Troubleshooting
Problem
Cognos Analytics returns the 403 Forbidden error when editing reports. This error is displayed in a pop-up window each times. this can be resolved by changing the Siteminder configuration.
Symptom
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head>
<title>403 Forbidden</title> </head><body> <h1>Forbidden</h1> <p>You
don't have permission to access /c11/bi/v1/users/~/mrus/data on this
server.</p> </body></html>
Cause
Siteminder is blocking bad URL characters in Cognos analytics.
Environment
Cognos Analytics is installed in linux and setting up the gateway with Apache webserver, single sign on is enabled with Siteminder
Diagnosing The Problem
From Apache web server log, "PUT/c11/bi/v1/users/~/mrus/data HTTP/1.1" 403 229
No issue from direct dispatcher URL, domain:9300/bi/
This issue is only showed within gateway URL, domain:80/ibmcognos/bi/
Resolving The Problem
Cognos Analytics, now requires the following;
A: The ~ character has to be removed from the Siteminder ACO BadUrlChars list.
B: The Siteminder Web Agent needs to allow the PUT, GET, POST and DELETE verbs.
C: The Siteminder Web Agent need to select Allow Access, check enabled
D: The WebAppClientResponse needs to be configured in the ACO to return a response.json file
Created a file called response.json and placed it in apache httpd location with the following line
{"origin":"siteminder","redirectUrl":"https://domain:port/sm/bi/completeAuth.jsp"}
E: modify webagent.conf in siteminder configuration file and add the following entry
WebAppClientResponse="Resource=/c11/bi/v1/*|Method=GET,POST|Status=401|Body=/apache/docroot/response.json|Content-Type=application/json|Charset=us-ascii"
WebAppClientResponse="Resource=/c11/bi/v1/*|Method=GET,POST|Status=401|Body=/local/web/apache22/0/htdocs/ws1/response.json|Content-Type=application/json|Charset=us-ascii"
Was this topic helpful?
Document Information
Modified date:
15 June 2018
UID
swg22002071