Skip Headers
Oracle® Argus Insight Installation Guide
Release 7.0.3

E41483-01
Go to Documentation Home
Home
Go to Book List
Book List
Go to Table of Contents
Contents
Go to Feedback page
Contact Us

Go to previous page
Previous
Go to next page
Next
PDF · Mobi · ePub

8 Configuring the Cognos 10 Environment

This chapter describes how to configure the Cognos 10 environment. You must configure the Cognos 10 environment in the order specified in this guide.

This chapter includes the following topic:

Before attempting to configure the environment, verify that you have installed all required hardware and software. For more information, see Section 1.2, "Software and Hardware Requirements."

8.1 Setting Up Cognos Server and Configuration for New Installation

This section describes how to set up Cognos Server and configure your environment for a new installation of Argus Insight.

This section comprises the following sub-section:

8.1.1 Configuring IIS 7.0 on the Cognos 10 Server

This section describes the following tasks that you must complete to configure Internet Information Services 7.0 (IIS 7.0) on the Cognos 10 Server:

8.1.1.1 Checking that CGI or ISAPI Is Enabled in IIS

To check that CGI or ISAPI is enabled in IIS:

  1. Click Start.

  2. Navigate to Administrative Tools and select Server Manager. The Server Manager window opens. Surrounding text describes smgr_roles1.gif.

  3. Click the Add Role Services link to the right of the Role Services section. The Add Role Services dialog box opens.

    Surrounding text describes iis_cognos_addrole.gif.
  4. Expand Application Development (Installed).

  5. Verify that the CGI and ISAPI Extensions are listed as (Installed).

    • If these role services are not installed, select the appropriate check box and then click Install. Follow the instructions on the screen to complete the installation.

    • If these role services are already installed, click Cancel. The system returns to the Server Manager window.

8.1.1.2 Creating the Cognos 10 Virtual Directories

To create the Cognos 10 virtual directories:

  1. Navigate to Roles, Web Server (IIS), and select Internet Information Services (IIS) Manager.

  2. Expand the server node in the Connections pane.

  3. Expand Sites.

    Surrounding text describes cognos_vir_directory1.gif.
  4. Right-click Default Web Site, and select Add Virtual Directory. The Add Virtual Directory dialog box opens.

    Surrounding text describes cognos1.gif.
    1. In the Alias field, enter Cognos 10.

    2. In the Physical path field, enter the complete path to the Cognos 10 Web content directory. The default path is:

      drive:\Program Files\ibm\cognos\c10\webcontent

    3. Click OK.

  5. Right-click your newly-created Cognos 10 virtual directory and select Add Virtual Directory. The Add Virtual Directory dialog box opens.

    1. In the Alias field, enter cgi-bin.

    2. In the Physical path field, enter the complete path to the Cognos 10 cgi-bin directory. The default path is:

      drive:\Program Files\ibm\cognos\c10\cgi-bin

    3. Click OK.

8.1.1.3 Editing ISAPI or CGI Extensions

To edit the ISAPI or CGI extensions:

  1. Select the server node in the Connections pane.

    Surrounding text describes iis_cognos_isapi_cgi.gif.
  2. Double-click the ISAPI and CGI Restrictions icon.

  3. Click the Add link in the Actions pane. The Edit ISAPI or CGI Restriction dialog box opens.

    Surrounding text describes cognos2.gif.
    1. In the ISAPI or CGI path field, enter the path to either the cognos.cgi file or the cognosisapi.dll file depending on which one you will use.

      Note:

      For Argus Insight, Oracle recommends that you use cognos.cgi. In addition, you may need to surround the path in double quotes if it contains any spaces.

      The default path for each file is as follows:

      drive:\Program Files\ibm\cognos\c10\cgi-bin\cognosisapi.dll

      drive:\Program Files\ibm\cognos\c10\cgi-bin\cognos.cgi

    2. Select the Allow extension path to execute check box.

    3. Click OK.

Alternative Method

  1. Select the server node in the Connections pane.

  2. Double-click the ISAPI and CGI Restrictions icon.

  3. Click the Edit Feature Settings link in the Actions pane. The Edit ISAPI and CGI Restriction Settings dialog box opens.

    Surrounding text describes iis_cognos_edit_res2.gif.
  4. Select the Allow unspecified CGI Modules check box.

  5. Click OK.

8.1.1.4 Adding the Module Mapping

To add the module mapping:

  1. Open the Internet Information Services (IIS) Manager.

  2. Expand the virtual directory folder and click the cgi-bin virtual directory.

  3. Double-click the Handler Mappings icon.

  4. Click the Add Module Mapping link in the Actions pane. The Add Module Mapping dialog box opens.

    Surrounding text describes cognos3.gif.
    1. In the Request path field, enter either *.cgi or *.dll depending on which one you need.

