All
Accepted answers
Scott Roth · Feb 15, 2024 go to post

How do I configure Apache/Web Gateway to allow this connection to happen?

Scott Roth · Feb 2, 2024 go to post

I am wondering if the Query against LDAP is taking too long and timing out in a response, even though he is getting an Invalid Username/password error returned but this happens when he tries to sign in from VS Code using /api/atelier. I tried increasing the timeout, but it doesn't seem to make a difference. I tried adjusting the Base DN search, and the Nested Group search to no avail.

Scott Roth · Jan 30, 2024 go to post

John, if we have multiple authentication methods turned on for /api/Atelier could this also cause Unauthenticated tries against /api/Atelier?

trying to track down login issues and I am seeing this...

Scott Roth · Jan 23, 2024 go to post

No doubt I will do a full backup prior to the changes. But thanks just wanted to confirm. I know not all the settings are mirrored, which I have asked for some of the settings to be so we can keep the servers in sync.

Scott Roth · Jan 23, 2024 go to post

I have no intention of replacing the Cache users with LDAP. It is for everyone else...Password Authentication regardless of what Auditing says will always need to be available for "Emergency" purposes.

Scott Roth · Jan 22, 2024 go to post

Thanks I got it running, but I am not sure what to do next. When I try to access HealthShare within the Management Portal, it is telling me the Service is Unavailable. I want to be able to see what the System can do.

Scott Roth · Jan 22, 2024 go to post

The Responses from the Stored Procedure calls back to the Operation look correct, and yes if there was an error it should of shown up.

Scott Roth · Jan 19, 2024 go to post

Is there a template to use for ZSTART or should I just grab the code from the Documentation?

Scott Roth · Jan 14, 2024 go to post

Is there a way to query the original SourceConfig through the process id?

Scott Roth · Jan 14, 2024 go to post

I think I tried that but I. Previous testing via terminal I had to put the multiple “” to get it to actively write the output to a log file. I will give it a try again later. 

Scott Roth · Jan 3, 2024 go to post

If you are running Windows maybe it’s the Windows Defender Firewall on your local machine?

Scott Roth · Dec 28, 2023 go to post

We created a shell script that logs into the terminal and runs EnableConfigItem from the cron in Linux to schedule processes to run at certain times of the day. 

Scott Roth · Dec 20, 2023 go to post

Do you have to use Result Set, why not use EnsLib.SQL.Snapshot as a context variable, and using a While loop call the Snapshot.Next() to loop through the results to do what you need to do?

For example.... I make calls to a Stored Procedure then use the Snapshot that is returned to fill in other properties that I need...

<call name='Ref_PrivilegeForm' target='CREDVerityMFNCPDWriteDev' async='0' xpos='200' ypos='350' >

<annotation><![CDATA[Execute stored procedure to insert/update the PrivilegeForm value sent by Verity into the Ref_PrivilegeForm table, and return the identity key]]></annotation>

<request type='osuwmc.Credentialing.DataStructures.RefPrivilegeForm' >

<assign property="callrequest" value="context.RefPrivilegeForm" action="set" />

</request>

<response type='EnsLib.SQL.Snapshot' >

<assign property="context.Snapshot" value="callresponse" action="set" />

</response>

</call>

<while name='Snapshot.Next()' condition='context.Snapshot.Next()' xpos='200' ypos='450' xend='200' yend='350' >

<assign name="PrivilegeFormKey" property="context.PrivilegeFormKey" value="context.Snapshot.Get(&quot;PrivilegeFormKey&quot;)" action="set" xpos='200' ypos='250' >

<annotation><![CDATA[aka Index]]></annotation>

</assign>

</while>

<assign name="reset Snapshot" property="context.Snapshot" value="&quot;&quot;" action="set" xpos='200' ypos='550' />
Scott Roth · Dec 15, 2023 go to post

Didn't give me any more additional information on the error besides what was in the Audit Database, but thanks.

Scott Roth · Dec 11, 2023 go to post

Yes %Development resource is set as part of the Role he is assigned from the detail we get from LDAP. 

