Url reporting / logon

Is there a way to pull the user's ad login info rather than the user being prompted for user name and password when using url reporting?
Here is the basic url I am using - I know I can hardcode username and password by using apsuser and apspassword but obviuosly do not want to do that
http://servername/businessobjects/enterprise115/InfoView/scripts/opendocument.aspx?sPath=[Folder]&sDocName=report.rpt
Thanks

When using Opendocument, your only option is to pass in a logontoken - which is an encrypted form of the username / Pwd / CMS / AuthType. A logontoken can only be generated through code, so you will have to have some custom code with obtains the logontoken and passes it in.
I have attached a .NET sample that demonstrates this. You can also find info on opendoc parameters here:
http://devlibrary.businessobjects.com/BusinessObjectsXIR2SP2/en/en/BOE_SDK/boesdk_dotNet_doc/doc/boesdk_net_doc/html/Report_Linking.html
Regards,
Shawn

Similar Messages

Close session on URL reporting - Logon token

Hi,
when a user opens a report using a direct link (like openDocument) he creates a session that doesn't expires when he close the browser window.
So if the same user opens 5 times the same report, he uses all the 5 licenses and the system is not accesible anymore (until the server will unlock the connections).
It is possible to avoid this?
Thanks!!
Edited by: freeman74 on Dec 21, 2009 2:24 PM

On page 17 and 18 of the doc "xi3-1_url_reporting_opendocument_en.pdf" it is written:
ASPTOKEN
Logon tokens ensure that your company's licensing information is accurate.
Each time a user logs on to the BusinessObjects Enterprise system, the
count for the number of licenses that are currently in use increases by one.
If a logon token is not passed as a parameter, each time the user logs on to
the CMS (for example, the user may want to log on to a different
BusinessObjects Enterprise client component), the count increments. As a
result, an administrator or auditor may overestimate the number of licenses
in use.
Example:
This example shows you how to display a report when the user clicks the
View Report link.
<a target='_blank' href='http://<servername>:<port>/CrystalRe
ports/viewrpt.cwr?id=" & "CurrentReportID & " & _ apstoken="
& LogonToken & "'> View Report</a>
The resulting URL for this link is as follows:
http://<servername>:<port>/CrystalReports/viewrpt.cwr?id=152&ap
stoken=myAPS:A1B2
I'm writing a URL that contains username and password to avoid the login; but how can I get the logon token before the user views the report??

URL reporting - Hide username and password

Hi all,
I am trying to display a report when a link is clicked by a user,I know this can be achieved by URL reporting.But any one who trys view the source of the file will be able to get the login information(aps-username/aps-password) from the file or they can view this info in the address bar.Is there any way of hiding this information?
Thanks
Manoj
Edited by: Manoj Thomas on Oct 9, 2009 4:23 PM

Well, you can hide logon credentials by passing the logon token to the APSTOKEN command in the URL.The other way is to use OpenDocument to view a report.
In both the cases you need to get the logon token programatically and then pass it on to the paramater. This way you can hide the credentials.
I assume that you have already gone through the following PDF:
[http://help.sap.com/businessobject/product_guides/boexir31/en/xi3-1_url_reporting_opendocument_en.pdf]
I have used it in my project and it works.

Promptex in url reporting

Hi everyone,
This thread is a follow-up after this one : [Hide parameters|http://forums.sdn.sap.com/thread.jspa?threadID=2119452&start=0&tstart=0]
I've set up URL reporting with an URL like this : : http://cms:8080/test/test.jsp?reportID=11931&EXPORT_FMT=P
But my end users would like to be able to use promptex fonction in the url to have an url like this : http://cms:8080/test/test.jsp?reportID=11931&EXPORT_FMT=P&promptex-idbill="1"&promptex-idemployee="2"&.....etc
When using the URL reporting guide, they're is promptex use cases (lsS[name] but i can't manage to get a version working.
My problematics are the following :
-Add promptex capability to my url :
I was thinking adding to my JSP :
String lsS = request.getParameter("lsS");
response.sendRedirect("http://cms:8080/BOE/OpenDocument/opendoc/openDocument.jsp?serSes=" + java.net.URLEncoder.encode(serses) + "&iDocID=" + reportID + "&sOutputFormat=" + exportFormat + "&lsS=" + lsS);
But i have an error on the jsp : "org.apache.jasper.JasperException: unable to compile class for JSP:
Error on line 8 in file: /test.jsp
lsS cannot be resolved"
-Be able to deal with 1 or more differents promptex with differents types of data ( id, dates, ... )
Thanks if anyone can provide me with any help on this.

Hi,
I've mapped all the items used in url reports : i have 20 differents promptex, all single value, but with some dates.
So my JSP is now :
String reportID = request.getParameter("reportID");
String exportFormat = request.getParameter("EXPORT_FMT");
IEnterpriseSession es = CrystalEnterprise.getSessionMgr().logon("logon","password","CMS","secEnterprise");
String serses = es.getSerializedSession();
String lsS = request.getParameter("promptex-idbills");
String lsS = request.getParameter("promptex-idcust");
String lsS = request.getParameter("promptex-IdCust");
String lsS = request.getParameter("promptex-idrequest");
String lsS = request.getParameter("promptex-id_request");
String lsS = request.getParameter("promptex-idlot");
String lsS = request.getParameter("promptex-IDLOT");
String lsS = request.getParameter("promptex-no_request");
String lsS = request.getParameter("promptex-original");
String lsS = request.getParameter("promptex-split");
String lsS = request.getParameter("promptex-details");
String lsS = request.getParameter("promptex-HRi");
String lsS = request.getParameter("promptex-date_HRtrans");
String lsS = request.getParameter("date_trans");
String lsS = request.getParameter("promptex-datebegin");
String lsS = request.getParameter("promptex-dateend");
String lsS = request.getParameter("promptex-DATE_BEGIN");
String lsS = request.getParameter("promptex-DATE_END");
String lsS = request.getParameter("promptex-date_beg_period");
String lsS = request.getParameter("promptex-date_end_period");
response.sendRedirect("http://cms:8080/BOE/OpenDocument/opendoc/openDocument.jsp?serSes=" + java.net.URLEncoder.encode(serses) + "&iDocID=" + reportID + "&sOutputFormat=" + exportFormat + "&lsSidbills=" + lsS + "&lsSidcust=" + lsS + "&lsSidCust=" + lsS + "&lsSidrequest=" + lsS + "&lsSid_request=" + lsS + "&lsSidlot=" + lsS + "&lsSIDLOT=" + lsS + "&lsSno_request=" + lsS + "&lsSoriginal=" + lsS + "&lsSsplit=" + lsS + "&lsSdetails=" + lsS + "&lsSHRi=" + lsS + "&lsSHRtrans=" + lsS + "&lsSdate_trans=" + lsS + "&lsSdatebegin=" + lsS + "&lsSdateend=" + lsS + "&lsSDATE_BEGIN=" + lsS + "&lsSDATE_END=" + lsS + "&lsSdate_beg_period=" + lsS + "&lsSdate_end_period=" + lsS);
I have no display on screen when trying to use http://bosuite:cms/test/test.jsp?reportID=18497&lsSidrequest="121"&lsSdetails="1"&lsSdatebegin=Date(2011,11,24)
Any hints ?
Is it invisible for the user if he doesn't declare any value for the promptex ? cause users won't use all the 20 differents promptex in the same time, most time it's between 3 and 6 in the URL.
Thanks again

URL reporting - suppress grouptree display in Activex viewer

Hi,
We are running BOXI R3, using URL reporting to launch reports after a user has logged into Business objects in our app using the Java SDK to select reports, set parameters, etc.
We have been using the Dhtml viewer as the default, but want to move to using the ActiveX viewer as the default instead.
How can the default behaviour of the Activex grouptree display be changed, in order to not show the grouptree when a report is opened?
We were able to modify the Dhtml viewer behavior to suppress the groupTree, but it is not clear how to do this with the Activex viewer, either by URL parameters or the htmlviewerbridge web.xml settings, or .jsp code.

Post Author: gouldjw
CA Forum: Publishing
Still haven't figured this one out, so any help would be greatly appreciated. Is it not possible to use the ActiveX viewer without CR Server or BOE? It appears to be a feature of Crystal Reports Developer Ed., but I can't figure out how to actually view a report using the viewer. All I can do is display in DHTML, but for 10+ MB reports, this doesn't work well because the report reloads at every click.
Also, what is up with the repository requiring BOE? Can I no longer share pre-built command objects without the server software?

