-
Re: Cannot connect to the PI Data Archive through PI Web API
vkaufmannDec 5, 2017 4:07 PM (in response to andre.furtado)
1 of 1 people found this helpfulWhat is the account running the PI Web API and what is the value of the AuthenticationMethods configuration attribute (you'll have to double-click to get the value of the array) found on the System Configuration element in the Configuration database on the AF server that the Web API has been configured to use?
--Vince
-
Re: Cannot connect to the PI Data Archive through PI Web API
andre.furtado Dec 5, 2017 6:42 PM (in response to vkaufmann)The configuration attribute is set to "String Array".
-
Re: Cannot connect to the PI Data Archive through PI Web API
André ÅsheimDec 8, 2017 8:00 AM (in response to andre.furtado)
If you edit the "String arry" you will see a list of authenitcation options that are enabeled for your PI WebAPI.
Likely it's set to Kerberos.
In order to get Kerberos working you need to configure your account for delegation.
1. Register SPN on the account that runs the PI WebAPI (SETSPN -S HTTP/HOSTNAME domain\account)
2. Allow the service account to delegate to the PI server and AF server (SPN's have to be registered for those services as well, PIServer/HOST (for PI Data Archive) and AFServer/HOST (for AF server))
You can use the Kerberos guide for PI Vision (Coresight) for the configuration
Coresight Squared – What’s next? Kerberos and more..
Not reccomended: Switch to Basic authentication by adding/replacing "Kerberos" with "Basic" (case sensitive) in the AuthenticationMethods attribute, Do NOT change to basic if the PI WebAPI is used in a PI Vision installation.
-
Re: Cannot connect to the PI Data Archive through PI Web API
andre.furtado Dec 8, 2017 4:24 PM (in response to André Åsheim)Yeah..it was set to Kerberus and I changed to Basic and it worked! Thanks!
-
-
-