Restricting Portal users Sessions.

Dear All,
I have a requirement where i have to restrict the portal sessions of users to 3. How can we achieve this. Again can we keep sessions restriction by user. i.e. some group of users have max. 3, some have max. 4 etc.?
What would happen if user try to open a new session for the fourth time?
Thanks in Advance,
Regards,
Vinayak

Hi Vinayak,
Let me clear something about restricting Portal user sessions. I do not think that the number of open sessions is limited by user (maybe I'm wrong but so far, all posts I know of are not refering to Portal session management per user).
You can limit the number of over all sessions in the configuration of WebAS. So, if you for example want to limit the number of sessions in your portal, you could do it for the Web Module "irj". You can set a maximum session limit for each web module.
check: http://help.sap.com/saphelp_nw70/helpdata/EN/b9/665b42cfca5542e10000000a1550b0/frameset.htm
Goto Visual Administrator->services->Security Provider->properties. There is a property called sessions_size.
The default value is 200 and you can change the value you desire.
Thus, to limited Portal session per user..not possible. Limited concurrent sessions number..Possible as describle above and other posts above.
P.S: The parameters in the module irj: Maximum Sessions= -1 (-1 means "not set" or "unlimited"). You should restart your servlet engine after changing the parameter to be sure that the configurational change is active.
Hope that helps. Award points for helpful suggestions.
Ray

Similar Messages

Get IP address for an portal user session

Hi all,
I have a requirement where i need to get the following:
-Client's IP address from where an user is connected to the portal.
-Client's IP address from where someone change a user password (also if the DB keeps user who made the changes will be usefull)
-Client´s IP address from where an user blocks his account
I have checked the NWA (WebAdminApp), and there is a session monitoring where i can see the active sessions on portals and the IP where the user is connected to. I just want to know the API used for that and some information that can guide me. I cant find an API to help me with this, if any of you know something or have any information, it will be usefull.
Regards,
MC

Hi Mariana,
You might want to check the related javadocs:
http://help.sap.com/javadocs/NW04S/SPS09/wd/com/sap/tc/webdynpro/services/sal/adapter/api/WDProtocolAdapter.html#getProtocolAdapter()http://help.sap.com/javadocs/NW04S/SPS09/wd/com/sap/tc/webdynpro/services/sal/adapter/api/IWDRequest.html#getClientHostAddress()
Code would look something like:
IWDRequest request = WDProtocolAdapter.getProtocolAdapter() .getRequestObject() ;
String clientHostAddress = request.getClientHostAddress();
Hope it helps,
D.

Concurrent user sessions

I want to restrict concurrent user sessions to one in weblogic server console. we are using OBIEE 11.1.1.5.
At a given point of time the user should have only one login session. if user logs in through other computer, his/her previous session should logoff.
Is there any way to do this other than using OAM/OID?

hi
it is impossible to do reliably, this question is raised from time to time. Also I recommend you to double check your architecture: by restricting concurrent user sessions you play against web rules which in most cases is caused by fundamental problem of
the architecture. Your solution with app variable will work only on all-in-one server, on farm it won't work for example. So I suggest to check architecture instead of continue working in this direction.
Blog - http://sadomovalex.blogspot.com
Dynamic CAML queries via C# - http://camlex.codeplex.com

Concurrent User Sessions in Sharepoint2010 FBA site

Hi All,
How do i Restrict concurrent sessions for a single user - SharePoint 2010, its FBA authenticated site.
Currently i am Using a Application variable that stores User and IP and the array is cleared on sign out and session timeout.
We are unable to track the session time out easily, i have a httphandler that redirects to Homepage i am clearing the Application variable in the httphandler but i get the object as Null in debug mode.
I need to implement the same on Window close button click as well to clear the application variable.
As of now the code is working partially. Any suggestions to do it in a better way or it is not possible in SharePoint to track session start and end and restrict user to have a single session. Any help would be greatly appreciated.
Thanks in Advance
Regards

hi
it is impossible to do reliably, this question is raised from time to time. Also I recommend you to double check your architecture: by restricting concurrent user sessions you play against web rules which in most cases is caused by fundamental problem of
the architecture. Your solution with app variable will work only on all-in-one server, on farm it won't work for example. So I suggest to check architecture instead of continue working in this direction.
Blog - http://sadomovalex.blogspot.com
Dynamic CAML queries via C# - http://camlex.codeplex.com

