Cognos ReportNetTM Installation and Configuration Guide
Cognos ReportNetTM Installation and Configuration Guide Cognos ReportNetTM Installation and Configuration Guide
Chapter 4: Configuring ReportNet 3. In the Properties window, click the box next to the Allow anonymous access property and then click False. 4. From the File menu, click Save. Now, users are required to provide logon credentials when they access ReportNet resources. Configure ReportNet to Use a Third-Party LDAP Server To bind a user to the LDAP server, the LDAP authentication provider must construct the distinguished name (DN). If the Use external identity property is set to True, it uses the External identity mapping property to try to resolve the user's DN. If it cannot find the environment variable or the DN in the LDAP server, it attempts to use the User lookup property to construct the DN. If users are stored hierarchically within the directory server, you can configure the User lookup and External identity mapping properties to use search filters. When the LDAP authentication provider performs a search, it uses the filters you specify for the User lookup and External identity mapping properties. It also binds to the directory server using the value you specify for the Bind user DN and password property or using anonymous if no value is specified. When an LDAP namespace has been configured to use the External identity mapping property for authentication, the LDAP provider binds to the directory server using the Bind user DN and password or using anonymous if no value is specified. All users who log on to ReportNet using external identity mapping see the same users, groups, and folders as the Bind user. Configure ReportNet to Use a Cognos Series 7 Namespace You can configure ReportNet to use multiple Cognos Series 7 authentication providers. We recommend that you configure the same host and port values for all instances. Otherwise, you may receive errors or be prompted for authentication more than once. If you change the configuration information stored in the directory server used for Cognos Series 7, you must restart the ReportNet service before the changes take effect in the ReportNet installation. After you configure the Cognos Series 7 namespace as your authentication source, you can configure single signon between ReportNet and Cognos Series 7 products. Configure ReportNet to Use Windows Native Security You cannot use a Windows Native Security (NTLM) authentication provider with an Active Directory domain. Configure ReportNet to Use an Active Directory Server To use Active Directory Server as your authentication provider, you must install the Active Directory Client Extension on any computer running Windows NT. For more information, see the Microsoft Web site. To configure single signon between your Active Directory domain and ReportNet, you must • run Active Directory domain in the native mode • set up NT Challenge Response on the IIS Web server • install Content Manager on a computer that is part of the domain • set up the computer, or the user account under which Content Manager runs, to be trusted for delegation If you install ReportNet on UNIX, you can use a Windows Active Directory Server as your authentication source. If you install Content Manager on a Windows computer, you can configure Active Directory as your authentication source using an Active Directory namespace. If you install Content Manager on a UNIX computer, you must instead configure Active Directory as your authentication source using an LDAP namespace. When you configure the new LDAP namespace, check that the default settings still apply. Change the values for all properties in the advanced mappings property groups to match the settings required for the Active Directory properties. 42 Cognos ReportNet TM
Chapter 4: Configuring ReportNet The following table lists the values to use for the LDAP advanced mapping properties if you use default values for Active Directory. Mappings LDAP Property LDAP Value Folder Object class * Description Name description name Group Object class group Description Member Name description member cn Account Object class user Business phone Content locale Description Email Fax/Phone Given name Home phone Mobile phone Name Pager phone Password Postal address Product locale Surname telephonenumber (leave blank) description mail facsimiletelephonenumber givenname homephone mobile displayName pager (leave blank) postaladdress (leave blank) sn Configure ReportNet to Use an SAP Server To use a SAP server as your authentication provider, you must use SAP BW version 3.0 B or later. In SAP BW, you can assign users to user groups or activity groups or both. The SAP authentication provider uses only the activity groups. The authorization rights required by the SAP user depend on how the user will use ReportNet. Installation and Configuration Guide 43
- Page 1 and 2: COGNOS (R) ENTERPRISE BUSINESS INTE
- Page 3 and 4: Table of Contents Introduction 7 Ad
- Page 5 and 6: Chapter 10: Uninstalling Cognos Rep
- Page 7 and 8: Introduction This document is avail
- Page 9 and 10: Additional Materials In this guide,
- Page 11 and 12: Chapter 1: ReportNet Before impleme
- Page 13 and 14: Chapter 1: ReportNet Installing Rep
- Page 15 and 16: Chapter 1: ReportNet Framework Mana
- Page 17 and 18: Chapter 2: Installing ReportNet on
- Page 19 and 20: Chapter 2: Installing ReportNet on
- Page 21 and 22: Chapter 2: Installing ReportNet on
- Page 23 and 24: Chapter 2: Installing ReportNet on
- Page 25 and 26: Chapter 3: Installing ReportNet on
- Page 27 and 28: Chapter 3: Installing ReportNet on
- Page 29 and 30: Chapter 3: Installing ReportNet on
- Page 31 and 32: Chapter 3: Installing ReportNet on
- Page 33 and 34: Chapter 4: Configuring ReportNet Af
- Page 35 and 36: Chapter 4: Configuring ReportNet St
- Page 37 and 38: Chapter 4: Configuring ReportNet 3.
