Externalizing Essbase when Shared Services is enabled

version: 11.1.1.3
OS: Oracle Enterprise Linux 5.5
We have run into issues configuring Essbase to use externalization because Shared Services was implemented with SSL.
1. Is the below order correct for configuration:
1a. Configure Shared Services (check SSL option) on server1
1b. Configure EAS on server1
1c. Configure Essbase on server2
1d. Externalize EAS
1e. Externalize Essbase
1f. Implement SSL in Shared Services.
2. Alternative order for configuration:
2a. Configure Shared Services (check SSL option) on server1
2b. Implement SSL in Shared Services.
2c. Configure EAS on server1
2d. Configure Essbase on server2
2e. Externalize EAS
2f. Externalize Essbase
Q:
What is the recommended order?
The configuration documentation does not specify the order. It has different sections on the configuring and implementing SSL, it does not specify the correct order.

Hi,
You have to configure and deploy Shared Services for SSL before configuring and deploying all the other applications that need to be SSL enabled. So in your case option 2 is first.
The document for setting up EPM for SSL says that you must do Shared Services first.
geeo

Similar Messages

Essbase External Security via Shared Services

I have hit a problem with essbase external security via shared services, might be fairly trivial, first time doing this.
In the install guide for essbase 9.3.1 it mentions not to use the user 'admin' when firing up essbase server console mode for the first time if you intend to externalise security to shared services in the future.
I have followed this recommendation and used a different username 'essadmin' for the first time essbase server is started up. While still in native security mode, I sign in via EAS 9.3.1 and create myself another admin account just in case.
I cold backup shared services SQL repository and OpenLDAP repositry before externalising essbase security. Also I backup the essbase sec and cfg files just in case.
Then I start it all up, go into EAS and select to externalise security, this takes a few seconds, and all seems well.
Now in shared services I can see the essadmin user ID and everything appears to be OK. However when I look under the projects node, I see "Analytic Servers:myhost:1", then below that another green icon "Analytic Servers:myhost:1", but when I click on the second green icon I get "Login fails due to invalid login credentials".
What have I done wrong ?

Hi,
I don't think you've done anything wrong. You just need to provision your shared services user with access to Essbase. Right-click on your user, select provision and then give them the required Essbase rights.
Hope that helps,
Gee

Externalizing Users from Essbase to Shared Services in OEPM 11.1.1.2

Hi All,
I have a strange problem like when we installed and configured EAS, Essbase with Shared Services these products are moved to the control
of shared Services. I know that in EAS after configuration the control moves to HSS, but Essbase control also moved to HSS
Is it possible for Essbase without using Externalize option to have control from Shared Services
I didn't use the Externalize feature from Essbase to move the user information to Shared Services
I need to migrate the users on 7x server to 11x server..Is it possible from 7x as it is not registered with Shared Services
If not do i have any alternative to get the user/group info from 7x to 11x server.(These are on two different servers)
Please clarify and let me know if i need to produce more information
Thanks,

After you copy the SQL Repository across to the new environment and log in with the owner account, you will be required to register the application with Shared Services. After registering with SS it should prompt you to "Migrate Users and Groups" which will do the migration for you.

Essbase and Shared Services

Hi everyone,
I have installed the complete EPM suite on a single machine. All the products work fine and everyting is configured correctly (according to the CONFIGURATOR) but I can't see Essbase in Shared Services?
When I expand the Application Groups I see everything but Essbase.
Can anyone tell me how to register Essbase with SS?
Thanks in advance
G

Hi,
Is it showing as "Analytic Servers; Servername"?
Else, you will have to use Hyperion Configuration utility to register Essbase server with shared services.
Let me know if it helps.
Cheers
RS

Regarding issue with externalizing users to shared services

Hello,
I was working today on externalizing users to shared services through EAS Console & it went successful. But then I saw that the users were already externalized & there was already an application group existing in shared services. So now there are two application groups both clone of each other, i.e. if I provision any user with one application, the clone of that application is also provisioned through that user.
The bigger problem is somehow the connect bet'n both SS & Essbase Services is lost & the users created in SS are not getting reflected in EAS, even after refreshing the securities on EAS... & then I tried to restart all the services again open LDAP, SS, IS, Essbase & Admin Services.... I am getting error while opening Essbase services, they are not getting started??? Please help me resolve this error...
Thanks.

