Report on OU Delegations?

Hi,
Over the years people have delegated various permissions on OUs - what are some of the ways to export those delegations (perhaps into a human readable format?). We are running Windows 2008 R2 DCs.
Thanks,
SK

Below link might be helpful,
http://social.technet.microsoft.com/wiki/contents/articles/6477.how-to-view-or-delete-active-directory-delegated-permissions.aspx
Regards,
Gopi
JiJi
Technologies

Similar Messages

Delegated Admin reports strange number of users

I recently noted that our Delegated Admin (Delegated Administrator 6.4-2.05, B2008-04-29) Organizations page
(the one which lists the hosted domains and particularly their "Number of Users") lists this number plain wrong.
For many organizations it is reported as 0 or 1, for one there's a blank line, and only one seemingly has 39 users.
When I click on organizations however, I see their full lists of users (I believe, ones which have a non-empty mail
attribute set in LDAP) and there are tens in most orgs and over a hundred accounts in the larger org.
What is wrong? Does DA's Organization-List page use some other means of counting the users than the individual
Organization's page?

JimKlimov wrote:
In fact, while importing our old server, I did initialize most domains' users via
ldapclient queries as discussed on-list in mid-2008. Nobody said that there
are other static values outside of a user's account data :)The sunnumusers: attribute is commonly overlooked -- primarily because it is for admin-interface purposes only and doesn't impact on the operation of user accounts.
Is it possible to replace this value of sunnumusers by a dynamic search (or
counter), either in the GUI code or perhaps in the LDAP attribute?No. Any such dynamic search would have an adverse performance impact on the DA interface for large environments.
What is the logically correct value, the count of users with mail attribute set?If you want the sunnumusers: to match the number of users displayed when you click on the organisation in the "Organizations" tab then you would count the users which matched the following search for the domain:
""(&(uid=*)(&(objectClass=inetuser)(|(inetUserStatus=active)(inetUserStatus=inactive))))""
Regards,
Shane.

Script to report constrained delegation

Has anyone already created a script that reports constrained delegations for all user accounts in Active Directory?
This topic first appeared in the Spiceworks Community

Hello
You can do something like this.
./quickcheck.sh PRIMARY
You need an env file and then just call your sql ( quickaudit.sql) from the shell script. You can spool from the SQL and mail the spool file if you prefer.
#!/bin/bash
if [ "$1" ]
then DBNAME=$1
else
echo "basename $0 : Syntax error : use . quickcheck <DBNAME> "
exit 1
fi
# Set the Environmental variable for the instance
. /u01/app/oracle/dba_tool/env/${DBNAME}.env
$ORACLE_HOME/bin/sqlplus /nolog <<EOF
connect / as sysdba
@/u01/app/oracle/dba_tool/bin/quickaudit
EOFThe env file needs an ORACLE_SID, path all the thing in your profile.
Example from mine :
ORACLE_BASE=/u01/app/oracle
ULIMIT=unlimited
ORACLE_SID=PRIMARY
ORACLE_HOME=$ORACLE_BASE/product/11.2.0.2
ORA_NLS33=$ORACLE_HOME/ocommon/nls/admin/data
LD_LIBRARY_PATH=$ORACLE_HOME/lib:/lib:/usr/lib
LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/usr/local/lib
LIBPATH=$LD_LIBRARY_PATH:/usr/lib
TNS_ADMIN=$ORACLE_HOME/network/admin
PATH=$ORACLE_HOME/bin:$ORACLE_BASE/dba_tool/bin:/bin:/usr/bin:/usr/ccs/bin:/etc:/usr/sbin:/usr/ucb:$HOME/bin:/usr/bin/X11:/sbin:/usr/lbin:/GNU/bin/make:/u01/app/oracle/dba_tool/bin:/home/oracle/utils/SCRIPTS:/usr/local/bin:.
export TERM=vt100
export ORACLE_BASE ORACLE_SID ORACLE_TERM ULIMIT
export ORACLE_HOME
export LIBPATH LD_LIBRARY_PATH ORA_NLS33
export TNS_ADMIN
export PATHBest Regards
mseberg

DCDIAG reports broken delegations but not having any DNS issues.

I am planning on moving my 2003 domain to a 2012 domain, I need to resolve all the dns issues with my current domain. When i run DCDIAG i get the following error for all of my name servers. I have 3 seperate forests. I use forwarders to forward to all my
dns servers. I have no DNS issues as far as i know. When i run dcdiag on any of my DC's i get the following error for everyone of my Name Servers.
DNS server: 20.26.212.204 (server.mydomain.com.)
4 test failures on this DNS server
This is a valid DNS server
Name resolution is funtional. _ldap._tcp SRV record for the forest root domain is registered
Delegation is broken for the domain mydomain.com.mydomain.com. on the DNS server x.x.x.x
[Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
The only zones in my dns are the _msdcs.mydomain.com and mydomain.com. I do not understand why it is saying mydomain.com.mydomain.com in the error. I am not sure where else to look to try and resolve this error.
Any help greatly appreciated.
Thanks for your help

Hi,
Base on my experience, that must be the Delegated zone issue, this issue is because the new DNS
has duplicated the name for parent and child domain, you can try to backup your current DNS then delete the duplicate zone then restart the DNS service.
More information:
Back up a Zone File
http://technet.microsoft.com/en-us/library/ee649198(v=ws.10).aspx
Understanding Zone Delegation
http://technet.microsoft.com/en-gb/library/cc771640.aspx
Create a delegation for a domain controller
http://technet.microsoft.com/en-us/library/cc757375(v=ws.10).aspx
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Which databases support 'SSO to the database' via Delegation in XI 3.1?

