Hyperion Essbase on Solaris & Security issue in Shared services

I installed Hyperion system 9.3.1 in my dev environment. Every thing is working properlly.
But i still have questions on couple of things.
1) I installed essbase on solaris 10. I was just trying to configure the sql interface for ESSBASE.
I went through the documentation. It says i supposed to get a file called libesssql.so.1
But i can't able to see this file in ARBORPATH/bin location. But still I could able to load the data
into sample Essbase application. My essbase is working fine. when i ran the script inst -sql.sh
it created a file called libesssql.so in the ARBORPATH/bin location. But no libesssql.so.1.
Can some one help me regarding this................
2)In the shared services when i clicked under Hyperion system 9 BI+, i cant able to see
any reporting related files to assign security. i am seeing a message saying refer to the security guide to confiure
permissions for this application.
I logged into the shared services with admin privileges.
Please help me in this...........
Thanks,

Hi,
What version are you using ?
Just to be clear are you saying that the utility only exported one native user and you expected it to export more ?
Cheers
John
http://john-goodwin.blogspot.com/

Similar Messages

  • Issue in shared services

    Hi All,
    facing the issue with shared services, after run import/export utility(it ran for long time),can't find any users/groups in shared services, only admin user is present in native dir,otherthan this user, we dont have any users/groups in ND and MSAD. can somebody help on this.
    Thanks,
    :-)

    Hi,
    What version are you using ?
    Just to be clear are you saying that the utility only exported one native user and you expected it to export more ?
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Essbase security sync issue with Shared Services v 11.1.2.2

    Hi,
    We are using Essbase version 11.1.2 (ESB11.1.2.2.102B025) and shared services version 11.1.2.2.300.6001 (Drop 6)
    Foundation Services is on a cluster evironment, windows 2008 64 bit.
    Essbase is on Unix Sun Solaris.
    We encounter an issue in which each time a new user is added to a group.
    The user will not have immediate access to Essbas. Currently the only time the
    user will have access is when we restart essbase.
    Is there a way to sync users from Shared Services without restarting Essbase?
    Anyone has experience on this problem and may know what and where to look?
    This is the error the user get, even though the group has access to essbase cube and the user
    has been added to the group.
    [Thu Jun 27 16:22:18 2013]Local/ESSBASE0///79/Error(1055126)
    This user has no application access set. Please contact your system administrator
    [Thu Jun 27 16:22:18 2013]Local/ESSBASE0///79/Error(1054067)
    Internal error
    [Thu Jun 27 16:22:18 2013]Local/ESSBASE0///79/Error(1051293)
    Login fails due to invalid login credentials
    [Thu Jun 27 16:22:18 2013]Local/ESSBASE0///79/Warning(1051003)
    Error 1051293 processing request [Login] - disconnecting
    There is no issue if we provision the user directly to the cube, e.g. without using group.
    Please advise. Thanks.

    You shouldn't have to restart Essbase as it should automatically sync, there may be additional information in SharedServices_Security_Client.log though it is probably worth logging with Oracle.
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Problem assigning Essbase Security filters in Shared Services

    We recently upgraded Planning/Essbase to System 9 version 931 in Test. Everything went smoothly except for few users Security didn't migrate properly.
    In Shared Services, it shows that user has access to Planning & Native Essbase Applications. But in Essbase, only Planning Application access is shown.
    Also when I try to apply security filters for these users in Native Essbase Applications (in Shared Services), I don't see these particular users.
    There is no problem with Planning security, except when I refresh Security from Shared Services in Analytic Admin Console it wipes out Planning Application access in Essbase.
    For other users there are no issues. Only for few users this is the problem. I have tried to deprovision user & provision back, but no use.
    Please Help

    Essbase/Planning security is multi tiered. In Shared Services you setup your groups. You provision your groups with adequate security access. Depending on whether you have updated a cetain .css file(to fix bug) you may have to assign the read, write calc access to the group not just calc, but all three if your users need the access to actually, read, write & calc. of need user to just read & write etc... then you have to go to EAS refresh, run maxl script to assign environment access to user, go back to shared services go into projects assign any needed access to calc & filter groups and essbase is setup. For planning you also have to go to workspace and migrate identities within the security setup for any of your dimensions. this comes into play when adding or removing users as filters are created in planning workspace. I just learned this from one good tech that helped me setup & remove users as I had issues getting them in and out of the system..Now to move on to actually getting security reports that make sense for planning with the associated access. If anyone has the maxl code let me know.

  • Essbase issue on Shared Services OEPM11.1.1.2

    Hi All,
    I have one issue of Application Group created in Shared Services for Essbase...
    If we delete the Application group for Essbase how can we get back it..Is there something stored as a backup after installation and
    configuration...
    I tried to reconfigure essbase with Shared Services and it is successfull...but there was a problem with Global Analytic Application not existing
    with Shared Services during Essbase Startup...
    Can you please help me in this regard?
    Thanks,

    Dear Experts,
    This is something related to the Essbase Project created in Shared Services...I think the structure in OEPM11.1.1.2 is shown as
    Application Group
    ----- Applications
    ----- Global Analytic Application (Problem is lying in this application during Essbase startup after reconfiguring with HSS)
    Suppose if we delete the project how can we get back the Essbase Project if it is already in Shared Services Security Mode..
    Can anyone help me on this?
    Thanks,

  • Severe Security Issue with Sharing Permissions and Windows

    I recently discovered a severe Security issue with the windows sharing an permission settings:
    I have two users, an admin user and a parental controlled user. On my mac mini, i have a external harddrive connected. On the harddrive, i have three folders, Itunes, Iphoto (Package) and a Temp Folder. I want to share the Harddrive RW for the admin, but only R for the parental user. But the Temp folder should be accessible for RW for the parental as well.
    1. I set the Drive checkbox "ignore ownership" off.
    2. I set the permissions of the drive to admin RW, parental R and Everyone to "no access"
    3. I apply to enclosed Items
    4. I set the permission of the Temp folder to admin RW, parental RW and Everyone to "no access"
    5. I apply to enclosed Items
    6. I go to "File Sharing" in the Preferences and activate SMB sharing for both users
    7. I delete all previous shares
    8. I add the Disk and use the proposed permissions which are admin RW, parental R, Everyone "no access"
    9. I add the Temp folder and use the proposed permissions which are admin RW, parental RW, Everyone "no access" - Funny, there is a new Group called "Temp" created which has custom access on both sharepoints
    10. I connect to the mac over a Windows machine (NTLM auth set appropriatly). Now I try to create a folder on the root of the Disk share, I get a denied message.
    BUT WHEN I GO INTO A SUBFOLDER (eg. ITUNES or IPHOTO), WHICH HAS ALSO JUST "R" PERMISSION FOR THE PARENTAL USER, I AM ABLE TO RW, DELETE AND DO EVERYTHING!!!
    TO RECAPITULATE: THE SHARING PERMISSIONS ARE "R", AND THE FILE PERMISSIONS IN THE RESPECTIVE FOLDERS FOR THE RESPECTIVE USER ARE ALSO JUST "R". BUT THE USER CAN DO EVERYTHING IN THE SUBFOLDERS!!!

    I recently discovered a severe Security issue with the windows sharing an permission settings:
    I have two users, an admin user and a parental controlled user. On my mac mini, i have a external harddrive connected. On the harddrive, i have three folders, Itunes, Iphoto (Package) and a Temp Folder. I want to share the Harddrive RW for the admin, but only R for the parental user. But the Temp folder should be accessible for RW for the parental as well.
    1. I set the Drive checkbox "ignore ownership" off.
    2. I set the permissions of the drive to admin RW, parental R and Everyone to "no access"
    3. I apply to enclosed Items
    4. I set the permission of the Temp folder to admin RW, parental RW and Everyone to "no access"
    5. I apply to enclosed Items
    6. I go to "File Sharing" in the Preferences and activate SMB sharing for both users
    7. I delete all previous shares
    8. I add the Disk and use the proposed permissions which are admin RW, parental R, Everyone "no access"
    9. I add the Temp folder and use the proposed permissions which are admin RW, parental RW, Everyone "no access" - Funny, there is a new Group called "Temp" created which has custom access on both sharepoints
    10. I connect to the mac over a Windows machine (NTLM auth set appropriatly). Now I try to create a folder on the root of the Disk share, I get a denied message.
    BUT WHEN I GO INTO A SUBFOLDER (eg. ITUNES or IPHOTO), WHICH HAS ALSO JUST "R" PERMISSION FOR THE PARENTAL USER, I AM ABLE TO RW, DELETE AND DO EVERYTHING!!!
    TO RECAPITULATE: THE SHARING PERMISSIONS ARE "R", AND THE FILE PERMISSIONS IN THE RESPECTIVE FOLDERS FOR THE RESPECTIVE USER ARE ALSO JUST "R". BUT THE USER CAN DO EVERYTHING IN THE SUBFOLDERS!!!

  • Security Refresh of Shared Services Failing 11.1.1.3

    I executed a manual refresh of SS security in EAS after provisioning a new externally authenticated user and the refresh failed. I researched the issue in the log files, and the automatic daily refresh I have set to run via the config file has been failing since the last recycle of services (complete stop and start of services from reliable scripts).
    Oracle suggested I stop and restart certain services including a longer pause between SS and EAS/Essbase to resynch Essbase and Shared Services. This did not work, neither did a complete stop, reboot, restart.
    I'm approaching desperation, I cannot provision new users in a production environment...
    There are no other symptoms. All users are externally authenticated in the AD, and they are not experiencing any login problems at all. Users have changed their p/w even locked out their accounts and and had them unlocked.
    I'm attaching some log file snippets. I would greatly appreciate your insight.
    Failure message:
    Essbase failed to get roles list for [ESB:Analytic Servers:CORPESS:1] from Shared Services Server with Error [32:1062:Failed to connect to the user directory [Cabot2, Cabot].]
    From SharedServices_Security_Client.log after services restarted:
    2010-09-23 07:12:19,531 INFO [main] Got native directory location from Registry:corpfs.cabotog.com:28089 com.hyperion.css.registry.RegistryManager.getNativeProviderLocationFromRegistry(Unknown Source)
    2010-09-23 07:12:19,531 INFO [main] URL constructed out of values in Registry database:ldap://corpfs.cabotog.com:28089/dc=css,dc=hyperion,dc=com com.hyperion.css.common.configuration.CSSConfigurationImplXML.initConfiguration(Unknown Source)
    2010-09-23 07:12:21,062 ERROR [Thread-3] 27:1062:Failed to connect to the user directory Cabot2.[Root Cause: [LDAP: error code 32 - 0000208D: NameErr: DSID-031001CD, problem 2001 (NO_OBJECT), data 0, best match of:
         'OU=Corp,DC=cabotog,DC=com'
    ] ] com.hyperion.css.spi.util.jndi.pool.JNDIConnectionPool.getBorrowObject(Unknown Source)
    2010-09-23 07:12:21,062 ERROR [Thread-4] 27:1062:Failed to connect to the user directory Cabot.[Root Cause: [LDAP: error code 32 - 0000208D: NameErr: DSID-031001CD, problem 2001 (NO_OBJECT), data 0, best match of:
         'OU=Corp,DC=cabotog,DC=com'
    ] ] com.hyperion.css.spi.util.jndi.pool.JNDIConnectionPool.getBorrowObject(Unknown Source)
    2010-09-23 07:12:21,062 ERROR [Thread-3] 60:1101:JNDI error.[Root Cause: 27:1062:Failed to connect to the user directory Cabot2. ] com.hyperion.css.spi.impl.msad.JNDIHelper.getURLContext(Unknown Source)
    2010-09-23 07:12:21,062 ERROR [Thread-4] 60:1101:JNDI error.[Root Cause: 27:1062:Failed to connect to the user directory Cabot. ] com.hyperion.css.spi.impl.msad.JNDIHelper.getURLContext(Unknown Source)
    2010-09-23 07:12:21,062 WARN [Thread-3] Failed to update Cache for provider Cabot2[Root Cause: 60:1101:JNDI error. ] com.hyperion.css.spi.impl.msad.MSADCacheUpdater.refreshProviderCache(Unknown Source)
    2010-09-23 07:12:21,062 WARN [Thread-4] Failed to update Cache for provider Cabot[Root Cause: 60:1101:JNDI error. ] com.hyperion.css.spi.impl.msad.MSADCacheUpdater.refreshProviderCache(Unknown Source)

    We are using 11.1.1.3. We had the same issue you described. External users could login to all applications, but all security refreshes failed (in both EAS and Planning) with the failure error in your original post. The patch our consultant applied was "Shared Services Service Fix 11.1.1.3.06" per Oracle support. The following entries in our SS client log are what prompted Oracle's remedy (after several weeks of escalation):
    2010-09-24 15:01:38,110 ERROR [Thread-54] 27:1112:Failed to connect to <ldapserver> at <portnumber>. com.hyperion.css.spi.impl.ldap.LDAPProvider.isAvailable(Unknown Source)
    2010-09-24 15:01:38,110 ERROR [Thread-54] The folowing providers are not initialized, check configuration [ED] com.hyperion.css.spi.CSSManager.pingConfiguredProviders(Unknown Source)
    2010-09-24 15:01:38,110 ERROR [Thread-54] 32:1062:Failed to connect to the user directory <ldapdirectory>. com.hyperion.css.spi.CSSManager.pingConfiguredProviders(Unknown Source)
    2010-09-24 15:01:38,110 DEBUG [Thread-54] getRolesListForEntries() failed : [43842 ms]
    Edited by: 799357 on Oct 4, 2010 12:33 PM
    Edited by: 799357 on Oct 4, 2010 12:38 PM

  • Essbase server does no appear in Shared Services

    Hi All,
    I've installed and set an EPM 11.1.2.2 environment under Win 2008 server with Oracle 11g database. I've installed and configurated Essbase Server, EAS, Essbase Stdudio, APS and EIS. But when I open up shared services the Analytic Server does not appear in Application Group and into EAS I'm getting :
    Error: 104: Invalid user name or password
    Error: 1051012: User native://DN=cn=911,ou=People,dc=css,dc=hyperion,dc=com?USER does not exist
    I know the second error is because the admin user is not provided to the Essbase server, but it does no appear there.
    Does someone could help me on that ?
    Thanks

    John -
    Obviously several months later now, but just want to say thank you as well - I was having the exact same issue as the original poster (Essbase Server missing from Shared Services, credential error from EAS, etc).  Your solution worked perfectly for me as well.  That you for this solution.
    John W.

  • Grant the Essbase application permission to user in Shared Services

    Hi,
    We got a problem in granting the Essbase permission to user using Shared Services. We are using Hyperion 9.3.1.
    (1) We created an Essbase application + database through Essbase Administration Console, say TBC.Sales.
    (2) Provision the Essbase "Server Access" + Essbase Application "Read" roles to a user.
    (3) In Essbase Admin Console, we "Refresh Security from Shared Services".
    However, the user still cannot see the Essbase Database in SmartView. Does anyone know how to fix the problem?

    The problem is fixed with Essbase 9.3.1.3.0.5.

  • Issues in Shared Services, Workspace & Financial Reporting

    Hi All,
    I am working on hyperion 9.3.1.
    I have two issues. Someone help me in this sistuation
    1) In shared servcies, I cant able to access my planning application. If i click the planning application its *"Loading for a long time"*
    Note : I updated the Patches *8527948* for 9.3.1. Still i am facing the error.
    2) I created two classic applications in planning and registered with shared services. I cant see the planning application in workspace.
    3) I can't access Financial Reporting through workspace. Please let me know the url for FR.(http://localhost:8200/hr/index.jsp - If i give this url its redirect to workspace)
    My Installation Order:
    1) Shared Services
    2) Essbase
    3) EAS
    4) Report and Analysis UI Services
    5) Report and Analysis
    6) Planning
    Please guide me in this situtation.
    Thanks,
    PC

    Hi,
    On the issue of not seeing the planning applications, have you tried reconfiguring the web server part for Reporting & Analysis in the config utility, you probably have to do this if you configured planning after reporting & analysis
    What do you mean you can't access Financial Reporting ? You need to create a report using the Financial Reporting Studio client then save the report to workspace.
    The report is then accessed through explore in workspace.
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • EPM 11 - Issue with Shared Services Registration and DB configuration

    Hi,
    Im installing Oracle EPM 11.1.1...
    I have successfully installed Foundation Services and Essbase Server/Client...
    But I'm facing two issues...
    1. I couldnt able to register any products to the Shared Services except for Essbase Server
    I tried restarting the services (1) Hyperion Foundation OpenLDAP, (2) Hyperion Foundation Shared Services - Web Application in the same order...
    2. I couldnt able to configure Oracle 10.2.0.1.0 for Essbase Administration Services...
    It shows the below error...
    "com.hyperion.cis.config.CmsRegistrationUtil, ERROR, register operation failed in CMS:
    com.hyperion.interop.lib.OperationFailedException: Registeration failed: null.Registeration failed: null.
         at com.hyperion.interop.lib.helper.RegistrationHelper.register(Unknown Source)
         at com.hyperion.interop.lib.CMSClient.register(Unknown Source)
         at com.hyperion.cis.config.CmsRegistrationUtil.registerApplication(CmsRegistrationUtil.java:200)
         at com.hyperion.cis.config.wizard.RunAllTasksWizardAction.executeHubRegistrationTask(RunAllTasksWizardAction.java:427)
         at com.hyperion.cis.config.wizard.RunAllTasksWizardAction.execute(RunAllTasksWizardAction.java:212)
         at com.installshield.wizard.RunnableWizardBeanContext.run(Unknown Source)
    com.hyperion.cis.config.wizard.RunAllTasksWizardAction, ERROR, Error:
    java.lang.Exception: Registeration failed: null.Registeration failed: null.
         at com.hyperion.cis.config.CmsRegistrationUtil.registerApplication(CmsRegistrationUtil.java:212)"
    But I could use the same version of Oracle database successfully for Shared Services and Essbase Studio database configuration...
    Please help me to resolve this issue....
    Thanks & Regards,
    dmaze

    Hello!
    During your first configuration of the EPM System Fusion Edition, configure the two conponents first - COMMON SETTINGS and CONFIGURE DATABASE. Never configure other components together with these two (especially Workspace). After you have configured these two, then you can rerun the configuration utility and configure the components that you left out.
    Hope this helps.
    Cheers!

  • Essbase drillback to FDM - Error: 2067 - Shared Services Provisioning

    Working with EPM 11.1.1.3. Trying to get Essbase Studio to drillback to FDM. Getting the following error:
    Error: An error occurred logging on to the system using single sign-on. Please contact your administrator:
    Error: 2067 - You do not have access to the application!
    I've reviewed and re-reviewed FDM setup, DCOM config, and Shared Service provisioning. Everything appears correct. Including Provisioning FDM Users using Shared Services:
    http://download.oracle.com/docs/cd/E12825_01/epm.111/fdm_config_help/frameset.htm?ch10s02.html
    Anyone else run in to this? Any solutions?
    Thanks,
    Bob

    Hi,
    I am facing the same issue.
    Can you please list down your solution in stepwise manner.It would be of great help.
    Thank You!

  • Issue with Shared Services 11.1.1

    Hi all,
    I have an issue with the shared services in version 11.1.1. When i am trying to click on the Application Groups on the left pane in the console, an error message has been displayed as " A communication error has occured while loading the view pane"
    Please Help!!!

    You shouldn't have to restart Essbase as it should automatically sync, there may be additional information in SharedServices_Security_Client.log though it is probably worth logging with Oracle.
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • New Essbase install - fail at "Register with Shared services

    Hi all,
    I'm configuring up a new LINUX ( Redhat ) server to run Essbase 11.1 and the installation fails at the point where, in the configtool (using this in GUI mode not command line ) it's registering the components with Shared Services. In the configtool logs file I see:
    (Jul 20, 2010, 02:47:19 PM), com.hyperion.cis.config.CmsRegistrationUtil, ERROR, Failed to authenticate user = admin
    (Jul 20, 2010, 02:47:19 PM), com.hyperion.cis.config.wizard.RunAllTasksWizardAction, ERROR, Error:
    Error Code: -1
    com.hyperion.css.common.configuration.CSSConfigurationException: 20:3008:Failed to connect to native directory. Error Code: 9
    On a previous install, I had exactly the same problem, and this was resolved by increased the number of processes on the Oracle XE instance that the shared services was using. However we already tried that and its not the problem. All processes seem to start up OK and if I browse to http://server:28080/interop it gives me the EPM web page, but if I select "Launch Appliction" it opens another window with a error "An error was encountered while performing this operation".
    I've tried reinstalling, dropping the HSS schema, stop starting all services and mixtures of all but to no avail.
    Can anyone advise.
    Thanks

    Just for info, the we don't have any form of "admin" user that is used anywhere so we're not sure where this is coming from.

  • Trouble assigning security filters in Shared Services

    In Shared Services/Application groups - right click on database to "Assign Access Control" and get the following error "Cluster Name specified is invalid" Anyone seen this one before? - thanks.

    Hi,
    are you sure you configuration of Essbase and Shared services went on fine?
    does your essbase cluster name during configuration contains special characters?

Maybe you are looking for