TM1 Forum

Hello,

Is it possible to copy sufficient files from one TM1 server to another so as to enable a user to be able to log in to both servers independently but using the same user name and password.

I have one cube server that contains headcount and salary information to which I need to provide restricted access to people who are admin in our main server. What I wondered was can I copy sufficient client files from the main server to the headcount server each morning so that the passwords remain in synch?

Thanks for any help you may be able to provide.

Hi,

If it's just the passwords that need copying over, then just the }Clientproperties.cub would do it.

If you need to copy over new users, then }Clients.dim
new group - }Groups.dim

and for user group assignments - }ClientGroups.cub

Brilliant, thank you.

You need to make sure 1) it's a one-way copy only and 2) you do all your user maintenance (and this also means users changing their passwords) on the main server only.

Do you plan to copy the client properties cube wholesale or just export selective content? be aware that the encrypted password values in the client properties cube can contain non-printable break characters that aren't handled at all well within TI variables and depending on version can reliably crash the server on export or import if such values are encountered (which is entirely random as it all depends what passwords users have set.)

You say you're using CAM so simple integrated login is out, but wouldn't you be better served linking CAM to LDAP and having all passwords centrally managed in one place rather than the work-around setup you're proposing?

I would prefer to use integrated security but unforetunately we dont have a very joined up network yet so its not really practical at the moment.

Copying the }Clientproperties.cub & }Clients.dim as suggested seems to be doing the trick.