    2. In the Module field, select either CGIModule or IsapiModule from the list.

    3. In the Executable field, you enter a value depending on the module you are using.

      If you are using an ISAPI Module, you must enter the complete path to the cognosisapi.dll. You can click the ellipsis icon to browse to the file location.

      If you are using a CGI Module, you do not need to enter a value into the Executable field.

    4. In the Name field, enter a realistic name for this mapping. For example, ISAPI-Cognos.

  5. Click Request Restrictions.

    1. Click the Mapping tab, and select Invoke handler only if request is mapped to: File.

      Surrounding text describes iis_cognos_map_tab.gif.
    2. Click the Verbs tab, and select All verbs.

      Surrounding text describes iis_cognos_verbs_tab.gif.
    3. Click the Access tab, and select Specify the access required by the handler: Execute.

      Surrounding text describes iis_cognos_acc_tab.gif.
    4. Click OK to save your changes. The system returns to the Add Module Mapping dialog box.

  6. Click OK.

    Depending on the method used in Section 8.1.1.3, "Editing ISAPI or CGI Extensions," the system may display the following message:

    Surrounding text describes iis_cognos_mm_msg.gif.
  7. Click Yes. Your new module mapping should be added to the Module Mapping List.

8.1.1.5 Editing the Module Mapping

For Cognos Administration to function properly, you must manually edit the directive that you added to the IIS configuration file in the previous step (see Section 8.1.1.4, "Adding the Module Mapping").

To edit the module mapping:

  1. Navigate to the following folder:

    COGNOS_HOME/c10/cgi-bin

    Note:

    Ensure that you have access permissions on the cgi-bin folder so you can save the changes you make to the web.config file.
  2. Open the web.config file for editing.

  3. Locate the appropriate add name statement in the web.config file depending on whether you are using CGI or ISAPI.

    For CGI, locate this statement:

    <add name="CGI-cognos" path="*.cgi" verb="*" modules="CgiModule" resourceType="Unspecified" />

    For ISAPI, locate this statement:

    <add name="ISAPI-Cognos" path="cognosisapi.dll" verb="*" modules="IsapiModule" scriptProcessor="E:\Program Files\ibm\Cognos\C10\cgi-bin\cognosisapi.dll" resourceType="Unspecified" requireAccess="Execute" preCondition="bitness32" />

  4. Add allowPathInfo="true" to the end of the statement.

    For CGI:

    <add name="CGI-cognos" path="*.cgi" verb="*" modules="CgiModule" resourceType="Unspecified" allowPathInfo="true" />

    For ISAPI:

    <add name="ISAPI-Cognos" path="cognosisapi.dll" verb="*" modules="IsapiModule" scriptProcessor="E:\Program Files\ibm\Cognos\C10\cgi-bin\cognosisapi.dll" resourceType="Unspecified" requireAccess="Execute" preCondition="bitness32" allowPathInfo="true"/>

  5. Save your changes and close the web.config file.

8.1.1.6 Allowing CGI Application to Use Execute

To allow the CGI application to use execute:

  1. Open the Internet Information Services (IIS) Manager.

  2. Expand the virtual directory folder and click the cgi-bin virtual directory.

  3. Double-click the Handler Mappings icon.

  4. Click the Edit Feature Permissions link in the Actions pane. The Edit Features Permissions dialog box opens.

    Surrounding text describes iis_cognos_permissions.gif.
  5. Select the Execute check box.

  6. Click OK.

8.1.2 Configuring the Java Database Components

To configure the Java Database Components (JDBC) in the Cognos 10 environment:

  1. Navigate to the following Oracle installation path:

    Oracle_Installation_Path\product\Oracle_Version\client_1\sqldeveloper\jdbc\lib

  2. Copy the ojdbc5.jar file to the following location on the Cognos 10 environment:

    Cognos_Installation_Path\c10\webapps\p2pd\web-inf\lib

8.1.3 Configuring Custom Java Authentication

This section comprises the following sub-sections:

8.1.3.1 Configuring Custom Java Authentication for Windows

  1. Go to IBM Cognos Administration and stop the Cognos services.

  2. Copy the CAM_AAA_JDBC_PowerReports.jar file from the following location:

    \\Argus_Insight_Server\Argus_Insight_Install_Path\java Autherntication\JDBC_PowerReport

    To the following location on the Cognos 10 Server:

