This discussion is archived
12 Replies Latest reply: Feb 1, 2013 7:03 AM by 817491 RSS

Oracle Corp SSO Authentication failure.

817491 Newbie
Currently Being Moderated
Oracle Corp SSO Authentication failure.
Before Crop SSO we have OBIEE 11g with Local OID.
After that we installed OHS 11g and we removed the Local OID.
We are implemented the Oracle Crop SSO in OBIEE 11g and trying to login analytics URL after enter the SSO login Username and password getting the error “Not Signed In" page.
And we are not able to login
OBIEE 11.1.1.6.0 and with weblogic
OHS 11.1.1.6
DB 11g 11.2.0.2
In NQserver.log
We are getting the User authentication failure BISyetemuser

please give me the suggestions and how to remove the Local OID integration with OBIEE 11g
  • 1. Re: Oracle Corp SSO Authentication failure.
    817491 Newbie
    Currently Being Moderated
    please help me any one
  • 2. Re: Oracle Corp SSO Authentication failure.
    Turbokat Pro
    Currently Being Moderated
    Hello,

    Regarding removing Local OID integration with OBIEE 11g, you can delete this Authentcation provider from you WLS console>Security > myrealms> Providers> Remove 'OID Provider' or set it to optional.

    And did you follow these installation steps to use OAM 11g ?

    http://docs.oracle.com/cd/E22203_01/doc.31/e20664/chapter_12.htm#CHDJBHFF

    Hope this helps. Please mark if it does.

    Thanks,
    SVS
  • 3. Re: Oracle Corp SSO Authentication failure.
    817491 Newbie
    Currently Being Moderated
    Is it required for OAM installation?

    we have Oracle 10gAS and we installed OHS 11g and as per the metalink doc, 796072.1 we don the Configuration .



    nqserver.log

    Data Source Name: TANAS1
    Data Source Type: Oracle Database 11g Enterprise Edition Release 11.2.0.2.0 - 64b
    ]]
    [2013-01-28T13:47:05.000+00:00] [OracleBIServerComponent] [NOTIFICATION:1] [] [] [ecid: 004p5uADq3fAPPAZv_aAV10005j8000000] [tid: 47279720] [85003] MDX Member Name Cache subsystem started successfully.
    [2013-01-28T13:47:05.000+00:00] [OracleBIServerComponent] [NOTIFICATION:1] [] [] [ecid: 004p5uADq3fAPPAZv_aAV10005j8000000] [tid: 47279720] [85004] MDX Member Name Cache subsystem recovered entries: 0, size: 0 bytes.
    [2013-01-28T13:47:05.000+00:00] [OracleBIServerComponent] [ERROR:1] [] [] [ecid: 004p5uADq3fAPPAZv_aAV10005j8000000] [tid: 47279720] [13026] Error in getting roles from BI Security Service: 'Error Message From BI Security Service: oracle.bi.security.service.SecurityServiceException: SecurityService::validateSystemUserSystem user could not be authenticated'
    [2013-01-28T13:47:05.000+00:00] [OracleBIServerComponent] [NOTIFICATION:1] [] [] [ecid: 004p5uADq3fAPPAZv_aAV10005j8000000] [tid: 47279720] nqsserver: Clustered Oracle BI Server (64-bit) started. Version: 11.1.1.6.0.120104.1053.000.
    [2013-01-28T13:47:26.000+00:00] [OracleBIServerComponent] [NOTIFICATION:1] [] [] [ecid: 004p5uADq3fAPPAZv_aAV10005j8000000] [tid: 4db35940] [43071] A connection with Cluster Controller nacisnscl203.us.oracle.com:9706 was established.
    [2013-01-28T13:50:21.000+00:00] [OracleBIServerComponent] [ERROR:1] [] [] [ecid: 004p5uMOSL5APPAZv_aAV10004Fv0002MY] [tid: 4e842940] Error Message From BI Security Service: oracle.bi.security.service.SecurityServiceException: SecurityService::validateSystemUserSystem user could not be authenticated
    [2013-01-28T13:50:21.000+00:00] [OracleBIServerComponent] [ERROR:1] [] [] [ecid: 004p5uMOSL5APPAZv_aAV10004Fv0002MY] [tid: 4e842940] [nQSError: 43126] Authentication failed: invalid user/password.

