Deleting application locks shared services account on Oracle Server

Whenever I need to delete an account from within Essbase, ( right click on application delete->application ) the final result is that the HSS account that shared services uses to connect to our oracle server gets locked.
Unlocking it and stop/starting everything resolves the problem, but I would like to stop this from happening.
All other aspects of logging into shared services, etc. admintration, provisioning, all work OK. Just the delete application.
On Redhat Linux, Essbase 11.1.1.3

The bottom line is that we don't certify running Forms using the features of a terminal server to serve up any part of those Forms. That doesn't mean it does not work, but its not certified or supported.
Regards
Grant Ronald
Oracle Product Management

Similar Messages

Shared services projects in oracle?

Hi All,
What products comprise of Shared services projects in oracle?
Could someone please cite few examples for clarifications..
Thanks for your time!
Regards,

Hi user;
What products comprise of Shared services projects in oracle?If your question related wiht oracle shared service please check [this site|http://www.oracle.com/global/uk/sharedservices/ss_10.html] and see its helpfull
Regard
Helios

Service Account for SQL Server Agent on SQL Server 2008 R2

This SQL Server instance is SQL Server 2008 R2 (10.50.4000). We had Active Domain Service accounts created to run the service accounts for SQL Server and SQL Server Agent.
It has become company policy to alter the service accounts that run SQL Server and SQL Server Agent. Currently, both were running under the Local System Accounts. We have altered the SQL Server but we are having issues with the SQL Server Agent.
I am told by another DBA that
"The agent is requiring elevated rights. It will startup if it has local admin rights, but not with domain accounts without admin rights."
So I was wondering if anyone has come across this issue and how did they resolve it.
lcerni

"The agent is requiring elevated rights. It will startup if it has local admin rights, but not with domain accounts without admin rights."
This is completely not true. It is indeed possible to run agent as a domain account without giving it local admin. Chances are you'll need to update the local acls by adding the account to the local security groups. Please see this article for more information:
http://technet.microsoft.com/en-us/library/ms143504(v=sql.105).aspx
Edit: In addition, it'll need rights to SQL server for that account to connect and do its work. It will need to be given sysadmin:
http://technet.microsoft.com/en-us/library/ms191543.aspx
Sean Gallardy | Blog |
Twitter

Registering an application with Shared Services

I just used HfmCopyApplication.exe to migrate an application from out production environment to a newly installed test environment. However, when I open in the HFM System 9 thick client in the test environment and try to "Open Application", I can see the new application listed (so I know the migration was successful), but I get a message saying "+This application is not registered with Hyperion Shared Services. Please contact your administrator.+"
Can anyone provide some insight? I don't know how to register an application that was migrated from another environment, and I'm hesitant to create a new application with the same name because I don't want to accidentally wipe the one out that was just migrated over. I've looked through the documentation for the HfmCopyApplication, but it only says that I need to register the migrated app with Shared Services... It doesn't tell me how.
Thanks.

that usually means that Workspace has not been configured to know that HFM is in the environment as well, or that for some reason you don't have access to that option.
On the machine where Workspace web component has been installed you will need to run the System 9 configuration utility and choose the task "Reporting and Analysis" and "Configure Web Server". When you get to the screen which asks you to specify the hostname and port of the individual web servers (Financial Reporting, Web Analysis etc) make sure that HFM is ticked on (checked) and that the hostname and port for the HFM web server are correct (should be port 80). Complete the steps with Next Next Next and Finish, then restart both the Apache http server and the Workspace web server (Tomcat/Weblogic/Websphere etc). After that, the next time you log in to Workspace and go to Navigate->Administer you should see the options relating to HFM.
If it is still not there, go to Help->About->Version Details and check that a version for Financial Management component is displayed. If a version number is displayed then it something to do with your access rights (maybe a Creator / Administrator group has been set in the HFM Server / Web Config utility, try to remove it and try again?). If no version number is displayed then Workspace still doesn't know about HFM component (the above step hasn't worked).
If you are not sure speak to the person who did the installation, or if you have a support contract with Oracle then contact Oracle support.

