Read application item from LDAP

We are using OpenLDAP authorization. The configuration data resides in the APEX authorization definition.
Now my question: should it be feasible to read further attributes from the user logging in, without the need to redundantly define host, base dn etc. on page level?
I imagine a LDAP authorization that gives me back more than only the APP_USER.
Comments welcome.
Tom

The user and password are still available in the post-authentication part of the authentication. You could fetch more values here into application items without having to prompt the user for credentials again. If you do need to connect at a later point then you're out of luck really, since the password is blanked out after the authentication.
I implemented a solution before where i connected to the ldap directory in post-authentication to retrieve the user's groups: {message:id=10197833}
I'm also not sure since i haven't tried yet, but you could probably use the apex_ldap package to reduce the amount of code

Similar Messages

How to set an Application Item from PL/SQL

I am attempting to set an Application Item
After login to my app, I want to retrieve a row from my SETTINGS table and populate some Application Items with the settings information so that I can
display some of that settings information on every page.
Just to start, I created one Application Item named F106_YEAR
I then created a Shared Components Application Process which executes on New Session: After Authentication
I created this process as an Anynomous PL/SQL block.
declare
aucyr varchar(4);
begin
select year into auctyr
from settings;
:F106_YEAR := aucyr;
end;
I've tried a couple of other Syntax tricks attempting to reference the Application Item F106_YEAR from within PL/SQL (like V('F106_YEAR') but nothing seems to be working.
I'm sure that I am missing something simple. Can someone tell me how to set an Application Item from PL/SQL?
Thanks in advance.

I'm still doing something wrong because this is not working for me.
I've tried both of the following versions as an Application Process set to run on New Session after Authentication:
declare
auction_year varchar(4);
begin
select year into auction_year
from PBUUC.SETTINGS where rownum < 2;
:F106_AUCTION_YEAR:=auction_year;
end;
and I also tried:
declare
auction_year varchar(4);
begin
select year into auction_year
from PBUUC.SETTINGS where rownum < 2;
APEX_UTIL.SET_SESSION_STATE (p_name, p_value);
end;
F106_YEAR is a global Item (shared components).
The select statement works just fine in SQL*PLUS so I know that it is correct.
If I run the debugger and log into the application, here is the output. Shouldn't I see my Application Process get called if it is set to run on New Session after Validation?
My Application process is named RETRIEVE_AUCTION_SETTINGS
0.01: A C C E P T: Request="P101_PASSWORD"
0.01: Metadata: Fetch application definition and shortcuts
0.01: alter session set nls_language="AMERICAN"
0.01: alter session set nls_territory="AMERICA"
0.01: ...NLS: Set Decimal separator="."
0.01: ...NLS: Set NLS Group separator=","
0.01: ...NLS: Set date format="DD-MON-RR"
0.01: ...Setting session time_zone to -04:00
0.01: NLS: wwv_flow.g_flow_language_derived_from=0: wwv_flow.g_browser_language=en-us
0.01: Fetch session state from database
0.02: ...Check session 695371898690095 owner
0.02: ...Check for session expiration:
0.02: ...Metadata: Fetch Page, Computation, Process, and Branch
0.02: Session: Fetch session header information
0.02: ...Metadata: Fetch page attributes for application 106, page 101
0.03: ...Validate item page affinity.
0.03: ...Validate hidden_protected items.
0.03: ...Check authorization security schemes
0.03: Session State: Save form items and p_arg_values
0.03: ...Session State: Save "P101_USERNAME" - saving same value: "jps"
0.03: Processing point: ON_SUBMIT_BEFORE_COMPUTATION
0.03: Branch point: BEFORE_COMPUTATION
0.03: Computation point: AFTER_SUBMIT
0.03: Tabs: Perform Branching for Tab Requests
0.03: Branch point: BEFORE_VALIDATION
0.03: Perform validations:
0.03: Branch point: BEFORE_PROCESSING
0.03: Processing point: AFTER_SUBMIT
0.03: ...Process "Set Username Cookie": PLSQL (AFTER_SUBMIT) begin owa_util.mime_header('text/html', FALSE); owa_cookie.send( name=>'LOGIN_USERNAME_COOKIE', value=>lower(:P101_USERNAME)); exception when others then null; end;
0.04: ...Process "Login": PLSQL (AFTER_SUBMIT) wwv_flow_custom_auth_std.login( P_UNAME => :P101_USERNAME, P_PASSWORD => :P101_PASSWORD, P_SESSION_ID => v('APP_SESSION'), P_FLOW_PAGE => :APP_ID||':1' );
0.06: ...Process "Clear Page(s) Cache": CLEAR_CACHE_FOR_PAGES (AFTER_SUBMIT) 101
0.06: Nulling cache for application "106" page: 101
0.00:
0.00: S H O W: application="106" page="1" workspace="" request="" session="695371898690095"
0.01: alter session set nls_language="AMERICAN"
0.01: alter session set nls_territory="AMERICA"
0.01: ...NLS: Set Decimal separator="."
0.01: ...NLS: Set NLS Group separator=","
0.01: ...NLS: Set date format="DD-MON-RR"
0.01: ...Setting session time_zone to -04:00
0.01: NLS: wwv_flow.g_flow_language_derived_from=0: wwv_flow.g_browser_language=en-us
0.01: Application 106, Authentication: CUSTOM2, Page Template: 2904114531488186
0.01: ...Session ID 695371898690095 can be used
0.01: ...Application session: 695371898690095, user=JPS
0.01: ...Determine if user "JPS" workspace "1040027630222986" can develop application "106" in workspace "1040027630222986"
0.01: ...Check for session expiration:
0.01: Session: Fetch session header information
0.01: ...Metadata: Fetch page attributes for application 106, page 1
0.01: Fetch session state from database
0.02: Branch point: BEFORE_HEADER
0.02: Fetch application meta data
0.02: Computation point: BEFORE_HEADER
0.02: Processing point: BEFORE_HEADER
0.03: Show page template header
0.03: Computation point: AFTER_HEADER
0.03: Processing point: AFTER_HEADER
0.04: Computation point: BEFORE_BOX_BODY
0.04: Processing point: BEFORE_BOX_BODY
0.04: Region: Auction_Title F106_AUCTION_YEAR

