Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
316
Web Server - Ask For Help / Re: IP address/port conflict
« on: March 24, 2017, 05:21:20 PM »
I'll play some more, Poul.
But my kludge *IS* at least partially working.
If I don't specify to limit the IP, then the app responds to 127.0.0.1 or to the two IPV4 addresses on the box.
If I limit it as shown in my code, the app does not respond to the loopback or to the other IP - just to the IP I want.
BUT... for some reason, IIS refuses to start when I bind it to the other IP:80.
If I kill the nettalk app, IIS starts and binds that address fine.
So again, what I've done is partially working. I'll need to do some more experimenting. But just moving IIS to a different server in my production network has solved my immediate issue.
Thanks.
Jane
But my kludge *IS* at least partially working.
If I don't specify to limit the IP, then the app responds to 127.0.0.1 or to the two IPV4 addresses on the box.
If I limit it as shown in my code, the app does not respond to the loopback or to the other IP - just to the IP I want.
BUT... for some reason, IIS refuses to start when I bind it to the other IP:80.
If I kill the nettalk app, IIS starts and binds that address fine.
So again, what I've done is partially working. I'll need to do some more experimenting. But just moving IIS to a different server in my production network has solved my immediate issue.
Thanks.
Jane
317
Web Server - Ask For Help / Re: IP address/port conflict
« on: March 24, 2017, 08:52:35 AM »
Thanks, Bruce.
My feeble memory *thinks* I did it this way because I wanted limiting to a single IP to be optional. And didn't know if I put it in the template as a string and then just left the string blank, whether it would automatically listen on all IPs (as desired). And was too lazy to take the time to experiment.
I'll do some more experiments.
Jane
My feeble memory *thinks* I did it this way because I wanted limiting to a single IP to be optional. And didn't know if I put it in the template as a string and then just left the string blank, whether it would automatically listen on all IPs (as desired). And was too lazy to take the time to experiment.
I'll do some more experiments.
Jane
318
Web Server - Ask For Help / Re: IP address/port conflict
« on: March 23, 2017, 11:58:43 AM »
Thanks, guys.
Here's some more info.
Simple IPCONFIG:
C:\Windows\system32>ipconfig
Windows IP Configuration
Ethernet adapter Ethernet0:
Connection-specific DNS Suffix . :
Link-local IPv6 Address . . . . . : fe80::598f:9611:c008:5369%12
IPv4 Address. . . . . . . . . . . : 10.15.12.15
Subnet Mask . . . . . . . . . . . : 255.255.255.0
IPv4 Address. . . . . . . . . . . : 10.15.12.114
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.15.12.1
Bruce, perhaps I'm setting the limiting IP for the nettalk service in the wrong place. I'm reading from an INI file, and then setting it as shown here:
In this case, setting its IP to 10.15.12.15
Trying to set IIS binding to using 10.15.12.114:80 as shown here:
netstat -a -o does just show 10.15.12.15:80, as Bill suggests.
If I temporarily set IIS to a different port (88) and set the binding to all addresses rather than to the specific IP I want, then (as BIll also suggests) netstat shows [::]:88
So from that standpoint, I'm even more confused.
Unfortunately, I can't play with it much during the day because the nettalk app is heavily used.
It's not a major issue... I've moved IIS onto a different server. Just trying to understand what I might be able to do differently in the future.
Thanks for the suggestions, and any others!
Jane
Here's some more info.
Simple IPCONFIG:
C:\Windows\system32>ipconfig
Windows IP Configuration
Ethernet adapter Ethernet0:
Connection-specific DNS Suffix . :
Link-local IPv6 Address . . . . . : fe80::598f:9611:c008:5369%12
IPv4 Address. . . . . . . . . . . : 10.15.12.15
Subnet Mask . . . . . . . . . . . : 255.255.255.0
IPv4 Address. . . . . . . . . . . : 10.15.12.114
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.15.12.1
Bruce, perhaps I'm setting the limiting IP for the nettalk service in the wrong place. I'm reading from an INI file, and then setting it as shown here:
In this case, setting its IP to 10.15.12.15
Trying to set IIS binding to using 10.15.12.114:80 as shown here:
netstat -a -o does just show 10.15.12.15:80, as Bill suggests.
