环境信息：
OBIEE：11.1.1.9.0
操作系统：windows 64位
配置AD域验证
问题：
在console中已经读取到AD域中的用户，EM角色中点添加用户也可以看到AD域用户，但是AD域用户登录不了analytics？？？
sawlog0日志文件错误信息如下：
[2015-12-27T16:32:14.000+08:00] [OBIPS] [ERROR:31] [] [saw.connectionPool.getConnection] [ecid: ] [tid: ] Authentication Failure.
Odbc driver returned an error (SQLDriverConnectW).
State: 08004. Code: 10018. [NQODBC] [SQL_STATE: 08004] [nQSError: 10018] Access for the requested connection is refused.
[nQSError: 43113] Message returned from OBIS.
[nQSError: 43126] Authentication failed: invalid user/password.
[2015-12-27T16:32:14.000+08:00] [OBIPS] [ERROR:31] [] [saw.security.odbcuserpopulationimpl.getbisystemconnection] [ecid: ] [tid: ] Could not create a system user connection to Oracle BI Server during start-up. Please check the error message and try again.
Authentication Failure.
Odbc driver returned an error (SQLDriverConnectW).
State: 08004. Code: 10018. [NQODBC] [SQL_STATE: 08004] [nQSError: 10018] Access for the requested connection is refused.
[nQSError: 43113] Message returned from OBIS.
[nQSError: 43126] Authentication failed: invalid user/password.
nqserver日志文件错误信息如下：
[2015-12-27T16:19:29.158+08:00] [OracleBIServerComponent] [ERROR:1] [] [] [ecid: 00iXbCXSDkN6yG15zv1FiW0001jK0001Cl,0] [tid: 1964] [nQSError: 13057] BI 安全服务中出错: SecurityService::execute [OBI-SEC-00015] Unable to find user {0} in identity store。
解决方法：
这是11.1.1.9.0的一个Bug，需要打Patch 21895214补丁来进行修复。
官方文档参考如下：
OBIEE 11g: Alert: Users Unable to Log in to OBIEE 11.1.1.9 if Using MSAD or Other Third-Party LDAP as the Identity Store and Virtualization is Set to true. (Doc ID 2016571.1) To Bottom
In this Document
Description
Occurrence
Symptoms
Patches
History
References
APPLIES TO:
Business Intelligence Server Enterprise Edition - Version 11.1.1.9.0 and later
Business Intelligence Suite Enterprise Edition - Version 11.1.1.9.0 and later
Oracle Exalytics Software - Version 2.0.0.0.0 to 2.0.0.0.0 [Release 2.0]
Information in this document applies to any platform.
DESCRIPTION
When using Microsoft Active Directory (or another third-party LDAP) as the Identity Store and also using the virtualize=true option, you are unable to log in to Oracle Business Intelligence.
There are two known issues in with libOVD and GUID lookups addressed in the patch below.
OCCURRENCE
This will occur every time a user tries to log in when virtualize=true is set.
SYMPTOMS
Users cannot log in when “virtualize=true” is set
PATCHES
Apply Patch 21895214 which includes Patch 20188679 and Patch 21382568
20188679 AUTHENTICATION FAILS AGAINST 3RD PARTY LDAP WHEN VIRTUALIZE=TRUE SET
21382568 GUID LOOKUP ISSUE AFTER UPGRADING TO OBIEE 11.1.1.9.0
OBIEE 11g (11.1.1.9): With Microsoft Active Directory Authentication Provider (Identity Store) Configured, OBIEE Logins Fail With “Unable to find user {0} in identity store” (Doc ID 2062681.1) To Bottom
In this Document
Symptoms
Cause
Solution
References
APPLIES TO:
Business Intelligence Suite Enterprise Edition - Version 11.1.1.9.0 and later
Information in this document applies to any platform.
SYMPTOMS
When configuring Microsoft Active Directory as the Identity Store or Authentication provider, login into OBIEE, fails with the following error:
Unable to login and the bi_server1-diagnostic.log shows the error:
“Unable to find user {0} in identity store.”
The issue can be reproduces with the following steps:
1. Install OBIEE 11.1.1.9.0.
2. Apply the virtualize=true patch. (Patch 20188679)
3. Configure MS AD Provider in WLS, and try to then login to OBIEE.
4. Login fails and review of the bi_server1-diagnostic.log shows the above error.
CAUSE
This is caused by a GUID lookup failure as documented in OVD Bug 21382568 - GUID LOOKUP ISSUE AFTER UPGRADING TO OBIEE 11.1.1.9.0.
SOLUTION
To resolve this issue, do the following:
1. Navigate to My Oracle Support, Patches & Updates area.
Enter patch number 21895214 to download the following patch:
Patch 21895214: MERGE REQUEST ON TOP OF 11.1.1.9.0 FOR BUGS 20188679 21382568
Product Oracle Virtual Directory
Release FMW 11.1.1.9.0
Platform Generic Platform
Bugs Resolved by This Patch
20188679 AUTHENTICATION FAILS AGAINST 3RD PARTY LDAP WHEN VIRTUALIZE=TRUE SET
21382568 GUID LOOKUP ISSUE AFTER UPGRADING TO OBIEE 11.1.1.9.0
Ensure good backups and apply the patch according to the patch readme file.
Note: Per the patch readme, this is applied to the oracle_common home, not the OBIEE Oracle Home.
