Shared Services with OAM ?

Plannign a green-field 11.1.2.2 implementation and want to understand whether it will be possible (or indeed is possible in current versions) to integrate Shared Services with OAM ?
Thanks is advance !
Alasdair
Edited by: 919830 on 09-Mar-2012 03:25

Hi,
Yes is the answer, but I am not sure how can it be done. But the document of essbase states the below
Security: Integration with Oracle Access Manager, Oracle SSO, Desktop Kerberos Support, OID as the Native Provider
Sandeep Reddy Enti
http://hyperionconsultancy.com/

Similar Messages

Troble configuring Hyperion Shared Services with SQL Server 2005

I recently installed SQL server (SQL SERVER 2005) in my machine and then am trying to install Hyperion (9.3.1) products. I started with Shared services. It was installed successfully. Problem is occuring when am trying to configure Shared service with SQL database using Hyperion Configuration utility (9.3.1)
The error which is popping up is
Unable to connect to the database for the product Hyperion Shared Services.
Things which I tried from my end
1. Made sure TCP IP Protocol was enabled in SQL server configuration server.
2. hypuser was created in SQl server.
3. hypdb was created in SQL server.
4. Was having dynamic IP address so install Loopback adapter to obtain Static IP address and port.
5. Port and IP address was correct.
Let me know where I am going wrong.
Any help will be greatly appreciated.

Finally got it fixed firewall settings needed to be change : This document helped me a lot to troubleshoot the issue
An error has occurred while establishing a connection to the server. When connecting to SQL Server 2005, this failure may be caused by the fact that under the default settings SQL Server does not allow remote connections. (provider: Named Pipes Provider, error: 40 - Could not open a connection to SQL Server) (Microsoft SQL Server, Error: 2)
This problem may occur when SQL Server 2005 is not configured to accept incoming local and remote connections, which is disabled by default in SQL Server 2005 Express Edition, SQL Server 2005 Developer Edition and also SQL Server 2005 Enterprise Edition. To solve the connection forbidden problem, SQL Server 2005 needs to configure to allow incoming local and remote connections.
Firstly, ensure that SQL Server 2005 is configured properly to allow incoming connections on the instance of database server, else enable and turn on the local and remote connections setting.
Click Start button, then go to Programs or All Programs, then select Microsoft SQL Server 2005, followed by Configuration Tools. Click and run the SQL Server Surface Area Configuration.
On the “SQL Server 2005 Surface Area Configuration” page, click Surface Area Configuration for Services and Connections.
On the “Surface Area Configuration for Services and Connections” page, expand Database Engine tree, click Remote Connections.
Select Local and remote connections, or Local connections only which applicable only if there is no remote system tries to connect to the SQL Server, useful when you just trying to connect and authenticate with the server after installing.
Select the appropriate protocol to enable to local and/or remote connections environment. To ensure maximum compatibility, select Using both TCP/IP and named pipes.
Click Apply button when done.
Click OK button when prompted with the message saying that “Changes to Connection Settings will not take effect until you restart the Database Engine service.”
On the “Surface Area Configuration for Services and Connections” page, expand Database Engine, then click Service.
Click Stop button to stop the SQL Server service.
Wait until the MSSQLSERVER service stops, and then click Start button to restart the MSSQLSERVER service.
Secondly, SQL Server Browser service has to be enabled to allow for local and remote connections if SQL Server 2005 is running by using an instance name and users are not using a specific TCP/IP port number in the connection string.
Click Start button, then go to Programs or All Programs, then select Microsoft SQL Server 2005, followed by Configuration Tools. Click and run the SQL Server Surface Area Configuration.
On the “SQL Server 2005 Surface Area Configuration” page, click Surface Area Configuration for Services and Connections.
On the “Surface Area Configuration for Services and Connections” page, click SQL Server Browser.
Select Automatic as the Startup type to start SQL Server Browser service automatically every time system starts.
Click Apply button.
Click on Start button to start the service immediately.
Click OK button.
Finally, if remote computer needs to connect and access SQL Server, an exceptions in Windows Firewall included in Windows XP SP2 (Service Pack 2), Windows Server 2003 and Windows Vista needs to be created. If you’re using third-party firewall system, the exception rules also needed to be created to allow external remote connections to the SQL Server 2005 and SQL Server Browser Service to communicate through the firewall, else connections will be blocked. Consult the firewall manual for more details. Each instance of SQL Server 2005 must have its own exception, together with an exclusion for SQL Server Browser service.
SQL Server 2005 uses an instance ID as part of the path when you install its program files. To create an exception for each instance of SQL Server, you must identify the correct instance ID. To obtain an instance ID, follow these steps:
Click Start button, then go to Programs or All Programs, then select Microsoft SQL Server 2005, followed by Configuration Tools. Click and run the SQL Server Configuration Manager.
In “SQL Server Configuration Manager”, click the SQL Server Browser service in the right pane, right-click the instance name in the main window, and then click Properties.
On the “SQL Server Browser Properties” page, click the Advanced tab, locate the instance ID in the property list.
Click OK button.
Then create an exception for SQL Server 2005 in Windows Firewall.
Click on Start button, the click on Run and type firewall.cpl, and then click OK. For Windows Vista, type firewall.cpl in Start Search box and press Enter key, then click on Allow a program through Windows Firewall link on left tasks pane.
In “Windows Firewall”, click the Exceptions tab, and then click Add Program.
In the “Add a Program” window, click Browse button.
Click the C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe executable program, click Open button. MSSQL.1 with is a placeholder for the instance ID that is obtained from previous procedure. Note that the path may be different depending on where SQL Server 2005 is installed.
Click OK button.
Repeat steps 1 through 5 for each instance of SQL Server 2005 that needs an exception.
For SQL Server Browser service, locate the C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe executable program, and click Open button.
Click OK button.