SQL Server has been officially supported since XI R2. Oracle I believe has now joined the list.
Which other database platforms are supported via Windows Delegation in BOE XI 3.1? (And must they reside on Windows too, or can they reside on *NIX?)
Thanks

well preliminary findings appear that SAP business warehouse was added. Oracle has always worked on unix it's just not documented internally how to set this up. I have seen at least 2 customers get oracle on unix working for on-demand reporting (sso to the DB).
If the customer can integrate their oracle DB on nix with AD then we can delegate tickets to it (only tested in unconstrained delegation)
I haven't found this in the docs yet but rather I checked universe connections in 3.1 to see if they had the sso to the DB option. The only new one was SAP.
We already supported oracle and SQL.
To note I was unable to test sybase and DB2 for some reason they appeared to be looking for middleware client components I did not have installed. So they may have been added as well (since I know both can be integrated with AD).
Regards,
Tim

Need help to develop report with column chart

Hi
I am new to SAP BO world.Could anyone please help me to design report with column chart.Please guide me how to develop report for the following requirement.I am not aware of variance columns and variance labels.Please provide some guidance or some tutorials(for column Chart) so that I can complete the task. Please reply me as soon as possible.Waiting for reply.Thanks in advance.
Type: Column Chart
u2022     Rows: Banking Asset Margin (%)
u2022     Start / End Columns: PY YTD Act(Prior year year to date); CY YTD Act(Current year Year to date)
u2022     Variance Columns: # Var (CY-PY Act) for GOLM; Volume; Rate; Non Banking NII; Banking Volatility in NII; Banking Volatility in OOI; Fees/One Offs/Other; Volatile Items; Sophie
u2022     Sub-total columns: PY YTD Underlying; CY YTD Underlying.
u2022     Variance Labels: % Var (CY-PY Act) for Total Income and Underlying Income
u2022     Sub-Total Labels: # Var (CY-PY Act) for Net Insurance Income; Banking Volatility; Other Operating Income
Additional information
u2022     Variance columns (bar) colours: Red = Adverse to Prior Year; Green = Favourable to Prior Year
u2022     Columns to show values. Adverse values to be shown in red text in brackets. Favourable results in black text.
u2022     All values in Black, but adverse to be shown below the bar.

Hi,
This type of question is almost impossible to answer over a forum .
You need to work with your business to understand what these requirements mean in terms of data modelling and relationships between object entities.
- Some of these metrics should be delegated to source, and calculated in the update routines to your datatargets (aka Cubes/Tables)
- Others could be resolved in the semantic layer (Universe)
- Other will be calculated in the presentation layer as local formulae or variables.
whilst BusinessObjects is a fairly intuitive tool, it may be unreasonble to expect a new learner to deliver an advanced report with conditional formatting.
Regards,
H

