Windows AD cannot authenticate if BI platform UNIX?

We were eagerly awaiting BI4 SP04 to address several SAP integration issues including the requirement use Windows AD for single sign to SAP Enterprise Portal hosting BI4 content (dashboards/webis/Analysis for OLAP) and BEx Web analyzer, i.e. user logs on once for Windows to authenticate to all SAP systems, ECC, BW, BI, EP, etc.. We have no plans to use the BI Launch Pad.
We are on AIX 6.1 for BI4 SP04, NW 7.3.1 and EP and BW 7.3.1 and are working through Kerberos client on AIX to Windows AD and SNC and SSO in SAP...
Frankly we have been struggling for some time with issues on BI4 SP02 and NW 7.3 so we are frustrated when we came across the followg in SAP doc -
Business Intelligence Platform Administrator Guide.pdf (http://help.sap.com/businessobject/product_guides/boexir4/en/xi4_bip_admin_en.pdf)
Page 211
The Windows AD security plugin cannot authenticate users if the BI platform server components are running on Unix
Page 212
Windows AD with Kerberos is supported if the Java application is on Unix. However, BI platform services must run on a Windows server.
Can someone clarify these statements? We will install Java application (NW? BI Java?) on UNIX. We will not run BI Platform? services on Windows.
If our requirement is to have a user only logon once to Windows and access BI4 content in the SAP Portal, not the BI Launch Pad, MUST we run BI4 on Windows?
Sincere thanks for your time and thoughts,
Lee Lewis
Summit Electric Supply
ASUG EDW and BO SIG Volunteer - Market Leader
[Email address removed. Please see the rules of engagement. The forum Administrator]

Hi Ainsley,
A work around? Yes and no and sort of ...kind of...
This turns out to be quite complex and tempermental.
In short, you cannot use Windows AD authentication, but instead use LDAP (with the Microsoft Active Directory). We were able to get this to work with much effort. The biggest limitation is that it supports a single AD forest.
I am giving a presentation on silent single sign on for BI4 and Enterprise Portals at the SAP BO User Confernce in Orlando and will see about posting the slides after the conference, but can share some of the resources here that we found to be most useful. Please reach out to me if I can help further.
Lee Lewis
•Integrating SAP BusinessObjects BI Platform 4.x with SAP NetWeaver, Ingo Hilgefort, SapPress 2011
•Configuring LDAP Manual Authentication and SSO for BI4 on Unix
•1631734 - Configuring Active Directory Manual Authentication and SSO for BI4
•Business Intelligence Platform Administrator Guide, SAP BusinessObjects Business Intelligence platform 4.0 Feature Pack 3, June 2012
•1670073 - How -To: Generate keystore and certificate in the process of configuring STS for SAP
•1687295 - How to configure Single Sign On (SSO) on the SAP Netweaver 7.x portal to BI4
•IBM - Configure single sign-on authentication on AIX
•1537480 - Best Practice: How To setup Active Directory Single Sign On when BOE CMS is on Unix or Linux
•Kerberos Explained - Microsoft Technet
•SAP Help - Secure Network Communications (SNC)
•Using Kerberos Authentication for Single Sign-On
•SAP Netweaver 7.3 Configuring Kerberos Authentication
•SAP BusinessObjects BI4 Active Directory SSO Tutorial
• 1631734 - Configuring Active Directory Manual Authentication and SSO for BI4
•1245218 - How to connect the LDAP plugin to Active Directory
Lee Lewis

Similar Messages

E71 windows 7 bluetooth "Cannot authenticate the p...

