Export shared service active users (provision for Hyperion)only using MSAD.

Hi..
I m using Hyperion 9.x . and using active directory in shared services.
while i m using importexport utility to export the active users list with provisioning.
Issue is :
Hyperion external authentication have all users of Active directory but i need to export only active users which are provisioned for Hyperion projects .
I dont need the complete users list .
Also i m unable to export the provisioning of users in exported file.
Please can you help me in getting the correct export statement for the above.
Thank you very much

Thanks John !!
I am using the following statement for 9.3.0 but not getting provisioning section in exported file.
Only users/Groups/Roles are there in exported file.
Please help me to overcome the problem .
importexport.css=file:/C:/Hyperion/SharedServices/9.3/AppServer/InstalledApps/WebLogic/8.1/css.xml
importexport.cmshost=HSS machine name
importexport.cmsport=58080
importexport.username=User name **User name i m using is Active Directory user with administrative rights in Hyperion**
importexport.password=password
importexport.enable.console.traces=true
importexport.trace.events.file=C:/Hyperion/common/utilities/CSSImportExportUtility/importexport/trace.log
importexport.errors.log.file=C:/Hyperion/common/utilities/CSSImportExportUtility/importexport/errors.log
importexport.locale=en
# export operations
export.fileformat=csv
export.file=C:/export.csv
export.internal.identities=true
export.MSAD.user.passwords=true
export.provisioning.all=true
export.delegated.lists=false
export.user.filter=*@MSAD
export.group.filter=*@MSAD
export.role.filter=@MSAD
export.producttype=*
export.provisioning.apps=*
Thank you very much
Vivek Jaiswal
Edited by: user11966901 on May 25, 2010 8:16 PM
Edited by: user11966901 on May 25, 2010 8:19 PM
Edited by: user11966901 on May 25, 2010 8:20 PM

Similar Messages

  • Sync Shared Services External users & Provisioning for Essbase Applications

    Hi Experts !!
    i have externalised user authentication in Shared services . I provisioned all users for Essbase and refresh the security from Essbase ,So all users are working fine
    and can login in Essbase and "Excel add-in" as well..
    but there is one user who is still not working for "Excel Add in"..
    Error is "Login failed due to invalid login credentials"
    Please suugest me the solutions
    Thank you.

    Hi John !
    Yes, User can login in EAS .
    Also User is available under Users in EAS ,But no applications are displaying in Analytic Server , While I have given Administration Privileges for Essbase app.
    But still error while login in Excel add in ..
    Error : Login failed due to invalid login Credentials.
    Also ,After Provisioning , How Can we Sync all all Externalized users from Shared Services itself for All hyperion Projects ???
    Thank you

  • Hyperion Shared Services Active Directory

    Gurus, i am an Essbase Developer and currently have an issue where the users in the Hyperion Shared Services Active Directory does not reflect the true number of users actually on the company network.
    Whilst new employees created in the company flow through correctly into Hyperion Shared Services, those who have left the company still show in Hyperion Shared Services, even though they have been deleted from the network. Its as if newly created users synchronize perfectly into the Hyperion Shared Services Active Directory, but the deletion of users does not flow through.
    Has anyone experienced this?
    Thanks

    Hi,
    You are fecthing the user ids from Active Directory just to reduce lot of manual effort of creating native ids for all the user and also a security part its suggested to use Active Directory.
    Now how can you say that id is still active in AD, the user who had left the company his id would be already inactive even though you are able to query the user and provision on his id or add him/her to a group that has provisions will not be able to login as their id is made inactive.
    If you want to remove them automatically from Essbase or Shared Services automatically when their id gets disabled it wont happen as provisioning information etc lies with Shared Services and just to authenticate a valid user AD comes into picture .
    If you want to eliminate users from accessing the system whose id is disabled is to change your AD configuration in Shared Services based on the inputs from your AD team such that where does the disabled id go into (ex : which OU etc..) and configure accordingly which should work.!!! now if you want to eliminate them from Essbase unprovision them/their ids and run security refresh .
    Thanks
    Amith

