TIBCO Spotfire Server 3.2.2 - TIBCO Product Documentation

Authentication and User Directory
Server supports MemberOf
Group synchronization
Synchronization schedule
User search filter
Username attribute
Group name attribute
Group search filter
Most LDAP servers store all groups a user is a
member of in the user object. This is how the Spotfire
system finds members of groups to synchronize. Some
LDAP implementations, however, do not support this
feature. To perform group synchronization with these
LDAP servers, the Spotfire system will have to search
within the group to synchronize for its members, and
then perform a second search to find the correct
username attribute for the user. This will increase
traffic immensely between the Spotfire system and the
LDAP server, and should only be used if you need
group synchronization and your LDAP server does not
support the MemberOf attribute. Note that the major
LDAP implementations from Microsoft and Sun do
support MemberOf. If unsure, select Yes. See also the
option Member attribute.
This option specifies which groups should be
synchronized.
This options specifies how often groups should be
synchronized. For instance, if you want to synchronize
groups every Monday at 09:00, the schedule should
read "0 9 * * Monday".
This syntax is a subset of crontab syntax. Specifically,
"/" (slash) is not supported in any field. For more
information about crontab syntax, see the Wikipedia
article http://en.wikipedia.org/wiki/Cron and any of
the pages it refers to.
To further limit what part of the LDAP directory tree is
searched for users, you can add additional search
filters in addition to Context above.
In an LDAP Directory, a number of attributes are
stored for each user. The actual username can be called
different things on different brands of LDAP servers.
If you select one of the LDAP directory server types
listed under Server Type, this option will be preselected,
but if you use a custom LDAP directory
server you need to specify which user attribute is the
username.
As with Username attribute, this option specifies
which attribute is the group name.
To further limit what part of the LDAP directory tree is
searched for groups, you can add more search filters in
addition to Contexts above.
82 (144) TIBCO Spotfire® Server 3.2.2