Workarounds: Cognos Connector problems with Jazz Reporting Service 6.0

Problem Summary

When you create an administrator user ID and password on the Jazz Authorization Server as part of setting up Jazz Security Architecture single sign-on (SSO), do not use special characters, such as the “at” sign (@).

Problem

Jazz Security Architecture SSO uses the OpenID Connect Software Development Kit (SDK) to manage communication during the setup and migration procedures between ALM Cognos Connector and the Jazz Authorization Server.  The OpenID Connect SDK that is included in version 6.0 does not support user IDs and passwords that contain special characters, such as the “at” sign (@).  As a result, any client application that uses the OpenID Connect SDK to perform authentication with the Jazz Authorization Server fails if the user ID or password contains special characters.  In the case of Jazz Security Architecture SSO, this problem is relevant to the administrator user ID and password pair that uses the OpenID Connect SDK during the set up or migration procedure.

Symptoms

If you cannot log into the IBM Cognos BI report server, open the Jazz Authorization Server log. Go to JAS_Install_Dirwlpusrserversjazzoplogs. You should see the following message:

CWWKS1100A: Authentication did not succeed for user ID <userId>%40us.jke.ibm.com. An invalid user ID or password was specified.

Workaround

• Ensure that the administrator user ID and password for the Jazz Authorization Server do not contain special characters.
• Or apply the following patch:
  1. Stop the Cognos BI report server.
  2. On your file system, go to the Cognos Business Intelligence and WebSphere Application Server profile folders.
     • Example Cognos folder: C:Program FilesIBMcognosc10_64webappsp2pdWEB-INFlib
     • Example WebSphere Application Server folder: C:Program FilesIBMWebSphereAppServerprofilesAppSrv01installedAppsvega-dev1Node01CellIBM Cognos.earp2pd.warWEB-INFlib
  3. Replace the existing com.ibm.team.integration.auth.sdk.jar file with the patched com.ibm.team.integration.auth.sdk.jar file. (Download JAR file)
  4. Restart the Cognos BI report server.

Related Information

The following links point to related information:

• JAS: Invalid userid  is returned when user has “@” in username