OBIEE authentication
Hi All,
we are planning to implement external database authentication in OBIEE. Can we use OBIEE database(warehouse) for external database authentication.
Thanks,
Raji
Hi,
You mean Data warehouse which is having your facts and dimensions?
If so you can use it,but give encrypted passwords.
Follow this of externaltable authentication : http://bintelligencegroup.wordpress.com/2010/09/23/external-table-authentication/
For password encryption : http://varanasisaichand.blogspot.com/2010/10/external-table-authentication-encrypted.html
Regards,
Srikanth
Similar Messages
-
How to integration obiee Authentication with external app?
now i need integrate obiee with external app(web application).
one user have 2 roles. one is teacher, others is school admin.
when he login in external app, the first screen show teacher and school amdin. he click teacher login in this system.
after user login in . system set the role into session.
then he want to see obiee dashboard in external app side.
in obiee side, i need do some resources control for this role.
but i how to get this role? i can get the two roles from LDAP server. but i need confirm user login in external app use which role?
i no idea for this .please help me.
Thank you very much.Hi,
Sounds like your OBIEE apps needs to be able to get the role from the session (I assume database session), which means OBIEE needs to be able to get the same session from the external app. Does the external app set a cookie or something that would identify the session? If so use that cookie in OBIEE to get the session? More than likely need more details of the architecture of you external application!
Regards,
Gareth -
User authentication when OBIEE is integrated with EBS
Hello guys
I have a conceptual question about how OBIEE authentication is performed in an integrated environment with EBS? If the goal is to have users access to OBIEE based on their roles given in EBS, what kind of authentication is it needed for such implementation?
Do I import users and group from EBS database or LDAP server (if its available)? what kind of session variable and ini block is created if I want to do data level secuirty based on user groups?
Please give some basic idea and guidelines on topic
Thank you very muchhi,
the final solution must face and fill your needs....
Bi suite has 3 ways of making-having user-groups...
1.manual
2.ldap
3.from external database
If the goal is to have users access to OBIEE based on their roles given in EBS, what kind of authentication is it needed for such implementation?
-->match the roles from EBS to your liked in OBIEE
check and this,
http://it.toolbox.com/blogs/eye-on-obi/oracle-bi-applications-obiee-security-integration-with-oracle-ebusiness-suite-17246
hope i helped....
http://greekoraclebi.blogspot.com/
/////////////////////////////////////// -
Re: OBIEE 10.1.3.4.1 integration with Hyperion shared services 11.1.1.3
I am working on OBIEE authentication using hyperion shared services. To achieve this I did the following steps,
1) Registered the shared services in Answers using 'Manage EPM workspace'
2)Modified config.xml to enable HSSauthenticator
3)Modified instanceconfig.xml by adding external auth tags
4)In rpd created a init block using custom authenticator.
When I login into Answers using a username and password from hyperion shared services, it is saying invalid username/password.
Log file says ' xxxxxx authentication failed in repository star, Odbc driver returned an error (SQLDriverConnectW)'
Can some one explain me if I am missing anything here?? Is there anyone who has successfully implemented this before.
Thanks,
SandeepSandeep,
I am fairly certain that this integration actually works in the other direction.
That is from the Oracle Hyperion Workspace portal you need to log in and once you are in Workspace from the file menu an option for "Oracle Interactive Dashboards" should be available if all is configured correctly with the integration. That link will open up OBIEE and take the user directly into the dashboards without having to get prompted by the OBIEE login screen.
If you have the BIC2Go image (Dan Vlamis' team, vlamis.com) for Oracle BI 10g you can see this integration's configuration and see it working correctly.
I hope that helps -
Need info on OBIEE webservice impersonate ()
Does impersonate() function in OBIEE WSDL work for all types of OBIEE authentication.
Please provide any docs related to impersonation().
I tried for RPD users and it works fine... But for other authentication i could not configure it....
Thanks,
BenHi ,
Check the below link
http://skzine.net/info/index.php?option=com_content&view=article&id=54:obiee-integration-with-websphere-portal&catid=28:websphere-portal&Itemid=41
Thanks,
Ananth -
Authentication with RSA SecurID
Hi,
Can we use RSA SecurID for OBIEE Authentication? if yes, Can recomend a blog or document?
Thanks,
Gustavo.Yes, you can. But you will have to develop a Custom Authenticator.
http://obiee101.blogspot.com/2009/03/obiee-custom-authenticators.html -
Configured for LDAP authenication , still giving odbc error.
Hi,
I have gone through several posts in forum.I did not find solution for my issue.
