Added by Mat Lowery, last edited by Mat Lowery on Sep 21, 2007  (view change)

Labels:

Enter labels to add to this page:
Wait Image 
Looking for a label? Just start typing.
Useful Information
Starting in version 1.6, security is a feature of the Pentaho BI Platform. Prior to this version, security was only available in the Pentaho Professional BI Platform (now called the Subscription Edition).

Furthermore, this document is relevant only to the Pentaho Professional BI Platform version 1.2.1 or later or the Pentaho BI Platform version 1.6 or later. See the Pentaho Professional BI Platform version 1.2.0 security documentation if you're using Pentaho Professional BI Platform version 1.2.0. (You can find the version you are running in several ways: (1) look at the log when the Pentaho BI Platform starts or (2) look at the bottom right of any page within the Pentaho BI Platform.)

In the shipping implementation of the Pentaho BI Platform there is an implementation of a login page. This page is defined in the form of a java server page located your applications server deployment directory in pentaho.war/jsp/Login.jsp. For instance, in the pre-configured install it would be located at /pentaho-preconfiguredinstall/server/default/deploy/pentaho.war/jsp/Login.jsp.

As currently shipped the login JSP is branded for Pentaho and contains a drop down menu with default users and passwords. These items (and others) can be changed by editing the Login.jsp.

Removing the "Valid Users" Drop Down

From the JSP interface:

In pentaho.war/jsp/Login.jsp, comment out or remove the following HTML and code.

<tr>
  <td>
    <%= ProMessages.getString("UI.USER_USERS_PROMPT") %>
  </td>
  <td>
    <select onchange="document.forms.login.elements.j_username.value=this.options[this.selectedIndex].value; document.forms.login.elements.j_password.value='password'">
      <option value="" selected><%= Messages.getString("UI.USER_SELECT") %></option>
      <option value="suzy">Suzy</option>
      <option value="joe">Joe (<%= Messages.getString("UI.USER_ADMIN") %>)</option>
      <option value="pat">Pat</option>
      <option value="tiffany">Tiffany</option>
    </select>
  </td>
</tr>

From the portal interface (JBoss):

In server/default/deploy/jboss-portal.sar/portal-server.war/login.jsp, comment out or remove the following HTML and code.

<!-- begin Pentaho -->
<tr>
  <td colspan="2" align="center">
    Valid Pentaho Users:&nbsp;
  </td>
</tr>
<tr>
  <td colspan="2" align="center">
    <select onchange="document.forms.loginform.elements.j_username.value=this.options[this.selectedIndex].value; document.forms.loginform.elements.j_password.value='password'">
      <option value="" selected>Select: </option>
      <option value="suzy">Suzy</option>
      <option value="joe">Joe (Admin)</option>
    </select>
  </td>
</tr>
<!-- end Pentaho -->

This removes the drop down menu and its title text in the login area.

Removing the Pentaho Branding

In Login.jsp, comment out or remove the following HTML and code. Note that formatting may be slightly different.

<td width="400" style="text-align:left">
  <span class="content_header" style="font-size:1.15em">
    <%= Messages.getString( "UI.USER_WHATS_NEW") %>
  </span>
  <p/>
  <%
    ArrayList messages = new ArrayList();
    HtmlComponent html = new HtmlComponent( HtmlComponent.TYPE_URL, 
                                            "http://www.pentaho.org/demo/news1.htm", 
                                            Messages.getString("UI.USER_OFFLINE"),
                                            null, 
                                            messages);
  %>
  <%=  html.getContent( "text/html" ) %>
</td>

This will remove the Pentaho branding from the left side of the login page.

Localization

All strings in Login.jsp have been localized. Open com.pentaho.locale.messages*.properties to edit the strings. Strings used in the login page generally are named UI.USER_LOGIN_* or UI.USER_*.

Other Login Customizations

Implementors are free to change the Login.jsp as they see fit. The heart of the currently implemented Login.jsp is in the <form> tag. It is recommended that users examine this code in order to make their own replacement Login.jsp work correctly.

I found that disabling the User List via the method specified above does not work for me...

insted I changed the tag:

<login-show-users-list> from true to false

pentaho-solutions/system/pentaho.xml

Comment: Posted by MIchael Sacher at Nov 12, 2010 03:18