Error when configuring Configuring the IBMConnectionsMetricsAdmin role on Cognos

I was trying to configure the IBMConnectionsMetricsAdmin role on a Connections 4 deployment when I got this error when I tried to open http://connections.org:9082/cognos/servlet/dispatch/

AAA-SYS-0001java.lang.RuntimeException:     
Expected a single account objectjava.lang.RuntimeException: Expected a  
single account object at                                                
com.ibm.cognos.camaaa.internal.admin.handler.QueryUserInfo.handleInbound
Request(QueryUserInfo.java:268) at                                      
com.ibm.cognos.camaaa.internal.common.handler.DefaultHandler.handleMessa
ge(DefaultHandler.java:72) at                                           
com.ibm.cognos.camaaa.internal.auth.handler.AuthHandler.handleMessage(Au
thHandler.java:150) at                                                  
com.ibm.cognos.camaaa.internal.auth.ha.................

This deployment is using Domino as LDAP server and this is where the issue originated.

My Cognos LDAP configuration had an error in the Folder mapping object class. I set it to dominoOrganization but the folder mapping was referring to “ou=adm,o=company“. That one has an extra ou in that has an objectclass of dominoOrganizationalUnit.

Setting the Folder mapping object class to dominoOrganizationalUnit and restarting Cognos solved the issue

You can see this from the following items in AAAclient.log:             
                                                                        
1.  Cognos does a lookup for the objectclasses of ou=adm,o=company: 
                                                                        
127.0.0.1:9082  8108    2013-03-13 14:06:04.096 +01     null            
92Cv2jl2G82wGsl9Mj44yy98s94h8Gy9C92GqCGd       1               15312    
AAA.Provider.LDAP       6235    5                                       
Audit.RTUsage.CAM.AAA.Provider.LDAP     CallStart       <function       
name="ldap_search_s"><parameters><item                                  
name="ld"><![CDATA[0000000001A3B7D0]]></item><item                      
name="base"><![CDATA[ou=adm,o=company]]></item><item                
name="scope"><![CDATA[0]]></item><item                                  
name="filter"><![CDATA[(objectclass=*)]]></item><item                   
name="timeout"><![CDATA[0]]></item><item                                
name="attrs"><![CDATA[objectclass]]></item><item                        
name="attrs"><![CDATA[ou]]></item><item                                 
name="attrs"><![CDATA[mail]]></item><item                               
name="attrs"><![CDATA[uid]]></item><item                                
name="attrsonly"><![CDATA[0]]></item></parameters></function>           
                                                                        
2.  The returned objectclasses from LDAP for ou=adm,o=company are   
dominoOrganizationalUnit, organizationalUnit, and top:                  
                                                                        
127.0.0.1:9082  8108    2013-03-13 14:06:04.097 +01     null            
92Cv2jl2G82wGsl9Mj44yy98s94h8Gy9C92GqCGd       1               15312    
AAA.Provider.LDAP       6235    5                                       
Audit.RTUsage.CAM.AAA.Provider.LDAP     CallEnd <function               
name="ldap_get_values"><parameters><item                                
name="retval=ldap_get_values()"><![CDATA[dominoOrganizationalUnit]]></it
em><item                                                                
name="retval=ldap_get_values()"><![CDATA[organizationalUnit]]></item><it
em                                                                      
name="retval=ldap_get_values()"><![CDATA[top]]></item></parameters></fun
ction>                                                                  
                                                                        
3.  None of these objectclasses match dominoOrganization, so the error  
"CAM-AAA-0031 Unable to determine the objectClass of                    
ou=adm,o=company. Please update your namespace configuration to     
recognize this entry as a folder." is shown:                            
                                                                        
127.0.0.1:9082  8108    2013-03-13 14:06:04.097 +01     null            
92Cv2jl2G82wGsl9Mj44yy98s94h8Gy9C92GqCGd       1               15312    
AAA     6235    5       Audit.RTUsage.CAM.AAA   CallEnd <function       
name="LegacyServerEngine::search"><parameters><item                     
name="response"><![CDATA[<searchResponse><status>-19</status><exception 
xsi:type="bus:CAMException"                                             
xmlns:bus="http://developer.cognos.com/schemas/bibus/3/"                
xmlns:xsd="http://www.w3.org/2001/XMLSchema"                            
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"                   
xmlns:SOAP-ENC="http://schemas.xmlsoap.org/soap/encoding/"><severity    
xsi:type="bus:severityEnum">error</severity><errorCodeString            
xsi:type="xsd:string"                                                   
xml:space="preserve">-19</errorCodeString><messages                     
xsi:type="SOAP-ENC:Array" SOAP-ENC:arrayType="bus:message[1]"><item     
xsi:type="bus:message"><messageString xsi:type="xsd:string"             
xml:space="preserve">CAM-AAA-0031 Unable to determine the objectClass   
of &apos;ou=adm,o=company&apos;. Please update your namespace       
configuration to recognize this entry as a                              
folder.</messageString></item></messages></exception></searchResponse>]]
></item></parameters></function>

					
Advertisements

About Wannes Rams

I'm a IBM Collaboration software consultant. I am specialized in the architecture and technical lead of enterprise implementations. I started of as a Lotus Domino specialist certified up to Domino 8, but moved on to IBM Connections, Lotus Sametime and Lotus Quickr. I also have experience with WebSphere Administration and WebSphere Portal deployments. I am also IBM Champion for ICS Specialties: Lotus Domino Lotus Sametime Lotus Quickr IBM Connections WebSphere Portal administration WebSphere Application server administration Cisco Firewall administration Tivoli Directory Integrator Social Business
This entry was posted in Uncategorized. Bookmark the permalink.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s