SSO and Form 10g, Setting RAD of OID for DB users identified externally

Please Help!
Current environment:
- All users were created with identified externally in Database (OPS$)
- SSO was setup correctly according to OID admin guide Ch 43 and SSO admin guide ch 8 for App10g. (user login orasso without seeing basic auth/sso login form)
- DB parameters:
remote_os_authent=TRUE
os_authent_prefix=' '
issues:
- set ssoDynamicResourceCreate = true
When user hit the form link, i.e. http://host:port/forms90/f90servlet?config=test&form=appwelcome
it redirects to http://host:7777/oiddas/ui/oracle/ldap/das/mypage/AppCreateResourceInfo?...
where it shows Resource Name TEST and prompts username/password/database
when user inputs window logon /password/database value (same as in form6i)
it returns ORA-01017: invalid username/password; logon denied.
- set ssoDynamicResourceCreate = false
manually set RAD for the end user (I am not sure if I am doing this correctly):
Name = test
TYPE = oracledb
username = (blank)
password = (blank)
datebase = prod
When enduser hits the form link, it returns ORA-01017.... same errors.
Any ideas how to trouble shoot and configure RAD for users with OPS$ auth?
thank you in advance!
Kan

Thank you for your input!
This is how our current production is setup that users use os authent (OPS$) to access forms/reports 6i. I'm just trying to migrate it to app10g environment.
I did configure SSO with WNA, it works fine. Any users can access NON-DB connected forms/reports. Only when forms/reports require DB conn, users who
have db password can access them with one click. But users identified externally will keep seeing Oracle Logon and Ora-01017 after authent into MidTier.
Setup RAI with one real db user account is not ideal since there are 1000+ OS authent users who have different database roles. Turn off the OPS$ and setup dummy password for 1000+ users may be the last solution.
v/r
Kan

Similar Messages

Oracle forms viewlets about SSO and Forms dont work

hi:
the oracle forms viewlets (in Forms Sample Code) about SSO and Forms dont work. it says html as been modified. i think it's a viewlet builder protection.
thanks

user549194 wrote:
Hi to everyone,
This is a rant on the stupidity of Oracle Forms. From my point of view, it is pointless and VERY PAINFUL to develop.
Come on, who in the right would use Oracle FORMS to develop database applications? Heck, I can develop my very own web application in Servlet and JSP twice as quick as this piece of crappy framework can produce. Who are you trying to kid? Tie down PL/SQL to the application level? The very idea of FORMS is bullshit.
To whoever who is reading this, please flame me all you want. Oracle Forms is a crappy product. Dont't waste your time and efforts using it. You are better off using some other MORE PRODUCTIVE framework. So there.Hello,
I have seen many threads speaking about forms future but discussions were also MORE PRODUCTIVE as your framework
pointless ? I think your thread is pointless...
I will not make the pro-forms against the world... There are so many tools, just make the right choice for your needs.
so go back to your fantastic productive framework and have success with it.
regards
JeanYves

Differences between Forms 6i and Forms 10g

Forms 6i and Forms 10g
What are the differences between Forms 6i and Forms 10g
What are the differences between Reports 6i and Reports 10g
Regards,
Arjun

differences b/w forms6i , forms9i and forms10g

I created a form with Single Choice fields, 4 days with times listed. But, I want the user to only be able to choose one time, and the time chosen to be unavailable for other users. How do I do this?

I created a form with Single Choice fields, 4 days with times listed. But, I want the user to only be able to choose one time, and the time chosen to be unavailable for other users. How do I do this? I have 4 blocks of Single Choice fields in order for the summary page to give me each day in the final report. But, I need the user to be able to make a selection of any day and time and that apointment to no longer be available to future users when they log in. Plus, when the user clicks on the time, they are unable to change their mind and choose another time. Here's the link if you want to see what I'm talking about: 2015-2016 Workload Apportionment Review

I'm afraid not. It's not rocket science but you need to do some coding.
You'll need to find a script (php) and save it to your local site folder. Then reference the script in your form's action attribute like so.
<form action="path/form-to-email-script.php" >
The input fields in your HTML form need to exactly match the script variables.
I'm assuming you're hosted on a Linux server which uses PHP code. Linux servers are also case sensitive, so upper case names are not the same as lower case names. It's usually best to use all lower case names in your form and script to avoid confusion.
Related Links:
Formm@ailer PHP from DB Masters
http://dbmasters.net/index.php?id=4
Tectite
http://www.tectite.com/formmailpage.php
If this is all a bit beyond your skill set, look at:
Wufoo.com (on-line form service)
http://wufoo.com/
Nancy O.