Can't register Shared Services with workspace while using db2 9.1

Hi,
When I used Hyperion EPM to register workspace shared services with db2 9.1 pack 3,it's failed and workspace database configuration failed too.
When I used db2 9.5, it's failed too.But workspace database configuration is success. When I excute the sentence as follow
===================================================================================
db2 CREATE DATABASE HPSUX USING CODESET GBK TERRITORY CN COLLATE USING SYSTEM
db2 connect to HPSUX
db2 create bufferpool HPSUX_BP immediate size 256 pagesize 8k
db2 create bufferpool HPSUX_BP_TEMP immediate size 512 pagesize 8k
db2 terminate
db2 force application all
db2stop
db2start
db2 connect to HPSUX
db2 "create regular tablespace HPS_TS pagesize 8k managed by system using ('hps_ts') extentsize 16k overhead 10.5 prefetchsize 16k transferrate 0.33 bufferpool HPSUX_BP dropped table recovery on"
db2 "create system temporary tablespace HPS_TS_TEMP pagesize 8k managed by system using ('hps_ts_temp') extentsize 16k overhead 10.5 prefetchsize 16k transferrate 0.33 bufferpool HPSUX_BP_TEMP"
db2 grant connect on database to user hypadmin
db2 grant createtab on database to user hypadmin
db2 grant bindadd,implicit_schema on database to user hypadmin
db2 grant use of tablespace HPS_TS to user hypadmin with grant option
db2 "update dbm cfg using DRDA_HEAP_SZ 2048"
db2 drop tablespace USERSPACE1
db2 force application all
db2stop
db2start
=================================
It's all work with db2 9.5 but still failed with db2 9.1.
Can someone give me the suggestion?
Thanks
Edited by: [email protected] on 2009-7-23 上午12:25

Start in Shared Services
What have you Provisioned your user with?
Are there Projects Registered with Shared Services? Have you Assigned Users to those Projects?
I would suggest you refer to the Hyperion Security Guide as a starting point
http://download.oracle.com/docs/cd/E10530_01/doc/epm.931/hyp_security_guide.pdf
Wayne Van Sluys
TopDown Consulting

Error While Configuring the Shared Service with Active Directory

Hi All,
I am getting a error while configuring MSAD with Shared Service, when entering the User Id and password and clicking next, the following error is displayed:
"EPMCSS-05180:Failed to validate Security configuration. Failed to connect. Invalid values for Base DN, User DN or Password. Enter valid value(s). Root Cause : [LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db1]"
The AD user has the read access to the all users and group in Active Directory. If I use an Active Directory user with Admin privilege, It is getting connected.
But client is not ready to provide the Admin Access due to their internal policy and I also don't have any document which says admin privilege is required. According to the document,the user should have the following privileges only.
"The distinguished name of the user that Shared Services should use to bind with the user directory. This user must have search privilege on the RDN attribute within the DN. For example, in the dn: cn=John Doe, ou=people, dc=myCompany, dc=com, the bind user should have search access to the cn attribute.Special characters in User DN must be specified using escape characters. See “Using Special Characters” on page 46 for restrictions.
Example: cn=admin,dc=myCompany,dc=com
But I am getting confused with the statement "This user must have search privilege on the RDN attribute within the DN". Is it not search privillege?
Can anybody help me with required privilege for Active Directory user to configure with Shared Service.
Thanks in Advance,
Sunil

Thank you All,
i tried connecting using AD Browser from Microsoft, and it went in properly. then i found out that the AD Team here were giving a Wrong Credentials to connect, they Gave me HYP_OID which infact turned out to be a Principal name instead of a 'cn'.
after searching in the AD Browser i found the correct cn which is "Hyperion OID", then it went to the second Screen where now i am trying to search for the Users based on thier Job Nature.
Thank you for all the Support Guys, you both "Celvin" and "John" are the Top Guys under my Search list for any technical Assistance.
Thank you once again Friends....
Regards,
Sunil...
Shantan....

Error configuring shared services with Oracle 11g database

I've installed Hyperion EPM 11.1.1.3 and orale 11g successfully. My problem though is that when i tried to do the configuration,
the error message states 'Unable to check Shared Services database existence: an error occured.'
---------My Environment:--------
EPM Server: Windows Server 2003 SP1 32-bit
RDBMS: Oracle Enterprise Edition 11g (running on same server 2003)
Oracle Client: 11g (full client install)
SID name :- orcl
------------Here are the components that I've installed--------
- V17397-01(EPM Foundation Services p-1)
- V17369-01(EPM Foundation Services p-2)
- V17370-01(EPM Foundation Services p-3)
- V17371-01(EPM Foundation Services p-4)
- V17389-01(server)
- V17388-01(Client)
- V17390-01(Provider Service)
- V17378-01(Financial Reporting)
- V17380-01(Web Analysis)
- V17398-01(EPM Architect)
- V17402-01(Smart View for Office)
all files are extracted in a single folder using winrar tool.
I can't proceed with the shared services configuration because in just the first page of it, I'm encountering the error Unable to check Shared Services database existence: an error occured.'
I believed the shared services is bundled with the foundation if I'm not mistaken, because I can't find any download related to it on edelivery site.
I tried to configure only the Foundation components but the '*Comman setting*' & '*configure database*' are grayed out so I have no option but to figure out first this shared services configuration.
below are the logs
---------------configtool.log--------------
(Jul 04, 2010, 02:53:29 AM), com.hyperion.config.wizard.impl.RegistryWizardState$1, DEBUG, validate
(Jul 04, 2010, 02:53:29 AM), com.hyperion.config.wizard.impl.RegistryWizardState, DEBUG, connect test
(Jul 04, 2010, 02:53:29 AM), com.hyperion.config.wizard.impl.RegistryWizardState, DEBUG, driver set
(Jul 04, 2010, 02:53:29 AM), com.hyperion.config.wizard.impl.RegistryWizardState, DEBUG, server= hyperion
(Jul 04, 2010, 02:53:29 AM), com.hyperion.config.wizard.impl.RegistryWizardState, DEBUG, whiteSpace remove
(Jul 04, 2010, 02:53:29 AM), com.hyperion.config.wizard.impl.RegistryWizardState, DEBUG, begin test cycle
(Jul 04, 2010, 02:53:29 AM), com.hyperion.config.wizard.impl.RegistryWizardState, DEBUG, define driver
(Jul 04, 2010, 02:53:29 AM), com.hyperion.config.wizard.impl.RegistryWizardState, DEBUG, make connection
(Jul 04, 2010, 02:53:29 AM), com.hyperion.config.wizard.impl.RegistryWizardState, DEBUG, set URL
(Jul 04, 2010, 02:53:29 AM), com.hyperion.config.wizard.impl.RegistryWizardState$1, DEBUG, connection is NOT null
(Jul 04, 2010, 02:53:29 AM), com.hyperion.config.wizard.impl.DBConnectionForm, DEBUG, DB type string = Oracle
(Jul 04, 2010, 02:53:29 AM), com.hyperion.cis.config.AbstractProductDBConfigurator, DEBUG, JDBC driver class is hyperion.jdbc.oracle.OracleDriver
(Jul 04, 2010, 02:53:29 AM), com.hyperion.cis.config.AbstractProductDBConfigurator, DEBUG, Connection URL: jdbc:hyperion:oracle://hyperion:1521;SID=orcl
(Jul 04, 2010, 02:53:29 AM), com.hyperion.config.wizard.impl.RegistryWizardState$1, DEBUG, validate CREATE_NEW, no registry DB exists, create it
(Jul 04, 2010, 02:53:29 AM), com.hyperion.hit.registry.RegistryConnection, ERROR, SQL Exception [Hyperion][Oracle JDBC Driver][Oracle]ORA-01031: insufficient privileges CAUSE null
(Jul 04, 2010, 02:53:29 AM), com.hyperion.config.wizard.impl.RegistryWizardState$1, ERROR, com.hyperion.hit.registry.exceptions.RegistryException: Unable to create registry.
(Jul 04, 2010, 02:53:29 AM), com.hyperion.cis.config.wizard.adapter.WizardFormAdapterPanel, ERROR, Unable to check Shared Services database existence: an error occured.
------------configtool_err.log------------
(Jul 04, 2010, 02:53:29 AM), com.hyperion.hit.registry.RegistryConnection, ERROR, SQL Exception [Hyperion][Oracle JDBC Driver][Oracle]ORA-01031: insufficient privileges
CAUSE null
(Jul 04, 2010, 02:53:29 AM), com.hyperion.config.wizard.impl.RegistryWizardState$1, ERROR, com.hyperion.hit.registry.exceptions.RegistryException: Unable to create registry.
(Jul 04, 2010, 02:53:29 AM), com.hyperion.cis.config.wizard.adapter.WizardFormAdapterPanel, ERROR, Unable to check Shared Services database existence: an error occured.
Hope to here from Some one.
Any help would be appreciated. Thank you.