Shared Service Accounting with SAP PCM

Good afternoon colleagues,
I'd like to have more detailed information about using PCM for the service cost accounting shared service based.
I want to understand how to integrate a shared service model with an ABC or basic costing model and if it's possible to ensure balancing between the costs that are allocated at enterprise level and those managed at service providers level (Shared Service).
I will try to be clearer....
An ABC model operates starting LineItem and useing center of responsibility, activities and cost objects dimensions. Instead Service dimension, which allows an automatic cross-charging accounging is disconnected from the line item costs .... How may I recovery linkage between LineItem value and the service cost? Is it possible?
Thank you very much for your availability.
Giuseppe

Hi Thomas,
you gave me a good idea
I submit another request .... could I use the service attribute at activity level and the grid summaryactivityvalue?
As following modelu2026
Act1 --> Actatt S1
Act2 --> Actatt S1
Act3 --> Actatt S2
Service 1: rule cellvalue = summaryactivityvalue(,,,S1) Service 2: rule cellvalue = summaryactivityvalue (,,,S2)
so I can use the calculations already carried out at ABC with the use of LineItem and provides balancing with the cost determined at the level of activity.
Unfortunately, sometimes it is not immediately make the link between LineItem and service, there are LineItem covering several services in amount not defined (joint costs)
thanks again for Your clear reply,
Best Regards
Giuseppe

Changed SP application pool service account - 500 internal server error

Hi all,
Trying to resolve some farm installation issues in our test environment. Long story short is that on install a previous user used our SP_Farm account to install everything and pretty much use this account to run all web applications/services.
So I am in the process of trying to resolve one portion of it by allocating a new managed account for the web application pools. I have created a new account called SP_Pool on the DC. This is just a domain user with no specific rights applied (classic authentication).
I changed the account using CA "configure service accounts" for both our mysite and SharePoint site web apps.
SP applied the new SP_Pool to the appropriate workstation groups and DB rights. Tried to hit the site and got the rather generic HTTP 500 Internal Server error. Put SP_Pool into the local admin rights group to test and was able to hit the site so something
is definitely pointing to a rights/permission issue. I was under the impression the app pool accounts did not require any local SP server rights? I have seen mention of "Impersonate a client after authentication" but that's only for Claims based
auth
I've gone through every scenario which are mentioned below:
Tried to connect from a client machine and server. 500 error
All App pools are started and SP_Pool is running both web apps
IIS bindings are same as before
no changes to the web.config
No errors in the Application event viewer
Checked iis logs and has 500 errors throughout it. The 4th number in the sequence usually changes (i.e. 500 0 0 499, 500 0 0 468 etc)
Turned on Failed Request Tracing and no issue has come up
Tried to clear the configuration cache - same deal
Ran process mon - seen nothing out of the ordinary
So based off the above is there anywhere else I could look to try and resolve this issue? Or is there something so damn obvious I've missed here? Running out of ideas
Appreciate any feedback
Thanks

Hello,
Have you tried to turn your SharePoint server off and on again ( I know , it sounds like a basic helpdesk answer but in the case of changing user account for application pool, it already fixed the issue for me)
Best regards, Christopher.
Blog |
Mail
Please remember to click "Mark As Answer" if a post solves your problem or
"Vote As Helpful" if it was useful.
Why mark as answer?

Get real userid from a WDA application that uses service account

A WDA application runs under a service account. How to get the real userid (i mean, the human user)?

When running as a service user, the application is anonymous. In other words no user authentication or identification takes place. What kind of "real" user information would you expect to get? Are you running in the NetWeaver Portal? Or standalone? What informaiton are you looking for? Of course nothing within ABAP is going to be able to "see" the real user since the user session is running as the service account. Why exactly are you using a service user anyway? There are only very few instances where service users in WDA applications wouldn't be a violation of your license agreement.

Need help to register HFM sample applications in Shared Services

Hi all,
I have installed HFM 9.3.1 on the server and I have issues in locating the sample application in the HFM console. I want to register the sample application with Hyperion shared services. But when I tried opening the application, I do not see the sample application and also got an error saying,"cannot connect to server".
When I tried creating new application I got an error saying,"there is an error retrieving the user management project list.Please verify that the project exists".
All I want to do is, to provision the shared services users to the HFM sample applications. Could you provide some suggestions to overcome this issue? I'll appreciate your quick response.
Regards,
Leo

Try using the server name instead of the cluster name.

Need help in registering HFM Sample applications with Shared Services

Hi all,
I have installed HFM 9.3.1 on the server and I have issues in locating the sample application in the HFM console. I want to register the sample application with Hyperion shared services. But when I tried opening the application, I do not see the sample application and also got an error saying,"cannot connect to server".
When I tried creating new application I got an error saying,"there is an error retrieving the user management project list.Please verify that the project exists".
All I want to do is, to provision the shared services users to the HFM sample applications. Could you provide some suggestions to overcome this issue? I'll appreciate your quick response.
Regards,
Leo

Try using the server name instead of the cluster name.

Migrating essbase application through shared services

Hi All,I want to migrate my essbase application (11.1.2.2) from dev to prod.
please suggest me the steps to migrate

This is a question that has been asked many times and with a little research you will have all the info you need.
As you mention Shared Services I take it you are wanting to use LCM, if so then it should be pretty easy and just read through - About Lifecycle Management
Or have a look at First-Time Lifecycle Management Migration for Essbase 11.1.1 with Shared Services Lifecycle Management 11.1.1 it is based on an older version but you get the idea.
You can even go to your favourite internet search engine and type LCM essbase and you should get lots of information to look through.
Alternatively you could user the EAS migration wizard - Migration Wizard and then you will need to export/import the data either through EAS or Maxl.
Cheers
John

Use SIA service account for SQL Server reporting connections (BIP4.1)

Is it possible to use the SIA service account as a proxy for a SQL Server connection using OLE DB? This way, anytime a report was refreshed, the SIA service account would be used when authenticating to the reporting database? This is a common pattern in software development to minimize database maintenance (when there is sufficient security being enforced at the application layer - BOBJ provides this).
This would make SQL Server database security management very easy for the DBAs (just add the BOBJ service account to the database and assign dbreader).
I would think this would be an option, but a Relational Connection only provides the following 3 Authentication modes when using the IDT to create and publish a Relational Connection (OLEDB/MSSQL):
Use BusinessObjects credential mapping
This takes the username and password from the "Database Credentials" section of the BusinessObjects User object for the user in the current session. It passes the info as hard-coded SQL authentication.
Use single sign-on when refreshing reports at view time
This is ONLY for end-to-end single-sign-on (as the error message in the next paragraph specifies) and uses the Windows AD credentials for the user in the current session. It is this method of authentication that I'd like to use, i.e. Windows Integrated Security, but I'd like to have the SIA account act as the account that makes the connection, not end-to-end.
Use specified username and password
This is for hard-coding usernames and passwords (only SQL authentication in OLE DB).
I've tried leaving the "Cache security context" option OFF in Windows AD Authentication settings, hoping it would default to using the service account for authentication to the database... to no avail. It fails during tests in the IDT with the message:
"Single Sign-On failed in the CMS. Please contact your system administrator for details. : The authentication provider (secWinAD) associated with this logon session does not have inter-process Single Sign-On enabled. Contact your system administrator for details. (FWB 00019)"
Alternatively, a SQL user could be hard-coded into the connection (same simple maintenance on the DBA side), but we'd really like to rely on Windows Integrated Security if possible!
Is there a way?
Any help is greatly appreciated!
David

Hey David,
Did you ever solve this? We get the same SSO error when indexing information spaces in Explorer.
Thanks,
Brandon

How to add a service account in SQL Server to display the "Service Account Name" and "Display Name"

Can someone
help with steps on how to add the following in SQL Server 2012 environments?<o:p></o:p>
"Service Account Name" and "Display Name"<o:p></o:p>
Your help will be greatly appreciated.<o:p></o:p>
leonie6214

Hello,
Is the following article what you are looking for?
http://msdn.microsoft.com/en-us/library/ms345578.aspx
If not, could you explain a little bit more what you want to accomplish?
Hope this helps.
Regards,
Alberto Morillo
SQLCoffee.com

Shared Services Connection to SQL Server Failed

Hi all
Am trying to configure an SQL Server 2005 user directory in Hyperion
Shared Services and have got to the screen where I need to type in
all of the database details (i.e. Type, Name, Server, Port, etc) and
a username/password but I keep getting the message:
Connection Failed. Not enough privileges to connect to the directory
server...
I'm trying to connect to the "hypdb" database I've set up in SQL and
have tried the username "hypuser" which is set as the database owner
and another login which I've called "SysAdmin" and has system
administrator priviliges.
Have also tried the system generated used ID "sa" but again no luck.
Am I missing a setting for these logins in SQL which is stopping
Shared Services being able to log in as them?
Also, for the "Name" box on this Shared Services window do I just
come up with my own unique name for the server or does it have to be
something that has already been defined?

Hi,
The first things to know when you connect to MS SQL SERVER is the host or ip address and the port.
If these are correct when you click on RETRIEVE DATABASE, you are able to see all database on the server you specified.
So that means connection is ok, but of course user and password may be incorrect at this level.
If no database are retrieved, that means the host or/and port are not correct.
So before click on TEST, are you able to retrieve the database with RETRIEVE DATABASE button?
Are you able to ping the remote machine (SQL SERVER) with ip address or hostname?
Are you sure about the port for the SQL Server?
Regards,
Mireille

Group managed service accounts for SQL Server

Hey guys,
Unfortunately I missed that (g/s)MSAs aren't supported yet for SQL Servers but I'm using them without any worries since ages.
As i digged a bit deeper I could find different informations due to the related TechNet entrys. So it seems Microsofts Informations about (s)MSAs and gMSAs aren't consistent.
I'm not a SQL Server guy and use SQL only for System Center testing stuff so i would like to get a real world exps of SQL Server guys.
Should I continue using gMSAs or are there any worries I should know?
some sources I found so far:
Not supported:
"Hi Adam,
Thank you for your feedback. Windows Server 2012 Group Managed Service Account is not currently supported as SQL 2012 released earlier than Windows Server 2012. We will consider to support gMSA in future SQL Server release.
Regards,
Min He, Program Manager, SQL Server"
11.2012 -
https://connect.microsoft.com/SQLServer/feedback/details/767211/gmsa-for-sql-server-failover-Clusters
gMSA are not yet available, are not yet supported for SQL Server. gMSA exist and are available and supported in Windows Server 2012 and higher.  SQL does not support them , but
from an OS perspective, they exist and are supported.
http://blogs.msdn.com/b/sqlosteam/archive/2014/02/19/msa-accounts-used-with-sql.aspx
Within the FAQ Task Scheduler isn't supported as well ...
http://technet.microsoft.com/en-us/library/ff641729%28WS.10%29.aspx
... but also PFEs using them for Tasks... this is confusin... 0o
http://blogs.msdn.com/b/arvindsh/archive/2014/02/03/managed-service-accounts-msa-and-sql-2012-practical-tips.aspx
supported?:
Configure Windows Service Accounts and Permissions
... New Account Types Available with Windows 7 and Windows Server 2008 R2
http://technet.microsoft.com/en-us/library/ms143504(v=sql.110).aspx#Default_Accts
The MSA must be created in the Active Directory by the domain administrator before SQL Server setup can use it for SQL Server services.
others sources won't mentioning s/gMSAs...
I couldn't find clear informations about using gMSA for SQL Server 2014.
only the same page which also Looks like the page for 2008 R2 and SQL 2012.
Configure Windows Service Accounts and Permissions
            SQL Server 2014
http://msdn.microsoft.com/en-us/library/ms143504.aspx
annoying topic so far... ;)

Hi Enrico
aside from what Dan says about the risk for support, on which I agree, the following thread may clear it up a bit:
http://social.msdn.microsoft.com/Forums/sqlserver/en-US/acb2048c-ffce-4d44-b882-6aafc7eb689d/managed-service-accounts-to-run-sql-server-service?forum=sqlsecurity
Andreas Wolter (Blog |
Twitter)
MCM - Microsoft Certified Master SQL Server 2008
MCSM - Microsoft Certified Solutions Master Data Platform, SQL Server 2012
www.andreas-wolter.com |
www.SarpedonQualityLab.com

Question : Service Accounts for SQL Server 2012

Hello,
I am planning to create AD accounts for SQL Server 2012 services that will be installed on Windows 2012 server.
I was reading the following
Configure Windows Service Accounts and Permissions
and
Windows Privileges and Rights
Is there a recommendation / document that would list that assocation of SQL Server Services with Actvie Directory service accounts / privileges required for installation and starting the services.
Isn't it recommended to create separate account for every service and they should not be local accounts ?
Hope to hear soon as to what industry standards are being followed for production systems ?
Thank you very much in advance.
Regards
Nikunj

From MSDN:
Each service in SQL Server represents a process or a set of processes to manage authentication of SQL Server operations with Windows. Each service can be configured to use its own service account. This facility is exposed
at installation. SQL Server provides a special tool, SQL Server Configuration Manager, to manage the services configuration.
When choosing service accounts, consider the principle of least privilege. The service account should have exactly the privileges that it needs to do its job and no more privileges. You also need to consider account isolation; the service accounts should
not only be different from one another, they should not be used by any other service on the same server. Do not grant additional permissions to the SQL Server service account or the service groups.
From Glen Berry's Blog:
You should request that a dedicated domain user account be created for use by the SQL Server service. This should just be a regular, domain account with no special rights on the domain. You do not need or want this account to be a local admin on the machine
where SQL Server will be installed. The SQL Server setup program will grant the necessary rights on the machine to that account during installation.
You will also want a separate, dedicated domain user account for the SQL Server Agent service. If you are going to be installing and using other SQL Server related services such as SQL Server Integration Services (SSIS), SQL Server Reporting Services (SSRS),
or SQL Server Analysis Services (SSAS), you will want dedicated domain accounts for each service. The reason you want separate accounts for each service is because they require different rights on the local machine, and having separate accounts is both more
secure and more resilient, since a problem with one account won’t affect all of the SQL Server Services.
Depending on your organization, getting these domain accounts created could take anywhere from minutes to weeks to complete, so make sure to allow time for this. For each one of these accounts, you will need their logon credentials for the SQL Server setup
program. You are going to want to make sure that the accounts don’t have a temporary password that must be changed during the next login. If they are set up that way, make sure to change them to use a strong password, and record this information in a secure
location.
Please Mark This As Answer if it solved your issue
Please Mark This As Helpful if it helps to solve your issue
Thanks,
Shashikant

Deleting application locks shared services account on Oracle Server

Similar Messages

Maybe you are looking for