Setting up "Act As" proxy functionality in 11g
I have scoured the internet and this forum without resolving this problem so thought I would ask here. I have setup the "Act As" configuration on the server but cannot get it work. Whatever I do I receive the "This functionality has not been enabled by your administrator." message. There are no errors in sawlog0.log or NQServer.log. I have gone over and over the XML (posted below). I even introduced errors into the XML configuration files which did throw an error when they could not be parsed. The session variables have been created and the RPD can get to the proxy table. The users involved have the proxy right. Any ideas? It is probably something simple but I am not seeing it.
Windows Server 2003
OBIEE 11.1.0.5
== LogonParamSQLTemplate.xml ====================================================
<WebMessage name="LogonParamSQLTemplate">
<XML>
<logonParam name="RUNAS">
<getValues>select targetId from BIAPPS_UTIL.TPROXIES where proxyId='@{USERID}'
</getValues>
<verifyValue>select targetId from BIAPPS_UTIL.TPROXIES where proxyId ='@{USERID}' and targetId='@{VALUE}'
</verifyValue>
<getDelegateUsers>select proxyId, proxyLevel from BIAPPS_UTIL.TPROXIES where targetId ='@{USERID}'
</getDelegateUsers>
</logonParam>
</XML>
</WebMessage>
== instanceconfig.xml ============================================================
[snip]
<LogonParam>
<TemplateMessageName>LogonParamSQLTemplate</TemplateMessageName>
<MaxValues>100</MaxValues>
</LogonParam>
</ServerInstance>
</WebConfig>
==============================================================
I had seen this and it didn't work either. What I did get to work was going back to the format of this file from v10. This file is still located in the directory from the 11g docs.
==LogonParamSQLTemplate.xml================================================
<?xml version="1.0" encoding="utf-8" ?>
<WebMessageTables xmlns:sawm="com.siebel.analytics.web.messageSystem">
<WebMessageTable system="SecurityTemplates" table="Messages">
<WebMessage name="LogonParamSQLTemplate">
<XML>
<logonParam name="RUNAS">
<getValues>EXECUTE PHYSICAL CONNECTION POOL "BIProxy"."Proxy Connection Pool"
select targetId from BIAPPS_OBAW.TPROXIES where UPPER(proxyId)=UPPER('@{USERID}')
</getValues>
<verifyValue> EXECUTE PHYSICAL CONNECTION POOL "BIProxy"."Proxy Connection Pool"
select targetId from BIAPPS_OBAW.TPROXIES where UPPER(proxyId) =UPPER('@{USERID}') and UPPER(targetId)=UPPER('@{VALUE}')
</verifyValue>
<getDelegateUsers>EXECUTE PHYSICAL CONNECTION POOL "BIProxy"."Proxy Connection Pool"
select proxyId, proxyLevel from BIAPPS_OBAW.TPROXIES where UPPER(targetId)=UPPER('@{USERID}')
</getDelegateUsers>
</logonParam>
</XML>
</WebMessage>
</WebMessageTable>
</WebMessageTables>
Similar Messages
-
Hi,
I have configured the “act-as” proxy function in OBIEE 10.1.3.4.1 and from the drop down list I am ok to act-as for some users but for some the following error appears (and I am logged out of Answers):
Unable to Log In
Odbc driver returned an error (SQLDriverConnectW).
Error Details
Error Codes: OPR4ONWY:U9IM8TAC
State: 08004. Code: 10018. [NQODBC] [SQL_STATE: 08004]
[nQSError: 10018] Access for the requested connection is refused.
[nQSError: 13023] An external user ‘A33369′ can not run as an internal user ‘K2824′. (08004)
Any ideas why this error comes for some users and what I need to do to mitigate?
I have checked the proxy users table in the DW and there is a row for A33369 and K2824.
All help is appreciated!!!