Thanx John for your kind reply. i reffred your other posts and those are very helpfull for me.
I don't have any previous ver. of Hyperion. and i created a new database 'Orcl' for configuring the shared services and given the user name as 'hss'. i also tried to delete my old database and and reg.properties file from Hyperion Dir u suggested in some other post. but still its not working.
Today I have started again with fres installation of Windows Server 2003 oracle 11g EPM 11.1.3.
Also I m Installing this on VMware. I hope this is not the issue as i already installed Microsoft Loopback Adapter.
I will let you know the updates.
but still looking forward for your Kind help.
Edited by: Gaurav_Choudhari on Jul 5, 2010 12:37 AM

Issue in Shared Services with corp user IDs

Hi,
I am facing an issue with corp user IDs in Shared Services. The issue is that I am able to add corp user IDs to a group but I am not able to remove some of them from the group for some reason especially those corp user IDs that were added few weeks or months ago.
What I noticed is if I add a corp user ID today and try to remove it today itself it is letting me do it but those corp IDs that I added to the group weeks before it is not letting me remove them. I tried to push the corp user ID from right hand side to the left hand side and then saved the changes. It shows the message that the group has been modified but when I go back again and check in the group I find the user there on the right side where it shows all user members. Not sure why this is happening.
Any ideas on this? Please do share your inputs.
Thank you.
~ Adella

Hello Mehmet,
Thank you so much for your response.
Well, I think I tried at both the places yet I am facing the same issue. If I add any corp user now and immediately take it off in minutes it lets me do it. But if I try to take out a user who was added to the group weeks ago it is just not letting me do it. It does give the messages that the gourp has been modified but when I come back again and look at the group its there.
Its weird and I am not sure whats going wrong. Is it some kind of a bug?
~ Adella

Integrating Hyperion Shared services with LDAP

Hi All,
I have a quick question regarding managing LDAP users using Shared services. I was able to create connection with LDAP using "anonymous bind" but now when I try to see the LDAP users in Shared services , it says no records. How can I see the records ?
Please help.

Suggest you talk to your IT people who setup that specific id. Tell them you need the Distinguished Name (DN) of that user -- usually they will have the user placed in a set of containers which may be several levels deep depending on how they organize the directory.
If you were using Active Directory rather than LDAP you could use AD Explorer to locate the user and you can find the DN yourself. AD Explorer is available at: http://technet.microsoft.com/en-us/sysinternals/bb963907
Regards,
John A. Booth
http://www.metavero.com

Shared Services with web analyzer

Hi All,
We have installed and configured Essbase with Shared Services in one Server. We need to install Analyzer in another server and have to configure with the Shared Services which is installed along Essbase.
Please suggest me how to install Analyzer in one server and configure with Shared Services which is installed in another server.
Thanks in Advance...
Edited by: user13351290 on Sep 14, 2010 9:49 PM

Plzzz anyone help me to install and configure Analyzer with shared services.....

How to Regester one Shared Service with Another ??

Hi All,
I am working on Hyperion System 9.3.1. I am getting problem when I want to access Essbase through Planning.
Here is the scenario:
I have Hyperion Essbase installed in Computer 1 with separate Shared Services; I have Planning installed in Computer 2 with another Shares Services.
All things were working fine as I have created same users in both the shared services and was using native user of Essbase.
Now I have changed the native user to Externalize user in Essbase. Since then I am not able to access Essbase through my Planning application. The user privilege differs in both the Shared Services as Computer 1 has only Essbase and Computer 2 has Planning.
The error message I am getting in planning while connection is “Unable to obtain a connection to Hyperion Essbase”. In the essbase.log file I am getting “Login fails due to invalid login credentials” message.
I think the problem here is between Shared Services only. As both are in different system and the user privileges are also different.
Kindly suggest how to sink my Essbase between these two shared services.
Regards,
Navneet

Just to clarify,
You have Planning and Essbase on one machine and you have shared services installed twice on different machines?
I'm not sure if this architecture will work, you might have to separate Planning and Essbase to there own servers and create a new Essbase server specifically for Planning applications. Planning utilizes Essbase for its OLAP data store and Essbase registers with Shared Services directly.
Brian Chow

Shared Services with SSO

Hi All
I'm trying to configuer SSO with HSS and using WEblogic, i followed the instrauctions in EPM_sec guide, but always getting an error when i try to logon using a MSAD user.
2010-03-18 22:27:13,625 WARN [[ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)'] com.hyperion.css.spi.impl.msad.MSADProvider.constructUserFilterMap(Unknown Source) -- Failed to create filter entry for attribute sn[key=spi.provider.msad.user.snAttribute,value=null]
2010-03-18 22:27:13,625 WARN [[ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)'] com.hyperion.css.spi.impl.msad.MSADProvider.constructUserFilterMap(Unknown Source) -- Failed to create filter entry for attribute mail[key=spi.provider.msad.user.emailAttribute,value=null]
2010-03-18 22:27:13,640 ERROR [[ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)'] com.hyperion.css.CSSAPIImpl.authenticateUser(Unknown Source) -- 25:1005:Authentication failed for user Adminsitrator. Enter valid credentials.
2010-03-18 22:27:20,390 ERROR [[ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)'] com.hyperion.css.SecurityAgentCustomHeader.getUserName(Unknown Source) -- 20:1116:Missing username in the request header HYPLOGIN.
2010-03-18 22:27:20,390 ERROR [[ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)'] com.hyperion.css.CSSAPIImpl.authenticateSecurityAgent(Unknown Source) -- 25:1083:Failed to retrieve credentials from security agent.[Root Cause: 20:1116:Missing username in the request header HYPLOGIN. ]
2010-03-18 22:28:52,515 ERROR [[ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)'] com.hyperion.css.SecurityAgentCustomHeader.getUserName(Unknown Source) -- 20:1116:Missing username in the request header HYPLOGIN.
2010-03-18 22:28:52,515 ERROR [[ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)'] com.hyperion.css.CSSAPIImpl.authenticateSecurityAgent(Unknown Source) -- 25:1083:Failed to retrieve credentials from security agent.[Root Cause: 20:1116:Missing username in the request header HYPLOGIN. ]
2010-03-18 22:29:03,843 ERROR [[ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)'] com.hyperion.css.SecurityAgentCustomHeader.getUserName(Unknown Source) -- 20:1116:Missing username in the request header HYPLOGIN.
2010-03-18 22:29:03,843 ERROR [[ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)'] com.hyperion.css.CSSAPIImpl.authenticateSecurityAgent(Unknown Source) -- 25:1083:Failed to retrieve credentials from security agent.[Root Cause: 20:1116:Missing username in the request header HYPLOGIN. ]
2010-03-18 22:29:03,968 WARN [[ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)'] com.hyperion.css.spi.impl.msad.MSADProvider.constructUserFilterMap(Unknown Source) -- Failed to create filter entry for attribute givenName[key=spi.provider.msad.user.fnAttribute,value=null]
2010-03-18 22:29:03,968 WARN [[ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)'] com.hyperion.css.spi.impl.msad.MSADProvider.constructUserFilterMap(Unknown Source) -- Failed to create filter entry for attribute sn[key=spi.provider.msad.user.snAttribute,value=null]
2010-03-18 22:29:03,968 WARN [[ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)'] com.hyperion.css.spi.impl.msad.MSADProvider.constructUserFilterMap(Unknown Source) -- Failed to create filter entry for attribute mail[key=spi.provider.msad.user.emailAttribute,value=null]
2010-03-18 22:29:04,296 ERROR [[ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)'] com.hyperion.css.spi.impl.msad.MSADProvider.authenticate(Unknown Source) -- 60:1005:Authentication failed for user Administrator. Enter valid credentials.
2010-03-18 22:37:47,143 ERROR [[ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)'] com.hyperion.css.SecurityAgentCustomHeader.getUserName(Unknown Source) -- 20:1116:Missing username in the request header HYPLOGIN.
2010-03-18 22:37:47,143 ERROR [[ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)'] com.hyperion.css.CSSAPIImpl.authenticateSecurityAgent(Unknown Source) -- 25:1083:Failed to retrieve credentials from security agent.[Root Cause: 20:1116:Missing username in the request header HYPLOGIN. ]
2010-03-18 22:38:00,643 ERROR [[ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)'] com.hyperion.css.SecurityAgentCustomHeader.getUserName(Unknown Source) -- 20:1116:Missing username in the request header HYPLOGIN.
2010-03-18 22:38:00,643 ERROR [[ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)'] com.hyperion.css.CSSAPIImpl.authenticateSecurityAgent(Unknown Source) -- 25:1083:Failed to retrieve credentials from security agent.[Root Cause: 20:1116:Missing username in the request header HYPLOGIN. ]
Has anyone configures it correctly?

