Force User to Change Password with Shared Services authentication

Hi Everybody,
is there a way to set a property that user needs to change his password when he connect's the first time to web analysis?
Version is 9.3
Thank you very much in advance.
Best Regards
//nois

Hi,
thank you very much for the quick reply.
So we migrated 200 users (which got a new password from the externalise process) they need to send a password the whish to have?!
Thats not really nice :D
Best Regards
Thomas

Similar Messages

How force users to change passwords every 60 days

Hi,
We're running ebs 12 and would like to know which profile option to set at the site level to force the passwords for all users to expire every 60 days.
We don't want to expire the database user passwords, just the application user password in ebusiness.
Kind regards,
dula

Are you looking all users to reset their password at once ? If not, as and when you define users (I assume you don't define users in large volumes daily), you can set this to 60. Assuming you've set this policy today (to expire passwords every 60 days) and wish to update this in the database for all users, the update statement that you've specified is correct (with suitable WHERE clause). For all new users, you've got to define this when defining the users, though !

Windows 2008 Terminal Server "user must change password at next logon" problem with Windows 7 client.

Hi,
I have a fully patched Windows 2008 SP2 Terminal Server and a fully patched Windows 7 client.
I have logged into the Windows 2008 SP2 Terminal Server server with a test account via RDC before.
When I try to log in via RDC to the 2008 TS with a test account which has been marked with the setting "User must change password at next logon" I get the RDC message "You must change your password before logging on the first time. For assistance, contact your system administrator or technical support." I need to force the user to change their password once it has been issued, any ideas on how this can be done?
Thanks,
Dan

This does not resolve my issue all the way. I'm having the same problem; When i'm "deploying" users, i always want the users to set their own passwords. Ok, so I then set the auth mode to "RDP Security layer". It seemed to work fine, and it does for that
special purpose.
Just like Daniel, my clients are connecting to our terminal server from several/different "customer-domains" So, they can't logon locally(on their local computer) and change their password, it has to be done THROUGH the terminal server.
But if I turn on RDP Security Layer, users can't use remoteapp through tsgw they only get: "Your Remote Desktop Connection Failed because the remote computer cannot be authenticated" Any ideas?
Also, our terminal servers is round robin based in a farm. So users connect to: tsfarm.domain.com(yes, public a-record which resolves to two internal adresses) This is because, we're using a wilcard *.domain.com as SSL certificate.
But, when i'm using this, our clients sometimes get double auth when they login. I only get the double auth when tsfarm.domain.com resolves to server A, but the session broker wants the user to be on server B.(load balancing)
This does not occur when SSL is enforced, any ideas?

IOP 11.1.2.0 integration with Shared Services (User Provisioning)

In the IOP 11.1.2.0 install guide, the Admin and Admin provisioning roles are provisioned through Shared Services.
"Provision Integrated Operational Planning Administrator and Integrated Operational Planning
Provisioning Manager roles for the Integrated Operational Planning instance to the Admin user through
Oracle's Hyperion® Shared Services Console
a. Connect to the Oracle's Hyperion® Shared Services Console; for example, http://
hss_server:hssserver_port/interop.
b. Log in as the administrator.
c. Expand User Directories and Native Directory.
d. Select Users and click Search.
e. Right-click the Admin user and select Provision.
f. Expand Default Application Group.
g. Expand the Integrated Operational Planning instance created.
h. Highlight IOP Administrator and Provisioning Manager.
i. Click the right arrow in the middle of the two windows to select the roles.
j. Click Save, and then click OK."
The users and groups are defined in Shared Services, per the IOP 11.1.2.0 admin guide (p. 144).
Is there an IOP user provisioning example in the shared services user's guide, and which version of the guide would I find that in?
Access priveledges are controlled from the Admin workbench for IOP users, per p.145 of the IOP 11.1.2.00 user's guide.
Thank you.

IOP Roles are listed in the 11.1.2 Shared Services User and Role Security Guide, on page 158:
Integrated Operational Planning Roles
Table 39 Integrated Operational Planning Roles
Roles Tasks per Role
Provisioning Manager Provisions users and groups with Disclosure Management roles
IOP Administrator Administers Oracle Integrated Operational Planning, Fusion Edition. IOP Administrators can modify models, access
ACL pages, and perform all Integrated Operational Planning tasks
IOP User P erforms Oracle Integrated Operational Planning, Fusion Edition actions as a normal user

MSAD Configuration with Shared Services

Hi,
I have just sucessfully configured MSAD to the HFM SS but 1 concern is that anyone with the domain suer login is able to login to shared service although limited function are available. Is there anyway to control other users except my users to login?
I do not want to use Native to create user as it will means another set of password to rememberr for the users, would prefer they use their normal domain accoutn to login.
Thanks

In addition to other comments, users can only make changes in Shared Services if they have Shared services roles assigned. Also, we use MSAD with both local and AD groups, and as long as you know the effective rights, it works out fine either way. The Shared services roles are listed below (Security Administrator's Guide pp 135-136):
Administrator: Provides control over all products that integrate with Shared Services. It enables more
control over security than any other Hyperion product roles and should therefore be
assigned sparingly. Administrators can perform all administrative tasks in User
Management Console and can provision themselves.
This role grants broad access to all applications registered with Shared Services. The
Administrator role is, by default, assigned to the admin Native Directory user, which is
the only user available after you deploy Shared Services.
Directory Manager: Creates and manages users and groups within Native Directory.
Do not assign to Directory Managers the Provisioning Manager role because combining
these roles allows Directory Managers to provision themselves.
The recommended practice is to grant one user the Directory Manager role and another
user the Provisioning Manager role.
LCM Manager: Runs the Artifact Life-Cycle Management utility to promote artifacts or data across product environments and operating systems
Project Manager: Creates and manages projects within Shared Services
Create Integrations: Creates Shared Services data integrations (the process of moving data between
applications) using a wizard.
For Oracle's Enterprise Performance Management Architect, creates and executes data
synchronizations.
Run Integrations: Views and runs Shared Services data integrations.
For Performance Management Architect, executes data synchronizations.
Dimension Editor ( includes Dimension Viewer and Interactive Editor):
Creates and manages import profiles for dimension creation. Also, creates and manages
dimensions manually within the Performance Management Architect user interface or the
Classic Application Administration option.
Required to access Classic Application Administration options for Financial Management
and Planning using Web navigation.
Dimension Viewer can read or view dimensions. This role automatically maps to the
Dimension Reader access on dimensions.
Interactive Editor can modify members within a dimension, and grants dimension writer
access to all dimensions. Does not allow users to delete dimensions.
Note: Dimension Viewer and Interactive Editor roles are reserved for future use.
Application Creator (includes Analytic Services Application Creator, Financial Management Application Creator, Planning Application Creator, External Application Creator): Creates and deploys Performance Management Architect applications. Users with this
role can create applications, but can change only the dimensions to which they have
access permissions.
Required, in addition to the Dimension Editor role, for Financial Management and
Planning users to be able to navigate to their product’s Classic Application Administration
options.
When a user with Application Creator role deploys an application from Performance
Management Architect, that user automatically becomes the application administrator
and provisioning manager for that application.
The Application Creator can create all applications.
The Analytic Services Application Creator can create Generic applications.
The Financial Management Application Creator can create Consolidation applications
and Performance Management Architect Generic applications. To create applications,
the user must also be a member of the Application Creators group specified in Financial
Management Configuration Utility.
The Planning Application Creator can create Planning applications and Performance
Management Architect Generic applications.
The External Application Creator can create external views and export application views
but cannot export the library.
Note: External Application Creator role is reserved for future use.

MSAD configuration with shared services issue?

Hi
i recently configured MSAD with shared services.but the problem is the hfm users are not in the same group in msad.so i am not getting all hfm users.so i configured 2 more msad groups.
now the problem is while configuring we have to give user name & password of any user in that group.here the password will change for every 45 days.and it is pratically not possible to have others password for the administrator to change for every 45 days in shared services.
is there any other solution for this problem.
HYperion 11.1.1.2
regards
bharat.tv

Can you not set up an one service account that exists in all the groups and doesn't have its password expiring?
Cheers
John
http://john-goodwin.blogspot.com/

Unable to register Hyperion Reporting and Analysis with Shared Services

Hello everybody,
I'm trying to install and configure Foundation Services in order to schedule Brio Query documents execution and distribution.
IBM DB2 Express has been installed and configured.
Shared Services have been installed and configured.
Reporting and Analysis - System 9 Services have been installed and not yet configured.
Reporting and Analysis - System 9 UI Services have been installed and not yet configured.
When proceeding with Hyperion Reporting and Analysis configuration in registering with Shared Services, provided with the same host, port, user profile and password used for configuring Shared Services, I get the following message:
"An unknown CSS error occured.
Please check that the information entered is correct."
Messages from configtool.log file:
"(Aug 21, 2008, 09:32:32 AM), com.hyperion.cis.config.CmsRegistrationUtil, DEBUG, Getting CSS instance
(Aug 21, 2008, 09:32:32 AM), com.hyperion.cis.config.CmsRegistrationUtil, DEBUG, URL for CSS.xml = https://itblq001.wincor-nixdorf.com:58080/interop/framework/getCSSConfigFile
(Aug 21, 2008, 09:32:32 AM), com.hyperion.cis.config.CmsRegistrationUtil, DEBUG, Authenticate LStoppa user to CSS.
(Aug 21, 2008, 09:32:32 AM), com.hyperion.cis.config.CmsRegistrationUtil, ERROR, Failed to authenticate user = LStoppa"
I can't understand what's happening. May you help me?
Thank you for every hints.
Regards
Lucia