PL/SQL reporting problem - "The webpage cannot be found" error

Dear All Expert,
I'm here having a problem on generating apex report using PL/SQL. "The webpage cannot be found" error appear when "Search" button pressed.
I'm appreciating if anyone can give their idea on this issue.
PL/SQL will be fired when "Search" button pressed.
My PL/SQL code as below;
DECLARE
lv_desc CLOB:='';
lv_note_desc varchar2(4000);
lv2      CLOB;
lv_title varchar2(2000);
lv_ti          varchar2(10);
lv_tg          varchar2(10);
lv_tr_cnt     integer:= 0;
lv_ti_code     varchar2(6);
lv_age          number(6):= 0;
lv_note_flag     varchar(1);
fv_note_flag varchar2(6);
fv_ti_code varchar2(6);
ti_code varchar2(20);
ti_name varchar2(50);
ti_tm_code varchar2(6);
ti_test_grp varchar2(6);
note_desc varchar2(4000);
ti_unit varchar2(20);
ti_insurance_code varchar2(20);
ti_price number(14);
ti_sex varchar(1);
ti_age varchar(10);
ti_tr_desc varchar(30);
ti_lolimit number(10);
ti_uplimit number(10);
ti_plolimit number(10);
ti_puplimit number(10);
lv_hkey          number(10):= 0;
lv_found     varchar2(1):= 'N';
lv_itpv     varchar2(4000);
lv_lolimit     char(15);
lv_uplimit     char(15);
lv_tr          char(15);
lv_tc          char(30);
CURSOR READ_C1_REC IS
select ti_code, ti_name, ti_tm_code, ti_test_grp,ti_unit, ti_itpv_flag,ti_attached_cmt
from test_item
where ti_code like NVL(:P11104_TI_CODE,'%')
and ti_test_grp like NVL(:P11104_TG_CODE,'%')
and ti_code not like '0MB%'
order by ti_code;
C1_REC READ_C1_REC%ROWTYPE;
CURSOR READ_C2_REC IS
select tr_sex_code,tr_ageto,tr_agecode,tr_range_desc,tr_mrr_desc,tr_normal_lolimit,tr_upper_uplimit,tr_panic_lolimit,tr_panic_uplimit
from tr_range
where tr_ti_code = lv_ti_code
order by tr_ageto asc,tr_sex_code desc;
C2_REC READ_C2_REC%ROWTYPE;
cursor READ_C3_REC is
select tivh_key
from test_itpvh
where tivh_ti_code = ti_code
order by tivh_efd desc;
C3_REC READ_C3_REC%ROWTYPE;
cursor READ_C4_REC is
select tivd_lolimit,tivd_uplimit,tivd_value,tivd_rr_desc
from test_itpvd
where tivd_hkey = lv_hkey
order by tivd_seqno;
C4_REC READ_C4_REC%ROWTYPE;
BEGIN
lv_title := '<div style="overflow: auto;height: 500px; width: 1000px;"><table style="width: 500px" cellpadding="0" cellspacing="0"><thead><tr><th>Code</th><th>Name</th></tr></thead>';
htp.p(lv_title);
OPEN READ_C1_REC;
LOOP
FETCH READ_C1_REC INTO C1_REC;
EXIT WHEN READ_C1_REC%NOTFOUND;
     lv_note_flag := 'N';
fv_note_flag := 'N';
     fv_ti_code := c1_rec.ti_code;
ti_code := c1_rec.ti_code;
ti_name := ' '||c1_rec.ti_name;
ti_tm_code := c1_rec.ti_tm_code;
     ti_test_grp := c1_rec.ti_test_grp;
lv_desc := '<tbody><tr><td><input type="hidden" name="f01" value="'||fv_ti_code||'" /></td>'||
'<td><input type="text" name="f02" size="20" maxlength="20" value="'||ti_code||'" /></td>'||
'<td><input type="text" name="f03" size="50" maxlength="50" value="'||ti_name||'" /></td>'||
'<td><input type="text" name="f04" size="6" maxlength="6" value="'||ti_tm_code||'" /></td>'||
'<td><input type="text" name="f05" size="6" maxlength="6" value="'||ti_test_grp||'" /></td>';
if c1_rec.ti_itpv_flag = 'Y' then
     lv_note_flag := 'Y';
     open read_c3_rec;
     loop
          fetch read_c3_rec into c3_rec;
          exit when read_c3_rec%notfound;
          lv_hkey := c3_rec.tivh_key;
          lv_found := 'Y'; exit;
     end loop;
     close read_c3_rec;
if lv_found = 'Y' then
          lv_lolimit := 'Lower limit'; lv_uplimit := 'Upper limmit';
          lv_tr := 'Result'; lv_tc := 'Comment';
          lv_itpv := 'INTERPRETED TEST RESULT'||chr(10)||'-----------------------'||chr(10)||lv_lolimit||lv_uplimit||lv_tr||lv_tc||chr(10);
          open read_c4_rec;
          loop
          fetch read_c4_rec into c4_rec;
          exit when read_c4_rec%notfound;
          lv_lolimit := to_char(c4_rec.tivd_lolimit,'999990.999');
          lv_uplimit := to_char(c4_rec.tivd_uplimit,'999990.999');
lv_tr := c4_rec.tivd_value;
          lv_tc := c4_rec.tivd_rr_desc;
          lv_itpv := lv_itpv||chr(10)||lv_lolimit||lv_uplimit||lv_tr||lv_tc;
          end loop;
          close read_c4_rec;
     end if;
note_desc := lv_itpv||chr(10)||chr(10);
     end if;
     if ltrim(rtrim(c1_rec.ti_attached_cmt)) is not null then
     lv_note_flag := 'Y';
     note_desc := note_desc||'ATTACHED COMMENTS'||chr(10)||'-----------------'||chr(10)||ltrim(rtrim(c1_rec.ti_attached_cmt))||chr(10);
     end if;
begin
     select unit_name into ti_unit
from unit_tbl
where unit_code = c1_rec.ti_unit;
     exception when no_data_found then
ti_unit := null;
     end;
lv_desc := lv_desc ||'<td><input type="text" name="f06" size="20" maxlength="20" value="'||ti_unit||'" /></td>';
begin
     select imh_insurance_code, imh_curr_p1 into ti_insurance_code, ti_price
     from item_masterh
where imh_code = c1_rec.ti_code;
     exception when no_data_found then
     ti_insurance_code := null; ti_price := null;
     end;
lv_desc := lv_desc ||'<td><input type="text" name="f07" size="20" maxlength="20" value="'||ti_insurance_code||'" /></td>'||'<td><input type="text" name="f08" size="14" maxlength="14" value="'||to_char(ti_price)||'" /></td>';
lv_ti_code := c1_rec.ti_code;
lv_tr_cnt := 0;
lv2 := '<table width="100%" border="0" bgcolor="#009900" cellspacing="0">';
OPEN READ_C2_REC;
     LOOP
     FETCH READ_C2_REC INTO C2_REC;
     EXIT WHEN READ_C2_REC%NOTFOUND;
     lv_tr_cnt := lv_tr_cnt + 1;
if c2_rec.tr_agecode = 'Y' then
lv_age := c2_rec.tr_ageto / 365;
     elsif c2_rec.tr_agecode = 'M' then
          lv_age := c2_rec.tr_ageto / 30;
     else
          lv_age := c2_rec.tr_ageto;
     end if;
     ti_sex := c2_rec.tr_sex_code;
ti_age := lv_age||c2_rec.tr_agecode;
ti_tr_desc := ' '||c2_rec.tr_range_desc;
     ti_lolimit := c2_rec.tr_normal_lolimit;
     ti_uplimit := c2_rec.tr_upper_uplimit;
     ti_plolimit := c2_rec.tr_panic_lolimit;
     ti_puplimit := c2_rec.tr_panic_uplimit;
if c2_rec.tr_range_desc = 'MRR' then
     lv_note_flag := 'Y';
     note_desc := 'MRR DESCRIPTION'||chr(10)||'---------------'||chr(10)||c2_rec.tr_mrr_desc||chr(10)||chr(10)||note_desc;
     end if;
if lv_note_flag = 'Y' then
fv_note_flag := 'Y';
end if;
lv2 := lv2 || '<tr><td><input type="text" name="f09" size="1" maxlength="1" value="'||ti_sex||'" /></td>'||'<td><input type="text" name="f10" size="10" maxlength="10" value="'||to_char(ti_age)||'" /></td>'||'<td><input type="text" name="f11" size="30" maxlength="30" value="'||ti_tr_desc||'" /></td>'||'<td><input type="text" name="f12" size="10" maxlength="10" value="'||to_char(ti_lolimit,'99990.999')||'" /></td>'||'<td><input type="text" name="f13" size="10" maxlength="10" value="'||to_char(ti_uplimit,'99990.999')||'" /></td>'||'<td><input type="text" name="f14" size="10" maxlength="10" value="'||to_char(ti_plolimit,'99990.999')||'" /></td>'||'<td><input type="text" name="f15" size="10" maxlength="10" value="'||to_char(ti_puplimit,'99990.999')||'" /></td></tr>';
     END LOOP; lv2 := lv2||'</table>';
     CLOSE READ_C2_REC;
if lv_tr_cnt = 0 then
     if lv_note_flag = 'Y' then
fv_note_flag := 'Y';
end if;
     end if;
lv_desc := lv_desc||'<td><input type="hidden" name="f16" value="'||fv_note_flag||'" /></td>'||'<td><input type="hidden" name="f17" value="'||note_desc||'" /></td>';
     lv_desc := lv_desc||'<td>'||lv2||'</td></tr></tbody>';
htp.p(lv_desc);
END LOOP;
CLOSE READ_C1_REC;
htp.p('</table>');
END;
Thanks you very much in advance!

