OBIEE 11G: security when migrating to 10 G problem

Hi all

I've just migrated from OBIEE 10 G to OBIEE 11.1.1.5 on a windows platform. I have configured my LDAP and you can see all of my users Active Directory in the weblogic console. I set up the BISystemUser on our Active Directory as well as in the tool of the EM. I initially could connect as long as user "weblogic" but have no administrative rights (couldn't see the Administator link in analytics), but I found that if I connected directly in the catalogue group of analytical management area and BIAdministrator in the Presentation Server Administrator group rights added then that would give me the Admin rights for the user "weblogic.

My question is:
After the 10G migration why I am I always saw all my groups of 10G catalog such as presentation server administrators? I do not see these users in Enterprise Manager, and I don't see how I can manage these groups to 11G. I would want my 11G installation not having any ideas 10G security but don't know if I can simply delete these former groups through the Director of Analytics link since I had to add the BIAdministrator group for the Presentation Server Administrator group.

Everyone knows about this problem? Any thoughts on how I can clean it up to finish my migration?
Thank you
Jeff

user9225773 wrote:
Hi all

I've just migrated from OBIEE 10 G to OBIEE 11.1.1.5 on a windows platform. I have configured my LDAP and you can see all of my users Active Directory in the weblogic console. I set up the BISystemUser on our Active Directory as well as in the tool of the EM. I initially could connect as long as user "weblogic" but have no administrative rights (couldn't see the Administator link in analytics), but I found that if I connected directly in the catalogue group of analytical management area and BIAdministrator in the Presentation Server Administrator group rights added then that would give me the Admin rights for the user "weblogic.

My question is:
After the 10G migration why I am I always saw all my groups of 10G catalog such as presentation server administrators? I do not see these users in Enterprise Manager, and I don't see how I can manage these groups to 11G. I would want my 11G installation not having any ideas 10G security but don't know if I can simply delete these former groups through the Director of Analytics link since I had to add the BIAdministrator group for the Presentation Server Administrator group.

Everyone knows about this problem? Any thoughts on how I can clean it up to finish my migration?
Thank you
Jeff

Hi Jeff,

Oracle is providing backward compatibility of the groups of catalog for customers who are upgrading to 10g and 11g, but intend depricating them in the near future. So what you see in the section catalogue groups is valid and are not transferred to the application roles that's why you see not in enterprise manager.

So the flow goes like this: user > groups > roles. You also have your catalog in OBIEE version.5 groups to manage your security at the object level.

At this point, its really your decision to get rid of the groups catalogue (if you are using the version 10g for object-level security) and create respective application roles and manager your object level security data and their use.

Thank you
-Laurence.

Tags: Business Intelligence

Similar Questions

  • Filling of the database, users of OBIEE 11g

    Hello

    I would like to know if there is a way to fill OBIEE users and groups database.

    Assume that these users are not stored in Active Directory or LDAP, but in a third party application, within its repository.

    I want to reproduce the same level of security in OBIEE 11 g (= in weblogic?).

    OBIEE 10 g, I think I would change the "authentication" with a direct SQL query initialization block. Same for "authorization".

    But I think it does more in 11g, and everything must be done in Weblogic.

    Authorization, you go through Weblogic. This should help: http://www.rittmanmead.com/2012/03/obiee-11g-security-week-connecting-to-active-directory-and-obtaining-group-membership-from-database-tables/

  • OBIEE 11g migration: weblogic user cannot open a session in analytics

    Hello

    We simply migrate obiee 11g successfully from one server to another server.

    but now after the migration we are not able to log into the analytical page with weblogic user.

    This weblogic user is able to connect to the Console and EM, but not in the analytical page.

    Any user can connect to the console, EM and analytics page.

    so far,.

    We tried trobleshooting with the following links,

    1. Weblogic

    2. also tried with deleting user weblogic and yet once created weblogic.

    but no luck.

    Note: I noticed when we migrated the users and roles from one server to another, then the user weblogic worked very well, could even connect to the Analytics page.

