COGNOiSe.com - The IBM Cognos Community

IBM Cognos 10 Platform => Cognos 10 BI => Cognos Administration => Topic started by: jayesh.deshpande on 28 Aug 2012 08:19:58 AM

Title: Connecting Cognos Using Active Directory
Post by: jayesh.deshpande on 28 Aug 2012 08:19:58 AM
Hi,

I have cognos 10 installed and I am using Active Directory to manage users. I am using Kerberos for communication and login to Cognos and cognos pass the same credentials to DB. I have created 2 types of user profiles 1. Restricted and 2. Admin.

I was trying to restrict user on the basis of their profile. I want is that, if a user is restrected for some table in the DB the report on that table should also get restricted for that user.

Now, my problem is on DB side I can see the restriction for the same user getting applied however on cognos front user can still run the report with restricted table.

How do I know that the credetials I am passing through the cognos to DB are going correctly?

OS: Windows 2008 Server
DB: SQL Server 2008
Web Server: Tomcat

Keenly waiting for the reply. Thanks in advance.





Title: Re: Connecting Cognos Using Active Directory
Post by: sir_jeroen on 28 Aug 2012 04:23:28 PM
Have you tried using Windows authentication for the Database Connection instead of using a single signon?
Title: Re: Connecting Cognos Using Active Directory
Post by: jayesh.deshpande on 29 Aug 2012 12:42:59 AM
Yes, we are using windows authentication. As the user is created using Active directory we prefer to use windows authentication.
Title: Re: Connecting Cognos Using Active Directory
Post by: Rahul Ganguli on 03 Sep 2012 03:43:11 AM
Hi Jayesh,

Are you saying that if the user logs in to SSMS and runs a select * <table name> on a certain table, he is getting error. But if the same person runs it from Cognos then he is getting output.

If this is the case then the signon created is not using Active Directory.

Regards,
Rahul