Regarding Associating Company access directory to shared services

Hi All,
I have a requirement to associate active directory of company to shared services and assign those user ids to Essbase login ( i mean your NT login has to be Essbase login) If any one have any idea please let me know.
Thanks,
Ramesh.

Hi,
Configuring Shared Services to use external directories is all documented here .
Cheers
John
http://john-goodwin.blogspot.com/

Similar Messages

NSAD user directory for shared services not working

Hi!
Im trying to configure a MSAD user directory for shared services in Essbase 11.1.2.1. I have done it correctly in Essbase 9.3.1.
Back then i had to import certificates to the cacerts java file. Is it still necesary? I dont see it mentioned anywhere in the v.11 docs, however, its not working using same parameters. I get an error saying i have specified "either host or port value incorrect".
Do i have to import certificates or am i missing anything else, can anybody help?
Thanks!!
Jorge

Certificates have nothing to do with MSAD.
when you reach to "MSAD user configuration" tab in Shared Services, try to see if you can auto configure user by inputting: sAMAccountNmae="some user ID", replace some user ID with your or admin ID, and verify if you can pull the users from the MSAD.

Browse native directory from shared services

Is there a way to browse the browse native directory from shared services with a ldap browser?
I cant get it working on shared_server_name port: 58080?

Hi,
You can use an ldap browser but you are trying to use the web server port and not the open ldap port, the open ldap port is 58089, you can see that in the css.xml file.
Also you will need to set up the correct base dn which is dc=css,dc=hyperion,dc=com
For logging in use the User DN :- CN=root,dc=css,dc=hyperion,dc=com
Cheers
John

Difference between user directory and native directory in Shared Services

Hi,
Please any one can help me......
I am new to Hyperion, what is difference between Hyperion Shared services Native directory and User/Active directory.
thanks in advance..............

Hi,
Shared Services native directory, as the name suggests, is a user directory (i.e. ldap) that is native to Hyperion. It allows you to create users, groups and define access rights to Hyperion Products. User/Active directory is the directory where users in your company reside. Shared Services can connect to it and retrieve the list of users and groups. You can define the access rights for these users if you configure the system in a way that it works with Active Directory.
You can use both combined also. Meaning, you can create user groups in native directory and assign native directory users into them and define access rights onto user groups and/or users.
Cheers,
Alp

Cannot create a new MSAD directory in Shared Services...

My Hyperion version is 11.1.1.3 on windows 2003 server.
I;m trying to create an External Authentication provider using "Configure user directories".
I provide all the parameters as I have provided in the development machine in the same network.
However on Clicking Finish the Cursor appears to be doing something and then the screen just remains there. The record is not created for MSAD neither it gives any error.
Shared Services Security Log says error: "Error occured while loading the configuration file"
2011-06-02 15:09:49,728 ERROR [[ACTIVE] ExecuteThread: '3' for queue: 'weblogic.kernel.Default (self-tuning)'] com.hyperion.css.web.config.util.extauth.CSSProperties.getSecurityAgent(Unknown Source) -- Error occured while loading the configuration file
Any help appreciated.
I had this working on the same machine just last week.

Is there any password change happened from MSAD user using to connect to the MSAD directory ?

How to disable the User directory in Shared Services?

Hello,
We need to disable (Not Delete) the User Directory in Hyperion Shared Services. We are using the Hyperion version 9.3.1. Is there a way we can do this?
Thanks
S

From the 9.3.1 docs:
"If you do not want to use a configured user directory that was used for provisioning, remove it from the search order so that the user directory is not searched for users and groups. This action maintains the integrity of provisioning information. It also enables you to use the user directory at a later time, if needed."
http://docs.oracle.com/cd/E10530_01/doc/epm.931/html_cas_help/frameset.htm?removesearchord.htm
Cheers
John
http://john-goodwin.blogspot.com/

Oracle EPM 11.1.1.3 - Assign Access Control in Shared Services for filters

We are using 11.1.3 version of EPM.
We have configured Essbase with Shared Services.
When I try to click Assign Access Control , it gives "loading.." thats it. Nothing else.
I have registered the application from EAS with Shared Services
Could you pelase suggest what I can do assign filters to users.
cheers,

Hi,
Provision the user with which you are logging into shared services as an Esssbase User and try.May this will solve your issue
Thanks.
Edited by: user9976039 on Oct 23, 2009 12:57 PM

Regarding issue with externalizing users to shared services

Hello,
I was working today on externalizing users to shared services through EAS Console & it went successful. But then I saw that the users were already externalized & there was already an application group existing in shared services. So now there are two application groups both clone of each other, i.e. if I provision any user with one application, the clone of that application is also provisioned through that user.
The bigger problem is somehow the connect bet'n both SS & Essbase Services is lost & the users created in SS are not getting reflected in EAS, even after refreshing the securities on EAS... & then I tried to restart all the services again open LDAP, SS, IS, Essbase & Admin Services.... I am getting error while opening Essbase services, they are not getting started??? Please help me resolve this error...
Thanks.

Hi,
What version are you installing and what O/S is it for ?
If it is windows it is definitely an executable you are running and you are not trying execute one of the patches?
Cheers
John
http://john-goodwin.blogspot.com/

"Assign Access Control" returns error for essbase apps in shared services

Hello,
I installed and configured Oracle EPM 11.1.2 (Foundation, Essbase, Planning, Reporting&Analysis):
OS: Windows Server 2008 Sp2 (32bit)
Default Installation with default ports,
Installation of all components on the same server,
no clustering
EPM System Diagnostic says that everything is OK.
Now I want to assign filter access for an essbase database in the Shared Services.
Starting the menu item "Assign Access Control" in Shared Services returns the following error:
Error 404--Not Found
From RFC 2068 Hypertext Transfer Protocol -- HTTP/1.1:
+10.4.5 404 Not Found+
The server has not found anything matching the Request-URI. No indication is given of whether the condition is temporary or permanent.
+....+
Can anybody help ???
best regards,
Nicole

Hello,
here's what I found out so far:
I get the error if I start the shared services console via the URL "http://servername:port/interop/index.jsp" and then select the "assign access control" for an essbase database.
If I start the shared services console via the workspace everything works fine.
Does anybody know what to do so that it also works if I start the shared services console via URL?
best regards,
Nicole

Clarification regarding Shared services and essbase security

Hi,
Sorry for the silly doubt. We have shared services to manage security, essbase v 9
1. to assign calc access for users, do i assign calc scripts under databases in group security and assign users to groups in shared services or do it via access control in shared services?
2. If in shared services i havent given calc access but in eas user belongs to a group with that particular calc script access, which would take precedence?
Regards,
N shah

In shared services, when i click on a particular application under the essbase server under the projects folder, there are cases where there are no users or groups under the 'available users and groups'. Why is this so? groups and users are supposed to be there.
Also, in a different application, i saw one available user. however when i try to provide calc access. its not changing anything. I select the calc script and then click the check mark. however nothing changes. The calc access for the user is specified as none. When i login to excel with the same user id, i can see all the calc scripts available for the user. Where are the details being picked up from.??
Edited by: 862089 on Jul 13, 2011 9:55 PM

Shared Services Assign Access Control for Essbase

Hi we have a used who has his provisioning in form of filters in essbase group. I tried assigning his filter to thim through Assign Access Control in shared services. I'm able to see the user and also the the filter I created for the user but when I try to assign it to him and save it is really not getting assigned. It still stays the user doesnot have any filters assigned to his account. Am I missing anything.
Thank you.

Have you given maxl a try:
grant filter appname.dbname.filtername to user;
Cheers
John
http://john-goodwin.blogspot.com/

Shared Service Issue

Hello All,
I have installed version 11.1.2 on a multi server environment. I configured microsoft active directory in shared services. Everything went smooth. I created a group(Native Directory) in shared services & assigned a adminstrator role for
few epma applications. Now when i try to log in through Workspace & Planning for the first time using my user ID i get an error "Failed to sync with user provisioning" & when i try my Id for the second time I am able to log in & after that
I dont see that error. Can anybody point me in right direction as in how to troubleshoot this issue ? Is there a log file which i can check to see the error in detail?
Please advise.
Thanks!

