Maxl encryption

Hi,
I am having epm 11.1.2.2 and trying encryption in maxl but I am getting the below error. Can you please provide your input.
Below are the steps which I followed:
1)Generated public and private key essmsh –gk > key.txt
2) Updated a file called keys.mxl with “ login <username> <password> on <servername>;
3) essmsh -E keys.mxl 120,275458717(PUBLIC-KEY)
4) keys.mxls file is generated with this login $key 23270487801887794201921167020080934051300412707340 $key 3776974
60065154671707380382060693420811086628270703348653160 on 'servername';
5) When i execute the above keys.mxls or command line in maxl i am getting the below error.
MAXL> login $key 23270487801887794201921167020080934051300412707340 $key 3776974
60065154671707380382060693420811086628270703348653160 on 'servername';
essmsh error: Variable doesn't exist - $key
essmsh error: Variable doesn't exist - $key

What are you entering to execute the MaxL?
Remember that you must use the -D (decrypt) switch and pass in the private key. There's a good example on Celvin's blog here.

Similar Messages

Deployment with encrypted Maxl files

Hi All,
I'd like to know how encrypted maxl files work if I need to deploy them to different servers. This is, I create the maxl files to automate everytihng and I encrypt them in a test server. After deployment to a different production server, are the public/private keys going to work with no problem? Or I should re-encryp everything with new keys generated in the production server?
Thanks!

You need to create new
For Assistance you can use below Comments
You need to use the MaxL encryption tool to do this. The passwords stored in the MaxL Scripts can be encrypted from Version of Essbase 9.3 or higher.
To Encrypt the Scripts:
a) The following MaxL Shell invocation generates a public-private key pair that you can use to encrypt a MaxL script.
essmsh -gk
b) The following MaxL Shell invocation encrypts the input MaxL script, obscuring user name and password, and changing the file extension to .mxls.
essmsh -E scriptname.mxl PUBLIC-KEY
c) The following MaxL Shell invocation decrypts and executes the MaxL script.
essmsh -D scriptname.mxls PRIVATE-KEY
STEP 1: In the command prompt type:
C:\>essmsh -gk
STEP 2: In the command prompt, execute as below:
C:\>essmsh -E D:\Hyperion\MScript.mxl 29287,1495101497
Generates a Encrypted MaxL script file "MScript.mxls" based on the original MaxL script "MScript.mxl" in the location "D:\Hyperion".
STEP 3: Execute Encrypted MaxL script MScript.mxls
C:\>essmsh -D D:\Hyperion\MScript.mxls 1165863655,1495101497
Essbase MaxL Shell - Release 9.3.1 (ESB9.3.1.0.0B181)
Copyright (c) 2000, 2007, Oracle and/or its affiliates.
All rights reserved.
MAXL> login $key 8432115901043363023058112802217170696731 $key 46195519111827550
39099976036415811280221 on localhost;
Hope this helps

Execute MaxL command througth ODI and encrypt password

Hi
I am looking for a solution to not use plain text password for my Maxl command in ODI.
Anyone know how should I do that?
Up to now, I found nothing.
Thanks
Alain

Hi,
Here is a example of encrypting the login credentials in a maxl scipt.
First run something like this from a command prompt
essmsh -gk >> c:\temp\encryptKeys.txt
This will create a text file with the public and private keys e.g.
e.g.
Public Key for Encryption: 5407,1453704157
Private Key for Decryption: 406488703,1453704157
Now say you have a maxl file called login.mxl like
login admin password on localhost;
logout;
You can encrypt it by calling
essmsh -E c:\temp\login.mxl PUBLIC KEY
So for this example it would be
essmsh -E c:\temp\login.mxl 5407,1453704157
This will create an file called login.mxls with encrypted login details e.g.
login $key 6343689380045143584028576355606972733930 $key 1468602100275634090163724540502857635560 on localhost;
logout;
Now to execute the file you need to use the command
essmsh -D c:\temp\login.mxls PRIVATE KEY
so in this example
essmsh -D c:\temp\login.mxls 406488703,1453704157
Cheers
John
http://john-goodwin.blogspot.com/

Encrypted Maxl creating parition on Unicode applications

Hello,
I have an issue with encrypted MaxL scriptfailing to create a linked partition on Unicode Essbase applications.
If I use a non-encrypted MaxL (.mxl) the parition is created successfully.
If I usean encrypted MaxL (.mxls) the partitioin creation fails with this error:
ERROR - 1241162 - Unable to create partitions on Unicode servers from non-Unicode clients.
Other task run successfully in the mxls file (loading data, running calcs). Only fails on partition build.
I tried copying the non-encrypted partition definition into the mxls file just for kicks and it still fails.
This is on Linux
Any suggestions? SR is open.
Thanks Williams_SI

Issue was the script encoding.
Although the '.mxl' script was encoded correctly to work with Unicode, the system generated script created through the encryption process did not copy that encoding.
Solution was to change the encoding on the '.mxls' script.

