Activating user authentication for file upload on Talend JobServer

Activate user authentication to restrict the permission of uploading files to Talend JobServer to authenticated users only.

Before you begin

Download and apply the R2022-09 monthly update patch on Talend Administration Center and Talend Studio.
- For further information about applying a monthly patch for Talend Studio, see Updating Studio.
- For further information about how to update Talend Administration Center, see Checking for updates.
If this is the first time you apply a patch, learn about the best practice by following Testing and applying a Talend Studio monthly update.
Download and apply the following patches on each Talend JobServer.
- 8.0: TPS-5360
For information about how to obtain the patches, reach out to your Support contact with the patch numbers above.
Global protection for authentication to Talend JobServer must have been activated. For instructions, see previous sections Enabling user authentication for Talend Studio local projects and Configure user authentication for Talend Studio remote projects and Job Conductor using Talend Administration Center.

Backward compatibility: Existing configurations for Talend Studio, Talend Administration Center, and Talend JobServer remain compatible after applying these patches.

Procedure

Stop Talend Studio and enable this feature in Talend Studio.
Open the <Studio_installation>/Talend-Studio-*.ini file, add the following line:
```
-Dorg.talend.remote.jobserver.client.old=false
```
Stop Talend Administration Center and enable this feature in it.
Open the TAC_installation/apache-tomcat/bin/setenv.sh or the TAC_installation/apache-tomcat/bin/setenv.bat file, add the following system property to the JAVA_OPTS variable.
```
org.talend.remote.jobserver.client.old
```
This should make the JAVA_OPTS line look like:
```
export JAVA_OPTS="$JAVA_OPTS -Xmx4096m -Dfile.encoding=UTF-8 -Dorg.talend.remote.jobserver.client.old=false"
```
Restart Talend Studio and Talend Administration Center.

The servers may report exceptions because Talend Studio and Talend Administration Center attempt to use the new protocol before reverting to the legacy protocol. However, all Jobs continue to run successfully.
Stop your Talend JobServer and enable this feature on this server side.
Open the <JobServer_installation>/conf/TalendJobServer.properties file to add the following line:
```
org.talend.remote.jobserver.commons.config.JobServerConfiguration.FILESERVER_AUTHORIZATION=true
```
Restart your Talend JobServer.

After approximately one hour, all clients such as Talend Studio and Talend Administration Center recognize and apply the new user authentication for file uploading.

If you exclude any Talend JobServer instances from the patch, they continue to function without this authentication protection. Consequently, clients report hourly exceptions when attempting to locate the new protocol before reverting to the legacy version. All Jobs continue to run successfully despite these exceptions.

Did this page help you?

If you find any issues with this page or its content – a typo, a missing step, or a technical error – please let us know!

Leave your feedback here