COGNOiSe.com - The IBM Cognos Community

Planning & Consolidation => COGNOS Planning => Topic started by: Snehalathaga on 03 Apr 2012 02:35:30 AM

Title: CAC & Analyst not working after enabling Integrated Windows authentication
Post by: Snehalathaga on 03 Apr 2012 02:35:30 AM
Hello Friends,

Require help.

We enabled Integrated windows authentication for IIS in web server.After we enabled this feature CAC,Analyst & Manager stopped working. Can you please let us know what steps needs to be be followed after enabling this feature to make cognos apps work.

Regards
Sneha
Title: Re: CAC & Analyst not working after enabling Integrated Windows authentication
Post by: ericlfg on 04 Apr 2012 11:18:31 AM
Hi Sneha,

Analyst, Manager, and the CAC all rely on Internet explorer settings in order to function and it is profile specific.  Since I do not see any error message, all I can assume is that:

1. You do not have the gateway URI added to the local intranet / trusted sites security in IE (Tools > Internet Options > Security)
2. You do not have the correct User Authentication option set correctly in either Local Intranet or Trusted Sites in IE (Tools > Internet Options > Security > Custom Level > User Authentication)
3. You do not have integrated windows authentication setup in IE (Tools > Internet Options > Advanced > Enable Integrated Windows Authentication)

If none of these items address your issue, you may want to update this post with the error details (if applicable) along with the planningerrorlog so we can review.
Title: Re: CAC & Analyst not working after enabling Integrated Windows authentication
Post by: Snehalathaga on 05 Apr 2012 11:10:29 PM
Hi ericflg,

Thanks a lot for your reply.

I have attached planningerror log for your reference. We are trying to access cognos through citrix.

Request you to check this and suggest me something for this issue.

Regards
Sneha
Title: Re: CAC & Analyst not working after enabling Integrated Windows authentication
Post by: smiley on 06 Apr 2012 02:25:19 AM
Publish a desktop temporarely during troubleshooting. Then use IE for testing.
If it all works in IE, then CAC and Analyst should use the same logic.
Do you have the option SingleSingonOption = IdentityMapping enabled in Cognos , or are you using a full kerberos handshake?