I am using 7.1.51.0 Nokia PC Suite on Windows 7. I have Nokia e71-2. I have latest software on device (410.21.010) using Nokia ovi Suite (2.2.0.245).
Under Device manager->Bluetooth Radios, I have following Drivers versions installed:
Micorsoft Bluetooth Enumerator from Microsoft: 6.1.7600.16385
HP Integerated module with Bluetooth Wireless 2.1Technology from Broadcom: 6.2.0.9000
Using PC Suite when I try to connect to bluetooth, it supplies the pairing code. I hit OK and then enter the pairing code on e71. The pairing seems successsful and I can see my "tjsingh-mobl" laptop on e71 under Menu->Connectivity->Bluetooth->"Paired Devices". I set it as authorized device. However after some time PC Suite tells me that "Cannot authenticate the phone".
I have searched the forum and have failed to find any solution.
I tried the following also but didn't help. There is no "Service Controllers" app on my e71.
Menu > Applications > App. mgr. > Installed apps. > uninstall 'Service Controllers' and 'Contacts Groups DS Plugin' applications.
/t5/PC-and-Mac-Software/PC-Suite-Vista-x64-and-N78-FAIL/m-p/401633/highlight/true#M31457
Can anyone help?

I had this problem too, but the phone got recognized at last after the latest OVI Suite upgrade. Somehow it must have installed some drivers which allowed win7 to recognize and autenticate the phone

Samba Users Cannot Authenticate?

I just want to start this thread by saying samba makes me want to kill myself. I love it so much, that it makes me want to rip my heart out and feed it to stray dogs every time I need to write a new configuration. Because I truly hate configuring it. Ok, with that steam having been blown off, let's jump into the problem I've been chasing for hours.
My users cannot login to samba shares. Simple as dirt. Every single time I access the shares as a user, I am prompted for my password, I enter my password, and the prompt immediately asks me again, as if I've entered the wrong password.
Heading off the obvious: Yes, I've added samba users with pdbedit -a -u [username]. The unix permissions on the folder I am trying to access as a samba user are 755, and I am trying to access the folder as its owner. My server smb.conf is included below.
[global]
workgroup = WORKGROUP
passdb backend = tdbsam
netbios name = ArchServ
name resolve order = bcast host lmhosts wins
server string = ""
printing = cups
printcap name = cups
printcap cache time = 750
cups options = raw
use client driver = yes
map to guest = Bad User
local master = yes
preferred master = yes
os level = 65
usershare allow guests = Yes
usershare max shares = 100
usershare owner only = False
security = share
#username map = /etc/samba/smbusers
[printers]
comment = All Printers
path = /var/spool/samba
create mask = 0700
guest ok = Yes
printable = Yes
print ok = Yes
browseable = No
[print$]
comment = Printer Drivers
path = /var/lib/samba/printers
[Home - user1]
comment = Deyla's Home folder
path = /home/user1
create mask = 0755
guest ok = yes
browsable = yes
write list = user1
public = yes
[Home - user2]
comment = James' Home folder
path = /home/user2
create mask = 0755
guest ok = yes
browsable = yes
write list = user2
public = yes
[Transmission Home]
comment = Torrent downloads
path = /home/transmission
create mask = 0775
guest ok = yes
browsable = yes
write list = user1 user2
public = yes
They work flawlessly as guest shares, and I have no problem gaining access... but when I try to log into a share as a user, the user will absolutely not authenticate, and it is the most frustrating, puzzling enigma to me. I formerly had this very samba configuration on an Ubuntu file server, and had no problems with the share behaving exactly as I wanted it to. I cannot for the life of me figure out why my users cannot authenticate.
Please help! Any and all tips are appreciated! Thank you in advance!

Thanks to Swerdina over at the OpenSUSE forums, I was able to solve my samba issue (thread). In a nutshell, my problem was the last active line in my [global] stanza, which was set to "security = share". By setting this global setting to "security = user" it fixed my problem and now allows me to invoke my shares with user privileges if I so choose to. Hopefully this helps someone who may have had a similar problem.

SOLVED: "AuthenticationSupport service missing. Cannot authenticate request."

A customer was installing CQ5 on a Red Hat Linux environment, and getting the following error displaying in the browser.
AuthenticationSupport service missing. Cannot authenticate request.
We checked the Felix Console, and all bundles were installed correctly.
We did however find the following message in the error log:
20.06.2012 10:49:26.689 *ERROR* [FelixStartLevel] org.apache.jackrabbit.core.RepositoryImpl failed to start Repository: Unable to register data store in cluster. javax.jcr.RepositoryException: Unable to register data store in cluster.
Caused by: java.net.UnknownHostException: {server name}: {server name}
This was not a clustered instance.
On closer inspection, the error was caused by an incorrect IP address entry for {server name} in the hostnames file
Tim Goodman

Hello Mkiti,
    I take a look there and my host file only contains comments :s
    Heres the content:
# Copyright (c) 1993-2009 Microsoft Corp.
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
# For example:
#      102.54.94.97     rhino.acme.com          # source server
#       38.25.63.10     x.acme.com              # x client host
# localhost name resolution is handled within DNS itself.
#    127.0.0.1       localhost
#    ::1             localhost
    The error only happen after I install the CQ5 update fix, from package share. I just renamed the crx-quickstart folder, the CQ create a new one and works, but my projects still in the old quickstart :s Is there a way to physically copy these projects, maybe?

Cannot authenticate phone

Suddenly my N95 stopped connecting with PS Suite via bluetooth. When trying to restart it I got the message that my phone could not be authenticated!!!???
Bluetooth is working fine with other devices, PC suite is working fine through USB and trying to remove PC suite and installig the latest version currently available does not solve the problem. Please advise!!!
Regards,
Johan

I have the same problem. My E51 connects with Bluetooth just fine to other devices like headset but when I try to connect to PC suite, it says 'cannot authenticate the phone'. I can connect the phone to my PC with my IBM supplied 'bluetooth places' but it connects for just a few seconds and then the phone disconnects it. The PC reports that the phone has connected and then disconnected and I can also see if from the phone (the little connection icon) that it is disconnecting so fast. Cable and IR work fine. Only the problem with BT. This has happened with the PC Suite that was delivered with the phone and also with the latest version. here's my setup info:
PC Connectivity Solution:
Version 8.15.0.0
Nokia Connectivity Cable Driver:
Version 6.86.11.0
Operating system:
Microsoft Windows XP 32-bit Edition, Service Pack 2
Language: English
Language for non-Unicode programs: English
Detected Internet browsers:
- Microsoft Internet Explorer 7.0
- Mozilla Firefox 2.0 (Default browser)
Detected Bluetooth stacks:
- Microsoft (Version: 5.1.2600, Build: 2180)
- Broadcomm (Version: 3.0.1, Build: 912)
When I try to connect with PC suite it say I have WIDICOM Buletooth stack which will try to connect but the Microsoft stack will not work because it says I am missing drivers (I have yet to find out where I get them).
Anyone know how to fix this?
Rgds,
RDWirr

Cannot authenticate the phone : brand new 6085

I have just bought a brand new 6085 and wish to connect via Bluetooth to my laprop ( full details below) . Depsite having a perfect working BlueTooth set up prior to installing PC Suite , I continually get the
'Cannot authenticate the phone'
error message after I have entered the passkey on the phone.
I have spent about 6 hours checking all aspects of BT , which is otherwise working fine.
What is going on? If I can't get a solution promptly, sadly this phone , which in theory is ideal for my needs, is going back to the shop.
Thanks for your help,
Operating system:
Microsoft Windows XP
Build 2600
Service Pack 2
Language: English
Language for non-Unicode programs: English
Locale: English
Input language: English
Nokia PC Suite:
Version 6.84.10.4
Language: English
Connectivity Cable Drivers:
Version 6.84.4.0
PC Connectivity Solution:
Version 7.22.7.1
Microsoft Outlook:
Version 11.0
Build 8118
Bluetooth stacks:
WIDCOMM Bluetooth stack
Version 5.0.1
Build 1200
Microsoft Bluetooth stack
Version 5.1.2600
Build 2180

Cannot authenticate the phone same stupid problem (with settings). please help

"Cannot Authenticate the Phone" with IBM T60 and N...

Hello!
I've been reading through the various posts on the "cannot authenticate the phone" -issue, yet after uninstalling & installing BT stack & PC Suite various times my problem still persists. I've also followed every single piece of instruction I've found on uninstalling Microsoft BT stack, yet PC Suite still reports that it is available.
I can connect from my laptop to the dial-up networking service on the phone, and I am able to connect from the phone to the headset service on my laptop, so BT stack & pairing works ok; I am also able to synchronise the phone via IR => problem must be somewhere in the PC Suite's bluetooth sections.
Is there any flags to enable debugging level logs in PC Suite? I would SOOO MUCH like to see what the hell goes wrong in there.
Or is there *any* way of getting this to work??
Getting pretty tired with this..
Rgrds,
sakuvee.
Operating system:
Microsoft Windows XP
Build 2600
Service Pack 2
Language: English (United States)
Language for non-Unicode programs: English (United States)
Locale: English (United States)
Input language: Finnish
Nokia PC Suite:
Version 6.81.13.0
Language: English
Connectivity Cable Drivers:
Version 6.81.1.2
Microsoft Outlook:
Version 11.0
Build 8010
Bluetooth stacks:
Microsoft Bluetooth stack
Version 5.1.2600.2180
WIDCOMM Bluetooth stack
Version 5.0.1
Build 3200
BT device: Thinkpad Bluetooth with Enhanced Data Rate
BT firmware: Broadcom 2.1.92.108, HCI 2.0 206C, LMP 2.0 415C
BT driver: Broadcom, 1.8.2006, 5.0.1.3200
Phone: V 3.0617.0.6, 03-05-2006, RM-92, Nokia N80 (03)
---Message Edited by sakuvee on 19-Oct-2006
02:46 PM

OK - here's what I did to FINALLY get it working:
1) Uninstall PC Suite (from Add Remove Programs)
2) Uninstall Nokia Connectivity Solution
3) Remove C:\Documents and Settings\[uid]\Application Data\Nokia, ...\\Application Data\[uid]\PC Suite, ...\All Users\Application Data\PC Suite, C:\Program Files\Common Files\Nokia, C:\Program Files\Nokia. Basically all Nokia directories left behind by Nokia uninstallers.
4) Restart machine
5) Run PC Suite Cleaner (all options one at a time, except the diagnostics, don't restart although it recommends to do so)
6) Restart machine
7) Manually clean all typelibs, activex-objects, device-ids and other registry entries linking to or containing Nokia related stuff from registry using regedit.exe
8) Restart machine
9) Install PC Suite
10) Unpair phone (from laptop and from phone)
11) Run Get Connected Wizard

Cannot authenticate the phone

Version 6.86.9.3 of Nokia PC Suite fails with error message:
"Cannot authenticate the phone"
It does not matter what I try (rebooting unpairing/repairing, etc.) it does not work.
The previous version of the software worked fine.
My setup:
Phone: Nokia 6233
Windows 2000 Server
BlueSoleil Bluetooth USB key.
BlueSoleil 2.3.0.1 Release 060802
Stack Version: 05.04.11.20060622
I downloaded a very large update from Nokia, and upgraded for a better experience, however it resulted in a worse experience. I feel very bitter about upgrading.
Do Nokia even monitor these message boards? I've seen others with similar problems but with no solid answers from Nokia other than, "are you sure you plugged it in and paired it properly".

Yes, I have tried your suggestion and it did not work.
I have checked permissions using a sysinternals tools. There are no permission problems, although the following two files were modified during the failed connection attempt.
C:\Documents and Settings\All Users.WINNT\Application Data\PC Suite\ConfServer\Settings.xml
C:\Documents and Settings\All Users.WINNT\Application Data\PC Suite\ConfServer\Nokia;SuiteConf;RM-145;359727000098587.xml
I am curious to see how long it takes Nokia to resolve this error I am getting. I know I'm not the only one... and I'm not going away until it is fixed.

Cannot authenticate the phone - bluetooth

Please help!!!!!!!!!!!!!!!!
I got the error message like "Cannot authenticate the phone" when connecting to my bluetooth device, an BlueSoleil
What happened? Any tips to solv this problem?
Im tired of this **bleep**tt,
have done everything, even reinstall windows xp!
my Phone an Nokia 6680
Bluetooth software product version: Bluesoleil 2.1.3.0 VoIP realase 060429
Operating system:
Microsoft Windows XP
Build 2600
Service Pack 2
Language: English (United States)
Language for non-Unicode programs: Swedish (Finland)
Locale: Swedish
Input language: Swedish
Nokia PC Suite:
Version 6.81.13.0
Language: English
Connectivity Cable Drivers:
Version 6.81.1.2
Microsoft Outlook:
Version 11.0
Build 5510
Bluetooth stacks:
Microsoft Bluetooth stack
Version 5.1.2600.2180
IVT Bluetooth stack
Version InstallMessage Edited by webbis on 06-Sep-2006
09:05 PM
Message Edited by webbis on 06-Sep-2006
09:06 PM

I too had this problem. I could connect, but the final authentication failed. I was able to send files using the bluetooth manager (Toshiba).
This was my solution:
Go to the phone's bluetooth pairing (after you've tried to authenticate). See if your computer's name is there (mine was). Select it, then options and finally 'set as authorized'. And it should work.
There's one strange thing: in the about section there's no mention of the Toshiba BT stack, while in 'Get connected' I get both Toshiba and Microsoft BT stack. I'm not sure which one is being used, but hey: it works!
Some info:
Operating system:
Microsoft Windows XP
Build 2600
Service Pack 2
Language: English (United States)
Language for non-Unicode programs: English (United States)
Locale: Dutch (Netherlands)
Input language: English (United States)
Nokia PC Suite:
Version 6.81.13.0
Language: English
Connectivity Cable Drivers:
Version 6.81.1.2
Microsoft Outlook:
Version 11.0
Build 8010
Bluetooth stack:
Microsoft Bluetooth stack
Version 5.1.2600.2180Message Edited by doctorh on 23-Sep-2006
10:26 AM
Message Edited by doctorh on 23-Sep-2006
10:26 AM

"Cannot authenticate the phone" Nokia 6021

Hello,
I am trying to connect to my phone through Nokia PC Suite using bluethooth dongle but often get this message: "Cannot authenticate the phone". Following is information relevant to my system:
PC Connectivity Solution:
Version 8.22.2.0
[Nokia Connectivity Cable Driver:]
Version 7.0.2.0
Operating system:
Microsoft Windows Vista 32-bit Edition
Language: English
Language for non-Unicode programs: English
Detected Internet browsers:
- Microsoft Internet Explorer 7.0 (Default browser)
Detected Bluetooth stacks:
- Microsoft (Version: 6.0.6000, Build: 16386)
I would appreciate help as my phone memory is full and I want to transfer info to my PC.
Thanks

Hi,
What you can do is donot insert the dongle before switching on the PC. Switch on the PC first, open Nokia PC Suite and then insert dongle (donot try to switch on the PC when dongle is already inserted in the PC) connect your Phone and now try to connect your phone with the PC. If still it fails, why donot you try it using latest Nokia PC Suite 7.0.7.0 ??? Guys i am not 100% if this could help you but still you can try Best of luck.

Problem when try to use ACSE+ Windows AD to authenticate two kind of WLAN c

I met a problem when try to use ACSE+ Windows AD to authenticate two kind of WLAN clients:
1. Background:
We have two WLAN: staff and student, both of them will use PEAP-MSCHAPv2, ACSE will be the Radius server, it will use Windows AD's user database. In AD, they create two groups: staff and student. The testing account for staff is staff1, the testing account for student is student1.
2. Problem:
If student1 try to associate to staff WLAN, since both staff and student WLAN using the same authentication method, the auth request will be send to AD user database, since student1 is a valid user account in AD, then it will pass the authentication, then it will join the staff WLAN. How to prevent this happen?
3. Potential solution and its limitation:
1) Use group mapping in ACSE(Dynamic VLAN Assignment with WLCs based on ACS to Active Directory Group Mapping), but ACS can only support group mapping for those groups that have no more than 500 users. But the student group will definitely exceed 500 users, how to solve it?
2) Use methods like âRestrict WLAN Access based on SSID with WLC and Cisco Secure ACSâ: Configure DNIS with ssid name in NAR of ACSE, but since DNIS/NAR is only configurable in ACSE, don't know if AD support it or not, is there any options in AD like DNIS/NAR in ACSE?
Thanks for any suggestions!

