8 Replies Latest reply: Mar 7, 2013 6:30 PM by Matt_T RSS

    OBIEE 11G - User has invalid GUID

    977486
      Hello,

      We moved our files recently to another environment with the same configuration. However, we are experiencing issues when authenticating users through our LDAP setup. Whenever an LDAP user logs in, we get the following error in logs:

      Error Message From BI Security Service: User '<user>' has an invalid GUID value: 'null'

      <user> is the username of the person logging in with an LDAP account. Logging in using weblogic or any user created using the DefaultAuthenticator works. As I mentioned before we're moving from a DEV to a UAT environment. I've verified that we have the exact same settings in both environments and logging in with users in DEV works perfectly.

      I've attempted to refresh the GUIDs in the BI Server and the presentation services using the official oracle guide for refreshing GUIDs. However, this particular error still comes up. This also seems to be an issue with the BI Server as I've tried deleting the user directories from the presentation services, refreshing GUIDs and restarting to no effect. This is what is in the presentation service webcatupgrade0.log file:

      +[2012-12-02T14:36:51.000-05:00] [OBIPS] [ERROR:32] [] [saw.subsystem.catalog.initialize.upgrade] [ecid: ] [tid: ] Failed while trying to update Account GUIDs+
      Error occurred while collecting map of new GUIDs from back end
      Error retrieving user/group data from Oracle BI Server's User Population API.
      Odbc driver returned an error (SQLExecDirectW).
      +State: HY000.  Code: 10058.  [NQODBC] [SQL_STATE: HY000] [nQSError: 10058] A general error has occurred.+
      +[nQSError: 43113] Message returned from OBIS.+
      Error Message From BI Security Service: User 'vchavez' has an invalid GUID value: 'null' (HY000)

      Is there a location in the BI service file system that I can manually clear out the GUID cache? Or any other suggestions for resolving this?

      Thanks!

      Edited by: 974483 on Dec 2, 2012 12:09 PM

      Edited by: 974483 on Dec 2, 2012 12:10 PM
        • 1. Re: OBIEE 11G - User has invalid GUID
          Srini VEERAVALLI
          The following areas you need to look at, if you have done any of them just recheck it once

          1. Edit the NQSConfig.INI file to reset the FMW_UPDATE_ROLE_AND_USER_REF_GUIDS = YES to NO and restart the Oracle BI Servers.
          2. Remove, set to none, or comment out the line (see UpgradeAndExit in the following example) added to the instanceconfig.xml file (that instructs Oracle BI Presentation Server to refresh GUIDs on restart).
          <ps:Catalog xmlns:ps="oracle.bi.presentation.services/config/v1.1">
          <ps:UpgradeAndExit>false</ps:UpgradeAndExit>
          <ps:UpdateAccountGUIDs>none<ps:UpdateAccountGUIDs>
          Restart the Presentation Server for the instanceconfig.xml file that was updated.

          Also make sure you have the valid environment variable values in bi_init.bat
          • 2. Re: OBIEE 11G - User has invalid GUID
            Christian Berg
            <ps:Catalog xmlns:ps="oracle.bi.presentation.services/config/v1.1">
            <ps:UpgradeAndExit>false</ps:UpgradeAndExit>
            <ps:UpdateAccountGUIDs>none<ps:UpdateAccountGUIDs>>

            We're about to get 11.1.1.7, so I guess it's time to stop posting 11.1.1.3 GUID-refresh syntax...
            • 3. Re: OBIEE 11G - User has invalid GUID
              977486
              Yes we have done this already and checked it many times. We also used the 11.1.1.5 syntax. This works fine. The issue is that before it even gets a chance to update the GUIDs, an exception occurs with the following message:

              [2012-12-02T14:36:51.000-05:00] [OBIPS] [ERROR:32] [] [saw.subsystem.catalog.initialize.upgrade] [ecid: ] [tid: ] Failed while trying to update Account GUIDs
              Error occurred while collecting map of new GUIDs from back end
              Error retrieving user/group data from Oracle BI Server's User Population API.
              Odbc driver returned an error (SQLExecDirectW).
              State: HY000. Code: 10058. [NQODBC] [SQL_STATE: HY000] [nQSError: 10058] A general error has occurred.
              [nQSError: 43113] Message returned from OBIS.
              Error Message From BI Security Service: User 'vchavez' has an invalid GUID value: 'null' (HY000)
              • 4. Re: OBIEE 11G - User has invalid GUID
                JaiG
                Do you have the GUID configured both in the Provider Specific tab and in the Identity Store in EM?

                Check if you have done this in the new environment: http://docs.oracle.com/cd/E21764_01/bi.1111/e10543/privileges.htm#CJAFAJHI
                • 5. Re: OBIEE 11G - User has invalid GUID
                  977486
                  Yes we do. We are using the default objectguid for windows active directory.

                  Since we are using the default guid, we didn't use the attribute, PROPERTY_ATTRIBUTE_MAPPING. I checked our dev environment and it is not using this attribute.

                  Been scratching my head for a few days on this issue.
                  • 6. Re: OBIEE 11G - User has invalid GUID
                    Turbokat
                    Hello,

                    If you have reset the GUID attribute in the authentication provider configuration you may need to tell the OPSS User/Role API about it. If you see the following in the managed server console (may also be in bi_server1.out in the Managed Server logs directory)
                    java.security.PrivilegedActionException:
                    oracle.bi.security.service.SecurityServiceException:
                    SecurityService::authenticateUserWithLanguage - 'ldapuser' was authenticated but has an
                    invalid GUID. Caused by: oracle.bi.security.service.SecurityServiceException:
                    SecurityService::authenticateUserWithLanguage - 'ldapuser' was authenticated but has an
                    invalid GUID. Caused by: oracle.bi.security.service.InvalidUserGUIDException: User
                    'ldapuser' has an invalid GUID value: 'null'

                    Then you need to tell the OPSS config about the custom GUID attribute, using the following procedure

                    1) In EM, select WebLogic domain in the menu on the left and right click on the name of the domain (e.g.
                    bifoundation_domain)
                    2) Select Security -> Security Provider Configuration
                    3) Under the Identity Store Provider section, click "Configure"
                    4) Click the green + (Add) to add a new property
                    5) Set property name to "PROPERTY_ATTRIBUTE_MAPPING" (without quotes) and value to "GUID=<GUID
                    attribute set in Authenticator>" (again without quotes) e.g. "GUID=customGUIDAttr"
                    6) Click OK to save property
                    7) Restart Admin Server, Managed Server(s) and BI Component services

                    Hoe this helps. Pls mark if it does.

                    Thanks,
                    SVS
                    • 7. Re: OBIEE 11G - User has invalid GUID
                      977486
                      Hi,

                      Thanks but unfortunately this did not solve our problem.
                      • 8. Re: OBIEE 11G - User has invalid GUID
                        Matt_T
                        Did you get a resolution to this issue?