{"id":1135,"date":"2009-04-06T14:02:21","date_gmt":"2009-04-06T18:02:21","guid":{"rendered":"http:\/\/onlineappsdba.com\/index.php\/2009\/04\/06\/ebs-11i-application-access-control\/"},"modified":"2009-04-06T14:02:21","modified_gmt":"2009-04-06T18:02:21","slug":"ebs-11i-application-access-control","status":"publish","type":"post","link":"https:\/\/onlineappsdba.com\/index.php\/2009\/04\/06\/ebs-11i-application-access-control\/","title":{"rendered":"EBS 11i Application Access Control"},"content":{"rendered":"

Limiting Users from Specific IP to Access EBS.<\/strong><\/font><\/p>\n

Business need here is to allow certain IPs only to access e-business suite, Bellow mentioned is a very common way,<\/font><\/p>\n

<Directory \/>
\nOrder allow,deny
\nAllow from 10.172.152.114 10.171.145.134
\n<\/Directory><\/font><\/p>\n

This will serve our purpose, but there are two main issues<\/strong><\/font><\/p>\n

1) When running Autoconfig, these changes will be reverted back.
\n2) When you make the changes in httpd.conf it will only affect the document root. i.e.
\nhttp:\/\/server.domain:port<\/font><\/p>\n

But any IP users will still have access to bellow OH_HTML url, and they can easily login
\nhttp:\/\/server.domain:port\/OA_HTML\/AppsLocalLogin.jsp<\/font><\/p>\n

So here is a better solution<\/strong><\/font><\/p>\n

– Edit apps.conf and add a list of ip addresses for the users that you want to have access to the system<\/font><\/p>\n

Alias\u00a0\u00a0 \/OA_HTML\/\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 “\/u01\/applmgr\/common\/html”
\n<Location \/OA_HTML\/>
\nOrder allow,deny
\nAllow from 10.197.114.232
\nAllow from 10.197.114.233
\nAllow from 10.197.114.234
\nAllow from 10.197.114.235
\nAllow from 10.197.114.236
\nAllow from 10.197.114.237
\nAllow from localhost
\nAllow from aprx05.clotix.com
\nAllow from aprx05
\n<\/Location><\/font><\/p>\n

Note, you need to include localhost and your middle tier servername. in my case this is aprx05.clotix.com<\/font><\/p>\n

After bouncing apache only the users who are using the ip’s added will have access. All other users will get a forbidden error.<\/font><\/p>\n

Even you can change forbidden error message by doing this<\/strong><\/font><\/p>\n

edit httpd.conf
\nuncomment the ErrorDocument 403 line
\nchange it to something like
\nErrorDocument 403 “Forbidden oops, you cannot access the production instance as it is pek business hours certain users have access.<\/font><\/p>\n

Bounce apache. Users will now receive the above message when they attempt to login.<\/font><\/p>\n

Now lets make it autoconfig enable<\/strong><\/font><\/p>\n

1- Get the template name and version for httpd.conf file using following command:
\n$adident Header $IAS_ORACLE_HOME\/Apache\/Apache\/conf\/apps.conf<\/font><\/p>\n

You will get something like this
\n$Header apps_ux.conf 115.52 2006\/05\/29 08:50:04 mmanku ship $<\/font><\/p>\n

2- Go to $FND_TOP\/admin\/template<\/font><\/p>\n

3- Create new directory named ” custom “<\/font><\/p>\n

4- Copy from ($FND_TOP\/admin\/template) the file name of the template you get in step 1 (eg. apps_ux.conf ) to the new ” custom ” directory<\/font><\/p>\n

5- Go to ” custom ” directory and edit the copied template and add above mentioned OH_HTML apps.conf entry to template.<\/font><\/p>\n

6- Save changes and exit.<\/font><\/p>\n

Now the changes are autoconfig enabled.<\/font><\/p>\n

Reference Note: 270519.1<\/font><\/p>\n","protected":false},"excerpt":{"rendered":"

