Neet to locate the shared services native users in SQL server tables

Hi All,
We are using Hyperion Shared services to provision users to essbase, planning and HFM(all version 9.3.1). And we are using SQL server 2000 as the database. We created few native users in shared services and provisioned them to HFM, Essbase and Planning. Now we need to find those native users' information in the underlying SQL tables. I followed the documentation and sync-ed the native to relational tables using shared services, but I cannot see the user info for all the users I have created. I would appreciate if you can suggest me how to find the shared services users' and roles information in SQL tables (in the back end).
Legards,
Leo

Hi,
There are a number of free Ldap browsers that you can download, e.g.
http://www.mcs.anl.gov/~gawor/ldap/demo.html
http://www.ldapbrowser.com/download.htm
Once you have installed then ldap browser you just need to point it to your Openldap
Host :- machine with OpenLdap running
Port :- 58089
Base :- dc=css,dc=hyperion,dc=com
User DN :- CN=root,dc=css,dc=hyperion,dc=com
And just the root password which you can change in HSS in 9.3
Cheers
John
http://john-goodwin.blogspot.com/

Similar Messages

Converting Shared Services (Native) users to MSAD

Hi All,
We are on version 9.3.1.
We have configured FDM with Shared Services and currently only use native users. This means that our FDM users are all authenticated via HSS.
We are just about to configure an MSAD directory and convert native users to MSAD.
We will also be configuring FDM with the same MSAD server.
Does anyone know how FDM handles user migrations? Will FDM automatically pick up MSAD users once they are deleted from the native directory and converted to MSAD?
Are there any additional steps we need to be aware of??
Thanks for your help.
Seb

Hi,
Im ok with the config but Im wondering if FDM will be clever enough to convert native users to MSAD.
Say we have a HSS user called Test1 with a password of Password (the Use Target System field is checked when creating the user in FDM). This user is authenticated against Shared Services when logging on to FDM.
During the conversation, native users will be deprovisioned and deleted from Shared Services and their provisioning info will be imported against the MSAD provider. At this stage FDM should not be impacted since FDM security is separate from HSS.
Once I configure the MSAD provider in FDM, my Test1 user will have a password of say Feb2010.
Will FDM automatically pick up these config changes? Will FDM security for this user remain unaffected?
Thanks again for your help.
Seb

Native Abap and SQL server table

Hi,
i am new to this topic:
can you please write me about:
how to connect to sql database(to insert-update-delete) records to sql table from sap side(specifially i will insert data into sql table).
Where can i start to code such a thing?
What kind of info shoul i get from basis team(sql server's ip or what) and how to use this data(for example to connect to sql and insert a record for testing purposes)?
please write me detailly and if possible a code sample.
Note: sap application is installed on db6(windows).
Thanks.
Edited by: sapsdn2011 on Jul 27, 2011 3:12 PM

Hi,
the starting point how to access a secondary database is provided here: http://help.sap.com/abapdocu_70/en/ABENOPENSQL_MULTICONNECT.htm
Feel free to revert back if you have any more specific question.
BR
Sandra

CSSimport.bat error: while migrating the Shared Services groups and users

Hi,
I am trying to migrate the shared services native users and group from 9.3.1(on server A) to 11.1.1.3(on server B)
- I have taken the export in CSV format from 9.3.1 using CSSexport.bat.(export.csv) -Successful.
- I have copied this on the 11.1.1.3 server and changed lil details like removing the admin user etc.
- When I am trying the import this on 11.1.1.3, I am getting the below error:
CSSimport importexport.properties2010-10-11 09:36:41,328 Attempting a import operation
log4j:WARN No appenders could be found for logger (com.hyperion.css.common.CSSLogger).
log4j:WARN Please initialize the log4j system properly.
null
Aborting program...
- There are not log or error files geting generated - The only error recieved , is given above.
- I have made the necessary changes to the impotexport.properties file on 11.1.1.3 before starting the CSSimport utility.
Can you please let meknow what should I do to overcome this error.
-thanks,
Ankit

