How to enable Kerberos - Shared Services and Workspace

Hi All
I'm trying to enable Kerberos SPNEGO with WebSphere 6.1.0.31. I've protected the urls.....and i can see the handshake happening in the trace logs.....
Shared Services SSO is working fine if i use the option of Get Remote user info from http header.....
But workspace doesn't seem to accept any of the options given $REMOTE_USER$, $HTTP_USER$.
Can some please let me know how to do this....? Or is there a way to change the header information?

Thanks john For ur reply ..i have seen these documents long ago ..i am asking about Shared services and workspace architecture and how these are functioning and where we can find out communication error and slow login issue with workspce and shared services.. How authentication is log on ..is there any machanisam they are using for authencation ...We are using OpenLadp ...
Ex :1.Per suppose log on to workspace that request goes to shared services directory and it will check whether that user is exists or not on Shared services tables ...here what kind of alogirtham using to aunthenticate user...How we can diagonse this process taking to much time,,,is there any specific logs related this (If logs are exsits how we can find out)...
2.Once authencation done successfully and responce send to workspace and populate workspace home page...then i click on application button (FM application) and it's taki ng to much time to load HFM page.To this where we need to look whta excatly problem? what are logs file helpful to us to diagonse..

Similar Messages

Shared services and workspace architecture(How we can find out req &respon)

Good morning Hyperion folks,
Does any body have any document or PDF about workspace and shared service architecture...How these both components are communicate each other..any idea or any document..while communicating of these if anything goes wrong,,where we need to check, what is exactly the problem (any suggestible logs)...
Company are doing big mistake by using this hyperion tool ..These guys are not supporting and even they don't know much about the tool apart Product dev team..and that too they are not disclosure any documents related product...
**Does anybody found any kind performance tunning guide or lab guide about workspace and shared service HFM,Planning...** I have never seen component wise documents and tunning guide and recommendations.
I am strong opnion about hyperion is,we would not get any support from oracle and documents so He can migrate Cognos TM1 and Finance management etc........
Edited by: 888154 on 29/09/2011 02:55

Thanks john For ur reply ..i have seen these documents long ago ..i am asking about Shared services and workspace architecture and how these are functioning and where we can find out communication error and slow login issue with workspce and shared services.. How authentication is log on ..is there any machanisam they are using for authencation ...We are using OpenLadp ...
Ex :1.Per suppose log on to workspace that request goes to shared services directory and it will check whether that user is exists or not on Shared services tables ...here what kind of alogirtham using to aunthenticate user...How we can diagonse this process taking to much time,,,is there any specific logs related this (If logs are exsits how we can find out)...
2.Once authencation done successfully and responce send to workspace and populate workspace home page...then i click on application button (FM application) and it's taki ng to much time to load HFM page.To this where we need to look whta excatly problem? what are logs file helpful to us to diagonse..

Shared services and workspace login error in epm 11.1.2.3

Hello,
When click on the url of shared services and workspace for epm 11.1.2.3
showing the below error as soon.
"Internet explorer can not display the webpage error"
Tried with all supported browsers
Please suggest all possibles solutions..
Thanks

Have you check the logs to make sure all the web apps are up and running and no errors are being generated.
Cheers
John
http://john-goodwin.blogspot.com/

HFM shared services and workspace configuration

Hello,
I am new to Hyperion environment and learning the products. Downloaded the products for 11.11.3, installed and configured them, but having problems.
1. Shared services is up and able tol log in, but not verified anything else there
2. Not able to bring up the workspace , used the url http://<servername>:19000/workspace. After entering the user id and password.. got the following error...
"Could not find a Hyperion Reporting and analysis server running on local host at port 6800..." , not able to see any download with "Reporting and Analysis server", but downloaded and installed V17378-01 & V17380-01.
In the diagnostic report seeing the following error... "Availability of web application context http://localhost:10080/eas
Error: Bad response code: 404
Recommended Action: Check application is started "
Please advice.
Regards
GV.
Edited by: user7236320 on Oct 19, 2009 7:13 AM

