Server Settings can be configured via the Configurator or manually by editing the OPENBI\Configuration.xml
file.
Standard Settings
Name | Description |
---|---|
HttpPort | HTTP port used by the open bi server. Default 9091 . When set to 0 no port will be used. Requires service restart. |
HttpsPort | HTTPS port used by the open bi server. Default 9092 . When set to 0 no port will be used. Requires service restart. |
ConfigPort | HTTP config port used by the open bi server. Default 9093 . When set to 0 no port will be used. Requires service restart. |
SSLPath | Path or Common Name (CN) of the HTTPS certificate. When a CN is used the open bi server looks in the Windows Computer Certificate Store for a certificate with the same CN. Default \httpserver\openbi.p12 which is an expired, self-signed, wildcard certificate. Requires service restart.The certificate must include the private key, subject alternative name (SAN) and Server Authentication. |
SSLPassword | Password of the HTTPS certificate file. Unused when CN is specifed in SSLPath . |
Custom Settings
Name | Description |
---|---|
TRACE | Configures server tracing in TRACE_FILE . Requires service restart. X : Maximum tracing output. INFO : Medium tracing output. ERROR : Minimal tracing output. DETAIL : Maximum tracing output with JSON from server commands. HTTPDETAIL : Maximum tracing output with HTTP headers. |
TRACE_FILE | Path to the trace file. Default: OPENBI directory + OpenbiTrace.txt . Requires service restart. |
CONFIG_USE_HTTPS | When set to X the configuration port (default 9093 ) uses HTTPS instead of HTTP. Make sure a valid HTTPS certificate is configured. Requires service restart. |
SESSION_TIMEOUT | Timeout in minutes after inactive sessions are cleaned up. Default: 30 minutes. |
SMTP_SERVER | SMTP-Server which is used for sending E-Mails. Default: localhost |
SMTP_PORT | Port of the SMTP-Server |
SMTP_SSL | When set to X SSL/TLS will be used to connect to the SMTP server. |
SMTP_USERNAME | The username if authentication is required by the SMTP server. If empty or omitted the mail account of the user that runs the open bi service is used. |
SMTP_PASSWORD | The password for the username if authentication is required by the SMTP server. |
SMTP_DOMAIN | The domain if authentication is required by the SMTP server. |
SMTP_BIND_IP | The network interface IP through which the E-Mails should be send. Default: use any network interface. |
SMTP_CERTIFICATE | Path or Common Name (CN) of the client certificate. When a CN is used the open bi server looks in the Windows Computer Certificate Store for a certificate with the same CN. The certificate must include the private key and Client Authentication. |
SMTP_CERTIFICATE_PASSWORD | Password of the client certificate file. Unused when CN is specifed in SMTP_CERTIFICATE . |
ELEMENT_HISTORY_LIMIT | Limit of history elements which are created if a content element has changed. Default: 5 |
USE_LDAP_PWD_CHECK | When set to X the open bi Server uses LDAP for authentication. (Username must exist in the open bi Server.) See also LDAP_NAME . If set to LDAP_ONLY the open bi Server uses only LDAP for authentication. |
LDAP_NAME | Name of the LDAP Server. Requires USE_LDAP_PWD_CHECK . |
USE_COMPRESSION_FOR_HTTPS | When set to X enables response compression for HTTPS. Note that enabling this feature might lead to security problems. |
CORS_ORIGINS | The origins for which CORS is enabled. E.g.: http://localhost:9091;https://domain.com . Default: all origins are allowed. |
HSTS_HEADER | The Strict-Transport-Security header value which is send in every response. |
CONCURRENT_LOGIN | REJECT_NEW : Rejects new login attempts when the same user is already logged in. |
MAX_INVALID_LOGIN_ATTEMPTS | The maximum invalid login attempts after which the user is unable to login again. |
INVALID_LOGIN_ATTEMPTS_EXPIRATION | Invalid login attempts expiration in minutes after which the user can login again if MAX_INVALID_LOGIN_ATTEMPTS was reached. |
PASSWORD_LENGTH | Minimum length for new passwords. |
PASSWORD_REGEX | Regular Expression to validate required characters in new passwords. E.g.: (?=.*[a-z])(?=.*[A-Z])(?=.*\d) requires one lowercase character, one uppercase character and one number. E.g.: [a-zA-Z]+ requires one lower or uppercase character. |
PASSWORD_BANNED_LIST | List of passwords which are banned and can't be used by users. |
PASSWORD_EXPIRATION | Password expiration in days after which the user must change the password again. |
MAX_REQUEST_BODY_SIZE | The maximum size of request bodies in bytes. When set to UNLIMITED the request body size is unlimited. Default: 30000000 (which is 30 MB) |
CONTENT_FILE_ANTIVIRUS | When set to X the uploaded files are checked by Windows Defender and rejected if malware is detected. |
CONTENT_FILE_ENCRYPTION | When set to X the uploaded files will be encrypted and automatically decrypted during download. |
CONTENT_FILE_TYPES | Extensions and mime types separated by , which uploaded files are checked against. E.g. .pdf,application/pdf |
KEYFIGURE_POSITION | When set to LAST the keyfigures in dataproviders will always be below any column dimensions. |
WEB_DIRECTORY | Path to the directory which can be accessed through HTTP(S). Default: the OPENBI directory. Requires service restart. |
REQUIRE_XSRF | When set to X enables cross site request forgery validation for all POST requests. |
COOKIE_SAME_SITE | Specifies the SameSite attribute on the session-handle cookie. LAX : Sets the SameSite attribute to lax STRICT : Sets the SameSite attribute to strict |
COOKIE_SUBDOMAIN | When set to X enables that cookies should be scoped to individual subdomains instead of the top level domain. |
Environment Variables
Settings can also be specified in environment variables.
Commandline
It is also possible to pass settings via the commandline.
$ .\OPENBI\ibssolution.bioxRepository.exe --ConfigPort 8083 --HttpPort 8081 --HttpsPort 8082 --CONFIG_USE_HTTPS X
Or create a windows service with these settings:
$ sc create "open bi Repository Server Custom" binPath= "C:\OPENBI\BioxRepositoryService.exe --ConfigPort 8083 --HttpPort 8081 --HttpsPort 8082 --CONFIG_USE_HTTPS X"
Be careful as commandline settings can not be overidden by anything else.
Server settings are used in the following order: Environment variables < Configuration.xml < Commandline