Auditing in Shared services

Going through some posts in OTN forums, found some information which will be useful.

Information is about who provisioned/created/deleted/updated users from shared services

CSS_IDENTITY and CSS_PROVISIONING_INFO which provide all relevant information.

Shared Services audit tables start SMA_AUDIT_* , for example SMA_AUDIT_FACT

For detailed explanation about data models, check out below link:
https://docs.oracle.com/cd/E57185_01/epm_data_models.zip

Thanks,
Mady

MSAD Configuration

Most of the clients will use Active Directory which we can integrate with Hyperion Shared Services.

We need AD server details, username, password for communication, Ports we use for connectivity.

Check out below screen shots to setup and AD in Hyperion Shared Services.

Go to Shared Services console - Native directories - Administration - Configure User directories - Click on New - Enter the details which we got or collected from AD team - Click on Finish.

Try to search/retrieve AD users now in MSAD group. 

We need to keep MSAD in Top in list, because in case of searching if we put AD in first and it will go through AD first then Native. 

Note: whenever we do setup and do changes or change order of MSAD in list, we need to bounce Services to take effect.

Thanks,

Mady

EPMA Application Library and Dimension Library not opening

Hyperion 11.1.2.4 installation and configuration completed, but when try to open Application Library and Dimension Library, we are getting below error:

; nested exception is: 
  HTTP transport error: javax.xml.soap.SOAPException: oracle.j2ee.ws.saaj.ContentTypeException: Not a valid SOAP Content-Type: text/html; charset=utf-8"

Oracle Support Article Soultion:

Accessing Application Library from Workspace Get Errors "HTTP transport error: javax.xml.soap.SOAPException: oracle.j2ee.ws.saaj.ContentTypeException: Not a valid SOAP Content-Type: text/html; charset=utf-8" (Doc ID 1932114.1)

1.  Right click on E:\Oracle\Middleware\EPMSystem11R1\products\Foundation\BPMA\AppServer\DimensionServer\WebService\web.config and click on Properties.
2.  Click on Security.
3.  Click on Edit.
4.  If SYSTEM is not listed, click on Add, Type "SYSTEM" Click on "Check Names"
5.  Click on SYSTEM and click Allow Check box for "Full Control"
6.  Click Ok
7.  Stop EPMA Services
8.  Stop Microsoft Internet Information Services (IIS)
9.  Start Microsoft Internet Information Services (IIS)
10. Start EPMA Services

One more tip from John Goodwin:

To prove whether it is an issue with the ApplicationPoolIdentity identity, you can go to the default app pool in IIS and change the identity, then restart IIS.

Changing local system will work for application library and dimension library accessing.

Thanks,
Mady

Create ODBC for Essbase in Linux - Oracle Wire Protocal

1. Browse the odbc file in the below location:
/oracle/Middleware/user_projects/epmsystem1/EssbaseServer/essbaseserver1/bin

2. Open odbc.ini file and go to Oracle Wire Protocal

Note: To connect to Oracle Database, here we are using Oracle Wire Protocal. If you are trying to connect other Database, search for that Protocal in the list and update DB details in that Section

