Shared Services: Multi-domain MSAD based configuration issue

Hello to All,
Can someone tell me how to configure MSAD to use two domains X and Y under one user directory D.
My actual configuration is based on the domain X and provides some MSAD users groups in D user directory.
But I need to provisionne another user that belong to another AD in a foreign domain Y.
A trusted relationship (approbation relationship) have been created between the two domains X and Y.
Is this kind of multi-domain configuration allowed in Shared Services?
If yes, how can I configure this?
OS: Solaris
Hyperion Shared Services 9.3.1
Thanks in advance for your help

There are a couple of ways:
1) Add a new provider in Shared Services
2) Modify your current provider to go to a higher level in your domain which will likely require different parameters on your existing Active Directory provider
Option 2 is preferable if you see this will cascade and other domains will be needed and they are all under a global company domain.
Regards,
John A. Booth
http://www.metavero.com

Similar Messages

DNS Server does not resolve new generic Top Level Domain names- CNR configuration issue?

Hi all,
I am not sure if this is the correct community to post this question, but I will give it a try. I noticed that the users of my network cannot resolve web sites using new top level domain names, like ".education", ".international", etc. I have an internal DNS server made by Infoblox and a Cisco CNR v6.3.3.1 as an external DNS server. Infoblox uses CNR as its forwarder and CNR uses the root DNS servers for queries.
I would think that CNR was the problem because it is an obsolete product but after speaking with a fellow engineer at another organization where they still use an older version of CNR than mine, they have no problems at all. So now I am thinking it is a setting either on Infoblox, or on CNR I need to change. I can see Infoblox is forwarding the requests to CNR but that's about it. I am not sure if CNR is discarding the request. When I do an nslookup from a PC in my network it does not matter if I set my DNS server to be the Infoblox or the CNR. Neither resolves the URL.
Then again, no matter what I lookup using the CNR as my DNS, I only get a response with the root DNS names and IPs!
Any help is appreciated!

Hi Constantinos,
Have you taken a look at the infoblox community site? We've just reposted your question there and alerted some internal SMEs that should provide a solution soon.
https://community.infoblox.com/forum/ddi/dns-server-does-not-resolve-new-generic-top-level-domain-names-cnr-configuration-issue
Best,
Eric

Shared Services hangs after MSAD configuration (9.2.0.2)

Hi all,
I am trying to configure MSAD with shared services. I successfully add the MSAD domain and then add it to the search order, being number 2 after native. I then restart HSS. When I go to open HSS or the framework login the whole thing just hangs. HSS does always start correctly. For testing purposes I am restoring the CSS file each time. I have tried 3 different user accounts so I doubt it is a permissions issue.
I have also tried configuring the MSAD domain, restart HSS, then adding it to the search order and restarting HSS. It made no difference.
Has anyone seen this before? The same domain has been added to a different instance of HSS on another server (DR) so I can't understand why it is hanging.
Many thanks in advance,
Nathan

After extensive testing with Oracle Hyperion the root cause was runnong HSS as a service following the configuration with MSAD. The config framework page displayed 9.2.0.2 as the version when it was actually 9.2.0.3 as confirmed by the HSS console. Apparently this problem can happen in 9.2.0.3.
Just thought I'd let you know the solution.
Nathan

Multi-Domain LDAP UME configuration

Hello
We have EP 7.0 installed and want to connect the UME to our Corporate
LDAP (MSADS) as data source.
Our ADS is as follows:
domain.pt u2013 This is our top level domain. Here we have our main users.
Gs.domain.pt u2013 This is a child domain of ren.pt. Here are some special
users that cannot be moved to domain.pt level (because of this we have to
use multi-domain configuration)
According to some documents Step 2 of Note 762419 - Multi-Domain Logon
Using Microsoft Active Directory this configuration as to be done
according to a Multiple-Domain UME LDAP Configuration.
Following is is my configuration of LDAP access:
I have set the u201CUME LDAP Datau201D in Config Tool to point to
the u201CdataSourceConfiguration_ads_readonly_db_with_krb5_multipledomain.xmlu201D configuration file that has been previously change by me following previous documents. The xml is is the end of the message
Also in the u201CUME LDAP Datau201D (Directory Server) I have defined the following settings:
Server Name: dc01.domain.pt (This is the DC of domain.pt)
Server port: 389
User: j2ee-pp3 @domain.pt
Pass: ******* (ok on all configuration tests and authentication)
SSL: NO.
User Path: DC=domain,DC=pt
Group Path: DC=domain,DC=pt
Checked the u201CFlat User Group Hierarchyu201D.
Checked the u201CUse UME Unique id with unique LDAP Attributeu201D.
At u201CAdditional LDAP Propertiesu201D I have set the properties of
ume.ldap.unique_user_attribute(global) and
ume.ldap.unique_uacc_attribute(global) to userprincipalname. This was
done according to the Multi-Domain configuration.
Also ume.ldap.access.multidomain.enabled=true was set the property
sheet of the UME service. After this all checks are ok including in
User Administration in Portal.
Conclusion: We have no problem with SSO and search capabilities
at u201Cdomain.ptu201D level. All users of this domain are able to access the
portal with SSO.
Nevertheless no user from u201Cgs.domain.ptu201D is able to logon. Additionally,
using User Admninistration in Portal with option u201CAll Data Sourcesu201D
returns no results when searching for users from this child domain. It
seems the the configuration file does not recognize gs.domain.pt.
Is it possible that our xml file is incorrectly adapted? Is there any
missing or wrong configuration for multi-domain LDAP access? Please
advice.
Thanks in advance
dataSourceConfiguration_ads_readonly_db_with_krb5_multipledomain.xml
<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE dataSources SYSTEM "dataSourceConfiguration.dtd">
<dataSources>
    <dataSource id="PRIVATE_DATASOURCE"
                className="com.sap.security.core.persistence.datasource.imp.DataBasePersistence"
                isReadonly="false"
                isPrimary="true">
        <homeFor>
            <principals>
                 <principal type="group"/>
                 <principal type="user"/>
                 <principal type="account"/>
                <principal type="team"/>
                <principal type="ROOT" />
                <principal type="OOOO" />
            </principals>
        </homeFor>
        <notHomeFor/>
        <responsibleFor>
            <principals>
                 <principal type="group"/>
                 <principal type="user"/>
                 <principal type="account"/>
                <principal type="team"/>
                <principal type="ROOT" />
                <principal type="OOOO" />
            </principals>
        </responsibleFor>
        <privateSection>
        </privateSection>
    </dataSource>
     <dataSource id="CORP_LDAP"
               className="com.sap.security.core.persistence.datasource.imp.LDAPPersistence"
               isReadonly="true"
               isPrimary="true">
          <homeFor/>
          <responsibleFor>
                    <principal type="account">
                              <nameSpace name="com.sap.security.core.usermanagement">
                                   <attributes>
                                        <attribute name="j_user"/>
                                        <attribute name="j_password"/>
                                        <attribute name="userid"/>
                                        <attribute name="logonalias"/>
                                   </attributes>
                              </nameSpace>
                    </principal>
                    <principal type="user">
                         <nameSpaces>
                              <nameSpace name="com.sap.security.core.usermanagement">
                                   <attributes>
                                        <attribute name="firstname" populateInitially="true"/>
                                        <attribute name="displayname" populateInitially="true"/>
                                        <attribute name="lastname" populateInitially="true"/>
                                        <attribute name="fax"/>
                                        <attribute name="email" populateInitially="true"/>
                                        <attribute name="email"/>
                                        <attribute name="title"/>
                                        <attribute name="department"/>
                                        <attribute name="description"/>
                                        <attribute name="mobile"/>
                                        <attribute name="telephone"/>
                                        <attribute name="streetaddress"/>
                                        <attribute name="uniquename" populateInitially="true"/>
                                        <attribute name="krb5principalname"/>
                                        <attribute name="kpnprefix"/>
                                        <attribute name="dn"/>
                                   </attributes>
                              </nameSpace>
                              <nameSpace name="com.sap.security.core.usermanagement.relation">
                                   <attributes>
                                        <attribute name="PRINCIPAL_RELATION_PARENT_ATTRIBUTE"/>
                                   </attributes>
                              </nameSpace>
                              <nameSpace name="$usermapping$">
                                      <attributes>
                                           <attribute name="REFERENCE_SYSTEM_USER"/>
                                      </attributes>
                                 </nameSpace>
                         </nameSpaces>
                    </principal>
                    <principal type="group">
                         <nameSpaces>
                              <nameSpace name="com.sap.security.core.usermanagement">
                                   <attributes>
                                         <attribute name="displayname" populateInitially="true"/>
                                         <attribute name="description" populateInitially="true"/>
                                         <attribute name="uniquename"/>
                                    </attributes>
                              </nameSpace>
                              <nameSpace name="com.sap.security.core.usermanagement.relation">
                                   <attributes>
                                         <attribute name="PRINCIPAL_RELATION_MEMBER_ATTRIBUTE"/>
                                         <attribute name="PRINCIPAL_RELATION_PARENT_ATTRIBUTE"/>
                                   </attributes>
                              </nameSpace>
                              <nameSpace name="com.sap.security.core.bridge">
                                   <attributes>
                                        <attribute name="dn"/>
                                   </attributes>
                              </nameSpace>
                         </nameSpaces>
                    </principal>
          </responsibleFor>
          <attributeMapping>
               <principals>
                    <principal type="account">
                         <nameSpaces>
                              <nameSpace name="com.sap.security.core.usermanagement">
                                   <attributes>
                                        <attribute name="domain_j_user">
                                             <physicalAttribute name="samaccountname"/>
                                        </attribute>
                                        <attribute name="j_user">
                                             <physicalAttribute name="userprincipalname"/>
                                        <attribute name="logonalias">
                                             <physicalAttribute name="userprincipalname"/>
                                        </attribute>
                                        <attribute name="j_password">
                                             <physicalAttribute name="unicodepwd"/>
                                        </attribute>
                                        <attribute name="userid">
                                             <physicalAttribute name="null"/>
                                        </attribute>
                                   </attributes>
                              </nameSpace>
                         </nameSpaces>
                    </principal>
                    <principal type="user">
                         <nameSpaces>
                              <nameSpace name="com.sap.security.core.usermanagement">
                                   <attributes>
                                        <attribute name="firstname">
                                             <physicalAttribute name="givenname"/>
                                        </attribute>
                                        <attribute name="displayname">
                                             <physicalAttribute name="displayname"/>
                                        </attribute>
                                        <attribute name="lastname">
                                             <physicalAttribute name="sn"/>
                                        </attribute>
                                        <attribute name="fax">
                                             <physicalAttribute name="facsimiletelephonenumber"/>
                                        </attribute>
                                        <attribute name="uniquename">
                                             <physicalAttribute name="userprincipalname"/>
                                        </attribute>
                                        <attribute name="loginid">
                                             <physicalAttribute name="null"/>
                                        </attribute>
                                        <attribute name="email">
                                             <physicalAttribute name="mail"/>
                                        </attribute>
                                        <attribute name="mobile">
                                             <physicalAttribute name="mobile"/>
                                        </attribute>
                                        <attribute name="telephone">
                                             <physicalAttribute name="telephonenumber"/>
                                        </attribute>
                                        <attribute name="department">
                                             <physicalAttribute name="ou"/>
                                        </attribute>
                                        <attribute name="description">
                                             <physicalAttribute name="description"/>
                                        </attribute>
                                        <attribute name="streetaddress">
                                             <physicalAttribute name="postaladdress"/>
                                        </attribute>
                                        <attribute name="pobox">
                                             <physicalAttribute name="postofficebox"/>
                                        </attribute>
                                  <attribute name="krb5principalname">
                                    <physicalAttribute name="userprincipalname"/>
                                </attribute>
                                  <attribute name="kpnprefix">
                                    <physicalAttribute name="samaccountname"/>
                                </attribute>
                                        <attribute name="dn">
                                             <physicalAttribute name="distinguishedname"/>
                                        </attribute>
                                     </attributes>
                              </nameSpace>
                              <nameSpace name="com.sap.security.core.usermanagement.relation">
                                   <attributes>
                                        <attribute name="PRINCIPAL_RELATION_PARENT_ATTRIBUTE">
                                             <physicalAttribute name="null"/>
                                        </attribute>
                                   </attributes>
                              </nameSpace>
                              <nameSpace name="$usermapping$">
                                      <attributes>
                                           <attribute name="REFERENCE_SYSTEM_USER">
                                                <physicalAttribute name="sapusername"/>
                                           </attribute>
                                      </attributes>
                                 </nameSpace>
                         </nameSpaces>
                    </principal>
                    <principal type="group">
                         <nameSpaces>
                              <nameSpace name="com.sap.security.core.usermanagement">
                                   <attributes>
                                         <attribute name="displayname">
                                              <physicalAttribute name="displayname"/>
                                         </attribute>
                                         <attribute name="description">
                                              <physicalAttribute name="description"/>
                                         </attribute>
                                         <attribute name="uniquename" populateInitially="true">
                                              <physicalAttribute name="ou"/>
                                         </attribute>
                                    </attributes>
                              </nameSpace>
                              <nameSpace name="com.sap.security.core.usermanagement.relation">
                                   <attributes>
                                         <attribute name="PRINCIPAL_RELATION_MEMBER_ATTRIBUTE">
                                              <physicalAttribute name="null"/>
                                         </attribute>
                                         <attribute name="PRINCIPAL_RELATION_PARENT_ATTRIBUTE">
                                              <physicalAttribute name="null"/>
                                         </attribute>
                                    </attributes>
                              </nameSpace>
                              <nameSpace name="com.sap.security.core.bridge">
                                   <attributes>
                                        <attribute name="dn">
                                             <physicalAttribute name="null"/>
                                        </attribute>
                                   </attributes>
                              </nameSpace>
                         </nameSpaces>
                    </principal>
               </principals>
          </attributeMapping>
          <privateSection>
               <ume.ldap.access.server_type>MSADS</ume.ldap.access.server_type>
               <ume.ldap.access.context_factory>com.sun.jndi.ldap.LdapCtxFactory</ume.ldap.access.context_factory>
               <ume.ldap.access.authentication>simple</ume.ldap.access.authentication>
               <ume.ldap.access.flat_group_hierachy>true</ume.ldap.access.flat_group_hierachy>
               <ume.ldap.access.user_as_account>true</ume.ldap.access.user_as_account>
               <ume.ldap.access.dynamic_groups>false</ume.ldap.access.dynamic_groups>
               <ume.ldap.access.ssl_socket_factory>com.sap.security.core.server.https.SecureConnectionFactory</ume.ldap.access.ssl_socket_factory>
               <ume.ldap.access.objectclass.user>User</ume.ldap.access.objectclass.user>
               <ume.ldap.access.objectclass.uacc>User</ume.ldap.access.objectclass.uacc>
               <ume.ldap.access.objectclass.grup>organizationalUnit</ume.ldap.access.objectclass.grup>
               <ume.ldap.access.naming_attribute.user>cn</ume.ldap.access.naming_attribute.user>
               <ume.ldap.access.auxiliary_naming_attribute.user>samaccountname</ume.ldap.access.auxiliary_naming_attribute.user>
               <ume.ldap.access.naming_attribute.uacc>cn</ume.ldap.access.naming_attribute.uacc>
               <ume.ldap.access.auxiliary_naming_attribute.uacc>samaccountname</ume.ldap.access.auxiliary_naming_attribute.uacc>
               <ume.ldap.access.naming_attribute.grup>ou</ume.ldap.access.naming_attribute.grup>
               <ume.ldap.access.pwd.via.usercontext>true</ume.ldap.access.pwd.via.usercontext>
               <ume.ldap.access.set_pwd>true</ume.ldap.access.set_pwd>
               <ume.ldap.access.multidomain.enabled>true</ume.ldap.access.multidomain.enabled>
               <ume.ldap.access.extended_search_size>200</ume.ldap.access.extended_search_size>
                    <ume.ldap.access.domain_mapping>
                    [DOMAIN_PT;DC=domain,DC=pt]
                    [GS_DOMAIN_PT;DC=gs,DC=domain,DC=pt]
                    [gs;DC=DC=gs,DC=domain,DC=pt]
                    [domain;DC=pt]
                    </ume.ldap.access.domain_mapping>
          </privateSection>
     </dataSource>
    </dataSources>
Edited by: Joaquim Pereira on Feb 7, 2009 1:34 PM

Hi Gaetano
I tried to set back the "uniqueid" in the XML to samaccountname.
Also, i changed the spnego to go only to domain.pt (gs.domain.pt is a child domain).
In the 1st tests this worked perfectly, but we still to do some testings with this config.
When i get confirmation, ill reply here.
Thank you.
PS:. we thought on defining the abap user for each user, but there are a lot of users...
we'll try this config, and if it doesn't work, probably, thats what we'll do.
Edited by: Joaquim Pereira on Feb 12, 2009 5:45 PM
Everything seams to be working now. setting back the uniqueid to samaccountname and configuring spnego to go to only 1 domain solved the issue.
I just need to test which change did the trick.
Edited by: Joaquim Pereira on Feb 13, 2009 1:02 PM

Shared Services Mixed Native-MSAD group nesting

Is anyone doing this?
I am trying to make an MSAD group a member of a native group using shared services and after adding the MSAD group, the console errors out for the group i just made whenever trying to view the group members. This is repeatable and happens before i have even provisioned the parent group when i am trying to view the group members.
When i nest a native group inside another native group, it works fine.
In the SharedServices_Security.log found in Oracle/Middleware/user_projects/domains/EPMSystem/servers/FoundationServices0/logs
I see the following stack trace:
[2010-12-14T09:09:22.156-06:00] [FoundationServices0] [ERROR] [EPMCSS-7019] [oracle.EPMCSS.CSS] [tid: 7] [userId: <anonymous>] [ecid: 0000In_RR_eDKeoLwUg8yW1D1Yoh00001G,0] [APP: SHARE
DSERVICES#11.1.2.0] [SRC_METHOD: execute:129] [SRC_CLASS: com.hyperion.css.web.action.CSSStatefulAction] Failed to process the request.
[2010-12-14T09:16:16.365-06:00] [FoundationServices0] [NOTIFICATION] [EPMCSS-17306] [oracle.EPMCSS.CSS] [tid: 7] [userId: <anonymous>] [ecid: 0000In_T0hhDKeoLwUg8yW1D1Yoh00001J,0] [AP
P: SHAREDSERVICES#11.1.2.0] [SRC_METHOD: ] [SRC_CLASS: ] [arg: native://nvid=af1814bfd20d7272:58ecdd0:12ce020823f:-7f66?GROUP] x
[2010-12-14T09:16:17.473-06:00] [FoundationServices0] [ERROR] [EPMCSS-37000] [oracle.EPMCSS.CSS] [tid: 8] [userId: <anonymous>] [ecid: 0000In_T0z1DKeoLwUg8yW1D1Yoh00001K,0] [APP: SHAR
EDSERVICES#11.1.2.0] [SRC_METHOD: execute:128] [SRC_CLASS: com.hyperion.css.web.action.CSSStatefulAction] Error while processing the request.[[
java.lang.NullPointerException
at com.hyperion.css.web.util.DTOFactory.createGroupDTO(DTOFactory.java:49)
at com.hyperion.css.web.util.DTOFactory.createGroupDTOEscDoubleQuote(DTOFactory.java:75)
at com.hyperion.css.web.action.EditGroupAssignGroupsFormAction.executeAction(EditGroupAssignGroupsFormAction.java:109)
at com.hyperion.css.web.action.CSSStatefulAction.execute(CSSStatefulAction.java:119)
at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:421)
at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:226)
at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1164)
at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:415)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:292)
at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:175)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3594)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2202)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2108)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1432)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
I think its a bug and have opened an SR with oracle, but i'm curious what others out there are doing.
Edited by: Javanator on Dec 14, 2010 10:25 AM

Hi Dear
Is this issue resolved? i too get the similar error in the log file . Please let me know if it is reolsved for you

Shared Services Registration Failed While Re-Configuring EAS

Hi
I was re-configuring EAS and my shared services and deployment failed.I reached out to oracle and they gave me a solution to delete the HBR instances.
But when I try to open the url in microsoft word it opens in html format .And i am unable to delete any HBR instance.What is the correct way to do it?
The solution offered by Oracle Support:
To resolve this issue, do the following steps:
1. Log into the User management console using the URL http://localhost:58080/interop/index.jsp.
2. Append the URL to show the files http://localhost:58080.interop/content/files
3. Copy this URL and open in Microsoft Word. (file->open option in MS Word)
4. Provide username (admin) and password (password).
5. Check in AdminProjects, Products and Projects folders for the files and folders related to HBR and delete any occurences.
6. Save and close the file.
7. Restart the services.
8. Configure EAS with Shared Services using the config utility.
9. For Business Rules to work, go to \Hyperion\AnalyticAdministration\storage\easuser location and delete all contents from the easusers folder.
10. Restart the EAS server.
Thanks
Z

I never really used the method with word and always used davexplorer which can be downloaded from http://www.davexplorer.org/download.html
Follow the rest of the instructions which you posted to delete HBR.
Cheers
John

Shared Services Framework (AIC and EIC) configuration - Basis Side

Hello Experts,
We are trying to configure AIC and EIC modules under the shared services framework of CRM, do you have any guides on how to configure / activate those modules related on the SAP BASIS side.
Thank you in advance for your answers
Cheers,
Manuel

After extensive testing with Oracle Hyperion the root cause was runnong HSS as a service following the configuration with MSAD. The config framework page displayed 9.2.0.2 as the version when it was actually 9.2.0.3 as confirmed by the HSS console. Apparently this problem can happen in 9.2.0.3.
Just thought I'd let you know the solution.
Nathan

Shared services is asking for re-configuration.

Dear Gurus,
I am using 9.0 version shared services, it was working fine since long back, recently domain server have been changed, for the updation i edited the IP and restarted the shared services, surprisingly the shared services is not allowing me to login and is asking for re-configuration as the database is not configured properly.
I am using native directory also, so there should no data(user info and provision) loss.
i am going to perform the below steps:-
1) executing the Cssimportexport utility and take the back up.
2) taking the back-up of shared services repository
3) re-configuring the shared services with the existing repository.
4) executing the cssimportexport utility to restore
i have db-archive and db-recover utilities.
please let me know if iam going wrong.
thanks in advance
Giri Prasad

There is a document that I got from Oracle support called "System9-moving repository.doc" it goes thru the steps of rehosting. I it is more then just changing IP addresses. the document shows the configuration files that need to be modified and database entries.
You should request a copy from support.

Shared Services 11.1.1.3 configuration error

Hi all,
I have installed EPM 11.1.1.3 with Shared services, financial management, reporting service. When I configure database for shared services, I got an exception from JDBC - "There is already an object named 'HSS_COMPONENT' in the database." However, the database is newly created and it doesn't contain any table.
Server configuration:
Windows 2003 standard edition
SQL Server 2005 SP3
Best Regards,
Ray

Hi All,
I can install and configure Shared Services successfully after I change some configuration.
1) Use another computer as a Database server
2) Create a new user in SQL for Shared Services instead of sa
Best Regards,
Ray

Shared Services issue with MSAD

Hi, I recently configured shared services to authenticate to a remote MSAD server. the configuration went well and all the users in the remote MSAD came thru to the shared services, and I can even provision the new users.
however, after the provisioning, no new users can login to the apps that were provisioned for them, there's always the authentication error.
p.s. there's already a working MSAD domain on shared service. I ran into the issue when I tried to configured a second one.
thanks

Hi
In shared service web interface, you will find in the top menu "synchronize external directory" or something like that.
Laurent

EPM 11 - Issue with Shared Services Registration and DB configuration

Hi,
Im installing Oracle EPM 11.1.1...
I have successfully installed Foundation Services and Essbase Server/Client...
But I'm facing two issues...
1. I couldnt able to register any products to the Shared Services except for Essbase Server
I tried restarting the services (1) Hyperion Foundation OpenLDAP, (2) Hyperion Foundation Shared Services - Web Application in the same order...
2. I couldnt able to configure Oracle 10.2.0.1.0 for Essbase Administration Services...
It shows the below error...
"com.hyperion.cis.config.CmsRegistrationUtil, ERROR, register operation failed in CMS:
com.hyperion.interop.lib.OperationFailedException: Registeration failed: null.Registeration failed: null.
     at com.hyperion.interop.lib.helper.RegistrationHelper.register(Unknown Source)
     at com.hyperion.interop.lib.CMSClient.register(Unknown Source)
     at com.hyperion.cis.config.CmsRegistrationUtil.registerApplication(CmsRegistrationUtil.java:200)
     at com.hyperion.cis.config.wizard.RunAllTasksWizardAction.executeHubRegistrationTask(RunAllTasksWizardAction.java:427)
     at com.hyperion.cis.config.wizard.RunAllTasksWizardAction.execute(RunAllTasksWizardAction.java:212)
     at com.installshield.wizard.RunnableWizardBeanContext.run(Unknown Source)
com.hyperion.cis.config.wizard.RunAllTasksWizardAction, ERROR, Error:
java.lang.Exception: Registeration failed: null.Registeration failed: null.
     at com.hyperion.cis.config.CmsRegistrationUtil.registerApplication(CmsRegistrationUtil.java:212)"
But I could use the same version of Oracle database successfully for Shared Services and Essbase Studio database configuration...
Please help me to resolve this issue....
Thanks & Regards,
dmaze

Hello!
During your first configuration of the EPM System Fusion Edition, configure the two conponents first - COMMON SETTINGS and CONFIGURE DATABASE. Never configure other components together with these two (especially Workspace). After you have configured these two, then you can rerun the configuration utility and configure the components that you left out.
Hope this helps.
Cheers!

EPM 11.1.1.3 Shared Services Configuration help needed

Hi,
I am currently running into issues when trying to configure Shared Services via the EPM System Configurator 11.1.1.3. I've installed Weblogic 9.3 MP3 with all of the default options (including establishing Node Manager as a service). I've also created a seperate userId in Weblogic called hyperion (with the password of hyperion) so that EPM can access the instance against the default web server.
When I run the configurator to try and deploy to application server, the status sits there on the "Starting WebLogic 9 Admin Servers" and does nothing.
Sometimes is does get past that but then the deployment fails because it is unable to deply the interop.war.
Any help would be greatly appreciated as I'm 100% stuck!
Thanks,
Anju

Hi,
I am not sure what your issue is but I do know that you don't have to start creating users in weblogic. Usually you do a standard install of weblogic, if you are not going to use it you don't need the node manager set up.
Cheers
John
http://john-goodwin.blogspot.com/

Impossible to make the initial configuration of Shared Services Database

Hello all
I am trying to install EPM 11.1.2 on a 64 bits environment (Shared Services, Essbase Plus , HFR)
The installation step is done.
Now I am trying to configure Shared Services through the EPM system configurator
but I am not able to choose the initial database configuration.
The option Connect to a previous configured database is already checked.
So i am stuck for the rest of the configuration
Any idea ?
Thanks in adance for your help

I had to take the files from another 11.1.2 base install, you wouldn't be able to take them from another version.
I had to copy the xml files from \common\config directory and the .ora.products file, I am not sure why I hit the issue though.
Cheers
John
http://john-goodwin.blogspot.com/

Unable to configure Shared Services

Hi All,
I am trying to install 9.3.1 on windows 2003 server, Using Sql server 2000.
I installed Shared Services, When I try to configure the database and Deploy the Application Server its trowing the following error:
"Unable to connect to the database for the product Hyperion Shared Services".
I checked that my database is up and running fine.
Please suggest how to resolve this issue.
Thanks in advance