I've got twin 12 year old boys and want to set I tunes accounts for them both, I need to be able to administer any purchases as they will need to use my bank account. How can I do this?

I've got twin 12 year old boys and want to set I tunes accounts for them both, I need to be able to administer any purchases as they will need to use my bank account. How can I do this?

What do you mean by administer?
When you set up the account you have to enter a birthday and it has to results in being 13 years old or older.
You can set a Restriction that hides the iTunes and App store and another one to prevent in-app purchases. See:
iOS: Understanding Restrictions

HT4859 I have an iPhone 5 and have just set up the iCloud for it. I also have an iPad with different content and I also want to connect it to iCloud. Will I lose everything that's on my iPad or iPhone or do they sync together without losing anything?

I have an iPhone 5 and have just set up the iCloud for it. I also have an iPad with different content and I also want to connect it to iCloud. Will I lose everything that's on my iPad or iPhone or do they sync together without losing anything?

The problem is that all services are bundled with your Apple ID ([email protected]):
Your iCloud account (Mail, Contacts, Calendars, Reminders, Notes, Backups, etc.),
also iTunes & App Store purchases (Music, Movies, TV Shows, etc.),
and the iTunes Match services.
(I guess that all your devices - yours and your wife's are connected to one iTunes library, right?)
If you want that your wife gets her own iCloud account for Mail, Contacts, Calendars, etc. but gets also access to your media then you have two set up two things on her device:
iCloud (Settings > iCloud) with her account (e.g. [email protected])
and
iTunes & App Stores (Settings > iTunes & App Stores) with your account (e.g. [email protected]).
In this case she gets access to your library and could use the same iTunes Match account.
(See also: Using one Apple ID for iCloud and a different Apple ID for Store Purchases http://support.apple.com/kb/HT4895)

Setting Application Context Attributes for Enterprise Users Based on Roles

Hello,
We have an Oracle 11g database with a table containing data from multiple sites (a SiteID field identifies the site for a record). Since application users can have access to different subsets of sites, we would like to use Oracle's Virtual Private Database feature to enforce row-level security on the table.
I did a successful proof-of-concept with database users. I created a role for each site (example: USER_SITE_A, USER_SITE_B, ...), and then assigned the appropriate site roles to each database user. I then created a package (run via a logon trigger) which set application context attributes for each site. If the current database user has been assigned a role for a given site, then the corresponding attribute named "SITE_PRIVILEGE_SiteID" is set to 'Y'... otherwise, it is set to 'N'. Here is the code which worked to set application context attributes for database users:
-- For each record in my RoleSitePrivileges table, set
--   an attribute named 'SITE_PRIVILEGE_<SiteID>'.
--   If the current user has been assigned a role matching
--   the value in the 'RoleName' field, set the corresponding
--   attribute to 'Y'... otherwise, set it to 'N'.
FOR iPrivRec IN (SELECT RoleName, SiteID
                   FROM RoleSitePrivileges
                   ORDER BY SiteID)
   LOOP
      SELECT COUNT(*)
        INTO roleExists
        FROM dba_role_privs
        WHERE granted_role = UPPER(iPrivRec.RoleName)
          AND grantee = USER;
      IF roleExists > 0 THEN
         DBMS_SESSION.set_context(
                     namespace   => 'my_ctx',
                     attribute   => 'SITE_PRIVILEGE_' || iPrivRec.SiteID,
                     value       => 'Y');
      ELSE
         DBMS_SESSION.set_context(
                     namespace   => 'my_ctx',
                     attribute   => 'SITE_PRIVILEGE_' || iPrivRec.SiteID,
                     value       => 'N');
      END IF;
   END LOOP;To finish things off, I created a security policy function for the table which returns the following:
RETURN 'SiteID IN (SELECT TO_NUMBER(SUBSTR(attribute, 15))
                     FROM session_context
                     WHERE attribute LIKE ''SITE_PRIVILEGE_%''
                        AND value = ''Y'')';This setup worked great for database users. I am now working to do a comparable proof-of-concept for enterprise users created in Oracle Internet Directory (OiD). I have Enterprise User Security (EUS) up and running with OiD, global roles created in the database, enterprise roles defined in EUS with global role assignments, and enterprise roles assigned to OiD users. The enterprise users are able to successfully login to the database, and I can see the appropriate global role assignments when I query the session_roles view.
I tried using the same application context package, logon trigger, and security policy function with the enterprise users that I had used with the database users. Unfortunately, I found that the application context attributes are not being set correctly. As you can see from the code above, the applicaiton context package was referencing the dba_role_privs view. Apparently, although this view is populated for database users, it is not populated for enterprise users.
I tried changing the application context package to use invoker's rights and to query the session_roles view instead of the dba_role_privs view. Although this package sets the attributes correctly when called manually, it does not work when called from the logon trigger. That was an oops on my part, as I didn't realize initially that a PL/SQL procedure cannot be called with invoker's rights from a trigger.
So, I am now wondering, is there another view that I could use in code called from a logon trigger to access the roles assigned to the enterprise user ? If not, is there a better way for me to approach this problem? From a maintenance standpoint, I like the idea of controlling site access from the LDAP directory service via role assignments. But, I am open to other ideas as well.
Thank you!

