Security refresh in Planning

I have a Planning application where security gets cleared and re-established every night. Sometimes the refresh takes as little as eight minutes and sometimes over an hour (68 minutes). Does anybody now why that would be? There aren't many users on the system, if any, when this security refresh is being run. thx

Some things to check on... Does your refresh process include a metadata refresh / Essabse restructure? Are you regenerating Essbase security filters or only import of Planning object and metadata security? I would check for resource conflicts on your database server and possibly your Essbase server. Are there any scheduled batch jobs or backup jobs that might be holding up your refresh?

Similar Messages

Autometic planning security refresh is not refreshing the security filters

Hi Friends,
We are using Hyperion planning system 9.3.1. While refreshing the planning security through automated script its not getting refreshed the security filters. In log its showing filter refreshed successfully but actually it’s not refreshing the filters. But when we are doing it manually from planning web its working fine. One more thing we are doing security refresh on daily basic as per business request. So daily its dropping the filters we refreshed manually from planning web.
we are using the below scripts:
CALL G:\Hyperion\Planning\bin\CubeRefresh.cmd /A:application_name /U:user_name /P:password /R /FSV /DEBUG >> In\Log\Refresh_HPOPROD.log
Any help will be appreciated.
Thanks,

I guess you are missing /D

Security Refresh of Shared Services Failing 11.1.1.3

I executed a manual refresh of SS security in EAS after provisioning a new externally authenticated user and the refresh failed. I researched the issue in the log files, and the automatic daily refresh I have set to run via the config file has been failing since the last recycle of services (complete stop and start of services from reliable scripts).
Oracle suggested I stop and restart certain services including a longer pause between SS and EAS/Essbase to resynch Essbase and Shared Services. This did not work, neither did a complete stop, reboot, restart.
I'm approaching desperation, I cannot provision new users in a production environment...
There are no other symptoms. All users are externally authenticated in the AD, and they are not experiencing any login problems at all. Users have changed their p/w even locked out their accounts and and had them unlocked.
I'm attaching some log file snippets. I would greatly appreciate your insight.
Failure message:
Essbase failed to get roles list for [ESB:Analytic Servers:CORPESS:1] from Shared Services Server with Error [32:1062:Failed to connect to the user directory [Cabot2, Cabot].]
From SharedServices_Security_Client.log after services restarted:
2010-09-23 07:12:19,531 INFO [main] Got native directory location from Registry:corpfs.cabotog.com:28089 com.hyperion.css.registry.RegistryManager.getNativeProviderLocationFromRegistry(Unknown Source)
2010-09-23 07:12:19,531 INFO [main] URL constructed out of values in Registry database:ldap://corpfs.cabotog.com:28089/dc=css,dc=hyperion,dc=com com.hyperion.css.common.configuration.CSSConfigurationImplXML.initConfiguration(Unknown Source)
2010-09-23 07:12:21,062 ERROR [Thread-3] 27:1062:Failed to connect to the user directory Cabot2.[Root Cause: [LDAP: error code 32 - 0000208D: NameErr: DSID-031001CD, problem 2001 (NO_OBJECT), data 0, best match of:
'OU=Corp,DC=cabotog,DC=com'
] ] com.hyperion.css.spi.util.jndi.pool.JNDIConnectionPool.getBorrowObject(Unknown Source)
2010-09-23 07:12:21,062 ERROR [Thread-4] 27:1062:Failed to connect to the user directory Cabot.[Root Cause: [LDAP: error code 32 - 0000208D: NameErr: DSID-031001CD, problem 2001 (NO_OBJECT), data 0, best match of:
'OU=Corp,DC=cabotog,DC=com'
] ] com.hyperion.css.spi.util.jndi.pool.JNDIConnectionPool.getBorrowObject(Unknown Source)
2010-09-23 07:12:21,062 ERROR [Thread-3] 60:1101:JNDI error.[Root Cause: 27:1062:Failed to connect to the user directory Cabot2. ] com.hyperion.css.spi.impl.msad.JNDIHelper.getURLContext(Unknown Source)
2010-09-23 07:12:21,062 ERROR [Thread-4] 60:1101:JNDI error.[Root Cause: 27:1062:Failed to connect to the user directory Cabot. ] com.hyperion.css.spi.impl.msad.JNDIHelper.getURLContext(Unknown Source)
2010-09-23 07:12:21,062 WARN [Thread-3] Failed to update Cache for provider Cabot2[Root Cause: 60:1101:JNDI error. ] com.hyperion.css.spi.impl.msad.MSADCacheUpdater.refreshProviderCache(Unknown Source)
2010-09-23 07:12:21,062 WARN [Thread-4] Failed to update Cache for provider Cabot[Root Cause: 60:1101:JNDI error. ] com.hyperion.css.spi.impl.msad.MSADCacheUpdater.refreshProviderCache(Unknown Source)