  • Hyperion 11 Installation-Shared Services registration is failed for Essbase

    Hi All,
    Today, i was installing Hyperion 11 EPMA system. Here is my scenario:
    Installed and configured "Foundation" on one system. Installed "Essbase" products on another system in the same network (Not installed HbNet components). While configuring Essbase products it never asked for Shared Services Server location and hence the essbase products registration with Shared services is failed at the end.
    I checked in the services of second system and wonder to see "OpenLDAP" service is running. (I was not able to uncheck "Hyperion Foundation" product options during Essbase product configuration).
    I have given the same database schema details used to configure database for the shared services. Am i missing anything. Please help.
    Thanks,
    Pr

    Hi Hohn,
    Thanks for your response.
    I'm little confused the way to configure EPM products in a distributed environment. Registration of essbase related product with shared services is still failing even mentioned to use "Previously configured shared services database" on Shared services and Registry database page.
    From the installation guide: 1. Using the database administration console, change the password of the user account that was used to configure the Shared Services database.
    2. Do i need to stop shared services web application and OpenLDAP while configuring "Essbase" products on another system.
    Please address the above points and help.Thanks!!
    Regards,
    pr

  • Converting Shared Services (Native) users to MSAD

    Hi All,
    We are on version 9.3.1.
    We have configured FDM with Shared Services and currently only use native users. This means that our FDM users are all authenticated via HSS.
    We are just about to configure an MSAD directory and convert native users to MSAD.
    We will also be configuring FDM with the same MSAD server.
    Does anyone know how FDM handles user migrations? Will FDM automatically pick up MSAD users once they are deleted from the native directory and converted to MSAD?
    Are there any additional steps we need to be aware of??
    Thanks for your help.
    Seb

    Hi,
    Im ok with the config but Im wondering if FDM will be clever enough to convert native users to MSAD.
    Say we have a HSS user called Test1 with a password of Password (the Use Target System field is checked when creating the user in FDM). This user is authenticated against Shared Services when logging on to FDM.
    During the conversation, native users will be deprovisioned and deleted from Shared Services and their provisioning info will be imported against the MSAD provider. At this stage FDM should not be impacted since FDM security is separate from HSS.
    Once I configure the MSAD provider in FDM, my Test1 user will have a password of say Feb2010.
    Will FDM automatically pick up these config changes? Will FDM security for this user remain unaffected?
    Thanks again for your help.
    Seb

  • The trial period for this product has expired or Secure Store Shared Service is not supported for this SKU - SharePoint Foundation 2013

