TIBCO Spotfire Server 3.2.2 - TIBCO Product Documentation

Authentication and User Directory
Example:
jespa.service.account.name
spotfiressrv$@yourorganization.com
When you have set these parameters, start the Spotfire Server.
If you have set a non-encrypted password, you must now replace it with an encrypted
version.
Find the log file /tomcat/logs/spotfire/dss.log and open it. In it,
you will find a warning that says the following:
WARN 2010-05-20 14:30:15,401 [*Initialization*] server.security.JespaAdapter:
Unencrypted jespa.service.password found in web.xml, replace with
jespa.encrypted.service.password set to a+iMktMf8m6lvyf90Zia8hbe6/eVh2Mo
The bold text above is an encrypted version of the password. In the file web.xml,
replace the jespa.service.password parameter with a jespa.encrypted.service.password
with a value of the text string from the log file.
Example:
jespa.encrypted.service.password
a+iMktMf8m6lvyf90Zia8hbe6/eVh2Mo
Note: For security reasons, it is important that you replace the jespa.service.password
parameter with the encrypted version. Do not keep the unencrypted password in the
web.xml file.
When this is done, NTLM authentication should work in the Spotfire system.
Note: It is not possible to delegate NTLM authentication. This means that even if you
set up your Spotfire Server(s) to authenticate users with NTLM and your database
server also uses NTLM (Integrated Authentication), the Spotfire Server will always
authenticate with the database using the Domain User it is running as and never the
logged in Spotfire user. If you need user delegation, you must use a single-sign on
method that supports this, such as Kerberos. See the section “Using Kerberos
Authentication with Delegated Credentials” on page 120 for more information about
using delegation with Kerberos.
8.4 User Directory
When users have been authenticated, information about them is loaded from the user
directory. This information is stored in the Spotfire database and holds information
about groups and group membership. These users and groups can then be used to set
up permissions in the Administration Manager, found in the Spotfire client.
TIBCO Spotfire® Server 3.2.2 79 (144)