Access Denied With Code 400 When Starting Forms or Calling MOD_PLSQL (Doc ID 394587.1)

Last updated on OCTOBER 04, 2016

Applies to:

Oracle Applications Technology Stack - Version 11.5.10.0 to 11.5.10.0 [Release 11.5]
Oracle Solaris on SPARC (32-bit)
Oracle Solaris on SPARC (64-bit)
Solaris Operating System (SPARC 64-bit)Solaris Operating System (SPARC 32-bit)
11.5.10 RUP4 / 11.5.10 having JUL06 CPU patches applied
Checked for relevance on 14-APR-2013

Symptoms

The 11i.ATG_PF.H RUP4 and the JUL06 CPU patches implement new security settings for MOD_PLSQL in the security.conf which is included in the httpd.conf.

When starting a Forms function from the Homepage the Apache server responds with following error in browser:

Access denied with code 400

The Apache log files show an error similar to:

access_log:

111.222.333.444 - - [12/Sep/2006:14:26:56 -0400] "GET /pls/DEV/fnd_icx_launch.launch?resp_app=SYSADMIN&resp_key=SYSTEM_ADMINISTRATOR&secgrp_key=STANDARD&start_func=FND_FNDCPQCR_SYS&other_params= HTTP/1.1" 400 227

 

error_log:

[Tue Sep 12 14:26:56 2006] [error] [client 111.222.333.444] mod_security: Access denied with code 400. Pattern match "!^/pls/[-a-z0-9_]+/!?[a-z](([a-z0-9_\$#]){0,29})(\.[a-z](([a-z0-9_\$#]){0,29})) {0,2}(\?.*){0,1}$" at REQUEST_URI. [hostname "myhost.mydomain"] [uri "/pls/DEV/fnd_icx_launch.launch?resp_app=SYSADMIN&resp_key=SYSTEM_ADMINISTRATOR&secgrp_key=STANDARD&start_func=FND_FNDCPQCR_SYS&other_params="] [unique_id RQb78J67bhEAABQ9UqY]

 

This prevents Forms (and also other MOD_PLSQL calls) to be executed properly...

Changes

Application of 11i.ATG_PF.H RUP4 or JUL06 CPU patches will introduce this, but the 'root cause' is that these actions implement the new security settings

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms