Question about "mod_security: Access denied with code 400"

Dear All,
After merged clone's configure the application tier server nodes. I can get in form window, but after merged clone's finishing tasks:1.Generate JAR files / generate message files / relink executables / copy files to destination. I can't open form window any more.
The apache error_log will show below
mod_security: Access denied with code 400. Pattern match "!^([-_@|#!=A-Za-z0-9/ :.$]){0,255}([-_@|#!=A-Za-z0-9/:.$]){0,255}$" at ARGS_NAMES. [hostname "hcp11et30.liteonit.com.tw"] [uri "/oprocmgr-service"] [unique_id TugHyQoG2lsAAFOwD84]
Then referred Note 389558.1, and can login normally, But the same error messages still keeping reporting in error_log.
Please advise?
Thanks,
Jackie

Hi;
Did you check below notes:
Access Denied With Code 400 When Starting Forms or Calling MOD_PLSQL [ID 394587.1]
Why do we see Error: mod_security: access denied with code 400 IN OCO pages? [ID 976473.1]
Regard
Helios

Similar Messages

Apache Error Log mod_security: Access denied with code 400

Hi
I am seeing the Access denied with code 400 errors in the apache log's after applying CPU Patch updates below into a Dev/TEST environment
RDBMS Patches: 9032412 & 9352191 & post steps below:
@?/rdbms/admin/dbmsaqds.plb
@?/rdbms/admin/prvtaqds.plb
@?/rdbms/admin/prvtaqiu.plb
Java Fix > [ID 1082747.1]
E-Business Suite Patches & post steps below:
9323613 & 9506302
Compiled Forms PLL files using adadmin to solve the known problem below
ORA-04062: signature of package "APPS.FND_HELP" has been changed
ORA-04062: KEY-HELP trigger raised unhandled exception ORA-04062.
the error can be replicated by following the steps below:
Log in to Oracle Apps E-Business Suite (11.5.10.2) select Report Management Information Responsibility and then transaction reports. (Opens Oracle Discoverer 4i Viewer) > select either Period to date or Year to date and then select any department & and any period (date) and then apply parameters:
Error message in browser
This error (HTTP 400 Bad Request) means that Internet Explorer was able to connect to the web server, but the webpage could not be found because of a problem with the address.
For more information about HTTP errors, see Help.
Apache log shows:
error_log shows the following:
[Fri Jul 8 10:52:08 2011] [error] [client 10.180.225.5] mod_security: Access denied with code 400. Pattern match "!^([-_@|#!=A-Za-z0-9/ :.$/(/)]){0,255}([-_@|#!=A-Za-z0-9/ :.$]){0,255}$" at ARGS_NAMES. [hostname "loadbalancer.webdomain"] [uri "/discoverer4i/viewer"] [unique_id ThbTSAq0BRQAABrfK7M]
access_log shows the following:
IP ADDRESS - - [08/Jul/2011:10:51:39 +0100] "GET /disco4iv/html/images/shadow_bottom02_leading_ltr.gif HTTP/1.1" 200 861 0
IP ADDRESS - - [08/Jul/2011:10:51:39 +0100] "GET /disco4iv/html/images/seperator.gif HTTP/1.1" 200 42 0
IP ADDRESS - - [08/Jul/2011:10:51:39 +0100] "GET /disco4iv/html/images/arch_blue_bottom_ltr.gif HTTP/1.1" 200 984 0
10.180.225.5 - - [08/Jul/2011:10:51:39 +0100] "GET /disco4iv/html/images/white.gif HTTP/1.1" 200 37 0
IP ADDRESS - - [08/Jul/2011:10:51:39 +0100] "GET /disco4iv/html/images/bar_blue_leading_edge_middle_ltr.gif HTTP/1.1" 200 111 0
IP ADDRESS - - [08/Jul/2011:10:51:39 +0100] "GET /disco4iv/html/images/bar_blue_trailing_edge_middle_ltr.gif HTTP/1.1" 200 129 0
IP ADDRESS - - [08/Jul/2011:10:51:39 +0100] "GET /disco4iv/html/images/shadow_bottom_leading_edge_ltr.gif HTTP/1.1" 200 862 0
IP ADDRESS - - [08/Jul/2011:10:51:39 +0100] "GET /disco4iv/html/images/btopshadow.gif HTTP/1.1" 200 44 0
IP ADDRESS- - [08/Jul/2011:10:51:39 +0100] "GET /disco4iv/html/images/bshadow.gif HTTP/1.1" 200 59 0
IP ADDRESS - - [08/Jul/2011:10:52:08 +0100] "POST /discoverer4i/viewer HTTP/1.1" 400 227 0
I have tried to follow a number of metalink notes but unable to resolve this issue, metalink notes looked at are:
976473.1
389558.1
1313128.1 Patch 10324904 applied
394587.1
389558.1 Patch 5107107 applied
1143882.1
376992.1 Patch 3950067 applied
Any ideas or suggestions most welcome
Thank you
Regards
Arfan
Edited by: user1717313 on 08-Jul-2011 04:59

