Web Login Page - User Password Bug - 11.1.2.1

This may be covered in one of the thousand readme documents or elsewhere; however, I thought I'd share this here just in case it isn't or you don't want to search various PDF documents.
We recently had a user complain that he could not login to FDM anymore. He used to be able to login with no issues; however, recently it would not let him in.
To rule out system issues, we checked the following:
- Verified others could authenticate FDM with no issue (OK)
- Verified account unlocked in Active Directory (OK)
- Tested logging in to FDM on other machines (Fail on all machines ruling out cookies, browsers, etc)
- Checked Shared Services provisioning (To ensure he was indeed still provisioned for FDM)
- Attempted logging in through Workbench (Failed, but good fail. Did not state unable to authenticate, but properly noted he was not an Admin and therefore could not use Workbench. Wonder why it "works" here but not web....)
Since it was obviously not some type of system/account issue, we then checked:
- What end user changes happened recently? (Password change)
As the only recent change was the user's password change, I asked the user what the password changed to. The new password was pretty vanilla, though I did notice one potential issue in that it including the & character.
As many here will note, the & character doubles as a concatenation character in VB/VBscript. As programs should be escaping any strings they attempt to process, this should not matter; however, if FDM isn't properly escaping via the web login page this may be causing the issue. After resetting the user's password without the & character, everything worked fine.
So the moral of the story here is that apparently the FDM web login code behind doesn't escape the password string. The bad part is that it may prevent someone from logging in. The worse part is that this is a potential security problem since it may lead to code injection attacks.
If you want to prevent end user issues, you may want to remove the & character from your domain's password policy.

You may also be interested to know that using special character in the internal administrator id will cause issues on 11.1.2.1 and 11.1.2.2 actually documented the characters you should NOT use. See http://docs.oracle.com/cd/E17236_01/epm.1112/epm_deploy_guide_1112200.pdf
I have also seen issues with the internal admin password when it was > 25 characters which caused the shared services migration utility to fail.
The moral of the story is "secure" passwords dont' always play well with software. Which I could see being a problem in the 1980's. With the advent of Unicode and it's ilk it's sad to see that arbitrary text is not properly escaped. I know I"m ranting to the choir though Charles ;).
Regards and Happy New Year!
John A. Booth
http://www.metavero.com

Similar Messages

WLC 2504 - French characters for guest web login page

Good day,
I have recently installed a WLC 2504 and I have the following issue:
When I modify the text for the web login page (Under security/Web Auth/Web Auth page), if I use french caracters such as (é, è, à, etc...) in the message body, it does not show up correctly on users computers. As we're a bilingual country, I must put a bilingual text message. Are there any settings or workaround out there to rectify this?
We're on version 7.2.103.0
Thanks,
Eric

Thanks Scott, I'll have a look at the documentation.
Right after sending this post, I tried typing the actual HTML code for the character instead and it seems to be working. I'm curious about custom webauth page, we may be able to customize it more than we thought we could do.
Cheers,
Eric

Login page user name and password for Oracle Database

Hi,
I created a login.jsp page with username,password and a submit button. How can I validate this username and password from my Oracle database username and password?
I am using NetBeans5.5 with Tomcat5.5.17. Right now I have hardcoded username and password in my persistence.xml.
Anyhelp?

Thnx BalusC for ur reply. Let me explain my issue.
I have created a login page. and user is able to enter user name and passowrd on this page. User is supposed to press a 'submit' button when user enters username and password to connect to database. What should I write in 'submit' button's action to let user allow to proceed if username and password are correct i.e. username and password of my oracle database. (usename=scott and passowrd=tiger).
plz help.

Web Authentication - Web login page not displayed

Cisco 4402 WLC running version 5.2.193.0
Access Points: AIR-LAP1142N
I have configured an SSID for WebAuthentication. When a wireless client logs into the WLAN the PC will associate to the AP but will then stop at the WEBAUTH_REQD stage.
Internet Explorer will show the attmept to redirect to the virtual port at 1.1.1.1 but will not bring up the login page.
IE shows : https://1.1.1.1/login.html?redirect=www.google.co.ukhttp://www.google.co.uk/
The network is a flat network so this SSID is using the management interface.
DHCP is being provided by the controller for this WLAN.
I know the classic design should be for this to be implemented on a separate VLAN but my customer has not VLANed his network yet and this is planned at a later stage. I have implemented this on a flat network before and it has worked.
Any suggestions would be much appreciated.

I faced exactly the same problem as you have described above. The following is what fixed it for me, i am sure u try it to might fix it for u as well.
In my scenario i found that my WLC controller had cipher-option sslv2 disabled. I enabled it and that resolved the issue for me.
This is what needs to be done in order to do it :-
It's best to enable it on the WLC and this is done from the CLI. It requires a reboot.
ssh to the WLC
enter the following command:-
WLC>config network secureweb cipher-option sslv2 enable
and then reboot.
Once the WLC reboots u can check the status by issuing the following command:-
WLC>show network summary
The output should look similar to the following
RF-Network Name............................. GTCR-CH-RF-GA
Web Mode.................................... Enable
Secure Web Mode............................. Enable
Secure Web Mode Cipher-Option High.......... Disable
Secure Web Mode Cipher-Option SSLv2......... Enable
As u can see the Secure Web Mode Cipher-Option SSLv2 is now enabled.
This should work.
Hope this helps and all the best.

Cisco Prime Infrastructure 1.3 Web Log Invalid user password

Hi,
I recently installed Cisco Prime Infrastructure 1.3 per the set up guide. I was able to login into the webinterface.
Then I insert the radius server and reload ncs. Since then I'm not able to login to the web interface. I get the following error message "Invalid Username or Password. Please try again". Even when I set the ncs root user with a new password. One issue could be that i forgot the enable fallback to local.
Is there a way to change the radius config back via cli?
Thanks a lot
Hansruedi

Hi Hansruedi,
Thanks you for your help and your time.
I followed your recomandation until the fourth step.
But after this step, I lost the web page connection.
I check nsc status but all is running :
NMS still stopped. NMS must be running to have an access by web page ?
I restart Prime (by reload command) but nothing changed.
Thanks

NAC 4.7 CAS web login page url generation

We have had third part certs generated for the CAS and the CAM and these have installed OK, along with the relevant root and intermediate certificates, and the CAS/CAM are communicating fine.
However when a user is redirected to the authentication page, the url generated is using the CN from the certificate..
https://al-nac.sitename.local.companyname.co.uk/auth/perfigo.......etc.
However the machine cannot resolve the url.
We cannot add dns entries for this url, we only administer the sitename.local domain.
Is there a way for the CAS to request the user to access a URL via an IP address?
If I requested a new certificate, but use the IP address instead of the machine name, would the auhentiation page be referenced by this?
Regards
Tony

I'll give our certificate issuer a call this morning,however I'm sure they mentioned in the past they need a resolvable name to generate the certificate?
As when we asked for certificates for al-nam.sitename.local they have been unable to generate them, hence the CN=al-nac.sitename.local.company.co.uk
Is this the same for generating certificates against IP addresses?
Regards
Tony

No Guest web Login Page

I have setup an E1000 with no errors. Using a Win7 laptop, I can access both connections. Using XP laptops people cannot use my guest account. They connect but the Cisco welcome screen asking for the password never displays. What am I doing wrong?

With an E1500 and the guest account enabled: when guest (using MAC) connects to the Guest account, no login screen pops up after opening Safari. There is a message of "can't access server" (or something like that).
Have checked the Guest account settings and they appear correct.
The same MAC machine can access the secure account without a problem. Have also tried using an iTouch, same results.
These device do get an IP address assigned (192.168.33.xx) but we do not see a DNS or GW assignment. I assume the DNS/GW addresses don't get assigned till the password is entered, correct?

How to track the users password at insert page??