Hi,
What version are you installing and what O/S is it for ?
If it is windows it is definitely an executable you are running and you are not trying execute one of the patches?
Cheers
John
http://john-goodwin.blogspot.com/

Externalise Users from Essbase to Shared Services

Hi All,
We have a issue with externalising users to shared services
We have shared services on sun os 5.10 which is in a ssl (secure sockets layer) mode and Essbase installed on windows server 2003 sp1 which is in a non ssl mode and when we are trying to externalise users from essbase to shared services we are ending up with fallowing error
Shared services_security_client_log
*2009-09-14 14:54:47,957 ERROR [Thread-74] 30:1101:JNDI error.[Root Cause: [LDAP: error code 17 - cssProvisionedIdentity: attribute type undefined] ] com.hyperion.css.spi.impl.nv.AddLDAPEntity.add(Unknown Source)*
*2009-09-14 14:54:47,957 ERROR [Thread-75] 26:1002:Invalid value for identity. Enter a valid value. com.hyperion.css.common.CSSUtils.checkValidArgument(Unknown Source)*
*2009-09-14 14:54:47,957 ERROR [Thread-75] 31:1098:Invalid user identity format.[Root Cause: 26:1002:Invalid value for identity. Enter a valid value. ] com.hyperion.css.spi.impl.nv.NativeProviderDirMgmt.deleteNativeUsers(Unknown Source)*
Thanks in advance,
Ram

After you copy the SQL Repository across to the new environment and log in with the owner account, you will be required to register the application with Shared Services. After registering with SS it should prompt you to "Migrate Users and Groups" which will do the migration for you.

Cannot register Essbase on Shared Services 9.3.1

Hi,
I'm trying to register Essbase on Shared Services but I get an error message on the log "
Failed to authenticate user = admin". Essbase and Shared Services are on different boxes. I have installed Planning and Shared Services on the same box, and I'm able to register the Planning with SS. I have checked that I can see the Shared Services Server on Essbase server and I have checked that I'm using the correct host server name for Shared Services when I try to register Essbase, but it doesn't work. Also I have tried to create a new user on SS and provision with admin rules, but it didn't work neither. Any ideas?
The environment is Windows 2003/Tomcat/SQL Server 2005.
Thank you,
Glaucia

Re: Unable to Externalize users to Shared Services

"Assign access control" not appearing under Essbase in shared services

Hi Everyone,
Can anyone point out the reason behind this? This is leading to all sorts of problems. Configuration is as follows:
App Server: Foundation, EAS, Planning, Reporting, Web Analysis, Workspace on Tomcat
DB Server: Essbase and SQL Server
Essbase is on Shared Services mode.
This is actually very urgent. Would be grateful for any help.
Thanks,
Sayantan

This has been posted in the essbase forum > "Assign access control" not appearing under Essbase in shared services
Cheers
John
http://john-goodwin.blogspot.com/

Essbase and Shared Services - Whether 1 box installtion is good or 2 box in

Hi,
I need to upgrade/migrate 50+ cubes from Essbase 7.1 to Essbase 11.1.2.1.
Whis options mentioned below is better:
1. Install Essbase and Shared Services in one box/machine
2. Install Essbase in one box/machine and shared service in another box/machine.
What will be the best architecture for this?

Personally I would suggest keeping essbase separate especially with the number of applications, though it is probably best discussing your options and infrastructure with a good consultant as these decisions cannot really be made on a forum.
Cheers
John
http://john-goodwin.blogspot.com/

How is communication between essbase and shared services done?

how is communication between essbase and shared services done?

I am not sure exactly what you need to know and it depends on the version
Prior to 11.1.2 it communicates using LDAP to port 28089, HTTP to 28080, JDBC to the hss relational database
11.1.2 - JDBC to the HSS relational database
Cheers
John
http://john-goodwin.blogspot.com/

Essbase to Shared Services "CREATE & DROP GROUP" SYNC?

Hi All,
Our Essbase security is externalized to Shared services.
But I am still designing the security to be done in batch mode using MAXL because of the bulk of provisioning.
When I run a
Create Group group99; (Native group)
It is created in Essbase & immediately reflects in Shared services without any refresh.
When I run a
Drop Group group99;
It is deleted in Essbase, but still remains in Shared services.
Is there a way to delete groups in Essbase & Shared services at the same time using MAXL?
Appreciate your thoughts.
Thanks,
Ethan.

