...
| Code Block |
|---|
Parameter name="frevvo.internal.baseurl" value="http:// <ip of the m/c where frevvo server is hosted>:<port>" override="false"/>
|
Upload and Video Control Behavior
If your system is configured for LDAP SSO, the upload and video controls exhibit the following behaviors:
- The "uploading...." snake image displays continuously when uploading an image to an upload control in a form, accessed from a space, on a mobile device.
- The video control will ask for credentials again in use/design mode if you are using the FireFox browser. In IE9, you will see the message: " The Web-page wants to run the following add-on: 'Windows Media Player' from 'Microsoft Corporation'. What's the risk?" Enter your credentials or run the add-on to proceed.
To workaround this issue, configure IIS so that it does not require re-authentication for every single request.
Live Forms login page authenticating against LDAP
This is the case where the user will authenticate through the 's login page but the user data is in LDAP. Once you complete the LDAP configuration you should have a tenant configured with the LDAP security manager. Lets assume that the tenant name you created is 'LDAP' and there is a user 'john' in LDAP. In that case, in 's login page:
| Code Block |
|---|
Username: john@LDAP
Password: *****
Tenant: <blank> |
The password provided in the login page is the user's password in LDAP. A very important point to note is that the user name, "john" in the example above, needs to match the value for the LDAP entry attribute configured in the property com.frevvo.security.ldap.userIdDisplayAttribute. For instance, for Active Directory, the value of this property is normally sAMAccountName. That means will try to find an entry in LDAP that has sAMAccountName=john. You can configure any attribute that uniquely identify the user and that the possible values don't have spaces.
LDAP Troubleshooting
If things are not working as you expected:
...
- Check if the connection parameters that you configured in are correct.
- Run queries against LDAP and make sure that the expressions you configured in are correct and returning what you expect.
...
Live Forms login page authenticating against LDAP
This is the case where the user will authenticate through the 's login page but the user data is in LDAP. Once you complete the LDAP configuration you should have a tenant configured with the LDAP security manager. Lets assume that the tenant name you created is 'LDAP' and there is a user 'john' in LDAP. In that case, in 's login page:
| Code Block |
|---|
Username: john@LDAP
Password: *****
Tenant: <blank> |
The password provided in the login page is the user's password in LDAP. A very important point to note is that the user name, "john" in the example above, needs to match the value for the LDAP entry attribute configured in the property com.frevvo.security.ldap.userIdDisplayAttribute. For instance, for Active Directory, the value of this property is normally sAMAccountName. That means will try to find an entry in LDAP that has sAMAccountName=john. You can configure any attribute that uniquely identify the user and that the possible values don't have spaces.
LDAP Troubleshooting
If things are not working as you expected:
- The primary source of information is the log file. In most cases, the LDAP connector will try to indicate what the problem is in the logs. In the log file, look for lines with LDAPSecurityManager or FrevvoJNDIRealm.
- It is useful to have an LDAP browser at hand, for instance, the Apache Directory Studio. With the browser you can:
- Check if the connection parameters that you configured in are correct.
- Run queries against LDAP and make sure that the expressions you configured in are correct and returning what you expect.
- If you can't spot the problem and need to contact frevvo support:
- Stop
- Go to <frevvo-home>/tomcat/logs/frevvo.log.
- Follow these steps to change the log level from INFO to DEBUG
- Restart
- Execute the steps that is causing problems.
- Send the log file (zip) to Live Forms support (support@frevvo.com) with a description of the problem.
- Restore the log level to INFO.
...
The form or workflow routing can then use {Employee} rather than the control that may be mixed case.
Upload and Video Control Behavior
If your system is configured for LDAP SSO, the upload and video controls exhibit the following behaviors:
- The "uploading...." snake image displays continuously when uploading an image to an upload control in a form, accessed from a space, on a mobile device.
- The video control will ask for credentials again in use/design mode if you are using the FireFox browser. In IE9, you will see the message: " The Web-page wants to run the following add-on: 'Windows Media Player' from 'Microsoft Corporation'. What's the risk?" Enter your credentials or run the add-on to proceed.
To workaround this issue, configure IIS so that it does not require re-authentication for every single request.
Active Directory Sample Configuration
...