First thing I'd say is that you're code doesn't compile:
lv_title := '   // <----Secondly, does no-one use comments anymore? Isn't this drilled into people in programming classes at colleges? There's a whole bunch of code there but not much in the way of explanation as to what you are trying to achieve. It might make perfect sense to you now but try going back to it in a year and see if you can untangle it's purpose.
Thirdly, is there a specific reason why you've chosen to manually generate a report in PL/SQL, rather than delegating it to a report region? I understand that for particular formatting requirements (denormalised data, cells-within-cells etc), it is occasionally necessary to go to these lengths but I can't help but feeling a well-written query could simplify a lot of this, particularly the references multiple cursors.

Cannot create dataset from claims based authentication sharepoint site in report builder 3.0

I have a sharepoint site, which is configured as claims based authentication (ref:
http://ashrafhossain.wordpress.com/2011/05/25/how-to-configure-claim-based-authentication-for-sharepoint-project-server-2010/) . both AD and asp.net members can log in to the site successfully. My user need to use the report build to create report
on this sharepoint site. As a result, the site is also integrated with reporting service. I try to create a report in the sharepoint site by clicking "New Document" -> "Report builder Report". The report builder will comes out and ask for credential to
connect to the report server. I use asp.net member to login and it can let me to create a data source which connect to a the list of the sharepoint site with credential option "Use current Windows user. Kerberos delegation might be required". However, when
I try to create a data set and click the query designer, error "Server was unable to process request. ---> Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))" appear as below:
Besides, non of my AD account can be used to login to the report builder. Errors below found in the ULS log:
09/26/2012 14:47:27.75 w3wp.exe (0x116C)
0x11F4 SharePoint Foundation
Claims Authentication fo1t
Monitorable SPSecurityTokenService.Issue() failed: System.ServiceModel.FaultException`1[Microsoft.IdentityModel.Tokens.FailedAuthenticationException]: The security token username and password could not be validated.
(Fault Detail is equal to Microsoft.IdentityModel.Tokens.FailedAuthenticationException: The security token username and password could not be validated.).
09/26/2012 14:47:27.76 w3wp.exe (0x140C)
0x0F38 SharePoint Foundation
Claims Authentication fsq7
High Request for security token failed with exception: System.ServiceModel.FaultException: The security token username and password could not be validated. at Microsoft.IdentityModel.Protocols.WSTrust.WSTrustChannel.ReadResponse(Message
response) at Microsoft.IdentityModel.Protocols.WSTrust.WSTrustChannel.Issue(RequestSecurityToken rst, RequestSecurityTokenResponse& rstr) at Microsoft.IdentityModel.Protocols.WSTrust.WSTrustChannel.Issue(RequestSecurityToken
rst) at Microsoft.SharePoint.SPSecurityContext.SecurityTokenForContext(Uri context, Boolean bearerToken, SecurityToken onBehalfOf, SecurityToken actAs, SecurityToken delegateTo)
524a2f96-f5ff-4c96-80d1-f08d3c7ef14f
09/26/2012 14:47:27.76 w3wp.exe (0x140C)
0x0F38 SharePoint Foundation
Claims Authentication 8306
Critical An exception occurred when trying to issue security token: The security token username and password could not be validated..
524a2f96-f5ff-4c96-80d1-f08d3c7ef14f

