We have multiple LDAP / AD servers setup for out BI server, and users from muitilple domain are able to access BI with no issues. However I didnt knew, till today, that we can prefix domain name to user ID when logging into BI. For example:
northam/arunk
where northam is the windows domain name and arunk is the network ID. It does lets you in, but it wrecks the initialization blocks logic, as it will pass northam/arunk as ID not arunk. Unless the initializatiob block has logic to handle this, the logic will be broken and you will get unexpected results in output for reports which have data level security. One of our user was getting following error due to this:
View Display Error
Odbc driver returned an error (SQLExecDirectW).
Error Details
Error Codes: OPR4ONWY:U9IM8TAC:OI2DL65P
State: HY000. Code: 10058. [NQODBC] [SQL_STATE: HY000] [nQSError: 10058] A general error has occurred. [nQSError: 17001] Oracle Error code: 1722, message: ORA-01722: invalid number at OCI call OCIStmtExecute:
This was happening, because one of the filter was expecting a number from session variable, but was getting a null. When I asked the user not to use domain name, issue got resolved.
No comments:
Post a Comment