Creating an Information Services JDBC Data Source with Kerberos delegated authentication to a Microsoft SQL Server database.

Creating an Information Services JDBC Data Source with Kerberos delegated authentication to a Microsoft SQL Server database.

How to create an Information Services Data source with Kerberos delegated Authentication to Microsoft SQL Server Database. Instructions: 1). Configure Kerberos Authentication on TIBCO Spotfire Server. Refer to the TIBCO Spotfire Server Installation manual (Section "Kerberos Authentication"). 2). Configure Single Sign-On Using Delegation with Kerberos Login System on TIBCO Spotfire Web Player. Refer to the TIBCO Spotfire Web Player installation manual. (Optional). 3). Enable "constrained or unconstrained delegation" for the Service Account used for TIBCO Spotfire Server Kerberos Authentication on the Domain controller. Refer to the TIBCO Spotfire Server Installation manual (Section "Grant the Spotfire Server Service Account the Right to Delegate Client Credentials"). 4). Download the JDBC driver from the following location and copy the sqljdbc_auth.dll file to the tomcat\lib folder of the TIBCO Spotfire Server. http://www.microsoft.com/en-us/download/details.aspx?displaylang=en&id=11774 The sqljdbc_auth.dll files are extracted into the following location: \sqljdbc_\\auth\x64\ 5). Create a new Database Template for Kerberos delegated Authentication to Microsoft SQL Server Database using the TIBCO Spotfire Server Configuration Tool. Use the following XML template. Follow KB 45013 on the TIBCO Support site for detailed instructions. ----------------------------------------------------------------------- sqlserver2005_delegated com.microsoft.sqlserver.jdbc.SQLServerDriver jdbc:sqlserver://<host>:<port>;DatabaseName=<database>;integratedSecurity=true;authenticationScheme=JavaKerberos SELECT 1 spotfire.connection.pool.factory.data.source kerberos.data.source selectMethod cursor com.spotfire.ws.im.ds.sql.sqlserver.SQLServerMetadataProvider 10000 100 TABLE, VIEW true true true 1000 10000 false [$$catalog$$.][$$schema$$.]$$table$$ $$value$$ convert(varchar(8), $$value$$, 108) $$value$$ String VARCHAR($$value$$) String VARCHAR(8000) Integer DECIMAL(10, 0) Long DECIMAL(38, 0) Float REAL Double DOUBLE PRECISION Date DATETIME Time DATETIME DateTime DATETIME #$$name$$ CREATE TABLE $$name$$ $$column_list$$ DROP TABLE $$name$$ true ------------------------------------------------- 6). Enable the template and Save the configuration into the database. 7). Restart the TIBCO Spotfire Server. 8). Login to client and create a Data Source using the newly created template (sqlserver2005_delegated) on Information Designer. Keep the username/password field blank. Note: Kerberos Authentication needs to be enabled on the Microsoft SQL Server as well. https://msdn.microsoft.com/en-us/library/ms378428(v=sql.110).aspx https://msdn.microsoft.com/en-us/library/gg558122(v=sql.110).aspx