Srinivas & Sandeep,
When I use
Alter group .......
after Drop Group (was successful)
I get an error saying group99 doesnot exist.
Is it possible to drop a native user or a native group in Shared services using MAXL?
It is so weird that we can create group in Shared services & Essbase at the same time using MAXL, but Drop deletes group only in Essbase.
Thanks,
-Ethan.

Essbase system9 Shared Services configuration

Hi posting again.... :-)
I was wondering if someone could shed some light on a few strange things that have been happening in my wonderfull world of migratin from Essbase 7.1.5 to sys 9.3.1.
I have installed of the foundation server software on one server and the essbase server on another. I have gone to configure both shared services and then essbase and im using the defualt admin account 'admin' and 'password' for password. this is just really a dry run through, but i have been reading that this ais a no no, just wondering if anyone can shed some light on this. Also i have configured Shared services to pick up our AD accounts. I have configured essbase server and i externalised my users to shared services.... i have had a few problems, because as soon as i externalise my native users i am unable to use my AD users in shared services?? a little lost and when i sign back into AAS (EAS) i can hook up to the application server but when i assign the essbase server it says the user credentials are invalid??
any help would be great
Thanks
Eddie

Hi, i have managed to get my users externalised to SS and all is working fine concerning users accessing my essbase server through Excel using there MSAD accounts etc. I have however come accross a strange error? When i log into the SS admin consol with any of my admin accounts, when i click on projects and then say one of my essbase applications that i have an MSAD group provisioned to it wont show up in 'Assign Access Control' window? Currently the user directory structure is Native then MSAD when i flip these to MSAD and Native then restart the service the MSAD groups appear in the'Assign Access Control' window but the Native admin and test groups no longer appear??? am confursed a little with this as i have both Native groups that are there to control my automation from my TPS and SQL and i have MSAD groups that contrain provisioning for my user base. This really only effects SS consol as when i log into AAS (EAS) i am able to see both group types and they appear to be working together. is there any way i can see both group types in the 'Assign Access Control' window? also i have left the user directory in MSAD then Native, is this recomended?
Any help would be greatly appreciated
Eddie

IE10 for Essbase Workspace / Shared Services

Hi,
I know IE10 is not officially supported with Essbase 11.1.2.3, but has anyone got it to work, my client has IE10 and does not want to use Firefox for Shared Services, but I am struggling to get anything other than a blank screen on the Shared Services page?
I have tried adding to trusted sites and allowing site from different zones in internet options but it just freezes on the index.jsp page.
Is this possible if unsupported?
thanks,
Robert.

You could try looking atHow to make Hyperion 11.1.2.3 to run from IE10? | Innov8it - Blog
I have not tried it and it probably will not be supported.
Cheers
John
http://john-goodwin.blogspot.com/

Register essbase to shared service in different box

hi all,
i try to install essbase in diferent machine than the other hyperion application (shared service, planning).
does anyone know how to register essbase to the shared service?
rgrds,
tyo

You can configure directly with multiple essbase servers to single shared services....
After installation on essbase server, configuration, provide the other server (shared services server details) to register with shared services, so that new essbase server will register.

Moving from Native to External Authentication - Hyperion Shared Services

Hello Experts/John.
We are planning to move from native directory authentication to external (MSAD) authentication mechanism.
For that we have planned as below...
1) We will configure MSAD with our present Shared services.
2) Export the users using import-export utility from native directory.
Replace the user's name in csv file with their respective AD user name. This will get modified along with the group/roles.
Re-load the modified csv file so that new users will come into effect.
3) Change the authentication preferences.
4) Remove the passwords from the native directory, so that all authentication happens thru AD and basis roles that are stored
in shared services users will able to see respective application with their desired priv.
As I said this the approach we are thinking. Kindly suggest us whether we are on right path or this will cause any problem in production..
We are on using EPM 11.1.1.3 on Win 2003 platform.
Seeking your guidance.
Thanks

Forget to mention that we are currently working on EPM 11.1.1.3 version on win 2003 environment...

Externalizing Essbase when Shared Services is enabled

Similar Messages

Maybe you are looking for