    After sucessfulling installing the SharePoint Foundation 2013, when i try to access the Secure Stored Service Application i get the below error
    11/16/2012 18:13:02.84  w3wp.exe (0x1774)                        0x15E8 Secure Store Service         
     Secure Store                   g0n6 High     The trial period for this product has expired or this feature is not supported in this SKU. b3b6e19b-7de2-e016-ad32-0fc975829ef0
    11/16/2012 18:13:02.84  w3wp.exe (0x1774)                        0x15E8 SharePoint Foundation        
     General                        8nca Medium   Application error when access /_admin/sssvc/ManageSSSvcApplication.aspx, Error=The
    trial period for this product has expired or Secure Store Shared Service is not supported for this SKU.   at Microsoft.Office.SecureStoreService.Server.SecureStoreServiceApplicationProxy.Execute[T](String operationName, Boolean validateCanary, ExecuteDelegate`1
    operation)     at Microsoft.Office.SecureStoreService.Server.SecureStoreServiceApplicationProxy.IsMasterSecretKeyPopulated()     at Microsoft.Office.SharePoint.ClientExtensions.SecureStoreAdministration.SSSAdminHelper.EnsurePrerequisite(SecureStoreServiceApplicationProxy
    proxy, String& errorMessage)     at Microsoft.Office.SharePoint.ClientExtensions.SecureStoreAdministration.ManageSSSvcApplication.InitializeGridView()     at Microsoft.Office.SharePoi... b3b6e19b-7de2-e016-ad32-0fc975829ef0
    11/16/2012 18:13:02.84* w3wp.exe (0x1774)                        0x15E8 SharePoint Foundation        
     General                        8nca Medium   ...nt.ClientExtensions.SecureStoreAdministration.ManageSSSvcApplication.OnLoad(EventArgs
    e)     at System.Web.UI.Control.LoadRecursive()     at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) b3b6e19b-7de2-e016-ad32-0fc975829ef0
    11/16/2012 18:13:02.84  w3wp.exe (0x1774)                        0x15E8 SharePoint Foundation        
     Runtime                        tkau Unexpected Microsoft.Office.Server.ProductExpiredException: The trial period for this product
    has expired or Secure Store Shared Service is not supported for this SKU.    at Microsoft.Office.SecureStoreService.Server.SecureStoreServiceApplicationProxy.Execute[T](String operationName, Boolean validateCanary, ExecuteDelegate`1 operation)    
    at Microsoft.Office.SecureStoreService.Server.SecureStoreServiceApplicationProxy.IsMasterSecretKeyPopulated()     at Microsoft.Office.SharePoint.ClientExtensions.SecureStoreAdministration.SSSAdminHelper.EnsurePrerequisite(SecureStoreServiceApplicationProxy
    proxy, String& errorMessage)     at Microsoft.Office.SharePoint.ClientExtensions.SecureStoreAdministration.ManageSSSvcApplication.InitializeGridView()     at Microsoft.Office.SharePoint.ClientExtensions.SecureSto... b3b6e19b-7de2-e016-ad32-0fc975829ef0
    11/16/2012 18:13:02.84* w3wp.exe (0x1774)                        0x15E8 SharePoint Foundation        
     Runtime                        tkau Unexpected ...reAdministration.ManageSSSvcApplication.OnLoad(EventArgs e)    
    at System.Web.UI.Control.LoadRecursive()     at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) b3b6e19b-7de2-e016-ad32-0fc975829ef0
    11/16/2012 18:13:02.84  w3wp.exe (0x1774)                        0x15E8 SharePoint Foundation        
     General                        ajlz0 High     Getting Error Message for Exception System.Web.HttpUnhandledException
    (0x80004005): Exception of type 'System.Web.HttpUnhandledException' was thrown. ---> Microsoft.Office.Server.ProductExpiredException: The trial period for this product has expired or Secure Store Shared Service is not supported for this SKU.    
    at Microsoft.Office.SecureStoreService.Server.SecureStoreServiceApplicationProxy.Execute[T](String operationName, Boolean validateCanary, ExecuteDelegate`1 operation)     at Microsoft.Office.SecureStoreService.Server.SecureStoreServiceApplicationProxy.IsMasterSecretKeyPopulated()    
    at Microsoft.Office.SharePoint.ClientExtensions.SecureStoreAdministration.SSSAdminHelper.EnsurePrerequisite(SecureStoreServiceApplicationProxy proxy, String& errorMessage)     at Microsoft.Office.Sha... b3b6e19b-7de2-e016-ad32-0fc975829ef0
    11/16/2012 18:13:02.84* w3wp.exe (0x1774)                        0x15E8 SharePoint Foundation        
     General                        ajlz0 High     ...rePoint.ClientExtensions.SecureStoreAdministration.ManageSSSvcApplication.InitializeGridView()    
    at Microsoft.Office.SharePoint.ClientExtensions.SecureStoreAdministration.ManageSSSvcApplication.OnLoad(EventArgs e)     at System.Web.UI.Control.LoadRecursive()     at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint,
    Boolean includeStagesAfterAsyncPoint)     at System.Web.UI.Page.HandleError(Exception e)     at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)    
    at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)     at System.Web.UI.Page.ProcessRequest()     at System.Web.UI.Page.ProcessRequest(HttpContext context)    
    at System.Web.Htt... b3b6e19b-7de2-e016-ad32-0fc975829ef0
    11/16/2012 18:13:02.84* w3wp.exe (0x1774)                        0x15E8 SharePoint Foundation        
     General                        ajlz0 High     ...pApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()    
    at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) b3b6e19b-7de2-e016-ad32-0fc975829ef0
    11/16/2012 18:13:02.86  w3wp.exe (0x1774)                        0x15E8 SharePoint Foundation        
     General                        aat87 Monitorable   b3b6e19b-7de2-e016-ad32-0fc975829ef0
    Is it a bug or any issue in configuration?
    Raghavendra Shanbhag | Blog: http://moss-solutions.blogspot.com
    Please click "Propose As Answer " if a post solves your problem or "Vote As Helpful" if a post has been useful to you.
    Disclaimer: This posting is provided "AS IS" with no warranties.

