Browse native directory from shared services

Is there a way to browse the browse native directory from shared services with a ldap browser?
I cant get it working on shared_server_name port: 58080?

Hi,
You can use an ldap browser but you are trying to use the web server port and not the open ldap port, the open ldap port is 58089, you can see that in the css.xml file.
Also you will need to set up the correct base dn which is dc=css,dc=hyperion,dc=com
For logging in use the User DN :- CN=root,dc=css,dc=hyperion,dc=com
Cheers
John

Similar Messages

  • Difference between user directory and native directory in Shared Services

    Hi,
    Please any one can help me......
    I am new to Hyperion, what is difference between Hyperion Shared services Native directory and User/Active directory.
    thanks in advance..............

    Hi,
    Shared Services native directory, as the name suggests, is a user directory (i.e. ldap) that is native to Hyperion. It allows you to create users, groups and define access rights to Hyperion Products. User/Active directory is the directory where users in your company reside. Shared Services can connect to it and retrieve the list of users and groups. You can define the access rights for these users if you configure the system in a way that it works with Active Directory.
    You can use both combined also. Meaning, you can create user groups in native directory and assign native directory users into them and define access rights onto user groups and/or users.
    Cheers,
    Alp

  • Error with Active Directory Synchnorisation from Shared Services to Essbase

    Have recently installed HS9 v 9.3.1
    In Shared Services i have created both native and MSAD users. Everything works fine with the native users (Planning,EAS etc...)
    MSAD user directory has been configured & tested -ok on Workspace.
    The MSAD users have been provisioned and can access Workspace & Shared services without any issue.
    However, when accessing Planning, the following error is displayed in the Essbase server log:
    Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051001)
    Received client request: Create External User With Type (from user [hyperion])
    [Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Error(1051205)
    Single Sign On function call [css_getUser] failed
    [Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Warning(1051003)
    Error 1051205 processing request [Create External User With Type] - disconnecting
    [Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051001)
    Received client request: Set Application FrontEnd Type (from user [hyperion])
    [Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051001)
    Received client request: Get Security Mode (from user [hyperion])
    [Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051001)
    Received client request: Set Application Id For Planning (from user [hyperion])
    [Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051001)
    Received client request: Get Security Mode (from user [hyperion])
    [Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051001)
    Received client request: Get Security Mode (from user [hyperion])
    [Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051001)
    Received client request: Re-Sync User/Group with Single application (from user [hyperion])
    [Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051590)
    Synchronization started for user/group [MSADUser]
    [Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051591)
    Synchronization completed for user/group [MSADUser]
    [Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Error(1051013)
    User/group MSADUser does not exist
    [Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Warning(1051003)
    Error 1051013 processing request [Re-Sync User/Group with Single application] - disconnecting
    ---------- When accessing through XL Addin, the foll is displayed:
    [Tue Mar 18 16:49:09 2008]Local/ESSBASE0///Error(1051012)
    User MSADUser does not exist
    [Tue Mar 18 16:49:09 2008]Local/ESSBASE0///Warning(1051003)
    Error 1051012 processing request [Login] - disconnecting
    Thanks !!!

    Hardcode IP addresses instead of the server names in the essbase.cfg file and the Shared Services CSS.XML file for the Shared Services server references.
    Restart SS/Essbase, provision an MSAD user, then do a Refresh from Shared Services in AAS.
    Verify your MSAD userID then shows up as an Essbase user in AAS(Display User list for the Essbase server)
    As long as the MSAD users show up in the user list, they should be working.

  • How to extract external directory users from a shared services group from shared services RDBMS repository

    Hi,
    I have a security group in shared services, which has external directory users. I want to extract the list of users from shared services RDBMS repository using a SQL query. Please let me know if this is possible and from which table(s) I can query such list.
    Thanks...

    You need to use CSS_Groups, CSS_GROUP_MEMBERS and CSS_USERS tables in your Foundation DB. Something like below will give you these details:
    select b.Name  ,a.Name  from HYPFOUND.CSS_GROUPS b ,
    HYPFOUND.CSS_USERS a ,
    HYPFOUND.CSS_GROUP_MEMBERS c
    WHERE c.MEMBER_IDENTITY = a.IDENTITY_ID and
    c.GROUP_IDENTITY = b.IDENTITY_ID
    GROUP BY (b.Name,a.name)

  • Error from EAS - "refreshing security from Shared Services failed"

    Hi,
    I was using Native only security in HSS for Essbase 11.1.1.3 and EAS allowed me to Refresh security from Shared Services. (Essbase security was already externalized to HSS.)
    However, after I added "MS Active Directory", and provisioned a MSAD user to a native Planning group, EAS errors out with "refreshing security from Shared Services failed" .
    I checked Essbase security and that MSAD user is not added to Essbase.
    From Essbase Log I see:
    Essbase failed to get roles list for [ESB:Analytic Servers:servername:1] from Shared Services Server with Error [32:1062:Failed to connect to the user directory [ HSS'sMSADname].
    I then tried to remove MSAD from our H Shared Services and see if this problem goes away. However, MSAD still shows on the left panel menu in H Shared Services. How can I get rid of MSAD?
    Any suggestions?
    Edited by: user643332 on May 12, 2010 12:05 AM

    Hi,
    Are you sure you have removed it from shared services, you may have just disabled it.
    You must restart the shared services application server to apply any changes made.
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Refresh Security from shared services fails.

    Hello all,
    On our environment I went into shared services with admin rights and changed the native directory password. And from then on I have not been able to refresh the security of essbase server in EAS. I get the following error,
    Essbase failed to get roles list for [ESB:Analytic Servers:Servername:1] from Shared Services Server with Error [32:1062:Failed to connect to the user directory [Native Directoy].]
    Also I would like to know if native directory password means the password "password" which comes as default for the username admin. Am new to essbase and was under the impression that native directory password means the password "password" which came as default for the username admin. Please help, this is a production issue which started only because I changed the native directory password and now I need to get it fixed.
    Thanks.
    Edited by: Teddd on Jan 6, 2013 4:07 PM

    Please confirm the version of the Shared Services (HSS) and Essbase, EAS server.
    Also let me know, if the HSS, ESSBASE & EAS installed on the same box ?
    If they are on the different servers, ensure that there is no network communication issues.. (try performing telnet on the port from each other servers)
    E.g Open command prompt - telnet servername port (telnet HSS_SERVER 28080), hit enter.. if it shows the blank screen .. it is successful and there is no communication issues.
    Also you could try..
    On EAS server, add the below in windows registry under EAS... and restart the machine..
    ESS_CSS_JVM_OPTION1 = -Dcom.hyperion.css.socketTimeout=60000
    if you are not comfortable updating the registry contact you admin and ensure to take the backup before editing...

  • Not able provision a new native group in shared services

    Hi,
    I am trying to add a new native group in shared services and trying to provision the group. But I am getting the following error:
    90:7019:Failed to process the request
    Is there any solution for it. Can anyone suggest me how to proceed further.
    Thanks,
    Hima

    Can determine if the provisioning is failing for a particular application? Try to pick something confined to shared services like "application creator" in shared services and see if you can provision just that role. This will tell you if it is an issue with metadata from a product outside of shared services.
    Do you have any applications with the same name or registered more than once in your application groups in shared services?
    If it fails for everything you try have you restarted shared services and checked your jvm heap settings?
    Also, in the logs Shared Services directory there are many log files , can you check them for any related error messages?
    Thanks
    Nick

  • EAS Console - Not getting the option "Refresh security from Shared Services"

    Hi,
    In EAS Console 11.1.2.2, I am not getting the option "Refresh security from Shared Services" when I right click on Security (under Essbase Servers).
    However, I can see this option via EAS Console 11.1.1.3 (current existing version).
    Could you please let me know how can I get this option in EAS Console 11.1.2.2? Is this by any chance related to the option "Externalize Users"?
    Thanks in advance.

    Thanks a lot join for this information and your kind support .
    One more question:
    The owner of the Planning application is user 'hypadmin'.
    I can see the SIDs of user 5001 a little different in both the versions. Is this ok?
    Hyperion Planning 11.1.1.3 (Existing Environment)
    USER_ID     SID ROLE SYNC_PSWD OFFLINE_ENABLED HUB_ROLES
    50001          native://DN=cn=0fa19f8241602600:3b78a0e0:130926693d2:-78ba,ou=People,dc=css,dc=hyperion,dc=com?USER 3 2 0 5019
    Hyperion Planning 11.1.2.2 (New Environment)
    USER_ID     SID ROLE SYNC_PSWD OFFLINE_ENABLED HUB_ROLES
    50001           native://nvid=54aec0428a3ba591:-44b7ca9b:13f03c114d2:-5d99?USER 3 2  4507
    I have not yet performed "Externalize Users" yet in the new environment (11.1.2.2) throgh EAS Console. Is it required in the newer version 11.1.2.2?

  • NSAD user directory for shared services not working

    Hi!
    Im trying to configure a MSAD user directory for shared services in Essbase 11.1.2.1. I have done it correctly in Essbase 9.3.1.
    Back then i had to import certificates to the cacerts java file. Is it still necesary? I dont see it mentioned anywhere in the v.11 docs, however, its not working using same parameters. I get an error saying i have specified "either host or port value incorrect".
    Do i have to import certificates or am i missing anything else, can anybody help?
    Thanks!!
    Jorge

    Certificates have nothing to do with MSAD.
    when you reach to "MSAD user configuration" tab in Shared Services, try to see if you can auto configure user by inputting: sAMAccountNmae="some user ID", replace some user ID with your or admin ID, and verify if you can pull the users from the MSAD.

