Restricting access to some of the LDAP users in obiee 11g.

Hi Experts,
I have successfully integrated LDAP with OBIEE 11g and user's are Authenticated to login to obiee using their LDAP credentials.
But the case is All the employees in the company who have ldap are able to login(any way this is expected as we integrated ldap with OBIEE)
Is there any way that we can restrict the access to users who don't need OBIEE. If so please suggest me the required steps.
Edited by: MKC on Oct 5, 2012 7:43 AM

Handle it in LDAP side, try to create a group in LDAP for BI users and use it in integration so that only this specific group uses sit in bi side.
Pls mark if helps

Similar Messages

Localization with welcome message to the respecitve user in OBIEE-11g

How do we can acheive localization with welcome message along with time to the respecitve country user in OBIEE-11g.

Raghav N wrote:
How do we can acheive localization with welcome message along with time to the respecitve country user in OBIEE-11g.Refer to the documentation here for complete details: http://docs.oracle.com/cd/E14571_01/bi.1111/e10541/deploylocal.htm

Unable to recreate the same user in OBIEE 11g

I have created user name : Justin
logged into analytics as justin.
deleted the user: Justin.
re-created the user: Justin
when trying to login, I am getting below error:
Unable to Sign In
An invalid User Name or Password was entered.
should I be deleting or restarting the server for this?
thanks
srikanth.

Hi,
Yes.Just refresh GUID and just while deleting user :Justin folder and justin.atr must be removed.then try to GUID then try to login again.
FYI: to regenerate user GUIDs:
Update the FMW_UPDATE_ROLE_AND_USER_REF_GUIDS parameter in NQSConfig.INI:
Open NQSConfig.INI for editing at:
ORACLE_INSTANCE/config/OracleBIServerComponent/coreapplication_obisn
Locate the FMW_UPDATE_ROLE_AND_USER_REF_GUIDS parameter and set it to YES, as follows:
FMW_UPDATE_ROLE_AND_USER_REF_GUIDS = YES;
Save and close the file.
Update the Catalog element in instanceconfig.xml:
Open instanceconfig.xml for editing at:
ORACLE_INSTANCE/config/OracleBIPresentationServicesComponent/
coreapplication_obipsn
Locate the Catalog element and update it as follows:
<Catalog>
<UpgradeAndExit>false</UpgradeAndExit>
<UpdateAccountGUIDs>UpdateAndExit</UpdateAccountGUIDs>
</Catalog>
Save and close the file.
Restart the Oracle Business Intelligence system components using opmnctl:
cd ORACLE_HOME/admin/instancen/bin
./opmnctl stopall
./opmnctl startall
Set the FMW_UPDATE_ROLE_AND_USER_REF_GUIDS parameter in NQSConfig.INI back to NO.
Important: You must perform this step to ensure that your system is secure.
Update the Catalog element in instanceconfig.xml to remove the UpdateAccount GUIDs entry.
Restart the Oracle Business Intelligence system components again using opmnctl:
cd ORACLE_HOME/admin/instancen/bin
./opmnctl stopall
./opmnctl startall
For more ref:
http://docs.oracle.com/cd/E23943_01/bi.1111/e10543/privileges.htm#CHDEBGIA
http://obiee11gqna.blogspot.com/2011/10/obiee11g-updating-guids.html
Thanks
Deva

Restricting access to link based on a user's accesslevel

I've gotten the DW login feature working for restricting
access to pages based on a user's successful login and associated
accesslevel. However, I have some links that open an Excel
spreadsheet and an Outlook calendar. Is there an easy way to
restrict access to a link so that an unauthorized user can't
navigate to the link? Here's my code for the link:
<td height="19" colspan="3"
valign="top"><a
href="STI-Intranet/XLS/PROD_SCHED.xls" title="Current Production
Schedule (Read Only)">STI Production Schedule
</a></td>
<td height="4%" valign="top"><a href="
http://server_3/public/cal_engineering/"
title="FROM INTRANET">INT</a></td>

