Shared Services Delegated Admin

Hi,
I am trying to create a delegated administrator role in Shared Services for HFM. I have created the delegated list in Shared Services and assigned a manager to the group. However when I log-in as that user I am only able to view the groups I have assigned to the delegated list, I am not able to provision users to those groups.
Any ideas on what needs to be done so that group manager can provision users to the groups?

You want to look at the Hyperion Security Administration Guide to understand Shared Service, Provisioning and External Authentication.
http://download.oracle.com/docs/cd/E10530_01/doc/epm.931/hyp_security_guide.pdf
Brian Chow

Similar Messages

  • Shared services user/admin guide

    Is there any pdf doc for shared services admin/user guide,,
    I tried searching for it but couldnt find it..
    i can see a help option when I work with SS which gives goo d help ...but is there any pdf doc to go through before I really start working on SS??
    Please let me know

    You want to look at the Hyperion Security Administration Guide to understand Shared Service, Provisioning and External Authentication.
    http://download.oracle.com/docs/cd/E10530_01/doc/epm.931/hyp_security_guide.pdf
    Brian Chow

  • Importing Security Through shared services caused admin user password chang

    Hi,
    I exported shared services from shared services url from one environment and imported into another environment. This changed the admin user password where I imported.
    Details:-
    I went to shared services of one environment say dev and to -> Applications Groups -> Foundation -> shared services and exported it. Took its export and imported into test environment.
    Now what it did it changed the user password of the target with the source one. However I did remove the internal ID of all files in it.
    Can anyone please help ? How to get the password of it back? I do not have back up of shared services of test environment.
    Version 11.1.2.1
    Thanks a lot in advance!!!!!!!!!!!!!!!!!!!!

    I was hoping you had a strategy in place, it is basically restoring the shared services relational database from a backup, stop the epm related services first.
    It may be even possible to correct your LCM file and set the admin to the way it should be but I am not sure what state the provisioning is in so couldnt guarantee it would work.
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Error while adding users to a group created in shared services

    Hi All,
    I am using EPM 11.1.1.1.0.. When i log into SHared services as admin and create a group i get the following error when i try to add the user members to the group.
    "Servlet error: An exception occurred. The current application deployment descriptors do not allow for including it in this response. Please consult the application log for details."
    Can somebody please help....
    Regards.
    Alicia

    Hello Ritendra,
    i am also facing the same problem. i could not find some solution.
    if you got some solutions then please help me.
    i have installed oracle 9i as in W2K system.
    regards
    sudhir

  • Hyperion Essbase on Solaris & Security issue in Shared services

    I installed Hyperion system 9.3.1 in my dev environment. Every thing is working properlly.
    But i still have questions on couple of things.
    1) I installed essbase on solaris 10. I was just trying to configure the sql interface for ESSBASE.
    I went through the documentation. It says i supposed to get a file called libesssql.so.1
    But i can't able to see this file in ARBORPATH/bin location. But still I could able to load the data
    into sample Essbase application. My essbase is working fine. when i ran the script inst -sql.sh
    it created a file called libesssql.so in the ARBORPATH/bin location. But no libesssql.so.1.
    Can some one help me regarding this................
    2)In the shared services when i clicked under Hyperion system 9 BI+, i cant able to see
    any reporting related files to assign security. i am seeing a message saying refer to the security guide to confiure
    permissions for this application.
    I logged into the shared services with admin privileges.
    Please help me in this...........
    Thanks,

    Hi,
    What version are you using ?
    Just to be clear are you saying that the utility only exported one native user and you expected it to export more ?
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Issue in shared services

    Hi All,
    facing the issue with shared services, after run import/export utility(it ran for long time),can't find any users/groups in shared services, only admin user is present in native dir,otherthan this user, we dont have any users/groups in ND and MSAD. can somebody help on this.
    Thanks,
    :-)

    Hi,
    What version are you using ?
    Just to be clear are you saying that the utility only exported one native user and you expected it to export more ?
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Refresh Security from shared services fails.