Hi John,
Copied the below error from the log.
(Nov 04, 2009, 06:47:39 PM), com.hyperion.cis.config.wizard.DBSetupPanel, INFO, Creating new Connecting info: user=hypss, password=*****, jdbcUrl=jdbc:hyperion:sqlserver://127.0.0.1:1433;DatabaseName=ESS, DatabaseType=MSSQLServer.
(Nov 04, 2009, 06:47:39 PM), com.hyperion.cis.config.AbstractProductDBConfigurator, DEBUG, compare driver strings(org.hsqldb.jdbcDriver,hyperion.jdbc.sqlserver.SQLServerDriver)
(Nov 04, 2009, 06:47:39 PM), com.hyperion.cis.config.AbstractProductDBConfigurator, DEBUG, compare driver strings(hyperion.jdbc.sqlserver.SQLServerDriver,hyperion.jdbc.sqlserver.SQLServerDriver)
(Nov 04, 2009, 06:47:39 PM), com.hyperion.cis.config.AbstractProductDBConfigurator, DEBUG, driver class is hyperion.jdbc.sqlserver.SQLServerDriver
(Nov 04, 2009, 06:47:39 PM), com.hyperion.cis.config.AbstractProductDBConfigurator, DEBUG, Make jdbcURL
(Nov 04, 2009, 06:47:39 PM), com.hyperion.cis.config.AbstractProductDBConfigurator, DEBUG, Make Connection using jdbc:hyperion:sqlserver://127.0.0.1:1433;DatabaseName=ESS;loadLibraryPath=F:\Hyperion/common/JDBC/DataDirect/3.6/lib
(Nov 04, 2009, 06:47:51 PM), com.hyperion.cis.config.AbstractProductDBConfigurator, ERROR, Error:
hyperion.jdbc.base.BaseSQLException: [Hyperion][SQLServer JDBC Driver]Error establishing socket to host and port: 127.0.0.1:1433. Reason: Connection refused: connect
     at hyperion.jdbc.base.BaseExceptions.createException(Unknown Source)
     at hyperion.jdbc.base.BaseExceptions.getException(Unknown Source)
     at hyperion.jdbc.sqlserver.tds.TDSConnection.<init>(Unknown Source)
     at hyperion.jdbc.sqlserver.SQLServerImplConnection.open(Unknown Source)
     at hyperion.jdbc.base.BaseConnection.connect(Unknown Source)
     at hyperion.jdbc.base.BaseConnectionStartup.run(Unknown Source)
(Nov 04, 2009, 06:47:51 PM), com.hyperion.cis.config.wizard.DBSetupPanel, ERROR, Error:
com.hyperion.cis.config.ConnectException
     at com.hyperion.cis.config.AbstractProductDBConfigurator.checkConnection(AbstractProductDBConfigurator.java:270)
     at com.hyperion.cis.config.wizard.DBSetupPanel.queryExit(DBSetupPanel.java:368)
     at com.installshield.wizard.awt.AWTWizardUI.doNext(Unknown Source)
     at com.installshield.wizard.awt.AWTWizardUI.actionPerformed(Unknown Source)
     at com.installshield.wizard.swing.SwingWizardUI.actionPerformed(Unknown Source)
     at com.installshield.wizard.swing.SwingWizardUI$SwingNavigationController.notifyListeners(Unknown Source)
     at com.installshield.wizard.swing.SwingWizardUI$SwingNavigationController.actionPerformed(Unknown Source)
     at javax.swing.AbstractButton.fireActionPerformed(Unknown Source)
     at javax.swing.AbstractButton$Handler.actionPerformed(Unknown Source)
     at javax.swing.DefaultButtonModel.fireActionPerformed(Unknown Source)
     at javax.swing.DefaultButtonModel.setPressed(Unknown Source)
     at javax.swing.plaf.basic.BasicButtonListener.mouseReleased(Unknown Source)
     at java.awt.Component.processMouseEvent(Unknown Source)
     at javax.swing.JComponent.processMouseEvent(Unknown Source)
     at java.awt.Component.processEvent(Unknown Source)
     at java.awt.Container.processEvent(Unknown Source)
     at java.awt.Component.dispatchEventImpl(Unknown Source)
     at java.awt.Container.dispatchEventImpl(Unknown Source)
     at java.awt.Component.dispatchEvent(Unknown Source)
     at java.awt.LightweightDispatcher.retargetMouseEvent(Unknown Source)
     at java.awt.LightweightDispatcher.processMouseEvent(Unknown Source)
     at java.awt.LightweightDispatcher.dispatchEvent(Unknown Source)
     at java.awt.Container.dispatchEventImpl(Unknown Source)
     at java.awt.Window.dispatchEventImpl(Unknown Source)
     at java.awt.Component.dispatchEvent(Unknown Source)
     at java.awt.EventQueue.dispatchEvent(Unknown Source)
     at java.awt.EventDispatchThread.pumpOneEventForHierarchy(Unknown Source)
     at java.awt.EventDispatchThread.pumpEventsForHierarchy(Unknown Source)
     at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
     at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
     at java.awt.EventDispatchThread.run(Unknown Source)
Please suggest

Shared services problem

Hi ,
I am facing a problem opening an folder in shared seirvices,Can some one help me on this.
Tried steps like this
1.Opened the link http://Server:58080/interop/
2.Login with the details.
3.Application Opened . ( with directories a)User Directories b)Projects c)Unassigned Applications)
If i click and tries to open any folder , it says Loading......
but never gets open