If I temporarily set IIS to a different port (88) and set the binding to all addresses rather than to the specific IP I want, then (as BIll also suggests) netstat shows [::]:88
So from that standpoint, I'm even more confused.
Unfortunately, I can't play with it much during the day because the nettalk app is heavily used.
It's not a major issue... I've moved IIS onto a different server. Just trying to understand what I might be able to do differently in the future.
Thanks for the suggestions, and any others!
Jane
319
Web Server - Ask For Help / Re: IP address/port conflict
« on: March 16, 2017, 01:27:55 PM »
Yes the nettalk app is using port 80.
But only on one IP.
IIS should use port 80 on the other IP.
But only on one IP.
IIS should use port 80 on the other IP.
320
Web Server - Ask For Help / IP address/port conflict
« on: March 16, 2017, 07:12:33 AM »
I have a nettalk web app running on a server that has multiple IP addresses.
I've restricted the nettalk app to only one address. And it correctly responds only to that one - ignoring loopback or the other routable IP.
My problem is that I tried installing IIS on that machine on the other IP address. It refuses to start on port 80. It will start on another port, or if I kill the nettalk app.
So I'm *guessing* the nettalk app is actually reading port 80 from all the IPs on that machine, but only actually responding to the one that's selected?
I wound up installing IIS on a different server, but wonder whether there's a way to do what I was trying to??
Thanks for any info.
-- Jane
I've restricted the nettalk app to only one address. And it correctly responds only to that one - ignoring loopback or the other routable IP.
My problem is that I tried installing IIS on that machine on the other IP address. It refuses to start on port 80. It will start on another port, or if I kill the nettalk app.
So I'm *guessing* the nettalk app is actually reading port 80 from all the IPs on that machine, but only actually responding to the one that's selected?
I wound up installing IIS on a different server, but wonder whether there's a way to do what I was trying to??
Thanks for any info.
-- Jane
321
Web Server - Share Knowledge / Re: PGP Encryption
« on: March 19, 2014, 08:13:34 AM »
Hi, Kevin,
Bearing in mind that we're just talking about the SFTP part of the process... I've PGP encrypted the file first.
Also... when I first set up an SFTP to a site, I'll normally connect manually first. A lot of times you get a "do you want to install this site's certificate" message.
My SFTP upload is two pieces.
There's a batch file, which reads:
"C:\Program Files (x86)\WinSCP\WinSCP.com" /script=c:\340b\Walgreen\WalgreenWinSCPscript.txt /log=c:\340b\Walgreen\Walgreens.log
And the script file it calls consists of:
option batch abort
option confirm off
open Walgreens
option transfer binary
lcd c:\340b\walgreen
put -nopermissions -nopreservetime c:\340b\Walgreen\OutputData\9310*.pgp *.pgp
close
exit
The "open Walgreens" is opening a site I've saved in WinSCP called Walgreens.
At least one other tweak I remember is needing to tell WinSCP to store its sites setup in an INI file rather than in the registry (since I'm running this as SQL Agent, not as a logged on user.) Pic attached.
You may also find this useful:
http://winscp.net/eng/docs/guide_automation
Cheers,
Jane
[attachment deleted by admin]
Bearing in mind that we're just talking about the SFTP part of the process... I've PGP encrypted the file first.
Also... when I first set up an SFTP to a site, I'll normally connect manually first. A lot of times you get a "do you want to install this site's certificate" message.
My SFTP upload is two pieces.
There's a batch file, which reads:
"C:\Program Files (x86)\WinSCP\WinSCP.com" /script=c:\340b\Walgreen\WalgreenWinSCPscript.txt /log=c:\340b\Walgreen\Walgreens.log
And the script file it calls consists of:
option batch abort
option confirm off
open Walgreens
option transfer binary
lcd c:\340b\walgreen
put -nopermissions -nopreservetime c:\340b\Walgreen\OutputData\9310*.pgp *.pgp
close
exit
The "open Walgreens" is opening a site I've saved in WinSCP called Walgreens.
At least one other tweak I remember is needing to tell WinSCP to store its sites setup in an INI file rather than in the registry (since I'm running this as SQL Agent, not as a logged on user.) Pic attached.