First thing I would try would be on the 11.1.1.3, try and run an export, if it works then run the import on the same file, this way you will make sure you have the version 11 utility working.
Once you have done that then you can move on to the 9.3.1 export file.
Cheers
John
http://john-goodwin.blogspot.com/

Shared Services Console - User is not authorized for the action

Hi,
I have installed Essbase 11.11.3 and configured on Linux. I started EPM and then the Shared Services Console. I created a new group Poweruser and assigned a new user to it. I provisioned the group withall the rights of the admin. This all works.
When I log on with the new user on the Shared Service Console and go to Essbase Studio Server and click on the Essbase Studio Server application it gives me the message:
User is not authorized for the action
This is the same message as I get under the user admin. Can anyone tell me what I can possibly do to make it work.
The service for EAS is started properly. The one thing that is not configured is HBR.
Patrick

Hi,
What are you trying to achieve, provision a user for essbase studio ?
EAS is a separate product from Studio.
Cheers
John
http://john-goodwin.blogspot.com/

Where is the Shared Services user security stored?

On Hyperion Planning 9.3. I can view the security of my users/groups via the report in Shared Services, yet I would like to put the output in Excel and there is no option other than Print/Print Preview.
which repository database contains the Shared Services security?
Thanks
JTS

Hi,
If you are talking about the security to members, forms then this is held in the planning application database.
If it is provisioning of the application then it is a combination of the Shared Services database and OpenLdap database. (not so easy just to create a report on the provisioning by looking at the database)
Cheers
John
http://john-goodwin.blogspot.com/

What determines the location of the shared services log files

I've just completed an install and configuration of Shared Services 9.2.1. The shared services log files, SharedServices_Security.log, SharedServices_Admin.log, etc., are being written to the C:\WINDOWS\system32\null\logs\SharedServices9 path. These files should be written to the Tomcat application folders in the Shared Services home, CSS_HOME, folder. e.g. d:\hyperion\sharedservices\9.2\appserver\installedapps\tomcat\5.0.28. This is according to the Shared Services installation documentation.
Is there any way to get these log files written to the d: drive? The following references sharedservices.logdir from the hsslogger.properties file but I don't see where a value is set that I can change.
log4j.appender.FILE.File=${sharedservices.logdir}${file.separator}SharedServices_Security.log
Thanks,
Tom

Hi there!
Are you looking for the AOM log file?
By default it´s located at:
SIEBEL_ROOT\ENTERPRISE\SIEBEL_SERVER\log
If you can´t find the AOM log files here, try to check the "Log directory" server parameter value.
Best regards,
João Paulo