Here is what we have done
We are trying OBIEE authentication and authorization by LDAP (Nortell Directory Server).Here is what i did
-Impersonator User created and Credentials are added to Oracle BI Presentation Services Credential Store
We have following config in instanceconfig.xml
<Auth>
<SSO enabled="true">
<ParamList>
<!--IMPERSONATE param is used to get the authenticated user's
username and is required -->
<Param name="IMPERSONATE"
source="httpHeader"
nameInSource="Z-USERID"/>
</ParamList>
<LogoffUrl>http://IP/analytics/saw.dll?Logoff</LogoffUrl>
</SSO>
</Auth>
-Configured LDAP Server under Security Manager/LDAP Servers( set cn attribute in advanced tab for user name attribute).Tested connection It is successful.We are not importing users.
- In Variable manager created an intilization block named it 'Authentication' and mapped three System variables(USER,GROUP,WEBGROUPS) with LDAP atrributes( for groups and webgroups we provided an attribute under user DN). Tested by supplying a username and password it pulled the attribute values.
We log into a WebApplication and the webapplication redirect the request to along with header Z-USERID.
https://XXX.COM/analytics/saw.dll
Here is how it is working:
If supply username and password in two URL parameters nquser and nqpassword it works,i get Dasboard page and other links according to the configured groups in LDAP.
if i do not supply URL parameters nquser and nqpassword, i get "not logged in page."
the initblock that deals with authentication and autherization is working fine.
Single sign on is not working, it is reading the httpheader that we supply.I am not sure why it expecting password.
ssw Logs show following error
Odbc driver returned an error (SQLDriverConnectW).
State: 08004. Code: 10018. NQODBC SQL_STATE: 08004 nQSError: 10018 Access for the requested connection is refused.
nQSError: 43001 Authentication failed for loggedinIN_USERID in repository Star: invalid user/password. (08004)
I tried some of the suggestion on this site like change passwords to 8 characters of impersonator passphrase etc with no success.
It looks like it is trying databse authentication even though we configured initblock with LDAP settings.
Please help!.Hi
have you created an impersonate user in the Repository ??
Yes,added him to groups Administrator and XMLP_ADMIN
Can you open the url through firefox and look at the cookies ..,
Yes, I opened, When i get not logged in page, when i check cookies ,
i see following cookies
SAWISAPI
nquireID
sawP - Blank
sawU - loggedinUSERID
another two session based cookies.
open the saw.log in textpad and launch your sso link in Firefox
Search for the nquserID and check the values ...it will be encrypted but should be there !!
I searched both saw and server logs, i did not find "nquserID" String.ofcourse i see logged user's login ID in saw logs.
Also do you have load Balanced web servers .. if yes can you ask your web admin to enable sticky session ??
I checked with IChain admin, if the webapp is load balanced they would add sticky bit.But currently app is not in load balanced environment.
Thanks Sid, Please help me resolve this,
Thanks -
Hi,
I have gone through several posts in forum.I did not find solution for my issue.
Here is what we have done
We are trying OBIEE authentication and authorization by LDAP (Nortell Directory Server).Here is what i did
-Impersonator User created and Credentials are added to Oracle BI Presentation Services Credential Store
We have following config in instanceconfig.xml
<Auth>
<SSO enabled="true">
<ParamList>
<!--IMPERSONATE param is used to get the authenticated user's
username and is required -->
<Param name="IMPERSONATE"
source="httpHeader"
nameInSource="Z-USERID"/>
</ParamList>
<LogoffUrl>http://IP/analytics/saw.dll?Logoff</LogoffUrl>
</SSO>
</Auth>
-Configured LDAP Server under Security Manager/LDAP Servers( set cn attribute in advanced tab for user name attribute).Tested connection It is successful.We are not importing users.
- In Variable manager created an intilization block named it 'Authentication' and mapped three System variables(USER,GROUP,WEBGROUPS) with LDAP atrributes( for groups and webgroups we provided an attribute under user DN). Tested by supplying a username and password it pulled the attribute values.
We log into a WebApplication and the webapplication redirect the request to along with header Z-USERID.
https://XXX.COM/analytics/saw.dll
Here is how it is working:
If supply username and password in two URL parameters nquser and nqpassword it works,i get Dasboard page and other links according to the configured groups in LDAP.
if i do not supply URL parameters nquser and nqpassword, i get "not logged in page."
My initblock that deals with is working fine.
Single sign on is not working, it is not reading the httpheader that we supply.I am not sure why it expecting password.
ssw Logs show following error
Odbc driver returned an error (SQLDriverConnectW).
State: 08004. Code: 10018. [NQODBC] [SQL_STATE: 08004] [nQSError: 10018] Access for the requested connection is refused.
