Change password by user in OBIEE 12c

Soheil Star

Hi Guys

I'm interested to know if there is any way to users could change their password independently ?! I have read some articles regrading to develop java class by calling change password method from MBean server and deploy it on BI Server (https://www.rittmanmead.com/blog/2011/10/changing-your-password-in-obiee-11g/), and surprisingly another article from oracle which mention users could change their password easily from their Oracle Publisher dashboard (https://www.oracle.com/webfolder/technetwork/tutorials/obe/fmw/bi/bip/bip11g/gettingstarted11116/gs.htm#t1s6). But both of them first related to 11g version and secondly doesn't work for me!

Any idea to solve this problem in OBIEE 12c product ?

Thank is advance

[Deleted User]

There is another question you have to ask yourself first:

Are your users really handled by the WLS Security Realm alone and not by a corporate LDAP / MSAD etc? And if "yes" - why?

Soheil Star

The answer is 'Yes'. Imaging you are going to develop reports for board of director members ,so you create user manually in internal OBIEE LDAP, then some of them wanted to change their password ! And other same scenarios that need to create user manually in Realm and facing change password issue.

Joel

I believe that @Christian Berg point is that in this case, you should consider managing user security in your corporate LDAP and integrate this into your OBIEE with SSO. This will mean that user security will be managed externally and users won't have the need for yet another user account.

[Deleted User]

In that case you may want to be more precise than "doesn't work for me" because that doesn't work for helping you. What did you do? What fails?

Because the MBean definitely still exists and can be accessed programmatically.

Gianni Ceresa

Extending what Christian and Joel said, in your "imagine example" you are forgetting that authentication and authorization are 2 different steps.

Authentication can (need?) to be managed by the enterprise LDAP/AD, but if you want to keep control of authorization you can perfectly do it and do not need to use the LDAP/AD groups. That's why the embedded LDAP in weblogic is a very minimalist one missing very simple basic LDAP functionality like changing password etc.

[Deleted User]

It's this kind of thread that can be summed up with "let's forget reason and do precisely what is asked"

Soheil Star

Joel, any suggestion how does handle externally security manager and integration with OBIEE SSO ?

Soheil Star

Actually I needed some external resource and permission from my organization to handle with programming! But I think I should go through this solution

Soheil Star

Gianni, any suggestion for external authorization ?

Joel

This is the Oracle documentation with the detailed steps needed to set up SSO inOBIEE 12c:

https://blogs.oracle.com/cealteam/obiee-12c%3a-configuring-kerberos-sso-for-obiee-12c