External database Authentication Issue

Hello Experts
I have omplemented external database authentication in my PC and somehow its not working
Do we have to configure the details in NQSconfig file in the security section for implementing External Database Authentication .

Hello Thanks for your concern .
Steps i have followed
*1)* use that table. If not, create the following table in your database.
CREATE TABLE OBI_USER
USERNAME VARCHAR2(255 BYTE),
PASSWORD VARCHAR2(255 BYTE),
GROUPNAME VARCHAR2(255 BYTE),
DISPLAYNAME VARCHAR2(255 BYTE),
LOGLEVEL NUMBER,
CREATED_DT DATE sysdate,
**2)**Created New ODBC Connection to use Separate Connection pool for OBIEE Security .
*3)* Created New Session Initialization Block for Authentication and gave
(SELECT USERNAME, GROUPNAME, DISPLAYNAME, LOGLEVEL FROM CPR_OBI_USER WHERE UPPER( USERNAME) =UPPER(':USER') AND UPPER(PASSWORD) =UPPER(':PASSWORD') ) by selection the new BI Security connection pool
In the variable Traget i have defined 'USER', 'GROUP', 'LOGLEVEL','DISPLAYNAME'
*4)* Created another Session Initialization Block for Authorization and gave (SELECT 'GROUP', GROUPNAME FROM OBI_USER WHERE UPPER( USERNAME) =UPPER(':USER'))
And selected row wise initialization in variable target AND assigned Authentication Initialization block in the Execution Precedence .
*5)* Created Groups in Manage-> Security-> Groups with the same group names as given in OBI_USER Table
*6)* Added Groups in Manage Catalog and groups in Presentation Services .
*7)* When i log on with the user which is assigned to the group in the OBI_USER Table then its giving
(Unable to Log In     
An invalid User Name or Password was entered.
Please enter your User ID and Password below, and then press the Log In button.)
Edited by: newbi on Sep 28, 2010 9:53 AM

Similar Messages

  • OBIEE 11.1.1.7 external database authentication fails with hashed passwords.

    Hi .
    I use an external database ( Oracle database 11g  release 11.2.0.1.0) to authenticate user with OBIEE 11.1.1.7.
    I configured  SQL Authentication provider as my provider ,It works OK with :enabled  Plaintext Passwords Enabled option and password  is stored as plain text.
    But It fails when I disable this option and want to authenticate with hashed passwords.It gives Authenticate Denied error.
    In Provider Specific tab there are some parameters which might need changes:
    1-Password Algorithm:??
    2-Password Style:??
    3-SQL Get Users Password:SELECT U_PASSWORD FROM USERS WHERE U_NAME = ?
    How can I find correct values for options 1 and 2 form my external database?
    And Is it need to rewrite query in option 3 ?
    Please find attach files.

    Hi,
    I too faced same issue when I was installing OBIEE 11.1.1.7.0 on windows7 64bit.
    Please refer the below links.
    http://satyaobieesolutions.blogspot.in/2013/05/configuration-action-creating-domain.html
    http://satyaobieesolutions.blogspot.in/2013/05/obiee-111170-simplesoftware-installation.html
    http://satyaobieesolutions.blogspot.in/2012/06/obiee-11.html
    Hope this help's
    Thanks,
    Satya

  • External Application authentication issue

    I am trying to add one of our in-house java application which has in-built user authentication logic in Portal.
    I am adding it as an 'External Application' thru SSO Administration (using Add external application). When I enter my username and password for the first time (i do select 'remember my username/password for this application') but I am routed to the login screen of the java application .......and the same thing happens when I click the link again (every time I get the login screen of Java Application).
    I have tried adding 'yahoo' too but it still takes me to the login screen.
    Please advice.

    Havre you tried the portlet "external applications" , click preferences and set up your username / pwd ?

