Specific user cannot access Cognos

[k2]

Hi All,

Am currently facing a peculiar issue. The Cognos environment operates on Single sign on and Active Directory security.

Whenever a new user is added, users profile will be created in Cognos Administration and the user will be added to the Cognos Active directory group as well. The list of users who are in the Cognos AD group will only be able to access Cognos.

Yesterday I have added an User and created the profile and added to Cognos AD group but only that specific user cannot access Cognos. Not sure why!

In fact I have repeated the process again but no luck. Can anyone please help.

Environment: Cognos 8.4, Windows 2003

[k2]

still no luck ...
any thoughts guys? cheers

[CognosPaul]

In what way is the user not able to log in? Is he getting an error from Cognos? Or from the browser? Or is the page simply not returning?

What browser is he using? Can he reach other intranet sites?

[sunosoft]

It will be great if you provide us with error message.

[Grim]

Have the same user try from a different computer too.

[k2]

When the user click the Cognos link the default windows dialog box propmts to enter the User name and Password.
Since the user is in the AD group the username/password box shouldnt not be prompted. Even when the user tried entering the correct network login credentials, nothing happens and the same box apprears again.

Browser settings and security seetings are same as other users.

[CognosPaul]

If he's getting the windows dialog box, that means it's an authentication issue with the server. Most likely it's an error with the SSO. Is he using the same login page that everyone else is? Are you using Kerberos?

What happens if you bypass the SSO? http://cognosserver/ibmcognos/cgi-bin/cognosisapi.dll?CAMUsername=&CAMPassword=

[k2]

Thanks for your insights Paul.
When I tried bypassing the SSO link, he is getting 'Page cannot be found' error message. We aren't using Kerberos. Thas users account has been set-up as everyone else no suspecious security implied as well.

I have a felling that this gor to do with SSO but not sure how to nail it down. Cheers

[k2]

Sorry Paul, please ignore my previous response.

When the user tried logging using the manual way by entening User name and password with the help of the below link , he can access Cognos.

http://cognosserver/ibmcognos/cgi-bin/cognosisapi.dll?CAMUsername=&CAMPassword=

Which again proves that the issue is with Single sign-on but should find a way to figure this out. Cheers

[CognosPaul]

Have the user attempt to log in with the SSO, then immediately check the cogserver.log. Is there an entry? Perhaps something like could not find user credentials? Is this user associated with an unusually large number of AD groups? Does this user have any special characters in his name or username? Dashes, quotes, or non-latin characters?

I'm assuming that the user can't access Cognos from another computer, can you confirm that?

If you create a test user, with all the same settings, is that user able to log in?