\admin$
Drive Z: is now connected to \\<winserver2008\admin$.
However, running the above commands from a Windows 2003 Server, I have no problem at all.
Does anyone has any idea?Hello nww,
The problem is caused by UAC and the elevated privileges required to access the administrative shares. This
Microsoft KB article (951016) describes the issue in Windows Vista
To better protect those users who are members of the local Administrators group, we implement UAC restrictions on the network. This mechanism helps prevent against "loopback" attacks. This mechanism also helps prevent local malicious software
from running remotely with administrative rights.
and the steps to resolve it, open a new PowerShell window as administrator:
New-ItemProperty HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System -name "LocalAccountTokenFilterPolicy" -value "1" -propertyType dword
A word of caution: this is opening up a security hole and it should only be done with careful consideration of the risks. The need to use PSExec to remotely run a process was an important part of the deployment, however the same result
could be achieved using PowerShell remoting. Until it’s tested and we’re ready to deploy that, I’ll be using this method.
source -
View access denied to Subject on a Rule error: - what does it mean?
I get this red error message when I attempt to validate a field on a form.
I am logged in as mailadmin and I am using his default form. When I edit and save a user, I want to ensure that the mail username is unique.
I wrote a rule which compares the username entered on the form against all present IdM accountIds (queriable attribute 'name'). The rule has a <RunAsUser> section and the rule runs as id 'Configurator'
What is the trick here to allow mailadmin View access?
I want an admin (not Configurator) to be able to list all IdM objects so I can apply the Attribute condition startswith for all present IdM accountIds. I believe it should be possible.
Any hints gratefully acceptedI've had problems with a rule that was unaccessible to end users. here is what I had to change in the rule :
<Rule authType='EndUserRule'
<ObjectRef type='ObjectGroup' id='#ID#All' name='All'/>
now it works -
Hi All,
The thread that i posted under the topic 'Access Denied' yesterday is missing in the database forum. This is the link of my thread that i posted yesterday
http://forums.oracle.com/forums/thread.jspa?threadID=2227549&tstart=0
since as i have received replies from the three users for that thread yesterday.. But now it is missing.
This is the error which reported for me
ORA-24247: network access denied by access control list (ACL)
ORA-06512: at "SYS.UTL_TCP", line 17
ORA-06512: at "SYS.UTL_TCP", line 246
ORA-06512: at "SYS.UTL_SMTP", line 115
ORA-06512: at "SYS.UTL_SMTP", line 138
ORA-06512: at "BITECH1.SEND_MAIL", line 23
ORA-06512: at line 2For that the users said of enabling the ACL and this is the reply that i got from the three users
Hi Mini,
There are actually a lot of discussions existing on this topic: you can search this forum and use Google as well.
you may want to refer to the following link:
http://www.oracle-base.com/articles/11g/FineGrainedAccessToNetworkServices_11gR1.php
HTH,
Thierry
In 11g the user running utl_smtp et. al. packages needs a grant for network ACLs (access control list), see
http://download.oracle.com/docs/cd/B28359_01/network.111/b28531/authorization.htm#DBSEG40012
Support note 1209644.1 is also one of the hits on the ora-24247 error.
Sounds like you haven't setup the ACL correctly.
Can you post the code that you used?I have also enabled the ACL by following the referred link by the user.
After that i tried to access the URL which is outside the firewall. If i enabled the ACL means then the URL has to be accessible and this is the way that i tried
Firstly i connected to the user that i have enabled ACL, and after that i executed the below command
SQL> SET SERVEROUTPUT ON SIZE 1000000
SQL> DECLARE
2 l_url VARCHAR2(32767) := 'http://mail.yahoo.com';
3 l_conn utl_http.req;
4 BEGIN
5 l_conn := utl_http.begin_request(url => l_url, method => 'POST', http_version=> 'HTTP/1.0');
6 dbms_output.put_line('URL ' || l_url || ' was reached successfully.');
7 END;
8 / But the error that is returned for the above query is
ERROR at line 1:
ORA-29273: HTTP request failed
ORA-06512: at "SYS.UTL_HTTP", line 1029
ORA-12535: TNS:operation timed out
ORA-06512: at line 5what is the error over here?? i couldnt guess. And also where is my missing thread in DB forum
Thanks
Regards,
Mini
Edited by: Mini on May 25, 2011 2:29 AMYou write that the test worked "before development implemented security" and now you are getting a message that says "access denied". You need to present the error details to the developers and ask them what aspect of
security or permissions are now required. The error message quoted is not complete, there is nothing after "errorType" and no closing curly brace, so we cannot really tell what the problem is.
It is possible that a log within the web site has more details of the request and the failure reason. Ask the developers to check the web site logs and tell them the exact date and time of when the error occurred.
Regards
Adrian -
Error (access denied) when starting Client Runtime Audit Browser
LS,
After starting the OC4J instance, I try to start the Client Runtime Audit Browser. For a brief moment I see a DOS-box, then an IE-page appears saying the following:
======================================================
ERROR
The requested URL could not be retrieved
While trying to retrieve the URL: http://127.0.0.1:8999/owbb/RABLogin.uix
The following error was encountered:
Access Denied.
Access control configuration prevents your request from being allowed at this time. Please contact your service provider if you feel this is incorrect.
======================================================
Any idea whether this is a local problem?
I've tried applying the settings as mentioned in the configuration guide, but the Bypass option for the proxy is impossible to set since we do not use a proxy server.
Your thoughts?
Regards, PatrickGood morning All,
Maybe I've got the wrong idea of what is all needed to be able to run the RAB locally, but I thought that starting the OC4J instance would be sufficient to get started.
