Page 1 of 1

Can't Obtain Password From Password Key File

Posted: Mon Aug 06, 2012 12:51 pm
by kris.adrianto
Dear experts,

I'm using TM1 10.1 with Fix Pack 1 on Windows Server 2008 R2. There is a plan to login using LDAP. I already used ETLDAP to export users to TM1. Here is the LDAP configuration on tm1s.cfg:

PasswordSource=LDAP
LDAPPort=636
LDAPHost=t0091.as***.com
LDAPUseServerAccount=F
LDAPSearchBase=dc=as***,dc=com
LDAPSearchField=sAMAccountName
LDAPWellKnownUserName="[ACC]= Dona***,OU=Partner (Temp User),OU=Standar Organization Unit,DC=as***,DC=com"
LDAPPasswordFile="C:\Program Files\ibm\cognos\tm1_64\bin64\ldappass.dat"
LDAPPasswordKeyFile="C:\Program Files\ibm\cognos\tm1_64\bin64\ldappasskey.dat"

But when I try to logon via TM1 Architect on client, an error message appears on the screen says: LDAPServerConnectionFailed.
Then I add log4j.logger.TM1.LDAPAuth=DEBUG so error messages regarding to LDAP written in tm1server.log

The error message appears again after I logon for the second time, when I opened tm1server.log there are errors regarding LDAP:
5552 [2] DEBUG 2012-08-06 12:46:09.363 TM1.LDAPAuth Succesfully connected to LDAP server
5552 [2] DEBUG 2012-08-06 12:46:09.363 TM1.LDAPAuth LDAP SSL cipher strength = 128 bits
5552 [2] ERROR 2012-08-06 12:46:09.363 TM1.LDAPAuth Error obtaining file status of "C:\Program Files\ibm\cognos\tm1_64\bin64\ldappasskey.dat"
5552 [2] ERROR 2012-08-06 12:46:09.363 TM1.LDAPAuth NULL key returned from reading "C:\Program Files\ibm\cognos\tm1_64\bin64\ldappasskey.dat" key file
5552 [2] ERROR 2012-08-06 12:46:09.363 TM1.LDAPAuth Unable to retrieve LDAP password from file

Anybody can help me on this issue? I already used tm1crypt.exe to encrypt password but why the error says that unable to retrieve password from file? I have switched between LDAPPasswordFile and LDAPPasswordKeyFile but nothing changes.

Regards,
Kris Adrianto

Re: Can't Obtain Password From Password Key File

Posted: Wed Aug 08, 2012 12:13 pm
by moby91
Did you check the IBM Cognos Proven Practice "Configuring LDAP authentication for TM1 9.5" ?


http://www.ibm.com/developerworks/data/ ... ge498.html
Configuring LDAP authentication for TM1 9.5

Summary:
This document is meant to supplement the TM1 9.5 Operations Guide as it describes the task of configuring LDAP authentication for TM1 9.5 in greater detail.

http://public.dhe.ibm.com/software/dw/d ... M1_9.5.pdf