The user is not really the issue I have at the moment, I am trying to track down why UnknownUser keeps trying to access the Gateway.

Scott Roth · Dec 11, 2023 go to post

Yes... 

I have no issues with VSCode, its just the one user. The issue with the user I believe is with LDAP not InterSystems as the same error happens when trying to sign into the Management Portal, periodically. 

Does /api/atelier need to have unauthenticated turned on? Why am I seeing the 

ERROR #815: User not authorized for service %Service_WebGateway
Web Application: /api/atelier

I don't want Unauthenticated users to access the system or be able to get through the Web Gateway at all...

Scott Roth · Dec 3, 2023 go to post

Yes I am attempting to connect to Epic Interconnect using OAuth 2.0. I created an internal backend application on vendor services and supplied it with a public key I had generated from our IRIS server. 
 

I just haven’t found the right sequence of code or syntax for the request to happen yet. I’m working with WRC but since Epic suggested using JWT and our systems team doesn’t have a jwks setup it’s been kind of a hard thing to figure out. 

Scott Roth · Nov 30, 2023 go to post

We have a shell script that we executes that signs in via Terminal and calls EnableConfigItem to start or stop an Object within IRIS. We found that running this at the OS level allows us to be more multithreaded than the Scheduler within IRIS.

Scott Roth · Nov 28, 2023 go to post

Thanks, yes I know /api/monitor/metrics would still be available, I was just wondering on which programs folks were using to ingest the data from /api/monitor/metrics/.

Scott Roth · Nov 17, 2023 go to post

I was able to get past the ERROR #5659: Property 'OAuth2.AccessToken::SessionId(6@OAuth2.AccessToken,ID=)' required by specifying an ID at the end of the request...

%SYS>set url = ##class(%SYS.OAuth2.Authorization).GetAuthorizationCodeEndpoint("EpicFHIRPOC",scope,OAUTHURL,.properties,.isAuthorized,.sc,,123)

so the sc returns 1, however isAuthorized is still returning 0. If I run IsAuthorized, I am not seeing any errors.

Am I taking the correct steps? How do I get the Token?

Scott Roth · Nov 9, 2023 go to post

It is possible to setup Apache to listen for 52773 instead of 80, so why wouldn't calls to port 52773 go through Apache if it is configured to listen for port 52773?

Scott Roth · Nov 9, 2023 go to post

Since everyone on the team uses the URL that contains the port number of 52773, I was trying to make it possible for them not to have to update their bookmarks they already use. Seamless transition to encrypting the traffic between their web browser and the server.

Scott Roth · Oct 30, 2023 go to post

We have turned off Telnet, and use ssh to connect to our servers, then open a terminal prompt by running...

:>iris session <name space>

There are many different clients out there from Windows Terminal, Cygwin, MobaXTerm, XWin32, even Windows Powershell would work with ssh. It all a matter of preference...

Scott Roth · Oct 26, 2023 go to post

FHIR is still has the reach the level of maturity that 2.3 had. While the technology is nice, it is still more query based than transactional based in my dealings with understanding the flow. How is an application to know a Patient to query if it does not have enough information to begin the query into FHIR.

Scott Roth · Oct 19, 2023 go to post

How do you setup Apache to know the VIP has been moved to one of the other servers? If you include the VIP in the ServerAlias settings in Apache then when a user connects to the VIP, Apache wont know which server to connect to.

Scott Roth · Oct 12, 2023 go to post

How did you configure the web gateway to do this?

Each web gateway is configured to talk to the local Health Connect instance, irrespective of it being primary, secondary or DR at any time.

So, when have to access the primary, we go via the VIP URL -> the request lands on the IIS for the primary instance and that is passed on to the local Health Connect instance.

Scott Roth · Oct 9, 2023 go to post

It is something with the password that is setup during the Install process vs the password that is on the user. I installed IRIS with setting the password as a default, verified that I could get into the Web Gateway Management, but as soon as I changed the password through the Security within the Management portal, I could no longer get into the Web Gateway Management.

So do I have to modify the CSP.ini somehow to tell it to use the LOCAL password, vs the SYSTEM password?