Activating user authentication for file upload on Talend Runtime

Activate user authentication to restrict the permission of uploading files to Talend Runtime to authenticated users only.

Before you begin

Download and apply the R2022-09 monthly update patch on Talend Administration Center and Talend Studio.
- For further information about applying a monthly patch for Talend Studio, see Updating Studio.
- For further information about how to update Talend Administration Center, see Checking for updates.
If this is the first time you apply a patch, learn about the best practice by following Testing and applying a Talend Studio monthly update.
Download and apply the following patches on each Talend Runtime.
- 8.0: TPS-5360
For information about how to obtain the patches, reach out to your Support contact with the patch numbers above.
Global protection for authentication to Talend Runtime must have been activated. For instructions, see Authenticating with Talend ESB.

Backward compatibility: Existing configurations for Talend Studio, Talend Administration Center, and Talend Runtime remain compatible after applying these patches.

Procedure

Stop Talend Studio and enable this feature in Talend Studio.
Open the <Studio_installation>/Talend-Studio-*.ini file, add the following line:
```
-Dorg.talend.remote.jobserver.client.old=false
```
Stop Talend Administration Center and enable this feature in it.
Open the TAC_installation/apache-tomcat/bin/setenv.sh or the TAC_installation/apache-tomcat/bin/setenv.bat file, add the following system property to the JAVA_OPTS variable.
```
org.talend.remote.jobserver.client.old=false
```
This should make the JAVA_OPTS line look like:
```
export JAVA_OPTS="$JAVA_OPTS -Xmx4096m -Dfile.encoding=UTF-8 -Dorg.talend.remote.jobserver.client.old=false"
```
Restart Talend Studio and Talend Administration Center.

The servers may report exceptions because Talend Studio and Talend Administration Center attempt to use the new protocol before reverting to the legacy protocol. However, all Jobs continue to run successfully.
Stop your Talend Runtime and enable this feature on the server side.
Open the <Runtime_installation>/etc/org.talend.remote.jobserver.server.cfg file to add the following line:
```
org.talend.remote.jobserver.commons.config.JobServerConfiguration.FILESERVER_AUTHORIZATION=true
```
Restart your Talend Runtime.

After approximately one hour, all clients shuch as Talend Studio and Talend Administration Center recognize and apply the new user authentication for file uploading.

If you exclude any Talend Runtime instances from the patch, they continue to function without this authentication protection. Consequently, clients report hourly exceptions when attempting to locate the new protocol before reverting to the legacy version. All Jobs continue to run successfully despite these exceptions.

Did this page help you?

If you find any issues with this page or its content – a typo, a missing step, or a technical error – please let us know!

Leave your feedback here