[Home] [Help]
66: -------------------------------------------------------------------------------
67: --- REMOVED
68: -- function add_uniquemember(p_ldap_user in fnd_ldap_util.ldap_user_type) return pls_integer is
69: -- translate_ldap_error: Internal
70: -- Will attempt to translate the sqlerrms from an dbms_ldap operation into a FND message
71:
72: -------------------------------------------------------------------------------
73: function translate_ldap_error( errm in varchar2) return varchar2
74: is
300: end if;
301:
302: exception
303: when no_such_user_exp then
304: fnd_message.set_name ('FND', 'FND_SSO_USER_NOT_FOUND');
305: if (fnd_log.LEVEL_EXCEPTION >= fnd_log.G_CURRENT_RUNTIME_LEVEL)
306: then
307: fnd_log.string(fnd_log.LEVEL_EXCEPTION, l_module_source, sqlerrm);
308: end if;
307: fnd_log.string(fnd_log.LEVEL_EXCEPTION, l_module_source, sqlerrm);
308: end if;
309: x_result := fnd_ldap_util.G_FAILURE;
310: when others then
311: fnd_message.set_name ('FND', 'FND_SSO_UNEXP_ERROR');
312: if (fnd_log.LEVEL_EXCEPTION>= fnd_log.G_CURRENT_RUNTIME_LEVEL)
313: then
314: fnd_log.string(fnd_log.LEVEL_EXCEPTION, l_module_source, sqlerrm);
315: end if;
521:
522: exception
523: when invalid_new_user_exp then
524: fnd_ldap_util.c_unbind(ldap,flag);
525: fnd_message.set_name ('FND', 'FND_SSO_INVALID_NEW_USER_NAME');
526: if (fnd_log.LEVEL_EXCEPTION >= fnd_log.G_CURRENT_RUNTIME_LEVEL)
527: then
528: fnd_log.string(fnd_log.LEVEL_EXCEPTION, l_module_source, sqlerrm);
529: end if;
529: end if;
530: x_result := fnd_ldap_util.G_FAILURE;
531: when no_such_user_exp then
532: fnd_ldap_util.c_unbind(ldap,flag);
533: fnd_message.set_name ('FND', 'FND_SSO_USER_NOT_FOUND');
534: if (fnd_log.LEVEL_EXCEPTION >= fnd_log.G_CURRENT_RUNTIME_LEVEL)
535: then
536: fnd_log.string(fnd_log.LEVEL_EXCEPTION, l_module_source, sqlerrm);
537: end if;
536: fnd_log.string(fnd_log.LEVEL_EXCEPTION, l_module_source, sqlerrm);
537: end if;
538: x_result := fnd_ldap_util.G_FAILURE;
539: when others then
540: fnd_message.set_name ('FND', 'FND_SSO_UNEXP_ERROR');
541: if (fnd_log.LEVEL_EXCEPTION >= fnd_log.G_CURRENT_RUNTIME_LEVEL)
542: then
543: fnd_log.string(fnd_log.LEVEL_EXCEPTION, l_module_source, sqlerrm);
544: end if;
1058: raise no_such_user_exp;
1059: end if;
1060: exception
1061: when no_such_user_exp then
1062: fnd_message.set_name ('FND', 'FND_SSO_USER_NOT_FOUND');
1063: if (fnd_log.LEVEL_EXCEPTION >= fnd_log.G_CURRENT_RUNTIME_LEVEL)
1064: then
1065: fnd_log.string(fnd_log.LEVEL_EXCEPTION, l_module_source, sqlerrm);
1066: end if;
1065: fnd_log.string(fnd_log.LEVEL_EXCEPTION, l_module_source, sqlerrm);
1066: end if;
1067: x_result := fnd_ldap_util.G_FAILURE;
1068: when others then
1069: fnd_message.set_name ('FND', 'FND_SSO_UNEXP_ERROR');
1070: if (fnd_log.LEVEL_EXCEPTION >= fnd_log.G_CURRENT_RUNTIME_LEVEL)
1071: then
1072: fnd_log.string(fnd_log.LEVEL_EXCEPTION, l_module_source, sqlerrm);
1073: end if;
