Change APP_USER after authentication using HTTP header

At our office, we switch to smart card authentication via a type of minder of the site that defines variables to specific header for user authentication access.  One of the headers is the identity card which is just a number and doesn't mean anything to the user and the other is the user id.  We run our account access with a user management site that contains the roles for each application and for each user within our Organization.  This user management system will always contain the generic user number but may not contain their user id (since it is not necessarily the name of the windows account but is put in place on the cover page of the site) and so I can't use it for authentication header HTTP since it can not exist in our system.  What I want to do is authenticate using the generic number, update our management system user with the user entered on the header id (since it will always match the generic number), and then set: APP_USER variable username.  Any suggestions?  Or is there a better way to do this?

Apex 4.2.6.00.03

Oracle 11.2 g

Hello

'Name of the procedure after authentication' is what you're looking for. It is an attribute of your HTTP header authentication.

Here is an example. Insert the following code in the attribute "Code PL/SQL.

procedure post_auth is
begin
    apex_custom_auth.set_user (
        p_user => regexp_replace(:APP_USER, '@.*', null) );
end;

and you enter the "name of the procedure after authentication.

post_auth

If you use the HTTP header authentication, it is important that you set "Check Username" to "after the Login. Otherwise you would get in trouble because APP_USER will never match the user to HTTP header variable.

Concerning

Patrick

Tags: Database

Similar Questions

  • images do not appear after downloading (using http servlets)

    In order to be able to view the images after download created an http servlet. I created the entry in the web.xml file. I have the input file and the download button.

    It shows no error on the console, however, after uploading the image does not appear on the screen. Although the temporary folder.

    Give me somebody can explain why? what I am doing wrong?

    http://www.awasthiashish.com/2014/12/uploading-and-showing-image-file-from.html

  • Authentication HTTP header Variable

    APEX 4.2 or 5.0.1 Oracle 11.1

    We have several older applications in our everyday environment version 1.x that are still chugging along. They use an authentication scheme customized to set APP_USER based on the header HTTP REMOTE_USER variable and a function page_sentry lovingly crafted by none other than Scott Spadafore itself (may he rest in peace).

    Since APEX 4.1 introduced this as a built-in/declarative choice, of course, there is no need to maintain this as a custom scheme.

    The only wrinkle is that the middle tier web server used to connect to the APEX (SST or ADR) engine, the REMOTE_USER could be in one of the 3 formats) a username domain\username b) c) username@domain. Sentinel current page function code has a logic to extract only the username part to define APP_USER. If we were to change to use the integrated authentication scheme, how this logic "post processing" be welcomed? The Authentication Procedure after would change APP_USER or just read?

    Thank you

    Hi Vikas,

    Yes, you can create a procedure after the authentication that uses APEX_CUSTOM_AUTH. SET_USER change: APP_USER. At the end of the authentication process (which is once this procedure being executed), APEX will save: APP_USER in the session.

    Kind regards

    Christian

  • All of a sudden, after a update of firefox, I get "this connection is untrusted" for Facebook, no matter if I use http: or https:, WHY?

    All of a sudden, after a update of firefox, I get "this connection is untrusted" for Facebook, no matter if I use http: or https:, WHY? Here are all the details of the error message:

    This connection is Untrusted

    You asked Firefox to connect safely to facebook.com, but we cannot confirm that your connection is secure.

    Normally, when you try to connect safely, sites will present a reliable identification to prove that you're in the right place. However, the identity of this site cannot be verified.
    What should I do?

    If you normally connect to this site without problems, this error can mean that someone is trying to impersonate the identity of the site, and you should not continue.

    This site uses HTTP Strict Transport Security (HST) to specify that Firefox didn't connect safely. As a result, it is not possible to add an exception for this certificate.

    Facebook.com uses an invalid security certificate.

    The certificate is not trusted because the issuer certificate is unknown.

    (Error code: sec_error_unknown_issuer)

    (Also included a screenshot).

    COR - el said

    You can check the date and time and time zone in the clock on your computer: (double) click on the clock icon in the Windows taskbar.