Many thanks.Basically my proxy users table is (and the row the error is referring to is row 8 i.e. when A33369 tries to act-as K2824):
(1) M18219 R15398 full
(2) M18219 V0539 restricted
(3) Administrator M18219 full
(4) Administrator A33369 full
(5) Administrator R15398 full
(6) Administrator K2824 full
(7) A33369 R15398 full
(8) A33369 K2824 full
(9) R15398 K2824 restricted
(10) R15398 V0539 full
(11) Administrator V0539 full
(12) A33369 V0539 full -
Hello,
I am implementing act as proxy functionality in obiee 10g but after all steps when I select user in act as drop down list & clicked ok button
I got following Error
Error Codes: OPR4ONWY:U9IM8TAC
State: 08004. Code: 10018. [NQODBC] [SQL_STATE: 08004] [nQSError: 10018] Access for the requested connection is refused. [nQSError: 13024] Successful completion of init block 'Authentication' is required. (08004)
Please any body know solution for above error
Thanks,
PradipHi,
You probably have "Required for authentication" option checked in your init block and for some reason this init block failed.
1. Check DB connection
2. Try for a moment to uncheck "Required for authentication" option and see wha hapens.
3. Maybe there is user name spelling problem in your PROXY table -
Issue in Configuring ACT as functionality obiee 11g
Dear Expert,
I had done the below steps in creating ACT as functionality in 11g. I am using MS SQL Server 20005 and had created table called OBIEE_PROXY.
1. Created system variable called "PROXY"
2. Created Session initialisation variable (PROXY and PROXY LEVEL) and associated the connection pool
3. Created customs templates
4. Configured the instance.xml
5. Done the setting in the Manage privileges
6. Restarted the BI services
I had taken repository rpd to offline and done the above changes .Modified RPD is uploaded through EM and restarted the services. When I login and see the ACT as there is no users appearing in the screen .
Please advise if I missed any step. Also please advise that should i need to create a user’s in the web logic console which i am trying to pass from MS SQL Server.
Edited by: 964262 on 11/10/2012 14:38Hi ,
Below is the error i am getting in the nqserver log .
[2012-10-12T14:25:37.000+00:00] [OracleBIServerComponent] [ERROR:1] [] [] [ecid: cdd7e05bc54bf9a4:-1b0c887b:13a4e5a3825:-8000-00000000000062ea] [tid: 15dc] [nQSError: 16002] Cannot obtain number of columns for the query result. [[
_[nQSError: 16001] ODBC error state: 37000 code: 102 message: [Microsoft][ODBC SQL Server Driver][SQL Server]Incorrect syntax near '‘'.._
_[nQSError: 16001] ODBC error state: 37000 code: 8180 message: [Microsoft][ODBC SQL Server Driver][SQL Server]Statement(s) could not be prepared.._
_[nQSError: 13011] Query for Initialization Block 'PROXY_BLOCK' has failed._
_]]_[2012-10-12T14:25:37.000+00:00] [OracleBIServerComponent] [ERROR:1] [] [] [ecid: cdd7e05bc54bf9a4:-1b0c887b:13a4e5a3825:-8000-00000000000062ea] [tid: 15dc] [nQSError: 13021] Failed to get the value of PROXY session variable.
[*2012-10-12T14:25:37.000+00:00] [OracleBIServerComponent] [ERROR:1] [] [] [ecid: cdd7e05bc54bf9a4:-1b0c887b:13a4e5a3825:-8000-00000000000062ea] [tid: 15dc] [nQSError: 13021] Failed to get the value of PROXY session variable.*
*[2012-10-12T14:25:43.000+00:00] [OracleBIServerComponent] [NOTIFICATION:1] [] [] [ecid: cdd7e05bc54bf9a4:-1b0c887b:13a4e5a3825:-8000-00000000000062ef] [tid: 15dc] [nQSError: 13011] Query for Initialization Block 'ExternalAuthenticationProvider' has failed.*
*[2012-10-12T14:25:43.000+00:00] [OracleBIServerComponent] [ERROR:1] [] [] [ecid: cdd7e05bc54bf9a4:-1b0c887b:13a4e5a3825:-8000-00000000000062ef] [tid: 15dc] [53012] User authentication failure: user3.*
*[2012-10-12T14:25:43.000+00:00] [OracleBIServerComponent] [ERROR:1] [] [] [ecid: cdd7e05bc54bf9a4:-1b0c887b:13a4e5a3825:-8000-00000000000062ef] [tid: 15dc] [53012] User authentication failure: user3.*
Please advise .
thanks in advance -
Hi ALL,
i m using a "Act as Proxy" option in obiee.
i have configured it using following link
"http://debaatobiee.wordpress.com/2009/11/01/obiee-act-as-proxy-feature/"
but when i select "Act as" option from adminitrator setting then i get following error.