In the Installation and Configuration Guide the following is mentioned:
2.7 Step 6. Configure the Web Browser for Design and Runtime Audit Browsers
2.7.1 Add "LOCALHOST" to Your Web Browser Proxy Server Bypass List
2.7.2 Configure the Cache Management in Your Web Browser
2.7.3 Configure Warehouse Builder with a Net Service Name
As said before:
@2.7.1, we do not use a proxy (according to Internet Explorer settings) therefore I can't add 'localhost' to the bypass-list, but then again I think that it does not need to be, since there is nothing to be bypassed in the first place.
2.7.2 has been implemented.
@2.7.3, I added the net service name manually to TNSNAMES.ORA (since I also needed that to be able to get on to the database using TOAD and SQL*Plus).
We do not have 9iAS integration for RAB, nor do we have OEM integration.
Are there other things that need to be implemented? Mentioned so far have been HTTP-server and RTP services, but paragraph 2.7 does not mention anything about this. Maybe there are certain services that need to be running on the server (like HTTP and/or RTP), even though I would like to run the RAB locally?
Where does one actually need RTP for?
Thanks in advance.
Cheers, Patrick -
Regedit Permissions -"Access Denied" or "Error while deleting key" EVEN AS ADMIN!
Anyone tried deleting a registry key in Windows 7? Got "access denied" or "Error while deleting key"?
The usual response is, "You need to run regedit as an administrator". but I *AM* logged in as Administrator, and running regedit as administrator, trying to assign administrator full permissions on that registry key in order to delete it!!
Am I mistaken, or isn't Administrator supposed to be able to administer and control all the settings on the computer, in order to set it up for the "Average Joe" user?
So, under the permissions menu of that key, go to advanced, change the owner from System to Administrator, and try again. It's no longer saying "access denied", but "Cannot delete xxxxxx. Error while deleting key".
The scenario: Basically, the wireless has stopped working on a laptop. The device does not show up in Device Manager, but is in the registry, so the normal procedure is to delete the registry entry for the device in HKLM/System/CurrentControlSet (and /ControlSet001) /Enum/PCI ,then attach the device or restart the computer, it finds the "new" hardware and reinstalls it. Easy!...
Not with permission restrictions on the administrator account it's not! So I need to give myself permission, to give myself permission, to do a simple task like delete a single registry key! Why, Microsoft, why???!!! Please just make the Administrator account a hidden "God mode" account that can do anything, and make the lives of us techies much easier in the process!
/RANT
Now, where did I put that XP disc?!....Hi,
I explain you:
Administrator does not mean "you get all rights to do anything." Administrator happens to be an account (or in your case, most likely the Local Administrators group) which by default is given some sensitive privileges like SeDebugPrivilege and
similar. However, as far as the security subsystem is concerned, it is just an account. (Very much unlike root in
Unix-like operating systems) If you aren't the owner of the key in question, and your account does not have WRITE_DAC access
to the registry key in question, then you won't be able to change the access control list on the key in question.
Try taking ownership first. By default, the local administrators group has SeTakeOwnershipPrivilege,
which allows taking ownership of any object even without the WRITE_OWNER permission
being granted by the object's discretionary access control list. Once you are the owner, you should be implicitly granted READ_CONTROL (which
allows you to read the security descriptor on the object in question), and WRITE_DAC (which
allows you to write to the DACL on the key in question). (Assuming the OWNER_RIGHTS SID
isn't in use; that's extremely unlikely) -
Download Scheduler files - Access Denied
Hi,
I am using the download scheduler to download the files in to a windows server. The files are downloading, but all of them are 1 KB files. When i try to open them I see a message .....
Forbidden
Access Denied because:
Access denied by access control list.
How should i deal with it? Thanks for the help.
- AjayDeepu,
The reporting agent template consistency check is successful with consistent results. And, I corrected the errors in the documents in RSRV. The files are downloading in to my desktop, but when i try to download them to the windows server i get the 1 KB files. When i open them this is what shows up....
<b>Forbidden
Access is denied because:
Access denied by the access control list.</b>
Does the server need to have the FTP and IIS installed in it to download? Because when i tried to download the same into my desktop and another PC over the LAN(both has FTP & IIS installed), its working fine.
I presume that this is more of a security issue outside SAP than an internal one.
Thanks for the quick replies, really apprecite it.
Maybe you are looking for
-
Page not showing changes after refreshing
For some reason after I made a few changes to my index page and uploaded with Dreamweaver MX, the changes won't show up in my browser(s). I don't think I did anything different, and I made changes on it just a few minutes ago. It's maddening to not b
-
Migrate Oracle Apps 11.5.10.2 from Sun solaris to RHE Linux 32 bit.
We are migrating the Oracle Apps 11.5.10.2 from Solaris two node to Linux two node including the database Oracle 10.2.04 64 bit. Since the applications only support 32 bit we are not able to store CM tier in a 64 bit Linux so with this considerations
-
CUPS 8.0 end user login issue
Hi All, I am having CUCM 7.1.5 and CUPS 8.0(4) installed. The problem is when I tried to login the CUPS user page the it says "login failed". The CUPS intergration with CUCM seem to be fine because all the end users can be seen in CUPS. But I am not
-
how can i solve this without losing my data
-
Options for Wireless iPad Projection???
I am trying to determine the best way to project content on my iPad in my classroom. I am looking to purchase new equipment if necessary or adapt what I already have in my classroom (VGA / 3RCA projecor). If anyone has ANY suggestions or recommenda