Tuesday, July 14, 2009

Preventing access via "/forms/frmservlet/" in Release 12

Document a procedure to prevent end users from accessing the Forms "BackDoor" via
/forms/frmservlet/


If you wish to block access to the Form's "back door" which is permitted in your instance by invoking
http://server.domain.port/forms/frmservlet/

Here is the reset procedure to prevent such access:
[ Please use the name of your $FND_SECURE/ DBC file ]

A. Stop services with adstpall.sh


B. Execute these commands in order

1. java oracle.apps.fnd.security.AdminAppServer apps/apps AUTHENTICATION OFF DBC=$FND_SECURE/VIS.dbc

2. java oracle.apps.fnd.security.AdminAppServer apps/apps AUTHENTICATION ON DBC=$FND_SECURE/VIS.dbc

3. java oracle.apps.fnd.security.AdminAppServer apps/apps AUTHENTICATION SECURE DBC=$FND_SECURE/VIS.dbc

C. Restart services with adstrtal.sh

D. Test your access with forms/frmservlet/
http://server.domain.port/forms/frmservlet/

1 comment:

tikitodo said...

there are many ways of repair corrupted pdf files, try this application if you’d like to get better results