Set application item from javascript?

Hi!
Is it possible to set an APPLICATION ITEM from javascript? If so can some one please point me to the thread, or a FAQ or an example, etc?
Thanks!
Dave Venus

dvenus1,
Sure. In the script below I check variables and populate based on what I find...
<script language="JavaScript" type="text/javascript">
function Populate_fld()
var formVehicle = document.getElementById('P9_HIDE_VEHICLE').value;
var formState = document.getElementById('P9_HIDE_STATE').value;
var formTag = document.getElementById('P9_HIDE_TAG').value;
var formName = document.getElementById('P9_HIDE_NAME').value;
document.getElementById("P9_VEHICLE").value = formVehicle;
document.getElementById("P9_TAG").value = formTag;
document.getElementById("P9_STATE").value = formState;
document.getElementById("P9_VISITOR_NAME").value = formName;
if (formState = " ")
document.getElementById("P9_STATE").value = "FL";
</script>
Keep Smiling,
Bob R

Reference application item from page template

Hi friends,
How can refere to application item from page template (i.e. one level tab).
set or get value from application item.
thank you

Alaa,
If the item name is X put &X. in the template. Don't forget to use upper case and provide the trailing period.
set or get value from application item.
That is not a complete sentence, please clarify.
Scott

How to read application item's value using javascript

Is there any way to read value of application item using javascript?
Thanks

Javascript can access the objects rendered for the page you are calling. This is why the $v function will do the work if calling it for a page item. However an application item isn't rendered on the page - the session state of it is only stored in the table. This is why you need to do it the way I described. You could do a workarround and create a hidden item on your page and compute the value of it using the application item value. Then you would be able to get the value of your application item using $v function.
Denes Kubicek
http://deneskubicek.blogspot.com/
http://www.opal-consulting.de/training
http://apex.oracle.com/pls/otn/f?p=31517:1
------------------------------------------------------------------------------

