Professional Documents
Culture Documents
2009-06-06
Copyright © 2009 SAP® BusinessObjects™. All rights reserved. SAP BusinessObjects and
its logos, BusinessObjects, Crystal Reports®, SAP BusinessObjects Rapid Mart™,
SAP BusinessObjects Data Insight™, SAP BusinessObjects Desktop Intelligence™,
SAP BusinessObjects Rapid Marts®, SAP BusinessObjects Watchlist Security™,
SAP BusinessObjects Web Intelligence®, and Xcelsius® are trademarks or
registered trademarks of Business Objects, an SAP company and/or affiliated
companies in the United States and/or other countries. SAP® is a registered
trademark of SAP AG in Germany and/or other countries. All other names
mentioned herein may be trademarks of their respective owners.
2009-06-06
Contents
Chapter 2 Overview...............................................................................................9
SAP BusinessObjects Explorer fundamentals for administrators................9
Supported data providers..........................................................................10
How SAP BusinessObjects Explorer works with SAP BusinessObjects
Enterprise..................................................................................................11
The backend servers.................................................................................11
The SAP BusinessObjects Explorer user population................................12
Chapter 4 Installation..........................................................................................23
Installation pre-requisites...........................................................................23
Installation package contents....................................................................25
Installation procedures...............................................................................26
Installing SAP BusinessObjects Explorer on Microsoft Windows..............26
3
Contents
Chapter 5 Security...............................................................................................51
Reverse proxies.........................................................................................51
Firewall port usage for SAP BusinessObjects Explorer.............................51
Configuring firewall ports...........................................................................52
Authentication methods.............................................................................53
Configuring SAP BusinessObjects Explorer for SAP authentication.........54
Single Sign On...........................................................................................56
Activating Single Sign On..........................................................................56
SSO for WinAD authentication using Vintela.............................................59
SSO for WinAD using Kerberos.................................................................60
SSO for LDAP authentication using SiteMinder........................................61
Enabling Trusted Authentication................................................................63
Allocating rights to users and groups........................................................66
Explorer user rights per user profile..........................................................68
Chapter 6 Administration....................................................................................73
Starting and stopping the backend servers...............................................73
Customizing the web application server settings.......................................73
Explorer Web Application settings.............................................................73
Configuring the server settings..................................................................76
4
Contents
Index 97
5
Contents
6
About this guide
Information:
For an overview of the information resources dedicated to deployments of
SAP BusinessObjects Explorer with SAP NetWeaver BW Accelerator, refer
to the Master Guide for SAP BusinessObjects Explorer, accelerated version
for SAP NetWeaver Business Warehouse at: http://help.sap.com.
7
About this guide
8
Overview
Overview
Information Spaces
An Information Space is a collection of objects mapped to data for a specific
business operation or activity. SAP BusinessObjects Explorer users type in
key words related to the business question they wish to analyze, in order to
retrieve the Information Space(s) that contain the relevant data. Power users,
with the Space Creator user profile, create the Information Spaces on top of
corporate data providers.
Indexing
In order to prepare Information Spaces for consumption by the Explorer
search and charting engines, Information Spaces need to be indexed when
they are created. Information Space indexes can be run manually or
scheduled to run at a time of your choice to manage the load on your system
with maximum efficiency. When the Indexing process is run, SAP
BusinessObjects Explorer generates an index associated to the objects
contained in the Information Space.
Note:
Indexing consumes relatively large resources. If your deployment requires
indexes to be run frequently, SAP recommends you deploy multiple Explorer
indexing servers on your SAP BusinessObjects Explorer cluster.
9
Overview
Facets
Facets organize the information available within an Information Space. A
facet contains the list of values available for each of the objects included in
the Information Space. For example, a facet called "Vehicle" could include
values such as "Car", "Bicycle", "Motorbike", "Truck", and so on.
Related Topics
• Supported data providers on page 10
• Explorer user rights per user profile on page 68
• Deploying SAP BusinessObjects Explorer for improved indexing on
page 18
These data providers can leverage data from operational applications, data
warehouses, Relational DataBase Management Systems (RDBMS) and
OnLine Analytical Processing (OLAP) sources.
10
Overview
Note:
You cannot audit the SAP BusinessObjects Explorer servers.
11
Overview
Manages all of the Explorer servers (that is, the Explorer Indexing Server,
Explorer Search Server and Explorer Exploration Server).
• Explorer Indexing Server
Provides and manages the indexing of Information Space data and
metadata.
• Explorer Search Server
Processes search queries and returns search results.
• Explorer Exploration Server
Provides and manages the Information Space exploration and analysis
capabilities including search on data, filtering and aggregation.
Related Topics
• SAP BusinessObjects Explorer deployment scenarios on page 15
Space Explorers
Space Explorers make up the majority of the SAP BusinessObjects Explorer
user population. Their interactions with the application consist of searching
for Information Spaces, navigating and analyzing the data within those
Information Spaces and saving Information Spaces to other file formats.
These users sometimes export Information Spaces to other applications to
analyze the data further.
