nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Livelink CGI Hosts - section

unknown_user3

In Directory Services can anyone explain in more details this field "Livelink CGI Hosts"? What other than 127.0.0.1 should be there?

Find more posts tagged with

Comments

Benjamin_Shapiro_(benshapiro_-_(deleted))

Hi Minu.This entry essentially "tells" Livelink which hosts may contact it directly for CGI-related requests.Best practices suggest the localhost IP (127.0.0.1) as well as the IP address of the Livelink server from its fully qualified domain name.Situations where additional entries would be necessary are when the SEA is used (the web server runs on a separate machine), and the Remote Cache. There may be others but this is a sample.Hope that helps.Ben

unknown_user3

In case of Authentication (NTLM) is it required to provide the IP of domain controller?I cannot understand fully your words"IP address of the Livelink server from its fully qualified domain name"?

Chris_Wagg

Message from Chris Wagg via eLinkCGIHosts really is not related to Directory Services, but the DS moduledoes give you a nice interface for adding it rathen than having to setit in the opentext.ini.The IP address of any Livelink servers connected to this database shouldbe added to this field. This will block anyone who is trying to run aCGI from an IP that is not listed in this setting. ---------------------------------------Chris WaggSenior Product SpecialistLivelink Escalations Support TeamOpen Text CorporationPh: 800-540-7292--------------------------------------------Original Message-----From: eLink Discussion: Livelink Directory Services Discussion[mailto:directoryservices@elinkkc.opentext.com] Sent: Wednesday, January 02, 2008 3:51 AMTo: eLink RecipientSubject: In case of Authentication (NTLM) is it required to provide theIP of domain...In case of Authentication (NTLM) is it required to provide the IP ofdomain...Posted by Kuncheria, Minu on 01/02/2008 03:40 AMIn case of Authentication (NTLM) is it required to provide the IP ofdomain controller?I cannot understand fully your words"IP address of the Livelink server from its fully qualified domainname"?[To reply to this thread, use your normal E-mail reply function.]============================================================Topic: Livelink CGI Hosts - sectionhttps://knowledge.opentext.com/knowledge/llisapi.dll/open/13667942Discussion: Livelink Directory Services Discussionhttps://knowledge.opentext.com/knowledge/llisapi.dll/open/3062146Livelink Server:https://knowledge.opentext.com/knowledge/llisapi.dllTo Unsubscribe from this Discussion, send an e-mail tounsubscribe.directoryservices@elinkkc.opentext.com.

Thomas_Della_Peruta

Message from Thomas della Peruta via eLink Hello sir,it's pretty easy. We are refering to the IP Address of the Server whereLivelink is installed.It can simply be explained like this:You have a server called server1.mydomain.com, the ip address assignedto this FQDN is 192.168.10.10In your cgihosts parameter you should have 127.0.0.1,192.168.10.10The cgihosts parameter is a security function in Livelink. It preventsmalicious programs from connecting to the Livelink Server port byrestricting the access to the Livelink Server port based on IPAddresses.In a standard livelink scenario you have the livelink Server and WebServer on the same machine. The Livelink Server is the llserver process you start when you start thelivelink Server Service, or start the start_llserver script under unixderivities of Livelink. The port it listens on is by default 2099.When a user connects to livelink via the Web Server he "starts" one ofthe cgi clients like livelink.exe, llisapi.dll or livelink. The cgireads the opentext.ini to find the hostname and port it needs to connectthe llserver process. The cgi then either connects to the livelink server port via the FQDN orthe localhost name.When the request reaches the livelink Server, it verifies the ip addressof where the request came from and checks if it is in the list ofallowed ip addresses.Hence it is important to have both the loopback (127.0.0.1) and publicIP Address of the livelink server machine in your cgihosts.Equally, if you use the Secure Extranet Archtiecture Servlet or RemoteCache you also need to add the ip addresses of these machines into thelist to allow connections to the livelink server port from these remotehosts. -----Original Message-----From: eLink Discussion: Livelink Directory Services Discussion[mailto:directoryservices@elinkkc.opentext.com] Sent: Wednesday, January 02, 2008 9:51 AMTo: eLink RecipientSubject: In case of Authentication (NTLM) is it required to provide theIP of domain...In case of Authentication (NTLM) is it required to provide the IP ofdomain...Posted by Kuncheria, Minu on 01/02/2008 03:40 AMIn case of Authentication (NTLM) is it required to provide the IP ofdomain controller?I cannot understand fully your words"IP address of the Livelink server from its fully qualified domainname"?[To reply to this thread, use your normal E-mail reply function.]============================================================Topic: Livelink CGI Hosts - sectionhttps://knowledge.opentext.com/knowledge/llisapi.dll/open/13667942Discussion: Livelink Directory Services Discussionhttps://knowledge.opentext.com/knowledge/llisapi.dll/open/3062146Livelink Server:https://knowledge.opentext.com/knowledge/llisapi.dllTo Unsubscribe from this Discussion, send an e-mail tounsubscribe.directoryservices@elinkkc.opentext.com.

unknown_user3

If in the CGI hosts field someone has mentioned the IP address of the Exchange server. Can it confuse the NTLM authentication?2nd thing is it OK to mentione the IP address of the Authentication server or should not have any value other than 127.0.0.1, Local IP, Public IPAny recommendation in case of DMZ?

Mohammed_Abushmais

Hello Thomas, Thanks a lot for your nice explaination of Livelink CGI Hosts