Secure Kerberos Support in BPC v10 SP13?

Hi guys.
I have been asked by the business to confirm that BPC supports secure (aka 'double-encrypted') Kerberos.
The only documentation I can find on this on the SAP site relates to either NW or MS version through CMS.
I will be installing using the "Windows" authentication option, so does this support encrypted Kerberos out of the box?
I am looking at BPC MS v10 SP13.
Thanks

Hi,
I'm investigating the same issue.
I found some oss note about BPC MS installation with Kerberos (eg http://service.sap.com/sap/support/notes/1961655) and some about issue resolutions.
http://service.sap.com/sap/support/notes/1988971
http://service.sap.com/sap/support/notes/1968584
In the meanwhile did you tried to configure BPC with kerberos?
Thanks for sharing
GFV

Similar Messages

  • BPC v10 SP13 fails to copy environment

    Hi all.
    I need to copy an Environment (AppSet) in v10 SP13.
    However, every time I try, it creates the Webfolders, FileDB and database, but when it gets to creating OLAP, it just stops.
    It does nothing, then after about an hour, I get a Server Timeout.
    The system was fine when creating the EnvironmentShell and I was able to fully restore an Environment from a DEV system, but it just won't let me copy the Environment.
    There is nothing in tblLogs and nothing in Eventvwr on either server (App/SQL).
    I have also confirmed that the required ports are open (80, 443, 2382, 2383, Custom SQL Port)
    Any ideas, anyone?
    It's really starting to annoy me now.
    Thanks

    Thanks for the quick reply Fred.
    Firstly, I have rebooted both servers (SQL and App) several times.
    I have just tested copying EnvironmentShell though, and it worked perfectly, which has annoyed me even more.
    Any idea what I can do about this, as I need to copy this environment today if possible?
    Thanks
    ** Update **
    I tried processing the OLAP cubes from the back end (in SQL Server).
    If I do each application cube individually, it works perfectly.
    If I do a full process of all cubes, it gets part-way through, then just stops after "finished reading xxxx" and never continues.
    Any ideas what could cause this?
    Thanks

  • New MS BPC V10 implementation - migrate user rights, reports, etc

    Hi all,
    I am new on BPC but had have already been involved on some other SAP implementations such as BO.
    We are trying to move our BPC V10 Microsoft infrastructure from the Partner (who is supporting it) Domain Controller to ours. We decided to start from a new implementation of the BPC server then migrate the environment/models and files thanks to the server manager.
    The current BPC is using IPS (with LDAP authentication) as a console management to create users then import them in BPC admin. We would like to simply configure our new BPC implementation with AD authentication straight in BPC without using IPS.
    My question is:
    Do you think it will be safe to do it that way?
    Do you think there could be an issue regarding the user ownership of reports, user right configuration, etc?
    Please any advise would be very helpful.
    And Thank in advance,
    Jawad

    Hi Jawad,
    I don't know IPS but I can give you some answer about BPC.
    " regarding the user ownership of reports" BPC give you just the possibility to create bpf or custom menu where you can put links for specific reports but a smart user can open a report directly from menu "open dynamic template" and execute it.
    You can give rights through security e.g. giving to one user the access only for one or some entities, or limiting other dimensions so even if he's able to open a reports not present in his bpf he cannot run it for oter entities or dimension values different from his security rights.
    For packages you can insert some specific package in the team folder in this case only member of the team are able to see and execute this package.
    Putting packages in company will give the possibility to all the teams/users that have the rights to execute packages to see and launch every package.
    There is only a limit for the security, you cannot combine different dimension values to have specific rights, e.g. if you give rights for entity "A" and category "X", and also for Entity "B" and category "Y" you will not give the possibility to write only in category "X" when the user set entity "A", etc. but he will be able to use indiferently both categories and entities.
    Regards
         Roberto

  • What is it supported in BPC about SSIS pkg

    I have some problems implementing SSIS dtsx for BPC.
    A package with a sequenct container, or with a user variable to use to setting a property, or with a task to call another dtsx doesn't function!.
    Does exist any technical documentation (not a user guide, please!) that describes what it is supported in BPC about SSIS dtsx?
    Many thanks.

