EBS : Restrict Specific users to access E-Business Suit R12

Solution:

1. Edit file $ORA_CONFIG_HOME/10.1.3/Apache/Apache/conf/custom.conf and add a list of ip addresses for the users that you want to allow access to the system. When autoconfig is run the values in the custom.conf is preserved.

Example:
<Location ~ "/OA_HTML">
Order deny,allow
Deny from all
Allow from test0.local.com
Allow from test1.local.com
Allow from test2.local.com
Allow from test3.local.com
Allow from localhost
Allow from <appsTier Full hostname>
Allow from <appTier host>
</Location>

Include localhost and your apps tier server name. Its better to use the PC name instead of IP addresses as the IP address may change

3. Restart Apache server

4.Users whose IP addresses are assigned will have access. All other users will get a forbidden error message as below when they attempt to login.

ERROR Message:

Forbidden

You don't have permission to access /OA_HTML/RF.jsp on this server.