Product:
Cognos Controller 10.3.1
Microsoft Windows 2008 R2 Server
Cognos Analytics 11.0.8

Issue:
After installation of a interim fix on top of a Cognos Controller 10.3 installation, some of the Cognos Controller windows services are missing.

Solution:
Here instructions on how to install a upgrade, on top of Cognos Controller.
http://www-01.ibm.com/support/docview.wss?uid=swg22001683

After the installation check that all Cognos windows services are in place.
ctrl1

If your are missing IBM Cognos Controller Java Proxy you should run this line from cmd:
sc create “IBM Cognos Controller Java Proxy” binpath= “d:\Program Files\ibm\cognos\ccr_64\server\CCRProxy.exe” DisplayName= “IBM Cognos Controller Java Proxy” depend= RpcSs start= demand

if you are missing IBM Cognos Controller User Manager you should run this line from cmd:
sc create frLicServer binpath= “d:\Program Files\ibm\cognos\ccr_64\server\FrLicServer.exe” DisplayName= “IBM Cognos Controller User Manager” depend= RpcSs start= auto

More Information:
http://www-01.ibm.com/support/docview.wss?uid=swg21680801
http://www-01.ibm.com/support/docview.wss?uid=swg21680788

http://www-01.ibm.com/support/docview.wss?uid=swg21608353

Product:
Planning Analytics 2.0.3
IBM Cognos TM1 Applications
Microsoft Windows 2016 server

Issue:
When publishing a updated TM1 application in Performance Modeler to the TM1 Applications web (contributor web portal), the application is deleted.

Error can be:
[DeployApplicationThread:9b649fa9-1cf1-46f7-9bae-5f2fde393121] ERROR () com.ibm.cognos.pmpsvc.PMPService – deployApplication Throwable
com.ibm.cognos.pmpsvc.PMPSVCException: An exception occurred on the server. Please contact your system administrator. :com.ibm.cognos.pmpsvc.handler.PMPTM1Exception: TI_NODE_NOT_EXIST[CAMID(“CDS:u:uid=roger,ou=people,ou=eu”) | }tp_modify_application_attribute | }ElementAttributes_}tp_applications, BounceMode ] :EXCEPTION

Solution:
There is a chance that there are “left-overs” from a old application with similar name in the portal, therefor the application is deleted before a new is created. The first time you publish a TM1 application to a new PMPSVC (contributor) web server, you need to ensure there is not a old application there since a previous crash.

Before republishing a old TM1 10.2.2 application to a new PA 2.0.3 server do this;
— stop the TM1 instance windows service.
— erase the log folder for the tm1 instance.
— copy a new fresh data folder from the TM1 10.2.2 application.
— surf to http://paservername.domain.com:9510/pmpsvc and remove the old application with the same name from the list of applications. You do this from the TM1 applications configuration page. You must be ADMIN in the TM1 instance you try to remove.
Check in the file TM1InstallRoot\webapps\pmpsvc\WEB-INF\configuration\fpmsvc_config.xml that the application is not listed any more.
— stop the IBM Cognos TM1 windows service (tm1web and pmpsvc service).
— surf to Cognos Analytics http://caservername.domain.com/ibmcognos and go to Team Content – IBM Cognos TM1 Applications – My Applications. Remove the link to your published application. PM can not publish a application if there already exist on with the same name.
— start the IBM Cognos TM1 Windows service (pmpsvc service).
— start the TM1 instance, that you had issues with.
— Surf to http://paservername.domain.com:9510/pmpsvc and add the TM1 instance to the portal, and make it a application you can work with from PM tool.
— Log into Performance Modeler as a ADMIN in your TM1 application. Open up and see the application you have built before, validate the application first. Then try to publish it again.

If you have a working TM1 instance, then above should solve the issue, because you start from a fresh working data folder. There should not be any corrupt files you need to delete. Surf to http://paservername.domain.com:9510/pmpsvc to see if it worked.

More Information:
https://www.ibm.com/support/knowledgecenter/en/SS9RXT_10.2.2/com.ibm.swg.ba.cognos.tm1_inst.10.2.2.doc/c_tm1_inst_contrib_strtlnk.html

If you Run the }tp_admin_delete_all process from Architect, then all applications can be erased, and you may have to recreate them.

Product:
Planning Analytics 2.0.3
IBM Cognos TM1 Applications
Microsoft Windows 2016 server

Issue:
When user inside Cognos TM1 Applications (contributor) are reporting there numbers. Then they click on X to close the window, they get a error message: 54: ObjectNameInvalid, when they press OK the application exits as it should.

