TIBCO Spotfire Server 3.2.2 - TIBCO Product Documentation

Authentication and User Directory
To simplify administration, it is possible to automatically synchronize user names and,
optionally, group membership from an external source. Spotfire is able to synchronize
users from the following external sources:
• An LDAP directory
• A Windows NT Domain Controller
As in the case of authentication, the first option can be a Windows Domain Controller
or a Sun Java Directory Server, and the second a Windows NT4 Domain Controller.
User directory synchronization is a good way to simplify user configuration, as users
that exist in the LDAP directory or Windows NT Domain can automatically be used in
the Spotfire system as well. You can specify which users to synchronize by adding
filters, so that you do not synchronize your entire LDAP tree or Windows NT Domain.
If users are synchronized from an LDAP directory, you can also configure
synchronization of groups. In this scenario, both users and the groups they belong to in
the LDAP tree are synchronized, providing even simpler administration of users. The
imported groups exist in Spotfire as any other group, but cannot be modified. In order
to change their permissions, however, you can add them to a regular, non-imported
group. Synchronization of groups is not available if you synchronize with a Windows
NT Domain Controller.
To set up user directory synchronization, you must have a user in the LDAP directory
or the Windows NT Domain that has the appropriate permissions for reading user and
group information. The login information of this user, together with some other
information, is then entered into the configuration console. See the configuration
console help for details on the various settings.
You must specify a number of options in the configuration console for synchronization
with an LDAP directory or a Windows NT Domain Controller. These are specified
below.
LDAP Directory
Server Type
Protocol
Hostname
Port
Specifies the brand of your LDAP directory server.
(dropdown list).
Specifies whether to use LDAP (clear-text) or LDAPS
(encrypted) (dropdown list).
The hostname of your LDAP directory server. You can
add more servers (such as more domain controllers
within the same domain).
The port on which the LDAP Directory Server
communicates.
80 (144) TIBCO Spotfire® Server 3.2.2