  • NOT SEE BIP FOLDER ASSIGNED BY USING BIEE EXTERNAL DATABASE TABLE AUTHENTIC

    All users using BIEE external database table authentication cannot see the BI Publisher folders and data source assign to their roles.
    ### Steps to Reproduce ###
    1) I create one table in Oracle database to store user name, password, group name and etc as
    follows:
    CREATE TABLE "KPI_STAGE"."USER_INFO_TAB" (
    "USER_ID" VARCHAR2(30 byte) NOT NULL,
    "PASSWORD" VARCHAR2(50 byte),
    "DISPLAY_NAME" VARCHAR2(50 byte),
    "GROUP_ID" VARCHAR2(250 byte),
    "LOG_LEVEL" VARCHAR2(5 byte),
    CONSTRAINT "USER_INFO_PK_1" PRIMARY
    KEY("USER_ID")
    2) I create one session variable initialization block named "security_test" as follows:
    2.1)Data Source: select USER_ID,DISPLAY_NAME,LOG_LEVEL,GROUP_ID,GROUP_ID from USER_INFO_TAB where
    PASSWORD=':PASSWORD' and USER_ID=upper(':USER')
    2.2)Variable Target: USER, DISPLAYNAME,LOGLEVEL,GROUP and WEBGROUPS
    3) I can use user_id and password to login into BIEE and BIP then.
    4) According to [http://blogs.oracle.com/xmlpublisher/discuss/msgReader$223?mode=topic&y=2007&m=4&d=2]
    I use "Oracle BI Server" Security Model for BI Publisher.
    5)After I use 'Administrator' user to login into BIP, I create one BIP role "XML_USER"and assign some BIP folders and data source to this role.
    5) I update the role name "XML_USER" into table user_info_tab
    column GROUP_ID.
    update table user_info_tab set group_id = 'XML_USER'
    6) I think I can use some user in the table"user_info_tab" to login into BIP and see the folders which I have assigned to the role 'XML_USER'.
    But the result is that: I can login into BIP but can not see assigned folders.
    However
    If in the step 2.1 above for the initialization block, I don't include PASSWORD in the select language:
    2.1)Data Source: select USER_ID,DISPLAY_NAME,LOG_LEVEL,GROUP_ID,GROUP_ID from USER_INFO_TAB where USER_ID=upper(':USER')
    I can see the assigned BIP folders, but it is not security.
    Any one know how to solve this problem?

    Hi,
    I am also using external database authentication.
    The table contains user, group and password info which is passed on to BI application thru init_user_details init block in RPD. Follow is the query used.
    SELECT USERNAME, GRP FROM NXRP_MST_USR_TYPE WHERE USERNAME=':USER' AND PASSWORD=':PASSWORD'
    and the username and group is saved in Session variables USER and GROUP respectively.
    Also "Oracle BI Server" security model is used in the BI Publisher.
    I am able to login in to BI Answers but not into BIP.
    I have also set SA system subject Area.
    Could some one help?
    Thanks

  • No cache while using external database authenication

    Hello,
    i was successful in setting up the external database authentication and apply filters to groups
    while i am creating reports in answers, i.e. querying data from database...those queries are not logged in the cache.
    how do i see this solve this...............
    while using RPD authentication system, i know that queries are stored cached in NQQUERY FILE.
    THANKS
    RAKE

    hi,
    can you check whether Cache is turned ON in nqsconfig file.
    [ CACHE ]
    ENABLE     =     YES;
    // A comma separated list of <directory maxSize> pair(s)
    // e.g. DATA_STORAGE_PATHS = "d:\OracleBIData\nQSCache" 500 MB;
    DATA_STORAGE_PATHS     =     "D:\OracleBIData\cache" 500 MB;
    MAX_ROWS_PER_CACHE_ENTRY = 100000; // 0 is unlimited size
    MAX_CACHE_ENTRY_SIZE = 1 MB;
    MAX_CACHE_ENTRIES = 1000;
    POPULATE_AGGREGATE_ROLLUP_HITS = NO;
    USE_ADVANCED_HIT_DETECTION = NO;
    MAX_SUBEXPR_SEARCH_DEPTH = 7;
    // Cluster-aware cache
    // GLOBAL_CACHE_STORAGE_PATH = "<directory name>" SIZE;
    // MAX_GLOBAL_CACHE_ENTRIES = 1000;
    // CACHE_POLL_SECONDS = 300;
    // CLUSTER_AWARE_CACHE_LOGGING = NO;
    Thanks

  • Issue in External Table Authentication and Authorization in OBIEE11G

    Hello Gurus,
    Can anyone help me how to configure External Table Authentication and Authorization in OBIEE11g through weblogic server not like in 10g style(Through INIT Blocks).
    I've followed the (Doc ID 1338007.1) document. But when i'm restart the Managed servers and Admin servers after configuring the SQLAuthenticator all my services are showing down.
    I already raised the SR (SR 3-6286054151) on this issue. But still i didn't get any reply from them.
    Can anyone help me out on this issue or can anyone me send the document for "how to configure External Table Authentication and Authorization in OBIEE11g" . It's really appreciate for your quick response.
    my mail ID [email protected]
    Thanks,
    Syam.
    Edited by: 942658 on Oct 13, 2012 10:55 AM

