1. Kevin Bell
  2. PowerServer
  3. Monday, 16 October 2023 21:16 PM UTC

We are trying to deploy a small app using PowerServer 2022 build 1900 and getting an error with deploylist access is unauthorized. Seems like not matter how I setup authorization, I'm unable to move past this issue.

We currently have this app running in PowerServer, however, it is running HTTP not HTTPS. 

Our goal with the HTTPS is to limit the AD users from access to the launcher or the application. If the user accessing the application is not in a specified AD group, then they should get the 401 error.

Below are some of my settings.

PowerServer App Object:

 

IIS:

image

Authentication HTTPS:

image

image

Security for directory structure:

image

SYSTEM: Full permissions

PRIV_IdAdministration: Full permissions

PRIV_GV_ITDiskRev: Execute, List, Read

mmdev_installers: Execute, List, Read (I'm in this group)

Administrators: Full permissions

IIS_IUSRS:  Execute, List, Read

 

Any advice would be greatly appreciated. Thanks in advance.

 

Logan Liu @Appeon Accepted Answer Pending Moderation
  1. Tuesday, 17 October 2023 02:38 AM UTC
  2. PowerServer
  3. # 1

Hi Kevin,

Windows authentication using AD hasn't been supported in PowerServer. 

1) PowerServer supports common cloud authentications solution: Tutorial 11: Authenticating your apps - - PowerServer 2022 R2 Help (appeon.com)

E.g.: if you choose Azure AD, you can Integrate on-premises AD with Azure - Azure Architecture Center | Microsoft Learn

2) From your error message, the IIS Server Windows authentication protects all files from being downloaded.

Notice these authentication solutions suggested above are used to protect the PowerServer Web API, not the cloud app files.

3) If only need to run this app in the ethernet,  you can also consider using PowerClient which is basically the same as the native PowerBuilder app. 

4) You can submit an enhancement ticket on our support portal (at https://www.appeon.com/standardsupport) to track it.

Regards, Logan

 

 

Comment
There are no comments made yet.
Kevin Bell Accepted Answer Pending Moderation
  1. Wednesday, 18 October 2023 12:07 PM UTC
  2. PowerServer
  3. # 2

Thanks for the quick response.

I believe IIS is just acting as a file server for PowerServer.

I'm able to get to the deploylist using Edge Browser, just not when running the PowerServer app.

Type in:

 

Result:

The AD groups are setup on IIS under Authentication Roles.

Comment
There are no comments made yet.
  • Page :
  • 1


There are no replies made for this question yet.
However, you are not allowed to reply to this question.