Hyperion Shared Services -- External user containers getting missed out .

Hi All ,
In my hyperion enviornment user authentication is done through native directory and also through External directories configured to LDAP - OIDM . Frequently the external containers are getting disappeared from the shared services console. But when i restart the services its getting back some time. Some times it take some time to reflect back. I dont understand why this is happening.Quick hep is appreciated.
Thanks,
roshi

It was network problem

Similar Messages

  • Hyperion Shared Services (WebHal) user retrieval - slow

    Hi,
    I applied the Hyperion Shared service patch 9.3.1
    After that i am noticing a significant decrease in the user retrieval response time.
    Will deleting the users help me in any way ?
    Could you anyone point me as to how could i increase the response time ?
    Thanks,
    COldFIre
    Edited by: coldfire on Sep 15, 2010 9:17 PM

    Did you notice this behavior with nativ openldap or with an external directory ?

  • Sync Shared Services External users & Provisioning for Essbase Applications

    Hi Experts !!
    i have externalised user authentication in Shared services . I provisioned all users for Essbase and refresh the security from Essbase ,So all users are working fine
    and can login in Essbase and "Excel add-in" as well..
    but there is one user who is still not working for "Excel Add in"..
    Error is "Login failed due to invalid login credentials"
    Please suugest me the solutions
    Thank you.

    Hi John !
    Yes, User can login in EAS .
    Also User is available under Users in EAS ,But no applications are displaying in Analytic Server , While I have given Administration Privileges for Essbase app.
    But still error while login in Excel add in ..
    Error : Login failed due to invalid login Credentials.
    Also ,After Provisioning , How Can we Sync all all Externalized users from Shared Services itself for All hyperion Projects ???
    Thank you

  • Hyperion shared services error 1051522 - Analytical Services failed to get

    Hi All,
    When I am trying to resync my securioty from HSS 11.1.1.1 to my essbase 9.3.1 I am getting this folowing error.
    hyperion shared services error 1051522 - Analytical Services failed to get group's member tree with Error MSAD porvider could not be contacted
    I have already checked for any corrupt application on essbase but alll the esssbase apps are fine.
    Any help would be appreciated.
    Thanks

    I have resolved this issue by Myself.

  • Hyperion Shared Services user Management Guide

    Hi ,
    Can any one share the Hyperion Shared Services User Management Guide.
    Regards
    naveen

    Hi,
    For 9.3.1 Try - http://download.oracle.com/docs/cd/E10530_01/doc/epm.931/html_cas_help/toc.htm
    11.1 - http://download.oracle.com/docs/cd/E12825_01/epm.111/epm_security_11111/cas_help.htm
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Re: OBIEE 10.1.3.4.1 integration with Hyperion shared services 11.1.1.3

    I am working on OBIEE authentication using hyperion shared services. To achieve this I did the following steps,
    1) Registered the shared services in Answers using 'Manage EPM workspace'
    2)Modified config.xml to enable HSSauthenticator
    3)Modified instanceconfig.xml by adding external auth tags
    4)In rpd created a init block using custom authenticator.
    When I login into Answers using a username and password from hyperion shared services, it is saying invalid username/password.
    Log file says ' xxxxxx authentication failed in repository star, Odbc driver returned an error (SQLDriverConnectW)'
    Can some one explain me if I am missing anything here?? Is there anyone who has successfully implemented this before.
    Thanks,
    Sandeep

    Sandeep,
    I am fairly certain that this integration actually works in the other direction.
    That is from the Oracle Hyperion Workspace portal you need to log in and once you are in Workspace from the file menu an option for "Oracle Interactive Dashboards" should be available if all is configured correctly with the integration. That link will open up OBIEE and take the user directly into the dashboards without having to get prompted by the OBIEE login screen.
    If you have the BIC2Go image (Dan Vlamis' team, vlamis.com) for Oracle BI 10g you can see this integration's configuration and see it working correctly.
    I hope that helps

  • Migrating Filters through Hyperion Shared Services

    Hii, I have users defined on HSS 9.3.1 & I need to upgrade those to 9.3.3. I have some filters defined on the user as well.
    When I upgrade these users to 9.3.3 using CSSImportExportutility, I am not able to migrate the filters defined on the applications....
    How will I be able to migrate these filters to the newer HSS.

    Yes but I think Advance Security Manager works for Essbase itself not for Shared services. What I mean by that is when I apply filter using Advance Security Manager, it will be reflected in EAS Console... Then what will I do to get those filters reflected in Hyperion Shared services because then if I would want to modify filters Iusing HSS... Because now my users will be externalized...
    Thanks.

  • Creating data server for Hyperion Shared Services (HSS)

    Hey Gang,
    Has anyone had experience in creating a Data Server for Hyperion Shared Services (HSS) using the java API? I know HSS uses Native Directory, but to be compliant the Hyperion folks recommend using the java API strictly to get access to the users, groups, etc.
    Anyone have experience with this, or perhaps at least how to get ODI to kick off a java file to pull the data needed? What effort would be needed in ODI, is it straight forward or would I have to develop a technology or something to integrate into ODI?
    Thanks.

    Thanks for the quick reply John. I am trying to get user and group information, and also doing some complex manipulation. I need this to verify user access and some other stuff. I will not always have access to HSS and cannot always export the information, thus the need to use the HSS java API.
    I'm trying to pull it out of HSS and put it into an Oracle table in a standard format where I'll use the information and do reporting off of it. I've developed a java class that does migrates the data over, but its crude and I'd like to move it into ODI with some of our projects that are currently doing the same thing with other ERP such as Ebiz and Peoplesoft.
    If I can recode some of the java in ODI, how would I go about doing that. Where would I include the libraries, etc.? is there a tutorial or a place where I can get started on that.
    Thanks for all the help.

  • Troble configuring Hyperion Shared Services with SQL Server 2005

    I recently installed SQL server (SQL SERVER 2005) in my machine and then am trying to install Hyperion (9.3.1) products. I started with Shared services. It was installed successfully. Problem is occuring when am trying to configure Shared service with SQL database using Hyperion Configuration utility (9.3.1)
    The error which is popping up is
    Unable to connect to the database for the product Hyperion Shared Services.
    Things which I tried from my end
    1. Made sure TCP IP Protocol was enabled in SQL server configuration server.
    2. hypuser was created in SQl server.
    3. hypdb was created in SQL server.
    4. Was having dynamic IP address so install Loopback adapter to obtain Static IP address and port.
    5. Port and IP address was correct.
    Let me know where I am going wrong.
    Any help will be greatly appreciated.

