If you are unable to create a new account, please email support@bspsoftware.com

 

News:

MetaManager - Administrative Tools for IBM Cognos
Pricing starting at $2,100
Download Now    Learn More

Main Menu

Security Setup (Authentication Source)

Started by Tsunami, 22 May 2009 02:55:16 PM

Previous topic - Next topic

Tsunami

Let me start off by saying that I am VERY new to this.  I've been through Cognos training but I'm still piecing things together b/c the training environment != real world.  I'll do my best to describe my situation....

We am migrating from Cognos Series 7 Version 3 to Cognos 8.3.  In the training class, we had series 7 namespace, used a utility to bring everything over, and viola..nice and easy. However, we have been using database sign-on for Cognos 7.  We do not have a series 7 namespace established and do not use access manager.  As far as I know, all the security is controlled on sql2005. 


My objective is to somehow get all those exiting users over to Cognos. But I'm just not sure how to use an authentication source.  I would like to be able to use Active Directory and take advantage of SSO but have no idea where to start.  I'm not very familiar w/ Active directory but I'm trying to learn as much as I can to get some sort of grasp on the situation.

Any comments/advice/guidance is VERY appreciated. Thanks.

anandoc

You could probably use some sort of application/script to dump all your users/groups/roles from your database to a text file. From there, load them onto your company active directory server. Once you have all the users/groups into active directroy, setup within Cognos Configuration from ADS with SSO is a piece of cake and its all there in the Installation and Configuration guide.

Tsunami

#2
Is there anyway to use the Global Catalog?

I found this:

You cannot connect to the Active Directory Global Catalog, which is a caching server for Active
Directory Server. If the connection uses port 3268, you must change it. By default, Active
Directory Server uses port 389.

Is this saying that you can't use ADGC at all? or is it saying that you can but you must change the port?

edit: nevermind, you use multiple domains