Essbase Product Existence Check Fails against the Shared Services Server

Hello Everyone,
I am a new to Essbase
When I am launching the EAS web console and trying to log in, its giving me an error saying "Could not connect to Administration Server".
I looked in ESSBASE log file its showing an error 1051429 : "Essbase Product Existence Check Fails against the Shared Services Server with Error []"
This error actually started when I copied an Essbase Application from one of my computers to another computer. All I simply did is copied the application folder into "app" folder. I am not sure if migration
is possible just by copying and pasting the application folders. I am not sure if doing this messed up security with shared services. Also under c:\hyperion\essbase folder I see another text file named "SharedServices_Security_Client".
Its log for today is below:
2011-11-03 19:36:15,375 INFO [main] CSS is initialized as client. The default logger properties will be loaded com.hyperion.css.CSSSystem.<init>(Unknown Source)
2011-11-03 19:36:15,531 INFO [main] CSS Log file will be generated at C:\Hyperion\logs\essbase\SharedServices_Security_Client.log com.hyperion.css.CSSSystem.<init>(Unknown Source)
2011-11-03 19:36:15,531 INFO [main] Configure CSS with registry com.hyperion.css.CSSSystem.initCSSSystem(Unknown Source)
2011-11-03 19:36:15,531 INFO [main] Initializing CSS from Registry. com.hyperion.css.common.configuration.CSSConfigurationManager.getConfiguration(Unknown Source)
2011-11-03 19:36:18,531 INFO [main] Trying to get Registry Instance com.hyperion.css.registry.RegistryManager.<init>(Unknown Source)
2011-11-03 19:36:45,531 ERROR [main] 20:1092:Failed to initialize EPM System registry. [Root Cause: hyperion.jdbc.base.BaseSQLException: [Hyperion][SQLServer JDBC Driver]Error establishing socket to host and port: chandan:1433. Reason: Connection refused: connect ] com.hyperion.css.registry.RegistryManager.<init>(Unknown Source)
2011-11-03 19:36:45,531 ERROR [main] Arguments: param1={}, param2=null, param3=C:\Hyperion\logs\essbase\, com.hyperion.css.CSSSystem.initCSSSystem(Unknown Source)
2011-11-03 19:36:45,531 INFO [main] CSS system intialization failed. : [44156 ms] com.hyperion.css.CSSSystem.initCSSSystem(Unknown Source)
2011-11-03 19:44:14,765 INFO [main] CSS is initialized as client. The default logger properties will be loaded com.hyperion.css.CSSSystem.<init>(Unknown Source)
2011-11-03 19:44:14,781 INFO [main] CSS Log file will be generated at C:\Hyperion\logs\essbase\SharedServices_Security_Client.log com.hyperion.css.CSSSystem.<init>(Unknown Source)
2011-11-03 19:44:14,781 INFO [main] Configure CSS with registry com.hyperion.css.CSSSystem.initCSSSystem(Unknown Source)
2011-11-03 19:44:14,781 INFO [main] Initializing CSS from Registry. com.hyperion.css.common.configuration.CSSConfigurationManager.getConfiguration(Unknown Source)
2011-11-03 19:44:14,828 INFO [main] Trying to get Registry Instance com.hyperion.css.registry.RegistryManager.<init>(Unknown Source)
2011-11-03 19:44:16,265 INFO [main] Got Registry Instance com.hyperion.css.registry.RegistryManager.<init>(Unknown Source)
2011-11-03 19:44:16,796 INFO [main] Got hub location from Registry:http://chandan:28080 com.hyperion.css.registry.RegistryManager.getHubLocationFromRegistry(Unknown Source)
2011-11-03 19:44:16,953 INFO [main] Got native directory location from Registry:chandan:28089 com.hyperion.css.registry.RegistryManager.getNativeProviderLocationFromRegistry(Unknown Source)
2011-11-03 19:44:16,953 INFO [main] URL constructed out of values in Registry database:ldap://chandan:28089/dc=css,dc=hyperion,dc=com com.hyperion.css.common.configuration.CSSConfigurationImplXML.initConfiguration(Unknown Source)
2011-11-03 20:02:47,687 INFO [main] CSS is initialized as client. The default logger properties will be loaded com.hyperion.css.CSSSystem.<init>(Unknown Source)
2011-11-03 20:02:47,859 INFO [main] CSS Log file will be generated at C:\Hyperion\logs\essbase\SharedServices_Security_Client.log com.hyperion.css.CSSSystem.<init>(Unknown Source)
2011-11-03 20:02:47,859 INFO [main] Configure CSS with registry com.hyperion.css.CSSSystem.initCSSSystem(Unknown Source)
2011-11-03 20:02:47,859 INFO [main] Initializing CSS from Registry. com.hyperion.css.common.configuration.CSSConfigurationManager.getConfiguration(Unknown Source)
2011-11-03 20:02:48,328 INFO [main] Trying to get Registry Instance com.hyperion.css.registry.RegistryManager.<init>(Unknown Source)
2011-11-03 20:03:08,921 ERROR [main] 20:1092:Failed to initialize EPM System registry. [Root Cause: hyperion.jdbc.base.BaseSQLException: [Hyperion][SQLServer JDBC Driver]Error establishing socket to host and port: chandan:1433. Reason: Connection refused: connect ] com.hyperion.css.registry.RegistryManager.<init>(Unknown Source)
2011-11-03 20:03:08,921 ERROR [main] Arguments: param1={}, param2=null, param3=C:\Hyperion\logs\essbase\, com.hyperion.css.CSSSystem.initCSSSystem(Unknown Source)
