Rebuilding Shared Services After Unrecoverable LDAP Corruption

Rebuilding Shared Services After Unrecoverable LDAP Corruption [ID 1073261.1]
		Modified 28-SEP-2011     Type TROUBLESHOOTING     Status PUBLISHED

In this Document
  Purpose
  Last Review Date
  Instructions for the Reader
  Troubleshooting Details

---

Applies to:

Middleware > Business Intelligence > Hyperion Query & Reporting
Middleware > Enterprise Performance Management
Information in this document applies to any platform.

Purpose

LDAP is corrupted or is in an unstable state and the customer does not have a backup of the LDAP data files.

Last Review Date

March 12, 2010

Instructions for the Reader

A Troubleshooting Guide is provided to assist in debugging a specific issue. When possible, diagnostic tools are included in the document to assist in troubleshooting.

Troubleshooting Details

1. Backup Shared Services Repository (This step is generally done by customer’s database administrator).
   a.  Oracle Database procedures
   b.  Microsoft SQL Server procedures
   c.  IBM DB2 procedures.
   
2. Backup openLDAP data files. The openLDAP files are located at Hyperion_Home\SharedServices\9.3.1\openLDAP\var\openldap-data for v9 and Hyperion_Home\products\Foundation\openLDAP\\var\openldap-data for v11.
   
   
   
3. Backup CSS.xml file.
   a.  The css.xml file is located at Hyperion_Home\deployments\APP_SERVER\SharedServices9\config for v9.
   
   
   
   b.  For v.11 you need to extract the cssconfig.xml from the shared services registry. Login to Shared Services with the admin login and go to Application Groups / Foundation / Deployment Metadata / Shared Services Registry / Foundation Services / Shared Services. Right click on CSSConfig and click on export for edit and save it to any location.
   
   
   
4. Export user security using CSSExport (If possible) - Customer may have a recent copy of the export to use. The CSSExport documentation is located in the zip file at Hyperion_Home\common\utilities\CSSImportExportUtility\cssimportexport.zip. Once it is extracted the document is located at Hyperion_Home\common\utilities\CSSImportExportUtility\cssimportexport\importexport\doc\impexp.pdf
   
5. Extract HFM Security – Launch the HFM win32 client. Login as admin. Click on the Extract Security button under the Extract section. Click the connect button and highlight the application. Click on the Open Application button. Note: Only do this step if you have HFM.
   
   
   
   Give the security extract a name and location. Click the extract button.
   
   
   
   Make sure you get a message stating that the extract was successful.
   
6. Delete all openLDAP data files located at Hyperion_Hcssome\SharedServices\9.3.1\openLDAP\var\openldap-data for v9 Hyperion_Home\products\Foundation\openLDAP\var\openldap-data for v.11.
   
7. Run the configureHubLDAP.bat program in Hyperion_Home\SharedServices\9.3.1\openLDAP for v.9 or Hyperion_Home\products\Foundation\openLDAP for v11.
   
8. Drop shared services repository from database. (This step is generally done by customer’s database administrator).
   
9. Run configtool for shared services for Configure Database, choose 1st time configuration.
   
   
   
   
   
10. Use the config tool to re-register other hyperion applications (BI+,HFM, etc)
    
11. Restore CSS.xml file from step 3
    
12. Restart Shared Services/openLDAP services
    
13. Import user security using CSSImport. See documentation from step 4.
    
14. Import HFM security. Launch the HFM win32 client. Click on the Load Security button under the Load section. Pick the security file that was extracted on step 5. Click the Load button. Make sure you get a message that the security load was successful.  Note: Only do this step if you have HFM.