The Remote access settings ('Server Manager' > 'Remote') control HTTP and HTTPS web administration and SOAP access to Cerberus FTP Server. When Cerberus is running as a Windows Service, the GUI connects to and communicates with the Cerberus Windows Service through a remote access API called SOAP. The Cerberus Windows Service listens for SOAP connections on the Port specified under the Remote settings page of the Server Manager. That port must be available for Cerberus to listen on or the GUI will be unable to connect to the local Windows Service.
Most users will never see the Cerberus Service Connection dialog because it is only shown when the Cerberus GUI can't connect to the underlying Windows Service. This usually happens because:
- (Cerberus 13.2.0 and beyond): A Windows User with access to the GUI has set or reset the password. If that happens, any other Windows users that subsequently access the console must enter the new password the first time they access the GUI after the password set/reset (details on this feature are below).
- The password set on the 'admin' user on the 'Server Manager' > 'Remote' tab in the Cerbers GUI and the admin password expected by the Cerberus service are out of sync (or no admin password had never been set)
- A DLL needs updating after installation and the service and GUI cannot communicate properly until it does. This is rare.
If you are finding some Windows users are being challenges for the password, but not all:
Starting in 13.2.0, the Cerberus admin password is now associated with each Windows user's profile. This feature was introduced because, prior to this enhancement, any logged in Windows user could launch the Cerberus desktop admin console without being challenged for a password at least once. This is a security risk and prevents true control over who has access to the Cerberus GUI.
With this feature, each Windows user accessing the Cerberus Admin Console must enter the admin password at least once. For example, you have Windows users A, B and C that all manage Cerberus. User A is the one that installed Cerberus and defined the password. Now every time user A opens the Cerberus Admin console, they are no longer challenged for the password. When users B or C try to open the console, however, they are challenged for the password and must enter the same one set by user A. If they do so successfully, they will no longer be challenged either, UNTIL someone changes the admin password. If the password is changed by user A, then users B and C have to enter the new password set by user A to no longer be challenged.
If you have users being challenged by the password screen when entering the Cerberus Admin Console, they must enter the latest admin password to enter. Unless they have selected the 'Always Ask for Password' box, they should not be asked for the password again until the next time it is reset.
Users will have to enter the latest password at least once if someone has reset it.
This enhancement is a security feature that ensures only authorized users that have the admin password in their possession can get into the Cerberus Admin Console.
If you are finding everyone being challenges for the password, even after entering the correct password, you can check if the problem is a DLL issue. If so, the instructions below will usually fix the problem:
If the problem persists after restarting, continue with the instructions below.
If a remote access password (the 'Primary Administrator Account' in Server Manager > 'Remote' ) had never been set, or the UI password has been lost, then the UI may not be able to connect to the underlying Windows Service. This can happen if a password is set, but then no one ever closes the GUI, saving the password to the permanent Cerberus settings. The solution is to temporarily shut down the Cerberus Windows Service, start Cerberus in application mode, and then set a remote access (admin) password so that the GUI and Windows Service can communicate. Here are the steps:
- Open up the Service Control Manager (services.msc) and stop the Cerberus FTP Server Service. You will see "Cerberus FTP Server" listed in the services list. You can access the Service Control Manager by searching for 'Services' in the Windows search box and then selecting 'Services'. Once the Service Control Manager is open, right-click on the Cerberus FTP Server service and select Stop.
- Run the Cerberus User Interface as administrator in application mode either by right-clicking on the Cerberus FTP Server icon on the desktop and selecting 'Run As Administrator' or through the Program Manager and selecting 'Run As Administrator' there. It should startup in application mode without any prompts for passwords.
- If you are prompted to start the Cerberus FTP Server Windows Service, select No.
- In Cerberus FTP Server, open the Server Manager and select the Remote page. Under 'Administrator Accounts' select 'The primary administrator account' and right-click. Select 'Change Password' on the drop-down menu. Change the password and click 'Change' to update the account. Now in the top right corner, click the diskette icon to update your settings.
- You can now close the user interface (Version 11.2.2 and above, just use the 'x' at upper-right. Version 11.2.1 and below, you must go to the File menu and select Exit from the menu). This will shut down Cerberus FTP Server and close the application.
- Start the Cerberus FTP Server service from the Service Control Panel. Right-click on the service and select Start.
You should now be able to start and connect to Cerberus FTP Server normally by clicking on the desktop application icon.
Comments
0 comments
Please sign in to leave a comment.