Showing posts with label authentication. Show all posts
Showing posts with label authentication. Show all posts
Monday, March 21, 2016
Oracle Linux: Windows AD or LDAP server cannot authenticate due to TLS error
While the My Oracle Support article "OL 6 & 7 - Unable to Authenticate to Windows AD or LDAP Server "Could not start TLS encryption. unknown error"" from ID 2109478.1 may not be relevant if you are not changing your configuration, you may have to know this when you decide to do an upgrade so check this out!
Monday, March 24, 2014
12c: Datapatch failure with ORA-01017 error
As we are going to be upgrading a database to 12c, I'm keeping my eyes open for issues that might crop up when we install it and MOS note 1635007.1 is one worth reading up on! Titled "Datapatch fails with ORA-01017, as it only connects to the database with OS Authentication" it appears that datapatch only is using OS authentication and it reports back the rejection error of ORA-01017 if you are trying to install it under an account which fails the OS authentication. Even though this note indicates that the issue may be resolved with bug 18151716, if you read that bug information it doesn't really match the description of this note!
Regardless, I learned a bit as I usually track against ad_bugs to see if patches were applied but there is another table DBA_REGISTRY_SQLPATCH which Oracle suggests to modify if the datapatch needs to be applied manually in one of the two workarounds suggested.
Regardless, I learned a bit as I usually track against ad_bugs to see if patches were applied but there is another table DBA_REGISTRY_SQLPATCH which Oracle suggests to modify if the datapatch needs to be applied manually in one of the two workarounds suggested.
Monday, August 12, 2013
Security Week - GUEST during password change
This started out perfectly innocently as I needed to go into a test environment and reset a user account password so that they could get into the application and test something out. Imagine my surprise when I encountered this scenario!
USERA logs into the application, in a second window USERB logs into the application but is prompted for a password change; going back to the first window and logging out USERA provides you with a returning User ID of GUEST for some strange reason and not USERA. This means to me that before USERB gets authenticated, the Oracle EBS utilizes the GUEST user account and gets an authenticated session with that user ID.
This pretty much blew my mind, and lead me to do some more investigation of security issues related to user security for EBS so this week I give you "Security Week" after finding quite a few interesting nuggets from My Oracle Support.
Even better to prove my original hypothesis, going back to the window for USERB and trying to complete the password change attempt results in this message being displayed:
Error : You do not have a current session, please log in before visiting this URL.
USERA logs into the application, in a second window USERB logs into the application but is prompted for a password change; going back to the first window and logging out USERA provides you with a returning User ID of GUEST for some strange reason and not USERA. This means to me that before USERB gets authenticated, the Oracle EBS utilizes the GUEST user account and gets an authenticated session with that user ID.
This pretty much blew my mind, and lead me to do some more investigation of security issues related to user security for EBS so this week I give you "Security Week" after finding quite a few interesting nuggets from My Oracle Support.
Even better to prove my original hypothesis, going back to the window for USERB and trying to complete the password change attempt results in this message being displayed:
Error : You do not have a current session, please log in before visiting this URL.
Subscribe to:
Posts (Atom)