Oracle Database Users

Hi There,
I've been asked to review a security implementation in which every user coming from the front end has their own Oracle database login. I wanted to know the pros/cons of doing these. I know the usual way is to complete the authentication through the app layer and then use a single database login to actually access the database. Any information would be appreciated.
Thanks,
Ritu

You may very well do so. Yet, it is good practice to have a couple of ROLES defined and granted to the users as required.
Still, your application table would better belong to only one Oracle user, or you may get into a real mess.
Regards,
BD.
null

Similar Messages

Unlock Oracle database user

Could the Oracle database user be configured so that it will not get locked with infinite wrong tries.

Yes this is possible:
ADMIN@DB11>select * from v$version;
BANNER
Oracle Database 11g Enterprise Edition Release 11.2.0.3.0 - 64bit Production
PL/SQL Release 11.2.0.3.0 - Production
CORE 11.2.0.3.0 Production
TNS for 64-bit Windows: Version 11.2.0.3.0 - Production
NLSRTL Version 11.2.0.3.0 - Production
ADMIN@DB11>create profile nolimit limit failed_login_attempts unlimited;
Profile created.
ADMIN@DB11>alter user test profile nolimit;
User altered.
ADMIN@DB11>

Migrate oracle database users into weblogic application users

Hello.
I need to migrate over 1000 users with its credentials(username, password,email,etc.) from existing ORACLE database into WEBLOGIC application user.
But I was facing problem with password hashes.
I have created user marlis and set password like marlis_2013:
- in oracle db it's hash is 2CDAD21E6A769A11
- in weblogic as it's hash is {SHA-1}a7OyKYOb/mUMsda8U9cw4ofgGlo=
How canb I migrate over 1K user credentials. Pls help.

I am using ADF security based on JAAS.

Error while creating database user with first.lastname pattern

I am trying to user the database user management connector to create oracle database user, but when i use first.lastname pattern as the database username i got an ora-01936
ERROR,07 Jul 2010 17:06:56,370,[OIMCP.DBUM],oracle.iam.connectors.dbum.common.db.util.DBUtil : executeQuery
ERROR,07 Jul 2010 17:06:56,370,[OIMCP.DBUM],Error occurred while trying to execute query.
ERROR,07 Jul 2010 17:06:56,370,[OIMCP.DBUM],Description : ORA-01936: cannot specify owner when creating users or roles
ERROR,07 Jul 2010 17:06:56,370,[OIMCP.DBUM],java.sql.SQLSyntaxErrorException: ORA-01936: cannot specify owner when creating users or roles
i figured out that when i use fist.lastname as database username i have to add double quotes, so i can create de user properly , but now the add role or grant task fails with ora-01741.
ERROR,07 Jul 2010 17:18:01,096,[OIMCP.DBUM],================= Start Stack Trace =======================
ERROR,07 Jul 2010 17:18:01,096,[OIMCP.DBUM],oracle.iam.connectors.dbum.common.db.util.DBUtil : executeQuery
ERROR,07 Jul 2010 17:18:01,096,[OIMCP.DBUM],Error occurred while trying to execute query.
ERROR,07 Jul 2010 17:18:01,096,[OIMCP.DBUM],Description : ORA-01741: illegal zero-length identifier
ERROR,07 Jul 2010 17:18:01,096,[OIMCP.DBUM],java.sql.SQLSyntaxErrorException: ORA-01741: illegal zero-length identifier

Did u try adding the roles via sqlplus by running a command ?
Whats the result
Thanks
Suren

SAP MDM Import Manager connect to Oracle Database.

