Session variable and initialization block issues

We are using OBIEE 10.1.3.3 and utilizes built in security features. (No LDAP or other single sign on). The user or group names are not stored in any external table. I have a need to supplement Group info of the user to the usage tracking we implemented recently as the NQ_LOGIN_GROUP.RESP column contains username instead of group name. So I created a session variable and associated with a new initialization block and also had a junk default value set to the variable. In the initialization block, I wrote the following query and as a result it inserted correct values into the table when the TEST button was clicked from the initialization block form.
insert into stra_login_data (username, groupname, login_time) values ('VALUEOF(NQ_SESSION.USER)', 'VALUEOF(NQ_SESSION.GROUP)', SYSDATE)
My intention is to make this execute whenever any user logs on. The nqserver.log reports the following error and it doesn?t insert values into the table.
[nQSError: 13011] Query for Initialization Block 'SET_USER_LOGIN_BLOCK' has failed.
[nQSError: 23006] The session variable, NQ_SESSION.USER, has no value definition.
[nQSError: 13011] Query for Initialization Block 'SET_USER_LOGIN_BLOCK' has failed.
[nQSError: 23006] The session variable, NQ_SESSION.GROUP, has no value definition.
When I changed the insert statement as below, this does get populated whenever someone logs in. But I need the values of GROUP associated with the user as defined in the repository.
insert into stra_login_data (username, groupname, login_time) values ('TEST_USER', TEST_GROUP', SYSDATE)
Could someone help me out! As I mentioned above, I need the GROUP info into the usage tracking. So, if there is another successful approach, could you please share?
Thank you
Amin

Hi Amin,
See [this thread|http://forums.oracle.com/forums/thread.jspa?messageID=3376946&#3376946]. You can't use the GROUP session variable in an Init Block unless it has been seeded from an Init Block first. There isn't an easy solution for what you want, but here are some options:
1) Create a copy of your User => Groups assignments in your RPD in an table so you can use it in your Usage Tracking Subject Area. But this means you will have to replicate the changes in two places so it's not a good solution.
2) As the GROUP session variable is populated when you login you could theoretically use it a Dashboard and pass it a parameter to write the value to the database. But as I am not sure how can you make fire only once when the user logins it sounds like a bad idea.
3) Move your User => Groups assignments from your RPD to a DB table. Use OBIEE Write Back or something like Oracle APEX to maintain them.
I think 3) is the best solution to be honest.

Similar Messages

How to use session variables in initialization blocks

Hello,
I want to use a session variable in a initialization block. Here is what I was doing to see this working
I created a init block called name_parameter and associated with a variable target named name_parameter_v. The init string for this block is "select 'Hello' from dual".
i created another init block name_parameter2 and associated with a variable target named name_parameter2_v. The init string is "select :name_parameter_v from dual".
I have selected name_parameter in the edit execution precedence for name_parameter2.
The result set is empty. Could you please explain why I am not able to see Hello when i test name_parameter2.
Thanks.

to obtain the value contained in a session variable this is the syntax.
select 'VALUEOF(NQ_SESSION.VARIABLE_NAME)' from dual
mind the single quotes, they are necessary

Session variable and Tracking in Header file

Is there a way for me to keep track of the session and use a variable in my Header to pass around for this?
I have a login.jsp, validate_login.jsp and other jsp's that have the same header file. Instead of me using the same code in all of the jsp's I thought it would be easier to put it in the header Please look at the example code below:
// validate_login.jsp is passed username and password from the login.jsp.
// validate_login then calls the logIn method in my Session class.
<%@page contentType="text/html"%>
<%@page pageEncoding="UTF-8"%>
<%@page import="uom.edu.rd.session.Session"%>
<html>
<head><title>Validate Login</title></head>
<body>
<jsp:include page="header.jsp" />
<%
 String username = request.getParameter("username");
 String password = request.getParameter("password");
 this_session.logIn(username, password);
 boolean b = this_session.getLoggedIn();
%>
==================================================================
// The logIn method in Session class
public void logIn(String userName, String password) {
 Connection con = null;
 Statement stmt = null;
 ResultSet rs = null;
 try{
 con = db.getConnection();
 stmt = con.createStatement();
 String sql = "SELECT * FROM RD_USER WHERE USER_NAME = '" + userName +"' AND USER_PASSWORD = '" + password + "'";
 rs = stmt.executeQuery(sql);
 if(rs.next()){
 loggedIn=true;
 }else{
 loggedIn=false;
 catch(Exception e){
 // If something goes wrong, make sure
 // the user is not logged in.
 loggedIn=false;
 }finally{
 try{
 rs.close();
 stmt.close();
 con.close();
 }catch(Exception e){
 * Log the user out.
 public void logOut() {
 loggedIn = false;
 * Get the login status.
 * @return boolean
 public boolean getLoggedIn() {
 return loggedIn;
==================================================================
// and this is part of my header.jsp
<%@page import="uom.edu.rd.session.Session"%>
<%
Session this_session = Session.findSession(request);
if ( this_session==null ) {
 /* Now, instead of redirecting, create a new Session
 * object and initialize it.
 this_session = new Session();
 this_session.makeSession(request);
 this_session.createQueryBuilder(config);
%>
// This is the part I would like to pass around

