Monday, November 02, 2009

Integrate Oracle BIEE Server with LDAP(OID) over SSL

Surfing on the web I found a lot of guides to integrate Oracle BIEE Server with LDAP Repos but I didn't find any guide to integrate Oracle BIEE Server with LDAP Repos over SSL so I decided to write a little HOW-TO to describe how to do it.

There are two ways to integrate BIEE with a LDAP repo, the first one is to entrust to OID the authentication user list, the second one is to sync the BIEE user repo with LDAP repo. In this article I'm  describing the first way!

Config SSL on OBIEE:

  1. Install GSKit7 on Server machine and Client machine

  2. Create the key_file with the utility sk7ikm ( for details follow Generating a CMS Key Database Using IBM GSKit ), when you generate the key file you need to import the OCA cert of OID

  3. Copy the generated file "key.kdb" to Server machine in the path $BIEE_HOME/server/Config

  4. In BIee Administrator`s Menu go to:  Tools –> Options –> Repository and fill out the form with the Key File Name and Password like the image below:


Config OBIEE LDAP server:

  1. Go to Manage -> Security -> LDAP Server

  2. Select "New LDAP Servers..." and fill out the two tabs as follow:


    It's very important to check the SSL option!!!


Now your BIEE is integrated with your ldap repo.

The next step is to configure your Initialization Block, this isn't a topic of my article so if you need an exhaustive guide about Initialization Block of BIEE you can read the section "Configure initialization block for user authentication" in this page.

I hope you find this article useful for you,  feel free to comment it!

bye bye!