Hi Foxvito,
Claims authentication types supported by SharePoint 2010 are Windows Claims, forms-based authentication Claims, and SAML Claims. In SAML-Claims mode, SharePoint Server accepts SAML tokens from a trusted external Security Token Provider (TST). From the
blog you referenced, it seems to use the SAML Claims authentication.
However, the Reporting Services client applications: Report Builder, the Report Designer in Business Intelligence Development Studio, and Management Studio do not support connecting and authenticating with LiveID or SAML Claims based SharePoint Web applications.
That's because the SAML Claims don't use the Reporting Services authentication endpoint. So, you have to change the Claims authentication type to use Report Builder on the SharePoint site.
References:
Overview of Kerberos authentication for Microsoft SharePoint 2010 Products
Claims Authentication and Reporting Services
Regards,
Mike Yin
Mike Yin
TechNet Community Support

BW Hierarchy not coming up in my WEBI report

Hi Gurus,
I have created BW query with only 2 fields 1) 0PROJECT 2) 0WBS Element and a key fig 'No of records'. I activated the hierarchy on 0WBS. Then created universe on this query. WBS hier has 6 levels so i in universe, I got 6 dimensions with L00, L01...L06 and created my Webi report with following fields.
1) Project (dimension)
2) WBS L00 Dimension
3) WBS L01 Dimension
4) WBS L02 Dimension
5) WBS L03 Dimension
6) No of records - key fig
If I take only Project field and No of records, I can see no of rec with values. But when i executed the report with all WBS hier dimensions like L00, L01,.... i can see only project column is populated and all WBS L00, L01...etc and No of rec key fig are not populated at all.
I am new to this so am i missing anything here? We just now installed BO XI 3.1 SP3. May be some files are missing in installation?
Regards,
Rahul.

>
SAPBW 2006 wrote:
> Hi Gurus,
>
> I have created BW query with only 2 fields 1) 0PROJECT 2) 0WBS Element and a key fig 'No of records'. I activated the hierarchy on 0WBS. Then created universe on this query. WBS hier has 6 levels so i in universe, I got 6 dimensions with L00, L01...L06 and created my Webi report with following fields.
>
> 1) Project (dimension)
> 2) WBS L00 Dimension
> 3) WBS L01 Dimension
> 4) WBS L02 Dimension
> 5) WBS L03 Dimension
>
> 6) No of records - key fig
>
> If I take only Project field and No of records, I can see no of rec with values. But when i executed the report with all WBS hier dimensions like L00, L01,.... i can see only project column is populated and all WBS L00, L01...etc and No of rec key fig are not populated at all.
>
> I am new to this so am i missing anything here? We just now installed BO XI 3.1 SP3. May be some files are missing in installation?
>
> Regards,
> Rahul.
Here there are two ways to get out this (there's no problem with u r installation)
*1) if u are using webintelligence in bo , make sure that drill option(on top) to be enabled,*
*2) in universe, select the key figure (No of records) rightclick * No:ofrecords* -> object properties -> Properties tab Check Function is assigned to sum, if the option Database delegated is there just change that to sum. and apply, save and export the universe and check again
Regards,
Naveen kumar

Analysis Office vs Webi report ---Bex query Data mismatch

I have one Bex query.
I insterted the query in Analysis office for Microsoft edition, and its pulling 985 records, but when i inserted the bex query in Webi report its pulling only 27 records. Any body faced similar problem, explain the solution..?
Using BICS connction for webi report development.
Environment: BI 4.1 SP5
Anlaysis office version : 1.4 SP10

Hi Ingo,
If we make it database delegated then the Webi query returns no results. (Blank results). Moreover there is no exception aggregation
We have tried the following and getting the result correctly,
In the Bex Query We had a Time variable which was based on SAP exit. We removed the SAP exit variable from Bex Query and restricted the period for atime range.
Then created a Prompt in Webi report for the time
The result is matching.
But still failed to undrstand this because other queries which have SAP exit variables works fine.
Still working around for a convincing solution for this.. Will let you know
Thanks and Regards
Rajesh

Error 401 while trying to connect SSRS via BIDS Report Designer to PowerPivot workbook hosted in SharePoint 2013