Hi JD
I have tried the steps i.e stop apps tier, run adconfig on apps tiers and then started services on apps tiers and can replicate the error
thanks
Arfan
Hi Helios
I checked note 1080465.1 Patch 9506302 has been applied & Recompile all Forms PLL files using adadmin.
I ran the sql feom the note, output below
SQL> select text from dba_source where name='FND_HELP' and line <3;
TEXT
package Fnd_Help AUTHID CURRENT_USER as
/* $Header: AFMLHLPS.pls 115.22 2009/10/12 12:56:58 nchiring ship $ */
package body FND_HELP as
/* $Header: AFMLHLPB.pls 115.115 2010/03/19 06:45:24 nchiring ship $ */
Thanks
Arfan
Edited by: user1717313 on 08-Jul-2011 05:04

Mod_security: Access denied with code 400 in R12

Hi ,
I'm getting "Page cannot be found" error during my below navigation in R12
-- Steps To Reproduce:
The issue can be reproduced at will with the following steps:
1. Responsibility: Oracle Configurator Developer
2. Create Rules, Apply and Save
3. Get error
EBS R12.1.2
DB 11.2.0.1
OS RHEL 5
following is extract from my Apache log
[Fri Nov 12 08:40:40 2010] [error] [client 192.168.26.144] mod_security: Access denied with code 400. Pattern match "!^([-_|#!=A-Za-z0-9/ :.$()]){0,255}$" at ARGS_NAMES. [hostname "indstqebs02.indalfab.local"] [uri "/OA_HTML/OA.jsp?Action=EditNode&stackLevel=2&page=/oracle/apps/cz/developer/model/rules/webui/RuleTmpPG&czWhichRule=XCP&czRuleId=2604&czParentRuleFolderId=1800&czModelId=1420&ObjectType=XCP&ReturnLinkURL=OA.jsp%3FOAFunc=CZDEVRULESTRUCTFUNC&selection=0_1_4_&_ti=210565512&retainAM=N&addBreadCrumb=RP&oapc=44&oas=qUuMo8fwvn7jpCTNnv0TYQ.."] [unique_id TNzveH8AAAEAAAHrA1w]

Hi;
Did you check all? Those note are for R11 but as you can see Applies to: Information in this document applies to any platform. If the notes doestn mention any patch than i belive you can follow docs.
If those 12 docs dont help you than i suggest log a SR
By the way in your post:
1. Responsibility: Oracle Configurator Developer
2. Create Rules, Apply and Save
3. Get error
What you get error? What is exact error message? Maybe we can find solution by this error message? Did you also check application log file?
Regard
Helios

Mod_security: Access denied with code 405. Pattern match "!(GET|HEAD|POST)

Hi all,
After Cloning facing an issue
mod_security: Access denied with code 405. Pattern match "!(GET|HEAD|POST)"
and not able to get the login prompt
EBS: 12.1.3
DB:11G
Please help as this is urgent.
Regards,
Raj.