How to Obtain the Value of a ***Global*** Application Item from JS

If we declare an Application Item, i.e. NOT a page level item, how do we obtain the value of that Item in a JavaScript Dynamic Action on a page?
For example, we declare a "global variable" as an Application Item named DEFAULT_AJAX_SEPERATOR and set its value with an Application Computation "On New Instance" At some later point, on a page in the application, we'd like to obtain the value of DEFAULT_AJAX_SEPERATOR via JavaScript.
The page* level item syntax...
$v( 'DEFAULT_AJAX_SEPERATOR' );...does not work. I do understand why this is as $v can only access items on the page. However, APEX is clearly able to obtain such global values since, for example, they are available in PL/SQL blocks. Also, I know it's on the session object because I can see it when viewing the session.
So...what's the secret sauce for obtaining that value?
Thanks,
-Joe

Hello Joe,
>> on a page in the application, we'd like to obtain the value of DEFAULT_AJAX_SEPERATOR via JavaScript … So...what's the secret sauce for obtaining that value?
The secret is to define a global JavaScript variable and set it with the value of the item, using Substitution String notation. For example:
var default_ajax_separator = &DEFAULT_AJAX_SEPERATOR.This code should be placed in the Function and Global Variable Declaration field, under the JavaScript section of the Edit Page. As we are talking about a global JavaScript variable, it will be available to every other JavaScript code on the page.
Regards,
Arie.
&diams; Please remember to mark appropriate posts as correct/helpful. For the long run, it will benefit us all.
&diams; Author of Oracle Application Express 3.2 – The Essentials and More

Using UME to read binary attribute from LDAP (objectSID)

Hi,
I am trying to read the ObjectSID of an LDAP user (from MS Active directory) from an IUser object. This attribute is binary retrieved from the LDAP and if I defined a normal extra attribute in the datasourceconfiguration file and retrieve it as a String the value is wrong.
So my question is how can I define this as a binary attribute?
From the file C:\usr\sap\EWD\JC00\j2ee\configtool\dataSourceConfiguration.dtd you get the specification of the xml format for the datasourceconfiguration.
The Attribute element has the following specification:
<!ATTLIST attribute name CDATA #REQUIRED          populateInitially (true|false) #IMPLIED
readonly (true|false) #IMPLIED
type (string|blob) #IMPLIED
cacheTime CDATA #IMPLIED>
Since you have type here, I tried setting it to blob under the user object as such:
For user:
<attribute name="guid" type="blob" populateInitially="true"/>
For attribute mapping:
<attribute name="guid">
<physicalAttribute name="objectSid"/>                    </attribute>
However, I still get the following error when calling
iuser.getBinaryAttribute(UME_NAMESPACE,UME_GUID_NAME ):
Caused by: com.sap.security.api.UMRuntimeException: String attribute "com.sap.security.core.usermanagement"-->"guid" must be read using IPrincipal.getAttribute(com.sap.security.core.usermanagement,guid)
     at com.sap.security.core.imp.AbstractPrincipal.getBinaryAttribute(AbstractPrincipal.java:300)
     at com.sap.security.core.imp.UserWrapper.getBinaryAttribute(UserWrapper.java:261)
     at com.bouvet.portal.login.UserIntegrityLoginModule.getStatoilUser(UserIntegrityLoginModule.java:430)
     at com.bouvet.portal.login.UserIntegrityLoginModule.login(UserIntegrityLoginModule.java:255)
     at com.sap.engine.services.security.login.ModulesProcessAction.run(ModulesProcessAction.java:69)
     ... 41 more
This error indicates that the attributes is a string and not a binary attribute.
Anyone?

Create OSS and initial message is that this is not supported eventhough some of the configuration files point that direction. It's really easy to implement so maybe if I am lucky I'll get a hotfix.
Dagfinn
btw the field was objectGUID not objectSID

Assign Application item from PL/SQL package-not possible? Right?

I have to be sure about tittle statement...
If is possible please some lead where to look for that.
THX!

If I have in "Aplication items" item, in plsql is there any way to change it's value.
FSP_SET_PREFERENCE is making some things for named user (AFAIK)...and I want to change some vars on session based ... but not in WEB but in PLSQL enviroment .
Hope now is clear...
THX for replies
Message was edited by:
Funky

Setting Session item from outside of APEX

Hi All,
First a little background: I've been learning APEX for a couple of days now. I'm evaluating it to see if it's suitable for the application we need to make, otherwise it'll be done in PHP.
The application needs to act as a web service client: as requirement number 1, we need to interface with a 3rd party IDP server to get a SAML2 assertion. This assertion will later need to be injected into the SOAP header of web service call, but I'm not worrying about this bit for now.
I've gotten half way there. I've created a new page with a process at runs before the header. This can handle creating our authn request (which is a bit of xml) and forward the browser onto the IPD server for authentication (with anthn request set as a GET parameter that has been deflated and base64 encoded). Whoo!
Once the IDP server has finished authenticating the user, a http post (with the SAML assertion we need) is done back to the application.
Now as I understand it, I can't get the IDP to post back to an APEX page directly, as we need to access the HTTP Post data. So, I plan on writing a PL/SQL procedure (which I've added to the FLOWS ok list to be called via the PL/SQL gateway).
So inside this procedure, I'm not in APEX, but I'll want to keep track of the SAML Assertion (which will just be a CLOB for arguments sake) such that I can use in APEX for when I make my SOAP call. If it was down to me, I'd have a table with session_id and the assertion, and just query that from APEX.
BUT this 3rd party that we have to work with is the government, and they've given us rules. We aren't allow to store these assertions, they can only exist in the scope of a users session (no storing in files, databases, anything that could be permanently stored on the hard drive), virtual memory is ok though.
So, after all that useless info, onto my question: Can I set an apex application item from this pl/sql procedure? If so, how would one do it? Now I understand that in the background, an item is probably written to a table, but I'm going to gloss over that for now (in the hope that the people certifying the app do the same).
Thanks for all the help,
Tim

Tim,
I am working a similar issue, but slightly different. I am trying to determine if we are trying to answer the same question.
Here is what I understand about your initial posting...
You are authenticating a user.. that must make a call to some "place".. then wait for that place to respond with an OK message, without storing the value. There is enough lag in this process that you want the response from "the place" that you want the response from "the place" to change the session value in the Web based UI. Is this correct?
Issue: Even if you did have this process setting the session value, the client web browser would not respond unless it was in some type of checking loop.
If you are in a checking loop, you would have the ability to call the "service" in some sort of checking mode from APEX.
If this is a smooth process (no major lag), you could manage it within a custom authentication scheme. Is this the area you are working in?
I understand your need to set from an outside connection. But if you are using the outside database connection method, you are isolated to a different session... I would believe (I do not work for Oracle) for security reasons.
--Tim St. Hilaire

Application Item values in Session State in APEX 4.2

In 4.2, I am not able to see the session state values of my Application Items if I click "Session" at the bottom of a page. We just migrated from 4.1 and we login to a separate app than where we land upon login. I thought the "Global" scope of the Application Item would allow this to track across apps, but its not working. Is this a known issue?

fac586 wrote:
Johnny98 wrote:
In 4.2, I am not able to see the session state values of my Application Items if I click "Session" at the bottom of a page. We just migrated from 4.1 and we login to a separate app than where we land upon login. I thought the "Global" scope of the Application Item would allow this to track across apps, but its not working. Is this a known issue?When you say +"Global" scope of the Application Item+ do you mean the true global scope introduced in APEX 4.2, or are you using the term colloquially, as in "not a page item"?The new global scope introduced in 4.2
>
Johnny98 wrote:
I login to App 1, but land in App 2. My Application Item lives in App 2. Upon login of App 1, an authentication scheme calls a back end function that assigns variables to the Application Item in App 2. What back end function? How does this function assign values to application items in App 2?APEX_UTIL.SET_SESSION_STATE('APP_ROLE', rec.user_type);
>
In APEX 4.1 I can see the session state of my Application Items by clicking on the Session button. I cannot see the session state of Application Items after moving everything to APEX 4.2.Have you selected Application Items from the View select list on the session tab and clicked the Set button?Yes, thats what started this thread

