1 User Group using users from multiple Active Directories

[suheylkarakas]

Hi everyone,

I have questions about creating 1 user group containing users from multiple Active Directories. First of all there are no common users in the different Active Directories. That takes me to the first question, I have to logon with admin users from the Active directories to populate the Cognos user group with users from the different active directories. Is it possible to create some kind of super user who can access both Active directories?
My second question is about using this group. We already have reports wich are being mailed to users from one or the other Active Directory. Because of a merger we have to send the reports to the usergroup as described above. Executing the job which should have mailed a report to users from both failed. Only the users from one Active Directory are being mailed, the others are ignored. How to solve this?

[ITbatman]

Not sure, what exactly do you mean by 'multiple Active Directories', but if that is different AD Forests, there is a tool called Adaxes that we are using (http://www.adaxes.com/active-directory_management.htm). It's an Active Directory management and automation and it supports multiple AD forests management. So you can manipulate all that from one console or a web interface. It's a paid tool but I think it's worth having a look.

[suheylkarakas]

Hi,

In Cognos Configuration we have two Active Directories configured so users from both Active Directories are authenticated to access Cognos. This works fine, except when we have to create a Cognos user group with users from both Active Directories (Dutch and Belgian). As an admin, I can add users from the Dutch AD. Then I have to log off and logon again with a Belgian admin account to add users from the Belgian AD. Not ideal, but it does work.
The biggest problem is, mailing all those user from the combined user group. Cognos mails only the ones who are from the same AD as the one who starts the job. The rest is ignored. When I start the same job with a user from the other AD, the opposite happens....

[MFGF]

Hi,

In Cognos Configuration we have two Active Directories configured so users from both Active Directories are authenticated to access Cognos. This works fine, except when we have to create a Cognos user group with users from both Active Directories (Dutch and Belgian). As an admin, I can add users from the Dutch AD. Then I have to log off and logon again with a Belgian admin account to add users from the Belgian AD. Not ideal, but it does work.
The biggest problem is, mailing all those user from the combined user group. Cognos mails only the ones who are from the same AD as the one who starts the job. The rest is ignored. When I start the same job with a user from the other AD, the opposite happens....

Hi,

If you have two AD namespaces defined in Cognos, you can log in twice concurrently when adding users - log into the first namespace as the Admin user, then without logging off, log in to the second namespace.

My guess is your issue is in the credentials used by the schedule emailing the combined user group. The schedule would need to be owned by two users - one from each namespace - but I don't think this is feasible.

A better bet might be to configure Cognos to use a single namespace pointing to an AD forest that includes both Dutch and Belgian users. Do both AD namespaces belong to a forest?

Some useful info below:

http://www-01.ibm.com/support/docview.wss?uid=swg21340833

http://www.cognoise.com/index.php/topic,28295.msg92188.html#msg92188

Cheers!

MF.