BOB: Business Objects Board
Not endorsed by or affiliated with SAP

Register | Login 

Follow BOB on Twitter! 
Follow BOB on Twitter! (Opens a new window)  

General Notice: No events within the next 45 days.

XIr2 Password reset for admin account
3 members found this topic helpful
Goto page 1, 2  Next
 
Search this topic... | Search CMC... | Search Box
Register or Login to Post    Forum Index -> Security and User Administration -> CMC  Previous TopicPrint TopicNext Topic
Author Message
silvi
Senior Member
Senior Member



Joined: 05 Aug 2005

Posts: 40



PostPosted: Wed Jun 20, 2007 11:02 am 
Post subject: XIr2 Password reset for admin account

Some one configured Business objects XiR2 before me on a windows server.

The admin accounts and user accounts he handovered are not working. It looks those accounts created with a 30 days expiery.

I know in BO 6.5 we can do the bomain.key recreation through safe recovery.

But IN XiR2 , how can i recover those accounts.
Admin account and supervisor account passwords got either expired or not correct,

Your inputs are helpfull to me

Regards,

Silvi
Back to top
haider
Forum Groupie
Forum Groupie



Joined: 18 Jul 2005
ASUG Icon
medal_gold.gif
Posts: 9403


flag
PostPosted: Thu Jun 21, 2007 1:40 am 
Post subject: Re: XIr2 Password reset for admin account

Is it not prompting to change password when trying to login icon_question.gif

Are there any objects imported into CMS or is it a fresh install.
If nothing is in there then building the repository tables again on a new schema should create a new administrator account for you.




Cheers
Back to top
Dwayne Hoffpauir
Forum Groupie
Forum Groupie



Joined: 19 Sep 2002
ASUG Icon
medal_gold.gif*2speaker.gif*5medal_bronze.gif
Posts: 8644
Location: Plano, TX USA


flag
PostPosted: Thu Jun 21, 2007 8:50 am 
Post subject: Re: XIr2 Password reset for admin account

WARNING: Take a backup (or two) of the repository database before using this technique!

Stop the CMS service. In the repository database, delete the record with OBJECTID 13 from the CMS_INFOOBJECTS5 table. Restart the CMS, and the Administator ID will be recreated with a blank password.

_________________
Dwayne Hoffpauir
Image link
Back to top
silvi
Senior Member
Senior Member



Joined: 05 Aug 2005

Posts: 40



PostPosted: Thu Jun 21, 2007 10:06 am 
Post subject: Re: XIr2 Password reset for admin account

Hi Haider,

Thanks for your response,

In that installation there is a universe and couple of reports are existing.

silvi
Back to top
silvi
Senior Member
Senior Member



Joined: 05 Aug 2005

Posts: 40



PostPosted: Thu Jun 21, 2007 10:08 am 
Post subject: Re: XIr2 Password reset for admin account

Thanks Dwayne Hoffpauir,

I will try this and let you know,

Silvi
Back to top
silvi
Senior Member
Senior Member



Joined: 05 Aug 2005

Posts: 40



PostPosted: Fri Jun 22, 2007 6:15 am 
Post subject: Re: XIr2 Password reset for admin account

Dwayne Hoffpauir,
I did backup the repository database.
Stopped the CMS
Deleted the record with objectid 13.
started the CMS
I try to login CMC with Administrator id with no password.
I could not login.

Please let me know if i miss any thing,

Silvi
Back to top
Dwayne Hoffpauir
Forum Groupie
Forum Groupie



Joined: 19 Sep 2002
ASUG Icon
medal_gold.gif*2speaker.gif*5medal_bronze.gif
Posts: 8644
Location: Plano, TX USA


flag
PostPosted: Sun Jun 24, 2007 2:00 pm 
Post subject: Re: XIr2 Password reset for admin account

silvi wrote:
Please let me know if i miss any thing

Doesn't seem like it to me. I've not ever used this technique myself though. Maybe a loophole that they've closed in later releases? What SP / Fix Pack are you running?

