Top Banner
October 2012 1 Tech Insider This Issue October 2012 • Volume 20 Issue 10 As you delve into WebFOCUS 8.0, you may find problems that are not easily reproducible. For such problems, it was a relatively simple task in WebFOCUS 7.x to request the customer’s ReportCaster dserver.xmls file, Managed Reporting basedir, Business Ingelligence Dashboard worp directory and, in some cases, the MR Realm Driver tables. The switch from a file-based MR repository to a DBMS-based repository in WebFOCUS 8.0 begs the question “What do we do now?” This is the first in a series of WebFOCUS 8.0 troubleshooting articles that should prove useful in providing reproductions to the product division. All examples in this article are based on Windows. WebFOCUS 8.0 Repository Management Utility In addition to the standard and in some cases enhanced traces and logs, there is a WebFOCUS 8.0 repository utility called WebFOCUS Repository Management Utility that has several options to manage the WebFOCUS repository. We will focus on two of these options that allow one to EXTRACT and INSERT all content of an existing WebFOCUS repository to a new WebFOCUS repository. This utility should not be confused with Change Management, which is designed to create and move packages based on selected WebFOCUS 8.0 content between different WebFOCUS 8.0 environments. Please note that the target new WebFOCUS repository will be recreated, so make sure there is nothing of value that needs saving before you perform the INSERT step. The existing and new WebFOCUS repositories can be different databases (e.g., moving from Apache Derby to SQL Server). If you find caveats when working with this utility and moving content between unlike databases, do let us know. This utility, which was available as of Release 8000, is subject to enhancements as GA evolves, but should remain funda- mentally intact. (continued on page 5) Many organizations authenticate users against a centralized user directory to avoid the frustration of needing to remember or synchronize their passwords for each applica- tion they access. This is fairly common because most commercial and custom-built software applications can authenticate users against external user directories. Likewise, it’s becoming increasingly common to find organizations that use centralized entitlement systems, which manage user role and application access information. Just as central user directories simplify password management for users, these centralized entitlement systems simplify authorization management for application administrators. WebFOCUS 8 has built-in support for external authentication and authorization. In this article I’ll explain how WebFOCUS authorizes users against an LDAP (or Active Directory) server and the benefits of this feature. The first thing you need to understand about WebFOCUS 8 is the security policy you define in your implementation resides completely inside of WebFOCUS. By security policy, I mean the collection of security rules you create with the WebFOCUS Security Rules dialog. A rule might grant members of the Sales Advanced User group the Advanced User role on the Sales Reports folder as shown on Screen 1 on page 7. Other rules (continued on page 7) Support for External Authorization in WebFOCUS 8 • by Jim Thorstad WebFOCUS 8.0 Troubleshooting: Using the WebFOCUS Repository Management Utility • by Vashti Ragoonath WebFOCUS 8.0 Troubleshooting: Using the WebFOCUS Repository Management Utility Support for External Authorization in WebFOCUS 8 SQL Server Analysis Services Interface Current and Future Changes WebFOCUS 8.0: Manage Reporting Migration How to Find RAM Size and Other System Resources in Linux 1 1 2 3 4
12

TI Newsletter color 1107calappi.weebly.com/uploads/2/5/1/4/25143679/ti_newsletter_1012.pdf · October2012 1 TechInsider October2012 • Volume20Issue10 ThisIssue AsyoudelveintoWebFOCUS8.0,youmay

Aug 25, 2020

Download

Documents

dariahiddleston
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: TI Newsletter color 1107calappi.weebly.com/uploads/2/5/1/4/25143679/ti_newsletter_1012.pdf · October2012 1 TechInsider October2012 • Volume20Issue10 ThisIssue AsyoudelveintoWebFOCUS8.0,youmay

October 2012 1

Tech InsiderThis IssueOctober 2012 • Volume 20 Issue 10

As you delve into WebFOCUS 8.0, you mayfind problems that are not easily reproducible.For such problems, it was a relatively simpletask in WebFOCUS 7.x to request thecustomer’s ReportCaster dserver.xmls file,Managed Reporting basedir, BusinessIngelligence Dashboard worp directory and, insome cases, the MR Realm Driver tables.