Hi Hussein/Srini,
My OS details are as follows
Source OS : OE Linux 5X
Target : REHL
DB : 11.2.0.3
In my previous cloning the R12 login URL was not getting redirected to https from http. This backup was given by client last week and I completed the cloning and post cloning procedures without any error, but unable to login as the page is redirecting to https:/hostname:port/OA_HTML/AppsLogin.
I have done the following so far, but the issue is not getting resolved.
1) Generated JAR files using ADADMIN (Force)
2) Compiled JSP
3) Ran autoconfig multiple times without any error in both db and application tiers.
4) DB alert log did not have any error.
5) Executed relink all from APPL_TOP
6) Able to launch http://XXXXXXXXX:XXXX/forms/frmservlet?
Kindly help me out on this
Regards

Access Denied error (code 5)

Hi
I am using server 2008 r2 sp1 while installing any windows update or my sql I am getting error code 5 access denied
and i am installing with Admin ID. What can be the reason?

Checked this ?
https://social.technet.microsoft.com/Forums/en-US/522a1177-22eb-458b-a113-d1958e0b991e/sql-express-access-denied-error-code-5?forum=sqlexpress
Arnav Sharma | http://arnavsharma.net/ Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading
the thread.

Hi I have a question about shooting in Raw with my Canon EOS 6d. I'm in the process of learning photography and my goal was to start shooting in raw. I have Photoshop CS5. When I tried to edit my images in raw I received an error message stating, "The pho

Hi I have a question about shooting in Raw with my Canon EOS 6d.
I'm in the process of learning photography and my goal was to start shooting in raw.
I have Photoshop CS5. When I tried to edit my images in raw I received an error message stating, "The photoshop camera raw plug-in did not recognize the format. If these files are from a camera, you may need to update your camera raw plug in."
In researching the issue I read that to edit in raw you need a camera model requirement of at least 7.3 which only works with CS6. My version of CS5 is 6.0.0.205. Being new to all this I see that my options are to upgrade to CS6 or convert by using DNG converter and paying a monthly fee. Two things I know nothing about and don't know which is would be more beneficial.
I'd appreciate any advise on which route to go and how upgrade and what it may cost. THANKS in advance!
Heather

In researching the issue I read that to edit in raw you need a camera model requirement of at least 7.3 which only works with CS6.
That is correct. Your camera was first supported by Camera Raw 7.3. Camera Raw 7.3 will not work with CS5. You need CS6 or CC.
Being new to all this I see that my options are to upgrade to CS6 or convert by using DNG converter and paying a monthly fee. Two things I know nothing about and don't know which is would be more beneficial.
I'd appreciate any advise on which route to go and how upgrade and what it may cost.
It all depends on your preferred workflow and your budget.
Using the DNG converter is free. There is no monthly fee. You use the converter to convert all Raw files from the EOS 6D to DNGs then edit the DNGs in CS5. That's an extra step every time - every photo. Some people don't like the extra step. Others don't mind.
Camera raw, DNG | Adobe Photoshop CC
Or you can upgrade to CS6 (non-Cloud) and pay the upgrade fee
Creative Suite 6
Or join the Cloud and pay the monthly fee
Or join the Photoshop Photography Program (US9.99/month) and get PS CC+LR

SAP GUI710 installation error like Access Denied (error code -2147024891)

Hi Guys,
im getting error while SAP GUI710 installing, error like "Access Denied (error code -2147024891)"
pls help me if any one know.

Hi,
One of the reson for this may be the login ID which you are using is not the owner or the does not have the Admin. rights... Please check it.
Patil

I have a question about Configuration of Post with Clearing

I have a question about confiruation of the post with clearing which is t-doce 'FB05'.
When I make post with clearing on 'FB05', I can change the additional selections.
Where can I control the confiruation of the additional selections in t-code 'FB05'
Please, tell me the menu path.

