Go to primary content

Oracle® Argus Insight Installation Guide Release 8.1 E68412-01 |
| Contents

Previous | Next |

# 8 Configuring the Cognos 10 Environment

This chapter describes how to configure the Cognos 10 environment. You must configure the Cognos 10 environment in the order specified in this guide.

This chapter includes the following topic:

- Setting Up Cognos Server and Configuration for New Installation

Before configuring the environment, verify that you have installed all required hardware and software. For more information, see Section 1.2, "Software and Hardware Requirements."

## 8.1 Setting Up Cognos Server and Configuration for New Installation

This section describes how to set up Cognos Server and configure your environment for a new installation of Argus Insight.

This section comprises the following sub-section:

- Configuring IIS 7.0 on the Cognos 10 Server

- Configuring the Java Database Components

- Configuring Custom Java Authentication

- Configuring the Cognos 10 Environment

- Creating Cognos Data Source (PRMART)

- Configuring Cognos Security

- Configuring Roles and Permissions

### 8.1.1 Configuring IIS 7.0 on the Cognos 10 Server

This section describes the following tasks that you must complete to configure Internet Information Services 7.0 (IIS 7.0) on the Cognos 10 Server:

- Checking that CGI or ISAPI Is Enabled in IIS

- Creating the Cognos 10 Virtual Directories

- Editing ISAPI or CGI Extensions

- Adding the Module Mapping

- Editing the Module Mapping

- Allowing CGI Application to Use Execute

#### 8.1.1.1 Checking that CGI or ISAPI Is Enabled in IIS

To check that CGI or ISAPI is enabled in IIS:

1. Click Start.

2. Navigate to Administrative Tools, and select Server Manager.

   The Server Manager screen appears.

3. In the Role Services section, click the Add Role Services link.

   The Add Role Services dialog box appears.

4. Expand Application Development (Installed).

5. Verify that the CGI and ISAPI Extensions are listed as (Installed).

   - If these role services are not installed, select the appropriate check box, and then click Install. Follow the instructions on the screen to complete the installation.

   - If these role services are already installed, click Cancel. The system returns to the Server Manager screen.

#### 8.1.1.2 Creating the Cognos 10 Virtual Directories

To create the Cognos 10 virtual directories:

1. Navigate to Roles > Web Server (IIS), and select Internet Information Services (IIS) Manager.

2. In Connections pane, expand the server node.

3. Expand Sites.

4. Right-click Default Web Site, and select Add Virtual Directory.

   The Add Virtual Directory dialog box appears.

   1. In the Alias field, enter Cognos 10.

   2. In the Physical path field, enter the complete path to the Cognos 10 Web content directory. The default path is:

      drive:\Program Files\ibm\cognos\c10\webcontent

   3. Click OK.

5. Right-click your newly-created Cognos 10 virtual directory, and select Add Virtual Directory.

   The Add Virtual Directory dialog box appears.

   1. In the Alias field, enter cgi-bin.

   2. In the Physical path field, enter the complete path to the Cognos 10 cgi-bin directory. The default path is:

      drive:\Program Files\ibm\cognos\c10\cgi-bin

   3. Click OK.

#### 8.1.1.3 Editing ISAPI or CGI Extensions

To edit the ISAPI or CGI extensions:

1. On Server Manager screen, in the Connections pane, select the server node.

2. Double-click the ISAPI and CGI Restrictions icon.

3. In the Actions pane, click the Add.

   The Edit ISAPI or CGI Restriction dialog box appears.

   1. In the ISAPI or CGI path field, enter the path to either the cognos.cgi file or the cognosisapi.dll file depending on which one you will use.

      Note: For Argus Insight, Oracle recommends that you use cognos.cgi. In addition, you may need to surround the path in double quotes if it contains any spaces.

      The default path for each file is as follows:

      drive:\Program Files\ibm\cognos\c10\cgi-bin\cognosisapi.dll

      drive:\Program Files\ibm\cognos\c10\cgi-bin\cognos.cgi

   2. Select Allow extension path to execute check box.

   3. Click OK.

Alternative Method

1. In Connections pane, select the server node.

2. Double-click the ISAPI and CGI Restrictions icon.

3. In Actions pane, click the Edit Feature Settings.

   The Edit ISAPI and CGI Restriction Settings dialog box appears.

4. Select the Allow unspecified CGI Modules check box.

5. Click OK.

#### 8.1.1.4 Adding the Module Mapping

To add the module mapping:

1. Open the Internet Information Services (IIS) Manager.

2. Expand the virtual directory folder, and click cgi-bin.

3. Double-click the Handler Mappings icon.

4. In the Actions pane, click the Add Module Mapping.

   The Add Module Mapping dialog box appears.