    \\Cognos_10_Install_Path\ c10\webapps\p2pd\WEB-INF\lib

  3. Copy the JDBC_Config_PowerReports.properties file from the following location:

    \\Argus_Insight_Server\Argus_Insight_Install_Path\java Autherntication\JDBC_PowerReport

    To the following location on the Cognos 10 Server:

    \\Cognos_10_Install_Path\ c10\Configuration

  4. Define the configuration parameters:

    1. Navigate to the following folder:

      \\Cognos_10_Install_Path\ c10\Configuration

    2. Open the JDBC_Config_PowerReports.properties file for editing.

    3. Modify the existing values of the following parameters only if the database changed from the 7.0 database:

      Parameter Value to Enter
      Server Enter the IP address or the name of the Database Server.
      SID Enter the instance/service name of the Argus Insight data mart.
      Port Enter the database port number.

    4. Save and close the file.

  5. Copy AI.ini and ArgusSecureKey.ini from the following location:

    \\<Argus_Insight_Server>\Windows

    To the following location:

    \\Cognos_10_Install_Path\C10\configuration

  6. Navigate to the following folder:

    Program Files\ibm\cognos\c10\bin\jre\6.0\lib\security

  7. Backup the following two JAR files:

    • local_policy.jar

    • US_export_policy.jar

  8. Go to the following URL:

    https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=jcesdk

    Note:

    You will need the user ID and password from IBM Cognos to download the files required in next step.
  9. Log in to the IBM site.

  10. Select the Unrestricted JCE Policy files for SDK for all newer versions (1.4.2+) option and click Continue.

  11. Click I agree to agree to the license terms and then check I confirm.

  12. Click the Download Now link.

  13. Download the files and extract into a folder.

  14. Locate the following two JAR files in the extract folder:

    • local_policy.jar

    • US_export_policy.jar

  15. Copy those jar files into the following folder:

    Program Files\ibm\cognos\c10\bin\jre\6.0\lib\security

  16. Go to IBM Cognos Administration and restart the Cognos services.

8.1.3.2 Configuring Custom Java Authentication for Linux

To configure custom Java authentication:

  1. Go to IBM Cognos Administration and stop the Cognos services.

  2. Copy the CAM_AAA_JDBC_PowerReports.jar file from the following location:

    \\Argus_Insight_Server\Argus_Insight_Install_Path\java Autherntication\JDBC_PowerReport

    To the following location on the Cognos 10 Server:

    \\Cognos_10_Install_Path\ c10\webapps\p2pd\WEB-INF\lib

  3. Copy the JDBC_Config_PowerReports.properties file from the following location:

    \\Argus_Insight_Server\Argus_Insight_Install_Path\java Autherntication\JDBC_PowerReport

    To the following location on the Cognos 10 Server:

    \\Cognos_10_Install_Path\ c10\Configuration

  4. Define the configuration parameters:

    1. Navigate to the following folder:

      \\Cognos_10_Install_Path\ c10\Configuration

    2. Open the JDBC_Config_PowerReports.properties file for editing.

    3. Modify the existing values of the following parameters only if the database changed from the 7.0 database:

      Parameter Value to Enter
      Server Enter the IP address or the name of the Database Server.
      SID Enter the instance/service name of the Argus Insight data mart.
      Port Enter the database port number.

    4. Save and close the file.

  5. Copy AI.ini and ArgusSecureKey.ini from the following location:

    \\<Argus_Insight_Server>\Windows

    To the following location:

    \\Cognos_10_Install_Path\C10\configuration

  6. Navigate to the following folder:

    JAVA_HOME\jre\6.0\lib\security

  7. Backup the following two JAR files:

    • local_policy.jar

    • US_export_policy.jar

  8. Go to the following URL:

    http://www.oracle.com/technetwork/java/javase/downloads/jce-6-download-429243.html

  9. Download the following two JAR files in the extract folder:

    • local_policy.jar

    • US_export_policy.jar

  10. Copy those jar files into the following folder:

    JAVA_HOME\jre\6.0\lib\security

  11. Click Yes, if the Replace Files dialog box is displayed.

  12. Go to IBM Cognos Administration and restart the Cognos services.

8.1.4 Configuring the Cognos 10 Environment

This section describes the following tasks that you must complete to configure the Cognos 10 environment:

8.1.4.1 Opening the IBM Cognos 10 Configuration Window

You use the options in the IBM Cognos 10 Configuration window to define environment group and logging properties, security properties, and data access properties.

To open the IBM Cognos 10 Configuration window:

  1. Click Start.

  2. Navigate to All Programs, IBM Cognos 10, and then select IBM Cognos Configuration. The IBM Cognos Configuration window opens.

    Surrounding text describes cognos4.jpg.