"This functionality has not been correctly configured by your administrator (Can't retrieve the list of target users).
The account entered does not exist or you do not have permission to view this account."
Pls help me to solve this issue.
Regards,
SAP
Edited by: SAP on Jul 6, 2010 4:07 AMHi
I hv started all sevices properly and i m nt using SSO.
but i tried it and i got some success. and still i hv a problem.
in my case proxy_table is:
PROXY_USER TARGET_USER ACCESS_TYP
proxyuser1 targetuser1 FULL
proxyuser2 targetuser2 restricted
proxyuser3 targetuser3 full
proxyuser1 targetuser4 restricted
when i login with proxyuser1 then i can see targetuser1,targetuser4.
when act as targetuser1 then proxyuser1 can see the dashboard created by targetuser1 but cant not edit it.
while ACCESS_TYP for targetuser1 is FULL.
Regards,
SAP -
Proxy functionality in the database connection pool
Hi,
I am scouring the internet and forums looking for a way to connect to my database from the .rpd connection pool using proxy authetication. NOT Act-As proxy that is a BIEE feature, but RDBMS proxy authentication with BIEE acting as the middle-tier connecting on behalf of many users and authenticating to the RDBMS AS THE INDIVIDUAL USER. I haven't had any luck, and am hoping someone here has set up this same kind of access.
We have a requirement to use SSO with BIEE to integrate with our portal and discoverer apps. We also have a requirement to use EUS (Enterprise User Security). EUS allows you to login to the database using the userids/password from OID. Note that the database doesn't support the SSO token, but it uses the same userid/password stored in OID for authenticating to the database. You still must initiate a connection to the database, but the authentication goes to LDAP. Every connection to BIEE may be using a different userid - we will not have a shared login.
So the issue I see is:
- We configure SSO
- In the BI Server the :USER session variable is set (but NOT :PASSWORD, since BI Server didn't authenticate you it doesn't have the password)
- We create a connection pool - This is where we hit the issue - we need each connection to BI Server to connect down to the database as the SSO user. Since we aren't using a shared account we can't enter a userid/password in this connection. We also can't user :USER and :PASSWORD since SSO doesn't set the :PASSWORD session variable. What I would hope to find is a checkbox "Proxy Authentication" (around where "Shared Logon" checkbox is located) that would connect to the database as the proxy user and then switch to the SSO user.
This is what happens with BI Publisher. On the JDBC connection screen there is a "Proxy Authentication" checkbox.
So, has anyone already solved this problem? Thanks!Hello, is there anyone knows what this program does
and how this program is executed? There is nodatabase
mentioned.That's because it's expecting the URL (which contains
the database type, hostname, and so on) to be passed
in on the command line (argv[0]), as well as the
username and password (argv[1] and argv[2]).
Thank you very much for your help.
Regards,
Lucas -
Sorting of user list in 'ACT AS' by displayname -OBIEE 11G
Hi,
I have configured 'ACT AS' successfuly in obiee 11g . We have written the following query to populate user name and displayname in the act as drop down .
<getValues>EXECUTE PHYSICAL CONNECTION POOL DAA2.DAA2 select USERNAME, DISPLAYNAME from SIEBEL_USERS </getValues>
With this query the list is getting ssorted by USERNAME .
However, our client expects the user list to be populated in the ascending order of the DISPLAYNAME.
I tried modifying the above query as below in the xml file to implement the same .
<getValues>EXECUTE PHYSICAL CONNECTION POOL DAA2.DAA2 select USERNAME, DISPLAYNAME from SIEBEL_USERS Order by 2 desc </getValues>
But the liste is still getting sorted by USERNAME. Could anyone give some pointers to achieve this requirement ?
Regards,
Karan
Edited by: kchadha2 on Sep 12, 2011 7:21 PMThanks Veeravalli, I did exactly the same. Editing the registry didn't help so I deleted the service from registry and create it again and before that added the following in my installSVC file in the section you mentioned
set JAVA_VM=-server
set MEM_ARGS==-Xms1024m -Xmx1024m -XX:MaxPermSize=2048m -XX:-UseSSE42Intrinsics
But it is still not working, I am getting the same error but now it says
[Tue Dec 11 07:38:45 2012] [RunJavaApp] Loading class - =-Xms1024m
java.lang.NoClassDefFoundError: =-Xms1024m
Caused by: java.lang.ClassNotFoundException: =-Xms1024m
at java.net.URLClassLoader$1.run(URLClassLoader.java:202)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:190)
at java.lang.ClassLoader.loadClass(ClassLoader.java:306)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:301)
at java.lang.ClassLoader.loadClass(ClassLoader.java:247)
one of the things I didn't mention though was that when I create the service, I run the installAdmServer_Service.cmd file as "Run as Administrator", only then the service gets installed. Can this be related to the fact that this windows service needs to be run under admin account? or Run as Administrator? I am guessing because I tried various heap sizes and also edited my setDomainEnv.cmd and commEnv.cmd file to use 1024 as heap size it but still didn't work and it is failing may be while loading the class? If that is the case then how to run this services as administrator? Am I missing anything else?
Thanks,
Ronny -
Hi
i`m delli, fresher in OBIEE, can you please post the step for enable proxy functionality in OBIEE 11.1.1.5.
it's urgent, i`m struggling more than two weeks.
Thank You in AdvanceYour IT is probably blocking those Blogs. I'd just contact them and ask them to add these blogs as "secured". But for now you can search for the term "Proxy" in the OBIEE forums:
Business Intelligence Suite Enterprise Edition
Cheers,
Mehmet -
Can a single OHS act as proxy for 2 different WLS host?
Can a single OHS act as proxy for 2 different WLS host? If yes how to do that?
And also a single webgate can be used to protect two hosts???yes.
<IfModule mod_weblogic.c>
MatchExpression /<URI> WebLogicHost=<hs1>:<port>
MatchExpression /<URI> WebLogicHost=<hs2>:<port>
</IfModule>
Sean Bu -
Problem on Setting up a Reverse Proxy on Web Proxy Server 4.0.1
After you setup a reverse proxy using Web Proxy Server 4.0.1, if you get the following error --
Proxy denies fulfilling the request
Your client is not allowed to access the requested object.You probably forget to add a regular mapping from: / to: http://http.site.com/. The information provided in 4.0.1 Administration guide is misleading. You will have to add it NOW manually. (Note: in 3.6 it will be added automaticly)
You will have to do the following step manually, what provided in the manual is misleading --
Sun Java� System Web Proxy Server 4 .0.1 Administration Guide 2005Q4
Chapter 14 Using a Reverse Proxy
"Setting up a Reverse Proxy"
5. To make the change, click OK.
Once you click the OK button, the proxy server adds one or more additional
mappings. To see the mappings, click the link called View/Edit Mappings.
Additional mappings would be in the following format:
from: /
to: http://http.site.com/thanks, will verify and update the docs.
rahul. -
FireFox does not load any website when setting up a working proxy
When i set a proxy for firefox , any proxy ... firefox does not load any thing , it comes with server not found in no time , fire fox is not even searching for it !