I am having trouble connecting from BIDS 2012 to a PowerPivot workbook hosted in SharePoint 2013. I'm following this guide:
http://technet.microsoft.com/en-us/library/gg413489.aspx but run into authentication problems (Error 401, access denied).
I saw this issue comming up a number of times on this forum, but non of the proposed solutions really solve my issue. Also a lot of the solutions apply to SP2010. I verified the following items and they seem to be ok:
All servers / clients are member of the same ad domain.
The Excel PowerPivot file opens in SharePoint Excel Online and sliders and filters work (so connection SSAS / SharePoint is ok)
I enabled Kerberos, and fiddler/ Kerberos auth tester (http://blog.michelbarneveld.nl/michel/archive/2009/12/05/kerberos-authentication-tester.aspx) are reporting kerberos is used when connecting to the sharepoint site.
SPN for the sharepoint server is created and the sharepoint service account is allowed for delegation.
When looking at fiddler when connecting to the PowerPivot document in BIDS, i see an ADOMD.net POST request to /_vti_bin/PowerPivot/redirector.svc/ failing with error 401, even the request containing the auth cookie.
I updated the web.Config in C:\Program Files\Common Files\microsoft shared\Web Server Extensions\15\ISAPI\PowerPivot to use CredentialType "Windows" instead
of NTLM.
In the sharepoint logs I find this error:
03/28/2014 16:39:26.35 w3wp.exe (0x1FE4) 0x0170 SharePoint Foundation Monitoring nasq Medium Entering monitored scope (Request (POST:http://spserver:80/_vti_bin/PowerPivot/redirector.svc/?DataSource=%2Fsites%2FAndreas%2FShared%2520Documents%2FRapportering%2520Resultaat%2520-%2520BalansV5.xlsx)). Parent No
03/28/2014 16:39:26.35 w3wp.exe (0x1FE4) 0x0170 SharePoint Foundation Runtime aep93 High Exception trying get context compatibility level: System.IO.FileNotFoundException: The site http://spserver:80/_vti_bin/PowerPivot/redirector.svc/?DataSource=%2Fsites%2FAndreas%2FShared%2520Documents%2FRapportering%2520Resultaat%2520-%2520BalansV5.xlsx could not be found in the Web application SPWebApplication Name=SharePoint - 80. at Microsoft.SharePoint.SPSite.LookupSiteInfo(SPFarm farm, Boolean contextSite, Boolean swapSchemeForPathBasedSites, Uri& requestUri, Boolean& lookupRequiredContext, Guid& applicationId, Guid& contentDatabaseId, Guid& siteId, Guid& siteSubscriptionId, SPUrlZone& zone, String& serverRelativeUrl, Boolean& hostHeaderIsSiteName, Boolean& appWebRequest, String& appHostHeaderRedirectDomain, String& appSiteDomainPrefix, String& subscriptionName, String& appSit...
03/28/2014 16:39:26.35* w3wp.exe (0x1FE4) 0x0170 SharePoint Foundation Runtime aep93 High ...eDomainId, Uri& primaryUri) at Microsoft.SharePoint.ApplicationRuntime.SPRequestModule.GetContextCompatibilityLevel(Uri requestUri)
03/28/2014 16:39:26.35 w3wp.exe (0x1FE4) 0x0170 SharePoint Foundation Logging Correlation Data xmnv Medium Name=Request (POST:http://spserver:80/_vti_bin/PowerPivot/redirector.svc/?DataSource=%2Fsites%2FAndreas%2FShared%2520Documents%2FRapportering%2520Resultaat%2520-%2520BalansV5.xlsx) 55b8819c-6791-2052-bd23-f1c5b08a996c
03/28/2014 16:39:26.35 w3wp.exe (0x1FE4) 0x0170 SharePoint Foundation Claims Authentication aip8h Medium Token Cache: Could not find SPSite for 'http://spserver/_vti_bin/PowerPivot/redirector.svc/?DataSource=%2Fsites%2FAndreas%2FShared%2520Documents%2FRapportering%2520Resultaat%2520-%2520BalansV5.xlsx'. Stack: ' at Microsoft.SharePoint.SPSite.LookupSiteInfo(SPFarm farm, Boolean contextSite, Boolean swapSchemeForPathBasedSites, Uri& requestUri, Boolean& lookupRequiredContext, Guid& applicationId, Guid& contentDatabaseId, Guid& siteId, Guid& siteSubscriptionId, SPUrlZone& zone, String& serverRelativeUrl, Boolean& hostHeaderIsSiteName, Boolean& appWebRequest, String& appHostHeaderRedirectDomain, String& appSiteDomainPrefix, String& subscriptionName, String& appSiteDomainId, Uri& primaryUri) at Microsoft.SharePoint.SPSite..ctor(SPFarm farm, Uri requestUri, Boolean contextSite, Boolean ... 55b8819c-6791-2052-bd23-f1c5b08a996c
03/28/2014 16:39:26.35* w3wp.exe (0x1FE4) 0x0170 SharePoint Foundation Claims Authentication aip8h Medium ...swapSchemeForPathBasedSites, SPUserToken userToken) at Microsoft.SharePoint.IdentityModel.SPTokenCache.GetSubscriptionIdFromContext(String context)'. 55b8819c-6791-2052-bd23-f1c5b08a996c
03/28/2014 16:39:26.37 w3wp.exe (0x1FE4) 0x0170 SharePoint Foundation Runtime aep93 High Exception trying get context compatibility level: System.IO.FileNotFoundException: The site http://spserver:80/_vti_bin/PowerPivot/redirector.svc/?DataSource=%2Fsites%2FAndreas%2FShared%2520Documents%2FRapportering%2520Resultaat%2520-%2520BalansV5.xlsx could not be found in the Web application SPWebApplication Name=SharePoint - 80. at Microsoft.SharePoint.SPSite.LookupSiteInfo(SPFarm farm, Boolean contextSite, Boolean swapSchemeForPathBasedSites, Uri& requestUri, Boolean& lookupRequiredContext, Guid& applicationId, Guid& contentDatabaseId, Guid& siteId, Guid& siteSubscriptionId, SPUrlZone& zone, String& serverRelativeUrl, Boolean& hostHeaderIsSiteName, Boolean& appWebRequest, String& appHostHeaderRedirectDomain, String& appSiteDomainPrefix, String& subscriptionName, String& appSit... 55b8819c-6791-2052-bd23-f1c5b08a996c
03/28/2014 16:39:26.37* w3wp.exe (0x1FE4) 0x0170 SharePoint Foundation Runtime aep93 High ...eDomainId, Uri& primaryUri) at Microsoft.SharePoint.ApplicationRuntime.SPRequestModule.GetContextCompatibilityLevel(Uri requestUri) 55b8819c-6791-2052-bd23-f1c5b08a996c
03/28/2014 16:39:26.37 w3wp.exe (0x1FE4) 0x0170 SharePoint Foundation Authentication Authorization agb9s Medium Non-OAuth request. IsAuthenticated=True, UserIdentityName=0#.w|myad\adasseville, ClaimsCount=21 55b8819c-6791-2052-bd23-f1c5b08a996c
03/28/2014 16:39:26.37 w3wp.exe (0x1FE4) 0x0170 PowerPivot Service Request Processing 99 High Unable to retrieve SPUser. SPContext.Current.Web not available 55b8819c-6791-2052-bd23-f1c5b08a996c
03/28/2014 16:39:26.37 w3wp.exe (0x1FE4) 0x0170 SharePoint Foundation Runtime aep93 High Exception trying get context compatibility level: System.IO.FileNotFoundException: The site http://spserver:80/_vti_bin/PowerPivot/redirector.svc/?DataSource=%2Fsites%2FAndreas%2FShared%2520Documents%2FRapportering%2520Resultaat%2520-%2520BalansV5.xlsx could not be found in the Web application SPWebApplication Name=SharePoint - 80. at Microsoft.SharePoint.SPSite.LookupSiteInfo(SPFarm farm, Boolean contextSite, Boolean swapSchemeForPathBasedSites, Uri& requestUri, Boolean& lookupRequiredContext, Guid& applicationId, Guid& contentDatabaseId, Guid& siteId, Guid& siteSubscriptionId, SPUrlZone& zone, String& serverRelativeUrl, Boolean& hostHeaderIsSiteName, Boolean& appWebRequest, String& appHostHeaderRedirectDomain, String& appSiteDomainPrefix, String& subscriptionName, String& appSit... 55b8819c-6791-2052-bd23-f1c5b08a996c
03/28/2014 16:39:26.37* w3wp.exe (0x1FE4) 0x0170 SharePoint Foundation Runtime aep93 High ...eDomainId, Uri& primaryUri) at Microsoft.SharePoint.ApplicationRuntime.SPRequestModule.GetContextCompatibilityLevel(Uri requestUri) 55b8819c-6791-2052-bd23-f1c5b08a996c
03/28/2014 16:39:26.37 w3wp.exe (0x1FE4) 0x0170 SharePoint Foundation Monitoring b4ly High Leaving Monitored Scope (PreSendRequestHeaders). Execution Time=1.4166 55b8819c-6791-2052-bd23-f1c5b08a996c
03/28/2014 16:39:26.37 w3wp.exe (0x1FE4) 0x0170 SharePoint Foundation Micro Trace uls4 Medium Micro Trace Tags: 0 nasq,1 aep93,5 aip8h,7 aep93,0 agb9s,3 aep93,0 b4ly 55b8819c-6791-2052-bd23-f1c5b08a996c
03/28/2014 16:39:26.37 w3wp.exe (0x1FE4) 0x0170 SharePoint Foundation Monitoring b4ly Medium Leaving Monitored Scope (Request (POST:http://spserver:80/_vti_bin/PowerPivot/redirector.svc/?DataSource=%2Fsites%2FAndreas%2FShared%2520Documents%2FRapportering%2520Resultaat%2520-%2520BalansV5.xlsx)). Execution Time=19.8324 55b8819c-6791-2052-bd23-f1c5b08a996c
I tried all suggestions and have no longer a clue what the issue could be :(
Is there someone who could give me a hint on what to try next?
Thank you

