nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Oracle Communities

Oracle Analytics and AI

Child Item

OBIEE 11g Agents not Working with Impersonate Error

Hector Andrade

We are experiencing and issue with Agent on OBIEE 11g , when we try to run an agent we got the following message

Global Error: [nQSError: 77006] Oracle BI Presentation Server Error: A fatal error occurred while processing the request. The server responded with: Odbc driver returned an error (SQLDriverConnectW).

Error Codes: OPR4ONWY:U9IM8TAC:U9IM8TAC:U9IM8TAC

State: 08004. Code: 10018. [NQODBC] [SQL_STATE: 08004] [nQSError: 10018] Access for the requested connection is refused.

(08004)

State: HY000. Code: 43113. [nQSError: 43113] Message returned from OBIS.

(HY000)

State: HY000. Code: 13038. [nQSError: 13038] The user does not have impersonation privilege. (HY000)

Error Codes: AGEGTYVF

...Trying main loop again.... Sleeping for 9 seconds.Global Error: [nQSError: 77006] Oracle BI Presentation Server Error: A fatal error occurred while processing the request. The server responded with: Odbc driver returned an error (SQLDriverConnectW).

Error Codes: OPR4ONWY:U9IM8TAC:U9IM8TAC:U9IM8TAC

State: 08004. Code: 10018. [NQODBC] [SQL_STATE: 08004] [nQSError: 10018] Access for the requested connection is refused.

(08004)

State: HY000. Code: 43113. [nQSError: 43113] Message returned from OBIS.

(HY000)

State: HY000. Code: 13038. [nQSError: 13038] The user does not have impersonation privilege. (HY000)

Error Codes: AGEGTYVF

Terminal Error: Exceeded number of retries.

We give the SOAP and Impersonate permissions on OBIEE Privileges, also we applied the bundle pathc 33032067, we give the oracle.bi.server.impersonteUser polici to BISystemUser but non of them seem to work.can you help us with that??

Thanks,

Hector Andrade

Find more posts tagged with

Accepted answers

All comments

Steve F-2

This may depend upon your datasource / configuration.

Follow these steps:"How to Create and Use Impersonate User".

If you still have errors/issues after, please raise a service request. Please note, that OBIEE11g is in Sustaining Support only.

Hector Andrade

Hi Steve,

First of all, thanks for your response, quick question, to how I need to give the impersonate policy?? Is necesary create the BIImpersonateUser?? This Impersonate error is also giving us a headachewith BI Publisher, after the upgrade from 10g to 11g We are only able to log into Analytics, not to XMLPUser, if one of the user migrated from 10g tries to login to XMLPServer, is receiving a message "The server can not be used due to a configuration error, please contact the administrator. If you are the administrator, please consult BI Publisher user guide for proper configuration."in the detailed message it says "java.lang.RuntimeException: Failed to retrieve data from Presentation ServerCould not connect to OBI Presentation Service" and if we see the logs "Authentication error. An error occurred during authentication. Try again later or contact your system administrator.; nested exception is: [[
javax.xml.ws.soap.SOAPFaultException: Authentication error. An error occurred during authentication. Try again later or contact your system administrator." and lookslike is related also to the Impersonate.

Thanks,

Hector Andrade

Gianni Ceresa

after the upgrade from 10g to 11g We are only able to log into Analytics, not to XMLPUser

Sounds like the upgrade wasn't done correctly, but this is anyway a different problem.

Were the agents working fine and one day stopped and started throwing that error?
Or they never did and since your upgrade to OBIEE 11g they are giving you the message posted?

If a direct consequence of the upgrade, when was that performed? How? Any particular reason to stay 10 years behind current versions of the product?

Hector Andrade

Thanks Gianni,

The agents never worked with users migrated from 10g, if we run the agents with weblogic user, agents ran without an issue. About the version this user doesn't want to migrate to a newer version as they are planning to move in one year.

About the upgrade, we did the upgrade of RPD and Catalog, then we did the BI Publisher Upgrade, do we need to do something else??

Thanks,

Hector Andrade

[Deleted User]

As stated by Steve initially, 11g is in Sustaining Support since years.

To give some context: The first version of the OBIEE 11g family was release in 2009, meaning "the upgrade from 10g to 11g" should have happened well over 10 years ago.

An ugrade from 10g to 11g was more involved than "we did the upgrade of RPD and catalog" due to OBIEE 11g being the first release to rely on Weblogic as its backend architecture and the product evolving rapidly.

Official documentation on upgrades: https://docs.oracle.com/cd/E28280_01/upgrade.1111/e16452/bi_plan.htm

Specifically but especially security worked very much differently than in "10g" back with "11g".

Lastly please have a look at this: https://support.oracle.com/epmos/faces/DocContentDisplay?id=1488475.1

"11g" is already very unprecise as there were 5 major versions of the 11g family released. All of them are outdated as stated:

Premier Support for all 11g releases ended in December 2018. Customers wishing to continue error correction beyond December 2018, for any 11g version, must be on the terminal release (11.1.1.9), and must be approved to purchase Extended Support.

Hector Andrade

Hi guys,

One thing that we notice is that if we log with one of the users that came from 10g we see this message on the bi_server1.log

We tested creating a new user in WebLogic Console with same groups and roles and we were able to run and agent. We are thinking that is related to something in the keystore, could it be?? Do we need to do something related to the security during the upgrade??

Thanks,

Hector Andrade

Hi guys,

An update, we openned the BI Admin Tool, opened the RPD in Online Mode and execute the Synchronization Application Roles on Manage Identity Menu and that did the trick, we wer able to execute agents and login in XMLPServer Page, but if we restart the services, the behavior came back and need to repeat the same steps. Do you know if I can do something else??

Thanks,

Hector Andrade

Brandon_H

Check the value of lightweightSSOEnabled in:

$DOMAIN_HOME/config/fmwconfig/biconfig/bi-security/config.properties

eg:

lightweightSSOEnabled=false

Hector Andrade

Thanks Brandon,

Is there something similar for 11g??

Thanks,

Hector Andrade

Brandon_H

Not sure, scan the whole domain home to verify:

cd $DOMAIN_HOME

grep -rli lightweightSSOEnabled

Other places to check that are related:

enterprise manager (http://hostname:port/em) → Business Intelligence Instance → Security → Single Sign on - Radio box "Enable SSO"

Probably there is also an MBean…

hopefully you dont end up having to go to that level.

Anyways I mentioned because I noticed some time back the impersonate in some cases didn't work unless

lightweightSSOEnabled=false