External authentication for Essbase 7.1.6.

Hi all,
We are trying to set up external authentication for Essbase 7.1.6. We have a customized version of Essbase which does not use DLL. we do not have a Hyperion Hub or any CSS set up. All we have is an authentication module from the vendor to be used instead of the DLL. As per the documents provided to us all we have to do is change the cfg file to include the AUTHENTICATIONMODULE setting. Does anyone has any experience with this? What all parameters do we need to pass to Active Directory for this to work? Please help.
Thanks.
Vish.

You could create a maxl script that replaces the filters, when you call the maxl script you could pass in a variable such as YR08 and use that variable in the script.
Cheers
John
http://john-goodwin.blogspot.com/

Similar Messages

  • External authentication on Essbase 9.3.1

    I am migrating from Essbase 7.3.x on 32-bit Windows to System9 on 64-bit windows. External authentication works on both Shared Services and EAS. I have successfully registered EAS and Essbase with shared services however I do not see Essbase in "User console" of Shared Services as an application. I am able to create native authenticated users in Essbase but unable to externalise the security. I get the following error messages when trying to externalise:
    Error: 1051549: Can not convert Analytic Services to Shared Services mode when Analytic Services is not configured with Shared Services or the initialization process has failed
    On starting Essbase, I see the following error message when I use the same CSSconfig file as used by shared services:
    [Wed Jul 16 10:26:45 2008]Local/ESSBASE0///Error(1051223)
    Single Sign On function call [css_init] failed with error [getOSVersion]
    [Wed Jul 16 10:26:45 2008]Local/ESSBASE0///Info(1051198)
    Single Sign-On Initialization Failed !
    If I point to the current CSS file used in production Essbase 7, I get the following message:
    [Wed Jul 16 10:33:26 2008]Local/ESSBASE0///Error(1051223)
    Single Sign On function call [css_init] failed with error [-1]
    [Wed Jul 16 10:33:26 2008]Local/ESSBASE0///Info(1051198)
    Single Sign-On Initialization Failed !
    In either case everything except External Authentication on System9 for Essbase works.
    Both shared services and Essbase are on the same 64-bit Windows box.
    Any help in resolving this will be greatly appreciated.
    Thanks,
    Vikram.

    HI:
    I recommand following these steps:
    1. Go to the box where you have your Essbase installed
    2. Pull up the Shared Services Configuration Utility
    3. Select COmponent to be registered as Essbase
    4. Remeber to stop the essbase - i assume you are getting the error hence essbae would not have loaded.
    5. Re-register Essbase with Shared services
    6.Start essbase in Foreground
    It shuld Start :) good Luck..let me know If this failed..
    Thanks,
    Sriram

  • Use of LDAP group external authentication in Essbase v7.16

    Hello Experts,
    One of my customer wants an answer for his query -
    They currently use LDAP external authentificaiton with userid only and would like to use LDAP groups. Is this supported in version 7.1.6 (Heard that It is a known limitation in version 7.x that LDAP / MSAD groups are not supported. MSAD groups are supported in System 9.x)
    My Research:
    I read in the Essbase v7 documentation the following 2 examples of using groups, under Essbase.CFG Configuration Settings > AUTHENTICATIONMODULE
    Can you explain how this works
    Thank you
    Example 1
    The entries in this example allow users in the group Engineers from domain yahoo.com to be authenticated on host Gorky, via port number 389, with a timeout period of 30 seconds.
    AuthenticationModule LDAP essldap.dll 30 cn=Engineers, ou=Groups, dc=yahoo, dc=com@Gorky:389
    Example 2
    The entries in this example allow users in the group Engineers from domain yahoo.com to be authenticated on host 129.63.140.122, via port number 389, with a timeout period of 45 seconds.
    AuthenticationModule MSAD essmsad.dll essmsad.lib 45 cn=Engineers, ou=Groups, dc=yahoo, dc=[email protected]:389
    Regards,
    Sonal
    Edited by: 637223 on Oct 23, 2009 7:16 PM

    I do not believe using LDAP groups is supported in 716.

  • Hyperion Hub Required for External Authentication?