Hi all,
I need to create an interface, which allow users to upload some medical sequences into databse, also I need to alow the sequences's own to modify their input , in case they mske some mistake. now I need to deal with the following conditions.
1) Since the sequence's own need to take respone for their on sequence.
2)The interface has field call author,
3) before their do search edit or input , download , they need to log in the web set, any every one sure has their union password.
SO is that possible for me to get the log in password and check usere A is A to
avoid some one acciden or in poporse to use other s name to input or modify the sequence files in database .
Thank you11

hello tmary,
hmm your problem seems to be a beginners problem?
well there are two points to help u accomplish ur aim.
1.the database tabel or users
2. the users username (which should be a primary key in the table)
now this is the flow.....
when the user logs in using the web login page u will create u check 4 his username and password existence in the database table for users,if it exist you direct him to the welcome page where he will have options of editing ,downloading,uploading,e.t.c
so when loading this page u put this authenticated username and password i the "session" object and make sure all ur pages are session enabled. now if thge user selects edit when loading the edit page u will use the user name in the session to get his correspondin record which will b from the database table of record in which the username should be foreignkey to now likewise u can do the same for the download ,upload,e.tc pages.
hope this helps ok.
please let me know if its not ok.
jlord1

IPhone 3.0, the WiFi Login Panel and passwords that change daily

Does anybody else use their 3.0 iPhone regularly with a WiFi LAN that requires web login … AND the password changes daily? I connect daily to one that has Cisco authentication that I must get through each day with a different password.
The first few days I ran with 3.0 I was impressed that it detected the need to login and presented me the Login-Panel. However, I think the code/logic of this new 3.0 feature is, in the background, trying to re-login using the previous username/password I gave. If it felt the need to re-login that day, all is well. If it try’s that the next day, it’ll fail. No problem, as the next day it does present the login-panel again and I enter the new user/pswd combo.
However, after doing this for over a month now, about 20% of the time when I go to login in the morning my iPhone studders, crawls, and character echo in the login-panel can drop down to one character every 15 seconds. I’ve had to force power-off and reboot half a dozen times. Not always, but enough to make it a problem.
Anyone else encounter this?

No, I have not encountered that situation.
BUT.... I suggest you talk to the System Admin for the Cisco network and ask if they can move you to a user or admin group that does not require daily password changes, or perhaps 802.1x if security is critical?
Maybe...

Is it possible to create a login page to access the internet without ACS ?

Hello
My company would like a solution where guests can only access the intenet with a username or password so a web login page before accessing the internet. is this possible to configure onm a cisco router with no ACS ?
Thanks
Andy

Maybe.
Are they wired or wireless clients? What model and IOS version is your router and switch?

Sapui5 custom login page

HI: ALL
      I have a question about SAPUI5, Can you give me some advice.
     I create a proper, contains a login page and a detail page by sapui5 in Eclipse,I want to achieve When login page user name and   password and SAP user name and password are the same, just go to the next page.
     Please tell me how to do
        Best regard!

Hi Huang,
You can take a look some classes delivered by SAP.
Configuring Login Screen for Launchpad Designer - User Interface Add-On for SAP NetWeaver - SAP Library
/IWFND/CL_COC_SYSTEM_LOGIN     system login class
/UI2/CL_SRA_LOGIN              ICF system login class
CL_ICF_BASIC_LOGIN             ICF System Logon Basic Layout
CL_ICF_EXAMPLE01_LOGIN         Example 01 Customization System Login
CL_ICF_IDES_LOGIN              ICF System Logon IDES Layout
CL_ICF_NW04_LOGIN              ICF System Logon Layout NetWeaver 04
CL_ICF_NW07_LOGIN              ICF System Logon Basic Layout
CL_ICF_SAML_LOGIN              SAML Logon
CL_ICF_SYSTEM_LOGIN            ICF System Logon
CL_ICF_XBCML_LOGIN             ICF System Logon for XBCML
CL_MOBILE_SYSTEM_LOGIN         Logon Page for Mobile Devices
CL_OAUTH2_ICF_SYS_LOGIN        System Login class to render Token Endpoint JSON respons
CX_NWECM_LOGIN                 ECMI: Credentials Invalid Exception
IF_BADI_UC_MESSAGE_BASED_LOGIN Interface for BAdI: BADI_UC_MESSAGE_BASED_LOGIN
IF_ICF_SYSTEM_LOGIN            ICF System Logon
Regards, Masa
SAP Customer Experience Group - CEG

Capturing the Message on the Login Page (Invalid user/password expired etc.

