Passing Username/Password from .xsql to Oracle

Is there any other way to connect to the Oracle than hardcoding username, password, dburl and driver in the XSQLConfig.xml file?
Can I use parameters in .xsql files?
The idea is that every web user connects to DB like himself, so I am looking for a way to pass Username/Password from web application to the Oracle using xsql files on every connection.
Thanks in advance.
Oleg.

<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by Steven Muench ([email protected]):
Most web applications connect as a single backend database user to maximize the benefit of connection pooling.<HR></BLOCKQUOTE>
While that may be true for publically accessible sites, I've found many, many internal web-apps need user authentication (login, whatever). In fact, the inability to do this easily has tipped some of our projects away from web-apps.
null

Similar Messages

OracleException ORA-1017: invalid username/password; logon denied at Oracle

Hi,
SYS@EHS06T>select from v$version;*
BANNER
Oracle Database 10g Enterprise Edition Release 10.2.0.5.0 - 64bi
PL/SQL Release 10.2.0.5.0 - Production
CORE 10.2.0.5.0 Production
TNS for 64-bit Windows: Version 10.2.0.5.0 - Production
NLSRTL Version 10.2.0.5.0 - Production
I have checked the PWADM and PWSYS account and tried to connect to the DB using sqlplus both. I didn’t got any error while connecting.
Also checked the Event viewer logs and found nothing.
But end user getting below error from application :
Message: Error saving emissions
Oracle.DataAccess.Client.OracleException ORA-1017: invalid username/password; logon denied at Oracle.DataAccess.Client.OracleException.HandleErrorHelper(Int32 errCode, OracleConnection conn, IntPtr opsErrCtx, OpoSqlValCtx* pOpoSqlValCtx, Object src, String procedure, Boolean bCheck) at Oracle.DataAccess.Client.OracleException.HandleError(Int32 errCode, OracleConnection conn, IntPtr opsErrCtx, Object src) at Oracle.DataAccess.Client.OracleConnection.Open() at Ess.Framework.DA.BulkOperations.InsertDataOracle(String tableName, DataTable table, Int32 timeout) at Ess.Framework.DA.BulkOperations.InsertData(String tableName, DataTable table) at Ess.ESuite.Air.BO.Calculator.Controller.SaveEmissions(List`1 list) at Ess.ESuite.Air.BO.Calculator.Controller.SaveCachedEmissions()
Request your assistance in solving this issue. Thanks!

hi,
Try a SQL*Net trace on the client (your PC) for the connection that works and the one that does not. Compare to see what is different.
Client Side Tracing:
Your SQLNET.ORA file should contain the following lines to produce a client side trace file:
trace_level_client = 10
trace_unique_client = on
trace_file_client = sqlnet.trc
trace_directory_client =
regards,

How to pass username/password through WebService proxy client to E-BS.

Hi
We are using ADF Webservice proxy client to integrate E-Business suite with ADF. It asks for username/password to access details from E-BS. In the generated webservice XSD file, a method is available with 2 parameters.
1) SOAP header( Contains Username, responsibility and 2 more fields)
2) Class object(Nested Object)
However i didn't find "*Password*" field anywhere in it. Then how can I pass "*Password*" along with username to invoke this method?
When i checked SOAP, the password is defined like this
<wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">XXXX</wsse:Password>a
Thanks
Raja

hi Dario
Thank you for your post. It is really helpful. Now I got stuck with a doubt, in this piece of code
final Binding binding = ((BindingProvider) servicePort).getBinding();
List<Handler> handlerList = binding.getHandlerChain();
if (handlerList == null)
handlerList = new ArrayList<Handler>();
They didn't mention properly about "*servicePort*". What object is this?
I checked in Oracle document, even in that I was not clear with that piece of code.
public class HandlerWS{
@Resource WebServiceContext ctx;
@WebMethod()
public String getProperty(String propertyName) {
return (String) ctx.getMessageContext().get(propertyName);
public class Main {
public static void main(String[] args) {
HandlerWS test;
try {
test = new HandlerWS(new URL(args[0] + "?WSDL"), new
QName("http://example.org", "HandlerWS") );
} catch (MalformedURLException murl) { throw new RuntimeException(murl); }
HandlerWSPortType port = test.*getHandlerWSPortTypePort*();
What is this HandlerWSPortType object???. Can you give me little more explanation about it?
Thanks

Pass Username & Password to a Different Application in the Same Workspace

Can I pass the username and password from a main menu to open a different application in the same workspace. I'm trying to prevent the user from having to logon again. My main menu has links to different applications within the same work space.
Thank you