    Hi John,
    Thanks for your quick response.
    We configured "ReadOnlySQL Provider" by following the Oracle's white paper(Doc ID 1338007.1) Please find the below steps what we configured in weblogic console.
    1. Created the Data Source
    2. In the data source specified the Database driver--> *Oracle's Driver Thin for service connections: Versions:9.0.1 and later.
    3. Defined the connection Properties .
    4. Selected targets as Admin server and bi_server.
    Then Activate changes
    5. Created new provider by using ReadOnlySQL Authenticator
    6. In the provider specific tab we given the SQL statements and saved it.
    7. Restarted the Admin and Managed servers.
    After restarted the services when we open the Enterprise Manager page all the services are showed as Undefined - means red.
    Apart from that we followed your suggested link http://askjohnobiee.blogspot.com/2012/09/how-to-oid-authentication-with-groups.html
    For External table authentication do we need to configure BISQLAuthenticator or ReadOnlySQLAuthenticator ?
    If we configure BISQLAuthenticator we just import Groups from database to Console application. Then how can it Authenticated to the User ?
    Please let me know your ideas on this.
    Thanks,
    Syam

  • Essbase 6.5 External Authentication Issue!! Urgent Please!!

    Hi all,
    I am great trouble over an external authentication issue in Essbase 6.5. I request you all to please give me your feedback on the same as soon as possible.
    I am in a situation where I need to get my Essbase 6.5 external Authentication converted from LDAP to Active Directory services.
    I suppose there has been necessary changes done to the .cfg file for the same. However, I think I am getting an error
    "User [vikc]'c external authentication protocol [MSEX]'s password check module is not loaded".
    Please let me know if you have come across such an issue earlier and can anybody to able to help me with the same.
    Its kinda Urgent. so any replies for the same will be appreciated.
    Thanks and Regards,
    Vikram

    Vikram,
    Yes you will have to reconfigure the CSS.xml and cfg file for external auth.
    Here is the Sample CSS
    <spi>
              <provider>
                   <msad name="full360">
                        <trusted>false</trusted>
                        <url>ldap://192.168.1.100:389/DC=full360,DC=com</url>
                        <userDN>CN=Ravinder Singh,DC=full360,DC=com</userDN>
                        <password>full@360</password>
                        <authType>simple</authType>
                        <identityAttribute>dn</identityAttribute>
                        <maxSize>1000</maxSize>
                        <user>
                             <loginAttribute>sAMAccountName</loginAttribute>
                             <nameAttribute>dn</nameAttribute>
                        </user>
                        <group>
                             <nameAttribute>cn</nameAttribute>
                             <objectclass>
                                  <entry>group?member</entry>
                             </objectclass>
                        </group>
                   </msad>
    Download this toll "http://www.ldapbrowser.com/download.htm"
    LDAP browser to get the perfact DN information.
    Let me know the status
    Ravikant

  • ACS external database issue

    Hi
    I have the following issue, user exists on both the ACS and token server authenication is set to external database with no unknown user policy as the user is known to the ACS! this fails authenication error message is CS user unknown... Now if the unknown user policy is set to the external database the authenication works fine this is on 3.3. I have checked for bugs to no avail.
    Any assistance would be good...
    Thanks MJ

    Hi JG
    Many thanks for your response, it is configured this way due the documentation below:
    Known Users -Users explicitly added, either manually or automatically, into the CiscoSecureACS database.
    These are users added through User Setup in the HTML interface, by the RDBMS Synchronization feature, by the Database Replication feature, or by the CSUtil.exe utility. For more information about CSUtil.exe, see "CSUtil Database Utility".
    CiscoSecureACS attempts to authenticate a known user with the single database that the user is associated with. If the user database is the CiscoSecure user database and the user does not represent a Voice-over-IP (VoIP) user account, a password is required for the user. If the user database is an external user database or if the user represents a VoIP user account, CiscoSecureACS does not have to store a user password in the CiscoSecure user database.
    This is from the following link....
    http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs32/user/qu.htm
    Many thanks MJ

  • Authenticating Guest Users Using External Database.