Hi Adam,
Thanks for helping out.
The web-app is set to Negotiate so that's ok. I've reset the web.config back to Windows, but without luck.
I did see some strange log entries in the ULS logs:
Token Cache: Could not find SPSite for 'http://spserver/_vti_bin/PowerPivot/redirector.svc/?DataSource=%2Fsites%2FAndreas%2FShared%2520Documents%2Ftestrapport_13012014.xlsx'. Stack: ' at Microsoft.SharePoint.SPSite.LookupSiteInfo(SPFarm farm, Boolean contextSite, Boolean swapSchemeForPathBasedSites, Uri& requestUri, Boolean& lookupRequiredContext, Guid& applicationId, Guid& contentDatabaseId, Guid& siteId, Guid& siteSubscriptionId, SPUrlZone& zone, String& serverRelativeUrl, Boolean& hostHeaderIsSiteName, Boolean& appWebRequest, String& appHostHeaderRedirectDomain, String& appSiteDomainPrefix, String& subscriptionName, String& appSiteDomainId, Uri& primaryUri) at Microsoft.SharePoint.SPSite..ctor(SPFarm farm, Uri requestUri, Boolean contextSite, Boolean swapSchemeForPathBasedSites, SPUserToken userToken) at Microsoft.SharePoint.IdentityModel.SPTokenCache.GetSubscriptionIdFromContext(String context)'.
You mentioned the claims-to-windows token service. How do i check if it is configured correctly?
Andreas

SSRS report with PowerPivot datasource - 401 Unauthorized

Hello together,
I have a tricky issue and hope that you can help me:
Problem: I want to build a Reporting Services Report with a PowerPivot datasource with Report Builder 3.0. When I try to access the datasource via Report Builder I get the error: The remote server returned an error: 401 - Unauthorized.
The PowerPivot file lies on a Sharepoint 2013 with Kerberos authentification.
Logs: Here are some sample log entries after getting the error:
Token Cache: Could not find SPSite for 'sharepoint.com/_vti_bin/PowerPivot/secureredirector.svc/?DataSource=sample.xlsx'.
Exception trying get context compatibility level: System.IO.FileNotFoundException: The site sharepoint.com/_vti_bin/PowerPivot/secureredirector.svc/?DataSource=sample.xlsx could not be found in the Web application SPWebApplication Name=sharepoint.com.
Non-OAuth request. IsAuthenticated=True, UserIdentityName=0#.w|user, ClaimsCount=118
Notes: I tried some solutions from the internet, where the web.config from PowerPivot has to be changed. Also I saw that it could be Kerberos related, but no detailed information where to start as the other features are working fine. SPNs
and Delegations are configured. And changing to NTLM is not an option as this is a multi-server platform.
I hope that you have another idea, where the problem could be.
Kind regards,
Robin

Has noone an idea?

