This discussion is archived
8 Replies Latest reply: Mar 7, 2013 4:30 PM by Matt_T RSS

OBIEE 11G - User has invalid GUID

977486 Newbie
Currently Being Moderated
Hello,

We moved our files recently to another environment with the same configuration. However, we are experiencing issues when authenticating users through our LDAP setup. Whenever an LDAP user logs in, we get the following error in logs:

Error Message From BI Security Service: User '<user>' has an invalid GUID value: 'null'

<user> is the username of the person logging in with an LDAP account. Logging in using weblogic or any user created using the DefaultAuthenticator works. As I mentioned before we're moving from a DEV to a UAT environment. I've verified that we have the exact same settings in both environments and logging in with users in DEV works perfectly.

I've attempted to refresh the GUIDs in the BI Server and the presentation services using the official oracle guide for refreshing GUIDs. However, this particular error still comes up. This also seems to be an issue with the BI Server as I've tried deleting the user directories from the presentation services, refreshing GUIDs and restarting to no effect. This is what is in the presentation service webcatupgrade0.log file:

+[2012-12-02T14:36:51.000-05:00] [OBIPS] [ERROR:32] [] [saw.subsystem.catalog.initialize.upgrade] [ecid: ] [tid: ] Failed while trying to update Account GUIDs+
Error occurred while collecting map of new GUIDs from back end
Error retrieving user/group data from Oracle BI Server's User Population API.
Odbc driver returned an error (SQLExecDirectW).
+State: HY000.  Code: 10058.  [NQODBC] [SQL_STATE: HY000] [nQSError: 10058] A general error has occurred.+
+[nQSError: 43113] Message returned from OBIS.+
Error Message From BI Security Service: User 'vchavez' has an invalid GUID value: 'null' (HY000)

Is there a location in the BI service file system that I can manually clear out the GUID cache? Or any other suggestions for resolving this?

Thanks!

Edited by: 974483 on Dec 2, 2012 12:09 PM

Edited by: 974483 on Dec 2, 2012 12:10 PM
  • 1. Re: OBIEE 11G - User has invalid GUID
    Srini VEERAVALLI Guru
    Currently Being Moderated
    The following areas you need to look at, if you have done any of them just recheck it once

    1. Edit the NQSConfig.INI file to reset the FMW_UPDATE_ROLE_AND_USER_REF_GUIDS = YES to NO and restart the Oracle BI Servers.
    2. Remove, set to none, or comment out the line (see UpgradeAndExit in the following example) added to the instanceconfig.xml file (that instructs Oracle BI Presentation Server to refresh GUIDs on restart).
    <ps:Catalog xmlns:ps="oracle.bi.presentation.services/config/v1.1">
    <ps:UpgradeAndExit>false</ps:UpgradeAndExit>
    <ps:UpdateAccountGUIDs>none<ps:UpdateAccountGUIDs>
    Restart the Presentation Server for the instanceconfig.xml file that was updated.

    Also make sure you have the valid environment variable values in bi_init.bat
  • 2. Re: OBIEE 11G - User has invalid GUID
    Christian Berg Guru
    Currently Being Moderated
    <ps:Catalog xmlns:ps="oracle.bi.presentation.services/config/v1.1">
    <ps:UpgradeAndExit>false</ps:UpgradeAndExit>
    <ps:UpdateAccountGUIDs>none<ps:UpdateAccountGUIDs>>

    We're about to get 11.1.1.7, so I guess it's time to stop posting 11.1.1.3 GUID-refresh syntax...
  • 3. Re: OBIEE 11G - User has invalid GUID
    977486 Newbie
    Currently Being Moderated
    Yes we have done this already and checked it many times. We also used the 11.1.1.5 syntax. This works fine. The issue is that before it even gets a chance to update the GUIDs, an exception occurs with the following message:

    [2012-12-02T14:36:51.000-05:00] [OBIPS] [ERROR:32] [] [saw.subsystem.catalog.initialize.upgrade] [ecid: ] [tid: ] Failed while trying to update Account GUIDs
    Error occurred while collecting map of new GUIDs from back end
    Error retrieving user/group data from Oracle BI Server's User Population API.
    Odbc driver returned an error (SQLExecDirectW).
    State: HY000. Code: 10058. [NQODBC] [SQL_STATE: HY000] [nQSError: 10058] A general error has occurred.
    [nQSError: 43113] Message returned from OBIS.
    Error Message From BI Security Service: User 'vchavez' has an invalid GUID value: 'null' (HY000)
  • 4. Re: OBIEE 11G - User has invalid GUID
    JaiG Pro
    Currently Being Moderated
    Do you have the GUID configured both in the Provider Specific tab and in the Identity Store in EM?

    Check if you have done this in the new environment: http://docs.oracle.com/cd/E21764_01/bi.1111/e10543/privileges.htm#CJAFAJHI
  • 5. Re: OBIEE 11G - User has invalid GUID
    977486 Newbie
    Currently Being Moderated
    Yes we do. We are using the default objectguid for windows active directory.

    Since we are using the default guid, we didn't use the attribute, PROPERTY_ATTRIBUTE_MAPPING. I checked our dev environment and it is not using this attribute.

    Been scratching my head for a few days on this issue.
  • 6. Re: OBIEE 11G - User has invalid GUID
    Turbokat Pro
    Currently Being Moderated
    Hello,

    If you have reset the GUID attribute in the authentication provider configuration you may need to tell the OPSS User/Role API about it. If you see the following in the managed server console (may also be in bi_server1.out in the Managed Server logs directory)
    java.security.PrivilegedActionException:
    oracle.bi.security.service.SecurityServiceException:
    SecurityService::authenticateUserWithLanguage - 'ldapuser' was authenticated but has an
    invalid GUID. Caused by: oracle.bi.security.service.SecurityServiceException:
    SecurityService::authenticateUserWithLanguage - 'ldapuser' was authenticated but has an
    invalid GUID. Caused by: oracle.bi.security.service.InvalidUserGUIDException: User
    'ldapuser' has an invalid GUID value: 'null'

    Then you need to tell the OPSS config about the custom GUID attribute, using the following procedure

    1) In EM, select WebLogic domain in the menu on the left and right click on the name of the domain (e.g.
    bifoundation_domain)
    2) Select Security -> Security Provider Configuration
    3) Under the Identity Store Provider section, click "Configure"
    4) Click the green + (Add) to add a new property
    5) Set property name to "PROPERTY_ATTRIBUTE_MAPPING" (without quotes) and value to "GUID=<GUID
    attribute set in Authenticator>" (again without quotes) e.g. "GUID=customGUIDAttr"
    6) Click OK to save property
    7) Restart Admin Server, Managed Server(s) and BI Component services

    Hoe this helps. Pls mark if it does.

    Thanks,
    SVS
  • 7. Re: OBIEE 11G - User has invalid GUID
    977486 Newbie
    Currently Being Moderated
    Hi,

    Thanks but unfortunately this did not solve our problem.
  • 8. Re: OBIEE 11G - User has invalid GUID
    Matt_T Newbie
    Currently Being Moderated
    Did you get a resolution to this issue?

Legend

  • Correct Answers - 10 points
  • Helpful Answers - 5 points