Hi,
I think you need to download all the following components for installing Hyperion. In this release Workspace is bundled under foundation and not as part of Reporting.
Oracle Hyperion Enterprise Performance Management System Installer, Fusion Edition Release 11.1.1.3.0 V17382-01 381M
Download Hyperion Enterprise Performance Management System Foundation Services Release 11.1.1.3.0 Part 1 of 4 V17397-01 2.0G
Download Hyperion Enterprise Performance Management System Foundation Services Release 11.1.1.3.0 Part 2 of 4 V17369-01 1.2G
Download Hyperion Enterprise Performance Management System Foundation Services Release 11.1.1.3.0 Part 3 of 4 V17370-01 1.2G
Download Hyperion Enterprise Performance Management System Foundation Services Release 11.1.1.3.0 Part 4 of 4 for Microsoft Windows (32-bit) V17371-01 224M

Shared services and Filter

Hi Guru's
how can i assign a filter to a group in shared services. I have created one group in shared services and filter in EAS.Do i have to click on export to shared services ? where in shared services will i see my filter to make it effective on the group
thank you

Hi,
Refer to this thread. The same was discussed there...
Re: Granting filters without writing maxl

How to Move the Shared Services Registry to a different SQL Server

I have an Essbase installation purely running Essbase and Financial Reporting/Web Analysis.
The Shared Services database is held in SQL Server 2005 on one hardware platform and I need to move it to an alternative hardware platform also running SQL 2005.
I thought it might be as easy as backing up from one server and restoring to the other and then running EPM System Configurator.
Firstly, when running configurator and selecting the Hyperion Foundation Configure Database option, on the 'Shared Services and Registry Database Configuration' screen the details of the original hardware are displayed, clicking 'Next' gets no response.
If I can resolve this first issue, how do I then re-point the database to the new server?
Any help would be appreciated.
Thanks.

Hi John
Took a look at the link thanks.
On point 3 it says to stop the original database. If you take the database offline, in configurator you don't then get the options in option 5!
In the dos command window for configurator I get 'Unknown Source' messages (either using current server or new).
configtool.log lists as follows. Does this point to anything?
Thanks.
(Sep 15, 2011, 03:26:47 PM), com.hyperion.hit.wizard.swing.ComboFieldSwingImpl, DEBUG, In ComboFieldSwingImpl.fieldChanged() method:,fld items: [Oracle, Microsoft SQL Server, IBM DB2], value: 1, selected idx: 1
(Sep 15, 2011, 03:26:50 PM), com.hyperion.config.wizard.impl.RegistryWizardState$1, DEBUG, validate
(Sep 15, 2011, 03:26:50 PM), com.hyperion.config.wizard.impl.RegistryWizardState, DEBUG, connect test
(Sep 15, 2011, 03:26:50 PM), com.hyperion.config.wizard.impl.RegistryWizardState, DEBUG, driver set
(Sep 15, 2011, 03:26:50 PM), com.hyperion.config.wizard.impl.RegistryWizardState, DEBUG, server= aeSQL02.xxxxxxx-xxxxxx.com
(Sep 15, 2011, 03:26:50 PM), com.hyperion.config.wizard.impl.RegistryWizardState, DEBUG, whiteSpace remove
(Sep 15, 2011, 03:26:50 PM), com.hyperion.config.wizard.impl.RegistryWizardState, DEBUG, begin test cycle
(Sep 15, 2011, 03:26:50 PM), com.hyperion.config.wizard.impl.RegistryWizardState, DEBUG, define driver
(Sep 15, 2011, 03:26:50 PM), com.hyperion.config.wizard.impl.RegistryWizardState, DEBUG, make connection
(Sep 15, 2011, 03:26:50 PM), com.hyperion.config.wizard.impl.RegistryWizardState, DEBUG, set URL
(Sep 15, 2011, 03:26:50 PM), com.hyperion.config.wizard.impl.RegistryWizardState$1, DEBUG, connection is NOT null
(Sep 15, 2011, 03:26:50 PM), com.hyperion.config.wizard.impl.DBConnectionForm, DEBUG, DB type string = MSSQLServer
(Sep 15, 2011, 03:26:50 PM), com.hyperion.cis.config.Configurator, DEBUG, Loading DBConfigurator class for product: Foundation_1_9.5.0.0
(Sep 15, 2011, 03:26:51 PM), com.hyperion.cis.config.Configurator, ERROR, Error:
java.lang.reflect.InvocationTargetException
     at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
     at sun.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source)
     at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source)
     at java.lang.reflect.Constructor.newInstance(Unknown Source)
     at com.hyperion.cis.config.Configurator.loadProductDBConfigurators(Configurator.java:210)
     at com.hyperion.config.wizard.impl.RegistryWizardState$1.validate(RegistryWizardState.java:205)
     at com.hyperion.cis.config.wizard.adapter.WizardFormAdapterPanel.queryExit(WizardFormAdapterPanel.java:95)
     at com.installshield.wizard.awt.AWTWizardUI.doNext(Unknown Source)
     at com.installshield.wizard.awt.AWTWizardUI.actionPerformed(Unknown Source)
     at com.installshield.wizard.swing.SwingWizardUI.actionPerformed(SwingWizardUI.java:1693)
     at com.installshield.wizard.swing.SwingWizardUI$SwingNavigationController.notifyListeners(SwingWizardUI.java:1899)
     at com.installshield.wizard.swing.SwingWizardUI$SwingNavigationController.actionPerformed(SwingWizardUI.java:1894)
     at javax.swing.AbstractButton.fireActionPerformed(Unknown Source)
     at javax.swing.AbstractButton$Handler.actionPerformed(Unknown Source)
     at javax.swing.DefaultButtonModel.fireActionPerformed(Unknown Source)
     at javax.swing.DefaultButtonModel.setPressed(Unknown Source)
     at javax.swing.plaf.basic.BasicButtonListener.mouseReleased(Unknown Source)
     at java.awt.Component.processMouseEvent(Unknown Source)
     at javax.swing.JComponent.processMouseEvent(Unknown Source)
     at java.awt.Component.processEvent(Unknown Source)
     at java.awt.Container.processEvent(Unknown Source)
     at java.awt.Component.dispatchEventImpl(Unknown Source)
     at java.awt.Container.dispatchEventImpl(Unknown Source)
     at java.awt.Component.dispatchEvent(Unknown Source)
     at java.awt.LightweightDispatcher.retargetMouseEvent(Unknown Source)
     at java.awt.LightweightDispatcher.processMouseEvent(Unknown Source)
     at java.awt.LightweightDispatcher.dispatchEvent(Unknown Source)
     at java.awt.Container.dispatchEventImpl(Unknown Source)
     at java.awt.Window.dispatchEventImpl(Unknown Source)
     at java.awt.Component.dispatchEvent(Unknown Source)
     at java.awt.EventQueue.dispatchEvent(Unknown Source)
     at java.awt.EventDispatchThread.pumpOneEventForHierarchy(Unknown Source)
     at java.awt.EventDispatchThread.pumpEventsForHierarchy(Unknown Source)
     at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
     at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
     at java.awt.EventDispatchThread.run(Unknown Source)
Caused by: java.lang.NullPointerException
     at com.hyperion.foundation.config.FoundationDbConfigurator.isHubInstalled(FoundationDbConfigurator.java:133)
     at com.hyperion.foundation.config.FoundationDbConfigurator.<init>(FoundationDbConfigurator.java:38)
     ... 36 more

