BOARD Connector Server Troubleshooting

The BOARDConnector server is a standard Windows service that runs under the Local System Account by default. 


In the Active Directory (AD), this user acts as a computer account. By default, the Service Principal Name (SPN) is assigned to the computer account in the following form:

FieldSyntaxExample value
XU Server[host].[domain]:[port]TODD.theobald.local:8064 (or localhost:8064)
Target PrincipalHOST/[hostname]@[domain]HOST/TODD.theobald.local@THEOBALD.LOCAL

The Target Principal must correspond either to the UPN of the user under which the XU Windows Service is running, or to an SPN assigned to this user.


Note: The Target Principal only needs to be changed in the BOARDConnector Designer login window if the service account of the XU Windows Service has been changed.

Windows service does not start #

When a service does not start, configure the service to use an user account with the following rights:

  • Local Security Policy > Local Policies > User Right ManagementLog on as a service
  • Permissions for the installation folder and subfolders: Modify
  • HTTP URL Access Control List e.g., urlacl url=https://+:80/MyUri user=DOMAIN\user

User Principal Name (UPN) #

Deviating from the standard, the service can also be executed under a different account:

  • User Principal Name (UPN)
  • Service Principal Name (SPN)

An UPN is assigned in the following form:

FieldSyntaxExample value
XU Server[host].[domain]:[port]TODD.theobald.local:8064 (or localhost:8064)
Target Principal[AD-user]@[domain]steffan@theobald.local

Note: After changing the user context of the Windows service, the UPN or SPN for logging in to the BOARDConnector server must also be adjusted.

To configure the service to use with UPN, do the following steps:

  1. Open Windows Services (Local).
  2. Selection of the BOARD Connector service. 
  3. Right click to open properties.
  4. Select the Log-on tab and switch to ‘This Account’.
  5. Search for Windows Ad users via [Browse …].
  6. Change the [Locations …] to ‘Entire Directory’.
  7. Select an existing UPN or SPN and confirm with [OK].

  8. Apply the changes by restarting the BOARD Connector service.
  9. Adjust the UPN in the Target Principal field when logging on to the BOARDConnector Server.
Creation date: 8/28/2023 9:03 AM      Updated: 10/2/2023 10:27 AM
Files   
DataImage14.png
9.2 KB
DataImage3.png
27.7 KB
DataImage81.png
15.9 KB
DataImage84.png
15.7 KB