SSO based on NT account for BI Publisher
Dear all,
We have setup SSO for OBIEE presentation based on NT authentication by following Chapter 8 of Oracle Business Intelligence Enterprise Edition Deployment Guide. and it is working fine. but when I try to open more products-> BI publisher it throws error "Reporting Login: Login failed: Please contact administrator for your username/password."
without SSO we are successfully able to login to BI publisher through more product link.
OBIEE is deployed on IIS whereas BI publisher is using OC4J server.
Any suggestion?
Edited by: user10139165 on Oct 18, 2010 6:13 PM
hi User,
Refer : Re: Integrating BIP with OBI on SSO
Thanks,
Saichand.v
Similar Messages
-
Different GL Account for WRX - based on Valuation Class (No Material Master
Hi Gurus,
My scenario is as given below.
1. We do not have any Material Master. We create short text PO's with account assignment category "P".
2. We are also using Material Group in our PO. We have one Material Group for Domestic Purchases (say M1) and another Material Group (say M2) for Import Purchases.
3. We have assigned valuation class say 3100 for Material Group M1 and valuation class 3101 for Material Group M2.
4. Our plant is say RBUP and our valuation grouping code is say 0001 which is assigned to the same plant.
Objective:
While doing MIGO we want to have different GR/IR Account for domestic purchases say 108 and different GR/IR account for import purchases say 109.
Issue:
1. In OBYC setting GR/IR account is picked from transaction key WRX.
2. Our entries in WRX are as given below for our Chart Of Accounts say DMN.
Valuation Modifier Valuation Class GL Account
0001 108
0001 3100 108
0001 3101 109
3. But even when i am creating the PO with Material Group M2, it is not picking the GR/IR account 109, based on the valuation class i.e. 3101 which is assigned to the Material Group M2.
Query:
1. How can I achieve my objective of selecting GR/IR Account 109 for Import PO's and GR/IR Account 108 for Domestic PO's.
Pl note we will not be maintain material master.
Will give full 10 points if anyone can help me reslove this issue.
Pl also do not waste any of your valuable time to address the account assignments for BSX or GBB-VBR. I am fully aware that in VBR this differentiation is possible.
Rgds,
Prasad.I suggest you to create a Dummy Materials. Lets say,
material number: 1001
enter material description as Domestic
material number: 1002
enter material description as Imports
and in OBYC for GBB
make the following settings:
val grp gen mod val cla gl a/c dr gl a/c cr
0001 VBR 4000 74180040 74180040
0001 VBR 4001 78020091 78020091
so that when u create PO u can get default GL (consumption GL ) for the material (u can use the same for material group also) and u can maintain WRX acc determination as follows ..
val grp val cla gl a/c dr gl a/c cr
0001 4000 123456 123456
0001 4001 456789 456789
Thus u need to create 2 different valuation class for these material group specific and in PO while entering the text u can add the text which is displayed along with material description
hope this helps -
Both Cash based Accounting and Accrual based Accounting for Capital Exp
I have a requirement to generate both Cash based and Accrual based accounting for Capital Expenditure transactions. I am thinking of using Secondary Ledger for Cash Based accounting. I have never used secondary ledger or customization in SLA.
Can someone please let me know the steps to do this, or if this solution is going to work?
Regards
SamHi Dewi
You will get message (warning):
Message no. KE107
Diagnosis
Operating concern XXXX is set up for both forms of Profitability Analysis (costing-based and account-based).
You have set an active indicator for only one form. Note that no data will be transferred to the form of Profitability Analysis that you did not activate. If this form is activated at a later point, the data posted up to that point will be missing.
You can change active flag (customizing request) any time.
Dejan -
AD sync service account for cloud based application
i have a cloud based application that i am setting up AD sync with. in their directions below i have bolded the ones i need answers too. my domain functional level is windows server 2003
The active directory synchronization requires the following:
A domain user which has the following properties:
The password is known and does not expire - completed
The domain user account has read permissions to all objects in the entire domain within active directory
Confirm that if the domain has been upgraded to Windows 200x functional level from Windows NT4, 2000 or 2003 that we have the appropriate Group permissions below available to the domain user account for the synchronization in addition
to read permissions to the entire domain:
Pre-Windows 2000 Compatible Access
Pre-Windows 2003 Compatible Access
The username and password are passed using the appropriate communication channels - completed
i have created a service account in my AD called myappldap. does a domain user have read permissions to all objects in the entire domain within active directory without adding the to any other security groups except domain users? Or do i have to click on
the top level domain object in AD>go to properties>security>and give them read permission and proprogate down those premissions? Also i do not see Pre-windows 2003 compatible access as a security object i can give this service account read permissions
to. i just wanted to confirm that this is because i am still running a functional domain of windows server 2003?A domain user has complete Read on everything in the forest.
