Validate Oracle Apps Username and Password via ADF?

Hello. I'm trying to verify a persons user id and password in ADF 11g. I snagged the FND classes to be able to do this, and am calling it as follows:
AppsContext ac = new AppsContext("/home/workspace/idev.dbc");
boolean loginStatusCode = ac.getSessionManager().validateLogin(userName, password);
if(loginStatusCode == true)
return "success";
else
return "failure";
This works in the Application Module tester, and works as a standalone program. However, when I run it in weblogic I get a class cast exception (this can be fixed by removing the ojdbc5 & 6 files in the lib folder and replacing them with the ojdbc14 jar) Unfortunately, it fixes that problem but then all the ADF stuff breaks.
Has anyone used Oracles apps security for logging in a user? Or, is there a way to have Weblogic use the ojdbc14.jar for a singular deployment? Here's the class cast I get:
oracle.jbo.JboException: JBO-29000: Unexpected exception caught: java.lang.IllegalAccessError, msg=tried to access class oracle.jdbc.driver.OraclePreparedStatement from class oracle.apps.fnd.common.ProfileCache
Thanks in advance.

Hi,
you can also validate an FND login using the FND_WEB_SEC.validate_login package if it's easier.
Brenden

Similar Messages

Passing the username and password via report link

How can I pass the username and password via the reprt link?
thanks all.
Ahmad Esbita

Hi,
Jigar Oza
Thanks for u r reply, i have tried with application integrator but there is a problem with usermapping.
now what i have done is created HTTP System based on this system created URL iView,in application parameters username and password as MappedUser and MappedPassword every thing is working fine. user logged in automatically when he logged into portal.
there are tabs ,links in application .when i click on tabs or links it is assking to enter username and password of the application.
did i do any thing wrong in creating HTTP system or URL iView,
what are the necessary properties should be given.
replys are highly appreciated.
Regards
K Naveen Kishore

Forgot my oracle 11g username and password

hi all
forgot my oracle 11g username and password , how can i recover them although i tried multiple ways as using / as sysdba and it didnot work .

Please in addition to your own words, post full copy-paste of command line sessions including actual error messages (e.g. cannot access database is not an actual error).
Try from a command window (cmd), assuming Windows platform:
sqlplus / as sysdba
If it says "Connected to idle instance.", try:
SQL> startup
Did you just install XE or was it working before and now suddenly it doesn't? (what changed in the latter case?)
Edited by: orafad on Nov 24, 2012 7:52 PM

Validate web service username and password against Oracle EBS

Hi,
We have a requirement to pass username/password to a SOA webservice that needs to be validated against Oracle E-Business Suite (EBS) login credentials. The EBS users are not integrated with SOA Weblogic server. In EBS, the standard PL/SQL procedure FND_WEB_SEC.VALIDATE_LOGIN(user_name, password) can be used for validation. Appreciate if someone can provide input on validating the username and password as part of web service security header using any OWSM policy.
Thanks!

I'm guessing that you are trying to call an EBS API and are using FND_WEB_SEC to test that the user account is valid in FND_USER first before executing the API call. In that instance, you'll likely need to use the Oracle Applications Adapter for EBS if you want to authenticate the user through FND_USER.
If you've not purchased that adapter, you could use a simple BPEL process, with a regular database adapter to firstly call the FND_WEB_SEC package to authenticate. Pass the response from eBS into a bpel variable, add a bpel switch based on the outcome of that variable either execute the API call or throw an authentication error if the call failed.
You can wrap all this up into one web service that then calls this bpel process, taking the username and password as as input parameters.
Phil

Possible to Pass Username and Password to ADF URL?

Hi,
We are building a cache flow for pre-caching some pages after a server bounce. Ideally, rather than go through the sign on page, we could have direct urls for our program to execute for our test user that would include username and password. As we are not concerned with security in this environment, we are ok with having such a solution for this particular use case.
Are there delivered parameters with all adf apps that would allow us to construct such a URL?
Thanks!

I know you aren't worried about security, but it's worth understanding that HTTPS will hide the URL parameters:
http://blog.httpwatch.com/2009/02/20/how-secure-are-query-strings-over-https/
As noted in the article the parameters can still "leak", but HTTPS provides you a mechanism to at least hide the parameters from network sniffers which are incredibly easy to install on the network (and remembering most security breaches come from within an organisation, not outside).
CM.