Space Creators
Space Creators make up a small percentage of the total SAP BusinessObjects
Explorer user population. They understand the underlying data structures in
the data providers consumed by the application and understand the business
12
Overview
Administrators
Administrators are responsible for scheduling Information Space indexing,
so that the load on the system can be kept to a minimum during peak usage
times. In addition, administrators can manage SAP BusinessObjects Explorer
user rights and change the server settings.
More Information:
For information on sizing your system according to the usage patterns of the
users across your deployment, refer to the SAP BusinessObjects Explorer
XI 3.1 Service Pack 1 Sizing guide available at: http://service.sap.com/bosap-
support.
Related Topics
• Explorer user rights per user profile on page 68
13
Overview
14
Deployment Architecture
Deployment Architecture
Supported platforms
For detailed information on supported operating systems and web application
servers, refer to the SAP BusinessObjects Explorer XI 3.1 Service Pack 1
Supported Platforms document in the "Articles" section at: SAP Community
Network.
Increasing Performance
You can opt to install SAP BusinessObjects Explorer on the same server as
SAP BusinessObjects Enterprise XI or on dedicated machines. Installing
SAP BusinessObjects Explorer on dedicated machines results in better
performance.
You need to install a Server Intelligence Agent (SIA) on each Explorer server
machine that does not include an SAP BusinessObjects Enterprise XI
installation. The SIA component is available from the BusinessObjects
Enterprise installer when you deploy the BusinessObjects Enterprise Server
Components module.
When you deploy a Explorer server on a machine that does not have an SAP
BusinessObjects Enterprise XI installation, Explorer connects to another
15
Deployment Architecture
Failover
If failover is a key requirement, you can deploy more than one Explorer
Master Server to manage the other Explorer servers. The Master Servers
work together to maintain the consistency of critical data.
Load balancing
SAP BusinessObjects Explorer supports the clustering of your web application
server. Hardware or software load balancers can be used as the entry-point
for the web application servers to ensure that the processing is evenly
distributed among servers.
Information:
For information about load balancing for SAP BusinessObjects Enterprise,
refer to the BusinessObjects Enterprise Administrator's Guide XI 3.1 available
on the "SAP BusinessObjects" tab at: http://help.sap.com. For information
about which hardware load balancers SAP supports for BusinessObjects
Enterprise, refer to the BusinessObjects Explorer XI 3.1 Service Pack 1
Supported Platforms document in the "Articles" section at: SAP Community
Network.
Related Topics
• Implementing a complex distributed deployment scenario on page 20
• Deploying SAP BusinessObjects Explorer for improved indexing on
page 18
• Deploying SAP BusinessObjects Explorer for improved Information Space
exploration on page 17
• Configuring the workload update setting for load balancing on page 86
16
Deployment Architecture
Related Topics
• The SAP BusinessObjects Explorer user population on page 12
17
Deployment Architecture
If you wish to improve the performance of indexing, then ensure the following:
• Install the primary Explorer Master Server, Explorer Indexing Server,
Explorer Search Server, and Explorer Exploration Server on the machine
where SAP BusinessObjects Enterprise is installed.
• Install additional Explorer Indexing Servers on separate machines ensuring
that they are directed to the SAP BusinessObjects Enterprise installation.
The indexing load is shared across the indexing servers.
18
Deployment Architecture
the same time (an extreme scenario), then an additional server is required.
Indexing many Information Spaces has an impact on explorers while they
are exploring. It is recommended you schedule Information Spaces for
indexing when there is less activity, such as over night.
Note:
It is good practice to install a Explorer Search Server and a Explorer
Exploration Server on the additional machines. This allows those machines
to share the load of searching and exploration when there is no indexing
in progress.
Related Topics
• Indexing best practices on page 90
Note:
For more information about SAP NetWeaver BW Accelerator, see the
Technical Operations Manual for BI Accelerator available on the SAP
Community Network (SDN) at: http://sdn.sap.com/bia.
19
Deployment Architecture
20
Deployment Architecture
21
Deployment Architecture
22
Installation
Installation
Installation pre-requisites
For a detailed list of supported environments and hardware requirements,
consult the SAP BusinessObjects Explorer XI 3.1 Supported Platforms
document available on the SAP Community at: http://sdn.sap.com in the
"Articles" section. This document includes specific version and patch-level
requirements for web application servers, web browsers, and operating
systems.
Information:
See the BusinessObjects Enterprise XI 3.1 Installation and Configuration
Guide at: http://service.sap.com/instguides.
Note:
If you have an existing installation of SAP BusinessObjects Polestar XI 3.1,
you need to uninstall this version before you install SAP BusinessObjects
Explorer XI 3.1. Some files need to be removed manually before you install
the new version. For details on which files you need to remove, see the
Uninstalling SAP BusinessObjects Explorer sections for Windows or UNIX,
listed in Related Topics, below. It is highly recommended you back up the
SAP BusinessObjects Explorer WAR files, before you start the uninstallation
procedure.
23
Installation
Before you install the driver, the following applications need to be deployed
and accessible on your network:
• SAP NetWeaver EhP1 SP2
Needs to include SAP Netweaver BW 7.0.1 SP2.
