Priventing WLS user from login into OBIEE 11g

I have 100+ users in Weblogic. Only some users say 60 are allowed to access OBIEE 11g.
How do I prevent other users from login into OBIEE (When they have OBIEE url :) ).
Thanks,
Mod

Hello,
You can put those 60 users in a group say OBIEE_Users and use this group in All Users Filter in WLS.
User Base DN : DC=CORP,DC=NET
All user Filter : (&(memberof=CN=OBIEE_Users,OU=BIUsers,DC=CORP,DC=NET)(cn=*)(objectclass=user))
User from name filter : (&(cn=%u)(objectclass=user))
Refer to this example on how its configured : http://paulcannon-bi.blogspot.com/2012/07/configuring-ldap-authentication-for.html
Hope this helps. Please mark if it does.
Thanks,
SVS

Similar Messages

  • Importing Metadata from PowerDesigner into OBIEE 11g

    Hi, I've digging for any information without success so far. I'm a Co-op student, so forgive me if this a naive question. I have to import some metadata from our Data Modelling software: it has the descriptions in a business level to all facts, tables and important objects. I want to import this so the user can just hover the mouse on the Criteria objects and be aware of what that object really means.
    I could do it manually through RPD, by just writing down on the description field what I wanted to show on the front-end. My research showed me that there is a XML file that I have to create, which I did, by extracting the information I need from PowerDesigner.
    I really appreciate your help.

    Hello,
    You can put those 60 users in a group say OBIEE_Users and use this group in All Users Filter in WLS.
    User Base DN : DC=CORP,DC=NET
    All user Filter : (&(memberof=CN=OBIEE_Users,OU=BIUsers,DC=CORP,DC=NET)(cn=*)(objectclass=user))
    User from name filter : (&(cn=%u)(objectclass=user))
    Refer to this example on how its configured : http://paulcannon-bi.blogspot.com/2012/07/configuring-ldap-authentication-for.html
    Hope this helps. Please mark if it does.
    Thanks,
    SVS

  • How to enable users change password in obiee 11g?

    Is there anyone know how to enable users change password in obiee 11g?
    And I have tried the method in obiee 10g, bu it didn't work.
    Any help would be appreciate.

    As per I understand your requirement,
    In your Dashboard create a Presentation variable which receives the value of year you select.
    Now in your analysis, select the year column along with all the measures you want (Actual, plan, Forecast, and what-if, etc).
    Create a filter on Year column and convert it into SQL. Put the condition as:
    "Year" BETWEEN @{Presentaion_Variable} - 1 AND @{Presentation_Variable}
    You will get the result for selected year and the previous year.
    Hope it helps..
    Regards,
    A.K.

  • Avoid users to login into the database thru SQLPlus

    I'm trying to use the after logon trigger described below, to avoid users to login into the database thru SQLPlus, user can only connect from from pls help me

    If your only concern is preventing users from logging in via SQL*Plus, you could use the PRODUCT_USER_PROFILE table.
    However, and this is a big however, this will not prevent users from logging in using any other tool (SQL Developer, SQL Programmer, TOAD, etc) if they know the Oracle user name and password. You can create a login trigger that generates an exception if the program that the client reports is connecting isn't on a list of valid products, but this sort of thing is easily circumvented just by renaming the executable on the client machine.
    Fundamentally, if you have given a person an Oracle user name and an Oracle password, whatever privileges are available to the Oracle account are available to that individual. No matter what tool that person uses to connect to the database, they are going to have the same privileges. That's why you ideally want to restrict what users can do to the point that you don't care what tool they're using. Barring that, you can enable auditing and let the users know what they are and are not allowed to do by policy and use the audit logs to ensure compliance.
    Justin

  • Restrict OBIEE developers to login into OBIEE admin tool withAdministrator

    I have developers with their own id's but with admin role assigned to them and If I remove the admin role from their id's they cannot login into OBIEE via admin tool in online mode to make any changes to the RPD.
    Q is) Developers make changes to the rpd file in online mode but at the same time I dont want them to have the admin privileges like making changes to the security/connection pool entries so on. But they can make changes to the presentation layer or business model. If I remove the administrator role from their id's they cannot even open the rpd in online mode i.e they can't even login. How do I give the developers the control they need and at the same time lock down the admin related stuff from changes?
    Also they cannot make the changes offline and they need to login and open the rpd online.

