-
Title
Modify Active Roles Web Interface Connection Settings -
Description
The settings for the Web Interface that determine which Administration Service the Web Interface connects to normally would require re-installing the Web Interface components to allow you to choose a different configuration setting.
-
Cause
This settings is not configurable in any GUI outside of the first time installing the Web Interface components. -
Resolution
This setting can be manually configured by modifying the Settings.xml file located in one of the following locations, depending on the version of Active Roles you are currently running:
6.9 and below
C:\Program Files\Quest Software\Quest One ActiveRoles\Web Interface\ \Public\xml 7.0
C:\Program Files\Dell\Active Roles\7.0\Web\Public\xml7.2 and later
C:\Program Files\One Identity\Active Roles\7.x\Web\Public\xml
The following settings is a basic Settings.xml file that is properly commented to describe available settings:
<?xml version="1.0"?>
<!--EDMServiceName identifies EDM service to which the Web client is connected. After you have changed the service name, you must restart IIS.!-->
<!--EDMServiceType identifies type of using EDM service;
0 - use local service,
1 - use any available service,
2 - use EDMServiceName service
3 - use any service from EDMServiceName replication group -->
<Connect EDMServiceType="0" EDMServiceName="">
<DefaultLanguageID>en-US</DefaultLanguageID>
</Connect>Modifying the settings in this file requires a restart of IIS, as documented in the above XML comments.
A note regarding the use of number 3 for the EDMServiceType settings, this refers to Microsoft SQL Server Replication Groups.
NOTE: It is recommended to only use FQDNs when entering the EDMServiceName, especially if you are using SPNs (Service Principal Names). Using an IP will cause Kerberos authentication to fail.