If you are unable to create a new account, please email support@bspsoftware.com

 

News:

MetaManager - Administrative Tools for IBM Cognos
Pricing starting at $2,100
Download Now    Learn More

Main Menu

How to implement Trusted Signon Provider with Windows AD

Started by Amos Liu, 20 Nov 2014 04:09:05 AM

Previous topic - Next topic

Amos Liu

We have a problem to implement Trusted Signon Provider with Windows AD.
We try with BI version 10.1 with NTLM. It's working. But, we have problem for Windows AD in version 10.2.1.

Questions:
1. What is the value of AUTH_TYPE for Active Directory?
2. Attachment is our code. Anything wrong?

Following is the system environment information and our execution steps.
------------------------------------------------------------------------------------------------------------------------------------------------------------
The environment information:
Software Version: 10.2.1 FP4
Operating system: Windows Server 2012
Authentication Method: Active Directory

We used sample code from:
\sdk\java\AuthenticationProvider\TrustedSignonSample

The step I follow "Demo 9-2: Configure and Test the Cognos Trusted Signon Provider Sample" from Cognos SDK for Developers:

1. Edit TrustedSignonSample.java

Check Cognos Configuration, the authentication of the namespace ID is "CHB"

Then change code to:
theRequest.setNamespaceID( "CHB" );
theRequest.removeEnvVar( "AUTH_TYPE" );
theRequest.addEnvVar( "AUTH_TYPE", "Active Directory" );

2. Use javac 1.6.0_45 to build code

3. follow the guide to put:


CAM_AAA_TrustedSignonSample.jar in <Cognos install location>\webapps\p2pd\WEB-INF\lib

SetCookie.htm in <Cognos install location>\webcontent

4. Add New resource

Namespace ID: Sample2
Java class name: TrustedSignonSample
and test resource fail:

AAA-SYS-0001 An internal error occurred. xts.runjava.lang.RuntimeException: Expected a single account object java.lang.RuntimeException

Then, we comment out two lines below, try to skip the error:

//theRequest.removeEnvVar( "AUTH_TYPE" );
//theRequest.addEnvVar( "AUTH_TYPE", "Active Directory" );

5. Set "Gateway namespace" in Environment from Cognos Configuration, put "Sample2" in value field

6. Restart the Cognos Server, and try login with Setcookie.html, but it stops in the login page

7. Enter password to login then get result:


AAA-AUT-0011 Invalid namespace was selected