Bentley Communities
Bentley Communities
  • Site
  • User
  • Site
  • Search
  • User
  • Welcome
  • Products
  • Support
  • About
  • More
  • Cancel
Licensing and Activation
  • Product Communities
  • More
Licensing and Activation
Licensing and Activation Wiki Deployed SELECTserver Database and Internet Connectivity Insight [TN]
    • Sign in
    • License Flowchart for Subscription Entitlement Service (SES) and legacy SELECTserver
    • +Understanding the Subscription Entitlement Service (SES) Workflow
    • Working from Home using Bentley Licensing
    • EVD Reporting Guide
    • -Understanding the (Legacy) SELECTserver Workflow
      • -SELECTserver TechNotes and FAQs
        • "An Error Has Occurred" when manually transmitting usage logs using a preconfigured URL
        • About SELECTserver
        • Connecting to the Bentley servers through Firewalls and Proxy Servers [FAQ]
        • Could not load type 'System.ServiceModel.Activation.HttpModule' from assembly 'System.ServiceModel...'
        • Data Update Service Warning [TN]
        • Database Maintenance
        • Database Setup Tool Configuration and Explanation [FAQ]
        • Deployed SELECTserver Database and Internet Connectivity Insight [TN]
        • Deployed SELECTserver issue with new Bentley SSL certificate
        • Deployed SELECTserver Knowledge Requirements [TN]
        • Deployed SELECTserver Technical Requirements [TN]
        • Enabling Diagnostic Logging for SELECTserver
        • Error 1068: Cannot start the Bentley SELECTserver service
        • Error 417 : in SELECTserver and GateWay logs
        • Glossary Of Licensing Terms [FAQ]
        • Group Policy Administration (ADM) files
        • How do I keep usage reports current?
        • How do I set up or prevent license checkouts?
        • How to create a new website in IIS7
        • How to create a Virtual Directory in IIS7
        • How To Install a Gateways on Vista and Windows 7, Server 2008
        • How to Install the SELECTserver application
        • How to migrate users to a custom activation group
        • HTTP Error 404.13 "The request filtering module is configured to deny a request that exceeds the request content length" when importing response file
        • HTTP Error 500.21 - Internal Server Error on SELECTserver Administrative Site
        • Import xml File on Deployed Server
        • IP Address Hosted Server
        • License and SELECTserver Administration [FAQ]
        • +License Manager
        • License Tool Command Line Options
        • Manual Installation of SQL Express (2008 - 2012)
        • Moving (relocating) the SELECTserver application to a new server.
        • Moving Your SELECTserver Database
        • +Older SELECTserver Versions
        • Opening Admin site pager starts (runs) installer process
        • Opening Administration Site
        • Restricting access to a deployed SELECTserver Administration Site. Configuration example (video).
        • Running the Data Update Service and restarting IIS in order to immediately update a deployed license
        • Schedule Report - no Parameter selectable
        • Security [FAQ]
        • SELECT Server 08 11 Series [CS]
        • +SELECTserver
        • SELECTserver 9 Known Issues
        • SELECTserver 9.xx.xx.xx Gateway Update Process [FAQ]
        • SELECTserver 9.xx.xx.xx Upgrade Information [FAQ]
        • SelectServer Client Access Restrictions technical overview (video).
        • SELECTserver Database Backup [TN]
        • +SELECTserver Gateway
        • SELECTserver Gateway error 1053
        • SELECTserver Gateway Explained
        • SELECTserver Gateway License Server Revoked License [TN]
        • SELECTserver Gateway Service Fails To Connect through Proxy Server [TN]
        • SELECTserver General [FAQ]
        • SELECTserver in a IPV6 Environment
        • SELECTserver Notifications
        • SELECTserver Online Technical Requirements [FAQ]
        • SelectServer V9 without connectivity and Bentley Passport
        • SELECTserver XM Database Backup [TN]
        • Server status - Log file
        • SQL Server 2005 Cachestore Flush Error
        • SQL Server Compatibility Mode - Internal Query Processor Error
        • Support Path User Registration [FAQ]
        • The response file corresponding to the following logs is not processed.
        • The SQL transaction logs are full
        • Transmit Usage Logs - 0 Logs Found To Process [TN]
        • Trust Licensing Basics [FAQ]
        • Unlock the SQL Server SA Account
        • Upgrading to SELECTserver 08 11 series [CS]
        • Upgrading to SELECTserver 08.11.xx.xx [TN]
        • Uploading SELECTserver Usage And Client Logs [TN]
        • Usage Log Processing - ERROR with status code 15014
        • Using Active Directory Group Policy Objects to Configure Licensing for Users Centrally (video).
        • What options are available to allow the external (WAN) user to access a Locally Deployed SELECTserver?
        • What's New in the latest SELECTserver?
    • +Product Activation TechNotes and FAQs
    • +Application Usage TechNotes and FAQs
    • +SELECTservices TechNotes and FAQs

     
     Questions about this article, topic, or product? Click here. 