2011-11-03 20:03:08,921 INFO [main] CSS system intialization failed. : [63140 ms] com.hyperion.css.CSSSystem.initCSSSystem(Unknown Source)
2011-11-03 20:05:37,343 INFO [main] CSS is initialized as client. The default logger properties will be loaded com.hyperion.css.CSSSystem.<init>(Unknown Source)
2011-11-03 20:05:37,343 INFO [main] CSS Log file will be generated at C:\Hyperion\logs\essbase\SharedServices_Security_Client.log com.hyperion.css.CSSSystem.<init>(Unknown Source)
2011-11-03 20:05:37,343 INFO [main] Configure CSS with registry com.hyperion.css.CSSSystem.initCSSSystem(Unknown Source)
2011-11-03 20:05:37,343 INFO [main] Initializing CSS from Registry. com.hyperion.css.common.configuration.CSSConfigurationManager.getConfiguration(Unknown Source)
2011-11-03 20:05:37,390 INFO [main] Trying to get Registry Instance com.hyperion.css.registry.RegistryManager.<init>(Unknown Source)
2011-11-03 20:05:49,875 ERROR [main] 20:1092:Failed to initialize EPM System registry. [Root Cause: hyperion.jdbc.base.BaseSQLException: [Hyperion][SQLServer JDBC Driver]Error establishing socket to host and port: chandan:1433. Reason: Connection refused: connect ] com.hyperion.css.registry.RegistryManager.<init>(Unknown Source)
2011-11-03 20:05:49,875 ERROR [main] Arguments: param1={}, param2=null, param3=C:\Hyperion\logs\essbase\, com.hyperion.css.CSSSystem.initCSSSystem(Unknown Source)
2011-11-03 20:05:49,875 INFO [main] CSS system intialization failed. : [12625 ms] com.hyperion.css.CSSSystem.initCSSSystem(Unknown Source)
2011-11-03 20:06:42,859 INFO [main] CSS is initialized as client. The default logger properties will be loaded com.hyperion.css.CSSSystem.<init>(Unknown Source)
2011-11-03 20:06:42,859 INFO [main] CSS Log file will be generated at C:\Hyperion\logs\essbase\SharedServices_Security_Client.log com.hyperion.css.CSSSystem.<init>(Unknown Source)
2011-11-03 20:06:42,859 INFO [main] Configure CSS with registry com.hyperion.css.CSSSystem.initCSSSystem(Unknown Source)
2011-11-03 20:06:42,859 INFO [main] Initializing CSS from Registry. com.hyperion.css.common.configuration.CSSConfigurationManager.getConfiguration(Unknown Source)
2011-11-03 20:06:42,890 INFO [main] Trying to get Registry Instance com.hyperion.css.registry.RegistryManager.<init>(Unknown Source)
2011-11-03 20:06:45,359 INFO [main] Got Registry Instance com.hyperion.css.registry.RegistryManager.<init>(Unknown Source)
2011-11-03 20:06:47,218 INFO [main] Got hub location from Registry:http://chandan:28080 com.hyperion.css.registry.RegistryManager.getHubLocationFromRegistry(Unknown Source)
2011-11-03 20:06:48,250 INFO [main] Got native directory location from Registry:chandan:28089 com.hyperion.css.registry.RegistryManager.getNativeProviderLocationFromRegistry(Unknown Source)
2011-11-03 20:06:48,265 INFO [main] URL constructed out of values in Registry database:ldap://chandan:28089/dc=css,dc=hyperion,dc=com com.hyperion.css.common.configuration.CSSConfigurationImplXML.initConfiguration(Unknown Source)
2011-11-03 20:07:17,359 ERROR [main] 80:6007:Failed to load SAP certificate from keystore at SAP.keystore. Ignore if SAP provider is not configured.[Root Cause: Invalid keystore format ] com.hyperion.css.SAPSecurity.loadSAPCertificate(Unknown Source)
2011-11-03 20:10:12,937 INFO [main] CSS is initialized as client. The default logger properties will be loaded com.hyperion.css.CSSSystem.<init>(Unknown Source)
2011-11-03 20:10:12,937 INFO [main] CSS Log file will be generated at C:\Hyperion\logs\essbase\SharedServices_Security_Client.log com.hyperion.css.CSSSystem.<init>(Unknown Source)
2011-11-03 20:10:12,937 INFO [main] Configure CSS with registry com.hyperion.css.CSSSystem.initCSSSystem(Unknown Source)
2011-11-03 20:10:12,937 INFO [main] Initializing CSS from Registry. com.hyperion.css.common.configuration.CSSConfigurationManager.getConfiguration(Unknown Source)
2011-11-03 20:10:13,000 INFO [main] Trying to get Registry Instance com.hyperion.css.registry.RegistryManager.<init>(Unknown Source)
2011-11-03 20:10:14,265 INFO [main] Got Registry Instance com.hyperion.css.registry.RegistryManager.<init>(Unknown Source)
2011-11-03 20:10:14,671 INFO [main] Got hub location from Registry:http://chandan:28080 com.hyperion.css.registry.RegistryManager.getHubLocationFromRegistry(Unknown Source)
2011-11-03 20:10:14,812 INFO [main] Got native directory location from Registry:chandan:28089 com.hyperion.css.registry.RegistryManager.getNativeProviderLocationFromRegistry(Unknown Source)
2011-11-03 20:10:14,812 INFO [main] URL constructed out of values in Registry database:ldap://chandan:28089/dc=css,dc=hyperion,dc=com com.hyperion.css.common.configuration.CSSConfigurationImplXML.initConfiguration(Unknown Source)
2011-11-03 20:10:15,234 ERROR [main] 80:6007:Failed to load SAP certificate from keystore at SAP.keystore. Ignore if SAP provider is not configured.[Root Cause: Invalid keystore format ] com.hyperion.css.SAPSecurity.loadSAPCertificate(Unknown Source)
I dont know how to resolve this.
Please Help
Thank you

