Cognos Express Security when using Advisor and Xcelertator
Posted: Mon Sep 26, 2011 12:10 am
I’m having trouble setting up security properly in CE (loosely realated to http://www.tm1forum.com/viewtopic.php?p=25301)
We have TM1 9.1.4 and EV and I'm trying to get this up and running in CE as easily as possible.
I see that if I want to just use Xcelerator then an IntegratedSecurityMode setting of 1 or 2 should be set.
As per these links:
http://publib.boulder.ibm.com/infocente ... N0437.html
and
https://www-304.ibm.com/support/docview ... s=swgimgmt
However doing this means that TM1 security works fine but Advisor and Reporter does not connect to the TM1 data using the CAM method.
I tried setting IntegratedSecurityMode to 4.
As per this IBM document that explains the limitation: https://www-304.ibm.com/support/docview ... 5257&aid=1 (anyone else find this doc a little confusing?)
I can then create users in Cognos and those users then appear in the TM1 sever explorer. I can also create groups that appear in the server explorer. But if a user is a CAM user and not a TM1 user they cannot read from cubes unless they are in the TM1 administration group ADMIN.
Obviously I don’t want to give all my users access to this.
I tired giving my new CAM group access to read from a cube but unfortunately we have element level security so the user would get errors when trying to open a cube.
Has anyone got security in CE to work with existing TM1 security or does this require a complete rebuild? If so how do you manage security within a cube using the CAM model?
My cfg file is below:
On a similar note has anyone been able to get the N_CONNECT macro to work with Cognos Express CAM security?
We have TM1 9.1.4 and EV and I'm trying to get this up and running in CE as easily as possible.
I see that if I want to just use Xcelerator then an IntegratedSecurityMode setting of 1 or 2 should be set.
As per these links:
http://publib.boulder.ibm.com/infocente ... N0437.html
and
https://www-304.ibm.com/support/docview ... s=swgimgmt
However doing this means that TM1 security works fine but Advisor and Reporter does not connect to the TM1 data using the CAM method.
I tried setting IntegratedSecurityMode to 4.
As per this IBM document that explains the limitation: https://www-304.ibm.com/support/docview ... 5257&aid=1 (anyone else find this doc a little confusing?)
I can then create users in Cognos and those users then appear in the TM1 sever explorer. I can also create groups that appear in the server explorer. But if a user is a CAM user and not a TM1 user they cannot read from cubes unless they are in the TM1 administration group ADMIN.
Obviously I don’t want to give all my users access to this.
I tired giving my new CAM group access to read from a cube but unfortunately we have element level security so the user would get errors when trying to open a cube.
Has anyone got security in CE to work with existing TM1 security or does this require a complete rebuild? If so how do you manage security within a cube using the CAM model?
My cfg file is below:
Code: Select all
## Security Settings
CAMPortalVariableFile = portal/variables_TM1.xml
ServerCAMURI = http://IRLCETEST:19300/p2pd/servlet/dispatch
ClientCAMURI = http://IRLCETEST:19300/p2pd/servlet/dispatch
# Use mixed mode security
# JW 20110905 Changed from original of 4
# set to 2 to use just TM1 security
IntegratedSecurityMode = 4
Language = ENG
ClientMessagePortNumber = 19307
PortNumber = 19306
ClientPingCAMPassport = 900
## Data directory
DataBaseDirectory = D:\Cognos Express\Data
LoggingDirectory = D:\Cognos Express\logs
# disables SSL on the TM1 server
UseSSL = F
# I don't think this can be changed in CE
ServerName = CXMD
# Specifies expressions for N: and C:
AllowSeparateNandCRules=T
############################################################
# Settings from Old TM1 config
############################################################
# ViewConsolidationOptimizationMethod should be set to TREE in most circumstances. This setting provides the best performance in normal operations and when data is sparse along the view axes.
ViewConsolidationOptimizationMethod=TREE
MaximumLoginAttempts=100
GroupsCreationLimit=300
ReceiveProgressResponseTimeoutSecs=60
AuditLogOn = F