Selecting Kerberos as the
Spotfire login method is the sixth step in configuring
Spotfire Server for the Kerberos authentication method. You can use the configuration tool, or use the command line as detailed in this procedure.
Procedure
-
Execute the
config-kerberos-auth command. The command takes the following two parameters:
- Keytab file: The fully qualified path to the spotfire.keytab file. If the keytab file is named "spotfire.keytab" and has been copied to the recommended directory, the default path
${catalina.base}/spotfire-config/spotfire.keytab is already correct. The shorthand
${catalina.base} refers to the directory
<installation dir>\tomcat (Windows) or
<installation dir>/tomcat (Linux).
- Service Principal Name: Specify the same Service Principal Name that was used when creating the keytab file. Example: HTTP/spotfireserver.research.example.com
-
Use the
config-auth command to activate the Kerberos SSO authentication method.
-
Import the configuration and restart the server for the changes to take effect.