    Hello
    something should be related wuith this service, take a llok at my visual studio output whne I try to deplay and autohosted sharepoint app: (anyone can help)
    1>------ Build started: Project: MySharePointAppWeb, Configuration: Debug Any CPU ------
    1>  MySharePointAppWeb -> C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\bin\MySharePointAppWeb.dll
    2>------ Build started: Project: MySharePointApp, Configuration: Debug Any CPU ------
    2>C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\Web.Debug.config(34,4): warning : No element in the source document matches '/configuration/connectionStrings'
    2>  Transformed Web.config using C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\Web.Debug.config into obj\Debug\TransformWebConfig\transformed\Web.config.
    2>  Auto ConnectionString Transformed obj\Debug\TransformWebConfig\transformed\Web.config into obj\Debug\CSAutoParameterize\transformed\Web.config.
    2>  Copying all files to temporary location below for package/publish:
    2>  obj\Debug\Package\PackageTmp.
    2>  Packaging into C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointApp\obj\WebDeploy\MySharePointApp.Web.zip.
    2>  Adding sitemanifest (sitemanifest).
    2>  Adding IIS Application (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp)
    2>  Creating application (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp)
    2>  Adding virtual path (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp)
    2>  Adding directory (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp).
    2>  Adding directory (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\bin).
    2>  Adding directory (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\bin\en).
    2>  Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\bin\en\Microsoft.IdentityModel.resources.dll).
    2>  Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\bin\Microsoft.IdentityModel.dll).
    2>  Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\bin\Microsoft.IdentityModel.Extensions.dll).
    2>  Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\bin\Microsoft.SharePoint.Client.dll).
    2>  Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\bin\Microsoft.SharePoint.Client.Runtime.dll).
    2>  Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\bin\MySharePointAppWeb.dll).
    2>  Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\bin\MySharePointAppWeb.pdb).
    2>  Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\packages.config).
    2>  Adding directory (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\Pages).
    2>  Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\Pages\Default.aspx).
    2>  Adding directory (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\Scripts).
    2>  Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\Scripts\jquery-1.7.1.js).
    2>  Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\Scripts\jquery-1.7.1.min.js).
    2>  Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\Scripts\_references.js).
    2>  Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\Web.config).
    2>  Adding ACL's for path (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp)
    2>  Adding ACL's for path (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp)
    2>  Adding declared parameter 'IIS Web Application Name'.
    2>  Package "MySharePointApp.Web.zip" is successfully created as single file at the following location:
    2>  file:///C:/_works/visual%20studio%202012/Projects/MySharePointApp/MySharePointApp/obj/WebDeploy
    2>  To get the instructions on how to deploy the web package please visit the following link:
    2>  http://go.microsoft.com/fwlink/?LinkId=124618
    2>  Sample script for deploying this package is generated at the following location:
    2>  C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointApp\obj\WebDeploy\MySharePointApp.Web.deploy.cmd
    2>  For this sample script, you can change the deploy parameters by changing the following file:
    2>  C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointApp\obj\WebDeploy\MySharePointApp.Web.SetParameters.xml
    2>  Successfully created package at: C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointApp\bin\Debug\app.publish\1.0.0.0\MySharePointApp.app
    3>------ Deploy started: Project: MySharePointApp, Configuration: Debug Any CPU ------
    3>Active Deployment Configuration: Deploy App for SharePoint
    3>Uninstall app for SharePoint:
    3>  Skipping the uninstall step because the app for SharePoint is not installed on the server.
    3>Install app for SharePoint:
    3>  Uploading the app for SharePoint...
    3>  Creating a trusted root authority in SharePoint for IIS Express.
    3>  Installation is in progress (00:00:00)
    3>  Installation is in progress (00:00:01)
    3>  Installation is in progress (00:00:02)
    3>  Installation is in progress (00:00:03)
    3>  Installation is in progress (00:00:05)
    3>  Installation is in progress (00:00:06)
    3>  App failed to install, cleaning up...
    3>  App installation cleanup failed due to errors.  Please see the app on the SharePoint site’s “Site Contents” page for details.
    3>  App installation encountered the following errors:
    3> 
    3>  @"Error 1
    3>        CorrelationId: ceeeafab-3834-40ea-b360-c29d103e2248
    3>        ErrorDetail: The remote hosting service is not configured.
    3>        ErrorType: Configuration
    3>        ErrorTypeName: Configuration
    3>        ExceptionMessage: The trial period for this product has expired or Secure Store Shared Service is not supported for this SKU.
    3>        Source: RemoteWebSite
    3>        SourceName: Remote Web Site Deployment
    3> 
    3>  @"Error 2
    3>        CorrelationId: ceeeafab-3834-40ea-b360-c29d103e2248
    3>        ErrorDetail: The remote hosting service is not configured.
    3>        ErrorType: Configuration
    3>        ErrorTypeName: Configuration
    3>        ExceptionMessage: The trial period for this product has expired or Secure Store Shared Service is not supported for this SKU.
    3>        Source: RemoteWebSite
    3>        SourceName: Remote Web Site Deployment
    3>Error occurred in deployment step 'Install app for SharePoint': Failed to install app for SharePoint. Please see the output window for details.
    ========== Build: 2 succeeded, 0 failed, 0 up-to-date, 0 skipped ==========
    ========== Deploy: 0 succeeded, 1 failed, 0 skipped ==========

