COGNOS Business Intelligence Series 7
pes.pdf pes.pdf
Chapter 2: Configure Servers Configure the Access Manager Server Secure a Server The Access Manager Server is a Cognos security component that manages two services: • a ticket service that issues tickets used to maintain single signons for users of Cognos products. A ticket service issues tickets for a specified period of time, allowing users to access multiple applications without having to re-enter authentication data. • an authentication service for authenticating users in web-based deployments. By default, the authentication service is not enabled. See the Access Manager Administrator Guide and the Configuration Manager User Guide for more information. You can restrict access to individual PowerPlay servers to prevent unauthorized administration from PowerPlay Enterprise - Server Administration or the ppadmtool command-line interface. Server security may be based on a simple server password managed by the PowerPlay server, or on user classes and access control lists managed by Access Manager. The method of security that PowerPlay Enterprise Server uses depends on the following: • If Access Manager is installed and configured on the dispatcher computer and on the client (the computer running PowerPlay Enterprise - Server Administration), the user class method is used. • If Access Manager is not installed or configured on either the server or client, the server password method is used. For information about configuring Access Manager and user classes, see the Access Manager online help. Steps 1. In PowerPlay Enterprise - Server Administration, select a server. 2. From the Tools menu, click Security then Set Security. 3. Do one of the following to secure the server with either a password or a user class: • In the New Password box, type a password, and then type it again in the Confirm New Password box. • In the Set Security box, select the user classes whose members are allowed to connect to the server. 4. Click OK. Notes • The namespace that is used for authentication is the namespace set on the computer running the dispatcher. To configure a namespace, run Configuration Manager. For more information, see the Configuration Manager User Guide. • To use another namespace, you must first remove security (Tools menu). • If a server is not secured when you connect, you may be prompted to secure it. If security is not necessary, you can select the Don’t Show This Dialog Again check box. • To publish cubes and reports from PowerPlay Enterprise - Server Administration to the portal, Access Manager security must be set. Also, PowerPlay Enterprise Server and the portal must both be configured to use the same namespace. In Cognos ReportNet or Cognos 8, the Series 7 namespace must be configured, but it does not have to be the primary namespace. Also, you must use the same naming format to identify the location of the directory server in both Cognos Series 7, and Cognos ReportNet or Cognos 8. If you use computer name in one, and IP address in the other, to identify the location of the directory server, publishing will fail. 24 Cognos PowerPlay (R)
Disable Saving of Cognos Sub-Cubes Chapter 2: Configure Servers In PowerPlay for Windows and PowerPlay for Excel, users can save cube data as a local sub-cube. This may be desirable for mobile users who want to take cubes with them on a notebook computer, for example. Later, they can re-synchronize the sub-cube back to the cube on the server. However, you may want to prevent the saving of sub-cubes for security reasons. You can do this for each cube. Steps 1. In PowerPlay Enterprise - Server Administration, select a cube. 2. From the Edit menu, click Properties, and then click the Settings tab. 3. In the Save as PowerCube box (Options), select Disabled. 4. Click OK. Notes • You cannot save Cognos sub-cubes from third-party OLAP servers, for example Hyperion Essbase. • Users who don’t have PowerPlay Personal Server installed cannot save sub-cubes. • By default, the saving of sub-cubes is disabled. Specify an Authentication Namespace For a Cube When a secured cube is created, a reference to a namespace is stored as part of the cube. The cube data, or portions thereof, is made secure at runtime by Access Manager using the authentication information stored in the specified namespace, which resides in either a directory server or a portable .lae file. You may want to use a namespace different than the one the server is secured against. For example, if a PowerPlay Enterprise Server is secured against default you can secure a cube against a different namespace. You can then specify the second namespace in the cube properties in PowerPlay Enterprise - Server Administration. Steps 1. In PowerPlay Enterprise - Server Administration, select a cube. 2. From the Edit menu, click Properties, and then click the Settings tab. 3. In the Namespace box (Authentication), type the name of the namespace to use. 4. Click OK. Notes • This setting affects users accessing cubes from the Web only. Enterprise Server Guide 25
