Ihave followed the white paper on setting up a Forms Server in the DMZ using internal Directory Server. It seems however that our internal server does not want to authenticate my DMZ server. For example; When in /formsConfig#forms if we click 'Test Connection' we get an error that says "The caller was not authenticated by the service.". If I perform a packet capture, I get the message "The request for security token could not be satisfied because authentication failed.". I have confirmed that it is reaching out to internalserver/LicenseManager/service when making the request and not some internal service. I have performed a full uninstall and repeated the steps in the whitepaper for 10+ multiple times.
All ports are currently open for testing, it is not a firewall issue. I feel like I have performed every troubleshooting step I can. The systems are able to fully communicate and I am getting an Active rejection from the LicenseManager.
I should state for clarification that the DMZ server is NOT on the domain. This leads me to believe the problem may lie in the fact that the IIS service is running using local systems that have no authorization on the internal systems, but we do not want to open the DMZ server to the domain controller for obvious reasons.
However, the communication/authorization between Forms and LFDS that's failing is communication using WCF (a framework separate from IIS). By default, it makes use of Windows Authentication to secure your connection --- which will end poorly if one of the machines isn't on a domain (and a trusted domain at that).
The good news is that I have a suggestion, though it's not a configuration we recommend: try turning on the certificate authentication mode for Forms, the STS, and LFDS. In the SSO whitepaper, the instructions are under "Configuration of Directory Server and the STS when both are on different computers and you want to use certificate authentication".
We recommend separating the STS (hosts the SSO login page) and putting it in the DMZ because end users must be able to access the that authentication page. As such, you would likely need to create a firewall hole through to the STS in your internal network, somewhat defeating the goal of hosting Forms in the DMZ.
Thank you for your response! I had actually started attempting certificate authentication before your message yesterday and had some success. I got my DMZ LFDSSTS to successfully contact the LFDS and it seems to be working properly!
That's the end of my good news I'm afraid. My DMZ Forms server is still acting up. I have followed multiple tutorials and keep running into the same issue. My LicenseManager endpoints in Web.config in /Forms and /Config are all setup to use the certificate, the thumbprint is correct in both, and yet whenever I try to update the "Directory Server STS URL" to my it tells me "The client certificate is not provided. Specify a client certificate in ClientCredentials". But all three endpoints (AltLicenseManagerService, AltLicenseManagerService2, and AltLicenseManagerSTS) are all pointed at the correct BehaviorConfiguration pointing at the certificate. I am at a total loss once again. It is saying it doesn't have a cert, but it does. Unless there is an additional endpoint I need to add to the Web.config, I'm not sure what to do. Web diagnostics and packet captures unfortunately can't show me which 'endpoint' is being targeted when I get the prompt.
At this point, it's best to open a support case through your reseller for more detailed troubleshooting assistance, since it could be an issue with your certificate, your configuration, or something else entirely --- and to better troubleshoot, we might need to see some information you don't want to post publicly.
Hi Blake, I solved this exact issue by making sure the certificates being used are located in the trusted certificate store on each the LFDS server and the STS/DMZ server. This fixed the issue for me. Also ensuring that the legitimate LFDS FQDN is used accross all forms, STS and LFDS end point utilities aswell as leaving the local service account blank. Additionally i added the FQDN and ip address of the LFDS to the DMZ hosts file allowed the resolution of the internal ip address.
SIGNAL 37 error can be caused by having the localhost name associated with the ::1 IPv6 loopback address in the /etc/hosts file. This can cause communication problems between the license server daemon (lmgrd) and the vendor daemon, resulting in shutdown of the latter. If you have a line like the following in your /etc/hosts file:
Almost every software exports data in common formats such as CSV, TXT and XLSX. The data is parsed, manipulated, crunched, and ported into a final report. The problem is that generally speaking, handling data output can be very time consuming and prone to human error and many companies have custom reporting needs that don't fit into out-of-the-box software solutions.
Investment into even a small automation script or custom developed tool/software can result in immediate return on investment. The time savings alone can equate to huge annual cost savings. The increase in productivity/production can produce a significant rise in profit. Using data automation with other tools can also greatly reduce cost such as replacing physical documentation and reporting with digital files that can be easily shared.
Nearly any defined digital workflow can be automated. The more static the process, the easier to automate. When processes become more dynamic, user interfaces can also be developed along with automation scripts to accommodate all of the detail.
Softwares that allow scripting integration can automate steps taken by the user in the software itself. For instance, at J&L one of our departments use inspection softwares like GOM, PC-DMIS, and Polyworks to complete dimensional inspections.
Can be ran on Windows, Mac, and Linux operating systems. Great for scheduled automation tasks as well as software integration (where applicable). User interfaces can be developed all be it more for quick user input. Also perfect for data crunching. Python was originally geared for Data Sciences.
The preferred platform for storing and managing large amounts of data. Integrates well with many other languages to allow the creation of database backed application. Works just as well as a stand-alone with SQL scripts and reporting services.
Solution: What started as a single use application grew into a multi-featured piece of software. Each employee has a secure login that uses a salted hashed password that allows the employee to not only submit request forms electronically, but also track their attendance and remaining personal/vacation hours, upload documentation, stay up to date with current events in the company, and make suggestions or ask questions.
Challenge: Automatically generate reports to document results for our NDT department. The process of cataloging failed parts was time consuming, costly, and repetitive. Our previous documentation process included printing a form for each non-conforming part, filling it out by hand, and then summarizing all information from these forms in a separate spreadsheet.
Solution: We created a web application that allowed the user to pick a part and use clickable cells to enter defect information. All part data was then stored into a database and when the order was done the user could pick by order date and click a button to generate a pdf with all the necessary images as well as detailed footers along with an auto generated excel file ready to be attached and emailed to the customer.
Another waste reduction project was requested in the form of our route cards. These are internal sheets that are printed out and travel with jobs throughout the facility to track what stage a job is in and who authorized the completion of previous stages. We focused on one customer and aimed to create a digital representation of these cards that would run as a desktop application. We were successful in eliminating the physical forms and shifted to a database driven desktop application. Multiple users can use it simultaneously because the application periodically re-queries the database for updates and keeps multiple instances of the application in sync. Complete with email notifications to keep cross department communication intact and create a quicker more efficient workflow.
Our mission is to provide Quality Solutions and Unparalleled Customer Satisfaction by encouraging a Team-Centered Culture with Integrity at the heart of every transaction. By employing those who have a Quality First mindset with a Proactive Can-Do Attitude; our team provides prompt communication and action to Deliver Innovation through Determination and Family Values.
Optimism is growing that the near future will witness rapid growth in human-computer interaction using voice. System prototypes have recently been built that demonstrate speaker-independent real-time speech recognition and understanding of naturally spoken utterances in moderately sized vocabularies (1000 to 2000 words), and larger-vocabulary speech recognition systems are on the horizon. Already, computer manufacturers are building speech recognition subsystems into their new product lines. However, before this technology will be broadly useful, a substantial knowledge base about human spoken language and performance during computer-based interaction needs to be gathered and applied. This paper reviews application areas in which spoken interaction may play a significant role, assesses potential benefits of spoken interaction with machines, and attempts to compare voice with alternative and complementary modalities of human-computer interaction. The paper also discusses information that will be needed to build a firm empirical foundation for future designing of human-computer interfaces. Finally, it argues for a more systematic and scientific approach to understanding human language and performance with voice interactive systems.
3a8082e126