| Oracle® Argus Insight Installation Guide Release 8.1 E68412-01 |
|
 Previous |
 Next |
This chapter describes how to configure the Cognos 10 environment. You must configure the Cognos 10 environment in the order specified in this guide.
This chapter includes the following topic:
Before configuring the environment, verify that you have installed all required hardware and software. For more information, see Section 1.2, "Software and Hardware Requirements."
This section describes how to set up Cognos Server and configure your environment for a new installation of Argus Insight.
This section comprises the following sub-section:
This section describes the following tasks that you must complete to configure Internet Information Services 7.0 (IIS 7.0) on the Cognos 10 Server:
To check that CGI or ISAPI is enabled in IIS:
Click Start.
Navigate to Administrative Tools, and select Server Manager.
The Server Manager screen appears. 
In the Role Services section, click the Add Role Services link.
The Add Role Services dialog box appears.
Expand Application Development (Installed).
Verify that the CGI and ISAPI Extensions are listed as (Installed).
If these role services are not installed, select the appropriate check box, and then click Install. Follow the instructions on the screen to complete the installation.
If these role services are already installed, click Cancel. The system returns to the Server Manager screen.
To create the Cognos 10 virtual directories:
Navigate to Roles > Web Server (IIS), and select Internet Information Services (IIS) Manager.
In Connections pane, expand the server node.
Expand Sites.
Right-click Default Web Site, and select Add Virtual Directory.
The Add Virtual Directory dialog box appears.
In the Alias field, enter Cognos 10.
In the Physical path field, enter the complete path to the Cognos 10 Web content directory. The default path is:
drive:\Program Files\ibm\cognos\c10\webcontent
Click OK.
Right-click your newly-created Cognos 10 virtual directory, and select Add Virtual Directory.
The Add Virtual Directory dialog box appears.
In the Alias field, enter cgi-bin.
In the Physical path field, enter the complete path to the Cognos 10 cgi-bin directory. The default path is:
drive:\Program Files\ibm\cognos\c10\cgi-bin
Click OK.
To edit the ISAPI or CGI extensions:
On Server Manager screen, in the Connections pane, select the server node.
Double-click the ISAPI and CGI Restrictions icon.
In the Actions pane, click the Add.
The Edit ISAPI or CGI Restriction dialog box appears.
In the ISAPI or CGI path field, enter the path to either the cognos.cgi file or the cognosisapi.dll file depending on which one you will use.
|
Note: For Argus Insight, Oracle recommends that you use cognos.cgi. In addition, you may need to surround the path in double quotes if it contains any spaces. |
The default path for each file is as follows:
drive:\Program Files\ibm\cognos\c10\cgi-bin\cognosisapi.dll
drive:\Program Files\ibm\cognos\c10\cgi-bin\cognos.cgi
Select Allow extension path to execute check box.
Click OK.
Alternative Method
In Connections pane, select the server node.
Double-click the ISAPI and CGI Restrictions icon.
In Actions pane, click the Edit Feature Settings.
The Edit ISAPI and CGI Restriction Settings dialog box appears.
Select the Allow unspecified CGI Modules check box.
Click OK.
To add the module mapping:
Open the Internet Information Services (IIS) Manager.
Expand the virtual directory folder, and click cgi-bin.
Double-click the Handler Mappings icon.
In the Actions pane, click the Add Module Mapping.
The Add Module Mapping dialog box appears.
In the Request path field, enter either *.cgi or *.dll as you need.
In the Module field, select either CGIModule or IsapiModule from the list.
In the Executable field, enter a value depending on the module you are using.
If you are using an ISAPI Module, you must enter the complete path to the cognosisapi.dll. You can click the ellipsis icon to browse to the file location.
If you are using a CGI Module, you do not need to enter a value in the Executable field.
In the Name field, enter a realistic name for this mapping. For example, ISAPI-Cognos.
Click Request Restrictions.
Click the Mapping tab, and select Invoke handler only if request is mapped to: File.
Click the Verbs tab, and select All verbs.
Click the Access tab, select Execute.
Click OK to save changes.
You return to the Add Module Mapping dialog box.
Click OK.
A message appears depending on the method used in Section 8.1.1.3, "Editing ISAPI or CGI Extensions,".
Click Yes.
The new module mapping is added to the Module Mapping list.
For Cognos Administration to function properly, you must manually edit the directive that you added to the IIS configuration file in the previous step (see Section 8.1.1.4, "Adding the Module Mapping").
To edit the module mapping:
Navigate to the following folder:
COGNOS_HOME/c10/cgi-bin
|
Note: Ensure that you have access permissions on the cgi-bin folder so you can save the changes you make to the web.config file. |
Open the web.config file for editing.
