You can configure Find to set some default roles for users that do not have a valid Find role in the IDOL Community component.
You can use this option if you are using an IDOL Community component that authenticates by using a third-party repository (such as LDAP). In this case, the third-party repository handles the authentication, and the IDOL Community component creates the Find user when they log in for the first time.
When you define default roles, Find applies the configured default roles to the new user when they log in for the first time. Find applies these roles in addition to any existing roles in Community.
Find applies default roles only if the user does not have enough permissions in the IDOL Community component to log on to Find.
For example, if the user has only the FindBI
role in Community, Find applies the default roles (for example FindUser
) so that the user can log on. However, if the user has the FindUser
role in Community, Find does not apply your default roles (even if the default role list also contains other roles).
To configure default user roles in Find
Start Find with the Java run command, and include the following arguments:
-Dfind.defaultRoles=list_of_roles
where list_of_roles
is a comma-separated list of the user roles that you want to assign by default to new users.
For example:
java -Dfind.defaultRoles=FindUser -Didol.find.home=C:\ProgramData\Find -Dserver.port=8080 -jar find.war -uriEncoding utf-8
If you run Find as a service on Windows, you can also add the same arguments to the find.xml
file.
If you run Find as a service on Linux, you can add the argument to the existing arguments variable in find.sh
for SysV, or find.conf
for Upstart.
When you modify the Find configuration by modifying the XML file or start scripts, you must restart Find to apply your configuration changes.
For more information on installing and running Find as a service on Windows or Linux, see Install Find.
|