<%
 boolean loggedIn = this_session.getLoggedIn();
 if (loggedIn == false)
 { %>
 <A STYLE="color:#FFFFFF;text-decoration:none;" HREF="./login.jsp">LOG IN</a> 
 <% } else { %>
 <A STYLE="color:#FFFFFF;text-decoration:none;" HREF="./logout.jsp">LOG OUT</a> 
 <% }
%>
// so if you are logged in then you are able to view certain things on the jsp's if you are not logged in
// then of course you cannot. I want to pass around this loggedIn variable to all the jsp's
// after it checks loggIn Status for each page I have tried running this but I keep getting an error: cannot resolve symbol this_session

Use <%@ include file="header.jsp" %> instead

Need help on how to find unused variables and intialization blocks in rpd

Hi ,
I have to remove used initialization blocks and variables.
Could suggest me the wayt to find the unused variables and intialization blocks.
Thnx

1.For the ones used in the RPD, you can right click on the presentation catalog and say Display related variable, init blocks etc.
2. The ones used in Presentation layer only could be identified when they get fired. refresh your dashboards and from the admin tool in online mode you can find which init blocks and variables are fired... eliminate by that way.
3. to know all the variables and init blocks present create the Metadata dictionary of the RPD and you will get a folder named Init blocks... identify and explore there....

OBIEE 11g, BI Apps EBS: What are default security variables and Init Block

Hi,
We are implementing BI Apps 7.9.6.3 [OBIEE 11.1.1.1.5 with EBS modules]. Out of the box RPD and mappings.
There are many VARIABLES and INIT BLOCKS in the RPD. Some of them are mainly for Siebel, Jd Edwards etc.
I need to know what are the default variables and Init Block configures in RPD. Also it will be highly appreciated if anyone can point out what segments we should configure if we need to implement security with simple database table authentication with SSO?
Thanks in advance.

You should review this doc for the options for EBS/OBIA security:
http://docs.oracle.com/cd/E20490_01/bia.7963/e19042.pdf
If helpful, pls mark as correct or helpful.

RPD: How to use multiple-value variables in initialization blocks ?

Hi all,
I have a set of initialization blocks required for authentication, two of which are running row-wise. The first one sets a multi-valued variable, and the second one uses this variable.
Or at least, should use, because it actually fails. The NQServer log says
[nQSError: 13011] Query for Initialization Block 'My_Init_Block_2' has failed.
[nQSError: 23006] The session variable, NQ_SESSION.MY_VAR_1, has no value definition.
My first variable is initialized in a basic row-wise initialization block. What's more, if I say my 2nd block isn't required for authentication, and I read in a narrative the contents of my first variable, it contains the set of value I expect it to have.
can anybody please advise?
thanks in advance!
Cedric..