I think the documentation for ACS states:
ACS can only support group mapping for users who belong to 500 or fewer Windows groups
I read that as, If a user belongs to >500 Windows Group, ACS can't map it. The group can have over 500 users, its just those users can't belong to more than 500 groups.

Windows update cannot run because service is not working.

Thinkpad E545, Windows 7 (64 bit) Professional. When I attempt to run Windows Update I get the message "Windows update cannot currently check for updates because the service is not working." Microsoft Fix-It does not help. I found a YouTube posted by Richard Lloyd and followed the steps: the Windows Update service is running, the Background service is running. Several web sources including Microsoft point to an Intel RST driver. I downloaded this driver g1io15ww.exe and ran the file, but still no joy. A solution would be welcome, and Happy Thanksgiving. -- Alan

Hello and welcome,
Your laptop is AMD-based (IIRC) so an Intel driver isn't going to help.
If the update issue is caused by the AHCI driver incorrectly reporting physical sector size (that's what those IRST reports are about) it might be fixed by installing the correct AHCI driver for your laptop:
http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-edge-laptops/thinkpad-edge-e5...
There are other reasons for Win update failures, so this isn't a sure thing. Worth a try, maybe. I've personally only seen this issue with Intel hardware.
Z.
The large print: please read the Community Participation Rules before posting. Include as much information as possible: model, machine type, operating system, and a descriptive subject line. Do not include personal information: serial number, telephone number, email address, etc. The fine print: I do not work for, nor do I speak for Lenovo. Unsolicited private messages will be ignored. ... GeezBlog
English Community Deutsche Community Comunidad en Español Русскоязычное Сообщество

I have itunes in windows xp, but my ipod touch has updated version of itunes. Windows xp cannot get updated itunes. I am having difficulties transferring my music into my computer. Does any one have an idea how to do it?

I have itunes in windows xp, but my ipod touch has updated version of itunes. Windows xp cannot get updated itunes. I am having difficulties transferring my music into my computer. Does any one have an idea how to do it?

iTunes 11 is compatible with
Windows System Requirements
PC with a 1GHz Intel or AMD processor and 512MB of RAM
Windows XP Service Pack 2 or later, 32-bit editions of Windows Vista, Windows 7, or Windows 8
Try:
Trouble installing iTunes or QuickTime for Windows

Time Capsule on Windows 7 : cannot connect to the hardrive

Hello All,
From sudden i cannot access to my Timecapsule Hardrive.
Right now the issue are :
I cant ping it (No answer)
I can see it under Networks but cannot open it.
I tried :
To re install Airport utility and Bonjour
Downgrade the firmware of the time capsule.
Please find some screenshots of my network.
Thanks for your help.

Let's try the following document with that one.
iTunes for Windows: iTunes cannot contact the iPhone, iPad, or iPod software update server
(If the "Automatically detect settings" checkbox is already checked, try unchecking and rechecking it and clicking OK.)

Photoshop CS v.8 open windows in Windows 7 cannot be moved, maximized, or closed

I just installed my Photoshop CS Version 8 into Windows 7 on a new PC. When the program is opened, the File Browser icon does not toggle, and I have to go to File menu to open Browse. The browser window now cannot be moved, maximized, or closed. The same applies to any image that is opened. Notwithstanding, all the functions of Photoshop are working OK. Since Adobe no longer supports this version, I need solution advice from anyone.
Al Phillips

To All the Answers,
I tried all that was suggested and none of them worked. I wish Adobe would come through with an answer!?
Al Phillips

Windows AD cannot authenticate if BI platform UNIX?

Similar Messages

Maybe you are looking for