   1. In the Request path field, enter either *.cgi or *.dll as you need.

   2. In the Module field, select either CGIModule or IsapiModule from the list.

   3. In the Executable field, enter a value depending on the module you are using.

      If you are using an ISAPI Module, you must enter the complete path to the cognosisapi.dll. You can click the ellipsis icon to browse to the file location.

      If you are using a CGI Module, you do not need to enter a value in the Executable field.

   4. In the Name field, enter a realistic name for this mapping. For example, ISAPI-Cognos.

5. Click Request Restrictions.

   1. Click the Mapping tab, and select Invoke handler only if request is mapped to: File.

   2. Click the Verbs tab, and select All verbs.

   3. Click the Access tab, select Execute.

   4. Click OK to save changes.

      You return to the Add Module Mapping dialog box.

6. Click OK.

   A message appears depending on the method used in Section 8.1.1.3, "Editing ISAPI or CGI Extensions,".

7. Click Yes.

   The new module mapping is added to the Module Mapping list.

#### 8.1.1.5 Editing the Module Mapping

For Cognos Administration to function properly, you must manually edit the directive that you added to the IIS configuration file in the previous step (see Section 8.1.1.4, "Adding the Module Mapping").

To edit the module mapping:

1. Navigate to the following folder:

   COGNOS_HOME/c10/cgi-bin

   Note: Ensure that you have access permissions on the cgi-bin folder so you can save the changes you make to the web.config file.

2. Open the web.config file for editing.

3. Locate the appropriate add name statement in the web.config file.

   For CGI, locate this statement:

   `<add name="CGI-cognos" path="*.cgi" verb="*" modules="CgiModule" resourceType="Unspecified" />`

   For ISAPI, locate this statement:

   `<add name="ISAPI-Cognos" path="cognosisapi.dll" verb="*" modules="IsapiModule" scriptProcessor="E:\Program Files\ibm\Cognos\C10\cgi-bin\cognosisapi.dll" resourceType="Unspecified" requireAccess="Execute" preCondition="bitness32" />`

4. Add allowPathInfo="true" to the end of the statement.

   For CGI:

   `<add name="CGI-cognos" path="*.cgi" verb="*" modules="CgiModule" resourceType="Unspecified" allowPathInfo="true" />`

   For ISAPI:

   `<add name="ISAPI-Cognos" path="cognosisapi.dll" verb="*" modules="IsapiModule" scriptProcessor="E:\Program Files\ibm\Cognos\C10\cgi-bin\cognosisapi.dll" resourceType="Unspecified" requireAccess="Execute" preCondition="bitness32" allowPathInfo="true"/>`

5. Save changes and close the web.config file.

#### 8.1.1.6 Allowing CGI Application to Use Execute

To allow the CGI application to use execute:

1. Open the Internet Information Services (IIS) Manager.

2. Expand the virtual directory folder, and click the cgi-bin.

3. Double-click the Handler Mappings icon.

4. In the Actions pane, click the Edit Feature Permissions.

   The Edit Features Permissions dialog box appears.

5. Select the Execute check box.

6. Click OK.

### 8.1.2 Configuring the Java Database Components

To configure the Java Database Components (JDBC) in the Cognos 10 environment:

1. Navigate to the following Oracle installation path:

   Oracle_Installation_Path\product\Oracle_Version\client_1\sqldeveloper\jdbc\lib

2. For Oracle 11g client, copy the ojdbc5.jar file, and for Oracle 12c client, copy ojdbc6.jar to the following location on the Cognos 10 environment:

   Cognos_Installation_Path\c10\webapps\p2pd\web-inf\lib

### 8.1.3 Configuring Custom Java Authentication

This section comprises the following sub-sections:

- Configuring Custom Java Authentication for Windows

- Configuring Custom Java Authentication for Linux

#### 8.1.3.1 Configuring Custom Java Authentication for Windows

To configure custom Java authentication for Windows:

1. Go to IBM Cognos Administration and stop the Cognos services.

2. Copy the CAM_AAA_JDBC_PowerReports.jar file from the following location:

   \\Argus_Insight_Server\Argus_Insight_Install_Path\java Authentication\JDBC_PowerReport

   To the following location on the Cognos 10 Server:

   \\Cognos_10_Install_Path\ c10\webapps\p2pd\WEB-INF\lib

3. Copy the JDBC_Config_PowerReports.properties file from the following location:

   \\Argus_Insight_Server\Argus_Insight_Install_Path\java Autherntication\JDBC_PowerReport