    Craig,
    You can do Partition in AS DB.
    There was a bug in AS that didn't keep partititon information but it was fixed.
    Please try it.
    Also you can find How to document in here.
    http://wiki.sdn.sap.com/wiki/display/BPX/EnterprisePerformanceManagement%28EPM%29How-to+Guides
    Hope it will help you.
    James Lim

  • How NOT to do security & customer support

    Our Skype account was suspended, for reasons unknown to me - but understandable, since security is important.
    (And no, it was not one of those pesky scam emails, and OF COURSE I tried to log in directly via Skype (on both my Mac and my iPad) and not via the provided link and proceeded from there)
    The problem is that, in order to unlock my account, I have to answer questions that I never knew I was going to be asked:
    For us to lift the restriction on your account, please provide us with the following information:
    1) In what year did you create your account?
    WTF? That was AGES ago! Somewhere between 2004 and 2008 I think.
    2) In which country/region did you create your account?
    WTF? Can't remember if I started using Skype when I worked in New Zealand, Scotland, or Germany. I still mostly use iChat and FaceTime.
    3) What payment method did you use?
    WTF? I think PayPal but I'm not sure - too long ago. And the credit card I might have used has expired years ago.
    4) Tell us the details of up to three of your Skype contacts. You can use their actual name or Skype Name if you know it.
    Is that ANY of your business??? Isn't that kind of information supposed to be private??? That’s pretty much an admission that they snoop through all your stuff …
    Please be aware that if the information you will provide us are missing or incorrect, we are unable to verify your identity and process your request.
    So after 10 (?) years we lost our Skype account and contacts in it.
    I can't even contact their support or the forum because - you guessed it - YOU HAVE TO LOG INTO YOUR SKYPE ACCOUNT FIRST!!!
    IMBECILES!
    The SOFTWARE isn't very good, but the COMPANY behind it is simply atrocious! But what can you expect from Microsoft?!
    What is really annoying is that nowhere, absolutely nowhere, am I being told what "unusual activity" is taking place. To be honest, I doubt there even IS any unusual activity - otherwise a simple password reset would have done it.
    The ONLY way I was able to contact them was by logging in with my Hotmail account (which I did not really want to do as they are separate accounts). Thanks Microsoft - I guess that was the aim of this little exercise … still can't get into our Skype account but now I can contact their “help” …
    I got to “chat” with “Dan A.” who says “sorry” a lot and explains that management sets the bar for “security” very high. Asking obscure questions which users can't answer isn’t “high standards”, that’s INCOMPETENCE!
    After going through all kind of hoops we arrive at:
    "I really want to help you on this since it is clearly your account, But since I have to follow our process with regards to account's security, I really recommend you to go through this verification. I am sorry, I am just following orders. I am very very sorry."
    Unbelievable. There is a VERY lonely brain cell at the other end of the line …
    So I ask for the problem to be escalated up the ladder. Answer:
    "I hope I can escalate this, but since your account is blocked we need to verify your account first."
    I think that brain cell just self-destructed.
    The sheer INCOMPETENCE at Microsoft is mind-blowing!
    So what am I supposed to do? Guess all possible combinations until I hit the right one so that their "high security standards" are fulfilled?
    Years of contact details and some money down the drain because Microsoft **bleep**ed up as usual. Bad security, incompetent support, out of this world arrogance. I just KNEW they would **bleep** up Skype when they took over - 2.8 was the last decent version (and I hope you all are aware that the ONLY reason to force people onto the newer versions and make it incompatible with the old one was so that they and the NSA can listen in).

    As Costa Rica isn't on this page : http://support.apple.com/kb/HT5699
    then try contacting Support via this form and explain that you've forgotten your answers, don't have a rescue email address, and your country isn't on the HT5699 page and see how they reply : https://ssl.apple.com/emea/support/itunes/contact.html
    When they've been reset you can then use the steps half-way down this page to add a rescue email address for potential future use : http://support.apple.com/kb/HT5312 .

  • Some questions concerning BPC v10

    Hi averybody,
    I am working in a project of BPC v10 and there are some questions i would like to solve. Specifically i want to know if the new version of SAP BPC allow you to insert new records in a hierarchy level. I heard somewhere it was possible by defining percentages to split the record on base members.
    On the other hand, in bpc v7.5 whenever you look for a dimension member using a filter in a evcvw , the dimension presented in order to select a member has no hierarchy. Do you know if it has changed inn bpc v10 or it remains equal?
    Does anybody know something concerning this items? Any help will be much appreciated,
    Thanks in advance,

    Hi,
    -->On the other hand, in bpc v7.5 whenever you look for a dimension member using a filter in a evcvw , the dimension presented in order to select a member has no hierarchy. Do you know if it has changed inn bpc v10 or it remains equal?
    No change in BCP 10. Once you fileter based on property view automatically changed to "List View"
    Regards,
    Raju
    Edited by: VaraPrasadraju Potturi on Feb 24, 2012 1:47 AM