Password Encryptions in Maxl log files

When we tried using the suggested methodology, found there are still some open questions.
My question is not encrypting the password in MaxL script, I want to encrypt password in MaxL Script LOG which has password in clear text.
pls anybody reply soon.

Is this new functionality?
If I had a stack of Bibles, I'd swear that on 9.3.1, it will clear text your password. That's why I always put the spool command directly after the (encrypted) login.
^^^I haven't found the readme that states this is different behavior in 11, but I'll bet it's out there.
I'll also swear that I couldn't encrypt SQL passwords in 9.3.1, but as I don't have access to that environment any longer, I can't be certain.
Regards,
Cameron Lackpour
Edited by: CL on Feb 10, 2010 6:01 AM

Encrypted Maxl "Parse error near in" error

Hello,
I'm facing a "Parse error near in" error when trying to use encrypted Maxl scripts deploying Essbase Studio cubes.
The problem seems to be in the deploy command. If I do not use encrypted Maxl ( -D option ), the same deploy command works fine.
Look in the deploy command that I'm not using encryption for loging into Essbase Studio. Even using encryption the same error is issued.
Here is the log: ( I changed sensitive information for obvious reasons )
Essbase MaxL Shell - Release 11.1.2 (ESB11.1.2.1.0B347)
Copyright (c) 2000, 2011, Oracle and/or its affiliates.
All rights reserved.
MAXL> login $key 99999999999999999999999999 $key 99999999999999999999999999 on s01ubd01;
OK/INFO - 1051034 - Logging in user [ESBSAUH1@AD_Directory].
OK/INFO - 1241001 - Logged in to Essbase.
Essbase MaxL Shell - Release 11.1.2 (ESB11.1.2.1.0B347)
Copyright (c) 2000, 2011, Oracle and/or its affiliates.
All rights reserved.
MAXL> deploy outline from model 'cboPremioModelo2' in cube schema '\BI_SAUDE\Cubos\Premio\cboPremio'
with option delete_members login "xxx" identified by "yyyyy" on host "s01ubd01"
to application "Premio" database "Premio" using connection "Essbase" keep all errors on error ignore dataload write to default;
essmsh error: Parse error near in
essmsh timestamp: Wed Jul 04 12:52:03 2012
MAXL> logout;
User esbsauh1 is logged out
essmsh timestamp: Wed Jul 04 12:52:03 2012
MaxL Shell completed

There have been a number of MaxL bugs with encryption that produce 'Parse error near...' messages. If you login to Oracle Support and search the Knowledge Base on 'Parse error near' you will find them. I can't see anything specifically relating to 11.1.2.1 or a known defect in the release notes... ...I'd get a support ticket raised, if you haven't already.
You don't mention platform, but I've also run into a bug running 'deploy' in 11.1.2.1 on a 64-bit Windows environment and there was a Unix bug too, but they both caused crashes so probably aren't your problem.

Encrypting passowrd in maxl

Hi,
I have a script that appenda the spool of a maxl to the log file. The spool also shows the login statement.
I want to encrypt the passowrd in the login statement before it gets appended to the log file.Can you suggest some mechanism?
I also wanted to know how to use the essmsh -gk command in a maxl script(i am using Essbase 9.3.1).
Please provide some example.

Hi,
Here is a example of encrypting the login credentials in a maxl scipt.
First run something like this from a command prompt
essmsh -gk >> c:\temp\encryptKeys.txt
This will create a text file with the public and private keys e.g.
e.g.
Public Key for Encryption: 5407,1453704157
Private Key for Decryption: 406488703,1453704157
Now say you have a maxl file called login.mxl like
login admin password on localhost;
logout;
You can encrypt it by calling
essmsh -E c:\temp\login.mxl PUBLIC KEY
So for this example it would be
essmsh -E c:\temp\login.mxl 5407,1453704157
This will create an file called login.mxls with encrypted login details e.g.
login $key 6343689380045143584028576355606972733930 $key 1468602100275634090163724540502857635560 on localhost;
logout;
Now to execute the file you need to use the command
essmsh -D c:\temp\login.mxls PRIVATE KEY
so in this example
essmsh -D c:\temp\login.mxls 406488703,1453704157
Cheers
John
http://john-goodwin.blogspot.com/

