Essbase native security mode and MSAD users

Hi guys,
I'm trying to solve following question:
I need to keep Essbase in native security mode, ie. to assign security for users directly in EAS, not in HSS console. And I need to grant access to MSAD users, ie. to allow users to connect to Essbase using their MSAD usernames and passwords.
How to do that?
Thanks!
Vladino

You don't state what release you're on -- I think it varies slightly from release to release although the concept is mostly the same.
Have you read this in the EAS help?
http://download.oracle.com/docs/cd/E17236_01/epm.1112/eas_help/extauthen.html
I think this help is missing the step where you tell Essbase what the external authenticators are. From reading about the AUTHENTICATIONMODULE Essbase.cfg setting:
http://download.oracle.com/docs/cd/E17236_01/epm.1112/esb_tech_ref/authenticationmodule.html
It seems that:
When you run Oracle's Hyperion Enterprise Performance Management System Configurator, Essbase is automatically registered with Shared Services (unless you select the option to deploy Essbase in standalone mode) and this setting is automatically added to essbase.cfg.So I'm not quite sure where that leaves you -- where do you config the external authentication? Hopefully someone more installation-centric than I (which would be just about everyone in the known universe) can jump in here. I have to say that I haven't used non-Shared Services authentication since System 9 came out -- it just makes life too easy for my clients to manage security in one place.
Regards,
Cameron Lackpour

Similar Messages

Essbase native security on 11.1.1.3?

Hello -
Is it true that essbase 11.1.1.3 doesn't support the essbase native security and so the security has to be moved to shared service?
We are on essbase 7.1.6 and planning our essbase upgarde to 11.1.1.3.
Presently, we maintain the essbase native security.
Regards

user12237347 wrote:
Hello-
Thanks. Very helpful info indeed. The info that I am getting and have understood is -
If I install the essbase 11.1.1.3 in standalone mode and do not externalize the security to shared services than I can maintain the essbase security in essbase itself through EAS/AAS although the user creation and user maintainance will now happen through shared services.If it is in standalone mode then it does not use Shared services for user creation/maintenance, it will be done via EAS or maxl...
We have tons of groups and filters on the present essbase version and they are maintained through EAS as of now.
So, when we migrate to 11 and if want to use the shared services to maintain these groups and filters then they will need to be manually created on the shared services. Does that sound correct? or is there a way to get that peice done automaticaly?
But if we install essbase 11 in standalone mode and then use the AAS to migrate the 7x apps to 11x then the groups and filters would automatically come across when the migration is done.
Also - it seems that maintainance of the groups and filters on the AAS is better from administration/maintainance point of view then on shared services?If you use the migration wizard in EAS then you will be able to migrate users/groups/apps/filters to 11 and then if you want to can convert to shared services mode.
All this information is explained further in the documentation, start at http://download.oracle.com/docs/cd/E12825_01/nav/portal_3.htm
Most of it is included in the EAS online help available from the above link
Cheers
John
http://john-goodwin.blogspot.com/

Converting to Shared Services Security Mode Error (externalize users)

Error: 1051549: Can not convert Analytic Services to Shared Services mode when Analytic Services is not configured with Shared Services or the initialization process has failed
I have tried to register ESSbase with SS again and does not work. All services are started....ideas?

Start Essbase in Foreground.... and capture the error..
Blow the Security and replace it from Backup which was wormking fine..start all over again for Externalisation
You can also check for PREUPM/ POSTUPM files in Essbase/Bin..if they are present then Essbase is partially externalised..you can try taking a copy of the PREUPM and rename the PREUPM to Essbase.sec and start essbase..Rexternalise.

The dreaded 404 message using basicHttpBinding, Transport security mode, and certificates

I am working on setting up a WCF service using mutual authentication with both client and server certifiates. The service is hosted in IIS 7, and I'm trying to access it from a simple console app. When I try to connect to the service, I get the error ""There
was no endpoint listening at
https://localhost/IISHostedService/MyService.svc that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details." The inner exception is "The remote server returned an error:
(404) Not Found."
I have seen people all over the net reporting this error, but so far none of their fixes work for me. I have an HTTPS binding in IIS for my app, and I am able to browse to my service (using either http or https) and view it with no problems. I can get the
wsdl (also over either protocol) with no issues, but connecting from the client doesn't work.
Here is my server config:
<system.serviceModel>
<behaviors>
<serviceBehaviors>
<behavior>
<serviceCredentials>
<serviceCertificate findValue="ServerCertificate" storeLocation="LocalMachine" x509FindType="FindBySubjectName" />
<clientCertificate>
<authentication revocationMode="NoCheck" />
</clientCertificate>
</serviceCredentials>
<serviceMetadata httpGetEnabled="true" httpsGetEnabled="true" />
<serviceDebug includeExceptionDetailInFaults="true" />
</behavior>
</serviceBehaviors>
</behaviors>
<serviceHostingEnvironment multipleSiteBindingsEnabled="true" />
<bindings>
<basicHttpBinding>
<binding name="BasicHttpBinding_MyService">
<security mode="Transport">
<transport clientCredentialType="Certificate" />
</security>
</binding>
</basicHttpBinding>
</bindings>
<services>
<service name="MyService">
<endpoint binding="basicHttpBinding" bindingConfiguration="BasicHttpBinding_MyService" contract="Namespace.IContract" />
</service>
</services>
</system.serviceModel>
And my client:
<system.serviceModel>
<behaviors>
<endpointBehaviors>
<behavior name="clientEndpointBehavior">
<clientCredentials>
<clientCertificate findValue="ClientCertificate" storeLocation="LocalMachine" x509FindType="FindBySubjectName"/>
</clientCredentials>
</behavior>
</endpointBehaviors>
</behaviors>
<bindings>
<basicHttpBinding>
<binding name="BasicHttpBinding_MyService" closeTimeout="00:10:00"
openTimeout="00:10:00" receiveTimeout="00:10:00" sendTimeout="00:10:00"
allowCookies="false" bypassProxyOnLocal="false" hostNameComparisonMode="StrongWildcard"
maxBufferSize="65536" maxBufferPoolSize="524288" maxReceivedMessageSize="65536"
messageEncoding="Text" textEncoding="utf-8" transferMode="Buffered"
useDefaultWebProxy="true">
<readerQuotas maxDepth="32" maxStringContentLength="8192" maxArrayLength="16384"
maxBytesPerRead="4096" maxNameTableCharCount="16384" />
<security mode="Transport">
<transport clientCredentialType="Certificate" />
</security>
</binding>
</basicHttpBinding>
</bindings>
<client>
<endpoint address="https://localhost/IISHostedService/MyService.svc behaviorConfiguration="clientEndpointBehavior"
binding="basicHttpBinding" bindingConfiguration="BasicHttpBinding_MyService"
contract="Namespace.IContract" name="BasicHttpBinding_MyService" />
</client>
</system.serviceModel>
I am not sure if it matters, but this client and server are running on the same physical machine in a test environment. I have confirmed that both the client and the server certificates are installed, and that the issuing authority is trusted. The virtual
folder is set in IIS to "Accept" client certificates, and SSL is not required.
Does anyone have any thoughts what I may be missing? This service works without a problem over HTTP, so it has to be somehow related to the certificate that is being passed. With the Server certificate, I just trapped the ServicePointManager.ServerCertificateValidationCallback
event to manually approve the certificate if the subject matched what I was looking for (the subject does not match the domain name, since this is a test environment). Do I need to do something similar for the client certificate?
EDIT: One thing I do notice is that, in the WSDL, the soap location is always pointing to http. I'm not sure if that is correct or not:
<wsdl:service name="MyService">
<wsdl:port name="BasicHttpBinding_MyService" binding="tns:BasicHttpBinding_MyService">
<soap:address location="http://computerName.domain.com/IISHostedService/MyService.svc" />
</wsdl:port>
</wsdl:service>

A little more information (since this is the main thing I have to work on today):
After some research, I decided to try using a custom certificate validator, in case something is wrong with the client certificate. In the clientCertificate\authentication node on the server, I set the certificateValidationMode="Custom" and set customValidationType="MyType.Validator,
MyType". My type is apparently being found (when it is not found I get a "service could not be activated" error), but my Validate() method is never being called.
Now this leads me to believe that it's not a problem with the client certificate, but something else, before it even gets that far.

List Database Security Reporting and Administration Users

Dear Expert,
Im working with BW 2004s Security Component , I try to find a database table in SE16 that it contain the follow field: Role with your component by Authorization Object. My scope is identify what role is a Secure Reporting Users and Secure Administration Users.
The role has S_RS_COMP and S_RS_COMP1 are Reporting Users. Moreover, the role has Reporting Users S_RS_ADMIWB, S_RS_IOBJ, S_RS_ISOUR, S_RS_ISRCM and S_RS_MRPO
Thank for your help,
Luis

se16-->AGR_HIER
AGR_* will be tables for Roles. Tables SMEN_* are for user favorites.
You can find the information you want in table AGR_HIER.
In this table you can select the role,
In the field REPORT, select RRMX ,this will show you all roles with their workbooks.
AGR_NAME = ROLE (technical name)
REPORT= RRMX
Hope it Helps
Chetan
@CP..

[OBIEE Security] create and manage user without entreprise manager

Currently, the user creation and role assignment is done at company manager.
I want to allow a small group of users to manage the rights (access to reports for example) to other users. All this without going through corporate manager.
Is this possible?
Best regards,
Ben

No, you cannot create user accounts in answers. If you are using default ldap from weblogic, all the users must be created in weblogic. If you do external table authentication, then you can add as many users as you want to the table based on your needs.
Assign points if helpful.
Regards,
-Amith.

How can Manage Permissions for DB in Shared Services Security Mode

In shared services security mode, after provisioning users for Essbase applications, only can assign database calculation and filter access. How can I grant permissions "Access Databases" like in native mode?