  • Exclude a user from Shared Services LCM export

    How do I exclude a specific user from the Shared Services LCM export?  In the migration definition file I am trying to specify something like the following:
    pattern="*" and pattern<>"lcm_admin"

    What exactly you want to try after/by exporting users from Shared services?
    Regards,
    Santy.

  • Refresh security from Shared Services fails - System11

    Hi All,
    WHen refreshing the Essbase security from Shared Services in System 11 we get the following error:
    Error 1051522: Essbase failed to get group's member tree with Error [CSS Error: Unknown error: Could not get exception message from exception object]
    We see the same error in the Essbase log.
    In the Shared Service Security CLient.log we get the following warnings:
    2009-03-03 16:12:58,294 WARN [Thread-108] CSS dll either not found in java.library.path or can't be loaded[Root Cause: D:\Hyperion\common\CSS\9.5.0.0\bin\css-9_5_0.dll: Can't load IA 32-bit .dll on a AMD 64-bit platform ] com.hyperion.css.spi.impl.ntlm.NTLMTrustedDomain.<clinit>(Unknown Source)
    2009-03-03 16:12:58,294 WARN [Thread-108] Error initializing trusted domains or the workstation name.[Root Cause: getNtTrustedDomains ] com.hyperion.css.spi.impl.ntlm.NTLMTrustedDomain.<clinit>(Unknown Source)
    Has anyone come across this?
    Thanks for your help.
    Seb

    Hi Seb,
    I take it you are using NTLM as your external authentication.
    The error message means that it can't see css-9_5_0.dll in the path, if you are on windows make sure the path contains <drive>:\Hyperion\common\CSS\9.5.0.0\bin\
    If it doesn't update the environment variables, not sure if you need to reboot it may pick it up straight away, you can check by going to a command prompt and running echo %path%
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • How do I remove previous configuration of Essbase Server from Shared Services?

    Hi All,
    I'm trying to reinstall Essbase Server (on a new server; we've upgraded the Essbase Server hardware) and reload data but the current install believes I've already configured it despite removing EssbaseCluster-1 from Shared Services Application Groups.  Is there something else I have to do to get the new install of Essbase Server configured as a new Essbase instance?
    Thanks,
    Ryan

    I did the install as PTH0RC and my inventory.xml is configured correctly, but I get the following message trying to run a simple view
    C:\Oracle\Middleware\EPMSystem11R1\common\config\11.1.2.0\resources\instance>epmsys_registry view
    com.hyperion.hit.registry.exceptions.RegistryException: reg.properties not configured.
            at com.hyperion.hit.registry.Registry.getInstance(Registry.java:338)
            at com.hyperion.hit.registry.regedit.RegEditUtility.main(RegEditUtility.java:101)
    An error occured during the operation. Detailed Message is - reg.properties notconfigured.

  • Problem with Business Rules access from Shared Services

    Hello,
    When trying to access Business Rules from Shared Services (expand Business Rules and click on the application) I get the "Refer to the Security Guide to configure security permissions for this application" message, but the user is fully provisioned for Business Rules. It happens even logged on as admin. Access from Administration Services works fine. The version Hyperion system 9 (9.3.0.1). What is wrong? Help, please.
    Thanks,
    Timur

    You can't access Business Rules from Shared Services. This is no different from any other application - Planning, Essbase, etc. You can provision users to the application roles, but you can't actually do anything with the application, other than security, in Shared Services. You use Admin Services to maintain Business Rules.

  • Error migrating Security from Shared Services.

    Hi,
    I was using Hyperion Planning 9.3.1's in Import/ Export utility in D:\Hyperion\common\utilities\CSSImportExportUtility\cssimportexport\importexport\CSSExport.bat. I'm trying to export Security from Shared Services into xml format. I get the following error message:
    Malformed \uxxxx encoding
    Anyone with similar experiences? Hyperion's impexp.pdf makes the steps so complicated!!

    Answering my own question:
    Since I am in Windows, I was using backslashes in my paths when I updated file:
    importexport.properties
    The error went away after I changed the backslashes to forward slashes in all paths.

  • Essbase EAS - Refresh Security from Shared Services

    Hi All,
    Just went live with Essbase. We are using MSAD Groups in Shared Services for our users. I noticed that if we add a new user to a provisioned group, they don't automatically get access to Essbase. I believe I have to select 'Refresh Security From Shared Services' in EAS. I am nervous about doing this with users in the system as I don't want to accidentally boot them out. Is there any risk? Reports stopped? Users forced to logout? Smartview implications?
    I feel like I did it before and disrupted some users during development but I am not sure.
    Much Appreciated,
    Mike

    Thx. I just did it and it didn't seem to disrupt anything. I tested with a user with a smartview open, a report running and a WA dashboard on screen. It did mention that after refreshing the essbase server would be disconnected and i would have to reconnect but it didn't actually boot me out or disrupt any process.
    I guess it's okay to do on a live production system. ?
    Thx,
    Mike

Maybe you are looking for