URL Reporting connecting to SAP R/3

Hello,
We have Crystal Reports that connect to ABAP Function Modules in our R/3 4.7 system as the data source. To minimize the number of user prompts, we use URL Reporting to pass all the required parameters for the report. The one thing we have not been able to do is specify data connection information in the URL. We currently get around this by setting the data connection information (SAP server, system #, client #, etc.) in the Database Configuration for the report in the CMC. The downside to this is that the report is now limited to running against a single SAP client.
Is there a way to specify the SAP connection information (server, system #, client #, etc) in the URL Reporting string? I know it can be done for SQL data sources through the USER- and PASSWORD- commands on the URL, but is there a similar way to specify SAP connection information?
Our reporting environment is BOBJ Enteprise XI 3.1, reports are developed in Crystal Reports 2008.
Thanks,
Byron Clairoux

Hi,
that is not possible. the connection is part of the report.
Ingo

Username and pssword in URL report parameters

Hi all,
I want to call a BI Publisher report via a URL bypassing the BI Publisher authentification page.
I created a user who has access only on this report (username : bip and password : bip)
Do you know how to specify the username and password in the URL report?
or do you know any other way to bypass the authentification ?
Thanks and regards.
Samy

Use the Guest folder
"Enable the Guest folder via the Security Configuration tab of the Security Center
page (for more information see Allowing Guest Access, Oracle Business Intelligence
Publisher Administrator's and Developer's Guide). Any report in this folder is open to
all users to see and run. Use this option if the report does not contain sensitive data."
10.1.3.4 UG

Hide parameters of URL Reporting using Open Document

Hi,
I just want to know if I'have to use SDK to improve URL Reporting on SAP BusinessObjects BI Platform 4.0 ?
I have to hide the connection parameters as "apsuser, ...etc" in order to show a simple and safe URL to extract reports.
Just want information about "how to do that and what I need to do thaht ?"
Regards,
William

