Webinterface

[knk]

Hey @emcodem!
I understand your challenges completely. It's not easy to "please" everyone and fit every use case.
The "refresh" was a bad call, obviously it would only fit my scenario and probably no one else's.

My point was/is, for those who are technically "less inclined", and if they are many for some reason, the Start button not providing feedback can be a pain, because if you do make a double click in a heavy WF (with dozens or even hundreds of files listed), it's easy to create a mess. Even very light WF's can create a mess if they don't give us enough time to cancel a double or triple submission.

So my honest suggestion is, for consideration, to have the Start button change its state after clicked, like to an unclickable "Job Started" and offering something like a "<<back" link to reset it to a clickable state again.
Even better (and now just dreaming ) to have a custom pop-up message per WF, that could appear as a window/form/mask and called by a variable or something after user clicking Start Just shooting things out there!

All the best to you guys! Have a wonderful weekend

[emcodem]

Got to mention that i am always happy when i get some inputs from you @knk, thanks a bunch!

My point was/is, for those who are technically "less inclined", and if they are many for some reason, the Start button not providing feedback can be a pain, because if you do make a double click in a heavy WF

In theory it currently should not be possible to unintentionally double submit but the mechanics around that are far away from being perfect so i believe you have issues with it without a doubt - and yes of course we also want to be compatible with "less inclined" users interactions

to have the Start button change its state after clicked, like to an unclickable "Job Started" and offering something like a "<<back" link to reset it to a clickable state again.

Thats one of my thoughts, i do that at work in a similar but much simpler tool and the users do use it very much actually, its a button saying "reactivate" and the submit btn goes greyed out. Of course it also depends or better is caused by the way i designed the corresponding workflow form - this can or can not drive the users into the wish to re-use the current form inputs and instead clean the file list for a new job submission.
Of course we want to support both cases, complete restart and re-use current form

Even better (and now just dreaming ) to have a custom pop-up message per WF, that could appear as a window/form/mask and called by a variable or something after user clicking Start

Such things are absolutely thinkable when i finished what i said before - the possibility to store job submit form settings along with the ffastrans workflow json.
Question: what would you let the user know in such a "post-submit" window?

[DCCentR]

Hi @emcodem!
I hope you're doing well.

I had a couple questions:
- Is there any way to make the populated %s_error% ouput message similar to the populated %s_succes%, so that it would be without that part “Populate variables@*ServerName*: ”?

Безымянный.png (35.29 KiB) Viewed 386046 times

- If cmd output is encoded in WINDOWS-1251, the web interface looks like this:

Безымянный2.png (5.14 KiB) Viewed 386046 times

Безымянный3.png (104.16 KiB) Viewed 386046 times

Is there any way to fix this?

[emcodem]

@DCCentR sorry i should have answered much earlier. AFAIK there is currently no way to remove the portion you want to remove from error message.
I'll check out the encoding problem.

[knk]

Hi @emcodem

Question: what would you let the user know in such a "post-submit" window?
[/quote]

Something very straightforward like "Job Started", or something custom so I could type it in any language or adapt it overtime.

Another thing,

In the new web browser version I can't open "info", it retrieves error finding mediainfo. Is there a fix for this?

Thanks!

[knk]

...besides the Media Info error I mentioned below, the video player doesn't allow to "take segments" as it used to.

All the best!

[whtghst1]

How is the active directory integration resolving the domain name to get the domain controller. The reason I ask is that pure DNS resolution of the domain in a multi-site, multi domain controller environment could return a domain controller at different site that blocks direct traffic from the site where the FFAStrans system is located.

Spoke Site A with Domain Controller <->Hub Site A with Domain Controller <-> Spoke SIte B with Domain Controller.
Most configurations like this spokes can talk to their own DC's and the Hubs DC's, but not other spokes DC's.

If network firewalls prevent Spoke Site A from talking to Spoke Site B issues can happen during Auth check not able to contact the domain controller if you are using pure DNS resolution. The pure DNS lookup just puts up a round robin dns result of all the domain controllers in the domain in random order.