What server side language are you using? Do the links need to
be restricted
to just one access level, or multiple levels? Should it be
blocked for only
one level or multiple?
Bryan Ashcraft (remove brain to reply)
Web Application Developer
Wright Medical Technologies, Inc.
=============================
Macromedia Certified Dreamweaver Developer
Adobe Community Expert (DW) ::
http://www.adobe.com/communities/experts/
"mslee1965" <[email protected]> wrote in
message
news:e52o7e$3ak$[email protected]..
> I've gotten the DW login feature working for restricting
access to pages
> based
> on a user's successful login and associated accesslevel.
However, I have
> some
> links that open an Excel spreadsheet and an Outlook
calendar. Is there an
> easy
> way to restrict access to a link so that an unauthorized
user can't
> navigate to
> the link? Here's my code for the link:
>
> <td height="19" colspan="3"
valign="top"><a
> href="STI-Intranet/XLS/PROD_SCHED.xls" title="Current
Production Schedule
> (Read
> Only)">STI Production Schedule
</a></td>
>
> <td height="4%" valign="top"><a
href="<a target=_blank
> class=ftalternatingbarlinklarge
> href="
http://server_3/public/cal_engineering/"">http://server_3/public/cal_engin
> eering/"</a> title="FROM INTRANET"> Helvetica,
sans-serif">INT</a></td>
>
>

Apple changed my Apple ID to the email address associated with my iTunes account. I now can no longer access my account because the old user name is no longer valid and has no password. I have been on the phone with tech support for hours trying to fix.

Apple changed my Apple ID to the email address associated with my iTunes account. I now can no longer access my account because the old user name is no longer valid and has no password. I have been on the phone with tech support for hours trying to fix this. I can not update any of the apps associated with that user name.

Is this itunes on the iPad or on my computer? Thank you for the reply.

Trying to upgrade to 3.6.8, and it says I can't because I "don't have access to some of the items. What in the world does this mean, and what do I do?

I'm on a new Mac Mini running 10.6.4, bought in January and loaded with what I assumed was the latest version of FireFox--what I have is 3.5.2. I know I upgraded at least once since January
When I try to download 3.6.8, it says that I "don't have access to some of the items."
I don't think I've downloaded any plug-ins or anything that should trigger this. I have done a bunch of the standard upgrades that Microsoft incessantly sends out to fix problems in the Office suite. Haven't added any new applications. Can't figure out the problem. HELP!

Hello.
Try this:
- uninstall your current version of Firefox (no data will be lost)
- delete it's Firefox install folder (not your profile folder)
- install the new version
That should circumvent this problem. If you can't delete your Firefox install folder, after having uninstalled it, maybe it's because some of the files are locked. Try rebooting the system. If that doesn't help, ask Apple for support.

How do I share the iTunes library with all/some of the other users on the same iMac?

How do I share the iTunes library with all/some of the other users on the same iMac?

Check out these articles it may help...
http://support.apple.com/kb/HT3819
http://www.apple.com/itunes/how-to/#playlists-shareplaylists
hope this helps.

Cannot empty trash can in iMac. Says I have no access to some of the items. Any ideas?

I created some files and folders on my iMac and deleted them. This time around when I try to empty the trash can via secure emptying it says I have no access to some of the items... Very strange. I had done same a while ago and worked with same files and folders. I restarted system. Same problem persisting. "Get Info" on files shows read and write. It is my own personal Mac... Any ideas? Thank you.

Select the text on the line below by dragging across it. Don't include the blank space at the end of the line. Only the text should be highlighted.
ls -Oeln
Copy the selected text to the Clipboard by pressing the key combination command-C.
Launch the Terminal application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.
Paste into the Terminal window by pressing command-V, then press the space bar.
Now switch to the Finder and and select one of the items in the Trash. Drag into the Terminal window. More text will be added to what you entered.
Click in the Terminal window to activate it, then press return.
Wait for a new line ending in a dollar sign ($) to appear.
Post any lines of output that appear below what you entered—the text, please, not a screenshot.
If any personal information appears in the output, anonymize before posting.

I can't download Firefox on my MacBook Pro message comes up saying I don't have access to some of the items

I download and then drag the icon into the application folder. Then a message comes up saying I don't have permission or access to some of the items. I have no idea what that means. My computer is MacBook Pro operating system 10.6.7

If you have problems with updating or with the permissions then easiest is to download the full version and trash the currently installed version to do a clean install of the new version.
Download a new copy of the Firefox program and save the DMG file to the desktop
* Firefox 4.0.x: http://www.mozilla.com/en-US/firefox/all.html
* Firefox 3.6.x: http://www.mozilla.com/en-US/firefox/all-older.html
* Trash the current Firefox application to do a clean (re-)install
* Install the new version that you have downloaded
Your profile data is stored elsewhere in the [http://kb.mozillazine.org/Profile_folder_-_Firefox Firefox Profile Folder], so you won't lose your bookmarks and other personal data.

Extract list of users in OBIEE 11g

Can someone please tell me what is the way to extract the list of users using OBIEE 11g with their roles and permissions.
Thanks in advance.

Check this script
'1: Make an UDML export of the RPD using nqgenudml.exe
'2: Change the filename/location in this script
'3: Run the script from the command line cscript Read_Usergroups.VBS > users.txt
'4: Put the export in a XLS Pivot table
Set objFSO = CreateObject("Scripting.FileSystemObject")
'point this to your UDML EXPORT
Set objFile = objFSO.OpenTextFile("E:\usergroup.txt", ForReading)
Const ForReading = 1
Dim arrFileLines()
dim strRLine
dim strTemp1
dim strTemp2
dim strTemp3
dim intRoles
intRoles = 0
i = 0
WScript.Echo "USER_NAME;FULL_NAME;ROLE;COUNT"
Do Until objFile.AtEndOfStream
strRline = objFile.ReadLine
if left(strRline,12) = "DECLARE USER" then Redim Preserve arrFileLines(i)
strTemp1 = MID(strRLine ,15 , 50)
strTemp1 = MID(strTemp1 ,1 , instr(strTemp1, """")-1)
IF instr(strRline,"}" ) >0 THEN
strTemp2 = MID(strRLine , instr(strRline,"{")+ 1, (instr(strRline,"}") - (instr(strRline,"{")+ 1)))
ELSE
strTemp2 = ""
END IF
arrFileLines(i) = strTemp1 &";" & strtemp2
intRoles = 1
i = i + 1
end if
if intRoles >= 1 then
if instr(strRline,"HAS ROLES (" ) >0 then
intRoles =2
end if
if intRoles =2 and instr(strRline,"HAS ROLES (" ) =0 then
strTemp3 = MID(strRline,instr(strRline, """")+1,50)
strTemp3 = MID(strTemp3,1,instr(strTemp3, """")-1)
WScript.Echo arrFileLines(i-1) &";" & strTemp3 &";1"
end if
if intRoles =2 and instr(strRline,")" ) >0 then intRoles = 0
end if
end ifLoop
objFile.Close
Source : Srinivasan Software Solutions Pvt.Ltd.: [OBIEE 11g] OBIEE Get All Users And Roles From RPD

Benefits of the 64bit Version of OBIEE 11g?

Hello,
I am in the process of verifying if the 32bit or the 64 bit Version of OBIEE 11g would suit our needs. The platform we will install OBIEE would be windows.
As far as the certifications go the 32bit Version of OBIEE is certified on the 32bit Versions of windows, so if we want to run a *certified* combination on a 64bit OS the 64bit version would be the way to go. OUI however doesn't complain when installing the 32bit Version on a 64bit OS.
As far as the Windows Server versions go there is no 32bit Version available anymore for future releases (starting with server 2008 R2), so in the future the (certified) way to go would be 64bit. However, for the sake of argument let's assume we are staying on Server 2008 where a 32bit version is still available.
I've found a lot of blog posts on how great OBIEE 11g is, and if one has the chance one should go for the 64bit version. That's nice, but I am missing the +whys+ and certainly the +buts+. Also, the oracle documentation (Oracle&#174; Fusion Middleware System Requirements and Specifications) tells me the requirements for both architectures, but most certainly not when to use the 64bit version, and when a 32bit installation still will suit my needs.
The main reason for me to go for a 64bit version would be if we would have a huge amount of concurrent user sessions where of course the 32bit version will be constrainted by the Memory Limit imposed by the 32bit architecture. I guess the types of reports etc. might also come into play when it boils down to memory.
As for now I've installed the 64bit and the 32bit Version (11.1.1.7) and the first thing I can observe is that weblogic consumes double the memory on the 64bit version even with no user session connected and nothing to do for OBIEE whatsoever. So for a small installation (say ~ 20 concurrent sessions) I am tempted not to go for the general advice from above to "use the 64bit version if you can" as it's highly oversized.
Are there any other drawbacks in using the 32bit Version of OBIEE 11g for small installations (besides the certification question, and the "one day you might have more users" reason)? And when would it be advisable to go for 64bit? I know a general "do X when you have Y sessions" is not possible as every sytem behaves different, so I understand that a general answer isn't possible. But personal experiences would be helpful
thanks in advance,
cheers
Christian

I have recently used the iLife bundle to process footage on the 3rd birthday party of my friends' son (my first production). I used iMovie to edit the footage, added audio tracks from iTunes, dropped a few photos from iPhoto on the drop zones of iDVD, added a slideshow to the project as well. Boy, my friends were amazed when I played the DVD before them (they were not mac users).
With such limited effort one need to spend on it (time and money), the output iLife gives is, what Jobs likes to say in keynote, phenomenal.