    Hello all,
    On our environment I went into shared services with admin rights and changed the native directory password. And from then on I have not been able to refresh the security of essbase server in EAS. I get the following error,
    Essbase failed to get roles list for [ESB:Analytic Servers:Servername:1] from Shared Services Server with Error [32:1062:Failed to connect to the user directory [Native Directoy].]
    Also I would like to know if native directory password means the password "password" which comes as default for the username admin. Am new to essbase and was under the impression that native directory password means the password "password" which came as default for the username admin. Please help, this is a production issue which started only because I changed the native directory password and now I need to get it fixed.
    Thanks.
    Edited by: Teddd on Jan 6, 2013 4:07 PM

    Please confirm the version of the Shared Services (HSS) and Essbase, EAS server.
    Also let me know, if the HSS, ESSBASE & EAS installed on the same box ?
    If they are on the different servers, ensure that there is no network communication issues.. (try performing telnet on the port from each other servers)
    E.g Open command prompt - telnet servername port (telnet HSS_SERVER 28080), hit enter.. if it shows the blank screen .. it is successful and there is no communication issues.
    Also you could try..
    On EAS server, add the below in windows registry under EAS... and restart the machine..
    ESS_CSS_JVM_OPTION1 = -Dcom.hyperion.css.socketTimeout=60000
    if you are not comfortable updating the registry contact you admin and ensure to take the backup before editing...

  • Unable to launch Tomcat automatically with Hyperion shared services.

    i installed Hyperion System 9 on local machine and shared services showing that all components installed successfully even Tomcat also start automatically and i can run shared services and Admin console uaually but after quting i want to restart tomcat again to run services but i don't know from where should i launch tomcat (ver 5.0.28).
    Thanks in advance whoever hit there head.
    Thanks

    Thanks Mr John and Tim Tow for these valuable inputs.
    i tried to create shortcut C:\Hyperion\deployments\Tomcat5\bin\startSharedServices9.bat and it is working fine and same for stopping tomcat as i don't see any option to start shared services within foundation services. (Foundation service Options: Configuration utility, Hyperion home migration utility, information map and user management console)
    i hope my shortcuts will work.
    but really i like the way i got response in OTN amazing everytime.
    Thanks
    Neeraj
    Edited by: user10385300 on Oct 7, 2008 11:16 PM

  • Security Settings for two admin groups  with shared service

    Hi all,
    I use Essbase Administration Services 11.1.2 and Hyperion Shared Services Console 11.1.2.0.73 (Drop 17)
    Access Rights are granted via Groups in Hyperion Shared Service Console.
    We have two admin groups.
    AccessGroup 1: admin rights on some cubes (A) and read rights on all others (B).
    AccessGroup 2: admin rights on (B) and read rights on (A).
    If someone of AccessGroup 1 copies a cube of (A) – Fin_rep for example – wether AccessGroup 1 nor AccessGroup 2 can even see the cube (and i dont even mention admin rights) execpt the one who copied it.
    Settings in Shared Services Console:
    - Both groups have role "Create/delete application" and "AccessManager" (or something like that - german word is "Zugriffsberechtigungsmanager") on Essbase Cluster (our essbase server).
    - AccessGroup 1 has role "ApplicationManager" and "AccessManager" for all cubes which they should administrate (A)
    and role "Read" for all cubes with read only (B)
    - AccessGroup 2 has role "ApplicationManager" and "AccessManager" for all cubes which they should administrate (B)
    and role "Read" for all cubes with read only (A)
    I hope i can get some help with this topic.
    Thank you in advance,
    Best regards
    Bernd
    Edited by: 907705 on 07.02.2012 02:52

    Security will not copy over when you create new cube from old cube. You have to grant security to required groups using shared services or Maxl.

  • Delegated Admin and Class of Service

    Hi
    we have configured
    Messaging Server
    Calendar server
    Instant Messaging Server
    and Portal Server
    We would like use delegated admin for user provisioning.
    We are able to modify default Class of Service templates to suit our needs for Messaging and Calendaring.
    We would also like to provide Portal desktop and Instant messaging access thru' delegated admin.
    Help us to configure these class of services either using directory console or any other method
    Thanks
    Saba