Information:
See the Installation Guide SAP Enhancement Package Installation
24
Installation
Related Topics
• Uninstalling SAP BusinessObjects Explorer on Microsoft Windows on
page 47
• Uninstalling SAP BusinessObjects Explorer on UNIX on page 48
Explorer servers
This feature includes:
• The backend servers:
• Master
• Indexing
• Search
• Exploration
• Third-party components
• The BusinessObjects Java SDK
Note:
You can install the servers on different host machines. For example, you
can have dedicated machines for indexing, exploration, and search.
CMS Add-on
The CMS Add-on needs to be installed on the BusinessObjects Enterprise
CMS. This add-on enables the CMS to recognize SAP BusinessObjects
Explorer.
25
Installation
Related Topics
• Installation procedures on page 26
Installation procedures
The installation procedure you follow depends on the Operating System
(O/S) of your Explorer server host machines.
Related Topics
• Installing SAP BusinessObjects Explorer on Microsoft Windows on
page 26
• Installing SAP BusinessObjects Explorer on IBM AIX on page 30
• Installing SAP BusinessObjects Explorer on Linux SUSE on page 31
1. Double-click setup.exe.
2. In the "BusinessObjects Polestar Setup" dialog, click Next >.
3. Read and accept the License Agreement, then click Next > to start your
installation.
The detected directory is based upon your BusinessObjects Enterprise
XI 3.1 installation.
4. Confirm your installation options:
26
Installation
Option Description
You want to install one or • Type the file path to the host
several Explorer servers on a machine where you want to
machine that does not include install the server(s).
the BusinessObjects Enter- • Enter the CMS Name and
prise server. port number of the Business
Note: Objects installation to which
You need to install the Explor- you want to connect.
er CMS add-on on the Busines- • Select the Explorer servers
sObjects Enterprise server you want to install at the
and install an SIA on the ma- specified location.
chine where you want to in-
stall the Explorer server(s)
before you install the Explorer
server(s).
You want to install the Explor- • Type the file path to your
er Web Application compo- Web Application Server host
nent on your BusinessObjects machine.
Enterprise Web Application • Select Web Application
Server. Server component.
27
Installation
28
Installation
Option Description
You want to deploy the Explor- • To deploy the WAR files auto-
er Web Application Server matically, select Automatical-
components to the Apache ly
Tomcat used by BusinessOb- • To deploy the WAR files
jects Enterprise. manually, using wdeploy, se-
lect Manually
Note:
If you choose either automatic
or manual deployment, the nec-
essary files are copied locally to:
C:\Program Files\Business Ob-
jects\BusinessObjects Enter-
prise 12.0\java\applications\
You want to deploy the Explor- You need to deploy the Explorer
er Web Application Server Web Application Archive (WAR)
components to another Web files separately. You can deploy
Application Server. the WAR files manually using
the wdeploy application.
After installation ensure that the Explorer servers are enabled and started
within the BusinessObjects Enterprise CCM or CMC. Within the CCM, you
can enable and start servers via the Server Intelligence Agent (SIA).
Related Topics
• Deploying the WAR files manually on page 33
29
Installation
1. Type the path to the directory where you want to install launch the Explorer
server(s), type: ./install.sh <install_dir>
For example: ./install.sh /usr/unix/Explorer/
2. On the "BusinessObjects Polestar Setup" dialog, select the current
language for the installation.
3. Press Enter.
The "BUSINESS OBJECTS LICENSE AGREEMENT "screen appears.
4. To accept the license agreement, press y.
5. Select the language packs you want to install.
6. Select the features you want to install on the directory you specified:
• Explorer Servers (Master, Indexing, Search, and Exploration)
• Web Application Server Component (this includes the web portal
deployment components)
• CMS Add-On (This feature is disabled when the CMS is not detected.)
7. Press Enter.
8. In the "Enter Information for existing CMS" screen, type the following
information:
• CMS Name
• Port number
• User Name
• Password
9. Press Enter.
The "Redeploy web applications?" screen appears.
10. You have two options:
30
Installation
Related Topics
• Standardizing font usage across your deployment on page 40
1. Type the path to the directory where you want to install launch the Explorer
server(s), type: ./install.sh <install_dir>
For example: ./install.sh /usr/linux/Explorer/
2. On the "BusinessObjects Polestar Setup" dialog, select the current
language for the installation.
3. Press Enter.
The "BUSINESS OBJECTS LICENSE AGREEMENT "screen appears.
4. To accept the license agreement, press y.
31
Installation
Related Topics
• Standardizing font usage across your deployment on page 40
32
Installation
If you did not auto-deploy the Explorer WAR files during installation, you
need to deploy the files manually using the wdeploy application provided
with your BusinessObjects Enterprise XI installation.
Related information:
Deployment is dependent on your web application server and operating
server, refer to the web application server documentation for detailed
information on WAR file deployment. For further detailed information on web
application deployment, refer to: BusinessObjects Enterprise XI 3.1 Web
Application Deployment Guide for Windows at http//:help.sap.com.
To deploy the Explorer WAR files on your Explorer Web Application Server
using wdeploy:
1. Open the corresponding configuration file for edit:
C:\Program Files\Business Objects\deployment\
For example, if you are deploying WAR files to a Tomcat web application
server, edit the config.tomcat55 file.
