Restricting the Oracle user from Login
Hi,
I want to restrict the users from login depending on two parameters usind Database logon trigger,
i.e
1. MODULE (like SQL*Plus...)
2. USERNAME
I can get USERNAME from
select SYS_CONTEXT('USERENV','CURRENT_USER') from dual
But, select SYS_CONTEXT('USERENV','MODULE') from dual says invalid parameter.
Can anybody help me?
Ronald.
Both are working fine i saw
SQL> select SYS_CONTEXT('USERENV','CURRENT_USER') from dual
2 ;
SYS_CONTEXT('USERENV','CURRENT_USER')
APPS
SQL> select SYS_CONTEXT('USERENV','MODULE') from dual ;
SYS_CONTEXT('USERENV','MODULE')
SQL*Plus
Similar Messages
-
Restrict AD users from login sharepoint?
Dear all,
I have setup User Profile Sync with my AD for particular AD group "Sharepoint Users" only. After the sync timer job run, I can see the user profiles built up. However, there is a user "outsider" not in "Sharepoint Users"
group is able to login Sharepoint. After he login his user profile is auto built in Sharepoint.
May I know is it default setting? If so how can I restrict only "Sharepoint Users" can login Sharepoint? Thanks.
MarkHi Mark,
This is by design. When a user logs in to SharePoint, SharePoint checks to see if this user has permissions in the current site (or list/item). If the user has permissions, he can log in to SharePoint, it doesn't matter if he has a user profile or not.
I think the user has permissions on the site he is trying to access. These can be permissions given to him directly, or he is member of a AD security group that allows him to access the site.
You can check this by going to Site Actions -> Site Settings -> Site Permissions. In the ribbon, click "Check Permissions". Enter the username for that user and you can see how the user is given permissions to the site.
Nico Martens - MCTS, MCITP
SharePoint 2010 Infrastructure Consultant / Trainer -
I'm trying to increate the ulimits for max user processes and open files for the oracle user. I've set the values in limits.conf, /etc/profile and in oracle's environment scripts. Now when I log in as oracle I get the below errors. If I change the ulimits back to the original values errors go away but ulimits aren't changed.
login as: oracle
[email protected]'s password:
Last login: Fri Mar 6 09:56:02 2015 from mtkadmin12
You are logging onto an Oracle system.
Kickstarted on: 2014-06-05
-bash: ulimit: max user processes: cannot modify limit: Operation not permitted
-bash: ulimit: max user processes: cannot modify limit: Operation not permitted
[oracle@servername ~]$Thanks for the update.
I modified the /etc/security/limits.d/90-nproc.conf and added a line for oracle and also modifed the oracle.sh file. The ulimits are setting correctly when I su - oracle but they are still wrong when sshing in as oracle.
[root@mtkdevorap11d-1 ~]# su - oracle
[oracle@mtkdevorap11d-1 ~]$ ulimit -Ha
core file size (blocks, -c) unlimited
data seg size (kbytes, -d) unlimited
scheduling priority (-e) 0
file size (blocks, -f) unlimited
pending signals (-i) 1030982
max locked memory (kbytes, -l) 94371840
max memory size (kbytes, -m) unlimited
open files (-n) 65536
pipe size (512 bytes, -p) 8
POSIX message queues (bytes, -q) 819200
real-time priority (-r) 0
stack size (kbytes, -s) unlimited
cpu time (seconds, -t) unlimited
max user processes (-u) 16384
virtual memory (kbytes, -v) unlimited
file locks (-x) unlimited
[oracle@mtkdevorap11d-1 ~]$
[oracle@mtkdevorap11d-2 ~]$ ssh mtkdevorap11d-1
Last login: Mon Mar 16 13:04:16 2015 from mtkdevorap11d-2.conveydev.com
You are logging onto an Oracle system.