We are using 11.1.1.3. We had the same issue you described. External users could login to all applications, but all security refreshes failed (in both EAS and Planning) with the failure error in your original post. The patch our consultant applied was "Shared Services Service Fix 11.1.1.3.06" per Oracle support. The following entries in our SS client log are what prompted Oracle's remedy (after several weeks of escalation):
2010-09-24 15:01:38,110 ERROR [Thread-54] 27:1112:Failed to connect to <ldapserver> at <portnumber>. com.hyperion.css.spi.impl.ldap.LDAPProvider.isAvailable(Unknown Source)
2010-09-24 15:01:38,110 ERROR [Thread-54] The folowing providers are not initialized, check configuration [ED] com.hyperion.css.spi.CSSManager.pingConfiguredProviders(Unknown Source)
2010-09-24 15:01:38,110 ERROR [Thread-54] 32:1062:Failed to connect to the user directory <ldapdirectory>. com.hyperion.css.spi.CSSManager.pingConfiguredProviders(Unknown Source)
2010-09-24 15:01:38,110 DEBUG [Thread-54] getRolesListForEntries() failed : [43842 ms]
Edited by: 799357 on Oct 4, 2010 12:33 PM
Edited by: 799357 on Oct 4, 2010 12:38 PM

Error 1054013 when attempting to refresh from planning

I get the error 1054013: Syntax error loading filters - operation canceled when attempting to refresh from planning. I refreshed the security filters but it did not fix the problem. Has anyone else experienced this or does anyone have an idea on the root cause? Thx in advance.

I remember seeing this. There is a filter that is not working. You should open the filters of the application in question and verify. Was there metadata changes (dimensions) that the filter references? This could be the culprit.

Error while refreshing the planning applivation with essbase

Hi all,
I am facing issue to refresh the planning application to essbase. using version 11.1.1.3.
getting this error: hyperion.planning.olap.EssbaseException: Invalid outline handle passed to ESSOTL function %s (1060000)
Please help me if any one knows the solution.
Thanks in advance,
Kiran

Does the following doc Oracle Support help "Planning Database Refresh Error: 'Invalid outline handle passed to ESSOTL function %s (1060000)' [ID 1134003.1]"
Cheers
John
http://john-goodwin.blogspot.com/

Security Refresh for Users in the Group

Hi John,
I assigned an user with Analytic services admin privileges in the shared services. After the refresh security from shared services through EAS console, I clicked on security and clicked on users. I could able to see that user as an administrator(user type).
But when i assigned the same analytic services admin privileges at the group level, all the users in that group are
not showing as administrators in the EAS console after security refresh.(showing as user instead of administrator).
Can you explain why?
Thanks.

Hi,
If you look at the group in EAS then it should be displayed as administrator, then all the users assigned to that group will take on the administrator privileges.
It will not show each user as as administrator just as a user that is the way it works.
Cheers
John
http://john-goodwin.blogspot.com/

Error on refreshing a planning application (9.2.1)

Hi,
When I try to refresh a planning application thru planning desktop the process stops with the error 'Error Detected.Failed to launch member formula synchronization utility, error level 1. Check classpath and other configuration parameters in ../Utils/setHPEnv.bat -2147220590'.
The version of planning is 9.2.1 and I upgraded my application to 9.2.1 from 9.2.0.2. Under 9.2.0.2 I had no problems at all.
I installed 9.2.1 two days ago and I am making some tests but I found this problem.
I checked the above file and it seems ok to me.
Do you have a clue of what might goes wrong?
Regards
John