    Need to use external authentication for three products, Essbase 7.1.2, Analyzer and Reports. Do you have to use Hyperion Hub?

    Also, can you use mixed mode, some users using Essbase Native and some using Active Directory or a combination of Active Directory and NTML?

  • Password aging for externally authenticated user

    Hello All:
    How can we implement the password aging of externally authenticated user.
    Thanks
    San~

    If the user is externally authenticated, then the password expiry should be external. E.g for the unix account.
    "When you choose external authentication for a user, the user account is maintained by Oracle, but password administration and user authentication is performed by an external service. This external service can be the operating system or a network service, such as Oracle Net.
    With external authentication, your database relies on the underlying operating system or network authentication service to restrict access to database accounts. A database password is not used for this type of login. If your operating system or network service permits, you can have it authenticate users. If you do so, set the initialization parameter OS_AUTHENT_PREFIX, and use this prefix in Oracle user names. The OS_AUTHENT_PREFIX parameter defines a prefix that Oracle adds to the beginning of every user's operating system account name. Oracle compares the prefixed user name with the Oracle user names in the database when a user attempts to connect."

  • External Authentication in EAS using MSAD

    <p>We use MSAD for our external authentication and it works fine ifthe user logon names are set up a certain way in MSAD. However,some of them are set up differently and Essbase won't allow us touse external authentication for them. Is there a setting somewherein Essbase that can be changed to allow more than one user logonname format coming from MSAD?</p>

    <p>Hi Krista,</p><p> </p><p>Unfortunately u cannot specify two formats to authenticate. If iunderstand correclty you want to identify a user in MSAD by morethan one feild, as far as i know essbase external authenticationthe xml file cannot use more than one feild.</p><p> </p><p>your most probable solution to this would be to add the feildyou are using in your xml file to all users using essbase inMSAD.</p><p> </p><p>Please use the following link if you need furtherinformation.</p><p> </p><p>http://dev.hyperion.com/techdocs/essbase/essbase_712/Docs/techref/techref.htm#config/security/configure/config.htm</p><p> </p><p>here is the sample active directory format.</p><p> </p><p><msad name="<b><a href="ldapserver.htm">msadServer</a></b>"> <trusted><b><ahref="trust.htm">false</a></b></trusted> <url><b><ahref="provurl.htm">ldap://host<img src="i/expressions/face-icon-small-tongue.gif" border="0">ortNo/DIT</a></b></url><userDN><b>cn=UserName</b></userDN><password><b>UserPassword</b></password> <user><url><b>ou=people</b></url></user> <group> <url><b>ou=Groups</b></url> </group></msad></p>

  • External Authentication with LDAP

    Has anyone integrated external authentication of Essbase with LDAP? I've searched discussion groups, websites with no luck, and of course, Essbase documentation doesn't help either. Any additional documentation will help.Thanks in advance!

    Thanks for the info. Is this sample code part of the default implementation that comes installed with the product (essldap.dll)? Or is this something completely different.Also, has anyone done anything similar in visual basic? We have a shortage of v c++ skills around here.Thanks again!

  • External authentication using Headervariable

    Hi SAP Experts
    We have configured External authentication for WEM using Headervariable.We are using BI Java 7.0
    External authentication is working fine using Headervariable Login module for URL http://<WEb Server hostname>/irj which redirect to http://<J2EE hostname>:<port #>/irj
    As you all know that we also use http://<J2EE hostname>:<port #> for Administation point of view where many options available like user management, SLD, Webdynpro, NetWeaver Administation etc.We have not configured this URL for External Authentication  and also do not want to configure but when tyring to access any administration option on this, portal prompts default logon page and after entering Portal UserID/Password we get message like " No Loginmodules configured for Header"
    I do not know why system display this message
    Please help me if anyone has experience to resolve this issue, as we want to use URL http://<J2EE hostname:<port #>, which should prompts Portal Logon screen and after entering Portal userid/password we should access the administration screen without afftecting our External Authentication configuration for URL http://<WEb Server host>/irj
    Thanks in Advance
    Thanks with Regards
    Deelip Kumar

    Hi Deelip,
    my earlier post referred to an additional authscheme that you may have created. If you have done so, please remove it. If you have checked this, there still is a predelivered authscheme called header, wich references a login stack called header. This login stack template does not exist as a default.
    In this case, you may have assigned this authscheme (header) to some component, like an iview. How this works is explained in the docs <a href="http://help.sap.com/saphelp_erp2005vp/helpdata/en/54/f91fba71ae48309e4267b4a36fa47b/frameset.htm">here</a> and<a href="http://help.sap.com/saphelp_erp2005vp/helpdata/en/54/a334ed5bbfd5488b8cdd67b2c594a9/frameset.htm">here</a> for example.
    If you have done so, this reference to the authscheme header may trigger the lookup of the login stack template called header, which does not exist and thus leads to the error.
    For detailed error analysis, I would recommend to search the security log and the portal logs for indications where the source of this error might be.
    Regards,
    Patrick

  • Radius or LDAP (not Oracle LDAP) authentication for GridControl

    I'm running GC 10.2.0.3.0 on Oracle Linux, and I'd like to be able to open up GridControl to other users without setting up accounts/passwords for them. Accounts I can handle, passwords, I don't want to handle.
    I see that if I create a new GC user via enterprise manager, a new database accout is also created in the EMREP database. I've configured our EMREP database to use radius authentication and it works when I connect via sqlplus to the EMREP database. The user is set to authenticate "externally" and os_authent_prefix is set to ''.
    However, after I set up external authentication for a given user, they are no longer able to login to enterprise manager using their radius authenticated password. So something about EM is not capable of radius authentication with the local EMREP database?
    Questions for all:
    Is it possible to authenticate users of enterprise manager GridControl against an external password store? I have at my disposal: radius (works great for several of our databases), ActiveDirectory (without oracle schema extensions), LDAP (active directory), proxying the EM server with another Apache server.
    I do not have a license for OID and the "free use" license for OID does not allow for user management. We cannot we purchase OID for this purpose.
    Our GC environment is Linux so Windows OS authentication against AD isn't going to work and we need to support Firefox/IE/Other browsers on various OS's.
    I've seen hints that "external authentication" is possible with "generic" sources, but nothing concrete. Anyone doing this?

    <QUOTE>All I want now is the capability to perform my own method of LDAP BIND to AD to be used as a security plugin to the database authentication piece</QUOTE>
    Amen.
    Right now, I've got an SR open on the radius authentication issue in GC. It took me a two weeks to convince the Oracle tech that I wasn't talking about getting Oracle to use OS authentication where OS users were authenticated by radius.
    I've put about 40 actual work hours in on this issue, going so far as to deconstruct the EM install .jar files and trying to replace the JDBC drivers.
    At this point I believe that it would be relatively easy for Oracle to add Radius authentication support to Grid control in their next big release (11g).
    Doing so would involve replacing the 10g JDBC thin drivers with 11g JDBC thin drivers. The 10g thin jdbc drivers support advanced security encryption and checksums, but not the radius authentication. The 11g thin drivers DO implement the radius option as well as a full complement of encryption checksum types not supported in 10g. From there it should be a simple matter of the EM java login procedure/bean/servlet/jsp being able to set the thin driver to use the radius code in the jdbc layer.
    The other option, which I haven't yet given up on would be to hack the EM code so that instead of using 10g thin drivers it uses 10g OCI jdbc (thick) drivers. The thick drivers support the radius authentication and encryption/checksum features natively, and the settings are controled by the sqlnet.ora file. I've got java code using those just fine. If only I could hack EM to use them.
    In short, if I had access to the source, I could probably code this up in a week. Very frustrating.
    I thought about trying the OID route, but as I said in my original post, we don't have a license. Even if I got it working, and it sounds like it doesn't really work, I can't justify spending $x00,000 for 10-15 dbas not to have to use dedicated accounts and passwords.
    Normal user login to our 9i and 10g databases we have working with radius (backed by Active Directory). All we do is "create user xxxxxx identified externally;" and the user is good to go.
    In short, I think EM GridControl is awesome. I manage 36 databases with it and I've solved problems in minutes that used to take hours or days. When I show it to some of our oracle "power users" they all want it, but they're all radius authenticated.
    I'll keep the thread updated if I see results from our SR.

