What MetaMiner Stores¶
MetaMiner collects metadata from BusinessObjects into the MetaMiner Database and a few server folders; this page lists what is kept, where, and how credentials are handled.
How it works¶
The MetaMiner Server (MMS) pulls metadata from each BusinessObjects environment with the service account you configure in MMA. It writes the metadata to the MetaMiner Database (MMDB). The MetaMiner Client (MMC), the web console and Meta Query read it from there.
MetaMiner reads report and universe definitions. It does not copy the business data inside your source databases into the MMDB.
Metadata collected from BusinessObjects¶
| Category | Examples |
|---|---|
| Repository objects | Folders, categories, documents of every kind (Web Intelligence, Crystal Reports, Analysis for Office, publications, shortcuts, hyperlinks), universes, connections, events, calendars, profiles |
| Users and security | Users, groups, group membership, enterprise aliases, Windows AD aliases, custom roles, access levels and rights on objects, universe security profiles |
| Web Intelligence content | Data providers, queries, generated SQL, report structure, variables, prompts |
| Universe content | UNV and UNX classes, objects, tables, joins, contexts, connections |
| Crystal Reports content | Tables, fields, command text, database logon names, Business Views |
| Operations | Servers and services, active sessions (user name and session start), schedules and instances |
| Audit (optional) | Events from the BusinessObjects audit database, when you configure it for the environment |
| Metrics | Server metrics and, with the host agent, host and process metrics |
The MMC and Meta Query show this metadata to MetaMiner users according to their roles. Restrict roles accordingly; see Permissions Reference.
Where it is kept¶
All paths are relative to the server install folder, for example C:\Program Files\Infolytik\MetaMiner\server\.
| Location | Contents |
|---|---|
| MetaMiner Database | All pulled metadata, audit events, metrics, pull history, saved Meta Query scripts and web console query jobs |
data\mmdb\ |
Database files of the embedded MMDB (when you use the embedded database) |
config\ |
config.json (server configuration with encrypted passwords), certificate trust files, web apps settings |
security\ |
MetaMiner users, roles and per-environment role assignments |
logs\ |
Server, admin and service logs |
| Backup folder (Preferences > Settings > Backup) | BIAR backups and backup archives created by MetaMiner |
| Versions folder (Preferences > Settings > Backup) | Saved versions of Web Intelligence documents and universes, when history is turned on |
| Report validation output folder | Exported report outputs used for comparison |
alerts\ |
Alert definitions and alert history |
Backups and versions can contain report data
BIAR files, saved document versions and report validation outputs are BusinessObjects files. A document saved with data keeps that data. Protect these folders like the BusinessObjects file repository.
TODO: confirm which document files the versions folder holds for each content type
Source to check: versioning service. Confirm whether saved Web Intelligence versions keep cached report data.
On each MMC workstation, MetaMiner keeps per-user files in the MetaMiner application data folder under %APPDATA%\MetaMiner\: connection history, preferences, client logs and, when used, remembered logons.
How credentials are handled¶
| Credential | Where you enter it | How MetaMiner keeps it |
|---|---|---|
| BusinessObjects service account, test user | MMA environment dialog | Encrypted in config.json |
| Audit and CMS database accounts | MMA environment dialog | Encrypted in config.json |
| MetaMiner Database account | MMA Configure MMDB | Encrypted in config.json |
| LDAP bind account | Preferences > Settings > System | Encrypted in config.json |
| SMTP account | Preferences > Settings > Email | Encrypted in config.json |
| MetaMiner Server SSL key password | Configure SSL dialog | Encrypted in config.json |
| MetaMiner user passwords | MMA user dialog, MMC Change MetaMiner Password | Encrypted in security\ |
| LDAP or AD user passwords | Not stored | Checked against the directory at each sign-in |
| An MMC user's own BusinessObjects password | MMC logon dialog | Not stored. Sent encrypted to the MMS for the logon only |
| Remembered BusinessObjects logon | Remember me on this computer | A BusinessObjects logon token, not the password, protected with Windows DPAPI for that Windows user |
| MMC password | Remember password in Connection Manager | Encrypted in the user's application data folder |
To protect stored credentials:
- Restrict NTFS permissions on
server\configandserver\securityto administrators and the MetaMiner service account. - Restrict read access to
server\logs. - Optionally encrypt the whole configuration file; see Encrypting the Configuration.
- On shared workstations, use File > Forget Credentials... to remove the saved MetaMiner password, and File > Log off BusinessObjects to remove a remembered BusinessObjects logon.