    You can retrieve the certificate and check details such as WHO issued the certificates and the expiration dates of certificates.

    • Click on the link at the bottom of the error page: "I understand the risks".
    • Let Firefox recover the certificate: "Add Exception"-> "get certificate".
    • Click on the button "View" and inspect the certificate and the Coachman, who is the issuer.

    You can see more details like the intermediate certificates that are used in the Details tab.

    If you cannot inspect the certificate by "I understand the risks", then try this:

    Open the chrome URI by pasting or typing this URI in the address bar to open the window "Add the Security Exception" and to check the certificate:

    • chrome://pippki/content/exceptionDialog.XUL

    In the field location type and paste the URL of the Web site

    • retrieve the certificate via the button 'Get certificate '.
    • Click on the "view..." button. "to inspect the certificate in the certificate display

    Check which is the issuer of the certificate.

    You can get more details like the certificate chain in the Details tab of the certificate display.

  • Get the error "Failed to change the network provider password" after having used the change an option of network after Ctrl alt delete password

    Hello

    I don't know what is the use of this option called "change a network password".i have windows 2008 domain infrastructure.
    All client computers are in the other domain and accessing drives on the part of the domain that I made it through with a one-way trust.
    Can users change their passwords to access the reader to share through change a network password option? If Yes? I'm unable to change the password by using this option.
    Any help will be appreciated.
    Thank you

    Hello

    The question you have posted is linked to the domain network and would be better suited to the TechNet support. I suggest you to report the problem in the TechNet support for more information.

    http://social.technet.Microsoft.com/forums/en-us/newThread?category=WindowsServer&Forum=winserverfiles

    If you have other problems with Windows, please post in the Microsoft Community. We would be happy to help you.

  • Basic authentication of HTTP Cache MDS

    The MDS Simulator and the BES application there are cached credentials for basic authentication and their use during future requests to our server, even when the customer changes more precisely the credentials in the request.

    As seen on:

    http://NA.BlackBerry.com/eng/devjournals/resources/journals/oct_2004/understanding_mds.jsp#what_cach... .

    User InformationAs discussed in the previous section, MDS supports a variety of authentication schemes. In the situation where authentication is required, MDS will cache user credentials after a user is prompted for a username and password. The next time that user logs into the server and is challenged for a username and password, MDS will automatically authenticate the user with the cached credentials, removing the need for them to re-enter their credentials each time.
    

    This causes us a lot of problems because we need different credentials for different operations. We tried to place the directive to control cahce on applications of non-magasin, non-cache, must-revalidate for value however the MDS seems to ignore these guidelines.

    There is a directive that can be used on the line connection or in the HTTP header that will prevent the MDS to use cached credentials?

    Thanks, but we don't have control on our users, BES servers, so this isn't a viable option.

    We found that using a HTTPS connection seems to solve this problem, but it's pretty boring, that we have the load on the client and the server to use HTTPS connections.

    BES/MDS servers should obey RAM headers in HTTP requests. At least he should realize that the credentials should be updated when a new series is sent to it by the customer and not blindly use the old powers.

    Cached references like this also make it difficult on some sites (not much these days use Basic Auth, but some don't) to have several accounts, because you can not change your credentials.

  • HTTP header variable

    Hello

    No matter who has successfully implemented SSO using the new type of scheme HTTP header Variable?

    I need to have Novell Access Manager manage access to the APEX applications (recently upgraded to version 4.1). Application Express listener is used.

    For SSO, I inject the username in the authentication headers. The first question I have is that the default value for $remote_user@-part is always set to APEX_PUBLIC_USER, then I put a custom header (X-APPUSER) in place and created a new authentication scheme using this variable. After will be authenticated through NAM, APEX always sees me as APEX_PUBLIC_USER. I checked the headers sent using OWA_UTIL. PRINT_CGI_ENV(). X - APPUSER has my user name, but $remote_user@-part is set to APEX_PUBLIC_USER.

    Did I miss a step?

    Best regards
    Adrian

    Hi Adrien,.

    It would be useful to get debug output full of the initial session that triggered the authentication, then the output of the callback call.

