Configure user authentication for Talend Studio remote projects and Job Conductor using Talend Administration Center

1. Open TalendJobServer.properties and uncomment the following line:
   #org.talend.remote.jobserver.commons.config.JobServerConfiguration.TAC_URLS=http://host1:8080/org.talend.administrator,http://host2:8080/org.talend.administrator

   If the line is commented out, you will not be able to authenticate.

2. Specify the Talend Administration Center URL of the Talend Administration Center instance to use for authorization.

   If you have set up a cluster involving multiple Talend Administration Center instances in your Talend system to provide high availability, specify a comma-separated list of Talend Administration Center instances.

   Talend JobServer will randomly choose an instance from this list and perform an automatic fail over in case of a connection problem.

If the specified Talend Administration Center instances run in https, configure secure connections to Talend Administration Center.

3. Configure TLS/SSL in Talend Administration Center.
   For more information, see https://tomcat.apache.org/tomcat-8.0-doc/ssl-howto.html.
4. Generate a KeyStore in .jks format:
   1. Connect to Talend Administration Center in a browser using https.
   2. Click on the HTTPS certificate chain > lock icon > Certificate Details.
   3. Export the server's certificate from the server KeyStore to a tacCert.cert certificate file.
   4. Use the following command to import the certificate into the KeyStore tacTrustStore.jks:

      keytool -import -noprompt -file <path_to_tacCert.cert> -alias tacCert -keystore tacTrustStore.jks -storepass password

5. Edit the Talend JobServer start script start_rs.sh to set the JVM arguments to trust the Talend Administration Center certificate:

   MY_JMV_ARGS="-Djavax.net.ssl.trustStore=/path/tacTrustStore.jks -Djavax.net.ssl.trustStorePassword=password"