Locate the appropriate add name statement in the web.config file.
For CGI, locate this statement:
<add name="CGI-cognos" path="*.cgi" verb="*" modules="CgiModule" resourceType="Unspecified" />
For ISAPI, locate this statement:
<add name="ISAPI-Cognos" path="cognosisapi.dll" verb="*" modules="IsapiModule" scriptProcessor="E:\Program Files\ibm\Cognos\C10\cgi-bin\cognosisapi.dll" resourceType="Unspecified" requireAccess="Execute" preCondition="bitness32" />
Add allowPathInfo="true" to the end of the statement.
For CGI:
<add name="CGI-cognos" path="*.cgi" verb="*" modules="CgiModule" resourceType="Unspecified" allowPathInfo="true" />
For ISAPI:
<add name="ISAPI-Cognos" path="cognosisapi.dll" verb="*" modules="IsapiModule" scriptProcessor="E:\Program Files\ibm\Cognos\C10\cgi-bin\cognosisapi.dll" resourceType="Unspecified" requireAccess="Execute" preCondition="bitness32" allowPathInfo="true"/>
Save changes and close the web.config file.
To allow the CGI application to use execute:
Open the Internet Information Services (IIS) Manager.
Expand the virtual directory folder, and click the cgi-bin.
Double-click the Handler Mappings icon.
In the Actions pane, click the Edit Feature Permissions.
The Edit Features Permissions dialog box appears.
Select the Execute check box.
Click OK.
To configure the Java Database Components (JDBC) in the Cognos 10 environment:
Navigate to the following Oracle installation path:
Oracle_Installation_Path\product\Oracle_Version\client_1\sqldeveloper\jdbc\lib
For Oracle 11g client, copy the ojdbc5.jar file, and for Oracle 12c client, copy ojdbc6.jar to the following location on the Cognos 10 environment:
Cognos_Installation_Path\c10\webapps\p2pd\web-inf\lib
This section comprises the following sub-sections:
To configure custom Java authentication for Windows:
Go to IBM Cognos Administration and stop the Cognos services.
Copy the CAM_AAA_JDBC_PowerReports.jar file from the following location:
\\Argus_Insight_Server\Argus_Insight_Install_Path\java Authentication\JDBC_PowerReport
To the following location on the Cognos 10 Server:
\\Cognos_10_Install_Path\ c10\webapps\p2pd\WEB-INF\lib
Copy the JDBC_Config_PowerReports.properties file from the following location:
\\Argus_Insight_Server\Argus_Insight_Install_Path\java Autherntication\JDBC_PowerReport
To the following location on the Cognos 10 Server:
\\Cognos_10_Install_Path\ c10\Configuration
Define the configuration parameters:
Navigate to the following folder:
\\Cognos_10_Install_Path\ c10\Configuration
Open the JDBC_Config_PowerReports.properties file for editing.
Modify the existing values of the following parameters only if the database changed from the 7.0 database:
| Parameter | Value to Enter |
|---|---|
| Server | Enter the IP address or the name of the Database Server. |
| SID | Enter the instance/service name of the Argus Insight data mart. |
| Port | Enter the database port number. |
| COGNOS_SINGLE_SIGN_ON_HEADER | Enter the header name in which Single Sign On user name will be populated by SSO solution, that is, HEADER_OAM_REMOTE_USER. |
Save and close the file.
Copy AI.ini and ArgusSecureKey.ini from the following location:
\\<Argus_Insight_Server>\Windows
To the following location:
\\Cognos_10_Install_Path\C10\configuration
Navigate to the following folder:
Program Files\ibm\cognos\c10\bin\jre\6.0\lib\security
Backup local_policy.jar and US_export_policy.jar files.
Download the policy files corresponding to the version of installed JRE.
|
Note: To find the version of installed JRE:
|
For example, to install policy files of JRE version 6, execute the following steps:
Go to the following URL:
https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=jcesdk
Log in to the IBM site.
Select the files for Java 5.0 SR16, Java 6 SR13, Java 6 SR5 (J9 VM2.6), Java 7 SR4, and all later releases option, and click Continue.
Click I agree, to agree to the license terms, and then select I confirm.
Click Download Now.
Download the files and extract into a folder.
Locate local_policy.jar and US_export_policy.jar files in the extracted folder.
Copy these jar files into the following folder:
drive:\Program Files\ibm\cognos\c10\bin(bin64 in case Cognos is 64 bit)\jre\6.0\lib\security
Go to IBM Cognos Administration, and restart the Cognos services.
To configure custom Java authentication for Linux:
Go to IBM Cognos Administration and stop the Cognos services.
