External Database Table Authentication OBIEE 12C

Question

Hi,

We have upgraded from obiee 11.1.1.7.1 to 12.2.1.2.0. We are using initialization block for authentication it was working fine in 11g After the upgrade users stored in external database table are not able to login to analytics.

Below is the error in presentation services log

[2016-12-28T15:10:29-05:00] [OBIPS] [ERROR:1] [] [saw.securitysubsystem.checkauthentication.runimpl] [ecid: cf1686f2-026a-45cf-91cd-079023186306-00000ec6,0:1:1] [tid: 1668814592] [SI-Name: ] [IDD-Name: ] [IDD-GUID: ] [userId: ] Odbc driver returned an error (SQLDriverConnectW).

State: 08004.  Code: 10018.  [NQODBC] [SQL_STATE: 08004] [nQSError: 10018] Access for the requested connection is refused.

(08004)

State: HY000.  Code: 43113.  [nQSError: 43113] Message returned from OBIS.

(HY000)

State: HY000.  Code: 13057.  [nQSError: 13057] Error From BI Security Service: [SecurityService] [oracle.bi.security.ws.runtime.ValidateExternalRolesAction::execute] [OBI-SEC-00014] BI Security Service caught an unexpected error. (HY000)[[

File:checkauthentication.cpp

Line:1607

Location:

saw.securitysubsystem.checkauthentication.runimpl

saw.threadpool.asynclogon

saw.threads

]]

Not sure what I am missing. When I tested the initialization block in the rpd it is working.

Someone please let me know how to proceed.

Thanks so much.

901674 · Answer

Thanks so much for the reply. We just upgraded and doing all the validations if authentication via Initialization blocks doesn't work then I think we will move to Fusion Middleware Security.

But my question is when I check the log files I don't even see authentication initialization block getting fired. Even if 12C doesn't support I have to see this in log file right?

Thanks

Gianni Ceresa · Answer

Hi,

In 12.2.1.2.0 things changed a bit compared to 12.2.1.0.0, for example the catalog groups are gone now (they were there but deprecated in 12.2.1.0.0).

In general it's recommended to move to authentication providers even if the doc still say the init block way is still there (Comparing the Oracle Business Intelligence 11g and 12c Security Models ).

https://blogs.oracle.com/pa/entry/remove_init_block_users_from  for the blog recommending to move to Fusion Middleware Security.

So ... maybe have a look if you can't manage to move them out to authentication provider?