Dear Experts,
Where to set below setup in obiee 12.2.1.4.0
the web application sends non-secure cookies over ssl in obiee ? where to set this ?
ORA_BIPS_LBINFO
JSESSIONID
Hi,
Did somebody run a security scan/audit on your OBIEE and they gave you a long list of things being "unsecure" ?
3808468 wrote:the web application sends non-secure cookies over ssl in obiee ?
What is a "secure" cookie for you?
If you mean the "secure" flag of the cookies being set, you must also know that this doesn't make the cookie secure.
That "secure" flag is totally useless when your cookie is sent over SSL, mainly because that flag just means to not send the cookie if the connection isn't SSL.
If you really want that "secure" flag to be set, you can configure it into your instanceconfig.xml, there is a "CookieSecure" tag which can be used.
Dear Gianni,
As per below document they mentioned to configure secure cookies in the below location
i.e WEB-INF/weblogic.xml
OBI 11g|12c: How To Configure Secure Cookies (Doc ID 1676542.1)
I am bit confused what is the right place to set secure cookies is this in instanceconfig.xml or weblogic.xml ?
Please suggest
Good question ...
I find the info about instanceconfig.xml in the XSD file defining all the allowed tags in instanceconfig.xml (I was looking at a 12.2.1.1 version, I don't think it changed in .4), you can see a screenshot of the part about the secure flag below.
So instanceconfig.xml will accept that setting.
The unknown point is if it's enough, and even more if it isn't defined somewhere else (like in the file you find in the MOS document as there is a referenced to @mBeanInfo which I have no idea how it is interpreted by OBIEE).
What I would do, being you, is to set the flag in instanceconfig.xml, restart and test on a HTTP (non SSL) connection if the cookies are set or not. I would do that because changing instanceconfig.xml and restarting is a lot less work than the change of the MOS document.
If it works, fine: you got what you are after with a simple config file setting.
If it doesn't work you are good to go with the changes of the MOS file (knowing you will have to do them again and again every time to patch your OBIEE as the analytics deployment has good chances to be replaced).
Explore how to build agents using code in AI Data Platform. We'll create an agent that examines and analyzes the contents of a Github repository and reports its findings. The session demonstrates how to use different developer tools to create agents including the AIDP extension for VS Code and Codex. Using these tools we…
The user icon in the upper-right corner of OAC (DV) is displaying more menu options for our non-admin users than we wish to display. We would like to restrict these to only "Profile" and "Sign Out" for regular users. Is there a way to customize these menu items? Especially if we can control this via security, that would be…
What is wrong with this code
Am I missing something or is there no way to search through previous posts to make sure I don't duplicate a question? All I see on the filter options are tags or status… a general search for a word or phrase would be helpful.
We were under the impression that when exporting a visualization in DV to CSV format hidden columns would be include from the grammar panel. This is not happening. See below for a screenshot showing 3 hidden columns that do not appear when exporting the pivot table to CSV. This seems to have worked a month or so back but…
Migrated RPD from obiee12c to OAS 2024. post migration when we try to access dashboards on OAS we are getting below error: State: HY000. Code: 10058. [NQODBC] [SQL_STATE: HY000] [nQSError: 10058] A general error has occurred. (HY000) State: HY000. Code: 43275. [nQSError: 43275] Message returned from OBIS…
