Microsoft SQL Server Data Sources
Depending on the types of Microsoft SQL Server data sources you are using, there are considerations you should keep in mind when defining some types of authentication.
Authentication Using IBM Cognos Service Credentials
You should not use a Microsoft Windows local system account for the IBM Cognos server logon with a Microsoft SQL Server OLE DB data source.
Authentication Using an External Namespace
You can configure IBM Cognos software to use a Microsoft Active Directory namespace, where users are prompted for credentials as part of the IBM Cognos logon process. You can configure IBM Cognos software to use these same credentials automatically when accessing the Microsoft SQL Server data source. The data source connection for Microsoft SQL Server must be configured for An external namespace and that namespace must be the Active Directory namespace.
You can configure IBM Cognos software to use a Microsoft Active Directory namespace and to authenticate users for IBM Cognos software using Kerberos authentication and delegation. You can configure IBM Cognos software to automatically authenticate the user when accessing the Microsoft SQL Server data source. The following configuration is required:
- The IBM Cognos gateway must be installed on an IIS Web server that is configured for Windows Integrated Authentication.
- Content Manager, the report server (Application Tier Components), IIS Web server, and the data source server (Microsoft SQL Server) must belong to the same Active Directory domain.
- The data source connection for Microsoft SQL Server must be configured for An external namespace and that namespace must be the Active Directory namespace.
- The report servers are trusted for delegation.
For more information about installation options for the gateway and Content Manager, as well as configuring the namespace and delegating trust, see the Installation and Configuration Guide.