By default, configuration files contain parameters that are related to the
previously used web application server.
2. Replace all parameters so that they are specific to the web application
server you wish to deploy to.
3. Open a cmd console and navigate to the location of wdeploy.
C:\Program Files\Business Objects\deployment\
4. Run the wdeploy command to deploy the Explorer WAR files on to your
web application server.
33
Installation
Launch the command for each WAR. Reference the properties files located
at C:\Program Files\Business Objects\deployment\apps\:
PolestarAppActions.proper
PolestarAppActions WAR
ties
Note:
For further information on wdeploy commands, refer to the wdeploy
README located at: C:\Program Files\Business
Objects\deployment\
InfoViewAppActions.proper
InfoViewAppActions WAR
ties
For example, to deploy the CmcApp WAR file on Tomcat, reference the
name of the properties file:
34
Installation
Example:
1. Stop Tomcat.
2. Open for edit the following file: C:\Program Files\Business
Objects\deployment\config.tomcat55.
3. Ensure that the file content resembles your Tomcat installation, for
example:
##
## Business Objects Configuration Utility
##
35
Installation
Command
Related Topics
• Configuring the path for Information Space indexes on page 77
• Configuring the session timeout period on page 79
• Increasing virtual memory on the Explorer servers on page 80
• Explorer Web Application settings on page 73
36
Installation
37
Installation
Related Topics
• Connecting to an SAP NetWeaver BW Accelerator on page 39
• Configuring SAP BusinessObjects Explorer for SAP authentication on
page 54
Related Topics
• Configuring SAP BusinessObjects Explorer for SAP authentication on
page 54
38
Installation
Note:
In previous releases, SAP BusinessObjects Explorer was called SAP
BusinessObjects Polestar. The previous name could appear in some of the
interface messages you see in SAP BusinessObjects Explorer and the SAP
BusinessObjects Enterprise CMC.
com.businessobjects.datadiscovery.dataprovider.trex.host=<myb
waserver>
com.businessobjects.datadiscovery.dat
aprovider.trex.port=3<TREX_instance_number>16
Note:
This first entry should point to the blade with the first master name server
(or at least to a blade with a master name server).
39
Installation
6. Optional: if you have one or more backup blades in place for your BW
Accelerator landscape, you can also configure additional connections to
those backup blades.
For example, to add two backup blades:
com.businessobjects.datadiscovery.dat
aprovider.trex.host1=<bwa_backup_blade1>
com.businessobjects.datadiscovery.dat
aprovider.trex.port1=3<TREX_instance_number>16
com.businessobjects.datadiscovery.dat
aprovider.trex.host2=<bwa_backup_blade2>
com.businessobjects.datadiscovery.dat
aprovider.trex.port2=3<TREX_instance_number>16
Related Topics
• Deploying SAP BusinessObjects Explorer, accelerated version for SAP
NetWeaver BW on page 19
The fonts used to display character strings in Information Spaces are provided
by the font libraries on the clients and servers across your SAP
BusinessObjects Explorer deployment:
• the Exploration servers supply the fonts used to display the character
strings on charts
40
Installation
If the fonts installed on the Exploration server(s) do not match the fonts on
the client(s), the character strings in the charts and the rest of the application
GUI display with different fonts.
Note:
If you implement a distributed deployment architecture, then you need to
verify that this font is installed on each Exploration server.
41
Installation
Information:
The fonts are specified in order of preference. If the first font in the list
is not available, the second font is used; if the second font is not
available, the third font is used, and so on.
4. Optional: to specify the font size, search for the following string:
[10.0];
5. Replace the "10.0" font size with the size of your choice, for example
you would specify a choice of two size 14 Japanese fonts as follows:
<GlobalValue>
<DefaultValues>
<DefaultValue type="4" value="[jiskan24.pcf.z
;k14.pcf.Z];
[14.0];[0];[0;0;0;0];[]" />
</DefaultValues>
</GlobalValue>
Note:
If a different font size is specified for a particular chart zone, such as
the legend, then the global font size is overridden in that particular
chart zone.
6. Rename the file chart-template.xml and save it to <BusinessOb
jects_Polestar_InstallDir>/Polestar12.0/.
• For the rest of the application interface, you can define a font or font size
globally for all languages and, if necessary, define a specific font or font
size for a specific language(s) that will override the global setting for that
42
Installation
language. To include the font of your choice in the application GUI other
than the chart area:
1. Open the <install_dir>\webapps\polestar\schema\chi
nese.css.example\ file for edit.
2. Replace the default font name and size with the font and size of your
choice:
global {
font-family: Arial Unicode J, Arial Unicode MS, Arial,
Sans-serif;
font-size: 13pt;
}
Information:
The fonts are specified in order of preference. If the first font in the list
is not available, the second font is used; if the second font is not
available, the third font is used, and so on.
Note:
If a different font size is specified for a particular interface label, such
as ToolTips, then the global font size is overridden in that particular
type of label.