Hello,
We have an Oracle 11g database with a table containing data from multiple sites (a SiteID field identifies the site for a record). Since application users can have access to different subsets of sites, we would like to use Oracle's Virtual Private Database feature to enforce row-level security on the table.
I did a successful proof-of-concept with database users. I created a role for each site (example: USER_SITE_A, USER_SITE_B, ...), and then assigned the appropriate site roles to each database user. I then created a package (run via a logon trigger) which set application context attributes for each site. If the current database user has been assigned a role for a given site, then the corresponding attribute named "SITE_PRIVILEGE_SiteID" is set to 'Y'... otherwise, it is set to 'N'. Here is the code which worked to set application context attributes for database users:
-- For each record in my RoleSitePrivileges table, set
--   an attribute named 'SITE_PRIVILEGE_<SiteID>'.
--   If the current user has been assigned a role matching
--   the value in the 'RoleName' field, set the corresponding
--   attribute to 'Y'... otherwise, set it to 'N'.
FOR iPrivRec IN (SELECT RoleName, SiteID
                   FROM RoleSitePrivileges
                   ORDER BY SiteID)
   LOOP
      SELECT COUNT(*)
        INTO roleExists
        FROM dba_role_privs
        WHERE granted_role = UPPER(iPrivRec.RoleName)
          AND grantee = USER;
      IF roleExists > 0 THEN
         DBMS_SESSION.set_context(
                     namespace   => 'my_ctx',
                     attribute   => 'SITE_PRIVILEGE_' || iPrivRec.SiteID,
                     value       => 'Y');
      ELSE
         DBMS_SESSION.set_context(
                     namespace   => 'my_ctx',
                     attribute   => 'SITE_PRIVILEGE_' || iPrivRec.SiteID,
                     value       => 'N');
      END IF;
   END LOOP;To finish things off, I created a security policy function for the table which returns the following:
RETURN 'SiteID IN (SELECT TO_NUMBER(SUBSTR(attribute, 15))
                     FROM session_context
                     WHERE attribute LIKE ''SITE_PRIVILEGE_%''
                        AND value = ''Y'')';This setup worked great for database users. I am now working to do a comparable proof-of-concept for enterprise users created in Oracle Internet Directory (OiD). I have Enterprise User Security (EUS) up and running with OiD, global roles created in the database, enterprise roles defined in EUS with global role assignments, and enterprise roles assigned to OiD users. The enterprise users are able to successfully login to the database, and I can see the appropriate global role assignments when I query the session_roles view.
I tried using the same application context package, logon trigger, and security policy function with the enterprise users that I had used with the database users. Unfortunately, I found that the application context attributes are not being set correctly. As you can see from the code above, the applicaiton context package was referencing the dba_role_privs view. Apparently, although this view is populated for database users, it is not populated for enterprise users.
I tried changing the application context package to use invoker's rights and to query the session_roles view instead of the dba_role_privs view. Although this package sets the attributes correctly when called manually, it does not work when called from the logon trigger. That was an oops on my part, as I didn't realize initially that a PL/SQL procedure cannot be called with invoker's rights from a trigger.
So, I am now wondering, is there another view that I could use in code called from a logon trigger to access the roles assigned to the enterprise user ? If not, is there a better way for me to approach this problem? From a maintenance standpoint, I like the idea of controlling site access from the LDAP directory service via role assignments. But, I am open to other ideas as well.
Thank you!

How can I set up my Mac for two users to share photos, music etc

How can I set up my Mac for two users to share photos, music etc?

On the Mac with the libraries you want to share:
iTunes Preferences click on the Sharing tab and put a tick in 'Share by library on local network'.
iPhoto Preferences click on Sharing and put a tick against 'Share my photos'.
When launching the same apps on other Macs on the network the libraries should be available, listed on the left.