  • Office support in BPC 7.5MS

    Hello all,
    Can anyone tell me which office versions will be supported in BPC 7.5MS
    Especially information about Office 2003\2007 are both interesting for me.
    I cannot find anything about this in the releasenote on ssm..
    Thanks,
    Alwin Berkhout

    Hi Alwin,
    You will get this information in the installation guide of BPC 7.5 available in marketplace. Based on that guide, The following list describes the minimum software requirements:
    Microsoft Internet Explorer 7.0, 8.0, or later
    Microsoft Office 2003 or 2007
    .NET Framework 2.0 (Install the .NET Framework Hotfixes by going to: http://support.microsoft.com/kb/899511)
    XML 4.0 SP2 (included with the Internet Explorer software)
    Pentium IV (1 GHZ CPU)
    512 MB RAM
    100 MB of free hard disk space in the My Documents folder
    20 MB of free hard disk space for the installed Administration files
    Xceedzip.dll (version 6.5)
    Hope this helps.

  • MDX Support for BPC on BW on HANA

    Hi All,
    I have the following queries on MDX support for BPC on BW on HANA -
    1. What is the current state of Dimension Member formulas (or MDX) with BPC on HANA. Are they natively being evaluated within HANA?
    2. Does BPC on HANA support the same MDX features and functionalities that BPC on any other database would ? Are there any limitations here ?
    Please advise. Thanks.

    Saurabh Diwakar,
    Does note 1714013 gives insight to any of your questions?
    BR
    Prabhith

  • BPF an Work Status in BPC v10

    Hi averybody,
    I am working in a project of BPC v10 and i have a question i would like to solve. Specifically i want to know if the new version of SAP BPC allow you to associate a step of the BPF with a change of the work status strictly.
    Does anybody know something concerning this item? Any additional information about new functionalities of BPF and work status?
    Thanks in advance,

    Hi
    You can certainly do that. When you've created a set of work statuses and want to associate the work states to a BPF, you can associate with a setting for Related Action along with the Input you are providing to the suers (scrnsht below). I am not sure you can make it mandatory for the user to change work status setting, but you can allow a change in the work status.

  • Is Office 2010 comptabile and supported by BPC NW 7.5?

    Is Office 2010/excel 2010 comptabile and supported by BPC NW 7.5 SP04?

    According to SAP Note [1513080|https://css.wdf.sap.corp/sap/support/notes/1513080] Office 2010 is not supported until BPC 7.5 NW SP05.

  • WL's WS-Security stack support

    Hi
    Sorry for crossposting. Just after publishing on "Java Technology & XML"topic I found a WL specific one.
    The original post is WL's WS-Security stack support
    To save your time I'll copy/paste it here..
    Hi
    3 questions regarding WL10 support of web service security spec's stack support.
    1. What are additional ws-sec specs supported by WL10 (no doubt, the basic, WS-Sec. is supported)? - what is about WS-Sec. conversation, WS-Trust, Federation etc?
    2. In case I need to handle verification of tokens by myself, what is the best way to be involved? Are there special hook ups of WL i have to implement, or I can add my JAAS LoginModule with some specific name and it will be used?
    3. Once the WS-Sec authentication was successfully performed, does WL10 execute the call in bounding to Subject?

    Thanks Patrick! That thread helped. I got the proxy service to use the customized WS-Policy.
    Do you know of any tool to create the password digest given a plain text password? Also, is there any particular algorithm that weblogic uses to store the digest in the authenticator? I am currently using soapUI to act as a client for unit testing purposes. I tried supplying the WSS header with the inbuilt feature of 'Add WSS Username Token' in soapUI. It adds the username, password digest, nonce and created date. However, I get the 'Failed to assert identity with UsernameToken' exception in the log. The request never gets through.
    Edited by: SOAer on Apr 8, 2011 9:07 AM

  • Kerberos Support for OCOC 9.04?

    Any chance the Oracle Calendar Outlook Connector will support Kerberos authentication? The desktop client software does already and it would seem like something easily implemented. It's going to be hell having to manage a separate password database for 600+ users on the Oracle server if we can't get Kerberos support for the OCOC.
    Timothy Boyden
    Systems Administrator
    MIT Department of Facilities

    Timothy, there is no support for Kerberos with Oracle Connector for Outlook 9.0.4. However, Kerberos style authentication is in the roadmap and will follow Oracle's overall Identity Management strategy.
    Cheers,
    Michel Rouse

  • BPC v10 for Microsoft Platform Training

    Good Morning!
    We are going to be upgrading to BPC v10 for the Microsoft Platform and I could use some suggestions to help find an appropriate training course on reporting/planning/dashboards in the new version.
    When I've looked up training it appears to be for netweaver version.  I believe there should be resources available for the microsoft version (hopefully soon), but I'm not quite seeing what I am looking for.
    Any help / suggestions will be much appreciated.