- Page 1 and 2: COGNOS (R) Business Intelligence Se
- Page 3 and 4: Table of Contents Introduction 7 Ch
- Page 5 and 6: Chapter 6: Audit Server Activity 71
- Page 7 and 8: Introduction What Is in This Docume
- Page 9 and 10: Chapter 1: Enterprise Reporting Pow
- Page 11 and 12: Chapter 1: Enterprise Reporting •
- Page 13 and 14: Chapter 1: Enterprise Reporting Ser
- Page 15 and 16: Chapter 2: Configure Servers This c
- Page 17 and 18: Chapter 2: Configure Servers Daemon
- Page 19 and 20: Chapter 2: Configure Servers 2. Fro
- Page 21 and 22: Chapter 2: Configure Servers Securi
- Page 23: Chapter 2: Configure Servers Perfor
- Page 27 and 28: Chapter 3: Control Processes This c
- Page 29 and 30: Chapter 3: Control Processes In a m
- Page 31 and 32: Chapter 3: Control Processes Exampl
- Page 33 and 34: Monitor Windows Connections Chapter
- Page 35 and 36: Chapter 3: Control Processes When y
- Page 37 and 38: Chapter 4: Deploy Cubes and Reports
- Page 39 and 40: Chapter 4: Deploy Cubes and Reports
- Page 41 and 42: Add a Cube or Report Chapter 4: Dep
- Page 43 and 44: Chapter 4: Deploy Cubes and Reports
- Page 45 and 46: Add Dimension Line Information to a
- Page 47 and 48: Chapter 4: Deploy Cubes and Reports
- Page 49 and 50: Chapter 4: Deploy Cubes and Reports
- Page 51 and 52: Chapter 4: Deploy Cubes and Reports
- Page 53 and 54: Chapter 4: Deploy Cubes and Reports
- Page 55 and 56: Chapter 4: Deploy Cubes and Reports
- Page 57 and 58: Chapter 4: Deploy Cubes and Reports
- Page 59 and 60: Chapter 4: Deploy Cubes and Reports
- Page 61 and 62: Chapter 5: Provide Drill-through Ac
- Page 63 and 64: Chapter 5: Provide Drill-through Ac
- Page 65 and 66: Chapter 5: Provide Drill-through Ac
- Page 67 and 68: Chapter 5: Provide Drill-through Ac
- Page 69 and 70: Chapter 5: Provide Drill-through Ac
- Page 71 and 72: Chapter 6: Audit Server Activity Us
- Page 73 and 74: Chapter 6: Audit Server Activity 2.
Disable Saving of Cognos Sub-Cubes<br />
Chapter 2: Configure Servers<br />
In PowerPlay for Windows and PowerPlay for Excel, users can save cube data as a local sub-cube.<br />
This may be desirable for mobile users who want to take cubes with them on a notebook<br />
computer, for example. Later, they can re-synchronize the sub-cube back to the cube on the server.<br />
However, you may want to prevent the saving of sub-cubes for security reasons. You can do this<br />
for each cube.<br />
Steps<br />
1. In PowerPlay Enterprise - Server Administration, select a cube.<br />
2. From the Edit menu, click Properties, and then click the Settings tab.<br />
3. In the Save as PowerCube box (Options), select Disabled.<br />
4. Click OK.<br />
Notes<br />
• You cannot save Cognos sub-cubes from third-party OLAP servers, for example Hyperion<br />
Essbase.<br />
• Users who don’t have PowerPlay Personal Server installed cannot save sub-cubes.<br />
• By default, the saving of sub-cubes is disabled.<br />
Specify an Authentication Namespace For a Cube<br />
When a secured cube is created, a reference to a namespace is stored as part of the cube. The cube<br />
data, or portions thereof, is made secure at runtime by Access Manager using the authentication<br />
information stored in the specified namespace, which resides in either a directory server or a<br />
portable .lae file.<br />
You may want to use a namespace different than the one the server is secured against. For<br />
example, if a PowerPlay Enterprise Server is secured against default you can secure a cube against<br />
a different namespace. You can then specify the second namespace in the cube properties in<br />
PowerPlay Enterprise - Server Administration.<br />
Steps<br />
1. In PowerPlay Enterprise - Server Administration, select a cube.<br />
2. From the Edit menu, click Properties, and then click the Settings tab.<br />
3. In the Namespace box (Authentication), type the name of the namespace to use.<br />
4. Click OK.<br />
Notes<br />
• This setting affects users accessing cubes from the Web only.<br />
Enterprise Server Guide 25
Change language