To set up built-in authorization based on the selected authentication type:
Select the Use Built-in Authorization checkbox in the security manager.
Save technological account credentials using the PP.Util utility with the save_creds parameter and specify the DBOWNER keyword:
In Linux OS:
./PP.Util_start.sh /save_creds metabase_id login [password] DBOWNER
In Windows OS:
PP.Util.exe /save_creds metabase_id login [password] DBOWNER
Change passwords of existing users to log in to the system. When built-in authorization is used, passwords are hashed. User passwords that had been specified before built-in authorization was enabled, are invalid.
NOTE. Simultaneous use of built-in authorization with password authentication is a default option, additional settings are not required.
Select the Use Built-in Authorization checkbox in the security manager.
Save technological account credentials using the PP.Util utility with the save_creds parameter and specify the DBOWNER keyword:
In Linux OS:
./PP.Util_start.sh /save_creds metabase_id login [password] DBOWNER
In Windows OS:
PP.Util.exe /save_creds metabase_id login [password] DBOWNER
Set up domain/integrated domain authentication for the desktop application or web application based on the web server: Apache2, IIS, or Java.
NOTE. Simultaneous use of built-in authorization with domain or integrated domain authentication is available only when working with PostgreSQL DBMS.
After executing the operations the built-in authorization is set up together with the selected authentication type.
IMPORTANT. Built-in authorization is set up once during primary system setup.
Features of simultaneous use of built-in authorization with password, domain, or integrated domain authentication:
Connection to domain users or groups in the security manager is executed at Foresight Analytics Platform level without creating and granting permissions at DBMS level, the Create Accounts dialog box is not displayed.
Updating permissions of domain users or groups in the security manager at DBMS level is unavailable.
Connection to database is executed under saved technological account credentials:
If in database properties the Automatic Connection and Use Login Credentials checkboxes are selected.
If in the Database Authorization dialog box the Use Login Credentials radio button is selected.
Granting permissions for database objects at DBMS level is unavailable, the Manage Rights on DBMS Objects checkbox in database properties is not displayed.
See also: