JavaCard Secure Object Sharing

I'm facing problem on passing object as parameter between server and client applet. Does anybody know how to overcome the above problems?

If client applet and server applet belong to the same package,
they can "share" an object or array via a class variable (keyword: static)
because they belong to the same context.
Otherwise, using javacard.framework.Shareable you can provide
methods for transfering the data.
By the way, I don't think there are security issues using the global
APDU buffer.
JC 2.2.1, Chapter 6 Applet Isolation and Object Sharing, p. 33:
"Note � Because of the global status of the APDU buffer, the Application
Programming Interface for the Java Card� Platform, Version 2.2.1 specifies that this
buffer is cleared to zeroes whenever an applet is selected, before the Java Card RE
accepts a new APDU command. This is to prevent an applet�s potentially sensitive
data from being �leaked� to another applet via the global APDU buffer. The APDU
buffer can be accessed from a shared interface object context and is suitable for
passing data across different contexts. The applet is responsible for protecting
secret data that may be accessed from the APDU buffer."
How would you interpret this quote?

Similar Messages

Secure object sharing in java card

Who has the complete code in secure object sharing in java card which is written by Michael Montgomery. I want to look at the code in this article. I wish somebody can help me!!!

Who has the complete code in secure object sharing in java card which is written by Michael Montgomery. I want to look at the code in this article. I wish somebody can help me!!!

Refresh security from Shared Services fails - System11

Hi All,
WHen refreshing the Essbase security from Shared Services in System 11 we get the following error:
Error 1051522: Essbase failed to get group's member tree with Error [CSS Error: Unknown error: Could not get exception message from exception object]
We see the same error in the Essbase log.
In the Shared Service Security CLient.log we get the following warnings:
2009-03-03 16:12:58,294 WARN [Thread-108] CSS dll either not found in java.library.path or can't be loaded[Root Cause: D:\Hyperion\common\CSS\9.5.0.0\bin\css-9_5_0.dll: Can't load IA 32-bit .dll on a AMD 64-bit platform ] com.hyperion.css.spi.impl.ntlm.NTLMTrustedDomain.<clinit>(Unknown Source)
2009-03-03 16:12:58,294 WARN [Thread-108] Error initializing trusted domains or the workstation name.[Root Cause: getNtTrustedDomains ] com.hyperion.css.spi.impl.ntlm.NTLMTrustedDomain.<clinit>(Unknown Source)
Has anyone come across this?
Thanks for your help.
Seb

Hi Seb,
I take it you are using NTLM as your external authentication.
The error message means that it can't see css-9_5_0.dll in the path, if you are on windows make sure the path contains <drive>:\Hyperion\common\CSS\9.5.0.0\bin\
If it doesn't update the environment variables, not sure if you need to reboot it may pick it up straight away, you can check by going to a command prompt and running echo %path%
Cheers
John
http://john-goodwin.blogspot.com/

The trial period for this product has expired or Secure Store Shared Service is not supported for this SKU - SharePoint Foundation 2013

