How to remove disabled synchronized users from TIBCO Spotfire.

How to remove disabled synchronized users from TIBCO Spotfire.

If you modify your LDAP user directory and the group synchronization configuration or users/groups are removed from your external directory service, Spotfire will not remove any old users or groups from the database, but will instead only disable them in the database. This has the side affect that they are still visible in the Administration Manager and in the Users and Groups tool. In order to completely remove these from Spotfire, you must manually remove those users with the following method.

Resolution

Starting with version 6.0, you can use the TIBCO Spotfire Server config command "delete-disabled-users" to remove the obsolete users. For example: C:\tibco\tss\6.0.0\tomcat\bin>config delete-disabled-users

Here are the details of the command from the TIBCO Spotfire Server Installation and Configuration manual.

=========================

delete-disabled-users

Deleted disabled user accounts. delete-disabled-users [-b value | --bootstrap-config=value] [-t value | --tool-password=value] [-a | --keep-once-active-users=] [-m | --keep-group-members=] [-p | --keep-users-with-library-permissions=] [-l | --keep-library-authors=] [-f | --force]

=========================

Note that the following parameters default to TRUE.

[-a | --keep-once-active-users=] [-m | --keep-group-members=] [-p | --keep-users-with-library-permissions=] [-l | --keep-library-authors=]

You may need to explicitly set these to FALSE in order to remove currently disabled users who meet the criteria, were once active, are members of group, have library permissions, are authors, etc.

Since the "delete-disabled-users" config command was not introduced until version 6.0 it is not possible to delete disabled users via the Spotfire application. You can find those disabled users in the database with a query such as the following.

select * from USERS where ENABLED = 0