Hi,
In SPRO, go to
Financial Accounting (New) > Accounts Receivable and Accounts Payable > Business Transactions > Incoming Payments > Manual Incoming Payments > Make Settings for Processing Open Items > Choose Selection Fields
Hope this helps.
Thanks

About to purchase but question about usb access to Sony DVD-RW camera

I am on the verge of purchase of a macbook and it would be my first mac at that. Specifically, I am looking for information on using the usb connection between my camera and the macbook. I am coming from the Windows world, and the camera software is windows only. I record my stuff in VR mode, and when I plug in via usb the windows software allows me to pull off the VRO files. Then I have another windows program that is able to read the VRO files and I can move them around (I don't edit the contents of the VROs), put transitions and then create a dvd. My question when moving to the macbook, can I still record in VR mode and then when done recording, without finalizing the disk, hook the usb cable to the macbook and it will be able to read those files? I read in other posts something similar but not definitive that it could not do this. There might be other software (ie, something call readDVD) that might be able to but could not determine, for sure, that it could do this over the usb (since I can't pull the 8CM disk and put it in the non-tray DVD drive). Or is there a better suggestion, please be kind that I don't know what is possible on the MAC.
For what is it worth, my scenario that I have put up with (because it gave me results that were adequate) on the windows side, had me record in VR mode and it gave me control over all the individual segments (hitting record and then stop is a segment) that I could manipulate individually with the windows software. I don't know enough about what is possible with the usb connection and the software on the MAC to know what to expect out of the box and if I have to buy additional software (to pull the movies off the video camera). If I recorded in Video mode, and then finalized and then hooked the usb cable to the macbook, would the resultant files be able to be read by iMovie? If so, would it be the individual segments or would it be one be movie (ie, all segments rolled up into a/many vob(s))? I want to be able to join many segments from many different disks onto one dvd. Maybe that is the crux of my question and may really be better suited for the iMovie forum rather than this one. If, so, please forgive my ignorance.

Welcome to macbook forum,
Could you post your camera model / type, so we can check that out for you in order to give you better answers.
Or you can check this link for camcorder that supported on new iMovie 7.x.x.
http://docs.info.apple.com/article.html?artnum=306171
Good Luck.

ARX "Access Denied" with SymLink

Please refer to this thread--
http://forums.adobe.com/thread/755480?tstart=0
--there are commonalities, but it's somewhat different so I'm starting a new thread.
Client is Win 7/x64, server is SBS2008 SP2. The remote share is a DFS share. I'm able to open files with ARX from \\domain.local\DFSRoot\DFSFolderName, but not from a Symbolic Link to the DFSFolderName folder. The path the SymLink displays is C:\Users\Public\Desktop\DFSFolderName. When I try, I get this message:
Adobe Reader
There was an error opening this document. Access denied.
[OK]
Turning off Enable Enhanced Security in Preferences/Security (Enhanced) makes no difference.
Did not have this problem with AR 9.4.
If I map a drive to the DFS share, I seem to be able to open files from the drive map or the UNC, regardless of the setting of Enable Enhanced Security.

I have what appears to be the same issue, except I encounter the issue when I try to access a file on my local drive in a folder that is a Symbolic Directory Link. Without making any changes to ARX or anything else, I can get ARX to open the file simply by accessing the file using its actual folder path. Maybe this will help...
C:\Folder1\MyPDF.pdf
Result: No probblem. This is the actual folder, and ARX can open the "MyPDF.pdf" file without issue.
C:\SymLink\MyPDF.pdf
The "SymLink" folder is a symbolic directory link to the "C:\Folder1" folder. There is only 1 MyPDF.pdf file. Both paths reference the same file.
Result: ACCESS DENIED. This error is using the Adobe "Cannot open... access denied" message, not a file system or Windows error message.
NOTE - Unchecking "Enable Protected Mode at startup" does prevent this problem! (Edit -> Preferences, bottom of "General" section). However, if you want the added security offered by protected mode, then you will need to avoid the use of symbolic links until Adobe addresses this issue. I am using version 10.1.4, the latest released version as of 10-06-2012 (October 6, 2012).
I have recreated this in multiple ways, with many different types of PDF documents, which were created by three different applications. I have already spent too much time researching this, and found my workaround for this until it is addressed by Adobe. In every case, it breaks ONLY when I try to access the file using a symbolic link in the path name. Note that Windows 7/8 uses symbolic directory links in a few instances, and if someone uses those folders to store PDF's, they could have problems.
NOTE - Anyone can create a symbolic link in Windows 7/8 by using the "mklink.exe" command at a command prompt. It is included with Windows. I have not tested whether soft or hard links to the file itself will cause the problem, but I could upon request if anyone thinks it wouldn't be time wasted. The time I can spend on a PC at one time is limited since a car accident, but I will do it if it could help other avoid the problem that I banged my head against a wall trying to figure out.
I hope this help others facing this issue, and I hope Adobe addresses this issue in an update very soon.
-TSForrest
Good luck and happy hunting!