The switch from a file-based MR repository toa DBMS-based repository in WebFOCUS 8.0begs the question “What do we do now?”This is the first in a series of WebFOCUS 8.0troubleshooting articles that should proveuseful in providing reproductions to theproduct division. All examples in this articleare based on Windows.

WebFOCUS 8.0 RepositoryManagement UtilityIn addition to the standard and in some casesenhanced traces and logs, there is aWebFOCUS 8.0 repository utility calledWebFOCUS Repository Management Utility

that has several options to manage theWebFOCUS repository. We will focus on twoof these options that allow one to EXTRACTand INSERT all content of an existingWebFOCUS repository to a new WebFOCUSrepository. This utility should not be confusedwith Change Management, which is designedto create and move packages based onselected WebFOCUS 8.0 content betweendifferent WebFOCUS 8.0 environments.

Please note that the target new WebFOCUSrepository will be recreated, so make surethere is nothing of value that needs savingbefore you perform the INSERT step. Theexisting and new WebFOCUS repositories canbe different databases (e.g., moving fromApache Derby to SQL Server). If you findcaveats when working with this utility andmoving content between unlike databases, dolet us know. This utility, which was available asof Release 8000, is subject to enhancementsas GA evolves, but should remain funda-mentally intact.

(continued on page 5)

Many organizations authenticate users againsta centralized user directory to avoid thefrustration of needing to remember orsynchronize their passwords for each applica-tion they access. This is fairly commonbecause most commercial and custom-builtsoftware applications can authenticate usersagainst external user directories.

Likewise, it’s becoming increasingly commonto find organizations that use centralizedentitlement systems, which manage user roleand application access information. Just ascentral user directories simplify passwordmanagement for users, these centralizedentitlement systems simplify authorizationmanagement for application administrators.

WebFOCUS 8 has built-in support for externalauthentication and authorization. In this articleI’ll explain how WebFOCUS authorizes usersagainst an LDAP (or Active Directory) serverand the benefits of this feature.

The first thing you need to understand aboutWebFOCUS 8 is the security policy you definein your implementation resides completelyinside of WebFOCUS. By security policy, Imean the collection of security rules youcreate with the WebFOCUS Security Rulesdialog. A rule might grant members of theSales Advanced User group the AdvancedUser role on the Sales Reports folder asshown on Screen 1 on page 7. Other rules

(continued on page 7)

Support for External Authorization in WebFOCUS 8• by Jim Thorstad

WebFOCUS 8.0 Troubleshooting: Using the WebFOCUSRepository Management Utility• by Vashti Ragoonath

WebFOCUS 8.0Troubleshooting: Usingthe WebFOCUSRepository ManagementUtility

Support for ExternalAuthorization inWebFOCUS 8

SQL Server AnalysisServices InterfaceCurrent and FutureChanges

WebFOCUS 8.0: ManageReporting Migration

How to Find RAM Sizeand Other SystemResources in Linux

1

1

2

3

4

Page 2: TI Newsletter color 1107calappi.weebly.com/uploads/2/5/1/4/25143679/ti_newsletter_1012.pdf · October2012 1 TechInsider October2012 • Volume20Issue10 ThisIssue AsyoudelveintoWebFOCUS8.0,youmay

Information Builders Confidential Tech Insider

October 2012 2

A new feature in Microsoft’s SQL Server AnalysisServices (SSAS) 8.0 is the exposure of thedefined Key Performance Indicators (KPI)specified in the cube. Analysis Services is anOLAP and data mining tool used for designing,creating and managing data mining models.

The initially stored number (in this case) is“Growth in Customer Base,” which is a measurein the Internet sales measure group.

The KPI field is meant to hold an icon fordisplay, as you see here:

“KPI_STATUS_ICON='Road Signs',KPI_TREND_ICON='Standard Arrow',”

But at this point you can only use it as a guidefor conditional styling.

The following value is the actual computed KPIvalue, which is valid at any level. It is created aspart of the synonym process, stored in thesynonym, and can be used to display thenumeric value of the KPI. Conditional styling canbe used to display the icons.

Starting in SSAS 2012, Microsoft has introducedin-memory database computing (tabular model)based on SSAS data. It has also developed alanguage, called Dynamic Management Views(DMV), with the algorithms Microsoft uses toaccess the in memory data.

Tabular models are in-memory databases inSASS. In-memory databases rely primarily onmain memory for computer data storage, asopposed to data management systems, whichuse disk storage.

Using state-of-the-art compression algorithmsand multi-threaded query processor, thexVelocity in-memory analytics engine (VertiPaq)delivers fast access to tabular model objects anddata by reporting client applications such asWebFOCUS, Excel and Microsoft Power View.

With the introduction of Analysis Server 2012(which is not yet supported), users can connectto the deployed model by using a dataconnection directly from reporting clientapplications such as Microsoft Excel and PowerView, or a custom application such asWebFOCUS. The model workspace database,

(continued on page 6)

SQL Server Analysis Services Interface Current and FutureChanges• by Harry Lotrowski

Screen 1

FIELDNAME=Growth_in_Customer_Base,ALIAS='Growth in Customer Base',USAGE=D4.0, ACTUAL=D8, MISSING=ON,TITLE='Growth in Customer Base',MEASURE_GROUP=Internet Sales,PROPERTY=MEASURE, $

FIELDNAME=Growth_in_Customer_Base_KPI_VALUE,ALIAS='[Measures].[Growth in CustomerBase]',USAGE=A20, ACTUAL=A20, MISSING=ON,TITLE='Growth in Customer BaseValue',REFERENCE='Growth in Customer Base',PROPERTY=KPI_VALUE, $

COMPUTEGrowth_in_Customer_Base_KPI_VALUE_NUM/D16.2MISSING ON=IFGrowth_in_Customer_Base_KPI_VALUEIS MISSING THEN MISSING ELSE IFCHKNUM

(8,Growth_in_Customer_Base_KPI_VALUE,'D1') EQ 0 THENMISSING ELSE

ATODBL(Growth_in_Customer_Base_KPI_VALUE,'08','D16.2');,TITLE='Growth in Customer Base Value

num',REFERENCE=Growth_in_Customer_Base_KPI_VALUE, $

Page 3: TI Newsletter color 1107calappi.weebly.com/uploads/2/5/1/4/25143679/ti_newsletter_1012.pdf · October2012 1 TechInsider October2012 • Volume20Issue10 ThisIssue AsyoudelveintoWebFOCUS8.0,youmay

WebFOCUS 8.0 is a feature-rich product with awhole new engine under the hood. One of thefirst questions that may come to mind is, "Howdo I get my data into the new version?" Theproduct includes all the tools required tomigrate any WebFOCUS version 7.1 or higher toWebFOCUS 8.0. Any customers using a versionprior to WebFOCUS 7.1 should first migrate to7.1 or a higher version, and then use the toolsprovided to migrate into WebFOCUS 8.0.

Migration tools are available for ManagedReporting, Business Intelligence Dashboard andReportCaster, but for the purpose of this article,we will focus will on Managed Reporting. Futurearticles will address those other areas.

Currently, WebFOCUS 7.x uses the basedirfolder to hold all configurations and data.WebFOCUS 8.0 uses a database repositoryinstead. An export process is run to create a setof extract files from the WebFOCUS 7xenvironment. This extract consists of a folderwith some XML files and another folder. Theextract folder is copied over to the server whereWebFOCUS 8.0 is installed and configured. Animport process is run and loads the data to theWebFOCUS repository. That's essentially it.

Now let's look a bit closer at the details.

Set Up WebFOCUS 7.x EnvironmentThe first step is to go to the following locationon WebFOCUS 8.0:\ibi\WebFOCUS80\utilities. Look for themr folder and copy it to the utilities directory inthe WebFOCUS 7.x environment. Open thefolder and look for a file calledmr7xto80export.bat (or .sh, if your system runsshell scripts rather than batch files). They can berun as is, and the process will use all thedefaults. However, the scripts can be modified itif required.

Run the ExportRun the mr7xto80export.bat file (or the .sh file).Prompts will appear for the administrator toselect to successfully export the environment.

Select the option that matches the WebFOCUSrelease to be extracted. In this example, it’sWebFOCUS77x.

It then runs a Java process to parse theWebFOCUS 77x basedir and creates an extractfolder called “export” (default name configuredin the batch file) with all the configurationinformation. If there is little content in the MRenvironment, this process should be fast. Ofcourse, if there is substantial data, it will takesome time.

If everything works well, the message “Donewith my reports” will be displayed.

The export folder will have a root directoryalong with a number of XML files, which containthe configuration information. The root folderwill contain the repository content (folders,fexes, images, etc) to be migrated. There is alsoan mr_export_migration.log file. It isrecommended that the log file be reviewed forany errors before continuing with the migration.

Set Up the WebFOCUS 8.0EnvironmentAt this point, the export process is complete.Copy the export folder from the WebFOCUS 7xenvironment into the ibi\WebFOCUS80\import-export folder in WebFOCUS 8.0. Now go to theMR folder in this environment. Look for two files,mr_migrate_import_check.bat andmr_migrate_import.bat (or corresponding .shfiles). These will be the files used to import thedata to WebFOCUS 8.0.

The mr_migrate_import_check.bat validates thedata before loading the WebFOCUS 8.0environment. If there are any issues, it will likelyto show up in the log file. Themr_migrate_import.bat actually loads the datainto WebFOCUS 8.0. Like the export, thescripts can be modified if required.

Run the ImportIn the previous section, two executable fileswere identified, mr_migrate_import_check.batand mr_migrate_import.bat.mr_migrate_import_check.bat validates the filesto be migrated, but doesn't actually load theminto the WebFOCUS Repository. This file needsto be run first.

(continued on page 10)

Information Builders Confidential Tech Insider

October 2012 3

WebFOCUS 8.0: Manage Reporting Migration• by Kishor Rao

Page 4: TI Newsletter color 1107calappi.weebly.com/uploads/2/5/1/4/25143679/ti_newsletter_1012.pdf · October2012 1 TechInsider October2012 • Volume20Issue10 ThisIssue AsyoudelveintoWebFOCUS8.0,youmay

Information Builders Confidential Tech Insider

October 2012 4

With the increased use of virtual machines toreproduce various system configurations, a lot of ITpeople are coming across unfamiliar operatingsystems. As more and more virtual machines arecreated, the physical servers that house thesevirtual machines are sometimes strapped forresources, and it can be hard to figure out thingssuch as available RAM.

Many users may know how to find the amount ofRAM in use for operating systems they work onevery day, but not for other operating systems. Asmore and more customers are beginning to look atLinux or Unix systems as the primary OS, virtualmachine environments are being created internallyto duplicate these systems. Those who use oursoftware on these Linux and Unix systems need toknow a bit about the utilities built into the OS thatshow the system resources in use.

Most Linux systems have utilities to help withmonitoring the systems. This article will list a fewcommands that are available in the Linux/Unixworld to determine resources in use. With thisinformation, the user can review the appropriatephysical resources that need to be allocated to thevirtual machines.

System MonitorSystem Monitor is an application that allows you todisplay basic system information and monitorsystem resources, file systems, and systemprocesses. See Screen 1.

If you have access to the Linux desktop, you cangain access to the Linux System Monitor byclicking on System menu > Choose Administration> System Monitor.

If you are using the command line interface, youcan start this application by typing the followingcommand:

$ gnome-system-monitor

proc/meminfoType the following command to view the totalinstalled RAM and used RAM:

$ cat /proc/meminfo

Screen 2 is an example of the output.

How to Find RAM Size and Other System Resources in Linux• by David Hall

Screen 1

Screen 2

(continued on page 11)

Page 5: TI Newsletter color 1107calappi.weebly.com/uploads/2/5/1/4/25143679/ti_newsletter_1012.pdf · October2012 1 TechInsider October2012 • Volume20Issue10 ThisIssue AsyoudelveintoWebFOCUS8.0,youmay

Information Builders Confidential Tech Insider

October 2012 5

(WebFOCUS 8.0 Troubleshooting: Using the WebFOCUS

Repository Management Utility continued from page 1)

These utility options have significant benefits:

• Provide tremendous value to the supportorganization with reproductions for site anddata specific issues.

• Expedite reproductions, which can lead tofaster problem resolution.

• Facilitate instant sharing of WebFOCUS 8.0repositories between internal staff.

This will be particularly useful for pre-sales staff,who often need to share demos in an instant.

Be aware that not all customers may be open toproviding Information Builders with theWebFOCUS repository extract for fear ofexposing sensitive data. We will have to dealwith those situations on a case-by-case basis.But that does lead us to the question of whatcontent is actually being extracted with thisutility, and this is summarized below. Extractedcontents are written to XML files to a defaultlocation on disk, but one can override thisdefault location from the WebFOCUS RepositoryManagement Utility.

