Discoverer security with OID user via Enterprise Security Manager(ESM)

Documents Created by             : Bharat Gali

Email                                      : bharat@bharatgali.com

Created date                            : 20-Feb-2006

Discoverer version                    : 10.1.2.48.18

Application Server Version        : 10.1.2.0.2

Last Revised                            : 22-Apr-2010

*********************************************************************************

This document focused on managing discoverer reports with OID user. This section explains creating OID user registering OID user to databases through Enterprise security manager.

ESM is oracle provided tool to manage large number of users defined with multiple roles to connect to large number of data bases.

Step by Step process

• Create database IASDB which contain OID repository. This can be done with oracle application server infrastructure installation.
• Create database IASDB2 which contain discoverer repository. All reports data is stored in IASDB2

• Create users in OID this can be done in several ways. One way of doing it is with OID service in enterprise manager

http://bharat.gali.com:1810 (Default enterprise manager runs on 1810 port. List of ports can be checked at $ORACLE_HOME/install/portlist.ini)

• Connect Enterprise manager with orcl_admin and click on OID service(In Application server infra structure instance)
• Click in Oracle internet Directory Self Service Console as show in the figure below.

• Click on create as shown in the figure below to create a OID user

• Enter the user information. It this moment don’t enter any additional information. Basic information with required fields should be enough.

• User created

• Enterprise security manager comes with Oracle database Client software. Please refer Oracle site how to install ESM client.  Once software is installed launch ESM as shown in below.

• Logon to ESM Via password authentication method. Other Method SSL Client Autentication and Native Authentication are not discussed in this context.

• Register database IASDB2 (which is holding discoverer repository) to ESM. This can be done though  DBCA(Database Configuration Assistance).

• Navigate to Users. Trace the OID users which we already created to make sure it is displaying in ESM screen as shown below.

• Create Enterprise role Discoverer_role and add the OID users to this role.

• Create a global user shared in IASDB2(Discoverer Database)

            CREATE USER SHARED IDENTIFIED GLOBALLY  AS ''

• Grant Connect,Resource to global user

            GRANT CONNECT,RESOURCE TO SHARED

• Navigate databases and click on Database Schema mapping and trace the global user shared which we already created in IASDB2(Discoverer database).

****** Very Important Note *****

• In ESM, OID repository database IASDB will not be shown. Don’t try to register or change default wallet password for IASDB it may halt OID services

• After registering OID users to database through ESM. Open discoverer plus

http://bharat.gali.com:7779/discoverer/plus?

• Connect to plus with the user that owns reports.

• Once report is opened Click on Tools-->Manager Workbooks-->Sharing and add the global user shared which we already created. Save the work book and exit from the discoverer plus.

• Now connect to discoverer plus with OID user(example user here is bharatgali) which will already created.

• Report output with OID user bharatgali.