    Folks, greetings.
    Due to the limitations imposed by wlc's database size, we decided to go for an external authentication server.
    Since this external database is for guest access, we are considering in using a Linux box with LDAP, along with a web-based application which will be presented to the user for authentication purposes. This way, the user would type in his/her credentials on this portal and the same box would process the authentication.
    In such a scenario, we would buid an application for the "Lobby Amabassadors" input the guest data (for auditing purposes we need to enter the user's SSN, passport # or any other official ID), and this application would generate the password to be used during the authentication process.
    I've used web-auth before, with the users database loaded on the WLC (local net users). Even using an external web-auth portal, the user is still authenticated by the controller that in turn, will control whether the traffic is to be allowed or not, based on the authentication results.
    That's exactly where our question lies: how should we configure the WLAN so that the WLC would receive the access request and forward it to the authentication portal/server? Would it envolve radius?
    This same Linux would be the DHCP server for this guest WLAN.
    WLC vesion: 4.2.130.0
    Regards,
    AL

    Using the Web Authentication feature on a Cisco wireless LAN controller, we can authenticate a guest user on the wireless LAN controller, on an external web server or on an external database on a RADIUS server. We can configure the wireless LAN used for guest traffic to authenticate the user from an external RADIUS server.
    To enable an external RADIUS server to authenticate traffic using the GUI, follow this link.
    http://www.cisco.com/en/US/docs/wireless/technology/guest_access/technical/reference/4.1/GAccess_41.html#wp1001207

  • ABAP report  from fields connecting to an external database

    Hi All,
    The requirement is to connect some GL data with external audit data which is stored in an oracle database.  These two table data has to be merged and a report has to be generated.
    I heard we could connect to the external database from the R/3 4.7 version through DBconnect.  Has anyone come across any such requirement and done a similar report, could you give me the inputs please.
    regards
    Girish

    Questions like yours are best asked over at the webOS Developer's Forum.  The Palm Support Community here is geared to answering end-user questions about devices, not programming information.
    https://developer.palm.com/
    WyreNut
    I am a Volunteer here, not employed by HP.
    You too can become an HP Expert! Details HERE!
    If my post has helped you, click the Kudos Thumbs up!
    If it solved your issue, Click the "Accept as Solution" button so others can benefit from the question you asked!

  • How to connect external database into BI source system?

    <Moderator Message: Please search before posting. This issue has already been discussed a lot of times. Additionally you might have a look at the online help>
    Dear SDN,
    I am working on BI 7.0 system.
    Client request is to connect the external database into source system.
    External database (different server) has installed the Sybase database.
    1.Is it possible ?
    2.What is the procedure for connectivity from BI end .
    3. which server port of external database(sybase databse) need tobe open for firewall policy.
    Thanks in advance
    Ravi
    Edited by: Siegfried Szameitat on Mar 9, 2009 1:23 PM

    Hi Ravindra,
                    Check here........
    <link farm removed by moderator>
    Thanks,
    Vijay.
    Edited by: vijay m on Mar 9, 2009 5:43 PM
    Edited by: Siegfried Szameitat on Mar 9, 2009 1:23 PM

  • RFC XI JDBC to external database.... Get data in multiple rows

    Hi,
    We have been really struggling with this scenario. We have created a RFC that has 1 Import parameter (Order_ID) and table parameter (3 Columns: Order_ID, Partner_type, Partner_no).
    When we call this RFC in SAP, it should make a connection to external database via JDBC and get multiple row data for every Order_ID. We are not using Oracle Stored Procedure, instead we are using simple Select statement. Did all the mapping and configured correctly. However, we are getting short-dump when we execute RFC. When we checked in XI, it says " Check xml instance is valid for source xsd and target-field mapping fulfills requirements of target xsd at "
    Has anyone tried getting multiple row information from external database(Oracle) using Select statement in XI ? IF so, can you pl let us know if we need to something different in Mapping ?
    Niranjan

    Niranjan,
    Check this blog of mine to see how the datatype for Synchronous Select should be constructed,
    https://weblogs.sdn.sap.com/pub/wlg/3928. [original link is broken] [original link is broken] [original link is broken] [original link is broken]
    If this looks good, a few checks
    1. Check the request inbound payload , i.e the RFC request in MONI. Is this as expected?
    2. Check the output of the request mapping and check if this is as expected.
    3. Check the response from JDBC, is this as per the datatype defined.
    4. Check the mapping from JDBC response to RFC response.
    To me this looks like an issue with the JDBC response structure.
    Meanwhile to understand how to test mapping, check blog of michal,
    /people/michal.krawczyk2/blog/2005/09/16/xi-how-to-test-your-mapping-in-real-life-scenarios
    Regards
    Bhavesh

  • External Table Authentication

    Hi I am using OBIEE 11g.
    In my project we have to implement external table authentication. For that we have import the external table to physical layer. and build the repository variable using initialization block. In that i have written a following SQL -
    SELECT loginid
    ,grp
    ,display_name
    ,2
    FROM external_auth
    WHERE loginid = ':USER'
    and password = ':PASSWORD'.
    I have also create the variable target - LOGID, Group, Display Name and Log Level.
    and save the variable.
    My table structure like this - LoginID,Password,Grp, Display Name.
    When i am trying to save the RPD following error message raised.
    ERRORS:
    GLOBAL:
    [38095] The initialization string in the Repository Initialization Block '"Auth Variable"' contains the use of :USER or :PASSWORD.
    Any one to help to come out from this issue.
    Kindly provide any link for step by step guide.
    Thanks
    Gauthaman

