TIBCO WebFOCUS® Reporting Server Administration Release 8207 April 2021 DN4501056.0421 Copyright © 2021. TIBCO Software Inc. All Rights Reserved. Contents 1. Server Introduction ...........................................................17 Using the Web Console ...............................................................17 Web Console Ribbon............................................................ 20 Web Console Hover Menu........................................................21 Menu Options .......................................................................22 User Menu Options............................................................. 22 Configuration Overview ...............................................................26 Server Profiles ...................................................................... 27 Profile Level....................................................................28 Profile Commands ...................................................................31 Profile Command Formats........................................................31 2. Server Security .............................................................. 33 Server Security Overview ..............................................................33 Authentication..................................................................34 Security Providers...............................................................34 Privileges and Other Authorizations................................................37 Encryption..................................................................... 41 Configuring Authentication ............................................................41 Configuring a New Security Provider............................................... 41 Configuring OPSYS Authentication.................................................44 Preventing Unsecured Server Starts After Upgrades.............................45 Using Password Phrases for Authentication on z/OS............................45 Configuring Linux and AIX Pluggable Authentication Modules (PAMs)..............47 Using Kerberos for Single Sign-On............................................47 Configuring PTH Authentication................................................... 48 Disabling a PTH Security Provider Account.....................................53 Configuring DBMS Authentication................................................. 54 Configuring LDAP Authentication.................................................. 54 Configuring Custom Authentication................................................54 Encoding Passwords for a Custom Security Provider............................55 Authenticating Users Across Multiple Security Providers..............................55 Enabling Trusted Connections.................................................... 56 Reporting Server Administration 3 Contents Identifying a Default Provider for Trusted Groups.................................... 56 Setting an Anonymous User ID....................................................57 Configuring User Password Settings...............................................57 Sign-in Password Expiration Warning..........................................58 Configuring Privileges and Other Authorizations ..........................................59 Configuring DBMS Authorization...................................................60 Configuring Server DBA Security...................................................61 Calculating Privileges for Any Registered or Unregistered User or Group.................61 Permissions for Server Application Files and Directories Using a Non-OPSYS Security Provider.....................................................................62 File Permissions for an OPSYS Security Provider.................................... 71 Configuring General Server and Web Console Actions................................73 Transferring File Permissions With the GRANT Privilege..........................79 Configuring Groups..............................................................80 Configuring Roles...............................................................82 Registering Users and Groups in a Role............................................84 Configuring Server Encryption ......................................................... 93 Encrypting Passwords Stored in Configuration Files..................................93 User-Defined Password Encryption and Decryption...................................93 Encrypting Data at Rest..........................................................95 Configuring Secure Socket Layer (SSL) Encryption for the TCP/HTTP Listener............95 Support for OpenSSL Protocols and Ciphers, Microsoft Algorithm Identifiers, and DH and ECDH Key Exchange......................................................97 Configuring Data Encryption for a Remote Server....................................98 Encoding HTML Tags in Data....................................................100 Access to Connection Information in WebFOCUS Procedures ............................. 100 Configuring the Server for Multi-Tenant Deployment ..................................... 101 Configuring Security Templates for Multi-Tenant Environments....................... 101 Configuring Multi-Tenant Application Folders.......................................109 Configuring Multi-Tenant Groups and Users........................................109 Configuring Multi-Tenant DBMS Connections.......................................110 Configuring Security Providers for Multi-Tenant Deployment..........................110 Naming Conventions for Multi-Tenant Deployment..................................110 4 Contents Configuring Application File Privileges for Multi-Tenant Deployment....................110 Effect of Multi-Tenant Deployment on File Upload and HOLD Files.....................111 Shared Metadata Under Multi-Tenant Deployment..................................111 3. Managing Applications ...................................................... 113 What Is an Application? .............................................................113 Generating Samples and Tutorials............................................... 116 Procedures and Metadata on the Application Tree ...................................... 117 Managing Applications and Paths .....................................................127 Creating and Mapping Applications...............................................128 Using an SQL Database to Store Application Contents..............................132 Linking to Your WebFOCUS Client Repository...................................... 135 Linking to a Google Drive Repository..............................................137 Nested Application Directories...................................................139 Home Application Directories for Users........................................... 142 Sharing Files and Applications..............................................145 Configuring the Application Path................................................. 149 Filtering the Application Tree.................................................... 152 Searching for Files.............................................................155 Sorting the Application Tree.....................................................156 Selecting Application Files...................................................... 156 Application Commands Overview ..................................................... 157 Search Path Management Commands .................................................161 APP PATH.....................................................................161 APP PREPENDPATH............................................................ 162 APP APPENDPATH............................................................. 162 APP MAP..................................................................... 163 APP SET METALOCATION_SAME................................................. 165 APP ? METALOCATION_SAME....................................................166 APP SHOWPATH...............................................................166 Application and File Management Commands .......................................... 167 APP CREATE.................................................................. 167 APP COPY.................................................................... 169 Reporting Server Administration 5 Contents APP COPYF[ILE]................................................................170 APP MOVE....................................................................171 APP MOVEF[ILE]...............................................................172 APP DELETE.................................................................. 173 APP DELETEF[ILE]..............................................................173 APP PROPERTY CODEPAGE......................................................174 APP RENAME..................................................................174 APP RENAMEF[ILE].............................................................175 Designating File Types for APP Commands........................................ 176 Output Redirection Commands .......................................................180 APP HOLD.................................................................... 182 APP HOLDDATA................................................................183 APP HOLDMETA............................................................... 183 APP FI[LEDEF].................................................................184