BI Checks with WLST - Enable debug, login and parse logs - Part 3

This third post continues with the BIEE 11.1.1.7 Security checks using WLST and Python scripting.

This time its all about:

* Checks and Displays whether Virtualize=true property is added in the identity store or not, as well as compare with the number of authentication providers. You can use the virtualize_add_remove.py script to change this automatically, but a restart is needed if changed.

* Enabling Debug in the target server (e.g. bi_server1) for weblogic security authentication and authorization

* Setting Log Level to TRACE:32 for oracle.bi.security and oracle.ods components in the FMW Enterprise Manager Console

* Testing Analytics Login with both external LDAP user and weblogic user, using direct connection to weblogic where the target managed server is running, as well as a specified FQDN analytics url

* On Login Failure collects the logs with Errors, Exceptions and Incident Errors from relevant Log files on the target managed server

To run the scripts:

-Download the files here:  https://blogs.oracle.com/pa/resource/BICheckWithWLST-Part3.zip

-Edit automation.properties and change the parameters

You need below extra parameters other than the existing in Part1 automation.properties file for executing the above scripts:

VirtualizeValue true            # adds Virtualize=true
enableTRACE true            # sets LogLevel to TRACE:32
enableDEBUG true            # enables Debug for atn and atz
externalLDAPusername weblogic        # user defined in weblogic
externalLDAPuserpassword password

NOTE: This assumes that External LDAP Provider is Configured (hence the requirement to have virtualize=true)
NOTE: If no external LDAP provider configured use weblogic user details in the properties file for (externalLDAPusername, externalLDAPuserpassword) parameters.
NOTE: VirtualizeValue true:: adds Virtualize=true
NOTE: VirtualizeValue false:: removes Virtualize property
NOTE: enableDEBUG true:: enables Debug for atn and atz
NOTE: enableDEBUG false:: disables Debug for atn and atz
NOTE: enableTRACE true:: sets LogLevel to TRACE:32 for oracle.bi.security and oracle.ods
NOTE: enableTRACE false:: sets LogLevel to NOTIFICATION:1 for for oracle.bi.security and oracle.ods


**********************************automation.properties**********************************

WLUsername weblogic
WLPassword weblogicpassword
WLServer wlserver.yourcompany.com
WLPort 7001
WLScheme t3
WLUrl t3://wlserver.yourcompany.com:7001
TARserver bi_server1
FQDNExtension .yourcompany.com
ObieeAnalytocsExternalLoadBalancerUrl http://wlserver.yourcompany.com/analytics
obieeServerScheme http
HttpProxyHost yourproxyserver
HttpProxyPort yourproxyserverport
VirtualizeValue true
enableTRACE true
enableDEBUG true
externalLDAPusername externalLDAPusername
externalLDAPuserpassword externalLDAPuserpassword

**********************************automation.properties**********************************


-In a shell, set MIDDLEWARE_HOME and then launch all 4 scripts in sequence



%MIDDLEWARE_HOME%\oracle_common\common\bin\wlst.cmd (or .sh) virtualize_display.py

# Optional and requires manual restart
# %MIDDLEWARE_HOME%\oracle_common\common\bin\wlst.cmd (or .sh) virtualize_add_remove.py

%MIDDLEWARE_HOME%\oracle_common\common\bin\wlst.cmd (or .sh) enable_debug_wls_security.py

%MIDDLEWARE_HOME%\oracle_common\common\bin\wlst.cmd (or .sh) set_loglevel_bisecurity_ods.py

%MIDDLEWARE_HOME%\oracle_common\common\bin\wlst.cmd (or .sh) loginAnalytics_getLogs.py

You can also use the script provided (TestLoginAnalytics_n_CollectLogs.cmd) after changing the MIDDLEWARE_HOME variable in it.


* loginAnalytics_getLogs.py will try to login to analytics, and it will generate a compiled log containing the errors from the bi_serverX.log, bi_serverX-diagnostics.log and bi_serverX.out on bi_serverX machine. This compiled log is named Errors_n_Exceptions.log

- After all scripts have been run, revert your changes.

Comments:

Post a Comment:
  • HTML Syntax: NOT allowed
About

A blog focused on Tips & Tricks about Oracle Business Intelligence (OBI), Oracle Exalytics and Oracle Enterprise Performance Management (EPM) products.
[Blog Admin: ahmed awan]

Search

Archives
« April 2014
SunMonTueWedThuFriSat
  
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
   
       
Today