Set and access application items

Hi,
How can I set and access the values of application items from package? is't recommended to access application items from procedure?
thanks,

Hi,
in PL/SQL functions or procedures regardless if they are packaged or not:
set procedure: APEX_UTIL.SET_SESSION_STATE('MY_ITEM','myvalue');
get function: V('MY_ITEM')
Regards Garry

In 10.8, the file info window's "Kind:" read "Application"/etc. for 64-bit items and "Application (32-bit)"/etc. for 32-bit items. The "(32-bit)" part seems to have been lost in Mavericks. How do I determine if an item is 32 or 64-bit in Mavericks?

In 10.8, the file info window’s “Kind:” read “Application”/etc. for 64-bit items and “Application (32-bit)”/etc. for 32-bit items.
The “(32-bit)” part seems to have been lost in Mavericks. How do I determine if an item is 32 or 64-bit in Mavericks?

1. Launch System Information into its 'report' mode. (A quick way to do this is by holding down the option key while clicking on the Apple menu item, which causes "About this Mac" to change to that.)
2. From the list on the left, under "Software" click on "Applications." (If you don't see the Applications item, click on "Show more information" from the "File" menu.)
3. Wait a minute or so for the report to finish.
4. The last column in the report is "64-bit (Intel)." (You may need to scroll the window to the right to see it.) Click on that heading to sort the list alphabetically. Anything with a "no" is 32 bit.

Returning a value from a query into an application item

Hi,
I have a insert statement defined in a process which I require that after inserting some data (from which the primary key is fetched from a sequence within a trigger on the table ra_assessments) that this key is then returned into the application item :GBL_CURRENT_ASSESSMENT. The code I have attempted to use is:
begin
insert into ra_assessments values(
NULL,
--rest of the fields here ) RETURNING id INTO :GBL_CURRENT_ASSESSMENT;
end;
Now, this works fine if I want to return into a page level item (say :P2_ID) however it does not appear to return correctly into an application item. The application item is unrestricted.
Any help/suggestions would be very much appreciated.
Thanks

hi,
There is nothing polpulating :P2_ID - I created the page item as a test instead of populating :GBL_CURRENT_ASSESSMENT. So, I then changed the code above to read:
begin
insert into ra_assessments values(
NULL,
--rest of the fields here ) RETURNING id INTO :P2_ID;
end;
which successfully populates :P2_ID with a value. It will not however populate :GBL_CURRENT_ASSESSMENT when I use that in the place of :P2_ID in the example above.
I hope this makes sense! :)
cheers,
Message was edited by:
/dev/null
-Bad sppeling! :-Þ

Javascript reading a protected / hidden page item / application item

Hi
I'm trying to use javascript to validate / calculate the value of a page item.
For this I need to access an item that is it protected (not simply a text field which is editable) - or one which is currently hidden.
Is it possible for javascript to read the value of an application item or a page item that is hidden or a page item that is protected (not editable)?
Thanks in advance.
Mike

Mike, when you change the item type you are changing the html element type
from
<input type="text" id="P1_ONE" value="This is P1_ONE item type value" />
to something like
<td>This is P1_ONE item type value</td>
for the text type you would use .value so $('P1_ONE').value or document.getElementById('P1_ONE'). value but for the "display as text" would be $('P1_ONE').innerHTML or document.getElementById('P1_ONE').innerHTML.
been a while since i use APEX js systax as I've been using jquery but the second example of each type will work.