The service runs until I try to confirm the registration while configuring HRA. Then it stops.
Apologies for the simple question, as I am trying to make the whole Hyperion System 9 running with little knowledge of it: how do I log to shared services?
Thanks

Essbase not registering with Shared Services in 11.1.2.1

During configuration Essbase is is failing on Register with Shared Services. The configuration was pretty straight forward and all defaults. I ran the diagnostic tool and it came back with connection refused. Essbase is the first (other than Shared Services connection) that I have attempted to configure on this box
We are running an all Windows environment with four separate servers. Shared Services is running on a separate box, connection to the SQL server is working, passwords are correct, username is correct, database is correct, there are no firewalls in place and I can get to Shared Services and workspace, services are running...
Any ideas?

This is what is in the log:
[2011-06-08T07:52:39.239-04:00] [EPMCFG] [ERROR] [EPMCFG-01020] [oracle.EPMCFG] [tid: 19] [ecid: 0000J1j69ueFS8A_n_G7yZ1Dvq96000003,0] [SRC_CLASS: com.hyperion.config.wizard.impl.RunAllTasks] Error: [[
EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.
     at com.hyperion.css.facade.impl.CSSAbstractAuthenticator$CSSTokenUtils.getTokenString(CSSAbstractAuthenticator.java:956)
     at com.hyperion.css.facade.impl.CSSAbstractAuthenticator.addToken(CSSAbstractAuthenticator.java:397)
     at com.hyperion.css.facade.impl.CSSAbstractAuthenticator.authenticateTrustedUser(CSSAbstractAuthenticator.java:497)
     at com.hyperion.css.facade.impl.CSSAbstractAuthenticator.authenticateProxyUser(CSSAbstractAuthenticator.java:332)
     at com.hyperion.css.facade.impl.CSSAPIImpl.authenticateProxyUser(CSSAPIImpl.java:186)
     at com.hyperion.css.facade.CSSAPIFacade.authenticateProxyUser(CSSAPIFacade.java:146)
     at com.hyperion.cis.config.CmsRegistrationUtil.<init>(CmsRegistrationUtil.java:107)
     at com.hyperion.config.wizard.impl.RunAllTasks.executeHubRegistrationTask(RunAllTasks.java:656)
     at com.hyperion.config.wizard.impl.RunAllTasks.execute(RunAllTasks.java:515)
     at com.hyperion.config.wizard.impl.RunnAllTasksState.run(RunnAllTasksState.java:90)
     at java.lang.Thread.run(Thread.java:619)
Nested Exception:
EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.
     at com.hyperion.css.common.internal.CipherUtil.encrypt2(CipherUtil.java:318)
     at com.hyperion.css.common.internal.CipherUtil.encryptToken(CipherUtil.java:165)
     at com.hyperion.css.facade.impl.CSSTokenHelper.getToken(CSSTokenHelper.java:169)
     at com.hyperion.css.facade.impl.CSSAbstractAuthenticator$CSSTokenUtils.getTokenString(CSSAbstractAuthenticator.java:954)
     at com.hyperion.css.facade.impl.CSSAbstractAuthenticator.addToken(CSSAbstractAuthenticator.java:397)
     at com.hyperion.css.facade.impl.CSSAbstractAuthenticator.authenticateTrustedUser(CSSAbstractAuthenticator.java:497)
     at com.hyperion.css.facade.impl.CSSAbstractAuthenticator.authenticateProxyUser(CSSAbstractAuthenticator.java:332)
     at com.hyperion.css.facade.impl.CSSAPIImpl.authenticateProxyUser(CSSAPIImpl.java:186)
     at com.hyperion.css.facade.CSSAPIFacade.authenticateProxyUser(CSSAPIFacade.java:146)
     at com.hyperion.cis.config.CmsRegistrationUtil.<init>(CmsRegistrationUtil.java:107)
     at com.hyperion.config.wizard.impl.RunAllTasks.executeHubRegistrationTask(RunAllTasks.java:656)
     at com.hyperion.config.wizard.impl.RunAllTasks.execute(RunAllTasks.java:515)
     at com.hyperion.config.wizard.impl.RunnAllTasksState.run(RunnAllTasksState.java:90)
     at java.lang.Thread.run(Thread.java:619)
I do not have external user directories defined in Shared Services yet.... I cant even get into Shared Services because a "Failed to authenticate user. Invalid credentials." message. I checked my credentials and they cant be wrong cause I copied and pasted them.