Too old to do any good, but snAttribute is the user's last name. Give the user a last name and see if you get further. (OID will not provision from Active Directory unless the sn can be populated)
Ray

Compatibility Shared Services with SQL2008 SP3

Hello:
We have SharedServices 9.3.1 installed and running, using a SQL Server2008 SP1 Database. Is it also compatible with SP3? Can we upgrade with no problems?
Thanks!
Jorge

Supported Platforms Matrices indicate that Microsoft SQL Server 2000 SP3a is compatible with version 9.3.1
Here is the link: http://www.oracle.com/technetwork/middleware/bi-foundation/hyperion-supported-platforms-085957.html
And the document: http://download.oracle.com/docs/cd/E10530_01/doc/epm.931/hsys9_install_start_here.pdf
Cheers,
Mehmet

Shared Services with 2 external authentifications

IHAC who wants to know if it is possible to use two Ldap to access to Essbase. So Ldap1 user can access to Essbase and so can Ldap2 user. In positive case what happens when there are two same users in both ldap?.
Where can I find documentation?
Thanks Rocío

Hi,
Yes is the answer, but I am not sure how can it be done. But the document of essbase states the below
Security: Integration with Oracle Access Manager, Oracle SSO, Desktop Kerberos Support, OID as the Native Provider
Sandeep Reddy Enti
http://hyperionconsultancy.com/

Hyperion Essbase on Solaris & Security issue in Shared services

I installed Hyperion system 9.3.1 in my dev environment. Every thing is working properlly.
But i still have questions on couple of things.
1) I installed essbase on solaris 10. I was just trying to configure the sql interface for ESSBASE.
I went through the documentation. It says i supposed to get a file called libesssql.so.1
But i can't able to see this file in ARBORPATH/bin location. But still I could able to load the data
into sample Essbase application. My essbase is working fine. when i ran the script inst -sql.sh
it created a file called libesssql.so in the ARBORPATH/bin location. But no libesssql.so.1.
Can some one help me regarding this................
2)In the shared services when i clicked under Hyperion system 9 BI+, i cant able to see
any reporting related files to assign security. i am seeing a message saying refer to the security guide to confiure
permissions for this application.
I logged into the shared services with admin privileges.
Please help me in this...........
Thanks,

