Update Guids in OBIEE Cluster

Refreshing GUIDs in a OBIEE Cluster
What are Guids?
GUIDs are identifiers that are unique for a given user. Using GUIDs to identify users provides a higher level of security because it ensures that data and metadata are uniquely secured for a specific user, independent of the user name.


For Refreshing Guids in a Cluster please do the following Steps:
Note that GUID refresh must occur with only one node operating at a time.

Stop Oracle BI Server and Presentation Services on all nodes except where you are refreshing the user GUIDs. For example:

    cd $ORACLE_HOME/admin/instancen/bin
    ./opmnctl stopproc ias-component=coreapplication_obips1./opmnctl stopproc ias-component=coreapplicaiton_obis1

    Update the FMW_UPDATE_ROLE_AND_USER_REF_GUIDS parameter in NQSConfig.INI:

        Open NQSConfig.INI for editing at:

      cd  $ORACLE_INSTANCE/config/OracleBIServerComponent/coreapplication_obis1

        Locate the FMW_UPDATE_ROLE_AND_USER_REF_GUIDS parameter and set it to YES, as follows:

        FMW_UPDATE_ROLE_AND_USER_REF_GUIDS = YES;

        Save and close the file.

    Update the Catalog element in instanceconfig.xml:

        Open instanceconfig.xml for editing at:

        cd $ORACLE_INSTANCE/config/OracleBIPresentationServicesComponent/
        coreapplication_obips1

        Locate the Catalog element and update it as follows:

        <Catalog>
        <UpgradeAndExit>false</UpgradeAndExit>
        <UpdateAccountGUIDs>UpdateAndExit</UpdateAccountGUIDs>
        </Catalog>

        Save and close the file.

    Restart the Oracle BI Server and Presentation Services using opmnctl:

    cd ORACLE_HOME/admin/instancen/bin
    ./opmnctl stopproc ias-component=coreapplication_obips1
    ./opmnctl stopproc ias-component=coreapplicaiton_obis1
    ./opmnctl startproc ias-component=coreapplicaiton_obis1

    After you confirm that the Oracle BI Server is running, then start Presentation Services:

    ./opmnctl startproc ias-component=coreapplicaiton_obips1

    Set the FMW_UPDATE_ROLE_AND_USER_REF_GUIDS parameter in NQSConfig.INI back to NO.

    Important: You must perform this step to ensure that your system is secure.

    Update the Catalog element in instanceconfig.xml to remove the UpdateAccount GUIDs entry.

    Restart the Oracle Business Intelligence system components again using opmnctl:

    cd ORACLE_HOME/admin/instancen/bin
    ./opmnctl stopall
    ./opmnctl startall


Reference:
http://docs.oracle.com/cd/E23943_01/bi.1111/e10543/privileges.htm#BIESC721

No comments:

Post a Comment