Oracle Analytics Cloud and Server

Home› Oracle Analytics› Oracle Analytics Forums› Oracle Analytics Cloud and Server› Oracle Analytics Cloud and Server

Categories

Welcome to the Oracle Analytics Community: Please complete your User Profile and upload your Profile Picture

External Database Table Authentication OBIEE 12C

Received Response
1
Views
2
Comments
901674
901674 Rank 2 - Community Beginner
edited Aug 13, 2024 6:09PM in Oracle Analytics Cloud and Server

Hi,

We have upgraded from obiee 11.1.1.7.1 to 12.2.1.2.0. We are using initialization block for authentication it was working fine in 11g After the upgrade users stored in external database table are not able to login to analytics.

Below is the error in presentation services log

[2016-12-28T15:10:29-05:00] [OBIPS] [ERROR:1] [] [saw.securitysubsystem.checkauthentication.runimpl] [ecid: cf1686f2-026a-45cf-91cd-079023186306-00000ec6,0:1:1] [tid: 1668814592] [SI-Name: ] [IDD-Name: ] [IDD-GUID: ] [userId: ] Odbc driver returned an error (SQLDriverConnectW).

State: 08004.  Code: 10018.  [NQODBC] [SQL_STATE: 08004] [nQSError: 10018] Access for the requested connection is refused.

(08004)

State: HY000.  Code: 43113.  [nQSError: 43113] Message returned from OBIS.

(HY000)

State: HY000.  Code: 13057.  [nQSError: 13057] Error From BI Security Service: [SecurityService] [oracle.bi.security.ws.runtime.ValidateExternalRolesAction::execute] [OBI-SEC-00014] BI Security Service caught an unexpected error. (HY000)[[

File:checkauthentication.cpp

Line:1607

Location:

  saw.securitysubsystem.checkauthentication.runimpl

  saw.threadpool.asynclogon

  saw.threads

]]

Not sure what I am missing. When I tested the initialization block in the rpd it is working.

Someone please let me know how to proceed.

Thanks so much.

Answers

  • Gianni Ceresa
    Gianni Ceresa Mod

    Hi,

    In 12.2.1.2.0 things changed a bit compared to 12.2.1.0.0, for example the catalog groups are gone now (they were there but deprecated in 12.2.1.0.0).

    In general it's recommended to move to authentication providers even if the doc still say the init block way is still there (Comparing the Oracle Business Intelligence 11g and 12c Security Models ).

    https://blogs.oracle.com/pa/entry/remove_init_block_users_from  for the blog recommending to move to Fusion Middleware Security.

    So ... maybe have a look if you can't manage to move them out to authentication provider?

  • 901674
    901674 Rank 2 - Community Beginner

    Thanks so much for the reply. We just upgraded and doing all the validations if authentication via Initialization blocks doesn't work then I think we will move to Fusion Middleware Security.

    But my question is when I check the log files I don't even see authentication initialization block getting fired. Even if 12C doesn't support I have to see this in log file right?

    Thanks