After sucessfulling installing the SharePoint Foundation 2013, when i try to access the Secure Stored Service Application i get the below error
11/16/2012 18:13:02.84 w3wp.exe (0x1774)                       0x15E8 Secure Store Service
Secure Store                  g0n6 High    The trial period for this product has expired or this feature is not supported in this SKU. b3b6e19b-7de2-e016-ad32-0fc975829ef0
11/16/2012 18:13:02.84 w3wp.exe (0x1774)                       0x15E8 SharePoint Foundation
General                       8nca Medium Application error when access /_admin/sssvc/ManageSSSvcApplication.aspx, Error=The
trial period for this product has expired or Secure Store Shared Service is not supported for this SKU.   at Microsoft.Office.SecureStoreService.Server.SecureStoreServiceApplicationProxy.Execute[T](String operationName, Boolean validateCanary, ExecuteDelegate`1
operation)     at Microsoft.Office.SecureStoreService.Server.SecureStoreServiceApplicationProxy.IsMasterSecretKeyPopulated()     at Microsoft.Office.SharePoint.ClientExtensions.SecureStoreAdministration.SSSAdminHelper.EnsurePrerequisite(SecureStoreServiceApplicationProxy
proxy, String& errorMessage)     at Microsoft.Office.SharePoint.ClientExtensions.SecureStoreAdministration.ManageSSSvcApplication.InitializeGridView()     at Microsoft.Office.SharePoi... b3b6e19b-7de2-e016-ad32-0fc975829ef0
11/16/2012 18:13:02.84* w3wp.exe (0x1774)                       0x15E8 SharePoint Foundation
General                       8nca Medium ...nt.ClientExtensions.SecureStoreAdministration.ManageSSSvcApplication.OnLoad(EventArgs
e)     at System.Web.UI.Control.LoadRecursive()     at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) b3b6e19b-7de2-e016-ad32-0fc975829ef0
11/16/2012 18:13:02.84 w3wp.exe (0x1774)                       0x15E8 SharePoint Foundation
Runtime                       tkau Unexpected Microsoft.Office.Server.ProductExpiredException: The trial period for this product
has expired or Secure Store Shared Service is not supported for this SKU.    at Microsoft.Office.SecureStoreService.Server.SecureStoreServiceApplicationProxy.Execute[T](String operationName, Boolean validateCanary, ExecuteDelegate`1 operation)
at Microsoft.Office.SecureStoreService.Server.SecureStoreServiceApplicationProxy.IsMasterSecretKeyPopulated()     at Microsoft.Office.SharePoint.ClientExtensions.SecureStoreAdministration.SSSAdminHelper.EnsurePrerequisite(SecureStoreServiceApplicationProxy
proxy, String& errorMessage)     at Microsoft.Office.SharePoint.ClientExtensions.SecureStoreAdministration.ManageSSSvcApplication.InitializeGridView()     at Microsoft.Office.SharePoint.ClientExtensions.SecureSto... b3b6e19b-7de2-e016-ad32-0fc975829ef0
11/16/2012 18:13:02.84* w3wp.exe (0x1774)                       0x15E8 SharePoint Foundation
Runtime                       tkau Unexpected ...reAdministration.ManageSSSvcApplication.OnLoad(EventArgs e)
at System.Web.UI.Control.LoadRecursive()     at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) b3b6e19b-7de2-e016-ad32-0fc975829ef0
11/16/2012 18:13:02.84 w3wp.exe (0x1774)                       0x15E8 SharePoint Foundation
General                       ajlz0 High    Getting Error Message for Exception System.Web.HttpUnhandledException
(0x80004005): Exception of type 'System.Web.HttpUnhandledException' was thrown. ---> Microsoft.Office.Server.ProductExpiredException: The trial period for this product has expired or Secure Store Shared Service is not supported for this SKU.
at Microsoft.Office.SecureStoreService.Server.SecureStoreServiceApplicationProxy.Execute[T](String operationName, Boolean validateCanary, ExecuteDelegate`1 operation)     at Microsoft.Office.SecureStoreService.Server.SecureStoreServiceApplicationProxy.IsMasterSecretKeyPopulated()
at Microsoft.Office.SharePoint.ClientExtensions.SecureStoreAdministration.SSSAdminHelper.EnsurePrerequisite(SecureStoreServiceApplicationProxy proxy, String& errorMessage)     at Microsoft.Office.Sha... b3b6e19b-7de2-e016-ad32-0fc975829ef0
11/16/2012 18:13:02.84* w3wp.exe (0x1774)                       0x15E8 SharePoint Foundation
General                       ajlz0 High    ...rePoint.ClientExtensions.SecureStoreAdministration.ManageSSSvcApplication.InitializeGridView()
at Microsoft.Office.SharePoint.ClientExtensions.SecureStoreAdministration.ManageSSSvcApplication.OnLoad(EventArgs e)     at System.Web.UI.Control.LoadRecursive()     at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint,
Boolean includeStagesAfterAsyncPoint)     at System.Web.UI.Page.HandleError(Exception e)     at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)     at System.Web.UI.Page.ProcessRequest()     at System.Web.UI.Page.ProcessRequest(HttpContext context)
at System.Web.Htt... b3b6e19b-7de2-e016-ad32-0fc975829ef0
11/16/2012 18:13:02.84* w3wp.exe (0x1774)                       0x15E8 SharePoint Foundation
General                       ajlz0 High    ...pApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) b3b6e19b-7de2-e016-ad32-0fc975829ef0
11/16/2012 18:13:02.86 w3wp.exe (0x1774)                       0x15E8 SharePoint Foundation
General                       aat87 Monitorable b3b6e19b-7de2-e016-ad32-0fc975829ef0
Is it a bug or any issue in configuration?
Raghavendra Shanbhag | Blog: http://moss-solutions.blogspot.com
Please click "Propose As Answer " if a post solves your problem or "Vote As Helpful" if a post has been useful to you.
Disclaimer: This posting is provided "AS IS" with no warranties.