[nQSError: 43001] Authentication failed for loggedinIN_USERID in repository Star: invalid user/password. (08004)
I tried some of the suggestion on this site to change passwords to 8 characters of impersonator passphrase etc with no success.
I am not sure what else is missing ?
Edited by: user11234704 on Oct 30, 2009 7:58 AMSinece, when access the htpp://my.biserver.com:7777/analytics, IE did not redirect to the sso server login page, So i think there are some errors at the Apache/oc4j layer.
And I did not do the steps under "Provisioning for Oracle BI Using
Directory Integration Platform (DIP)" in chapter 10. Does this will affect the sso process?
Another question is what happed when I access the url : http://my.ssoserver.com:7777/pls/orasso/orasso.wwsso_app_admin.ls_login does a servlet match pls/orasso/orasso.wwsso_app_admin.ls_login will execute at sso server? what is the process that the servlet will do to implement the sso process? -
There is error 'No such file or directory' during loading custom authentica
Hi,
I am working on OBIEE authentication using Hyperion shared services. I did the necessary changes in config file, like modifying config.xml to enable HSSauthenticator and enabling external authentication to instanceconfig.xml. However BI Server is unable to load the driver file for the Hyperion custom authenticator. Here is the error message.
There is error 'No such file or directory' during loading custom authentication module '/opt/local/usr/home/Oracle/OracleBI/web/bin64/libsawobisauthenticatorproxy643r.so'.
2011-06-26 21:04:05
[nQSError: 13011] Query for Initialization Block 'Hyperion EPM' has failed.
I have set the env variable LD_LIBRARY_PATH to this path but still I am getting the same error msg. I also have full previleges on this file. Would be really great if anyone can tell me why I am unable to load this driver file on to server. Thanks in advanceI think I figured out. Instead of giving path thru bin64 , I gave it thru bin folder, which is a 32bit file. I think they installled a 32bit OBIEE.
-
Can anyone provide Error code list and causes for OBIEE10g/11g ?
Hi
Can anyone provide Error code list and causes for OBIEE10g/11g ?
Regards
Srini
Edited by: Srini on Feb 18, 2012 10:41 AMHi,
List of Bug Fixes Included In OBIEE 11.1.1.5.0
Admin Tool
•7538753 SAP BW IMPORT DOES NOT RETRIEVE UNIQUE NAME FOR MEASURE COLUMNS
•10012297 ADMIN TOOL CRASH ON VERY LARGE EXPRESSIONS – OVERFLOW AT APPROX 3200 CHARACTERS
•10032385 TABLE MISSING IN SQL “FROM” CLAUSE – FWD PORT 8308443 TO 11G
•10045212 EQUALITY EXPRESSION IN LTS “WHERE” CAUSES INTERNAL SQORRQLIST ERROR ON QUERY
•10264475 ADMINISTRATION’S “SHUTDOWN SERVER” MENU SHOULD BE REMOVED
•10265121 ADMIN TOOL EXPRESSION BUILDER CRASHES ON DOUBLE-BYTE LOGICAL COLUMN NAME
•10394725 ON-LINE MODE CHECK-IN OF DYNAMIC INIT BLOCK CAUSES [43058] REFRESH LOCK FAILURE
Answers
•6521146 ERROR: “NO FILTER” WHEN USING “COMBINE WITH SIMILAR REQUEST” – UNION
•7534635 INACTIVATING DRILLDOWN ON COLUMN VALUE ALSO INACTIVATES COLUMN HEADER LINK
•9026854 CLARIFICATION REGARDING DATA FORMAT WHEN COMBINING REQUESTS
•9107277 KEEP THE NUMBER PRECISION IN DATABASE WHEN “DOWNLOADING TO EXCEL”
•9524080 PIVOT TOTAL DIFFERENT TO TABLE TOTAL WHEN REPORTAGGREGATEENABLED TRUE
•9697529 JAPANESE CHARACTER SET NOT PASSED CORRECTLY TO DRILL REPORT IN FIREFOX BROWSER
•9871470 SORTING ON A NULL VALUED COLUMNS GIVES ASSERTION ERRORS
•9886904 CORRECT DOC FOR ADDING CUSTOM DATE FORMAT STRING
•9918283 CORRECT DASHBOARD FORMATTING PROBLEMS WITH SCROLLING
•9928318 ROW HEADER MISSING AT PIVOT TABLE VIEW FOR MIGRATED REPORTS IN 11G
•9968574 SOME UPGRADED 10G CHARTS SHOW UP JAVA EXCEPTION
•10023165 MAPS DO NOT WORK IN MAP VIEWS WHEN JOIN COLUMN CONTAINS A “&” CHARACTER
•10065166 GAUGE RANGE IS NOT UPDATED WHEN IT CHANGES THE FIELD VALUE
•10078041 ACTION LINK DOES NOT WORK WHEN COMPOUND LAYOUT ONLY HAS A MAP VIEW
•10091354 “SCALE MARKERS” OPTION IS MISSING IN VERTICAL AXIS 2
•10147762 CANNOT SET GAUGE FOOTER (TITLE), KEEPS SHOWING “UNDEFINEDUNDEFINEDUNDEFINED”
•10182955 BUBBLE CHART IS NOT BEHAVING AS EXPECTED
•10213761 CONDITIONAL DASHBOARD SECTIONS (GUIDED NAVIGATION) ALWAYS RUNS REPORTS
•10229397 CANNOT SAVE REQUEST USING STANDARD DATE FORMATS.
