COGNOiSe.com - The IBM Cognos Community

IBM Cognos 10 Platform => Cognos 10 BI => Security => Topic started by: SGD on 22 Jan 2015 04:42:47 AM

Title: Resolved: SSO is not working
Post by: SGD on 22 Jan 2015 04:42:47 AM
Hi,

We have regular restart of the Cognos servers on each Sunday. Everything was working fine until last Sunday because our Cognos PROD ENV started prompting to enter credentials.

After the regular restart Cognos DEV and AT ENV is working fine but problem is only with Cognos PROD ENV.

I have verified Cognos Configuration and IIS Configuration setting in all 3 ENVs which are identical.

Note sure where exactly problem is and root cause of the issue.  :-\

ENV Details:
Cognos v10.2
Win Server 2008 R2
Active Directory
IIS configured with CGI

It would be appreciated if I get some tips to resolve this problem.
Title: Re: SSO is not working
Post by: SGD on 22 Jan 2015 04:44:20 AM
Forget to mentioned about IIS details.

Authentication Source: Active Directory
Web server: Microsoft IIS 7
Title: Re: SSO is not working
Post by: Karti on 22 Jan 2015 07:37:11 AM
Is your Active Directory still working fine? It could possibly be an issue with Cognos talking to AD.
Title: Re: SSO is not working
Post by: SGD on 22 Jan 2015 08:57:39 AM
Yes, AD is working as expected because Cognos DEV and AT ENV are working fine. Also, company's other internal websites are working without any issue.
Title: Re: SSO is not working
Post by: AussiePete2011 on 03 Feb 2015 10:52:20 PM
have you made the webserver a delegated machine in AD?
Title: Re: SSO is not working
Post by: SGD on 09 Feb 2015 05:24:26 PM
Hi AussiePete2011,

I did not understand what do you mean by a delegated machine in AD?

However, good news is that issue has been resolved after updating few Config values in IIS PROD Server as identical as IIS AT server.
I have found that 'CGI-exe' and 'ISAPI-exe' were disabled in 'Handler mappings' section in IIS PROD server whereas it is enabled in IIS AT server.