Most of the users were brought in through Win AD Groups. In the CMC, under Users and Groups, on the User Properties page, there is a Database Credentials section. How does it get populated? Does it need to be populated? If not, how do you update Win AD groups and NOT have it populated? I’m looking at my users’ properties, and can’t see a distinct pattern - some are populated with their own names, some are blank, some are enabled, some are not enabled, and some have the administrator’s name.
Database credentials is only used for single sign-on to the database. If you don’t use this, then you don’t need to worry about it.
If you do want to use single sign-on to the database, then the user would be accessing the database using their own credentials. I would think you would leave it blank in this case because their ID and password should be passing through with single sign-on.
As to why some of them would be populated and some not, I would guess that at some point an Administrator updated them. I would think the Administrator name would not be valid as I would think it would not have any access to a database anyway.
Hmm, not sure if that applies here. There are only 6 connections and they all use service accounts.
At any rate, after I removed all the WinAD groups and re-promoted them from prod, the issue resolved itself. Now, in the Database Credentials section, Enable is un-checked and nothing in the Account Name block.
Sounds like someone was experimenting with passthrough authentication at some point in the past and did not remove or disable the database credential settings.
Database credentials won’t actually do anything unless the user attempts to refresh a report that uses a universe with a connection set to passthrough authentication.
I found (quite a lot of) users in our system to have this “enabled” indeed.
I know BOB Downloads somewhere has a “script” to “set user preferences” or such, but I doubt the script can be set to ONLY update that one field “enable DB credentials” and/or disable that field + wipe the **** from the pwd field.
is there anyone on BOB who “removed” such a setting (for all users or for a group) without changing anything else ?
Can it be done without “expensive third party tools”
( Yes I know, just like nail polish remover: cheap solutions always have drawbacks - they may be poisonous )
(BOB member since 2002-08-20)
(BOB member since 2015-06-30)
(BOB member since 2007-06-18)