Shared Services and LDAP

This is a complete newbie question so pardon me if I sound ignorant: my understanding is that you provision users in Planning (11.1.13 or Fusion) through Shared Services. So if you're installing and configuring planning from scratch, you have to get users into Shared Services. However, these is also a concept called native directory or OpenLDAP which is involved somewhere. How do I push users into sharedservices/planning application and where does OpenLDAP come into this? thanks.

You provision the users in shared services, there is also an Openldap database which stores user information in its database, so when you can create and provision a user some of the information is stored in Shared Services and some in Openldap (Openldap has finally been removed in 11.1.2 which is a positive move in my opinion)
Once you have provisioned a user for planning and then either refesh planning, run one of the utilities or run a refresh the user information is passed into the planning tables. Also when a user logs into planning it queries shared services to see if they exist and their password is correct.
Cheers
John
http://john-goodwin.blogspot.com/

How to enter into shared services in system 9

how to login into shared services

Hello,
I'm new with Hyperion and would like to ask something. I installed Hyperion Shared Services 9.3.1 in my desktop (inside consist of Windows XP Professional Service Pack 3, 1 GB RAM, Oracle Database 10g (10.2.0.1) Standard Edition, Oracle Application Server 10g).
I read from Hyperion Shared Services security guide in Chapter 3 about User Management Console that we can launch User Management Console in 3 ways:
1. Using a browser and connecting to the User Management Console URL
2. On Windows, navigating Start > All Programs > Hyperion > Foundation Services > User Management Console
3. From a Hyperion product interface
I tried to connect using URL : http://<localhost>/58080/interop and http://<localhost>/58080/interop/ and http://<localhost>/58080/interop/index.jsp but failed (where I changed <localhost> to my computer name). When I installed Shared Services, there are no point to choose port or create username.
There are no User Management Console in Foundation Services either.
How to start and stop Shared Services then and how do I know Shared Services has already run?
Thanks.