   To the following location on the Cognos 10 Server:

   \\Cognos_10_Install_Path\ c10\Configuration

4. Define the configuration parameters:

   1. Navigate to the following folder:

      \\Cognos_10_Install_Path\ c10\Configuration

   2. Open the JDBC_Config_PowerReports.properties file for editing.

   3. Modify the existing values of the following parameters only if the database changed from the 7.0 database:

      Parameter | Value to Enter
      --- | ---
      Server | Enter the IP address or the name of the Database Server.
      SID | Enter the instance/service name of the Argus Insight data mart.
      Port | Enter the database port number.
      COGNOS_SINGLE_SIGN_ON_HEADER | Enter the header name in which Single Sign On user name will be populated by SSO solution, that is, HEADER_OAM_REMOTE_USER.

   4. Save and close the file.

5. Copy AI.ini and ArgusSecureKey.ini from the following location:

   \\<Argus_Insight_Server>\Windows

   To the following location:

   \\Cognos_10_Install_Path\C10\configuration

6. Navigate to the following folder:

   Program Files\ibm\cognos\c10\bin\jre\6.0\lib\security

7. Backup local_policy.jar and US_export_policy.jar files.

8. Download the policy files corresponding to the version of installed JRE.

   Note: To find the version of installed JRE: For Cognos 32 bit, go to bin/jre/version For Cognos 64 bit, go to bin64/jre/version

   For example, to install policy files of JRE version 6, execute the following steps:

   1. Go to the following URL:

      https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=jcesdk

   2. Log in to the IBM site.

   3. Select the files for Java 5.0 SR16, Java 6 SR13, Java 6 SR5 (J9 VM2.6), Java 7 SR4, and all later releases option, and click Continue.

   4. Click I agree, to agree to the license terms, and then select I confirm.

   5. Click Download Now.

   6. Download the files and extract into a folder.

   7. Locate local_policy.jar and US_export_policy.jar files in the extracted folder.

   8. Copy these jar files into the following folder:

      drive:\Program Files\ibm\cognos\c10\bin(bin64 in case Cognos is 64 bit)\jre\6.0\lib\security

9. Go to IBM Cognos Administration, and restart the Cognos services.

#### 8.1.3.2 Configuring Custom Java Authentication for Linux

To configure custom Java authentication for Linux:

1. Go to IBM Cognos Administration and stop the Cognos services.

2. Copy the CAM_AAA_JDBC_PowerReports.jar file from the following location:

   \\Argus_Insight_Server\Argus_Insight_Install_Path\java Autherntication\JDBC_PowerReport

   To the following location on the Cognos 10 Server:

   \\Cognos_10_Install_Path\ c10\webapps\p2pd\WEB-INF\lib

3. Copy the JDBC_Config_PowerReports.properties file from the following location:

   \\Argus_Insight_Server\Argus_Insight_Install_Path\java Autherntication\JDBC_PowerReport

   To the following location on the Cognos 10 Server:

   \\Cognos_10_Install_Path\ c10\Configuration

4. Define the configuration parameters:

   1. Navigate to the following folder:

      \\Cognos_10_Install_Path\ c10\Configuration

   2. Open the JDBC_Config_PowerReports.properties file for editing.

   3. Modify the existing values of the following parameters only if the database changed from the 7.0 database:

      Parameter | Value to Enter
      --- | ---
      Server | Enter the IP address or the name of the Database Server.
      SID | Enter the instance/service name of the Argus Insight data mart.
      Port | Enter the database port number.
      COGNOS_SINGLE_SIGN_ON_HEADER | Enter the header name in which Single Sign On user name will be populated by SSO solution, that is, HEADER_OAM_REMOTE_USER.

   4. Save and close the file.

5. Copy AI.ini and ArgusSecureKey.ini from the following location:

   \\<Argus_Insight_Server>\Windows

   To the following location:

   \\Cognos_10_Install_Path\C10\configuration

6. Navigate to the following folder:

   JAVA_HOME\jre\6.0\lib\security

7. Backup local_policy.jar and US_export_policy.jar files.

8. Download the policy files corresponding to the version of installed JRE.

   Note: To find the version of installed JRE, go to the JAVA_HOME and check the folder name under the JRE folder.