Hi expert,
I try to connect to Oracle DB with SAP MDM Import Manager but I cant.
I entered property in "Connect to Sorce" window.
============================================
Type : Oracle
Remote system : MDM
DBMS server : <DBMS host>:<listener port>
Database : Oracle_SID
User : Oracle database user
Password : Oracle database user password
============================================
then error ocurred.
"Unable to connect to source"
I aleady checked to connect to the Oracle database with Oracle client.
It is connected well.
How can I connect ??
thanks and regards
jun

Hi all,
thank you for your replies.
I tried to connect oracle DB except "< and >" symbol but It did not work.
I installed windowXP 32bit , Oracle client 32bit and SAP MDM Import manager 32bit in My local PC.
Also I connect to MDM DB using sqlplus in My local PC.
I wonder that TNSNAME.ORA is used DB connection using SAP MDM Import manager ??
I think TNSNAME.ORA is not used when I connect to DB using SAP MDM Import manager because I enter parameters are properties of TNSNAME.ORA.
I don`t know why don`t connect to DB.
regards,
jun

Send insert request as database user, not APEX public account

I have a simple form where I am trying to insert data into a table. I am using database account authentication to log into app. We are using this table to submit jobs and only certain users can submit certain jobs.This table has a trigger that looks up privledges (in another table) to see if a user is authorized to enter particular data (job).
When I create (insert the data from the form), I get an error (APEX_PUBLIC_USER User is not authorized to submit this request). Since APEX Pub user is not in our authentication table, it errors, which is fine. What I want to happen though, is the request (insert) into the table be sent as the database account user logged in, not APEX pub user account. How do I do this?
Thanks
Jason

Jason,
No problem, we were all new to Apex at some point (outside of the development team that is!).
Take a look at my previous reply, I'm pretty sure that is what is happening, you either have some code in your app using 'USER' or perhaps the trigger itself references it, in which case rather than -
USERit should use -
nvl(v('APP_USER'), USER)Which basically means "if there is an Apex username then use that, otherwise use the Oracle database user".
Without seeing your code it's difficult to say whether this is what's happening or not however, but it's worth looking at.
John.
Blog: http://jes.blogs.shellprompt.net
Work: http://www.apex-evangelists.com
Author of Pro Application Express: http://tinyurl.com/3gu7cd

Can't access tables in other Oracle database schemas

Hi. We got our Oracle database admin to install APEX in our Oracle database. She created a login and schema for my Oracle database user so that I could work with APEX a little. Here's the information on the version of APEX we have installed:
Database Version Information
Oracle Database 11g Enterprise Edition Release 11.2.0.2.0 - 64bit Production
PL/SQL Release 11.2.0.2.0 - Production
CORE 11.2.0.2.0 Production
TNS for IBM/AIX RISC System/6000: Version 11.2.0.2.0 - Production
NLSRTL Version 11.2.0.2.0 - Production
I've found that my user is only able to access Oracle tables within my own Oracle database schema. Most of our main tables are in 3 other schemas and I'd need access to all tables in all these schemas. Right now whenever I encounter a drop list of values for Schema, only by own schema is available in the list of values.
Is there something our Admin can do to make these tables in other schemas available to my user account?

Sharpe,
This documentation should point you in the right direction. It will show you how to add multiple schemas to a workspace.
http://docs.oracle.com/cd/E23903_01/doc/doc.41/e21678/adm_mg_wrkspc.htm#CHDBDCCJ
Cheers,
Tyson Jouglet

Oracle Database Authentication against Microsoft Active Directory

Hello
Does anyone know if it is possible or can point me in the right direction of some documentation that discuss Oracle database user authentication against and Enterprise Directory Service, in my cases MS AD?
My environment consists of Oracle RDBMS 10.2.0.3 on Linux Red Hat AS 4. Our users connect in from Window clients. I would like to know if there is a way to autheticate users from Windows to the database using LDAP based (AD) authentication. In oters words how do I configure authentication to be done for "identified globally accounts"? I know that the identified by globally accounts require the use of the CN which I have done, but it seems like there is some piece missing. Perhaps an Oracle schema or modification to Active Directory??
So my questions are
1. Is it possible to authenticate users against AD without the implementation of OID?
2. Is there documentation someone has or can point me to that outlines the required steps?
3. Anything I should know?
I appreciate any help. The documentation I have found so far doesn't seem to be what I need... So I am looking for some advice.
Thanks.