Only when you use CAM authentication.

Suggested Solution:
You are using Internet Explorer in wrong emulation mode.

Press F12.
Select Emulation.
Change Document mode to Edge or 10, from 11.
Go into the node again and test.

To get to TM1 Applications you surf to http://paservername.domain.com:9510/pmpsvc

This error can also be found if the name of the TM1 application is to long, so the total length of the temp files BLB is more than 255 characters on the Windows server. During start of the Contributor session a blb file is created with the user name as filename in the datafiles folder, if this file is not created (due to its name is to long), when you exit your Planning Analytics Contributor application you get above error, because TM1 can not find the file and erase it.  All work, but you get a irritating error.

Solution is to have TM1 instances installed with short names like d:\tm1server\112\datafiles or similar.

You can also find in the tm1server.log error like this NAME INVALID error and that causes TM1.Blob FileCreateOpenDelete.

Product:
Cognos Controller 10.3.1
Microsoft Windows 2012 R2 Server

Issue:
Error when you try to login to Cognos Controller client, after you have selected the database to use, and you have been logged in as a CAM user.

Error message:
System.Web.Services.Protocols.SoapException: Server was unable to process request. —> System.Exception: invalid_user

at Cognos.Controller.Proxy.SoapExtension.ServerExtension.ValidateCAMUser(SoapMessage& message)

at Cognos.Controller.Proxy.SoapExtension.ServerExtension.ProcessMessage(SoapMessage message)

at System.Web.Services.Protocols.SoapMessage.RunExtensions(SoapExtension[] extensions, Boolean throwOnException)

at System.Web.Services.Protocols.SoapServerProtocol.CreateServerInstance()

at System.Web.Services.Protocols.WebServiceHandler.Invoke()

at System.Web.Services.Protocols.WebServiceHandler.CoreProcessRequest()

— End of inner exception stack trace —

at Microsoft.VisualBasic.ErrObject.Raise(Int32 Number, Object Source, Object Description, Object HelpFile, Object HelpContext)

at Cognos.Controller.Common.RaiseErrCli.RaiseError(Int32 lErrNo, String sErrSource, String sErrDesc, String sErrHelpFile, Int32 lErrHelpContext)

at Cognos.Controller.Direct.ServerInfoD.GetServerInfo()

at CCR.AppContext.InitServerInfo()

at CCR.AppContext.Login()

Solution:
Login to your windows computer as a user who have rights to use Cognos Controller.
Then it will work. This user is not added inside Cognos controller, and therefor can not login.

Other solutions:
http://www-01.ibm.com/support/docview.wss?uid=swg21692450

Product:
Cognos Controller 10.3.1
Microsoft Windows 2012 R2 Server

Issue:
An error occurred while trying to access the server when you start the Cognos Controller client and try to login.

Error message:
System.Web.Services.Protocols.SoapException: Server was unable to process request. —> System.ArgumentException: Requested registry access is not allowed.

at Microsoft.VisualBasic.ErrObject.Raise(Int32 Number, Object Source, Object Description, Object HelpFile, Object HelpContext)

at ControllerServerCommon.RaiseErrSrv.RaiseError(String sUser, Int32 lErrNo, String sErrSource, String sErrDesc, String sErrHelpFile, Int32 lErrHelpContext)

at FrServerB.LocalConnectionBusiness.SetSelectDb(String sGuid, String sUser, Boolean bSelectDb)

at FrServerB.ConnectionBusiness.SetSelectDb(String sGuid, String sUser, Boolean bSelectDb)

— End of inner exception stack trace —

at Microsoft.VisualBasic.ErrObject.Raise(Int32 Number, Object Source, Object Description, Object HelpFile, Object HelpContext)

at Cognos.Controller.Common.RaiseErrCli.RaiseError(Int32 lErrNo, String sErrSource, String sErrDesc, String sErrHelpFile, Int32 lErrHelpContext)

at Cognos.Controller.Direct.ConnectionDirect.SetSelectDb(Boolean bSelectDb)

at CCR.AppContext.SelectDb()

at CCR.AppContext.Login()

Solution:
In the IIS manager change the user account used by the Application pool that Controllerserver is using.

Start Internet Information Servers Manager
Go to Application pools
Select NET v4.5
Click on Advance Settings
Change Application pool identity to LocalSystem from ApplicationPoolIdentity
Click OK
Restart IIS services.

More information:
http://www-01.ibm.com/support/docview.wss?uid=swg21691747

Product:
Planning Analytics 2.0.3
Planning Analytics Workspace  (ipa_workspace_local_2.0.29.1080.2.zip)
Microsoft Windows 2016 server
Red Hat Linux server

Problem:
When inside PAW, and you try to expand a node of a TM1 instance, you get a error message.

Error:
Session can not be established for server proven_techniques 500 (internal server error) “code” “explorer” “refID” “message” .”Failed to get children for server cubes”. “cause”.”java.net.NoRouteToHostException: No route to host”.

paw39
Solution:
In one case this is because of DNS and routing problems in network. The PAW server and PA server have both two network cards, and can only communication on one of them.
You must in TM1S.CFG tell Tm1 instance what network card it should use.

Add the line
IPAddressV4=”10.200.30.40″
in TM1S.CFG and restart the TM1 instance.

Replace the ip number with the correct ip address of your Planning Analytics server.
Important that the IP address are inside ” double quotation mark.

Product:
Planning Analytics Workspace
Planning Analytics 2.0.3
Microsoft Windows 2016 Server

Problem:
When user surf to the PAW, they are not administrator and can not add other users.
Surf to http://pawservername.domain.com
Click on the user — and see there is not a option for Administration.
This is a new PAW setup with CAM authentications.

Solution:
The first users that you add in a TM1 instance as ADMIN will be admin in paw when you login to paw. Therefor you must add CAM users to a native TM1 instance first.

Open up a Tm1 application in Native mode. Like Proven_Techniques.
Open C:\Program Files\ibm\cognos\tm1_64\samples\tm1\Proven_Techniques\tm1s.cfg in notepad++.
Add the lines;
IntegratedSecurityMode=2
ServerCAMURI=http://caservername.domain.com:9300/p2pd/servlet/dispatch
ClientCAMURI=http://caservername.domain.com:80/ibmcognos/bi/v1/disp
Close TM1 architect.
Update the C:\Users\%username%\AppData\Roaming\Applix\tm1\tm1p.ini file with
AllowImportCAMClients = T
CognosGatewayURI = http://caservername.domain.com:80/ibmcognos/bi/v1/disp

Start PAW administration console and surf to http://pawservername.domain.com:8888
Setup like this (change to your servers name);
TM1 Admin Server URI: https://paservername.domain.com:5898
TM1 Application Server Gateway URI: http://paservername.domain.com:9510
Authentication Mode: TM1
TM1 Login Server URI: https://paservername.domain.com:5011
Click validate and update.

(This TM1 instance you point out with the HTTPport number is the instance that will define the first ADMIN in paw, even if you use security mode 5).

Start TM1 Architect and login to Proven_Techniques as Admin.
Go to Security – Client/Groups. From menu Clients select Add New Client.
Add your CAM user from your AD domain, that you want to be ADMIN in paw.
Mark the user to be ADMIN in TM1 Architect. Click OK.
Exit Tm1 Architect.

Open C:\Program Files\ibm\cognos\tm1_64\samples\tm1\Proven_Techniques\tm1s.cfg in notepad++.
Change; IntegratedSecurityMode=5
Save the file and restart the TM1 instance.
Now TM1 instance is using CAM authentication.

Update PAW admin console by surf to http://pawservername.domain.com:8888
TM1 Admin Server URI: https://paservername.domain.com:5898
TM1 Application Server Gateway URI: http://paservername.domain.com:9510
Change to Authentication Mode: CAM
Set IBM Cognos BI Gateway URI: http://caservername.domain.com:80/ibmcognos
Set IBM Cognos BI Dispatcher URI: http://caservername.domain.com:9300/p2pd/servlet/dispatch
Set IBM Cognos BI Authentication Namespace ID: AD
Click Validate and update.
Click on status tab – wait until CPU usage is below 1%.

Surf to http://pawservername.domain.com
Login as the CAM user you have given ADMIN rights in Proven_Techniques.
This user should now have a ADMINISTRATOR option under its name.

The list will only show name for people who have already try to login.

More Information:
https://www.ibm.com/support/knowledgecenter/en/SSD29G_2.0.0/com.ibm.swg.ba.cognos.tm1_prism_gs.2.0.0.doc/c_paw_administration_top_level.html

Product:
Planning Analytics 2.0.3 (Tm1)
Cognos Analytics 11.0.9 (Cognos BI)
Microsoft Windows 2012 R2 Server

Issue:
When a user is added to a AD group, that then is added to Cognos group, and the Cognos Group is added in the TM1 application as a group. And that group is given access to cubes and dimensions inside TM1. When user login to TM1WEB, he can not see the cubes.
If you look inside TM1 Architect, there is no X for him under the Cognos\group. So Cognos have not understand that he belongs to a AD group.