Essbase will be default be in shared services security mode in 11.1.2, the wizard will not migrate security when in this mode.
It is possible to revert it back but if you don't know the process then it is worth looking at alternatives first.
You could use LCM to export the provisioning and then import into your target environment.
Cheers
John
http://john-goodwin.blogspot.com/

Essbase External Security via Shared Services

I have hit a problem with essbase external security via shared services, might be fairly trivial, first time doing this.
In the install guide for essbase 9.3.1 it mentions not to use the user 'admin' when firing up essbase server console mode for the first time if you intend to externalise security to shared services in the future.
I have followed this recommendation and used a different username 'essadmin' for the first time essbase server is started up. While still in native security mode, I sign in via EAS 9.3.1 and create myself another admin account just in case.
I cold backup shared services SQL repository and OpenLDAP repositry before externalising essbase security. Also I backup the essbase sec and cfg files just in case.
Then I start it all up, go into EAS and select to externalise security, this takes a few seconds, and all seems well.
Now in shared services I can see the essadmin user ID and everything appears to be OK. However when I look under the projects node, I see "Analytic Servers:myhost:1", then below that another green icon "Analytic Servers:myhost:1", but when I click on the second green icon I get "Login fails due to invalid login credentials".
What have I done wrong ?

Hi,
I don't think you've done anything wrong. You just need to provision your shared services user with access to Essbase. Right-click on your user, select provision and then give them the required Essbase rights.
Hope that helps,
Gee

New Security Update and now apple based programs will not run

I recently downloaded and installed the new security update. I also attempted to download the safari 3.1 update, but an error occurred during download. After restart, iTunes, Mail, Safari, Installer and iMovie will not start (Quicktime will start). The applications from bar and from applications folder will not launch. All third party apps seem to work (I used Explorer 5.2-which I found hidden in one of my folders- to download firefox which I am using now)
I have tried:
-Reinstalling most recent Leopard Update (10.4.11), which fails to even start because Installer crashes
-Deleting preference files
-Using disk utility
-Booting from safe mode and single user mode
-Running repair permissions from prompt screen (command-s)
-"Problem Report for Installer" reads:
"Symbol not found: __ZN3KJS11Interpreter4markEv
Referenced from: /System/Library/Frameworks/WebKit.framework/Versions/A/Frameworks/WebCore.frame work/Versions/A/WebCore
Expected in: /System/Library/Frameworks/JavaScriptCore.framework/Versions/A/JavaScriptCore
/System/Library/Frameworks/WebKit.framework/WebKit
Model: PowerMac4,2, BootROM 4.4.0f1, 1 processors, PowerPC G4 (2.1), 800 MHz, 512 MB
Graphics: NVIDIA GeForce2 MX, GeForce2 MX, AGP, 32 MB
Memory Module: DIMM0/J12, 256 MB, SDRAM, PC133-333
Memory Module: DIMM1/J13, 256 MB, SDRAM, PC133-333
Modem: Dash2, UCJ, V.92, 1.0F, APPLE VERSION 2.6.6
I searched for JavaScriptCore, and it was no where to be found. I have yet to reinstall the system software because I would like to know what caused this. I am not great with computers but I catch on quick. Please help.

I found the java script. Hard drive>System>Library>Frameworks>Java Script Core.
Ray

Error when changing password of NW J2ee's secure store and Oracle sqlplus

Hi all,
I am wondering on the following:
Current setting:
I have "old_password" for J2ee configtool's secure store.
I have "old_password" for Oracle's sapsr2 user inside Sqlplus.
When I change the password for all 3 place from "old_password" to "new_password", I am not able to connect to configtool. I am also not able to start the Portal service; with logfile error "invalid user/password"
If I change the password back to "old_password", I can connect to configtool as well as start the service.
Snote and forumers (google) mention that update configtool's secure store and "alter user sapsr3" for Oracle database is all I need to change password.
Have I miss out some step in order to change the password for my Enterprise Portal?
Thank you.
Regards

edit: never mind, found the meaning of SDM.
but the command below, is it usable?
For Windows OS:
Open a command prompt and navigate to the folder <Drive>:\usr\sap\DP1\JC21\SDM\program
Execute the below commands:
sdm jstartup "mode=standalone"
sdm changepassword "newpassword=<Enterthenewpassword>"
sdm jstartup "mode=integrated"
StartServer.bat
Edited by: Sek Yao Ooi on Dec 7, 2009 9:21 AM

Confussing between Database User and Application User in Discoverer

Hi All,
I am new to Discoverer.
Please let me know the difference between Database User and Application User in Discoverer Administrator as well as in Discoverer Desktop Editions.
1) While I am trying to connect to Discoverer Desktop, I am unable to connect to it with Apps Database User.
2) Where the Discoverer compenent will be installed and what the configuration settings need to done work on it.
Please let me know the answers soon.
Thanks in Advance.