   For example, to install policy files of JRE version 6, execute the following steps:

   1. Go to the following URL:

      http://www.oracle.com/technetwork/java/javase/downloads/jce-6-download-429243.html

   2. Download local_policy.jar and US_export_policy.jar files in the extracted folder.

   3. Copy these jar files into the following folder:

      JAVA_HOME\jre\6.0\lib\security

   4. If the Replace Files dialog box appears, click Yes.

9. Go to IBM Cognos Administration, and restart the Cognos services.

### 8.1.4 Configuring the Cognos 10 Environment

This section describes the following tasks that you must complete to configure the Cognos 10 environment:

- Opening the IBM Cognos 10 Configuration Window

- Setting the Security Properties for Cognos 10

- Setting the Data Access Properties for Cognos 10

- Creating the Namespace for Argus Insight Authentication

- Saving the Configuration and Starting the Cognos 10 Service

#### 8.1.4.1 Opening the IBM Cognos 10 Configuration Window

You use the options in the IBM Cognos 10 Configuration screen to define environment group and logging properties, security properties, and data access properties.

To open the IBM Cognos 10 Configuration screen:

1. Click Start.

2. Navigate to All Programs > IBM Cognos 10, and then select IBM Cognos Configuration.

   The IBM Cognos Configuration screen appears.

   Note: The screens displayed during the Cognos 10 configuration are labeled either IBM Cognos 10 or Cognos 10. Both labels refer to the same Cognos configuration.

#### 8.1.4.2 Setting the Security Properties for Cognos 10

To define the security properties:

1. Open the IBM Cognos 10 Configuration screen.

2. Navigate to Security > Authentication, and select Cognos.

3. Set the Allow anonymous access? property to True.

4. Navigate to Security, and select IBM Cognos Application Firewall.

5. Set the Enable CAF validation? property to False.

#### 8.1.4.3 Setting the Data Access Properties for Cognos 10

To define the data access properties:

1. Open the IBM Cognos 10 Configuration screen.

2. Navigate to Data Access > Content Manager, right-click Content Store, and then select Delete from the menu.

   A confirmation messages appears.

3. Click Yes.

4. Navigate to Data Access, right-click Content Manager, select New resource, and then select Database.

5. Complete the New Resource - Database dialog box as follows:

   - In the Name field, enter CNTSTORE.

     This is the name of the database resource.

   - In the Type field, select Oracle database.

   - Click OK.

   You return to the IBM Cognos Configuration screen.

   The resource property for the database of the newly-created CNTSTORE resource database appears.

6. Enter the value for the Database server and port number as:

   Database_Server_Name:1521

   where:

   Database_Server_Name is the name of the server where your content store database is stored.

7. Select User ID and password, and click the icon next to it.

   The Value - User ID and password dialog box appears.

   1. In the User ID field, enter the ID for the content store database user.

   2. In the Password field, enter the password for the content store database user.

   3. In the Confirm password field, re-enter the password for verification.

   4. Click OK.

      Note: The contents store database user is created in the Cognos content store database. This user is given grants of Connect, Resource, and Create View, along with Unlimited Tablespace Grant. The character set of the Cognos content store database should only be UTF. Make sure that the content store database entry is added in the TNSNames.ora file on the Cognos 10 server.

8. In the Service name field, enter the database instance name for the Cognos 10 repository.

#### 8.1.4.4 Creating the Namespace for Argus Insight Authentication

To create the namespace for Argus Insight authentication:

1. Open the IBM Cognos 10 Configuration screen.

2. Navigate to Security, right-click Authentication, click New resource, and then select Namespace.

3. Complete the New Resource – Namespace dialog box as follows:

   - In the Name field, enter PowerReports.

   - In the Type field, enter Custom Java Provider.

   - Click OK.

   The PowerReports - Namespace - Resource Properties screen appears.

4. Set the Namespace ID property to PowerReports.

5. Set the Java class name property to JDBCPowerReports.

#### 8.1.4.5 Saving the Configuration and Starting the Cognos 10 Service

To save the configuration and start the Cognos 10 service:

1. Open the File menu, and select Save to save changes to the configuration settings.

   An information dialog box appears and lists each task as it is performed.

2. Click Close when the system completes all the configuration tasks.

3. In the IBM Cognos Configuration screen, click the Start icon to run the Cognos 10 service.

   The system begins to run the IBM Cognos 10 service.

   - If there are no problems with the configuration, the system completes the test phase and starts the IBM Cognos 10 service successfully.

   - If there are possible problems with the configuration, the system stops running the service and displays a warning message. When you click OK to acknowledge the warning message, the system opens another dialog box with more information. For example:

   At this point:

   - For more information about the warnings and errors, click Details.

   - To stop the process, click Cancel.

     If the warnings or errors are due to reasons other than mail server connection failure, cancel the process and check your configuration again.