  • Is there any way to launch Shared Services in command prompt for migration?

    Hi All,
    We are on 11.1.1.1.3 Is there any way to launch Shared Services in command prompt for migration purposes? The purpose is we need to automate the migration process from Dev to Prod. Currently we are exporting artifacts by using LCM in shared service by file management and then exporting that folder to prod server and then importing by using LCM. So we need to automate the whole process.
    So is there any way we can launch shared services/LCM in command prompt to launch the migration for export/import artifacts?
    Any suggestions will be great help.

    Did you see the bit in the documentation called "Creating Migration Definitions"?
    See: http://download.oracle.com/docs/cd/E12825_01/epm.111/epm_lifecycle_management/ch06s03s01.htm
    Also, if you follow this link, the docs explain how to (sort of) generate the xml:
    http://download.oracle.com/docs/cd/E12825_01/epm.111/epm_lifecycle_management/ch06s03.htm
    Regards,
    Cameron Lackpour

  • Find active user exit for a transaction code

    Hi All,
    Please help to find the active user exit for a transaction code.
    for Ex. below is the list of user exits for package VA ( for creation of sales order and changing sales order). Let me know which user exit is active and which is not active.
      Exit name    Short text
      SDTRM001  Reschedule schedule lines without a new ATP check
      V45A0001  Determine alternative materials for product selection
      V45A0002  Predefine sold-to party in sales document
      V45A0003  Collector for customer function modulpool MV45A
      V45A0004  Copy packing proposal
      V45E0001  Update the purchase order from the sales order
      V45E0002  Data transfer in procurement elements (PRreq., assembly)
      V45L0001  SD component supplier processing (customer enhancements)
      V45P0001  SD customer function for cross-company code sales
      V45S0001  Update sales document from configuration
      V45S0003  MRP-relevance for incomplete configuration
      V45S0004  Effectivity type in sales order
      V45W0001  SD Service Management: Forward Contract Data to Item
      V46H0001  SD Customer functions for resource-related billing
      V60F0001  SD Billing plan (customer enhancement) diff. to billing plan
    Thanks & Regards,
    Sabu

    Goto TADIR table give program id as R3TR ,Objec type as CMOD and execute.
    You will get all active exits in system.
    Exits related to SD may be in ZSD package.