1292: end if;
1293:
1294: -- user does not exist in OID
1295: else
1296: fnd_message.set_name('FND', 'FND_SSO_USER_NOT_FOUND');
1297: x_result := fnd_ldap_util.G_FAILURE;
1298: end if;
1299:
1300: if (fnd_log.LEVEL_STATEMENT >= fnd_log.G_CURRENT_RUNTIME_LEVEL)
1500: x_result := delete_uniquemember(l_ldap_session, p_user_guid);
1501:
1502: -- user does not exist in OID
1503: else
1504: fnd_message.set_name('FND', 'FND_SSO_USER_NOT_FOUND');
1505: x_result := fnd_ldap_util.G_FAILURE;
1506: end if;
1507:
1508: -- other users linked
1513: fnd_log.string(fnd_log.LEVEL_STATEMENT, l_module_source, 'Other FND users linked to this OID User');
1514: end if;
1515:
1516: x_result := fnd_ldap_util.G_FAILURE;
1517: fnd_message.set_name ('FND', 'FND_SSO_USER_MULT_LINKED');
1518:
1519: end if;
1520: if ( l_ldap_session is not null) then
1521: fnd_ldap_util.c_unbind(l_ldap_session,dummy);
1808: elsif l_use_proxy=1 then
1809: FND_LDAP_UTIL.c_unbind(ldap,flag);
1810: end if;
1811: l_use_proxy:=0;
1812: fnd_message.set_name ('FND', 'FND_SSO_USER_NOT_FOUND');
1813: if (fnd_log.LEVEL_EXCEPTION >= fnd_log.G_CURRENT_RUNTIME_LEVEL)
1814: then
1815: fnd_log.string(fnd_log.LEVEL_EXCEPTION, l_module_source, sqlerrm);
1816: end if;
1822: FND_LDAP_UTIL.c_unbind(ldap,flag);
1823: end if;
1824: l_use_proxy:=0;
1825:
1826: fnd_message.set_name ('FND', 'FND_SSO_UNEXP_ERROR');
1827: if (fnd_log.LEVEL_EXCEPTION >= fnd_log.G_CURRENT_RUNTIME_LEVEL)
1828: then
1829: fnd_log.string(fnd_log.LEVEL_EXCEPTION, l_module_source, sqlerrm);
1830: end if;
1930: if (fnd_log.LEVEL_EXCEPTION >= fnd_log.G_CURRENT_RUNTIME_LEVEL)
1931: then
1932: fnd_log.string(fnd_log.LEVEL_EXCEPTION, l_module_source, 'error '||l_message||':'||sqlerrm);
1933: end if;
1934: fnd_message.set_name('FND',l_message);
1935: if (l_message='FND_SSO_PASSWORD_POLICY_ERR')
1936: then
1937: fnd_message.set_token('SQLMSG',sqlerrm);
1938: elsif (l_message='FND_SSO_UNEXP_ERROR') then
1933: end if;
1934: fnd_message.set_name('FND',l_message);
1935: if (l_message='FND_SSO_PASSWORD_POLICY_ERR')
1936: then
1937: fnd_message.set_token('SQLMSG',sqlerrm);
1938: elsif (l_message='FND_SSO_UNEXP_ERROR') then
1939: fnd_message.set_token('SQLMSG',sqlerrm);
1940: end if;
1941: return fnd_ldap_util.G_FAILURE;
1935: if (l_message='FND_SSO_PASSWORD_POLICY_ERR')
1936: then
1937: fnd_message.set_token('SQLMSG',sqlerrm);
1938: elsif (l_message='FND_SSO_UNEXP_ERROR') then
1939: fnd_message.set_token('SQLMSG',sqlerrm);
1940: end if;
1941: return fnd_ldap_util.G_FAILURE;
1942: when others then
1943: if (fnd_log.LEVEL_EXCEPTION >= fnd_log.G_CURRENT_RUNTIME_LEVEL)
2102: fnd_log.string(fnd_log.LEVEL_STATEMENT, l_module_source, 'Username: '||p_user_name);
2103: end if;
2104:
2105: if (p_user_name is null or p_password is null ) then
2106: fnd_message.set_name('FND','FND_SSO_USER_PASSWD_EMPTY');
2107: if (fnd_log.LEVEL_UNEXPECTED >= fnd_log.G_CURRENT_RUNTIME_LEVEL)
2108: then