•10282140 CELL IMAGE AT BLANK CELL OF PIVOT TABLE IS NOT DISPLAYED WHEN USING COND FORMAT
•10296730 UNABLE TO USE PRESENTATION VARIABLE IN SCALE MARKERS
•10312496 CHARTS. MEASURE LABEL IN GRAPH PROMPTS DOES NOT CHANGE CONTENT OF THE CHART
•10312795 ACTION LINK ON COLUMN HEADING NAVIGATION DOES NOT CONSIDER PROMPT VALUES
•10329343 CLICKING A LINE GRAPH BETWEEN TWO DATA POINTS DRILLS TO LAST VALUE IN HORIZONTAL
•10337649 PIVOT TABLE SHOWS BUTTONS FOR SORTING ON CALCULATED ITEMS.
•10402102 INCORRECT RESULT WHEN USING [NEW CALCULATED ITEM] PROP IN PIVOT TABLE
•10414887 DRILL DOWNS NOT WORKING IN CHART PIVOTED TABLE SELECTED FROM VIEW SELECTOR
•10418875 CHART SIZE IS CHANGING AFTER WEBCAT UPGRADE FROM 10G
•10634175 GRAPH ENGINE IS NOT RESPONDING
•10639913 COMPLETE TEXT IS NOT SAVED IN DB IF CURSOR IS MOVED AWAY DURING INSERT
•11711658 FILTER NEEDS TO SUPPORT UNTYPE LITERAL FOR RANK OPERATOR AS 10G DOES
•11805468 CUSTOMIZED GAUGE VIEW IS NOT CONSISTENT WHEN EXPORTED AS PDF,HTML AND XLS
•11817696 INCORRECT FILTER IS BUILT IF FILTER IS CONTRUCTED BEFORE SELECTING REQ. COLUMNS
•11845286 PIVOT TABLE WITH PERCENTAGES, GRAPHED PERCENTAGE VALUES DISPLAYED ARE INCORRECT
•11894921 GRAPH LABEL OPTIONS NOT AVAILABLE IN 11G
•11895279 INCORRECT FILTER VALUE WHEN USING ACTION LINK WITH GRAPH
•12412666 ALL PAGES LOSES CONDITIONAL FORMATTING
•12561361 PSE FOR BASE BUG 10295403 ON TOP OF 11.1.1.5.0 FOR GENERIC OS
CHARTING
•8990756 MISLEADING INFORMATION IN DOC REGARDING PIVOT TABLE SETTINGS
DASHBOARDS
•7459700 ABILITY TO SPECIFY FIXED COLUMN WIDTH TO A DASHBOARD PROMPT
•10177865 OBIEE 11G : DEFAULT VALUES CANNOT BE DE-SELECTED FROM MULTI SELECT PROMPT
•10279722 DASHBOARD SLIDER PROMPT SHOWS THUMB VALUES WITH TWO DECIMAL PLACES FOR INTEGERS
•10279829 DASHBOARD SLIDER PROMPT SHOWS WRONG VALUES FOR “ALL COLUMN VALUES” OR “SPECIFIC
•10310511 “REQUIRE USER INPUT” MESSAGE APPEARS THE FIRST TIME ONLY FOR THE REQUIRED PROMPT
•10389799 DASHBOARD NAVIGATION MAY CAUSE GETELEMENTBYTAGNAME ERROR IN IE
•10411545 PROMPT WITH BETWEEN OPERATOR AND SQL DEFAULT VALUES ARE NOT UPGRADED PROPERLY
•11056057 ERROR WHILE UPGRADING THE DASHBOARD WITH CERTAIN FILTER FUNCTIONS
•11076452 ABILITY TO CONSTRAIN PROMPTS AGAINST A SLIDER PROMPT
•11717024 ERROR 500 OCCURS WHEN SETTING ACCESSIBILITY MODE TO ON
•12620143 PSE FOR BASE BUG 12561330 ON TOP OF 11.1.1.5.0 FOR LINUX X86 [46] (PSE #602152)
INSTALL
•9459177 PREREQUISITES FOR DEPLOYMENT ON SEPARATE MACHINES
•9540009 UNIXCHK.SH ENCOUNTERS HOST NOT FOUND ERROR WHEN DNS IS NOT AVAILABLE.