  • OID external authentication - having trouble excuting oidspadi.sh

    Hi all,
    I am setting up External Authentication for OID, and have trouble with it. My version is Oracle application server infrastructure 10.1.2 (OID 10.1.2) on windows.
    hailie@Server1 /cygdrive/e/oracle/OraInfra/ldap/admin
    $ export ORACLE_HOME="E:\oracle\OraInfra"
    hailie@Server1 /cygdrive/e/oracle/OraInfra/ldap/admin
    $ sh oidspadi.sh
    oidspadi.sh: line 28: $'\r': command not found
    oidspadi.sh: line 38: $'\r': command not found
    oidspadi.sh: line 43: $'\r': command not found
    oidspadi.sh: line 47: $'\r': command not found
    oidspadi.sh: line 51: $'\r': command not found
    oidspadi.sh: line 58: $'\r': command not found
    oidspadi.sh: line 59: $'\r': command not found
    oidspadi.sh: line 60: $'clear\r': command not found
    OID Active Directory Plug-in Configuration
    Please make sure Database and OID are up and running.
    oidspadi.sh: line 67: $'\r': command not found
    oidspadi.sh: line 70: $'\r': command not found
    oidspadi.sh: line 103: syntax error near unexpected token `fi'
    'idspadi.sh: line 103: ` fi
    Edited by: Hailie on Jan 16, 2009 8:05 AM
    Edited by: Hailie on Jan 16, 2009 8:45 AM
    Edited by: Hailie on Jan 16, 2009 11:32 AM

    After I removed all the blank lines in oidspadi.sh:
    hailie@Server1 /cygdrive/e/oracle/OraInfra/ldap/admin
    $ sh oidspadi.sh
    oidspadi.sh: line 53: $'clear\r': command not found
    OID Active Directory Plug-in Configuration
    Please make sure Database and OID are up and running.
    oidspadi.sh: line 91: syntax error near unexpected token `fi'
    'idspadi.sh: line 91: `fi
    Thank you for your help.
    Hailie
    Edited by: Hailie on Jan 16, 2009 8:43 AM
    Edited by: Hailie on Jan 16, 2009 8:46 AM
    Edited by: Hailie on Jan 16, 2009 11:36 AM

  • Use of groups on External Authentication.

    Hi All, I'm triying to use Active Directory groups instead of users in order to authenticate users on ODI 11.1.1.6.
    Unfortunately ODI seems to be prepared to use MS AD users, but groups.
    Does anybody configure LDAP to authenticate users and got it working with groups?
    Thanks and regards!

    ODI 11g supports external authentication for users only.

  • External authentication on EBS

    Hi,
    I have setup an authentication server for all users of my company and I am configuring all our internal systems to use it for authentication.
    Please inform me if there exist any way of external authentication for EBS users.
    Thank you.

    Hi,
    My intended authentication server is Gemalto SA server.
    Is it possible to integrate authentication on EBS through this type of server?I believe this type of server is not supported. The list of 3rd party software which is certified with 11i/R12 can be found in the following documents.
    Note: 186981.1 - Oracle Application Server with Oracle E-Business Suite Release 11i FAQ
    https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=186981.1
    Note: 415007.1 - Oracle Application Server with Oracle E-Business Suite Release 12 FAQ
    https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=415007.1
    Regards,
    Hussein

  • Essbase 6.5 External Authentication Issue!! Urgent Please!!

