book
Article ID: KB0077828
calendar_today
Updated On:
Description
Resolution:
TIBCO Spotfire is using a third-party component Jespa for handling NTLMv2 authentication in Java. See the attached Jespa Operators manual (Filename: Jespa_Operators_Manual.pdf). In this manual, refer to the sections “Requirements”, “Validating NTLM Credentials with the NETLOGON Service” and “Installation” for an explanation regarding why a computer account is required for NTLMv2 authentication to work.
The following is a short description.
==========================
The Jespa NtlmSecurityProvider can validate NTLM credentials using the NETLOGON service on Active Directory domain controllers just as a Windows server would. A Computer account must be created for Jespa to communicate with the NETLOGON service. A regular User account will be rejected by the NETLOGON service. This account will not refer to an actual computer. For this purposes, the Jespa instance using the Computer account is the "computer".
==========================
Issue/Introduction
Why a Computer Account rather than a User Account is necessary while performing NTLM SSO in TIBCO Spotfire Server.