Publishing Reports to the Web - Downloads - Oracle

Usage Notes
Environment Variables
■ The default value for the environment variable is required for Oracle Reports
executables to function correctly. Additional user classes may be appended, but
the list must conform to the platform-specific Java CLASSPATH definition.
Example
REPORTS_CLASSPATH=%ORACLE_HOME%\reports\jlib\rwbuilder.jar;
%ORACLE_HOME%\reports\jlib\rwrun.jar;%ORACLE_
HOME%\jlib\zrclient.jar;%ORACLE_
HOME%\j2ee\home\oc4j.jar;%ORACLE_HOME%\j2ee\home\lib\ojsp.jar
■ Reports Builder will fail if the value of the REPORTS_CLASSPATH environment
variable (registry) exceeds 511 characters. To workaround this issue, you can use
the CLASSPATH environment variable (system) to specify a value in excess of 511
characters.
B.1.37 REPORTS_COOKIE_EXPIRE *
Description This environment variable specifies the lifetime of a cookie within a
given Reports Server session.
If Single Sign-On is not being used, then any user accessing a secured instance of the
Reports Server is challenged to identify themselves by rwservlet via its own
authentication mechanism (identical to the behavior of Oracle Reports6i). Because the
HTTP 1.0 protocol is stateless (i.e., each call to the server is effectively independent of
all others), users might need to authenticate themselves for each report request unless
a cookie is maintained.
To allow users to authenticate themselves only once per session, rwservlet has its own
client-side cookie, the authid cookie, in which it stores the required authentication
information for the current session. Once the user is authenticated, an encrypted
cookie is created in the browser to enable the user to submit multiple report jobs
without re-authenticating for each request. The authid cookies are terminated when
the user closes their browser session, but you should not rely strictly on this method of
terminating the cookie. You should limit the lifetime of the cookie within a given
session using the REPORTS_COOKIE_EXPIRE environment variable. For example, a
user might log on and then go to lunch, leaving the browser session open. To minimize
the potential for a security breach in this situation, the administrator may define the
REPORTS_COOKIE_EXPIRE environment variable on the Reports Server. When
rwservlet receives a job request, it compares the time saved in the cookie with the
current system time. If the time is longer than the number of minutes defined in the
environment variable (e.g., 30 minutes), the cookie is rejected and the user is
challenged to provide authentication information.
Valid Values Any number of minutes.
Default 30
Note: If you want to force users to authenticate themselves for a
specific report, you can use the SHOWAUTH command line keyword.
Alternatively, you can include a %S in the corresponding report
entry in the key map file. This file is usually called cgicmd.dat
and is located in ORACLE_HOME\reports\conf. %S forces users
to enter their user name and password each time the report is
called.
Reports-Related Environment Variables B-13