Query related to external table authentication

Hi Gurus,
I am new to OBIEE. When we login to the Oracle Business intelligence, we used to give user as Administrator and password as Administrator.
At this point, can we authentication the userid and password which is stored in external table in a users schema?
~ John

"Administrator" will always be a user which is registered in the repository. All other users can be authenticated by external table authentication.
You can create an init block which sets the USER system variable by
SELECT user FROM users WHERE user = ':USER' and password = ':PASSWORD'

Similar Messages

External Table Authentication

Hi I am using OBIEE 11g.
In my project we have to implement external table authentication. For that we have import the external table to physical layer. and build the repository variable using initialization block. In that i have written a following SQL -
SELECT loginid
,grp
,display_name
,2
FROM external_auth
WHERE loginid = ':USER'
and password = ':PASSWORD'.
I have also create the variable target - LOGID, Group, Display Name and Log Level.
and save the variable.
My table structure like this - LoginID,Password,Grp, Display Name.
When i am trying to save the RPD following error message raised.
ERRORS:
GLOBAL:
[38095] The initialization string in the Repository Initialization Block '"Auth Variable"' contains the use of :USER or :PASSWORD.
Any one to help to come out from this issue.
Kindly provide any link for step by step guide.
Thanks
Gauthaman

Hi Gautham,
i think you created Repository Variable.
Create a Session variable and Session initilization bliock. give the same query in Session Initialize block. it will work.
Thnaks
GSR

External table authentication not updating user group changes

Hello
I have a question..
In OBIEE, i am using external table authentication. I have user and user group tables where users and groups are stores.. Every Time I create a new user and assign them to a group, these records get inserted immediately to these tables with the correct user and group ID that matches with each other.. Then in my initialization block I have the query that fetches the user name and psswd as well as groups names..
All these are working at the initial user creation. For example, when I create user A and assign it to group A, the DB table has all of the records inserted correctly. When I log in to OBIEE using User A login, I see it is assigned to Group B.
The problem comes when I change the user A from Group B to Group C. When I did that, although the DB table gets updated correctly, OBIEE session seems to still be the previous one. As a result, when I log in the second time, I see the user A is still assigned to Group B instead of Group C.. This seems to be cached..
I double check these user tables in OBIEE, none of them are cache enabled.. The connection pool setting of the isolation level is set as default..
When I reinstall OBIEE all over again and re-log in the first time, this User is now assigned to Group C..
So seems to be that it is caching issue.
How should I go about solving this issue
Appreciate in advance

Make sure you check the box for 'Required for authentication' and also 'Use caching' should not check.
Edited by: Srini VEERAVALLI on May 15, 2013 9:05 PM

External Table Authentication in OBIEE 11g

Hi ,
I have a security table, which contains userid,displayname,group . I have imported Security table in Physical Layer. I'm creating session variables based on condition.
When am trying to logging into analytic s getting an error, invalid username and password . I'm using 11.1.1.6.0 version
How to handle external table authentication in OBIEE 11g version.
Regards,
Malli

Hi fiaz,
That links talks about 10g version.
Step1: We have imported a secutiry table in Physical layer.
Step2: Creating a session variable by selecting initilazation block.
Select user_name,group from security_table where user_id=':USER' and pwd=':password';
step3: created DISPLAYNAME,GROUP & USER VARIABLES in edit target window
After these modifications i was trying to logging with new user, which is there in security table.
I am getting an error that is invalid user or password.
Is there any other changes does it required here.
Regards,
Malli
Edited by: user10675696 on Dec 26, 2012 9:39 PM

Query related to Internal Table

Hi ,
I have a small query related to internal table , can we dump millions of records to an internal .
The actual requirment is like i need to develop a report in BI side where i have to dump records into an internal table from PSA tables without filtering .
Can we do so ....
or do we have any other option to dump the data to an internal tables .
need some tips on the same .
Thanks ,
VInay.