• Managed Reporting content (available as of8000M)

• BI Portal content (available as of 8000M)• BI Dashboard Favorites (available as of8000M)Exception: BI Dashboard content (worpdirectory) remains on the file system inWebFOCUS 8.0

• WebFOCUS Client security authorizationobjects (available as of 8000M)

• ReportCaster content (available as of 8000M)• Report Library content (available in future WF8build)

• ReportCaster configuration file (available infuture WF8 build)

Using the WebFOCUS RepositoryManagement UtilityPlease note that the EXTRACT and INSERTsteps described below will each generate a logfile called WFReposUtil.log in the directory...\ibi\WebFOCUS80\utilities\WFReposUtil.

Review this log file for any errors. Of course, ifyou have any errors, you cannot use the utility to

get us a repro, so you would have to call us toget some special help in resolving.

Step 1: EXTRACT• Navigate to...\ibi\WebFOCUS80\utilities\WFReposUtil.

• Stop the Application Server if possible,otherwise you may end up with incompletedata.

• Launch the WebFOCUS RepositoryManagement Utility launch scriptWFReposUtil.bat (WFReposUtil.sh for non-Windows).

• From the WebFOCUS RepositoryManagement Utility do the following:• Set run mode to EXTRACT.• Uncheck the output xml folder to overridethe default output XML folder. On Screen 1,the WebFOCUS repository contents will beextracted as XML files and written to thedirectory C:\temp\xmlextracts.

• Click on Run.

Step 2: INSERT• Navigate to...\ibi\WebFOCUS80\utilities\WFReposUtil.

• Before we load the XML extracts, we want tostart with a clean WebFOCUS repository• Stop the Application Server.• Launch the WebFOCUS RepositoryManagement Utility WFReposUtil.bat(WFReposUtil.sh for non-Windows).

(continued on page 6)

Screen 1

Page 6: TI Newsletter color 1107calappi.weebly.com/uploads/2/5/1/4/25143679/ti_newsletter_1012.pdf · October2012 1 TechInsider October2012 • Volume20Issue10 ThisIssue AsyoudelveintoWebFOCUS8.0,youmay

Information Builders Confidential Tech Insider

October 2012 6

(WebFOCUS 8.0 Troubleshooting: Using the WebFOCUS

Repository Management Utility continued from page 5)

• From the WebFOCUS RepositoryManagement Utility do the following:

• Set run mode to DROP and CREATE.• Click on Run.• Now, we insert the XML extracts to load thetarget WebFOCUS repository database.• Set run mode to INSERT.• Uncheck the input xml folder to overridethe default input XML folder. On Screen 2,the WebFOCUS repository will be reloadedwith the XML files located in the directoryC:\temp\xmlextracts.

• Click on Run.

Step 3: TESTUpon completion of Steps 1 and 2, it is time tovalidate that the WebFOCUS repository hasbeen successfully populated.• Start the Application Server.• Log in to WebFOCUS as a valid user.• You should see the content that matches theextracted repository content.

ConclusionI hope that you find this article useful as we havein working with the WebFOCUS 8.0 managedproduction customers. If you have any questionsor need clarification, feel free to e-mail me. •

Screen 2

(SQL Server Analysis Services Interface Current and Future

Changes continued from page 2)

created when you create a new tabular modelproject in SQL Server Data Tools (SSDT), andused to author the model, will remain on theworkspace server instance, allowing you to makechanges to the model project and thenredeploying to the test, staging, or productionenvironment when necessary.

Tabular models support data access through twomodes: cached mode and DirectQuery mode. Incached mode, you can integrate data frommultiple sources including relational databases,data feeds, and flat text files. In DirectQuerymode, you can bypass the in-memory model,allowing client applications to query datadirectly at the (SQL Server relational) source. •

Page 7: TI Newsletter color 1107calappi.weebly.com/uploads/2/5/1/4/25143679/ti_newsletter_1012.pdf · October2012 1 TechInsider October2012 • Volume20Issue10 ThisIssue AsyoudelveintoWebFOCUS8.0,youmay

Information Builders Confidential Tech Insider

October 2012 7

(Support for External Authorization in WebFOCUS 8 continued

from page 1)

would define the access for members of theSales Basic Users group, the Sales Developersgroup, and so on. These rules and the definitionof the roles are all created and stored within theWebFOCUS installation.

