Technics:CoPlanner Special
CoPlanner Special
Excel Client Embedded
The CopAddOn “ExcelClientEmbedded” (available in Version / Tools) is able to open Excel sheets inside the CoPlanner Windows Client. Microsoft Excel and the CoPlanner Excel Client are required by the CopAddOn. To open embedded office 2007 Excel sheets the following system option must be set: In Windows Explorer (not IE) open Extras -> Folderoptions, Tab Datatypes mark „XLS“ click on „Advanced“.
Set the options for „open“:
SSPI – Double Hop
The Double Hop Problem occurs with the SSPI Login when the Analysis Services are not installed on the same machine as the CoPlanner Server. Therefore Clients are not able to authrenticate on the Analysis Server. Per default Windows clients try to use Kerberos to authenticate against the CoPlanner Server. If Kerberos is not available NTLM is used. In relation to the Double Hop Problem Kerberos is an requirement.
Kerberos Authentication Setup
A Service Pricipal Name (SPN) needs to be assigned to the CoPlanner Server account entity (for example: local system or domain user account) The authentication uses Port 11000 / TCP.
The SPN name can be selected freely. For Example: If the CoPlanner Server runs under the User Account h.ludwig an the user h.ludwig is a domain member of graz.coplanner.com the SPN can be configured with the Tool „ADSIEdit.msc“ (Microsoft Windows Server-Supporttools):
- 1. Clicken onStart / run and enter adsiedit.msc to start ADSIEdit-MMC-Console.
- 2.Connect to the domain
- 3.Expand your domain DC=<defined Server Name> and then CN=User, and right click CN=<ServiceAccountUser>. In the Contextmenu select Properties.
- 4.In the dialog CN=Properties of < ServiceAccountUser > edit the value servicePrincipalName and add the corresponding CoPlanner SPN value:
In this case the SPN Name „cop“ has been registered for the machine “wksut”. Therefore the CoPlanner Service needs to run under the user “h.ludwig” on the machine “wksut”.
In the file „coplanner.exe.config“ located at the Windows Client the SPN Name needs to be registered:
<add key="SSPIServicePrincipalName" value="cop/wksut.graz.coplanner.com"/>
For test purposes a Client / Server Testtool is present in every CoPlanner version in the folder tools/SSPI. The file „Server.exe “ needs to be started under the same user account as the CoPlanner Server. In the file „settings.xml “in the Client folder the SPN name and the hostname on that the server is started need to be entered. The application „Client.exe “ can be run on any computer under the test domain user account. The server window indicates afterwards the connection data. A successful Kerberos authentication result should look as follows:
Zusätzlich ist es auch mit folgenden Registry Einträgen möglich Kerberos Fehler im Eventlog zu protokollieren: Windows Registry Editor Version 5.00
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos]
- "LogLevel"=dword:00000001
- "LogToFile"=dword:00000001
- "KerbDebugLevel"=dword:000000c3
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Domains]
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters]
- "MaxPacketSize"=dword:00000001
- "LogLevel"=dword:00000001
- "LogToFile"=dword:00000001
- "KerbDebugLevel"=dword:000000c3