Solution:
IBM Cognos service run as local system in Windows server.
The Active Directory is setup to allow user to login but not to see other users details, like groups.

ad1

You need to at Namespace – Resource Properties – Binding credentials enter the name and password of a user that have the rights to READ the Active Directory and see what groups a user belongs to.

ad2

When you right click on namespace in cognos configuration and select test, you will first validate the user and there after try to get a list of the groups the user belongs to.

ad3

You need the binding credentials if AD is not configured to allow anonymous bind.

ad4

In TM1 you can add the Cognos group or the AD group direct into TM1 Architect under security – client/groups. Click on Groups and Add New Group. Click on your namespace and search for the group you want to add. When it is added it will look similar, as in the picture above.
If a user is successful to login and belongs to a group, there will be a X under that group for that user. User AD/roger can we see belongs to the Cognos group “TM1 users”.

ad5

Then you have to, inside your TM1 application, give the groups the access they need to the different cubes and dimensions.

More Information:
https://www.ibm.com/support/knowledgecenter/SSEP7J_10.2.2/com.ibm.swg.ba.cognos.inst_cr_winux.10.2.2.doc/t_inst_activedirectoryserver_process.html

https://www.ibm.com/support/knowledgecenter/en/SS9RXT_10.2.2/com.ibm.swg.ba.cognos.tm1_dg_dvlpr.10.2.2.doc/c_controllingaccesstotm1objects_n60007.html

https://www.ibm.com/support/knowledgecenter/en/SS9RXT_10.3.0/com.ibm.swg.ba.cognos.prfmdl_ug.10.3.0.doc/c_prfmdl_setting_up_security.html

Product:
Cognos Analytics 11.0.9
Microsoft Windows 2012 R2 Server

Issue:
Does Cognos BI send a mail when you click on TEST of notifications i Cognos Configuration?

Solution:
Yes, cognos configuration test mail function, will send a mail to the default sender with the default sender as sender.
If you enter a valid mail address at the company as the default sender, and click test, that person will have a mail.

Under Data Access – Notifications set it up like this:
SMTP mail server: smtpserver.company.com:25
Account and password: (can be blank if the SMTP server allow resend of anonymous mail)
Default sender: roger@company.com (use the mail address to a person at the company)
SSL Encryption Enabled: False

More information:
http://www-01.ibm.com/support/docview.wss?uid=swg21445621
http://www-01.ibm.com/support/docview.wss?uid=swg21339824

Product
Planning Analytics 2.0.5
Microsoft Windows 2012 R2 Server

Problem
How to avoid the time out for users of TM1?

Solution

CA11 (Cognos BI) should have the lowest time out, e.g. 3600 seconds as default. This gives
CA Session timeout  < PAW Session Time-Out , should then have SessionTimeout= 60m and ProxyTimeoutSeconds=900 (15 min)
< TM1 Web in \tm1_64\webapps\tm1web\WEB-INF\web.xml at <session-timeout>70</session-timeout> & TM1 Web Applications timeout in Cognos Configuration > TM1 Applications set to 70 for Session timeout (default is 60 min).
< TM1 Database timeouts (tm1s.cfg settings IdleConnectionTimeOutSeconds= 4800, and a Rest-API connection HttpSessionTimeout= 80.)
< IIS timeout settings on the Windows server for CA gateway.

(below text copied from the web)

IIS server:
HTTP Response Headers at the ibmcognos/samples/images level – set common headers to Expire Web Content to After 5 days.
At the Default Web Site – Limits – set Connection time-out (in seconds): to 900.

to1

At Application Pools – ICAPool – Advanced Settings, change Idle Time-out (minutes) to 90.