Microsoft Windows has an API for the DC Locater process to call to allow to applications to look up the closet domain controller that takes in the configured Domain Site link path costs. (Ensuring it the on-site DCs or the next site DC's in the chain are given.)

http://msdn.microsoft.com/en-us/library ... s.85).aspx

[emcodem]

@knk sorry for not answering, i'll check out your concerns soon

@whtghst1
i have no clue how they resolve a DC in the underlying node modules but as this is cross-platform i highly doubt they use native win32 functions.
What you write kind of explains why some vendors who integrate AD (e.g. QNAP) force me to insert directly names of DC controllers instead of using the primary DNS name. I always found that a little strange

I'll see how i can support this. It looks like this process of finding the nearest DC comes with some implications as MS writes on their website, e.g. the call can take a few seconds and one should do it in background. So as it is not really straight forward to use, i would like to see some example how exactly it has been implmented successfully and without being more disturbing than helping.

I tend to peridically call a powershell cmd in the background but the module Get-ADDomainController seems to be part of PS AD tools which are not by default installed. You don't happen to know any small exe e.g. sysinternals or another slick way to execute DsGetDcNameA function?

[rlima]

Hi @emcodem,

Not sure if the issue I'm bringing now is related or not to this one:

How is the active directory integration resolving the domain name to get the domain controller.

We've been facing occasional LDAP Errors that are preventing some users to login. Since we have other applications with ldap authentication running with no problems, I'd like to share the error to check if you have any clue on this topic.

The users get this error:

2025-08-21 12_09_10-365.png (10.16 KiB) Viewed 26884 times

In the Webinterface log I find this:

Code: Select all

2025-07-31 15:06:15: info: [webint]: auth error User does not exist locally,
tried AD login but failed.
Bad username/password?
StrongAuthRequiredError: 00002028: LdapErr: DSID-0C090347, comment: The server requires binds to turn on integrity checking if SSL\TLS are not already active on the connection, data 0, v65f4  [90mundefined[39m [90mundefined[39m
2025-07-31 15:06:15: error: [webint]: User does not exist locally,
tried AD login but failed.
Bad username/password?
StrongAuthRequiredError: 00002028: LdapErr: DSID-0C090347, comment: The server requires binds to turn on integrity checking if SSL\TLS are not already active on the connection, data 0, v65f4 
2025-07-31 15:06:15: info: [webint]: NOT AUTHENTICATED Web auth is true
2025-07-31 15:06:15: info: [webint]: /getactivejobsajax_treegrid redirected to login
2025-07-31 15:06:17: info: [webint]: NOT AUTHENTICATED Web auth is true
2025-07-31 15:06:17: info: [webint]: /getworkflowjobcount redirected to login
2025-07-31 15:06:17: info: [webint]: NOT AUTHENTICATED Web auth is true
2025-07-31 15:06:17: info: [webint]: /getactivejobsajax_treegrid redirected to login
2025-07-31 15:06:17: info: [webint]: NOT AUTHENTICATED Web auth is true
2025-07-31 15:06:17: info: [webint]: /getworkflowjobcount redirected to login
2025-07-31 15:06:20: info: [webint]: NOT AUTHENTICATED Web auth is true
2025-07-31 15:06:20: info: [webint]: / redirected to login
2025-07-31 15:06:20: info: [webint]: NOT AUTHENTICATED Web auth is true
2025-07-31 15:06:20: info: [webint]: /getactivejobsajax_treegrid redirected to login
2025-07-31 15:06:25: info: [webint]: NOT AUTHENTICATED Web auth is true
2025-07-31 15:06:25: info: [webint]: / redirected to login
2025-07-31 15:06:25: info: [webint]: NOT AUTHENTICATED Web auth is true
2025-07-31 15:06:25: info: [webint]: /getactivejobsajax_treegrid redirected to login
2025-07-31 15:06:27: info: [webint]: issue local and ldap login
2025-07-31 15:06:27: info: [webint]: trying local-login admin

Any clue?
Thanks for your help!

[emcodem]

StrongAuthRequiredError: 00002028: LdapErr: DSID-0C090347, comment: The server requires binds to turn on integrity checking if SSL\TLS are not already active on the connection, data 0, v65f4

Hey @rlima

as the error that comes back from AD talks about SSL stuff, this dont seem to be related to the other topic about resolving the nearest AD controller.
On Webinterface AD Setup page, there is a little checkbox for "use LDAPS", did you check this? If yes then can you tell if you imported the Root CA of the signing authority that signed the SSL cert of your AD is imported in the root machine certs of the webinterface server machine?