3. Update Servername, SID and Port Number as shown below:
[Oracle Wire Protocol]
Driver=/oracle/Middleware/EPMSystem11R1/common/ODBC-64/Merant/7.0/lib/ARora26.so
Description=DataDirect 7.0 Oracle Wire Protocol
AlternateServers=
ApplicationUsingThreads=1
AccountingInfo=
Action=
ApplicationName=
ArraySize=60000
AuthenticationMethod=1
BulkBinaryThreshold=32
BulkCharacterThreshold=-1
BulkLoadBatchSize=1024
BulkLoadFieldDelimiter=
BulkLoadRecordDelimiter=
CachedCursorLimit=32
CachedDescLimit=0
CatalogIncludesSynonyms=1
CatalogOptions=0
ClientHostName=
ClientID=
ClientUser=
ConnectionReset=0
ConnectionRetryCount=0
ConnectionRetryDelay=3
DefaultLongDataBuffLen=1024
DescribeAtPrepare=0
EditionName=
EnableBulkLoad=0
EnableDescribeParam=0
EnableNcharSupport=0
EnableScrollableCursors=1
EnableStaticCursorsForLongData=0
EnableTimestampWithTimeZone=0
EncryptionMethod=0
FailoverGranularity=0
FailoverMode=0
FailoverPreconnect=0
FetchTSWTZasTimestamp=0
GSSClient=native
HostName=Servername
HostNameInCertificate=
InitializationString=
KeyPassword=
KeyStore=
KeyStorePassword=
LoadBalanceTimeout=0
LoadBalancing=0
LocalTimeZoneOffset=
LockTimeOut=-1
LoginTimeout=15
LogonID=
MaxPoolSize=100
MinPoolSize=0
Module=
Password=
Pooling=0
PortNumber=1521
ProcedureRetResults=0
ProgramID=
QueryTimeout=0
ReportCodePageConversionErrors=0
ReportRecycleBin=0
ServerName=<server_name in tnsnames.ora>
ServerType=0
ServiceName=
SID=Database/SID
TimestampeEscapeMapping=0
TNSNamesFile=<tnsnames.ora_filename>
TrustStore=
TrustStorePassword=
UseCurrentSchema=1
ValidateServerCertificate=1
WireProtocolMode=1

4. Now try to connect from EAS to check connectivity from EAS to Database.

Thanks,

Mady

DRM Installation

1. Run Setup.exe file and go on with screen Next -> Next -> Finish

2. Launch DRM Console -> Click on Add to create application and save configuration.

3. Start DRM Service then go Repository Wizard.

4. Give DB details admin details for example sa, check out Test Connection.

5. Next screen give user name and schema details which wants to create for DRM application, and give ADMIN password

6. Then click Next to start creating Repository.

7. Once it is done, we need to check application status and validate in web client.

Otherwise, we can run scripts below to create schema and for creating objects in schema.

Change your application schema, user, password details before running this scripts.



Thanks,
Mady

EAL Data Sync Server is not showing as Available and Data Sync Server Data is not Available

We had a situation like EAL services are running in Service Panel but still EAL Data sync not showing up in EAS console.

Some points we can check in EAL while trouble shooting:

1. If you see any socket errors and Data sync not available in EAS console, you can restart EAL services. It will fix the issue in maximum chances.

2. We need to check schema passwords used for HFM and EAL.

3. We need to check Target and Source. If it is HFM to Essbase, we can check Essbase connections, and HFM regions.

4. If source and target is schema and HFM, we need to check schema connectivity and HFM regions.

5. Check out password for dss_admin (default admin username for EAL, while doing configuration we will give this username and password) in EAL setup correct or not.

6. Check out schema passwords connect or not.

7. Chec the log files in below location:
D:\Oracle\EAL_Home\EssbaseAnalyticsLink\Work\dss.log
D:\Oracle\EAL_Home\EssbaseAnalyticsLink\Work\eal.log

8. Port numbers are reachable or not:
   -   Verify ports 5024, 5423 ports are open.
   -   Check for any recent security updates or anti virus updates that happened?

In our case, EAL Data sync not showing up as available in EAS console. So, We tried to reconfigure EAL and code.xml file got corrupted and showing up as 1 KB where as in other Environment it is more than that size.

So, we restored files from backup and restarted services. Ran Region default for Testing. It ran successfully and Data sync is available now and Data sync Data is now On.

Oracle update on the same for our future reference:

Analysis and follow up done by Kamalanathan Prabhakaran.

Thanks,
Mady

Single Sign On Authentication Failed. You Are Not Authorized To Use System, Contact Your Administrator

While accessing SSO enabled Workspace, we were facing the below issue, as we need to allow SSO in Registry.

Solution:
- To update a component property, go to EPM_ORACLE_INSTANCE/bin and run the following command:

- epmsys_registry updateproperty WORKSPACE/LOGICAL_WEB_APP/@AllowDirectLogonAfterSSO true;

Thanks,

Mady