Dynamic Filter in report omitted when characteristic not in output.

Hi all,
Hopefully someone can help me with the following:
Since upgrading from 7.01 to 7.4, we encounter strange behaviour in a (WAD-) report.
When filtering a free (compounded-) characteristic by excluding certain members via the navigation panel, the filter only works when the characteristic in question is displayed in the output. When you drag it out of the presented layout, the excluded member is included again, as we see the keyfigures go up to the level when it had when it was included. The filter display however still shows the characteristic member as being excluded.
In 7.0, this phenomenon can not be reproduced.
I've searched the net and SAP notes, so far with no success.
Any ideas?
Thanks in advance,
Eduard

Yes, let me explain the reason because sales have to be database delegated.
In my case sales is not the sum of quantity of productos bought by a customer, sales is like a indicator that show me if customer bought or doesnt bought.
For example David is my customer and i sell 3 types of products: A, B and C.
Date 12.04.2011 David bought product A and B and 13.04.2011 David bought just product C.
In my report if i want to analyze sales by day and customer i have to have the following result:
*****Date 12.04.2011 and customer Dave
            Sales = 1
*****Date 13.04.2011 and customer Dave
            Sales = 1
In my report if i want to analyze sales by day and type of produc i have to have the following result:
*****Date 12.04.2011 and customer Dave
            Sales Product A= 1
            Sales Product B= 1
*****Date 13.04.2011 and customer Dave
            Sales Product C= 1
Can you see my point??
In date 12.04.2011 i cant do a sum if i am analyzing sales by customer because if i do a sum dave show me a sales of 2.
The only way that i found for this behavior is to use database delegated.
I will wait for your answer.

Sharepoint thumbnails in Reporting Services

Hello,
In a reporting services report, if I add an external image stored in a image library in Sharepoint 2007 Standard Edition (let's say http://myserver/ImagesLib/Image.jpg), the image is correctly displayed in the report viewer in visual studio 2008 and in the sharepoint report server.
But if I add an external image on the thumbnail of the previous image (http://myserver/ImagesLib/_t/Image_jpg.jpg) the image is visible in the report viewer but not in the navigator on the sharepoint report server (not available icon).
Do you have any idea on what is wrong?
Thanks in advance for your help

Hi falavillotte,
Based on my testing, we can specify a Excecution Account to solve the issue:
1.Open SQL Server Reporting Services Configuration Manager.
2.Go to "Execution Account"
3.Type a domain account that has permission to access the SharePoint site.
Now, we should able to view the image in the report.
When retrieving external image files, the report server checks to see if an anonymous connection can be made. If the connection is password protected, the report server uses the unattended report processing account to connect to the remote server. When retrieving data for a report, the report server either impersonates the current user, prompts the user to provide credentials, uses stored credentials, or uses the unattended processing account if the data source connection specifies None as the credential type. The report server does not allow its service account credentials to be delegated or impersonated when connecting to other computers, so it must use the unattended processing account if no other credentials are available.
For more information, please see:
Execution Account: http://msdn.microsoft.com/en-us/library/ms181156.aspx
Thanks,
Jin ChenJin Chen - MSFT

SharePoint 2013 and Windows authentication (integrated) or SharePoint user for report data source

Hello,
I am having issues creating report datasource in "Windows authentication (integrated) or SharePoint user" in SharePoint 2013. I followed the steps mentioned in the link http://blogs.msdn.com/b/psssql/archive/2014/04/28/sharepoint-adventures-using-claims-with-reporting-services.aspx.
I am just stuck in the delegation piece here. I have a SSAS instance by name "XXXXAPPV01\Multidimensional". First thing is what is the procedure to set SPN for this instance? I need to add this service in the delegation tab so that C2WTS service
configured correctly.
Nothing but I should be able to access my SSAS 2012 cube from SSRS 2012 by "Windows authentication (integrated) or SharePoint user" as the authentication method.
Palash

I used the below command to set SPN for analysis services.
setspn -S MSOLAPSvc.3/XXXXAPPV01APPV01.xxxxdmo.local:Multidimensional xxxxdmo\svcMyService
After setting the SPN for this service account I added this account(xxxxdmo\svcMyService) in the delegation tab of my domain account created earlier for claim service (xxxxdmo\svcC2WTS). Now in service type it shows -> MSOLAPSvc.3, User or Computer it shows
-> XXXXAPPV01APPV01.xxxxdmo.local and in Port it shows -> Multidimensional. This is in my svcC2WTS account delegation tab. Still I am not able to connect datasource by "Windows authentication(integrated) or SharePoint User". I am getting the
same error "Cannot convert claims identity to windows token".
I am not sure what am I missing in this configuration piece yet to get this working.
Palash

Report on OU Delegations?

Similar Messages

Maybe you are looking for