There is an example in the OBIEE Server Administration manual that looks very similar to your code except that the whole of the valueof string is quoted:
select
NAME, VALUE from RW_SESSION_VARS
where USERID='VALUEOF(NQ_SESSION.USERID)' {code} Pete

Using Shared Variables and Initialize Front Panel Binding (to PSP)

Hi,
I use LV DSC RT 8.2.1
I have a Vacuum System That includes signals from - Pumps failure, Valves status, Vacuum gauge, start Pump ...
Each signal is read by a FieldPoint.
All the relevant FieldPoint Channels are read by the Server (a computer in the Ethernet Network) and published to the network in the form of Shared Variables.
I have a client VI that is reading the Shared Variables published by the Server using Front Panel Binding.
Problem :
Some of the Bindings are in the mode 'Write &Read' and that causes some initialization problems.
For example - Valve #1 is Open, and then a User start running the Client VI, (the Valve #1 Status mode is 'Write & Read")
if in the VI the status of Valve #1 is closed (before running it) then the Valve status is changing to Closed.
I want the Client VI to first read the Physical status of the instrument and then to change the Value if the User changes it.
But that's seems to be a problem when using Front Panel Binding... (is it?)
I know I can Deploy a lvlib in the Client Side and Item Bind to the Shared Variables or Use DataSocket.
(Is DataSocket is a Reliable method when connecting to Shared Variables? What are the disadvantages when using DataSocket?)
What is recommended by those of you that are experienced or by NI ?
Sincerely Yours,
Amitai Abramson.

Amitai Abramson,
Hello and thanks for using the NI Forums.
I'm glad that you've read the Using the LabVIEW Shared Variable Tutorial on our website. Check out these other resources:
Network Variable Technical Overview
Troubleshooting Network-Published Shared Variables
Why Do I See Unexpected Value Change Events for Shared Variables Using LabVIEW DSC?
All You Need to Know About Shared Variables
Creating a Value Change Event for Shared Variables
Alternative Method for Using Shared Variables Between Systems in LabVIEW 8.x
What Is The Difference Between Using Shared Variables And DataSocket VIs To Access OPC Tags?
The issue that you are seeing by having "Write & Read" bound items on both the server and client side is essentially a race condition, you don't know which one is being read/written at what time. To resolve this issue I would take a look at some of the documents below.
Using a Local, Global, or Shared Variable in Parallel Loops Can Cause Race Conditions
Using Local and Global Variables Carefully
Tutorial: Local Variable, Global Variable, and Race Conditions
Locking a Shared Resource or Variable in LabVIEW Using Semaphores
You mentioned not wanting to have two sets of shared variables (one on each side), but this is a great method to resovle this issue, that, or you can develope some sort of hand shaking to prevent these race conditions.
I would suggest that in the future when using these forums you try to ask only one question per thread and make it more concise. It's hard to tackle multiple questions and such broad questions as "I want to know all the ways that I can connect to Shared Variables, and I want to know the advantages and disadvantages." I suggest this because we want you to get your questions answered and more concise questions will result in quicker and better answers.
Message Edited by Ben S on 10-01-2009 06:05 PM
Ben Sisney
FlexRIO V&V Engineer
National Instruments

Session variable and script error

Hello;
I am still writting this script that turns a bg sound on and
aff for the whole site to remember. I have a good start on this
code, but I am running into issues.
1. I am trying to use a checkbox to make the selection, and
when it is clicked, it will function without using a submit button,
the java script I am using isn't doing the job allowing the
checkbox to act as a link so to speak.
2. I need to make this script into a session variable. So
that when the decision is made, the site will remember it.
3. there might be a problem in my IF statement.
Can someone please help me out? I am attaching the code. It
is using a DB that has a yes/no box in the table this sound code is
accessing.
Thank you.
Phoenix

A Quess...
Remove the OnClick in the form
<form onClick="category.submit();">
Place it in the input type?
<input type="checkbox"
onClick="category.submit();">

Missing session variables and multiple CFID/CFTOKEN

We are using ColdFusion 9.0.1 and have recently started to experience some sporadic behavior in our applications. These applications have worked without error for over 6+ years and have not been modified during this time.
Over the past couple of weeks, we have been receiving calls in regards to users not being able to login and receiving errors when performing various actions. We have put troubleshooting measures in place that display values when this occurs.
We have noticed that when the errors occur, there are multiple CFID/CFTOKEN COOKIE values. Additionally, session variables are being dropped (during simple tasks such as going from one screen to the next). These errors do not occur for the majority of users and have primarily occurred in Internet Explorer, but we have had some instances in other browsers. In most instances, if the user switches browsers, the same application works fine for them.
In one particular case, we have a <cfif> tag in the application.cfm file that checks for “session.user_id”. If it doesn’t exist, the user is directed to a login page using the <cflocation> tag. When experiencing the problem, users are continuously going back to the login screen because the system is saying that the session variable does not exist.
When working with one user who was experiencing this problem, we were able to remedy the problem by adding “addtoken=’yes’” to the cflocation tag. ** We do not prefer to do this for security reasons.
Rather than go through each application and try to “band-aid” each instance that occurs, can anybody offer some suggestions on why this behavior recently began and how we may be able to globally address it?

