LAPI and Integrated Security

I am trying to improve our user access security when accessing Livelink through LAPI from internally developed applications.

The link below points to an article on the communities section of your web site. However I am unable to get this working with our installation of Livelink.
http://communities.opentext.com/communities/llisapi.dll/wiki/7967685/How%20to%20use%20integrated%20security

I beleive the issue is to do with the LivelinkCGI vallue that is being used when creating the LLSession object.

The attached sample code creates the LLSession object as advised to connect to the Enterprise Workspace and then add a version to a document. The error I am receiving is when making the call to "AccessEnterpriseWS". The error given is "Problems with Web Transport (404 Not Found)".

Can anyone advise how I can find out the correct value I should be using to resolve this issue?

LLMethods.vb

Find more posts tagged with

Comments

Ferdinand Prantl

I'd say that your hostname port or the URL path is wrong. You specify http://myhost/livelinkdev/livelink/llisapi.dll. If I'm right, you will get in the browser the same 404 for that URL. Fix it according to you usual Livelink web URL.

LAPI requests and responses are plain text. If you want to make the LAPI communicaiton more secure, switch to HTTPS.

--- Ferda

sıɹɥɔ

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">

Hi Alex,

Your code has the host as "MyHost" and the cgi path as "/livelinkdev/livelink/llisapi.dll". I suspect that instead your host should be "livelinkdev" and the cgi path to be "/livelink/llisapi.dll".

(Also, as a tip, your database value is "MyDatabase". Instead you can simply leave that empty. LAPI does the "right thing" for an empty database name value.)

Hope this helps,

-chris

From: eLink Entry: LAPI Forum [mailto:lapi@elinkkc.opentext.com]
Sent: Friday, August 20, 2010 7:19 AM
To: eLink Recipient
Subject: LAPI and Integrated Security

LAPI and Integrated Security

Posted by alex.webb@miller-insurance.com (Webb, Alex) On 2010/08/20 08:14

I am trying to improve our user access security when accessing Livelink through LAPI from internally developed applications. The link below points to an article on the communities section of your web site. However I am unable to get this working with our installation of Livelink.
http://communities.opentext.com/communities/llisapi.dll/wiki/7967685/How%20to%20use%20integrated%20security I beleive the issue is to do with the LivelinkCGI vallue that is being used when creating the LLSession object. The attached sample code creates the LLSession object as advised to connect to the Enterprise Workspace and then add a version to a document. The error I am receiving is when making the call to "AccessEnterpriseWS". The error given is "Problems with Web Transport (404 Not Found)". Can anyone a! dvise how I can find out the correct value I should be using to resolve this issue?

Attachment Links:

LLMethods.vb (2 KB)

Alex Webb

Thanks for the repsonses .

I managed to get it working within a Windows desktop application using the following code:

Dim

config As LLValue = New LLValue().setAssocNotSet() config.add(

"LivelinkCGI" , " /livelink/livelink.exe" ) config.add( "HTTPS" , LLValue.LL_FALSE) config.add( config.add( "VerifyServer" , LLValue.LL_FALSE) "EnableNTLM" , LLValue.LL_TRUE) Dim session As LLSession = New LLSession("MyHost", 80, "Livelink", "", "", config)

However, using this code in a Web Service gives "Access Denied" errors. I have included the HTTPUserName and HTTPPassword parameters in the config object as suggested in the documentation (Non-Secured Tunnelling section) and this allows documents to be added. But this adds documents to livelink as the HTTPUserName user and not the user that is calling the Web Service.

Has anyone come across this issue from a Web Service and, if so, can help me resolve my issue?

Many Thanks,

Alex

Alex Webb

I have now managed get documents added into Livelink by not supplying a HTTPUserName or HTTPPassword. If the Web Service is using an Application Pool whose user has the required permissions to access the server Livelink is installed on these parameters are not required.

This will add documents to Livelink as the user running the Application Pool. However I have been unable to get the documents added to Livelink by the user calling the Web Service. From what I can gather this is not possible and am unable to investigate further due to time constraints on the project.

Therefore we will be connecting to Livelink as the user running the application pool and impersonating the user calling the Web Service. This should enable the documents to be added to Livelink as the user calling the Web Service without any passwords being exchanged.

If anyone can find a way of doing this without impersonating users and needing passwords then please let me know!