    Note:

    The windows displayed during the Cognos 10 configuration are labeled either IBM Cognos 10 or Cognos 10. Both labels refer to the same Cognos configuration.

8.1.4.2 Setting the Security Properties for Cognos 10

To define the security properties:

  1. Open the IBM Cognos 10 Configuration window.

  2. Navigate to Security, Authentication, and select Cognos.

    Surrounding text describes cognos8.jpg.
  3. Set the Allow anonymous access? property to True.

  4. Navigate to Security and select IBM Cognos Application Firewall.

    Surrounding text describes cc5.gif.
  5. Set the Enable CAF validation? property to False.

8.1.4.3 Setting the Data Access Properties for Cognos 10

To define the data access properties:

  1. Open the IBM Cognos 10 Configuration window.

  2. Navigate to Data Access, Content Manager, right-click Content Store, and then select Delete from the menu.

    Surrounding text describes cc6_cropped.gif.

    The system prompts for confirmation that you want to delete the Content Store.

  3. Click Yes.

  4. Navigate to Data Access, right-click Content Manager, select New resource, and then select Database.

    Surrounding text describes cc8_cropped.gif.
  5. Complete the New Resource - Database dialog box as follows:

    • In the Name field, type CNTSTORE. This is the name of the database resource.

    • In the Type field, select Oracle database.

    • Click OK.

    The system returns to the IBM Cognos Configuration window, selects the newly-created CNTSTORE resource database, and displays the resource properties for the database.

    Surrounding text describes cognos9.jpg.
  6. Enter the value for the Database server and port number as:

    Database_Server_Name:1521

    where:

    Database_Server_Name is the name of the server where your content store database is stored.

  7. Select User ID and password, and click the icon next to it. The Value - User ID and password dialog box opens.

    Surrounding text describes cc11.gif.
    1. In the User ID field, type the ID for the content store database user.

    2. In the Password field, type the password for the content store database user.

    3. In the Confirm password field, re-enter the password for verification.

    4. Click OK.

      Note:

      The contents store database user is created in the Cognos content store database. This user is given grants of Connect, Resource, and Create View, along with Unlimited Tablespace Grant.

      The character set of the Cognos content store database should only be UTF.

      Make sure that the content store database entry is added in the TNSNames.ora file on the Cognos 10 server.

  8. Enter the database instance name for the Cognos 10 repository in the Service name field.

    Surrounding text describes cognos10.jpg.

8.1.4.4 Creating the Namespace for Argus Insight Authentication

To create the namespace for Argus Insight authentication:

  1. Open the IBM Cognos 10 Configuration window.

  2. Navigate to Security, right-click Authentication, click New resource, and then select Namespace.

    Surrounding text describes cc13_cropped.gif.
  3. Complete the New Resource – Namespace dialog box as follows:

    • In the Name field, type PowerReports.

    • In the Type field, type Custom Java Provider.

    • Click OK.

    The PowerReports - Namespace - Resource Properties window opens.

    Surrounding text describes cognos11.jpg.
  4. Set the Namespace ID property to PowerReports.

  5. Set the Java class name property to JDBCPowerReports.

8.1.4.5 Saving Your Configuration and Starting the Cognos 10 Service

To save the configuration and start the Cognos 10 service:

  1. Open the File menu and select Save to save your changes to the configuration settings. The system displays the following dialog box and lists each task as it is performed:

    Surrounding text describes cc16.gif.
  2. Click Close when the system completes all the configuration tasks.

  3. Click the Start icon in the IBM Cognos Configuration window to run the Cognos 10 service.

    Surrounding text describes cc17.gif.

    The system begins to run the IBM Cognos 10 service.

    • If there are no problems with the configuration, the system completes the test phase and starts the IBM Cognos 10 service successfully.

    • If there are possible problems with the configuration, the system stops running the service and displays a warning message. When you click OK to acknowledge the warning message, the system opens another dialog box with more information. For example:

    Surrounding text describes cognos12.jpg.

    At this point, you can:

    • Click Details for more information about the warnings and errors.

    • Click Cancel to stop the process. If the warnings or errors are due to reasons other than mail server connection failure, cancel the process and check your configuration again.

    • Click Continue to ignore the warnings and errors, and complete the process of starting the IBM Cognos 10 service. For example, you can ignore warnings that the mail server cannot be reached (see the previous illustration).

  4. Click Close to exit.

  5. Open the File menu and select Exit to exit from the IBM Cognos 10 configuration.

8.1.5 Creating Cognos Data Source (PRMART)

To create Cognos Data Source (PRMART):

  1. Log in to the Cognos 10.

  2. The IBM Cognos 10 Home page opens.

    Surrounding text describes cognos20.jpg.