Kickstarted on: 2014-06-05
[oracle@mtkdevorap11d-1 ~]$ ulimit -Ha
core file size (blocks, -c) unlimited
data seg size (kbytes, -d) unlimited
scheduling priority (-e) 0
file size (blocks, -f) unlimited
pending signals (-i) 1030982
max locked memory (kbytes, -l) 64
max memory size (kbytes, -m) unlimited
open files (-n) 4096
pipe size (512 bytes, -p) 8
POSIX message queues (bytes, -q) 819200
real-time priority (-r) 0
stack size (kbytes, -s) unlimited
cpu time (seconds, -t) unlimited
max user processes (-u) 16384
virtual memory (kbytes, -v) unlimited
file locks (-x) unlimited
[oracle@mtkdevorap11d-1 ~]$ -
Error while getting the ORACLE user account for your concurrent request
Hi ,
When I am submitting the Concurrent Program from OAF page Iam getting
Error
Encountered an error while getting the ORACLE user account for your concurrent request. Contact your system administrator.
When we will face this error.
Not able to submit the Request
KrishnaKrishna
Try like this
public int submitCPRequest(String shipmentId) {
System.out.println("into submitCPRequest");
try {
OAApplicationModule am = pageContext.getApplicationModule(webBean) ;
OADBTransaction transaction = am.getOADBTransaction();
Connection conn = transaction.getJdbcConnection();
ConcurrentRequest cr = new ConcurrentRequest(conn);
cr.setDeferred();
String applnName = new String("XXAPL"); //Application that contains the concurrent program
System.out.println("ApplName"+ applnName);
String cpName = new String("SHIP_REQ"); //Concurrent program name
System.out.println("Concc Name"+ cpName);
// String cpDesc = new String("Shipping Request"); // concurrent Program description
// Pass the Arguments using vector
// Here i have added my parameter headerId to the vector and passed the
//vector to the concurrent program
Vector cpArgs = new Vector();
cpArgs.addElement(shipmentId);
System.out.println("Args"+ cpArgs);
After this it is going into exception
// Calling the Concurrent Program
int requestId = cr.submitRequest(applnName, cpName, null, null, false, cpArgs);
System.out.println("Req Id"+ requestId);
tx.commit();
return requestId;
catch (SetDeferredException e)
throw new OAException("SetDeferredException " + e.getMessage(),OAException.ERROR);
catch (RequestSubmissionException e) {
System.out.println("Into Exception");
OAException oe = new OAException(e.getMessage());
oe.setApplicationModule(this);
throw oe;
}Thanks
AJ -
How to redirect user from login page to "Set Challenge question" page
How to redirect user from login page to "Set Challenge question" page (NOT custom page) after 3 un successful password attempts?
Meaning when user types wrong password 3 times they will be redirected to set Challenge question page. If user answers the challenge question then password reset page should be appeared other wise (after remaining 3 un successeful challenge question answers) account should be locked out.
thanks for your help.hi sandeep
Thanks for your answer. Let me ellaborate more on the requirement here.
- Password Policy and Lost Password management are set up in the identity system
- Configure login tries allowed= 5. Verify accout is lock out after 5 unsucessful login.
This is what need to achieve.
1) If a user attempts to login 3(not 5) times using an incorrect login credential he/she should be redirected to set challenge question (security question) page.
2) Then if the user attempts (remaining) 2 times incorrect challenge answer then his/her account should be locked out.
3) If he/she answers the challenge answer correctly then he/she should be redirected to password reset page.
Is this possible? -
Hello All,
I am installing Oracle 11g R2 on HP-UX server.
I am connected to the HP-UX server through putty.
On the Quick Installation guide i reached the section "Configuring the oracle User’s Environment" and i have the below questions:
In the below
Enter the following command to ensure that X Window applications can display
on this system:
$ xhost fully_qualified_remote_host_name
what is the fully_qualified_remote_host_name ? is it the IP address of the my own PC where i am connecting to the remote server? or the IP address of the server it self?
and in the below example
$ export DISPLAY=local_host:0.0 -- local host is the IP of the PC i am connecting from it to the server?