Hello
I think a database user should pretty much be self explanatory - this is a user account that exists in the database. This account is created by your Database Administrator (DBA).
The second kind of user that Discoverer understands is a user that exists inside Oracle E-Business Suite (EBS), formerly known as Oracle Applications, hence an application user. This user account gets created by the EBS system administrator.
Now, just because you're using EBS, it does not automatically follow that users will be application users. Let me explain.
Discoverer can be installed in one of two modes, standard mode and Applications mode.
The vast majority of organizations use standard mode which means they allow database users to access the system.
The only time that you will need an applications account is under the following two rules:
1. Your organization is using E-Business Suite, AND
2. Your Discoverer administrator has installed Discoverer in Applications mode.
Applicatons mode does not happen automatically, even if you have EBS, and you cannot install that mode by accident. You have to tell Discoverer that it is operating in that mode, provide some additional EBS account information, make security assignments and set users have to deliberately tell Discoverer they want to connect using an applications account.
May I suggest you get hold of a copy of the Oracle Discoverer 10g Handbook that I wrote. That book explains in detail the differences between the modes. I also have a free white paper on my website that describes how to install Discoverer into Applications mode.
I hope this helps
Best wishes
Michael
http://ascbi.com

Datbase is in single_user mode and offline

Hi All
Some one have change database in single user mode and then took offline and now if i try to take it online i get below error.
"Changes to the state or options of database 'TransactorMI' cannot be made at this time. The database is in single-user mode, and a user is currently connected to it."
Details
1. None of Spid is pointing to database
2. When i try to change database to online i can see spid is blocked by another spid (-2) but it doesnt shown in sp_who2 output.
3. I tried to check transactio UOW using but it shows 0000000-00000-00000
4. That means distributed transaction cant be killed as it doesn not exist.
can some one help e to take database online ??
Thanks Saurabh Sinha
http://saurabhsinhainblogs.blogspot.in/
Please click the Mark as answer button and vote as helpful if this reply solves your problem

Hi Shanky
Hard luck nothing was there , might be db was offline that's why. BTW i get approval for restart so i restarted sql server and i am able to change db to multi user.
Not able to attach screenshot of component service here
Will document whole scenario and steps i took while debugging with screenshot . That might help some one else.
Thanks to all those who took time to help
Thanks Saurabh Sinha http://saurabhsinhainblogs.blogspot.in/ Please click the Mark as answer button and vote as helpful if this reply solves your problem
Thank you. I still consider this as bug in SQL Server. SQL server Code should be able to resolve this but anyhow its good you solved it.
Please mark this reply as answer if it solved your issue or vote as helpful if it helped so that other forum members can benefit from it
My Technet Articles

Non-secure mode

After database creation an error screen appears and says that the em is in non-secure mode and to secure it instructs some commands like this :
emctl.bat config emkey -repos -sysman_pwd <sysman password>
i use above command and type my sysman password which i enter in database creation. I set Oracle_Sid and oracle_unqname in my environment to appropriate values. but Invalid password is shown. How can I fix it?
I disappointed. whenever i install oracle some unsolvable errors are arrived. Help me.
I use Windows vista basic.

I use Windows vista basic.Bingo!
Oracle doesn't work properly on Windows Home and Windows Basic Editions.
You'll need Windows Professional or Windows Ultimate or downgrade to XP or install a Virtual Machine and install Linux and install Oracle for Linux.
And yes, when you download Oracle, there is a note stating it doesn't work on Home and Basic Editions.
BTW: the non-secure mode means it doesn't use SSL. Whether you need that,in a home situation, is debatable.
Sybrand Bakker
Senior Oracle DBA

Adding Polycom HDX8000 to TMS with security mode

I have been adding Polycom HDX8000 to Cisco TMS but doing so i had to disable security mode on HDX8000 which enables SNMP (SNMP needs to be enabled on HDX8000 to get identified during adding process in TMS)
I am able to add HDX8000 to TMS but in doing so the HDX is now being accessed using http since security mode is disabled.As per the security norms all HDX's needs to have secured web access (https), if i enable security mode on HDX then SNMP is disabled resulting in TMS loosing control over HDX (error on TMS:"no snmp response")
Basically i want to enable SNMP at the same time have https only access to HDX8000
Has anybody else encountered the above mentioned situation ?
TMS 14.4.0
hdx8000- 2.5.1 - 3.1.6

In order for TMS to control the Polycom HDX, you'll need to disable Secure Mode. How to setup TMS and the HDX to work together, see the TMS Product Support Guide, it's outdated being it was for TMS 13.x, but it's still valid when it refers to the HDX and what needs to be configured. It mentions about disabling Secure Mode, and using a security profile of medium or below. Just from looking at the Polycom HDX Admin Guide, on pg 311 at the medium security profile details, it looks like you could tweak the security profile when secure mode is disabled and maybe change the web port to 443 instead of 80, though this is just a guess and untested.

MSAD users are not able to login into the Essbase

Hi ,
I am on 11.1.2.2 . We just configured MSAD with shared services. There are native groups with provisionings and we add the MSAD users to this group to provide authorization.
he search order of MSAD is 2 while that of Nativedirectory is 1. . The msad user is able to log into to all other products like shared services , workspace , EPMA but login fails for ESSBASE(through maxl) and EASConsole. When I checked the users table from EAS console I found that MSAD users are present in the users list .
Can anybody know how to refresh my Essbase sec file in an ad-hoc manner so that my MSAD users are reflected in the sec file ???
Thanks in Advance,
SS