3. Where you save the file depends on whether you want to apply these
settings globally, to all languages, or just to a specific language:
• to apply the settings to all languages, rename the file as glob
al.css and save it to: <install_dir>\we
bapps\polestar\schema\global\global.css\
• to apply the settings to a specific language, rename the file as
<language>.css and save it to a sub-folder named with the
language code for that language as follows: <install_dir>\we
bapps\polestar\schema\global\<language_code>\<lan
guage>.css\
For example, for Chinese, you would save the file as follows: <in
stall_dir>\webapps\polestar\schema\global\zh_CH\chi
nese.css\
43
Installation
To do this:
1. Launch policytool.
2. Open the server.policy file.
3. Add the appropriate permission, and then save your changes.
4. Use policytool in /usr/WebSphere6.1/AppServer/java/bin.
5. Re-start WebSphere.
Related Topics
• Starting and stopping the backend servers on page 73
44
Installation
Logging on
Verify that the end users in your deployment have their web browser set to
accept session cookies. If session cookies are not accepted, users cannot
log into SAP BusinessObjects Explorer.
Replace webserver and port with the name and port of the web server
that is setup for Business Objects Enterprise. If you are unsure what the
web server name is or what the exact URL is, check with your
administrator.
The "Log On" page appears.
2. Type in the name of your system within the System field.
3. Type your username and password within the Username and Password
fields.
4. Click the Authentication list to select Enterprise, LDAP, or Windows AD
authentication.
Enterprise authentication requires a username and password that SAP
Business Objects Enterprise recognizes.
LDAP authentication requires a username and password that an LDAP
directory server recognizes.
Note:
Enterprise authentication is the default method. LDAP, and AD
authentication requires specific set up. If necessary, contact your system
administrator for further help.
45
Installation
Note:
If you have the correct rights, the Manage Spaces tab is also available.
To open the tab, click Manage Spaces on the title bar (located on the
top-right corner).
To log off Business Objects Explorer, click Logoff on the title bar (located
on the top-right corner). The Log On page reappears.
Replace webserver and port with the name of the web server and port
that is setup for Business Objects Enterprise. If you are unsure what the
web server name is or what the exact URL is, check with your
administrator.
The Log On page appears.
3. Click the Authentication list to select SAP authentication.
The SAP specific fields are displayed.
4. Type in the value of the system ID within the SAP System ID: field.
5. Type in the value of the client ID within the SAP Client ID: field.
6. Type in the name of your system within the System: field.
7. Type your SAP username and password into the Username and
Password fields.
8. Click the Log On button.
If your SAP logon credentials are accepted the welcome page with the
"Home" tab appears.
46
Installation
Note:
If you have the correct rights, the "Manage Spaces" tab is also available.
To create or edit Information Spaces, click Manage Spaces on the title
bar (located on the top-right corner).
To log off, click Logoff on the title bar (located on the top-right corner).
47
Installation
Note:
This example shows the command for Apache Tomcat.
48
Installation
49
Installation
50
Security
Security
Reverse proxies
SAP BusinessObjects Explorer supports the same reverse proxy configuration
as SAP BusinessObjects Enterprise. No specific reverse proxy configuration
for SAP BusinessObjects Explorer is required.
Information:
For information about reverse proxy configuration for SAP BusinessObjects
Enterprise, refer to the BusinessObjects Enterprise Administrator's Guide XI
3.1 available on the "SAP BusinessObjects" tab at: http://help.sap.com.
Each server can be configured so that they use a specific port. The firewall
can then be configured so that the specific ports are open.
51
Security
Note:
If you allow access to the CMS, other services can connect and exchange
information.
Server Port
Related Topics
• Configuring firewall ports on page 52
52
Security
Authentication methods
SAP BusinessObjects Explorer supports the authentication methods
supported by SAP BusinessObjects Enterprise:
• Enterprise
• Windows AD
• LDAP
• SAP R/3
Related Topics
• Configuring SAP BusinessObjects Explorer for SAP authentication on
page 38
• Configuring SAP BusinessObjects Explorer for SAP authentication on
page 38
53
Security
The SAP authentication settings are stored within the Explorer settings
properties file (default.settings.properties).
Example Configu-
Example Configu-
ration (without
Setting Description ration (for SAP
SAP Authentica-
Authentication)
tion)
54
Security
Example Configu-
Example Configu-
ration (without
Setting Description ration (for SAP
SAP Authentica-
Authentication)
tion)
default.sapsystem.name=SAP_ID
show.sapsystem.name=true
disable.sapsystem.name=false
default.sapclient.name=100
show.sapclient.name=true
disable.sapclient.name=false
55
Security
default.authentication.method=secSAPR3
authentications=secEnterprise,secWinAD,secLDAP,secSAPR3
Single Sign On
Note:
In previous releases, SAP BusinessObjects Explorer was called SAP
BusinessObjects Polestar. The directories on the Explorer servers use the
previous name: polestar.
You can configure SAP BusinessObjects Explorer for Single Sign On (SSO)
for the following authentication methods:
• Enterprise
• Windows AD
• LDAP
Related Topics
• Activating Single Sign On on page 56
• SSO for WinAD authentication using Vintela on page 59
• SSO for LDAP authentication using SiteMinder on page 61
• Enabling Trusted Authentication on page 63
56
Security
Information:
See the SAP BusinessObjects Enterprise Administrator's Guide for XI 3.1
at: http://help.sap.com.
