OraFAQ Forum: Application Express, ORDS & MOD_PLSQL » OS authentication in mod

Home » Developer & Programmer » Application Express, ORDS & MOD_PLSQL » OS authentication in mod_plsql (Oracle 10.1.2.0.8)

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

OS authentication in mod_plsql [message #596464]

Mon, 23 September 2013 10:03

VenkatRaghaven86
Messages: 3
Registered: September 2013
Location: INDIA

Junior Member

Hi All,

Am trying to launch mod_plsql page using OS authenticated DB user (CREATE USER XXXX IDENTIFIED Externally)but stuck up with the configurations to be done in dad.conf file.

The page is working with normally created DB user (CREATE USER XXXX IDENTIFIED BY VALUES 'YYYYYYY') and the configurations in dads.conf is as below:

<Location /path/>
SetHandler pls_handler
Order deny,allow
AllowOverride None
PlsqlDatabaseConnectString ServerName:Port:DB Instance Name
</Location>

Could anyone please suggest me what should be configured in dads.conf for OS authenticated user?

With Regards,
Venkat Raghaven.D
Mob:+91-9962063360

Report message to a moderator

Re: OS authentication in mod_plsql [message #596478 is a reply to message #596464]

Mon, 23 September 2013 12:41

John Watson
Messages: 8960
Registered: January 2010
Location: Global Village

Senior Member

Welcome to the forum. Please read our OraFAQ Forum Guide and please read How to use [code] tags and make your code easier to read

I do not see how it is possible to use OS authentication for a session launched through mod_plsql. The impossibility is that mod_plsql will be running under whatever account launched the Apache web listener on whatever machine Apache happens to be running on, so the OS account will be meaningless to the database. Yes, I know that you could be running Apache on the database server - but the session is still established over a network link, so the database cannot authenticate it as a local OS user. A technology limitation.

I am of course open to correction on this.

Report message to a moderator

Re: OS authentication in mod_plsql [message #596505 is a reply to message #596464]

Tue, 24 September 2013 02:45

VenkatRaghaven86
Messages: 3
Registered: September 2013
Location: INDIA

Junior Member

Thanks for the useful information John!

In such case, is there any alternative approach that you are aware off to overcome this technical limitation?

Something like using a SESSION DB user account to establish the session and allow the other user to view the page?

Regards,
Venkat Raghaven

Report message to a moderator

Re: OS authentication in mod_plsql [message #596517 is a reply to message #596505]

Tue, 24 September 2013 05:33

John Watson
Messages: 8960
Registered: January 2010
Location: Global Village

Senior Member

You seem to be describing the usual situation where you have authentication details embedded in the DAD, and users never authenticate to the database. Just include lines such as this in your dads.conf:

PlsqlDatabaseUsername SCOTT
PlsqlDatabasePassword tiger
PlsqlDatabaseConnectString 127.0.0.1:1521:orcl
PlsqlAuthenticationMode Basic

Report message to a moderator

Re: OS authentication in mod_plsql [message #596659 is a reply to message #596517]

Wed, 25 September 2013 08:35

VenkatRaghaven86
Messages: 3
Registered: September 2013
Location: INDIA

Junior Member

Thank you very much for the above reply John.
The above seems to work fine but doesn't suite my actual purpose because it allows all the users to launch my webpage without any authentication.

The below image represent the current architecture of the application which I developed in MOD_PLSQL.

https://plus.google.com/u/0/110572140611875149373/posts

However I want to develop it as below image wherein users are authenticated against OS or Windows Active directory (via LDAP or etc.).

Is there any way this can be achieved from MOD_PLSQL? Please help me with the same.

With regards
Venkat Raghaven.D

Report message to a moderator

Re: OS authentication in mod_plsql [message #596668 is a reply to message #596659]

Wed, 25 September 2013 10:14

John Watson
Messages: 8960
Registered: January 2010
Location: Global Village

Senior Member

That is all in the docs,
http://docs.oracle.com/cd/E37115_01/index.htm
or you could throw out whatever you have written and do it with APEX instead where it is standard functionality.

Report message to a moderator

Previous Topic:	DATA Entry form
Next Topic:	Oracle Apex Versions - 3.2, 4.1 & 4.2 - Oracle Support

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Wed Dec 04 13:18:59 CST 2024