Updating username and password via JDBC

Hello,
Curious has anyone developed sample code that would do the following.
1. Using getConnection one passes in a username and passsword.
2. Let's say the the DB password passed is wrong but I want to update the users old password with the new password I just passed?
Anyone have samples that might do this. ie. gets a return of bad password, reconnects as admin DB user, updates person's password, reconnects as orgianal username and password that previously failed?
Thanks,
BP

Hi,
you can also validate an FND login using the FND_WEB_SEC.validate_login package if it's easier.
Brenden

Are app usernames and passwords stored on my ipad

I cant remember my gmail username and password. Is is stored somewhere on my ipad (where i log in on a regular basis)?

If it were (for example, if you set up your gmail account in iPad's Mail app), your user name would be visible in Settings > Mail, Contacts, Calendars > [your gmail account]. However, your password will not be anywhere (or stored in any form in which) you could possibly retrieve it.

Does Apple TV work with wifi that requires you to enter a username and password via the web?

The wifi service is a public hot spot that is provided by my cable company (Comcast/Xfinity) for its customers. It requires you to enter your user name and password via a website prior to using it. Is there a way to make this work with Apple TV?
Any help would be greatly appreciated.

Welcome to the Apple Community.
There is no web browser on the Apple TV, you cannot directly use a wifi connection that requires a log in this way. you may wish to look at Internet sharing with a notebook.

4402 guest users authetication via Web (username and password)

Hello Everyone,
We have an issue with Wireless controller model 4402 loaded with 4.0.179.11. This box has stopped authenticating (Layer3 security Web Policy based local usernames and password) last night.
Steps taken to resolve the issue:-
1) Created local usernames and password via Web and tried using wireless through Guest ssid, when user enters this information web page loops back to authentication.
2) Tried authenticating via another Laptop, had no luck.
3) Changed WLAN SSID Guest from Layer3 security Web Policy to Layer2 Security, created Mac filter table for guest on the Controller. Guest was able to connect to the internet.
We have not made any configuration change. As this issue affected all Users, we restarting the controller after which issue was resolved. As per my colleagues this has happened couple of times and every time restart fixes this issue.
Please shed some light on this.
Regards,
Mujahid

Hi Mujahid,
Just to add a note to the great advice from Richard (5 points for your good work on many posts Richard!)
Have a look at these bugs that I'm pretty sure we were hitting with this WLC Version as well;
CSCsi91600 Bug Details
Internet Explorer redirects to login page with webauth due to cache
Symptom:
Client using IE, and web authentication has passed authentication, Policy Manager is in a RUN state, and when the user clicks on the "home" button, or types in the address of their normal homepage, they are continually redirected to the web-auth page
Conditions:
Client using IE, and web authentication has passed authentication, Policy Manager is in a RUN state, and when the user clicks on the "home" button, or types in the address of their normal homepage, they are continually redirected to the web-auth page
Workaround:
Enable IE client to check for newer versions of stored pages on "every visit to the page" option instead of "automatically" (default).
Tools -> Internet Options... -> Temporary Internet files -> Settings... -> Check for newer versions of stored pages: Every visit to the page.
1st Found-In
4.0(179.11)
Fixed-In
4.1(176.6)
4.1(177.0)
4.1(181.0)
4.2(31.0)
4.2(61.0)
Related Bugs
WLC Web-auth homepage leads back to reauth page if redirect URL is used
In a web-auth deployment with or without guest anchoring. If the redirect url is populated, the users homepage will no longer be able to be reached. Whenever the user navigates back to his homepage it will show the reauth page and the user will no longer be able to reach their homepage. Homepage leads back to reauth page if redirect URL populated
CSCse90894 Bug Details
Internet Explorer redirects to login page with webauth due to cache
Even after the commit of CSCse03666 - which added the following line to the
default webauth HTML -
IE 6 continues to redirect its home page back to the webauth login page.
This is due to a known bug in IE.
1st Found-In
4.0(155.5)
Fixed-In
3.2(193.4)
3.2(193.5)
4.0(206.0)
4.1(171.0)
Hope this helps!
Rob

Username and password validation on SOAP Web Service

Hi,
I'm pretty new to web services and c# .net framework.
I'm developing an app that uses a third party's API/ Web services. My first task is getting this log in(authentication) to working.
Right now its nothing more than a simple Login form:
The code behind the "Log In" button is so far:
Here I've instantiated the SOAP web service that I'm using. And when I got to test/debug my form and type in my username and password and click the "Log In" button nothing happens..."of course"
So my question is, how could I validate whether the username and password were sent to the web service and whether the authentication is true or false?

