CAM Security in TM1

//CAM Security in TM1

Due to the manner in which IBM Cognos BI shares connections to IBM Cognos TM1 servers across users, the potential exists for a user to view inaccessible data or be restricted from accessible data, or to retrieve inconsistent and incorrect data results when running a report. These steps should be followed to avoid users from receiving unexpected results when viewing their reports.

TM1 Configuration with CAM security, Web and Contributor

Configure Tm1 CAM Security setup

Change the following in tm1s.cfg file,
Location: D:\Program Files\Cognos\TM1\Custom\TM1Data\PlanSamp
From IntegratedSecurityMode=1 to IntegratedSecurityMode=5
From PasswordSource=LDAP to PasswordSource=TM1
Change ServerCAMURI = http://DISPATCHERURL:9300/p2pd/servlet/dispatch

Add this:
CAMPortalVariableFile=portal\variables_TM1.xml
ClientCAMURI=http://gatewayURL/cognos10/cgi-bin/cognosisapi.dll
ClientPingCAMPassport=900

Next configure TM1p.ini file.
Location for windows2008 is C:\ProgramData\Applix\TM1

[We need to change the folder View option, unhide the system files in order to view ProgramData folder because it’s hidden.] Set this file as per the following:
CognosGatewayURI= http://gatewayURL/cognos10/cgi-bin/cognosisapi.dll
AdminHost= admin host name
AllowImportCAMClients=T
Restart the tm1 services

Configure TM1 Web on IIS 7.0

In IIS manager, click on the Application Pools on the left pane. Click on Add Application Pools on the right side.
Name:TM1 Web
Managed pipeline mode: Integrated
Click on OK
Then click on the TM1Web application pool. On the left side, click on “Advanced Settings.”
Set “Enable 32-Bit Applications” to False.

Click on TM1 Web on the left pane, then Advanced Settings.
Change Application Pool to TM1 Web.
Go to C:\inetpub\wwwroot\TM1Web. Right click >Properties on Web.Config. Uncheck the Read Only.
Open IIS > Go To TM1Web virtual directory and double click on Default Document. Click Add in the Actions pane. Add TM1WebLogin.aspx

Configure TM1 Contributor on Apache tomcat

After you deploy the war file, click on /pmpsvc. Change the admin host and click on refresh server name.
Select the server name ‘Planning Sample’.
Update Tm1 web client url with http://tm1webserver/tm1web/contributor.aspx
Update Cognos Gateway URI with http://gatewayURL/cognos10/cgi-bin/cognosisapi.dll
Update Cognos Dispatcher URI with http://DISPATCHERURL:9300/p2pd/servlet/dispatch
Click OK.

Go to D:\Program Files\Cognos\TM1\Cadmin\gateway folder,
Edit variables_plan.xml files add the following lines,
<url>http://TM1 Web server/tm1web/tm1webloginhandler.aspx</url>
<url>http://TM1 Web Server/tm1web/tm1webmain.aspx</url>

Copy this variables_plan.xml to the following directories on the Presentation Services Servers [dispatchers] D:\Program Files\ibm\cognos\c10_app\templates\ps\portal

Edit planning.html by setting the following:
This file needs to be edited to contain the path to your PMPSVC application; by default it has http:// localhost:8080. Edit to :- var planningServices = [“location of your pmpsvc folder:8080”];

Copy the planning.html from D:\Program Files\Cognos\TM1\Cadmin\gateway and paste into the BI gateway server into D:\Program Files\ibm\cognos\c10\webcontent

Copy icon_active_application.gif from D:\Program Files\Cognos\TM1\Cadmin\gateway
to BI gateway server to D:\Program Files\ibm\cognos\c10\webcontent\ps\portal\images

Restart BI and Tm1 services. After you design and deploy applications, it will show up in cognos connection under IBM Cognos TM1 Contributor Applications folder.

TM1 Portlets

The TM1 Portlets are used to provide integration between TM1 Web and IBM Cognos Connection, these are available as a separate download, e.g. TM1Portlets_10.1_mp.tar.gz.

After you unzipped, select the four folders (templates, vers, webapps, webcontent) and copy and paste them into the “D:\Program Files\IBM\cognos\c10_APP” directory. This folder is the dispatcher install. These files need to reside on all Presentation Service Servers.
In “D:\Program Files\IBM\cognos\c10_APP\templates\ps\portal” directory,
Modify the following 3 lines to the Variables_TM1.xml: Needs to be on all Presentation Service Servers.[This file already exists in the c:\Program Files\IBM\Cognos\c10\temlates\ps\portal folder as variables_tm1.xml.sample but needs to be renamed to “variables_tm1.xml”] <url>http://TM1 WEB Server/tm1web/tm1weblogin.aspx</url>
<url>http:// TM1 WEB Server /tm1web/tm1webloginhandler.aspx</url>
<url>http:// TM1 WEB Server /tm1web/tm1webmain.aspx</url>

Restart both Cognos 10 and TM1 Services
Open IBM Cognos Connection using Internet Explorer, and sign in. Open Administer IBM Cognos Content then click the Configuration Tab, and select Portlets from the left pane. If installed correctly the IBM Cognos TM1 Viewers portlets should be present.

Comments

2017-08-18T23:29:08+00:00 February 2nd, 2012|Analytics|