Page 1 of 1

TM1 fails to login with integrated login option using IE7

Posted: Tue Jun 17, 2008 7:21 am
by makten
Hi,

Users using IE7 are not able to login to TM1 using integrated login parameter option instead they get an HTTP Error 401.1
Users using IE6 login successfully.

Please help...

Kind regards,

Re: TM1 fails to login with integrated login option using IE7

Posted: Tue Jun 17, 2008 9:13 am
by Steve Vincent
Don't use IE7?!! :lol:

(sorry, couldn't resist)

Re: TM1 fails to login with integrated login option using IE7

Posted: Tue Jun 17, 2008 12:46 pm
by Mike Cowie
Have you tried changing the following IE 7 setting in Tools - Internet Options (highlighted in screenshot)?
IE 7 Setting
IE 7 Setting
IE7_IntegratedAuthSetting.jpg (61.99 KiB) Viewed 6643 times
If that isn't checked, I would imagine that explains your problem.

Regards,

Re: TM1 fails to login with integrated login option using IE7

Posted: Wed Jun 18, 2008 5:24 am
by makten
Hi Mike,

Yes i have tried changing IE 7 setting in Tools but still, it does not work.

Re: TM1 fails to login with integrated login option using IE7

Posted: Wed Jun 18, 2008 12:41 pm
by Mike Cowie
makten wrote: Yes i have tried changing IE 7 setting in Tools but still, it does not work.
Do you have ServerLogging = T set in your TM1 Server's TM1S.CFG? If so, you may be able to get some more information in the TM1Server.log log file that gets updated with Integrated Login attempts (success & failures). It isn't the easiest thing to read since it doesn't have much in the way of timestamps, but the end of the log file will have the most recent results of user login attempts. At the very least, it should help to tell you if any attempts to login are making it to the TM1 Server from the IE7 browser.

In looking at the TM1 9.1 SP3 Operations Guide manual, I came across this in the very long section about "Configuring Integrated Login for TM1 Web using NTLM/Kerberos" (not sure whether you're using NTLM or Kerberos, and I won't pretend to know much about the differences):
[*]Add the TM1 Web server to the Local Intranet with default security settings. The procedure for doing this varies depending on the operating system you are running. Refer to the Internet Explorer help for more information.[/b]
[*]On the Advanced tab under Tools → Internet Options, set Enable Integrated Windows Authentication.

Have you verified that the IE 7 browsers see the TM1 Web website as part of the "Local Intranet"? If not, does adding the website to the list of "Local Intranet" sites make the integrated login work? The second point is the one I already mentioned in the previous post, but it does seem to be important.

I did see some other information about this 401.1 error and IE7 specifically (like http://support.microsoft.com/default.aspx/kb/938305), but I don't know enough about Kerberos and your environment to know if that's worth investigating (I would guess not - it seems like it should be something simpler).

Regards,