    rkbunca wrote:
    Recently we deleted about 3K users using: commadmin domain purge, and while
    it appears to have successfully deleted the users -- ldapsearch doesn't yield any
    output. The lower number of users is NOT reflected in the field "Number of Users"
    on the Delegated Admin page. It still shows the same number of users >11K we
    "had" prior to the deletion process.
    Any ideas to explain this discrepancy?The number of users displayed in the DA GUI is recorded in the "sunNumUsers" attribute associated with the domain e.g.
    dn: o=aus.sun.com,dc=aus,dc=sun,dc=com
    sunNumUsers: 11
    This is to avoid having to do an ldapsearch across the domain to get a count. You can manually update this attribute to get the number back-in-sync.
    The commadmin domain purge should have updated this value -- I couldn't find any pre-existing bugs to explain why it didn't happen in your case. I suggest you log a support case to get this looked into further.
    You may also want to check your directory audit logs to see if an attempt was made to update this attribute but failed for some reason.
    Regards,
    Shane.

  • Delegated Admin and non-flat user/group structures

    Hello, I am trying to build a directory structure with several containers under an organization used to store different portions of userdata and group data (i.e. not only ou=people and ou=group, but also a few ou's like them). Server software is from OUCS 7u2 release. Users in "other" containers are populated into LDAP (ODSEE 11) by replication, filling in all the same attributes as a freshly DA-created account has.
    The Delegated Admin interface and other parts of the software accept this and work okay with this setup, displaying user information, allowing logins and so on - except for attempts to edit user accounts in the alternate containers in the DA (i.e. add/remove service packages, change quotas, etc.). First I've verified that this is not an LDAP problem - I can use both command-line ldapmodify and an LDAPBrowser GUI to edit the entries with no hiccups.
    I tracked that when trying to save account information for accounts in non-standard containers, the DA still tries to use a hard-coded path (i.e. uid=USERNAME,ou=people,o=DOMAINNAME,dc=DOMAIN,dc=NAME) despite the fact that the user account is (and DA displayed it from) uid=USERNAME,ou=morePeople,o=DOMAINNAME,dc=DOMAIN,dc=NAME.
    Possibly, this "hardcoding" stems from DA configuration in WEB-INF/classes/sun/comm/cli/server/servlet/serverconfig.properties which does list components of the LDAP structure:
    # Ldap configuration.
    # List of ldap hosts. Form is <ldaphost>:<portnumber>. (Default port = 389)
    # add additional hosts with ldaphost-<consecutive number>
    # Schema type is either "1" or "2".
    # Reconnect interval is in seconds
    # Group and people container is dn from organization dn (e.g ou=people)
    ldaphost-1=oucsldap01:389
    ldaphost-2=oucsldap02:389
    ldaphost-suffix=dc=DOMAIN,dc=NAME
    ldaphost-dcsuffix=dc=DOMAIN,dc=NAME
    ldaphost-maxcount=50
    ldaphost-schematype=2
    ldaphost-reconnectinterval=60
    ldaphost-peoplecontainer=ou=People
    ldaphost-groupcontainer=ou=Groups
    ldaphost-orgadminrole=cn=Organization Admin Role
    While the organization root dn is not explicit here (and shouldn't be), the default people container is... I might guess a coding error logic like this: indeed, the "ou=People" container should be used by default when creating a user via DA; as a likely error, it might also be used when editing existing users - instead of their existing full DN/parent DN.
    Questions:
    1) Does anyone have a working configuration with several user/group containers within an organization like this? Would you care to share details and workarounds, if were needed?
    2) I think that possibly the "shared domain/organization hosting" mode might help here - at least it is expected to have several LDAP trees with their delegated administrators performing as a single e-mail domain. Before I go and reconfigure everything, I'd love to hear if there are any success stories with this route? Is it a proper solution (or THE solution) for such config?
    Thanks,
    //Jim Klimov

    I wanted to follow up that reconfiguring the directory structure according to shared domain hosting, with branches for ISW-synchronized accounts as one of the sub-organizations which share the domain, and manually created OUCS-only accounts being in another sub-organization. This works for both messaging components and the DA, as long as UIDs are in ou=People in their organization. Somewhat unfortunately, ISW config seems to allow only one DSEE target branch and puts groups (CN) there as well. Well, for our needs to edit user attributes and service packages via DA, this suffices. Sometimes there are hiccups (Can not save changes), but they are intermittent and harder to trace debug; usually go away with restart of the DA web container. The DSEE LDAP instances are configured with plugins to enforce uid uniqueness across the organization and uniqueness of values of messaging email address attributes (mail, mailAlternateAddress, mailEqiuvalentAddress) to avoid mixups between user accounts in different branches.
    Also, we had a problem with Calendar server after migrating the LDAP entries: since our deployment used the nsUniqueID for calendar user identification, relocation of entries (the way we did it) generated new values for new entries and users got new empty caledar databases. On this POC this was not a major problem, and newer OUCS releases with a davUniqueID attribute should specifically be immune to this problem. However, for others trodding this path I can suggest that they export the LDAP database into LDIF including the unique IDs, recreate the suffixes as needed (the ISW target organization in DSEE should be a separate LDAP database suffix), change the LDIF entry pathnames, and import the LDIF anew. This would wipe old LDAP data and should add old nsUniqueIDs to relocated entries (unlike recreation via ldapadd or relocation via ldapmodrdn).
    We have also hit a problem with DA refusing to render the list of accounts (returning 0 or 25 empty entries in a table). The LDAP logs showed that on the LDAP side all is ok, and expected amount of replies was located. Pattern searches often produced the proper table with a subset of users in DA. Ultimately, we linked the problem to ISW binary base64-encoded attributes (dspswuserlink et al; some of those values also garbaged output of commadmin queries in a terminal) and created an LDAP ACI which forbade our DA-admin user to read,search,compare these attributes. This solved the problem for us. I wonder if a more generic solution is possible, so as to apply this ACI not to an explicitly named admin user but to any users with DA admin privileges (by group or role? which string, to cover them all in advance)? Or, perhaps, nobody except the ISW user account should see these ISW attributes?
    Hope this report helps others who would try to pioneer this path of messaging integration
    //Jim Klimov

  • Hyperion Shared services Migration/Export import

    Hi, We are migrating the OS from Windows to UNIX in Essbase System 9. I am trying to export the exixting grous/filter access from the Windows environment (shared services--Single sign on) to the unix server. There are several cubes in the Windows, but I am tryign with only a single cube. as a part of that I have modified importexport.properties file
    #import export operations
    importexport.css=http://windows_server:58080/interop/framework/getCSSConfigFile
    importexport.cmshost=windowsserver
    importexport.cmsport=58080
    importexport.username=admin
    importexport.password={CSS}MRcYv323uzxGr8rFdvQLcA==
    importexport.enable.console.traces=true
    importexport.trace.events.file=D:\trace_19Nov.log
    importexport.errors.log.file=D:\errors_19Nov.log
    importexport.locale=en
    # importexport.ssl_enabled = true
    # export operations
    export.fileformat=xml
    export.file=D:\export.xml
    export.internal.identities=false
    export.native.user.passwords=true
    export.provisioning.all=false
    export.delegated.lists=true
    export.user.filter=*
    export.group.filter=*
    #export.role.filter=*
    export.producttype=HUB-9.3.1,ESBAPP-9.3.1
    export.provisioning.apps=(Analytic Servers:server:1=DlyCube)
    # import operations
    #import.fileformat=xml
    #import.file=C:\exportNew.xml
    #import.operation=update
    #import.failed.operations.file=c:/failed.xml
    #import.maxerrors=0
    I am not gettign any export error; it says 50 groups have been exported,
    my import is
    importexport.css=http://fbiapld06.uk.db.com:58080/interop/framework/getCSSConfigFile
    importexport.cmshost=fbiapld06.uk.db.com
    importexport.cmsport=58080
    importexport.username=admin
    importexport.password={CSS}MRcYv323uzxGr8rFdvQLcA==
    importexport.enable.console.traces=true
    importexport.trace.events.file=/apps/hyperion_data/trace.log
    importexport.errors.log.file=/apps/hyperion_data/errors.log
    importexport.locale=en
    importexport.ssl_enabled=false
    import.fileformat=xml
    import.file=/apps/hyperion_data/import.xml
    import.operation=CREATE/UPDATE
    import.failed.operations.file=/apps/hyperion_data/failed.xml
    import.maxerrors=10
    While importing also i am not getting any error, it sayd 50 groups have been imported successfully.
    but in shared server unix box, i can't see the groups for that applicaiton.
    can u please help me?

    You can call CSSEXPORT.bat script using following statement
    Call CSSExport.bat importexport.properties
    Make sure your importexport.properties file is present in the same location as CSSExport.bat files
    format of importexport.properties file needs to like this
    Send me your email id and I can send you a document on import/export utlity for version 9.3.1
    #import export operations
    importexport.css=file:/C:/Hyperion/deployments/Tomcat5/SharedServices9/
    config/CSS.xml
    importexport.cmshost=localhost
    importexport.cmsport=58080
    importexport.username=admin
    importexport.password={CSS}MRcYv323uzxGr8rFdvQLcA==
    importexport.enable.console.traces=true
    importexport.trace.events.file=trace.log
    importexport.errors.log.file=errors.log
    Import/Export Utility 3
    importexport.locale=en
    # importexport.ssl_enabled = true
    # export operations
    export.fileformat=xml
    export.file=C:/exportNew.xml
    export.internal.identities=true
    export.native.user.passwords=true
    export.provisioning.all=true
    export.delegated.lists=false
    export.user.filter=*@Native Directory
    export.group.filter=*@Native Directory
    export.role.filter=*
    export.producttype=HUB-9.2.0
    #export.provisioning.apps=(HUB=Global Roles)
    # import operations
    import.fileformat=xml
    import.file=C:/exportNew.xml
    import.operation=update
    import.failed.operations.file=c:/failed.xml
    import.maxerrors=0

  • Shared Services Security Classes

    Hello,
    I wanted to know what the real value of having Security classes set up? I understand that having Security Classes on Shared Services is not mandatory. Under which circumstances should you use Security Classes and as I am involved in setting up Shared Services, I was wondering if I should use this option or not. We are currently in the development phase of HFM and Planning.
    If anyone can shed light on this issue, it would be greatly appreciated. Thank you.
    -- A

    Hey guys,
    I really appreciate the response.
    The fact that Security Class may be assigned at the Entity level does ring bells. We do want to ensure that certain entities can only see their own data and not others.
    I believe I will use Security class at the entity level for our company.
    Can you give me some examples of assigning Security classes for HFM?
    Wintee's suggestion of assign - ready only and stuff like that is okay but seems a bit generic. Thank you very much for your suggestion though Wintee.
    I also wanted to know the exact difference between an administrator, delegated administrator, application administrator. Who assigns who?
    If you had to make a hierarchy of users for Shared Services, what would it be: Admin, Delegated Admin, App. Admin, Provisioning Mgr, Directory Mgr? Who comes at the top? Thanks so much for your help so far guys...much appreciated.
    -- A

  • Hyperion Shared Services Export

    Hello All,
    I need to export Hyperion Shared services, I know about CSSEXPORT.bat utility but i am not sure how to run, we are using Hyperion Planning, Essbase FDM APS, Smart view, FR and some other tools and I need to export either in xml file or CSV, if is there any other option i can use or how i can run from CMD prompt. We used Hyperion System 9.3.1
    Any help would be great.
    Thank you,
    T.Khan

    You can call CSSEXPORT.bat script using following statement
    Call CSSExport.bat importexport.properties
    Make sure your importexport.properties file is present in the same location as CSSExport.bat files
    format of importexport.properties file needs to like this
    Send me your email id and I can send you a document on import/export utlity for version 9.3.1
    #import export operations
    importexport.css=file:/C:/Hyperion/deployments/Tomcat5/SharedServices9/
    config/CSS.xml
    importexport.cmshost=localhost
    importexport.cmsport=58080
    importexport.username=admin
    importexport.password={CSS}MRcYv323uzxGr8rFdvQLcA==
    importexport.enable.console.traces=true
    importexport.trace.events.file=trace.log
    importexport.errors.log.file=errors.log
    Import/Export Utility 3
    importexport.locale=en
    # importexport.ssl_enabled = true
    # export operations
    export.fileformat=xml
    export.file=C:/exportNew.xml
    export.internal.identities=true
    export.native.user.passwords=true
    export.provisioning.all=true
    export.delegated.lists=false
    export.user.filter=*@Native Directory
    export.group.filter=*@Native Directory
    export.role.filter=*
    export.producttype=HUB-9.2.0
    #export.provisioning.apps=(HUB=Global Roles)
    # import operations
    import.fileformat=xml
    import.file=C:/exportNew.xml
    import.operation=update
    import.failed.operations.file=c:/failed.xml
    import.maxerrors=0