Limiting Users from Specific IP to Access EBS. Business need here is to allow certain IPs only to access e-business […]<\/p>\n","protected":false},"author":115,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[37],"tags":[251,250,252,253],"class_list":["post-1135","post","type-post","status-publish","format-standard","hentry","category-security","tag-apps_uxconf","tag-appsconf","tag-block-ip","tag-forbidden-error"],"yoast_head":"\nEBS 11i Application Access Control -<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/onlineappsdba.com\/index.php\/2009\/04\/06\/ebs-11i-application-access-control\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"EBS 11i Application Access Control -\" \/>\n<meta property=\"og:description\" content=\"Limiting Users from Specific IP to Access EBS. Business need here is to allow certain IPs only to access e-business […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/onlineappsdba.com\/index.php\/2009\/04\/06\/ebs-11i-application-access-control\/\" \/>\n<meta property=\"article:published_time\" content=\"2009-04-06T18:02:21+00:00\" \/>\n<meta name=\"author\" content=\"Masroof Ahmad\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Masroof Ahmad\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2009\/04\/06\/ebs-11i-application-access-control\/\",\"url\":\"https:\/\/onlineappsdba.com\/index.php\/2009\/04\/06\/ebs-11i-application-access-control\/\",\"name\":\"EBS 11i Application Access Control -\",\"isPartOf\":{\"@id\":\"https:\/\/onlineappsdba.com\/#website\"},\"datePublished\":\"2009-04-06T18:02:21+00:00\",\"author\":{\"@id\":\"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb\"},\"breadcrumb\":{\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2009\/04\/06\/ebs-11i-application-access-control\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/onlineappsdba.com\/index.php\/2009\/04\/06\/ebs-11i-application-access-control\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2009\/04\/06\/ebs-11i-application-access-control\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/onlineappsdba.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"EBS 11i Application Access Control\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/onlineappsdba.com\/#website\",\"url\":\"https:\/\/onlineappsdba.com\/\",\"name\":\"\",\"description\":\"Oracle Implementation & Training Experts\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/onlineappsdba.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb\",\"name\":\"Masroof Ahmad\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/onlineappsdba.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g\",\"caption\":\"Masroof Ahmad\"},\"url\":\"https:\/\/onlineappsdba.com\/index.php\/author\/masroof\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"EBS 11i Application Access Control -","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/onlineappsdba.com\/index.php\/2009\/04\/06\/ebs-11i-application-access-control\/","og_locale":"en_US","og_type":"article","og_title":"EBS 11i Application Access Control -","og_description":"Limiting Users from Specific IP to Access EBS. Business need here is to allow certain IPs only to access e-business […]","og_url":"https:\/\/onlineappsdba.com\/index.php\/2009\/04\/06\/ebs-11i-application-access-control\/","article_published_time":"2009-04-06T18:02:21+00:00","author":"Masroof Ahmad","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Masroof Ahmad","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/onlineappsdba.com\/index.php\/2009\/04\/06\/ebs-11i-application-access-control\/","url":"https:\/\/onlineappsdba.com\/index.php\/2009\/04\/06\/ebs-11i-application-access-control\/","name":"EBS 11i Application Access Control -","isPartOf":{"@id":"https:\/\/onlineappsdba.com\/#website"},"datePublished":"2009-04-06T18:02:21+00:00","author":{"@id":"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb"},"breadcrumb":{"@id":"https:\/\/onlineappsdba.com\/index.php\/2009\/04\/06\/ebs-11i-application-access-control\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/onlineappsdba.com\/index.php\/2009\/04\/06\/ebs-11i-application-access-control\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/onlineappsdba.com\/index.php\/2009\/04\/06\/ebs-11i-application-access-control\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/onlineappsdba.com\/"},{"@type":"ListItem","position":2,"name":"EBS 11i Application Access Control"}]},{"@type":"WebSite","@id":"https:\/\/onlineappsdba.com\/#website","url":"https:\/\/onlineappsdba.com\/","name":"","description":"Oracle Implementation & Training Experts","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/onlineappsdba.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb","name":"Masroof Ahmad","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/onlineappsdba.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g","caption":"Masroof Ahmad"},"url":"https:\/\/onlineappsdba.com\/index.php\/author\/masroof\/"}]}},"_links":{"self":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/posts\/1135","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/users\/115"}],"replies":[{"embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/comments?post=1135"}],"version-history":[{"count":0,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/posts\/1135\/revisions"}],"wp:attachment":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/media?parent=1135"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/categories?post=1135"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/tags?post=1135"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}