   - To ignore the warnings and errors, and complete the process of starting the IBM Cognos 10 service, click Continue.

     For example, you may ignore warnings that the mail server cannot be reached (see the previous illustration).

4. Click Close to exit.

5. Open the File menu, and select Exit to exit from the IBM Cognos 10 configuration.

### 8.1.5 Creating Cognos Data Source (PRMART)

To create Cognos Data Source (PRMART):

1. Log in to the Cognos 10.

   The IBM Cognos 10 home page appears.

   Note: If your security settings on the server do not permit you to view the Cognos connection, add the site URL (http://Cognos_10_ Server/cognos10) to the list of local intranet sites.

2. Under Administration section, click Administer IBM Cognos content.

   The IBM Cognos Administration screen appears.

3. Click the Configuration tab.

4. Click Data Source Connections.

5. Click New Data Source icon.

   The Specify a name and description - New Data Source Wizard screen appears.

6. Enter the Name and Description of the data source, and click Next.

   The Specify the connection - New Data Source Wizard screen appears.

7. Specify parameters for the connection, and click Next.

8. On the Configuration tab:

   1. In SQL *Netconnect string: field, enter the connection string.

      For example,

      (DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=TCP)(HOST=<hostname>)(PORT=<Port>)))(CONNECT_DATA=(SERVICE_NAME=<Service Name>)))

   2. In the Signon section, select User ID check box, and enter details in the User ID, Password, and Confirm password fields.

   3. In the Testing section, click Test the connection...

9. Click Next, and specify the commands for connection.

   For more information on Cognos commands, refer to Argus Insight Extensibility Guide > Section 5.3.2 Applying Argus Data Security and Section 5.3.3 Applying Enterprise Security.

10. Click Finish.

    The PRMART data source is created.

### 8.1.6 Configuring Cognos Security

This section includes the following topics:

- Activating the PowerReports Namespace

#### 8.1.6.1 Activating the PowerReports Namespace

To activate the PowerReports namespace:

1. Open the Cognos 10 configuration.

2. Click Start > All Programs > IBM Cognos 10, and then select IBM Cognos Configuration.

   The IBM Cognos Configuration screen appears.

3. Navigate to Security > Authentication, and then select Cognos.

   The Cognos - Namespace - Resource properties screen appears.

4. Set the Allow Anonymous access? property to False.

5. From the File menu, select Save.

6. From the Actions menu, select Restart to restart the Cognos 10 service.

   The status information about each task being performed during the restart appears.

   During the Cognos service restart, a warning message may appear.

7. Process any warning message as follows:

   1. Click OK.

   2. To obtain more information about the warning, click Details.

      Depending on the type of warning:

      — To ignore the warning and continue with the process of restarting the IBM Cognos 10 service, click Continue.

      For example, you may want to ignore a warning that the connection to the mail server failed.

      — To stop the restart process, click Cancel.

      If the warnings are due to reasons other than a mail server connection failure, you should stop the process, check your configuration, and then restart the IBM Cognos 10 service.

8. Wait until the all the configuration tasks are processed and the status for each task appears.

9. Click Close to exit the Cognos configuration.

   Note: Make sure that you remove the Everyone user group from the Directory Administrator and System Administrator roles of Cognos. Before doing this, make sure that you have a valid user as part of the System Administrator role in Cognos. If you have not added any user as part of the System Administrator role in Cognos, then you have to add Everyone user group in System Administrator roles of Cognos again. To add the Everyone user group in the System Administrator role of Cognos: Connect to the Content Store database as the content store user. Navigate to the following folder: Cognos_10_Install_Path\C10\configuration\schemas\content Run the AddSysAdminMember.sql script. Commit the changes.

### 8.1.7 Configuring Roles and Permissions

To configure enterprise specific roles and permissions:

1. Log in to the Cognos 10 Server as an administrator user.

2. Create an Enterprise-specific role for each enterprise. For example:

   - ENT1_Role for Enterprise 1

   - ENT2_Role for Enterprise 2

3. Add all users belonging to the specific enterprises to their respective roles. For example:

   - Add ENT1_user to ENT1_Role

   Note: If a user is a member of multiple enterprises, the user must be added to the roles for all the enterprises.

4. Create a folder in Public Folders for each enterprise. For example:

   - ENT1_Folder for Enterprise 1

   - ENT2_Folder for Enterprise 2

5. Select the required permissions of the Enterprise-specific role for the Enterprise-specific folder. For example,

   - Add ENT1_Role to the ENT1_Folder and provide the Read, Write, Execute, and Traverse permissions on this folder.