next »

[Marc D.]

Hello,

We switched from Unix Sun Solaris OS using Informix DB to Windows 2008R2 Server using SQL Server 2012 DB.
Connecting by telnet gave issues --> bug #24838 (Randomly the password is sent too late to the TELNET Windows server) Probably something to do with putty (fgltty).

So we installed GAS 2.50 using ISAPI with the isapidispatch.dll.
We had to do the setup manually, GAS without ISAPI installation, because the installation of GAS ISAPI failed with following error :

ExecSecureObjects:  Error 0x80070534: failed to get sid for account: BUILTIN\IIS_IUSRS
CustomAction ExecSecureObjects_64 returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
Action ended 10:13:36: InstallFinalize. Return value 3.

We got the IIS logon working with Kerberos.

Only problem we have now is starting the application as the user that is logged on to the system by IIS.

If we are not using AUTHENTICATION in the as.xcf file the application start just fine, only the user that starts the application is the user that is defined to start the application pool. (domain admin)

snipped from the as.xcf file :

<APPLICATION Id="genesys" Parent="defaultgdc">
        <EXECUTION>
          <PATH>$(res.path.fgldir.demo)</PATH>
          <DVM>c:\Genesys\bat\andg_http.bat</DVM>
        </EXECUTION>
      </APPLICATION>

having the URL in IE or in GDC gives me this, and the application works :
##MODE=3
GET##VERSION=14
2.50.18-134114##ID=34
0985ee2bd22508d1ad83721d12c23c2d.0##CONNECTORURI=8
/genesys##PICTURESURI=44
/genesys/wa/i/_default/genesys/DUA_GDC/Image##GETSEQ=1
1##OPTIONS=14
ALLOW_ID_IN_QS##REQUEST_RESULT=2
60##WEB_COMPONENT_LOCATION=47
http://and-gen.andres.loc:80/genesys/components##DAT=211
meta Connection {{encoding "windows-1252"} {protocolVersion "102"} {interfaceVersion "110"} {runtimeVersion "2.50.08-2343.8"} {compression "none"} {encapsulation "1"} {filetransfer "1"} {procId "AND-GEN:3816"}}

If we use AUTHENTICATION in the as.xcf file :

<AUTHENTICATION Type="KERBEROS">
      <REALM></REALM>
      <SERVICE_NAME>gassvc</SERVICE_NAME>   
      <KEYTAB>$(res.path.as)/etc/gwc.keytab</KEYTAB>
    </AUTHENTICATION>

<APPLICATION Id="genesys" Parent="defaultgdc">
        <EXECUTION>
          <PATH>$(res.path.fgldir.demo)</PATH>
          <DVM>c:\Genesys\bat\andg_http.bat</DVM>
          <AUTHENTICATION>KERBEROS</AUTHENTICATION>
        </EXECUTION>
      </APPLICATION>


If we the use the URL in IE or GDC we get the following :

##MODE=3
GET##VERSION=14
2.50.18-134114##ERROR=15
Internal error.##END=0

or a popup by the GDC saying Internal Error.

What am I missing the get the GAS to connect as the logged in user ?
by the way FGL_WEBSERVER_REMOTE_USER gives me the correct user

Any help would be appreciated.