To activate SSO:
1. Stop the Explorer Web Application Server.
2. Open the following file for edit:
$<PolestarWebappRoot>/WEB-INF/classes/sso.properties
Setting Values
sso.global.enabled true
sso.global.providers <provider_name>
Note:
By default, the sso.properties file contains a set of ready-to-use values
for the sso.global.providers file. The property must only be set once
in the entire file. However, you can specify multiple providers using a
comma-separated list of providers.
57
Security
Example:
sso.global.enabled=true
sso.global.authentication=
sso.global.cms=hostname:port
sso.global.providers=sso.vintela
58
Security
Note:
the authentication cannot be overriden and is implicitely set to secWinAD.
It works as follows:
• Retrieves the Windows credential from the current execution context
using Vintela
• Logs on to the server with authentication using these credentials
59
Security
class- com.businessob-
Name jects.datadiscov-
ery.sso.vintela.VintelaS-
SOProvider
Example:
#
# Vintela parameters (sso.vintela provider)
#
sso.vintela.className=com.businessobjects.datadiscovery.sso.vin
tela.VintelaSSOProvider
sso.vintela.cms=
Information:
See the SAP BusinessObjects Enterprise Administrator's Guide for XI 3.1
at: http://help.sap.com.
60
Security
Note:
this provider is based on a generic provider with predefined values, as
specified below.
It works as follows:
• Retrieves the SiteMinder session cookie from the current execution context
• Logs on to the server with authentication using this cookie value
61
Security
Set-
ting Description Values
class- com.businessobjects.datadiscov-
Name ery.sso.generic.GenericSSO-
Provider
Example:
#
# SiteMinder parameters (sso.siteminder)
#
sso.siteminder.className=com.businessobjects.datadiscov
62
Security
ery.sso.generic.GenericSSOProvider
sso.siteminder.cms=
sso.siteminder.authentication=secLDAP
sso.siteminder.user.retrieval=COOKIE
sso.siteminder.user.param=SMSESSION
Setting Values
sso.enabled true
siteminder.en- false
abled
63
Security
5. Enter the parameter value that corresponds to the user retrieval method
you want to implement:
64
Security
65
Security
For more information about the possible parameter values, see the SAP
BusinessObjects Enterprise Administrator's Guide for XI 3.1 at:
http://help.sap.com.
6. Verify you have specified how to retrieve the shared secret for
BusinessObjects Enterprise.
To retrieve the shared secret from a session variable, you need to
configure the $<PolestarWebappRoot>/WEB-INF/classes/sso.proper
ties file on SAP BusinessObjects Explorer.
Parameter Value
66
Security
Information:
For detailed information on user rights and setting those rights, refer to the
SAP BusinessObjects Enterprise Administrator's Guide for XI 3.1 available
at: http://help.sap.com.
Related Topics
• The SAP BusinessObjects Explorer user population on page 12
67
Security
68
Security
Delete objects
69
Security
Delete objects
70
Security
71
Security
Note:
When configuring authorizations for Space Creators and Administrators,
ensure that they have the correct access levels to Universes and Universe
Connections. The access levels state the rights they have for Universes and
Universe Connections. Having the right of Data Access for a Universe
Connection allows the user to access the Universe for Information Space
creation.
For full information on the user rights and security levels available at the SAP
BusinessObjects Enterprise level, refer to the SAP BusinessObjects
Enterprise Administrator's Guide for XI 3.1 available at: http://help.sap.com.
Related Topics
• The SAP BusinessObjects Explorer user population on page 12
72
Administration
Administration
Information:
Refer to the BusinessObjects Enterprise Administrator's Guide XI 3.1 available
at: http://help.sap.com.
default.settings.properties
The file is stored under the web application server directory, for example:
• C:\Program Files\Business
Objects\Tomcat55\webapps\polestar\WEB-INF\classes\
73
Administration
74
Administration
75
Administration
The OpenDocument
URL of your Busines-
sObjects Enterprise de-
ployment. It is used
when a user exports In- http://serv
formation Space data er:port/Open
opendoc.url to a Web Intelligence Document/open
query. Setting the value doc/openDocu
opens the query via ment.jsp
OpenDocument. If you
do not set the value,
the query is not
launched.
Note:
There are also several settings used for SAP authentication.
Related Topics
• Configuring SAP BusinessObjects Explorer for SAP authentication on
page 54
• The period of time (based on the unit) that a bookmark is stored. For
example 365.
• The period of time (in milliseconds) before a session object (handled by
an underlying watchdog) is deleted.
76
Administration
• The delay (in milliseconds) between each update of when slave servers
inform the master server about their workload in order that the load is
balanced.
You can also configure the indexing path (in order of priority) via:
• a properties file (for all servers on a single node)
• the BusinessObjects Enterprise CMC server properties (for a single
indexing server on a single node)
For example, if you configure the settings via a properties file on a node, the
CCM settings are ignored for that node.