Hi John,
Thanks for your reply. I tried following scenarios & came up with same error:
1. Drop one of the user from group & provisioned him administrator access directly .
2. Assigned the user to group & directly provisioned user with admin role.
3. Unassign the user from group & assign him again
Here is the error message:
An error occurred while processing this page. Check the log for details.Please close the current tab and open application again
Failed to sync with user provisioning. Check Planning log for details
Entry from Log files: location: <Middleware_Home>\user_projects\domains\EPMSystem\servers\Planning0\logs
Planning0
####<Mar 8, 2011 2:37:27 PM EST> <Info> <Common> <server1> <Planning0> <[ACTIVE] ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1299613047861> <BEA-000628> <Created "1" resources for pool "EPMSystemRegistry", out of which "1" are available and "0" are unavailable.>
####<Mar 8, 2011 2:37:27 PM EST> <Info> <Common> <server1> <Planning0> <Native Directory> <<anonymous>> <> <> <1299613047881> <BEA-000628> <Created "1" resources for pool "EPMSystemRegistry", out of which "1" are available and "0" are unavailable.>
####<Mar 8, 2011 2:37:29 PM EST> <Info> <JDBC> <server1> <Planning0> <[ACTIVE] ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1299613049003> <BEA-001128> <Connection for pool "EPMSystemRegistry" closed.>
####<Mar 8, 2011 2:37:29 PM EST> <Info> <JDBC> <server1> <Planning0> <[ACTIVE] ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1299613049003> <BEA-001128> <Connection for pool "EPMSystemRegistry" closed.>
Sharedservices_securityClient
[2011-03-08T14:37:27.846-05:00] [Planning0] [NOTIFICATION] [] [oracle.EPMCSS.CSS] [tid: 12] [userId: <anonymous>] [ecid: 0000IuMyLkaFW7G6yz7i6G1DGo0g0000Dc,0] [SRC_CLASS: ] [APP: PLANNING#11.1.2.0] [SRC_METHOD: ] EPMCSS-Cache refresh started asynchronously.
[2011-03-08T14:37:27.863-05:00] [Planning0] [NOTIFICATION] [] [oracle.EPMCSS.CSS] [tid: 12] [userId: <anonymous>] [ecid: 0000IuMyLkaFW7G6yz7i6G1DGo0g0000Dc,0] [SRC_CLASS: ] [APP: PLANNING#11.1.2.0] [SRC_METHOD: ] EPMCSS-got the current time stamp to set for delta chache update 2011-03-08 14:37:28.403
[2011-03-08T14:37:27.863-05:00] [Planning0] [NOTIFICATION] [] [oracle.EPMCSS.CSS] [tid: 12] [userId: <anonymous>] [ecid: 0000IuMyLkaFW7G6yz7i6G1DGo0g0000Dc,0] [SRC_CLASS: ] [APP: PLANNING#11.1.2.0] [SRC_METHOD: ] EPMCSS-Initializing cache asynchronously.
[2011-03-08T14:37:27.864-05:00] [Planning0] [NOTIFICATION] [] [oracle.EPMCSS.CSS] [tid: 371] [userId: <anonymous>] [ecid: 0000IuMyLksFW7G6yz7i6G1DGo0g0000Dd,0] [SRC_CLASS: ] [APP: PLANNING#11.1.2.0] [SRC_METHOD: ] EPMCSS-Cache building started asynchronously for the provider - Native Directory
[2011-03-08T14:37:27.865-05:00] [Planning0] [NOTIFICATION] [] [oracle.EPMCSS.CSS] [tid: 371] [userId: <anonymous>] [ecid: 0000IuMyLksFW7G6yz7i6G1DGo0g0000Dd,0] [SRC_CLASS: ] [APP: PLANNING#11.1.2.0] [SRC_METHOD: ] EPMCSS-Cache building started asynchronously for the provider - Company Name MSAD
[2011-03-08T14:37:27.885-05:00] [Planning0] [NOTIFICATION] [] [oracle.EPMCSS.CSS] [tid: 372] [userId: <anonymous>] [ecid: 0000IuMyLlEFW7G6yz7i6G1DGo0g0000De,0] [SRC_CLASS: ] [APP: PLANNING#11.1.2.0] [SRC_METHOD: ] EPMCSS-Cache building is completed for the provider - Native Directory
[2011-03-08T14:37:27.886-05:00] [Planning0] [NOTIFICATION] [] [oracle.EPMCSS.CSS] [tid: 372] [userId: <anonymous>] [ecid: 0000IuMyLlEFW7G6yz7i6G1DGo0g0000De,0] [SRC_CLASS: ] [APP: PLANNING#11.1.2.0] [SRC_METHOD: ] EPMCSS-Cache map size for the provider - 10
[2011-03-08T14:37:31.200-05:00] [Planning0] [NOTIFICATION] [] [oracle.EPMCSS.CSS] [tid: 373] [userId: <anonymous>] [ecid: 0000IuMyM_0FW7G6yz7i6G1DGo0g0000Df,0] [SRC_CLASS: ] [APP: PLANNING#11.1.2.0] [SRC_METHOD: ] EPMCSS-Time to build the cache for the provider Company Name MSADis 3331 size of the cache is 8662
[2011-03-08T14:37:31.201-05:00] [Planning0] [NOTIFICATION] [] [oracle.EPMCSS.CSS] [tid: 373] [userId: <anonymous>] [ecid: 0000IuMyM_0FW7G6yz7i6G1DGo0g0000Df,0] [SRC_CLASS: ] [APP: PLANNING#11.1.2.0] [SRC_METHOD: ] EPMCSS-Cache building is completed for the provider - Company Name MSAD
[2011-03-08T14:37:31.201-05:00] [Planning0] [NOTIFICATION] [] [oracle.EPMCSS.CSS] [tid: 373] [userId: <anonymous>] [ecid: 0000IuMyM_0FW7G6yz7i6G1DGo0g0000Df,0] [SRC_CLASS: ] [APP: PLANNING#11.1.2.0] [SRC_METHOD: ] EPMCSS-Cache map size for the provider - 8662
[2011-03-08T14:37:31.201-05:00] [Planning0] [NOTIFICATION] [] [oracle.EPMCSS.CSS] [tid: 371] [userId: <anonymous>] [ecid: 0000IuMyLksFW7G6yz7i6G1DGo0g0000Dd,0] [SRC_CLASS: ] [APP: PLANNING#11.1.2.0] [SRC_METHOD: ] EPMCSS-Cache building is done for the providers, now started unifying the cache.
[2011-03-08T14:37:31.205-05:00] [Planning0] [NOTIFICATION] [] [oracle.EPMCSS.CSS] [tid: 371] [userId: <anonymous>] [ecid: 0000IuMyLksFW7G6yz7i6G1DGo0g0000Dd,0] [SRC_CLASS: ] [APP: PLANNING#11.1.2.0] [SRC_METHOD: ] EPMCSS-Unify cache done and cache object set to the cache manager.
Is there any other log file that i need to see? The error says to look at the planning log file. Am I looking at the right file?
Thanks!

Creating Groups on Shared Services. Any naming limitations?

Hi,
Is there a limitation on the length of the Group Names that are created in the Native Directory of Shared Services? Only limitation I know is 80 characters, but I think it applies to Essbase outline dimension members only. Can anybody confirm?
Thanks,
A

It's longer than 80. This name worked:
Now is the time for all good men to come to the aid of their party. The quick red fox jumped over the lazy brown dog. asdfjkl;
That's 129 characters. I got one up to 242 characters and saved it, but when I tried to modfiy it I got an error message saying the length was too long.
The documentation probably states the maximum length.
However, once the length of the group name gets past 40 or so it becomes difficult to read in the Shared Services console. How long does it need to be?
Regards,
Cameron Lackpour

User Type in Shared Services

All,
I am on 9.3.1
Until now I have users only to planning app.
Now most of the above users need access to a native essbase app (with out planning).
In SharedServices, Under projects->AnalyticServer->AnalytciServer, only users are listed (no groups) and their "User Type" is planning.
Now I have to change them to "Planning, Essbase" for each user.
I didn't find "User Type" in corresponding section in the export of CSSImportExport utility.
have lots of users , Is there any way to automate?
Thanks
Krishna

Make sure the users/groups have the essbase role of server access
Then in shared services right click the essbase server and select "assign access control", select users/groups then you should be able to define the type of access essbase/planning.
Cheers
John
http://john-goodwin.blogspot.com/

Register with Shared Services Failing in 11.1.1.3

Hi,
We installed 11.1.1.3 in Linux operating system and the application server is Websphere 6.1.After Installation and Configuration of EPM products we Externalized users from EAS Console and configured Active Directory in Shared Services and now want to migrate users of Existing Production environment to new Environment.For that created a new testgroup in Shared Services under Native Directory and when I am refreshing it's displaying an error as shown below:
Essbase failed to get roles list for [ESB:Analytic Server] from Shared Services Server with Error [32:1062:Failed to connect to the user directory [msadServer]
Can anyone suggest on this.
Any help is appreciated...

This usually happens when the application exists in Essbase but does not exist in Shared Services.
To resolve this you need to go into the AAS console, right click on the Sample application and select the 'REGISTER' option.
This will register the application with Shared Services. You should then see the application listed in Shared Services under the Analytic Server project.
You will need to make sure that the list of applications in the Analytic Server matches the list of applications under the project in Shared Services. If you have any other applications missing then please register those as well.
HTH-
Jasmine.

Regarding Associating Company access directory to shared services

Similar Messages

Maybe you are looking for