Planning Analytics

Planning Analytics

Get AI-infused integrated business planning

 View Only
  • 1.  Authenitication Security solutions for Planning Analytics Local running on RHEL servers

    Posted Fri August 21, 2020 12:25 PM
    Hi,

    It seems to me that there are no authentication security solutions for servers running on Linux.
    Other that the user security managed within PAL, can i set-up the environment to use Integrated login or CAM security ?

    Regards,
    Edi

    ------------------------------
    Eduard Mocanu
    ------------------------------

    #PlanningAnalyticswithWatson


  • 2.  RE: Authenitication Security solutions for Planning Analytics Local running on RHEL servers

    Posted Mon August 24, 2020 08:28 AM
    Hi Eduard,

    What is the version of Planning Analytics you are using? Also, if you're using CAM security you would have Cognos Analytics as well and what is the version?

    There's always authentication available. Best thing is to view our supported environment for the versions you're using. https://www.ibm.com/software/reports/compatibility/clarity/softwareReqsForProduct.html

    You can search for Planning Analytics then refine your selection. Once the Compatibility Report has been created you want to go under the Supported Software tab and it will let you know what security options there are.
    Kind Regards,

    ------------------------------
    Robert Vautour
    Technical Client Advocate
    IBM Planning Analytics and Cognos
    ------------------------------



  • 3.  RE: Authenitication Security solutions for Planning Analytics Local running on RHEL servers

    Posted Mon August 24, 2020 10:25 AM
    Hi Robert,

    Thank you. I am not using CAM, but based on the compatibility report, it seems that it is the only way to implement AD integration for user authentication for PAL (2.09) instances running on LINUX.

    CAM does note come bundled with the Planning Analytics Local aplication packages. It seems to me that it is bundled in the Cognos Analytics package.
    In order to use CAM for PAL login management, do i have to own a license for Cognos Analytics also ?

    Regards,
    Edi

    ------------------------------
    Eduard Mocanu
    ------------------------------



  • 4.  RE: Authenitication Security solutions for Planning Analytics Local running on RHEL servers

    Posted Mon August 24, 2020 03:29 PM
    Hi Eduard,

    PAW has two modes of authentication on Linux: TM1 native and CAM.

    My understanding is that CA for CAM authentication should be available to you where you go to download the products. You can install CA and only use the authentication piece. We have a supporting program where if you use CA for authentication then it's at no extra cost.

    Kind Regards,

    ------------------------------
    Robert Vautour
    Technical Client Advocate
    IBM Planning Analytics and Cognos
    ------------------------------



  • 5.  RE: Authenitication Security solutions for Planning Analytics Local running on RHEL servers

    Posted Tue August 25, 2020 02:43 AM
    Can you point me to the specific install and configuration documentation for this problem ?

    All i found in the IBM knowledge center are instructions on how to install CA and how to integrate PAL with CA.
    However i don't want to install CA on my servers as some of the requirements imply installing third party software not approved by my company, i just want to install only the authentication piece of CA not the whole software.


    ------------------------------
    Eduard Mocanu
    ------------------------------



  • 6.  RE: Authenitication Security solutions for Planning Analytics Local running on RHEL servers

    Posted Wed August 26, 2020 07:40 AM
    Hi Eduard,

    Based on your comments I'm assuming that your TM1 database is also running on Linux.  Authentication based on LDAP is supported when the TM1 database is running on Linux.  However, Integrated Logon will not work with the TM1 database or TM1Web on Linux.  Please see:

    https://www.ibm.com/support/knowledgecenter/SSD29G_2.0.0/com.ibm.swg.ba.cognos.tm1_inst.2.0.0.doc/c_integratedlogin_nc0007.html

    If you want to have SSO in the environment and your TM1 database must be on Linux then your only option is CAM.  It's not possible to install only the CAM (authentication) part of Cognos.

    ------------------------------
    Stuart King
    IBM Planning Analytics Offering Manager
    ------------------------------



  • 7.  RE: Authenitication Security solutions for Planning Analytics Local running on RHEL servers

    Posted Fri August 28, 2020 07:25 AM
    Hi Stuart,

    The compatibility report (https://www.ibm.com/software/reports/compatibility/clarity/softwareReqsForProduct.html) seems to suggests otherwise: PAL does not support LDAP on Linux, only by linking PAL with CA trough CAM it's possible to use LDAP.

    However, if you can point me to a solution, i would gladly give it a try.

    Regards,
    Edi

    ------------------------------
    Eduard Mocanu
    ------------------------------



  • 8.  RE: Authenitication Security solutions for Planning Analytics Local running on RHEL servers

    Posted Fri August 28, 2020 08:28 AM
    Hi Eduard,

    I was not aware this limitation was documented in our supported environments page.  Given this limitation I think CAM is the only option to integrate with Active Directory (or any other LDAP).  I was aware that CAM is the only option if TM1 is on Linux and you want Single Sign On enabled.    




    ------------------------------
    Stuart King
    IBM Planning Analytics Offering Manager
    ------------------------------