    Hi,
    I think you can resolve this issue, by setting up a different application role for all of your developers (yes, with BIAdministrator privileges too). However, in the .rpd you could restrict the access to this role to the physical layer. Briefly, the steps are below
    1. Set up a new application role.
    2. In the .rpd Manage Identity -> application roles -> New role -> Properties -> Permissions -> Object Permissions.
    3. Set 'No Access' to all of your physical layer objects.
    Hope this is what you are looking for.
    Thank you,
    Dhar

  • How to redirect user from login page to "Set Challenge question" page

    How to redirect user from login page to "Set Challenge question" page (NOT custom page) after 3 un successful password attempts?
    Meaning when user types wrong password 3 times they will be redirected to set Challenge question page. If user answers the challenge question then password reset page should be appeared other wise (after remaining 3 un successeful challenge question answers) account should be locked out.
    thanks for your help.

    hi sandeep
    Thanks for your answer. Let me ellaborate more on the requirement here.
    - Password Policy and Lost Password management are set up in the identity system
    - Configure login tries allowed= 5. Verify accout is lock out after 5 unsucessful login.
    This is what need to achieve.
    1) If a user attempts to login 3(not 5) times using an incorrect login credential he/she should be redirected to set challenge question (security question) page.
    2) Then if the user attempts (remaining) 2 times incorrect challenge answer then his/her account should be locked out.
    3) If he/she answers the challenge answer correctly then he/she should be redirected to password reset page.
    Is this possible?

  • Got Error when migrate repository from obiee10g to obiee 11g

    Hi all,
    i'm testing to migrate repository from obiee10g to obiee 11g , when i done the migration repository and check gobal consistency . It show an error below
    of repository's 11g , but when i check repository's 10g .It doesn' throw any error .Any suggestion ?
    ERRORS:
    BUSINESS MODEL PTTCH Core:
    [nQSError: 15037] Table, PTTCH - Dim - Value Center, has multiple key level associations: Detail and [].
    [nQSError: 15001] Could not load navigation space for subject area PTTCH Core.

    Check this thread:
    Re: nQSerror 15037
    Adil

  • Restricting the Oracle user from Login

    Hi,
    I want to restrict the users from login depending on two parameters usind Database logon trigger,
    i.e
    1. MODULE (like SQL*Plus...)
    2. USERNAME
    I can get USERNAME from
    select SYS_CONTEXT('USERENV','CURRENT_USER') from dual
    But, select SYS_CONTEXT('USERENV','MODULE') from dual says invalid parameter.
    Can anybody help me?
    Ronald.

    Both are working fine i saw
    SQL> select SYS_CONTEXT('USERENV','CURRENT_USER') from dual
    2 ;
    SYS_CONTEXT('USERENV','CURRENT_USER')
    APPS
    SQL> select SYS_CONTEXT('USERENV','MODULE') from dual ;
    SYS_CONTEXT('USERENV','MODULE')
    SQL*Plus

  • How to privent the users from resizing/maximizing/minimizing the mdi window

    In http://forms.pjc.bean.over-blog.com/60-index.html i read about 'A JavaBean to handle the Forms applet's frames' .
    In formsframe.java It is written that the author is Francois Degrelle so i want to ask Francois: My goal is to privent the users from resizing/maximizing/minimizing the mdi window. I have jre 1.6.0_10 which jar file do I need formsframes5.jar or formsframes.jar (those files are in formsframes.zip)
    thanks

    lidochca wrote:
    Hello, please help me to solve the problem !!Key Loggers, Spyware. The solution is not to write such reprehensible crap.