From the log
Error establishing socket to host and port: chandan:1433. Reason: Connection refused: connect
The SQL server itself is not running or TCP/IP is disabled. That can be confirmed by runing netstat and see it is listed there.
Then run telnet chandan 1433 and see it can connect
To enable the TCP refer to this link
Re: error establishing socket to host and port: EPM11:1433

Hyperion Shared Services -- External user containers getting missed out .

Hi All ,
In my hyperion enviornment user authentication is done through native directory and also through External directories configured to LDAP - OIDM . Frequently the external containers are getting disappeared from the shared services console. But when i restart the services its getting back some time. Some times it take some time to reflect back. I dont understand why this is happening.Quick hep is appreciated.
Thanks,
roshi

It was network problem

How to Move the Shared Services Registry to a different SQL Server

I have an Essbase installation purely running Essbase and Financial Reporting/Web Analysis.
The Shared Services database is held in SQL Server 2005 on one hardware platform and I need to move it to an alternative hardware platform also running SQL 2005.
I thought it might be as easy as backing up from one server and restoring to the other and then running EPM System Configurator.
Firstly, when running configurator and selecting the Hyperion Foundation Configure Database option, on the 'Shared Services and Registry Database Configuration' screen the details of the original hardware are displayed, clicking 'Next' gets no response.
If I can resolve this first issue, how do I then re-point the database to the new server?
Any help would be appreciated.
Thanks.

