- Sharing Knowledge on Oracle E-Business Suite Applications, Database, Fusion Middleware !!!
Monday, May 12, 2008
How to setup Password Security?
Signon Password Failure Limit The Signon Password Failure Limit profile option determines the maximum number of login attempts before the user's account is disabled. Users cannot see or update this profile option. The internal name for this profile option is SIGNON_PASSWORD_FAILURE_LIMIT. Signon Password Hard to Guess The Signon Password Hard to Guess profile option sets rules for choosing passwords to ensure that they will be "hard to guess." A password is considered hard-to-guess if it follows these rules: . The password contains at least one letter and at least one number. . The password does not contain the username. . The password does not contain repeating characters. Users can see but not update this profile option. The internal name for this profile option is SIGNON_PASSWORD_HARD_TO_GUESS. Signon Password Length Signon Password Length sets the minimum length of an Applications signon password. If no value is entered the minimum length defaults to 5. Users can see but not update this profile option. The internal name for this profile option is SIGNON_PASSWORD_LENGTH. Signon Password No Reuse This profile option specifies the number of days that a user must wait before being allowed to reuse a password. Users can see but not update this profile option. The internal name for this profile option is SIGNON_PASSWORD_NO_REUSE. Signon Password Case This profile option is not available from the beginning. With 11i.ATG_PF.H RUP3 comes the system profile 'Password Case Option' After 11i.ATG_PF.H.RUP4 this system profile option was renamed to 'Signon Password Case'. There are two settings: 'Sensitive' and 'Insensitive'. The default is 'Insensitive'. Setting this profile option to 'Sensitive' will make the password case sensitive. 'Mixed' is no longer supported. These profiles should only be set at Site level. They can be set at other levels, such as User or Responsibility. However, when logging in there is no User context, so if a User is prompted to change their password at login, the profiles are only evaluated at site level. Once logged in and resetting passwords using Preferences->Change Password, or the Security ->User->Define form these other levels will have effect and will confuse the issue. So these profiles should only be set at Site level, for consistent enforcement. |
Labels:
11i / R12
Saturday, May 10, 2008
How to compile invalid objects in an APPS Environment
Applying Patches can create invalid objects. To get a quick count of the number of existing invalids (if any), use the following select statement :SELECT COUNT(*) For a more detailed query, use the following script : SELECT OWNER, OBJECT_TYPE, COUNT(*) To recompile an individual object, connect to SQL*PLUS as the owner of the object (generally apps) and use one of the following depending on the object type : alter package <package_name> compile; (package specification) If the object compiles with warnings, use either of the following to see the errors that caused the warnings : ORselect * from user_errors where name = '<OBJECT_NAME>'; Another way to correct invalid objects is to run the adadmin utility as follows: UNIX OPERATING PLATFORM 1. Log in as APPS User : <applmgr username>/<applmgr password> 2. Start the adadmin-Utility from the Unix prompt with this command : adadmin The utility will then ask you a series of questions. 3. Under the Maintain Applications Database Objects Menu, select Compile APPS schema(s) This task spawns parallel workers to compile invalid database objects in your APPS schema(s). It uses the same parallel phases as AutoInstall. Also try running $ORACLE_HOME/rdbms/admin/utlrp.sql ( as sysdba ) Within Applications, there is a script to compile INVALID objects - called ADCOMPSC.pls Arguments for ADCOMPSC.pls : 1 - Schema to run in 2 - Password for schema 3 - Check errors for objects starting with #3 NOTE: The order in which to compile Invalid Objects in schemas is SYS, SYSTEM, APPS and then all others. APPS_DDL and APPS_ARRAY_DDL should exist in all schema's. In case of an ORA-1555 error while running adcompsc.pls, restart the script. The script can be run as followed : cd $AD_TOP/sql Example : SQL> @adcompsc.pls apps apps % After the script completes, check for invalid objects again. If the number has decreased, but invalid objects still exist, run adcompsc.pls again. Keep running adcompsc.pls until number of invalid objects stops decreasing. If there are any objects still left INVALID, verify them by using the script 'aderrchk.sql' to record the remaining INVALID objects. 'Aderrchk.sql' uses the same syntax as 'adcompsc.pls'. This script is also supplied with the Applications. Send the aderrchk.sql to a file using the spool <file> command in sqlplus. e.g. sqlplus x/y @aderrchk.sql SCHEMA_NAME SCHEMA_PASSWORD % For objects which will not compile, try the following : select text This script will provide the script that creates the packages/recreates the packages. SQL>@packageheader select text |
Labels:
11i / R12
Subscribe to:
Posts (Atom)