COGNOiSe.com - The IBM Cognos Community

IBM Cognos 8 Platform => COGNOS 8 => COGNOS 8 Administration => Topic started by: NaviGator on 06 Oct 2009 09:32:17 AM

Title: Can't See Groups In LDAP ..
Post by: NaviGator on 06 Oct 2009 09:32:17 AM
Hello guys,

I have managed to configure the LDAP with our Cognos 8.4 environment and it is working fine.

The issue now is when I tried to open the LDAP namespace from inside Cognos. I can see 2 folders,

- Users, which contains all the users we have.
- Groups, this folder is empty though i am sure that we have groups in our LDAP.

I can assign privileges to any LDAP user on any folder but if I tried to assign the same previllage to a Group, I can't see any group in my LDAP.

I have checked the Group mapping in the Namespace properties - in Cognos Configuration - and I am using the same 'Object Class' and 'Names' as defined in our LDAP.

Do you have any ideas what might be the problem ??

Thanks..

Title: Re: Can't See Groups In LDAP ..
Post by: angela on 06 Oct 2009 12:59:56 PM
Cognos can't see Distribution groups, they have to be Global Security groups.  I have no idea what that means, but that one tripped us up a bit, too.  It's worth looking into.
Title: Re: Can't See Groups In LDAP ..
Post by: SomeClown on 07 Oct 2009 07:40:02 AM
Distribution and Global Security groups are in Active Directory - you can think of Distribution groups like email groups - don't really assign rights (not completely accurate but close enough)

To be visible in Cognos 8, an LDAP group has to reside in the hierarchy.  Some LDAP providers do not do this and have them floating in a separate area that can't be found with the usual starting point in a schema.