L Option - IBM Cognos User Manual

processes the model in batch mode. The signon sal_log includes the Oracle user
ID corpadm and the password my_pass. The command to process the .mdl file for
model Xyzsales.mdl is as follows:
cogtr -c -s -mXyzsales.mdl -ksal_log=corpadm/my_pass
When you use this command, the User ID and password appear in plain text. See
the following topic for information about how to avoid plain text passwords.
Recommendation - Take Steps to Avoid a Plain Text Password
When Using the -k Option
If you use the -k option to pass user IDs and passwords to the Cognos
Transformer command line, you must take precautions to avoid a plain text
password.
Breaches can occur if unauthorized users are able to invoke the ps command or
can gain access to the detailed processing information in the log file.
To avoid plain text passwords, we recommend that you adopt one of the following
strategies:
v Create a text file containing the -k option and one or more user IDs and
v Add MDL statements to the end of the .mdl model file that embed the user ID
v Create a secured but temporary MDL script on the server to update the model
For more information about security, see the Administration and Security Guide.

-l option

This option specifies the user authentication information for IBM Cognos. It
supplies the signon information needed to authenticate users in one or more
security namespaces.
The -l option provides an alternative to storing the information in the Signons
list.
228
IBM Cognos Transformer Version 10.1.1: User Guide
passwords. Store the file in a secure directory, and ensure that your command
line script can easily invoke it.
For example, you can create the Sal_iqd.txt file to contain two user IDs and
passwords:
-ksal_log=corpadm/my_pass -ksal_cube=corpis/bld_cube
You can then call this secured file from the command line. The following is a
UNIX example:
cogtr -c -s -mXyzsales.mdl 'cat Sal_id.txt'
and password information and update the signon information needed to log on
to the database. Then, run cogtr on UNIX using the -m option, specifying your
modified .mdl file.
For example, embed the authentication information using the following MDL
statements:
SignonUpdate "sal_cube" PromptForPassword False UserID "corpis" Password
"bld_cube"
signon. Then, run cogtr on UNIX using the -m option, specifying your modified
.mdl file.
For example, create the following MDL script, for batch processing using the -m
option:
OpenPY "Xyzsales.pyj"SignonUpdate "sal_cube" PromptForPassword False Password
"bld_cube"SavePY "Xyzsales.pyj"