LDAP properties
You can use LDAP to authenticate users for Spotfire Statistics Services. The LDAP configuration properties are contained in the file ldap.properties. Set these properties if you intend to use LDAP to authenticate users.
Note: The file
ldap.properties also contains the properties used for Active Directory and LDAP authentication. If you intend to use LDAP rather than Active Directory, be sure to set
activeDirectory.enabled to
false and
ldap.enabled to
true.
- In a cluster, the properties files (such as
ldap.properties) are stored in the conf directory under SPSERVER_SHARE. - In a standalone installation, the properties files are stored in the conf directory under SPSERVER_HOME.
Note: Spotfire Statistics Services implements LDAP authentication. LDAP authorization is not implemented at this time.
- ldap.accountNameAttr
The propertyldap.accountNameAttridentifies the user. - ldap.basedn
The propertyldap.basednspecifies the LDAP base distinguished name (DN), or the top level of the LDAP directory tree. - ldap.customSearchFilter
The propertyldap.customSearchFilterdefines a filter for searching across the user database. - ldap.enabled
The propertyldap.enabled, when set to true, indicates that LDAP is used as the authentication source. - ldap.groupMemberAttr
The propertyldap.groupMemberAttrspecifies the pattern for the user search. - ldap.groupRoleAttr
The propertyldap.groupRoleAttrspecifies the ID of the attribute that contains the role name for a group. - ldap.groupnum
Theldap.group#property specifies the group number(s) that the user can be in. (# specifies a number 0 through 9.) - ldap.host
The propertyldap.hostidentifies the host name of the Active Directory server or the LDAP server. - ldap.manager.anonymous
The propertyldap.manager.anonymousallows for anonymous read-only access of the LDAP database. - ldap.manager.cn
The propertyldap.manager.cnspecifies the name of the manager user. - ldap.manager.pass
The propertyldap.manager.passcontains the password for manager access. - ldap.path
The propertryldap.pathspecifies the path to the LDAP directory. - ldap.port
The propertyldap.portspecifies the port over which the LDAP service is provided. - ldap.protocol
Theldap.protocolproperty specifies whether to use LDAP or LDAPS. - ldap.searchBase
The propertyldap.searchBasespecifies the location in a directory from which to start the search for a user. - ldap.searchSubTree
If the propertyldap.searchSubTreeis set to true, it searches across the entire subtree.
- ldap.accountNameAttr
The propertyldap.accountNameAttridentifies the user. - ldap.basedn
The propertyldap.basednspecifies the LDAP base distinguished name (DN), or the top level of the LDAP directory tree. - ldap.customSearchFilter
The propertyldap.customSearchFilterdefines a filter for searching across the user database. - ldap.enabled
The propertyldap.enabled, when set to true, indicates that LDAP is used as the authentication source. - ldap.groupMemberAttr
The propertyldap.groupMemberAttrspecifies the pattern for the user search. - ldap.groupRoleAttr
The propertyldap.groupRoleAttrspecifies the ID of the attribute that contains the role name for a group. - ldap.groupnum
Theldap.group#property specifies the group number(s) that the user can be in. (# specifies a number 0 through 9.) - ldap.host
The propertyldap.hostidentifies the host name of the Active Directory server or the LDAP server. - ldap.manager.anonymous
The propertyldap.manager.anonymousallows for anonymous read-only access of the LDAP database. - ldap.manager.cn
The propertyldap.manager.cnspecifies the name of the manager user. - ldap.manager.pass
The propertyldap.manager.passcontains the password for manager access. - ldap.path
The propertryldap.pathspecifies the path to the LDAP directory. - ldap.port
The propertyldap.portspecifies the port over which the LDAP service is provided. - ldap.protocol
Theldap.protocolproperty specifies whether to use LDAP or LDAPS. - ldap.searchBase
The propertyldap.searchBasespecifies the location in a directory from which to start the search for a user. - ldap.searchSubTree
If the propertyldap.searchSubTreeis set to true, it searches across the entire subtree.
Parent topic: Authentication in TIBCO Spotfire Statistics Services
Related concepts
Related tasks