  • I got this error when migrate from Jdev11gTp4 into JDev 11g (Build 5188)

    Hello,
    when i migrated my application from Jdev11gTp4 into JDeveloper 11g (Build 5188) , i got this error but it's not understandable for me and I am new in jdeveloper and adf application
    C:\JDeveloper\mywork\Application14\FOO\ViewController\public_html\myFolder\myPage .jspx
    Error(7,4): The public type __myPage_32__jspx must be defined in its own file
    Thanks
    GreenApple
    Edited by: greenApple on Jan 15, 2009 9:18 AM

    Hello,
    when i migrated my application from Jdev11gTp4 into JDeveloper 11g (Build 5188) , i got this error but it's not understandable for me and I am new in jdeveloper and adf application
    C:\JDeveloper\mywork\Application14\FOO\ViewController\public_html\myFolder\myPage .jspx
    Error(7,4): The public type __myPage_32__jspx must be defined in its own file
    Thanks
    GreenApple
    Edited by: greenApple on Jan 15, 2009 9:18 AM

  • Tracking User Login to OBIEE 11g

    Hi all,
    Is there a way to know which users logs in to the OBIEE 11g (even if the user doesn't run any report, which means no query to the database is generated)? Is there any log that records it?
    Thanks!

    Since you just installed last night I assume that you are just dev'ing on your laptop or something.
    Be sure that on the machine which you installed on that you are entering http://localhost:9704/analytics/ to test the browser is hitting the correct server.
    Also ensure that your Web Logic server is up and running and that all of your System Components via enteprise manager fusion control are "up" and running.
    Also, when you start up the BI Services, i.e.: Programs > OBI > Start BI Services you must ensure that you enter the username and password correctly for the user/pass credentials that you created during the installation - typically this is the "weblogic" user by default.
    For further help please post any actually log warning/error messages in your reply if the above does not work.
    Let me know if that helps,
    Christian

  • Can't login to obiee 11g analytics

    Hi Guys,
    Client has installed obiee 11g in a server sitting at different place. We have deployed our own repository and catalog. Now we can't login to obiee analytics. It does not accept any username or password created in weblogic console. But if we deploy oracle's default SampleSales repository, then we could login. Can't understand what's the problem!
    It's throwing the following error:
    [OBIPS] [ERROR:31] [] [saw.security.odbcuserpopulationimpl.searchidentities] [ecid: 004tnN1tfkXFw0XpLs_Aie0004ds000000,0:162] [tid: 3327710976] Error retrieving user/group data from Oracle BI Server's User Population API.
    Unable to create a system user connection to BI Server while running user population queries
    Odbc driver returned an error (SQLDriverConnectW).
    State: HY000.  Code: 10058.  [NQODBC] [SQL_STATE: HY000] [nQSError: 10058] A general error has occurred.
    [nQSError: 73006] Cannot obtain Oracle BI Servers from either the primary Cluster Controller (aaobiee.mm.co.za) or the secondary Cluster Controller () specified for the clustered DSN. (HY000)[[
    File:odbcuserpoploaderimpl.cpp
    Line:726
    Location:
            saw.security.odbcuserpopulationimpl.searchidentities
            saw.security.userpopulationmanagerimpl.searchidentities
            saw.catalog.dirCache.getAllSharedFolders
            saw.CatalogAttributes.cache.cleanup
            saw.taskScheduler.processJob
            taskscheduler
            saw.threads
    ecid: 004tnN1tfkXFw0XpLs_Aie0004ds000000,0:162
    ThreadID: 3327710976
    task: Cache/CatalogAttributes
    Please help how do I resolve!!
    Thanks,
    BK.

