hi all,
I have searched this forum and read the TM1 Op Guide on this topic. My users want to have single sign-on. I understand that this can be achieved using IntegratedSecurityLogin=3 in the config file.
the tricky part is, they are using Xcelerator in Cognos Express. If I choose to do using this login mode, this will effectively decouple Xcelerator login from CX Administration Manager, which may not be a bad thing :p.
based on the posts in this forum and the Op guide, i gather that i need to do the following:
1) add the integrated login parameter and set it to "3".
2) add the security name parameter and set it to "Kerberos".
3) for each TM1 user id, I shall go to the control cube "ClientProperties" and enter the windows login ID under the member "UniqueID" in the cube view. the format of the login ID is XXX@domain where domain is the name of the domain of the user ID "XXX".
So i tried it out on my local PC. However, when I double-click on the server (which is running as an application), the error message shows that the Security Name is not found.
Is it due to the fact that it is running as an application? or did i miss out a step e.g. need to do something to enable Kerberos? I'm using Vista on my local PC.
Many thanks in advance!
HELP: IntegratedLogin=3... SecurityName not found
-
- Regular Participant
- Posts: 226
- Joined: Thu Apr 02, 2009 2:51 pm
- OLAP Product: IBM Planning Analytics
- Version: Latest version
- Excel Version: 2003 to 2019
HELP: IntegratedLogin=3... SecurityName not found
Planning Analytics latest version, including Cloud
- Michel Zijlema
- Site Admin
- Posts: 712
- Joined: Wed May 14, 2008 5:22 am
- OLAP Product: TM1, PALO
- Version: both 2.5 and higher
- Excel Version: 2003-2007-2010
- Location: Netherlands
- Contact:
Re: HELP: IntegratedLogin=3... SecurityName not found
Hi,
AFAIK Cognos Express will only support the CAM security configuration.
Michel
AFAIK Cognos Express will only support the CAM security configuration.
Michel
-
- Posts: 58
- Joined: Thu Apr 14, 2011 12:27 pm
- OLAP Product: TM1
- Version: v10.2.2
- Excel Version: 2010
- Location: South Africa
Re: HELP: IntegratedLogin=3... SecurityName not found
Does that mean CX is not able to use Integrated login?Hi,
AFAIK Cognos Express will only support the CAM security configuration.
Michel
It clearly states in the OP guide it can, but I have spend a day and a half on this, every avenue leads to another dead end.
Any help???
MEMS
-
- Site Admin
- Posts: 1457
- Joined: Wed May 28, 2008 9:09 am
Re: HELP: IntegratedLogin=3... SecurityName not found
We were told (inconsistently) by IBM Support that CX 9.5 was not supported but that they had guidance on making it work. We passed this to the client who decided not to pursue.
I think it would be worthwhile to raise a PMR to see whether the story has changed.
And yes, as posted elsewhere, the manuals are more or less a search and replace from the 'real TM1' manuals, so that issue does not surprise me.
I think it would be worthwhile to raise a PMR to see whether the story has changed.
And yes, as posted elsewhere, the manuals are more or less a search and replace from the 'real TM1' manuals, so that issue does not surprise me.
-
- MVP
- Posts: 2832
- Joined: Tue Feb 16, 2010 2:39 pm
- OLAP Product: TM1, Palo
- Version: Beginning of time thru 10.2
- Excel Version: 2003-2007-2010-2013
- Location: Atlanta, GA
- Contact:
Re: HELP: IntegratedLogin=3... SecurityName not found
Several things here:
1) Check the spelling on the domain part of the UserName@domain. It is case sensitive and will not work unless spelled EXACTLY like it is in AD.
2) TM1 server exe has to run under an ID that has permissions to query AD. There is a whole section in the manuals that cover this.
3) Have you tried NTLM instead of Kerberos? If TM1 and TM1Web are on the same machine (and wouldn't they be in CX???) I would use NTLM.
1) Check the spelling on the domain part of the UserName@domain. It is case sensitive and will not work unless spelled EXACTLY like it is in AD.
2) TM1 server exe has to run under an ID that has permissions to query AD. There is a whole section in the manuals that cover this.
3) Have you tried NTLM instead of Kerberos? If TM1 and TM1Web are on the same machine (and wouldn't they be in CX???) I would use NTLM.
-
- Posts: 58
- Joined: Thu Apr 14, 2011 12:27 pm
- OLAP Product: TM1
- Version: v10.2.2
- Excel Version: 2010
- Location: South Africa
Re: HELP: IntegratedLogin=3... SecurityName not found
@tomok,
Yes I have tried NTLM and got it to work, LONG LONG process... but finally got it to work.
Now because it is security mode 3, it does not seem to work with Web components.
Sigh...
Think the problem might be sorted with LDAP setup, but that seems near impossible. I spend almost a week to get access to the database. Hopefully nobody wants to use web...
Yes I have tried NTLM and got it to work, LONG LONG process... but finally got it to work.
Now because it is security mode 3, it does not seem to work with Web components.
Sigh...
Think the problem might be sorted with LDAP setup, but that seems near impossible. I spend almost a week to get access to the database. Hopefully nobody wants to use web...
MEMS
-
- MVP
- Posts: 2832
- Joined: Tue Feb 16, 2010 2:39 pm
- OLAP Product: TM1, Palo
- Version: Beginning of time thru 10.2
- Excel Version: 2003-2007-2010-2013
- Location: Atlanta, GA
- Contact:
Re: HELP: IntegratedLogin=3... SecurityName not found
Which web components are you referring to? TM1Web will work with security mode 3, I do it all the time. The Cognos BI web components will not work as they require CAM.Mems wrote:Now because it is security mode 3, it does not seem to work with Web components.