LDAP roles how to configure?

[hana00]

Hello everyone,

can anyone tell me how to configure LDAP namespace in Cognos Configuration to get LDAP roles from Apache Directory Studio? Is it possible at all? Because with groups and users i had no problem.

[mcc.chernandez]

What do you mean by LDAP roles?

[hana00]

Hello mcc.chernandez , thank you for your interest.

By LDAP roles I mean roles which in Cognos Administration will be considered as Role with specific icon and type "role".
Groups and users i defined in Cognos namespace as:

Objectc class: groupOfNames
Account object class: inetOrgPerson

in Apache DS I defined as role: organizationalRole.

And the problem is that i don't know where and how i can define roles in Cognos Configuration.

Is it possible to configure them? Please correct me when I'm wrong.

[mcc.chernandez]

I'm not sure if that can be used. Why would you like to do that though? You can simply used the built-in Cognos namespace roles and map them to your LDAP groups. For example have LDAP group "Cognos_Authors" and add that to the built-in "Authors" role. The built-in roles already map cleanly to the capabilities. Is that what you mean?

[hana00]

Thank you for response, I really appreciate it.
But..the problem is that i want automatically get roles from LDAP without configuring them in Cognos, for example: roles are deifned in LDAP, and by properly configuring namespace in Cognos configuration (like I'm doing with groups and users) and autmatically I will see these roles in Cognos Administration.
Is that possible at all?

Thanks!

[mcc.chernandez]

I've not seen that myself but it might be possible. Maybe try reaching out to your Cognos rep or support

[sunosoft]

[size=0px]Hello [/size][/size][size=0px]mcc.chernandez [/size][/size][size=0px], thank you for your interest. [/size][/size][size=0px]By LDAP roles I mean roles which in Cognos Administration will be considered as Role with specific icon and type "role". Groups and users i defined in Cognos namespace as: Objectc class: groupOfNamesAccount object class: inetOrgPerson in Apache DS I defined as role: organizationalRole. And the problem is that i don't know where and how i can define roles in Cognos Configuration. Is it possible to configure them? Please correct me when I'm wrong[/size]

[size=0px]


Not sure what exactly you are trying to achieve. On which basis roles defined in LDAP ? Any roles/group in cognos will have control over system according to capabilities assigned to it. As suggested by "mcc.chernandez" you can simply map your groups/roles in LDAP to roles/groups in Cognos namespace as per best practices.


If you do not want to do this you can assign capabilities directly to the groups in LDAP and use them as your roles. But make sure you should not violate your licenses. But this method will have drawback like when you upgrade your cognos/move from one authentication source to another you have to re-setup your capabilities. [/size]

[hana00]

Thank you all for the responses!  :)
I will do like you advise - I will map ldap roles7groups to Cognos roles/groups.