    But as soon as we have migrated and deployed RPD, only since then, while we are facing this problem.

    have idea on this.

    TIA

    Refresh GUID will help u here

  • Locking in 11g when migrating to 10 g

    Dear Experts,

    Recently, we migrated our database oracle 10 g 2 to 11 GR 2. Currently, we use application server oracle 10 g 2, forms and reports for front end.

    After the migration, we know the problems of locking. (A few sessions blocking other sessions). But in 10g, have not experienced. There is no change in the objects after migration.

    Tell us what are the existing opportunities or how to solve this problem.

    Thanks in advance,

    Kind regards
    Barry M

    Hello

    Referential integrity locking has changed since 11.1.0.6: TM - RX a lock is held on the parent where he was a TM - RS in the previous versions, then simultaneous blocking TM-share. see: Bug 5909305 - change in modes of locking of DML (TM) for foreign key constraints
    You may need to avoid TM-Share caused by the unindexed foreign key.
    Kind regards
    Franck.

  • Cannot connect to the Analytics of obiee 11g

    Hi guys,.

    Customer installed obiee 11g in a server sitting in different place. We have deployed our own repository and catalog. Now, we can not access analytical obiee. It does not accept any user name or password created in the weblogic console. But if we deploy repository by default Oracle SampleSales, then we could identify. Can not understand what the problem is!

    It is throwing the following error message:

    [OBIPS] [ERROR: 31] [] [saw.security.odbcuserpopulationimpl.searchidentities] [ecid: 004tnN1tfkXFw0XpLs_Aie0004ds000000, 0:162] [tid: 3327710976] error in retrieving data from the API of Population user of the Oracle BI Server user/group.

    Impossible to create a system for BI Server user connection during the execution of the requests of the user population

    ODBC driver returned an error (SQLDriverConnectW).

    State: HY000.  Code: 10058.  [NQODBC] [SQL_STATE: HY000] [nQSError: 10058] A general error occurred.

    [nQSError: 73006] Failed to get from the main Cluster controller (aaobiee.mm.co.za) or secondary () specified for the DSN Oracle BI server cluster Cluster controller. (HY000) [[

    Leader: odbcuserpoploaderimpl.cpp

    Line: 726

    Geographical area:

    Saw.Security.odbcuserpopulationimpl.searchidentities

    Saw.Security.userpopulationmanagerimpl.searchidentities

    saw.catalog.dirCache.getAllSharedFolders

    saw. CatalogAttributes.cache.cleanup

    saw.taskScheduler.processJob

    TaskScheduler

    Saw.threads

    ECID: 004tnN1tfkXFw0XpLs_Aie0004ds000000, 0:162

    ThreadID: 3327710976

    task: Cache/CatalogAttributes

    Please help how to solve!

    Thank you

    BK.

    Hi guys,.

    After some kinds of analysis, I saw massive files opmn core dumps gathers in the bin/instance1/instances directory. And, unfortunately, my BISystemUser has been removed and so the log file subsequently posted an authentication failure. I have the same recreated and reset the password. In addition, checked the applications deployed to Analytics and some other applications in the console and change the destination in the 'framework of Cluster' instead of all clusters. Then it worked fine and I could connect now!

    But still the problem is not sorted completely. Now, I am facing problem when start and stop opmn. It says opmn failed at the local port. And, opmn do not stop and start normally. Saying: time out to stop and start the managed server. Although it does not create a problem at startup and shutdown, but it says opmn failed to local port and yes the Scheduler never wants to start when I restart opmn. Whenever I restart my opmn export base files in the same place. Could you pls tell how to avoid these unexpected dumps core and how this active Scheduler? Perhaps conflicts with other ports opmn.

    Scheduler generates this error: (will post some recent mistakes fore soon on it)

    [2013 09-26 T 15: 18:42 + 02:00] [opmn] [ERROR: 1] [[libopmncustom]] Ping failed as a ready reminder for proc:467413041

    [2013 09-26 T 15: 18:44 + 02:00] [opmn] [NOTIFICATION: 1] [90] [ons-internal] Server ONS insider

    [2013 09-26 T 15: 18:44 + 02:00] [opmn] [TRACK: 1] [522] [pm-internal] PM State directory exists: / u01/app/middleware/instances/instance1/config/OPMN/opmn/states

    [2013 09-26 T 15: 18:44 + 02:00] [opmn] [NOTIFICATION: 1] [675] Server [pm-internal] OPMN ready. Application of active treatment

    [2013 09-26 T 15: 18:45 + 02:00] [opmn] [ERROR: 1] [] [libopmncustom] process Ping failed: coreapplication_obisch1 ~ OracleBISchedulerComponent ~ coreapplication_obisch1 ~ 1 (467413041:1854) [address is put into matching the query properties]

    [2013 09-26 T 15: 18:45 + 02:00] [opmn] [ERROR: 1] [] [libopmncustom] process Ping failed: coreapplication_obisch1 ~ OracleBISchedulerComponent ~ coreapplication_obisch1 ~ 1

  • OBIEE 11g & MSAD

    I installed MSAD with WebLogic and am able to see all users by following the steps described in the guide to security. I can connect to answers with my users "weblogic" who installed the system, but when I try a user it fails. What should I bring on groups of MSAD as well and then assign them to roles or can I assign a role directly to a user to operate; or do I have to do in order to get the user to connect?

    J.A.M,

    Here is the answer you are looking for,
    http://bimetrics.WordPress.com/2011/08/12/integrating-MS-Active-Directory-with-OBIEE-11g-in-WebLogic-Server/

    The section on password BISystemUser by doing the same for the user to BISystemUser weblogic and the BISystemUser AD (which could actually be any arbitrary name if you wanted to) the user doesn't actually take place.

    Work through the steps listed in this blog post for your environment and your problems should be solved and your weblogic users and AD username should be able to connect successfully on Analytics portal.

    Take note of her virtualize = true attribute.

    In addition, make sure your Application roles through the command console of Fusion EM BIConsumer application role includes the main "authenticated role." This will ensure that all users who actually authenticate via AD or weblogic LDAP are allowed in the Analytics portal.

    Please give the points. I'm starving for points.

    See you soon,.
    Christian

    Published by: Christian screen-Sep 14, 2011 12:53 AM

  • Why do we need to deploy custom in obiee 11g skin?

    Hi all

    Why do we need to deploy custom skins and style in obiee 11g. ?

    I simply copied the new custom skin and style in two places and I could see the new skins under dashboard properties drop-down list. And it works very well as expected.

    Am I missing something through the skin on 'EM. ?

    Kind regards

    Jegou

    Oracle are free to change the content of Oracle_BI1 any time they like when you patch or upgrade.

    Deployment of the skin as a deployment of separate application insulates you against this kind of surprises

  • Is it possible to implement or imitate the "percentage of parent row" feature, planned for PivotTables in obiee 11g, for a table of "normal"?

    Is it possible to set work/MIMC the "percentage of parent row" feature, planned for PivotTables in obiee 11g, for a table of "normal"?

    I'm able to calculate the percentage of parent row in "pivot table". but it's not getting displayed when I see him through graphic.

    Any way to calculate the "percentage of parent of the line" using the normal table and if I can use this column calculated on the chart. really appreciate your response.

    Thank you

    SAI.

    Hi Sai,

    You must be able to calculate the % using "SUM (measure at THE level [, level1, Middle])" to get the total of the top level of your line and to a share of the present value of the total (and * 100.0).

  • master detail in obiee 11g report

    Hello

    I create report master detail in obiee 11g (11.1.1.6.5). I want to use it to navigate from one report when you click on the chart to another report that has tables and graphs in the same dashboard too.

    Can you please how can I do

    Hello!

    You have two options:

    First: Apply channel Interaction. You can click in your master detail report and automatically your second report will change.

    Second: Use action links.

    Look at this link: OBIEE 11 G - master detail | GerardNico.com (BI, OBIEE, data warehouse and OWB)

    Pls mark so useful

  • Is it possible to use the default value as sql expression in obiee 11g report?