Related Topics
• Configuring the index path via the server properties within the CMC on
page 78
• Configuring the index path via a properties file on page 78
77
Administration
To change the indexing path for a single indexing server, edit the server
properties within the CMC. The indexing path is dependent on your installation
path and is defaulted to:
• %DefaultDataDir%/Polestar/index
You can change the indexing path for all servers on a single node, by creating
or editing a properties file.
1. Create or edit a properties file named polestar.service.properties
located under:
• C:\Program Files\Business Objects\Polestar12.0\
Add this entry:
• index.path=C:/Index
2. Amend the value accordingly and save the file.
3. Restart the servers.
Note:
If you copy existing indexes, the Explorer Indexing Server has to be
stopped.
78
Administration
For example:
Note:
The default value of watchdog.timeout is 300 000 milliseconds (5 minutes).
Altering the setting (especially if the specified value is too low) can have an
impact on stability and even delete a valid session. This value must be smaller
than the value of workload.update.delay.
79
Administration
Workaround:
It is necessary to change the default request.timeout setting (in seconds)
located within:
C:\Program Files\Business Objects\Tomcat55\webapps\polestar\WEB-
INF\classes\default.settings.properties
To do this:
1. Open for edit the default.setting.properties file.
2. Locate the request.timeout setting.
3. Change the setting accordingly.
Caution:
Defining a large value affects the waiting time for users.
Option Description
80
Administration
On 32 bit machines, JVMs cannot address more than 2GB, globally. Because
there are multiple memory pools with different sizes, the practical limit for
the heap size is approximately 1.5GB.
Note:
The memory is configured via an INI configuration file. Do not use the server
command line to configure the memory.
Verify the memory limit you can configure for a server and the JVM. The
heap size is dependent on the hardware and software used. For example,
81
Administration
3. Edit the INI configuration file corresponding to the server you want to
configure.
For example, if you want to increase the memory for the Explorer
Exploration Server, edit the poleExpl.ini file.
4. Find the Xmx entry, type your desired memory size:
-Xmx1g
The value of the heap size can be changed according to your
requirements. For example, change the value from 1GB to 1600MB.
5. Save the file.
6. Re-start the server.
The server you have configured uses a maximum JVM memory heap size
according to the value within the command line.
Example:
You want to change the Explorer Master Server heap size to 1628MB:
1. Navigate to: C:/Program Files/Business Objects/Polestar12.0/.
2. Edit the poleMast.ini configuration file.
3. Find the Xmx entry and edit the entry as follows:
-Xmx1628m
4. Save the file.
82
Administration
By default, the number of Corba threads is set to 100 on each of the Explorer
servers (Master Server, Navigation Server, Indexing Server, Search Server).
This is suitable for a simple deployment scenario, where Apache Tomcat is
your Web Application Server and you only have one Master Server, one
Navigation Server, one Indexing Server and one Search Server deployed at
the backend. Setting 1000 threads for the Explorer backend servers when
Apache Tomcat only has 100 is of no use and could even be harmful because
it would cause many context switches and thus impact performance.
To change the number of Corba threads for a single server, edit the server
properties within the BusinessObjects Enterprise CMC.
1. Logon to the CMC.
2. Navigate to the Polestar server you want to configure via Servers.
83
Administration
For example:
5. Click Save.
You can change the number of Corba servers for all servers on a single
node, by creating or editing a properties files.
1. Create or edit a properties file named polestar.service.properties
located under:
• C:\Program Files\Business Objects\Polestar12.0\
2. Add this entry: nb_threads=150.
3. Amend the value accordingly and save the file.
4. Restart the servers.
To change the number of Corba threads via the CMC, amend the value within
the CMC administration page. In this case, the value is taken into account
by all slave nodes.
1. Logon to the CMC.
2. Navigate to Manage > Applications.
3. Right-click Polestar and click Properties.
4. Change the Number of threads: value and click Save.
84
Administration
To change the Explorer validity period for a single server, edit the server
properties within the BusinessObjects Enterprise CMC.
1. Logon to the BusinessObjects Enterprise CMC.
2. Navigate to the Explorer server you want to configure via Servers.
3. Right-click the server and click Properties.
4. Within Command Line Parameters, add the following:
-bookmark.validity.time 365 -bookmark.validity.unit DAYS
For example:
5. Click Save.
You can change the Explorer bookmark validity for all servers on a single
node, by creating or editing a properties files.
1. Create or edit a properties file named polestar.service.properties
located under:
• C:\Program Files\Business Objects\Polestar12.0\
2. Add the following entries.
bookmark.validity.time=365
bookmark.validity.unit=DAYS
85
Administration
For example:
86
Administration
Note:
The default value of workload.update.delay is 15 000 milliseconds. Altering
the setting (especially if the specified value is too low) can have an impact
on network traffic and performance. The value must be significantly smaller
than the value of watchdog.timeout.
Logging methods
There are two SAP BusinessObjects Explorer logging methods, each tracking
different operations:
1. Server logging.
You can trace the activity of the backend servers. Logging is appended
to a file where its name is automatically generated at creation time. For
example:
This file logs the server operations by using log4j. By default, ERROR tracing
is activated.
