I am currently experiencing issues attempting to access the Weblink Designer from a DMZ. If logging into the machine and accessing the designer there are no issues. When I try access it from the outside I get a pop up for credentials, I enter the local admin user credentials and then still receive an access denied message. I have changed the application pool identity as well as modifying access on the installation folders. Am I missing something?
Question
Question
Answer
Hi Cristobal,
I have tested out by applying the following settings to WL10.1 and I was able to log in to Designer from outside.
1- Installed WL10.1 on DMZ
2- IIS settings on DMZ :
a. Edit “Designer” Anonymous Authentication:
b. Edit “Designer” Basic settings>connect as method:
3- User settings on DMZ
a. Add in user in Computer Management >Local User and Groups>Users
b. Add in user in Computer Management >Local User and Groups>Groups>Laserfiche WebLink Administrators
4. WebLInk install folder settings on DMZ:
a. For the Weblink install folder, add and assign the log in user permissions to access:
b. For the same WebLInk install folder, provide the following user “IIS AppPool\WebLinkDesignerAppPool” security rights
5- Use this user (in example: julia.xie) to login to dmz designer outside
http://dmzMachineName/designer
username: dmzMachineName\julia.xie (must include the dmz machine name)
password: yourpassword
This will no longer give 403 access denied error page.
Let me know if this method works or if you have any other questions.
Thanks,
Julia
Hi Julia,
When trying to update or replace the Main Logo or any images within the Weblink Designer, I get a prompt for credential but does not take any of the known working credentials. In the end, the image shows a broken image until the page is set to "Restore to Default Images". Do you have any suggestions?
Would this also apply if WebLink is not in a DMZ, but is using a DNS alias?
If you are accessing via a dns alias, you might need to explicitly specify the host name in the credentials you enter. So you would enter "machinename\username" in the credentials prompt.
The user isn't local to the machine though, it is a domain user.