Essbase 9.3.1 and problem with LDAP users

Essbase 9.3.1 users externalized to Shared Services. Windows boxes. LDAP users set in Shared users. Provisioned with Essbase rights (administration and speciific cube access). Then in EAS have refreshed security from Shared Services. LDAP users show up now in EAS.
However when attempting to connect through excel add-in or through EAS or through Financial reports to any Essbase app receving and error message that "login fails due to invalid credentials".
Users setup in Shared services as Native Users are able to access Essbase apps.
any ideas?

It came down to a Novell E Directory LDAP setting. ID Attribute. We had it set to CN (based on a recommendation by a LDAP resource, although the default is GUID and GUID is recommended by the documentation).
Turns out that Essbase when authenticating the LDAP user was forcing it back to GUID and causing some sort of mismatch.
Setting the ID Attribute in the LDAP Configuration back to GUID resolved the issue.

Similar Messages

Problem with LDAP in BEA Portal

Problem with LDAP in BEA Portal
I have a list of 50 user which should be cerated in portal staging(devlopment) machine and should be transfered to
production machine using LDAP
Steps which i followed to create Users
1.Create User Profile with 2 parameters branch and Role
2.I have list user in the Xls file with Username,password ,branch and Role
3.Write a java File which will read the Xls File
4.The users are created in the staging machine for the portal
Steps which i followed in LDAP to tranfer the created User form Devlopment to Production
1.Export the created user from Devlopment (which was moved as .DAT in my local directory)
2.import the user from local direcory to production machine
The Users are imported in the production machine with username and password but the role and branch values are empty
We need a solution for importing the user with role and branch corresponding to each user.
Thanks in Adv
Suresh

In Portal 8.1, user name and password in stored in LDAP where as user profile values are stored in database. That is the reason you are not able to see the user profile values.
Check once again whether you can see these values through admin tool. In case,it is not(after confirmation again),you might have to use APIs to do this for you incase you dont want to manage through Admin Tool.
Thanks,
Prashanth Bhat.

Any new about updating lion to 10.7.4 and problems with bluetooth devices like Bose Soundlink Bluetooth Speaker?

Any new about updating lion to 10.7.4 and problems with bluetooth devices like Bose Soundlink Bluetooth Speaker?

Monroe
Just in the moment i updated to lion 10.7.4 my Bose Soundlink Bluetooth stop working as good as it was. I´m gonna try the update in the Bose web page. I hope it works

Problem with both user and cmos password

I have problem with my user and cmos password, can formating clear the passward with remove the cmos battary.

It depends on the model. Formatting will not touch the BIOS or power on passwords but will take away the Windows user password and allow you to have a different one, but will kill all the data on the machine. Removing the CMOS battery might clear the BIOS password and power on password, but on most current laptops even that will not help. The BIOS data is on a chip that holds its contents even when all power is removed.

How to force a new password in portal with LDAP user? external users

With an external portal (used by agents that do not work for you or reside in your office), company policy is for password to be changed every qtr.
If the users are creating as LDAP users how to force them to change their password when required?
Is this a custom application that needs to be written so when they log into the portal if the qtr has expired the portal ask them to enter a new password that becomes valid for the next qtr.
Versus internally deleting and emailing all the users a new password?

Hi Glenn,
We are getting one problem when we are creating user in LDAP and login with that user in Portal that time we are getting Password change screen , but when we create a user in LDAP and change the password of that user in LDAP then when the user tries to Login to portal that time we are not able to see the password change screen.
But again if we change the password of that user through Portal we are able to see change password screen.
can you help on this how we can force the user to change password when we are changing password in LDAP or in SAP System.
Regards
Trilochan

Error message in time machine: "There was a problem with the user name or the password of the network

I have been unable to back up my macbook to my time capsule for some time now. I received the following error message (translated from Swedish) when trying to back up using time machine:
"The network's volume could not be placed on the desktop. There was a problem with the user name or the password for the network.
Open system preferences and go to Time Machine. Select the volume for security backup again and state the correct user name and password."
I have confirmed the network password, and also tried with resetting the password. I have not idea what else to do. Any help is much appreciated.
Best regards,
John

I have been unable to back up my macbook to my time capsule for some time now. I received the following error message (translated from Swedish) when trying to back up using time machine:
"The network's volume could not be placed on the desktop. There was a problem with the user name or the password for the network.
Open system preferences and go to Time Machine. Select the volume for security backup again and state the correct user name and password."
I have confirmed the network password, and also tried with resetting the password. I have not idea what else to do. Any help is much appreciated.
Best regards,
John

Sql Devloper 4.0.0.13 - problems with displaying user data types

Hi,
I have installed new version of sqldeveloper and have discovered some problems with displaying user data types. The data that is described as VARCHAR2 are displayed with ‘???’.
The problem persist in table view, script output and exported files.
My type is described as follows:
create or replace TYPE "DPTY_ADRESA" AS OBJECT
ID_DPSF_OPCINE                                         NUMBER,
ID_DPSF_MJESTA                                        NUMBER,
OPCINA                                            VARCHAR2(100),
MJESTO                                            VARCHAR2(100),
ULICA                                 VARCHAR2(200),
BROJ                                   VARCHAR2(20),
SPRAT                VARCHAR2(20),
OSTALO                             VARCHAR2(100),
CONSTRUCTOR FUNCTION dpty_adresa RETURN SELF AS RESULT
add MEMBER FUNCTION dajAdresu RETURN VARCHAR2 cascade;
when make select column from table that contains this type I get next results:
CASE 1:
SQLDeveloper Version 3.2.20.09; Build MAIN-09.87; JDK 1.6.0_43; Windows 7 64 bit
Select:
select id, adresalokacija
from dptr_saglasnosti
where id = 1;
Result:
        ID ADRESALOKACIJA
         1 COMP.DPTY_ADRESA(124,4913,'TRAIK','TURBE','BABANA','3452','0',NULL)
END CASE 1;
CASE 2:
SQLDeveloper Version 4.0.0.13; Build MAIN-13.80; JDK 1.7.0_40; Windows 7 64 bit
Select1:
select id, adresalokacija
from dptr_saglasnosti
where id = 1;
Result1:
ID ADRESALOKACIJA
         1 COMP.DPTY_ADRESA(124,4913,'???','???','???','???','???',NULL)
But if I select one element it is displayed normal.
Select2:
select id, a.adresalokacija.opcina
from dptr_saglasnosti a
where id = 1;
Result2:
ID ADRESALOKACIJA.OPCINA
         1 TRAVNIK
END CASE 2;
I have tried this scenario on three different pc with same output.
Pleas help me to get rid of the '???' in result.
Best Regards,
Omer

I tried on SQLDeveloper Version 4.0.0.13; Build MAIN-13.80; JDK 1.7.0_45; Windows 7 64 bit; NLS setting is default
all data can show,No ??? in result
Test step as following:
create or replace TYPE "DPTY_ADRESA" AS OBJECT
ID_DPSF_OPCINE                                         NUMBER,
ID_DPSF_MJESTA                                        NUMBER,
OPCINA                                            VARCHAR2(100),
MJESTO                                            VARCHAR2(100),
ULICA                                 VARCHAR2(200),
BROJ                                   VARCHAR2(20),
SPRAT                VARCHAR2(20),
OSTALO                             VARCHAR2(100),
CONSTRUCTOR FUNCTION dpty_adresa RETURN SELF AS RESULT
alter TYPE "DPTY_ADRESA" add MEMBER FUNCTION dajAdresu RETURN VARCHAR2 cascade;
CREATE TABLE dptr_saglasnosti (
adresalokacija        DPTY_ADRESA,
id    number);
INSERT INTO dptr_saglasnosti VALUES (
DPTY_ADRESA (65,225,'Vrinda Mills', '1-800-555-4412','sss','aaaa','eeeee','attta'),1 );
select id, adresalokacija from dptr_saglasnosti where id = 1;
ID ADRESALOKACIJA
1    HRCP.DPTY_ADRESA(65,225,'Vrinda Mills','1-800-555-4412','sss','aaaa','eeeee','attta')

Charm: BP problem with the user

Hi!
I have problem with the user for the usage of ChaRM.
When I try to set the the (urgent) correction in Development i get the following error.
There is no valid business partner assigned to your user.
Meanwhile the appropriate BP-entry for the user exists:
External BP number: <SID> <CLNT> <user name>
Identification number: <SID> <installation number> <user name>
Furthermore I have the following error, when I try to approve the change request:
Partner 141 (Change-Manager) is neither an employee nor an organizational unit
I would be great to get some help here.
Thank you
regards
Thom

Hi Thomm,
1. There is no valid business partner assigned to your user.
In BP under identification tab,
ID type idenification number
CRM001 <SID> <installation number><CLNT><username>
2.Partner 141 (Change-Manager) is neither an employee nor an organizational unit
Assign the BP role as "Employee" for Change Manager
regards
Naveen

Install CRS and RAC with different users

I' m tring to install CRS and RAC with different users.
It is supported but I don't find documentation.
Have someone experience with this configuration ?
My question are related to permission/own of voting and ocr file.
in this configuration is CRS owner or DB owner that run srvctl commands ?
Thanks !

Yes it is ... check out the RAC FAQ on metalink, and just as Chris metioned the users will need to have the oinstall group as their primary..
"Is it supported to install CRS and RAC as different users.
Yes, CRS and RAC can be installed as different users. The CRS user and the RAC user must both have "oinstall" as their primary group, and the RAC user should be a member of the OSDBA group.
Modified: 09-SEP-04 Ref #: ID-5769 "

Problem with"Evaluate User Policies"sch task after the upgrade OIM R1 to R2

Problem with "Evaluate User Policies" scheduled task after the upgrade from OIMg R1 to OIM 11g R2
After the upgrade process is completed we are having issue with Access policy not triggering if rule is set to custom attribute
- We had a Rule with custom attribute (Policy='Full-Time') the value gets populated by event handler which triggers the access policy in OIM 11g R1.. which worked fine in OIM R1
After the upgrade the value is getting populated but even after running "Evaluate User Policy" the Access Policy is not getting triggered.
We tested creating a rule with other custom attribute,policy does not trigger even after running Evaluate User Policy schedule Task in this case too
but if we try creating rule with OOTB attributes(Country='US') it works fine the access policy got triggered after running Evalute User Policy
One more issue we observed is
- Evaluate User Policy value usr_policy_update is not updated still set to '1' even after the Access policy got triggered (as it worked when rule is set to OOTB attribute)
I believe after the evaluate user policy gets triggered for a user it should update the value from '1' to '0')
Please let me know if you have any idea..Thanks!

well, I overcame the issue by 'fooling' the installer: on second node, change the scan ip address to point to something else (ie, different ip address to the scan in the first node, cleanup then rerun root.sh, it went past the trouble stage, then I still have problem later at the time database creation. I think scan ip address has to be setup correctly (round robin thingy)
This is how i did the cleanup before rerun root.sh
/u01/app/11.2.0/grid/crs/install/rootcrs.pl -verbose -deconfig -force

How can I share applications and softwares with different users of the same computer?

First question: How can I share applications and softwares with different users of the same computer?
Second : Can I use 2 different I cloud accounts to synt 2 iphones with one computer?

Applications installed on the admin account are available to all user accounts unless Parental Controls are enabled.
Yes. Separate user accounts, help here > How to use multiple iPods, iPads, or iPhones with one computer

EDSPermissionError(-14120) problems with LDAP, SSL and Directory Utility

Hello everyone,
Apologies for the repost but I think I may have made a mistake by posting this originally in the Installation, Setup and Migration forum instead of the Open Directory forum. At least I think that may be why I didn't receive any responses.
Anyway, I've been trying to get my head around Open Directory and SSL as they are implemented in Mac OS X Server 10.5 Leopard, and have been having a few issues. I would like to set up a secure internal infrastructure based around a local Certificate Authority that signs certificates for other internal services like LDAP, email, websites, etc.
I only have one Mac OS X Server and it is kind of a small office so I have gone against best practice and simply made it a CA (through Keychain Utility). I then generated a self-signed SSL certificate through Server Admin, and used the "Generate CSR" option to create a Certificate Signing Request. This went fine, but I did have some problems signing it with the CA, because the server documentation suggested that once I signed it it would pop open a Mail message containing the ASCII version of the signed certificate - it did not, and it took me a loooong time to realize that I could simply export the copy of the signed certificate it put in my local Keychain on the server as a PEM file and paste this back into the "Add Signed or Renewed Certificate from Certificate Authority" dialog box in Server Admin. Hopefully this can be fixed in a forthcoming patch, but I thought I would mention it here in case anyone else is stuck on this issue.
Once I did this I was able to use this certificate in the web server on the same machine and sure enough I was able to connect to it with with clients who had installed the CA certificate in their system Keychains without getting any error messages - very cool.
However, I haven't had quite as much luck getting it going with LDAP/Open Directory. I installed the certificate there as well, but have run into a number of problems. At first I could not get clients (also running 10.5.2) to talk to the server at all over SSL, receiving an error in Directory Utility that the server did not support SSL. I eventually discovered that the problem seemed to lie in the fact that the OpenLDAP implementation on Leopard is not tied in with the system Keychain, necessitating some command-line voodoo to install a copy of the CA cert in a local directory and point /etc/openldap/ldap.conf at it, as documented here: http://www.afp548.com/article.php?story=20071203011158936
This allowed me to do an ldapsearch command over SSL, and seemingly turn SSL on on clients that were previously bound to the directory, and additionally allowed me to run Directory Utility on new clients and put in the server name with the SSL box checked and begin to go through the process of binding. Once this seemed to work, I turned off all plaintext LDAP communication and locked down the service by checking the "Enable authenticated directory binding," "Require authenticated binding," "Disable clear text passwords," and "Encrypt all packets" options in Server Admin. However, I am now running into a new problem, specifically that I cannot successfully bind a local account to a directory account over SSL.
Here's what happens:
1) I run Directory Utility, (or it auto-runs) and add a server, typing in the DNS name and clicking the SSL box.
2) I get asked to authenticate, and type in user credentials, including computer name (incidentally, should this be a FQDN or just a hostname?)
3) Provided I put admin credentials in here and not user-level credentials, I get taken to the "Do you want to set up Mail, VPN, etc.?" box that normally appears when you autodiscover or connect to an Open Directory server.
4) I click through, and am asked for a username and password on the server, as well as the password for my local account.
5) When I put this information in, I get a popup with the dreaded "eDSPermissionError(-14120)" and it fails.
Checking the logs in Server Admin reveals nothing special, and while I have seen a couple other threads on this error and various other binding problems:
http://discussions.apple.com/thread.jspa?messageID=5967023
http://discussions.apple.com/message.jspa?messageID=5982070
these have not solved the problem. In the Open Directory user name field I am putting the short username. I have tried putting [email protected] and the user's longname but this fails by saying the account does not exist. For some reason it does seem to work if I bind it to the initial admin account I created, but no other user accounts.
If I turn all the encryption stuff off I am able to join just fine, so I am suspecting that the error may lie in some other "under the hood" piece of software that doesn't get the CA trust settings from the Keychain or the ldap.conf file, but I'm stymied as to which piece of software this might be. Does anyone have any clues on what I might be able to do here?
Thanks,
Andrew

Hard to tell what is happening without looking at the application
source, knowing what OS & hardware you're using etc. You might want to
try running with different JVM versions to see if it's actually the VM
that is the problem. If you have a support contract with BEA you could
ask support to help you diagnose this.
Regards,
/Helena
Ayub Khan wrote:
I have an application running on Weblogic 8.1 ( with JRockit as the JVM). This
application in turns talks to an iPlanet Directory server via LDAP/SSL. The problem
seems to happen on loading the machine..the performance progressively gets worse
and after a couple of seconds, all the threads stop responding. I checked the
heap, cpu and the idle threads in the execute queue and there is nothing there
to trigger alarms...there are quite a few idle threads still and the heap and
the cpu utilization seem OK. On doing a thread dump, Is see that all the other
threads seem to be in a state where they are waiting for data from LDAP and it
is basically read only data that they are waiting on.
Does anyone know what it is going on and help point me in the right direction.
-Ayub

BO XI R2 problems with LDAP plugin talking to OID

Hi all,
We have a customer with OID 10g (Oracle Internet Directory, exact version 10.1.0.4), and BO 6.5, and we are in the process of upgrading to BO XI R2 (sp3).
In our BO XI R2 (sp3) server, we are facing problems configuring the LDAP plugin. When we map a LDAP group (a dynamic group created in OID), BO retrieves the users that belog to the group but when we go to the Users list and try to see which groups this users belongs to, the CCM does not list our LDAP group.
Moreover, when we try to login with LDAP authentication in infoview, the following error:
"Account Information Not Recognized: An error occurred at the server : LDAP Authorization failed. Please make sure your entry belongs to a mapped LDAP group."
Has anybody faced similar issues? Any idea how can we solve this?
This issue is very important for our customer and could block the migration progress....
Thank you very much in advance.
Regards

In that case a support engineer will likely need to scan the CMS and possibly packet scan the LDAP queries. When going to a group and viewing users a live query is sent to LDAP, is this info correct (do groups contain the right users)?
But when viewing users (groups) this information is based on a cached graph that should be updated approximately every 15 minutes by default. Your issue seems to indicate this process is either slow or failing all together. Tracing with an engineer is the best rout to take. Let me know if I can offer anymore help from this end.
Regards,
Tim

Problems with LDAP Server fail-over

Our Xsan installed with 12 FCP, 2 MDC Xserve and 2 LDAP Xserver for fail-over.
The 2 MDC fail-over runs well but the 2 LDAP fail-over got problems.
The first time we up-plug the powercode of 1 xserve and the other LDAP takes over successfully but FCP users re-login takes 15 minutes. That's unacceptable.
The fail-over never succeed after that.
That means once the LDAP down and the backup LDAP will not take the job, we will lose everything related to user login.
Anybody can help? Thanks a lot.

I believe you can enter both LDAP servers in the client configuration for LDAP access. (Even though you shouldn't have to)
IP failover is not the issue, your LDAP configuration is.
Start at page 90 and work throught this document to make sure you have the clients setup properly.
http://manuals.info.apple.com/en/MacOSXSrvr10.3_OpenDirectoryAdmin.pdf

P35Neo2 FIR and problem with booting

So I have problem with booting my compie. Compie try to boot to the part of start windows, after that in case of switch into graphicis mobo going down and restarting (WinXP SP3). I think, that problem is not in PSU, cos i have 800W XILENCE (+3,3V 28A, +5V 32A, 4x+12V 20A, -12V 0,5A, 5VSB 3A), Board P35 Neo2 FIR, E7200 proc, bios 1.9 (updated). I have 5 disk and use raid function in bios. Graphic Radeon HD3650, Memory Zeppelin 4x1GB KIT 800Mhz.
I start with change of PSU from 550W to 800W but it didnt work, previus PSU had (+3,3V 30A, +5V 32A, 2x+12V 18A, -12V 0,8A, 5VSB 3A),
i try change memory, but no efect.
After update bios there was standard warning about bad cheksum, after resave Bios settings it was gone, and compie boot after that.
Any idea?
Thanks

So my problem is solved...but my feeling of this is not good...
I updated BIOS from 1.9 to 1.10, reset Bios settings, after restart i pressed F2 for load standart settings and i changed in Bios only that i am using RAID and disable disket and it works...i boot my compie into windows without any problem...
So i try change another things in Bios and my compie hangs in continous resets without booting into windows...no BSOD only restart and restart...
After reseting Bios settings and again Load to Default it works...and run windows...
There was only one new thing ... screen flick for the second with new screen about checking NVRAM ....this screen was not visible before (and maybe this is the problem), cos if i change something in BIOS about clocking and power management and other ones, this screen is by booting missing...and compie not run in Windows...
Next thing what i see, that in CPU multiplication dont work multiplication 9,5 and proc used frequency 2400 (9x) (it is E7200 on 2533)
i hope that this bios 1.10 fixed my problems...and my opinion is that P35 Neo 2 FIR is not ideal board for E7200 proc...so i m looking for another proc...and maybe another board...

Essbase 9.3.1 and problem with LDAP users

Similar Messages

Maybe you are looking for