Anonymous - One way to do it (if you are using HTML DB's built-in session management) is to edit each application's authentication scheme and type in the same cookie name in the cookie name field (use any name you like). Another way is to use Single Sign-On.
Scott

Web service security: Unable to extract username / password from soapheader

Hi All,
For a webservice, we have implemented basic authentication (plain text password) using jdeveloper wizard. We are successfully getting the textbox for username and password. However, the problem is when trying to extract the username and password from the soapHeader on the server side.
Here is the soap message:
<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ns="http://www.dubaitrade.ae"><soap:Header><wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" mustUnderstand="1"><wsse:UsernameToken><wsse:Username>testuser</wsse:Username><wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">testpass</wsse:Password></wsse:UsernameToken></wsse:Security></soap:Header>
<soap:Body>
<ns:processValidateCust>
<paymentMethod>cash</paymentMethod>
</ns:processValidateCust>
</soap:Body>
</soap:Envelope>
Here is the sample java file:
public class ValidateCustImpl implements javax.xml.rpc.server.ServiceLifecycle {
ServletEndpointContext ctx;
public String processValidateCust(String paymentMethod) {
if (ctx != null) {
SOAPMessageContext context =
(SOAPMessageContext)ctx.getMessageContext();
try {
SOAPHeader header =
context.getMessage().getSOAPPart().getEnvelope().getHeader();
System.out.println(header.getNamespaceURI() + " " +header.toString());
} catch (SOAPException x) {
System.out.println("Exception" + x);
x.printStackTrace();
Here is the output:
NamespaceURI for header is:http://schemas.xmlsoap.org/soap/envelope/
and the header is:<soap:Header xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"/>
However, if i "Inspect" the header in "debug" mode in jdev, i do see the strings i had passed.
Name     Value     Type
- header     soap:Header     Header11
+ headerExtensionContext          HeaderExtensionContext
defaultNs     null     String
name     null     Name
childrenNeedUpdate     false     boolean
nodeId     21474836507     long
flags     1     int
- data          Object[1024]
     + [43]     wsse:Security     HeaderElement11
+ [44]     xmlns:wsse     QxName
+ [45]     "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"     String
+ [46]          XMLAttr
+ [49]     wsse:Security     HeaderElement11
+ [50]     mustUnderstand     QxName
+ [51]     "1"     String
+ [55]     wsse:Security     HeaderElement11
+ [56]     wsse:UsernameToken     QxName
- [60]     wsse:Username     Element11
defaultNs     null     String
name     null     Name
childrenNeedUpdate     false     boolean
nodeId     42949673023     long
flags     1     int
+ data          Object[1024]
+ [61]     wsse:Password     Element11
+ [63]     wsse:UsernameToken     Element11
+ [64]     wsse:Username     QxName
+ [66]     wsse:Password     Element11
+ [68]          TextImpl
+ [69]          TextImpl
+ [71]     wsse:Username     Element11
+ [72]     "testuser"     char[3]
+ [75]     wsse:UsernameToken     Element11
Any idea how do i extract this username from the header?
TIA,
abbas

Can someone help here please?

How to pass username;password in to header Variable

Hi All,
I have to invoke client SOAP WSDL based web service, He has given the URL. I want to invoke it from bpel. It is sync based web service.
Please have look at sample input data. in the header section there is element called Token. what i need to do here I need to pass the user name and password those separated by ;
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ns="http://www.xxxxxxx.com/2005/">
   <soapenv:Header>
      <ns:AuthorizationToken>
         <ns:Token>username;password</ns:Token>
      </ns:AuthorizationToken>
   </soapenv:Header>
   <soapenv:Body>
      <ns:WEBGet>
         <ns:key>pass the input value</ns:key>
      </ns:WEBGet>
   </soapenv:Body>
</soapenv:Envelope>
Please advise me how to pass these values when i am invoking it through BPEL.
Thanks,

Please help me out, It is little bit urgent.

Firefox always asks for a username/password from a proxy for any website I try to visit. "No proxy" is selected.