    I can send scripts SQL get you a debug output more detailed that would help me a lot to diagnosis this. Just send a mail to wolf point patrick at oracle dot com, while I have your e-mail address.

    Concerning
    Patrick

  • Firefox uses https rather than http

    I had problems to connect to a site recently so I tried to use https instead of http and I got but only a text based page. Now I want to go back to using http, but Firefox uses https rather than http.

    I put browser.urlbar.autoFill.typed and browser.urlbar.autoFill to false, but it does still even after restarting Firefox. I deleted cookies, the tab of this site closed and restarted Firefox. He always does.

    I tried to set the keyword. URL to http://***.***.org/ "obviously with the correct url.

    Anyone has the clues how to stop this?

    One of the reasons why a "Strict-Transport-Security" header sent by your server (or an application on your server). Once Firefox stores this parameter specific to the site, you may be stuck with HTTPS forever. See this thread for an example: Firefix 25.0.1 forces SSL even when http:// is specified in the address bar.

    The function "to forget this site" will erase all the known places that Firefox can keep information on the site. This, of course, history and cookies, but also includes the permissions specific to the site and even favorite.

    If you want to try it, the option is available in two locations:

    • The library dialogue (history > view history). Right click on any entry to the site.
    • The subject: permissions page (type or paste on: permissions in the address bar and press enter). Choose the site from the list on the left and look for the button in the upper right.
  • Error: DDE server window not close do not after downloading using FireFox

    I have the same problem.

    on my machine, it happens every time after I used firefox(3.6/4.0/5.0) download whatever it is, when I click on download link firefox is no answer.  then I stop windows I'll see this box.

    Hi ucudbm,

    1. Did you the latest changes on the computer?
    2. When was the last time it was working fine?
    3. You have security software installed on the computer?
    4. The problem occurs only after the use of Firefox on your computer?

    It is possible that some third-party programs installed on the computer is causing the problem.

    I suggest that you put the computer in a clean boot state and check if it helps.

    To help resolve the error and other messages, you can start Windows XP by using a minimal set of drivers and startup programs. This type of boot is known as a "clean boot". A clean boot helps eliminate software conflicts.

    See section to learn more about how to clean boot.

    How to configure Windows XP to start in a "clean boot" State

    http://support.Microsoft.com/kb/310353

    Reset the computer to start as usual

    When you are finished troubleshooting, follow these steps to reset the computer to start as usual:

    (a) click Start, type msconfig in the search box and press ENTER.

    (b) If you are prompted for an administrator password or for confirmation, type your password or click on continue.

    (c) under the general tab, click the Normal startup option, and then click OK.

    (d) when you are prompted to restart the computer, click on restart.

    If the previous step fails then I would suggest you contact Firefox support for more information.

    http://support.Mozilla.com/en-us/home

  • Just installed via Steam Fable III. Just after authentication and signature in the game finished

    Just installed via Steam Fable III. Just after authentication and signature in the game finished. Solutions?

    original title: Fable III does not start yet. Solution?

    Hello
    You can try to fix the game and check if it helps. If the problem persists then try to uninstall and reinstall the game.
    http://Windows.Microsoft.com/en-us/Windows-Vista/uninstall-or-change-a-program

  • The desktop icons do not respond after the use of IE

    Hello

    Anyone got a solution for this? When the computer is turned on I can use the icons on the desktop, no problem. However, after I used Internet Explorer from the desktop icons don't respond well the pograms can be opened from the start menu. As the recent problem I tried uninstalling some updates recently installed, without solving the problem. Using Windows Vista and IE9

    After that I used Internet Explorer from the desktop icons do not respond

    Does that mean exactly?   For example, what do you see?   For the best answer to this question, you could use ProcMon and know what modules are involved when you do what these are.   ;  )

    However, without using ProcMon you can check with the Manager task or resource or ProcExp monitor if there is always a hidden background iexplore.exe processes running or anything related to IE which started as a result of your using IE.   If so then try to kill these processes.   Etc.

