Security

Active Directory (AD) is Microsoft's implementation of an LDAP server.

When you're using LDAP authentication and create a new user, you don't set a password as this is managed in LDAP itself.

Data Studio administrator users will define which LDAP users have access to Data Studio by creating users in the normal way, and linking the Data Studio username to their LDAP username.

The Data Studio server associates the Data Studio username and the AD username at the time a user logs in as the relevant AD username and password are sent to AD for authentication checks.

A representation of the user's password is stored in the LDAP server. The mechanism (i.e. algorithm) that is used to create this representation is well defined, although its implementation is not. For this reason, the most common security mechanism is SIMPLE.

The SIMPLE mechanism expects you to authenticate by providing a username (DN or UPN) and a clear text password.

To enter your license key(s):

1. Click on your username in the top-right corner.
2. Select Update license.
3. Click Request license. The page that opens will have your product update key(s) and instructions on how to request a new license.
4. When you receive your license(s), paste/enter them in the Update license dialog click Apply. You can apply as many keys as necessary, one at a time.

To find out details about your license (including what you're entitled to use and the expiry dates):

1. Click on your username in the top-right corner.
2. Select About Aperture Data Studio Your license details will be shown.
3. To view more detailed information: Click here to see full license information.

License editions

You're not licensed to use this workflow step. Here are the possible statuses:

1. Go to Configuration > All server settings and enable Use Secure Sockets Layer (SSL).
2. In All server settings find Server certificate.
3. Enter the following details:
   • Key passphrase
   • Key file (This is the full path to the certificate's key file. Don't include quotation marks.)
   • Certificate file (The full path. If using a .pfx file, this should be the same path as the Key file.)
4. Click Apply.
5. It's very likely that you will also want to update the server port to 443, the default port for HTTPS.

1. Go to Configuration > All server settings and click LDAP properties.
2. Click Enabled and specify the following:
   • LDAP server URL (e.g. ldap://organization.com)
   • Security (choose from the available security options)
3. Click Apply to save your changes.

You can use Microsoft's LDP.exe tool to test LDAP connectivity:

1. Create a connection: go to Connection > Connect. If successful, the details page will be open.
2. Test that the user credentials: Connection > Bind. Select Bind with credentials as the type.

If the connection is successful but you can't connect to Data Studio (using the same domain), contact us.

You can now assign this authentication method to your users. Find out about user management.

1. Stop the Data Studio service (Experian Aperture Data Studio Database Server), if running.
2. On the server hosting Data Studio open the command line as administrator and enter: java -jar "C:\Program Files\Experian\Aperture Data Studio 1.3.0\pserver.jar" STARTUP RESETADMINPASSWORD

3. This will start the Data Studio server in the command line and prompt you to enter a new password (in the command line console).
4. Once the server has fully started up, you should be able to access the home screen (don't attempt to log in at this stage). Stop the command line server (Ctrl + C).
5. Restart the service as usual.
6. Log in using the newly created password. You will be prompted to update it again via the UI for additional security.