Stdout.log :
log4j:WARN No appenders could be found for logger (org.apache.commons.digester.Digester).
log4j:WARN Please initialize the log4j system properly.
log4j:WARN No appenders could be found for logger (com.sun.faces.config.ConfigureListener).
log4j:WARN Please initialize the log4j system properly.
log4j:WARN No appenders could be found for logger (org.apache.commons.digester.Digester).
log4j:WARN Please initialize the log4j system properly.
log4j:WARN No appenders could be found for logger (com.sun.faces.config.ConfigureListener).
log4j:WARN Please initialize the log4j system properly.
com.businessobjects.webpath.rebean3ws.Activator
log4j:WARN No appenders could be found for logger (com.sun.faces.config.ConfigureListener).
log4j:WARN Please initialize the log4j system properly.
stderr.log
6 févr. 2012 18:13:23 com.sun.faces.config.ConfigureListener contextInitialized
INFO: Initializing Mojarra (1.2_12-b01-FCS) for context '/BOE'
6 févr. 2012 18:13:25 com.sun.faces.spi.InjectionProviderFactory createInstance
INFO: JSF1048: PostConstruct/PreDestroy annotations present. ManagedBeans methods marked with these annotations will have said annotations processed.
6 févr. 2012 18:13:47 org.apache.cxf.transport.servlet.CXFNonSpringServlet loadBusNoConfig
INFO: Load the bus without application context
6 févr. 2012 18:13:51 org.apache.cxf.transport.servlet.AbstractCXFServlet replaceDestinationFactory
INFO: Replaced the http destination factory with servlet transport factory
6 févr. 2012 18:13:52 org.apache.cxf.service.factory.ReflectionServiceFactoryBean buildServiceFromClass
INFO: Creating Service Gateway from class com.businessobjects.services.coresdk.wsgateway.GatewayPort
6 févr. 2012 18:13:52 org.apache.cxf.endpoint.ServerImpl initDestination
INFO: Setting the server's publish address to be /Gateway
6 févr. 2012 18:14:02 org.apache.catalina.startup.HostConfig deployDescriptor
INFO: Déploiement du descripteur de configuration BusinessProcessBI.xml
6 févr. 2012 18:14:05 org.apache.catalina.startup.ContextConfig validateSecurityRoles
INFO: ATTENTION: Le nom de rôle de sécurité noaccess est utilisé dans un <auth-constraint> sans avoir été défini dans <security-role>
6 févr. 2012 18:14:07 org.apache.catalina.startup.HostConfig deployDescriptor
INFO: Déploiement du descripteur de configuration dswsbobje.xml
6 févr. 2012 18:14:09 org.apache.catalina.startup.ContextConfig validateSecurityRoles
INFO: ATTENTION: Le nom de rôle de sécurité noaccess est utilisé dans un <auth-constraint> sans avoir été défini dans <security-role>
6 févr. 2012 18:14:09 org.apache.catalina.startup.ContextConfig validateSecurityRoles
INFO: ATTENTION: Le nom de rôle de sécurité SAPRole est utilisé dans un <auth-constraint> sans avoir été défini dans <security-role>
6 févr. 2012 18:14:14 org.apache.catalina.startup.HostConfig deployDescriptor
INFO: Déploiement du descripteur de configuration explorer.xml
6 févr. 2012 18:14:15 org.apache.catalina.startup.HostConfig deployDescriptor
INFO: Déploiement du descripteur de configuration explorer_help.xml
6 févr. 2012 18:14:15 org.apache.catalina.startup.HostConfig deployDescriptor
INFO: Déploiement du descripteur de configuration host-manager.xml
6 févr. 2012 18:14:15 org.apache.catalina.startup.HostConfig deployDescriptor
INFO: Déploiement du descripteur de configuration manager.xml
6 févr. 2012 18:14:15 org.apache.catalina.startup.HostConfig deployDescriptor
INFO: Déploiement du descripteur de configuration MobileOTA14.xml
6 févr. 2012 18:14:15 org.apache.catalina.startup.HostConfig deployWAR
INFO: Déploiement de l'archive jsfplatform.war de l'application web
6 févr. 2012 18:14:16 org.apache.catalina.core.StandardContext addApplicationListener
INFO: The listener "com.sun.faces.config.ConfigureListener" is already configured for this context. The duplicate definition has been ignored.
6 févr. 2012 18:14:16 org.apache.catalina.startup.HostConfig deployWAR
INFO: Déploiement de l'archive MobileBIService.war de l'application web
6 févr. 2012 18:14:17 org.apache.catalina.startup.HostConfig deployDirectory
INFO: Déploiement du répertoire CMCDoc de l'application web
6 févr. 2012 18:14:17 org.apache.catalina.startup.HostConfig deployDirectory
INFO: Déploiement du répertoire docs de l'application web
6 févr. 2012 18:14:17 org.apache.catalina.startup.HostConfig deployDirectory
INFO: Déploiement du répertoire examples de l'application web
6 févr. 2012 18:14:17 org.apache.catalina.core.ApplicationContext log
INFO: ContextListener: contextInitialized()
6 févr. 2012 18:14:17 org.apache.catalina.core.ApplicationContext log
INFO: SessionListener: contextInitialized()
6 févr. 2012 18:14:17 org.apache.catalina.startup.HostConfig deployDirectory
INFO: Déploiement du répertoire InfoViewDoc de l'application web
6 févr. 2012 18:14:17 org.apache.catalina.startup.HostConfig deployDirectory
INFO: Déploiement du répertoire ROOT de l'application web
6 févr. 2012 18:14:17 org.apache.catalina.startup.HostConfig deployDirectory
INFO: Déploiement du répertoire test de l'application web
6 févr. 2012 18:14:18 org.apache.coyote.http11.Http11Protocol start
INFO: Démarrage de Coyote HTTP/1.1 sur http-8080
6 févr. 2012 18:14:19 org.apache.jk.common.ChannelSocket init
INFO: JK: ajp13 listening on /0.0.0.0:8009
6 févr. 2012 18:14:19 org.apache.jk.server.JkMain start
INFO: Jk running ID=0 time=0/103 config=null
6 févr. 2012 18:14:19 org.apache.catalina.startup.Catalina start
INFO: Server startup in 349629 ms

URL Reporting Time parameter value.

We have installed Business objects XIR2 and one of our application uses URL reporting to call a crystal report. Parameter values are retrieved from the database and used in the url. Reports that do not have a time parameter works fine. Even though I pass the time parameter value Im still prompted for the value. The format of the url I use is http://hostname/businessobjects/viewrpt.cwr?init=dhtml&apstoken=<token>&prompt0=02:02:20&prompt1=LOCCODE
where prompt0 is of type par_time. Could someone please help me with the correct format to use for parameter type time?

Ted, I checked the prompt order and the prompt type and they are correct. These reports are working fine on Crystal 9. Also reports that do not have a time parameter works fine in Crystal 11. Its only when reports with time parameter are called Im prompted for a value to be entered in hh:mm:ss format although I tried passing the value in hh:mm:ss format and Time(hh, mm, ss) format in the url. The report comes up fine after entering the value in hh:mm:ss value in the prompt. I tried encoding the url but it didnt work. If I encode the entire url Crystal prompts me to enter values for all parameters.

Mask / Hide APSTOKEN server name in URL Reporting

OEM .Net application that calls RPTs from CR-SERVER 2008 using the URL Reporting method.
The URL that is being generated includes the APSToken value which references the SPECIFIC server name that generated the Token.
-EXAMPLE_
http://<SERVERNAME>:8080/CrystalReports/viewrpt.cwr?cmd=EXPORT&EXPORT_FMT=U2FPDF:0&id=2328&prompt0=210957811&apstoken=<FULLYQUATIFIEDSERVERNAME.DOMAIN>%3a6400%409117JF2IijEkii4fck7K9115JXNgUXMspRPgu8w6
IT Security won't be happy to see that Plain Text info in the URL of each report.
Is there a way to HIDE or MASK that <FULLYQUATIFIEDSERVERNAME.DOMAIN> value in URL reporting...?
My personal preference would be to tell the OEM supplier to use the full BOE SDK to make the report calls to the CR-SERVER 2008. This seems like they took the "easy" way....

Adam -
Thanks for the input, that's what I thought...
I don't think Single Sign-On (SSO) will work as it is a "Public Facing" application using a Generic "Enterprise" account for access.
Right now they are still using Administrator (No Password) "Enterprise" account - but we will have them fix that before it goes PROD.
There is no LDAP or WinAD layer that we can leverage for SSO since it faces the "Public".
My original advice was that they have the OEM application use the full .NET SDK for BOE/CR-Server rather than the URL method - and it looks like that would be the most secure method given the current constraints.
Thanks,
Mark

URL İview logon page

Hi ,
We have a URL iview in EP 7.0.When we run URL iview, logon page appears.This site user ID and password are the same as portal user id and password.
How can pass user id and password screen in URL iview?User want to see his/her menu without entering user id and password in the URL iview.

Ok, i understood you the other way.
Thoose parameter are used for logging on to the portal from another system.
You want to logon to another system from the portal.
You will need to use usermapping of the portal
You create a system and an alias for the webpage you want to logon to.
In you user adminstration you can the maintain a user mapping for the user to the system.
At last you can configure the iView to use the mapping.
http://help.sap.com/saphelp_nw04/helpdata/en/d3/ab0b5decd045e482d0deae9f9c90d5/content.htm
look under "type".
Hope it helps.
- Rasmus

Using URL Reporting to open latest report instance

I know that there are two methods of opening reports in Business Objects Enterprise 3.1:
1) URL reporting
2) opendocument
I like URL reporting as you can embed the user name and password within the URL.
I was able to get URL reporting to work to look view a report on demand.
Request
I would like to be able to open the latest instance of a report using URL reporting, not using opendocument, as I want the user to be able to open the latest instance without logging in.