Can you restrict a user in ASDM to only allow them to log a user out of a VPN session

We support many clients and we have found that many of them are sharing VPN credentials when logging in via AnyConnect/WebVPN. We were thinking about restricting simultaneous log in to 1. I also know that users may have situations where they lock up a session due to ISP or PC issues and won't be able to connect again until that session drops from the ASA. We would like to enable our helpdesk to log in to the ASA via ASDM and be able to logout a user that has an active connection. This would be in the logging area of the ASA where they could highlight a user and click logout. Is it possible to restrict a user to just this and not allow them to make any other changes to the ASA?

You should be able to do that. You would create a new privilege level (ie 7), assign all commands to that level except (this is my guess) the command vpn-sessiondb, you would put that at a lower privilege level (ie 6). Here's a write-up that may help getting you in the right direction.
http://www.packetpros.com/2012/08/read-only-asdm.html

How to Restrict same portal user from other node

Hi
In my application, we charge customers for each portal user logins. But, i found that, they can share same user logins amongs number of people.
I don't want to allow the same portal user login into the application if that user is already logged in and it's session is still active.
Here is the Scenario :
User A is logged in to the portal from terminal AA. Now, User A agin tries to logg in to the portal from terminal BB. I don't wnat to allow user A to log in from terminal BB bcuz user A has active session from terminal AA.
Can anyone know how to implement this??
thanks in advance.
Srini

Hi Srini!
We have solved this problem with our own login portlet. Before the final login we've got to check (from the certain table) how many logins there are currently with that username.
But there is a problem. If the user closes the browser without logoff, the session remains active. There is a cleanup job, which removes those session in some hours. Still it is not very elegant.
Regards,
Jari

How can i restrict a user not open more than 3 sessions in database

how can i restrict a user not open more than 3 sessions in database.For this i have already create a profile and set CONCURRENT_SESSIONS=3 and assing that profile to user but the problem is there.

You will simply need to use the following parameter in your CREATE PROFILE syntax.
CREATE PROFILE normal_user
LIMIT SESSIONS_PER_USER 2;
but the resource limits set for a profile are enforced only when you enable resource limitation for the associated database.
you could do this either by having an initialization paramater which will invoke as soon as the database starts or try using ALTER SYSTEM command

Can you restrict APEX users to a single browser session?

I'm using APEX3.2.1
Is there a package,function, view or table in APEX that can be checked to see if a user_id
already has an active session (one that hasn't been purged yet).
I wish to restrict each user to a single active browser session.
Cheers
dfrost

Hi Roel
I've had a look at the views and it looks to be exactly what I'm after thanks very much for your help.
I've only been working on APEX a short while the info on the forum and all the expert blogs are of huge help.
Thanks
Derek
Australia

RDS 2012 R2 - Allow Some Users Multiple Logon Sessions and Restrict Other Users to a Single Session

In Server 2012 R2 RDS, is there a way to allow some users to log on multiple times, but restrict other users to a single logon? On an OU or AD group basis?
I know there is a GPO setting under Computer Configuration for restricting users to a single logon, but this does not allow me to differentiate on a user basis (only on a per server basis).
Thanks,
James

Hi James,
From my perspective and knowledge, sorry to say but there is no such option\way to provide this permission at same time. If a user specifies a different program to start when the user connects to the RD Session Host server, a new session will be created on
the RD Session Host server for the user, even if the RD Session Host server is configured to restrict users to a single session. A user can specify a program to start on connection on the Programs tab under Options in Remote Desktop Connection.
Hope it helps!
Thanks.
Dharmesh Solanki
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Restricting User Sessions

I want to restrict user session through oracle forms
I am using Developer 6.0
I dont want to user V$Session Table to restrict the session
Pl Suggest if there is any alternative solution to restrict user sessions
Thanks
Sarfraz Attari

Hi,
in When New form intance
declare
un:=get_application_property(username);
pw:=get_application_property(password);
cn:=get_application_property(connectstring);
begin
if upper(un)<>'XYZ' then
message('U r not a valid user');
end if;
end;
Hope this helps u..
Prashanth Deshmukh

Restrict Data to only Connected Portal User

I'm trying to restrict a connected portal user to view only his own data , meaning
where USER_NAME in my table = (Connected user name)
in this way he will only update and query only records related to him
Many thanks

Where exactly do you put this in a Portal Form?
<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by Dolf-Jan Mulder ([email protected]):
When there is a column user_name in your table, try the following:
SELECT ..
FROM ..
WHERE user_name = wwctx_api.get_user;
Dolf-Jan<HR></BLOCKQUOTE>
null

Restrict concurrent user and/or session from a client

Hi All:
We have an application with database Oracle 10g.
I want to add a new validation to restrict concurrent user and/or session from a client. (we have almost 60 client firms using the software to enter daily trasnactions).
All users from all clients are connecting to the database using a common functional ID.
What I did was:
1) Add a column 'user_logged_in' in the master table for client and update it as Y when user from that client logged on to the system,
2) Insert the application logon details (we can figure out the client details from this) into a global temp table,
3) Create a logoff trigger to update the 'user_logged_in'flag in client master table by using values from global temp table when session logged off and
4) Restrict the users from same client if the flag is 'Y'
But the problem in this case is logoff trigger will not be executed in case if the session got killed or terminated abnormally.
Is there any other good solution for this scenario?
Thanks
Robin

>
But the problem in this case is logoff trigger will not be executed in case if the session got killed or terminated abnormally.
Is there any other good solution for this scenario?
>
A better question might be - is there any other 'worse' solution than that?
>
2) Insert the application logon details (we can figure out the client details from this) into a global temp table,
>
Meaning - if that session goes down you have NO logon details since the data isn't persistent. Is that really useful?
There is nothing you can do to account for someone just pulling the plug on: the server, the network connection, the bridge, the router, etc. And if a user is connected, starts a long-running process and then gets disconnected the process is likely to keep running in the background until Oracle needs to talk to the user again and then realizes that they are gone.
Meanwhile the user is trying to logon again but can't because the system thinks they are already logged on.
>
All users from all clients are connecting to the database using a common functional ID.
>
Doesn't that kind of make it harder, not easier, to track who is really connecting and using your application?

Restrict User Sessions

Hi,
Is there a profile parameter or setting that restricts user sessions by user name or user groups ? I have looked up the thread which suggests changing profile parameter rdisp/max_alt_modes. But this would be system wide.
I really need it to be user group or user or role specific !

Hi Kunal,
Parameter rdisp/max_alt_modes is to change the maximum number of GUI sessions systemwide (or at lease in the instances where the paremeter is set). Theres no way to change the ammount of session for 1 user or a group of users..
Regards
Juan

Restricting the user to only one session. Is this possible ?

We have a web enabled Forms6i application running on Unix AIX server. user logs on to this application through a application logon screen.
We have a requirement where we have to restrict user from logging on more than once to the application.
- We thought of implementing this functionality through a database field which get set and resets each time a user logs on and logs off the application. Issue here is when do u reset the field. ? Is there a trigger on form which fires no matter how user exits from the system , including PC crahs ?
- is there a better way of handling this functionality.
Any help will be appreciated.
Thanks,
Gana

Try to use Oracle profiles
create profile test limit
sessions_per_user 1;
then assign this profile to the users you want them to have one session only. Moreoever, you have to change the parameter LIMIT_RESOURCES=TRUE in the init.ora parameter file.
After changing the parameter file, shutdwon the database and open it again to let the profiles take effect on the user session.
Good luck

Terminate a User session in the Portal

Hello,
is it possible to terminate a user session.
I want to delete a user, but I get the following error log:
- user delete failed
- Cannot lock at least one of the 4 locks for the owner
What is necessary to perform, before I am able to delete the user?
Thanks for your help!
Best regards,
Michael

Michael,
I think there is a distinction between deleting a user, and a user session. If you want to delete a users session, object locks must be cleared first. Users, as you know are deleted on UME Admin. On NW2004s the UME Admin is now called Identity Management.
Regards,
James

Restricting Portal users Sessions.

Similar Messages

Maybe you are looking for