How to Regester one Shared Service with Another ??

Hi All,
I am working on Hyperion System 9.3.1. I am getting problem when I want to access Essbase through Planning.
Here is the scenario:
I have Hyperion Essbase installed in Computer 1 with separate Shared Services; I have Planning installed in Computer 2 with another Shares Services.
All things were working fine as I have created same users in both the shared services and was using native user of Essbase.
Now I have changed the native user to Externalize user in Essbase. Since then I am not able to access Essbase through my Planning application. The user privilege differs in both the Shared Services as Computer 1 has only Essbase and Computer 2 has Planning.
The error message I am getting in planning while connection is “Unable to obtain a connection to Hyperion Essbase”. In the essbase.log file I am getting “Login fails due to invalid login credentials” message.
I think the problem here is between Shared Services only. As both are in different system and the user privileges are also different.
Kindly suggest how to sink my Essbase between these two shared services.
Regards,
Navneet

Just to clarify,
You have Planning and Essbase on one machine and you have shared services installed twice on different machines?
I'm not sure if this architecture will work, you might have to separate Planning and Essbase to there own servers and create a new Essbase server specifically for Planning applications. Planning utilizes Essbase for its OLAP data store and Essbase registers with Shared Services directly.
Brian Chow

How to enable internet sharing on mac book to use my iphone?

how to enable internet sharing on mac book to use my iphone?

Hey PPRoy,
Thanks for the question. The following article may assist in achieving your goal:
OS X Mavericks: Share your Internet connection
http://support.apple.com/kb/PH13855
Thanks,
Matt M.

How to enable the SharePoint 2010 and 2013 Developer Dashboard for specific WebApplication or Sitecollection?

How to enable the SharePoint 2010 and 2013 Developer Dashboard for specific Web Application or Site collection(not for all Web Application)?
Vishal Goyal

Hi Vishal,
I don't think there is option for specific site collection or web application,but there is option of enabling developer dashboard on specific master pages and that is one on of the way you could do it.
look article on below link to enable developer dashboard on specific master pages
https://msdn.microsoft.com/en-us/library/office/ff512745%28v=office.14%29.aspx?f=255&MSPPError=-2147217396
Let me know if this helps.
Thanks
Bhism

Hyperion EPM: Will Oracle Express suffice for Shared Services and Registry?

Hi.
I'm trying to install Hyperion EPM on Linux to make use of the Hyperion Interactive Reporting server components to allow report scheduling, web delivery of reports, etc. My data sources will all be MySQL. I'm at the point where I'm attempting to use the EPM Configurator for setting up Shared Services and Registry Database Connection. It seems my options for choosing a database on which to allow Shared Services and Registry data to reside are limited to 3: Oracle, SQL Server or DB2 (noticeably absent is MySQL)
So, it looks like I'm going to have to install an Oracle DB instance at the very least.
My question is this:
Can I get away with just installing Oracle Express for the Shared Services and Registry or will I have to install a full blown Oracle DB instance?
Thanks
-- Tom

Hi, I confirm that you can use Oracle Express for Shared services and registry. We have installed the complete EPM platform on a single virtual machine using Oracle Express. It’s interesting to use it because Oracle Express use less resource. We can run this virtual machine on a computer that only have 4GB of RAM and get good performance (for a single user).
I recommend using it for proof-of-concept and Bootcamps.

Shared Services and Planning Synchronization

Ok, this is probably useful for a lot of people, but can anyone articulately explain the relationship between MSAD (or whatever the source security system is), Shared Services, and Planning? There are like 5 utiities and or Web Client buttons that claim to sync different parts to each other.
MSAD is the source system. It is "plugged into" Shared Services. (Are these always in sync, is there some utility to run to sync them?)
Then there is this Shared Services "Native Directory" what is this? There is a "Sync Native Directory" button in Shared Services, what does this sync?
Assuming that SS is synced with MSAD, we then turn to Planning. In Planning, there are "Migrate Identities" and "Remove Non-Provisioned Users/Groups" buttons. What do these buttons sync, and is Migrate Identities the same as the ProvisionUsers.cmd utility?
I want to know the best way to keep all this in sync, MSAD to SS and SS to Planning. Is any of this automatic, and if I need to run manual utilities, which ones do I need to run and which "buttons" do I need to push.
thanks
-Patrick