•10071302 ENTERPRISE INSTALL: CONFIGURE PORTS : FORMAT OF INI FILE
•10126542 OBIEE 11G INSTALATION FAILS AT AS INSTANCE CREATION DUE TO PERM SIZE ERROR
•10287335 CANNOT START BISERVER1 . SWITCH TO JSSE FRAMEWORK REQUIRED
•10302421 OBIEE 11G WINDOWS PROMPTS FOR USERNAME / PASSWORD AFTER ENCRYPTING CREDENTIALS
•11849674 SAG: DISCREPANCY IN DOCUMENTED ORACLE DATABASE REQUIRED FOR MAPVIEWER
MIGRATION
•7432799 ORACLE EUL CONVERTER CRASHED WHILE GENERATING A REPOSITORY
REL_NOTES
•12604761 TWO STEPS OF THE UPGRADE TO 11.1.1.5.0 ARE NOT CLEARLY DOCUMENTED
SCHEDULER
•10036466 “RE-RUN INSTANCE(S) NOW” MENU IS NOT AVAILABLE FOR COMPLETED JOB INSTANCES
SECURITY
•8996295 PROVIDE DETAIL INFORMATION TO SETUP WNA(KERBEROS) FOR OBIEE AUTHENTIFICATION
•9216995 PROVIDE LATEST DETAIL INFORMATION ABOUT HOW TO SETUP LDAP SSL FOR OBIEE
•10194154 TECHNOTES- PROVIDE DETAIL INFORMATION TO SETUP WNA(KERBEROS) FOR OBIEE AUTHENT
•10198837 BIEEHOME LOGIN PAGE IS NOT DISABLED EVEN AFTER ENABLING THE SSO
•10218031 USING EXTERNAL DB TABLE TO SET ROLES SESSION VARIABLE DOESN’T ACCEPT LONG NAMES
•10373788 IF OBJECTGUID PUBLISHED AND SAMACCOUNTNAME CHANGED USER CANNOT CONNECT ANYMORE
•11731080 QA:SECURITY GUIDE NEEDS UPDATE FOR DEFINING A USER SESSION VARIABLE
SERVER
•6510747 NETWORK FAILURE DURING PHYSICAL QUERY HANGS END USER WITHOUT ERROR MESSAGE
•6836444 OBIEE SERVER SYSTEM DATE IS WRONG AND DOES NOT MATCH MACHINE SYSTEM DATE
•8371912 BI SERVER CRASHES ON NAVIGATION SPACE MAP RACE – SR 3-887711721
•9433198 DOCUMENT SYSLOG ENTRIES IN SYSTEM ADMINISTRATOR’S GUIDE
•9696424 DOC INSTANCECONFIG PARMS ALLOWEDLANGUAGES & ALLOWEDLOCALES IN SYSADMIN GUIDE
•9954411 PSR:MOD_SUPPORTED NOT ENABLED FOR TERADATA AND CAUSES CAMPAIGN SLOW PERFORMANCE
•10258683 REQUEST WITH COMPLEX FILTER IS CONSUMING ALMOST ALL CPU & NO SESSION IS CREATED
•10258755 EXCEL FAILS TO CONNECT TO 11G BI SERVER USING ODBC DSN
•10335924 REPORT-BASED TOTALS FAIL ON MEASURES CONTAINING AGGREGATION EXPRS SUCH AS FILTER
•10374571 NEED FLEXIBILITY TO OVERRIDE HOSTNAMES WHEN CUSTOMER DNS IS INCORRECT OR BROKEN
•10650122 PIVOT VIEW WITH UNION OF NON – COMPATABLE TYPE ERROR IN OBIEE 11G AFTER UPGRADE
•11804596 NQQUERY LOG LEVEL 2 IS TOO VERBOSE – BACKPORT 10308263 TO 11.1.1.5
•11809295 NQUDMLGEN NOT GENERATING UDML FILE IN UTF FORMAT
UPGRADE
•9886765 ERRORS ENCOUNTERED WHEN UPGRADING WEB CATALOG USING UA.BAT
•10121344 ERROR IN LOG USING UA TO UPGRADE BI SCHEDULER SCHEMA ON SQL SERVER DATABASE
•11069928 UPGRADE SHOULD HANDLE PROMPT WITH INCONSISTENT VALUES AS 10G DOES
WEB_ADMIN
•8564456 SHARED FOLDER ACCESS PERMISSION ISSUE
•9381764 CATALOG MANAGER COPY FUNCTION NOT WORKING AS EXPECTED
•9739865 EXITING MANAGE SESSION RESULTS IN HTTP ERROR
•10016252 LACKING INFORMATION ON FORCEABSOLUTECOMMANDURL FOR ABSOLUTECOMMANDURLPREFIX
•10144989 WEB CATALOG DOES NOT UPGRADE TO 11.1.1.3.0
•10218524 VALIDATION ERROR AFTER THE UPGRADE OF WEBCATALOG TO OBIEE 11G
•11723425 INCORRECT DEFAULT VALUE OF DEFAULTROWSDISPLAYED IN THE INSTANCECONFIG.XML
•11827202 OPMN NOT STARTING AFTER SETTING UP THE REPLICATION AGENT
WEB_GNRL
•10191078 FILTER VALUES ARE RESET IN GO URL WHEN COLUMNS ARE SORTED OR RE-ARRANGED
•10360461 NEED ABILITY TO CONTROL NEW, DASHBOARD AND OTHER HEADER LINKS