Is it possible to call a CMD or VBS within MAXL? Need script help

Hello,
I have a CMD script that uses MAXL to execute Essbase backups, the details of which are located in a txt file. That works fine, and I have the logs being sent to a folder.
What I am trying to accomplish is AFTER it is finished running the backup, it calls a CMD script to parse the log file for errors, then either send a successful or failure notification through SMTP.
I have all the scripts to perform the operations and they all function properly, but when I run it, the email is sent before the Essbase backup has completed.
Is there a better way to do this like possibly calling the other CMD/VBS directly from within the MAXL shell? This is my current CMD file:
Echo Calls Maxl shell with reference to EssbaseBackup.txt for variables
call \\<server>\HyperionPlanning\App\Backups\MaxlBackup.cmd
Echo Search Essbase Backup Logs for Errors
findstr /c:"ERROR" \\<server>\HyperionPlanning\App\Backups\Logs\HyperionSetEssbaseForBackuplog.txt
if %ERRORLEVEL% NEQ 0 goto NO_ERROR
goto ERROR
Echo Sends backup success mail
:NO_ERROR
\\<server>\HyperionPlanning\App\Backups\mail_send_success.vbs
EXIT 0
Echo Sends backup failure notification
:ERROR
\\<server>\HyperionPlanning\App\Backups\backup_failed.vbs
EXIT 1MaxlBackup.cmd
"C:\Oracle\Middleware\EPMSystem11R1\products\Essbase\EssbaseClient-32\bin\startmaxl.cmd" "\\<server>\HyperionPlanning\App\Backups\EssbaseBackup.txt"EssbaseBackup.txt
spool on to '\\<server>\HyperionPlanning\App\Backups\logs\HyperionSetEssbaseForBackuplog.txt';
set timestamp on;set timestamp off;
login admin identified by <password> on <server>;
alter system logout session on application App force;
alter application App disable connects;
alter database App.main force archive to file 'F:\Backups\App\Appmain.arc';
alter database App.cap force archive to file 'F:\Backups\App\Appcap.arc';
alter application App enable connects;
set timestamp on;set timestamp off;
logout;
spool off;Edited by: Metatron on Mar 30, 2012 8:10 AM

Try taking the code that is in the MaxLBackup.cmd and stick it into the root script just to remove that area of complexity. If that works, you might also try removing CALL from the line. Although I thought the point of CALL was to run another script and then return control to originating script.
Here's some old (System 9.3.1) code that does what you're doing -- the pathing is wrong for 11x:
REM Write filters to disc
%hyperion_home%\products\Essbase\EssbaseClient\bin\essmsh.exe -D write_filters_to_disc.mshs %7,%8
REM If error, go to end, else write
IF ERRORLEVEL == 1 (SET errormsg=Error! - Read of filters from Essbase failed & GOTO ERROR)The -D and .mshs are to handle an encrypted MaxL script.
Regards,
Cameron Lackpour

How to Hide username and password in command line using maxl

Hi,
How to encript my user name and password in command line prompt when I am login to Essbase server using batch file:
*1_Here is my batch file:*
Name of the bat file AV_Assig_Var1.bat
rem This batch file defines the following variables:
set $1 = 'admin';
set $2 = 'password';
essmsh AV_Asig1.mxl admin password
===========================
*2_Here is my maxl file:*
Name of the bat file AV_Asig1.mxl
/* Create a process log */
spool on to 'D:\lova\spool_log.txt';
/* login (using variables from a batch file */
login $1 $2 on 10.42.100.229;
/* create application and database */
create application AV_Asig1;
create database AV_Asig1.AV_DB;
/* End process log */
spool off;
exit;
*3_Command line prompt*
D:\Ess>AV_Assig_Var1.bat
D:\Ess>rem This batch file defines the following variables:
D:\Ess>rem 1: username
D:\Ess>rem 2: password
D:\Ess>essmsh AV_Asig1.mxl admin password
Essbase MaxL Shell - Release 9.3.1 (ESB9.3.1.0.0A181)
Copyright (c) 2000, 2007, Oracle and/or its affiliates.
All rights reserved.
MAXL> login admin password on *10.46.100.222*; /* I want to hide this information */
OK/INFO - 1051034 - Logging in user [admin].
OK/INFO - 1051035 - Last login on Monday, June 14, 2010 12:44:03 PM.
OK/INFO - 1241001 - Logged in to Essbase.
MAXL> create application AV_Asig1;
OK/INFO - 1051061 - Application AV_Asig1 loaded - connection established.
OK/INFO - 1054027 - Application [AV_Asig1] started with process id [6792].
OK/INFO - 1056010 - Application AV_Asig1 created.
MAXL> create database AV_Asig1.AV_DB;
OK/INFO - 1054014 - Database AV_DB loaded.
OK/INFO - 1056020 - Database AV_Asig1.AV_DB created.
MaxL Shell completed
D:\Ess>
I am looking forward to inputs from anybody.
Thanks & Regards,
Deepthi.