Hello Vinay,
I believe the following extract will give you a brief idea on the size limitations for an internal table.......
Internal tables are dynamic data objects, since they can contain any number of lines of a particular type. The only restriction on the number of lines an internal table may contain are the limits of your system installation. <u><i>The maximum memory that can be occupied by an internal table (including its internal administration) is 2 gigabytes. A more realistic figure is up to 500 megabytes. An additional restriction for hashed tables is that they may not contain more than 2 million entries.</i></u>
Hope it proved useful
Reward if helpful
Regards
Byju

External Table Authentication - Not Able to Login to Presentation services

Hi ,
I am trying to setup External table Authentication and in Rpd file I have setup session Variable as described in the OBIEE Server Admin Guide (http://download.oracle.com/docs/cd/E10415_01/doc/bi.1013/b31770.pdf -- Page 326 ) ..
But when I try to logon to Presentation services Iget the following error.
State: 08004. Code: 10018. [NQODBC] [SQL_STATE: 08004] [nQSError: 10018] Access for the requested connection is refused. [nQSError: 13024] Successful completion of init block 'TableLDAP' is required. (08004)
what am I doing wrong ? Please adivce.
Thanks
SS

Hello,
I Have setup system session User and group variables in a Initialazation block. No LDAP is tied. I have just created a table and added bunch of users and their passwords and their groups they belongs to.When I test my initialization block in rpd by suppling Uid/Pwd I see correct group they belongs to.
But When I try in Presentation layer it doesn't work and throwing same error I mentioned.I tried various things but no luck .Not sure why intialization block is not firing off.
Thanks
SS

Issue in External Table Authentication and Authorization in OBIEE11G

Hello Gurus,
Can anyone help me how to configure External Table Authentication and Authorization in OBIEE11g through weblogic server not like in 10g style(Through INIT Blocks).
I've followed the (Doc ID 1338007.1) document. But when i'm restart the Managed servers and Admin servers after configuring the SQLAuthenticator all my services are showing down.
I already raised the SR (SR 3-6286054151) on this issue. But still i didn't get any reply from them.
Can anyone help me out on this issue or can anyone me send the document for "how to configure External Table Authentication and Authorization in OBIEE11g" . It's really appreciate for your quick response.
my mail ID [email protected]
Thanks,
Syam.
Edited by: 942658 on Oct 13, 2012 10:55 AM

Hi John,
Thanks for your quick response.
We configured "ReadOnlySQL Provider" by following the Oracle's white paper(Doc ID 1338007.1) Please find the below steps what we configured in weblogic console.
1. Created the Data Source
2. In the data source specified the Database driver--> *Oracle's Driver Thin for service connections: Versions:9.0.1 and later.
3. Defined the connection Properties .
4. Selected targets as Admin server and bi_server.
Then Activate changes
5. Created new provider by using ReadOnlySQL Authenticator
6. In the provider specific tab we given the SQL statements and saved it.
7. Restarted the Admin and Managed servers.
After restarted the services when we open the Enterprise Manager page all the services are showed as Undefined - means red.
Apart from that we followed your suggested link http://askjohnobiee.blogspot.com/2012/09/how-to-oid-authentication-with-groups.html
For External table authentication do we need to configure BISQLAuthenticator or ReadOnlySQLAuthenticator ?
If we configure BISQLAuthenticator we just import Groups from database to Console application. Then how can it Authenticated to the User ?
Please let me know your ideas on this.
Thanks,
Syam

Obiee 11g external table authentication

Hi,
I try to create external table authentication but it is not working.
I have created this table
CREATE TABLE OBI_SECURITY_USERS
USER_NAME VARCHAR2(100 BYTE),
USER_PASSWORD VARCHAR2(20 BYTE) NOT NULL
and I defined Initialization Block it is below
select USER_NAME FROM obi_security_users
where USER_NAME=UPPER(':USER')
and USER_PASSWORD=':PASSWORD'
and I set Variable target for USER
I restart services but it is not working.
Anybody help me?

Thanks for your reply Suman.
it is ok I login in answer from my OBI_SECURITY_USERS tables.
I have new problem about user groups.
My group table like this
CREATE TABLE OBI_SECURITY_USER_GROUPS
USER_NAME VARCHAR2(100 BYTE) NOT NULL,
USER_GROUP VARCHAR2(100 BYTE) NOT NULL
I insert to this table user and Group and my Initialization Block is here.
select 'GROUP',user_group from obi_security_user_groups
where UPPER(user_name )= UPPER(':USER')
I have created two application role from em.
I want to define role this group
how can i do?
Thanks

How Can We Achieve External Table Authentication

Hai Guru's
I want Know The External Table Authentication By Step By Step
Thanks

Hi Friend,
For External table authentication you can follow this link:
http://obieeblog.wordpress.com/2009/06/18/obiee-security-enforcement-%E2%80%93-external-database-table-authorization/
Thanks
Don

