You are viewing limited content. For full access, please sign in.

Question

Question

Changing Directory Server service user

asked on May 14

I'm trying to verify if the following instructions for LFDS 12 are still valid when changing the Directory Server service user.  Particularly step 4 & 5 after you change the service user in the XmlEndpointUtility.exe.  

I've found previous documentation where it looks like you only needed to do the netsh command to reserve the new URL with the new service user only if LFDS was earlier than 10.2.

I have changed the service user but have not done any netsh changes and my LFDS is working.  I'm confused at this point what I need to do.

 

0 0

Answer

APPROVED ANSWER SELECTED ANSWER
replied on May 14 Show version history

Update:

Step 4: Use the Netsh commands for HTTP to remove the default URL reservation with port 5048 and reserve the new URL with the new port value.

Is never necessary if you've already specified the service user through the XMLEndpointUtility. The utility automatically runs the netsh urlacl commands for the specified user, so you don't need to do so manually afterward.

Also, Forms 12 doesn't have (or need) an EndpointUtility, so don't worry about it being "missing". We'll get the docs updated to reflect.

----------------

I don't think you need to do anything else, especially if it's currently working. I recall that users that are local Administrators do not need explicit urlacl reservations, so if your LFDS service user is a local admin, that may be why. Looking back at the LF11 Configuring the Notification Service for real-time updates on the Tasks page docs, it notes:

Note: You only need to run the second command [netsh http add urlacl url=https://*:8181/ user="LOCAL SERVICE" listen=yes] if the service account for the Hub service is not Local System or a member of the local Administrators group on the machine.

In my experience, missing netsh urlacl reservations result in very obvious "service fails to start" errors.

I'd restart the Laserfiche Directory Server service, then check the Windows Application, Windows System, and Laserfiche Directory Server event logs for any obvious related errors. If you don't see any and things are working (license checks, auth, etc.), you're in the clear.

0 0

Replies

You are not allowed to reply in this post.
You are not allowed to follow up in this post.

Sign in to reply to this post.