Hi John
Took a look at the link thanks.
On point 3 it says to stop the original database. If you take the database offline, in configurator you don't then get the options in option 5!
In the dos command window for configurator I get 'Unknown Source' messages (either using current server or new).
configtool.log lists as follows. Does this point to anything?
Thanks.
(Sep 15, 2011, 03:26:47 PM), com.hyperion.hit.wizard.swing.ComboFieldSwingImpl, DEBUG, In ComboFieldSwingImpl.fieldChanged() method:,fld items: [Oracle, Microsoft SQL Server, IBM DB2], value: 1, selected idx: 1
(Sep 15, 2011, 03:26:50 PM), com.hyperion.config.wizard.impl.RegistryWizardState$1, DEBUG, validate
(Sep 15, 2011, 03:26:50 PM), com.hyperion.config.wizard.impl.RegistryWizardState, DEBUG, connect test
(Sep 15, 2011, 03:26:50 PM), com.hyperion.config.wizard.impl.RegistryWizardState, DEBUG, driver set
(Sep 15, 2011, 03:26:50 PM), com.hyperion.config.wizard.impl.RegistryWizardState, DEBUG, server= aeSQL02.xxxxxxx-xxxxxx.com
(Sep 15, 2011, 03:26:50 PM), com.hyperion.config.wizard.impl.RegistryWizardState, DEBUG, whiteSpace remove
(Sep 15, 2011, 03:26:50 PM), com.hyperion.config.wizard.impl.RegistryWizardState, DEBUG, begin test cycle
(Sep 15, 2011, 03:26:50 PM), com.hyperion.config.wizard.impl.RegistryWizardState, DEBUG, define driver
(Sep 15, 2011, 03:26:50 PM), com.hyperion.config.wizard.impl.RegistryWizardState, DEBUG, make connection
(Sep 15, 2011, 03:26:50 PM), com.hyperion.config.wizard.impl.RegistryWizardState, DEBUG, set URL
(Sep 15, 2011, 03:26:50 PM), com.hyperion.config.wizard.impl.RegistryWizardState$1, DEBUG, connection is NOT null
(Sep 15, 2011, 03:26:50 PM), com.hyperion.config.wizard.impl.DBConnectionForm, DEBUG, DB type string = MSSQLServer
(Sep 15, 2011, 03:26:50 PM), com.hyperion.cis.config.Configurator, DEBUG, Loading DBConfigurator class for product: Foundation_1_9.5.0.0
(Sep 15, 2011, 03:26:51 PM), com.hyperion.cis.config.Configurator, ERROR, Error:
java.lang.reflect.InvocationTargetException
     at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
     at sun.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source)
     at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source)
     at java.lang.reflect.Constructor.newInstance(Unknown Source)
     at com.hyperion.cis.config.Configurator.loadProductDBConfigurators(Configurator.java:210)
     at com.hyperion.config.wizard.impl.RegistryWizardState$1.validate(RegistryWizardState.java:205)
     at com.hyperion.cis.config.wizard.adapter.WizardFormAdapterPanel.queryExit(WizardFormAdapterPanel.java:95)
     at com.installshield.wizard.awt.AWTWizardUI.doNext(Unknown Source)
     at com.installshield.wizard.awt.AWTWizardUI.actionPerformed(Unknown Source)
     at com.installshield.wizard.swing.SwingWizardUI.actionPerformed(SwingWizardUI.java:1693)
     at com.installshield.wizard.swing.SwingWizardUI$SwingNavigationController.notifyListeners(SwingWizardUI.java:1899)
     at com.installshield.wizard.swing.SwingWizardUI$SwingNavigationController.actionPerformed(SwingWizardUI.java:1894)
     at javax.swing.AbstractButton.fireActionPerformed(Unknown Source)
     at javax.swing.AbstractButton$Handler.actionPerformed(Unknown Source)
     at javax.swing.DefaultButtonModel.fireActionPerformed(Unknown Source)
     at javax.swing.DefaultButtonModel.setPressed(Unknown Source)
     at javax.swing.plaf.basic.BasicButtonListener.mouseReleased(Unknown Source)
     at java.awt.Component.processMouseEvent(Unknown Source)
     at javax.swing.JComponent.processMouseEvent(Unknown Source)
     at java.awt.Component.processEvent(Unknown Source)
     at java.awt.Container.processEvent(Unknown Source)
     at java.awt.Component.dispatchEventImpl(Unknown Source)
     at java.awt.Container.dispatchEventImpl(Unknown Source)
     at java.awt.Component.dispatchEvent(Unknown Source)
     at java.awt.LightweightDispatcher.retargetMouseEvent(Unknown Source)
     at java.awt.LightweightDispatcher.processMouseEvent(Unknown Source)
     at java.awt.LightweightDispatcher.dispatchEvent(Unknown Source)
     at java.awt.Container.dispatchEventImpl(Unknown Source)
     at java.awt.Window.dispatchEventImpl(Unknown Source)
     at java.awt.Component.dispatchEvent(Unknown Source)
     at java.awt.EventQueue.dispatchEvent(Unknown Source)
     at java.awt.EventDispatchThread.pumpOneEventForHierarchy(Unknown Source)
     at java.awt.EventDispatchThread.pumpEventsForHierarchy(Unknown Source)
     at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
     at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
     at java.awt.EventDispatchThread.run(Unknown Source)
Caused by: java.lang.NullPointerException
     at com.hyperion.foundation.config.FoundationDbConfigurator.isHubInstalled(FoundationDbConfigurator.java:133)
     at com.hyperion.foundation.config.FoundationDbConfigurator.<init>(FoundationDbConfigurator.java:38)
     ... 36 more

