LDAP for users / RPD for groups.  How?

I know this has been asked before but I have not found a good explanation.
We have implemented OBI to authenticate to our LDAP.
But I need to assign users to groups created in the repository.
Adding groups to the RPD and import ldap users and assigning them to groups do not work as their passwords are empty.

It is not surprising that Guid to the developer on page 124 says:
"When a user is in both the repository and source external (such as LDAP servers), the".
local repository definition by the user takes precedence. This restriction allows the Oracle company
Intelligence Server Administrator to override users who exist in a system of external security. »

So how to proceed?

On the same page it says:
Groups are defined in the repository. However, if the user lists are stored on LDAP servers, the
group membership information must be sourced from a database table.

Problem is that I have not experienced enough yet to understand how to implement that. Anyone have suggestion or can point to detailed information on the subject?

Thank you, E

Once you have configured your LDAP on the RPD information, do not import users.
OLIVIER will connect to the LDAP server and complete the authentication part.
Now in order to to allow, you would need an external table. Here are some instructions on how to put in place which:

http://www.rittmanmead.com/2007/05/21/using-initialization-blocks-with-LDAP-and-database-queries-to-control-authentication-and-authorization/

Enjoy!

Tags: Business Intelligence

Similar Questions

  • The opportunity to identify a specific storage for each user or security group.

    Hi all

    I asked how to specify storage for each user or security group on the server of the University Complutense of Madrid. ex. I want user 'weblogic' unable to download a document on the server of the University Complutense of Madrid, more than a gigabyte. the user can check in several files, but thetotal space for all files are not a gigabyte.

    Thank you

    I asked how to specify storage for each user or security group on the server of the University Complutense of Madrid. ex. I want user 'weblogic' unable to download a document on the server of the University Complutense of Madrid, more than a gigabyte. the user can check in several files and the total space for all files not exceeding a gigabyte.

    You can write a rule to achieve this where in the xStorageRule is evaluated based on any set of metadata such as dDocAuthor or dDocSecurityGroup etc., or a combination of metadata.

  • Cisco VCS and LDAP for authentication of users

    I have a question about setting up LDAP for authentication of the user on the VCS. I want to have redundancy in my LDAP link. I believe that this is possible by setting a FULL domain name to the address of the LDAP server, then selecting a type of SRV resolution. What I'm not clear on is what the value for the server address would be if I used actually as SRV type of resolution. I should also add that I am looking to use TLS

    To clarify, if my AD domain name is myad.netcraftsmen.net. I have set the field as server address:

    myad.netcraftsmen.NET: assuming that VCS properly interrogate the DNS for the _service._proto correct parameters?

    or would I need to create an SRV record to that effect and set the field server address with the address (including the fields of _service._proto)

    or I need to specify one of the SRV records formats used by MS AD areas (there are several).

    If the latter, then what SRV record for TLS. I don't see records with port 389 (non-secure).

    My intuition tells me that this is probably the first option, but I could be far away.

    Anyway, thanks in advance for any input.

    Kind regards

    Bill

    Hi William,.

    I just checked it on a X6.1 VCS, and it seems that VCS searches SRV _ldap._tcp.domain (where 'domain' has been entered as the server address), both when the encryption is set to 'None' and 'TLS '.

    Hope this helps,

    Andreas

  • How to limit some users from a group of tunnel with access hours

    I created under ldap attribute-map and applied to the AD server used for authentication. Then created the beach hourly and applied to group policy.

    In ad server for users who need access to the VPN only during office hours, I put "OfficeHours" value in the field office. However, for users who need access to the vpn for 24 hours, I left this field empty.

    Now, only users with the "OfficeHours" value in the field of the Office are to connect in the specified time interval. However other users never connect. How can I solve this problem?