Hello
something should be related wuith this service, take a llok at my visual studio output whne I try to deplay and autohosted sharepoint app: (anyone can help)
1>------ Build started: Project: MySharePointAppWeb, Configuration: Debug Any CPU ------
1> MySharePointAppWeb -> C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\bin\MySharePointAppWeb.dll
2>------ Build started: Project: MySharePointApp, Configuration: Debug Any CPU ------
2>C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\Web.Debug.config(34,4): warning : No element in the source document matches '/configuration/connectionStrings'
2> Transformed Web.config using C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\Web.Debug.config into obj\Debug\TransformWebConfig\transformed\Web.config.
2> Auto ConnectionString Transformed obj\Debug\TransformWebConfig\transformed\Web.config into obj\Debug\CSAutoParameterize\transformed\Web.config.
2> Copying all files to temporary location below for package/publish:
2> obj\Debug\Package\PackageTmp.
2> Packaging into C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointApp\obj\WebDeploy\MySharePointApp.Web.zip.
2> Adding sitemanifest (sitemanifest).
2> Adding IIS Application (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp)
2> Creating application (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp)
2> Adding virtual path (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp)
2> Adding directory (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp).
2> Adding directory (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\bin).
2> Adding directory (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\bin\en).
2> Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\bin\en\Microsoft.IdentityModel.resources.dll).
2> Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\bin\Microsoft.IdentityModel.dll).
2> Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\bin\Microsoft.IdentityModel.Extensions.dll).
2> Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\bin\Microsoft.SharePoint.Client.dll).
2> Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\bin\Microsoft.SharePoint.Client.Runtime.dll).
2> Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\bin\MySharePointAppWeb.dll).
2> Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\bin\MySharePointAppWeb.pdb).
2> Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\packages.config).
2> Adding directory (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\Pages).
2> Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\Pages\Default.aspx).
2> Adding directory (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\Scripts).
2> Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\Scripts\jquery-1.7.1.js).
2> Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\Scripts\jquery-1.7.1.min.js).
2> Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\Scripts\_references.js).
2> Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\Web.config).
2> Adding ACL's for path (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp)
2> Adding ACL's for path (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp)
2> Adding declared parameter 'IIS Web Application Name'.
2> Package "MySharePointApp.Web.zip" is successfully created as single file at the following location:
2> file:///C:/_works/visual%20studio%202012/Projects/MySharePointApp/MySharePointApp/obj/WebDeploy
2> To get the instructions on how to deploy the web package please visit the following link:
2> http://go.microsoft.com/fwlink/?LinkId=124618
2> Sample script for deploying this package is generated at the following location:
2> C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointApp\obj\WebDeploy\MySharePointApp.Web.deploy.cmd
2> For this sample script, you can change the deploy parameters by changing the following file:
2> C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointApp\obj\WebDeploy\MySharePointApp.Web.SetParameters.xml
2> Successfully created package at: C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointApp\bin\Debug\app.publish\1.0.0.0\MySharePointApp.app
3>------ Deploy started: Project: MySharePointApp, Configuration: Debug Any CPU ------
3>Active Deployment Configuration: Deploy App for SharePoint
3>Uninstall app for SharePoint:
3> Skipping the uninstall step because the app for SharePoint is not installed on the server.
3>Install app for SharePoint:
3> Uploading the app for SharePoint...
3> Creating a trusted root authority in SharePoint for IIS Express.
3> Installation is in progress (00:00:00)
3> Installation is in progress (00:00:01)
3> Installation is in progress (00:00:02)
3> Installation is in progress (00:00:03)
3> Installation is in progress (00:00:05)
3> Installation is in progress (00:00:06)
3> App failed to install, cleaning up...
3> App installation cleanup failed due to errors. Please see the app on the SharePoint site’s “Site Contents” page for details.
3> App installation encountered the following errors:
3>
3> @"Error 1
3>        CorrelationId: ceeeafab-3834-40ea-b360-c29d103e2248
3>        ErrorDetail: The remote hosting service is not configured.
3>        ErrorType: Configuration
3>        ErrorTypeName: Configuration
3>        ExceptionMessage: The trial period for this product has expired or Secure Store Shared Service is not supported for this SKU.
3>        Source: RemoteWebSite
3>        SourceName: Remote Web Site Deployment
3>
3> @"Error 2
3>        CorrelationId: ceeeafab-3834-40ea-b360-c29d103e2248
3>        ErrorDetail: The remote hosting service is not configured.
3>        ErrorType: Configuration
3>        ErrorTypeName: Configuration
3>        ExceptionMessage: The trial period for this product has expired or Secure Store Shared Service is not supported for this SKU.
3>        Source: RemoteWebSite
3>        SourceName: Remote Web Site Deployment
3>Error occurred in deployment step 'Install app for SharePoint': Failed to install app for SharePoint. Please see the output window for details.
========== Build: 2 succeeded, 0 failed, 0 up-to-date, 0 skipped ==========
========== Deploy: 0 succeeded, 1 failed, 0 skipped ==========

