Focal Point Banner


As of December 1, 2020, Focal Point is retired and repurposed as a reference repository. We value the wealth of knowledge that's been shared here over the years. You'll continue to have access to this treasure trove of knowledge, for search purposes only.

Join the TIBCO Community
TIBCO Community is a collaborative space for users to share knowledge and support one another in making the best use of TIBCO products and services. There are several TIBCO WebFOCUS resources in the community.

  • From the Home page, select Predict: WebFOCUS to view articles, questions, and trending articles.
  • Select Products from the top navigation bar, scroll, and then select the TIBCO WebFOCUS product page to view product overview, articles, and discussions.
  • Request access to the private WebFOCUS User Group (login required) to network with fellow members.

Former myibi community members should have received an email on 8/3/22 to activate their user accounts to join the community. Check your Spam folder for the email. Please get in touch with us at community@tibco.com for further assistance. Reference the community FAQ to learn more about the community.


Focal Point    Focal Point Forums  Hop To Forum Categories  WebFOCUS/FOCUS Forum on Focal Point     [CLOSED] Self Service Application

Read-Only Read-Only Topic
Go
Search
Notify
Tools
[CLOSED] Self Service Application
 Login/Join
 
Majid Jeddi
Guru
posted
Hi

I have 2 self services application that i would like to make secure: I have to group of users, one of them access the first self service application and the second the second self service application.
I know the different options to configure security but i do not know how to make the server distinguish the users.

For information we dod not want to use MRE.

Any idea would be greatly appreciated.

Regards.

This message has been edited. Last edited by: Kerry,


WebFocus 7.6.5
AND WebLogic server as web server
sql2005 as database server
 
Posts: 273 | Location: Europe | Registered: May 31, 2007Report This Post
GinnyJakes
Expert
posted Hide Post
In the WebFOCUS client, you can define multiple client nodes (in the Remote Servers section of the client console). In the login/launch pages of your secure apps, you can specify these logical nodes in the IBIC_server variable.

In addition, if there is no overlap between the sets of users, you might want to keep a list of 'registered' users per application and check the IBIC_user coming in against a list for that particular application.

We use pieces/parts of the above at our site.


Ginny
---------------------------------
Prod: WF 7.7.01 Dev: WF 7.6.9-11
Admin, MRE,self-service; adapters: Teradata, DB2, Oracle, SQL Server, Essbase, ESRI, FlexEnable, Google
 
Posts: 2723 | Location: Ann Arbor, MI | Registered: April 05, 2006Report This Post
Majid Jeddi
Guru
posted Hide Post
Hi Ginny,

But I have only one server with multiple application. Why should create different nodes?.

Regards.


WebFocus 7.6.5
AND WebLogic server as web server
sql2005 as database server
 
Posts: 273 | Location: Europe | Registered: May 31, 2007Report This Post
GinnyJakes
Expert
posted Hide Post
You don't have to do that but it would be one way to differentiate the applications.

At our site, we are all self-service with mostly non-secure applications. Those all go through the EDASERVE client node with a default application id to authenticate against the reporting server.

We have another node called WFEXTSEC which must be driven by a login page that does a WF_SIGNON action that forces it through an exit to validate the login credentials against LDAP. Those credentials are placed in special variables to be used for data base authentication and an application id is used for reporting server authentication. That way the application user doesn't have to have an id on our Unix box. Additionally, certain applications maintain a list of registered users for their application that they can check against the validated logged-on user.

I'm not saying to have to do it this way. It was just an idea.

How are you authenticating your users so that you know who they are?


Ginny
---------------------------------
Prod: WF 7.7.01 Dev: WF 7.6.9-11
Admin, MRE,self-service; adapters: Teradata, DB2, Oracle, SQL Server, Essbase, ESRI, FlexEnable, Google
 
Posts: 2723 | Location: Ann Arbor, MI | Registered: April 05, 2006Report This Post
Majid Jeddi
Guru
posted Hide Post
Hi Ginny,

I read the security documentation and found that one option is to use the LDAP. This is what we are familiar with and what i will use for this pupose.
Other question may come later when i will start testing it. I think i will start that on wednesday.

Regards.


WebFocus 7.6.5
AND WebLogic server as web server
sql2005 as database server
 
Posts: 273 | Location: Europe | Registered: May 31, 2007Report This Post
Darin Lee
Virtuoso
posted Hide Post
You can also set up user profiles where you could specify different application paths for different users or groups of users. Based on the IBIC_user, you could modify the path so one user cannot even see or access the master files and fexes available in another application folder. This assume that those files are currently separated into their own application folders on the Wf Server.


Regards,

Darin


In FOCUS since 1991
WF Server: 7.7.04 on Linux and Z/OS, ReportCaster, Self-Service, MRE, Java, Flex
Data: DB2/UDB, Adabas, SQL Server Output: HTML,PDF,EXL2K/07, PS, AHTML, Flex
WF Client: 77 on Linux w/Tomcat
 
Posts: 2298 | Location: Salt Lake City, Utah | Registered: February 02, 2007Report This Post
Majid Jeddi
Guru
posted Hide Post
Hi Darin,

Thanks for the suggestion i saw that also in the documentation but did not try it yet.
I will share my experience with all of by the end of the week.

Regards


WebFocus 7.6.5
AND WebLogic server as web server
sql2005 as database server
 
Posts: 273 | Location: Europe | Registered: May 31, 2007Report This Post
  Powered by Social Strata  

Read-Only Read-Only Topic

Focal Point    Focal Point Forums  Hop To Forum Categories  WebFOCUS/FOCUS Forum on Focal Point     [CLOSED] Self Service Application

Copyright © 1996-2020 Information Builders