TIBCO Spotfire Server 3.2.2 - TIBCO Product Documentation

Advanced Procedures
For the TIBCO Spotfire Server cluster this is specified in the Allowed Users field(s).
You can add as many users as you like. If you do not specify any users, then any
authenticated user can issue impersonate calls. The most common use is to specify the
same user as previously configured on the TIBCO Spotfire Web Player server. See the
"TIBCO Spotfire Web Player - Installation and Configuration Manual" for more
information.
Specific requirements can also be made on the origin of an impersonate call. Typically,
you would want to configure the TIBCO Spotfire Server cluster to only allow
impersonation calls originating from the machines running a trusted TIBCO Spotfire
Web Player server.
If one or more servers are listed in the Web Player Server field(s), then only calls
originating from these machines are allowed. Allowed machines can be specified in
two ways: originating IP number or originating name. The originating IP number
should be the IP number of the machine, and a specified originating name is resolved
to one (or more) IP numbers using DNS. Only calls originating from one of the
mentioned machines are valid for impersonation. If no information is provided in the
Web Player Server field, then calls originating from any machine are valid for
impersonation.
To enable impersonation:
1 Start the TIBCO Spotfire Configuration Console.
2 Go to the Impersonation tab.
3 Click the Edit button in the toolbar.
Comment: You will be prompted to stop the entire cluster.
Response: The Enable Impersonation drop-down list will become active.
4 Click on the Enable Impersonation drop-down, and select Yes.
Response: The impersonation settings become editable.
5 Select whether you want to require the impersonation call to be made on https by
checking the Require SSL option. If you leave it blank both http and https are
allowed. If you select https then you must make sure both the TIBCO Spotfire Server
and the TIBCO Spotfire Web Player server can communicate using https.
6 Specify whether only certain users should be able to issue impersonation calls by
entering those user names in the Allowed Users field. Only enter one user per row.
Click the plus sign next to the field to add another row where you can specify an
additional user.
7 Specify whether the TIBCO Spotfire Server cluster should only accept impersonation
calls from certain machines. If you want to limit impersonation calls in this way,
specify the originating machine by entering the IP numer or host name in the Web
Player Servers field. Only enter one machine per row. Click the plus sign next to the
field to add another row where you can specify an additional machine.
8 Click the Done button in the toolbar.
126 (144) TIBCO Spotfire® Server 3.2.2