    ====================================================================================================================================================================
    OracleBIPresentationServicesComponent

    sawlog6.log

    [2013-01-28T13:53:56.000-06:00] [OBIPS] [ERROR:1] [] [saw.security.odbcuserpopulationimpl.getbisystemconnection] [ecid: 004p5uB1m8nAPPAZv_aAV10005r2000000,0:118] [tid: 1092766016] Authentication Failure.
    Odbc driver returned an error (SQLDriverConnectW).
    State: 08004. Code: 10018. [NQODBC] [SQL_STATE: 08004] [nQSError: 10018] Access for the requested connection is refused.
    [nQSError: 43113] Message returned from OBIS.
    [nQSError: 43126] Authentication failed: invalid user/password. (08004)[[
    File:odbcuserpoploaderimpl.cpp
    Line:995
    Location:
    saw.security.odbcuserpopulationimpl.getbisystemconnection
    saw.security.odbcuserpopulationimpl.searchidentities
    saw.security.userpopulationmanagerimpl.getaccountdetailsbyid
    saw.CatalogAttributes.cache.cleanup
    saw.taskScheduler.processJob
    taskscheduler
    saw.threads
    ecid: 004p5uB1m8nAPPAZv_aAV10005r2000000,0:118
    ThreadID: 1092766016
    task: Cache/CatalogAttributes
    ]]
    [2013-01-28T13:54:01.000-06:00] [OBIPS] [NOTIFICATION:1] [] [saw.securitysubsystem.checkauthentication.runimpl] [ecid: 004p5uZR7eiAPPAZv_aAV10004Fv0002Pv,0:1:1:1] [tid: 1080142144] Authentication Failure.
    Odbc driver returned an error (SQLDriverConnectW).
    State: 08004. Code: 10018. [NQODBC] [SQL_STATE: 08004] [nQSError: 10018] Access for the requested connection is refused.
    [nQSError: 43113] Message returned from OBIS.
    [nQSError: 43126] Authentication failed: invalid user/password. (08004)[[
    File:checkauthentication.cpp
    Line:1293
    Location:
    saw.securitysubsystem.checkauthentication.runimpl
    saw.threadpool.asynclogon
    saw.threads
    ecid: 004p5uZR7eiAPPAZv_aAV10004Fv0002Pv,0:1:1:1
    ThreadID: 1080142144

    ============================================================================================================================================================================

    OracleBISchedulerComponent:

    nqscheduler.log

    [2013-01-28T13:47:07.000+00:00] [OracleBISchedulerComponent] [NOTIFICATION:1] [] [] [ecid: 004p5uAkwo7APPAZv_aAV10005qb000000] [tid: 415f3940] [16020] Metadata Database Type: Oracle 11g [[^M
    Data Source Name: (DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=TCP)(HOST=nacisnscl201.us.oracle.com)(PORT=10151)))(CONNECT_DATA=(SERVICE_NAME=TANAS1)))
    Data Source Type: Oracle Database 11g Enterprise Edition Release 11.2.0.2.0 - 64b^M
    ]]^M
    [2013-01-28T13:47:07.000+00:00] [OracleBISchedulerComponent] [ERROR:1] [] [] [ecid: 004p5uAkwo7APPAZv_aAV10005qb000000] [tid: 415f3940] [nQSError: 46066] Operation cancelled. [[^M
    PRIMARY_POOL RetrieveColumnInfo from table S_NQ_JOB Exchange^M
    ]]^M
    [2013-01-28T13:47:07.000+00:00] [OracleBISchedulerComponent] [ERROR:1] [] [] [ecid: 004p5uAkwo7APPAZv_aAV10005qb000000] [tid: 415f3940] [nQSError: 46066] Operation cancelled. [[^M
    PRIMARY_POOL RetrieveColumnInfo from table S_NQ_JOB_PARAM Exchange^M
    ]]^M
    [2013-01-28T13:47:07.000+00:00] [OracleBISchedulerComponent] [ERROR:1] [] [] [ecid: 004p5uAkwo7APPAZv_aAV10005qb000000] [tid: 415f3940] [nQSError: 46066] Operation cancelled. [[^M
    PRIMARY_POOL RetrieveColumnInfo from table S_NQ_INSTANCE Exchange^M
    ]]^M
    [2013-01-28T13:47:07.000+00:00] [OracleBISchedulerComponent] [ERROR:1] [] [] [ecid: 004p5uAkwo7APPAZv_aAV10005qb000000] [tid: 415f3940] [nQSError: 46066] Operation cancelled. [[^M
    PRIMARY_POOL RetrieveColumnInfo from table S_NQ_ERR_MSG Exchange^M
    ]]^M
    [2013-01-28T13:47:08.000+00:00] [OracleBISchedulerComponent] [NOTIFICATION:1] [] [] [ecid: 004p5uAkwo7APPAZv_aAV10005qb000000] [tid: dda0f850] [68013] Scheduler service started.^M
    [2013-01-28T13:47:08.000+00:00] [OracleBISchedulerComponent] [NOTIFICATION:1] [] [] [ecid: 004p5uAkwo7APPAZv_aAV10005qb000000] [tid: dda0f850] Scheduler service started.^M
    [2013-01-28T13:47:08.000+00:00] [OracleBISchedulerComponent] [NOTIFICATION:1] [] [] [ecid: 004p5uAkwo7APPAZv_aAV10005qb000000] [tid: dda0f850] [71076] Oracle BI Scheduler nacisnscl203:152.68.180.203:9705 has been changed to an Inactive state.^M
    [2013-01-28T13:47:26.000+00:00] [OracleBISchedulerComponent] [NOTIFICATION:1] [] [] [ecid: 004p5uAkwo7APPAZv_aAV10005qb000000] [tid: 40762940] [43071] A connection with Cluster Controller nacisnscl203.us.oracle.com:9706 was established.^M
    [2013-01-28T13:47:26.000+00:00] [OracleBISchedulerComponent] [NOTIFICATION:1] [] [] [ecid: 004p5uAkwo7APPAZv_aAV10005qb000000] [tid: 40762940] [71075] Oracle BI Scheduler nacisnscl203:152.68.180.203:9705 has been changed to an Active state.^M