  • Unable to access applications in workspace,shared services

    Hi ,
    I am Unable to access applications in workspace and shared services on EPM 11.1.1.3. It happened after normal shutdown/startup scripts were run.
    But when I reconfigure the Weblogic web server and run the services again I can access the applications.This is happening frequently now.
    Is this anything related to user profiles on the server as we are migrating these to other server.
    Can any one help me with this .
    Please find the Shared services log below:
    <22-Oct-2010 10:25:19 o'clock BST> <Notice> <WebLogicServer> <BEA-000395> <Following extensions directory contents added to the end of the classpath:
    D:\bea\weblogic92\platform\lib\p13n\p13n-schemas.jar;D:\bea\weblogic92\platform\lib\p13n\p13n_common.jar;D:\bea\weblogic92\platform\lib\p13n\p13n_system.jar;D:\bea\weblogic92\platform\lib\wlp\netuix_common.jar;D:\bea\weblogic92\platform\lib\wlp\netuix_schemas.jar;D:\bea\weblogic92\platform\lib\wlp\netuix_system.jar;D:\bea\weblogic92\platform\lib\wlp\wsrp-common.jar>
    <22-Oct-2010 10:25:21 o'clock BST> <Info> <WebLogicServer> <BEA-000377> <Starting WebLogic Server with BEA JRockit(R) Version R27.4.0-90_CR358515-94243-1.5.0_12-20080118-1154-windows-ia32 from BEA Systems, Inc.>
    <22-Oct-2010 10:25:25 o'clock BST> <Info> <Management> <BEA-141107> <Version: WebLogic Server 9.2 MP3 Mon Mar 10 08:28:41 EDT 2008 1096261 >
    <22-Oct-2010 10:25:29 o'clock BST> <Emergency> <Management> <BEA-141151> <The admin server could not be reached at http://localhost:7001.>
    <22-Oct-2010 10:25:29 o'clock BST> <Info> <Configuration Management> <BEA-150018> <This server is being started in managed server independence mode in the absence of the admin server.>
    <22-Oct-2010 10:25:29 o'clock BST> <Info> <WebLogicServer> <BEA-000215> <Loaded License : D:\bea\license.bea>
    <22-Oct-2010 10:25:29 o'clock BST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING>
    <22-Oct-2010 10:25:29 o'clock BST> <Info> <WorkManager> <BEA-002900> <Initializing self-tuning thread pool>
    <22-Oct-2010 10:25:30 o'clock BST> <Notice> <Log Management> <BEA-170019> <The server log file D:\Hyperion\deployments\WebLogic9\servers\SharedServices9\logs\SharedServices9.log is opened. All server side log events will be written to this file.>
    <22-Oct-2010 10:25:47 o'clock BST> <Notice> <Security> <BEA-090082> <Security initializing using security realm myrealm.>
    <22-Oct-2010 10:25:57 o'clock BST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STANDBY>
    <22-Oct-2010 10:25:57 o'clock BST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING>
    log dir isD:\Hyperion\logs\SharedServices9
    urlManifest zip:D:/Hyperion/deployments/temp/servers/SharedServices9/tmp/_WL_user/interop/tthmcu/war/WEB-INF/lib/interop-mmc.jar!/META-INF/MANIFEST.MF
    Shared Services Version: 11.1.1.3.24
    Shared Services Drop Number: 6
    Attempting to verify the database configuration
    Attempting to verify the database configuration
    Database configuration test passed.
    22 Oct 2010 10:26:38 - org.apache.slide.common.Domain - INFO - Auto-Initializing Domain
    22 Oct 2010 10:26:38 - org.apache.slide.common.Domain - INFO - Configuration found in classpath
    22 Oct 2010 10:26:38 - org.apache.slide.common.Domain - INFO - Domain configuration : {org.apache.slide.lock=true, org.apache.slide.versioncontrol=true, org.apache.slide.debug=false, org.apache.slide.search=true, org.apache.slide.security=true, org.apache.slide.urlEncoding=UTF-8, org.apache.slide.domain=D:/Hyperion/deployments/WebLogic9/SharedServices9/config/Domain.xml}
    configURL: file:///D:/Hyperion/deployments/WebLogic9/SharedServices9/config/CSS.xml
    Done initialize: com.hyperion.css.CSSAPIImpl@283baf
    connection pool registered:dbcpPool-org.apache.commons.pool.impl.GenericObjectPool@27efaa
    connection pool registered:dbcpPool-org.apache.commons.pool.impl.GenericObjectPool@454a3b
    CMSOfflineServlet Initialized
    Adding audit listener
    Shared Services Initialized Successfully
    <22-Oct-2010 10:26:56 o'clock BST> <Warning> <Log Management> <BEA-170011> <The LogBroadcaster on this server failed to broadcast log messages to the admin server. The Admin server may not be running. Message broadcasts to the admin server will be disabled.>
    <22-Oct-2010 10:26:56 o'clock BST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to ADMIN>
    <22-Oct-2010 10:26:56 o'clock BST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RESUMING>
    <22-Oct-2010 10:26:57 o'clock BST> <Notice> <Security> <BEA-090171> <Loading the identity certificate and private key stored under the alias hyperion from the jks keystore file D:\hyperion_SSL_Repository\hyperion.jks.>
    <22-Oct-2010 10:26:58 o'clock BST> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file D:\bea\JROCKI~1\jre\lib\security\cacerts.>
    <22-Oct-2010 10:26:58 o'clock BST> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure" is now listening on 10.86.57.43:28443 for protocols iiops, t3s, ldaps, https.>
    <22-Oct-2010 10:26:58 o'clock BST> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[1]" is now listening on 10.87.248.108:28443 for protocols iiops, t3s, ldaps, https.>
    <22-Oct-2010 10:26:58 o'clock BST> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[2]" is now listening on 127.0.0.1:28443 for protocols iiops, t3s, ldaps, https.>
    <22-Oct-2010 10:26:58 o'clock BST> <Warning> <Server> <BEA-002611> <Hostname "127.0.0.1", maps to multiple IP addresses: 10.86.57.43, 10.87.248.108, 127.0.0.1>
    <22-Oct-2010 10:26:58 o'clock BST> <Warning> <Server> <BEA-002611> <Hostname "LGWHYPWEB.uk.baa.com", maps to multiple IP addresses: 10.86.57.43, 10.87.248.108, 127.0.0.1>
    <22-Oct-2010 10:26:58 o'clock BST> <Notice> <WebLogicServer> <BEA-000358> <Started WebLogic Independent Managed Server "SharedServices9" for domain "WebLogic9" running in Production Mode>
    <22-Oct-2010 10:26:58 o'clock BST> <Warning> <Server> <BEA-002611> <Hostname "LGWWEB026.uk.baa.com", maps to multiple IP addresses: 10.86.57.43, 10.87.248.108, 127.0.0.1>
    <22-Oct-2010 10:26:58 o'clock BST> <Warning> <JMX> <BEA-149510> <Unable to establish JMX Connectivity with the Adminstration Server AdminServer at <JMXServiceURL:null>.>
    <22-Oct-2010 10:26:58 o'clock BST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RUNNING>
    <22-Oct-2010 10:26:58 o'clock BST> <Notice> <WebLogicServer> <BEA-000360> <Server started in RUNNING mode>
    <22-Oct-2010 10:27:08 o'clock BST> <Warning> <Security> <BEA-090475> <Plaintext data for protocol HTTP was received from peer LGWHYPWEB.uk.baa.com - 10.86.57.43 instead of an SSL handshake.>
    <22-Oct-2010 10:28:36 o'clock BST> <Warning> <Security> <BEA-090475> <Plaintext data for protocol HTTP was received from peer lgwdbs026.uk.baa.com - 10.86.41.33 instead of an SSL handshake.>
