Cognos ReportNetTM Installation and Configuration Guide

Cognos ReportNetTM Installation and Configuration Guide Cognos ReportNetTM Installation and Configuration Guide

sharepoint.cabq.gov
from sharepoint.cabq.gov More from this publisher
20.07.2014 Views

Chapter 4: Configuring ReportNet 3. In the Properties window, click the box next to the Allow anonymous access property and then click False. 4. From the File menu, click Save. Now, users are required to provide logon credentials when they access ReportNet resources. Configure ReportNet to Use a Third-Party LDAP Server To bind a user to the LDAP server, the LDAP authentication provider must construct the distinguished name (DN). If the Use external identity property is set to True, it uses the External identity mapping property to try to resolve the user's DN. If it cannot find the environment variable or the DN in the LDAP server, it attempts to use the User lookup property to construct the DN. If users are stored hierarchically within the directory server, you can configure the User lookup and External identity mapping properties to use search filters. When the LDAP authentication provider performs a search, it uses the filters you specify for the User lookup and External identity mapping properties. It also binds to the directory server using the value you specify for the Bind user DN and password property or using anonymous if no value is specified. When an LDAP namespace has been configured to use the External identity mapping property for authentication, the LDAP provider binds to the directory server using the Bind user DN and password or using anonymous if no value is specified. All users who log on to ReportNet using external identity mapping see the same users, groups, and folders as the Bind user. Configure ReportNet to Use a Cognos Series 7 Namespace You can configure ReportNet to use multiple Cognos Series 7 authentication providers. We recommend that you configure the same host and port values for all instances. Otherwise, you may receive errors or be prompted for authentication more than once. If you change the configuration information stored in the directory server used for Cognos Series 7, you must restart the ReportNet service before the changes take effect in the ReportNet installation. After you configure the Cognos Series 7 namespace as your authentication source, you can configure single signon between ReportNet and Cognos Series 7 products. Configure ReportNet to Use Windows Native Security You cannot use a Windows Native Security (NTLM) authentication provider with an Active Directory domain. Configure ReportNet to Use an Active Directory Server To use Active Directory Server as your authentication provider, you must install the Active Directory Client Extension on any computer running Windows NT. For more information, see the Microsoft Web site. To configure single signon between your Active Directory domain and ReportNet, you must • run Active Directory domain in the native mode • set up NT Challenge Response on the IIS Web server • install Content Manager on a computer that is part of the domain • set up the computer, or the user account under which Content Manager runs, to be trusted for delegation If you install ReportNet on UNIX, you can use a Windows Active Directory Server as your authentication source. If you install Content Manager on a Windows computer, you can configure Active Directory as your authentication source using an Active Directory namespace. If you install Content Manager on a UNIX computer, you must instead configure Active Directory as your authentication source using an LDAP namespace. When you configure the new LDAP namespace, check that the default settings still apply. Change the values for all properties in the advanced mappings property groups to match the settings required for the Active Directory properties. 42 Cognos ReportNet TM

Chapter 4: Configuring ReportNet The following table lists the values to use for the LDAP advanced mapping properties if you use default values for Active Directory. Mappings LDAP Property LDAP Value Folder Object class * Description Name description name Group Object class group Description Member Name description member cn Account Object class user Business phone Content locale Description Email Fax/Phone Given name Home phone Mobile phone Name Pager phone Password Postal address Product locale Surname telephonenumber (leave blank) description mail facsimiletelephonenumber givenname homephone mobile displayName pager (leave blank) postaladdress (leave blank) sn Configure ReportNet to Use an SAP Server To use a SAP server as your authentication provider, you must use SAP BW version 3.0 B or later. In SAP BW, you can assign users to user groups or activity groups or both. The SAP authentication provider uses only the activity groups. The authorization rights required by the SAP user depend on how the user will use ReportNet. Installation and Configuration Guide 43

Chapter 4: Configuring ReportNet<br />

The following table lists the values to use for the LDAP advanced mapping properties if you use<br />

default values for Active Directory.<br />

Mappings LDAP Property LDAP Value<br />

Folder Object class *<br />

Description<br />

Name<br />

description<br />

name<br />

Group Object class group<br />

Description<br />

Member<br />

Name<br />

description<br />

member<br />

cn<br />

Account Object class user<br />

Business phone<br />

Content locale<br />

Description<br />

Email<br />

Fax/Phone<br />

Given name<br />

Home phone<br />

Mobile phone<br />

Name<br />

Pager phone<br />

Password<br />

Postal address<br />

Product locale<br />

Surname<br />

telephonenumber<br />

(leave blank)<br />

description<br />

mail<br />

facsimiletelephonenumber<br />

givenname<br />

homephone<br />

mobile<br />

displayName<br />

pager<br />

(leave blank)<br />

postaladdress<br />

(leave blank)<br />

sn<br />

Configure ReportNet to Use an SAP Server<br />

To use a SAP server as your authentication provider, you must use SAP BW version 3.0 B or<br />

later.<br />

In SAP BW, you can assign users to user groups or activity groups or both. The SAP<br />

authentication provider uses only the activity groups.<br />

The authorization rights required by the SAP user depend on how the user will use ReportNet.<br />

<strong>Installation</strong> <strong>and</strong> <strong>Configuration</strong> <strong>Guide</strong> 43

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!