RSOP: Interactive logon: Prompt user to change password before expiration

Hi,
I am trying to implement a GPO so that users are prompted to change their password 5 days before it expires. I have done this via -
Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options > Enabled
Interactive Logon: Prompt user to change password before expiration
Despite doing the above the GPO does not seem to be taking effect. I have run RSOP on my machine and a few users machines and can see that there is a red circle with an X next to
Interactive Logon: Prompt user to change password before expiration.
Below is my winlogon.log file but I am not really sure what I am supposed to be looking for. Can anyone help?
Make a local copy of \\**************.co.uk\sysvol\**************.co.uk\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\Microsoft\Windows NT\SecEdit\GptTmpl.inf.
GPLinkSite GPO_INFO_FLAG_BACKGROUND )
Make a local copy of \\**************.co.uk\sysvol\**************.co.uk\Policies\{91EDC47D-AACF-4DFE-B044-5D29500CECBE}\Machine\Microsoft\Windows NT\SecEdit\GptTmpl.inf.
GPLinkDomain GPO_INFO_FLAG_BACKGROUND )
Make a local copy of \\**************.co.uk\SysVol\**************.co.uk\Policies\{DDE2DDB7-9802-415B-819E-1ADA496DC3E6}\Machine\Microsoft\Windows NT\SecEdit\GptTmpl.inf.
GPLinkDomain GPO_INFO_FLAG_BACKGROUND )
Make a local copy of \\**************.co.uk\sysvol\**************.co.uk\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\Microsoft\Windows NT\SecEdit\GptTmpl.inf.
GPLinkDomain GPO_INFO_FLAG_BACKGROUND )
Make a local copy of \\**************.co.uk\SysVol\**************.co.uk\Policies\{6422C1A4-D958-4F4B-A8AA-EBACC567BD19}\Machine\Microsoft\Windows NT\SecEdit\GptTmpl.inf.
GPLinkOrganizationUnit GPO_INFO_FLAG_BACKGROUND )
No template is defined in GPO \\**************.co.uk\SysVol\**************.co.uk\Policies\{43F654AA-56D5-4F2C-B357-1AFEE03D37F2}\Machine.
Process GP template gpt00000.inf.
This is not the last GPO.
08 March 2015 23:06:35
Copy undo values to the merged policy.
----Un-initialize configuration engine...
Process GP template gpt00001.dom.
This is not the last GPO.
08 March 2015 23:06:36
----Un-initialize configuration engine...
Process GP template gpt00002.dom.
This is not the last GPO.
08 March 2015 23:06:36
----Un-initialize configuration engine...
Process GP template gpt00003.dom.
This is not the last GPO.
08 March 2015 23:06:36
----Un-initialize configuration engine...
Process GP template gpt00004.inf.
08 March 2015 23:06:36
----Configuration engine was initialized successfully.----
----Reading Configuration Template info...
----Configure User Rights...
Configure S-1-5-32-544.
Configure S-1-5-21-778002760-1239436532-1307212239-1002.
Configure S-1-5-21-778002760-1239436532-1307212239-1016.
Configure S-1-5-21-778002760-1239436532-1307212239-4078.
Configure S-1-5-21-778002760-1239436532-1307212239-512.
Configure S-1-5-21-778002760-1239436532-1307212239-500.
Configure S-1-5-21-778002760-1239436532-1307212239-513.
User Rights configuration was completed successfully.
----Configure Group Membership...
Configure **************\Local Admins for Users.
old memberof tattoo list: *S-1-5-32-555,*S-1-5-32-544,
object already member of Administrators.
object already member of Remote Desktop Users.
new memberof tattoo list: *S-1-5-32-555,*S-1-5-32-544,
Group Membership configuration was completed successfully.
----Configure Security Policy...
Configure password information.
Configure account force logoff information.
System Access configuration was completed successfully.
Configure machine\software\microsoft\windows nt\currentversion\winlogon\passwordexpirywarning.
Configure machine\software\microsoft\windows\currentversion\policies\system\enableinstallerdetection.
Configuration of Registry Values was completed successfully.
Audit/Log configuration was completed successfully.
----Configure available attachment engines...
Configuration of attachment engines was completed successfully.
----Un-initialize configuration engine...
this is the last GPO.
Make a local copy of \\**************.co.uk\sysvol\**************.co.uk\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\Microsoft\Windows NT\SecEdit\GptTmpl.inf.
GPLinkSite GPO_INFO_FLAG_BACKGROUND )
Make a local copy of \\**************.co.uk\sysvol\**************.co.uk\Policies\{91EDC47D-AACF-4DFE-B044-5D29500CECBE}\Machine\Microsoft\Windows NT\SecEdit\GptTmpl.inf.
GPLinkDomain GPO_INFO_FLAG_BACKGROUND )
Make a local copy of \\**************.co.uk\SysVol\**************.co.uk\Policies\{DDE2DDB7-9802-415B-819E-1ADA496DC3E6}\Machine\Microsoft\Windows NT\SecEdit\GptTmpl.inf.
GPLinkDomain GPO_INFO_FLAG_BACKGROUND )
Make a local copy of \\**************.co.uk\sysvol\**************.co.uk\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\Microsoft\Windows NT\SecEdit\GptTmpl.inf.
GPLinkDomain GPO_INFO_FLAG_BACKGROUND )
Make a local copy of \\**************.co.uk\SysVol\**************.co.uk\Policies\{6422C1A4-D958-4F4B-A8AA-EBACC567BD19}\Machine\Microsoft\Windows NT\SecEdit\GptTmpl.inf.
GPLinkOrganizationUnit GPO_INFO_FLAG_BACKGROUND )
No template is defined in GPO \\**************.co.uk\SysVol\**************.co.uk\Policies\{43F654AA-56D5-4F2C-B357-1AFEE03D37F2}\Machine.
Process GP template gpt00000.inf.
This is not the last GPO.
09 March 2015 16:26:51
Copy undo values to the merged policy.
----Un-initialize configuration engine...
Process GP template gpt00001.dom.
This is not the last GPO.
09 March 2015 16:26:51
----Un-initialize configuration engine...
Process GP template gpt00002.dom.
This is not the last GPO.
09 March 2015 16:26:51
----Un-initialize configuration engine...
Process GP template gpt00003.dom.
This is not the last GPO.
09 March 2015 16:26:51
----Un-initialize configuration engine...
Process GP template gpt00004.inf.
09 March 2015 16:26:51
----Configuration engine was initialized successfully.----
----Reading Configuration Template info...
----Configure User Rights...
Configure S-1-5-32-544.
Configure S-1-5-21-778002760-1239436532-1307212239-1002.
Configure S-1-5-21-778002760-1239436532-1307212239-1016.
Configure S-1-5-21-778002760-1239436532-1307212239-4078.
Configure S-1-5-21-778002760-1239436532-1307212239-512.
Configure S-1-5-21-778002760-1239436532-1307212239-500.
Configure S-1-5-21-778002760-1239436532-1307212239-513.
User Rights configuration was completed successfully.
----Configure Group Membership...
Configure **************\Local Admins for Users.
old memberof tattoo list: *S-1-5-32-555,*S-1-5-32-544,
object already member of Administrators.
object already member of Remote Desktop Users.
new memberof tattoo list: *S-1-5-32-555,*S-1-5-32-544,
Group Membership configuration was completed successfully.
----Configure Security Policy...
Configure password information.
Configure account force logoff information.
System Access configuration was completed successfully.
Configure machine\software\microsoft\windows nt\currentversion\winlogon\passwordexpirywarning.
Configure machine\software\microsoft\windows\currentversion\policies\system\enableinstallerdetection.
Configuration of Registry Values was completed successfully.
Audit/Log configuration was completed successfully.
----Configure available attachment engines...
Configuration of attachment engines was completed successfully.
----Un-initialize configuration engine...
this is the last GPO.
Jeet S

