Spotfire® Server and Environment - Installation and Administration

Disabling administration tasks on specific Spotfire Servers (by selecting servers to disable)

You can block access to administration functionality on one or more servers in a cluster. You can use this feature to prevent Spotfire administrators from accessing the administration UI when logging in from external networks.

About this task

For more information, see Disable administration tasks on specific Spotfire Servers.

Procedure

  1. Open a command line and export the active server configuration by using the export-config command; for additional information, see Executing commands on the command line.
  2. To begin with administration functionality enabled on all the servers, enter the following commands on the command line. This sets the property for all Spotfire Servers in the cluster.
    config set-config-prop --name=security.administration.enabled --value=true
    config set-config-prop --name=security.administration.diagnostics-enabled --value=true
    For information about the command options, see set-config-prop.
  3. To set a specific server on which administration tasks will be blocked, enter one or both of the following commands:
    • To block access to all areas of the administration UI except for Monitoring & Diagnostics, enter this command:
      config set-config-prop --name=security.administration.enabled --value=false --server-name=<server alias from the bootstrap.xml file>
      where "server alias from the bootstrap.xml file" refers to the server on which you want to block access.
    • To block access to the Monitoring & Diagnostics area of the administration UI, enter this command:
      config set-config-prop --name=security.administration.diagnostics-enabled --value=false --server-name=<server alias from the bootstrap.xml file>
    Important: For the server-name parameter, make sure to use the name as it appears in the bootstrap file.
  4. Repeat step 3 for each Spotfire Server on which administration tasks will be blocked.
  5. Import the configuration file back to the Spotfire database by using the import-config command.
  6. Restart all the Spotfire Servers in the cluster.
  7. To prevent users on external networks from performing administration tasks, make sure that all users who log in to Spotfire from external networks are routed to the servers on which administration functionality is disabled.