There is nothing written with both TA and opendocument. I just noticed the forum posts wanting to use the old viewreport and thought this was a better solution. If on XIR2 then setting up TA will affect infoview users and generate errors (for not TA users) but on XI 3.x it would only affect opendocument users. If no username were provided in the URL then you may see an error (I don't recall seeing errors on 3.x). This could be easily resolved on XIR2 by having 2 instances of the web/app on different ports (one with TA enabled and one without).
As there have been multiple inquiries on this topic I just wrote up a new trusted auth note for setting up QUERY_STRING (requires SMP login to look up and view)
1422248 - Setting up Trusted Authentication in XI 3.x for opendocument infoview using QUERY_STRING
Regards,
Tim

Crystal Reports URL Reporting Parameter promptOnRefresh in JSP

I'm trying to run crystal reports from a JSP file that redirects using a URL string, but the promptOnRefresh=0 parameter that I pass doesn't seem to be preventing the report from prompting for parameters when the report viewer refresh button is hit.
I'm running BO Enterprise 3.1. In Infoview, all of my report URLs forward their report IDs to a JSP page, (z_dw.jsp), which reads the infoview cookie for a logon token, and creates an IEnterpriseSession to get an enterprise token and the user's info. The JSP then redirects to view the desired report using the URL pattern below:
http://<server>:<port>/CrystalReports/viewrpt.cwr?id=<reportID>&apstoken=<enterpriseToken>&promptex0="<username>"&promptOnRefresh=0
The actual Java code to construct this URL is below:
String redirectStr = "http://<server>:<port>/CrystalReports/viewrpt.cwr?id=" + request.getParameter("rpt")
+ "&apstoken=" + enterpriseToken
+ "&promptex0=\"en" + userName + "\""
+ "&promptOnRefresh=0";
This forwards to the desired report and prompts for needed parameters correctly. Unfortunately, if the report is refreshed using the report viewer refresh button, all of the parameters are promted for including the reportID, which our users wouldn't know. In the xi3-1_url_reporting_opendocument_en(2010).pdf guide, it mentions that the 'promptOnRefresh' parameter can be set to 0 to prevent this from happening, however it didn't seem to work in my case.
If anyone can advise me on how to fix this problem or how to disable the report viewer refresh button through a URL string, I would be very grateful.

This turned out to be a valid bug, and the SAP Design Team fixed it in Fix pack 2.6 for BOXI 3.1 in response to this issue. If you encounter something similar, just upgrade to the latest fix pack and this problem should be taken care of.

Crystal report logon Failed Error

Dear All
We have installed BOBJ Edge 3.1 Server at Windows Server.
We insalled Crystal Report 2008 at one of our Laptop. (Client).
When we tried to create a sample report,
we selected a existing universe from the BOBJ Server. When we selected it ask me for the server connection details. It connected and showed me the existing unverses.
I selected say eFashion - and picked some fields and Click OK.
Then it givs logon failed error.
Can some one explian me where i am missing
REgards,
Venkat

Hi Venkat,
If the Universe is based off an ODBC connection, then the same ODBC connection (with the same name) needs to be present on the client machine too.
So, like Don suggested, the client machine would need the same DB client too.
Open the Universe in the Universe Designer. Go to File > Parameters > Edit. This is where you see all the connection information of the Universe.
-Abhilash

Error while running BI reports:Logon balancing error 88

Hi all
I had uploaded BI role with user mapping in EP.When i am running BI reports some reports are running absolutely fine but some reports shows me the error:Logon balancing error 88:Cannot connect to message server(rc=9).Can any body suggest us.

Hi,
Lot of reasons are identified for such error and all are well listed in that already suggested SAP Note 882741 - SAP Logon: "Logon balancing error", service 'sap...' unknown. Have you verified all the possible reasons ?
When i am running BI reports some reports are running
absolutely fine but some reports shows me the error:Logon balancing
error 88:Cannot connect to message server(rc=9).
Some Reports ?
Have your tried to run those reports (which are throwing that error) by using latest version of SAP GUI and with latest patch level ?
Also, It may be temporary network link problem. When you face such error next time, then quickly execute the following commands at the Desktop/Laptop (where problem is occurred) to diagnostic the N/w problem.
Open a Command Prompt
Start -> run -> cmd
Type in the following commands:
Ping xxx.xxx.xxx.xxx
telnet xxx.xxx.xxx.xxx 3200
telnet xxx.xxx.xxx.xxx 3300
telnet xxx.xxx.xxx.xxx 3600
(xxx.xxx.xxx.xxx = IP address of SAP Server or host name)
If you find any doubtful result then save that result and forward it to your network admin team for further analysis.
Regards
Bhavik G. Shroff

Url reporting / logon

Similar Messages

Maybe you are looking for