Hi all,
We faced the same issue. Please find below the cause and solution:
Cause:
This happens due to database driver port number change
Impact:
Planning refresh will return errors pertaining to JDBC connectivity. While trying to add a new member in Planning web, and refreshing, the member gets added in Essbase outline, but all the member formulas will be erased. Hence, addition of the new member in Essbase outline is never a check for having the refresh went through.
Resolution:
1. Navigate to D:\Hyperion\HyperionPlanning\Utils folder and EDIT setHPenv.bat
2. Within setHPenv.bat, check the path/location of the properties file. This will be mentioned in set PLN_PROPERTIES_PATH=D:\Hyperion\HyperionPlanning\....
3. Get the PLN_PROPERTIES_PATH(path) from the above step, copy and paste it in a windows explorer browser to navigate to the correct Planning properties file being pointed to. Check the file 'HspJSHome.properties' for the port number. This will be mentioned in:
<your application name>JDBCURL=jdbc:hyperion:oracle://<your database server>: [PORT NUMBER];SID =<your database/scehma name>
Also note the name of the JDBC_CATALOG given in <your application name>JDBCCATALOG = {note this name}
4. Note the PORT NUMBER and JDBC_CATALOG name mentioned in this file.
5. Run the Configuration Utility [Hyperion System 9 Foundation--> Configuration utility] and regenerate the HspJSHome.properties file. Check if the new PORT NUMBER has been updated. Compare the new port number with the port number mentioned in Step 4.
6. If not, go to command prompt-- C:\tnsping <Give your JDBC_CATALOG name from Step 4> , to return the new PORT NUMBER.
7. Update this PORT NUMBER in HspJSHome.properties file in
<your application name>JDBCURL=jdbc:hyperion:oracle://<your database server>: [NEW PORT NUMBER];SID =<your database/scehma name>
Now the refresh will happen successfully.
Edited by: George Abraham on Oct 29, 2010 7:53 AM

How you refresh the planning application

how you refresh the planning application ? what is an enhanced calculation script?

Is this for an exam or interview?
Cheers
John
http://john-goodwin.blogspot.com/

Export security-Info from planning to flat file

In planning there's the possibility of importing security information (assignedaccess) by the utility ImportSecurity.exe. Is there the possibility of exporting this information (e.g. access todimensions or forms) from planning to flat file. Note: In shared services there's another utility for import andexport of provisioning information (command-line tool) but thisdoesn't comprise import/export of security info of anapplication. RegardsGeri

Hello Geri, Currently, Planning 3.5.1 does not have any utility to export security out of planning. What you can do is this that generated PDF files through the application itself and then convert it in to text files and so on to load security via importsecurity.exe. Thanks, Scorpio

Security Approach and Plan for single logon for Essbase and Reports.

Please any one can suggest me, how can I do the Security Approach and Plan for single logon for Essbase and Reports by using Maxl or Administrator.If any one have code,please forward to my email Id: [email protected]

Once you are logged in to the "Hyperion Portal" as you call it, your user credentials are automatically passed among all the components. Therefore, a lot of the logic you created to pass credentials between BQY files in a desktop environment are no longer needed.

HFM - Security refresh possible?

Hi all,
we are currently facing an issue at a client concerning HFM 11.1.2.0. We are using HFM API to load a new security file into an application. This works quite well – the only
problem is that logged-on users still have their old security permission until they re-logon. Do you know a way to enforce a security “refresh” in HFM without having the need for users to re-logon to
an application?
I really appreciate your help!
Regards Sebastian

Hi,
nope, a log off and log on is required. If you fear that your users don't log out, you can log them out centrally through administration --> Users on System

Has anyone had issues with Planning security refreshing in Essbase

I am on Planning version 9.3.0.1 and we are having issues with planning users being able to use an essbase connection to pull data from smartview. They are able to see data in web forms in planning but they get #no access when they try to connect to the same data in smartview.
Has anyone else experieced this issue.

If user works when you provision individually its because they were set in the environment in EAS.
group has to have all the access needed (bug in orig). css file open a ticket for the file name. example user needs calc access you setup calc but bug in system is not also giving user read and write access. Thus you can individually add this to the group in provisioning area in shared services. in EAS goto File open- editors create/run script with
alter user 'userID' Add application_access_type Planning;
alter user 'userID' add application_access_type Essbase; to add user to the environment if error you need to refresh eas first then run maxl script for planning you also need to go to workspace and select any of your dimensions all your groups ...edit .. migrate identities.. to get group/Users in planning wether adding or removing users. when you do planning changes you need to do database and security filters refresh.