    Hi Sheryl
    Glad to hear you are getting assistance. Another thing to consider - and this really depends on your learning style - is the SAP Learning Hub (Customer Edition). It is an annual subscription to most SAP Learning Content, including all courses for the equivalent of a 3-5 course. You would get all the BPC* courses (and heaps more).
    If you are the type of learning who can self teach and have access to a system at work, then it might be a way for you to access training that is not scheduled in your location. If you prefer classroom training then you might need to look to see if you can travel (perhaps the course is scheduled somewhere else).
    Regards
    Colleen

  • Does Cisco Cloud E-mail Security Solution Support IPv6?

    For the Cisco Cloud E-mail Security Solution - does it support both inbound and outbound IPv6?  Are there any limitations?  I know the IronPort E-mail Security Appliances supports IPv6 - but specifically interested in the cloud service.
    Thanks,
    --Jim

    arkhane wrote:
    Hi.
    Does anyone could explain me about SSL/TLS?
    Here is the situation:
    E72 allows in securîty settings to select SSL/TLS. I selected it for both accessing and sending mails and I can logon to my POP and send with SMTP.  So apparently no problem.
    But I asked my internet provider if they support SSL/TLS and they told me no they does not support it....so my question is does really SSL/TLS works in my situation and my provider has no clue on security settings or SSL/TLS does not work but it has no incidence on using my mails as I said I can receive mails and send mails even if those security settings are selected...?
    Thanks if anyone could explain me this.
    Some e-mail providers like Gmail use SSL/TLS.
    http://mail.google.com/support/bin/answer.py?answer=13287
    ‡Thank you for hitting the Blue/Green Star button‡
    N8-00 RM 596 V:111.030.0609; E71-1(05) RM 346 V: 500.21.009

  • 64GB+ RAM support: OS X v10.8.2 Supplemental Update 1.0

    OS X v10.8.2 Supplemental Update 1.0, a minor software update bringing a handful of fixes to the latest version of OS X Mountain Lion. 
    The OS X v10.8.2 Supplemental Update is recommended for all users running OS X Mountain Lion v10.8.2 and includes the following fixes:
    - Resolves an issue that may cause certain Japanese characters to appear incorrectly in Mail
    - Allows Safari to access secure sites when parental controls are enabled
    - Addresses an issue that may prevent systems with more than 64 GB of RAM from starting up
    Not on http://support.apple.com/downloads/ yet.

    The supplemental update did address the 'slow' Time Machine backups under 10.7.5 - if this is your first backup, and depending on how much data you are backing up, I would guess that it could take 6-9 hours, but certainly not 2 (or 99) days. If it seems that the backup is 'hung' just stop it, reformat the external drive, and try again. For some great Time Machine troubleshooting tips, see http://pondini.org/TM/Troubleshooting.html.
    Good luck,
    Clinton

Maybe you are looking for

  • PXA_NO_SHARED_MEMORY Solaris 10

    Dear Experts, I had installed SAP IDES 6.0 on Solaris 10. HW Configuration is 32 GB 4 Ultrasparc CPU, SWAP Space allocated 50 GB, In the same server i have installed SolMan EhP1 assigining RAM of 10 GB and For IDES i have assigned 17 GB RAM.. I have

  • What is Standerd Process of Subcontracting in SAP B1?

    Hi experts, I want to know standard process of Subcontracting in SAP B1? as i know only the scenario that i have production of chair and i want that chair to give for subcontracting to vendor and again receive that chair and sale it so how this proce

  • Pc to connect internet using iphone

    How do I connect my pc to internet via my iphone's mobile cellular network?

  • [svn:osmf:] 17613: Fix ExamplePlayer UI for Flex 3.0.

    Revision: 17613 Revision: 17613 Author:   [email protected] Date:     2010-09-08 13:20:35 -0700 (Wed, 08 Sep 2010) Log Message: Fix ExamplePlayer UI for Flex 3.0. Modified Paths:     osmf/trunk/apps/samples/framework/ExamplePlayer/org/osmf/view/MainW

  • -Dproperty=value  option in Java Command

    When I try the following command java -DtdeInstallPath="C:\My Folder\Code\tde\" -DtdeWorkspacePath="C:\My Folder\Code\tde\" tde.cli.CLIManager I get an error from JVM which is as follows. Exception in thread "main" java.lang.NoClassDefFoundError: Fol