_________________
Dwayne Hoffpauir
Image link
Back to top
Orange
Forum Enthusiast
Forum Enthusiast



Joined: 18 Sep 2006

Posts: 1264
Location: Seattle


flag
PostPosted: Mon Jun 25, 2007 7:19 am 
Post subject: Re: XIr2 Password reset for admin account

It appears that in R2 the administrator account is sometimes ObjectID 12 and sometimes 13 (havent found out why/in what case). So to be certain, send a query using the Querybuilder where you want to find the ObjectID. For example:

select si_name, si_id from CI_SystemObjects where si_name = 'administrator' and si_kind = 'user'

Then, open the database and delete ObjectID number as returned by the query above (possibly 12 or 13) from the CMS_InfoObjects5 table and restart the CMS.
Back to top
Dwayne Hoffpauir
Forum Groupie
Forum Groupie



Joined: 19 Sep 2002
ASUG Icon
medal_gold.gif*2speaker.gif*5medal_bronze.gif
Posts: 8644
Location: Plano, TX USA


flag
PostPosted: Mon Jun 25, 2007 7:50 am 
Post subject: Re: XIr2 Password reset for admin account

Excellent suggestion Orange! I have a SP2 installation (without Performance Management), and the Administrator ID is indeed 12, not 13.
_________________
Dwayne Hoffpauir
Image link
Back to top
lchavez
Principal Member
Principal Member



Joined: 21 Jul 2005

Posts: 122
Location: Lima


flag
PostPosted: Tue Nov 06, 2007 11:53 am 
Post subject: Re: XIr2 Password reset for admin account

I'm just curious, what happen with the reports, universes, etc. created by the Administrator after applying that "reseting" procedure? icon_confused.gif
Back to top
Sebastien Goiffon
Forum Fanatic
Forum Fanatic



Joined: 29 Sep 2004
ASUG Icon
Posts: 6477
Location: Boston, MA


flag
PostPosted: Tue Nov 06, 2007 6:23 pm 
Post subject: Re: XIr2 Password reset for admin account

Hi good question!! probably deleted due to cascading cleaning...

Make a test first in dev environment.

Regards
Sebastien

_________________
BI4.3 inside scoop
BI4.3: Back to the future
BO or BOBJ� that is the question

360Suite: Helping BI managers to achieve Excellence
Back to top
rob_bo
Principal Member
Principal Member



Joined: 04 Aug 2005

Posts: 191


flag
PostPosted: Thu May 08, 2008 8:13 am 
Post subject: Re: XIr2 Password reset for admin account

Orange wrote:
It appears that in R2 the administrator account is sometimes ObjectID 12 and sometimes 13 (havent found out why/in what case). So to be certain, send a query using the Querybuilder where you want to find the ObjectID. For example:

select si_name, si_id from CI_SystemObjects where si_name = 'administrator' and si_kind = 'user'

Then, open the database and delete ObjectID number as returned by the query above (possibly 12 or 13) from the CMS_InfoObjects5 table and restart the CMS.



Hope someone can help me with this.
Our license keys have expired and we cannot log in with ANY user accounts that have been set as "administrators". The default "Administrator" account was disabled for security reasons (I wont do that again!).
I have performed all the actions (i.e. deleted object id 13) but still "Administrator" cannot log on. We have 2 servers but I can only start the CMS on one of them as we do not have a license for clustering (because it has expired!)

Also, The check sql doesnt work? (select si_name, si_id from CI_SystemObjects where si_name = 'administrator' and si_kind = 'user'
) We have Business Objects XI R2 ....is this sql specific for Crystal?

Any help appreciated.
Thanks


***** UPDATE.. We have now deleted BOTH object ID 12 AND 13 and administrator can now log in. BUT when I click on the "license keys" option, i get an error saying:

"There was an error while retrieving data from the server: You do not have permission to perform the requested action. Please contact your system administrator for details"

??