Hi John,
These are the erros that I found in the Log:
[2013-04-18T15:48:29.118+05:30] [EPMServer0] [ERROR] [EPMCSS-09224] [oracle.EPMCSS.CSS] [tid: 11] [userId: <anonymous>] [ecid: 0000JsSdkZE3r2X_xtk3yW1HRwV000000B,0] [SRC_CLASS: com.hyperion.css.facade.impl.CSSAbstractAuthenticator] [APP: SHAREDSERVICES#11.1.2.0] [SRC_METHOD: authenticateUser] Failed to authenticate user. EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.. .
[2013-04-18T15:48:38.130+05:30] [EPMServer0] [ERROR] [EPMCSS-09224] [oracle.EPMCSS.CSS] [tid: 12] [userId: <anonymous>] [ecid: 0000JsSdmmk3r2X_xtk3yW1HRwV000000C,0] [SRC_CLASS: com.hyperion.css.facade.impl.CSSAbstractAuthenticator] [APP: SHAREDSERVICES#11.1.2.0] [SRC_METHOD: authenticateUser] Failed to authenticate user. EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.. .
[2013-04-18T15:48:45.115+05:30] [EPMServer0] [ERROR] [EPMCSS-09224] [oracle.EPMCSS.CSS] [tid: 11] [userId: <anonymous>] [ecid: 0000JsSdoVt3r2X_xtk3yW1HRwV000000D,0] [SRC_CLASS: com.hyperion.css.facade.impl.CSSAbstractAuthenticator] [APP: SHAREDSERVICES#11.1.2.0] [SRC_METHOD: authenticateUser] Failed to authenticate user. EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.. .
[2013-04-18T15:49:55.987+05:30] [EPMServer0] [ERROR] [EPMCSS-09224] [oracle.EPMCSS.CSS] [tid: 12] [userId: <anonymous>] [ecid: 0000JsSe5nG3r2X_xtk3yW1HRwV000000H,0] [SRC_CLASS: com.hyperion.css.facade.impl.CSSAbstractAuthenticator] [APP: SHAREDSERVICES#11.1.2.0] [SRC_METHOD: authenticateUser] Failed to authenticate user. EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.. .
[2013-04-18T15:51:38.410+05:30] [EPMServer0] [ERROR] [EPMCSS-09224] [oracle.EPMCSS.CSS] [tid: 11] [userId: <anonymous>] [ecid: 0000JsSeUnX3r2X_xtk3yW1HRwV000000c,0] [SRC_CLASS: com.hyperion.css.facade.impl.CSSAbstractAuthenticator] [APP: SHAREDSERVICES#11.1.2.0] [SRC_METHOD: authenticateUser] Failed to authenticate user. EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.. .
[2013-04-18T15:52:18.037+05:30] [EPMServer0] [ERROR] [EPMCSS-09224] [oracle.EPMCSS.CSS] [tid: 12] [userId: <anonymous>] [ecid: 0000JsSecUm3r2X_xtk3yW1HRwV000000k,0] [SRC_CLASS: com.hyperion.css.facade.impl.CSSAbstractAuthenticator] [APP: SHAREDSERVICES#11.1.2.0] [SRC_METHOD: authenticateUser] Failed to authenticate user. EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.. .
[2013-04-18T15:52:22.327+05:30] [EPMServer0] [ERROR] [EPMCSS-09224] [oracle.EPMCSS.CSS] [tid: 12] [userId: <anonymous>] [ecid: 0000JsSedXo3r2X_xtk3yW1HRwV000000u,0] [SRC_CLASS: com.hyperion.css.facade.impl.CSSAbstractAuthenticator] [APP: SHAREDSERVICES#11.1.2.0] [SRC_METHOD: authenticateUser] Failed to authenticate user. EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.. .
[2013-04-18T16:09:33.657+05:30] [EPMServer0] [ERROR] [EPMCSS-09224] [oracle.EPMCSS.CSS] [tid: 12] [userId: <anonymous>] [ecid: 0000JsSi_KL3r2X_xtk3yW1HRwV000001T,0] [SRC_CLASS: com.hyperion.css.facade.impl.CSSAbstractAuthenticator] [APP: SHAREDSERVICES#11.1.2.0] [SRC_METHOD: authenticateUser] Failed to authenticate user. EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.. .
[2013-04-18T16:09:39.329+05:30] [EPMServer0] [ERROR] [EPMCSS-09224] [oracle.EPMCSS.CSS] [tid: 12] [userId: <anonymous>] [ecid: 0000JsSiagy3r2X_xtk3yW1HRwV000001U,0] [SRC_CLASS: com.hyperion.css.facade.impl.CSSAbstractAuthenticator] [APP: SHAREDSERVICES#11.1.2.0] [SRC_METHOD: authenticateUser] Failed to authenticate user. EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.. .
[2013-04-18T16:44:00.796+05:30] [EPMServer0] [ERROR] [EPMCSS-09224] [oracle.EPMCSS.CSS] [tid: 11] [userId: <anonymous>] [ecid: 004qe2n4S2^3r2X_xtk3yW000Ckl00001e,0:1] [SRC_CLASS: com.hyperion.css.facade.impl.CSSAbstractAuthenticator] [APP: WORKSPACE#11.1.2.0] [SRC_METHOD: authenticateUser] [URI: /workspace/logon] Failed to authenticate user. EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.. .
