Author Topic: TM1 Web  (Read 483 times)

Offline Smiler.Mistry

  • Full Member
  • ***
  • Join Date: Apr 2018
  • Posts: 5
  • Forum Citizenship: +0/-0
TM1 Web
« on: 11 Apr 2018 05:38:20 am »
Hello

I am currently looking at using 10.2 TM1 web, hopefully planning to use it going forward. Now when the SSL updates came along back in Nov 2016, I did the TM1 components that we use, just didn't do the components that we weren't using. Now I have updated the SSL for tm1 web, logged in onto the instances via TM1 web, all fine using SSO, but when I log out, I am getting this message:

 "DPR-ERR-2079 Firewall Security Rejection. Your request was rejected by the security firewall."
"CAF rejection details are available in the log. Please contact your administrator."

Now it works with native security, just not sso.

Could anyone advise what can be done to solve this issue? Anyone come across it?

Thanks
Mithun


Offline smiley

  • Community Leader
  • *****
  • Join Date: Oct 2005
  • Posts: 212
  • Forum Citizenship: +12/-0
Re: TM1 Web
« Reply #1 on: 11 Apr 2018 05:45:54 am »
That is your BI server´s application firewall giving that message.
Add the TM1 server name to the BI server application firewall rule.

Offline Smiler.Mistry

  • Full Member
  • ***
  • Join Date: Apr 2018
  • Posts: 5
  • Forum Citizenship: +0/-0
Re: TM1 Web
« Reply #2 on: 11 Apr 2018 07:10:31 am »
Smiley,

BI server application firewall rule  -  Could you define this please if poss, I am guessing you are refering to the BI server - cognos config - IBM Cognos Application Firewall -  Valid domain or hosts?

Thank you

Mithun
« Last Edit: 11 Apr 2018 07:15:00 am by Smiler.Mistry »

Offline smiley

  • Community Leader
  • *****
  • Join Date: Oct 2005
  • Posts: 212
  • Forum Citizenship: +12/-0
Re: TM1 Web
« Reply #3 on: 11 Apr 2018 07:14:28 am »
I would suggest to add TM1 servername, and TM1 servername.company.com
You are free to add *.company.com if security is not that much of a concern.


Offline Smiler.Mistry

  • Full Member
  • ***
  • Join Date: Apr 2018
  • Posts: 5
  • Forum Citizenship: +0/-0
Re: TM1 Web
« Reply #4 on: 11 Apr 2018 08:36:54 am »
Smiley,

Apologies, this hasnt worked for me. Tried multiple options.


Thank you

Offline smiley

  • Community Leader
  • *****
  • Join Date: Oct 2005
  • Posts: 212
  • Forum Citizenship: +12/-0
Re: TM1 Web
« Reply #5 on: 11 Apr 2018 09:11:56 am »
Can you test what happens if you disable the Cognos BI firewall completely?

Offline Smiler.Mistry

  • Full Member
  • ***
  • Join Date: Apr 2018
  • Posts: 5
  • Forum Citizenship: +0/-0
Re: TM1 Web
« Reply #6 on: 11 Apr 2018 09:43:29 am »
Smiley,

Yes, if I disable the CAF, it works fine. I am suprised why my servername.company.com isnt working then.

Other thing that I need to mention is everytime I go onto the TM1web, at the top right hand corner, it is blank where my name as part of (SSO) would appear.

Thanks
« Last Edit: 11 Apr 2018 10:31:09 am by Smiler.Mistry »

Offline smiley

  • Community Leader
  • *****
  • Join Date: Oct 2005
  • Posts: 212
  • Forum Citizenship: +12/-0
Re: TM1 Web
« Reply #7 on: 12 Apr 2018 03:02:36 am »
If your tm1web is separated from your tm1 data server, make sure to have both added to the Bi firewall.

Offline Smiler.Mistry

  • Full Member
  • ***
  • Join Date: Apr 2018
  • Posts: 5
  • Forum Citizenship: +0/-0
Re: TM1 Web
« Reply #8 on: 11 May 2018 06:12:48 am »
Hello

Refering back to the issue I previously had, the security firewall when I logout of TM1web is still an issue and the SSO name doesnt appear on the right hand side when I am in TM1 Web but also configured a new environement and recently added tm1 web onto the new server.

But when I try to use the tm1 web, I get this error
   The file "portal/variables_TM1.xml" could not be opened.

Now I infrastructure I have in place is

TM1 server - S4489
BI server - S8842V

TM1 WEB BEING installed on the BI SERVER.

Please can anyone advise. I have done what majority of the posts say that is available.
Still hasn't worked.

Thank you once again


« Last Edit: 14 May 2018 03:03:22 am by Smiler.Mistry »

 


       
Twittear