_________________
Thanks
Rob
--------------------------------------------------
Back to top
Grizzly-Law
Principal Member
Principal Member



Joined: 01 Jul 2004

Posts: 132


flag
PostPosted: Thu May 08, 2008 9:17 am 
Post subject: Re: XIr2 Password reset for admin account

Rob,

I have seen issues when using this method. The Admin account is recreated after the SQL delete but it can often not have the same priviledges as before.

I have had to do a fresh install and migrate all content before to get round this. Not good news i know.

_________________
Andrew Fox

Andrew Fox
Head Of Business Objects, Bluefin Solutions, UK.

Revelations chapter 4, verse 11
Back to top
rob_bo
Principal Member
Principal Member



Joined: 04 Aug 2005

Posts: 191


flag
PostPosted: Mon May 12, 2008 4:26 am 
Post subject: Re: XIr2 Password reset for admin account

Thanks for your reply. We managed to get round this in the end using a range of "techniques"....some of them may or may not have been required, but i'll tell you everything for information:

You were right - the "Administrator" was not in the "Administrators" group! But, we couldnt change the permissions of "Administrator"....as obviously we didnt have permissions (catch 22!)

So, we changed the system clock by a day, just to fool the system into thinking the key was still valid! (crude but, surprisingly, effective!)
This allowed us to re-enable the admin user before setting the clock back and entering the new license key.

Finally, evrything was working - or so we thought. Users were getting errors that the "input server" could not be contacted. We sstopped and started all the BO servers in the Central Configuration Manager (CCM) and even re-booted the hardware. In the end, we noticed that even though the BO "servers" were up and running in the CCM, they were all still DISABLED in the central management console (CMC). We had to enable them here ASWELL and then everything was working.

So, there you have it. a combination of frustrating events, all because we wanted to make the system a bit more secure. We're going to leave the Administrator user enabled from now on....though we will give it a password. ("password") icon_smile.gif

Rob Godwin
(Its a small world eh? Mr.Fox) icon_wink.gif

_________________
Thanks
Rob
--------------------------------------------------
Back to top
Diane1969
Principal Member
Principal Member



Joined: 18 Jan 2007

Posts: 213
Location: Birmingham


flag
PostPosted: Mon May 12, 2008 4:51 am 
Post subject: Re: XIr2 Password reset for admin account

Dwayne Hoffpauir wrote:
WARNING: Take a backup (or two) of the repository database before using this technique!

Stop the CMS service. In the repository database, delete the record with OBJECTID 13 from the CMS_INFOOBJECTS5 table. Restart the CMS, and the Administator ID will be recreated with a blank password.


I do find it quite remarkable how relatively easy it is to reset the default Enterprise Administrator account by simply deleting a record off a db table!

From an XI Administrator's pov this method is ideal because its relatively simple but not without risk.

But from a general security pov I must say I'm not overly impressed: moer so given that once deleted the new Administrator account doesn't even have a new password but is instead blank! It's like someone writing a cheque but not bothering to sign it.

just my 2 pence!
Back to top
Display posts from previous:   
Register or Login to Post    Forum Index -> Security and User Administration -> CMC  Previous TopicPrint TopicNext Topic
Page 1 of 2 All times are GMT - 5 Hours
Goto page 1, 2  Next
 
Jump to:  

Index | About | FAQ | RAG | Privacy | Search |  Register |  Login 

Get community updates via Twitter:

Not endorsed by or affiliated with SAP
Powered by phpBB © phpBB Group
Generated in 0.0942 seconds using 17 queries. (SQL 0.0029 Parse 0.0640 Other 0.0273)
CCBot/2.0 (https://commoncrawl.org/faq/)
Hosted by ForumTopics.com | Terms of Service
phpBB Customizations by the phpBBDoctor.com
Shameless plug for MomentsOfLight.com Moments of Light Logo