Transport of Security objects in BPC 7.5NW

As a part of NW BPC transports, changed the entries in table UJT_TRANS_CHG. For the 1st transport (from DEV to QA)wanted to transport ALL objects including Security and Teams. So, selected 'Development' for ALL objects under this table.
After the transport collection via tcode UJBPCTR and importing into QA, found that 'Users', 'Teams' and 'Task Profiles' did NOT transport. 'Member Access Profiles' did transport to QA.
I expected 'Users', 'Teams' and 'Task Profiles' also to be transported. We are on SAP BPC 7.5NW, SP4.
Am I missing something here ?
Thanks in Advance.

Hi
we had the same problem and didn't know if Security objects could be transported, but we found the BPC User Mass Management Tool.
http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/d0cdbccf-0def-2d10-298d-f4223de9a6ed&overridelayout=true
This could help you to export the security objects in DEV and import the objects in PRD.
The transports you need for the ZUJE_MASS_USER_MGMT Programm you found on page 46 in the document mentioned above.
Please let me know if we could help you.

Service Entry Sheet in ECC 6.0 shipment costing security object?

Does anyone know what security object is being checked during service entry sheet creation? When I run the shipment cost create process in foreground (RV56TRSL) VI04, the program creates and settles the shipment cost, but in background only the shipment cost doc creates the settlement remains open (status A) and I get a message:
You have no authorization for this transaction with movement type 101
My assumption is a different object is being called in background versus foreground but my traces are not showing me anything useful.
thank you

Shipment settlement in ECC 6.0 requires the users to have some version of the MIGO object to prefrom the goods movement. this is a change from 4.7 and prior.

Error from EAS - "refreshing security from Shared Services failed"

Hi,
I was using Native only security in HSS for Essbase 11.1.1.3 and EAS allowed me to Refresh security from Shared Services. (Essbase security was already externalized to HSS.)
However, after I added "MS Active Directory", and provisioned a MSAD user to a native Planning group, EAS errors out with "refreshing security from Shared Services failed" .
I checked Essbase security and that MSAD user is not added to Essbase.
From Essbase Log I see:
Essbase failed to get roles list for [ESB:Analytic Servers:servername:1] from Shared Services Server with Error [32:1062:Failed to connect to the user directory [ HSS'sMSADname].
I then tried to remove MSAD from our H Shared Services and see if this problem goes away. However, MSAD still shows on the left panel menu in H Shared Services. How can I get rid of MSAD?
Any suggestions?
Edited by: user643332 on May 12, 2010 12:05 AM