    Finally got it fixed firewall settings needed to be change : This document helped me a lot to troubleshoot the issue
    An error has occurred while establishing a connection to the server. When connecting to SQL Server 2005, this failure may be caused by the fact that under the default settings SQL Server does not allow remote connections. (provider: Named Pipes Provider, error: 40 - Could not open a connection to SQL Server) (Microsoft SQL Server, Error: 2)
    This problem may occur when SQL Server 2005 is not configured to accept incoming local and remote connections, which is disabled by default in SQL Server 2005 Express Edition, SQL Server 2005 Developer Edition and also SQL Server 2005 Enterprise Edition. To solve the connection forbidden problem, SQL Server 2005 needs to configure to allow incoming local and remote connections.
    Firstly, ensure that SQL Server 2005 is configured properly to allow incoming connections on the instance of database server, else enable and turn on the local and remote connections setting.
    Click Start button, then go to Programs or All Programs, then select Microsoft SQL Server 2005, followed by Configuration Tools. Click and run the SQL Server Surface Area Configuration.
    On the “SQL Server 2005 Surface Area Configuration” page, click Surface Area Configuration for Services and Connections.
    On the “Surface Area Configuration for Services and Connections” page, expand Database Engine tree, click Remote Connections.
    Select Local and remote connections, or Local connections only which applicable only if there is no remote system tries to connect to the SQL Server, useful when you just trying to connect and authenticate with the server after installing.
    Select the appropriate protocol to enable to local and/or remote connections environment. To ensure maximum compatibility, select Using both TCP/IP and named pipes.
    Click Apply button when done.
    Click OK button when prompted with the message saying that “Changes to Connection Settings will not take effect until you restart the Database Engine service.”
    On the “Surface Area Configuration for Services and Connections” page, expand Database Engine, then click Service.
    Click Stop button to stop the SQL Server service.
    Wait until the MSSQLSERVER service stops, and then click Start button to restart the MSSQLSERVER service.
    Secondly, SQL Server Browser service has to be enabled to allow for local and remote connections if SQL Server 2005 is running by using an instance name and users are not using a specific TCP/IP port number in the connection string.
    Click Start button, then go to Programs or All Programs, then select Microsoft SQL Server 2005, followed by Configuration Tools. Click and run the SQL Server Surface Area Configuration.
    On the “SQL Server 2005 Surface Area Configuration” page, click Surface Area Configuration for Services and Connections.
    On the “Surface Area Configuration for Services and Connections” page, click SQL Server Browser.
    Select Automatic as the Startup type to start SQL Server Browser service automatically every time system starts.
    Click Apply button.
    Click on Start button to start the service immediately.
    Click OK button.
    Finally, if remote computer needs to connect and access SQL Server, an exceptions in Windows Firewall included in Windows XP SP2 (Service Pack 2), Windows Server 2003 and Windows Vista needs to be created. If you’re using third-party firewall system, the exception rules also needed to be created to allow external remote connections to the SQL Server 2005 and SQL Server Browser Service to communicate through the firewall, else connections will be blocked. Consult the firewall manual for more details. Each instance of SQL Server 2005 must have its own exception, together with an exclusion for SQL Server Browser service.
    SQL Server 2005 uses an instance ID as part of the path when you install its program files. To create an exception for each instance of SQL Server, you must identify the correct instance ID. To obtain an instance ID, follow these steps:
    Click Start button, then go to Programs or All Programs, then select Microsoft SQL Server 2005, followed by Configuration Tools. Click and run the SQL Server Configuration Manager.
    In “SQL Server Configuration Manager”, click the SQL Server Browser service in the right pane, right-click the instance name in the main window, and then click Properties.
    On the “SQL Server Browser Properties” page, click the Advanced tab, locate the instance ID in the property list.
    Click OK button.
    Then create an exception for SQL Server 2005 in Windows Firewall.
    Click on Start button, the click on Run and type firewall.cpl, and then click OK. For Windows Vista, type firewall.cpl in Start Search box and press Enter key, then click on Allow a program through Windows Firewall link on left tasks pane.
    In “Windows Firewall”, click the Exceptions tab, and then click Add Program.
    In the “Add a Program” window, click Browse button.
    Click the C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe executable program, click Open button. MSSQL.1 with is a placeholder for the instance ID that is obtained from previous procedure. Note that the path may be different depending on where SQL Server 2005 is installed.
    Click OK button.
    Repeat steps 1 through 5 for each instance of SQL Server 2005 that needs an exception.
    For SQL Server Browser service, locate the C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe executable program, and click Open button.
    Click OK button.

  • Hyperion shared services !

    Hi Techies,
    I am working on hyperion shared services 9.3.1 version.
    Can you any one tell me how to assign the database calculation & filter access in shared services.
    What i have did is,
    I have created the 3 users in essbase & migrated those users into shared service mode & also register all applications to shared services as well.
    All applications are reflecting under analytic servers also.
    I have given the Here is some of the roles specific to Essbase in Shared Services.
    Server Roles (Administrator, Create/Delete App, Server Access)
    Application Roles (App Manager, DB Manager, Start/Stop Application, Calc, Write, Filter and Read Roles.
    Poblem is i am not able to assign the database calculation & filter access in shared services.
    Please,please could any one guide me ...
    Thanks in Advance.

    What Sean said.
    It is super non-intuitive. I mostly work in Planning (which handles all of this behind the scenes) and when I, alas, infrequently get to use real, honest-to-goodness Essbase I have to relearn this. It never seems natural.
    You'd think after relearning it three or four times, I'd get it, but nope, it's just "weird".
    Regards,
    Cameron Lackpour

  • Essbase - Shared Services - Maxl - User creation

    Hi,
    I have an issue looking similar to [Automating User/Group creation & Assigning filters in Shared Services|http://forums.oracle.com/forums/thread.jspa?threadID=1009127]
    When trying to add internal groups to an external MSAD user, I get following messages:
    h3. when adding a group to an external user:
    h6. alter user 'x29027' add 'GR_GROUP';
    Maxl returns:
    h6. Statement executed with warnings.
    h6. User x29027 does not exist
    => the system does not recognize the user
    h3. when trying to create this user first as an internal user
    (based the settings from on another external user)
    h6. create or replace user 'x29027' identified by 'password' as 'i09740';
    Maxl returns:
    h6. Statement executed with warnings.
    h6. A user/group with the same name (x29027) exist at Shared Services
    => the system does recognize the user in MSAD!
    ===> both statements seem to be contradictory!!!
    h3. Other remarks/thoughts:
    - we have two MSAD links (to two different domains), does this matter?
    - no difference when addressing users as x29027@MSAD_FIB (a syntax similar to the HSS security report output)
    - any possibilities in creating a user internally first (using the 'as' option; to copy settings from another user) and then moving to external? (like alter user 'Test_EDR4' set type external;)
    Thanks in advance
    Erik
    Environment: Essbase 9.3.1.3. with Shared Services

    Hi Erik,
    When you create an user in Essbase, the user will be created both in Essbase as well as Shared Service,
    where as when you create an user in Shared service, the user will not be created in essbase untill you perform refresh.
    In your case you can create the external user in Essasbe by using "Create user 'x29027' type external;'.
    By this you will be creating the user in Essbase and the particular user is recognised in Essbase.
    Now you can add him to any group.
    - Krish

  • Shared Services External Authentication using LDAP in 9.3.1

    Hi,
    I have installed Hyperion Shared Services with native directory. And now planning to setup external authentication using LDAP. I need some guidance to understanding how the external authentication works.
    Questions:
    1. Is it possible to setup Shared Services to use both Native and LDAP user directory? What I mean is some users will be able to login using Native directory, and some others will need to login using User Directory (external authentication).
    2. For User Directory (say we use LDAP), when the user is added into Shared Services, can they be assigned with Groups created in Native directory? We want to explore to use just the external authentication and define all of the groups within shared services.
    If not possible, can we manage the Groups of the User directory using shared services? How is the groups work with external authentication?
    Any feedback would be much appreciated.
    Thanks,
    Lian

    Hi,
    Yes you can use both Native and external authentication. When you add the external provider the native is left by defaut anyway.
    Yes you can add your external users to native groups. You can also provision the groups in the AD if you wish.
    Gee

  • One more on Shared Services - Removing Users w/o De-Provisioning

    What happens if a user is removed before it is de-provisioned?
    4-5 users were removed without do any de-provisioning first. Now the users are still appearing in certain areas, but not in default to remove them. Not sure if adding the users back in will tie them to their old SIDs and can then de-provision and remove them entirely or if would have to go through some other effort to remove them completely (which is the end goal). Any guidance on this is very appreciated.
    Thanks!

    You could try using the updatenativedir utility which comes supplied with Shared Serevices found in a rather odd location:
    <hyperion home>\common\utilities\SyncOpenLdapUtility\UpdateNativeDir.zip
    Take a backup of both your HSS Database and OpenLDAP Database before running it, just in case.
    I have never had any bad experiences using it.
    Run it with the -noupdate option to see what it change.
    Have a read of the whole readme, Some Text from the readme....
    Utility to update Hyperion Native Directory with updated data from external
    providers
    Description
    This utility will update external user and group identities in the Hyperion
    Native Directory for those objects that have moved in the external directory.
    This utility will also delete user and group entries from the Hyperion Native
    Directory that cannot be located in the external directory. If the external
    directory cannot be reached due to connectivity issues those user and group
    entries in the Hyperion Native Directory will not be deleted by the utility.
    Please ensure the you provide the same external authentication configuration
    file (CSS.xml) as configured in the Hyperion Shared Services.
    The data related to all the external providers in the search order is
    synchronized. User and group information such as membership, provisioning,
    cache will be deleted from Native Directory if the user or group is not found
    in the external providers.
    After this utility is run, we need to restart HSS so that the cache is
    refreshed and the data updated. The other option is to wait for cache to refresh.
    ...

  • Hyperion Shared Services Active Directory

    Gurus, i am an Essbase Developer and currently have an issue where the users in the Hyperion Shared Services Active Directory does not reflect the true number of users actually on the company network.
    Whilst new employees created in the company flow through correctly into Hyperion Shared Services, those who have left the company still show in Hyperion Shared Services, even though they have been deleted from the network. Its as if newly created users synchronize perfectly into the Hyperion Shared Services Active Directory, but the deletion of users does not flow through.
    Has anyone experienced this?
    Thanks