- Page 39 and 40: Chapter 4: Configuring ReportNet Co
- Page 41: Chapter 4: Configuring ReportNet Wh
- Page 45 and 46: Chapter 4: Configuring ReportNet St
- Page 47 and 48: Chapter 4: Configuring ReportNet 3.
- Page 49 and 50: Chapter 4: Configuring ReportNet 4.
- Page 51 and 52: Chapter 4: Configuring ReportNet St
- Page 53 and 54: Chapter 4: Configuring ReportNet 6.
- Page 55 and 56: Chapter 4: Configuring ReportNet Ad
- Page 57 and 58: Chapter 4: Configuring ReportNet Ex
- Page 59 and 60: Chapter 4: Configuring ReportNet Sp
- Page 61 and 62: Chapter 4: Configuring ReportNet 3.
- Page 63 and 64: Chapter 5: Installing Framework Man
- Page 65 and 66: Chapter 5: Installing Framework Man
- Page 67 and 68: Chapter 6: Configuring Framework Ma
- Page 69 and 70: Chapter 6: Configuring Framework Ma
- Page 71 and 72: Chapter 6: Configuring Framework Ma
- Page 73 and 74: Chapter 6: Configuring Framework Ma
- Page 75 and 76: Chapter 6: Configuring Framework Ma
- Page 77 and 78: Chapter 7: Advanced Configuration O
- Page 79 and 80: Chapter 7: Advanced Configuration O
- Page 81 and 82: Chapter 7: Advanced Configuration O
- Page 83 and 84: Chapter 7: Advanced Configuration O
- Page 85 and 86: Chapter 7: Advanced Configuration O
- Page 87 and 88: Chapter 7: Advanced Configuration O
- Page 89 and 90: Chapter 7: Advanced Configuration O
- Page 91 and 92: Chapter 8: Setting Up the Samples Y
Chapter 4: Configuring ReportNet<br />
The following table lists the values to use for the LDAP advanced mapping properties if you use<br />
default values for Active Directory.<br />
Mappings LDAP Property LDAP Value<br />
Folder Object class *<br />
Description<br />
Name<br />
description<br />
name<br />
Group Object class group<br />
Description<br />
Member<br />
Name<br />
description<br />
member<br />
cn<br />
Account Object class user<br />
Business phone<br />
Content locale<br />
Description<br />
Email<br />
Fax/Phone<br />
Given name<br />
Home phone<br />
Mobile phone<br />
Name<br />
Pager phone<br />
Password<br />
Postal address<br />
Product locale<br />
Surname<br />
telephonenumber<br />
(leave blank)<br />
description<br />
mail<br />
facsimiletelephonenumber<br />
givenname<br />
homephone<br />
mobile<br />
displayName<br />
pager<br />
(leave blank)<br />
postaladdress<br />
(leave blank)<br />
sn<br />
Configure ReportNet to Use an SAP Server<br />
To use a SAP server as your authentication provider, you must use SAP BW version 3.0 B or<br />
later.<br />
In SAP BW, you can assign users to user groups or activity groups or both. The SAP<br />
authentication provider uses only the activity groups.<br />
The authorization rights required by the SAP user depend on how the user will use ReportNet.<br />
<strong>Installation</strong> <strong>and</strong> <strong>Configuration</strong> <strong>Guide</strong> 43