2. Web application logging.
By using your web application server (such as Apache Tomcat) logging
services, you can log the application operations. For example, via the
Tomcat configuration, you can also change the logging level and change
the logging path. By default, log files are stored in the Tomcat logs
directory:
You can also view logs by running Tomcat via a command line such as
Command Prompt.
87
Administration
http://tomcat.apache.org/tomcat-6.0-doc/logging.html
Related Topics
• Configuring the Explorer server log files on page 88
• Web application logging on page 90
Note:
The loggingPath value is the location to place the output log file and the
trace value activates logging. By default, if the trace value is false,
only errors are logged.
The name of the file is generated on creation and is based on the name of
the server and when the server was started. For example:
88
Administration
Server_XXXXXXXX_XXXXXX.log
2. Enter your desired Log4j logging content to the file. For example:
log4j.debug=true
log4j.rootLogger=WARN, A1
log4j.appender.A1=org.apache.log4j.ConsoleAppender
log4j.appender.A1.layout=org.apache.log4j.PatternLayout
log4j.appender.A1.layout.ConversionPattern=%-4r [%t] %-5p
%c %x - %m%n
log4j.appender.A2=org.apache.log4j.net.SocketAppender
log4j.appender.A2.remoteHost=localhost
log4j.appender.A2.port=4567
log4j.appender.A2.locationInfo=false
log4j.appender.A2.reconnectionDelay=10000
log4j.logger.package/class=level
You can log packages and classes using the following levels: INFO,
WARN, ERROR, FATAL
For further information on Log4j logging, refer to: http://log
ging.apache.org/log4j/.
89
Administration
2. Edit the logging levels you want use (such as ERROR) for SAP
BusinessObjects Explorer within the file by following the guidelines located
at:
http://logging.apache.org/log4j/
However if you have many users indexing and exploring large Information
Spaces constantly, ensure the following:
• SAP BusinessObjects Explorer is deployed in a cluster with additional
machines each having extra servers
90
Administration
91
Administration
92
More Information
More Information
SAP BusinessObjects
http://www.sap.com
product information
93
More Information
https://boc.sdn.sap.com/
Developer resources
https://www.sdn.sap.com/irj/sdn/businessobjects-sdklibrary
https://service.sap.com/notes
Notes These notes were formerly known as Knowledge Base
articles.
94
More Information
http://www.sap.com/services/education
http://service.sap.com/bosap-support
http://www.sap.com/services/bysubject/businessobjectscon
sulting
95
More Information
96
Index
A configuration (continued)
server memory 80, 81
AIX session timeout period
installation 30 watchdog.timeout 79
AIX uninstall 48 watchdog timeout
application servers 15 peer session 76
architecture web application settings 54, 73
deployment 19 workload 86
auditing 11 workload update delay
authentication load balancing 76
trusted 63 cookies 45
Corba
configuring number of threads 83, 84
B corba threads
backup blades 37 configuring 83
blades custom fonts 40
back up BW Accelerator 37
BusinessObjects Enterprise 11 D
BW Accelerator 10
default.settings.properties 54, 73
deployment
C complex environment 20
CCM for improved exploration 17
servers 73 for improved indexing
CMC 11 scheduling 90
BWA connection 39 deployment scenarios 19
configuring number of Corba threads 84
configuring users 66, 68 E
profile permissions 68
server properties Explorer
bookmark validation period configuration installation
85, 86 manual 33
configuring number of Corba threads 83 wdeploy 33
index path configuration 78 overview 9
CMS 11
configuration
bookmark validation 76
F
bookmark validation period 86 fonts 40
BWA connection 39
indexing path 76, 78
SAP authentication 38, 54
server communication 76, 83, 84, 85
97
Index
H logs
log4j 88, 89, 90
Home tab server logging 87
welcome page 45, 46 servers
overriding default 89
web application 90
I web application logging 87
InfoCube 10
Information Space data 10 M
installation
AIX 30 MS Windows
Linux SUSE 31 installation 26
MS Windows 26
installation package 25
installation prerequisites 23
O
operating systems 15
J
Java 2 security
P
WebSphere 44 polestar.service.properties file
JVM heap size 80 bookmark validation period configuration
85
K configuring number of Corba threads 84
index path configuration 78
Kerberos 60 prerequisites
installation 23
L
R
LDAP 61
LDAP SSO request timeout 80
SiteMinder 61 restarting servers 73
Linux SUSE
installation 31
Linux uninstall 48
S
load balancing 86 SAP
logging off 45, 46 authentication 46
logging on SAP authentication 38
authentication session cookies 45
Enterprise 45 SIA 20
LDAP 45 SiteMinder 61
Windows AD 45 SSO 56
Windows NT 45 activating 56
log on credentials 45, 46 LDAP 61
Log On page 45, 46 WinAD 59, 60
SAP authentication 46 starting servers
server URL 45, 46 Exploration Server 73
98
Index
timeout
configure for large data sets 80
W
trusted authentication 63 WebSphere
Java 2 security 44
U WinAD 59, 60
WinAd SSO
uninstall Kerberos 60
IBM AIX 48 Vintela 59
99
Index
100