LDAP properties
You can use LDAP to authenticate users for Spotfire Statistics Services. The LDAP configuration properties are contained in the file ldap.properties. Set these properties if you intend to use LDAP to authenticate users.
Note: The file
ldap.properties also contains the properties used for Active Directory and LDAP authentication. If you intend to use LDAP rather than Active Directory, be sure to set
activeDirectory.enabled
to
false and
ldap.enabled
to
true.
- In a cluster, the properties files (such as
ldap.properties
) are stored in the conf directory under SPSERVER_SHARE. - In a standalone installation, the properties files are stored in the conf directory under SPSERVER_HOME.
Note: Spotfire Statistics Services implements LDAP authentication. LDAP authorization is not implemented at this time.
- ldap.accountNameAttr
The propertyldap.accountNameAttr
identifies the user. - ldap.basedn
The propertyldap.basedn
specifies the LDAP base distinguished name (DN), or the top level of the LDAP directory tree. - ldap.customSearchFilter
The propertyldap.customSearchFilter
defines a filter for searching across the user database. - ldap.enabled
The propertyldap.enabled
, when set to true, indicates that LDAP is used as the authentication source. - ldap.groupMemberAttr
The propertyldap.groupMemberAttr
specifies the pattern for the user search. - ldap.groupRoleAttr
The propertyldap.groupRoleAttr
specifies the ID of the attribute that contains the role name for a group. - ldap.groupnum
Theldap.group#
property specifies the group number(s) that the user can be in. (# specifies a number 0 through 9.) - ldap.host
The propertyldap.host
identifies the host name of the Active Directory server or the LDAP server. - ldap.manager.anonymous
The propertyldap.manager.anonymous
allows for anonymous read-only access of the LDAP database. - ldap.manager.cn
The propertyldap.manager.cn
specifies the name of the manager user. - ldap.manager.pass
The propertyldap.manager.pass
contains the password for manager access. - ldap.path
The propertryldap.path
specifies the path to the LDAP directory. - ldap.port
The propertyldap.port
specifies the port over which the LDAP service is provided. - ldap.protocol
Theldap.protocol
property specifies whether to use LDAP or LDAPS. - ldap.searchBase
The propertyldap.searchBase
specifies the location in a directory from which to start the search for a user. - ldap.searchSubTree
If the propertyldap.searchSubTree
is set to true, it searches across the entire subtree.
- ldap.accountNameAttr
The propertyldap.accountNameAttr
identifies the user. - ldap.basedn
The propertyldap.basedn
specifies the LDAP base distinguished name (DN), or the top level of the LDAP directory tree. - ldap.customSearchFilter
The propertyldap.customSearchFilter
defines a filter for searching across the user database. - ldap.enabled
The propertyldap.enabled
, when set to true, indicates that LDAP is used as the authentication source. - ldap.groupMemberAttr
The propertyldap.groupMemberAttr
specifies the pattern for the user search. - ldap.groupRoleAttr
The propertyldap.groupRoleAttr
specifies the ID of the attribute that contains the role name for a group. - ldap.groupnum
Theldap.group#
property specifies the group number(s) that the user can be in. (# specifies a number 0 through 9.) - ldap.host
The propertyldap.host
identifies the host name of the Active Directory server or the LDAP server. - ldap.manager.anonymous
The propertyldap.manager.anonymous
allows for anonymous read-only access of the LDAP database. - ldap.manager.cn
The propertyldap.manager.cn
specifies the name of the manager user. - ldap.manager.pass
The propertyldap.manager.pass
contains the password for manager access. - ldap.path
The propertryldap.path
specifies the path to the LDAP directory. - ldap.port
The propertyldap.port
specifies the port over which the LDAP service is provided. - ldap.protocol
Theldap.protocol
property specifies whether to use LDAP or LDAPS. - ldap.searchBase
The propertyldap.searchBase
specifies the location in a directory from which to start the search for a user. - ldap.searchSubTree
If the propertyldap.searchSubTree
is set to true, it searches across the entire subtree.
Parent topic: Authentication in TIBCO Spotfire Statistics Services
Related concepts
Related tasks