You are viewing limited content. For full access, please sign in.

Question

Question

Forms Configuration of Workflow Service

asked on September 16, 2024

After upgrading a system to the latest version we started getting a 401 error on the Workflow connection. By default it is requiring Windows Authentication through IIS but in the configurator there is no area to choose any Windows Credentials. For now I set the web service to allow anonymous authentication so that workflows could be started again.

Where do we configure the Windows Authentication? It has always just worked in the past with all services running as local system.

0 0

Replies

replied on September 16, 2024 Show version history

Per the Workflow > External Objects > Web Services docs, double check this bit:

Note: To connect to a Laserfiche Forms server, you must first specify your Workflow Server on the Forms Server Configuration page. If the Workflow Server is not specified in Forms, Workflow will receive an HTTP (401) Unauthorized error when connecting to the Forms server, and the Forms server will record a "WFAPIAccessDenied" event log message with additional details.

Plausibly sounds like what you're running into. Definitely check the Forms event log as indicated to verify.

Edit, re:

By default it is requiring Windows Authentication through IIS but in the configurator there is no area to choose any Windows Credentials.

Forms authenticates to the Workflow Web Service as the identity of the Forms Routing Service. If that's one of the built-in accounts like Local System or Network Service, those authenticate as the machine's AD Computer object identity, otherwise it's whatever AD user/(g/d)MSA service account you're using.

1 0
replied on September 18, 2024

Workflow is talking to Forms, it is just Forms to Workflow that was unauthorized. So it seems something changed on the domain if the local system does not have windows auth rights to IIS apps, odd that it happened immediately after an upgrade was done though.

0 0
replied on September 18, 2024

Are you using a DNS alias for the Workflow server name in /FormsConfig?

0 0
replied on September 18, 2024

Local Service wouldn't be able to get to Workflow on a remote machine. It's hard to guess what changes with no info what was updated and from what version.

There's too many variables to consider without access to the system.

0 0
You are not allowed to follow up in this post.

Sign in to reply to this post.