You may also find this useful:
http://winscp.net/eng/docs/guide_automation
Cheers,
Jane
[attachment deleted by admin]
322
Web Server - Ask For Help / Re: The crimson band
« on: March 18, 2014, 06:57:29 AM »
Thanks!
Jane
Jane
323
Web Server - Ask For Help / The crimson band
« on: March 17, 2014, 08:18:44 PM »
All right, so the version error in 7.37 exposed me to the "error in site javascript" red band.
But even with that fixed and on prior versions, I've sometimes seen a flash of red.
And on an ancient, excruciatingly slow iphone, when I refresh a browse that banner shows up for about 2 seconds before the page completes and the banner goes away.
Is this something I've done?
Jane
But even with that fixed and on prior versions, I've sometimes seen a flash of red.
And on an ancient, excruciatingly slow iphone, when I refresh a browse that banner shows up for about 2 seconds before the page completes and the banner goes away.
Is this something I've done?
Jane
324
Web Server - Ask For Help / Re: Graceful notice of timed-out session?
« on: March 17, 2014, 08:09:37 PM »
Way cool.
I'm not using a login for this app, but this gives me some good options.
Thanks, Bruce!
Jane
I'm not using a login for this app, but this gives me some good options.
Thanks, Bruce!
Jane
325
Web Server - Share Knowledge / Re: PGP Encryption
« on: March 16, 2014, 06:32:43 PM »
Sure, it's possible.
Nothing to do with NetTalk, but I have a SQL Agent job that runs a Clarion program on a 64-bit Server2008 R2 machine to create a text file (not CSV, but some weird delimiters which is why I didn't use SSIS).
It was a bit of a challenge finding a cheap (or in this case, free) command-line PGP client.
I wound up using gpg2.exe.
The program and all its DLLs are in a folder used by my job.
After creating the text file, my program runs a batch file with one line:
gpg2 --homedir . -r client6 -a -o %1 -e %2
Then I run another batch file that calls WinSCP (a free SFTP program) to upload it.
I set this up about a year ago, so details are very fuzzy. There was some twiddling with getting keys into trustdb.gpg.
If I run gpg2 --list-public-keys --homedir .
It shows that "client6" is the uid in the trustdb file in the folder I'm using.
It's been running every night since then.
Jane
Nothing to do with NetTalk, but I have a SQL Agent job that runs a Clarion program on a 64-bit Server2008 R2 machine to create a text file (not CSV, but some weird delimiters which is why I didn't use SSIS).
It was a bit of a challenge finding a cheap (or in this case, free) command-line PGP client.
I wound up using gpg2.exe.
The program and all its DLLs are in a folder used by my job.
After creating the text file, my program runs a batch file with one line:
gpg2 --homedir . -r client6 -a -o %1 -e %2
Then I run another batch file that calls WinSCP (a free SFTP program) to upload it.
I set this up about a year ago, so details are very fuzzy. There was some twiddling with getting keys into trustdb.gpg.
If I run gpg2 --list-public-keys --homedir .
It shows that "client6" is the uid in the trustdb file in the folder I'm using.
It's been running every night since then.
Jane
326
Web Server - Ask For Help / Graceful notice of timed-out session?
« on: March 15, 2014, 02:30:20 PM »
Wise ones,
What's a graceful way to let a user know that his session has timed out?
My bank, for example, starts popping up "if you're idle for two more minutes you'll be logged off" messages.
Then bounces to a login page once they've killed the session.
For a site that doesn't require a login, I'd like to switch to a "need to reconnect" page when it's timed out.
Otherwise people (such as me) try clicking buttons on the screen 20 minutes later and nothing happens.
Is there something in the NT examples showing this sort of thing... or a thread you can point me at?
Or a suggested approach?
TIA
Jane
What's a graceful way to let a user know that his session has timed out?
My bank, for example, starts popping up "if you're idle for two more minutes you'll be logged off" messages.
Then bounces to a login page once they've killed the session.
For a site that doesn't require a login, I'd like to switch to a "need to reconnect" page when it's timed out.
Otherwise people (such as me) try clicking buttons on the screen 20 minutes later and nothing happens.
Is there something in the NT examples showing this sort of thing... or a thread you can point me at?
Or a suggested approach?