My immediate guess is that there is faulty logic in the code that updates the value of session.user_id. Apparently, one of the following scenarios might be happening.
Coldfusion creates a session, X, say. Session.user_id is as yet undefined, so ColdFusion cflocates the user to the login page. The user logs in, still within session X. His session.user_id is set.
Suppose, for whatever reason (and I know of at least two), the session drops. The user's very next request will make ColdFusion to create a new session, Y, say. Under session Y, the variable session.user_id, which corresponded to session X, will no longer exist. So ColdFusion cflocates the user to the login page. This cycle will of course repeat if left uncorrected.
Another possible scenario is that the variable session.user_id is not set at all, or is set in the context of a new session. I am assuming that the login page is a form. Then login validation occurs at the action page of the form. Presumably the variable session.user_id is set at this action page. If so, then perhaps ColdFusion fails to set this variable, or a new session is created as the request goes from the login-form page to the action page.
The 2 main reasons why a session drops are 1) it times out, 2) a new request starts a new session. Hence the following suggestions.
1) Is your sessionTimeout value low, say, just a few minutes? If so, increase it to 20 minutes.
2) Remember that the default behaviour of ColdFusion is to start a new session at every request. Use cflogin and cfloginuser together with loginStorage="session". Cflogin executes only if there is no logged in user, irrespective of the session. Therefore, getAuthUser() is a better authentication test than session.user_id.
3) Use Application.cfc in place of Application.cfm. In particular, the CFC offers you more fine-grained control over the beginning and end of sessions.