Error Querying Contents of External Table

I get the error below from JDeveloper when I try to query the contents of an external table that I created in OWB. The Validate, Generate & Deploy actions were successful on the External Table. The location ALAN_TARGET_LOC_FILES_LOC resolves to where the flat files that the external tables refer to reside on Linux Server. This seemed to work fine last week Any ideas what may have broke?
ORA-29913: error in executing ODCIEXTTABLEOPEN callout
ORA-29400: data cartridge error
KUP-04040: file wire.mock in ALAN_TARGET_LOC_FILES_LOC not found
ORA-06512: at "SYS.ORACLE_LOADER", line 19
ORA-06512: at line 1
Alan Lichtenstein Programming SunGard Professional Services 595 E. Swedesford Road, Suite 3000, Wayne, PA 19087
Tel 610-975-3168 Fax 610-975-3062 www.sungard.com/bondmaster
CONFIDENTIALITY: This email (including any attachments) may contain confidential, proprietary and privileged information, and unauthorized disclosure or use is prohibited. If you received this email in error, please notify the sender and delete this email from your system. Thank you.

Is there any way to find out the physical path
that 'owbdir' resolves to?
owner directory_name directory_path
SYS ALAN_TARGET_LOC_FILES_LOC owbdirSeems to me that the directory path is wrong. Under directory path you should see the real physical path you specified when you created the directory. Here's what select * from all_directories shows on my system (excerpt):
OWNER DIRECTORY_NAME DIRECTORY_PATH
SYS LOC_COCKPIT_OWB_LOC_FLAT_FILES E:\DATEN\01_ENTWICKLUNG\07_BEWIRTSCHAFTUNG\FF_DATEN\
As you can see directory path contains the physical path where my flat files reside.
Regards,
Jörg

Query related to database tables

Hi,
Im having a requirement wherein i would like to create one ztable and the purpose is only to get the fields but not the values for the same. Bez, with the help of these fields in ztable and developing some logic and it shld be dynamic based on the no of fields appended into ztable.
To be clear, can i write a select query only to get the fields from the table but not the values ( in this no way i will get the values bez i won't insert any records for the same).
I thnk im clear from my end.
Thanks
rohith

To get the fields, you can write the query like this too :
tables: dd03l.
data: begin of itab occurs 0,
fieldname like dd03l-fieldname,
end of itab.
*parameters: p_tab like dd03l-tabname.
select fieldname from dd03l into table itab where tabname = 'VBAK'.
LOOP AT ITAB.
WRITE:/ itab-fieldname.
ENDLOOP.

OBIEE External Table Authentication

Hi everyone,
I need to send email to some groups of people in obiee 11g by using agents. (with row level security) Meaning that, the groups data are different ans special for each. In our sistem, the users have been created by using an external table in the database. We use session parameters like USER, GROUP etc... The problem is about mailing to that users. When I log in OBIEE dashboard analytics, there is no configured email address in the delivery options (My Account/Delivery Options/Add Device Email Section) When I manually configure the email address, there is no problem. But it is not possible that adding all users email address manually. How can I entegrate mail addresses, which are already exist in my external table to those users?
Please help me

Hi,
Write Back is the ability to enter or update values directly into a report and have those values stored directly in to the database. In order to
implement this feature in OBIEE we have to make some changes in the repository as well as in the presentation services layers.
Steps for Write Back
<li>Making the table uncacheable from the physical layer of the repository.
<li>Configuring the write back in the connection pool.
<li>Granting the privileges of write back to the user from the Presentation Services.
<li>Creating a XML Template and specifying the insert and update queries for write back.
<li>Enabling write back from the column properties of the column in the request.
<li>Specifying the template name in the table view write back properties of the request.
For more Information refer following links:
http://oraclebizint.wordpress.com/2007/09/20/oracle-bi-ee-101332-write-back-option-budgetingplanning/
http://kpipartners.blogspot.com/2009/09/writeback-in-obiee.html
REG OBIEE WriteBack
http://gerardnico.com/wiki/dat/obiee/write_back
Assign Points and close thread, if your question is answered and let me know if any queries....
UPDATED POST
After enabling Write Back users able to change their password through report not directly with Change Password on My Account.
Cheers,
Aravind
Edited by: Aravind Addala on May 23, 2011 9:11 PM

Query related to PLZU table

Hello ,
After upgrade , we have observed that there are junk characteristics in field PLZU-PLNNR ( Key for Task List Group)
Could someone explain the contents of table PLZU & what are the dependencies of PLZU with other PL* tables

Hello,
I'm not sure I got your exact request.
Below you can find the routing tables and you can chech the contect of each in the TA SE11
(the key fields are always flagged in the tables).
Routing
PLPO          Routing Operation Details
PLKO         Routing Header Details
MAPL         Routing Link to Material
PLAB          Relationships - Standard Network
PLAS          Task List - Selection of Operations
PLMZ         Component Allocation
PLPH          CAPP Sub-operations
PLFH          PRT Allocation
PLWP         Maintenance Package Allocation
PLMK         Inspection Characteristics
Best Regards,
Dora

Interactive report errors when trying to query external table.

