Team,
I have done AD integration and i am able to see all the users in weblogic console. But challenge is any User can Authenticate with any Password.
for example
username- kjdnkjandkja
Password = dnsadnaj
also able to login to obiee. Version =11.1.1.9.160119 (Build 151227.0323.02 64-bit)
followed similar steps:
http://paulcannon-bi.blogspot.com/2012/07/configuring-ldap-authentication-for.html
Thanks
Joji
Thank god I never saw that blog post since that advice is pretty much insane.
You don't create a new security realm but extend the existing one with (a) additional security provider(s)!
https://docs.oracle.com/middleware/12212/biee/BIESC/GUID-30F09EE4-A2DE-443D-BF24-CC401B6E13FD.htm#BIESC6054
What about following the official doc or some MOS notes? (there has been quite a lot written on AD authentication)
Keep it simple and stick to "certified" sources as they exists.
Hi, even I didn't follow this one just gave for reference. So far I done almost more than 12 AD integrations environments but never tested in this way.
My requirement is configure AD integration and disable SSO.
Have you seen such scenarios in past?
If you didn't follow this then why post it and lead us on a wrong path?
What *exactly* have you done and how have you configured things?
3709799 wrote:My requirement is configure AD integration and disable SSO.Have you seen such scenarios in past?
A scenario where everybody could log on with no check? No. Not in almost a dozen security integrations I have done so far on 12.
Sorry Chris, I didn't mean to lead the other way.
I have followed standard steps to configure AD authentication with obiee 11g in weblogic console by getting Principal name and credentials from my AD team.
I can see all AD users in weblogic console and also all AD users can login to OBIEE and access their reports.
Today 1 developer while checking randomly found this issue. Have you encountered similar scenario?
Joji,
That still doesn't tell us what has been done - precisely. As indicated I've done this time and time again and there must be a hiccup somewhere in your config.
I guess you can understand that us asking you for every single config option one by one would be quite tedious as it can be just about anything.
All,
Seems to be a bug# 13892104 . We need to remove authenticated user role from BI consumer role in EM. And this solved the issue
Many thanks
That's more a good practice than a bug : if you don't filter extremely well the definition of your users in the AD integration any user with valid AD credentials will end up being a BI Consumer. Removing authenticated users from any inheritance is normal in any setup (when you care about security).
Still the bug isn't about letting users to authenticate against AD with any password, while you said that users are authenticated with any password.
So do you mean that as long as you know the username you can login using any random password?
Or did you mean that even users not having any OBIEE group/approle assigned to them in AD can login? (which by default is normal as you didn't setup security to avoid it?)
+1 to Gianni. Your symptom and the bug as well as MOS Doc ID 2220462.1 are talking about two different things.
If you think you "solved" your issue, then you're on the best way of creating a security "solution" where you quite literally do not understand what is working why and how.
Guys,
i have raised an Oracle SR and they gave below resolution and it's worked perfectly:
I have USER session variable in my rpd.
1. Log into the Administration tool.
2. Open the repository in question. ( I guess it's online mode)
3. Check for any initialization associated with the USER session variable.
4. Disable the initialization block.
5. Save your changes.
6. Restart the OBIEE services.
Explore how to build agents using code in AI Data Platform. We'll create an agent that examines and analyzes the contents of a Github repository and reports its findings. The session demonstrates how to use different developer tools to create agents including the AIDP extension for VS Code and Codex. Using these tools we…
The user icon in the upper-right corner of OAC (DV) is displaying more menu options for our non-admin users than we wish to display. We would like to restrict these to only "Profile" and "Sign Out" for regular users. Is there a way to customize these menu items? Especially if we can control this via security, that would be…
What is wrong with this code
Am I missing something or is there no way to search through previous posts to make sure I don't duplicate a question? All I see on the filter options are tags or status… a general search for a word or phrase would be helpful.
We were under the impression that when exporting a visualization in DV to CSV format hidden columns would be include from the grammar panel. This is not happening. See below for a screenshot showing 3 hidden columns that do not appear when exporting the pivot table to CSV. This seems to have worked a month or so back but…
Migrated RPD from obiee12c to OAS 2024. post migration when we try to access dashboards on OAS we are getting below error: State: HY000. Code: 10058. [NQODBC] [SQL_STATE: HY000] [nQSError: 10058] A general error has occurred. (HY000) State: HY000. Code: 43275. [nQSError: 43275] Message returned from OBIS…