Hi, I have a requirment for capturing the error message on the Login page if the User's Account is expired or Account is Disabled or Invalid credentials, Password Lockout etc.
I am using the attached login page. Can any one please help me out on this.
<html><head><title>AARPLogin Page</title>
<script type="text/javascript" language="JavaScript" xml:space="preserve">
// This function automatically gets called for broswer detection
var isNav4 = false;
var isIE4 = false;
var isNS6 = false;
function obDetectBrowser()
if ( navigator.appVersion.charAt( 0 ) == "4" )
if ( navigator.appName == "Netscape" )
isNav4 = true;
} else {
isIE4 = true;
else
if ( navigator.appVersion.charAt( 0 ) >= 5 )
if ( navigator.appName == "Netscape" )
isNS6 = true;
obDetectBrowser ();
var HOSTNAME =
var COOKIE_OBREQUESTEDURL = "OBREQUESTEDURL";
var COOKIE_OBFORMLOGINCOOKIE = "ObFormLoginCookie";
var NCID_LANDING_PAGE_URL = "/landing/";
var QS_REDIR = "ReDir";
var keyChooser;
function checkPasswordEnterKey( event )
var form = document.forms[0];
if (isNav4 || isNS6) {
keyChooser = event.which ;
} else if (isIE4) {
keyChooser = window.event.keyCode;
if (keyChooser == 13) {
if (
form.userid.value
&& form.userid.value != ""
&& form.password
&& form.password.value != ""
form.submit();
return true;
else
alert('Please enter a UserId and Password');
return false;
function showHidePanel( panelID, displayValue )
var panelElement = document.getElementById( panelID );
if ( displayValue == 'show' )
panelElement.style.display = 'block';
else
panelElement.style.display = 'none';
function getQueryVariable( variable )
var query = window.location.search.substring( 1 );
var vars = query.split( "&" );
for ( var i=0; i < vars.length; i++)
var pair = vars[ i ].split( "=" );
if ( pair[ 0 ] == variable )
return unescape( pair[ 1 ] );
return "";
function Get_Cookie( name )
var nameEQ = name + "=";
var ca = document.cookie.split( ';' );
for( var i=0; i < ca.length; i++ )
var c = ca[ i ];
while ( c.charAt( 0 )==' ' )
c = c.substring( 1, c.length );
if ( c.indexOf( nameEQ ) == 0 )
return c.substring( nameEQ.length, c.length );
return null;
function Set_Cookie( name, value, expires, path, domain, secure)
document.cookie = name + "=" + escape( value ) +
( ( expires ) ? ";expires=" + expires.toGMTString() : "" ) +
( ( path ) ? ";path=" + path : "" ) +
( ( domain ) ? ";domain=" + domain : "" ) +
( ( secure ) ? ";secure" : "" );
function Delete_Cookie( name, path, domain )
if ( Get_Cookie( name ) )
document.cookie = name + "=" +
( (path) ? ";path=" + path : "" ) +
( (domain) ? ";domain=" + domain : "" ) +
";expires=Thu, 01-Jan-1970 00:00:01 GMT";
function lostPassword()
var CurrentLogin = document.forms[0].userid.value;
if ( CurrentLogin == "" ) {
alert ( "Please enter your eMail Address." );
document.forms[0].userid.focus();
else {
Set_Cookie( COOKIE_OBFORMLOGINCOOKIE, "done", 0, "/" );
var LOST_PWD_PAGE = "/identity/oblix/apps/lost_pwd_mgmt/bin/lost_pwd_mgmt.cgi?program=passwordChallengeResponse&login="+CurrentLogin+"&backUrl=http://oradev2.na.aarp.int/login/login.html&target=top";
window.location = LOST_PWD_PAGE;
function emailPassword()
document.passform.submit();
function onLoad()
if (getQueryVariable( "MSG" ) == 'LOGIN_FAILED' )
alert ("Login Failed, Please try again");
else if (getQueryVariable( "MSG" ) == 'PWD_EXP' )
alert ("Your Password Is About to Expire. Please Change it at your earliest convenience.");
var pwdExpUID = getQueryVariable( "login" );
var hostTarget = getQueryVariable( "hostTarget" );
var resURL = getQueryVariable( "resURL" );
var PWD_EXP_PAGE = "/identity/oblix/apps/lost_pwd_mgmt/bin/lost_pwd_mgmt.cgi?program=redirectforchangepwd&login="+pwdExpUID+"&backURL="+hostTarget+resURL+"&target=top";
window.location = PWD_EXP_PAGE;
else if (getQueryVariable( "MSG" ) == 'CHGPWD' )
alert ("You are required to change your password.");
var chgPwdUID = getQueryVariable( "login" );
var hostTarget = getQueryVariable( "hostTarget" );
var resURL = getQueryVariable( "resURL" );
var CHG_PWD_PAGE = "http://"+HOSTNAME+"/identity/oblix/apps/lost_pwd_mgmt/bin/lost_pwd_mgmt.cgi?program=redirectforchangepwd&login="+chgPwdUID+"&backURL="+hostTarget+resURL+"&target=top";
window.location = CHG_PWD_PAGE;
</script></head><body onload="onLoad();document.login.userid.focus();" alink="blue" bgcolor="#ffffff" link="blue" vlink="blue">
<p align="center">
<img alt="AARP Header Logo" src="login_files/aarpLogo.gif" border="0" height="91" width="219">
<br>
</p><form name="login" method="post" action="/access/oblix/apps/webgate/bin/webgate.so">
<div class="boldText" align="center">
<h2>Login</h2>
<div class="boldText" align="left">
<div id="LoginFailed" style="display: none;">
<table align="center" bgcolor="#ff0000" border="0" cellpadding="2" cellspacing="0" width="500">
<tbody><tr>
<td>
<table bgcolor="#e5e5e5" border="0" cellpadding="5" cellspacing="0" width="100%">
<tbody><tr bgcolor="#ffffff">
<td rowspan="3" height="40" nowrap="nowrap" valign="top">
<img src="login_files/error.gif" name="error" height="20" width="20">
</td>
<td rowspan="3" align="center">
<p>
<font color="#ff0000" size="-1">
<b>
<div id="TryAgain" style="display: none;">Login Failed! Invalid UserID and/or Password, Please try again.<br></div>
<div id="AccountLocked" style="display: none;">Your Account has been Locked!</div>
</b>
</font>
</p>
<p>
<font color="#ff0000">
