7 Configuring Cognos Security

Use the following procedure to configure Cognos Security:

1. Set up an Administrator user in the Cognos environment. An administrative user is an Insight user who is part of system administrator role.

   
   
   
   

   Note: Set up an Administrator user in the Cognos environment. An administrative user is an Insight user who is part of system administrator role.

   
   

2. Log in to Argus Insight as the Administrator.

3. Go to Admin tools.

4. When the system opens the following dialog box, enter the value for Cognos Admin User in the Value field. Click OK. and Cognos Admin Password respectively.

5. When the system opens the following dialog box:

   
   

   • Type the Administrator Password in the Value field.

   • For verification, type the Administrator Password in the Confirm Password field.

   • Click OK.

6. Before configuring Cognos User Role Name, verify that the following List Maintenance entries are configured.

   
   

   • COGNOS SERVER

   • COGNOS ADMIN USER

   • COGNOS ADMIN PASSWORD

     This role will have all rights required to run various parts of Argus Insight application. All Insight users will become part of this role during their first login.

7. When the system opens the following dialog box, type the Cognos User Role Name you want to create in Cognos environment in the Value field. Click OK.

   
   

8. The system adds the newly configured role to Analysis Users, Query User, and Author roles.

7.1 Configuring the LDAP Settings

This section contains instruction for integrating the LDAP authentication with Argus Insight and Cognos. Follow the installation procedures in the order in which they appear.

7.1.1 Configuring LDAP for Active DirectoryConfiguring the Active Directory

Use the following procedure to configure the Active Directory on the Cognos 8 server.

1. Go to Cognos server and open the Cognos configuration.

2. Add a NameSpace under Security->Authentication and select the Type as Active Directory.

3. Configure the Active Directory NameSpace.

4. Provide the Bind credentials, save the configuration, and restart the Cognos service.

   
   

5. Click Modify and set the value to 1.

7.1.2 Configuring LDAP in COGNOS for SunOne

Use the following procedure to configure LDAP for Active Directory.

1. Configure SunOne on Cognos 8 server.

2. Go to Cognos server and open the Cognos configuration.

3. Add a NameSpace under Security->Authentication and select the Type as LDAP.

4. Configure the SunOne NameSpace.

5. Enter NameSpaceID, Host and Port, Base Distinguish Name, user lookup as "uid=$(user ID)" and unique identifier as "uid" as shown above. No need to enter any bind credentials.

   
   

6. Save the Cognos configuration and restart the Cognos service.

7.1.3 Setting Up the Cognos LDAP Configuration in Insight

1. Go to Tools > List Maintenance > LDAP.

2. Select "Cognos LDAP Name Space Configuration" and click Modify.

   
   

3. When the system opens the following dialog box, click Add.

   
   

4. When the system opens the following dialog box:

   
   

   1. Type the namespace ID in the Namespace ID field.

      This is the namespace identifier for Active Directory or SunOne (which ever you have configured in Cognos)

   2. Type the user name in the User Name field.

      This is a Cognos and Insight user that is part of a configured LDAP namespace in Cognos and is a Cognos administrator.

   3. Type the Password in the Password field.

      This is the password for the configured Cognos administrator user.

   4. For verification, type the password in the Confirm Password field.

   5. Click OK to save the Cognos LDAP Name Space configuration.

7.1.4 Set Up LDAP Configuration in Argus Insight

Use the following procedure to set up the LDAP configuration in Argus Insight.

1. Go to Tools > List Maintenance to open the List Maintenance tab.

2. When the system opens the List Maintenance tab, select LDAP in the left pane.

3. Select LDAP Configuration from the right pane of the tab. Click Modify.

   
   

4. When the system opens the following dialog box:

   
   

   • Locate the Enable LDAP at system level field and click the Yes option button.

   • Click Add.

   
   

   Note: All the LDAP configuration imported from Argus Safety via ETL is in read-only mode.

   
   

5. When the system opens the following dialog box, set the parameters.

   
   

   The following table lists and describes the parameters.

   Parameter Name	Description
   LDAP Server Alias	Enter a unique name to identify the LDAP server configuration.
   Server Name	Enter the name of the LDAP server.
   Port Number	Enter the LDAP server port number.
   BaseDN	Enter the Base DN for configured LDAP server (distinguish Name).
   Time Out(Sec)	Enter a value for LDAP search timeout.
   UserDN(ex. CN=..,OU=..,DC=..,):	Enter the complete UserDN for the LDAP search user. Argus Insight uses this user to search for users in the complete LDAP directory for authentication.
   Password	Enter password for the LDAP search user.
   LDAP Search Key(ex. CN,uid):	Enter SAMAccountName for Active Directory Server Enter uid for SUNONE server This value can CN also based on LDAP server configuration

   
   
   
   

   Note: If you check the "Force anonymous binding for search?", the search user DN and password are not required. If Cognos is LDAP enabled, select the corresponding Cognos Namespace from the Cognos Name Space dropdown. Cognos LDAP does not work if Insight is single sign-on enabled using site minder.