Create Set with Access Denied with filter permissons correct

I am standing up a FIM lab and need to create a set. I'm logged in as an administrator and the attribute I want to use in the SET's filter is "HR Effective Status." I give the set a name, create the filter with the HR Effective
Status attribute and view the members with no problems. However, when I click the submit button, I get an access denied error (see screen shot). Prior to creating the set, I had added this HR Effective Status attribute to both the Filter permission objects
(Administration-->All Resources-->Filter Permission), but this does not seem to be the problem. Both MPRs that are kicked off seem to be set properly too. Any ideas on what the problem might be?
Thank you in advance for any help!

Just checking some things that people sometimes forget:
since you created your new attribute/binding, have you restarted the FIMService and performed an IISRESET on the FIM web server?
have you checked the FIM event log (Event Viewer/Applications and Services Logs) for a more detailed error when you get the general "Denied" exception when saving your query-based set?
if the FIM database has been used for a while, chances are you will need to reindex some things - you may just be getting timeouts.
Bob Bradley (FIMBob @
TheFIMTeam.com) ... now using FIM Event Broker for just-in-time delivery of FIM 2010 policy via the sync engine, and continuous compliance for FIM

Access Denied with Business Connector 4.7

Dear SAPiens,
I am trying to call a RFC-FM via a webservice from outside the SAP system via Business Connector 4.7. I always get a "Access Denied" Error message within the XML answer-envelope.
For testing I use the soapUI. I downloaded the WSDL from the Business Connector Developer and imported it to soapUI.
In soapUI I used the following coding for execution in a testcase:
<soapenv:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:mob="http://172.16.34.33/MobileDataEntry" xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/">
   <soapenv:Header/>
   <soapenv:Body>
      <mob:CustomerOrderCreate soapenv:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">
         <DISTR_CHAN xsi:type="xsd:string">01</DISTR_CHAN>
         <DIVISION xsi:type="xsd:string">00</DIVISION>
         <DOC_TYPE xsi:type="xsd:string">ZMDE</DOC_TYPE>
         <PARTN_NUMB xsi:type="xsd:string">0000102642</PARTN_NUMB>
         <PARTN_ROLE xsi:type="xsd:string">AG</PARTN_ROLE>
         <REQ_DATE_H xsi:type="xsd:string">20080420</REQ_DATE_H>
         <SALES_ORG xsi:type="xsd:string">4920</SALES_ORG>
         <MATERIAL xsi:type="non:MATERIAL" soapenc:arrayType="non:MATERIALArrayItem[]" xmlns:non="http://www.webMethods.com/noNamespace/"/>
         <RETURN xsi:type="non:RETURN" soapenc:arrayType="non:RETURNArrayItem[]" xmlns:non="http://www.webMethods.com/noNamespace/"/>
      </mob:CustomerOrderCreate>
   </soapenv:Body>
</soapenv:Envelope>
The given answer is:
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/1999/XMLSchema-instance" xmlns:xsd="http://www.w3.org/1999/XMLSchema">
   <SOAP-ENV:Body>
      <SOAP-ENV:Fault>
         <faultcode>SOAP-ENV:Client</faultcode>
         <faultstring>[B2BSERV.0088.9134] Exception occurred while processing the body of the message</faultstring>
         <faultactor>http://172.16.34.33:5555/soap/rpc</faultactor>
         <detail xmlns:webM="http://www.webMethods.com/2001/10/soap/encoding">
            <webM:exception>
               <webM:className>com.wm.app.b2b.server.AccessException</webM:className>
               <webM:message xml:lang="en">[B2BSERV.0084.9004] Access Denied</webM:message>
            </webM:exception>
         </detail>
      </SOAP-ENV:Fault>
   </SOAP-ENV:Body>
</SOAP-ENV:Envelope>
I can call the function module without any problem from the Busines Connector Developer IDE.
I also can call the function without any problems in this way (by passing my credentials manually):
http://172.16.34.33:5555/invoke/MobileDataEntry/CustomerOrderCreate?DISTR_CHAN=01&DIVISION=00&DOC_TYPE=ZMDE&PARTN_NUMB=0000102642&PARTN_ROLE=AG&REQ_DATE_H=20080420&SALES_ORG=4920
Do you have any idea what is going wrong? Why do I get "Access Denied"? What causes this?
Best regards
Torsten

