You are viewing limited content. For full access, please sign in.

Question

Question

Audit Trail only works when accessed directly on Server

asked on September 14, 2021

We are having a issue with only certain users, whereby Audit Trail gives the error "You do not have permission to run reports on any audit data." , only when accessing Audit Trail from any browser outside of the Server hosting Audit Trail. When the same connects to the Server directly via Remote Desk Top connection and then launch Audit Trail in the Browser, then it works fine. So the User has been granted permission to pull reports.

Permission is granted:

Error received outside on any client machine:

 

When the same User logs onto a browser directly on the server:

 

I've seen a post that stipulated that one should manually add the user into the config.xml file, which when I checked there was an entry already for the user, but I added the "DomainName" attribute as well. 

Any other settings or things I need to check? This used to work, but stopped at some point, but it is unclear what changed to result in this behavior. 

This is on 10.4

0 0

Replies

replied on September 16, 2021

It kind of sounds like the users aren't correctly being authenticated. Are they prompted for credentials when they visit the site? You might experiment with using the plain hostname or the fqdn. You could also check in IIS manager on the application to make sure that Windows authentication is enabled and anonymous access is disabled (this is on the reporter application, under Authentication).

0 0
replied on September 20, 2021

Hi Brian, 

Thank you for the reply. I re-checked IIS, and can confirm that Windows Authentication is the only one Enabled for AuditTrail.

I tried using the normal DNS Name, FQDN as well as IP address. Only when I use the IP address am I prompted to capture a User Name and Password. However, using the other methods, although I'm not prompted, once the page opens, it does have my account listed in the Top Right of the Browser, indicating it has identified my account correctly. 

0 0
You are not allowed to follow up in this post.

Sign in to reply to this post.