Set a default layout for all users via DIAPI

Hello everyone,
I am attempting to set a default report for all users/business partners using the DI-API.
I can accomplish this in the B1 application via Tools> Layout Designer...>Set as Default
If there are entries in the RDFL table for this layout, I am prompted to delete these entries and set this layout as the default for all users/BP's
Based on the SDK Documentation, the following code should accomplish the same thing via the DI-API
(stripped down for clarity)
Dim oDefaultReportParams As DefaultReportParams
oDefaultReportParams = oLayoutService.GetDataInterface(ReportLayoutsServiceDataInterfaces.rlsdiDefaultReportParams)
oDefaultReportParams.LayoutCode = sMyLayoutCode
oDefaultReportParams.ReportCode = sMyReportCode
Me.oLayoutService.SetDefaultReport(oDefaultReportParams)
Code executes fine, but it doesn't have the expected impact on settings. The above code adds an entry to the RDFL table rather than changing the DfltReport field in the RTYP table like I expected, so instead of setting the default report globally for all bps/users, its adding an entry to the RDFL table to set the value for a specific user/bp
I experimented by including and setting the following properties to every combination I could think of with the same results
oDefaultReportParams.UserID = 'tried 1, 0, -1
oDefaultReportParams.CardCode = 'tried "", "0", "-1"
Am I misunderstanding the API, or using the wrong objects/calls...? If all else fails I could accomplish this via the UI-API instead, but the application was intended to be a stand alone app that didn't rely on SAP B1 application running, so any help or suggestions would be much appreciated.
Thanks!

Hi,
Please repost at SDK forum to get quick response. Close this thread here with helpful answer.
Thanks.

How to set a welcome message for a user when he is login

in my server i am creatin a user "john" in solaris10 box when ever he logins in to the server he should get a message like "welcome john" what is the option to set the message ....
how can i set a welcome message for a user in solaris
please guide me the process how i can do
Thanks in Advance

THANK YOU FOR YOUR REPLY
i have checked it out in /etc/motd
its working fine but the message is coming for every user when they login
i want message lilke
if john is looged in
than message like "welcome john"
can u please tell me the procedure where to change in /etc/profile and /etc/.login

CMDLET commands regarding setting a default font for all users using OWA on an exchange 2010 platform

HI,
We are running Exchange 2010 and are migrating users from 2003 to 2010 with no problems. The client has asked me to set OWA font to LuidaSans which I can do for individuals with no problems. However, when I try and run the following command
Get-Mailbox -Resultsize Unlimited | Set-MailboxMessageConfiguration -LucidaSans but then got a message to state
"property composefontname can't be set on this object becuase it requires the object to have version 0.1 <8.0.535.0> or later. The object's currant version is 0.0 <6.5.6500.0>"
What object is this reffered to? Can anyone help please?
Thanks
Paul

Hi,
To set a default font for all users, you can use this command: -
Get-Mailbox | Set-MailboxMessageConfiguration -DefaultFontName "Trebuchet"
You can use any font style in place of “Trebuchet”.
I hope this information will be helpful for you.
Thanks and regards
Ashish@S
Ashish@V

I am in the process of expanding a database of chemistry journal articles. These materials are ideally acquired in two formats when both are available-- PDF and HTML. To oversimplify, PDFs are for the user to read, and derivatives of the HTML versions a

I am in the process of expanding a database of chemistry journal articles. These materials are ideally acquired in two formats when both are available-- PDF and HTML. To oversimplify, PDFs are for the user to read, and derivatives of the HTML versions are for the computer to read. Both formats are, of course, readily recognized and indexed by Spotlight. Journal articles have two essential components with regards to a database: the topical content of the article itself, and the cited references to other scientific literature. While a PDF merely lists these references, the HTML version has, in addition, links to the cited items. Each link URL contains the digital object identifier (doi) for the item it points to. A doi is a unique string that points to one and only one object, and can be quite useful if rendered in a manner that enables indexing by Spotlight. Embedded URL's are, of course, ignored by Spotlight. As a result, HTML-formatted articles must be processed so that URL's are openly displayed as readable text before Spotlight will recognize them. Conversion to DOC format using MS Word, followed by conversion to RTF using Text Edit accomplishes this, but is quite labor intensive.
In the last few months, I have added about 3,500 articles to this collection, which means that any procedure for rendering URL's must be automated and able to process large batches of documents with minimal user oversight. This procedure needs to generate a separate file for each HTML document processed. Trials using Automator's "Get Specified Finder Items" and "Get Selected Finder Items", as well as "Ask For Finder Items" (along with "Get URLs From Web Pages") give unsatisfactory results. When provided with multiple input documents, these three commands generate output in which the URLs from multiple input items are merged into a single block, which yields a single file using "Create New Word Document" as the subsequent step. A one-to-one, input file to output file result can be obtained by processing one file at a time, but this requires manual selection of each item and one-at-a-time processing. What I need is a command that accepts multiple input documents, but processes them one at a time, generating a separate output for each file processed. Is there a way for Automator to do this?