    Hi,
    This is the exact format how my tnsnames.ora file looks. sorry, I can ping it in command prompt now. In my connection pool i tried first DSN =  ab.bc.xy.zx, did not work. Then I saw oracle's default repository and changed my DSN to your suggested format starting from "DESCRPTION" to rest. Still no luck Do you think, i should put the same TNS in my local machine??
    ab.bc.xy.zx =
    (DESCRIPTION =
        #(ADDRESS = (PROTOCOL = TCP)(HOST = 10.20.30.110)(PORT = 1521))
        #(ADDRESS = (PROTOCOL = TCP)(HOST = 10.20.30.120)(PORT = 1521))
        (ADDRESS = (PROTOCOL = TCP)(HOST = 10.20.30.130)(PORT = 1521))
        (LOAD_BALANCE = yes)
        (CONNECT_DATA =
          (SERVER = DEDICATED)
          (SID = cap2)
    thanks,
    BK.

  • Urg: Not able to import data from DB in OBIEE 11g : Connection has failed.

    Hi Team
    Recently while working in OBIEE 11g , I was trying to import tables from the data-base but I am getting an error " Connection has failed " .
    I have put the tnsora file in the network admin folder and the
    C:\OracleBIHome\Network\admin
    \OracleBI1\network\admin (Example: C:\OBI\Oracle_BI1\network\admin)
    \oracle_common\network\admin (Example: C:\OBI\oracle_common\network\admin)
    and have set the TNS_ADMIN variable in the User.cmd path  with the above path .
    But it is still not working . I have tried all the options but its still not working .
    Any help is appreciated.
    Regards
    R

    Is it Compulsory to give Schema and Work Schema while creating the Physical Schema in Oracle Data server?
    This is mandatory to have a schema and a work schema here.
    The schema and work schema could be the same user as the user who is connected to the dataserver!

  • Can not login to OBIEE 11g

    Hi,
    I have installed OBIEE 11g last evening. I was able to connect to the dashboard and run a simple report also - all before shut down. Now when I try to access OBIEE 11g thru port :9704 after starting the BI services, I am getting the following error.
    "Error 404--Not Found
    From RFC 2068 Hypertext Transfer Protocol -- HTTP/1.1:
    10.4.5 404 Not Found
    The server has not found anything matching the Request-URI. No indication is given of whether the condition is temporary or permanent.
    If the server does not wish to make this information available to the client, the status code 403 (Forbidden) can be used instead. The 410 (Gone) status code SHOULD be used if the server knows, through some internally configurable mechanism, that an old resource is permanently unavailable and has no forwarding address.
    Any idea. Anyone is having any exp on this type of issue. Can anyone guide to resolve this issue.
    Thanks a lot.

    Since you just installed last night I assume that you are just dev'ing on your laptop or something.
    Be sure that on the machine which you installed on that you are entering http://localhost:9704/analytics/ to test the browser is hitting the correct server.
    Also ensure that your Web Logic server is up and running and that all of your System Components via enteprise manager fusion control are "up" and running.
    Also, when you start up the BI Services, i.e.: Programs > OBI > Start BI Services you must ensure that you enter the username and password correctly for the user/pass credentials that you created during the installation - typically this is the "weblogic" user by default.
    For further help please post any actually log warning/error messages in your reply if the above does not work.
    Let me know if that helps,
    Christian

  • Write back from Excel into OBIEE?

    Hi Experts,
    I have a requirement, where in I have to write back into Oracle DB through OBIEE.
    The user will upload an excel/csv containing more than hundred records into OBIEE dashboard.
    The functionality is, on click of a (submit) button the OBIEE should write back into Oracle DB (through OBIEE) row by row taken from excel.
    Pls help if any one has any idea. I'm new to OBIEE tool.
    Have a great day!!!
    Thanks,
    Venky

    Why do you want to do that through OBIEE? It's not a data loading tool! The write-back functionality is explicitly built for sporadic updates and not for mass-import.
    From Booshelf:
    The write back feature is not suitable for entering arbitrary new records. In other words, do not
    use it as a data input tool.
    (Oracle Business Intelligence Presentation Services Administration Guide Version 10.1.3.2 - Configuring Report Write Back - Write Back Limitations)
    Use OWB, ODI, Informatica or any other ETL Tool for that (yes, I know ODI is ELT...don't start a flame war over that ;-)).
    Cheers,
    C.

Maybe you are looking for