Written by

Enterprise Application Development Consultant at The Ohio State University Wexner Medical Center
MOD
Question Scott Roth · Oct 6, 2023

Unable into Web Gateway Management

I recently started work on trying to Tighten Security in our Development Instance of IRIS that is running based on recommendations from our Audit as you might of seen from my other posts. I am currently trying to get into the Private Web Gateway Manager within IRIS as CSPSystem, but when I attempt to sign in nothing happens. 

I went through and reset the password in the CSP.ini and within IRIS for CSPSystem. I made sure it had the new GatewayRole per suggested 

https://docs.intersystems.com/healthconnect20231/csp/docbook/DocBook.UI.Page.cls?KEY=GSECURING_tighten#GSECURING_tighten_smp_CSPSysAuthe

but when I type in the username/password and click login, it just brings me back to the Web Management Portal sign on again and does not log me in. I made sure %Service_WebGateway is set to password authentication, and have restarted IRIS after all my changes.

When I had played around with this before I thought there was something funky with the CSP.ini that had to be done to allow me to sign in. 

Can someone point me in the direction so I can continue working on locking down the instance through the Web Gateway?

Thanks

Scott

Product version: IRIS 2023.1
$ZV: IRIS for UNIX (Red Hat Enterprise Linux 8 for x86-64) 2023.1.1 (Build 380U) Fri Jul 7 2023 23:36:58 EDT

Comments

Scott Roth · Oct 9, 2023

It is something with the password that is setup during the Install process vs the password that is on the user. I installed IRIS with setting the password as a default, verified that I could get into the Web Gateway Management, but as soon as I changed the password through the Security within the Management portal, I could no longer get into the Web Gateway Management.

So do I have to modify the CSP.ini somehow to tell it to use the LOCAL password, vs the SYSTEM password?

0
John Murray  Oct 9, 2023 to Scott Roth

They are independent passwords. Changing the password for CSPSystem user in IRIS Portal doesn't affect the password you authenticate with when you access the Web Gateway Management page even though the username is the same. 

0