•11780508 10G COLUMN FILTER PROMPT WITH PROMPTCAPTION ATTR NOT UPGRADING
•12416695 TOOLTIP EMPTY IN MAPVIEWER
WEB_INTGRT
•10294759 FMAP-REFERENCED IMAGES IN ANALYSIS HEADERS DON’T APPEAR IN DOWNLOADS TO EXCEL
WEB_MKTG
•8692820 DIRECT DATABASE CAMPAIGN LOAD FORMAT COMBINED LISTS FAILS
•9908019 SAW SERVER CRASH WHEN LOADING A PARTICULAR CAMPAIGN
•9935859 UNGROUP OF SEGMENT BLOCKS CORRUPTS SEGMENT DEFINTION AND BAD COUNTS
•10331355 MOVING CRITERIA WITHIN A SEGMENT’S GROUP CORRUPTS THE INCLUSION OPTIONS
Thanks,
RM -
Is it possible to use Custom Password Algorithm in SQLAuthenticator?
Dear All,
I need to use User table of my other application for OBIEE authentication.
I'm trying to use database tables as authentication provider in WebLogic.
But my password is using custom algorithm.
Similar like:
create or replace FUNCTION encpass
( p_username in varchar2, p_password in varchar2 ) return varchar2 is
begin
return ltrim( to_char( dbms_utility.get_hash_value(upper(p_username)||'##'||upper(p_password),
1000000000, power(2,30) ), rpad( 'X',29,'X')||'X' ) );
end digest;Is it possible to use custom algorithm on OBIEE authentication? If possible, how?
Thank you,
EbaI had same situation like this & just put a custom function at application side, to convert the password in same format what saved in database.
While my wls setting was SHA-1 & PLAIN PASSWORD. -
Problem with authentication in OBIEE
Hello, I have a problem with authentication in OBIEE.
A user who does not exist, enter the application and can enter but can not access almost anything, it is very rare because in addition webcatalog are created within the folder with your name and no one created it.
any ideas?I created SR and i solved the problem.
The problem wasn´t in weblogic. We migrated rpd 10g to 11g, I had define one initialization block session in RPD, when we disabled it, it´s running fine.
Oracle recomended work in weblogic in obiee 11g
best regards
Edited by: Benito Camelas on Sep 29, 2011 7:12 AM -
Dbms authentication in OBIEE 11.1.1.7.1
Hi all,
I have a problem with configuring dbms authentication in obiee 11.1.1.7.1. I followed the document below, and made all the steps.
Using Alternative Authentication Providers - 11g Release 1 (11.1.1)
Now, my problem is none of my dbms users can login to analytics. I can login using weblogic users, but when I try to search for any of the users from analytics, I get invalid GUID error. (I refreshed GUIDs, this is not related) According to debug steps my problem should be with adapters since I can login to em console with my db users after giving privilage, but I don't know what is wrong. Error from nqserver.log is below.
[tid: 152c] An error message was received from the BI Security Service: SecurityService::populateBIUserFromUserProfileUser XXXXXX has invalid guid 41414B494E4C49
[tid: 152c] An error message was received from the BI Security Service: SecurityService::populateBIUserFromUserProfileUser XXXXXX has invalid guid 41414B494E4C49 [[
[nQSError: 43113] Message returned from OBIS.
[tid: 152c] SecurityService::populateBIUserFromUserProfileUser XXXXXX has invalid guid 47434554494E4552
[tid: 152c] [nQSError: 43126] Authentication failed: invalid user/password.