Sure, two methods to auth from Oracle DB to MSAD:
OID and OVD
I am working on our own proof of concept configuring EUS connect to OVD with an MSAD as auth at the moment. OVD basically is presenting the database with OracleSchema and OracleContext info. And when you connect via netca (ldap.ora), you assign it as OID directory authentication type.
Here's an OVD manual on Integrating with EUS (chapter 7 is for MSAD)http://www.oracle.com/technology/products/id_mgmt/ovds/pdf/e10286.pdf
And this would be what the EUS config should look like:
http://www.oracle.com/technology/deploy/security/database-security/howtos/eus-how-to.html
If you've done everything in the first doc...
Hope this answers your questions.

How to store image in oracle database and retrieve

Hi i want to store a image in oracle database, user will select the image and i want tht image to store in database in java/jsp can anybody help

try the following in yr app
try{
File fileObject = new File("img path");
FileInputStream fisObject = new FileInputStream(fileObject);
PreparedStatement pstmt =
conn.prepareStatement("insert into IMG_TABLE values (?,?)");
pstmt.setString(1,fileObject.getName());
pstmt.setBinaryStream(2,fisObject,(int)fileObject.length());
pstmt.executeUpdate();
catch(SQLException se)
se.printStackTrace();
catch(Exception ee)
ee.printStackTrace();
}

Creating Oracle Workflow Users

Hi,
Can anybody tell me how to create users in Oracle Workflow.
I want to create users and maintain it in a custom tale where i will store the password also.the expectation is that the user logs in and is able to see his notifications and also get them in the email.
i m using oracle workflow 2.6.0 and 9i release 1 database 8.1.7.4
help needed urgently
rajeev

Rajeev,
The workflow directory service provides the users/roles who can participate in a workflow process.
Workflow provides, by default, a directory service based on oracle database users. You can also choose to use OID and provide SSO functionality with your users stores in OID. You can also choose a custom directory service.
For more information on the directory service, please refer to workflow documentation.
Cheers,
Raja

FNDPASS를 이용하여 ORACLE APPLICATIONS USER, DB USER의 암호변경방법

제품 : AOL
작성날짜 : 2003-05-15
FNDPASS를 이용하여 ORACLE APPLICATIONS USER, DB USER의 암호변경방법
=========================================================
PURPOSE
FNDPASS를 이용하여 ORACLE APPLICATIONS USER, DB USER의 암호변경방법
Problem Description
Workaround
Solution Description
1. 11.5.5 보다 아래의 버젼인 경우 patch 1685689를 적용한다.
2.
- APPS와 APPLSYS암호변경
FNDCPASS apps/apps 0 Y system/manager SYSTEM APPLSYS <new password>
Ex: $FNDCPASS apps/apps 0 Y system/manager SYSTEM APPLSYS NEWPASSWORD
* APPLSYS의 암호를 변경하면 APPS도 같이 자동변경된다.
- Oracle Database User 암호변경
FNDCPASS apps/apps 0 Y system/manager ORACLE <oracle user> <new
password
Ex: FNDCPASS apps/apps 0 Y system/manager ORACLE GL GLPASSWORD
- Application User 암호변경
FNDCPASS apps/apps 0 Y system/manager USER <username> <password>
Ex: FNDCPASS apps/apps 0 Y system/manager USER VISION WELCOME
3. 만약 APPS의 암호를 변경하였을 경우에는 아래의 파일들을 모두 체크해서
암호변경을 같이 해주어야한다.
1) $ORACLE_HOME/listener/cfg/wdbsvr.app
2) $FND_TOP/resource/wfmail.cfg
3) The concurrrent manager start script.
4) $OA_HTML/bin/appsweb.cfg
5) $AD_TOP/admin/template/CGIcmd.dat
Reference Documents
Note 159244.1

How to manage HTML DB end users in Oracle Database 10g Express Edition?

I successfully installed Oracle XE on my Windows/XP PC.
I followed 'Getting Started Guide' and created a new application using the hr.employees table.
I could run this application by logging in as hr/hr.
How can I create other HTML DB end users to run this application?
I can only create database users in Oracle XE environment.
Help needed....