2109: fnd_log.string(fnd_log.LEVEL_UNEXPECTED, l_module_source, 'END: refusing to validate empty username and/or password');
2110: end if;
2118: if (fnd_log.LEVEL_UNEXPECTED >= fnd_log.G_CURRENT_RUNTIME_LEVEL)
2119: then
2120: fnd_log.string(fnd_log.LEVEL_UNEXPECTED, l_module_source, 'END: Null guid in FND_USER for: '||p_user_name);
2121: end if;
2122: fnd_message.set_name('FND','FND_SSO_NOT_LINKED');
2123: return fnd_ldap_util.G_FAILURE;
2124: end if;
2125: exception when no_data_found then
2126: if (fnd_log.LEVEL_PROCEDURE >= fnd_log.G_CURRENT_RUNTIME_LEVEL)
2126: if (fnd_log.LEVEL_PROCEDURE >= fnd_log.G_CURRENT_RUNTIME_LEVEL)
2127: then
2128: fnd_log.string(fnd_log.LEVEL_PROCEDURE, l_module_source, 'END: user not found');
2129: end if;
2130: fnd_message.set_name('FND','FND_SSO_LOGIN_FAILED'); -- do no disclusre the real causeL
2131: return fnd_ldap_util.G_FAILURE;
2132: when others then
2133: if (fnd_log.LEVEL_UNEXPECTED >= fnd_log.G_CURRENT_RUNTIME_LEVEL)
2134: then
2133: if (fnd_log.LEVEL_UNEXPECTED >= fnd_log.G_CURRENT_RUNTIME_LEVEL)
2134: then
2135: fnd_log.string(fnd_log.LEVEL_UNEXPECTED ,l_module_source, 'END with exception: '||sqlcode||'-'||sqlerrm);
2136: end if;
2137: fnd_message.set_name('FND','FND-9914'); -- unexpected error
2138: return fnd_ldap_util.G_FAILURE;
2139: end;
2140:
2141: if (fnd_log.LEVEL_STATEMENT >= fnd_log.G_CURRENT_RUNTIME_LEVEL)
2151: if (fnd_log.LEVEL_UNEXPECTED >= fnd_log.G_CURRENT_RUNTIME_LEVEL)
2152: then
2153: fnd_log.string(fnd_log.LEVEL_UNEXPECTED, l_module_source, 'Guid['||l_user_guid||'] for '||p_user_name||' is not a valid guid');
2154: end if;
2155: fnd_message.set_name('FND','FND_SSO_USER_NOT_FOUND'); -- Carefull, this is INVALID GUID message, wrong acronym though
2156: return fnd_ldap_util.G_FAILURE;
2157: end;
2158:
2159: if (fnd_log.LEVEL_STATEMENT >= fnd_log.G_CURRENT_RUNTIME_LEVEL)
2171: then
2172: fnd_log.string(fnd_log.LEVEL_UNEXPECTED, l_module_source, 'Invalid OiD Setup: host:'||l_host||' port:'||l_port);
2173: end if;
2174:
2175: fnd_message.set_name('FND','FND-9903'); -- OID setup is incomplete
2176: return fnd_ldap_util.G_FAILURE;
2177: end if;
2178:
2179: l_ldap_auth := fnd_preference.get(FND_LDAP_UTIL.G_INTERNAL, FND_LDAP_UTIL.G_LDAP_SYNCH, FND_LDAP_UTIL.G_DBLDAPAUTHLEVEL);
2187: fnd_log.string(fnd_log.LEVEL_UNEXPECTED, l_module_source, 'Invalid Wallet Setup: authLEvel:'
2188: ||l_ldap_auth||' url:'||l_db_wlt_url||' pwd:'||l_db_wlt_url);
2189: end if;
2190:
2191: fnd_message.set_name('FND','FND-9903'); -- OID setup is incomplete
2192: return fnd_ldap_util.G_FAILURE;
2193: end if;
2194: else
2195: if (fnd_log.LEVEL_STATEMENT>= fnd_log.G_CURRENT_RUNTIME_LEVEL)
2207: if (fnd_log.LEVEL_UNEXPECTED>= fnd_log.G_CURRENT_RUNTIME_LEVEL)
2208: then
2209: fnd_log.string(fnd_log.LEVEL_UNEXPECTED, l_module_source, 'Cannot contact OID (init failed) at '||l_host||':'||l_port||':'||sqlcode||'-'||sqlerrm);
2210: end if;
2211: fnd_message.set_name('FND','FND_SSO_SYSTEM_NOT_AVAIL');
2212: return fnd_ldap_util.G_FAILURE;
2213: when others then
2214: raise;
2215: end;
2223: then
2224: fnd_log.string(fnd_log.LEVEL_UNEXPECTED, l_module_source,' Cannot establish SSL channel to OiD: '||sqlcode||'-'||sqlerrm);
2225: end if;
2226:
2227: fnd_message.set_name('FND','FND_SSO_INV_AUTH_MODE'); -- Invalid SSL authcode... it is enouggh description
2228: return fnd_ldap_util.G_FAILURE;
2229: end;
2230:
2231: if (fnd_log.LEVEL_STATEMENT>= fnd_log.G_CURRENT_RUNTIME_LEVEL)
2246: l_message := sqlerrm;
2247: -- first we check if the password is real,
2248:
2249: if (instr(l_message,':9000:')>0 )then
2250: fnd_message.set_name('FND','FND_SSO_PASSWORD_EXPIRED'); --Your account is locked
2251: if (fnd_log.LEVEL_STATEMENT>= fnd_log.G_CURRENT_RUNTIME_LEVEL)
2252: then
2253: fnd_log.string(fnd_log.LEVEL_STATEMENT, l_module_source, 'OiD account password expired ');
2254: end if;
2252: then
2253: fnd_log.string(fnd_log.LEVEL_STATEMENT, l_module_source, 'OiD account password expired ');
2254: end if;
2255: elsif (instr(l_message,':9001:')>0 )then
2256: fnd_message.set_name('FND','FND_SSO_LOCKED'); --Your account is locked
2257: if (fnd_log.LEVEL_STATEMENT>= fnd_log.G_CURRENT_RUNTIME_LEVEL)
2258: then
2259: fnd_log.string(fnd_log.LEVEL_STATEMENT, l_module_source, 'OiD account locked');
2260: end if;
2269: if (fnd_log.LEVEL_STATEMENT>= fnd_log.G_CURRENT_RUNTIME_LEVEL)
2270: then
2271: fnd_log.string(fnd_log.LEVEL_STATEMENT, l_module_source, 'OiD account is disabled');
2272: end if;
2273: fnd_message.set_name('FND','FND_SSO_USER_DISABLED'); --Your account is disabled
2274: elsif (instr(l_message,':9053:')>0) then
2275: if (fnd_log.LEVEL_STATEMENT>= fnd_log.G_CURRENT_RUNTIME_LEVEL)
2276: then
2277: fnd_log.string(fnd_log.LEVEL_STATEMENT, l_module_source, 'OiD account is not active: today is out of [start,end] dates ');
2275: if (fnd_log.LEVEL_STATEMENT>= fnd_log.G_CURRENT_RUNTIME_LEVEL)
2276: then
2277: fnd_log.string(fnd_log.LEVEL_STATEMENT, l_module_source, 'OiD account is not active: today is out of [start,end] dates ');
2278: end if;
2279: fnd_message.set_name('FND','FND_SSO_NOT_ACTIVE'); --Your account not active. Either past end_date or future start_date
2280: else --unknown reason
2281: if (fnd_log.LEVEL_STATEMENT>= fnd_log.G_CURRENT_RUNTIME_LEVEL)
2282: then
2283: fnd_log.string(fnd_log.LEVEL_STATEMENT, l_module_source, 'cannot bind because:'||l_message);
2282: then
2283: fnd_log.string(fnd_log.LEVEL_STATEMENT, l_module_source, 'cannot bind because:'||l_message);
2284: end if;
2285: -- maybe is not the reason, but it is enough for return , I guess
2286: fnd_message.set_name('FND','FND_APPL_LOGIN_FAILED'); -- invalid username password
2287: end if;
2288:
2289: else
2290: if (fnd_log.LEVEL_STATEMENT>= fnd_log.G_CURRENT_RUNTIME_LEVEL)
2291: then
2292: fnd_log.string(fnd_log.LEVEL_STATEMENT, l_module_source, 'OiD password did not match');