Screen 1 shows how a WebFOCUS Admini-strator can configure mappings betweenWebFOCUS groups and external groups oruser directory attributes

We allow WebFOCUS administrators to define amapping between the WebFOCUS groups andexternal, centralized entitlement systems. Oneexample of such a mapping is shown on Screen1 where the WebFOCUS Sales Advanced Usersgroup is mapped to the LDAP (or ActiveDirectory) group Sales_advanced. The mappingcan be defined on some or all of theWebFOCUS groups.

A typical approach would be to map thesubgroups, sometimes referred to as “role-groups,” underneath each WebFOCUS top-levelgroup and leave the top-level groups unmap-ped. Here the top-level groups serve as organ-izing nodes but they can also be used in securityrules such as the rule where Sales Group canShare With members of the Sales Group.

The benefit of this kind of mapped configurationis that group membership in the LDAP directorydrives the user’s authorizations inside WebFOCUS.If their LDAP group memberships change, theirauthorizations inside WebFOCUS will reflect thisthe next time they log in.

But while centralized entitlement systems basedon LDAP or Active Directory are popular, manylarge enterprises don’t use groups within thesesystems. This is often the case with large LDAPdirectories where there is a commercial (orcustom-developed) provisioning system updatingthe role and application access information in theLDAP server. What we see in this case is that theorganization defines a custom object class for itsusers (e.g., ABCCorpPerson) and this customclass defines a custom user attribute (e.g.,ABCCorpAppRole). Then the provisioningsystem writes the user’s authorizations into thisattribute and maintains it over time.

WebFOCUS groups can be mapped to thesecustom user attributes just as easily as they aremapped to the user’s LDAP groups. This isbecause the mapping is based on a simple textstring match. In the case of group mapping, wemap to the group’s Distinguished Name or DN,which might look like this: cn=wfpm, ou=groups,ou=bipg, ou=corp, dc=ibi, dc=com. In the caseof user attribute mapping, we map to the valuefound in the custom user attribute, which mightlook like this: sales^basicuser.

Support for authorization mapping is configuredin the WebFOCUS Administration Console. Youset IBI_User_Group_Membership toEXTERNAL and IBI_External_Group_Typeto LDAP. This setting supports Active Directoryas well. You must also supply a value forIBI_Allow_Login_External_Groups. In theexample on Screen 2, I set it to “*”, indicatingthat users from any external group (or userattribute value) that is authenticated can gainaccess to WebFOCUS. What rights these usershave within WebFOCUS of course will be basedon the WebFOCUS groups to which we mapthem.

(continued on page 8)

Screen 1

Screen 2

Page 8: TI Newsletter color 1107calappi.weebly.com/uploads/2/5/1/4/25143679/ti_newsletter_1012.pdf · October2012 1 TechInsider October2012 • Volume20Issue10 ThisIssue AsyoudelveintoWebFOCUS8.0,youmay

Information Builders Confidential Tech Insider

October 2012 8

(Support for External Authorization in WebFOCUS 8 continued

from page 7)

Note: In WebFOCUS 8.0.00 these settings areon the console’s Configuration > ApplicationSettings > Authentication panel. In 8.0.01 theyare moved to the Configuration > ApplicationSettings > Security panel.

Screen 2 on page 7 shows how LDAP/ADAuthorization is configured in the WebFOCUSAdministration Console

Once you’ve made these changes, and beforeyou restart your servlet container, you need toconfigure WebFOCUS to find and connect toyour LDAP server. These settings are on theConfiguration > Application Settings > LDAPInterface panel. Here is where you specify thehost, port, connection credentials, and the otherpieces of information necessary to find usersand their groups.

Most of these settings will be familiar to anadministrator who has worked with LDAP serversbefore. The key setting, which determineswhether WebFOCUS is mapping to externalgroups or external user attributes, is the propertycalled IBI_LDAP_User_Membership. Youconfigure this to point to the attribute thatdefines the user’s “group” memberships. ForActive Directory, this would be set to memberOfbecause that is the attribute on the user objectthat holds the user’s group DNs. For Sun (Oraclenow) LDAP 6.3.1 you would set this to“isMemberOf” and you’d likely also need toinstall the optional isMemberOf plug-in into theLDAP Server. If you are doing user attribute map-ping instead, you would set this to the customattribute name, such as ABCCorpAppRole in myexample above. The object class that thisattribute is defined in must be specified in thesetting IBI_LDAP_User_Class.

Screen 3 shows a set of LDAP settings thatsupport group mapping to an LDAP directory.

Screen 3 shows group mapping settings for anOracle LDAP 6.3.1 Configuration

The settings that begin withIBI_LDAP_Group_... are used to support theBrowse… button on the Edit Group dialog inWebFOCUS. These settings allow WebFOCUS tosearch into the LDAP server and pull out a list ofall the groups and their DNs so you can pick thegroup you want to use in the mapping. This is a

convenience only, and these settings are notrequired for authorization mapping to take place.In fact, if you configure user attribute mappinginstead of group mapping, there won’t beanything in the LDAP directory to point theseIBI_LDAP_Group_... setting to since thereare no groups. In this case the Browse… buttondoesn’t do anything.

Screen 4 on page 9 shows how the Browsebutton simplifies selection of the group DN tobe used in the mapping

WebFOCUS needs the ability to make a call toan external RDBMS and query for mappingstrings, just like it does today for LDAP/AD. Thisis on the roadmap, along with the ability for ourcustomers to write a custom Java plug-in so theycan make their own decision on what mappingstrings should be returned when a user logs intoWebFOCUS. If you need this support, be sure toopen a support case so we can prioritize thework and notify you when it is available.

Authorization mapping is one way to integrateWebFOCUS with centralized entitlementsystems, but it’s not the only way. Anotheralternative is for the central entitlement systemto make WebFOCUS Web services calls to keepthe internal WebFOCUS user/group relation-ships synchronized. These Web services are

(continued on page 9)

Screen 3

Page 9: TI Newsletter color 1107calappi.weebly.com/uploads/2/5/1/4/25143679/ti_newsletter_1012.pdf · October2012 1 TechInsider October2012 • Volume20Issue10 ThisIssue AsyoudelveintoWebFOCUS8.0,youmay

Information Builders Confidential Tech Insider

October 2012 9

(Support for External Authorization in WebFOCUS 8 continued

from page 8)

planned for 8.0.01, and this is a relativelystraightforward way to synchronize WebFOCUSinternal authorizations with an external,centralized entitlement system.

There is one additional benefit to using Webservices over the mapping approach and itconcerns user accounts in WebFOCUS. One ofthe things I skipped over in the mapping discus-sion was how WebFOCUS user accounts arecreated when authorization is set to EXTERNAL.

WebFOCUS needs a user account so we canstore the user’s content and manage theirsession information. So when users log in, anaccount is automatically created for them (if onedoesn’t already exist). This account isn’t linkedto any WebFOCUS groups, except during theuser’s session and – in this case – theWebFOCUS groups they belong to are those towhich they were mapped.

The problem here is that if the user is removedfrom the LDAP server, the user’s account inWebFOCUS persists. Even if it were possible,you probably wouldn’t want WebFOCUS toautomatically delete users who were no longerin LDAP because they may have ReportCasterschedules or content that you want to reassignto another user. So how to you clean up theseorphaned user accounts? The old-fashioned way,but by deleting them with Security Center or bymaking a WebFOCUS Web service request todelete them.

We offer many different options for customersto authorize users externally. Externalauthorization is an important feature inWebFOCUS 8 and one that provides manybenefits to the organization in terms ofsynchronizing WebFOCUS authorizations withother processes within the organization. I’mseeing a great deal of interest in externalauthorization. If you need help assessing youroptions, don’t hesitate to reach out to youraccount teams or open a support case torequest help. We look forward to helping youachieve your security goals with WebFOCUS 8. •

Screen 4

Page 10: TI Newsletter color 1107calappi.weebly.com/uploads/2/5/1/4/25143679/ti_newsletter_1012.pdf · October2012 1 TechInsider October2012 • Volume20Issue10 ThisIssue AsyoudelveintoWebFOCUS8.0,youmay

Information Builders Confidential Tech Insider

October 2012 10

(WebFOCUS 8.0: Manage Reporting Migrations continued from

page 3)

A log file, mr_import_check.log, will be createdin the export folder. This should be reviewed forany errors. Obviously, if errors are found, the MRmigration process should stop until this isdebugged.