Hi,
With the project all done, i'm preparing for the presentation. Managed to get my hands on a HD beamer for the night (Epason TW2000) and planning to do the presentation in HD.
That of course managed to bring up some problems. I posted a thread which i'll repost here . Sorry for the repost, i normally do not intend to do this, but since this thread is actually about the same thing, i'd like to ask the same question to you. The end version is in AfterEffects, but that actually doesn't alter the question. It's about export:
"I want to export my AE project of approx 30 min containing several HD files to a Blu Ray disc. The end goal is to project the video in HD quality using the Epson EMP-TW2000 projector. This projector is HD compatible.
To project the video I need to connect the beamer to a computer capable of playing a heavy HD file (1), OR burn the project to a BRD (2) and play it using a BRplayer.
I prefer option 2, so my question is: which would be the preferred export preset?
Project specs:
                    - 1920x1080 sq pix (16:9)
                    - 25 fps
                    - my imported video files (Prem.Pro sequences) are also 25 fps and are Progressive (!)
To export to a BRD compatible format, do i not encounter a big problem: my projectfiles are 25 fps and progressive, and I believe that the only Bluray preset dispaying 1920x1080 with 25 fps requests an INTERLACED video (I viewed the presets found on this forum, this thread)... There is also a Progr. format, BUT then you need 30 fps (29,...).
So, is there one dimension that can be changed without changing the content of the video, and if yes which one (either the interlacing or the fps).
I'm not very familiar with the whole Blu-ray thing, I hope that someone can help me out."
Please give it a look.
Thanks,
Jef

Adobe Brings Retina Display Support To Photoshop And Illustrator CS6 As A Free Update For All Users

Adobe Brings Retina Display Support To Photoshop And Illustrator CS6
As A Free Update For All Users..... if this is TRUE then how Do I get it. My CS is HORRIBLE visually. Does ANYONE know anything encouraging about this issue with Adobe CS and Retina Display???

As pointed out by John T Smith, you should post the questions in the correct forums to get swift replies. However, yes Adobe has made its promise good and the blog to that effect is here:
<http://blogs.adobe.com/jkost/2013/01/retina-display-support-and-photoshop-cs6.html>
Good luck.

Webutil and Forms 10g

Hi,
I'm currently converting a forms 6.0 application to forms 10g. My application has the file upload and download functionality. I researched the webutil 9i beta version, but my infrastructure team would not allow this to be installed in the 10g app server production environment because it's not supported.
I looked into the OC4J fileupload and filedownload javabean that comes with the oracle 10g iDS installation. Is webutil built on these javabeans?
What are other alternatives I could use that I don't know about? Please help.
Last question, when will webutil released to production? I desparately need this utility since I don't know too much about JavaBean coding and tie to forms.
Thanks,
Jennifer

Hi,
the problem is that Forms Developer tries to acces steh bean, which requires ojsputil.jar to be set in the Forms90_Builder_Classpath. However, even then it wont work because the oracle.jsp.webutil.fileaccess class doesn't implement the IView interface or extends teh VBean class. You could use it with the FBean package which works with Beans that don't implement the Forms interfaces. However, the oracle.jsp.webutil.fileaccess class seems to be a JSP class which doesn't work at all in Forms.
The best way to approach bean development for Forms is to read this whitepaper
http://otn.oracle.com/products/forms/pdf/forms_in_java_world.pdf
and then install the Forms 10g demos and look at the source code. We do our best to comment the demo source so that you know what the code does.
Frank

Solaris notebook with db, ias and forms 10g in a browser

our customer has solaris notebooks.
He wants to run a oracle 9i oder 10g -> no problem.
He wants to run an IAS or Oracle AS on the notebook -> no problem.
And then he wants to use a browser, in which he shows the running form -> what solution do we have ?
JInitiator for solaris isn't available, as I know.
Mozilla/Firefox under Solaris has problems with native Java from an IAS, as I know...
is there a solution for this customer? It's not possible to go away from solaris.

IE 7 isn't certified against Forms 10g
is it important for you to use version 7 ?

SSO and Form 10g, Setting RAD of OID for DB users identified externally

Similar Messages

Maybe you are looking for