Technics:CoPlanner Special - Revision history

Admin at 07:36, 19 July 2010

2010-07-19T07:36:28Z

← Older revision		Revision as of 09:36, 19 July 2010
Line 13:		Line 13:

	==SSPI – Double Hop==		==SSPI – Double Hop==
	The Double Hop Problem occurs with the SSPI Login when the Analysis Services are not installed on the same machine as the CoPlanner Server. Therefore Clients are not able to authrenticate on the Analysis Server. Per default Windows clients try to use Kerberos to authenticate against the CoPlanner Server. If Kerberos is not available NTLM is used. In relation to the Double Hop Problem Kerberos is an requirement.		The Double Hop Problem occurs with the SSPI Login when the Analysis Services are not installed on the same machine as the [[Technics:CoPlanner-Server\|CoPlanner Server]]. Therefore Clients are not able to authrenticate on the Analysis Server. Per default Windows clients try to use Kerberos to authenticate against the [[Technics:CoPlanner-Server\|CoPlanner Server]]. If Kerberos is not available NTLM is used. In relation to the Double Hop Problem Kerberos is an requirement.

	[[Image:T_Client_Server_Client.jpg\|thumb\|center\|]]		[[Image:T_Client_Server_Client.jpg\|thumb\|center\|]]

	===Kerberos Authentication Setup===		===Kerberos Authentication Setup===
	A Service Pricipal Name (SPN) needs to be assigned to the CoPlanner Server account entity (for example: local system or domain user account) The authentication uses Port 11000 / TCP.		A Service Pricipal Name (SPN) needs to be assigned to the [[Technics:CoPlanner-Server\|CoPlanner Server]] account entity (for example: local system or domain user account) The authentication uses Port 11000 / TCP.

	[[Image:T_Testsrv.jpg\|thumb\|center\|]]		[[Image:T_Testsrv.jpg\|thumb\|center\|]]

	The SPN name can be selected freely. For Example: If the CoPlanner Server runs under the User Account h.ludwig an the user h.ludwig is a domain member of graz.coplanner.com the SPN can be configured with the Tool „ADSIEdit.msc“ (Microsoft Windows Server-Supporttools):		The SPN name can be selected freely. For Example: If the [[Technics:CoPlanner-Server\|CoPlanner Server]] runs under the User Account h.ludwig an the user h.ludwig is a domain member of graz.coplanner.com the SPN can be configured with the Tool „ADSIEdit.msc“ (Microsoft Windows Server-Supporttools):

	:1. Clicken onStart / run and enter adsiedit.msc to start ADSIEdit-MMC-Console.		:1. Clicken onStart / run and enter adsiedit.msc to start ADSIEdit-MMC-Console.
Line 36:		Line 36:
	<font color="#0000ff"><</font><font color="#a31545">add </font><font color="#ff0000">key</font><font color="#0000ff">=</font><font color="#000000">"</font><font color="#0000ff">SSPIServicePrincipalName</font><font color="#000000">"</font> <font color="#ff0000">value</font><font color="#0000ff">=</font><font color="#000000">"</font><font color="#0000ff">cop/wksut.graz.coplanner.com</font><font color="#000000">"</font><font color="#0000ff">/></font>		<font color="#0000ff"><</font><font color="#a31545">add </font><font color="#ff0000">key</font><font color="#0000ff">=</font><font color="#000000">"</font><font color="#0000ff">SSPIServicePrincipalName</font><font color="#000000">"</font> <font color="#ff0000">value</font><font color="#0000ff">=</font><font color="#000000">"</font><font color="#0000ff">cop/wksut.graz.coplanner.com</font><font color="#000000">"</font><font color="#0000ff">/></font>

	For test purposes a Client / Server Testtool is present in every CoPlanner version in the folder tools/SSPI. The file „Server.exe “ needs to be started under the same user account as the CoPlanner ~~server~~. In the file „settings.xml “in the Client folder the SPN name and the hostname on that the server is started need to be entered. The application „Client.exe “ can be run on any computer under the test domain user account. The server window indicates afterwards the connection data. A successful Kerberos authentication result should look as follows:		For test purposes a Client / Server Testtool is present in every CoPlanner version in the folder tools/SSPI. The file „Server.exe “ needs to be started under the same user account as the [[Technics:CoPlanner-Server\|CoPlanner Server]]. In the file „settings.xml “in the Client folder the SPN name and the hostname on that the server is started need to be entered. The application „Client.exe “ can be run on any computer under the test domain user account. The server window indicates afterwards the connection data. A successful Kerberos authentication result should look as follows:

	[[Image:T_server.jpg\|thumb\|center\|]]		[[Image:T_server.jpg\|thumb\|center\|]]

Admin at 05:56, 16 July 2010

2010-07-16T05:56:57Z

← Older revision		Revision as of 07:56, 16 July 2010
Line 34:		Line 34:

	In the file „coplanner.exe.config“ located at the Windows Client the SPN Name needs to be registered:		In the file „coplanner.exe.config“ located at the Windows Client the SPN Name needs to be registered:
			<font color="#0000ff"><</font><font color="#a31545">add </font><font color="#ff0000">key</font><font color="#0000ff">=</font><font color="#000000">"</font><font color="#0000ff">SSPIServicePrincipalName</font><font color="#000000">"</font> <font color="#ff0000">value</font><font color="#0000ff">=</font><font color="#000000">"</font><font color="#0000ff">cop/wksut.graz.coplanner.com</font><font color="#000000">"</font><font color="#0000ff">/></font>
	''<add key="SSPIServicePrincipalName" value="cop/wksut.graz.coplanner.com"/>''

	For test purposes a Client / Server Testtool is present in every CoPlanner version in the folder tools/SSPI. The file „Server.exe “ needs to be started under the same user account as the CoPlanner server. In the file „settings.xml “in the Client folder the SPN name and the hostname on that the server is started need to be entered. The application „Client.exe “ can be run on any computer under the test domain user account. The server window indicates afterwards the connection data. A successful Kerberos authentication result should look as follows:		For test purposes a Client / Server Testtool is present in every CoPlanner version in the folder tools/SSPI. The file „Server.exe “ needs to be started under the same user account as the CoPlanner server. In the file „settings.xml “in the Client folder the SPN name and the hostname on that the server is started need to be entered. The application „Client.exe “ can be run on any computer under the test domain user account. The server window indicates afterwards the connection data. A successful Kerberos authentication result should look as follows:

Admin at 08:39, 15 July 2010

2010-07-15T08:39:19Z

← Older revision		Revision as of 10:39, 15 July 2010
Line 2:		Line 2:

	===Excel Client Embedded===		===Excel Client Embedded===
	The CopAddOn “ExcelClientEmbedded” (available in Version / Tools) is able to open Excel sheets inside the CoPlanner Windows Client. Microsoft Excel and the [[[[Excel_Client\|CoPlanner Excel Client]] are required by the CopAddOn. To open embedded office 2007 Excel sheets the following system option must be set:		The CopAddOn “ExcelClientEmbedded” (available in Version / Tools) is able to open Excel sheets inside the CoPlanner Windows Client. Microsoft Excel and the [[Excel_Client\|CoPlanner Excel Client]] are required by the CopAddOn. To open embedded office 2007 Excel sheets the following system option must be set:
	In Windows Explorer (not IE) open Extras -> Folderoptions, Tab Datatypes mark „XLS“ click on „Advanced“.		In Windows Explorer (not IE) open Extras -> Folderoptions, Tab Datatypes mark „XLS“ click on „Advanced“.

Admin at 08:39, 15 July 2010

2010-07-15T08:39:06Z

← Older revision		Revision as of 10:39, 15 July 2010
Line 2:		Line 2:

	===Excel Client Embedded===		===Excel Client Embedded===
	The CopAddOn “ExcelClientEmbedded” (available in Version / Tools) is able to open Excel sheets inside the CoPlanner Windows Client. Microsoft Excel and the CoPlanner Excel Client are required by the CopAddOn. To open embedded office 2007 Excel sheets the following system option must be set:		The CopAddOn “ExcelClientEmbedded” (available in Version / Tools) is able to open Excel sheets inside the CoPlanner Windows Client. Microsoft Excel and the [[[[Excel_Client\|CoPlanner Excel Client]] are required by the CopAddOn. To open embedded office 2007 Excel sheets the following system option must be set:
	In Windows Explorer (not IE) open Extras -> Folderoptions, Tab Datatypes mark „XLS“ click on „Advanced“.		In Windows Explorer (not IE) open Extras -> Folderoptions, Tab Datatypes mark „XLS“ click on „Advanced“.

