You are viewing limited content. For full access, please sign in.

Question

Question

Connecting Workflow To Forms LB Address Gives 401 Unauthorized Error

asked on January 26, 2023 Show version history

I am testing configuring Laserfiche Forms 11 Update 3 in a Load Balanced environment and configured the routing service following the help documentation. I have configured 2 servers in the LB successfully (I am able to login and access the various aspects of the application). On the Forms Config page, I have a Workflow server configured and if I Test the connection, it gives the message that "Forms is able to reach the workflow server.".

In Workflow however I have changed the web service configuration to use the LB URL and when I click test it tells me 'The remote server returned an error: (401) Unauthorized."

If I look in the Forms Operational log for the server Workflow communicated with I see the following error:

Service unavailable because the Workflow Server is not configured in Laserfiche Forms or the IP address resolved by Laserfiche Forms based on the configured Workflow Server doesn't match the IP address from the request sent by the Workflow Server. Please configure the Workflow Server in the Laserfiche section of the Forms Configuration page. [LFF5206-WFAPIAccessDenied]

I have tried enabling Windows Authentication for the Forms applications in IIS and it didn't fix the issue.

If I change the web service address in Workflow to FQDN of one of the machines in the LB it connects successfully. Is it possible to use the LB address?

0 0

Answer

SELECTED ANSWER
replied on January 27, 2023 Show version history

No, you cannot use the load balancer address for the Forms endpoint you configure in Workflow. The web service address for Forms must specify a host that resolves to the IP address of the Primary Forms Server. The host can be the machine's true FQDN or an alias, a DNS A record or CNAME record, but it must ultimately resolve to the Primary Forms Server IP.

Put another way, you cannot load balance/reverse proxy Workflow-to-Forms traffic. Workflow traffic must go directly to the Primary Forms Server.

1 0

Replies

You are not allowed to reply in this post.
You are not allowed to follow up in this post.

Sign in to reply to this post.