Monitoring FileMaker Server / Troubleshooting External Authentication pt. 2
Visitors to VTC.com will be able to view all introductory videos for each training course.
Free Trial Members will gain access to first three chapters for each training course.
Full Access Members have full access to VTC.com’s entire library of video tutorials.
Learn More
Subtitles of the Movie
When the user does get in, but not with the privilege set you had intended, then the issue is one of group membership and the authentication order in the FileMaker file. As an example, let's say that Joe is a sales manager. His account belongs to both the sales and the managers group. We know that FileMaker Server looks at the list of accounts in the file in the authentication order, so when you're troubleshooting, make sure that you're looking at the list with that view too. How it works is that FileMaker Server takes the first account from the authentication order and checks the list that the authentication authority returns. In our example, there is a match because Joe is a member of the sales group. FileMaker Server looks no further and assigns Joe the privilege set for the sales account. If you wanted to give Joe manager rights, then the manager account should be listed higher on the list than the sales account. When troubleshooting this kind of issue, keep in mind that on the domain or locally on the FileMaker Server machine, groups can be members of other groups, so in effect, a user can be part of more groups than you had anticipated, plus, if you're using a domain, remember that FileMaker Server will also look at the accounts in groups on a local machine. There can be conflicts if you have accounts or groups that have the same name as accounts and groups on the domain. Both Windows and OS X have some tools that can help you find out what groups a user belongs to, but there are some gotchas. They don't all show group and group memberships, and for best results, you need to log into the FileMaker Server machine with the account you want to test. That's the only way you're sure that you're seeing what FileMaker Server can see, including local group membership. In a mixed environment, when the FileMaker Server is not the same platform as the domain controller, then the FileMaker external accounts need to include both the domain name and the group name in this format. On OS X, there is one more specific issue and it has to do with long and short names. Both accounts and groups can have a long name and a short name. When you set up the FileMaker external accounts, they need to match the short name of the domain or local group, not the long names. If you're having trouble logging in as a user, also make sure to try with this account's short name.
Tutorial Information
| Course: | FileMaker Server 10 |
| Author: | Wim Decorte |
| SKU: | 33950 |
| ISBN: | 1-935320-16-5 |
| Release Date: | 2009-01-05 |
| Duration: | 6.5 hrs / 97 lessons |
| Work Files: |
Yes |
| Captions: | Available on CD and Online University |
| Compatibility: |
Vista/XP/2000, OS X, Linux QuickTime 7, Flash 8 |
VTC Sign up & Benefits
- Unlimited Access
- 98,729 Video Tutorials (23,265 free)
- Video Available as Flash or QuickTime
- Over 1026 Courses
- $30 for One Month Access
- Multi-User Discounts Available
United States 