Integration of the EBS - group permission question

I have installation OBIEE thanks to the integration of the EBS. The part of authentication works very well. I have problems with my group permissions.

I created two responsibilities EBS, groups of RPD and presentation catalog groups with the same exact name:
-BI administrator
-BI user
The BI administrator group has admin access and BI users group has just basic access.

Here is what I noticed:
1. when a user connects to the EBS and clicks on the responsibility of the administrator of BI, it gets successfully in OBIEE with admin access. If the same user opens a new browser or even using a different computer and selects the user BI, it still gets admin access.

2. I have the Server BI and BI Presentation Server. I use the same user and this time click the BI user first. He gets successfully in OBIEE with basic access. If the same user opens a browser or use another computer and selects the responsibility of BI administrator, it still gets access to basic user.

There is no "Logout" button when you configure the EBS with OBIEE integration. I think the problem is that the group permission is stored in the memory of the server somewhere usually, it gets deleted when the user clicks on logout, but it is not available. Does anyone know how I work around this problem?

Hello

to add a logoff link, you can add this entry in your Auth section in instanceconfig.xml file

http://caeobie03.caecorp.CAE.com:7001/Analytics/saw.dll?logoff

THX

Tags: Business Intelligence

Details of authentication

Timestamp of source	2014-05-15 11:43:19.064
Receipt of timestamp	2014-05-15 11:43:19.065
Policy Server	RADIUS
Event	5200 successful authentication

All user GROUPS are observed:

	fake
AD ExternalGroups	XX/users/admexch
AD ExternalGroups	XX/users/glkdp
AD ExternalGroups	x/users/gl journal writing
AD ExternalGroups	XX/users/pcanywhere
AD ExternalGroups	XX/users/wifidata
AD ExternalGroups	XX/computer/campus/recipients/aa computer
AD ExternalGroups	XX/computer/campus/recipients/aa business and cited
AD ExternalGroups	campus of XX/computer/campus/recipients/aa
AD ExternalGroups	XX/users/aiga_creches
AD ExternalGroups	XX/users/domain admins
AD ExternalGroups	XX/users/used. the domain
AD ExternalGroups	XX/users/replication group does the rodc password is denied
AD ExternalGroups	XX/microsoft exchange security groups/exchange view only administrators
AD ExternalGroups	Directors of XX/microsoft exchange security groups Exchange public folders
AD ExternalGroups	XX/users/certsvc_dcom_access
AD ExternalGroups	XX/builtin/Administrators
AD ExternalGroups	XX/builtin/users
AD ExternalGroups	XX/builtin/account operators
AD ExternalGroups	XX/builtin/server operators
AD ExternalGroups	distance of XX/builtin/users of the office to
AD ExternalGroups	XX/builtin/access dcom certificate service
RADIUS user name	xx\cennelin
IP address of the device	172.25.2.87
Called-Station-ID	00: 3A: 98:A5:3E:20
CiscoAVPair	SSID = CAMPUS
SSID	campus of

2 NO OK no later than:

Details of authentication

Timestamp of source	2014-05-15 16:17:35.69
Receipt of timestamp	2014-05-15 16:17:35.69
Policy Server	RADIUS
Event	Endpoint 5434 conducted several failed authentications of the same scenario
Reason for failure	15039 rejected by authorization profile
Resolution	Authorization with the attribute ACCESS_REJECT profile was chosen due to the corresponding authorization rule. Check the appropriate rule political authorization results.
First cause	Selected authorization profile contains ACCESS_REJECT attribute

.../...

Only 3 user groups are observed:

Other attributes

ConfigVersionId	5
Port of the device	1645
DestinationPort	1812
RadiusPacketType	AccessRequest
Username	host/xxxxxxxxxxxx
Protocol	RADIUS
NAS-IP-Address	172.25.2.80
NAS-Port	51517
Framed-MTU	1400
State	37CPMSessionID = b0140a6f0000C2E15374CC7F; 32SessionID = RADIUS/189518899/49890;
Cisco-nas-port	51517
IsEndpointInRejectMode	fake
AcsSessionID	RADIUS/189518899/49890
DetailedInfo	Successful authentication
SelectedAuthenticationIdentityStores	CDs
DomaineAD	XXXXXXXXXXX
AuthorizationPolicyMatchedRule	By default
CPMSessionID	b0140a6f0000C2E15374CC7F
EndPointMACAddress	00-xxxxxxxxxxxx
ISEPolicySetName	By default
AllowedProtocolMatchedRule	CDM-PC-PEAP
IdentitySelectionMatchedRule	By default
HostIdentityGroup	Endpoint identity groups: profile: workstation
Model name	Cisco
Location	Location #All locations #Site - CDM
Type of device	Device Type #All type #Cisco - terminals
IdentityAccessRestricted	fake
AD ExternalGroups	XX/users/computers in the domain
AD ExternalGroups	XX/users/certsvc_dcom_access
AD ExternalGroups	XX/builtin/access dcom certificate service
Called-Station-ID	54:75:D0:DC:5 B: 7 C
CiscoAVPair	SSID = CAMPUS

If you have an idea, thank you very much,

Kind regards

Eventually, the AD he loses connectivity with ISE

Security group create a problem at the EBS UM provisioning
Hi Expert,

Currently, there are four security groups in my search for Lookup.EBS.SecurityGroup. Who I had reconciled EBS system.
If I add a liability without security group or with the safety of the 'STANDARD' group, it's okay. But I'm unable to add accountability as well as of other than STANDARD security group.
Is this problem of the IOM or EBS application problem? How can I solve it?

Kind regards
louisette
Yes this is EBS application deliver nothing to do with the IOM.

When we install application EBS, STANDARD security group get configured automatically.

When we create custom security group, we need to run 2 programs in system EBS which is responsible to set up the security groups with the set of APPLICATIONS.

I don't remember the name of the task of these programs in EBS. But, ask your administrator to do so. If you have admin EBS.

Let me know the results.

Kind regards
Nayan

Integration of the IPM with EBS
Everybody, hell

My IPM server: 11.1.1.3 version (linux)
Server version: EBS R12

I m following the sub process.

Document download (for KFI) through document capture, then it goes to the IPM server.
Then, in Server EBS, click the zoom button, browser task IPM page is open.
Open as user1:
Push data into EBS seeking task IPM viewer data.
Save it in EBS. Click on the approval of the Bill, give an authorization to obtain data to a particular user.

Log in as User2: not found a job.

Error in the BPEL instance is as below:

* < part name = "summary" > *.
* < Summary > Exception occurred when the link was invoked. Exception occurred during invocation of the JCA binding: "binding JCA execute operations reference 'Get_InvoiceTransaction' have to: Interaction processing error." Error during execution of the BPEL_RETRIEVEINVOICE processing. Interaction AXF_VALIDATION_IMPORT_PKG$ RET API. An error occurred during the processing of the interaction to call the BPEL_RETRIEVEINVOICE. AXF_VALIDATION_IMPORT_PKG$ RET API. Cause: java.sql.SQLException: invalid name model: AXF. AXF_VALIDATION_IMPORT_PKG_R_I '.» The called JCA adapter threw an exception of resource. Please review the error message above carefully to determine a resolution. < / Summary > *.
* < / piece > *.
* < part name = 'detail' > *.
* < model name invalid detail >: AXF. AXF_VALIDATION_IMPORT_PKG_R_I < / detail > *.

If someone can tell what packages are used to integrate IPM and EBS.

Here are the names of sql file for the integration of the IPM with EBS:

PATH\CREATE_TEMP_TABLE. SQL;
PATH\AXF_VALIDATION_IMPORT_PKG.SQL; s
PATH\AXF_VALIDATION_IMPORT_PKG_BODY. SQL;
PATH\AXF_PREIMPORT_CUSTOM_PKG. SQL;
PATH\AXF_PREIMPORT_CUSTOM_PKG_BODY. SQL;
PATH\BPEL_11G_IMPORTINVOICE. SQL;
PATH\BPEL_PLACEIPMVALIDATIONHOLDSON. SQL;
PATH\BPEL_PREIMPORTCLEANUP. SQL;
PATH\BPEL_UPDATEHOLDLIST. SQL;
PATH\BPEL_VALIDATEINVOICE. SQL;
PATH\BPEL_RETRIEVEINVOICE. SQL;
PATH\BPEL_GETORGID. SQL;
PATH\EBS_CREATE_HOLD_LOOKUP. SQL;

Please answer me ASAP.

Regarding

Jyoti
The problem with the documentation, is that there is no mention of these SQL files that need enforcement. Those that must be performed and visible in the schema of the user of the DB that you configured in your DB Adapater. There are many stored procedures using the model of Accelerator AXF appearing in these SQL. I believe (from memory) is grant it access to one, but I do not see that in your list, and you list looks like also a bit incomplete, which version of the model are you using?

Integration with the secure web service IS deployed on EBS

Hello experts,
I have a REST webservice deployed to an Instance of the EBS. I try to call the web service using a mobile application in the ADF. However, the web service is secure and requires security settings to be sent in the request header.
Anyone can recall or explain how I can add a custom header to the object of the application for the REST web service? Any help will be appreciated.
Thank you
Abhishek

Hi Abhishek,

You can do the following:

String theUsername = "abc";

String thePassword = "pass";

String userPassword = theUsername + ': ' + thePassword.

String encoding = new sun.misc.BASE64Encoder () .encode (userPassword.getBytes ());

restServiceAdapter.addRequestProperty ("Authorization", "Basic" + coding);

If you use Webservice DataControl, then automatically the connection information in the login form is injected into the webservice framework.

Kind regards

Deepak

Help - automation of the ad groups in assigning roles for a virtual machine

Hi all, I have this doubt.
We are the migration of vSphere 4.1 and 5.1
Not by update manager, but manually adding hosts an accumulation 5.1!
Here's the thing, each virtual machine that will be imported/created/deployed to this new vCenter 5.1 will have a corresponding pre configuration of group by our admin guy!
For — for example, if the virtual computer name is vm_0123, a group called "SVR_VM_0123" would be ready and waiting to be assigned to this specific virtual machine, and then to a role. And this permission will be set at the virtual machine level.
And now, all the virtual machines that will be added to 4.1 and 5.1 have their configuration of groups!
So can automate us the "attribution" permissions on each computer virtual imported/created (a role common to the respective groups) through PowerCLI?
Questions or suggestions are welcome!
Thank you

I assume you have the virtual computer name in the variable $vmName, then you could do

$vm = get-VM-name $vmName

New-VIPermission-body $vm - main ("SVR_" + $vmName) - role $role

You can place these lines in a loop.

This could be for example a loop, controlled by the content of a CSV file.

Something like that

Import-Csv C:\vmnames.csv | %{

$vm = get - VM - name _.vmName $

New-VIPermission-body $vm - main ("SVR_" + $_.vmName)-role $_.role

}

This means that the CSV file should look like this

"vmName"; "" role.

"vm1', 'administrator '.

"vm2', 'read only '.

Start several Instances of ABC to a single Instance of the EBS provider
Dears

Currently an initiative of integration, we are integrating next design flow:

(1) we have a single applicant request; We design the related ABC applicant
(2) we use on single EBS. We use the EBS synchronization operation
(3) we have 2 provider ABC

Our business requirement is:
If a single message is derived from the application of the applicant by the applicant, ABC, it must be published both applications via ABC provider provider components. In fact an instance of ABC single applicant will create, only one instance of the EBS and 2 provider ABC instance created

Can you please suggest how we can design the EBS service in such a way that 2 instances of provider ABC will be created from single instance of EBS

Thanks in advance

Best regards

Mohamed Chargui
The answer to your question is Yes, one Ombudsman can invoke two service calls at the same time as well.
First of all, define your service references in the composite.xml
Once you have done this, you can add any number of routing rules for each operation defined in the Ombudsman. In your case, you need to add two static routing rules within the same operation in the Ombudsman file. You can also select if the calls will be sequential or parallel by selecting the correct value in the drop down within the routing rule. Each routing rule will call a service reference in your case.

Search engine Google which is integrated in the browser settings

Search engine Google is integrated into the browser. How can I set it so the search results will be shown on a new window, as the fact of the toolbar Google and in the same window (after entry)?

in your topic: configuration settings
- Browser.Search.openintab user set to true
See https://support.mozilla.com/questions/899856

with or without the parameter, you can do something, concluded the
Search bar or in the location bar to open in a new tab with "Alt + Enter".

change the driver existing (newbie question)?

Hello

We try to change an existing driver, but we are fairly new to Labview. We have a few generic questions, but I'll give you some specific info on what we are trying to do as well.

We downloaded a driver (for NDI Polaris motion tracker) of the site NOR and want to change that a little bit.

The zip file contains a subdirectory ndipolaris with 2 files .llb and some .mnu files.

Our first problem is that if we just open the .llb files, there are a lot of vi in there (including examples of work), but there is no project files, or class definitions. What seems to prevent us from creating a new class that derives from a class that is apparently set in the driver (but which we don't seem to have the definition). Maybe a driver can be distributed without these definitions such as you can use it only, but not change?

Our second problem is that if we use the method of 'create the new existing driver driver', the Polaris NDI does not appear in the list of existing drivers. (It has copied the directory ndipolaris to the labview/instr.lib directory and restarted labview). (This is probably not a major problem that we could change just the existing driver instead).

Note that the existing driver works well. We just add a timestamp in the data. The existing driver apparently has a class (called "Info Tool", which is a cluster of a few different types of data) for all these info than the Polaris returns, so we thought to change this class or to derive a new class with added timestamp.

Sorry if this is a trivial question. Thanks for the pointers.

Kris

Hi Dennis

Thanks to your suggestions, we settled it. We were baffled by the fact that you cannot add controls for "schema". Here's what we did:

The data group was built using the "bundle by name" function, which takes a bunch of 'model' as input. It is this model that we had to change. However, as the model was a 'constant', it does not appear on the front panel and so we could not add any controls to it. For example, when you view the block diagram, we right-click on the clustering model, converted to a control, and then passed to the façade, created a new control (string) on the front panel and place in the control corresponding to the cluster model. Then we moved to the block diagram and convert our cluster model to a 'constant '.

Not simple I think, but once you know (get help from you and read a bit of the operating instructions...), it's ok.

Thanks again

Kris

Integration of the server project and AX 2009

Hello
We use MS Dynamics AX 2009, I want to have Project 2007 server integration. I installed
(1) connector business Dotnet
synchronization for project server service 2)
proxy server of project 3)
Project Server 4)
When I try to project server (project server integration -
(> Set up the integration of the Microsoft project-> integration server) shows the status of the installation 'in progress' and I was not able to activate when I try to activate the integration is throwing the following error message: "integration cannot be enabled for project server until all installation components have been installed completely" kindly guide me to solve this problem.

Microsoft Dynamics support, this not the right forum for your question, the following link will take you to the appropriate community:

Microsoft Dynamics Community - AX home

Windows SBS 2008 - user is unable to RDP in even through that it's in the appropriate groups

Hi guys,.
Problem: A user has been accidentally deleted from a Windows SBS 2008 server running Active Directory and we have been unable to grant him the rights of RDP - the error message indicates that the account must be granted "logon through Terminal Services right.

The installer: A single Windows SBS 2008 server running hyper-VM with a unique virtual machine on it which manages the TS licenses

Tried to bugs/more information:

Things that we tried to do to solve the problem (all done via Active Directory users and computers)
- He added to the administrators and remote desktop users groups
- He added to the users group to the remote desktop on the virtual machine (the account can now connect to the virtual machine at least)
- Cloned an existing account on the primary server
- Removed and added the account through the SBS console and added to the admin and RDP groups (on the dedicated server and virtual machine)
None of them seems to have solved the problem. There are currently 2 free licenses of TS, so I don't think it's a licensing issue.

It's almost as if there is a top group policy setting or similar which replaces the user groups is added to, but I don't know where to look for here.

I've already made sure that the user do not have TS access turned off in the settings of the user's

Any suggestions?
Hello

Your question is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the Server on TechNet. Please post your question in the Technet forums. You can follow the link to your question:

http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer

Integration of the EBS - group permission question

Similar Questions

Details of authentication

Details of authentication

Other attributes

Maybe you are looking for