Beyond that thread, I gave a presentation at Kaleidoscope last year around MaxL that goes into quite a bit of depth re encryption and a whole bunch of other MaxL goodies.
To download it, go to www.odtug.com, click on Tech Resources, Essbase/Hyperion, and use the search box for MaxL.
There are two presentations, one by Tracy McMullen and the other by me. Tracy's is a good introduction to the various command groups; my presentation focused on a few areas in depth, one of which was encryption. The title is "Master Essbase with MaxL Automation".
You will need to join ODTUG to download the presentation, but there is a junior membership that is free.
Regards,
Cameron Lackpour
P.S. ODTUG Kaleidoscope 2010 is coming up in two weeks, starting on 27 June 2010 -- for those of you still on the fence, it is an awesome conference and I urge you all to come. The content this year will be fantastic.

Using Encrypter password in Hyperion Scripts

Hi Gurus,
I want to use encrypted password sin the Hyperion scripts.
We are using automated jobs which run cube refrshes, exports and various other operations but the problem is that these scripts use admin password.
So if we view the script the password is also visible, so need to use encrypted password.
i know we have openssh, crypt kinf of function for encrypting the passowrd, but i am not sure if the maxl will recognice the encrypted passowrd.
Also if i encrypt a password will that cause any problem in the shared services ?
Awaiting response
Thanks in Advance ,

If you are using Maxl then you can encrypt the scripts, for an example have a read of Encrypting passowrd in maxl
Cheers
John
http://john-goodwin.blogspot.com/

Error handling from MAXL into a batch file

Hello all
I need to know how do we pass a value to a batch file from MAXL script if an error occurs.
I have used the following in my MAXL to catch an error.
========================
login username password on server01;
Iferror 'error';
Define Label 'error';
Exit;
=======================
In the batch file I used:
If %errorlevel% NEQ 0 goto catch
:catch
echo an error occurred during MAXL script
Exit
========================
This doesnt give me any error even the login info is wrong in the MAXL script
Please correct if this is wrong and provide any help if possible
Thanks in advance

Here's the error checking code I used in my last not-DOS-but-we-call-it-that script:
REM Call MaxL script with parameters
REM The 2>&1 at the end of the below line merges CMD's STDERR into STDOUT
%hyperion_home%\products\essbase\essbaseclient\bin\essmsh.exe %batAutomation%\%esbAppName%\MaxL\%mshScriptName%.msh %esbUsername% %esbPassword% %esbServer% %esbAppName% %mshScriptName% %batDrive% %batAutomation% >>%log% 2>&1
REM Test for MaxL execution errors
IF NOT %ERRORLEVEL% == 0 (SET errormsg=Error! - MaxL script %mshScriptName%.msh failed with ERRORLEVEL %ERRORLEVEL% & GOTO ERROR)The 2>&1 command at the end of the MaxL script line merges STDOUT and STDERR into an overall log file I used for other processes as well as MaxL. It's great for that purpose, but unfortunately logs the username and password -- this would be overcome by encrypting those values. It was acceptable for the solution so I didn't lose any sleep over it.
Regards,
Cameron Lackpour

Maxl within Windows Batch File

Hello,
I am trying to schedule an Automatic Essbase Archiving command . Function is to Disable connects , Archive , Unarchive and Enable connects . I know the Maxl commands which perform this action but just wanted to make sure how to portray this within a Windows Batch file.
Within the Batch file , abc.bat can I insert those commands . To enter the shell we need essmsh command , but I didnt wanted to get into decrypting , encrypting the ID etc to do that . So is there a way to get it done within the Windows batch file ?
Thanks !!

