You are viewing limited content. For full access, please sign in.

Question

Question

Setting up Forms user authentication - "not a read/write named user."

asked on August 5, 2016 Show version history

I'm currently going through the settings on a Laserfiche Rio installation that is mostly untouched since it was installed, but it was initially a LF 8 (I think) installation that sat unused for years, and was then upgraded to 10.1, so some things may be setup in strange ways.

 

Looking in the Laserfiche Admin console, under Repository Users, there are what I assume are standard accounts for Forms, Workflow, an Admin account. There's also an account called Test. Test is also the only account listed under "Repository Named Users". 

 

Looking in the Forms user authentication configuration, it is connecting to the Laserfiche repository with the Test account, which seemed like it should probably be the Forms account instead. But the Forms account is "not a read/write named user." Trying to set the "Repository Named User" property to "Full" for the Forms account in the Laserfiche admin console gives the error "The number of registered repository named users has reached its licensed limit. [9352]"

 

 

0 0

Replies

replied on August 5, 2016

How many Named User licenses do you currently have?

0 0
replied on August 5, 2016 Show version history

I'm not really sure where that information is. In the Laserfiche Directory Server interface I see that we have 50 "Full Licenses" and 22 are in use (not sure how 22 are in use. Between Windows accounts and Repository users in the admin console there are 15 accounts. And in the LFDS users page, it says there are 22 users, but the list only has 20.)

In the Laserfiche admin console, the information for the Rio server shows "Full Repository Named User licenses in use" as 1, and "Full Repository Named User Licenses allocated" as 1.

 

0 0
replied on August 5, 2016 Show version history

In the Laserfiche admin console, the information for the Rio server shows "Full Repository Named User licenses in use" as 1, and "Full Repository Named User Licenses allocated" as 1.

It sounds like you do not have enough named user licenses allocated to this Laserfiche Server.

To license repository users, you need to first allocate named user licenses to the Laserfiche Server where you which to create and license these users.

This is done in the Directory Server interface, under Applications > Laserfiche Server

You can see that currently one repository named user is licensed here.

To add more, click "Edit". Once on the editing page, you can find the repository named users section under Advanced Options:

As a note: they are hidden under Advanced Options because of the ability to create and license system-wide Laserfiche users (license usable in all repositories and Forms), introduced in Laserfiche 10, which have the same capabilities as repository users.

Once you've saved your changes, you should then download a new copy of the Laserfiche Server license and replace your license file on the Laserfiche Server.

At that point, you should be able to license your other repositories users.

1 0
replied on August 5, 2016 Show version history

Thanks for the reply. All of the LFDS interface is new to me since all previous training was pre-10 with the license manager, so that was very helpful. 

 

Would it be better practice to create accounts in the Users tab of the LFDS interface, and then add them through the admin console as Laserfiche Directory accounts, rather than just allocating more named user licenses to a particular repository and assigning them to repository users?

0 0
replied on August 9, 2016

Hi Kaimana,

Functionally, it depends on how your system is set up. The advantage of the Laserfiche Directory accounts (licensed through LFDS) is that if a particular user needs access to multiple repositories, they can be created once and only use one named user license, rather than being created for each repository and taking up a named user license for each repository. If the user is expected to only ever be accessing one repository, it'd be more or less equivalent.

However, if you're starting out fresh, it might be more recommended to favor the Laserfiche Directory accounts over Repository Named Users for ease in understanding the licensing: this way, all user licensing is handled through LFDS (rather than some users in LFDS and some users via Admin Console) and you wouldn't need to worry as much about how many users had been allocated to each server. Furthermore, there'd be greater flexibility in the event that for some reason you do need to create a new repository, you wouldn't need to suddenly worry about how existing users would be licensed for it.

The most recent Laserfiche Rio 10 Deployment Guide has more on how to navigate LFDS as well as more information on some of the new features such as the global Laserfiche users, which might give you some ideas on how your particular system could be configured.

Hope this helps!

1 0
replied on August 9, 2016 Show version history

Thanks for the link. I'll definitely have to read through the whole guide and see which old configurations from previous versions need to be changed.

 

Just a quick question: I created a Forms user through the LFDS interface, and then added it under the "Laserfiche Directory Accounts" page of the Laserfiche Admin Console under Users and Groups. It has a full license, and says "Full" under "Named User", but when trying to use that account to connect Forms to the the Laserfiche repository, I get the same error:

 

Failed to register the Laserfiche repository: Forms is not a read/write named user. [LFF5010-NotFullNamedUser] [LFF335-CannotRegisterLFRepo]

 

0 0
replied on August 9, 2016

Whoops, I seem to have completely skipped over that part of the original post...and the thread title.

If you can log into the repository using this account, then this seems to be the result of how authentication is implemented in Forms. At present, using the option "Use Laserfiche Server authentication" in the Forms configuration page will allow you to connect to Laserfiche Server using a repository named user or a Windows/LDAP account with trusted access...but not the new global Laserfiche Directory users. This applies to the initial connection, as well as to all authentication afterward.

You need to enable single sign-on with LFDS to be able to log in using the global Laserfiche Directory Users; however if this is enabled, you won't be able to log in using Repository Named Users. You will still be able to log in using Windows/LDAP accounts. To enable this, run the following query on the Forms database in SQL:

INSERT INTO cf_options VALUES ('LFDSChoice',1)

This will add a new option to the Forms Configuration page in the authentication tab to set up configuration with LFDS login; you can consult the second half of this page of the Help File once this option is activated. However do note the warning that once you've set up this method of authentication, there is no going back short of creating a new Forms database.

Future versions of Forms should have improved handling of users licensed through LFDS.

0 0
You are not allowed to follow up in this post.

Sign in to reply to this post.