OBIEE 12.2.1.3 Alternative Authentication Provider OBI-SEC-00018 OBI-SEC-00500

User_MRIVI

According to the description in the document

Oracle® Fusion Middleware

Security Guide for Oracle Business

Intelligence Enterprise Edition

https://docs.oracle.com/middleware/12213/biee/BIESC/BIESC.pdf

Section

Configuring a Database as the Authentication Provider

i’ve configured the alternative authentication provider, but it doesn’t work.

[OBIS] [ERROR:1] [] [] [ecid: ] [sik: ssi] [tid: 1a6]  [nQSError: 13057] Error

From BI Security Service: [BISecurity] [oracle.bi.security.centaurus.AssertUserAction::execute] [OBI-SEC-00018]

Assertion of user "BICONSUMER" failed.. [[

file: server/NQSNative/NQSServEntry/Source/NQSGetGroups.cpp; line: 254

[OBIS] [ERROR:1] [] [] [ecid: ] [sik: ssi] [tid: 1ad]  [nQSError: 13057] Error

From BI Security Service: [BISecurity] [oracle.bi.security.centaurus.AssertUserAction::execute] [OBI-SEC-00018]

Assertion of user "BISERVICEADMIN" failed.. [[

file: server/NQSNative/NQSServEntry/Source/NQSARpGatewayListStream.cpp; line: 1980

[OBIS] [ERROR:1] [] [] [ecid: ] [sik: ssi] [tid: 1b0]  [nQSError: 13057] Error

From BI Security Service: [BISecurity] [oracle.bi.security.centaurus.GetRoleUsersAction::execute] [OBI-SEC-0050

0] Identity store provider error. [[

file: server/NQSNative/NQSServEntry/Source/NQSARpGatewayListStream.cpp; line: 1879

What is wrong?

There are no problems in the Administration of Presentation Service. It is possible to add these users to any privileges.

The DB Datasources:

create or replace view USERS

as select 'BISERVICEADMIN'        U_NAME

      ,'BISERVICEADMIN@test.com'  MAIL_ADRESS

      ,'BISERVICEADMIN'           U_DESCRIPTION

      ,'BISERVICEADMIN'           CN

      ,'BISERVICEADMIN'           DISPLAYNAME

      ,'BISERVICEADMIN'           ORCLGUID

  from dual

union select 'BICONTENTAUTHOR'    U_NAME

      ,'BICONTENTAUTHOR@test.com' MAIL_ADRESS

      ,'BICONTENTAUTHOR'          U_DESCRIPTION

      ,'BICONTENTAUTHOR'          CN

      ,'BICONTENTAUTHOR'          DISPLAYNAME

      ,'BICONTENTAUTHOR'          ORCLGUID

  from dual

union select 'BICONSUMER'         U_NAME

      ,'BICONSUMER@test.com'      MAIL_ADRESS

      ,'BICONSUMER'                      U_DESCRIPTION

      ,'BICONSUMER'                      CN

      ,'BICONSUMER'                      DISPLAYNAME

      ,'BICONSUMER'                      ORCLGUID

  from dual;

create or replace view USER_VW

as select

U_NAME

,MAIL_ADRESS

,U_DESCRIPTION

,CN

,DISPLAYNAME

,ORCLGUID

from USERS;

create or replace view GROUPS

as select

'BIServiceAdministrators'        G_NAME

,'BI ServiceAdministrators Group' G_DESCRIPTION

from dual

union select

'BIContentAuthors'               G_NAME

,'BI ContentAuthors Group'        G_DESCRIPTION

from dual

union select

'BIConsumers'                    G_NAME

,'BI Consumers Group'             G_DESCRIPTION

from dual;

create or replace view GROUPMEMBERS

as select

'BISERVICEADMIN'          G_MEMBER

,'BIServiceAdministrators' G_NAME

from dual

union select

'BISERVICEADMIN'          G_MEMBER

,'BIContentAuthors'        G_NAME

from dual

union select

'BISERVICEADMIN'          G_MEMBER

,'BIConsumers'             G_NAME

from dual

union select

'BICONTENTAUTHOR'         G_MEMBER

,'BIContentAuthors'        G_NAME

from dual

union select

'BICONTENTAUTHOR'         G_MEMBER

,'BIConsumers'             G_NAME

from dual

union select

'BICONSUMER'              G_MEMBER

,'BIConsumers'             G_NAME

from dual;

create or replace view GROUPMEMBERS_VW

as select

G_MEMBER

,G_NAME

from GROUPMEMBERS;