TIBCO Spotfire Server 3.2.2 - TIBCO Product Documentation

Authentication and User Directory
8.2.1 LDAP
With this authentication method, users are authenticated with an LDAP server, such as
Microsoft Windows Active Directory or Sun Java System Directory Server. To be able
to use this method, you must have a working LDAP server. When users log in using
this method, their usernames are automatically stored in the Spotfire Server database,
but all other authentication information, such as passwords, resides only on the LDAP
server. LDAP authentication is recommended when an LDAP server exists in the same
network as the Spotfire server and you want to use the benefits of not having to add
users manually to the Spotfire system. If external authentication is wanted or required,
this is the recommended solution. This method can also be combined with single signon,
using Kerberos keys.
When using LDAP, you need to provide Spotfire Server with certain information.
Some are selectable in dropdown menus in the configuration console, while others you
have to provide as text. Below is a list of the information needed.
Server Type
Protocol
Hostname
Port
Username and Password
Specifies the brand of your LDAP directory server
(dropdown list).
Specifies whether to use LDAP (clear-text) or LDAPS
(encrypted).
The hostname of your LDAP directory server. You can
add more servers (such as more domain controllers
within the same domain)
The port on which the LDAP Directory Server
communicates on.
Specifies a user that is able to connect to the LDAP
directory server and browse user and group
information.
If you are using a Microsoft LDAP directory, the
username is simply the name of the user.
If you are using a Sun LDAP directory, the username
field must include the user's UID, OU, and DC. For
example
uid=malcolm,ou=captains,dc=serenity,dc=firefly,dc=c
om.
Note: If you do not provide a context (see below), it is
important that you use the fully qualified user name
here.
66 (144) TIBCO Spotfire® Server 3.2.2