    ========================================================================================================================================================================



    [aptanabi@nacisnscl203 bin]$ ./opmnctl status

    Processes in Instance: tstnasc
    --------------------------------------------------------------+---------
    ias-component | process-type | pid | status
    --------------------------------------------------------------+---------
    coreapplication_obiccs1 | OracleBIClusterCo~ | 26609 | Alive
    coreapplication_obisch1 | OracleBIScheduler~ | 26608 | Alive
    coreapplication_obijh1 | OracleBIJavaHostC~ | 26607 | Alive
    coreapplication_obips1 | OracleBIPresentat~ | 26606 | Alive
    coreapplication_obis1 | OracleBIServerCom~ | 26605 | Alive
  • 4. Re: Oracle Corp SSO Authentication failure.
    817491 Newbie
    Currently Being Moderated
    please help me any one
  • 5. Re: Oracle Corp SSO Authentication failure.
    Srini VEERAVALLI Guru
    Currently Being Moderated
    Just in case try these
    1Correct the connection string for all the jdbc connections.
    2. Restart all services.

    The Credential details can be found in the WebLogic console:

    From the Home page, click on Data Sources.
    This displays the summary of JDBC Data Sources.
    Select the Configuration tab.
    Click on mds-owsm.
    Select Connection Pool.
  • 6. Re: Oracle Corp SSO Authentication failure.
    Turbokat Pro
    Currently Being Moderated
    Hello,

    Could you please try to deploy the sample test application in How to Integrate OHS Based on Apache 2.0 with MOD_WEBLOGIC and MOD_OSSO [ID 796072.1] onto you weblogic Admin server (7001) and before that enable the atz and atn logs to debug the authentication and authorization they can be found at weblogic console , Server > Debug > Expand weblogic > Expand Security > Enable atn and atz.

    Once you completed deploying the Sample application, please paste the relevant logging information here for further troubleshooting.

    Keep us posted.

    Thanks,
    SVS
  • 7. Re: Oracle Corp SSO Authentication failure.
    817491 Newbie
    Currently Being Moderated
    Hi

    we have the Correct connection string for all the jdbc connections.


    I have small question

    with out OID we have to config the OracleCORP OSSO?

    I config the OSSO and after the i removed OID in my Env.

    and after that I created one user in

    created the User in Weblogic - consol and created the New user BIsystemUser
    Home >Security Realms >myrealm >Users and Groups >New

    and

    EM we click on Right Click ->security ->creditiales->oracle.bi.system and I enter BIsyetemuser and password

    i restart the services after that we getting the error like above.

    please help me.

    Thanks
    Narasimha
  • 8. Re: Oracle Corp SSO Authentication failure.
    Srini VEERAVALLI Guru
    Currently Being Moderated
    I was waiting for your updates to follow-up with BISystemUser.

    Try to validate your steps with OID_BISystemUser as mentioned in this link
    http://docs.oracle.com/cd/E28271_01/bi.1111/e10543/privileges.htm#BABDIDGE

    Edited by: Srini VEERAVALLI on Jan 31, 2013 11:59 AM
  • 9. Re: Oracle Corp SSO Authentication failure.
    817491 Newbie
    Currently Being Moderated
    Same Configuration i was don still i am getting same error .

    pls help
  • 10. Re: Oracle Corp SSO Authentication failure.
    Srini VEERAVALLI Guru
    Currently Being Moderated
    hmm

    Just in case you want to restore previous config without your recent changes then
    take a backup of config.xml from below location and the backup_config5.xml rename it to config.xml
    \FMW\user_projects\domains\bifoundation_domain\config

    To do these changes you have bring down services and then start
    Just in case this is not working then use other file backup_config6.xml

    do it with your own risk with proper back up of folder \FMW\user_projects\domains\bifoundation_domain
  • 11. Re: Oracle Corp SSO Authentication failure.
    817491 Newbie
    Currently Being Moderated
    Hi


    i was following the OBIEE11g – Oracle SSO (OSSO) configuration (Doc ID 1353527.1) and i configured

    i was done OBIEE 11g+OHS 11g+OID .

    we are able login the OSSO using Our Usname/pass.

    and we want to get rid of OID

    and I removed the OID after that i am getting this error .


    hear with out OSSO we have to do our work .

    What is the Use of OSSO please clear me and help m
  • 12. Re: Oracle Corp SSO Authentication failure.
    817491 Newbie
    Currently Being Moderated
    please help

Legend

  • Correct Answers - 10 points
  • Helpful Answers - 5 points