Hi,
Are you sure you have removed it from shared services, you may have just disabled it.
You must restart the shared services application server to apply any changes made.
Cheers
John
http://john-goodwin.blogspot.com/

DMS security object c_drad_obj

Hi DMS Gurus,
I'm hoping someone can help me. I've been testing different scenarios all day and just did a web search to see if anyone has posted anything about this in the past. I came up with zero on both counts.
We are new to DMS at my company. Our objective is to give some users full access to DMS and others no access. I have found that our existing user roles already pull in Document Management security object CV, I think because the user has access MM03. For example our sales role has the c_drad_obj object assigned, but we don't want this role to have access to DMS. No matter what I change the options to in the security object, it doesn't have any effect.
I was under the impression that I can restrict the activity / document type / linked SAP object / document status in the c_drad_obj object. But as I previously said, no matter what I set these to, even to disable the object itself, it doesn't seem to matter.
Thanks for your consideration.
Regards,
Julie

You do realize that C_DRAD_OBJ is relevant only for Object Links stored in table DRAD? Not all documents will have Object Links. See Authorization Objects for Documents - Document Management - SAP Library for details on DMS authorizations. The main table for documents is DRAW.

Security object for check against Lab office in DIR

Hi,
We are running R/3 46C and use DMS to store our business documents via online vault. I have a requirement to set up access based on Lab office (department) that is used in the Document Information Record. Is there a standard security object that I can use in security roles to build this.
Any info would be appreciated and rewarded.
Regards
Nirmal

Your best option would be to use a user exit, for example badi "document_main01" "before_save" to populate the auth. group field, and then use normal roles/profiles to check on auth. group.
Regards,
Espen
Please reward if useful.

How to control partner function through security objects ??

Hi, theres any way to control witch Partner function are avalilable to assign in support messages ??
Theres any security object to control that ??
I have configured rules for automatic determintation, but in certains cases i need to assign manually.
I need to control this asignation Partner function
Any ideas ?? CRM_ORD_OP ??
Best Regards

I got it fixed my self.
here is the solution.
in user exit :EXIT_SAPMM06E_012.
call below FM: MM_CALL_UPDATE_PARTNERS
Trick is pass the partner values the one you wanted to below table: x_mmpa and xuekpa.
you can calculate partner records from wyt3 table depends on your logic/requirement.
CALL FUNCTION 'MM_CALL_UPDATE_PARTNERS'
     EXPORTING
       ebeln       = wa_ebeln
       bstyp       = 'F'
*     knuma       = wa_knuma
       application = 'P'
     TABLES
       x_mmpa      = it_mmpa1
       y_mmpa      = it_mmpa2
       xuekpa      = it_uekpa1
       yuekpa      = it_uekpa2
       i_mmpa      = it_mmpa3
       u_mmpa      = it_mmpa4
       d_mmpa      = it_mmpa5.
Thanks,
Mahesh

Error migrating Security from Shared Services.

Hi,
I was using Hyperion Planning 9.3.1's in Import/ Export utility in D:\Hyperion\common\utilities\CSSImportExportUtility\cssimportexport\importexport\CSSExport.bat. I'm trying to export Security from Shared Services into xml format. I get the following error message:
Malformed \uxxxx encoding
Anyone with similar experiences? Hyperion's impexp.pdf makes the steps so complicated!!

Answering my own question:
Since I am in Windows, I was using backslashes in my paths when I updated file:
importexport.properties
The error went away after I changed the backslashes to forward slashes in all paths.