Hi Christian,
this solved my problem two weeks ago.
I actually run the solution with 'Anonymous' access, as I don't know how to submit the Username with soapUI (header entry does not work). soapUI is a generic SOAP testing frontend (see soapui.com).
Everything of our solution is under development at this time. I guess, that the final client service will not deal with those problems.
Nevertheless, you get the points...
Best regards
Torsten

Applet access denied with Tomcat 4.1.29 -- Plz Help

I searched for answers in the forum and used the jarsigner to certify an applet that uses Oracle thin driver. Modified the catalina.policy to:
grant {
permission java.security.AllPermission;
permission java.net.SocketPermission "127.0.0.1:1024-", "accept, connect, listen, resolve";
}; I am still seeing this error:
access denied (java.net.SocketPermission 127.0.0.1:1521 connect, resolve)PLEASE HELP
Murthy

Thanks for the clarification! I created a java.policy file on the client. I'm now seeing null pointer for the connection variable. BTW, on the client I saved the java.policy at $HOME and the policy tool says it can't find it!!!

Question about Database Access

Hello,
I have one question regarding database access from Java.
What are the other ways of connecting to database other than JDBC? This was one of the question I been asked by the interviewer. He says JDBC connection can slow down the perfomance when it comes large number of transactions?
Any insight or help will be very useful.
Thanks

He may have been referring to available "persistance managers" like Hibernate or the mechanisms build into EJB containers. However, as far as I know, they all use JDBC, and any speed-up is due to caching of data as objects.

Question About streaming live video with FMS3

Thank you very much for you efforts ...
I've tested an exciting tutorial about   streaming live video with Flash Media Server 3.5..
every thing went good and i could see my webcam broadcast from my machine through my web site but unfortunately I can't see it from any other machine
I'm using Microsoft windows XP SP2
and flash media live encoder 3
but my web server run UNIX
is this a problem???
Please send me feedback if its possible
thank you very much

Dear Janaki
Thank you very much for you efforts ....
i've done what you asked me exactly
this is what i got when I've opened the URL from my machine which runs the FMS
#Date: 2010-03-25
#Fields: x-category    x-event    date    time    x-pid    c-ip    cs-bytes    sc-bytes    x-sname    sc-stream-bytes    x-file-size    x-file-length    x-status    x-comment
session    connect    2010-03-25    23:11:17    7932    127.0.0.1    3073    3073    -    -    -    -    200    -
session    connect    2010-03-25    23:12:43    7932    127.0.0.1    3073    3377    -    -    -    -    200    -
stream    play    2010-03-25    23:12:43    7932    127.0.0.1    3139    3451    mylivestream    0    -    -    200    -
and when i opened it from another machine nothing changed or added to the log file
is it a problem with my webserver ??? its Lunix server and my OS is windows???
thank you very much

Question about "mod_security: Access denied with code 400"

Similar Messages

Maybe you are looking for