Yes its Straight forward case ,create a batch file which call the maxl script.The batch file should contain the user id and password of Essbase and the maxl script should contain the parameters of Essbase archiving
The content of batch file for Essbase archiving process
echo off
set ESSUSER=admin
Set ESSPWD=Password
set ESSSERVER=localhost
set ESSAPP=Sample
set ESSDB=Basic
SET ESSBASE SERVER PATH=D:\Hyperion\Middleware\EPMSystem11R1\products\Essbase\EssbaseServer
set MaxlScript=D:\Hyperion\Middleware\user_projects\epmsystem1\Essbaseserver\essbaseserver1\bin
essmsh "D:\Archieve.mxl" %ESSUSER% %ESSPWD% %ESSSERVER%
===================================================================================================
Maxlscript Content for Archieving
spool on to "D:/bck.log";
set timestamp on;
login $ESSUSER $ESSPWD on $ESSSERVER;
display session all;
alter system kill request all;
alter system logout session all force;
export database $essApp.$essDB all data to server data_file 'd:\alldata.txt';
alter database $essApp.$essDB force archive to file "D:/sample.arc";
alter database $essApp.$essDB end archive;
spool off;
logout;
exit;
Similarly can you create batch files for Cube restoration .I hope the above example helps you
Thanks,
Sreekumar Hariharan

Is encrypted user name and password specific to a user name/password

If I run the essmsh -gk to get the public and private encrypted user name and password, is that resulting encryption specific to my user name and password? My user name and password is set to expire, just curious if the encrypted user name and password is still valid after my username/password expiration
Thanks

yes it is specific to the username and password, so if the password changes then you will get an invalid login credentials error message when you run the maxl script.
Cheers
John
http://john-goodwin.blogspot.com/

Using $ sign on MaxL scripts

Hi all,
How does using $ sign on MaxL scripts work? I have seen scripts that $ sign was used instead of username, password, server name, etc. What are the advantages of using it and how can it be set up?
Thanks in advance.
A

$ are used to denote variables and to be pedantic about it, encrypted usernames and passwords which I guess are used sort of like variables.
I use them all the time unless the MaxL script is super quick, dirty, and disposable. And they never end up being disposed of.
Check out this part of the Tech Ref for all you ever wanted to know about variables in MaxL:
http://download.oracle.com/docs/cd/E17236_01/epm.1112/esb_tech_ref/maxl_syntax_vars.html
If you want to get a different take on them, check out ODTUG's Resource Center and my presentation from 2009 to get a feel for how they can be used in scripting. My blog also has a post from 2009 on how to use variables under the "Fixing Planning's Filters" topic.
Regards,
Cameron Lackpour

Error running Maxl and ESSMSH Commads

Hello,
I had recently installed EAS Client while my system was getting changed from a previous one . Firstly , I was unable to enter the Maxl with essmsh command , so i had started going to the directory where startmaxl.cmd site and from there when I run it i get into Maxl shell . i was curious on how to fix this. But the main concern now is , i am trying to encrypt few passwords and while i run essmsh -gk from Maxl shell , the key is not getting recognized . Previously , before re installing EAS i had no issues on this at all . Any comments or suggestion ?
Thanks !!

I am able to run maxl commands , not a problem with that . However my main issue now si teh decryption , we can try working the other way for now . Because the maxl issue is in my local machine , i went to essbase server directly and started this encryption process.
This what it looks like :
login $key AAAAAAAAA (ADMIN ID) $key BBBBBBBBBB (PASSWORD) on Essbase Server ;
import database 'App'.DB' dimensions
connect as $key XXXXXXXXXXXXXXXXXXXX identified by $key YYYYYYYYYYY using server rules_file 'A',
connect as $key XXXXXXXXXXXXXXXXXXXX identified by $key YYYYYYYYYYY using server rules_file 'B',
connect as $key XXXXXXXXXXXXXXXXXXXX identified by $key YYYYYYYYYYY using server rules_file 'C'
on error write to "A\\File.err";
X is the database log in ID and Y is its password which was recently changed and this script was working till then .
I followed the regular encryption process , I had to Just change the encryption keys of X and Y , the proxy ID and password are still the same . SO , i created a .simple text txt file ;
login db ID db Password,
From cmd , ran essmsh -E File name publick key
I got encrypted ID and password .
When i implemented them on the above script , the script failed to execute in the db login stage as:
ERROR - 1021001 - Failed to Establish Connection With SQL Database Server. See log for more information. (The log just gives the same info , SQL Login failed )
ERROR - 1241101 - Unexpected Essbase error 1021001.

Maxl encryption

Similar Messages

Maybe you are looking for