Cognos Series 7 with Active Directory

[alvinator]

Hi, I am new to this discussion group. Hopefully, you guys will be able to help me out.

My questions have to do with deploying Cognos Series 7 using Active Directory as directory server.

Before, I ask the question, I should explain the end objective of this implementation
1. Two separate and distinct Cognos environment (Pre-Deployment and Production)
2. Each environment (ticket server, Power Play Enterprise Server, IWR, Upfront) is on one W2K server
3. Currently Cognos environment use NDS with no security. We plan to deploy Series 7 using Active Directory for security
4. Operation, an operator global group, will maintain the daily Cognos operations.
-publish new cubes
-publish new reports
-change access rights to cubes and reports
5. Operation does not have right to update anything to the Active Directory.

Here are my questions
1. Does the Cognos Server have to be on a Domain Controller?
-If yes, it goes against our belief that a "Domain Controller should not host any applications"
2. Active Directory's Schema is being updated by Congos as security right on cubes and reports being updated.
-What happens to the schema entries when the cubes/reports are no longer in use?
3. Security Concern - Operation a normal user group have ways to update the Active Directory schema through the Cognos Access Manager/Cognos API
-Is this a good practice?
4. How do maintain a separate Production and Pre-Deployment environment, if both of them use the same directory?

One of my initial ideas is to have three different Active Directory where the three AD trust each other.
1. Production Network AD
-contains all user accounts and groups definition
2. Cognos Production AD
-does not contain user or group information
3. Cognos Pre-Produciton AD
-does not contain user or group information

Does anyone know how people implement Cognos with Active Directory?
Anyone think of any problems with my three AD approach?
Finally, any suggestions?

Thanks a bunch everyone

 

[gjruppert]

I can't answer all of of you questions but I know that
you cannot have Series 7 and pre-Series 7 running at
the same time on the same machine.

If you've installed Series 7 there should be some documentation with upgrade procedures inculded. They are pretty explicit on how to run old and new versions on the same box.

I do know a few people who use AD instead of Netscape and they don't seem to have any problems.

 

[Guest_imported]

Hello Alvinator,

I was wondering if you had find a way to separate the security for pre-deployment and production using Active directory?
If yes did you create different OU or is everything handle under the same OU?

We are having the same kind of issue overhere. We are planning to setup a Dev test and prod environment and would like to be able to handle security separatly for each environment.

I contacted COGNOS and they don't seem to know what is the best way to do it.


thanks