Cognos 10, IIS 7.5, AD, SSO issue. Need a little help

[BigD]

Hi All,

I have been trying to configure Cognos 10 to run off Active Directory and use an SSO.  I have followed all of the guidelines on the web to the best of my ability and am stilling having an issue.

Cognos is installed on 1 machine and if I log into this server, open IE and navigate to http://<servername>/ibmcognos/cgi-bin/cognosisapi.dll,  everything works correctly.  The SSO seems to function and I am immediately logged into Cognos.

If I open IE and navigate to http://<servername>/ibmcognos/cgi-bin/cognosisapi.dll from a client machine,  I am prompted by Windows Security to enter a domain username/password.  If I do so, I can then log into Cognos.  I am thinking that my problem is with IIS.  I have disabled anonymous access and am currently running Windows Authentication.

Accessing Cognos through IE works from logging into the server but when trying from a client machine ,I am prompted by windows to enter a username/password.  Any ideas??

Thank you in advance.

[Grim]

Make sure IWA is enabled on the client browsers.

IE>tools>Internet Options>Advanced Tab
"Enable Integrated Windows Authentication*" - It's almost at the bottom of the list.

*Requires IE restart.

[BigD]

That is already enabled on all client machines... Any other ideas?

[SomeClown]

IIS: anonymous on ibmcognos; windows auth on cgi-bin  (probably not issue since it works on the server)

Client machine: add http://<server> to the list of  Local Intranet sites (not the Trusted sites) in IE.  Tools, Internet options, Security, advanced, sites, Local Intranet (or something like that).

run tracert from client machine to server in cmd window on client:   tracert <server>  - make sure the IPs don't go through an external firewall or proxy server (dead-giveaway is if you see a non-classA/B/C IP address - not as likely but sometimes happens

[BigD]

Thanks for the assistance.. I have tried everything suggest so far and still I am encountering the problem. Im not sure what else I can do at this stage.

[Grim]

Check the IIS web logs. Might help to trace the issue.

Is the Cognos Server on a different domain?
Have you added the cognos server to the trusted sites?