Hi John,
Could you please check the logs if any issues are present in it
Mar 7, 2010 10:54:23 AM org.apache.coyote.http11.Http11Protocol init
INFO: Initializing Coyote HTTP/1.1 on http-58080
Mar 7, 2010 10:54:23 AM org.apache.catalina.startup.Catalina load
INFO: Initialization processed in 750 ms
Mar 7, 2010 10:54:23 AM org.apache.catalina.core.StandardService start
INFO: Starting service Catalina
Mar 7, 2010 10:54:23 AM org.apache.catalina.core.StandardEngine start
INFO: Starting Servlet Engine: Apache Tomcat/5.0.28
Mar 7, 2010 10:54:23 AM org.apache.catalina.core.StandardHost start
INFO: XML validation disabled
Mar 7, 2010 10:54:23 AM org.apache.catalina.core.StandardHost getDeployer
INFO: Create Host deployer for direct deployment ( non-jmx )
Mar 7, 2010 10:54:23 AM org.apache.catalina.core.StandardHostDeployer install
INFO: Installing web application at context path /interop from URL file:C:\Hyper
ion\deployments\Tomcat5\SharedServices9\webapps\interop
Mar 7, 2010 10:54:27 AM com.hyperion.bpm.logon.CSSAuthenticate initializeCSS
INFO: Initializing security framework
log4j:WARN No appenders could be found for logger (com.hyperion.css.CSSSystem).
log4j:WARN Please initialize the log4j system properly.
Mar 7, 2010 10:54:29 AM com.opensymphony.oscache.general.GeneralCacheAdministrat
or <init>
INFO: Constructed GeneralCacheAdministrator()
Mar 7, 2010 10:54:29 AM com.opensymphony.oscache.general.GeneralCacheAdministrat
or createCache
INFO: Creating new cache
Attempting to verify the database configuration
Attempting to verify the database configuration
log dir isC:\Hyperion\logs\SharedServices9
urlManifest jar:file:/C:/Hyperion/deployments/Tomcat5/SharedServices9/webapps/in
terop/WEB-INF/lib/interop-mmc.jar!/META-INF/MANIFEST.MF
Shared Services Version: 9.3.1.0.45
Shared Services Drop Number: 9
Database configuration test passed.
07 Mar 2010 10:54:33 - org.apache.slide.common.Domain - INFO - Auto-Initializing
Domain
07 Mar 2010 10:54:33 - org.apache.slide.common.Domain - INFO - Configuration fou
nd in classpath
07 Mar 2010 10:54:33 - org.apache.slide.common.Domain - INFO - Domain configurat
ion : {org.apache.slide.lock=true, org.apache.slide.versioncontrol=true, org.apa
che.slide.debug=false, org.apache.slide.search=true, org.apache.slide.security=t
rue, org.apache.slide.urlEncoding=UTF-8, org.apache.slide.domain=C:/Hyperion/dep
loyments/Tomcat5/SharedServices9/config/Domain.xml}
configURL: file:///C:/Hyperion/deployments/Tomcat5/SharedServices9/config/CSS.xm
l
Done initialize: com.hyperion.css.CSSAPIImpl@3fa6cd
Mar 7, 2010 10:54:51 AM org.quartz.impl.jdbcjobstore.JobStoreSupport initialize
INFO: Using thread monitor-based data access locking (synchronization).
Mar 7, 2010 10:54:51 AM org.quartz.impl.jdbcjobstore.JobStoreSupport cleanVolati
leTriggerAndJobs
INFO: Removed 0 Volatile Trigger(s).
Mar 7, 2010 10:54:51 AM org.quartz.impl.jdbcjobstore.JobStoreSupport cleanVolati
leTriggerAndJobs
INFO: Removed 0 Volatile Job(s).
Mar 7, 2010 10:54:51 AM org.quartz.impl.jdbcjobstore.JobStoreSupport recoverJobs
INFO: Freed 0 triggers from 'acquired' / 'blocked' state.
Mar 7, 2010 10:54:51 AM org.quartz.impl.jdbcjobstore.JobStoreSupport recoverJobs
INFO: Recovering 0 jobs that were in-progress at the time of the last shut-down.
Mar 7, 2010 10:54:51 AM org.quartz.impl.jdbcjobstore.JobStoreSupport recoverJobs
INFO: Recovery complete.
Mar 7, 2010 10:54:51 AM org.quartz.impl.jdbcjobstore.JobStoreSupport recoverJobs
INFO: Removed 0 stale fired job entries.
Mar 7, 2010 10:54:52 AM org.quartz.impl.jdbcjobstore.JobStoreTX initialize
INFO: JobStoreTX initialized.
Mar 7, 2010 10:54:52 AM org.quartz.impl.StdSchedulerFactory instantiate
INFO: Quartz scheduler 'CESScheduler' initialized from an externally provided pr
operties instance.
Mar 7, 2010 10:54:52 AM org.quartz.impl.StdSchedulerFactory instantiate
INFO: Quartz scheduler version: 1.3.0
Mar 7, 2010 10:54:52 AM org.quartz.core.QuartzScheduler start
INFO: Scheduler CESScheduler_$_davidakbar1267988091015 started.
Mar 7, 2010 10:54:53 AM org.apache.struts.tiles.TilesPlugin initDefinitionsFacto
ry
INFO: Tiles definition factory loaded for module ''.
Mar 7, 2010 10:54:53 AM org.apache.struts.tiles.TilesPlugin initDefinitionsFacto
ry
INFO: Factory already exists for module ''. The factory found is from module ''.
No new creation.
Mar 7, 2010 10:54:53 AM org.apache.struts.tiles.TilesPlugin initDefinitionsFacto
ry
INFO: Factory already exists for module ''. The factory found is from module ''.
No new creation.
Mar 7, 2010 10:54:54 AM org.apache.struts.validator.ValidatorPlugIn initResource
s
INFO: Loading validation rules file from '/WEB-INF/css/validator-rules.xml'
Mar 7, 2010 10:54:54 AM org.apache.struts.validator.ValidatorPlugIn initResource
s
INFO: Loading validation rules file from '/WEB-INF/css/css-custom-validator-rule
s.xml'
Mar 7, 2010 10:54:54 AM org.apache.struts.validator.ValidatorPlugIn initResource
s
INFO: Loading validation rules file from '/WEB-INF/css/validation.xml'
Shared Services Initialized Successfully
Mar 7, 2010 10:54:55 AM org.apache.coyote.http11.Http11Protocol start
INFO: Starting Coyote HTTP/1.1 on http-58080
Mar 7, 2010 10:54:55 AM org.apache.jk.common.ChannelSocket init
INFO: JK2: ajp13 listening on /0.0.0.0:58082
Mar 7, 2010 10:54:55 AM org.apache.jk.server.JkMain start
INFO: Jk running ID=0 time=0/125 config=null
Mar 7, 2010 10:54:55 AM org.apache.catalina.startup.Catalina start
INFO: Server startup in 31562 ms
Mar 7, 2010 10:55:17 AM org.apache.struts.tiles.TilesRequestProcessor initDefini
tionsMapping
INFO: Tiles definition factory found for request processor ''.

Shared Services: Multi-domain MSAD based configuration issue

Similar Messages

Maybe you are looking for