Help building an object, setting it in a session variable and casting

Hi all,
I have a problem that I hope you can help me with. The application I am working on has a simple MVC design architecture. The problem occurs when a request is made from the application to the controller servlet. The controller servlet looks at the request type and delegates the processing to the appropriate action and model classes. The model class returns an object of a specific class type that is put into the session variable. This session variable is then cast to the appropriate class type in the jsp that renders that class. The problem is that this particular class type has an array of another class type. The array is filled in the class constructor, but is null when returned to the controller.
At run time when accessing the array I get a NullPointerException error. I can't seem to figure this one out. Any help is greatly appreciated.
Here's the code:
Controller DoPost method. The 'Action' objects are defined and initialized in the init() method.
 public void doPost(HttpServletRequest request, HttpServletResponse response)
 throws ServletException, IOException{
 try {
 HttpSession session = request.getSession();
 MemberProfileTbl memProf = (MemberProfileTbl)session.getAttribute("Member");
 RequestDispatcher rd;
 if (!validateUser(memProf, session)){
 session.setAttribute("LoginStatus", "Session Expired");
 rd = getServletContext().getRequestDispatcher("/LoginFail.jsp");
 rd.forward(request, response);
 return;
 String act = getAction(request);
 Action action = (Action)actions.get(act);
 Object result = null;
 try {
 result = action.perform(request, memProf);
 }catch (NullPointerException npx) {
 npx.printStackTrace();
 session.setAttribute("currObject", result);
 rd = getServletContext().getRequestDispatcher("/test/MemberConsole.jsp");
 rd.forward(request, response);
 catch (Exception ex){
 ex.printStackTrace();
Action class:
 package accolo.actions;
 import javax.servlet.http.*;
 import accolo.model .*;
 import accolo.view.*;
 import accolo.db.MemberProfileTbl;
 public class ChangeMainView extends Action {
 public String getName() {return "changeMainView";}
 public Object perform(HttpServletRequest request, MemberProfileTbl memProf)
 throws Exception, ClassNotFoundException, InstantiationException, IllegalAccessException{
 Object result;
 HMMainView hmMain = new HMMainView(memProf.email);
 result = hmMain;
 return result;
HMMainView.java class
public class HMMainView
 private HMMainViewJob[] jobs;
 public String test;
 public HMMainView(String email)
 HMJobsBean hmJobsBean = new HMJobsBean();
 JobTblDao jobTblDao = new JobTblDao();
 test = "test in constructor";
 try{
 JobTbl[] hmJobs = jobTblDao.getHMOpenJobs(email);
 for(int j = 0; j < hmJobs.length; j++){
 this.jobs[j].jobTitle = hmJobs[j].optionalTitle;
 this.jobs[j].city = hmJobs[j].city;
 this.jobs[j].state = hmJobsBean.getState(hmJobs[j].zipCode);
 Hashtable counts = hmJobsBean.getJSCountsByStatus(hmJobs[j].jobId);
 this.jobs[j].unranked = (String)counts.get("CANUNRANKED");
 this.jobs[j].interviews = (String)counts.get("HMRI");
 this.jobs[j].ranked = (String)counts.get("CANRANKED");
 long closed = Long.parseLong((String)counts.get("HMRNI"));
 closed += Long.parseLong((String)counts.get("HMCH"));
 closed += Long.parseLong((String)counts.get("HMNH"));
 this.jobs[j].closed = Long.toString(closed);
 }catch(Exception ex){
 ex.printStackTrace();
 public HMMainViewJob[] getJobs(){ return jobs; }
HMMainViewJob.java class
package accolo.model;
public class HMMainViewJob
 public long jobId;
 public String jobTitle;
 public String status_id;
 public String city;
 public String state;
 public String unranked;
 public String interviews;
 public String ranked;
 public String closed;
 public HMMainViewJob()
Snippet of JSP that uses the code
Object result = session.getAttribute("currObject");
if (result != null){
 String className = result.getClass().getName();
 if (className.equals("accolo.model.HMMainView")){
 header = "HM/HMConsoleHeader.jsp";
 subNav = "HM/HMConsoleSubNav.jsp";
 user = "HM/HMConsoleUser.jsp";
 left = "HM/HMConsoleLeft.jsp";
// body = "HM/HMConsoleHome.jsp";
 HMMainView hmMain = (HMMainView) result;
 HMMainViewJob[] jobs = hmMain.getJobs();
 for (int i = 0; i < jobs.length; i++){
%>
 Jobs: <%=jobs.jobTitle%>
<%

I have not run this through a debugger yet. I don't have immediate access to a debugger to run it through, most of the development is simply done in vi. I was hoping any problem in the code would jump out at someone. I've been staring at it too long.
I'll try to get a debugger set up.
Thanks

Question about session variables and binding

Hi All,
I'm a newbie with Application Express. I've gone through several tutorials and a book, and now I'm actually getting started with apex. My first adventure is a tiny little form, where all you do is fill it out and it sends an email. Pretty simple.
And, i have it working just fine - but I have a question about something I don't quite understand. Basically, I am generating the email text in a page process. And some of the form fields work fine if i reference them as *:ACCT_NAME*, but some give me the dreaded "not all variables bound" error. For the ones that give me the error, I can reference them like V('ACCT_NAME').
So, as a newbie, I'm a little confused. When is it appropriate to use the V function, and when it is appropriate to use binding? Why would one of the fields work with binding but not another from the same form?
Thanks for any clarification you can offer,
Lisa

Lisa,
A bind variable is a place holder variable available in an environment.It is used quite frequently(outside Apex Context) in SQL and PLSQL scripts and especially in Dynamic SQL statements.Many times using a bind variable gives better performance. In the Apex environment,page items and many other variables related to the session are available as bind variables and hence their value can be referred in SQL,PLSQL contexts as :VARIABLE_NAME.
Now V() function is an apex specific function which returns the value of an apex session variable outside the apex environment. So as Machaan pointed out, it is used in
procedures and triggers that gets called from within an apex session. This is required since the bind variables themselves are not directly available in the SQL environment but their values from the corresponding session can be accessed by this apex built-in function.
The length of any Bind variable name is limited to 30 characters, this is a limitation inherited from Oracle SQL itself and hence session variables(page or application items) whose name has a length which exceeds 30 characters cannot be used as the :ITEM_NAME format. In such cases you would have to use the v() method again. This might be happening in your case.

