How to remove disabled synchronized users from TIBCO Spotfire.

How to remove disabled synchronized users from TIBCO Spotfire.

Product: TIBCO Spotfire Server

Version: All Supported Versions

OS: All Supported Operating Systems

If you modify your LDAP user directory and group synchronization configuration or users/groups are removed from your external directory service, Spotfire will not remove any old users or groups from the database, but will instead only disable them in the database. This has the side affect that they are still visible in the Administration Manager and in the Users and Groups tool. In order to completely remove these from Spotfire, you must manually remove those users with the following methods.

OPTION 1 (versions 6.0 and later):

Use the TIBCO Spotfire Server config command "delete-disabled-users" to remove the obsolete users. For example:

• C:\tibco\tss\6.0.0\tomcat\bin>config delete-disabled-users

Here are the details of the command from the TIBCO Spotfire Server Installation and Configuration manual.

=========================

delete-disabled-users

Deleted disabled user accounts.

delete-disabled-users [-b value | --bootstrap-config=value] [-t value | --tool-password=value] [-a | --keep-once-active-users=] [-m | --keep-group-members=] [-p | --keep-users-with-library-permissions=] [-l | --keep-library-authors=] [-f | --force]

=========================

OPTION 2 (all versions):

The "delete-disabled-users" config command was not introduced until version 6.0.0 and so the first option will not work for versions 6.0 and earlier. It is also possible to remove disconnected groups by executing a query on the TIBCO Spotfire Server application database. Note that before you make any modifications to your database, ensure you have made and validated a working backup. Before making any modifications in production environments, test all actions on test environments. To remove the disconnected groups from the database, you can execute the following query:

delete from USERS where ENABLED = 0