Shared Services security export utility CSSExport.bat Error
Hi,
When I tried to export security from shared services 9.3.1.
I got following error:
Trace...
2008-08-20 10:31:40,002 Attempting an export operation
1406 [main] INFO httpclient.HttpMethodDirector - Failure authenticating with BA
SIC 'WebLogic Server'@<ServerName>:58080
Unable to connect to the CMS subsystem... Authenticated has failed using
the supplied credentials
Aborting program...
I am able to connect to SS through IE and it is running.
Code is also working for me on another Shared Services 9.2.0 .
Please let me know if anyone else had same issue or any suggestion?
Edit export.properties file and look for importexport.username and importexport.password. The password is encrypted. If you know the password for the account being used you can remove the encryption and replace it with the clear text password. After the utility runs it will re-encrypt the password.
We use the Admin account in our properties file.
Similar Messages
-
How can Manage Permissions for DB in Shared Services Security Mode
In shared services security mode, after provisioning users for Essbase applications, only can assign database calculation and filter access. How can I grant permissions "Access Databases" like in native mode?
Essbase will be default be in shared services security mode in 11.1.2, the wizard will not migrate security when in this mode.
It is possible to revert it back but if you don't know the process then it is worth looking at alternatives first.
You could use LCM to export the provisioning and then import into your target environment.
Cheers
John
http://john-goodwin.blogspot.com/ -
Auto Logoff while in Shared Services Security Mode
Pretty simple question but I still haven't found the answer.
My client's essbase server is set up in Shared Services Security Mode, so now the auto logoff options for the server don't apply. Is there a way to set this via shared services? Or is there some other means perhaps?
Thanks for your time.Essbase will be default be in shared services security mode in 11.1.2, the wizard will not migrate security when in this mode.
It is possible to revert it back but if you don't know the process then it is worth looking at alternatives first.
You could use LCM to export the provisioning and then import into your target environment.
Cheers
John
http://john-goodwin.blogspot.com/ -
Shared Services Security during LCM migration in 11.1.2.1
I am migrating a Planning app from 1 environment to another.
I vaguely remember ( from some presentation) that once I export Shared service security I need to modify the file to reflect the correct Essbase server name and than import the Shared service security file.
Is this a mandatory step ? If yes which file should I modify ? Is it just listing.xml or any other file as well ?If you run an export of provisioning then for essbase you should by default see something like "EssbaseCluster-1", if your target environment is configured in the same way it should also be "EssbaseCluster-1" and you will not need to edit any files.
If you don't start marking your posts I am not going to reply to any of your questions in future, hopefully everybody else will take that stance seeing as you have so many unresolved questions.
Cheers
John
http://john-goodwin.blogspot.com/ -
Exclude a user from Shared Services LCM export
How do I exclude a specific user from the Shared Services LCM export? In the migration definition file I am trying to specify something like the following:
pattern="*" and pattern<>"lcm_admin"What exactly you want to try after/by exporting users from Shared services?
Regards,
Santy. -
Shared services security- Is this even possible?
I want to know if the following is possible using shared services security:
I want to set up an MSAD group that will have say 50 sub groups.
I will define this super group as an external directory in SS.
I will then assign security (both roles and filters) to each of the 50 sub groups.
There will be no groups or users in the native directory.
Based on user needs, the MSAD team will move users from one subgroup to another without logging into Shared Services.
My expectation is when they move the users from one subgroup to another, the user will have the security of the group they were moved to.
Is it possible to set up security this way in shared services? I have been experimenting and having a miserable time getting it to work. So just wanted to know if I am doing something wrong or just wasting my time.I think this will work, but note that you are not really using SS inherited security.
What you might do is something like this:
MasterGroup <--Assign provisioning here
|_Subgroup1 <--Assign filter
|_Subgroup2 <--Assign yet another filter
|_Etc.
With the above layout you define provisioning roles once at the topmost group (MasterGroup) and then assign unique security at the subgroups. The users are in the subgroups and their usernames will go to their ids (which will have no provisioning), then their immediate group (ditto), and then the parent group (which will).
What you have defined for security (as opposed to provisioning) sounds good to me although I have never tried to do this with MSAD groups. I don't see a reason for it not to work.
Regards,
Cameron Lackpour -
Shared Services Security Migration
Hi All,
I need to migrate Shared Services Security from one server to another server(applications already migrated).
Can you please let me know if we copy essbase.sec file will it work, or any other process we need to follow.
Thanks,
PinkyDear Pinky,
As John just mentioned - it depends a bit on the version that you use as well (11.1.2 is different from 11.1.1.3.x is different from 9.x)
but you may find useful information in these guides:
http://download.oracle.com/docs/cd/E12825_01/epm.111/epm_security.pdf
http://download.oracle.com/docs/cd/E12825_01/epm.111/epm_backup_recovery.pdf
The CSSImportExport utiity is documented within its own zip folder on your installation of HSS (if you are using version 11.1.1.x)
Basically you can think of the process as a backup and restore on a different machine.
The complete list of steps is way too detailed and complex and touches too many sensitive areas to handle it in a thread here.
(especially as I do not know the versions of HSS/Essbase, the OS or the scope of this migration)
best regards
Torben -
Converting to Shared Services Security Mode Error (externalize users)
Error: 1051549: Can not convert Analytic Services to Shared Services mode when Analytic Services is not configured with Shared Services or the initialization process has failed
I have tried to register ESSbase with SS again and does not work. All services are started....ideas?Start Essbase in Foreground.... and capture the error..
Blow the Security and replace it from Backup which was wormking fine..start all over again for Externalisation
You can also check for PREUPM/ POSTUPM files in Essbase/Bin..if they are present then Essbase is partially externalised..you can try taking a copy of the PREUPM and rename the PREUPM to Essbase.sec and start essbase..Rexternalise. -
Hyperion Shared services Migration/Export import
Hi, We are migrating the OS from Windows to UNIX in Essbase System 9. I am trying to export the exixting grous/filter access from the Windows environment (shared services--Single sign on) to the unix server. There are several cubes in the Windows, but I am tryign with only a single cube. as a part of that I have modified importexport.properties file
#import export operations
importexport.css=http://windows_server:58080/interop/framework/getCSSConfigFile
importexport.cmshost=windowsserver
importexport.cmsport=58080
importexport.username=admin
importexport.password={CSS}MRcYv323uzxGr8rFdvQLcA==
importexport.enable.console.traces=true
importexport.trace.events.file=D:\trace_19Nov.log
importexport.errors.log.file=D:\errors_19Nov.log
importexport.locale=en
# importexport.ssl_enabled = true
# export operations
export.fileformat=xml
export.file=D:\export.xml
export.internal.identities=false
export.native.user.passwords=true
export.provisioning.all=false
export.delegated.lists=true
export.user.filter=*
export.group.filter=*
#export.role.filter=*
export.producttype=HUB-9.3.1,ESBAPP-9.3.1
export.provisioning.apps=(Analytic Servers:server:1=DlyCube)
# import operations
#import.fileformat=xml
#import.file=C:\exportNew.xml
#import.operation=update
#import.failed.operations.file=c:/failed.xml
#import.maxerrors=0
I am not gettign any export error; it says 50 groups have been exported,
my import is
importexport.css=http://fbiapld06.uk.db.com:58080/interop/framework/getCSSConfigFile
importexport.cmshost=fbiapld06.uk.db.com
importexport.cmsport=58080
importexport.username=admin
importexport.password={CSS}MRcYv323uzxGr8rFdvQLcA==
importexport.enable.console.traces=true
importexport.trace.events.file=/apps/hyperion_data/trace.log
importexport.errors.log.file=/apps/hyperion_data/errors.log
importexport.locale=en
importexport.ssl_enabled=false
import.fileformat=xml
import.file=/apps/hyperion_data/import.xml
import.operation=CREATE/UPDATE
import.failed.operations.file=/apps/hyperion_data/failed.xml
import.maxerrors=10
While importing also i am not getting any error, it sayd 50 groups have been imported successfully.
but in shared server unix box, i can't see the groups for that applicaiton.
can u please help me?You can call CSSEXPORT.bat script using following statement
Call CSSExport.bat importexport.properties
Make sure your importexport.properties file is present in the same location as CSSExport.bat files
format of importexport.properties file needs to like this
Send me your email id and I can send you a document on import/export utlity for version 9.3.1
#import export operations
importexport.css=file:/C:/Hyperion/deployments/Tomcat5/SharedServices9/
config/CSS.xml
importexport.cmshost=localhost
importexport.cmsport=58080
importexport.username=admin
importexport.password={CSS}MRcYv323uzxGr8rFdvQLcA==
importexport.enable.console.traces=true
importexport.trace.events.file=trace.log
importexport.errors.log.file=errors.log
Import/Export Utility 3
importexport.locale=en
# importexport.ssl_enabled = true
# export operations
export.fileformat=xml
export.file=C:/exportNew.xml
export.internal.identities=true
export.native.user.passwords=true
export.provisioning.all=true
export.delegated.lists=false
export.user.filter=*@Native Directory
export.group.filter=*@Native Directory
export.role.filter=*
export.producttype=HUB-9.2.0
#export.provisioning.apps=(HUB=Global Roles)
# import operations
import.fileformat=xml
import.file=C:/exportNew.xml
import.operation=update
import.failed.operations.file=c:/failed.xml
import.maxerrors=0 -
Hyperion Shared Services - Security in excel file
Hi all,
Is there a way that we can get security info in an excel format from Shared services and then we can play around with that excel file. Once changes are done, we import it back to Shared services.
We use active directory for user maintenance.
Regards,They are stored in the Planning application and not Shared Services, export the access permissions from the planning applications using either LCM or the exportsecurity utility.
Cheers
John
http://john-goodwin.blogspot.com/ -
Hi,
When I tried to export security from shared services 9.3.1.
I got following error:
Trace...
2008-08-20 10:31:40,002 Attempting an export operation
1406 [main] INFO httpclient.HttpMethodDirector - Failure authenticating with BA
SIC 'WebLogic Server'@<ServerName>:58080
Unable to connect to the CMS subsystem... Authenticated has failed using
the supplied credentials
Aborting program...
I am able to connect to SS through IE and it is running.
Code is also working for me on another Shared Services 9.2.0 .
Please let me know if anyone else had same issue or any suggestion?Apparently this issue occurs with Weblogic 8.1.5 and 8.1.6
There is a patch available from BEA - Patch ID CR287255 which is a .jar file to place on the server. you also need to edit your config.xml and add a line.
Hyperion support can refer you to page 36 of the documentation on configuring shared services in the shared services install documentation.
Wags -
Hi All,
I want to export shared services users for a particular application.
Is there any way for this?
ThanksYes, you can export / import the provisioning for a particular application.
By default the utility export all Users / Groups and provisioning for all applications.
To export provisioning for a particular application you need to modify the below parameters in CSS Import Export properties file.
export.provisioning.all=false
export.provisioning.apps=(<Project Name>:<Application Name>)(<Project Name 1>:<Application Name 1>)
Hope this helps you...
Kind regards,
Manmohan Sharma -
Shared Services Security Issue with Financial Reporting - 11.1.1.3
Hi,
So we have some users that are provisioned in some groups. Those groups have Essbase Server Access and Planner access to an application. That access is working great. They have access to the app and they have access via Smartview to the cube.
Now we need them to be able to see all the Financial Reports (FR) created for that application. There are so many provisioning choices under 'Reporting and Analysis', that I'm not sure how to get this done correctly. Right now we have to assign 'Viewer' access and 'Explorer' access under 'Content Manager' tree in order for this to happen. I just think this seems wrong. We just need the user to be able to run and view a report from Workspace.
Any help is appreciated as this is a very green area for me.Hi,
You will need both Viewer and Explorer access for users to run reports.
the reason is that without the Explorer, users will not be able to see any reports or the explorer in Workspace.
Without Viewer, users will not be able to view/open any of the reports. You also have to give report access to users anyway related to the groups.
You can see anll information about different security roles for Reporting and Analysis in the shared Services admin guide.
The documentation is the best place to start for any information needed and confirming what fulfills your needs.
Cheers
RS -
Shared Services Security information not updating in Essbase
Hi,
I have created few users in Shared Services and performed the sync operation. Created users are not reflecting in Essbase server. why?
Also tried by externalizing the users... performed sync from shared services and refreshed the shared security from EAS console...then also... user information not updating in Essbase?
What could be the reason?Have you provided Essbase application access rights to those users in shared services?
If not, then try after providing Essbase access to users. This might be the reason for your issue.
Regards,
NitinGupta -
Re:shared services security
Hi
I have standalone essbase in 6.5 where users plan their forecasting and budgeting through front end excel vb6 macros
now they want to upgrade to 11.1.2 since the security in the front end application is through a NTID where orcl triggers a common password to log into
essbase which matches the same password in essbase.
severity is when we upgrade to 11.1.2 how does this work as shared services are to be maintained
and how does shared sevrices talk to the front end vb macros ?
any suggestion would be really appreciated.If you are moving to 11.1.2 then it is probably worth moving to Smart View as the excel add-in is pretty much at the end of its life and soon to be retired.
You can configure shared services to add in an external directory such as Microsoft active directory, then the AD users/groups will be available in Shared Services and you can provision them against the essbase applications.
Smart View / Excel add-in will authenticate against Shared Services and shouldn't need to worry too much about the code, if you move to Smart View then you have to prepare for code changes
Cheers
John
http://john-goodwin.blogspot.com/
Maybe you are looking for
-
Memory on 64GB ipod touch indicates about 0.88 remaining. But not all songs on playlist being synched are being transferred over and many (3,000 +) are now greyed out (full details shown but not accessible). Any ideas? Have already restored Ipod to
-
Background Job Monitoring not getting activated
Hi Gurus, I have been trying to use the batch job monitoring with ccms. I have a problem in activating the "Background Job Monitoring" in few systems. I followed the steps in SAP Note 553953 but no use. In RZ21 i am not able to see the Background Job
-
4400F scanner has problems with color slides
About six years after buying the 4400F scanner, I finally opened it today in order to start scanning a lot of color slides going back more than 40 years. It seems as if the software (or the scanner itself) doesn't know where one slide ends and the n
-
OK, we've all heard those rules like the rule of thirds, etc. This then is a thread of other rules. I'll start with rule 1 (and 1b): Rule 1: Any photography can be improved by adding a female. Rule 1b: The improvement in a photograph is directly prop
-
Has the font used in [code] segments started to look rather comical? this is an example of the New Code Font.Wouldn't it be great if they fixed things like the url's not working rather than font fiddling.