    Hi all

    Is it possible to use the default value as sql expression in obiee 11g report?. Actually what I'm trying to make is that we send an ibot users. They want the same default values that are assigned in the command prompt in the report. So when we send the ibot it shows the report for default values assigned in the report criteria which is obsolute. As a solution, I kept the report in a dashboard page and send the dashboard like ibot page. But the problem here is that I can send only pdf format. Is it possible to do so at the level of the report (without using session variables). I want something like that

    Date between Date ' @{PV1} {Timestampadd (SQL_TSI_DAY,-90, CURRENT_DATE)} and Date ' @{PV2} {CURRENT_DATE}

    Thanks in advance

    Thank you

    AJ

    http://www.w3.org/2001/XMLSchema-instance"container ="http://www.w3.org/2001/XMLSchema"xmlVersion ="201201160' xmlns:sawx="com.siebel.analytics.web/expression/v1.1" > "

    "Question time '." Date '.

    "Question time '." Date '.

    BOX WHEN (DAYOFWEEK (cast (max (CURRENT_DATE) date)) = 1) THEN TIMESTAMPADD (SQL_TSI_DAY,-2, cast (max (CURRENT_DATE) as date)) WHEN (DAYOFWEEK (cast (max (CURRENT_DATE) date)) = 2) THEN TIMESTAMPADD (SQL_TSI_DAY,-3, cast (max (CURRENT_DATE) as date)) WHEN (DAYOFWEEK (cast (max (CURRENT_DATE) date)) = 3) THEN TIMESTAMPADD (SQL_TSI_DAY,-4, cast (max (CURRENT_DATE) as date)) WHEN (DAYOFWEEK (cast (max (CURRENT_DATE) date)) = 4) THEN TIMESTAMPADD (SQL_TSI_DAY-5 (, cast (max (CURRENT_DATE) date)) WHEN (DAYOFWEEK (cast (max (CURRENT_DATE) date)) = 5) THEN TIMESTAMPADD (SQL_TSI_DAY,-6, cast (max (CURRENT_DATE) as date)) WHEN (DAYOFWEEK (cast (max (CURRENT_DATE) date)) = 6) THEN TIMESTAMPADD (SQL_TSI_DAY, 0, cast (max (CURRENT_DATE) as date)) WHEN (DAYOFWEEK (cast (max (CURRENT_DATE) date)) = 7) THEN TIMESTAMPADD (SQL_TSI_DAY-1, cast (max (CURRENT_DATE) date)) END

  • How to display all the lines to PRint html option in obiee 11g

    Hello

    I am facing a problem in obiee 11g (windows server 2003). I have 2 environments (SIT & dev)
    In dev I'm not confronted with no problem but in SIT when I print the report in html format only lines 1 to 25 are displayed.
    What should I do to display all the lines

    Thanks in advance
    Abdul

    Hello

    By default it will like that alone. You must enable PDF/print properties in your analysis
    Just go to edit analysis - result table edit table/pivot table see and
    -Click on properties of PDF print control - select display as "all lines".

    Then save it and run it.

    Thank you

    Deva

  • How can I change my HTTPS thing, so it isn't always pop up and ask questions about the sites Web secure when I play some games?

    Feel free to change the title

    How can I change my HTTPS thing, so it isn't always pop up and ask questions about the sites Web secure when I play some games?

    You're talking about Facebook?

    Try the gyration of the Secure Browsing

    http://www.Facebook.com/help?page=1079

  • I have to run windows security when I am currently using Norton 360 Prime Minister?

    I have to run windows security when I am currently using Norton 360 Prime Minister? Thanks (in advance) for any help with this?

    Personally, I do not recommend norton but his preference of the user.
    See thishttps://blog.kaspersky.com/multiple-antivirus-programs-bad-idea/

    Choose an anti-virus program<>(are much more free/paid, good antivirus and make a decision to find a suitable antivirus for you, you can see the link... ) Selection of a good antivirus is only ( up to the preference of the user)

    Microsoft recommended anti-virus companies are here... http://Windows.Microsoft.com/en-us/Windows/antivirus-partners#AVtabs=Win7

  • When I connect to the internet, servads pop up. I ran malwarebytes anti malwalre and microsoft security analysis. Not found the problem of servads in their analyses.