This MyApp application (Application 100) was created by the HR Oracle account.
I could use
http://127.0.0.1:8080/htmldb/f?p=100
to run this application by logging in as hr/hr .
For the above URL, if I logged in as anotherOracleAccount/password, I got the 'Invalid Login Credentials' message.
As you said, I could use
http://127.0.0.1:8080/htmldb/f?p=4550
to get into HTML DB of the Oracle XE environment by logging in as anotherOracleAccount/password.
Since MyApp is using the HR-owned 'employees' table, should we grant some privileges on hr.employees to anotherOracleAccount?
I tried this, I still got the 'Invalid Login Credentials' message.

How many users/ schemas can we create in an oracle database?

How many users can we create in an oracle database? Or how many users can oracle handle?
Problem-
I have to store information of ontologies (I will use countries instead) in db.
I have to store information regarding countries.
I have 13 tables in all to maintain for each country.
Now there are two approaches:
1) keep only 13 tables. Have an extra column in each table to indicate that a particular
row stores information for which country.
2) create a new user/ schema for each country. So we can get rid of the extra column
needed in 1st approach.
I have used the second approach. This is because number of entries in each table for a
given country will be large.
So initially when the s/w is installed I create a central-user. Each time data for new
country has to be entered central-user creates a user/ schema, and creates tables for
this user/ schema. The central user can access the tables of all the countries by
country_name.table_name. By this approach I believe searching would be easy.
If there is any flaw in my approach kindly mention it.
Thank you

There is no (practical at least) limit to the number of users & schemas you can have in Oracle.
Your approach, however, is not going to scale nearly as well as the first option you outlined (adding a column). You are going to end up caching every possible variation of the various queries you're going to be executing because you will be referring to so many different tables, which is going to mean that you are doing a lot more work to parsing statements and generally churning through the shared pool. If you create enough users, you're liable to start hitting ORA-04030 errors because your shared pool is so fragmented.
Additionally, you're likely going to end up with a whole lot of dynamically generated SQL to accommodate new schemas getting added over time which is going to cause you even more pain. Figuring out dynamically what table to join in is a heck of a lot more difficult for the programmer to write and for the database to handle than simply passing in a different country code.
If you're concerned about having too much data, you can have your cake and eat it to by adding the country column and partitioning the tables based on country.
Justin
One other item I forgot to mention is maintainability. Having dozens or hundreds of "identical" schemas makes maintenance a huge pain because something like adding a new column now requires dozens or hundreds of separate DDL statements. You're almost guaranteed that some schema isn't going to be in sync-- it's going to miss a column or miss an index, etc.
Message was edited by:
Justin Cave

Access of oracle database through sys user

Hi All,
Can any one suggest me what are the possibility to access database through SYS user...I install oracle database 10.2.0.4 on Win-2003 SE.
Now I want to make restrict that no one can be able to logged in database as a sys user so I do one thing that in sqlnet.ora file at server side make none in sql authentication line. What are the other possible way that user can access through sys user?
Please suggest me...
Thanks...

user505 wrote:
Hi All,
Can any one suggest me what are the possibility to access database through SYS user...I install oracle database 10.2.0.4 on Win-2003 SE.
Now I want to make restrict that no one can be able to logged in database as a sys user so I do one thing that in sqlnet.ora file at server side make none in sql authentication line. What are the other possible way that user can access through sys user?One other possibility can be to come from the remote system as the Sys user. So you can set remote_loginpasswordfile to shared. This will ensure that without knowing the password, person won't be able to connect.
That said, there is no stopping for the person who would be knowing the credentials of your o/s or sys user.
HTH
Aman....

Login page user name and password for Oracle Database

Hi,
I created a login.jsp page with username,password and a submit button. How can I validate this username and password from my Oracle database username and password?
I am using NetBeans5.5 with Tomcat5.5.17. Right now I have hardcoded username and password in my persistence.xml.
Anyhelp?

Thnx BalusC for ur reply. Let me explain my issue.
I have created a login page. and user is able to enter user name and passowrd on this page. User is supposed to press a 'submit' button when user enters username and password to connect to database. What should I write in 'submit' button's action to let user allow to proceed if username and password are correct i.e. username and password of my oracle database. (usename=scott and passowrd=tiger).
plz help.

Oracle Database Users

Similar Messages

Maybe you are looking for