Copy the CAM_AAA_JDBC_PowerReports.jar file from the following location:
\\Argus_Insight_Server\Argus_Insight_Install_Path\java Autherntication\JDBC_PowerReport
To the following location on the Cognos 10 Server:
\\Cognos_10_Install_Path\ c10\webapps\p2pd\WEB-INF\lib
Copy the JDBC_Config_PowerReports.properties file from the following location:
\\Argus_Insight_Server\Argus_Insight_Install_Path\java Autherntication\JDBC_PowerReport
To the following location on the Cognos 10 Server:
\\Cognos_10_Install_Path\ c10\Configuration
Define the configuration parameters:
Navigate to the following folder:
\\Cognos_10_Install_Path\ c10\Configuration
Open the JDBC_Config_PowerReports.properties file for editing.
Modify the existing values of the following parameters only if the database changed from the 7.0 database:
| Parameter | Value to Enter |
|---|---|
| Server | Enter the IP address or the name of the Database Server. |
| SID | Enter the instance/service name of the Argus Insight data mart. |
| Port | Enter the database port number. |
| COGNOS_SINGLE_SIGN_ON_HEADER | Enter the header name in which Single Sign On user name will be populated by SSO solution, that is, HEADER_OAM_REMOTE_USER. |
Save and close the file.
Copy AI.ini and ArgusSecureKey.ini from the following location:
\\<Argus_Insight_Server>\Windows
To the following location:
\\Cognos_10_Install_Path\C10\configuration
Navigate to the following folder:
JAVA_HOME\jre\6.0\lib\security
Backup local_policy.jar and US_export_policy.jar files.
Download the policy files corresponding to the version of installed JRE.
|
Note: To find the version of installed JRE, go to the JAVA_HOME and check the folder name under the JRE folder. |
For example, to install policy files of JRE version 6, execute the following steps:
Go to the following URL:
http://www.oracle.com/technetwork/java/javase/downloads/jce-6-download-429243.html
Download local_policy.jar and US_export_policy.jar files in the extracted folder.
Copy these jar files into the following folder:
JAVA_HOME\jre\6.0\lib\security
If the Replace Files dialog box appears, click Yes.
Go to IBM Cognos Administration, and restart the Cognos services.
This section describes the following tasks that you must complete to configure the Cognos 10 environment:
You use the options in the IBM Cognos 10 Configuration screen to define environment group and logging properties, security properties, and data access properties.
To open the IBM Cognos 10 Configuration screen:
Click Start.
Navigate to All Programs > IBM Cognos 10, and then select IBM Cognos Configuration.
The IBM Cognos Configuration screen appears.
|
Note: The screens displayed during the Cognos 10 configuration are labeled either IBM Cognos 10 or Cognos 10. Both labels refer to the same Cognos configuration. |
To define the security properties:
Open the IBM Cognos 10 Configuration screen.
Navigate to Security > Authentication, and select Cognos.
Set the Allow anonymous access? property to True.
Navigate to Security, and select IBM Cognos Application Firewall.
Set the Enable CAF validation? property to False.
To define the data access properties:
Open the IBM Cognos 10 Configuration screen.
Navigate to Data Access > Content Manager, right-click Content Store, and then select Delete from the menu.
A confirmation messages appears.
Click Yes.
Navigate to Data Access, right-click Content Manager, select New resource, and then select Database.
Complete the New Resource - Database dialog box as follows:
In the Name field, enter CNTSTORE.
This is the name of the database resource.
In the Type field, select Oracle database.
Click OK.
You return to the IBM Cognos Configuration screen.
The resource property for the database of the newly-created CNTSTORE resource database appears.
Enter the value for the Database server and port number as:
Database_Server_Name:1521
where:
Database_Server_Name is the name of the server where your content store database is stored.
Select User ID and password, and click the icon next to it.
The Value - User ID and password dialog box appears.
In the User ID field, enter the ID for the content store database user.
In the Password field, enter the password for the content store database user.
In the Confirm password field, re-enter the password for verification.
Click OK.
|
Note: The contents store database user is created in the Cognos content store database. This user is given grants of Connect, Resource, and Create View, along with Unlimited Tablespace Grant.The character set of the Cognos content store database should only be UTF. Make sure that the content store database entry is added in the TNSNames.ora file on the Cognos 10 server. |
In the Service name field, enter the database instance name for the Cognos 10 repository.
To create the namespace for Argus Insight authentication:
Open the IBM Cognos 10 Configuration screen.
Navigate to Security, right-click Authentication, click New resource, and then select Namespace.
Complete the New Resource – Namespace dialog box as follows:
In the Name field, enter PowerReports.
In the Type field, enter Custom Java Provider.
Click OK.
The PowerReports - Namespace - Resource Properties screen appears.
Set the Namespace ID property to PowerReports.
Set the Java class name property to JDBCPowerReports.
To save the configuration and start the Cognos 10 service:
Open the File menu, and select Save to save changes to the configuration settings.
An information dialog box appears and lists each task as it is performed.
Click Close when the system completes all the configuration tasks.
In the IBM Cognos Configuration screen, click the Start icon to run the Cognos 10 service.
The system begins to run the IBM Cognos 10 service.
If there are no problems with the configuration, the system completes the test phase and starts the IBM Cognos 10 service successfully.
If there are possible problems with the configuration, the system stops running the service and displays a warning message. When you click OK to acknowledge the warning message, the system opens another dialog box with more information. For example:
At this point:
For more information about the warnings and errors, click Details.
To stop the process, click Cancel.
If the warnings or errors are due to reasons other than mail server connection failure, cancel the process and check your configuration again.
To ignore the warnings and errors, and complete the process of starting the IBM Cognos 10 service, click Continue.
For example, you may ignore warnings that the mail server cannot be reached (see the previous illustration).
Click Close to exit.
Open the File menu, and select Exit to exit from the IBM Cognos 10 configuration.
To create Cognos Data Source (PRMART):
Log in to the Cognos 10.
The IBM Cognos 10 home page appears.
|
Note: If your security settings on the server do not permit you to view the Cognos connection, add the site URL (http://Cognos_10_ Server/cognos10) to the list of local intranet sites. |
Under Administration section, click Administer IBM Cognos content.
The IBM Cognos Administration screen appears.
Click the Configuration tab.
Click Data Source Connections.
Click New Data Source icon.
The Specify a name and description - New Data Source Wizard screen appears.
Enter the Name and Description of the data source, and click Next.
The Specify the connection - New Data Source Wizard screen appears.
Specify parameters for the connection, and click Next.
On the Configuration tab:
In SQL *Netconnect string: field, enter the connection string.
For example,
(DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=TCP)(HOST=<hostname>)(PORT=<Port>)))(CONNECT_DATA=(SERVICE_NAME=<Service Name>)))
In the Signon section, select User ID check box, and enter details in the User ID, Password, and Confirm password fields.
In the Testing section, click Test the connection...
Click Next, and specify the commands for connection.
For more information on Cognos commands, refer to Argus Insight Extensibility Guide > Section 5.3.2 Applying Argus Data Security and Section 5.3.3 Applying Enterprise Security.
Click Finish.
The PRMART data source is created.
This section includes the following topics:
To activate the PowerReports namespace:
Open the Cognos 10 configuration.
Click Start > All Programs > IBM Cognos 10, and then select IBM Cognos Configuration.
The IBM Cognos Configuration screen appears.
Navigate to Security > Authentication, and then select Cognos.
The Cognos - Namespace - Resource properties screen appears.
Set the Allow Anonymous access? property to False.
From the File menu, select Save.
From the Actions menu, select Restart to restart the Cognos 10 service.
The status information about each task being performed during the restart appears.
During the Cognos service restart, a warning message may appear.
Process any warning message as follows:
Click OK.
To obtain more information about the warning, click Details.
Depending on the type of warning:
— To ignore the warning and continue with the process of restarting the IBM Cognos 10 service, click Continue.
For example, you may want to ignore a warning that the connection to the mail server failed.
— To stop the restart process, click Cancel.
If the warnings are due to reasons other than a mail server connection failure, you should stop the process, check your configuration, and then restart the IBM Cognos 10 service.
Wait until the all the configuration tasks are processed and the status for each task appears.
Click Close to exit the Cognos configuration.
|
Note: Make sure that you remove the Everyone user group from the Directory Administrator and System Administrator roles of Cognos. Before doing this, make sure that you have a valid user as part of the System Administrator role in Cognos.If you have not added any user as part of the System Administrator role in Cognos, then you have to add Everyone user group in System Administrator roles of Cognos again. To add the Everyone user group in the System Administrator role of Cognos:
|
To configure enterprise specific roles and permissions:
Log in to the Cognos 10 Server as an administrator user.
Create an Enterprise-specific role for each enterprise. For example:
ENT1_Role for Enterprise 1
ENT2_Role for Enterprise 2
Add all users belonging to the specific enterprises to their respective roles. For example:
Add ENT1_user to ENT1_Role
|
Note: If a user is a member of multiple enterprises, the user must be added to the roles for all the enterprises. |
Create a folder in Public Folders for each enterprise. For example:
ENT1_Folder for Enterprise 1
ENT2_Folder for Enterprise 2
Select the required permissions of the Enterprise-specific role for the Enterprise-specific folder. For example,
Add ENT1_Role to the ENT1_Folder and provide the Read, Write, Execute, and Traverse permissions on this folder.