    Related to this, you could also consider what you used IE before your symptoms occurred.   This means that would understand that make your "desktop icons" and change it to something more neutral.   For example, if you had clicked on was a shortcut Internet (aka the .url file) that requires a network connection, change for people who only runs locally, such as about: blank.   So if you could close the window that has opened and always use the shortcut you would have refined your description of symptom to involve the network connections.

    Related to that, would be your security package, for example, some are trying to act as a hidden proxy to "analyze" the HTTP traffic.   Then the problem would not be IE but the hidden proxy.  Etc.

    You can't wait for a "fix" until you have a fully understood symptom.   More details and diagnosis is necessary IMO.

    ---

  • Hi all, after happily using CC for almost a year he no longer works: the creative cloud icon continue on spinning and when I try to open ANY CC applications a warning saying "Adobe Application Manager is needed to solve this problem. However, he

    Hi all, after happily using CC for almost a year he no longer works: the creative cloud icon continue on spinning and when I try to open ANY CC applications a warning saying "Adobe Application Manager is needed to solve this problem. However, it is missing or damaged. Please download and install a new copy ecc ecc. Tried all that but I'm stuck. any help, please? Thank you.

    Hello

    Please try following steps depending on your operating system

    (Windows)

    (1) close adobe all processes in the Task Manager (Core sync services for the desktop application adobe, adobe office, broker CIB Adobe updater AAM service)

    2) navigate to the following locations and assign all permissions to the adobe folders to the current user.  (Right click on adobe folder select properties then click on the Security tab, click on edit and select current user, that you are connected to, select full control, click on apply and then ok)

    C: / / program data (to view hidden files to see this folder)

    C: / / program files 86 x files / common

    C: / / program files x 86.

    C: / / program files common files

    C: //program files.

    Go to c:/programdata/Adobe and oobe and rename it oobe.old

    Go to c: / / programfiles86x/common files/adobe/and rename the oobe oobe.old and aamupdator to ammupdator.old and delete the folder Adobe application manager

    Go to c: / / Users/username/appdata/local/adobe/rename in oobe to oobe.old and aamupdator.old aamupdator

    Go to Control Panel/Add or remove programs and uninstall cloud creative app

    Install app creative cloud from link according to https://creative.adobe.com/products/creative-cloud

    Run it and it should work.

    (MAC)

    (1) close adobe all processes in the activity monitor (cloud Creative), synchronization of the base, CC, ccx, services for the desktop application adobe, adobe office, CIB Adobe updater AAM Broker service

    2) navigate to the following locations and assign all permissions to the adobe folders to the current user. To navigate, click on go in the bar on then click goto... type/library/application support of / and then click OK.

    (3) to assign the authorization right click on adobe folder and click on Get info... A window will open. Then click on the lock symbol to allow editing. Then click on sign + to add your user name. Then change read only to read and write. Then click gear icon on the bottom and click on apply to the elements included and click ok... Go to the next step then.

    3) navigate to the location following support/adobe application and rename in oobe to oobe.old and aamupdator.old aamupdator.

    (4) place you ~/Library/application support/adobe/oobe and rename in oobe to oobe.old and aamupdator.old aamupdator.

    Cloud creative library and remove 5 open application).

    (6) open utility library of the application itself and delete Adobe application manager and creative cloud

    (7) install creative cloud from link according to https://creative.adobe.com/products/creative-cloud

    (8) launch cc app and it should work properly

  • How to return an * optional * custom http header with a resource model?

    Is it possible to return a http header custom optional with a resource of Apex (v1.1.4) earphone model?

