GOURL does not work

TONIOTONIO

Hi all

i'm tryimg to use gourl option to call a OBI dashboard  from another webapp. But when j get request (also in post) OBI prompt me user e pwd.

I call dashboard like this

thx

Gianni Ceresa

And what (exact) version is your OBIEE? What security did you setup? SSO?

PS: your link still had the original IP inside, 10.xx.xx.150 apparently. You can post that kind of link in full text as it's a private IP address and it only works locally inside the network of your employer. Nobody from outside can even try to connect to that server... 10.111.56.150

Joel

The reason why @Gianni Ceresa is asking for your version is that passing the username and password in the GOURL was discontinued in  OBIEE 12c. It isn't recommended but you'll have to disable lightweight SSO using WLST in order to get this working.

TONIOTONIO

Thx Gianni, please can you delete IP address? J have wrote IP ADDRESS inadvertently. Thx

In order to the problem i'm using OBIEE 12c.

Where j have to disable lightweight SSO ? how j have setting it?

Thx a lot Gianni AND Joel

Joel

According to this document, https://support.oracle.com/knowledge/Enterprise%20Performance%20Management%20and%20Business%20Intelligence/2316810_1.htm… , you need to disable lightweight SSO to allow the username/password parameters in GOURL.

For further information on enabling/disabling OBIEE 12c lightweight SSO, look at the document - https://docs.oracle.com/middleware/12213/biee/BIESC/GUID-FA0DFEC2-B39C-45DD-9870-0CEB04BDFC71.htm#BIESC6389

Gianni Ceresa

TONIOTONIO wrote:Thx Gianni, please can you delete IP address? 

Again, there is no reason for keeping this information "secret" as it's a private IP address, it isn't routable. https://en.wikipedia.org/wiki/Private_network

Any router will drop any attempt to connect to that IP as it's for internal use only. There are thousands of networks around the planet having the same exact IP in use internally, but it's just that! An internal IP address which can't be routed through the web.

TONIOTONIO

thx Gianni...j'm trying what you and Joel have suggested

Gianni Ceresa

Before to turn off the lightweight SSO, are you that's what you need? Because your GOURL passing credentials will work, but you will maybe break something else people use for real.

Before to turn if off, make sure you understand what does the lightweight SSO and that you can confirm nobody needs it. There are many ways to embed OBIEE content into other apps, using the URL with the credentials, mainly if into a frame or similar, means you are giving away to any user of that web app a valid username & password for your OBIEE. Therefore you want to make sure your security setup is solid and tested properly to avoid anyone with those credentials to see and do things they aren't allowed to do.

As you didn't provide the full picture (context) of the request, there is no way to highlight other downside you maybe want to check first, but at least evaluate those points before to change anything.

PS: have a look at https://itoug.it/eventi/tech-days-2020/itoug-tech-day-roma-2020/  , a free event not too far in January (also in Milan 2 days earlier)

[Deleted User]

Apart from all other things, you may want to reconsider which answer is "correct". Because - no offence, Gianni - a post with 2 counter-questions isn't the "correct answer" to this question and won't help other forum users at all if they have a similar issue.

TONIOTONIO

Anyway j have disabled it (see picture below)

https://rizzi.tinytake.com/tt/Mzk2MDAzOF8xMjE1NTg1OA

but when i get below request

http://xx.xxx.xxx.xxx:9502/analytics/saw.dll?Go&Path=%2Fshared%2FBBBB%20Sviluppo%2FProva%20Sim&NQUser=wwwww&NQPassword=qqqq

BI prompt me user & Password login form

TONIOTONIO

thanks gianni, i think you are right. Disable SSo isn't the best choice. How would you suggest me to do?