[2013-04-19T12:22:39.848+05:30] [EPMServer0] [ERROR] [EPMCSS-09224] [oracle.EPMCSS.CSS] [tid: 11] [userId: <anonymous>] [ecid: 004qf4eGL3l3r2X_xtk3yW000Ckl0001U1,0:1] [SRC_CLASS: com.hyperion.css.facade.impl.CSSAbstractAuthenticator] [APP: WORKSPACE#11.1.2.0] [SRC_METHOD: authenticateUser] [URI: /workspace/logon] Failed to authenticate user. EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.. .
[2013-04-19T12:37:36.039+05:30] [EPMServer0] [ERROR] [EPMCSS-09224] [oracle.EPMCSS.CSS] [tid: 11] [userId: <anonymous>] [ecid: 004qf5Vf1v33r2X_xtk3yW000Ckl0001Vk,0:1] [SRC_CLASS: com.hyperion.css.facade.impl.CSSAbstractAuthenticator] [APP: WORKSPACE#11.1.2.0] [SRC_METHOD: authenticateUser] [URI: /workspace/logon] Failed to authenticate user. EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.. .
[2013-04-19T12:46:16.672+05:30] [EPMServer0] [ERROR] [EPMCSS-09224] [oracle.EPMCSS.CSS] [tid: 33] [userId: <anonymous>] [ecid: 004qf5yh4CC3r2X_xtk3yW000Ckl0001YM,0:1] [SRC_CLASS: com.hyperion.css.facade.impl.CSSAbstractAuthenticator] [APP: WORKSPACE#11.1.2.0] [SRC_METHOD: authenticateUser] [URI: /workspace/logon] Failed to authenticate user. EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.. .
[2013-04-19T12:59:17.746+05:30] [EPMServer0] [ERROR] [EPMCSS-09224] [oracle.EPMCSS.CSS] [tid: 12] [userId: <anonymous>] [ecid: 004qf6hGL3y3r2X_xtk3yW000Ckl0001eJ,0:1] [SRC_CLASS: com.hyperion.css.facade.impl.CSSAbstractAuthenticator] [APP: WORKSPACE#11.1.2.0] [SRC_METHOD: authenticateUser] [URI: /workspace/logon] Failed to authenticate user. EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.. .
[2013-04-19T15:28:47.535+05:30] [EPMServer0] [ERROR] [EPMCSS-09224] [oracle.EPMCSS.CSS] [tid: 33] [userId: <anonymous>] [ecid: 004qfF3tfH43r2X_xtk3yW000Ckl0001yB,0:1] [SRC_CLASS: com.hyperion.css.facade.impl.CSSAbstractAuthenticator] [APP: WORKSPACE#11.1.2.0] [SRC_METHOD: authenticateUser] [URI: /workspace/logon] Failed to authenticate user. EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.. .
[2013-04-19T16:15:33.114+05:30] [EPMServer0] [ERROR] [EPMCSS-09224] [oracle.EPMCSS.CSS] [tid: 11] [userId: <anonymous>] [ecid: 004qfHf89Lv3r2X_xtk3yW000Ckl0002op,0:1] [SRC_CLASS: com.hyperion.css.facade.impl.CSSAbstractAuthenticator] [APP: WORKSPACE#11.1.2.0] [SRC_METHOD: authenticateUser] [URI: /workspace/logon] Failed to authenticate user. EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.. .
[2013-04-19T16:19:08.380+05:30] [EPMServer0] [ERROR] [EPMCSS-09224] [oracle.EPMCSS.CSS] [tid: 33] [userId: <anonymous>] [ecid: 004qfHrx8Ja3r2X_xtk3yW000Ckl0002tk,0:1] [SRC_CLASS: com.hyperion.css.facade.impl.CSSAbstractAuthenticator] [APP: WORKSPACE#11.1.2.0] [SRC_METHOD: authenticateUser] [URI: /workspace/logon] Failed to authenticate user. EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.. .
[2013-04-23T16:21:45.697+05:30] [EPMServer0] [ERROR] [EPMCSS-09224] [oracle.EPMCSS.CSS] [tid: 12] [userId: <anonymous>] [ecid: 004qkJsggb03r2X_xtk3yW000Ckl0001Gp,0:1] [SRC_CLASS: com.hyperion.css.facade.impl.CSSAbstractAuthenticator] [APP: WORKSPACE#11.1.2.0] [SRC_METHOD: authenticateUser] [URI: /workspace/logon] Failed to authenticate user. EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.. .
[2013-04-23T16:40:45.011+05:30] [EPMServer0] [ERROR] [EPMCSS-09224] [oracle.EPMCSS.CSS] [tid: 31] [userId: <anonymous>] [ecid: 004qkKwaqEg3r2X_xtk3yW000Ckl0001Ko,0:1] [SRC_CLASS: com.hyperion.css.facade.impl.CSSAbstractAuthenticator] [APP: WORKSPACE#11.1.2.0] [SRC_METHOD: authenticateUser] [URI: /workspace/logon] Failed to authenticate user. EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.. .