<b>For
assistance call E-Services Help Line at (XXX) XXX-XXXX Monday through
Friday between the hours of 8:00 am and 5:00 pm eastern standard time.</b>
</font>
</p>
</td>
</tr>
<tr bgcolor="#ffffff">
</tr><tr bgcolor="#e5e5e5">
</tr></tbody></table>
</td>
</tr>
</tbody></table>
</div>
<br>
</div>
<table border="0" cellpadding="0" cellspacing="0" width="500">
<tbody><tr>
<td background="login_files/border_upper_left.gif" height="20" nowrap="nowrap" width="20"> </td>
<td background="login_files/border_top.gif" height="20" nowrap="nowrap"> </td>
<td background="login_files/border_upper_right.gif" height="20" nowrap="nowrap" width="20"> </td>
</tr>
<tr>
<td background="login_files/border_left.gif" nowrap="nowrap" width="20"> </td>
<td>
<table bgcolor="#ebebce" border="0" cellpadding="2" cellspacing="0" height="100%" width="100%">
<tbody><tr>
<td colspan="3" align="center">
<font color="darkred" face="Arial" size="3">
<b>
</b></font>
<b> </b></td>
</tr>
<tr valign="bottom">
<td colspan="3" width="100%">
<table bgcolor="#ebebce" border="0" cellpadding="5" cellspacing="0" width="100%">
<tbody><tr bgcolor="#e5e5e5">
<td rowspan="2" bgcolor="#ebebce" height="20" nowrap="nowrap" valign="top" width="4%">
<font color="#000000">
<span class="text">
<img src="login_files/arrow.gif" align="top" height="20" width="20">
</span>
</font>
<font color="#000000"> </font>
</td>
<td rowspan="2" bgcolor="#ebebce" width="96%">
<font color="#000000" size="-1">
<span class="text">Please enter your Email and Password. If you are a new user to AARP, please select First Time AARP User.
</span>
</font>
</td>
</tr>
<tr bgcolor="#e5e5e5">
</tr></tbody></table>
</td>
</tr>
<tr valign="bottom">
<td colspan="3">
<table align="center" border="0" width="349">
<tbody><tr>
<td nowrap="nowrap" width="74">
<font color="#000000" size="-1">
<div align="left">eMail:</div>
</font>
</td>
<td width="265">
<input name="userid" value="" size="32" maxlength="32" tabindex="2" type="text">
</td>
</tr>
<tr>
<td>
<font color="#000000" size="-1">
<div align="left">Password:</div>
</font>
</td>
<td>
<p>
<font color="#000000" size="-1">
<input name="password" size="32" maxlength="32" length="30" tabindex="3" type="password">
</font>
</p>
</td>
</tr>
</tbody></table>
</td>
</tr>
<tr>
<td>
<font color="#000000" size="-1">
<p align="center"><b>Forgot Your Password?</b></p>
</font>
</td></tr>
<tr>
<td align="center"> <font color="#000000" size="-1">
Email New Password
</font>
</td></tr>
<tr>
<td colspan="4">
<div class="boldText" align="center">
<br>
<input src="login_files/button_login.gif" name="Submit" value="" alt="login" type="image">
 <b class="boldText"><img src="login_files/button_clear.gif" name="img_clear" alt="clear" border="0" height="25" width="68"></b>
<b class="boldText"><img src="login_files/button_help.gif" name="img_help" alt="help" border="0" height="25" width="68"></b>
<b class="boldText"><img src="login_files/button_cancel.gif" name="img_cancel" alt="cancel" border="0" height="25" width="68"></b>
</div>
</td>
</tr>
</tbody></table>
</td>
<td background="login_files/border_right.gif" nowrap="nowrap" width="20"> </td>
</tr>
<tr>
<td background="login_files/border_lower_left.gif" height="20" nowrap="nowrap" width="20"> </td>
<td background="login_files/border_bottom.gif" height="20" nowrap="nowrap"> </td>
<td background="login_files/border_lower_right.gif" height="20" nowrap="nowrap" width="20"> </td>
</tr>
</tbody></table>
<p></p>
<span class="text"><br><br><b>NOTICE:
This system is the property of AARP and is for authorized use only.
Unauthorized access is a violation of federal and state law. All
software, data transactions, and electronic communications are subject
to monitoring.</b></span>
<div id="hr" style="position: absolute; width: 100%; height: 10px; z-index: 90; top: 657px; left: 10px;">
<hr>
</div>
<div id="footer" style="position: absolute; width: 700px; height: 55px; z-index: 115; top: 678px; left: 50px;">
<span class="subhead">
Privacy Policy
Disclaimer
Contact Us
</span>
<span class="bodytext">
</span></div>
<form name="passform" action="http://oradev2.na.aarp.int/wampassword/passwordReset.html" method="post">
<input name="login" value="" type="hidden">
<input name="backUrl" value="http://oradev2.na.aarp.int/login/login.html" type="hidden">
</form>
<script type="text/javascript" language="JavaScript" xml:space="preserve">
var undefined;
if (
document.login
&& document.login.password
function clearForm()
document.login.reset();
function navigate( linkName )
if ( 'login' == linkName )
if ( document.accountLogin.userID.value != '' && document.login.password.value != '' )
alert('Please click the Account Registration Setup link for now');
//document.location = 'userDataPersonal.htm';
else
alert('Please enter a UserId and Password');
function openHelp()
helpDoc = window.open( "http://www.aarp.org", "", "scrollbars=yes,resizable=yes,width=500,height=300" );
function cancel()
// open dialog
var initX = parseInt( window.screenX ) + parseInt( window.outerWidth ) / 2 - 100;
var initY = parseInt( window.screenY ) + parseInt( window.outerHeight ) / 2 - 50;
cancelDialog = window.open( "./cancelDialog.html", " cancelDialog", "resizable=yes,toolbar=no,menubar=no,width=200,height=150,screenX=" + initX +",screenY=" + initY );
</script>
</div></form></body>
<script type="text/javascript">
</script></html>