  • Essbase, shared services, projects, users

    I have installed shared services and cnfigured it
    now installed essbase
    EAS
    Provider services
    and configured in the above mentioned manner
    (DID not start essbase and EAS till now)
    when I log into shared services....i see only bussines rules under projects
    no analytical services under unassigned applications.....
    how can i see essbase server in shared services user management console.......
    it might be a basic funda....i am not getting
    help me in solving this....
    Thanks in advance

    Hi,
    Have you converted essbase from native security mode to shared services security.
    In EAS, right click security and choose "Externalize users"
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Essbase - Shared Services - Maxl - User creation

    Hi,
    I have an issue looking similar to [Automating User/Group creation & Assigning filters in Shared Services|http://forums.oracle.com/forums/thread.jspa?threadID=1009127]
    When trying to add internal groups to an external MSAD user, I get following messages:
    h3. when adding a group to an external user:
    h6. alter user 'x29027' add 'GR_GROUP';
    Maxl returns:
    h6. Statement executed with warnings.
    h6. User x29027 does not exist
    => the system does not recognize the user
    h3. when trying to create this user first as an internal user
    (based the settings from on another external user)
    h6. create or replace user 'x29027' identified by 'password' as 'i09740';
    Maxl returns:
    h6. Statement executed with warnings.
    h6. A user/group with the same name (x29027) exist at Shared Services
    => the system does recognize the user in MSAD!
    ===> both statements seem to be contradictory!!!
    h3. Other remarks/thoughts:
    - we have two MSAD links (to two different domains), does this matter?
    - no difference when addressing users as x29027@MSAD_FIB (a syntax similar to the HSS security report output)
    - any possibilities in creating a user internally first (using the 'as' option; to copy settings from another user) and then moving to external? (like alter user 'Test_EDR4' set type external;)
    Thanks in advance
    Erik
    Environment: Essbase 9.3.1.3. with Shared Services

    Hi Erik,
    When you create an user in Essbase, the user will be created both in Essbase as well as Shared Service,
    where as when you create an user in Shared service, the user will not be created in essbase untill you perform refresh.
    In your case you can create the external user in Essasbe by using "Create user 'x29027' type external;'.
    By this you will be creating the user in Essbase and the particular user is recognised in Essbase.
    Now you can add him to any group.
    - Krish

  • GRC AE User provisioning for Portal giving error

    Hi,
    We are having GRC AC 5.3- SP9.
    While doing user provisioning for Portal, we are getting the following error:  DBCacheVerifier.java@58:isExpired(). Detailed error log is attached herewith. The back end system (EP Dev) is installed with GRC RTA. Connectors are testing OK. The CPIC user id in backend system EPDev is ED1GRC and has SUPER ADMIN Authorizations, with SPML read/write actions attached to the Role. EP Dev system is having UME as data source, not LDAP. The issue was existing even before the SP9 upgrade. We have restarted the Server several times lately. Pls help me in this.
    Thanks & Regards,
    Jagadish H S
    BASIS Team, BPCL, Mumbai.

    Jagadish,
    This type of error would normally be a data setup issue. Have you imported all of the initial data files (XML ones)?
    Otherwise, if it is just a cache issue, then restarting the server would normally solve the proplem. I would also check the Java Netweaver Admin console to ensure that the memory settings are sufficiently configured to match the hardware that is deployed.
    Simon

  • ICM active -- NO CONNECTION for all AppServers (using TREX host names / IP

    Hi Experts,
    Our Basis team has set up new BWA Box for a Quality. When i went to a transaction "RSDDBIAMON" I am getting below error.
    Q27: ICM active --> NO CONNECTION for all AppServers (using TREX host names / IP addresses). Configure ICM/TCM connection in SAP
    RFC Connection is working. I have tested it in sm59. Can anyone help to understan where will be the problem.
    Regards,

    In TREX Admin, I was able to check ICM error and got IP address.. After this got to know host-name of the server is different from configured in ICM.

  • Hyperion workspace log-in issue for only one (in Shared Services) active di

    Hi All,
    This is Raj, working as Hyp support analyst.
    I have big issue in Hyperion production environment. (version No. 9.3.1)
    Issue is, we had issues with TWO active directories of Hyperion Shared Servces which ad1 and ad2. We found that the TWO respective active directories (ad1 and ad2) of their hosts are not working.
    After that we changed those two active directories hosts with new host names respectively. We have implemented these changes in DEV first and those TWO active directories user able to access Hyperion workspace (HFM users) which are under ad1 active directory. offcourse we have all the servers as well.
    But ad2 users are NOT able log-in to the Production workspace but they are able to log-in with DEV workspace.
    Not really sure what happened... (Please note that, No access is changed for any of the users)... if it is LDAP issue...how it to resolve...
    Can some one please help oout in this...
    Thank you very much in advance.
    - Thanks,
    Raj.