    Hi,
    You are fecthing the user ids from Active Directory just to reduce lot of manual effort of creating native ids for all the user and also a security part its suggested to use Active Directory.
    Now how can you say that id is still active in AD, the user who had left the company his id would be already inactive even though you are able to query the user and provision on his id or add him/her to a group that has provisions will not be able to login as their id is made inactive.
    If you want to remove them automatically from Essbase or Shared Services automatically when their id gets disabled it wont happen as provisioning information etc lies with Shared Services and just to authenticate a valid user AD comes into picture .
    If you want to eliminate users from accessing the system whose id is disabled is to change your AD configuration in Shared Services based on the inputs from your AD team such that where does the disabled id go into (ex : which OU etc..) and configure accordingly which should work.!!! now if you want to eliminate them from Essbase unprovision them/their ids and run security refresh .
    Thanks
    Amith

  • Hyperion Shared Services Error

    Guys,
    I had configured MSAD external authentication in Hyperion Shared Services 9.3.1. I am also able to see the groups and users in the shared services.
    I provisioned one of the group with Essbase Admin, and HSS Admin. but when i tried to login to the Shared services with a userID in that group, HSS is showing the error "User: XXXX, not found"
    CSS.xml file seems to be fine to me. Users in Native authentication are working fine.
    - <css>
    - <hub location="http://HSS-Server:58080">
    <dirPort>58089</dirPort>
    </hub>
    - <spi>
    - <provider>
    - <native name="Native Directory">
    <password>{CSS}4N6lVcgiE/dGr8rFdvQLcA==</password>
    </native>
    - <msad name="XXXXX">
    <vendor>Microsoft</vendor>
    <trusted>true</trusted>
    <url>ldap://MSAD-server:389/DC=xxx,DC=xxxx,DC=com</url>
    <userDN>YYYYYYYYYYYYYYYY</userDN>
    <password>{CSS}VBLEOOfJ6ucg4ybH9z9PvQ==</password>
    <authType>simple</authType>
    <maxSize>100</maxSize>
    <identityAttribute>ObjectGUID</identityAttribute>
    <identityAttributeType>Octet String</identityAttributeType>
    - <group>
    <useGroups>true</useGroups>
    - <objectclass>
    <entry>group?member</entry>
    </objectclass>
    <url>OU=yyy</url>
    <nameAttribute>cn</nameAttribute>
    </group>
    </msad>
    </provider>
    </spi>
    - <searchOrder>
    <el>XXXX</el>
    <el>Native Directory</el>
    </searchOrder>
    - <token>
    <timeout>480</timeout>
    </token>
    - <logger>
    <priority>WARN</priority>
    </logger>
    - <delegatedUserManagement>
    <enabled>false</enabled>
    </delegatedUserManagement>
    </css>
    Any help is much appreciated.
    AB

    As informed earlier you could refer this link http://www.oracle.com/technetwork/middleware/bi-foundation/hyperion-supported-platforms-085957.html which will have the corresponding version support matrices (In your case 9.3.1 or 9.3.3) which will help you to find out which OS and which browsers can be used.

Maybe you are looking for

  • Help--all the files in my user account just disappeared

    I have a 10.4 Intel Mac Mini with a few different accounts on it. There are two Administrator accounts, one called "bill" and one called "Administrator". The former is my main account I use daily. All accounts on this machine have File Vault enabled.

  • Custom Tags starting with $: lots of problems

    I'm building an extension for MovableType template tags. Those tags can be delimited in several ways: <MTNameOfTheTag> or <$MTNameOfTheTag> or even <$MTNameOfTheTag$>. Since the dollar sign is not allowed as tag name, i put a prefix="<$" in tag defin

  • Solution for starting weblogic server 6.1 SP4 after changing of JVM to JDK 1.4 in startweblogic.cmd file

    Hi, I am using WebLogic 6.1 SP4 on a windows 2000 system. I have changed the JAVA_HOME variable in startweblogic.cmd file to point to j2sdk1.4.0_01 instead of the default. I have set the weblogic startup password also in the WLS_PW variable in startw

  • Blog post Publish vs Update

    This question was asked in February here and answered, but it clearly was never addressed. When a blog post is saved as a draft, the PUBLISH button becomes the UPDATE button and there is no longer any clear indication to the client of whether their p

  • Can pass data from Seibel Java UI to OPA

    Hi all, presently client is using Java UI in Siebel and this java UI holds some value in a variable(this variable is not a field in siebel or not stored in siebel). so my question is can we pass that stored variable in java UI to OPA when siebel call