Is it not possible that someone fired the password expiration cmd ?
SQL> select limit
2 from   dba_profiles
3 where profile='DEFAULT'
4 and resource_name='PASSWORD_LIFE_TIME';
LIMIT
UNLIMITED
SQL> select profile from dba_users where username='MYUSER';
PROFILE
DEFAULT
SQL> conn myuser/myuser
Connected.
SQL> conn / as sysdba
Connected.
SQL> alter user myuser password expire;
User altered.
SQL> conn myuser/myuser
ERROR:
ORA-28001: the password has expired
Changing password for myuser
New password:
Password unchanged
Warning: You are no longer connected to ORACLE.
SQL> conn / as sysdba
Connected.
SQL> select name, astatus, TO_CHAR(ctime,'DD-MM-YYYY HH:MI') CTIME, TO_CHAR(ptime,'DD-MM-YYYY HH:MI') PTIME, TO_CHAR(EXPTIME,'DD-MM-YYYY HH:MI') EXPIRE
2 from sys.user$ where name ='MYUSER';
NAME
   ASTATUS CTIME
PTIME
EXPIRE
MYUSER
         1 23-11-2011 11:15
23-11-2011 11:15
23-11-2011 11:17
SQL>Nicolas.

Why doesn't Firefox recognize the Windows Live Mail login page as such and offer to remember the password?