Essbase - Shared services security , User provison

Hi,
I am new to 11.1.1.2 Hyperion version.(worked on 9.3.1) I have some doubts on the user security in 11 version.
We have Distribution environment setup like Essbase on linux and remainng applications on windows 2003 server. Essbase is also registerd with shared services. Here are my questions.
1. If I change the Shared services Admin password (default password) will it effects any other applications?
*2. How to change essbase admin password (default password)?(from foreground we can change first time only)*
3. I am trying to login into EAS as well as essbase admin user but under essbase I am not able to create New User. The Create users option on security is disabled seems like already externalised. I am not able to get those users who are created in shared services evnthought using Refresh from Shared servcies+ option in essbase.
4. If I want to a user with only essbase applicatons provisioned what is the procedure.
Here i followed the procedure. Created xyz user in shared services and provisioned Only Demo applications. trying to loing EAS with xyz credentials login successfull and prompted for essbase credentials with server name , username (Extername authentication) getting failed. If i provide admin password at essbase server leverl i am able to connect and see all applications.
Please help me on this...
Regards
PrakashV

Hi,
Is it the base install of 9.3.1 or is it a later version like 9.3.1.3
I know there have been a number of security issues being addressed since the base version.
e.g.
Security. Users are not de-provisioned properly, causing Essbase applications to remain accessible to
them. [7197541]
Cheers
John
http://john-goodwin.blogspot.com/

Change in the shared services settings

Hi,
Recently the host name changed and I had to reconfigure the MSAD configuration. I restarted the Shared services and then restarted planning. I subsequently ran the userprovision.cmd to synchronise the users with Planning.
But the users still can't seem to be able to logon using their ids.
Do I need to restart all the services again?
Regards,
Amol

Hi,
Did you run the provisionusers.cmd or updateusers.cmd
It will be the updateusers.cmd that should update the users in planning to be in line with shared services.
Cheers
John
http://john-goodwin.blogspot.com/

