LDAP Cognos Configuration
LDAP Cognos Configuration
Saravanan Vajjiravel
4-July-2011
COGNOS P r a c t i c e
Learn. Adapt. Belive. Succeed with Proven Solutions
COGNOS P r a c t i c e
Learn. Adapt. Belive. Succeed with Proven Solutions
Contents
Revision History
2
COGNOS P r a c t i c e
Learn. Adapt. Belive. Succeed with Proven Solutions
Summary:
This document is intended to provide quick walkthrough for configuring Cognos Security Authentication
with LDAP service.
Audience:
Cognos Administrator, Cognos Center of Excellence (Cognos Application Architect)
Using of LDAP not very tricky – For better comfort level, I suggest you to download and install LDAP
server (http://directory.apache.org/studio), connect to that server using special server browser, and then
you can create user accounts and groups using graphical interface or running special code.
Usually users’ credentials are stored in the special folders. There are a few different folder types.
Terminology:
Data organization in LDAP server is easier understanding using the below example.
3
COGNOS P r a c t i c e
Learn. Adapt. Belive. Succeed with Proven Solutions
When you work with IBM Cognos application which uses LDAP for storing users credential, you have to
point the IP address and port of LDAP server (if you use same computer for running application and LDAP
server then IP is equal to LOCALHOST and typical port number is 389).
You also have to provide DN of folder where you store necessary user’s credentials.
4
COGNOS P r a c t i c e
Learn. Adapt. Belive. Succeed with Proven Solutions
Create a Connection
To explore/view the contents of the server, you need a connection. Please follow the below steps to
obtain the connection from scratch.
1. Click on the tab Connections > click the icon create New Connection as shown below:
2. Input the connection name with unique identifier (i.e. testLDAP) because you will refer this
name later during IBM Cognos Configuration.
5
COGNOS P r a c t i c e
Learn. Adapt. Belive. Succeed with Proven Solutions
6
COGNOS P r a c t i c e
Learn. Adapt. Belive. Succeed with Proven Solutions
3. Click on the new namespace that you have created (i.e. testLDAP) and modify the configuration
as given below;
Note: Enable “Use bind credentials for search” to True for traversing user profiles in Cognos
Connection. By default, this was set to False.
7
COGNOS P r a c t i c e
Learn. Adapt. Belive. Succeed with Proven Solutions
Please find below the detailed steps for adding new users into the LDAP – Apache Directory Studio:
1. Go to LDAP Browser window > expand Root DSE > ou=system > ou=users
2. Right-click on ou=users and choose New Entry
8
COGNOS P r a c t i c e
Learn. Adapt. Belive. Succeed with Proven Solutions
4. Ensure, you have removed any entries that you see in the right side by default.
9
COGNOS P r a c t i c e
Learn. Adapt. Belive. Succeed with Proven Solutions
5. Now, you input the selection in Available object classes as shown below:
10
COGNOS P r a c t i c e
Learn. Adapt. Belive. Succeed with Proven Solutions
Click Next:
11
COGNOS P r a c t i c e
Learn. Adapt. Belive. Succeed with Proven Solutions
That’s it. You are done. Now, you will have the final screen very similar to the below:
12