Error when refresh security filter in Planning 11.1.1.3

Dear All,
I found a error when I refresh securty filter in planning.
The error is related to the user who deleted in Microsoft Active Directory.
The shared service cannot find the user. How can I solve the error?
Regards

Have a read of this post :- Removing 'msad' strings for invalid users in Planning as it covers the same area.
Cheers
John
http://john-goodwin.blogspot.com/

Incremental refresh in Planning Desktop only processes 1 member

Hello,
We're running Essbase 9.2.0.2 on AIX, Planning Desktop 9.2.0.2 on Windows, 2003, and Oracle 10g R2 on an AIX machine also.
We copied our Oracle schema "X" to schema "Y" and linked it to a new Planning Application. Now, whenever we run a refresh (incremental or full) it only processes one member (no matter how many changes are pending). The pending x-acts table will get cleared out and only the first one will get added to Essbase.
I've been working with Hyperion on this for over a year and they've determined that the last query (see below) that gets ran isn't getting the all the rows it needs. Basically, the query runs and only gets one result where it should get as many rows as there are in the pending x-acts table. This query runs perfectly in schema "X".
This query does an outer join with HSP_STRINGS table. If we remove the outer join to that table, the query returns the desired results. Any thoughts on this?
SELECT
O1.OBJECT_ID,
O.OBJECT_NAME,
O2.OLD_NAME AS PARENTOLD,
O2.OBJECT_NAME AS PARENTNEW,
O.PARENT_ID,
O.POSITION,
M.CONSOL_OP1,
M.DATA_STORAGE,
M.TWOPASS_CALC,
O.OLD_NAME,
O3.OBJECT_NAME AS CURRENCY_CODE,
O.HAS_CHILDREN,
M.USED_FOR_CONSOL,
O2.PARENT_ID,
O2.POSITION,
O3.OBJECT_ID,
O.OBJECT_TYPE,
S.THE_STRING
FROM
HSP_PENDING_XACTS O1,
HSP_STRINGS S,
HSP_MEMBER M,
HSP_ENTITY R,
HSP_CURRENCY C,
HSP_OBJECT O2,
HSP_OBJECT O3,
HSP_OBJECT O
WHERE
O1.OBJECT_ID=S.STRING_SEQ (+) AND O1.OBJECT_ID=M.MEMBER_ID AND M.MEMBER_ID=R.ENTITY_ID
AND R.DEFAULT_CURRENCY=C.CURRENCY_ID AND O.OBJECT_ID=O1.OBJECT_ID
AND C.CURRENCY_ID=O3.OBJECT_ID
AND O.PARENT_ID=O2.OBJECT_ID AND M.MEMBER_ID <> M.DIM_ID
AND R.USED_IN IN (1,2,3,4,5,6,7)
AND O1.XACT_TYPE = 1 AND O1.PLAN_TYPE = 1
ORDER BY O.OBJECT_TYPE, O.GENERATION, O.POSITION

Hi,
The UDA will only retain member formulas.
If you read all the information on the page, this relates to your situation :-
To retain changes made directly to the Essbase outline, you must update the outline after every Refresh (for example, using MAXL scripts). Such changes can be automated. This process is not supported, and every effort should be made to work directly in Performance Management Architect or Planning. For more information, consult Hyperion Services or Hyperion Partners.
Cheers
John
http://john-goodwin.blogspot.com/

Security issue in planning app

Hi All,
I have issue while trying to provide access to users by changing the security for members in planning application->administration->Dimensions. Usually, it will give the list of members of the dimension that is selected from the drop down list.
But in my case, it is not providing the list and is giving an error as "<tab index="-1" href="#" title="account" name". I tried to access other apps members too, same issue.
Please let me know if anyone has any idea or has seen this before..
Thanks a lot!
Edited by: 824053 on Jan 17, 2012 10:43 AM

You mean, Dimensions/members not showing in the application? Administration-> dimensions?
i think you are trying to give dimension level security, if members are not showing or giving error while providing access by select view/assign access....try to restart planning services and then try.....if possible restart Shared services & planning...it may help

Security refresh in Planning

Similar Messages

Maybe you are looking for