Preventing access via "/forms/frmservlet/" in Release 12

Oracle Applications Technology Stack - Version: 10.1.2
Information in this document applies to any platform.
Goal

Document a procedure to prevent end users from accessing the Forms "BackDoor" via /forms/frmservlet/

Solution

If you wish to block access to the Form's "back door" which is permitted in your instance by invoking

http://server.domain.port/forms/frmservlet/



Here is the reset procedure to prevent such access:

[ Please use the name of your $FND_SECURE/  DBC file ]



A. Stop services with adstpall.sh

B. Execute these commands in order

1. java oracle.apps.fnd.security.AdminAppServer apps/apps AUTHENTICATION OFF DBC=$FND_SECURE/VIS.dbc

2. java oracle.apps.fnd.security.AdminAppServer apps/apps AUTHENTICATION ON DBC=$FND_SECURE/VIS.dbc

3. java oracle.apps.fnd.security.AdminAppServer apps/apps AUTHENTICATION SECURE DBC=$FND_SECURE/VIS.dbc


C. Restart services with adstrtal.sh

D. Test your access with forms/frmservlet/

     http://server.domain.port/forms/frmservlet/