As for the Pre-Windows 2000 Compatible group, that's a reduced security group to allow NULL password for pre-Windows 2000 DCs, such as the way NT4 RRAS (VPN servers) used. In Windows 2000 and newer, we can eliminate that group, since it's a security concern.
More info to read up on it, here:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/e8dfacba-985f-4042-abeb-f341bf37522f/prewindows-2000-compatible-access-group?forum=winserverDS
Everyone group does not include anonymous security identifier
http://support.microsoft.com/kb/278259
As for Pre-Windows 2003, I haven't come across anything that would say
pre-2003. It almost appears that the software is using NULL or some other kind of reduces security on the password. Then again, I could totally be wrong. Is that specifically how the third party software specifies it in the docs?
Can you post a link to it?
Ace Fekay
MVP, MCT, MCSE 2012, MCITP EA & MCTS Windows 2008/R2, Exchange 2013, 2010 EA & 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php
This posting is provided AS-IS with no warranties or guarantees and confers no rights. -
UK-based support contact number for account membership
Is there a UK-based support contact number for account membership?
Hello,
in addition to John's hint (what concerns UK), you could use this link Adobe Connect Support phone numbers
Hans-Günter -
Use SIA service account for SQL Server reporting connections (BIP4.1)
Is it possible to use the SIA service account as a proxy for a SQL Server connection using OLE DB? This way, anytime a report was refreshed, the SIA service account would be used when authenticating to the reporting database? This is a common pattern in software development to minimize database maintenance (when there is sufficient security being enforced at the application layer - BOBJ provides this).
This would make SQL Server database security management very easy for the DBAs (just add the BOBJ service account to the database and assign dbreader).
I would think this would be an option, but a Relational Connection only provides the following 3 Authentication modes when using the IDT to create and publish a Relational Connection (OLEDB/MSSQL):
Use BusinessObjects credential mapping
This takes the username and password from the "Database Credentials" section of the BusinessObjects User object for the user in the current session. It passes the info as hard-coded SQL authentication.
Use single sign-on when refreshing reports at view time
This is ONLY for end-to-end single-sign-on (as the error message in the next paragraph specifies) and uses the Windows AD credentials for the user in the current session. It is this method of authentication that I'd like to use, i.e. Windows Integrated Security, but I'd like to have the SIA account act as the account that makes the connection, not end-to-end.
Use specified username and password
This is for hard-coding usernames and passwords (only SQL authentication in OLE DB).
I've tried leaving the "Cache security context" option OFF in Windows AD Authentication settings, hoping it would default to using the service account for authentication to the database... to no avail. It fails during tests in the IDT with the message:
"Single Sign-On failed in the CMS. Please contact your system administrator for details. : The authentication provider (secWinAD) associated with this logon session does not have inter-process Single Sign-On enabled. Contact your system administrator for details. (FWB 00019)"
Alternatively, a SQL user could be hard-coded into the connection (same simple maintenance on the DBA side), but we'd really like to rely on Windows Integrated Security if possible!
Is there a way?
Any help is greatly appreciated!
DavidHey David,
Did you ever solve this? We get the same SSO error when indexing information spaces in Explorer.
Thanks,
Brandon -
Hi
Im trying to sign for a publisher account to download the iTues producer when I enter my info and cause Im a registered
app developer it gives me a message that this account is already asociated with app developing account so do i need 2
separate accounts one for apps and one for ibook publishing ?Different accounts use different "usernames" which is in fact an email address. And yes each account can purchases apps, music, books etc,. BUT.... Apple require that a different account is required for:-
Free Books.
Paid Books
Developer account.
Although its at first it was OK to use a "standard" iTunes Account to open a free iBook account - its no longer allowed, so maybe the iTunes account also now needs to be a separate account from others. -
Different GOGS GL account for goods issue
Hello SAP export,
The F&A department requests to generate different COGS GL account based on Customer Account Assignment Group when goods issue (or billing). Customer Account Assignment Group field name is KNVV-KTGRD. The solution is NOT possible at T-CODE OBYC (with GBB transaction (MM FI configuration for goods issue) because we are using the same materials. (All materials are with same valuation class in MATERIAL master).
I had posted this question in SD forums but the export suggests me to post in FI forum.
If you know any workable solution, please help.
Great thanks in the advance!Hi,
Check the link for how to have default a G/L account on a Purchase Order account assignment for an inventory item & how to post to a separate G/L account for inventory item by having GR posting
http://www.bluemarlinsys.com/ns/0603-03.asp
OR
you can have a thought of having different valuation grouping codes where you can have different G/L posting with respect to plant for same materiel
valuation grouping code........valuation area
0001......................................P001(plant-1)
0002----
P002(plant-2)
Regards,
Biju K -
Reseting page number in Word RTF template for BI Publisher PDF generation
Hi!
Apex 4.0.2, Oracle 10.2.0.4, BIP 10.2
Bills are created based on Word RTF file with BI Publisher. Reszulting file is one big PDF file, which has many pages.
Word RTF template is grouped on BILLS.ID field with page break option. So one BILLS.ID may have one or many pages (according data).
How to create RTF template (for PDF BI Publisher generation) with reseting page numbers when grouping value change.
Page numbers are in footer in format
curr_group_page/total_group_pages
where:
curr_group_page is current page number in group (defined with BILLS.ID field),
total_group_pages is total page number of pages in group (defined with BILLS.ID field).
I need to reset numbering whenever BILLS.ID (group) change.
Example:
ID=1 (4 pages)
1/4, 2/4, 3/4, 4/4
ID=2 (1 pages)
1/1
ID=3 (2 pages)
1/2, 2/2
ID=4 (3 pages)
1/3, 2/3, 3/3
etc.
How to achieve that kind of numbering?
Any help appreciated.
Regards,
Damir Vadas
Edited by: Damir Vadas on May 16, 2011 12:49 PMSimple question.. Does your posting deal with an APEX issue or a BI Publisher issue? The posting you have deals with the RTF add-on for Word that builds report layouts for BI Publisher. I suggested in my response that you move it to a more relevant forum..
If you feel that me alerting you to the fact your are VIOLATING forum policy is an issue, please feel free to ask others their view.. (posting to a 3 year old closed thread, creating MULTIPLE threads for a single issue..) You do NOT seem to get the idea that posting this in the Bi Publisher support forum would probably get you a BETTER response than here.. Asking pl/sql questions here will also get people to refer your questions to the PL/Sql Support forum..
Also, here is a POSSIBLE answer from the BI Publisher Forum: http://forums.oracle.com/forums/thread.jspa?threadID=594805
This Is The APEX SUPPORT forum, we deal with SUPPORT questions on APEX (Application Express)..
Thank you,
Tony Miller
Webster, TX
You know, I used to think that it was awful that life was so unfair. Then I thought, wouldn't it be much worse if life were fair, and all the terrible things that happen to us come because we actually deserve them? So, now I take great comfort in the general hostility and unfairness of the universe.
If this question is answered, please mark the thread as closed and assign points where earned.. -
How to get all GL accounts for each account in a given bank...
Hello Experts,
Is there a way to get all GL accounts for each account in a given house bank?
IN our company, there are 5 GL accounts for each bank so 1 GL for 1 account. they are for recon, payables,
receivables, etc. I checked table T012K but it only shows the main GL account. Hope you
can help me guys. Thank you and take care!Try this.. it is based on company code
here it_cocodes is an internal table containing company codes
DATA: BEGIN OF it_glaccount OCCURS 0,
bukrs TYPE bukrs,
saknr TYPE saknr,
txt50 TYPE txt50_skat,
END OF it_glaccount.
DATA it_glaccount_wa LIKE it_glaccount.
LOOP AT it_cocodes INTO it_cocodes_wa WHERE ktopl <> ''.
SELECT bukrs saknr FROM skb1
INTO CORRESPONDING FIELDS OF it_glaccount_wa
WHERE bukrs = it_cocodes_wa-bukrs.
IF sy-subrc = 0.
SELECT SINGLE txt50 FROM skat INTO it_glaccount_wa-txt50
WHERE spras = 'E' AND ktopl = it_cocodes_wa-ktopl
AND saknr = it_glaccount_wa-saknr.
APPEND it_glaccount_wa TO it_glaccount.
CLEAR it_glaccount_wa-txt50.
ENDIF.
ENDSELECT.
loop at it_glaccount into it_glaccount_wa.
write:/....
endloop.
refresh...
clear...
endloop. -
Hi I want to clear grir account for specific po but I am getting message " no data selected. Check selected parameters!!"
I have entered in the mr11 following fields
company code 1400
posting date : todays date
Purchasing document : 4501736972
Purchase order date 01.01.2001 - 17.12.2011
Surplus type I have selected both
in clear I have selected gr/ ir clearing account, delivery cost accounts
last movement before key date is todays date
qty var lees than / equal to 100 perentages
What can be the issue then.
I see in the purchase order company code is correct. for line items purchase order i see invoice receipt is done more than the gr value.hi,
So that it will hit prd account , so please make setting in OBYC for prd Assigned gl & your PO must GR based invoice verfication
Otherwise cancel all documents & take gr based invoice indicator in po.
Regards
ragini
Edited by: ragini_mm on Feb 15, 2012 10:29 AM -
Error on Bursting Report for BI Publisher
hi all,
i am getting the following error when i am bursting the report for BI Publisher.
* Nested Exception (Underlying Cause) ---------------
oracle.apps.xdo.servlet.scheduler.ProcessingException: java.lang.NullPointerExce
ption
at oracle.apps.xdo.servlet.scheduler.XDOJob.runBurstingReport(XDOJob.jav
a:2116)
at oracle.apps.xdo.servlet.scheduler.XDOJob.execute(XDOJob.java:358)
at org.quartz.core.JobRunShell.run(JobRunShell.java:195)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.j
ava:520)
Caused by: java.lang.NullPointerException
at com.sun.java.util.collections.Hashtable.get(Hashtable.java:321)
at oracle.apps.xdo.batch.bursting.ProcessEnterpriseDocument.processLayou
t(Unknown Source)
at oracle.apps.xdo.batch.BurstingProcessorEngine.addDocument2Queue(Unkno
wn Source)
at oracle.apps.xdo.batch.BurstingProcessorEngine.createBurstingDocument(
Unknown Source)
at oracle.apps.xdo.batch.BurstingProcessorEngine.endDocument(Unknown Sou
rce)
at oracle.xml.parser.v2.XMLContentHandler.endDocument(XMLContentHandler.
java:119)
at oracle.xml.parser.v2.NonValidatingParser.parseDocument(NonValidatingP
arser.java:311)
at oracle.xml.parser.v2.XMLParser.parse(XMLParser.java:263)
at oracle.apps.xdo.batch.BurstingProcessorEngine.burstingRequest(Unknown
Source)
at oracle.apps.xdo.batch.BurstingProcessorEngine.process(Unknown Source)
at oracle.apps.xdo.servlet.scheduler.XDOJob.runBurstingReport(XDOJob.jav
a:2008)
... 3 more
Kindly Help..
Thanks.Thanks alot Guru for u r reply, i am attaching more Details regarding my error.
In Reporting options i gave
Reporting folder CCB
Reporting server:BIPUbliser url
Reporting password:Admin
Reproting userid:Admin
I already configured Bill Display Algorithm OBLD_CRYS in installation-frame work
Now i am getting the error the value in the field is not a valid value for the field.
In Console I am getting the error '
SYSUSER - 612791-31-1 2011-05-26 11:32:21,709 [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] ERROR (schema.rules.BusinessObjectRuleProcessor$Factory) There is more th
an 1 MO for the service 'CILCSVAP': MaintenanceObject_Id(SA), MaintenanceObject_Id(CM_CONT), using 1st one 'MaintenanceObject_Id(SA)'
<May 26, 2011 11:32:22 AM IST> <Error> <HTTP> <BEA-101020> <[ServletContext@4736418[app:SPLWeb module:/spl path:/spl spec-version:2.5]] Servlet failed with Exception
com.splwg.shared.common.ApplicationError: (Server Message)
Category: 3
Number: 501
Call Sequence: ;CIPCSVAP
Program Name: CIPCSVAP
Text: You are not allowed access (directly/indirectly) to this account.
Description: Please contact your security administrator to check your security for this account.
Table:
Field:
at com.splwg.base.support.context.FrameworkSession.addError(FrameworkSession.java:1177)
at com.splwg.base.support.context.FrameworkSession.addError(FrameworkSession.java:1158)
at com.splwg.base.support.cobol.CobolSubprogram.populateError(CobolSubprogram.java:142)
at com.splwg.base.support.cobol.CobolSubprogram.checkForErrors(CobolSubprogram.java:94)
at com.splwg.base.support.cobol.AbstractCobolProgram$CallCobolClosure.run(AbstractCobolProgram.java:214)
Truncated. see log file for complete stacktrace -
How to get general account for a billing document ( BSEG) ?
