TIBCO Spotfire Server 3.2.2 - TIBCO Product Documentation

Load Balancing
# Convert usernames to lower/upper case
# SSPIUsernameCase lower
# SSPIUsernameCase upper
require valid-user
# Restrict access to certain users or groups
# require user "DOMAIN\User"
# require group "DOMAIN\Group"
See also the Spotfire Server release notes for more information about NTLM
authentication through a load balancer.
7.8 Load Balancer Authentication
The Spotfire Servers can be set to verify the identity of the load balancers by only
allowing certain hostnames or IP addresses to act as load balancers.
Also included in load balancer authentication is the filtering of user names propagated
from the load balancers when using an authentication method such as NTLM.
Load Balancer Authentication is set in the Configuration Console There are a number
of options that can be configured.
Enable Load Balancer
Authentication
Request attribute name
Filter domain name
expression
Lower case conversion
Allowed hostnames
Decides whether the Spotfire Servers should use load
balancer authentication or not.
This is the attribute where the propagated username is
stored. For example "REMOTE_USER".
If the attribute where the propagated username is
stored contains more than the actual username, it is
possible to apply a regular expression to filter out the
unwanted parts. For example, if the attribute contains
"domainname\username", you can use the regular
expression ".*\\(.*)" to remove "domainname\".
Specifies whether to convert the propagated username
to lower case or not. The default is not to convert to
lower case.
This is a list of hostnames or IP addresses of
computers allowed to act as load balancers for the
Spotfire system.
7.9 Load Balancer AJP Keyword Restriction
Apart from Load Balancer Authentication, it is also possible to set up a AJP Connector
secret keyword for the load balancers to use to authenticate with the Spotfire Servers.
TIBCO Spotfire® Server 3.2.2 63 (144)