TIA
Jane
327
Web Server - Ask For Help / Re: NT 7.37 and String Theory 2 compile errors
« on: March 10, 2014, 11:10:46 PM »
I just got that red banner error also tonight.. saying web folder is on 7.36 and needs to be on 7.37.
Which is strange, in that I was on 7.31 prior to the upgrade.
The netweb.js file in my libsrc\win\netweb\web\scripts folder is dated 3/07/2014 8:35AM, and has the line
;var NetTalkVersion = 7.36;
I edited that to 7.37 and ran the gzipall batch file, and the error went away.
Jane
Which is strange, in that I was on 7.31 prior to the upgrade.
The netweb.js file in my libsrc\win\netweb\web\scripts folder is dated 3/07/2014 8:35AM, and has the line
;var NetTalkVersion = 7.36;
I edited that to 7.37 and ran the gzipall batch file, and the error went away.
Jane
328
Web Server - Ask For Help / Re: Windows pass-through authentication?
« on: June 20, 2013, 06:07:10 AM »
Thanks, Bruce.
I don't know the mechanism, just from an end-user have experienced that it works on the corporate networks where I contract.
This is one article I just found: http://dev.chromium.org/developers/design-documents/http-authentication
And a quick search turned this up for firefox: http://ole.michelsen.dk/blog/firefox-auto-login-with-windows-authentication-and-ad/
If this isn't workable... looking at the "LoginBeforeFrame" and "AccessLevels" demos, it would appear that the approach might be to protect at least the login screen with SSL and then to have the webserver exe hash the password and authenticate against its own user file?
Thanks.
Jane
I don't know the mechanism, just from an end-user have experienced that it works on the corporate networks where I contract.
This is one article I just found: http://dev.chromium.org/developers/design-documents/http-authentication
And a quick search turned this up for firefox: http://ole.michelsen.dk/blog/firefox-auto-login-with-windows-authentication-and-ad/
If this isn't workable... looking at the "LoginBeforeFrame" and "AccessLevels" demos, it would appear that the approach might be to protect at least the login screen with SSL and then to have the webserver exe hash the password and authenticate against its own user file?
Thanks.
Jane
329
Web Server - Ask For Help / Re: Windows pass-through authentication?
« on: June 19, 2013, 04:06:24 PM »
Thanks, Kevin.
I was using SSRS and pass-through authentication just as an example.
My NetTalk web server does access a SQL database, but the app itself does that using SQL authentication not related to the identity of the user connecting from a browser.
I want to know who's connecting from the browser session to set some user-specific configuration stuff (preferences and access). That's just stuff my web server app needs to know, not anything involved with SQL authentication.
And while I mentioned IE, a lot of our internal users use Chrome.
While Chrome won't display the SSRS reports properly, BTW, it does pass through the user authentication information to the SSRS web service just fine.
Jane
I was using SSRS and pass-through authentication just as an example.
My NetTalk web server does access a SQL database, but the app itself does that using SQL authentication not related to the identity of the user connecting from a browser.
I want to know who's connecting from the browser session to set some user-specific configuration stuff (preferences and access). That's just stuff my web server app needs to know, not anything involved with SQL authentication.
And while I mentioned IE, a lot of our internal users use Chrome.
While Chrome won't display the SSRS reports properly, BTW, it does pass through the user authentication information to the SSRS web service just fine.
Jane
330
Web Server - Ask For Help / Re: Windows pass-through authentication?
« on: June 19, 2013, 01:22:12 PM »
Hi, Peter,
Yes, the right track.
For example, when I'm on a domain computer and connect to the internal SQL Server Reporting Services website on our company LAN, Internet Explorer automatically authenticates me.
When I use a browser on my laptop that's not part of the domain, SSRS presents me with a login screen because the domain-based SSRS security has no idea who I am.
I'd like to know whether the mechanism that SSRS uses to know who's at the other end of the browser could be used connecting to a NetTalk app.
Yes, the right track.
For example, when I'm on a domain computer and connect to the internal SQL Server Reporting Services website on our company LAN, Internet Explorer automatically authenticates me.
When I use a browser on my laptop that's not part of the domain, SSRS presents me with a login screen because the domain-based SSRS security has no idea who I am.
I'd like to know whether the mechanism that SSRS uses to know who's at the other end of the browser could be used connecting to a NetTalk app.