    When I connect to the internet, servads pop up.  I ran malwarebytes anti malwalre and microsoft security analysis.  Not found the problem of servads in their analyses.  How can I get rid of the servads.

    Hello

    1. what web browser do you use?

    2 have had any changes made to the computer before the show?

    If you use Internet Explorer, please follow the methods.

    Method 1:

    If you see pop-ups suspicious, bars unwanted tools, redirects, strange results or other unexpected behavior on your computer, you may have been deceived by installing malicious software (also known as 'malware') on your computer. This behavior is known as the browser hijacking.

    To correct your hijacked browser I suggest to follow the steps outlined in the article below and check if it helps to solve the problem:

    http://www.Microsoft.com/security/spyware/browserhijacking.aspx

    Method 2:

    Step 1:

    Start the computer in safe mode with network and perform antivirus analysis.

    See the link.

    http://Windows.Microsoft.com/en-us/Windows7/advanced-startup-options-including-safe-mode

    Step 2:

    Perform an online virus scan.

    http://www.Microsoft.com/security/scanner/en-us/default.aspx

    Note: the data files that are infected must be cleaned only by removing the file completely, which means there is a risk of data loss.

    Method 3:

    Follow the steps in the link.

    http://Windows.Microsoft.com/en-NZ/Windows7/Internet-Explorer-pop-up-Blocker-frequently-asked-questions

    Method 4:

    optimize Internet Explorer and check.

    NOTE: The Reset Internet Explorer Settings feature might reset security settings or privacy settings that you have added to the list of Trusted Sites. Reset the Internet Explorer settings can also reset parental control settings. We recommend that you note these sites before you use the reset Internet Explorer settings

    http://support.Microsoft.com/kb/936213/ro

  • column headers dynamically change the date filter-based selection? in obiee 11g Analytics

    Hello

    I work an analytic of obiee 11g.

    I have my report coulmns five... who are the branch, district, DS, current year, the previous year.

    based on the article on the query filter, column headings change dynamically.

    column headings are current, previous year Yes r;

    current month, previous month;

    current week and the previous week.

    for example, if I select the year 2016.

    column headings are Branch, district, DS, 2016, 2015 will change dynamically in the analytical report...

    Please help me,

    I tried, but I do not have...

    Please help me,

    A.Kavya.

    I'm not really sure what you have, but assuming that you have a command prompt of dashboard with the year of the column, define a variable presentation for this column (pv_year) and then in the report, for the columns you want, set the column as header @{pv_year} and @{pv_year-1}.

    He must pick up the values from the command prompt and dynamically set in the column headers.

Maybe you are looking for

  • WebFonts in headings are not displayed correctly

    I'm designing a website with fonts hosted locally on my site @fontface. Fonts display correctly in all browsers except Firefox... and it's probably something really simple wrong. The text is correct, but the classes and topics do not work. I download

  • Download Firefox for iPad mini

    I have an iPad mini and followed the links download but just comes up with a blank page that IE nothing happens.

  • Spectrum 13D-3000CTO: a strange behaviour after upgrade windows 10

    Hi all, I wonder if anyone has had the question I had, and if so if you solved it, how is it resolved? I have improved my 13D to windows 10 when it was available to me, then I noticed that my windows, left alt key and the caps lock light no longer wo

  • Change the font size in WLM "Inbox" and "folders".

    I have a partial vision just downloaded Windows Live Mail and have been unable to expand the size of the font of the messages in the folders and "inbox".  Is there a way to change the font size without the system dpi settings?

  • Error of the Client of Microsoft security at startup

    I have windows 7 64 bit laptop. on startup, I get the following error code; "Microsoft Security Client" an error has occurred in the program during initialization. I used MS Fixit without results. also cleaned the temporary update files and folders s