    Deployed SELECTserver Database and Internet Connectivity Insight [TN]

       
      Applies To 
       
      Product(s): SELECTserver
      Version(s): All
      Environment:  N/A
      Area:  N/A
      Subarea:  N/A
      Original Author: Maksim Stankevic, Bentley Technical Support Group
       

     

     

     

     

     

     

     

     

     

    SELECTserver functional components.

     

    Abbreviations used:

    SELECTserver – SS;

    BSS application in Microsoft Internet Information Services – BSS Application in MS IIS;

    Bentley SELECTserver Windows service – SS service;

    Bentley SELECTserver Gateway (Windows)service – SSGW service;

    SELECTserver Database – SS DB.

     


     

    Database and Internet connectivity as needed by different SELECTserver components.

     

     

    • SSGW service does not need access to SS DB or Internet access (only if the user is on hosted SS and uses the SELECTserver Gateway – it will need Internet connection)
    • SS DB connection configuration is setup using SS Database Setup utility, this configuration is shared by both BSS application in MS IIS and SS service. It may define either MS SQL native authentication or Windows authentication to connect to the SS DB. 
    • If Internet connection is not direct but a Proxy server is used instead, the proxy configuration should be defined in the Administration->Server Settings of SS Admin Site. This configuration is as well shared by both BSS application in MS IIS and SS service. 
    • BSS application in MS IIS and SS service access the SS DB and Bentley backend via Internet on their own, independently (although they share the DB and proxy configuration) so there may be situations when one has internet or DB access and the other does not. Next page describes an example and conditions for such a situation. 

     

    Here is a Youtube video that illustrates this topic:

    http://www.youtube.com/watch?v=AMVQlEWU0ag

     

    Example 1.

    Conditions:

    Let us assume that we have configured Windows authentication in SS Database Setup utility and there is no proxy configuration in SS Admin Site. MS SQL used by SS is installed on the same machine and initial SS Configuration was successfully completed using XML license file.

    Another assumption is that SS service was reconfigured to run as a dedicated user account called ss_svc (by default it runs as Local System account) but the BSS application in MS IIS was left running as Local system account (as by default). NOTE: the user account running the BSS application in MS IIS can be changed by changing the identity of the SELECTserver application pool (for more details consult MS IIS documentation).

    We also assume that Local System account is a member of MS SQL administrators but is not allowed to access internet and the ss_svc is on contrary allowed to access internet but does not have access to the MS SQL.

     

    Result:

    - SS Admin Site can be opened fine (BSS application in MS IIS having access to the SS DB) but if any activities requiring internet access like Request/Update Server License are done they fail with the error that is usually “Unknown HTTP error occurred while…”. This should not be confused with running the services (Data Update, Usage Log Posting) in the Manage Services because in this case Bentley will be accessed by the SS service, not BSS application in MS IIS.

    - SS service will not start as it does not have access to the SS DB and it needs it. If it had access to the DB – it would start successfully and would successfully run all the automatic SS services as it has internet access.

    - SSGW service will start fine as in order to start it only needs to get a license for itself from BSS application in MS IIS which is working fine although without internet access.

     

    Example 2 (real-world)

    Error when opening SS V9 Admin Site.

    This happens when BSS application in MS IIS does not have access to the SS DB. To reproduce this, configure Windows NT Authentication in the SS DB setup (we assume that MS SQL is local to SS and was installed by the SS setup with all default options) and set the SELECTserver application pool identity to be Network Service. To fix - make sure that the SELECTserver pool identity user account has access to the SS DB (for example is part of MS SQL administrators).

    In this example we did not pay attention to the SS service.

     

    Comments or Corrections?


    Bentley's Technical Support Group requests that you please submit any comments you have on this Wiki article in the "Comments" area below. THANK YOU!

    • SELECTserver Gateway
    • SELECTserver
    • Share
    • History
    • More
    • Cancel
    • Maksim Stankevic Created by Maksim Stankevic
    • When: Fri, Feb 15 2013 1:02 AM
    • Maksim Stankevic Last revision by Maksim Stankevic
    • When: Thu, Aug 1 2013 3:17 AM
    • Revisions: 9
    • Comments: 0
    Recommended
    Related
    Communities
    • Home
    • Getting Started
    • Community Central
    • Products
    • Support
    • Secure File Upload
    • Feedback
    Support and Services
    • Home
    • Product Support
    • Downloads
    • Subscription Services Portal
    Training and Learning
    • Home
    • About Bentley Institute
    • My Learning History
    • Reference Books
    Social Media
    •    LinkedIn
    •    Facebook
    •    Twitter
    •    YouTube
    •    RSS Feed
    •    Email

    © 2021 Bentley Systems, Incorporated  |  Contact Us  |  Privacy |  Terms of Use  |  Cookies