******UPDATE******
I think I have managed to get this working. I changed the source of the policy to a different GPO. I then did the following -
From a command prompt run gpupdate (without the force parameter)
Ran rsop.msc and checked the policy and this time there was no red circle with an X
Have done the same on a few users machines and it appears to apply successfully. I say this because when you go into the properties for the policy you see the following -
The policy XYZ was correctly applied
Just have to wait and see if it actually does what it says on the can.
Jeet S

Cannot register Analytic Services with Shared Services

Hello,
I have installed the following products of System 9.3:
- License server and Shared services (everything went OK, I can connect to User Management Console using admin/password );
- Analytic Services;
Using Configuration Utlity I activated Analytic Services.
But when I try to Register Analytic Services with Shared Services I get the following error "Incorrect username and password".
I don't know why I get this error because I can connect to User Management Console with admin/password.
The log of the config utiliy shows the following:
(Sep 15, 2007 6:19:56 PM), Install.product.install, com.hyperion.cis.config.Configurator, dbg, Hyperion Home: C:\Hyperion
(Sep 15, 2007 6:19:56 PM), Install.product.install, com.hyperion.cis.config.Configurator, msg1, Loading product descriptor from file C:\Hyperion\common\config\product\biplus\9.3.0.2\biplus_1.xml...
(Sep 15, 2007 6:19:56 PM), Install.product.install, com.hyperion.cis.config.Configurator, msg1, Loaded product "biplus", version 9.3.0.2, build 350.
(Sep 15, 2007 6:19:56 PM), Install.product.install, com.hyperion.cis.config.Configurator, msg1, Loading product descriptor from file C:\Hyperion\common\config\product\essbase\9.3.0.0.0\essbase_1.xml...
(Sep 15, 2007 6:19:56 PM), Install.product.install, com.hyperion.cis.config.Configurator, msg1, Loaded product "Essbase", version 9.3.0.0.0, build 100.
(Sep 15, 2007 6:19:56 PM), Install.product.install, com.hyperion.cis.config.Configurator, msg1, Loading product descriptor from file C:\Hyperion\common\config\product\hub\9.3.0.0.0\hub_1.xml...
(Sep 15, 2007 6:19:56 PM), Install.product.install, com.hyperion.cis.config.Configurator, msg1, Loaded product "Hub", version 9.3.0.0.0, build 42.
(Sep 15, 2007 6:19:56 PM), Install.product.install, com.hyperion.cis.config.Configurator, msg1, in loadClasses
(Sep 15, 2007 6:19:57 PM), Install.product.install, com.installshield.wizardx.conditions.PlatformWizardBeanCondition, dbg.platform, target platform: name="Windows XP" version="5.1" arch="x86"
(Sep 15, 2007 6:19:57 PM), Install.product.install, com.installshield.wizardx.conditions.PlatformWizardBeanCondition, dbg.platform, condition platform: name="Linux" version="." arch="."
(Sep 15, 2007 6:20:00 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductTaskSelectionPanel, dbg, queryEnter method is entered
(Sep 15, 2007 6:20:00 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductTaskSelectionPanel, dbg, Checking OS type/version/architecture against system requirements...
(Sep 15, 2007 6:20:00 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductTaskSelectionPanel, dbg, os.name:Windows XP
(Sep 15, 2007 6:20:00 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductTaskSelectionPanel, dbg, os.version:5.1
(Sep 15, 2007 6:20:00 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductTaskSelectionPanel, dbg, os.arch:x86
(Sep 15, 2007 6:20:00 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductTaskSelectionPanel, dbg, major os version #:5; minor os version #: 1
(Sep 15, 2007 6:20:00 PM), Install.product.install, com.hyperion.essbase.config.EssbaseAgentTaskProcessor, dbg, Initialized EssbaseAgentTaskProcessor
(Sep 15, 2007 6:20:00 PM), Install.product.install, com.hyperion.hub.MailServerTaskProcessor, dbg, Initialized MailServerTaskProcessor
(Sep 15, 2007 6:20:00 PM), Install.product.install, com.hyperion.essbase.config.EssbaseAgentTaskProcessor, dbg, Entered EssbaseAgentTaskProcessor.getDisplayName()
(Sep 15, 2007 6:20:00 PM), Install.product.install, com.hyperion.essbase.config.EssbaseAgentTaskProcessor, dbg, Display name returned : Register Analytic Services Server as Windows Service
(Sep 15, 2007 6:20:00 PM), Install.product.install, com.hyperion.hub.MailServerTaskProcessor, dbg, Entered MailServerTaskProcessor.getDisplayName()
(Sep 15, 2007 6:20:00 PM), Install.product.install, com.hyperion.hub.MailServerTaskProcessor, dbg, Display name returned : Configure Mail Server
(Sep 15, 2007 6:20:38 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductTaskSelectionPanel, dbg, ctask: RegisterEssbaseAsMultipleAgent
(Sep 15, 2007 6:20:38 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductTaskSelectionPanel, dbg, ctask: hubRegistration
(Sep 15, 2007 6:20:38 PM), Install.product.install, com.hyperion.cis.config.wizard.PanelEventDispatcher, dbg, constructor
(Sep 15, 2007 6:20:38 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductCustomInputPanel, msg1, Task hsfCustomHubConfig not selected, skipping panel hsfCustomHubConfig
(Sep 15, 2007 6:20:38 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductCustomInputPanel, msg1, Task relationalStorageConfiguration not selected, skipping panel hpsu8XSelectionManager
(Sep 15, 2007 6:20:38 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductCustomInputPanel, msg1, Task applicationServerDeployment not selected, skipping panel avalancheAnalyzerDBSetupStub
(Sep 15, 2007 6:20:38 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductCustomInputPanel, msg1, Product hmb not selected, skipping panel hmbServerHostPorts
(Sep 15, 2007 6:20:38 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductCustomInputPanel, msg1, Product hmb not selected, skipping panel hmbWorkspaceInfo
(Sep 15, 2007 6:20:38 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductCustomInputPanel, dbg, managerClassName: com.hyperion.essbase.config.EssbaseAgentUserPanelManager
(Sep 15, 2007 6:20:57 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductCustomInputPanel, dbg, managerClassName: com.hyperion.essbase.config.EssbaseAgentPortPanelManager
(Sep 15, 2007 6:21:10 PM), Install.product.install, com.hyperion.cis.config.CmsRegistrationUtil, dbg, Getting CSS instance
(Sep 15, 2007 6:21:10 PM), Install.product.install, com.hyperion.cis.config.CmsRegistrationUtil, dbg, URL for CSS.xml = https://localhost:58080/interop/framework/getCSSConfigFile
(Sep 15, 2007 6:22:11 PM), Install.product.install, com.hyperion.cis.config.CmsRegistrationUtil, err, com.hyperion.css.common.configuration.CSSConfigurationException: Cannot configure the system. Please check the configuration.     Error Code: 9
NestedException:
java.io.IOException: Property data cannot be loaded from the cache.
(Sep 15, 2007 6:22:11 PM), Install.product.install, com.hyperion.cis.config.CmsRegistrationUtil, err, Failed to initialize CSS API
(Sep 15, 2007 6:22:11 PM), Install.product.install, com.hyperion.cis.config.CmsRegistrationUtil, err, Failed to authenticate user = admin
(Sep 15, 2007 6:22:28 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductCustomInputPanel, dbg, managerClassName: com.hyperion.essbase.config.EssbaseAgentPortPanelManager
(Sep 15, 2007 6:22:29 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductCustomInputPanel, dbg, managerClassName: com.hyperion.essbase.config.EssbaseAgentUserPanelManager
(Sep 15, 2007 6:22:29 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductTaskSelectionPanel, dbg, queryEnter method is entered
(Sep 15, 2007 6:22:29 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductTaskSelectionPanel, dbg, Checking OS type/version/architecture against system requirements...
(Sep 15, 2007 6:22:29 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductTaskSelectionPanel, dbg, os.name:Windows XP
(Sep 15, 2007 6:22:29 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductTaskSelectionPanel, dbg, os.version:5.1
(Sep 15, 2007 6:22:29 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductTaskSelectionPanel, dbg, os.arch:x86
(Sep 15, 2007 6:22:29 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductTaskSelectionPanel, dbg, major os version #:5; minor os version #: 1
(Sep 15, 2007 6:22:40 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductTaskSelectionPanel, dbg, ctask: hubRegistration
(Sep 15, 2007 6:22:40 PM), Install.product.install, com.hyperion.cis.config.wizard.PanelEventDispatcher, dbg, constructor
(Sep 15, 2007 6:22:40 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductCustomInputPanel, msg1, Task hsfCustomHubConfig not selected, skipping panel hsfCustomHubConfig
(Sep 15, 2007 6:22:40 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductCustomInputPanel, msg1, Task relationalStorageConfiguration not selected, skipping panel hpsu8XSelectionManager
(Sep 15, 2007 6:22:40 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductCustomInputPanel, msg1, Task applicationServerDeployment not selected, skipping panel avalancheAnalyzerDBSetupStub
(Sep 15, 2007 6:22:40 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductCustomInputPanel, msg1, Product hmb not selected, skipping panel hmbServerHostPorts
(Sep 15, 2007 6:22:40 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductCustomInputPanel, msg1, Product hmb not selected, skipping panel hmbWorkspaceInfo
(Sep 15, 2007 6:22:40 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductCustomInputPanel, msg1, Task RegisterEssbaseAsMultipleAgent not selected, skipping panel essbase1
(Sep 15, 2007 6:22:40 PM), Install.product.install, com.hyperion.cis.config.wizard.ProductCustomInputPanel, msg1, Task RegisterEssbaseAsMultipleAgent not selected, skipping panel essbase2
(Sep 15, 2007 6:22:51 PM), Install.product.install, com.hyperion.cis.config.CmsRegistrationUtil, dbg, Getting CSS instance
(Sep 15, 2007 6:22:51 PM), Install.product.install, com.hyperion.cis.config.CmsRegistrationUtil, dbg, URL for CSS.xml = https://localhost:58080/interop/framework/getCSSConfigFile
(Sep 15, 2007 6:23:52 PM), Install.product.install, com.hyperion.cis.config.CmsRegistrationUtil, err, com.hyperion.css.common.configuration.CSSConfigurationException: Cannot configure the system. Please check the configuration.     Error Code: 9
NestedException:
java.io.IOException: Property data cannot be loaded from the cache.
(Sep 15, 2007 6:23:52 PM), Install.product.install, com.hyperion.cis.config.CmsRegistrationUtil, err, Failed to initialize CSS API
(Sep 15, 2007 6:23:52 PM), Install.product.install, com.hyperion.cis.config.CmsRegistrationUtil, err, Failed to authenticate user = admin
I see this error: Failed to inizialize CSS API and Failed to authenticate user = admin
What does this mean?
Any help will be appreciated!
Thank you
Daniela

Hi Tom,
I created the user demo/demo with admin privileges in Shared Services. I can connect to User Management Console, but when trying to register Analytic Services with Shared Services I still get "Incorrect username or password".
I see in the configtool log the following lines:
(Sep 16, 2007 1:34:13 PM), Install.product.install, com.hyperion.cis.config.CmsRegistrationUtil, dbg, Getting CSS instance
(Sep 16, 2007 1:34:13 PM), Install.product.install, com.hyperion.cis.config.CmsRegistrationUtil, dbg, URL for CSS.xml = https://localhost:58080/interop/framework/getCSSConfigFile
(Sep 16, 2007 1:35:14 PM), Install.product.install, com.hyperion.cis.config.CmsRegistrationUtil, err, com.hyperion.css.common.configuration.CSSConfigurationException: Cannot configure the system. Please check the configuration.     Error Code: 9
NestedException:
java.io.IOException: Property data cannot be loaded from the cache.
(Sep 16, 2007 1:35:14 PM), Install.product.install, com.hyperion.cis.config.CmsRegistrationUtil, err, Failed to initialize CSS API
(Sep 16, 2007 1:35:14 PM), Install.product.install, com.hyperion.cis.config.CmsRegistrationUtil, err, Failed to authenticate user = demo
It seems it can't inizialize this CSS API. Why? What do I have to do?
thanks
daniela