2293: end if;
2294: -- maybe is not the reason, but it is enough for return , I guess
2295: fnd_message.set_name('FND','FND_APPL_LOGIN_FAILED'); -- invalid username password
2296: end if;
2297: end if;
2298: if (fnd_log.LEVEL_PROCEDURE>= fnd_log.G_CURRENT_RUNTIME_LEVEL)
2299: then
2320: if (fnd_log.LEVEL_UNEXPECTED>= fnd_log.G_CURRENT_RUNTIME_LEVEL)
2321: then
2322: fnd_log.string(fnd_log.LEVEL_UNEXPECTED, l_module_source, 'END: unexpected '||sqlcode||' - '||sqlerrm);
2323: end if;
2324: fnd_message.set_name('FND','FND-9914'); -- unexpected error
2325: return fnd_ldap_util.G_FAILURE;
2326: end validate_login;
2327:
2328:
2861:
2862: IF (fnd_log.LEVEL_EXCEPTION >= fnd_log.G_CURRENT_RUNTIME_LEVEL) THEN
2863: fnd_log.string(fnd_log.LEVEL_EXCEPTION, l_module_source, 'Error creating ldap user "' ||p_ldap_user.user_name||'" ' ||' Incorrect configuration' );
2864: END IF;
2865: fnd_message.set_name ('FND', 'FND-9903');
2866: RETURN fnd_ldap_util.G_FAILURE;
2867:
2868: WHEN duplicate_dn_EXCEPTION THEN
2869: if l_session_flag = true then
2879:
2880: IF (fnd_log.LEVEL_EXCEPTION >= fnd_log.G_CURRENT_RUNTIME_LEVEL) THEN
2881: fnd_log.string(fnd_log.LEVEL_EXCEPTION, l_module_source, 'Error creating ldap user "' ||p_ldap_user.user_name||'" ' ||' DN already exists [DN:'||p_ldap_user.dn ||']' );
2882: END IF;
2883: fnd_message.set_name ('FND', 'FND_SSO_USER_EXISTS');
2884: RETURN fnd_ldap_util.G_FAILURE;
2885: WHEN duplicate_username_EXCEPTION THEN
2886: if l_session_flag = true then
2887: if (fnd_log.LEVEL_ERROR >= fnd_log.G_CURRENT_RUNTIME_LEVEL) then
2896:
2897: IF (fnd_log.LEVEL_EXCEPTION >= fnd_log.G_CURRENT_RUNTIME_LEVEL) THEN
2898: fnd_log.string(fnd_log.LEVEL_EXCEPTION, l_module_source, 'Error creating ldap user "' ||p_ldap_user.user_name||'" ' ||' username already exists [guid:'||p_ldap_user.user_guid||']' );
2899: END IF;
2900: fnd_message.set_name ('FND', 'FND_SSO_USER_EXISTS');
2901: RETURN fnd_ldap_util.G_FAILURE;
2902: WHEN link_create_failed_EXCEPTION THEN
2903: if l_session_flag = true then
2904: if (fnd_log.LEVEL_ERROR >= fnd_log.G_CURRENT_RUNTIME_LEVEL) then
2913:
2914: IF (fnd_log.LEVEL_EXCEPTION>= fnd_log.G_CURRENT_RUNTIME_LEVEL) THEN
2915: fnd_log.string(fnd_log.LEVEL_EXCEPTION, l_module_source, 'Error creating sunscriptions for "'||p_ldap_user.user_name||'" guid:'||p_ldap_user.user_guid );
2916: END IF;
2917: fnd_message.set_name('FND','FND_SSO_LINK_USER_FAILED');
2918: RETURN fnd_ldap_util.G_FAILURE;
2919: WHEN OTHERS THEN
2920: if l_session_flag = true then
2921: if (fnd_log.LEVEL_ERROR >= fnd_log.G_CURRENT_RUNTIME_LEVEL) then
3125: x_result := fnd_ldap_util.G_SUCCESS;
3126: END IF;
3127: END IF;
3128: ELSE
3129: fnd_message.set_name ('FND', 'FND_SSO_USER_EXISTS');
3130: END IF;
3131: IF (fnd_log.LEVEL_STATEMENT >= fnd_log.G_CURRENT_RUNTIME_LEVEL) THEN
3132: fnd_log.string(fnd_log.LEVEL_STATEMENT, l_module_source, 'End');
3133: END IF;