[tid: 152c] SecurityService::populateBIUserFromUserProfileUser XXXXXX has invalid guid 47434554494E4552
[tid: 152c] [nQSError: 43126] Authentication failed: invalid user/password.
What do you think the problem could be? Any help would be appreciated.
Were anyone able to configure dbms authentication with 11.1.1.7.1 or 11.1.1.7?
Regards,
SethHi Seth,
I also facing the same issue in 7.0 and 7.1,
Have you resolved this issue?
if yes, please share me the solution.
thank you in advance. -
External Table Authentication in OBIEE 11g
Hi ,
I have a security table, which contains userid,displayname,group . I have imported Security table in Physical Layer. I'm creating session variables based on condition.
When am trying to logging into analytic s getting an error, invalid username and password . I'm using 11.1.1.6.0 version
How to handle external table authentication in OBIEE 11g version.
Regards,
MalliHi fiaz,
That links talks about 10g version.
Step1: We have imported a secutiry table in Physical layer.
Step2: Creating a session variable by selecting initilazation block.
Select user_name,group from security_table where user_id=':USER' and pwd=':password';
step3: created DISPLAYNAME,GROUP & USER VARIABLES in edit target window
After these modifications i was trying to logging with new user, which is there in security table.
I am getting an error that is invalid user or password.
Is there any other changes does it required here.
Regards,
Malli
Edited by: user10675696 on Dec 26, 2012 9:39 PM -
OBIEE 11g - Weblogic Authentication Denied
Hello All,
I did install OBIEE 11g 11.1.1.3.3 in my personal PC which has windows XP SP3 and I did choose "Enterprise Installation" as an option.
Before installing this I did install the Loop Back Adapter and also set the IP address in the Host file ( 10.10.10.10 Mycomputername mycompany.com).
Installation went through very much fine no errors at all. Analytics page was opened after the installation and When I gave the weblogic Credentials it was Unable to sign in.
When I tried to login to Weblogic Console it says "Authentication Denied".
Checked the services Weblogic Node manager started but Oracle Process Manager(instance1) did not start (1053 the service couldn't start in a timely fashion).
Then I tried to StartBIServices from Start-> Allprograms->Oracle Business Intelligence gave Weblogic Credentials .... 2 cmd prompts were opened and all services are started and also the anlaytics page was opened and gave the credentials again same error "Unable to sign in" and agin tried to login to weblogic the same error "Authentication Denied". This is really strange....
I thought this is something to do with rebooting the system after installation. So I restarted the system and started the services Weblogic Node Manager and Oracle Process Manager (instance1).
This time both of them were started.
Again tried to start the BI services Start-> Allprograms->Oracle Business Intelligence , gave the credentials ... this time only one cmd prompt was opened and it says weblogic authentication denied and its forcefully shut down and Other cmd prompt stopped at WLS.alive...
Here is the Detail Log from Adminserver.log:
<Apr 18, 2011 12:34:57 AM PDT> <Critical> <WebLogicServer> <kanna> <AdminServer> <Main Thread> <<WLS Kernel>> <> <> <1303112097109> <BEA-000386> <Server subsystem failed. Reason: weblogic.security.SecurityInitializationException: Authentication for user weblogic denied
weblogic.security.SecurityInitializationException: Authentication for user weblogic denied
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.doBootAuthorization(CommonSecurityServiceManagerDelegateImpl.java:965)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initialize(CommonSecurityServiceManagerDelegateImpl.java:1050)
at weblogic.security.service.SecurityServiceManager.initialize(SecurityServiceManager.java:875)
at weblogic.security.SecurityService.start(SecurityService.java:141)
at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
Caused By: javax.security.auth.login.FailedLoginException: [Security:090304]Authentication Failed: User weblogic javax.security.auth.login.FailedLoginException: [Security:090302]Authentication Failed: User weblogic denied
at weblogic.security.providers.authentication.LDAPAtnLoginModuleImpl.login(LDAPAtnLoginModuleImpl.java:250)
at com.bea.common.security.internal.service.LoginModuleWrapper$1.run(LoginModuleWrapper.java:110)
at com.bea.common.security.internal.service.LoginModuleWrapper.login(LoginModuleWrapper.java:106)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at javax.security.auth.login.LoginContext.invoke(LoginContext.java:769)
at javax.security.auth.login.LoginContext.access$000(LoginContext.java:186)
at javax.security.auth.login.LoginContext$4.run(LoginContext.java:683)