   
   

7.2 Editing Sign On and Setting Connection Paths

This section provides information about the following:

• Editing Sign On

• Setting Cube Datasource Connections

• Activating the PowerReports Namespace

7.2.1 Editing Sign On

This topic has instructions on importing the content repository to the database.

1. Log on to the Cognos 8 Server as an Admin user.

2. Start Internet Explorer.

3. Enter the URL in the following format and press Enter:http://< Cognos 8 Server>/cognos8

4. When the system opens the following window, click Administer IBM Cognos Content.

   
   
   
   

   Note: If your security settings on the server do not permit you to view the Cognos connection, add the site URL (http://<Cognos 8 Server>/cognos8) to the list of local intranet sites.

   
   

5. When the system opens the IBM Cognos Administration window, click the Configuration tab.

   
   

6. When the system opens the Data Source Connection window, click PRMART.

   
   

7. When the system opens the following window, click More link to the right of the PRMART link.

   
   

8. When the system opens the following window, click View signons.

   
   

9. When the system opens the following window, click the More link.

   
   

10. When the system opens the following window, click Set properties.

    
    

11. When the system opens the following window, click the Signon tab.

    
    

12. When the system opens the following window, click Edit the signon . . . .

    
    

13. When the system opens the following window:

    
    

    • Type APR_APP user ID in the User ID field.

    • Type the APR_APP user password in the Password field.

    • For verification, type the password in the Confirm Password field.

    • Click OK to set the password.

14. When the system opens the following window, click OK.

    
    

15. When the system opens the following window, click the PRMART link.

    
    

16. When the system opens the following window, click More . . . ..

    
    

17. When the system opens the following window, click Set properties.

    
    

18. When the system opens the following window, click the Connection tab.

    
    

19. When the system opens the following window, click the pencil icon to edit the connection string.

    
    

20. In the SQL*Net connect string, set the following:

    
    

    • Set the Host as the Argus Insight Database Server Name.

    • Set the Port as the Argus Insight Database Port Number

    • Set the Service_Name as the Argus Insight Database Instance Name.

    • Click Test the connection.

21. When the system opens the following window, click Test.

    
    

22. When the system opens the following window, click Close.

    
    

23. Click Close on the screen that gets displayed.

24. Click OK.

25. Click OK on the screen that gets displayed.

7.2.2 Setting Cube Datasource Connections

This topic has instructions on changing the Cubes Connection Path:

Use the following procedure for Changing the Cube Path in DataSource (Not Required for Cognos Series 7 customers). Make the following changes to all the cubes present in the datasource directory except PRMART.

1. Log on to the Cognos 8 Server as an Admin user.

2. Start Internet Explorer.

3. Enter the URL in the following format http://<Cognos 8 Server>/cognos8. Press Enter.

4. When the system opens the following window, click Administer Cognos content.

   
   
   
   

   Note: If your security settings on the server do not permit you to view the Cognos connection, add the site URL (http://<Cognos 8 Server>/cognos8) to the list of local intranet sites.

   
   

5. When the system opens the Cognos Administration window, click the Configuration tab.

   
   

6. When the system opens the Data Source Connection window, click a Cube Name.

   
   

7. Click the Cube Name (such as Administration Statistics).

8. Click the More . . . link.

9. When the system opens the following window, click Set properties.

   
   

10. Click the Connections tab.

11. When the system opens the Connections tab:

    
    

    • Edit the Connection String for the cube (Give the path of your installation directory).

    • Click the pencil icon to edit the Connection String

12. When the system opens the following window:

    
    

    • In the Windows Location, enter the following path <Argus Insight installation Directory>/ArgusInsight/Cognos/PPES/<Cube Folder Name>/<CubeName>.mdc

    • Click Test the connection.

    • Click OK to apply the changes.

7.2.3 Activating the PowerReports Namespace

Use the following procedure to activate the PowerReports Namespace.

1. Open the Cognos 8 configuration.

2. Go to Start > Programs > Cognos 8 > Cognos Configuration.

3. When the system opens the Cognos Configuration window, select Security>Authentication>Cognos.

   
   

4. When the system opens the following window, go to the right pane and set Allow Anonymous access? to False.

   
   

5. Click Actions > Restart to restart the Cognos 8 service.

6. When the system opens the confirmation dialog box, click Yes to save the modified configuration settings. Click Yes.

   
   

7. If any warnings exist, the following screen may appear during the Cognos service restart. If the warnings appear to be the result of a mail server connection failure, click OK to ignore the warnings and continue.

   
   

8. Ignore the warning if it appears due to mail server connection failure, as shown in the following dialog box.

   
   

9. Click Continue to ignore the Mail Server Connection Warning displayed above. If the warning(s) appear due to reasons other than mail server connection failure, please check your configuration again.

10. When the system opens the following dialog box, click Close to exit the Cognos configuration.