    Hi,
    Those error messages usually happen when Shared Services has just started up and before the other services have started, it sends out a ping to see if it gets a response from the other application servers, the pings will fail until the other services have started, once they have started them messages should disappear.
    I would check that if any changes have happened to your MSAD or the account that shared services uses.
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • One more on Shared Services - Removing Users w/o De-Provisioning

    What happens if a user is removed before it is de-provisioned?
    4-5 users were removed without do any de-provisioning first. Now the users are still appearing in certain areas, but not in default to remove them. Not sure if adding the users back in will tie them to their old SIDs and can then de-provision and remove them entirely or if would have to go through some other effort to remove them completely (which is the end goal). Any guidance on this is very appreciated.
    Thanks!

    You could try using the updatenativedir utility which comes supplied with Shared Serevices found in a rather odd location:
    <hyperion home>\common\utilities\SyncOpenLdapUtility\UpdateNativeDir.zip
    Take a backup of both your HSS Database and OpenLDAP Database before running it, just in case.
    I have never had any bad experiences using it.
    Run it with the -noupdate option to see what it change.
    Have a read of the whole readme, Some Text from the readme....
    Utility to update Hyperion Native Directory with updated data from external
    providers
    Description
    This utility will update external user and group identities in the Hyperion
    Native Directory for those objects that have moved in the external directory.
    This utility will also delete user and group entries from the Hyperion Native
    Directory that cannot be located in the external directory. If the external
    directory cannot be reached due to connectivity issues those user and group
    entries in the Hyperion Native Directory will not be deleted by the utility.
    Please ensure the you provide the same external authentication configuration
    file (CSS.xml) as configured in the Hyperion Shared Services.
    The data related to all the external providers in the search order is
    synchronized. User and group information such as membership, provisioning,
    cache will be deleted from Native Directory if the user or group is not found
    in the external providers.
    After this utility is run, we need to restart HSS so that the cache is
    refreshed and the data updated. The other option is to wait for cache to refresh.
    ...

  • Shared Services Console - User is not authorized for the action

    Hi,
    I have installed Essbase 11.11.3 and configured on Linux. I started EPM and then the Shared Services Console. I created a new group Poweruser and assigned a new user to it. I provisioned the group withall the rights of the admin. This all works.
    When I log on with the new user on the Shared Service Console and go to Essbase Studio Server and click on the Essbase Studio Server application it gives me the message:
    User is not authorized for the action
    This is the same message as I get under the user admin. Can anyone tell me what I can possibly do to make it work.
    The service for EAS is started properly. The one thing that is not configured is HBR.
    Patrick

    Hi,
    What are you trying to achieve, provision a user for essbase studio ?
    EAS is a separate product from Studio.
    Cheers
    John
    http://john-goodwin.blogspot.com/

Maybe you are looking for

  • Need help with my E2100L Wireless Router

    I moved back home with the parents after graduating from college while I'm searching for a job and I noticed my parent's wireless internet connection was really poor. I'm normally pretty decent with computers but I haven’t been able to fix this probl

  • Invalid column name

    Hi, I facing a strange problem w.r.t a select * query on a table which is altered by adding a new column. The table alter & querying task are done using EJBs. I have traced the problem ResultSet.getxxx() method. When I call the ResultSet.getxxx() met

  • Tower Not Working

    I live in the Castleton-on-Hudson/Schodack, NY area.  This morning I was able make or receive phone calls, text or use any of the features on my phone.  I was told that a tower was down in our area.  That was HOURS ago and we still do not have servic

  • Using date class to change the alpha of an object depending on time (GMT)

    Hi, I'm trying (and struggling) to get my head around AS3 and am building a flash webpage. I have 2 layers in the timeline, each containing a movie clip matching the page size with instance names backgroundDay and backgroundNight. What I'm wanting is

  • Am trying to download a packaged application. Using Chrome. I've uninstalled and reinstalled.

    To view the full contents of this document, you need a later version of the PDF viewer. You can upgrade to the latest version of Adobe Reader from www.adobe.com/products/acrobat/readstep2.html For further support, go to www.adobe.com/support/products