If the import_check is good, go ahead and runthe mr_migrate_import.bat file. This willtake all the content and load it into theWebFOCUS Repository. It will also prompt forcredentials to run the script.

Now here’s a gotcha. During the import, youmight see the error in Screen 4.

It’s a false positive. The code generates randomvalues as part of its process, and by chance ifthe same value is generated, this message isdisplayed. However, the process creates a newrandom variable and continues the importprocess. It’s not a big deal as the data still getsimported into the repository correctly, but itwouldn’t be right for me not to include this.

The log file mr_import_migration.log in theexport folder should be checked for errors. Ifeverything is good, go ahead and recycle theWeb Server.

This completes the process for ManagedReporting. All users, groups, folders and contentshould be migrated over correctly to the WF 8.0environment. Log into the WebFOCUS 8.0environment and review the Managed Reporting

tree. It should contain the same folders as theWebFOCUS 7x environment. From the menu,log into the security center and review all theusers and groups. They should all match whatwas in WebFOCUS 7.x.

You may find additional information in theWebFOCUS 8.0 Migration Manual located here:http://ibivmwebg:8800/wf80/index.jsp •

Screen 4

Page 11: TI Newsletter color 1107calappi.weebly.com/uploads/2/5/1/4/25143679/ti_newsletter_1012.pdf · October2012 1 TechInsider October2012 • Volume20Issue10 ThisIssue AsyoudelveintoWebFOCUS8.0,youmay

Information Builders Confidential Tech Insider

October 2012 11

(How to Find RAM Size and Other System Resources in Linux

continued from page 4)

FreeThe Free command displays the total amount ofused and free physical and swap memory in thesystem. It also shows the buffers used by thekernels. By default, the size displayed will be inkilobytes. You can show the results in megabytesby using the –m option

$ free

Screen 3 is a sample output.

If you are looking to get an idea on how muchfree memory is available, the free section in thebuffers/cache is the section to review. The LinuxOS keeps the contents of memory in the buffersto help having to access the same data over andover. When the swap free and the buffers/cachefree memory is low, an increase in the amount ofRAM may be necessary.

VMSTATThe VMSTAT command can also display memorystatistics. It also includes additional informationabout processes, paging, block IO, traps, andCPU activity. Type the following command:

$ vmstat -s

Screen 4 is a sample output.

TopThe top command provides a dynamic real-timeview of a running system and includes summaryinformation about RAM, CPU, and a number ofother tasks that are being managed by theLinux Kernel.

Type the following command:

$ top

Screen 5 on page 12 is a sample output.

The top program provides a dynamic real-timeview of the running system. It can display systemsummary information as well as a list of taskscurrently being managed by the Linux Kernel. Bydefault, the processes are ordered by per-centage of CPU usage with only the “top” CPUconsumers being shown.

The types of system information shown and thetypes, order and size of information displayed fortasks include those for all users on the system.Since this is an interactive command, you willneed to issue the “q” command to stop it.

(continued on page 12)

Screen 3

Screen 4

Page 12: TI Newsletter color 1107calappi.weebly.com/uploads/2/5/1/4/25143679/ti_newsletter_1012.pdf · October2012 1 TechInsider October2012 • Volume20Issue10 ThisIssue AsyoudelveintoWebFOCUS8.0,youmay

Information Builders Confidential Tech Insider

October 2012 12

(WebFOCUS 8.0: Manage Reporting Migrations continued from

page 3)

For a list of top options available just enter “h”after starting top.

These are just a few of the many Linux/Unixbuily-in utility commands. For those not familiarwith this OS, the commands can provide aglimpse of the memory usage and assist inallocating the appropriate virtual machinesystem resources. •

Please direct all inquiries about theTech Insider to Editor Pedro Pereira,[email protected].

Insider StaffStu MadisonVP, Corporate Technical Support Services

Dan OrtolaniVice President, Advanced Technology Services

Mark NessonExecutive Director, Advanced Technology Services

Pedro PereiraEditor

Tech Insider

Screen 5