I'm trying to create an interactive report against an external table and getting the following error. I see a note in metalink the describes its cause, but I doesn't seem to apply here.
Query cannot be parsed, please check the syntax of your query. (ORA-06550: line 2, column 17: PLS-00302: component 'ODCIOBJECTLIST' must be declared ORA-06550: line 2, column 13: PL/SQL: Item ignored ORA-06550: line 4, column 18: PLS-00302: component 'ORACLE_LOADER' must be declared ORA-06550: line 4, column 6: PL/SQL: Statement ignored ORA-06550: line 5, column 12: PLS-00320: the declaration of the type of this expression is incomplete or malformed ORA-06550: line 5, column 6: PL/SQL: Statement ignored)
Metalink Note:437896.1 identifies this same error related to external tables. It says the cause is an object named 'sys' that exist in the user's schema and must be removed. I checked dba_objects and there is no object named 'sys'

Please ignore thread - operator error. There was an object named sys.

11g hybrid authentication / authorization: WLS plus external table

I've implemented external table authentication / authorization in 11g. Now I'd like to add a twist.
I have an external table containing users B, C, and D. That external table contains all of the columns I need for authentication (including a clear text password) and for authorization (roles, log level, a dynamic table name, and so forth). I have authentication in one initialization block, authorization in another. Everything works fine. I can log in as B, C, or D and see exactly what I'm supposed to see, based on the ROLES.
The clear text passwords are generally not a problem, because this is a training instance and almost all of the passwords are the same. However, I want to add a user whose password should not be held in clear text. For that reason, I'd like to add that user into WLS. I've done that, and I'm able to log in to OBIEE. After confirming that I could log in to OBIEE with user A from the WLS, I added User A to the external table, left its password field blank, and filled in the other columns (roles, loglevel, etc...) that I need to assign into session variables.
Here's the problem: the authorization init block properly assigns ALL session variables for users B, C, and D. It assigns all session varaibles EXCEPT the ROLES variable for user A. I've confirmed this by creating an Answers analysis that shows me the values of the session variables. The ROLES session variable for user A shows "authenticated-role;BIConsumer;AuthenticatedUser". For all other users (those who are authenticated using the clear text passwords in the external table) the ROLES variable is populated correctly, based on the values in the ROLES column in the external table. In short, the authorization init block is properly assigning the ROLES session variable only for those users that were authenticated using the authentication init block, but is assigning all other session variables correctly for all users, even the one in WLS.
Here's my authentication init block code:
select bi_user
from bi_auth_ldap
where bi_user = ':USER'
and bi_user_pwd = ':PASSWORD'
Here's the authorization init block code:
select roles, bi_user_name, to_number(loglevel,0), channel_tbl
from bi_auth_ldap
where bi_user = ':USER'
(returned results are assigned into ROLES, DISPLAYNAME, LOGLEVEL, and CHANNEL_TBL session variables, respectively)
It feels like the ROLES session variable is populated in conjuction with the user logging on and being authenticated via WLS, and that the initialization block isn't able to overwrite that variable. Can an OBIEE developer confirm that for us, please? Once set in WLS, is it not possible to overwrite the ROLES session variable with SQL from an initialization block? If it IS possible, can you post some code that will accomplish it?
Thanks!

It occurs to me that Oracle's support model is a fantastic way to make money. Let's see, I wonder if I could become a billionaire doing this:
Create some software. Sell that software. Then, charge customers several thousand MORE dollars, year after year, plus about $60 per bug, so that they have the right to report MY bugs to me. Yeah, that's the ticket - people PAYING for the right to report bugs to me. Oh, and if more than one person reports the same bug, I get to keep ALL of the money from ALL of them.
Let's summarize, make sure I haven't missed something: You buy my software, you PAY ME additionally to report MY bugs to me, I don't necessarily have to fix the bugs (but I keep your money whether I fix it or not), and I can collect multiple times from different people who report the same bug.
Sweeeeeeet.........
Billionaire Acres, here I come!

Query related to external table authentication

Similar Messages

Maybe you are looking for