Hi,
Ok here goes, I am not really sure which version you are on because there was a bit of a change between 9.2 and 9.3 with regards to MSAD (uses the ObjectGUID instead of SamAccountName)
Sync Native Directory - Shared Services contains all the product registration details, OpenLdap (Native Directory) stores all the provisioning, sometimes it is possible they could go out of sync which is pretty rare, so the sync native directory makes sure Shared Services and Open Ldap are in sync.
Migrate Identities - I think this is more of the line of the updateusers.cmd utility where if a user has changed in the directory (this was more of an issue when SamAccountName was used as users group change OUs in the Active Directory) it will update the planning table with the new details.
Remove-Non Provisioned Users/Groups - I am sure this doesn't actually work and has been removed in later versions, it is meant to clear up users/groups in the planning tables where there don't exist in Shared Services anymore.
It depends what you mean by is MSAD always in sync with Shared Services, if you are using 9.3 and configured to use the ObjectGUID then it is pretty much in sync as the id is not likely to change, if you are using SamAccountName and a user moves place in the organisational structure then it can go out of sync. There is another ultilty for that :) (update native directory utility)
If you run the provision users utility after you have provisioned a user in shared services it will add the user to the planning tables and also push the user to essbase.
All depends what you are finding is it a problem to what utility to you want to use.
Cheers
John
http://john-goodwin.blogspot.com/

How to connect Essbase/Shared Services 11.1.1.1.3 to LDAP

Hi,
I just installed Essbase 11.1.1.1.3 with Shared Services. I have never connected it to a corporate LDAP environment before. I remember in the past version 6/7 etc.. there was a CSS file that needed edited. Is that still the case or do I have to go into Shared Services and configure etc...
Thanks

Hi,
You configure it all through shared services, have a read of :- http://download.oracle.com/docs/cd/E12825_01/epm.111/epm_security/ch05s05.html
Cheers
John
http://john-goodwin.blogspot.com/

Issue bringing up Shared Services and Planning

Hi guys,
We have added 3 new MSAD to our Shared Services for user authentication, previously we already had 2 setup and working fine.
Now that we added the 3 new ones, we restarted Planning and Shared services and now it doesn't come back up.
We see the following error message on the logs:
2009-11-27 17:05:09,702 [Thread-23] WARN com.hyperion.css.spi.impl.msad.MSADCacheUpdater.updateUserCache(Unknown Source) - Ignoring User. Error getting User for User Cache:[LDAP: error code 32 - 0000208D: NameErr: DSID-031001CD, problem 2001 (NO_OBJECT), data 0, best match of:
     'DC=IL,DC=x,DC=Corp'
2009-11-27 17:05:09,811 [Thread-23] WARN com.hyperion.css.spi.impl.msad.MSADCacheUpdater.updateUserCache(Unknown Source) - Ignoring User. Error getting User for User Cache:[LDAP: error code 32 - 0000208D: NameErr: DSID-031001CD, problem 2001 (NO_OBJECT), data 0, best match of:
     'DC=IL,DC=xx,DC=Corp'
2009-11-27 17:05:09,936 [Thread-23] WARN com.hyperion.css.spi.impl.msad.MSADCacheUpdater.updateUserCache(Unknown Source) - Ignoring User. Error getting User for User Cache:[LDAP: error code 32 - 0000208D: NameErr: DSID-031001CD, problem 2001 (NO_OBJECT), data 0, best match of:
     'DC=IL,DC=xx,DC=Corp'
These "xx" we are just using because of the company name but it has the right name
That's the security log for Shared Services.
Do you have an idea of what I can do either to bring it up with the new MSAD or delete the newly created and bring it back up?
Thanks in advance

Usually your MSAD admins will have a master domain setup that has access to all geographic specific domains. You would have a user setup in this higher level domain
Let's say you have the following setup:
na.ad.co.com
sa.ad.co.com
eme.ad.co.com
jp.ad.co.com
cn.ad.co.com
You would just need one domain setup at ad.co.com with a user who has read access to that directory. The way Shared Services security is setup you may need to re-provision some users with that new global provider and I highly recommend using a group filter -- your group filter can be in any of the domains just all users would need to be added to it in that domain.
Regards,
John A. Booth
http://www.metavero.com

How to enable Kerberos - Shared Services and Workspace

Similar Messages

Maybe you are looking for