TM1 SERVER IDLE:
Default: 900 seconds ( 15 minutes )
Location: tm1s.cfg
Setting: IdleConnectionTimeOutSeconds=900
https://www.ibm.com/support/knowledgecenter/en/SSD29G_2.0.0/com.ibm.swg.ba.cognos.tm1_inst.2.0.0.doc/c_idleconnectiontimeoutseconds_tm1.html

TM1 SERVER REST/HTTP:
Default: 20 minutes
Location: tm1s.cfg
Setting: HTTPSessionTimeoutMinutes=20
https://www.ibm.com/support/knowledgecenter/en/SSD29G_2.0.0/com.ibm.swg.ba.cognos.tm1_inst.2.0.0.doc/c_httpsessiontimeoutminutes.html

CAM SECURITY:
Default: 3600 seconds ( 60 minutes )
Location: Cognos Configuration > Security > Authentication
Setting: Inactivity timeout in seconds
https://www.ibm.com/support/knowledgecenter/en/SSEP7J_10.2.0/com.ibm.swg.ba.cognos.ig_mob.10.2.0.doc/t_mig_sec_st_cam.html

TM1 WEB (version 10.2.x):
Default: 20 minutes
Location: D:\Program Files\ibm\cognos\tm1_64\webapps\tm1web\WEB-INF\web.xml
Setting: <session-timeout>20</session-timeout>
https://www.ibm.com/support/knowledgecenter/en/SSD29G_2.0.0/com.ibm.swg.ba.cognos.tm1_prism_gs.2.0.0.doc/t_paw_troubleshooting_web_timeout.html

TM1 WEB (2.0.5 and earlier):Default: 20 minutes
Location: \tm1_64\webapps\tm1web\WEB-INF\web.xml
Setting <session-timeout>20</session-timeout>Setting the TM1 Web session timeout

TM1 WEB (2.0.6 and later):Default: 20 minutes
Location: \tm1_64\webapps\tm1web\WEB-INF\configuration\tm1web_config.xml
Setting <add key="HttpSessionTimeout" value="60" />Setting the TM1 Web session timeout

PMPSVC:
Default: 60 minutes
Location: Cognos Configuration > TM1 Applications
Setting: Session timeout (min)
( this setting updates the \tm1_64\webapps\pmpsvc\WEB-INF\configuration\fpmsvc_config.xml session-timeout )
https://www.ibm.com/support/knowledgecenter/en/SSD29G_2.0.0/com.ibm.swg.ba.cognos.tm1_inst.2.0.0.doc/t_tm1_inst_contrib_c8security_session_timeout_vals.html

PMHUB / PLANNING ANALYTICS FOR EXCEL:
Default: 3600 seconds ( 60 minutes )
Location: http://localhost:9510/pmhub/pm/admin , Configurations > PMHub Session
Setting: MaxInactivityTimeout

PAW (later versions only) on Windows:
Default: 120 seconds, how long paw waits for response on back end systems like tm1 instances.
Location: d:\ibm\paw\config\paw.ps1
Setting: $env:ProxyTimeoutSeconds=”900″

$env:SessionTimeout The amount of time a Planning Analytics Workspace login session can go unused before it is no longer valid. Specify a positive integer followed by a unit of time, which can be hours (h), minutes (m), or seconds (s). For example, specify 30 seconds as 30s. Default is 60 minutes.

Session timeout in TM1 portal
The TM1 Application Web session-timeout can be adjusted in the following file:
D:\Program Files\ibm\cognos\tm1_64\webapps\pmpsvc\WEB-INF\web.xml
Scroll to the bottom of this file and modify the session-timeout to the minutes you desire:
<session-config>
<|– Default to 5 minute session timeouts –>
<session-timeout>5</session-timeout>
</session-config>
Save the files and restart the IBM TM1 Application Server Service.
Session timeout in Cognos Analytics

1. Launch Cognos Configuration and navigate to “Local configuration -> Security -> Authentication”

2. Modify the “Inactivity timeout in seconds” from the default 3600 to your desired time (for example 7200 = 2 hours”).

3. Save the configuration and restart the Cognos service for the changes to take effect

Note:

  • Most web server timeout settings will come into effect long before the 1 hour time limit, but in the even that no such timeouts exist, this setting acts as a backup.
  • Furthermore, if the web server hosts other sites that do not have such a timeout, the Cognos portal can be secured by setting this to a shorted time frame so that only Cognos users are affected
  • The Cognos timeout is set to a value that is less than the timeout set on in-built portal. Make sure you set the value of “Inactivity timeout in seconds” in Cognos configuration to a value which is greater than the Inactivity timeout of your in-house portal.

Error
Unable to successfully log in to TM1Web: Session timed out. Please login again…
Problem(Abstract)
Whenever a user logs into TM1Web the session immediately (falsely) times out.
Cause
The web server has an underscore in the machine name.

More information:

https://www.ironsidegroup.com/2011/06/27/session-timeout-101/

http://www-01.ibm.com/support/docview.wss?uid=swg22002419

3 Ways to Optimize Cognos Timeout Settings