Hi,
What version are you using ?
Just to be clear are you saying that the utility only exported one native user and you expected it to export more ?
Cheers
John
http://john-goodwin.blogspot.com/

Intermittent Workspace/Shared Services issue - 11.1.2.1

All
Version 11.1.2.1
Using Shared Services with Native (1) and MSAD (2) ; IDs are members of Native groups which are provisioned to the application
We are experiencing an intermittent problem in Workspace where one day we can login without issue, and the next, we are stuck at “Authenticating User..” for a long time before login finally fails with:
“EPMCSS-00387: Failed to authenticate user xxxxxxx from user directory MSAD. Invalid password. LDAP response read timed out, timeout used: 120000ms..Enter valid credentials.”
More details shows ”URI: http://.....:19000/workspace/login
Code: 1000
Description: An error occurred processing the result from the server”
Alternately, sometimes login will succeed, but will receive the message:
“The startup document does not exist in the repository. Select a new startup document in the General preferences tab”.
We have opened an SR with Oracle but can’t seem to make much progress resolving the issue. Any ideas?

Hi,
Did you ever get to the bottom of this? We are on 11.1.2.1 and facing the exact same issue when logging on to HSS or Workspace:
EPMCSS-00387: Failed to authenticate user sebastien.lejarle from user directory EXWC. Invalid password. LDAP response read timed out, timeout used:120000ms.. Enter valid credentials.
We cant figure out what s wrong.
We have applied Oracle's recommended IE 7 and IE8 settings to no avail.
Thanks again.
Seb

Reg: Hyperion Upgradation from 7.1.x to 9.3.x and Shared Services...

Hi Everybody,
New to this forum and i want to know about upgrading the essbase from 7.1.x to 9.3.x...As i gone through PDF, it is mentioning as upgrading of 9.3.x from earlier versions prior to release 9.2.x cannot be done directly...Here comes with the migration/upgradation topic wherein... Can we go ahead and install essbase 9.3.x on new box and migrate app's / db's from 7.1.x old box?
One more thing is like...if we are using External authentication using LDAP in 7.1.x version for security....will it be mandatory to implement shared services separately in system 9 or continue with native security mode without installing shared services...I have only essbase and no other tools implemented...
Hope u guys understand my queries!...If any body can explain on these two aspects...will be of great help to me...
Thanks for the help in advance!!

Hi,
You will have to migrate the Essbase server from 7.1.2 to 9.3.1
The steps you will follow are as below: --
1. Configure Essbase on new environment, 9.3.1 by using the same user as on 7.1.2 [THIS IS AN IMPORTANT STEP, TO MIGRATE SECURITY]
1. Take data exports of all application/databases in old environment
2. Take backups of all Essbase objects, including essbase.sec in old environment. Take security file backup after stopping Essbase 7.1.2
3. Create the applications/databases with same name in new environment 9.3.1
4. Copy the outlines and open outline in EAS in 9.3.1 and save them again.
5. Copy all objects, rules, reports, calc for all applications.
6. Stop essbase, Eas in new environment and copy security file from old environment to new environment Take backup of Essbase.sec on new environment
7. Start Essbase 9.3.1
8. Validate all databases using Esscmd "validate" command
9. Reimport all data and run default calc on all applications.
10. Now, you have the security in new Essbase server, as in old environment
11. Externalize the security in EAS.
Caution: When you migrate to Shared Services, Essbase users and groups are converted to equivalent roles
in Shared Services. Shared Services creates a superuser with the user ID named “admin,” which
is read-only. If Essbase contains a user ID named “admin”, that user ID cannot be migrated to
Shared Services. Before migrating, change the “admin” user ID (for example, from “admin” to
“asadmin”).
It is not compulsory to use shared services with Essbase 9.3.1, if you have Essbase only.
but since it the way to go, you will have to migrate your essbase security to shared services.
Let me know if it helps, by defining the reply as answered, Helpful or correct.
Cheers
RS

Shared Services with OAM ?

Similar Messages

Maybe you are looking for