    Reading the documentation does not indicate how this works:
    http://docs.Oracle.com/CD/E21611_01/ doc.11 /e21058/rest_api.htm#BGBDFBJF

    A test, I set up a model of resource to try it. I use the handler method is POST, type is 'PLSQL Block', and my custom settings are:

    Name: personnalisee01
    Aliasing: x-personnalisee01
    Source: header
    Access: EXIT
    Type: String

    PL/SQL block:
    BEGIN
      :custom01 := 'my string';
    END;
    And of course, I get a custom header in the response http like this:
    x-custom01 : my string
    Then, taking a hypothesis that the NULL value for the parameter may cause the listener to Apex do not send the custom header, I changed the PL/SQL this:
    BEGIN
      :custom01 := NULL;
    END;
    This time, however, the url announcement causes Apex listener to return a 500 status and in the log file, I get:
    INFO: null: Invalid column index
    java.sql.SQLException: Invalid column index
    In any case is to make my custom http header exist as an option? The most intuitive way to just return null to the variable binding, but of course, this does not work!

    Thank you
    Jack

    Yes, to be clear, the issue is that binds through comments (- or / * /) are not handled correctly, I have not yet verified, but I think that the problem will occur in 2.0.x so.

  • What to do after the use of reflow

    Hello

    I started using reflow to achieve a responsive design. Although I'm not sure what comes after the use of reflow. Can I get html and css and I should edit them in Adobe Code and will be my Web site?

    Or will I get CSS Media Queries? Or do only CSS? Where can I get just CSS that is messy and that I need to change? How the reflow fits in my Photshop to Adobe Code workflow?

    I hope you guys understand my question, if not, please tell me and ill explain more clearly.

    Thank you

    Mark

    Hi Mark,

    I totally understand what you are looking for.  As of today, I have a couple of these questions that can help.

    First, the initial goal is to help designers to create sensitive compositions that can help receipts communicate their vision of design and behavior tailored to developers and stakeholders.  You might think that this as offering one more web friendly PSD.  We offer CSS extraction in reflow means you can incorporate, during development.  You can choose to use a variety of frames that we could not antisipate in code-gen, causing the code to come into conflict.  Because of these challenges, we take our time to learn the best way to repair as much as possible workflow.

    An alternative at the beginning was recently released by Terry Ryan to allow you to consume by reflow of the files on the media.  Check out his blog here - http://blog.terrenceryan.com/reflow-cleaner/

    Solve some of the challenges Terry stresses and work better product integrations is top of mind for our teams.  If all goes well, we will have more information for you in the coming months.

    Thanks for the post!

  • How can I find places to change color after I visited their?

    the question says:
    Looking for secure downloads that I have to click on more, then look elsewhere if
    There is information that they are safe or not.

    In Internet Explorer, the link to the site would always change color after I had visited it.
    It was great.
    But with my newly installed Firefox Version 12 on my XP re-built, is not. This has caused me
    wrongly visiting some of the same sites repeatedly. That's the bad news that I find
    me starts to download from only to discover I already did and have to go to
    uninstall programs (from Control Panel) to cancel it.

    Is it possible to make this browser tell me what I have already visited sites?

    Thank you
    Tom

    Have you installed SP3 for Windows XP?

Maybe you are looking for

  • HP compaq mini PC mini 110: Please help

    Hi, I got proplem connect my laptop... First ask me password after password verification failed fatal error... System... CNU9319H4C

  • Satellite P300/05Y - how to restore Windows?

    Hello I would like to be able to restore my Toshiba Satellite P300/05Y PSPCCA-05Y01Y to factory default, but I deleted the partition when I went to Linux. What are my options? Download a copy so that I can burn to a CD? I have the key.

  • Unable to connect after the most recent firmware for Microsoft Surface Pro 3 update

    Hi, I upgraded my Surface Pro to Windows 10 2... had no problems connecting to R7000 on band 5G. After upgrade the R7000 firmware to the latest version (V1.0.4.30_1.1.67), I now have problems connecting on the band of 5 G. Tablet must be adjacent to

  • Delete the min and max labels on chart axis markers

    Hello Is it possible to remove the min and max labels on chart axis markers? For example, see the screenshot below. Can I remove the numbers circled in green without changing the range of the axis? In some cases (like this one), the presence of the m

  • upgrade RAM not recognized by BIOS

    I have a pavilion dv6t-3100 Entertainment series that I had upgrade the system RAM to 8 GB to 16 GB.  The system startup stops but so too demand placed on the system.  I see that the BIOS didn't recognize the 16 GB but running system and another diag