Access Denied With Code 400 When Starting Forms or Calling MOD_PLSQL
(Doc ID 394587.1)
Last updated on APRIL 04, 2025
Applies to:
Oracle E-Business Suite Technology Stack - Version 11.5.10.0 to 11.5.10.0 [Release 11.5]Oracle Solaris on SPARC (32-bit)
Oracle Solaris on SPARC (64-bit)
Solaris Operating System (SPARC 64-bit)Solaris Operating System (SPARC 32-bit)
11.5.10 RUP4 / 11.5.10 having JUL06 CPU patches applied
Symptoms
The 11i.ATG_PF.H RUP4 and the JUL06 CPU patches implement new security settings for MOD_PLSQL in the security.conf which is included in the httpd.conf.
When starting a Forms function from the Homepage the Apache server responds with following error in browser:
Access denied with code 400
The Apache log files show an error similar to:
access_log:
<ip address> - - [12/Sep/2006:14:26:56 -0400] "GET /pls/DEV/fnd_icx_launch.launch?resp_app=SYSADMIN&resp_key=SYSTEM_ADMINISTRATOR&secgrp_key=STANDARD&start_func=FND_FNDCPQCR_SYS&other_params= HTTP/1.1" 400 227
error_log:
[Tue Sep 12 14:26:56 2006] [error] [client <ip address>] mod_security: Access denied with code 400. Pattern match "!^/pls/[-a-z0-9_]+/!?[a-z](([a-z0-9_\$#]){0,29})(\.[a-z](([a-z0-9_\$#]){0,29})) {0,2}(\?.*){0,1}$"at REQUEST_URI. [hostname "myhost.mydomain"] [uri "/pls/DEV/fnd_icx_launch.launch?resp_app=SYSADMIN&resp_key=SYSTEM_ADMINISTRATOR&secgrp_key=STANDARD&start_func=FND_FNDCPQCR_SYS&other_params="][unique_id RQb78J67bhEAABQ9UqY]
This prevents Forms (and also other MOD_PLSQL calls) to be executed properly...
Changes
Application of 11i.ATG_PF.H RUP4 or JUL06 CPU patches will introduce this, but the 'root cause' is that these actions implement the new security settings
Cause
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
| Symptoms |
| Changes |
| Cause |
| Solution |
| References |