Firefox is installed on my work computer (v16 on windows XP). When I go to any unsecure website, I get a request for a username and password from a proxy. I don't have one, so I press "cancel." I get the following message (I put the asterisks in):
"This Page Cannot Be Displayed
Authentication is required to access the requested web site ( *******-webproxy ). A valid user ID and password must be entered when prompted.
If you have questions, need assistance with your login information, or feel this is an error, please contact your corporate network administrator and provide the codes shown below.
Notification codes: (1, WWW_AUTH_REQUIRED, *********-webproxy)"
The website in the address bar is: http://*******-webproxy/B0000D0000N0001F0000S0002R0004/http://www.whatever.com/
This started after it upgraded (to which version, I don't remember). I also had another version of firefox installed to my "Local Settings" directory since I can't (un)install programs on the computer. That one was working fine until I upgraded to v.15 or v.16 (or maybe 14... I don't remember), and then I started getting the warning screen for an untrusted connection whenever I went to a secure website (https), I had to confirm a security exception, etc. And even then some pages only appeared as text.
I uninstalled that version, and then installed 17b4, and I'm back to the same problem as the original firefox: unsecure websites always seem to be redirecting through a proxy, and secure ones always tell me the connection is untrusted and I have to confirm an exception. I have "No proxy" selected in the network options. I tried v16 with the same results.
I would love to be able to just go to a website and not have to confirm security exceptions or get web proxy errors.
Internet Explorer works fine, btw.

Not sure from your example but it appears that the address doesn't have a full domain, i.e., the part between http:// and the next / is not a valid internet domain name, e.g.,
http://sometext-webproxy/
In that case, it's probably something running on your computer, either as part of your security software, or as a Firefox add-on, or malware.
A standard diagnostic to bypass interference by extensions (and some custom settings) is to try Firefox's Safe Mode.
First, I recommend backing up your Firefox settings in case something goes wrong. See [[Backing up your information]]. (You can copy your entire Firefox profile folder somewhere outside of the Mozilla folder.)
Next, restart Firefox in Firefox's Safe Mode ([[Safe Mode]]) using
Help > Restart with Add-ons Disabled
In the dialog, click "Start in Safe Mode."
If you can access sites normally, this points to one of your extensions or custom settings as the problem.
To also disable plugins, you can try here:
orange Firefox button ''or'' classic Tools menu > Add-ons > Plugins category
Any change?

Invalid username/password in case of oracle os authentication

Hi,
I am trying to connect to database using oracle local os authentication. REMOTE_OS_AUTHENT = false
I am using oracle 11g.
here is the code
I am trying in two ways :-
1. OracleDataSource
OracleDataSource ods = new OracleDataSource();
String url = "jdbc:oracle:oci:@";
ods.setURL(url);
ods.setDatabaseName("oradg");
Connection conn = ods.getConnection();
In this case it always connects to the default ORACLE_SID which is set in the environment.
2. Simple JDBC connection
String url = "jdbc:oracle:oci:@oradg";
Connection con = Drivermanager.getconnection(url,props);
in this case it always says "invalid username/password"
Please help me to resolve the problem.
Thanks

user10839503 wrote:
2 using the oracle account for this is a VERY BAD IDEA
i have another os user called demo which has the same issue.
REMOTE_OS_AUTHENT any way i dont want to use.
3 always connecting to the database server is a VERY BAD IDEA
i am not very clear on this can u please elaborate it?
I dont want to use any username and password for os authentication in the code.
The problem is if ORACLE_SID is set in the environment then code works fine. But I want to set the sid in the code itself.
Because if i set in the environment then at a time only one sid will be used.
But why you want to hard code the SID in the first place anywhere? Why not to use the Services ?
Aman....

Proxy auth - still getting 407 after passing username/password

Hi,
I am having trouble access url via our proxy. I have read/tried all the examples but still nothing. However java webstart can connect.
1. proxy is Microsoft
2. base64Encoder from com.orielly.server package
here is the code:
try {
URL url = new URL("http", "someproxy", 80, "someurl");
HttpURLConnection conn = (HttpURLConnection) url.openConnection();
String proxyPassword = "DOMAIN\\username:password";
String encoded = Base64Encoder.encode(proxyPassword.getBytes());
conn.setRequestProperty("Proxy-Authorization","Basic "+encoded);
conn.connect();
System.out.print( conn.getResponseCode() );
catch( Exception e ) {
System.out.print( e ) ;
when I run this I get 407 code.
any help/pointers will be appreciated
Thanks

Check out this article
http://www.javacoding.net/articles/technical/passproxy.html

Passing username & password in HTTP Header

Hi all,
My 1st query.
I want to access a url which asks for username & password.
how can i put my username & password in the http header so that when i call that url it shouldn't ask for the username & password.can anyone plz show it as a piece of servlet code.
Thanks,
Neha

I am uing the HttpUrlConnection and the way I set is using the "setRequestProperty()" method. The follwoing code snippet actually encodes the user + passwd and sets it in the HTTP header.
if(this.user != null) {
BASE64Encoder encoder = new BASE64Encoder();
StringBuffer buf = new StringBuffer(user).append(":").append(this.passwd);
String encoded = encoder.encode(buf.toString().getBytes());
httpCon.setRequestProperty("Authorization", "Basic " + encoded);

Trying to pass Login username and password from a non-Oracle Form

I have a form that I am trying to use to pass a login username and password to an Oracle form. The problem is I know Oracle 10g web reports can take login parameters in a URL, but I can't seem to figure out how to encode/hide it and have Oracle read it. I want to be able to hide the username and password (obviously for security) and I also want to be able to pass special characters... does anyone have suggestions? It seems even in Oracle forms there are some issues passing login info because I have built in parameter forms... I have given myself quite a headache either way! We are trying to upgrade from an old, old version of forms and reports and are trying to use as much orginal code as possible. It all works if I pass plain text user name and password... any help would be sooooo appreciated. By the way on the Oracle side I am still pretty much an infant developer... please talk slow and use simple words... ;-p
Thanks again for any help!
Va

...asking me to enter username and password on a non-secured website, or else thy will destroy my account. Is it legit ?
It is definitely a scam. Delete it immediately.
For more information, see this document:
Identifying fraudulent "phishing" email

How to pass username/password to BPEL web service from java proxy?

Hi all,
Environment : SOA Suite 11g
I am using basic http authentication in my SOA services using "oracle/wss_http_token_client_policy" policy. Now i need to invoke these SOA web services from a java proxy.
Please let me know how this can be done.
Thanks in advance

Have you tried the below posts ?
BPEL to invoke Webservice secured with HTTP Basic authentication
Invoke a BPEL process using HTTP Basic Authentication
http://docs.oracle.com/cd/E21764_01/web.1111/e13713/owsm_appendix.htm#CHDBAHBI
Thanks,
Vijay

Can I pass username & password in JDBC URL in Crystal Reports 2008?

Hi,
I tried to put this URL in the CRConfig.xml file : jdbc:postgresql://hostname:5432/db_name?user=user_name&password=pw
Without the user and password parameters, it works fine but I always have to enter the database information when I create a new report or refresh an existing report.
With the parameters, when I create a new report, if I click on "Create new connection", Crystal Reports freezes. If I click on the connection in "My connections", then I get an "Invalid argument" error message.
How can I configure the database information so that I don't always need to enter it manually?
Thanks,
Marianne

Hi Marianne,
We don't recommended you do that. The text is in the clear so anyone could use your log on info. You may be able to add your user name to the Report by editing the connection properties from the Set Location dialog box but to add your password would give anyone who opened your report your log on info.
And the info would be passed to the DB over the network in the clear so someone could hack your info.
Thank you
Don

Unable to change password from application when Oracle password has expired

I need to know how to change the users
(Oracle 9.0.8) password via Visual Basic (v6.0
SP3) and RDO. If the users password is expired,
the proper error message is returned, but because
the user isn't connected to the database, I
cannot change the password with the "ALTER xxx
IDENTIFIED BY xxx" sql. Anyone got any
suggestions??

you have to unlock it with some other user with the alter user privilege (e.g. sys or system), or (if you use OID) some user with DAS privileges.

Configuring usernames/passwords in Oracle DB

Hi,
I have the latest Weblogic 8.1. The usernames/passwords are stored in a table
in Oracle database.
Can someone explain to me (point me in the right direction in documentation) how
to configure Weblogic to look up those usernames/passwords/roles in the Oracle
DB?
Currently, we have a web application that uses declarative security and I want
Weblogic to look up the usernames/passwords/roles automatically.
I know in Tomcat you can specify the datasource JNDI and tell it (in the xml DD)
which table/column to user for usernames/passwords and which table/column to use
to look up roles of those users. There has got to be something like this in Weblogic.
I was a bit scared when I read in one of the documents that RDBMS is being deprecated.
I must not be understanding the context of this properly.
Could someone help?
Thanks,
Yaakov.

So that we may better diagnose DOWNLOAD problems, please provide the following information.
- Browser + Version: internet explorer
- O/S + Version: windows 98
- Error Msg: shared memory does not exist/cannot connect to oracle server
Compared to all of you, I'm a very naive computer user. I've successfully downloaded the oracle 8i personal version. When I try to get into sql+, I can't seem to figure out a username and password. I loooked up some sort of usernames/passwords in a document about this thing and have tried all of the following many different times, in many different ways, for several hours now: scott/tiger, system/manager, sys/change_on_install. The scott/tiger works just fine at the university I attend, of course. If anybody has any suggestions, ideas for a dummy, thank you soooooooooooooooooooooooooooooooooooooooooooo much! Hi,
I suspect, there is no database that is running for you to get connected to. You can try this.
From dos prompt
c:\> set oracle_sid = your_db_name
c:\> sqlplus scott/tiger
HTH

Passing Username/Password from .xsql to Oracle

Similar Messages

Maybe you are looking for