Access Denied With Code 400 When Starting Forms or Calling MOD_PLSQL

(Doc ID 394587.1)

Last updated on OCTOBER 04, 2016

Applies to:

Oracle Applications Technology Stack - Version to [Release 11.5]
Oracle Solaris on SPARC (32-bit)
Oracle Solaris on SPARC (64-bit)
Solaris Operating System (SPARC 64-bit)Solaris Operating System (SPARC 32-bit)
11.5.10 RUP4 / 11.5.10 having JUL06 CPU patches applied
Checked for relevance on 14-APR-2013


The 11i.ATG_PF.H RUP4 and the JUL06 CPU patches implement new security settings for MOD_PLSQL in the security.conf which is included in the httpd.conf.

When starting a Forms function from the Homepage the Apache server responds with following error in browser:

Access denied with code 400

The Apache log files show an error similar to:


111.222.333.444 - - [12/Sep/2006:14:26:56 -0400] "GET /pls/DEV/fnd_icx_launch.launch?resp_app=SYSADMIN&resp_key=SYSTEM_ADMINISTRATOR&secgrp_key=STANDARD&start_func=FND_FNDCPQCR_SYS&other_params= HTTP/1.1" 400 227



[Tue Sep 12 14:26:56 2006] [error] [client 111.222.333.444] mod_security: Access denied with code 400. Pattern match "!^/pls/[-a-z0-9_]+/!?[a-z](([a-z0-9_\$#]){0,29})(\.[a-z](([a-z0-9_\$#]){0,29})) {0,2}(\?.*){0,1}$" at REQUEST_URI. [hostname "myhost.mydomain"] [uri "/pls/DEV/fnd_icx_launch.launch?resp_app=SYSADMIN&resp_key=SYSTEM_ADMINISTRATOR&secgrp_key=STANDARD&start_func=FND_FNDCPQCR_SYS&other_params="] [unique_id RQb78J67bhEAABQ9UqY]


This prevents Forms (and also other MOD_PLSQL calls) to be executed properly...


Application of 11i.ATG_PF.H RUP4 or JUL06 CPU patches will introduce this, but the 'root cause' is that these actions implement the new security settings


Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms