11g Agents: security
Hello all,
I'm trying to get the agents to work. As Administrator, everything works fine, but logged in as a (normal) LDAP user with external authentication, I get errors with failing initialization blocks.
My work around was: run agents as Administrator but it seems only Administrators are able to change the 'Run As' property of the agent to a certain user name...
Does anyone know which security setting I need to change, or another way to get this thing working?
Hello all,
I'm trying to get the agents to work. As Administrator, everything works fine, but logged in as a (normal) LDAP user with external authentication, I get errors with failing initialization blocks.
My work around was: run agents as Administrator but it seems only Administrators are able to change the 'Run As' property of the agent to a certain user name...
Does anyone know which security setting I need to change, or another way to get this thing working?
Similar Messages
-
OBIEE 11g agents are failed to connect to Essbase
OBIEE 11g agents are failed to connect to Essbase. We are using :USER & :PASSWORD (SSO) in connection pool setting to connect to Essbase.
User account exists in both OBIEE and Essbase. OBIEE dashboards which are based on Essbase are working fine. Essbase variables in RPD are upto date.
Only agents are failing and error says invalid credentials, but dashboard pages are running without any issue.
OBIEE: 11.1.1.5 (BP4)
Essbase: 11.1.2.1
Error Codes: OPR4ONWY:U9IM8TAC:OI2DL65P
State: HY000. Code: 10058. [NQODBC] [SQL_STATE: HY000] [nQSError: 10058] A general error has occurred. [nQSError: 43113] Message returned from OBIS. [nQSError: 43119] Query Failed: [nQSError: 96002] Essbase Error: Login fails due to invalid login credentials (HY000)
Essbase and OBIEE services are up and running.
Any help will be appreciated.We finally implemented CSS Token option and ended up with this error. We are unable to connect to essbase with CSS Token option.
We followed the Oracle document to implement this.
[nQSError: 43119] Query Failed: EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials. (HY000)
We did update this property:
JAVA_PROPERTIES="-Dplatform.home=${WL_HOME} -Dwls.home=${WLS_HOME} -Dweblogic.home=${WLS_HOME} -Didstore.identityAttribute=objectguid"
Any help will be appreciated! -
OBIEE 11g Agent Includes Action Link Report Name
OBIEE 11g Agent Includes Action Link Report Name
I have a dashboard page with multiple reports. One of the reports has Action Links to drill to another report. When I view the dashboard as a web page, the report with the Action Links look fine. The link fields are colored blue. When I send this dashboard page as an HTML email, it shows the Action Link report name in the cell with the other data.
The dashboard page sent out as an agent should look the same as the web page and the Action Link report name should not be visible.
Any ideas?
Thanks!
EricSo you spoofed the values of the 2nd column to have the report act almost like a menu listing?
if that's the case then check the data type of column 2, it should be set to HTML. Then you will just need to build your HTML tag within the column formula.
Example below bins the year name into a Link HTML Tag:
'<a href="http://'|| CASE WHEN "Time"."T05 Per Name Year" = '2011' THEN 'www.google.com' WHEN "Time"."T05 Per Name Year" = '2012' THEN 'www.yahoo.com' ELSE 'www.apple.com' END || '" target="_blank" > ' || CASE WHEN "Time"."T05 Per Name Year" = '2011' THEN 'www.google.com' WHEN "Time"."T05 Per Name Year" = '2012' THEN 'www.yahoo.com' ELSE 'www.apple.com' END || '</a>'
if that is not what you are attempting to do, please clarify. -
Passing parameters into 11g agent (ibot) scheduled report/dashboard
Hi,
Does anyone know whether or not you can pass in or set parameter values when scheduling a report or dashboard using 11g agents (ibots)?
Thanks in advance
PhilHi All,
Is it possible to open another application in the same window?
Currently my code is:
APPLICATION.openNewWindow(
http://<>:8080/BOE/OpenDocument/opendoc/openDocument.jsp?sIDType=CUID&iDocID=<>);
This is working fine but the requirement is to open another dashboard in the same window?
Is this possible in Design Studio 1.3?
Thanks & Regards
Swasti -
Grid Control 11g Agent: The free port availability check has failed.
I tried to use 11g Grid Control agent deployment wizard to install 11g agent to an Oracle Enterprise Linux 5 (64 bit) server, but received following error message:
PROBLEM : The free port availability check has failed.
ERROR : Check complete. The overall result of this check is: Not executed <<<<
RECOMMENDATION : Please free one of the ports in the required range
The port I used is the default one - 3872. I used "netstat -a |grep 3872" to check if this port is in use, the "netstat" command returned nothing, so I think this port is free. I tried to leave the "Port" field empty and let Oracle automatically pick a free port, I still got the same error message.
According to the log file,
more prereq2010-11-22_10-42-27AM.out
Starting execution of Prerequisites...
Total No of checks: 12
Performing check for CheckPortAvailability
Checking for the availability of free ports in the required range.
Loading file /opt/oracle/product/11.2.0/dbhome_1/localhost.localdomain_xxx//sysman/config/emd.properties to get the busy ports: Successful
Loading file /opt/oracle/product/11.2.0/dbhome_1//sysman/config/emd.properties to get the busy ports: Successful
Port specified by user null is not available
Check complete. The overall result of this check is: Not executed <<<<
Check complete: Not executed <<<<
S_UNKNOWN_HOST_EXEPTION_BEFORE_CHECK: An unknown host exception encountered during the Port Pre Req Check.
Recommendation: You must free one of the ports in the required range.
Did someone encounter a similar problem before? Thanks for your help.
Amos814475 wrote:
I tried to use 11g Grid Control agent deployment wizard to install 11g agent to an Oracle Enterprise Linux 5 (64 bit) server, but received following error message:
PROBLEM : The free port availability check has failed.
ERROR : Check complete. The overall result of this check is: Not executed <<<<
RECOMMENDATION : Please free one of the ports in the required range
The port I used is the default one - 3872. I used "netstat -a |grep 3872" to check if this port is in use, the "netstat" command returned nothing, so I think this port is free. I tried to leave the "Port" field empty and let Oracle automatically pick a free port, I still got the same error message.
According to the log file,
more prereq2010-11-22_10-42-27AM.out
Starting execution of Prerequisites...
Total No of checks: 12
Performing check for CheckPortAvailability
Checking for the availability of free ports in the required range.
Loading file /opt/oracle/product/11.2.0/dbhome_1/localhost.localdomain_xxx//sysman/config/emd.properties to get the busy ports: Successful
Loading file /opt/oracle/product/11.2.0/dbhome_1//sysman/config/emd.properties to get the busy ports: Successful
Port specified by user null is not available
Check complete. The overall result of this check is: Not executed <<<<
Check complete: Not executed <<<<
S_UNKNOWN_HOST_EXEPTION_BEFORE_CHECK: An unknown host exception encountered during the Port Pre Req Check.
Recommendation: You must free one of the ports in the required range.
Did someone encounter a similar problem before? Thanks for your help.
AmosYEP, overhere the same problem.
Can't figure out yet what the problem exactly is.
In our case I deinstalled a working 10.2.0.4 agent ( same port same config ) and tried to install 11g Agent.
It fails with the above message. We however are on AIX, and that hasn't a 'netstat -p' option to find occupied ports easily.
Because the database is question needs to be monitored constantly I now reinstalled the 10.2.0.4 agent again and works seemlessly
Still unsolved.....
FJFranken -
OEM 11g agents on 10g middleware
We recently installed OEM 11g in a PROD environment consisting of older 10g middleware (SOA, B2B, Web Servers) the agents are not discovering any of the 10g middleware for "targets"... 10g databases OK but not 10g Middleware, any suggestions?
I know...upgrade everything, and we are working on THAT but in the meantime....You can use note Oracle Enterprise Manager Grid Control Certification Checker [ID 412431.1] to see if the version you are using is supported by OEM 11g and/or 11g agent.
Eric -
Does anyone know were the basic install instruction for upgrading to 11g agent from 10.2.0.5.
I can only find mass upgrades using GRid Control. I do not want this.
I want to manual upgrade 1 simple agent . Where are the install instructions ?
Thanks.hi,
Perhaps you are looking for this
http://download.oracle.com/docs/cd/E11857_01/install.111/e16847/upgrade_agent_usng_consle.htm#CHDHADDH
Following the main documentation page link
http://download.oracle.com/docs/cd/E11857_01/install.111/e16847/toc.htm
Salman -
Obiee 11g Agent- Device (dashboard) is not set in (Userid) delivery profile
hi
HI
I have followed the steps (http://obieemanu.blogspot.in/2011/06/obiee-11g-configure-oracle-bi-scheduler.html) and enabled Agents.
I am sending the mails succesfully But i am receiving below error....
Eventually succeeded, but encountered and resolved errors...
Number of skipped recipients: 0 of 1
AgentID: /shared/SSystem Administration/26APRAGENT
Device (dashboard) is not set in (Userid) delivery profile.
Please suggest me if i missed anything
Regards
Edited by: 917796 on May 2, 2012 2:05 AM
Edited by: 917796 on May 2, 2012 2:06 AMHi
Sorry for the delayed reply i havnt looked in to ibots for last few months...
Steps to configure device..
After login into analytics....click on ur username u used to login and select My Account..there u can Add email..
As for as i know u can do this only if u are sending ibots to few users...
we have to create SA system subject area as shown in below URL
http://oraclebizint.wordpress.com/2008/04/25/oracle-bi-ee-101332-sa-system-subject-area-autoloading-profiles-and-bursting/
please send a test mail to [email protected] i will send u a doc with screen shots on how to add Device..
Apologies again...for the delayed reply -
Not able to logging in DAC 11g, throws "Security Key is invalid or unavailable"
Hi Friends,
I installed DAC 11g in Linux (Installed in Windows and moved it to Linux and configured). It was working fine and sometimes it throws "Security Key is invalid or unavailable".
I updated the DAC Repository schema details using standaloneServerSetupPrompt.bat file. Also getting the same issue.
Appreciate your help on this.
Thanks,
Sakthi.Syou need to contact your BASIS admin and tell them to check if BM7CLNT100 is available for access and that credentials you are using are authorized to access it.
I'm assuming you're using SAP Authentication to login. If you login using Enterprise - you should be able to login into Infoview or CMC as BW changes will not affect that. -
OBIEE 11g Agent Report one env to another
Hi Guys,
we currently moved our PROD server to 11.1.1.7.1 (Fresh installation and just moved the catalog and RPD) it is working fine.
But in the old server we scheduled more than 100 agents but in the new server we are not getting get any alert....
so can you please advice me on how to enable all the Scheduled reports in current server at once instead of manually enabling agents one by one....
we have tried with single agent it is working fine but we need to run all the old agents.
Thanks in advance,we currently moved our PROD server to 11.1.1.7.1 (Fresh installation and just moved the catalog and RPD) it is working fine.
But in the old server we scheduled more than 100 agents
You didn't say anything about old server like 10g or 11g. First of all the agents will not get disabled automatically from one version to another (11g) how did u migrated ..it should be archive or un-archive or through catalog manager?
or
Open BIPlatform schema and run below query to see how many are enabled if you have any 0 records update the flag to 1 and see whether agents are enabled (testing purpose do it for 1)
select * from s_nq_acct where disable_flg >0 ; -
I have an application which supports 'phoning home' that, up until 11g was relatively easy to implement. Now I'm attempting to port it so that it will work with 11g but unfortunately, this doesn't seem to be all that easy.
If I run this code as a scripted anonymous PL/SQL block it works:
dbms_network_acl_admin.add_privilege (
acl => 'utlpkg.xml',
principal => 'USERNAME',
is_grant => TRUE,
privilege => 'connect',
start_date => null,
end_date => null);
(Obviously, I've already created the acl in question). Unfortunately, if I attempt to run this from my administration application, or even try to put it in a stored procedure where I can just call it from my stored procedure, it does not work. I can't get it to compile in a stored procedure, and just running the SQL from my application raises no exceptions, but has no effect either. It appears that it must be commited in order for it to work, is this true? (In other words, unlike other Oracle security-related operations, this is not considered DDL?) Forcing a commit from my application has no effect, it still doesn't work.
I'd like to incorporate this level of security into my application as opposed to having to run it externally from a script in order for it to function. Clearly I'm missing something here, but my results seem arbitrarily inconsistent. This may be in part because of the general suckiness of Vista on which I'm running 11g, or perhaps a problem with 11g itself, or, most likely, my own inability to code it correctly. I would appreciate any pointers to existing code that I might incorporate.
Thanks!
<RANT> I have NO IDEA why Oracle would chose to implement security based on xml when there is an existing structure that's been in the database for as long as I've work with it (grant priv to user). This seems to me to be an abuse of what xml should be used for, and I can only hope this over-exuberant use of xml can be rectified in a future release </RANT>Hi,
You have to many explanation here www.ietf.org/rfc/rfc0821.txt
and here
www.ietf.org/rfc/rfc0822.txt
Nicolas. -
Hello Forum, hopefully I am asking this question in the correct forum. We are running OBIEE 11g on a UNIX server. One of our Developers manually ran an Agent through the OBIEE Analytics front-end. Then, shortly later, he asked if I could stop the Agent. Can anyone tell me if this is possible and, if so, how to do so?
Thank you!
Ben / Denver COThanks for the info.
Yes, I have email address in customer dimension and I can display it in analysis.
If choose use analysis from agent (Get Recipients from the Analysis Used in the Agent Condition), getting the following error otherwise (Select Recipients with email address) will complete successfully
[nQSError: 77006] Oracle BI Presentation Server Error: A fatal error occurred while processing the request. The server responded with: Assertion failure: !m_sGuid.empty() at line 31 of /scratch/aime1/adestore/views/aime1_dadvfa0138/bifndn/analytics_web/main/inc/nq/webadminsubsystem/ibotrecipient.h
Error Codes: ACIOA5LN
Error Codes: AGEGTYVF
AgentID: /shared/Target/Test_schedule
...Trying main Agent loop again.... Sleeping for 5 seconds.[nQSError: 77006] Oracle BI Presentation Server Error: A fatal error occurred while processing the request. The server responded with: Assertion failure: !m_sGuid.empty() at line 31 of /scratch/aime1/adestore/views/aime1_dadvfa0138/bifndn/analytics_web/main/inc/nq/webadminsubsystem/ibotrecipient.h
Error Codes: ACIOA5LN
Error Codes: AGEGTYVF
AgentID: /shared/Target/Test_schedule
...Trying main Agent loop again.... Sleeping for 3 seconds.[nQSError: 77006] Oracle BI Presentation Server Error: A fatal error occurred while processing the request. The server responded with: Assertion failure: !m_sGuid.empty() at line 31 of /scratch/aime1/adestore/views/aime1_dadvfa0138/bifndn/analytics_web/main/inc/nq/webadminsubsystem/ibotrecipient.h
Error Codes: ACIOA5LN
Error Codes: AGEGTYVF
AgentID: /shared/Target/Test_schedule
Exceeded number of request retries for method RuniBot.
Thanks,
Ajikumar G -
How to view shared (NFS) 11g agent status?
I have installed the MASTER agent and the NFS agent on the same host.
Master Location = /app/oracle/ogc/agent11g (note 748535.1)
NFS State Location = /app/oracle/ogc/emstate
I see an agent running in OEM console, but I don't know if its the Master or NFS.
From the operating system I see an agent process running, but again I don't know which agent is up:
$ ps -ef|grep agent11g |grep -v grep
ogc 11421 1 0 Nov08 ? 00:00:01 /app/oracle/ogc/agent11g/perl/bin/perl /app/oracle/ogc/agent11g/bin/emwd.pl agent /app/oracle/ogc/emstate/sysman/log/emagent.nohup
ogc 11452 11421 0 Nov08 ? 00:00:31 /app/oracle/ogc/agent11g/bin/emagentIf I try to confirm the agent status using emctl, it says the agent is not running:
$ export ORACLE_HOME=/app/oracle/ogc/emstate
export PATH=$ORACLE_HOME/bin:$PATH
$ emctl status agent
Oracle Enterprise Manager 11g Release 1 Grid Control 11.1.0.1.0
Copyright (c) 1996, 2010 Oracle Corporation. All rights reserved.
Agent is Not Running
$ export ORACLE_HOME=/app/oracle/ogc/agent11g
export PATH=$ORACLE_HOME/bin:$PATH
$ emctl status agent
Oracle Enterprise Manager 11g Release 1 Grid Control 11.1.0.1.0
Copyright (c) 1996, 2010 Oracle Corporation. All rights reserved.
Agent is Not RunningHow can I confirm the NFS status from the command line?Problem Solved by setting correct PATH:
export ORACLE_HOME=/app/oracle/ogc/emstate
export PATH=$ORACLE_HOME/bin:$PATH
emctl status agentOS command correctly shows agent status. -
Oem 10g grid control agent secure fails with error
When trying to secure the agent from one of the server it fails with the below error. If any one had faced this issue or know of the problem can help.
emctl secure agent password
Oracle Enterprise Manager 10g Release 10.2.0.1.0.
Copyright (c) 1996, 2005 Oracle Corporation. All rights reserved.
Agent successfully stopped... Done.
Securing agent... Started.
Requesting an HTTPS Upload URL from the OMS...Exception in thread "main" java.lang.NoClassDefFoundError: oracle/sysman/eml/sec/emd/GetSecPort
Done.
Requesting an Oracle Wallet and Agent Key from the OMS...Exception in thread "main" java.lang.NoClassDefFoundError: oracle/sysman/eml/sec/emd/GetWallet
Failed.
Failed to contact the OMS at the HTTP URL set in /apps/apsp1/oracle/emhome/agent10g/sysman/config/emd.properties
The Agent has not been secured.Failed to contact the OMS at the HTTP URL set in /apps/apsp1/oracle/emhome/agent10g/sysman/config/emd.propertiesDid you check that? It seems configuration file 'emd.properties' points to a URL, which cannot be resolved.
Werner -
ODI 11g Agents using OPMN in Windows 2008 R2
Hello,
Has anyone tried installing ODI agents in 11g using "odi_opmn_addagent.bat" script?
If yes, then please share some pointers.
We are able to start agents using 'agent.bat' script and it serves the purpose.
Instead of keeping a cmd window open for agent, we want to install that as an opmn service.
ODI 11g Install guide talks about opmn agents in Appendix I section.
But reality is that odi_opmn_addagent.bat in ODI_HOME/oracledi/agent/bin directory is not working for us.
Thanks.Hiren created another agent , port in ODI is 20910, still cannot start it:
Processes in Instance: EPM_epmsystem1
--------------------------------------------------------------+---------
ias-component | process-type | pid | status
--------------------------------------------------------------+---------
INTERFACE2 | odiagent | N/A | Down
INTERFACE | odiagent | 0 | NONE
Essbase1 | EssbaseAgent | 628 | Alive
C:\Oracle\Middleware\user_projects\epmsystem1\bin>
<ias-component id="INTERFACE2">
- <process-type id="odiagent" module-id="CUSTOM">
- <environment>
<variable id="ODI_HOME" value="/Oracle/product/11.1.1/Oracle_ODI_1\oracledi\agent" />
<variable id="JAVA_HOME" value="/Oracle/Middleware/jdk160_11" />
<variable id="ODI_MASTER_DRIVER" value="weblogic.jdbc.sqlserver.SQLServerDriver" />
<variable id="ODI_MASTER_URL" value="jdbc:weblogic:sqlserver://bbags2sqld2:1433;DatabaseName=BBA_CRS_ODI_MST;selectMethod=cursor" />
<variable id="ODI_MASTER_USER" value="site_crs_des" />
<variable id="ODI_MASTER_ENCODED_PASS" value="b9yXeQkghOwh1RKyqjazX9xrr" />
<variable id="ODI_SECU_WORK_REP" value="HYP_WORKREP1" />
<variable id="ODI_SUPERVISOR" value="SUPERVISOR" />
<variable id="ODI_SUPERVISOR_ENCODED_PASS" value="b9yXeQkghOwh1RKyqjazX9xrr" />
<variable id="ODI_USER" value="$ODI_SUPERVISOR" />
<variable id="ODI_ENCODED_PASS" value="$ODI_SUPERVISOR_ENCODED_PASS" />
<variable id="ODI_JAVA_HOME" value="$JAVA_HOME" />
<variable id="ODI_INIT_HEAP" value="32m" />
<variable id="ODI_MAX_HEAP" value="256m" />
<variable id="ODI_ADDITIONAL_JAVA_OPTIONS" value="" />
<variable id="ODI_ADDITIONAL_CLASSPATH" value="" />
<variable id="ODI_JAVA_EXE" value="$ODI_JAVA_HOME/bin/java" />
<process-set id="odiagent" numprocs="1">
- <module-data>
- <category id="start-parameters">
<data id="start-executable" value="$ODI_JAVA_EXE" />
<data id="start-args" value="$ODI_JAVA_START_OPTIONS oracle.odi.Agent $ODI_REPOSITORY_PARAMS -PORT=20910 -NAME=INTERFACE2 -JMXPORT=21910" />
</category>
- <category id="restart-parameters">
<data id="restart-executable" value="$ODI_JAVA_EXE" />
<data id="restart-args" value="$ODI_JAVA_START_OPTIONS oracle.odi.Agent $ODI_REPOSITORY_PARAMS -PORT=20910 -NAME=INTERFACE2 -JMXPORT=21910" />
</category>
- <category id="stop-parameters">
<data id="stop-executable" value="$ODI_JAVA_EXE" />
Maybe you are looking for
-
Vector problem after copy/paste from Excel
In the past I've been able to drag or copy and paste an image from excel into Illustrator. I've lost that ability (sometimes I'll get a shadow image copied in, but it is not in vectors and it is not editable). If I save the figure as a PDF to copy
-
Mon MAC ne reconnais pas un disque dure externe LACIE
Bonjour, je ne comprend et j'aimerais savoir comment je peux faire que mon MAC 10.4.9 reconnaisse mon disqaue externe. Je le branche mes deux cable dans mes port USB et il ne detecte pas mon disque dur. La premiere fois il l'a detecté, puis il 'a mis
-
Hi, I am implementing the rating system in the application where the user chose the rating from the fiveoptions of 1,2,3,4,5 and then submit, the rating field holds the value of the submited value, when i try to rate again, it picks the current value
-
Netbeans - refactoring from in a package to the default package
Hello, I have a problem, I have some JNI code (two .dll's) and a wrapper that connects my java program to an external USB board. I didn't write the original code, that was done by Mike Peter and the dlls have been compiled so that I can call the JNI
-
Resolving Gambit-C and Ghostscript /usr/bin/gsc conflict
Ghostscript and Gambit Scheme Compiler both want to use /usr/bin/gsc. I already have Gambit Scheme. How can I resolve this conflict to have a working Ghostscript as well (right now the pacman -S ghostscript terminates with an error about /usr/bin/gsc