Swapping the DNS names - How does the Shared Services behaves

Hi Essbase God's
I have one more situation here. I have four hosts runing on VM ware.
1 # host - prod server whsoe security setup is provisioned by a prod shared service host
2 # host - Dr server whsoe security setup is provisioned by a dr shared service host
I will be sync'ng DR cubes on daily basis with Prod host . Say My Prod Host is down.
How wud shared services behave if i do the below.
1. Bring donw the prod shared services on Prod shared services box
2. modify the DNS name of the DR host to Prod host ( here Dr will now acts as prod)
3. Birng up the prod shared services on Prod shared services box
I may be sounding dumb.
will i be abel to connect to prod host ( in real this is DR) and ask user to do activities.
Pls advice
MS

Hi,
You don't need the desktop. You can log in directly from the laptop to the remote desktop services server. This is a lot easier to manage, since there is only 1 place to manage instead of multiple. Of course, you will want to provide a couple of servers
because if you have 1 server and it goes down, you have nothing.
Visual studio is licensed per user. Yes, you can install it on the RDP server and all users could use it if they are part of the correct groups. But from a licensing point of view, you would be non compliant. It would be us to you to manage the users and
make sure that there are enough licenses for all users.
How, and if this applies to other programs depends on the licensing terms of those programs. Some software is per user. Some is per concurrent user, and some is per computer. You have to check this for each program you want to install on the computer.

Error while starting the shared service server

Hi john,
I am getting the following error while starting the shared service server.
*25 Jul 2009 10:26:39 - org.apache.slide.common.Domain - ERROR - Unable to migrate hub groups to css*
So shared service console is not starting.
Please tell me the solution for it.
Thanks
Edited by: user11358816 on Jul 24, 2009 10:06 PM
Edited by: user11358816 on Jul 24, 2009 10:09 PM

Hi John,
Yes,It was working earlier.
When I have added NTLM authentication for FDM I am getting that error,but instead of that if
I am adding the authentication provider as LDAP(CSS) I am not getting that error.
So finally i have added only one authentication provider and that is LDAP(CSS).
I fallowed ur document for integrating the FDM application with planning application.(http://john-goodwin.blogspot.com/2008/07/planning-v11-drill-back.html )
For the global logon information I have given admin and password , which I have given while adding the LDAP authentication (CSS).
I am getting machine profile missing error when i clicked on the dimension and the target dimension test box contain connection failed.
Can u suggest me where am I wrong?
Thanks
Edited by: user11358816 on Jul 26, 2009 9:42 PM

Urgent: Load balance the shared services server

Hello Experts,
One of my customer would like to know that is there a way to load balance the shared services server i.e., Register one essbase server with more than one Shared services server, so that if one shared services fails the other can authenticate the logins for the essbase server.
Also, referred the following weblink for 11x, Table 3. EPM System High Availability and Load Balancing Matrix
http://download.oracle.com/docs/cd/E12825_01/epm.111/epm_high_avail_11111/frameset.htm?ch01s04.html
Do we have any docs for version 9x?
Environment:
Essbase 9.3.1.3.00
OS : IBM AIX on POWER Systems (64-bit) 5.3
Any suggestions would be of great help. Thanks in advance.
Regards,
Sonal

I would not attempt any changes until 9.3.1 service fix #16 is released.
Oracle is back-porting clusterware support to with service fix # 16.
HSS 9.3.1sf 16 "active passive failover cluster with Oracle Clusterware 11g, for hss web app and openldap"
Based on the Oracle escalated support resources I have been in touch with solutions are not supported. Please realize this is not load-balancing and is fail-over support only.
To my knowledge there is not a "active-active" 9.3.1 Shared Services that is supported by Oracle.
You can read more about an active-passive fail-over at: http://www.oracle.com/technology/products/bi/pdf/epm-hss-high-avail-windows-whitepaper.pdf
They are supposed to release a 9.3.1 white paper once service fix #16 is fully released and has been client tested.
Regards,
John

Neet to locate the shared services native users in SQL server tables

Similar Messages

Maybe you are looking for