Final variables and try blocks

If you tried to initialize a final variable within a try block, you would get a compile-time error.
Here's an example class:
class Example {
    private final String example;
    public Example() {
        try {
            example = "Example";
        } catch (Exception e) {
            // Just an example.
}Obviously you wouldn't need to try-catch something like this (it's a stupid example - I know) , but the point is, the code wouldn't compile, and would return an error saying something like "example may not have been initialized".
So I've got two questions. Why is this, and is there any way around it?
Thanks in advance :)

Why is thisThe actual error message is "The blank final field example may not have been initialized". The Java compiler insists that all the fields have some actual value when a constructor has done its thing. Nonfinal fields will have the "default" value of null, but this is not so for final fields: if they had a default value, you couldn't change them from that default because they're final!
Once you enter a try block the compiler has no way of knowing that the assignment line will ever get carried out. Some exception might occur and the example field would be left uninitialised ie having no value whatsoever, not even null.
is there any way around it?In the catch part you could throw the exception and let the caller deal with it.
Or you could try and assign some value to example within the catch part. Now the compiler will complain "The final field example may already have been assigned". Supposing you wanted it to end up as null in this case (it's not clear why though... But you may have a sensible "default" if for example a file can't be written to or some other exceptional state has occured)
class Example {
    private final String example;
    public Example() {
        String str;
        try {
            str = "Example";
        } catch (Exception e) {
            str = null;
        example = str;
}

Session Key and initialization vector

Hi,
is the session key the key used with the initialization vector IV as input parameters for the RC4algorithm? In this way the server and the client derive the WEP key for the data unicast encryption.
Very thancks.

Since december 2000, we support a session key, which is negociated by the LEAP protocol after a login/password authentication with the Cisco Secure ACS Radius server. With this implementation the session key is used as the input parameter for the RC4 algorithm.
Since december 2001, we have a new firmware release (actual AP release 11.21 available on CCO) that support a 'TKIP' implementation, where the session key is hashed for each packet to obtain a uniq 'packet' key, used as the input parameter for the RC4 algo for the packet. The radio firmware must be upgraded in both AP and Client.

Repository variable and Init block

I created an Init block that is based off of a sql command in which the command is designed to give me the max date a table was updated after a data load. Well the variable I created based off of this has a timestamp of today's date. I want to create a report on the front end (actually just a column) that updates when a load has been completed. I use this (TIMESTAMPDIFF ( SQL_TSI_MINUTE, VALUEOF(“LAST_UPDATE_DATE”)), CURRENT_TIMESTAMP)) for the column formula but I'm either running into errors or getting nothing at all.
OBIEE 11.1.1.5
Please Advise

Hey......long time but here it is. So I created an init block called Last_update_date and had it query a db table that automatically updates when a data load is complete. I set a variable with the current timestamp. Well When the table loads the variable locks in that time of the load. On the front end I referenced the table in an expression and created a report around it. I did a timestamp diff b/t current time and the time the init block locked in for the load, and called it ETL update column. I created an agent that starts a purging/caching cascade with the ETL update report as the condition.
Thanks

Row level security with session variables, not a best practice?

Hello,
We are about to implement row level security in our BI project using OBIEE, and the solution we found most convenient for our requirement was to use session variables with initalization blocks.
The problem is that this method is listed as a "non best practice" in the Oracle documentation.
Alternative Security Administration Options - 11g Release 1 (11.1.1)
(This appendix describes alternative security administration options included for backward compatibility with upgraded systems and are not considered a best practice.)
Managing Session Variables
System session variables obtain their values from initialization blocks and are used to authenticate Oracle Business Intelligence users against external sources such as LDAP servers or database tables. Every active BI Server session generates session variables and initializes them. Each session variable instance can be initialized to a different value. For more information about how session variable and initialization blocks are used by Oracle Business Intelligence, see "Using Variables in the Oracle BI Repository" in Oracle Fusion Middleware Metadata Repository Builder's Guide for Oracle Business Intelligence Enterprise Edition.
How confusing... what is the best practice then?
Thank you for your help.
Joao Moreira

authenticating / authorizing part is take care by weblogic and then USER variable initialized and you may use it for any initblocks for security.
Init block for authenticating / authorizing and session variables are different, i guess you are mixing both.

Session variable and initialization block issues

Similar Messages

Maybe you are looking for