Business objects windows ad authentication

Instead of just letting you walk through the process yourself, I also wanted to give you a more visual guide. So below, please find a DSLayer special edition, video walkthrough of this guide:. Create an Active Directory service account, biservice pass: Password1. Click Save to save all your entries. Check under the Groups area to make sure your AD group has been added. If a new ticket is stored, the file is correct. Stop Tomcat. Copy BIlaunchpad. Also included in the SAP note is troubleshooting assistance for each step.

Thanks for the feedback David, great is was useful for you! This is a great video. It' works with 3. Now it uses. We have a different app in the tomcat webapps dir. Here's the code. I have the 3. Exception occurred; original exception message VSJ authentication was not performed for this request. Exception: VSJ authentication was not performed for this request. Exception occurred; original exception message VSJ authentication was not performed for this request VSJ authentication was not performed for this request.

Hi Michael, thanks for your feedback. If you are using a Tomcat instance that has been around for a while for other purposes, or one that has been configured to run XI 3. Hey Josh. Thanks for the response. This is the a clean, BI 4 install. The problem is, we deployed our own web app and it's not working. The problem is, BOE's process of extracting the credentials is a black box.

It just fails and I don't see why. I want to know what is missing. The 'BOE' web app Launch Pad finds its configuration and ours is in the same tomcat server but NOT the same web app so I'm guessing it just can't find the properties files or something. Also, is there a way to turn some sort of debugging on so I can see what VintelaCredMgrFactory is doing? Thanks though Joshua. If I find a solution I will post it back here. Do you know how I can reach out to those 2 individuals? I would definitely recommend a separate service account for each system - this makes troubleshooting and maintenance a lot simpler, and 3 accounts instead of 1 shouldn't matter to the AD team.

Any other advice is appreciated - as we are just about to do our first WinAD set-up on a 4. I haven't done a 4. One small thing that we discovered. You're video is awesome. Yes if the Tomcat environments aren't clustered, you can do all the Tomcat steps independently.

Nice blog and nice presentation on the video. Basically, i need another help from you. I am doing a migration from XI R2 to 3.

Secondly, do we have any similar document for 3. Please help and thank you so much!! If you are not planning to stay on XI 3. Unfortunately, the SMP is down right now so I can't find the note for you.

Yes - if you need to move across existing AD users with their docs, then definitely configure AD config on 3. Our Windows Network Admin created the Service account and assigned the service principal name. However, i am not sure which group did he assign this Service account. Without that, i think i won't be able to add the service user into my CMC authentication and in turn i can't test the Windows AD while logging on.

Please help. You don't need to add the group for the Service Account - you specify this directly. But, i can't see this service user under "users or groups" tab or anywhere on CMC? Then, how the Windows AD authentication will happen? It won't show up under the users, as the Service Account is only used to connect to AD to verify incoming users' credentials.

I logged into the remote BO server with the service account and now in order to test the Windows AD authentication i opened CMC and gave the service account as user and password was blank.

Mohan Kaparthi. Any help is much Appreciated. Tim Ziemba. Stefan Backhaus. We face same issue under same configuration. Any ideas how to overcome this. Many thanks! Stefan While debugging we can find this error message: -timestamp- LoginContext failed. Dear, we discovered the same issue. Regards Stefan. Great post! Thank you for sharing. Hi Yogesh Just trying to process you process the steps in the post.

Case sensitive. Did you copy paste — Desh? Thanks Yogesh. Like 1 Share. Thanks for the Hint now it worked. This guide works the same for BO 4.

It should work I there a similar good guide like this to do it on NetWeaver? Hi, I follow all this steps.. What can I check? Joe Peters. Create on both. Sorry, what do you mean by both? You need to setup files on all of your BI servers. Hello Naveen, We faced same issue in our environment.

Hi Yogesh, it's been reported for BI 4. Thanks, Naveen Jain. James Chapman. Hello, Yogesh. Thanks in advance for all or any feedback or information. Cheers, James Chapman. Hi Tim, Thanks for your reply, unfortunately in do not have access to the link you included. Maarten Kuivenhoven.

Hello Yogesh, Thanks for your post. Single signon is working but we get kerberos errors example: I searched the internet for a solution but haven't found the right one yet. Can you help me fixing this problem? Hello, What are you trying to do? Please look at Chad'e reply -Yogesh. Did you do the portion where it mentions increasing the HTTP header size in the server.

Yes that will do it. What we did was added domain. Shota Nakai. Thank you for great information, i am trying this procedure tom implement SSO on my environment. Mohammed Ashraf. Thank you for the answer. Punniyamurthy Sunderam. Hi Yogesh, I do researched not found any solution for my issue, also working with SAP support still no luck. Thanks Sunder. Hope this will expedite to resolve the issue you have in the system.

Thanks Yogesh! I will do the same. Chinmayee Rout. Hi Yogesh Patel This blog seems to be really helpful on my scenario!! Your suggestion will be really helpful. Regards, Chinmayee. There must be a test environment for SAP too! Jackie Jones. Thanks again. That is why I tried to give screenshots with it as below.

To get a listing of what is currently registered for the account. I will discuss more about the subsequent steps in the upcoming blog. No comments:. Newer Post Older Post Home. Subscribe to: Post Comments Atom. Mamta twitter Tweets by MamtaGerg. Powered by Blogger. Popular Posts. Hi All, Hope you continue to read our Series of blogs. Let me discuss something about Single Sign-on implementation in Business Objects Configuring the Server Intelligence Agent Building dashboards using Xcelsius with SharePoint data.

Do you know — Xcelsius dashboards can be built using SharePoint data? Figure 1: Xcelsius dashboard built using SharePoint data P Business Objects Administration — Backup and Recovery. A backup and recovery plan consist