Regards,Hi;
In the below
Enter the following command to ensure that X Window applications can display
on this system:
$ xhost fully_qualified_remote_host_name
what is the fully_qualified_remote_host_name ? is it the IP address of the my own PC where i am connecting to the remote server? or the IP address of the server it self?
and in the below example
$ export DISPLAY=local_host:0.0 -- local host is the IP of the PC i am connecting from it to the server?If you use putty than you need to some program like VNCviwer or xming etc. to can see GUI screen on your desktop.Please check my previous post
Re: 11gR2 Grid Infrastructure cannout launch installer OEL 5.5
Still have some issue than update thread.
Regard
Helios -
ORA-20160: Encountered an error while getting the ORACLE user account.
when users trying to apply for the leave . Once they apply for the leave and the respective manager approves it.
They get an notification mail with the error message The changes were not applied because ORA-20160: Encountered an error while getting the ORACLE user account for your concurrent request. Contact your system administrator. ORA-06512: at "APPS.ALR_PER_ABSENCE__800_53447_IAR", line 3 ORA-04088: error during execution of trigger 'APPS.ALR_PER_ABSENCE__800_53447_IAR'
EBS : 12.1.2
Database : 11.2.0We are also facing the same issue , with the following error.
The Changes were not applied because ORA-20160: Encountered an error while getting the ORACLE user account for your concurrent request, Contact your system administrator. ORA-06512: at “ APPS.ALR_PAY_ELEMENT_801_53338_IAR”, line 1 ORA-04088: error during execution of the trigger ‘APPS.ALR_PAY_ELEMENT_801_53338_IAR’
Dear Hussein ,
As per your suggestion , if we disable the trigger , does it workflow goes ahead without any problems ?
By Disabling the trigger , what would be the impact ? I mean does we are going to loose the data that was supposed to be updated the trigger.
And basically please educate me . what is the use of this APPS.ALR_PAY_ELEMENT_801_53338_IAR’ ?
Regards
Raghu -
A particular network user can't login to a mac in a classrom but other network users can. Then the network user can login to other identical macs in same classroom. Anyone seen this before? It has happen twice. Two different teachers in two different classrooms entering the correct user name and passwords and computer won't allow them to login. Then they try in different computers in same classroom and have no problem login.
Yes. I can login with a test user. And any other network user can login as well to this particular mac. Actually the mac has bootcamp and boots into either mac or windows. The same user entering the same login username and password can login into the windows side, but not the mac side.
I had this same issue last semester in another classroom, another mac and a different teacher. This summer I reformatted and imaged that mac and I asked that teacher to login today to that reimagened mac and she had no problem today doing so. -
How to stop the oracle xe from startup in windows xp.
Hi ,
I've installed Oracle Database 10g XE on my windows xp desktop.When ever my machine is getting starting oracle xe is taking a lot of time for startup.
I would like to disable the oracle xe from my startup , i can start up or stop the db anytime later using the links in start menu.
Can any one let me know how to disable oracle xe from startup.If it was any other normal programs i would have done that from the msconfig program->Startup.
Any suggesstions/solutions would be very helpful.
Thanks,
BhaskerGot the answer to my question from the posts in other categories
How to stop Oracle XE from starting at System Startup
Re: How to stop Oracle XE from starting at System Startup
oracle at startup
oracle at startup
Oracle 10g XE - default to off at system startup
Oracle 10g XE - default to off at system startup
Thanks,
Bhasker. -
Problem calling web service: Error while getting the ORACLE user account
Hi All!
I was able to call the service EGO_ITEM_PUB-PROCESS_ITEM, but after implemented some patches, suddenly I get this error as result:
- <env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/">
- <env:Body>
- <OutputParameters xmlns="http://xmlns.oracle.com/apps/ego/soaprovider/plsql/ego_item_pub/process_item__1/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<X_INVENTORY_ITEM_ID xsi:nil="true" />
<X_ORGANIZATION_ID xsi:nil="true" />
<X_RETURN_STATUS>U</X_RETURN_STATUS>
<X_MSG_COUNT>1</X_MSG_COUNT>
<X_MSG_DATA>Encountered an error while getting the ORACLE user account for your concurrent request. Contact your system administrator.</X_MSG_DATA>
</OutputParameters>
</env:Body>
</env:Envelope>
Any ideas?