[2013-04-23T16:40:49.510+05:30] [EPMServer0] [ERROR] [EPMCSS-09224] [oracle.EPMCSS.CSS] [tid: 12] [userId: <anonymous>] [ecid: 004qkKws6Mt3r2X_xtk3yW000Ckl0001Kp,0:1] [SRC_CLASS: com.hyperion.css.facade.impl.CSSAbstractAuthenticator] [APP: WORKSPACE#11.1.2.0] [SRC_METHOD: authenticateUser] [URI: /workspace/logon] Failed to authenticate user. EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.. .
[2013-04-23T16:40:55.448+05:30] [EPMServer0] [ERROR] [EPMCSS-09224] [oracle.EPMCSS.CSS] [tid: 12] [userId: <anonymous>] [ecid: 004qkKxEi3I3r2X_xtk3yW000Ckl0001Kq,0:1] [SRC_CLASS: com.hyperion.css.facade.impl.CSSAbstractAuthenticator] [APP: WORKSPACE#11.1.2.0] [SRC_METHOD: authenticateUser] [URI: /workspace/logon] Failed to authenticate user. EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.. .
[2013-04-24T12:23:36.799+05:30] [EPMServer0] [ERROR] [EPMCSS-09224] [oracle.EPMCSS.CSS] [tid: 31] [userId: <anonymous>] [ecid: 004qlN2qpR63r2X_xtk3yW000Ckl0002xE,0:1] [SRC_CLASS: com.hyperion.css.facade.impl.CSSAbstractAuthenticator] [APP: WORKSPACE#11.1.2.0] [SRC_METHOD: authenticateUser] [URI: /workspace/logon] Failed to authenticate user. EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.. .
[2013-04-24T15:50:40.655+05:30] [EPMServer0] [ERROR] [EPMCSS-05152] [oracle.EPMCSS.CSS] [tid: 31] [userId: <anonymous>] [ecid: 004qlYbI73U3r2X_xtk3yW000Ckl00037j,0:1] [SRC_CLASS: com.hyperion.css.web.config.action.LDAPUserAutoConfigureAction] [APP: SHAREDSERVICES#11.1.2.0] [SRC_METHOD: executeAction] [URI: /interop/framework/security/MSADUserAutoConfigureAction] Failed to execute automatic discovery for user configuration. Server returned empty list for the specified user identifier. Enter a valid unique user identifier. Example cn=HypUsers. Wild cards are not allowed.
[2013-04-24T16:08:10.851+05:30] [EPMServer0] [ERROR] [EPMCSS-05152] [oracle.EPMCSS.CSS] [tid: 11] [userId: <anonymous>] [ecid: 0000JsvbnEV3r2X_xtk3yW1HTvIO000011,0] [SRC_CLASS: com.hyperion.css.web.config.action.LDAPUserAutoConfigureAction] [APP: SHAREDSERVICES#11.1.2.0] [SRC_METHOD: executeAction] Failed to execute automatic discovery for user configuration. Server returned empty list for the specified user identifier. Enter a valid unique user identifier. Example cn=HypUsers. Wild cards are not allowed.
[2013-04-24T17:54:53.669+05:30] [EPMServer0] [ERROR] [EPMCSS-05335] [oracle.EPMCSS.CSS] [tid: 12] [userId: <anonymous>] [ecid: 0000Jsw0EmR3r2X_xtk3yW1HTvc800006a,0] [SRC_CLASS: com.hyperion.css.web.action.EditGroupAction] [APP: SHAREDSERVICES#11.1.2.0] [SRC_METHOD: executeAction] Failed to update group. Group properties are identical to the existing version. Update group properties to make changes.
[2013-04-24T18:06:20.455+05:30] [EPMServer0] [ERROR] [EPMCSS-09224] [oracle.EPMCSS.CSS] [tid: 11] [userId: <anonymous>] [ecid: 0000Jsw2qTJ3r2X_xtk3yW1HTvc800008m,0] [SRC_CLASS: com.hyperion.css.facade.impl.CSSAbstractAuthenticator] [APP: SHAREDSERVICES#11.1.2.0] [SRC_METHOD: authenticateUser] Failed to authenticate user. EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.. .
[2013-04-24T19:37:40.234+05:30] [EPMServer0] [ERROR] [EPMCSS-09224] [oracle.EPMCSS.CSS] [tid: 12] [userId: <anonymous>] [ecid: 004qljJ9jYL3r2X_xtk3yW0007ha00009p,0:1] [SRC_CLASS: com.hyperion.css.facade.impl.CSSAbstractAuthenticator] [APP: SHAREDSERVICES#11.1.2.0] [SRC_METHOD: authenticateUser] [URI: /interop/logon] Failed to authenticate user. EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.. .
[2013-04-24T20:55:26.002+05:30] [EPMServer0] [ERROR] [EPMCSS-05335] [oracle.EPMCSS.CSS] [tid: 12] [userId: <anonymous>] [ecid: 004qlndH3P_3r2X_xtk3yW0008JJ00003B,0:1] [SRC_CLASS: com.hyperion.css.web.action.EditGroupAction] [APP: SHAREDSERVICES#11.1.2.0] [SRC_METHOD: executeAction] [URI: /interop/framework/security/editGroup] Failed to update group. Group properties are identical to the existing version. Update group properties to make changes.
