LDAP and Windows authentications - 7.3

Talend Data Catalog Installation and Upgrade Guide
Version
7.3
Language
English
Operating system
Windows
Product
Talend Big Data Platform
Talend Data Fabric
Talend Data Management Platform
Talend Data Services Platform
Talend MDM Platform
Talend Real-Time Big Data Platform
Module
Talend Data Catalog
Content
Installation and Upgrade
Last publication date
2023-03-15

Windows authentication can be used concurrently with LDAP authentication. You can enable Talend Data Catalog application server to obtain authentication for users from Windows authentication via the browser. They will be authenticated automatically if they are running from a Windows session.

You must install Waffle (Windows Authentication Framework) as an add-on.

Before you begin

  • You have downloaded the Waffle package. For more information, see here.
  • You have verified that all LDAP settings are correct and users are able to log into the product via LDAP authentication.

Procedure

  1. Go to MANAGE > Users.
  2. Click LDAP.
  3. Unzip the Waffle package.
  4. Copy all the jar files into <TDC_HOME>\TalendDataCatalog\tomcat\lib.
  5. Open <TDC_HOME>\TalendDataCatalog\tomcat\conf\web.xml and search for "Windows authentication support".
  6. Uncomment the block following that part.
  7. Restart Talend Data Catalog.
    You should have Windows authentication enabled now. Any valid Windows user can be logged in as guest by default as long as licensing allows it.
    If you need to get an Administrator interface, you can access by http://<host>:<port>/Auth?nativeLogin.
  8. Provide connection information for the database you created above.
    Waffle is designed around Windows libraries and it is recommended that you use a Windows OS based machine as the Application Server.

    When using Waffle on a Windows based Application Server, you must run as Administrator the Talend Data Catalog software as a Windows service (not as an application) for Waffle to work properly.

    For Internet Explorer and Firefox, you must configure the browser at each client to support automatic Windows authentication. For more information, see the Waffle website.