Configuring user impersonation for Talend JobServer

The Talend Administration Center web application allows you to run tasks as different UNIX system users, through the Run As option. To avoid errors when starting the task on the server, you need first to:

• give specific permissions to some server directories.

• give necessary authorizations to the directories and files created by Talend JobServer by configuring the umask.

• for the impersonated user to run Jobs with a specific Java version, add the path to that Java instance to the user's PATH environment variable. If you do not set a specific path at this level, the first Java instance found in a configured PATH variable is used.

• define the Operating System users allowed to run tasks from the server.

  Information noteTip: By default, the username must start with a lower-case letter from a to z, followed by a combination of lower-case letters (a to z) and numbers (from 0 to 9). To allow using characters other than those letters and numbers, you need to modify the regular expression ^[a-z][-a-z0-9]*\$ in the value of the org.talend.remote.jobserver.server.TalendJobServer.RUN_AS_USER_VALIDATION_REGEXP parameter in the file {Job_Server_Installation_Folder}\agent\conf\TalendJobServer.properties. For example:

  • To define a username pattern that should include a dot, like firstname.lastname, modify the regular expression to ^[a-z][-a-z0-9]*.[a-z][-a-z0-9]*\$.
  • To allow using one or more underscores (_) in the username, modify the regular expression to ^[a-z][-a-z_0-9]*\$.