    LDAP attribute-map AccessHours_LDAPMAP

    name of the map msNPAllowDialin Tunneling protocols

    msNPAllowDialin card-value FALSE 1

    map-value msNPAllowDialin 20 TRUE

    physicalDeliveryOfficeName access-hours card name

    time-range OfficeHours

    periodical Monday Tuesday Wednesday Thursday Saturday Sunday from 08:30 to 18:00

    attributes of Group Policy GroupPolicy_employees.domain.com

    WINS server no

    4.2.2.2 DNS server value

    VPN-access-hour value OfficeHours

    client ssl-VPN-tunnel-Protocol ikev2

    by default no

    WebVPN

    AnyConnect value domain.com_client_profile type user profiles

    Thank you, Rachel.

    The soultion you suggest works.

    Thank you for taking the time to solve this problem.

    Concerning

    Harvinder

  • Security using ldap and the RPD users

    Hello

    I need 5 dummy users in RPD. I don't want to give them adminstrator privileges because they are not allowed to see everything in my dashboard. My authentication works by using an LDAP server, is it possible that I can leave these fake users login as well as those on the LDAP server?

    I don't think it's possible to use the default Server BI and LDAP authentication. You can still have multiple LDAP servers for authentication. You can ask 5 service accounts to be created in the LDAP for OBIEE Protocol and assign privileges accordingly so they see only needed dashboards.

    Please allow the useful points,

    Thank you
    -Laurence.

  • How to add the user to the Group?

    HY,
    Let's say I'm new to application Express 3.2.1 :)... I searched for exmple or no matter how how to add the user in the Group (at the level of the PL/SQL application).
    I know wwv_flow_group_users Traoré is an opinion not a table. I also know thet CREATE_USER_GROUP procedure create us group, and with the CURRENT_USER_IN_GROUP function, we see if the user is in the selectet group.

    But again, my question is how to add the user to the Group?

    Thank you
    Andrej

    Published by: user10719915 on October 16, 2009 12:18 AM

    Hello

    It will be colon delimited.

    Concerning

    Paul

  • Requirements of LDAP for SSL - VPN on ASR 1002

    Hi all

    I intend to implement SSL - VPN (AnyConnect) on a rputer ASR 1002 running IOS - XE Software Version 15.1 (3) S2.

    I need to use LDAP for authentication of users and need to understand what are the requirements for RADIUS/GANYMEDE use LDAP.

    What I have to use Cisco ACS or can I use something like Microsoft IAS or free Raduis?

    Any helo will be greatly appreciated.

    Thank you

    Dmitry.

    Yes, you can use either use LDAP, Radius or Ganymede protocols to authenticate users of SSL VPN.

    You can use no matter what authentication server (doesn't have to be Cisco ACS), as long as they have either 3 supports authentication (ldap, radius or Ganymede) protocols.

    Hope that answers your question.

  • Change the display time for grouped objects

    Hello, I have problems to change the display time for the grouped items. I use 7 Captivate and I love how now grouped items display only as an element in the timeline because it reduces the number of lines visiblein the chronology for each object on a slide. However, now that the grouped objects is more individually appear in the timeline panel, I can't see all the adjustments for group objects together.

    If someone else has had this problem and is there a work around? My main problem is that if I need to extend or shorten the audio to the slide, and I assigned a tip action to be grouped in order to adjust the grouped object to match the audio, I must now separate adjust, regroup, then reset the advanced action by using the name of the new group. It's frustrating and tedious.

    To enlarge and view the items grouped on the timeline, you need to click the arrow next to the group name. Once you develop, you can select the individual object and adjust the timings.

    Alternatively, you can select the individual object in the Group on the slide and adjust the timing of the accordion of timing. You can do it without separate.

    Anthony

  • FOR ADMINS - how to choose the right answer on a thread on this forum?

    FOR ADMINS - how to choose the right answer on a thread on this forum?

    For example, on:

    "missing plug-in" for safari after you download!

    http://forums.Adobe.com/thread/897677?TSTART=0

    It does not show on 5.1 Safari and Firefox on Mac OS X 10.6.8 6.0.2.

    Thank you!

    The normal user (non-admin type), which can mark a reply as useful or appropriate is the user who started the discussion.