I read those before .. but my problem is not any one of them !
when i set proxy on firefox it does not work !
when i set proxy on IE then setting firefox to system proxy it work !! -
So this is what happens when I try and set up a SOCKS proxy using ssh and my vps (I've edited out my personal IP address and other similar details).
http://i.imgur.com/WIDgE.png
I have no idea why the proxy seems to be working but not returning any data.set your ssh port to 22 in your home server. and install fail2ban which will prevent bruteforce attacks.
you can also disable password logins and take your public key to your home server in a pendrive.
then simply ssh -D PORT
ive done this at home, and even if i suffer from login attempts, fail2ban blocks ips with more than 3 failed attempts within 5 minutes. -
Revision: 2611<br />Author: [email protected]<br />Date: 2008-07-24 11:36:03 -0700 (Thu, 24 Jul 2008)<br /><br />Log Message:<br />-----------<br />Bugs: BLZ-200: Setting virtual-host in proxy-config causes ConfigurationException<br /> BLZ-201: Configure host/port for proxy setting causes ConfigurationException in BlazeDS<br />QA: need a unit test reading the example proxy-config.xml and verifying that all values are read in HTTPProxyAdapter.java<br />Doc: no<br /><br />Came across and fixed another bug: when <max-connections> is not set inside a <max-per-host>, we assumed the default value of 2 instead of the <default-max-connections-per-host> value (if set).<br />Also, some whitespace reformatting in HTTPProxyAdapter.java.<br /><br />Ticket Links:<br />------------<br /> http://bugs.adobe.com/jira/browse/BLZ-200<br /> http://bugs.adobe.com/jira/browse/BLZ-201<br /><br />Modified Paths:<br />--------------<br /> blazeds/branches/3.0.x/modules/proxy/src/java/flex/messaging/services/http/HTTPProxyAdapt er.java<br /> blazeds/branches/3.0.x/resources/config/proxy-config.xml
Remember that Arch Arm is a different distribution, but we try to bend the rules and provide limited support for them. This may or may not be unique to Arch Arm, so you might try asking on their forums as well.
-
Is there a way to set up an automatic paste function for frequently used phrases
Is there a way to set up an automatic paste function for frequently used phrases.
My husband has an unusually long email address which he cannot change - he is not good at typing. I would like to help him by creating a sort of shortcut or auto paste function on his IMac to save him time and frustration. Any suggestions?
ThanksAre you really using an earlier OS than Mac OS 8.6? That would be either 8.1, or 8.5 if I recall correctly.
Apple's classic forum, see:
https://discussions.apple.com/community/mac_os/classic_mac_os?view=discussions#/ ?tagSet=1037
You need to look for:
-- remap or rename keyboard keys
-- keyboard macros
At this site look for
http://trace.wisc.edu/world/computer_access/mac/macshare.html#applwindows
EasyTyper 1.0.2
TypeIt4Me
resEdit maybe a possibility ... free
http://hintsforums.macworld.com/archive/index.php/t-32745.html
You could creae a file with common words & phrases in it & copy & past.
SmartKeys 3
http://trace.wisc.edu/world/computer_access/mac/macshare.html#applwindows
Robert -
How to set firefox to no proxy using a script on OS X 10.8.5
I would like to push out a script to set FireFox to No Proxy.
Please continue in [https://support.mozilla.org/en-US/questions/1016067] Locking duplicate
Maybe you are looking for
-
Oracle 10.1.3.
Hi, I recently installed oracle app server 10.1.3 and following the instructions Reconfiguring Application Server Instances I tried to make it so that my 10.1.3 app server can use SSO with my 10.1.2 infrastructure. I deployed an application on 10.1.3
-
Can anyone explain the distortion I'm seeing in the album images in Cover Flow? I don't have very up-to-date video card, but it doesn't /look/ that complicate to render. Screenshot: http://www.aengblom.com/ars/distortion.JPG Windows XP Pro
-
I am haveing problem watching video's after downloading adobe flash player
i am haveing problem watching video's after downloading adobe flash player, how can i make it working?
-
RET_CALL_NOT_FLUSHED when using OLE
Hi, i have an urgent problem about OLE. i run an abap report to download an excel template to the local and when calling the method document->save_copy_as , the exporting parameter 'ERROR' return an error 'RET_CALL_NOT_FLUSHED'. This pro
-
Mail Rules vs Vacation for reply
I found the mobileme mail vacation preference and tested it. It will only reply one time to each sender, & I want it to continue to reply to each sender for each email received until I remove it. Can I use the Add Rules preference to do this?? I am r