Open topic with navigation

TIBCO ActiveSpaces® - Enterprise Edition 5.0.0

# Starting Realm Services with Authentication

To use a data grid with authentication, secure realm services by using transport encryption plus authentication must be used.

The remainder of this section contains examples of using a flat-file for authentication. You must alter the steps as required for the type of authentication you intend to use with your data grid.
Before you begin Use secure realm services that have enabled transport encryption and authentication.

Procedure
1. Determine the type of authentication that you need by reading the section on "Authentication Service" in the document TIBCO FTL® Administration.
2. Perform the authentication setup tasks required before starting up the realm service. For flat-file authentication, create a flat-file with usernames, passwords, and authentication groups. For details, see Authorization Groups.
3. Start a secure primary realm service as described in step 1 under Transport Encryption with the additional authentication options required for the type of authentication that you are going to use.

       tibrealmserver -http <host>:<port> --data <rs_db_path> --secure pass:<keystore_pwd> --tls.trust.file
       <trust_file_path> --auth.url file://<flat_file_path> --server.user <rs_user_name> --server.password <rs_user_pwd>

   Note: When using TIBCO FTL 6.0 or later, use tibftlserver instead of tibrealmserver. Refer to TIBCO FTL Administration for information on converting TIBCO FTL 5.x tibrealmserver command-line options into the appropriate TIBCO FTL 6.x configuration file options, most of which use the same name. For example, `--server.user` is the `server.user` configuration file option.
4. Ensure that the trust file from the primary realm service has been copied to locations where any affiliated realm service (for example, backup, satellite), each of the data grid’s processes, and any client processes can access a copy of it.
5. Start the affiliated realm services (for example backup, satellite) and enable transport encryption.
6. Set the following authentication options:

       --secure pass:<keystore_pwd>
       --tls.trust.file <path>
       --server.user <rs_user_name>
       --server.password <rs_user_pwd>
       --auth.url file://<flat-file path>

   For more information about running secure realm services, realm service authentication, realm service command-line options, and realm service configuration properties, see TIBCO FTL® Administration.

Did you find this helpful?

Yes No
Great!
Thanks for taking the time to give us some feedback.
Sorry about that

Why wasn't this helpful? (check all that apply)

Could not find what I was looking for
Instructions confusing or unclear
Instructions did not work

Want to tell us more?

Please select at least one option or provide details about the issue!!

Error occurred while submitting feedback.

Error2 occurred while submitting feedback.

TIBCO ActiveSpaces® - Enterprise Edition

Copyright © 2009-2025. Cloud Software Group, Inc. All Rights Reserved.