prevent the user from reading the machine name when calling "tm1web" and "pmpsvc"

Post Reply
Nitrel
Posts: 17
Joined: Fri Oct 08, 2010 9:40 pm
OLAP Product: TM1
Version: all Versions
Excel Version: all Versions

prevent the user from reading the machine name when calling "tm1web" and "pmpsvc"

Post by Nitrel » Wed Apr 11, 2018 1:23 pm

Description:

What does the customer want to do? In principle, it seems to be a simple task. The security agent wants to prevent the user from reading the machine name when calling "tm1web" and "pmpsvc" in the URL.

Therefore, he wants to invoke "tm1web" and "pmpsvc" with a portal name instead of the machine name. The exact explanation of all parameters is as follows:

Detailed description:

• First call from Client: https://[portalname]/tm1web
• Portal is translating the URL from https://[portalname]/tm1web to https://[machinename:9510]/tm1web
• Parameter in AppServer webcontent/bi => var planningServices = ["https://[portalname]"];
• Parameter in AppServer webcontent => var planningServices = ["https://[maschinename:9510]"];
• Parameter in CA Server webcontent => var planningServices = ["https://[maschinename:9510]"];

Problems we have:

Problem 01:
If we use this logic with pmpsvc then the call works with portalname / pmpsvc but if it comes back from checking the user (Appserver BI) it returns the URL to the machine name

Problem 02:
PMPSVC has the further problem that you can call it, but if you then try to start the application and TM1web should open, which again does not work because TM1Web is also searched with the machine name which is already wrong at this time, since we switched TM1Web to the portal name

I hope it is understandable so far and someone can tell me what is wrong or if this can ever work as we do here

Thanks Chris

declanr
MVP
Posts: 1588
Joined: Mon Dec 05, 2011 11:51 am
OLAP Product: Cognos TM1
Version: PA2.0 and most of the old ones
Excel Version: All of em
Location: Manchester, United Kingdom
Contact:

Re: prevent the user from reading the machine name when calling "tm1web" and "pmpsvc"

Post by declanr » Wed Apr 11, 2018 2:20 pm

You can change the hosts file on the users PCs. Assuming the security is quite locked down that could easily be done by IT en masse and the users wouldn’t be able to access the file to see the contents.
If you haven’t worked with a hosts file before it’s simple and just has an address for what you type and what the PC understands that to actually be (plus a comment if desired.)

User avatar
tomok
MVP
Posts: 2493
Joined: Tue Feb 16, 2010 2:39 pm
OLAP Product: TM1, Palo
Version: Beginning of time thru 10.2
Excel Version: 2003-2007-2010-2013
Location: Atlanta, GA
Contact:

Re: prevent the user from reading the machine name when calling "tm1web" and "pmpsvc"

Post by tomok » Wed Apr 11, 2018 2:39 pm

Why not just create a DNS entry for your server and use that instead in all your links? That should hide the machine name as long as your DNS entry has the name you want to use. I see this all the time.
Tom O'Kelley - Manager Finance Systems
American Tower
http://www.onlinecourtreservations.com/

Nitrel
Posts: 17
Joined: Fri Oct 08, 2010 9:40 pm
OLAP Product: TM1
Version: all Versions
Excel Version: all Versions

Re: prevent the user from reading the machine name when calling "tm1web" and "pmpsvc"

Post by Nitrel » Wed Apr 11, 2018 3:44 pm

Hi guys,
I do not understand how that should work with DNS or hosts. Both variants are called tm1web or pmpsvc.

I already understand that this will work, but when I open an application, then this looks my tm1web again with the hostname and not with the entry of a hosts or a DNS.

Or did I misunderstand you?
Chris

User avatar
tomok
MVP
Posts: 2493
Joined: Tue Feb 16, 2010 2:39 pm
OLAP Product: TM1, Palo
Version: Beginning of time thru 10.2
Excel Version: 2003-2007-2010-2013
Location: Atlanta, GA
Contact:

Re: prevent the user from reading the machine name when calling "tm1web" and "pmpsvc"

Post by tomok » Wed Apr 11, 2018 3:55 pm

Nitrel wrote:
Wed Apr 11, 2018 3:44 pm
but when I open an application, then this looks my tm1web again with the hostname and not with the entry of a hosts or a DNS.

Or did I misunderstand you?
Chris
No, it will not. If you have a DNS entry like MyNewName.MyCompany.com, instead of TM1ServerName and open TM1Web with MyNewName.MyCompany.com:9510/tm1web/, instead of TM1ServerName:9510/tm1web/, then your URL will always stay on MyNewName.MyCompany.com. It will not revert back to TM1ServerName.
Tom O'Kelley - Manager Finance Systems
American Tower
http://www.onlinecourtreservations.com/

Nitrel
Posts: 17
Joined: Fri Oct 08, 2010 9:40 pm
OLAP Product: TM1
Version: all Versions
Excel Version: all Versions

Re: prevent the user from reading the machine name when calling "tm1web" and "pmpsvc"

Post by Nitrel » Wed Apr 11, 2018 4:03 pm

@tomok
ok, will this fix also my issue how application is calling tm1web?
and is it possible to set the same DNS twice for
MyNewName.MyCompany.com:9510/tm1web/ and MyNewName.MyCompany.com:9510/pmpsvc/

Chris

Ps.: thanks for helping me

User avatar
tomok
MVP
Posts: 2493
Joined: Tue Feb 16, 2010 2:39 pm
OLAP Product: TM1, Palo
Version: Beginning of time thru 10.2
Excel Version: 2003-2007-2010-2013
Location: Atlanta, GA
Contact:

Re: prevent the user from reading the machine name when calling "tm1web" and "pmpsvc"

Post by tomok » Wed Apr 11, 2018 4:13 pm

Nitrel wrote:
Wed Apr 11, 2018 4:03 pm
ok, will this fix also my issue how application is calling tm1web?
I don't know what you are talking about.
Nitrel wrote:
Wed Apr 11, 2018 4:03 pm
and is it possible to set the same DNS twice for
MyNewName.MyCompany.com:9510/tm1web/ and MyNewName.MyCompany.com:9510/pmpsvc/
Setting a DNS entry just serves as a substitute for the IP address. You can use that DNS entry everywhere you would use the server name (because believe it or not, on your network the server name is also an alias for the IP address).
Tom O'Kelley - Manager Finance Systems
American Tower
http://www.onlinecourtreservations.com/

Post Reply