  • on the left are 3 red balls, yello, green, who go around in a circle. When I click it it says download assistance, what is it for and how can I learn more about them?

    to the left of the URL are 3 balls, red, yellow, green, who go around in a circle. When I click it it says download assistance, what is it for and how can I learn more about them?

    An add-on (extension) for download videos from Youtube-like on your hard drive

    If this answer solved your problem, please click 'Solved It' next to this response when connected to the forum.

    Not related to your question, but...

    You may need to update some plug-ins. Check your plug-ins and update if necessary:

  • I got an iphone 4 to a friend in the Canada. I want to use it here in the Philippines as a regular iPad reserved for wifi, how can I use it without sim card? It does not pass the activation page. Help please?

    I got an iphone 4 to a friend in the Canada. I want to use it here in the Philippines as a regular iPad reserved for wifi, how can I use it without sim card? It does not pass the activation page. Help please?

    You can activate it without a SIM card. If it is locked, it takes a SIM card by the carrier, for it is locked. The SIM card should not be linked to an active line of service, but it must be present to activate it.

  • Backup of property intellectual for iC-how long should it take?

    Hello

    Backup of property intellectual for iC-how long should it take?

    Was support for 12 hours and only at half way.

    The amount of data and what is your connection?

    There is no possible way to answer your question. How long is a piece of string?

  • Soft pictures for Mac: how to determine the size of the image file

    Question: in the Photos for Mac, how can I determine the size of a photo or a video file

    Set-up the info panel does not include the size of the file.

    Furthermore, I don't see any place where I can do a "show in finder" to find the information in this way.

    Thank you!

    Can you not with the right button on the image file in the folder, the images are stored in, select "Get Info" and then find the size of the file in this way?

  • I can't send messages, whatsapp for group discussions and I think that is the update of ios software that is not compatible with my iphone 5 s

    I can't send messages, whatsapp for group discussions and I feel really lost. my friends can't receive my message and I am only able to send individual text messages. I think that its because of the version update of ios which is not compatible with my iphone 5 s. is a solution to this problem?

    I have the same problem, started this morning.

    I'm in iOS 9.1, using the iPhone 6. Don't know what happened, but I have also opened a disturbance with Whatsapp support as well.

    A focus group work, group chat messages cannot be delivered. Individual messages are working properly. I tried to remove and reinstall the application, remove the discussion group and recreate, all has not helped.

    A lack of ideas.

  • If I have a macbook but parallel platform for vmware to run windows for mac, how to make the windows side to recognize the connection wireless from my mac

    If I have a macbook but parallel platform for vmware to run windows for mac, how to make the windows side to recognize the connection wireless from my mac

    Hello

    -You use Boot Camp as the Boot Manager? If so, make sure that all boot camp for Windows 7 drivers are installed.

    -You receive an error message?

    If you use Boot Camp, I suggest yo 1All operations from the below mentioned link and check if the problem persists.

    Boot Camp: Windows 7 Installation, frequently asked questions

    http://support.Apple.com/kb/HT3986

    For reference:

    Support for Boot Camp

    http://www.Apple.com/support/Bootcamp/

    Hope this information helps.

Maybe you are looking for

  • How can I keep the files on the desktop unlocked

    -ESES El Capitan.  iBook Pro 15 "end 2013 The Recycle Bin does not eliminate unless I restart the computer.

  • IMAQ color image scale

    Hello I am trying to trace an image using a table 2D-data using IMAQ points. Creating a grayscale image is fairly simple, but is it possible to display the image as a spectral color image? i.e. Red corresponds to higher values, of the lowest and gree

  • Display strange scrolling

    Hello I have a W520 in a mini dock 170W. I have two screens connected to DVI and uses the W520 display as a third monitor. The main display is a 24 "1920 x 1200 running. It is in the Center. The left screen is the W520 and the right screen is a 21 "1

  • My system restore no longer works on my computer

    It has suddenly stopped working and I tried different things, I found on the internet for tackling the problem, but nothing has worked.  I need help!

  • Xperia Z3 with Dualshock 3

    Xperia Z3 works with dualshock 3, or only with dualshock 4?