Reading line item text from sales order

Hi,
I have a sales order which has an item text, I need to get the value from the text. I want to test the READ_TEXT function and I am giving values as
Import parameters               Value
CLIENT                          400
ID                                  0011
LANGUAGE                   EN
NAME                            0001171445000010
OBJECT                         VBBP
ARCHIVE_HANDLE         0
LOCAL_CAT
It is not giving me any value. Am I giving any thing wrong? In the NAME I gave the value as sales ord num + item number, is this correct. Please help me.
Thanks,
Veni.

Hi
Name is the Concatenation of Order No and Item No.
pass the 4 parameters ID,OBJECT,NAME and LANG
use the correct declarations for the parameters and use
ID = '0011'
LANGUAGE = 'EN'
NAME = '0001171445000010'
OBJECT = 'VBBP'
See the doc
READ_TEXT
READ_TEXT provides a text for the application program in the specified work areas.
The function module reads the desired text from the text file, the text memory, or the archive. You must fully specify the text using OBJECT, NAME, ID, and LANGUAGE. An internal work area can hold only one text; therefore, generic specifications are not allowed with these options.
After successful reading, the system places header information and text lines into the work areas specified with HEADER and LINES.
If a reference text is used, SAPscript automatically processes the reference chain and provides the text lines found in the text at the end of the chain. If an error occurs, the system leaves the function module and triggers the exception REFERENCE_CHECK.
Function call:
CALL FUNCTION 'READ_TEXT'
EXPORTING CLIENT = SY-MANDT
OBJECT = ?...
NAME = ?...
ID = ?...
LANGUAGE = ?...
ARCHIVE_HANDLE = 0
IMPORTING HEADER =
TABLES LINES = ?...
EXCEPTIONS ID =
LANGUAGE =
NAME =
NOT_FOUND =
OBJECT =
REFERENCE_CHECK =
WRONG_ACCESS_TO_ARCHIVE =
Export parameters:
CLIENT
Specify the client under which the text is stored. If you omit this parameter, the system uses the current client as default.
Reference field: SY-MANDT
Default value: SY-MANDT
OBJECT
Enter the name of the text object to which the text is allocated. Table TTXOB contains the valid objects.
Reference field: THEAD-TDOBJECT
NAME
Enter the name of the text module. The name may be up to 70 characters long. Its internal structure depends on the text object used.
Reference field: THEAD-TDNAME
ID
Enter the text ID of the text module. Table TTXID contains the valid text IDs, depending on the text object.
Reference field: THEAD-TDID
LANGUAGE
Enter the language key of the text module. The system accepts only languages that are defined in table T002.
Reference field: THEAD-TDSPRAS
ARCHIVE_HANDLE
If you want to read the text from the archive, you must enter a handle here. The system uses it to access the archive. You can create the handle using the function module ACHIVE_OPEN_FOR_READ.
The value '0' indicates that you do not want to read the text from the archive.
Reference field: SY-TABIX
Default value: 0
Import parameters:
HEADER
If the system finds the desired text, it returns the text header in this parameter.
Structure: THEAD
Table parameters:
LINES
The table contains all text lines that belong to the text read.
Structure: TLINE
Exceptions:
ID
The text ID specified in the parameter ID does not exist in table TTXID. It must be defined there together with the object of the text module.
LANGUAGE
The parameter LANGUAGE contains a language key that does not exist in table T002.
NAME
The parameter NAME contains the name of a text module that does not correspond to the SAPscript conventions.
Possible errors:
The field contains only blanks.
The field contains the invalid characters * or ,.
OBJECT
The parameter OBJECT contains the name of a text object that does not exist in table TTXOB.
NOT_FOUND
The system did not find the specified text module.
REFERENCE_CHECK
The text module to be read has no text lines of its own but refers to the lines of another text module. This reference chain can include several levels. For the current text, the chain is interrupted, that is, one of the text modules referred to in the chain no longer exists.
WRONG_ACCESS_ TO_ARCHIVE
The exception WRONG_ACCESS_TO_ARCHIVE is triggered if an archive is accessed using an incorrect or non-existing archive handle or an incorrect mode (that is, read if the archive is open for writing or vice versa).
Reward points if useful
Regards
Anji

Read application item from LDAP

Similar Messages

Maybe you are looking for