Essbase External Security via Shared Services

I have hit a problem with essbase external security via shared services, might be fairly trivial, first time doing this.
In the install guide for essbase 9.3.1 it mentions not to use the user 'admin' when firing up essbase server console mode for the first time if you intend to externalise security to shared services in the future.
I have followed this recommendation and used a different username 'essadmin' for the first time essbase server is started up. While still in native security mode, I sign in via EAS 9.3.1 and create myself another admin account just in case.
I cold backup shared services SQL repository and OpenLDAP repositry before externalising essbase security. Also I backup the essbase sec and cfg files just in case.
Then I start it all up, go into EAS and select to externalise security, this takes a few seconds, and all seems well.
Now in shared services I can see the essadmin user ID and everything appears to be OK. However when I look under the projects node, I see "Analytic Servers:myhost:1", then below that another green icon "Analytic Servers:myhost:1", but when I click on the second green icon I get "Login fails due to invalid login credentials".
What have I done wrong ?

Hi,
I don't think you've done anything wrong. You just need to provision your shared services user with access to Essbase. Right-click on your user, select provision and then give them the required Essbase rights.
Hope that helps,
Gee

Issue externalizing the Essbase security to shared services

Guys,
I am facing an issue while externalizing the security to shared services in Hyperion Essbase 9.3.1. When i tried to externalize the users in Essbase 9.3.1, i am getting the error
"Error: 1051400: Analytic Services has already been migrated to Shared Services Mode". But i dont see any options when i right click on the security tab. i am seeing the same options
as we have before migrating to shared services like Externalize Users. Also when i tried to create a user in Essbase, it is giving the following error msg.
"Error: 1051484 Cannot change CSS Authenticated User to Another Authentication Type After successfully migrating that user to Shared Services". Errors are showing my security is in shared
services mode. How i can test if it is really in shared services security mode.
One other thing is, when we installed Essbase, we used 'admin', 'password' as user credentials. Does these have anything to do, as i saw in one thread that 'admin' is not recommended for Essbase while configuring shared services.
Thanks in advance
PM

Forget this thread. I am able to rectify the issue. We forgot to give access to temp folder of EAS Console.

EAS Console - Not getting the option "Refresh security from Shared Services"

Hi,
In EAS Console 11.1.2.2, I am not getting the option "Refresh security from Shared Services" when I right click on Security (under Essbase Servers).
However, I can see this option via EAS Console 11.1.1.3 (current existing version).
Could you please let me know how can I get this option in EAS Console 11.1.2.2? Is this by any chance related to the option "Externalize Users"?
Thanks in advance.

Thanks a lot join for this information and your kind support .
One more question:
The owner of the Planning application is user 'hypadmin'.
I can see the SIDs of user 5001 a little different in both the versions. Is this ok?
Hyperion Planning 11.1.1.3 (Existing Environment)
USER_ID     SID ROLE SYNC_PSWD OFFLINE_ENABLED HUB_ROLES
50001          native://DN=cn=0fa19f8241602600:3b78a0e0:130926693d2:-78ba,ou=People,dc=css,dc=hyperion,dc=com?USER 3 2 0 5019
Hyperion Planning 11.1.2.2 (New Environment)
USER_ID     SID ROLE SYNC_PSWD OFFLINE_ENABLED HUB_ROLES
50001           native://nvid=54aec0428a3ba591:-44b7ca9b:13f03c114d2:-5d99?USER 3 2 4507
I have not yet performed "Externalize Users" yet in the new environment (11.1.2.2) throgh EAS Console. Is it required in the newer version 11.1.2.2?

Essbase EAS - Refresh Security from Shared Services

Hi All,
Just went live with Essbase. We are using MSAD Groups in Shared Services for our users. I noticed that if we add a new user to a provisioned group, they don't automatically get access to Essbase. I believe I have to select 'Refresh Security From Shared Services' in EAS. I am nervous about doing this with users in the system as I don't want to accidentally boot them out. Is there any risk? Reports stopped? Users forced to logout? Smartview implications?
I feel like I did it before and disrupted some users during development but I am not sure.
Much Appreciated,
Mike

Thx. I just did it and it didn't seem to disrupt anything. I tested with a user with a smartview open, a report running and a WA dashboard on screen. It did mention that after refreshing the essbase server would be disconnected and i would have to reconnect but it didn't actually boot me out or disrupt any process.
I guess it's okay to do on a live production system. ?
Thx,
Mike

JavaCard Secure Object Sharing

Similar Messages

Maybe you are looking for