Hello,
For a billing document to a client , We need to get the general account for each item of the invoice . We based on the field XBLNR of table VBRK to select a document from BKPF with condition : VBRK-XBLNR = BKPF-vbeln . If yes we will get from table BSEG for bseg-vbeln = bkpf-vbeln and bseg-posnr = vbrk-posnr . then get HKONT.
But as you know BSEG is a cluster table, Select directly from this table is extremly long and seems impossible in our case. Could you please show me the way to do this ?
Our main purpose is to get HKONT ( General account ) for a billing document .
Thanks in advance for your helpHi Hoa Binh Xanh,
Why don't you look into tables BSAD and BSID (Transperant Tables) rather directly hitting BSEG ( Cluster Table)
Pass VBELN (Billing Document) in above two tables and get the doucment numbers and then if you need further info hit BSEG with the data you got from BSAD and BSID
OR else Pass KOART = 'D' while selecting data from BSEG it will help in improving performance
Hope it will solve your problem..
Thanks & Regards
ilesh 24x7
ilesh Nandaniya -
I have multiple computers set up on homesharing under one itunes account. Can I use face time on all of them or do i need seperate accounts for each?
I'd suggest you consider a cloud-based file sharing service such as Dropbox for this sort of use. iOS is not designed to be synched with more than one iTunes library at a time, so attempting to use it as you describe, connecting a single iPad to multiple computers, almost certainly won't work as you intend and is likely to cause nothing but headaches.
Regads. -
Accounts for kids and other ramblings
I was trying to create limited accounts for my 3 kids who all just got iPhones. After much searching, it seemed that the only way to do this was by making an allowance account. So, I went through the process of setting up an allowance for one of them using their iCloud ID (@me.com) and was told that they are not set up for iTunes store. So, I tried logging them into iTunes and was told that I had to put a credit card on their account. Wait a second!!!! The whole point of this was to avoid having my credit card on their accounts. Just trying to get something working, I added my credit card and we were up and running. I then added the allowance to their account. At this point, iTunes let me remove the credit card info from their account. I did this for 2 of the kids without an issue. When I got to my daughter, she already had an iTunes account with a credit card associated to it. My intention was to switch her over to the allowance account and remove the credit card. I went through the process and it told me that I needed to call Apple support in order to complete the process. What the heck Apple?
Additionally, I switched my credit card number to a different card before doing any of this. The allowances however were charged to the card that was previously on file, not the new one that I entered because I wanted the new card to be used!
All in all, it has been a miserable process. I definitely think that Apple should put into place a technique of creating child accounts based off of the Parent's account such that the Parent can control the child's spending directly from their account within iTunes or via. an app on their iPhone, iPad, ...
If I'm missing something, please fill me in on what I need to do or where I went wrong. I don't want them to use my iTunes ID directly since I don't want them to automatically download my content, we don't listen to the same music and want that to be separate, and I certainly don't want all of the apps that they buy automatically appearing on my iPhone and iPad (yet I still want to use this feature for my own content).
Thanks!Excellent ideas and can't understand why it is so difficult or wasn't implemented and thought out. Makes sense.
Ask Siri and see what she has to say! who knows, maybe they use questions to Siri to see what customer's want to know.
In the meantime, if you can, use iTunes Feedback. http://www.apple.com/feedback/
Maybe you are looking for
-
Update LDAP problem using SPLDAP_RECEIVE_ATTRIBUTES
Hi Friends, I can create new data records in LDAP but when i try to update these records i get following error : type id number message E |LDAPRC |053 |LDAP server cannot execute operation Does anyone ha
-
my girlfriend recently imported her itunes library to her external harddrive, she wanted to put them back on the computer again, but when she did half of her itunes worked because most of them were bpa files. is there a way to convert them or encrypt
-
Unable to find sysctl.conf
Hi, I want to install oracle s/w for my production server. before installing oracle i want to set kernel parameters in /etc/sysctl.conf .i logined as root user but i couldn't able to fine sysctl.conf file on server.. Edited by: 920033 on Apr 12, 2012
-
Hi. l recently purchased 2 ringtones from itunes store. When l asked the system provider to transfer my data from old phone to the new iphone 5, it gets override. When i try to downloa the same ringtone again, l was asked to purchase it again. Pleas
-
Deleted files are not actually gone and still appear in iPod outside iTunes
I have a 60 GB Video iPod: When I deleted around 70 Podcast files (mp4) from my iPod using the new iTunes (7.0) they weren't actually deleted. In iTunes it reads that the mp4s no longer exist, but when I disconnect my iPod from the computer the mp4s