    Hi all,
    I am great trouble over an external authentication issue in Essbase 6.5. I request you all to please give me your feedback on the same as soon as possible.
    I am in a situation where I need to get my Essbase 6.5 external Authentication converted from LDAP to Active Directory services.
    I suppose there has been necessary changes done to the .cfg file for the same. However, I think I am getting an error
    "User [vikc]'c external authentication protocol [MSEX]'s password check module is not loaded".
    Please let me know if you have come across such an issue earlier and can anybody to able to help me with the same.
    Its kinda Urgent. so any replies for the same will be appreciated.
    Thanks and Regards,
    Vikram

    Vikram,
    Yes you will have to reconfigure the CSS.xml and cfg file for external auth.
    Here is the Sample CSS
    <spi>
              <provider>
                   <msad name="full360">
                        <trusted>false</trusted>
                        <url>ldap://192.168.1.100:389/DC=full360,DC=com</url>
                        <userDN>CN=Ravinder Singh,DC=full360,DC=com</userDN>
                        <password>full@360</password>
                        <authType>simple</authType>
                        <identityAttribute>dn</identityAttribute>
                        <maxSize>1000</maxSize>
                        <user>
                             <loginAttribute>sAMAccountName</loginAttribute>
                             <nameAttribute>dn</nameAttribute>
                        </user>
                        <group>
                             <nameAttribute>cn</nameAttribute>
                             <objectclass>
                                  <entry>group?member</entry>
                             </objectclass>
                        </group>
                   </msad>
    Download this toll "http://www.ldapbrowser.com/download.htm"
    LDAP browser to get the perfact DN information.
    Let me know the status
    Ravikant

  • Essbase security Migration from native mode to external authentication

    Hi!!
    I want some guidance on setting up security, all the users are currently in Native user mode and Native groups.
    Now we want to migrate to external mode, current version of hyperion is 11.1.1.3, any steps to follow in
    this direction would be really helpful.
    What is the best way of migrating huge user base from native directory to setting up for external authentication,
    this is the first time move from native to external authentication, If anyone who has done this will be helpful.
    steps to setup , maxl based migration will be helpful or utility based.
    Thanks

    When you say native mode do you mean that that essbase security is in native mode and you want to convert to shared services security mode,or do you mean you are using shared services securtiy with native users and you want to use an external directory like MSAD.
    For your question ::
    Yes the first piece is correct, our security is in native mode.
    and we want to convert to shared services security mode,
    The request involves moving from essbase native mode to Shared services native user mode (moving all the existing users, groups and existing provisioning)
    The next stage is moving from Shared services native user mode to external directory. (moving all the existing users, groups and existing provisioning)
    Your input will guide me in the direction.
    Thanks

  • Sync Shared Services External users & Provisioning for Essbase Applications

    Hi Experts !!
    i have externalised user authentication in Shared services . I provisioned all users for Essbase and refresh the security from Essbase ,So all users are working fine
    and can login in Essbase and "Excel add-in" as well..
    but there is one user who is still not working for "Excel Add in"..
    Error is "Login failed due to invalid login credentials"
    Please suugest me the solutions
    Thank you.

    Hi John !
    Yes, User can login in EAS .
    Also User is available under Users in EAS ,But no applications are displaying in Analytic Server , While I have given Administration Privileges for Essbase app.
    But still error while login in Excel add in ..
    Error : Login failed due to invalid login Credentials.
    Also ,After Provisioning , How Can we Sync all all Externalized users from Shared Services itself for All hyperion Projects ???
    Thank you

Maybe you are looking for

  • Disk utility wont format external drive

    Hi all I have a friends 1 TB toshiba external drive, purchased at office works. I am trying to format it for NTFS so he can use it to watch the movies he is copying on any machine, xbox etc.. using disk utility I am erasing the 1tb drive with the NTF

  • 2011 17" MacBook Pro freezes for over 5 mins on user password

    Hey everyone, I installed Yosemite on my 2011 17" MacBook Pro. Since then, after a period of my computer being on or after sleep, it appears that the process that handles login using my user password hangs for a bit and then proceeds to work. On the

  • CS 4 is blank?

    Worked on a project all week. Saved the project as three increments, A, B, and C. Did a final render of C last night, saved the file and went to bed. Today, I went to open C so that I could export it, but the entire interface is blank. nothing!!! No

  • Submit OA page with Enter key in custom page

    Hello All, I have one custom page with 20+ fields and two submit buttons to do different processing. On this page, if enter key is pressed then I need to submit the form i.e. invoke processing corresponding to one of the submit button. I know that at

  • My key ( b + v ) can not be use anymore, please tell me about that..!

    my keyboard is not usefull anymore, b and v -keys can not be used when I pressed..