at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680)
at javax.security.auth.login.LoginContext.login(LoginContext.java:579)
at com.bea.common.security.internal.service.JAASLoginServiceImpl.login(JAASLoginServiceImpl.java:113)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.common.security.internal.utils.Delegator$ProxyInvocationHandler.invoke(Delegator.java:57)
at $Proxy22.login(Unknown Source)
at weblogic.security.service.internal.WLSJAASLoginServiceImpl$ServiceImpl.login(WLSJAASLoginServiceImpl.java:91)
at com.bea.common.security.internal.service.JAASAuthenticationServiceImpl.authenticate(JAASAuthenticationServiceImpl.java:82)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.common.security.internal.utils.Delegator$ProxyInvocationHandler.invoke(Delegator.java:57)
at $Proxy40.authenticate(Unknown Source)
at weblogic.security.service.WLSJAASAuthenticationServiceWrapper.authenticate(WLSJAASAuthenticationServiceWrapper.java:40)
at weblogic.security.service.PrincipalAuthenticator.authenticate(PrincipalAuthenticator.java:348)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.doBootAuthorization(CommonSecurityServiceManagerDelegateImpl.java:929)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initialize(CommonSecurityServiceManagerDelegateImpl.java:1050)
at weblogic.security.service.SecurityServiceManager.initialize(SecurityServiceManager.java:875)
at weblogic.security.SecurityService.start(SecurityService.java:141)
at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
>
####<Apr 18, 2011 12:34:57 AM PDT> <Notice> <WebLogicServer> <kanna> <AdminServer> <Main Thread> <<WLS Kernel>> <> <> <1303112097156> <BEA-000365> <Server state changed to FAILED>
####<Apr 18, 2011 12:34:57 AM PDT> <Error> <WebLogicServer> <kanna> <AdminServer> <Main Thread> <<WLS Kernel>> <> <> <1303112097156> <BEA-000383> <A critical service failed. The server will shut itself down>
####<Apr 18, 2011 12:34:57 AM PDT> <Notice> <WebLogicServer> <kanna> <AdminServer> <Main Thread> <<WLS Kernel>> <> <> <1303112097156> <BEA-000365> <Server state changed to FORCE_SHUTTING_DOWN>
####<Apr 18, 2011 12:34:57 AM PDT> <Info> <WebLogicServer> <kanna> <AdminServer> <Main Thread> <<WLS Kernel>> <> <> <1303112097172> <BEA-000236> <Stopping execute threads.>
Checked the Opmnctl Status through cmd prmpt:
coreapplication-obiccs1 - Alive
coreapplication-obisch1 - Alive
coreapplication-obijh1 - Alive
coreapplication-obips1 - Alive
coreapplication-obis1 - Alive
I dont know if the weblogic user or password got corrupted ............???
So I tried to reset the password by adding the Boot.properties file in the following path:
C:\OBIEE11gfmw\user_projects\domains\bifoundation_domain\servers\AdminServer\security
giving username=weblogic
password =password123 in the file but no use still the same error.
Did anybody got the same error ?
Please help me.....
Thanks in Advance...
Regards
Kanna
Edited by: Kanna on Apr 18, 2011 1:14 AM
Edited by: Kanna on Apr 18, 2011 10:45 AMYes, but my username and password was simple and straight its weblogic/password123...
Do you guys know how to reset the weblogic Admin password ?
I want to try to debug this error first...... If I couldn't get any help anyhow I am going to Deinstall...
but this shouldn't be the case evrytime.... because we are facing the same problem in our company ...Where we installed 11g in one of our DEV environments...
There should be a some solution for this problem...
Is there anything that I am doing wrong?
Do I need to provide more information from Logs to understand the problem?
Thanks
Kanna
Maybe you are looking for
-
How do I create a new user account and migrate my data to it?
I have problem with Adobe Bridge crashing when I exit Camera Raw. I was advised by my local apple service store to create a new user account and test Bridge using the new account. It works fine. So what do I do now? I don't know what in my accoun
-
i have purchsed gem in clash of clan through my credit card but i didnt recieve the gems..it has also reflected in my bank account and my itunes purchase history...how can i get them back??who should i complain to??? plz help....
-
GTX980 gaming 4g vbios nv317mh.113 ?
Is one of you update to nv317mh.113 ? If so any improvement ?
-
ITunes shuts down when iPhone is connected.
I can open my iTunes and listen to music, browse the store, everything. As soon as I connect my iPhone I get a message saying iTunes has stopped working and the program closes. There is some DEP warning coming up from Windows (vista 64bit), I can not
-
Issue with xfa.event.change in XFA 3.3
HI all I've found an issue with the way that XFA 3.3 processes the script below on a change event when a user paste's more than 1 character to a textfield. var sChange = xfa.event.change; if((sChange.length>1)){ app.alert("Bad User\nCopy and past