Anyone ever seen this error before, immediately upon opening directory server. I can't figure out which user it is referencing or where to enable users?
There seems to be no way around this message, it just locks you out of the system, and being in the directory server administrator's group does not give you privileges to bypass it. Being locked out of DS for Rio customers means no more license assignments or changes.
If you are seeing this error on the Directory Server site:
It sounds like someone has disabled the Windows account you are trying to use to access Directory Server. That's this setting here:
The user will also appear greyed out in the LFDS user list. You should ask another administrator to change the setting.
Directory Server should block administrators from disabling themselves:
If there is no other admin at this time, you can always temporarily add a Window Account to the Laserfiche Directory Server Admins local group on the Directory Server machine so that they have sufficient rights to re-enable your account but are not local machine admins.
That is just the thing, my Windows Account is in the Laserfiche Directory Server Admins local group for all of our client's directory servers. Yet I am getting this message on multiple client servers when trying to access Directory Server.
Local administrators does not override this setting. You must change the setting in the UI.
My suggestion about the local LFDS group was in case there was no other admin to resolve the issue for you and you needed to temporarily authorize a new account to log in to resolve the issue with your current account.
I think this is happening when our AD account is temporarily disabled, but then when it is re-enabled it is never enabled in DS, causing us to lose access to all the customers application keys for Rio systems where we can not get them on the support site.
I would like to request a feature for Directory Server systems. Make it so that if you are in the Laserfiche Directory Server Admins group you will be granted access regardless of any other settings.
Without any access I can't even begin to troubleshoot why my account might be locked out, since it requires logging into the software to see anything. We need an administrative override like we have on the Avante systems, so that no matter what a customer does, we can regain access to the system and fix it.
I still don't know what they are doing that is locking us out of DS.
Support looked at the full error from the operational log and determined it happens when the SQL server can't be contacted. I am confused as to how data sitting in a database governs my ability to login to the application. How would I even login and update the SQL configuration in that case?
When you first install Directory Server, there is no database, and no SQL connection, yet you can authenticate and setup a database connection to store all your configurations. I can't see how my authentication can be governed by a database that doesn't always exist.
With Avante if the SQL server is unavailable, I can still auth into the application, view the SQL config, and correct whatever might be wrong.