About the filter function in OBIEE 11g

Hi, all.
when i use the filter function in OBIEE 11g, it turn out a wrong result.
The operation steps and detail are described as follow:
1. In the Column Formula pane, I typed the Formula of the column 'count of customer' as:
FILTER(count(distinct("customer info dimesion"."customerID")) USING ("TradeType Dimesion"."TradeType" = '001'))
2. But the phisical SQL about this column in the NQquery file is that: "count(distinct(T11520.CUSTOMERID)) as c5, "
which means that, the filter wasn't applied, right?
If so, what shall I do in this situation, in other words , how can i make a Condition COUNT？
Any Suggestion is appreciated!
Thank you in advance~~O(∩_∩)O~

Hi katherine,
FILTER(count(distinct("customer info dimesion"."customerID")) USING ("TradeType Dimesion"."TradeType" = '001'))I think your formula there is mistake like many braces...instead type this in your f(x)
=>Filter(count(distinct customer_id) USING trade type='001')
This filter function is same like a case statement,if you filter still gives error write a case statement
CASE WHEN TradeType Dimesion.TradeType='001' THEN count(distinct customer info dimesion.customerID) ELSE 0 END
Will it be helpful?,follow this etiquette http://forums.oracle.com/forums/ann.jspa?annID=939
By,
KK

Modifying the configuration files in OBIEE 11g

Hi
We are facing an error when we tried to to add "<DashboardMaxBeforeMenu>" tag in the instanceconfig.xml manually and restart the presentation services of OBIEE 11g .
I had come across few suggestions that, configuration files in OBIEE 11g cannot be modified manually. I am doubtful on these suggestions . So please, let me know for sure wether we can modify the configuration files in OBIEE 11g manually or not.
It will be very helpful if the process to modify the configuration files in OBIEE 11g is shared with us.
Thanks.

Hi,
I could not tell you whether the; <DashboardMaxBeforeMenu>10</DashboardMaxBeforeMenu> still works in 11g.
What I do know is that you could manually edit the configuration files. The only thing is when you modify this file via the Enterprise Manager, your customizations get lost. You have to manually add them again.
Cheers,
Daan Bakboord
http://obibb.wordpress.com

Sharing the LDAP user database with Cisco ASA5510

Hi all,
We have recently purchased a Cisco ASA5510 security appliance which acts as our VPN gateway. This device can authenticate using either Radius or TACACS protocols (or have its own internal data base).
Can we share in some way the internal LDAP users and authentication data base with our Cisco device?
Thanks,
Ziv

Good question! I am trying to do VPN authentication via Radius on our D-Link DFL-800. It worked well in 10.4 with a custom freeRadius, but now it's not working with the bundled freeRadius (it's not issuing MPPE keys). But yes, it does try to authenticate, I just added the firewall IP and shared secret in the Radius settings in SA.

For some reason the guest user on my mac book pro has a password and did not set a password on it how do I remove it?

For some reason there a password on the guest user on my mac book pro when I try to login in to for someone to use, I didn't set the password I try to remove it and try disable the guest user but didn't work so don't know what to do please help

Restart the computer (with Parental Controls off) and try again. If there's no change, see below.
If you don't already have a current backup, back up all data, then reinstall the OS.* You don't need to erase the startup volume, and you won't need the backup unless something goes wrong. If the system was upgraded from an older version of OS X, you may need the Apple ID and password you used.
If you use FileVault 2, then before running the Installer you must launch Disk Utility and select the icon of the FileVault startup volume ("Macintosh HD," unless you gave it a different name.) It will be nested below another icon with the same name. Click the Unlock button in the toolbar and enter your login password when prompted. Then quit Disk Utility to be returned to the main Recovery screen.
There are ways to back up a computer that isn't fully functional. Ask if you need guidance.
If you installed the Java runtime distributed by Apple and still need it, you'll have to reinstall it. The same goes for Xcode. All other data will be preserved.
*The linked support article refers to OS X 10.10 ("Yosemite"), but the procedure is the same for OS X 10.7 ("Lion") and later.

Restricting access to some of the LDAP users in obiee 11g.

Similar Messages

Maybe you are looking for