    22-Oct-2010 10:28:38, /files, HEAD, 401 "Unauthorized", 125 ms, %v
    22-Oct-2010 10:28:38, /files, HEAD, 200 "OK", 266 ms, %v
    22-Oct-2010 10:28:40, /files, HEAD, 401 "Unauthorized", 16 ms, %v
    22-Oct-2010 10:28:41, /files, HEAD, 200 "OK", 94 ms, %v
    22-Oct-2010 10:28:42, /files, HEAD, 401 "Unauthorized", 0 ms, %v
    22-Oct-2010 10:28:42, /files, HEAD, 200 "OK", 93 ms, %v
    22-Oct-2010 10:28:43, /files, HEAD, 401 "Unauthorized", 0 ms, %v
    22-Oct-2010 10:28:43, /files, HEAD, 200 "OK", 94 ms, %v
    22-Oct-2010 10:28:44, /files, HEAD, 401 "Unauthorized", 0 ms, %v
    22-Oct-2010 10:28:44, /files, HEAD, 200 "OK", 78 ms, %v
    22-Oct-2010 10:28:45, /files, HEAD, 401 "Unauthorized", 0 ms, %v
    22-Oct-2010 10:28:45, /files, HEAD, 200 "OK", 93 ms, %v
    22-Oct-2010 10:28:47, /files, HEAD, 401 "Unauthorized", 0 ms, %v
    22-Oct-2010 10:28:47, /files, HEAD, 200 "OK", 78 ms, %v
    22-Oct-2010 10:28:48, /files, HEAD, 401 "Unauthorized", 0 ms, %v
    22-Oct-2010 10:28:48, /files, HEAD, 200 "OK", 78 ms, %v
    <22-Oct-2010 10:29:40 o'clock BST> <Warning> <Security> <BEA-090475> <Plaintext data for protocol HTTP was received from peer lgwapp026.uk.baa.com - 10.86.51.104 instead of an SSL handshake.>
    <22-Oct-2010 10:30:16 o'clock BST> <Warning> <Security> <BEA-090475> <Plaintext data for protocol HTTP was received from peer lgwapp026.uk.baa.com - 10.86.51.104 instead of an SSL handshake.>
    <22-Oct-2010 10:32:25 o'clock BST> <Warning> <Security> <BEA-090475> <Plaintext data for protocol HTTP was received from peer LGWHYPWEB.uk.baa.com - 10.86.57.43 instead of an SSL handshake.>
    22-Oct-2010 10:32:43, /files, HEAD, 401 "Unauthorized", 0 ms, %v
    22-Oct-2010 10:32:43, /files, HEAD, 200 "OK", 78 ms, %v
    22-Oct-2010 10:32:44, /files, HEAD, 401 "Unauthorized", 0 ms, %v
    22-Oct-2010 10:32:44, /files, HEAD, 200 "OK", 63 ms, %v
    22-Oct-2010 10:32:45, /files, HEAD, 401 "Unauthorized", 0 ms, %v
    22-Oct-2010 10:32:45, /files, HEAD, 200 "OK", 63 ms, %v
    <22-Oct-2010 10:32:46 o'clock BST> <Warning> <Security> <BEA-090475> <Plaintext data for protocol HTTP was received from peer LGWHYPWEB.uk.baa.com - 10.86.57.43 instead of an SSL handshake.>
    <22-Oct-2010 10:34:00 o'clock BST> <Warning> <Security> <BEA-090475> <Plaintext data for protocol HTTP was received from peer LGWHYPWEB.uk.baa.com - 10.86.57.43 instead of an SSL handshake.>
    <22-Oct-2010 10:35:28 o'clock BST> <Warning> <Security> <BEA-090475> <Plaintext data for protocol HTTP was received from peer LGWHYPWEB.uk.baa.com - 10.86.57.43 instead of an SSL handshake.>
    log dir isD:\Hyperion\logs\SharedServices9
    urlManifest zip:D:/Hyperion/deployments/temp/servers/SharedServices9/tmp/_WL_user/interop/tthmcu/war/WEB-INF/lib/interop-mmc.jar!/META-INF/MANIFEST.MF
    Shared Services Version: 11.1.1.3.24
    Shared Services Drop Number: 6
    Populating Application Info
    Getting LCM callback info from Registry for product: HUB
    LCM Callback: https://LGWWEB026.uk.baa.com:28443/interop/framework/lcm/HSSMigration
    Populating Product Info
    Thanks in advance
    Edited by: 790426 on 25-Oct-2010 06:17

    You must first check if you have configured the web server to include the hfm/planning products.
    Then you can refer to the thread below:
    Not able to see Consolidation Administration
    The latter definitely applies to version 9.3.1, but it could be helpful.

Maybe you are looking for