After AD Integration - AD users can log in but Weblogic user can not

user11183570

Hello,

We have done AD Integration as one of the Authentication Providers. However after this, all the AD users can log in but Weblogic user can not log into OBIEE Portal: http://xxx:9704/analytics. However we can log into EM and WLS Console using weblogic user. We have done GUID refresh but it did not help.

From nqServer.log we can see -

[2016-04-11T22:56:14.48-04:00] [OracleBIServerComponent] [ERROR:1] [] [] [ecid: 901f0fc4aea36689:28a611a8:154085bf743:-8000-000000000000023d,0:1:1:6] [tid: 54c] [nQSError: 13041] The GUID of user 'weblogic' does not match user reference GUID at the repository. Please ask the administrator to delete the old user reference at the repository and login again. [[

I am using, OBIEE Version: 11.1.1.9.0 on: MS Windows Server 2012 SP2

Request your advise to resolve this problem?

Thanks & Regards,

Avi

user11183570

Hi All,

I found a solution or rather work around. I documented the solution below, just in case it helps others in future.

While investigating, I found this in sawlog.

[2016-04-12T02:03:02.000-04:00] [OBIPS] [ERROR:10] [] [saw.security.securityimpl.internaladdauthenticateduser] [ecid: 170debb5027a6954:34d4691b:15408df3830:-8000-00000000000017ff,0:1:1] [tid: 5332] The GUID for user weblogic has changed. The new GUID is E4B7A73CC54311E5BFFF8B7A3BD5654C, while the existing GUID in the catalog is b7bc2ee92e0f447d82bedd821b01eb53. This would result in catalog access issues.
If the environment has recently changed to a new security backend, please run UpdateGUIDs and try again.
If the environment has not been changed, please refer to the Catalog Manager 'forgetAccounts' command to delete all trace of user weblogic (index, data and home folder).

As I have already done GUID update several times so i had to do forgetAccounts. Word of caution is - deleting an user by using forgetAccounts will also delete all the my folder content of the user. So it should be used with extreme caution and as last resort .

Syntax: runcat.cmd/runcat.sh -cmd forgetAccounts -username XXX -cleanup -offline /path/to/catalog

I ran:

\app\Oracle\Middleware\instances\instance1\bifoundation\OracleBIPresentationSe
rvicesComponent\coreapplication_obips1\catalogmanager>runcat.cmd -cmd forgetAcco
unts -username weblogic -cleanup -offline \app\Oracle\Middleware\instances\ins
tance1\bifoundation\OracleBIPresentationServicesComponent\coreapplication_obips1
\catalog\CCInsight
BIFNDN_LABEL =BIFNDN_11.1.1.9.0_WINDOWS.X64_150417.0810
# Command : -cmd forgetAccounts -username weblogic -cleanup -offline \app\Orac
le\Middleware\instances\instance1\bifoundation\OracleBIPresentationServicesCompo
nent\coreapplication_obips1\catalog\CCInsight
IMPORTANT: Please backup the home directories of the user accounts to be forgott
en before running forgetAccounts, since they will be removed automatically!
N1      Tue Apr 12 03:01:10 2016        cmjniconnection.cpp     3074    saw.cata
logmanager      Oracle BI CatalogManager 11.1.1.9.0 (Build 150417.0810 64-bit) i
s connecting offline.
N1      Tue Apr 12 03:01:10 2016        userpopulation.cpp      348     saw.cata
log.local.loadCatalog   Using only catalog user population
N1      Tue Apr 12 03:01:11 2016        cmjniconnection.cpp     488     saw.cata
logmanager      Loading catalog \app\Oracle\Middleware\instances\instance1\bif
oundation\OracleBIPresentationServicesComponent\coreapplication_obips1\catalog\C
CInsight.
Successfully cleaned account weblogic.
Command 'forgetAccounts' completed successfully.  Cleaned 1 accounts.
\app\Oracle\Middleware\instances\instance1\bifoundation\OracleBIPresentationSe
rvicesComponent\coreapplication_obips1\catalogmanager>

Reference:

a) OBIEE: OBIEE 11.1.1.7..0 Best practice to remove a user from the webcatalog

b) How To Clean Corrupted Permissions On An Upgraded OBIEE 11g Presentation Server Catalog (Doc ID 1390497.1)

Thanks & Regards,

Avi