Performance Scorecard - unable to sync security with Shared Services

Hi all,
after successful installation of HPS we have provisioned users in Shared Services console for using HPS application. Now we need to sync HPS application with HSS. We have logged as "admin" to run this sync but we are missing Administration menu.
Could anyone give us an advice how to fix it?
Thanks,
Vladino

Hi Amith,
Before configuring EAS with Shared Services, please verify following:-
1- Installaed relational database repository (SQL Server, Oracle, DB2).
2- Create a database called hypdb in database repository.
3- Create user called hypuser with valide password who has access on this database.
4- Also ensure service related to database repository is running.
Now try to configure EAS with SS. Hope it will help you.
Atul K,

Change in the shared services settings

Hi,
Recently the host name changed and I had to reconfigure the MSAD configuration. I restarted the Shared services and then restarted planning. I subsequently ran the userprovision.cmd to synchronise the users with Planning.
But the users still can't seem to be able to logon using their ids.
Do I need to restart all the services again?
Regards,
Amol

Hi,
Did you run the provisionusers.cmd or updateusers.cmd
It will be the updateusers.cmd that should update the users in planning to be in line with shared services.
Cheers
John
http://john-goodwin.blogspot.com/

DRM Integration with Shared services

Hi,
Could someone help me how to integrate DRM with Shared services? Is there any document which helps me with the same?
Thanks
Arathi.

Hi Arathi,
You'll be delighted to hear that I found a solution to your question.
1. Create a user in DRM and select to manage user in "Active Directory", LDAP or NTLM.
2. Create the same user in Shared Services (same name u wrote in DRM), give it a password then you're done.
3. When you log into DRM, it will use the shared services password.
It kinda bothered me that's why i gave it a thought and did a lil bit of reading to find it out. Hope you get it right.
Regards,
deep

"user must change password at next logon" flag for multiple users

2008 R2 domain with a couple of 2012 R2 DCs.
john.user is in the Users OU. if I right-click john.user, choose properties, go to the account tab, and check "user must change password at next logon," the next time john.user tries to log in, he gets prompted to change his password. also the
powershell command
get-aduser -filter * -Properties * | ? name -like "*john.user*" | select name,pwdlastset
shows that john.user's pwdlastset is 0. all of this is as expected.
but if I highlight every account in the Users OU, right-click, properties, Account, "user must change password at next logon," it appears that nothing whatsoever happens. john.user doesn't get prompted to change his password at his next
logon, and his pwdlastset is something like 130622757432306111.
is this the expected behavior? why are the Account tab and/or the "change password at next logon" box available to me when selecting multiple users if they aren't meant to work?

ah. thank you sir. *two* checkboxes. *two.* of course.
I had enough OUs under my Users OU that I just used powershell to catch them all at once:
$enabledusers = get-aduser -filter * -SearchBase "ou=users,dc=domain,dc=local" -Properties distinguishedname,pwdlastset |
    where {$_.enabled -eq "true" -and $_.distinguishedname -notlike "*ou=service accounts*"}
foreach($enableduser in $enabledusers) {
    $enableduser.pwdlastset = 0
    Set-ADUser -instance $enableduser

User cannot change password option is automatically getting unchecked while giving domain admin rights

user cannot change password option is automatically getting unchecked while giving domain admin rights

Greetings!
"Domain Admins" falls into the category of protected groups and it is included in ADminSDHolder process. It is normal and was designed in order to prevent the modification to these privileged groups. More information on the link below:
AdminSDHolder, Protected Groups and SDPROP
Regards.
Mahdi Tehrani |
|
www.mahditehrani.ir
Please click on Propose As Answer or to mark this post as
and helpful for other people.
This posting is provided AS-IS with no warranties, and confers no rights.
How to query members of 'Local Administrators' group in all computers?

Force User to Change Password with Shared Services authentication

Similar Messages

Maybe you are looking for