Thanks,
Konradhsawwan wrote:
Hi,
I was able to call the service EGO_ITEM_PUB-PROCESS_ITEM, but after implemented some patches, What are those patches?
# Patch 8407693:R12.TXK.B ISG: Service Generation Failure - Java Compiler Could Not be Found
# Patch 8459663:R12.OWF.B : Mandatory Consolidated One-Off Fixes for ISG on Top of 12.1.1
# Patch 8916358:R12.OWF.B : Service Timeout When Invoking Services Deployed to Integrated SOA Gateway
# Patch 9349321:R12.OWF.B : Issue with item Bulk Load in Oracle Product Hub PIP 2.4
# Patch 9446625:R12.FND.B : 1OFF:8995921:12.1.1:12.1.1:PERF : LoginModules Performance Issue
# Patch 9070077:R12.OWF.B : 1OFF:9045280:12.1.1:12.1.1:Invoking a Web Service Requires NLS Lang When It Should be Optional
# Patch 9153106:R12.OWF.B : IREP_Parser.PL Exits with GETPWUID Function IS Unimplemented in PARSER.PM -> Wichtig für ISG (für custom pl/sqls im ISG)
# Patch 9004712:R12.OWF.B : One-Off for IREP PARSER on Top of Oracle E-Business Suite Release 12.1.1 -> Wichtig für ISG (für custom pl/sqls im ISG)
IAS:
# Patch 8607523 for the AS version 10.1.3.4
Oracle Support told me that I need this patches because of some other problem (generating wsdl and deploy for BOM_BO_PUB package does not work in my environment) and since that, the process_item call stopped working!
btw: The EGO_ITEM_PUB-PROCESS_ITEM call for an existing item still works (I can modify the description), but creating a new item does not work anymore. Here are the parameters I send to the web service:
Header:
<wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
<wsse:UsernameToken>
<wsse:Username>sysadmin</wsse:Username>
<wsse:Password
Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">sysadmin</wsse:Password>
</wsse:UsernameToken>
</wsse:Security>
<q0:SOAHeader/>
Body:
<q1:InputParameters>
<q1:P_API_VERSION>1.0</q1:P_API_VERSION>
<q1:P_INIT_MSG_LIST>T</q1:P_INIT_MSG_LIST>
<q1:P_COMMIT>T</q1:P_COMMIT>
<q1:P_TRANSACTION_TYPE>CREATE</q1:P_TRANSACTION_TYPE>
<q1:P_ITEM_NUMBER>KHR_WS_05</q1:P_ITEM_NUMBER>
<q1:P_DESCRIPTION>desc2</q1:P_DESCRIPTION>
</q1:InputParameters>
Thanks,
Konrad -
Locked the oracle User account
How to know who(os Name/ User/ Locked Time) locked the oracle User account
1) You didn't mention an Oracle version. If you're on 10.2, perhaps this discussion
http://www.pythian.com/blogs/284/oracle-102-migrations-%E2%80%93-account-lockedtimed-and-failed_login_attempts
would be interesting.
2) DBA_USERS isn't going to tell you who caused the account to be locked. Just that it is locked and when it was locked.
Justin -
Priventing WLS user from login into OBIEE 11g
I have 100+ users in Weblogic. Only some users say 60 are allowed to access OBIEE 11g.
How do I prevent other users from login into OBIEE (When they have OBIEE url :) ).
Thanks,
ModHello,
You can put those 60 users in a group say OBIEE_Users and use this group in All Users Filter in WLS.
User Base DN : DC=CORP,DC=NET
All user Filter : (&(memberof=CN=OBIEE_Users,OU=BIUsers,DC=CORP,DC=NET)(cn=*)(objectclass=user))
User from name filter : (&(cn=%u)(objectclass=user))
Refer to this example on how its configured : http://paulcannon-bi.blogspot.com/2012/07/configuring-ldap-authentication-for.html
Hope this helps. Please mark if it does.
Thanks,
SVS -
Dear Techies,
We have registered an Extra Information Type as self service OAF page and did some validations using user hook which are working fine. But for some requests EIT creation page is throwing below errors.
1. Encountered an error while getting the ORACLE user account for your concurrent request. Contact your system administrator.
2. An unexpected situation occurred while executing routine FND_DATA_SECURITY.GET_SECURITY_PREDICATE_HELPER.The cause was: The parameter 'p_object_name' cannot be 'GLOBAL'.
System throws these errors whenever user hook suppose to throw our customized validation messages.Since we are at UAT instance, we are bouncing apache and oacore to get rid of these errors every time they appear. But we cannot bounce once it is moved to production.
Kindly share some ideas to fix these errors as we are very close to Go-Live and we are facing this issue with all EIT's and SIT's.
Thanks and Regards
Dileep Kumar.Hi Mahesh,
Thanks for reply.
I have gone through the link that you have suggested. But our EIT user hook validations doesn't have any code related to submission of concurrent programs. More over our error is not stable. If we bounce the apache and oacore, the system will work fine without unexpected errors for some time. We are not even able to replicate these errors.
Thanks and Regards
Dileep Kumar. -
Which are the ip are accessing the oracle user in oracle database
Hi,
How to check which are the ip are accessing the oracle user in oracle databaseIvan Kartik wrote:
There is error in first query it should be user machine instead of terminal in utl_inaddr.get_host_address(terminal) IP_ADDRESS.
Anyway both queries might produce an error if OS system is not configured to resolve the short names (in case FQDN is not used)."user machine"... Can you please elaborate more. The above both queries are running fine at my end using 11.2.0.1 and windows xp.
Regards
Girish Sharma -
How to get the SSO user from PL/SQL with Windows native authen
I connect to a 10g daabase using SSO through Windows Native Authentication wher the OID user mapps to a single Database user.
I need to get the SSO user from pl/sql
My fornt end is Portal & FormsHmm, I see.
Well your problem boils down to being in the database and needing to have access to web environment variables. The SSO sets specific variables in the environment but your stored procedure is not privy to them.
Now having said that, note that the mod_plsql Web Toolkit has a utility for accessing cgi variables. For instance,
owa_util.get_cgi_env('Osso-User-Dn')
If your web application cannot capture the SSO info and pass it to the stored proc in a parameter, OWA may be the only way.
Check out the Single Sign-On Developers Guide, specifically the part about developing statically protected PLSQL applications.
Hope this helps.
regards,
tt
Maybe you are looking for
-
Need Help-Unable to find an available port
Hi, I am Working one BPEL Process where in need to invoke a WebService. I was able to deploy my BPEL Process with the Web Service Call but i am getting an error while invoking the Webservice from the Process. BPEL PM Version 10.1.2.0.2 <bindingFault>
-
I'd like to see what everyone here thinks is the best CELL PHONE and TABLET/ULTRABOOK/LAPTOP combination to own this year now that the CES show is coming to a close. So post up what you think is the ideal combination from what has been announced. M
-
Webpages do not display correctly, but do when i uninstall certain add-ons
i had the firefox add-ons of shaved beiber and adblocker plus. one day, websites such as blaghag, 100boatsin100days, halolz, and other websites using the design of blog posts or main text with extra links alongside, or websites such as equinox kayaks
-
How do i verify i have sufficient privileges to start system services?
How do I verify I have sufficient privileges to start system services? This comes up as an error when trying to install the newest iTunes version. It says Service 'Apple Mobile Device' (Apple Mobile Device) failed to start. Verify that you have suf
-
CC / RAR 5.2 - Multiple Rule Set Question
How does the system handle the use of multiple rule sets in CC / RAR 5.2? For example, letu2019s say I want to keep a standard SAP rule set in tact to use for testing and comparison in RAR, but I also want to load another one. I realize that only 1 c