I'm trying to figure that part out...of how I can get it to return the bool. How can I check to see if it returns a bool?(because i'm not really sure if it does or doesn't just yet)
I'm not expecting it to say "Hey you're logged in" because the actual application doesnt work that way. The actual desktop client will log you in with a (Domain Name\ Username) and windows authenticate
that you're who you say you are, check the SQL Server and Database and Logs you in.
So im trying to figure out how I can manually set it up to where it let the user know that they have Logged in successfully.
And you're saying that the code i have right now SHOULD log the users in correctly?

How to logon to the Career Center using you SCN username and password

We all know how painful it is to have to create yet another username and password for a site, well for the Career Center you don't have to. We are working to have single sign on between SCN and the Career Center but until that time or if you navigate directly to the Career Center site you can log on using your SCN username and password via OpenID. Here is how.
First, ensure you have set an OpenID username in your SCN profile.
Then go to the Career Center http://scncareercenter.jobtarget.com and click
"Access Your Job Seeker Account" for job seekers OR
"Access Your Employer Account" for employers
At the bottom of the login box, besides "Have an OpenID?" click on the "Sign In" link
In the box type
http://openid.sap.com/your_open_id_name_from_your_SCN_profile
and click Login.
You will be taken to another page on SCN requesting you to login (if you haven't already) and finally approve the JobTarget OpenId login request.
Viola, you are then brought to your personal account on the Career Center. If this is your first time use, you may need to fill out some necessary pieces for the Career Center account profile.
Update 24.08.09: We are having some intermittent OpenID issues, will update the post when it is resolved
Cheers
Kuhan

That's really good news!
Now we have additional link to suggest newbie or job seeker in ABAP
P.S. Can you please amend in Forum Rules of Engagement with this information to let the others know?
Cheers

Can I use a stored procedure to validate a username and password?

We are using Discoverer on a standalone server but we have a database link to our reporting database.
Our standalone Discoverer is on a 10g database with a database link. Our reporting database is an 9i database using oracle applications. I have a stored procedure that i can call to validate username and password in the apps.
Is there anyway to call that stored procedure from Discoverer so that my users don't have to have 2 different passwords?
thanks
Angie

Michael.
Let's rewind this discussion for a sec as I have not the faintest idea what you're referring to with the dblinks, query prediction, etc.
I didn't think that was the main thrust of the thread and thought it was if the user could validate a username and password. If they happen to use a dblink, that's another issue.
1. What I"m referring to as good design is the concept of the eul$ triggers that Discoverer offers (the link offered by the user before my response).
I like triggers in Forms, I like trigger in Reports - and I like them in Discoverer. I think they potentially have a great use - the problem is finding that use.
One use I can forsee is setting up an environment or table everytime one enters Discoverer. Or maybe some cleanup after Discoverer is exited (ie: delete that setup table).
2. You mentioned dblinks.
What do I think about 'em? Don't know ... don't care. Haven't had to work with them too much and until that point comes - I'm not worried about them either way.
3. You mention query prediction.
What do I think about it? IMO, turn the darn thing off. I don't really care what it's SUPPOSED to do according to Oracle - in 9 out of 10 client sites I go to ... it's not doing it. It's waste time, processing power, coffee time, whatever ... to come up with a bogus estimate that makes Discoverer looking like a toy.
For example:
prediction time: it takes 6 minutes to come up with an estimate
prediction: Query will take 364 days, 11 hours, 9 minutes, 18 seconds. Do you wish to continue?
me: Duh ... okay.
query runs for: 1 minute, 2 seconds
It's like a Vulcan in that it's incredible detailed on it's assessment on how long it will take. Unlike a Vulcan though, it's completely bogus. Sure it supposed to be better over time but again - in 9 out of 10 client sites I go to, it's a joke and once turned off ... the client couldn't be happier.
So again, let's rewind here. Maybe I'm missing something, but I had no idea this thread was angling to dblink and query prediction, but my views on what I thought we were talking about are above.
Russ
PS. And no I'm not PO'd ... just want to fix what appears to be cross-purposes.

I have installed oracle 10g in my winxp machine. i am using enterprise manager. i am not able to shutdown the system as it asks for os username and password. i have provided my os username and password but eerror persiste. somebody pls help me to get rid

I have installed oracle 10g in my winxp machine. i am using enterprise manager. i am not able to shutdown the system as it asks for os username and password. i have provided my os username and password but eerror persiste. somebody pls help me to get rid of this.

Here I am using Java Type IV for database
connection.
So,there was no necessity of creating DNS.How your app communicates with db shouldn't matter for the end user. Still, you may want to use a functional network name also for the thin client driver connection string.
So,is there any other way to solve this problem.What is the problem really? Do you not use dns for network naming? Maybe you have to manage the hosts file on every client then.

How-to access username and password protected Java EE Web services from ADF

The title of this post is exactly the same as this article by Frank Nimphius:
http://www.oracle.com/technology/products/jdev/howtos/1013/protectedws/access_protected_web_services_from_adf.htm
The article addresses the problem of securing web services using usernames and passwords, when those web services are accessed through a proxy or a data control. In the examples, the user names and passwords are specified, whether in the code or the definition of data controls. (SKING/SKING).
In a very common scenario, users login to reach a page, for example, A.jspx, which contains a button that calls a web service, for example displayDate. Suppose that user has logged in by username/pass of (AHUNOLD/AHUNOLD) and AHUNOLD has access to the service and the page. Is there any way to pass the logged in user name and password to the webservice ? Of course we can hard-code the username in the data control definition or proxy code, but this is just one of the thousands of users who have access to the service and the authentication is not dynamic this way.
Hope my question is clear. Wishing you all a great Christmas.
Farbod

Hi Frank, and happy new year.
Are you implying that it couldn't be done declaratively? What is your suggestion for this problem? You know the problem... As I described:
- I need to secure my web services, so when exposed, no one from inside network or the internet, can access the web service without proper permission
- The web services are shown as web controls on jspx pages. The user has logged in before reaching the page. It is irrelevant to ask him to enter user name and password again.
- I have user names, passwords and roles in Oracle Internet Directory (Identity Management). It provides some APIs and I can retrieve the usernames and attempt logging in programmically. But how can I get username and password from the session in ADF application?
I guess using SAML or certificate could be the solution, but I have a problem with SAML, described here:
Re: Webservices Security, SAML, and Identity Management (OID)
Best Regards,
Farbod

Database App Development VM (Nov 2011) APEX username and password

Does anyone know the Workspace names, usernames and passwords for Instance Admin(Internal workspace), Developers and Users for the latest Database App Development VM (Nov 2011) available from OTN?
The VM forum is very quiet/unhelpful.
NOTE it is NOT
obe/obe/obe
or
oracle/oracle
or
admin/admin
thanks in advance
Paul

OK I followed Roel's suggestion and changed the ADMIN password using the apxchpwd.sql utility. There is no other way as there are no users defined in APEX except the instance administrator ADMIN
MAKE SURE you run V4.1 of apxchpwd.sql as V4.0.1 doesn't work and gives a security error. (Down load APEX 4.1 from OTN then extract apxchpwd.sql from the APEX directory.)
If you now try and connect to APEX and get an error in the browser (firefox) INTERNAL ERROR then shutdown the VM and restart it.
you should then be able to log onto the Instance Administrator as follows:
WS: Internal
UN: ADMIN
PW: <what you changed it to in the apxchpwd>
After you log on you will be asked to provide a new ADMIN password with all the naming restrictions enabled. (these can be turned off later, under manage instance...security settings. Under "Service Administrator Password Policy" change the radio button to "Use policy specified in Workspace Password Policy")
After logging into the workspace manager you will see that the OBE workspace has a status of TERMINATION_IN_PROGRESS5 .
If you want to retain this WS then create the OBE user as a workspace administrator and developer in the OBE workspace. If you set OBE/obe as the UN/PW
then you can log out of the Internal Workspace and log back in as the OBE developer and start application development.
Amazing how none of this is documented in the download! If you don't know much about APEX then you are locked out!
PaulP

Validate Oracle Apps Username and Password via ADF?

Similar Messages

Maybe you are looking for