BI Answers users manage in WebLogic 12c. I did find any options in BI answers that allow users to change his/her password. BI answers users need to communicate with WebLogic administrator to change his/her password. In OBIEE10g, there is an option in configuration file to enable change password for BI Answers. Is there any option in OBIEE12c that enable users to change password.
It isn’t an out of the box feature. WebLogic is acting as a lightweight LDAP. See this thread for further information- https://community.oracle.com/tech/apps-infra/discussion/4477102/how-to-enable-user-to-change-the-password-for-their-account-in-obiee-12c
Related
How to create a new user account in OBIEE 12c? What is LDAP?
enter image description here
I go to Application Roles to create a role.
See: Provider Oracle Database (not LDAP)
Honest answer is "it depends".
OBI comes with a security provider which is embedded inside Weblogic where you can manage users and groups.
I say can because that's an approach which Oracle itself does not suggest for production systems. Pretty much every implementation uses some proper enterprise level LDAP or MS Active Directory which is then configured as an additional security provider for the Weblogic backend.
Best first try to understand how security works and then take your decision based on what is the most appropriate for your use case:
https://youtu.be/JUCZwQOmBn8
We have a scenario where we have to assign partial Admin Roles for few users in OIM 11G R2 PS3. The OOTB capabilities that are available in OIM does not meet the requirements. I would like to know if there is any way to add custom capabilities somewhere so that it would be available for me to select the same while creating custom Admin Role before assigning it to the user.
Thanks,
Srini
Here is the documentation for creating new Admin roles https://docs.oracle.com/cd/E52734_01/oim/OMUSG/adminrole_mangmnt.htm#BABBIBJA
My only concern would be with whats available permission-wise it still seems to allow viewability to users details across the board.
Oracle SQL Developer 4.0.1.14
I currently have an Oracle database with a user who contains a set of tables, views, etc. However, I would like this schema to be shared among multiple people with different logins.
My company has a domain and each employee logs into their computers through this domain, for example
COMPANY_NAME/username
I am hoping to be able to use windows authentication to log each user into the database. This way everyone at the company will automatically have a login with a password they are used to.
In Oracle SQL Developer, I have tried ticking "OS Authentication", and received "Invalid username/password" upon testing the connection. Do I need to create an Oracle user for each domain?
I have also tried checking "Use OCI/Thick driver", but it cannot be checked unless "Use Oracle Client" is configured, which I'm also unsure about.
This question appears to be a duplicate:
Windows Authentication to Oracle for domain group, however the tutorial link is dead. I have not been able to find another tutorial for how to set this up anywhere.
There is a server-side parameter called os_authent_prefix that is typically set to OPS$, and the network user id needs to be prefixed with this in addition to having the IDENTIFIED EXTERNALLY option added to the create user statement.
So if your Windows account id is hambone, then your OS-authentication login would be OPS$hambone, and you don't need a password. I used it for years, and it never required the domain to be specified for a Windows account, which was nice because it meant the same credentials worked for my Unix account.
SQL*Plus, for example would look like:
sqlplus OPS$hambone/#myserver
Likewise, connection strings for applications just have nothing for the password.
For Toad, you would put OPS$hambone as userid and leave the password blank. SQL Developer, I'm honestly not sure -- I can't stand it; I use PL/SQL Developer, but with the various options they have I'd imagine you select OS authentication and/or put the OPS$hambone.
Read the caveats/security warnings on OS authentication. I think in a private network the risks are outweighed by the advantages, but that's for you to decide.
Today I have a problem with Oracle.
I have Oracle Label Security (OLS) and Oracle Database Vault installed, but OLS is registered, ODV is not.
Today I register ODV too, and now, I can login to Enterprise Manager with user LBACSYS (of OLS) but when I click to OLS on Security tab, EM show me error :
You have been logged in to a Database with Database Vault installed on it. You do not have sufficient privileges to access the Database Vault features on Enterprise Manager. Please contact your administrator
I don't know how to use OLS with ODV enabled, can you tell me ?
Thanks.
I know that it is possible to use "OS authentication" to authenticate Windows users in Oracle database. The process is basically passing current Windows user id to Oracle for authentication.
The question is - is it possible to authenticate domain group in Oracle (as it is possible with SQL Server integrated security), so that there would be no need to create separate database user for each domain member?
It is possible.
Oracle has a whitepaper on this, and here's a tutorial,
I don't think this is possible, but I would love to be proven wrong.