    Note:

    If your security settings on the server do not permit you to view the Cognos connection, add the site URL (http://Cognos_10_ Server/cognos10) to the list of local intranet sites.
  3. Click Administer IBM Cognos content. The IBM Cognos Administration window opens.

    Surrounding text describes cognos21.jpg.
  4. Click the Configuration tab.

  5. Click Data Source Connections.

  6. Click New Data Source icon. The Specify a name and description - New Data Source Wizard page opens.

    Surrounding text describes newdatasourceicon.jpg.
  7. Enter the Name and Description of the data source, and click Next. The Specify the connection - New Data Source Wizard page opens.

    Surrounding text describes specifynamedescription.jpg.
  8. Specify parameters for the connection, and click Next.

    Surrounding text describes specifyconnection.jpg.
  9. Enter the connection string in SQL *Netconnect string:, and click Test the connection... Surrounding text describes editparameters.jpg.

  10. Click Next. The Specify the Oracle (JDBC) connection string - New Data Source wizard page opens.

  11. Specify the Connection type, and click Next. The Specify the commands - New Data Source wizard page opens.

    Surrounding text describes specifyconnectiontype.jpg.
  12. Specify the commands for connection.

    Surrounding text describes specifycommands.jpg.

    For more information on Cognos commands, refer to Argus Insight Extensibility Guide > Section 4.2 Applying Argus Data Security and Section 4.3 Applying Enterprise Security.

  13. Click Finish. The PRMART data source is created.

8.1.6 Configuring Cognos Security

This section includes the following topics:

8.1.6.1 Activating the PowerReports Namespace

To activate the PowerReports namespace:

  1. Open the Cognos 10 configuration.

  2. Click Start, All Programs, IBM Cognos 10, and then select IBM Cognos Configuration. The IBM Cognos Configuration window opens.

  3. Navigate to Security, Authentication, and then select Cognos. The system displays the Cognos - Namespace - Resource properties pane.

  4. Set the Allow Anonymous access? property to False.

    Surrounding text describes cognos31.jpg.
  5. Open the File menu and select Save.

  6. Open the Actions menu and select Restart to restart the Cognos 10 service. The system displays status information about each task being performed during the restart.

    Surrounding text describes cognos32.jpg.

    During the Cognos service restart, the system may display the following message if there are any warnings:

    Surrounding text describes cc18.gif.
  7. Process any warning message as follows:

    1. Click OK.

    2. Click Details to obtain more information about the warning.

      Depending on the type of warning, you can:

      — Click Continue to ignore the warning and continue with the process of restarting the IBM Cognos 10 service. For example, you may want to ignore a warning that the connection to the mail server failed.

      — Click Cancel to stop the restart process. If the warnings are due to reasons other than a mail server connection failure, you should stop the process, check your configuration, and then restart the IBM Cognos 10 service.

  8. Wait until the system performs all the configuration tasks and displays the status for each task.

    Surrounding text describes cognos33.jpg.
  9. Click Close to exit the Cognos configuration.

    Note:

    Make sure that you remove the Everyone user group from the Directory Administrator and System Administrator roles of Cognos. Before doing this, make sure that you have a valid user as part of the System Administrator role in Cognos.

    If you have not added any user as part of the System Administrator role in Cognos, then you have to add Everyone user group in System Administrator roles of Cognos again.

    To add the Everyone user group in the System Administrator role of Cognos:

    1. Connect to the Content Store database as the content store user.

    2. Navigate to the following folder:

      Cognos_10_Install_Path\C10\configuration\schemas\content

    3. Run the AddSysAdminMember.sql script.

    4. Commit the changes.

8.1.7 Configuring Roles and Permissions

To configure enterprise specific roles and permissions:

  1. Log in to the Cognos 10 Server as an administrator user.

  2. Create an Enterprise-specific role for each enterprise. For example:

    • ENT1_Role for Enterprise 1

    • ENT2_Role for Enterprise 2

  3. Add all users belonging to the specific enterprises to their respective roles. For example:

    • Add ENT1_user to ENT1_Role

    Note:

    If a user is a member of multiple enterprises, the user must be added to the roles for all the enterprises.
  4. Create a folder in Public Folders for each enterprise. For example:

    • ENT1_Folder for Enterprise 1

    • ENT2_Folder for Enterprise 2

  5. Select the required permissions of the Enterprise-specific role for the Enterprise-specific folder. For example,

    • Add ENT1_Role to the ENT1_Folder and provide the Read, Write, Execute, and Traverse permissions on this folder.