COGNOiSe.com - The IBM Cognos Community

IBM Cognos 10 Platform => Cognos 10 BI => Cognos Administration => Topic started by: cognosuser101 on 09 Dec 2013 08:49:52 PM

Title: Restore Users, Groups, and Roles
Post by: cognosuser101 on 09 Dec 2013 08:49:52 PM
Hello,

I currently have two servers a production server, and test server, both of them are nearly identical but i'm trying to move everything into the test server, while attempting to export some of the packages over I accidentally overwrote the Users, Groups and Roles on the test server now when i try to access the test server it says access denied for public folder and does not load anything when i attempt to open IBM Cognos Administration

I have attempted to add the 'everyone' group as system admin using the following

http://www.cognoise.com/index.php?topic=9759.0

but it does not seem to work, when i log back in it still says access denied, any one have any ideas?

Is there a way i can copy the users, groups, and roles from my production over to the test? through the actual machines? i have access to both test and production deployments
Title: Re: Restore Users, Groups, and Roles
Post by: Grim on 10 Dec 2013 09:22:52 AM
Use the sysadmin reset script.
http://www-01.ibm.com/support/docview.wss?uid=swg21343329
Title: Re: Restore Users, Groups, and Roles
Post by: cognosuser101 on 10 Dec 2013 11:19:22 AM
I have attempted running this script but it does not seem to work  :'(

Currently the server has 2 methods of security authentication, one is Cognos and the other is a LDAP namespace, we use the LDAP one for internal use, i think the mapping to the LDAP is what was changed, so i'm not sure, is there a way i can add everyone from this LDAP namespace to the have admin privileges, or create an account under the Cognos namespace as an admin to go in and manually add the LDAP mapping back in?

also in the production server it is the same setup is there a way to migrate that original "Cognos" namespace
Title: Re: Restore Users, Groups, and Roles
Post by: SomeClown on 11 Dec 2013 05:16:27 AM
Sounds like you did a full content store import?  LDAP definition in Cog Configuration changed so if your old setup used LDAP, you have to use the general LDAP settings so the parms match up.  For example, if you had Active Directory as an LDAP in the old environment, DO NOT pick LDAP (Active Directory) type in the new environment, but rather the LDAP (general or whatever it is called).  The LDAP type will make Cognos think it's a different namespace and ignore the LDAP security memberships.

As for resetting the role, the other piece is that you have to stop all services, allow anonymous in the security setting then restart the environment.  You did that part?

Only easy way to bring in roles is to do a full import of Content Store again.
Title: Re: Restore Users, Groups, and Roles
Post by: cognosuser101 on 17 Dec 2013 03:58:35 PM
Thanks for the replies,

I have resolved this issue by running another internal script to clean out the content manager database tables, so essentially make a fresh start, then I did an entire content store migration over from my production server, now the 2 are identical in terms of roles users, groups, roles,  and reports as well :)