[2013-04-25T11:31:05.648+05:30] [EPMServer0] [ERROR] [EPMCSS-05335] [oracle.EPMCSS.CSS] [tid: 26] [userId: <anonymous>] [ecid: 004qm^^rys43r2X_xtk3yW0008JJ0000iO,0:1] [SRC_CLASS: com.hyperion.css.web.action.EditGroupAction] [APP: SHAREDSERVICES#11.1.2.0] [SRC_METHOD: executeAction] [URI: /interop/framework/security/editGroup] Failed to update group. Group properties are identical to the existing version. Update group properties to make changes.
[2013-04-25T12:03:04.431+05:30] [EPMServer0] [ERROR] [EPMCSS-09224] [oracle.EPMCSS.CSS] [tid: 12] [userId: <anonymous>] [ecid: 004qmaNFVp93r2X_xtk3yW0008JJ0000kj,0:1] [SRC_CLASS: com.hyperion.css.facade.impl.CSSAbstractAuthenticator] [APP: SHAREDSERVICES#11.1.2.0] [SRC_METHOD: authenticateUser] [URI: /interop/logon] Failed to authenticate user. EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.. .
[2013-04-25T12:03:09.228+05:30] [EPMServer0] [ERROR] [EPMCSS-09224] [oracle.EPMCSS.CSS] [tid: 11] [userId: <anonymous>] [ecid: 004qmaNXpVT3r2X_xtk3yW0008JJ0000kk,0:1] [SRC_CLASS: com.hyperion.css.facade.impl.CSSAbstractAuthenticator] [APP: SHAREDSERVICES#11.1.2.0] [SRC_METHOD: authenticateUser] [URI: /interop/logon] Failed to authenticate user. EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.. .
[2013-04-25T12:21:59.089+05:30] [EPMServer0] [ERROR] [EPMCSS-00301] [oracle.EPMCSS.CSS] [tid: 12] [userId: <anonymous>] [ecid: 0000Jszxbsg3r2X_xtk3yW1HUD7100000B,0] [SRC_CLASS: com.hyperion.css.facade.impl.CSSAbstractAuthenticator] [APP: SHAREDSERVICES#11.1.2.0] [SRC_METHOD: throwAuthException] Failed to authenticate user. Invalid credentials. Enter valid credentials.
[2013-04-25T12:36:36.338+05:30] [EPMServer0] [ERROR] [EPMCSS-05152] [oracle.EPMCSS.CSS] [tid: 11] [userId: <anonymous>] [ecid: 0000Jt00xho3r2X_xtk3yW1HUD7100002G,0] [SRC_CLASS: com.hyperion.css.web.config.action.LDAPUserAutoConfigureAction] [APP: SHAREDSERVICES#11.1.2.0] [SRC_METHOD: executeAction] Failed to execute automatic discovery for user configuration. Server returned empty list for the specified user identifier. Enter a valid unique user identifier. Example cn=HypUsers. Wild cards are not allowed.
[2013-04-25T12:36:50.411+05:30] [EPMServer0] [ERROR] [EPMCSS-05152] [oracle.EPMCSS.CSS] [tid: 11] [userId: <anonymous>] [ecid: 0000Jt011DC3r2X_xtk3yW1HUD7100002H,0] [SRC_CLASS: com.hyperion.css.web.config.action.LDAPUserAutoConfigureAction] [APP: SHAREDSERVICES#11.1.2.0] [SRC_METHOD: executeAction] Failed to execute automatic discovery for user configuration. Server returned empty list for the specified user identifier. Enter a valid unique user identifier. Example cn=HypUsers. Wild cards are not allowed.
[2013-04-25T12:37:00.009+05:30] [EPMServer0] [ERROR] [EPMCSS-05152] [oracle.EPMCSS.CSS] [tid: 12] [userId: <anonymous>] [ecid: 0000Jt013Z^3r2X_xtk3yW1HUD7100002I,0] [SRC_CLASS: com.hyperion.css.web.config.action.LDAPUserAutoConfigureAction] [APP: SHAREDSERVICES#11.1.2.0] [SRC_METHOD: executeAction] Failed to execute automatic discovery for user configuration. Server returned empty list for the specified user identifier. Enter a valid unique user identifier. Example cn=HypUsers. Wild cards are not allowed.
[2013-04-25T12:48:15.043+05:30] [EPMServer0] [ERROR] [EPMCSS-05345] [oracle.EPMCSS.CSS] [tid: 12] [userId: <anonymous>] [ecid: 0000Jt03cfC3r2X_xtk3yW1HUDT700000j,0] [SRC_CLASS: com.hyperion.css.web.action.ProvisioningAction] [APP: SHAREDSERVICES#11.1.2.0] [SRC_METHOD: executeAction] Failed to set roles for user/group. Updated provisioning information is identical to the existing one. Verify the changes.
I couldnt find any error that might be the reason for my issue.
Celvin,
I tried it , i.e limiting the number of groups in MSAD .. it didnt work.
Regards,
SS

Essbase native security mode and MSAD users

Similar Messages

Maybe you are looking for