connecting Planning Analytics to CAM Security

[stheld]

Hi there,
I have an issue connecting a new TM1 Server to CAM security.

Both, TM1 (actually planning analytics 2.0.6) and Cognos Analytics (11.1.4) are on the same machine.

I'm kind of new to this setup, used express before which was much easier in security things....
I have a local admin on TM1 which I can use to log in.
I have a domain account set up as system administrator in Cognos Analytics.
My tm1s.cfg has IntegratedSecurityMode = 2 and ClientCAMURI and ServerCAMURI pointing to the respective Cognos Services.
My tm1p.ini has allowImportcamClient = T and CognosGatewayURI pointing to my local gateway uri.

In windows, I'm running Architect as the domain account that is set up as Cognos System admin.

When I log into architect as the TM1 admin user and go into security, add client, it should prompt me for a login in the domain of the cognos system admin but it doesn't.

Instead it gives me the simple add user name prompt as if i was still in Integrated Security Mode 1

it doesn't let me add anything like Domain\username or Domain/username, I can only create local users.


What is wrong? Do I have to enable anything special in Cognos Analytics to allow this connection?


Thanks for any help....

Best Regards
Stefan

[tomok]

https://www.ibm.com/support/knowledgece ... n0437.html

Read the descriptions of the options, specifically option 5.

[stheld]

Thanks but before I can switch to option 5, I first have to make my Cognos System Admin the TM1 admin for this server.
And according to all IBM descriptions, I can only do that in Mode2 (some say Mode 1, I've tried both, neither works.)

As soon as I've made my Cognos Admin my TM1 Admin, I can switch to 4 or 5, depending on if I want local tm1 groups or not.

But that's where I'm stuck.
I can't add my Cognos Admin.

[tomok]

Did you follow these directions?

https://www.ibm.com/support/knowledgece ... urity.html

[stheld]

Yes, but again: here, instructions are different.
The document you mentioned, says, first set Integrated security mode to 1, the tutorial video from IBM (https://www.youtube.com/watch?v=OTeh7Lk56g8) says mode 2. Your document says, I need to set the ClientPingCAMPassport param, the video doesn't.
Some instructions say, I should add a user to the TM1 Adminstrators group in Cognos Analytics, but my installation doesn't have any TM1 groups in the Cognos namespace.

One thing I'm thinking about: I have connected both, TM1 and Cognos Analytics to the ActiveDirectory, with same names for the namespace (but of course in different configurations). Could that be a problem?

Thanks & Best Regards
Stefan