    Hi Gautham,
    i think you created Repository Variable.
    Create a Session variable and Session initilization bliock. give the same query in Session Initialize block. it will work.
    Thnaks
    GSR

  • API for connecting  to an external database object

    Hi,
    Can anyone provide me with the API for connecting to the external database table and to create , update and delete data with an Oracle external database object.
    Wish you great time.
    Best Regards
    Sid

    Questions like yours are best asked over at the webOS Developer's Forum.  The Palm Support Community here is geared to answering end-user questions about devices, not programming information.
    https://developer.palm.com/
    WyreNut
    I am a Volunteer here, not employed by HP.
    You too can become an HP Expert! Details HERE!
    If my post has helped you, click the Kudos Thumbs up!
    If it solved your issue, Click the "Accept as Solution" button so others can benefit from the question you asked!

  • ACS 5.2 Authentication Issue with Local & Global ADs

    Hi I am facing authentication issue with ACS 5.2. Below is AAA flow (EAP-TLS),
    - Wireless Users >> Cisco WLC >> ADs <-- everything OK
    - Wireless Users >> Cisco WLC >> ACS 5.2 >> ADs <-- problem
    Last time I tested with ACS, it worked but didn't do migration as there'll be changes from ADs.
    Now my customer wants ACS migration by creating new Group in AD, I also update ACS config.
    For the user from the old group, authentication is ok.
    For the user from the new group, authentication fails. With subject not found error, showing the user is from the old group.
    Seems like ACS is querying from old records (own cache or database). Already restared the ACS but still the same error.
    Can anyone advice to troubleshoot the issue?
    Note: My customer can only access their local ADs (trusted by Global ADs). Local ADs & ACS are in the same network, ACS should go to local AD first.
    How can we check or make sure it?
    Thanks ahead,
    Ye

    Hello,
    There is an enhacement request open already:
    http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCte92062
    ACS should be able to query only desired DCs
    Symptom:
    Currently on 5.0 and 5.1, the ACS queries the  DNS with the domain, in order to get a list of all the DCs in the domain  and then tries to communicate with all of them.If the connection to even one DC fails, then the ACS connection to the domain is declared as failed.A lot of customers are asking for a change on this behavior.
    It  should be possible to define which DCs to contact and/or make ACS to  interpret  DNS Resource Records Registered by the Active Directory  Domain Controller to facilitate the location of domain controllers.  Active Directory uses service locator, or SRV, records. An SRV record is  a new type of DNS record described in RFC 2782, and is used to identify  services located on a Transmission Control Protocol/Internet Protocol  (TCP/IP) network.
    Conditions:
    Domain with multiple DCs were some are not accessible from the ACS due to security/geographic constraints.
    Workaround:
    Make sure ALL DCs are UP and reachable from the ACS.
    At the moment, we cannot determine which Domain Controller on the AD the ACS will contact. The enhacement request will include a feature on which we can specify the appropriate the Domain Controllers the ACS should contact on a AD Domain.
    Hope this clarifies it.
    Regards.

Maybe you are looking for

  • Read Outlook Email and Get Specific Content from Mail with PowerShell

    Hi Everyone, I would like to get full content value by searching in mail body with PowerShell but I stuck at one place in scripting and would required help from your side. Below is my script with description. #Connecting Outlook with below command $O

  • User deleted, data not saved

    My administrator deleted my account and made me a new one to fix a printing problem. The printing problem is fixed, but all my files are gone. From what I can gather when she deleted my old account she did not choose to save the files (there is no 'd

  • Why will my iphone 4s not accept my credit card

    Why is my iphone 4s not accepting my credit card always comes back with declined no matter how much money i have in my account

  • Problems when i try to run a WebI query on top of a BW query

    Hi, people, All the time i try to run a query in WebIntelligence on top of a BW Query it raises the error message "A database error ocurred. The database error text is: Unable to create a cube. The connection is not connected to a cube (WIS 10901)".

  • Xsu12_817.jar missing from 9.2.0.2 XDK download

    The archive of xdk 9.2.0.2 from technet does not include the xsu12_817.jar file. It's also missing the equivalent files for previous 8i versions. I've managed to get through xdkload by copying the file from the 8.1.7 XDK but this leaves me with a sep