For most other sites' login pages, Firefox recognizes that they are login pages and offers to remember my password. For the Windows Live Mail login page it does not.

That log in page is created via JavaScript and the Password Manager doesn't work in that case.
You can see that if you inspect the page source.
*Firefox > Web Developer > Page Source
*Tools > Web Developer > Page Source (Ctrl+U)
*Right-click on a web page to open the right-click context menu and select Page Source
*[https://bugzilla.mozilla.org/show_bug.cgi?id=518516 bug 518516] - Make login manager work with JS generated forms (after pageload)

When I get to the login page on my macbook, I type in my password and it starts to load, but then the screen turns blue and it goes back to the login. What should I do?

I was having some problems with my mac, safari and itunes was freezing alot. I have to force shutdown and when I tried to start up again i get to the login page, type in my password and it starts to load, but then the screen turns blue for a few seconds and it goes back to the log in screen. What should I do?
Please Help!!

Somewhat similar problem:
Put in the password, hit enter, the screen goes blue for half a second, then goes back to login screen and carries on logging in as usual. Drives me mad. It doesn't happen with a fresh Lion installation, nor if booted into safe mode. On the machine in question it also happens to new user accounts.
I've removed all login items, including Startup Items and Launch Demons (pun intended) and Agents, I've compared system login plists with a fresh Lion installation - can't see differences. I've removed Little Snitch and PeerGuardian (no more third party kexts).
@Carolyn: I've done disk maintenance with DiskUtility and fsck and even DiskWarrior, cleaned caches, etc. etc.
Any ideas would be gratefully received.
Sorry for trying to hijack the thread (as it's not about Lion), but it seemed dead anyway.

How can you create a customized page to change user password?

Hello to all,
I would like to create a customized page for a user to change their password. We are using Portal version 3.0.9 on Windows NT/2000. Currently there is a page in portal where a user can change their password.
I tried linking to that page by copying the shortcut url and adding it as an html portlet. The problem is that we want to direct the users to a
page of our choosing when they click on the "cancel" and "ok" buttons. I read in the forums that there is a selfreg.cmd script.
I also read that there is some code that has been available.
Has anyone implemented a customized user password change page? Do you know of any links that might have steps to follow or
more informatioin?
Thanks in advance,
Lindsay