Admin at 08:37, 15 July 2010

2010-07-15T08:37:58Z

← Older revision		Revision as of 10:37, 15 July 2010
Line 68:		Line 68:

	[[Category:Technics\|Special]]		[[Category:Technics\|Special]]
	[[en:~~Technics~~:CoPlanner ~~Special~~]]		[[de:Technik:CoPlanner Spezial]]

Admin at 06:52, 17 June 2010

2010-06-17T06:52:14Z

← Older revision		Revision as of 08:52, 17 June 2010
Line 64:		Line 64:
	:''"KerbDebugLevel"=dword:000000c3''		:''"KerbDebugLevel"=dword:000000c3''


			__NOEDITSECTION__

			[[Category:Technics\|Special]]
	[[en:Technics:CoPlanner Special]]		[[en:Technics:CoPlanner Special]]

Admin: Created page with '==CoPlanner Special== ===Excel Client Embedded=== The CopAddOn “ExcelClientEmbedded” (available in Version / Tools) is able to open Excel sheets inside the CoPlanner Windows…'

2010-06-02T14:53:50Z

Created page with '==CoPlanner Special== ===Excel Client Embedded=== The CopAddOn “ExcelClientEmbedded” (available in Version / Tools) is able to open Excel sheets inside the CoPlanner Windows…'

New page

==CoPlanner Special==

===Excel Client Embedded===
The CopAddOn “ExcelClientEmbedded” (available in Version / Tools) is able to open Excel sheets inside the CoPlanner Windows Client. Microsoft Excel and the CoPlanner Excel Client are required by the CopAddOn. To open embedded office 2007 Excel sheets the following system option must be set:
In Windows Explorer (not IE) open Extras -> Folderoptions, Tab Datatypes mark „XLS“ click on „Advanced“.

[[Image:T_Ordneroptionen.jpg|thumb|center|Technics, Ordneroptions]]

Set the options for „open“:

[[Image:T_Dateityp bearbeiten.jpg|thumb|center|Technical, Dateityp bearbeiten]]

==SSPI – Double Hop==
The Double Hop Problem occurs with the SSPI Login when the Analysis Services are not installed on the same machine as the CoPlanner Server. Therefore Clients are not able to authrenticate on the Analysis Server. Per default Windows clients try to use Kerberos to authenticate against the CoPlanner Server. If Kerberos is not available NTLM is used. In relation to the Double Hop Problem Kerberos is an requirement.

[[Image:T_Client_Server_Client.jpg|thumb|center|]]

===Kerberos Authentication Setup===
A Service Pricipal Name (SPN) needs to be assigned to the CoPlanner Server account entity (for example: local system or domain user account) The authentication uses Port 11000 / TCP.

[[Image:T_Testsrv.jpg|thumb|center|]]

The SPN name can be selected freely. For Example: If the CoPlanner Server runs under the User Account h.ludwig an the user h.ludwig is a domain member of graz.coplanner.com the SPN can be configured with the Tool „ADSIEdit.msc“ (Microsoft Windows Server-Supporttools):

:1. Clicken onStart / run and enter adsiedit.msc to start ADSIEdit-MMC-Console.
:2.Connect to the domain
:3.Expand your domain DC=<defined Server Name> and then CN=User, and right click CN=<ServiceAccountUser>. In the Contextmenu select Properties.
:4.In the dialog CN=Properties of < ServiceAccountUser > edit the value servicePrincipalName and add the corresponding CoPlanner SPN value:

[[Image:T_Einrichtung Kerberos Authentifizierung.jpg|thumb|center|]]

In this case the SPN Name „cop“ has been registered for the machine “wksut”. Therefore the CoPlanner Service needs to run under the user “h.ludwig” on the machine “wksut”.

In the file „coplanner.exe.config“ located at the Windows Client the SPN Name needs to be registered:

''<add key="SSPIServicePrincipalName" value="cop/wksut.graz.coplanner.com"/>''

For test purposes a Client / Server Testtool is present in every CoPlanner version in the folder tools/SSPI. The file „Server.exe “ needs to be started under the same user account as the CoPlanner server. In the file „settings.xml “in the Client folder the SPN name and the hostname on that the server is started need to be entered. The application „Client.exe “ can be run on any computer under the test domain user account. The server window indicates afterwards the connection data. A successful Kerberos authentication result should look as follows:

[[Image:T_server.jpg|thumb|center|]]

Zusätzlich ist es auch mit folgenden Registry Einträgen möglich Kerberos Fehler im Eventlog zu protokollieren:
Windows Registry Editor Version 5.00

:''[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos]''

:''"LogLevel"=dword:00000001''

:''"LogToFile"=dword:00000001''

:''"KerbDebugLevel"=dword:000000c3''

:''[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Domains]''

:''[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters]''

:''"MaxPacketSize"=dword:00000001''

:''"LogLevel"=dword:00000001''

:''"LogToFile"=dword:00000001''

:''"KerbDebugLevel"=dword:000000c3''

[[en:Technics:CoPlanner Special]]