spacer
cornerspacercorner
Reply
Valued Contributor
Greg
Posts: 178
Registered: 05-19-2010
0 Kudos
Accepted Solution

v9 deployment service

Hello

 

I have an problem with connecting to deployment service on remote server from local computer. I have massage, that it was anable to create SSPI context. How to configure publication to remote machine?

 

Regards

Greg

Employee
pdenton
Posts: 3,101
Registered: 05-10-2010

Re: v9 deployment service

Hi,

 

There are two potential issues I believe.

 

For the first you must note that we use the default TCP.Net port of 808 to communicate betweent he Designer and the Deployment Service.  If that is being blocked at any point then your attempts to publish will obviously fail.

 

Secondly, the Deployment Service is configured with windows authentication (even if you have not setup Metastorm SSO), therefore any deployment request must come from a authenticatable account, either a local account (for the server) or an appropriate domain account.

 

If neither of these help then I would encourage you to contact our Support Team directly for assistance...

Valued Contributor
Greg
Posts: 178
Registered: 05-19-2010
0 Kudos

Re: v9 deployment service

Hello

 

I have no problem with publication from local engine machine on metastorm user ( not domain user).

There is no firewall on metastorm server, so this port should't be blocked.

 

I have no idea what could be wrong. I will send an request to helpdesk.

Thanks for your replay (Paul I guess:smileywink:)

 

Regards

Greg

Employee
pdenton
Posts: 3,101
Registered: 05-10-2010

Re: v9 deployment service

Just to follow up quickly, when you are deploying from the remote machine, what kind of account are you logged into the remote machine as?

 

 

Valued Contributor
Greg
Posts: 178
Registered: 05-19-2010
0 Kudos

Re: v9 deployment service

A little bit more detailed description:

 

I have Server machine caled S1. There is Metastorm BPM, database, and deployment service (there is no firewall).

When I'm logging to S1, I'm doing it of course on domain user. Then when I try to deploy, i enter the metastorm user credentials with proper role. Everything works fine.

 

I have machine cales M1. There I have only designer installed, and deployment service configured to S1 on designer configuration (i've just pointed config in designer to the same URL that on S1 machine). When I try to connect to repository, i'm using the same metastorm user credentials.

Valued Contributor
Greg
Posts: 178
Registered: 05-19-2010
0 Kudos

Re: v9 deployment service

Guys from helpdesk said "it's known issue".

Don't try to spend hours to resolve it like me :smileysad:

Occasional Contributor
bhartwich
Posts: 6
Registered: 05-19-2010
0 Kudos

Re: v9 deployment service

....I excitedly saw your 'solved' issue heading and realised it's not the kind of solved I wanted! Yes, I also have the same issue, and was going to spend some more time on researching the issue as well, but will wait for the patch I suppose!

When I investigated the error in the windows application log, it mentioned that it might be a kerberos authentication issue. I made sure I registered the MBPM machine with the setspn command and a trusted account, but I still got the SSPI error.

I am using windows 7 for the client machine though, so this could be part of the problem, as surely not everyone is having this issue. What OS are you running Greg?
Valued Contributor
Greg
Posts: 178
Registered: 05-19-2010
0 Kudos

Re: v9 deployment service

Win XP

Employee
pdenton
Posts: 3,101
Registered: 05-10-2010

Re: v9 deployment service

[ Edited ]

Hi,

 

Just to update everyone, we are investigating this issue internally.  A number of customer have reported this issue with the use of a Designer remote to the Deployment Service (and engine) with everything in the same domain and using domain accounts.

 

It is a priority for our Development Services Team to track down and identify the issue.  We suspect a problem with Kerberos configuration of some type and have evidence of that from internal testing.

 

One workaround some customers have used is to install the Deployment Service locally on the same machine as the Designer.  You can then disable the Metastorm Authentication for the deployment service in "DeploymentService.exe.config".

 

Change:

 

	<deploymentCoreConfiguration> 
		<add key="authenticationProvider" value="Engine"></add> 	</deploymentCoreConfiguration>
	<deploymentCoreConfiguration> 
		<add key="authenticationProvider" value="None"></add> 
	</deploymentCoreConfiguration>

 

 And re-point it to your Metastorm DB:

 

<connectionStrings> 
	<add name="Metastorm" connectionString="Data Source=<ServerName>;Initial Catalog=Metastorm;User ID=<Username>;Password=<Password>;" providerName="System.Data.SqlClient"></add>
</connectionStrings>

 

 

Now you would point your Designer to the local Deployment Service, you will be present with a Username and Password challenge but it will ignore whatever you enter and deploy to the database.  You are effectively replicating the v7 Designer functionality.

 

We suggest this only as a workaround while we work on the issue.

 

 

 

Valued Contributor
Greg
Posts: 178
Registered: 05-19-2010
0 Kudos

Re: v9 deployment service

This workaround is working form me.

I hope your team will solve the problem quickly.

Thanks for your help

line spacer line
spacerFollow Metastorm on:
spacer Twitter YouTube Blog iTunes LinkedIn Metastorm Community Central, MC2
spacer Copyright © 2011 OpenText Corporation. All Rights Reserved.spacer About Metastormspacer Privacyspacer Legalspacer Site Mapspacer RSSspacer Contact Us
Microsoft Gold Certified Partner
Powered by Windows Azure
line spacer line