Hi,
I was able to customize the change password screen through a procedure. This is what I did:
* Created a procedure under the Portal30_sso schema:
CREATE OR REPLACE procedure reports_chage_password
site2pstoretoken in varchar2 default null
,p_username in varchar2 default null
,p_error_code in varchar2 default null
,p_submit_url in varchar2 default null
,p_done_url in varchar2 default null
,p_pwd_is_exp in varchar2 default null
,p_password in varchar2 default null
is
begin
htp.htmlopen;
htp.headopen;
htp.title ('<TITLE of Page>');
htp.headclose;
htp.bodyopen;
htp.p('<table width="100%"><tr><td colspan=2 align=center><IMG SRC=<directory of image if you want>"><br><hr><br></td></tr>');
htp.p('<tr><td colspan=2 align=center>');
htp.p('<font COLOR="#000080" face="Times New Roman" size=+2><b>');
htp.header(nsize => 1 ,cheader => 'Change Password');
htp.p('</b></font>');
htp.p('</td></tr><tr><td align=right>');
htp.formopen(curl => p_submit_url );
htp.p('<font color="#000080" face="Times New Roman" size=+1>');
htp.p ('Username:');
htp.p('</td><td alight=left><font color="#000080" face="Times New Roman" size=+1>');
htp.p(p_username);
htp.p('</font>');
htp.p('</td></tr>');
htp.formHidden(cname => 'p_username',cvalue => p_username);
htp.br;
htp.p('<tr><td align=right>');
htp.p('<font color="#000080" face="Times New Roman" size=+1>');
htp.p ('Old Password: ');
htp.p('</font>');
htp.p('</td><td align=left>');
htp.p ( htf.formPassword(cname => 'p_old_password',csize => 30,cmaxlength => 30) );
htp.p('</td></tr>');
htp.br;
htp.p('<tr><td align=right>');
htp.p('<font color="#000080" face="Times New Roman" size=+1>');
htp.p ('New Password: ');
htp.p('</font>');
htp.p('</td><td align=left>');
htp.p ( htf.formPassword(cname => 'p_new_password',csize => 30,cmaxlength => 30) );
htp.p('</td></tr>');
htp.br;
htp.p('<tr><td align=right>');
htp.p('<font color="#000080" face="Times New Roman" size=+1>');
htp.p ('Confirm New Password: ');
htp.p('</font>');
htp.p('</td><td align=left>');
htp.p ( htf.formPassword(cname => 'p_new_password_confirm',csize => 30,cmaxlength => 30) );
htp.p('</td></tr>');
htp.p('<tr><td rowsapn=2>');
htp.formHidden(cname => 'p_done_url',cvalue => '<the url that you want users to go to when they are done>');
htp.formHidden(cname => 'p_pwd_is_exp',cvalue => p_pwd_is_exp);
htp.formHidden(cname => 'p_password',cvalue => p_password);
htp.formHidden(cname => 'site2pstoretoken',cvalue => site2pstoretoken);
htp.p('</td></tr>');
htp.p('<tr><td align=right>');
htp.formSubmit(cname => 'p_action',cvalue => 'OK');
htp.p('</td><td align=left>');
htp.formSubmit(cname => 'p_action',cvalue => 'CANCEL');
htp.p('</td></tr></table>');
if p_error_code is not null then
htp.br;
htp.fontOpen(ccolor=> 'red', csize=> 4);
if p_error_code = 'auth_fail_err' then
htp.p('Old password is incorrect');
elsif p_error_code = 'pwd_rule_err' then
htp.p('The new password does not follow '||
'the password policies.');
htp.br;
htp.p('Verify with your System Administrator '||
'about the Password Policies');
elsif p_error_code = 'confirm_pwd_fail_txt' then
htp.p('Confirmation for new passord is not '||
'the same as the New Passowrd');
elsif p_error_code = 'null_new_pwd_err' then
htp.p('New password cannot be null');
elsif p_error_code = 'null_old_pwd_err' then
htp.p('Old password cannot be null');
else
htp.p ('Error: ' || p_error_code );
end if;
htp.fontClose;
end if;
end;
* Grant this procedure to PUBLIC
* Update the portal30_sso.wwsso_ls_configuration_info_$:
UPDATE portal30_sso.wwsso_ls_configuration_info_$
SET LOGIN URL = '<YOUR CUSTOM LOGIN URL OR THE WORD UNUSED IF YOU DON'T HAVE ONE> http://<MACHINE_NAME>.<DOMAIN>/pls/portal30_sso/portal30_sso.<NAME OF PROCEDURE>';
* After you update the table, go to your account information link, and click on the change password link.
* Then copy the url that you see in your address line
* And if you want a change password link at the top of your portal page, just go to EDIT on your page, then edit the banner defaults. Then in the links add the Lable and the URL. The URL would be the URL you copied from the previous step.
Hope this helps.
I've customized the login page too if you would like some sample code for that. Let me know.
Martin

Web Login Page - User Password Bug - 11.1.2.1

Similar Messages

Maybe you are looking for