MassTransit Log Viewer

MassTransit allows you to configure an Active Directory user group which allows any user with a valid Active Directory account, who is in a defined group, to view the MassTransit log online (in the MassTransit web site) without requiring a web client license or plug-in.

Enabling MassTransit Log Viewer

Follow the steps below to enable the MassTransit Log Viewer for an authorized group:

1. Open the mtweb.ini file located in the MTWeb directory. By default, this folder is placed on the system drive in:
   1. for MassTransit HP 7.0: ~\MassTransit Server 7\MTWeb\
   2. for MassTransit HP 7.1 and later: ~\MassTransit Server\MTWeb\

      Note: All lines beginning with a semicolon (;) in the mtweb.ini file are considered commented and therefore ignored. Please ensure that all settings you change are uncommented (if you see ";" characters at the beginning of any of the settings you modify, delete them).

2. Go to the APPLICATION section of the file.
3. Add the AuthMethod_LogViewingGroup authentication method by uncommenting the line below and commenting out the line immediately after.
            ; AUTHENTICATE_METHODS = "AuthMethod_SOAP,AuthMethod_LogViewingGroup"
            AUTHENTICATE_METHODS = "AuthMethod_SOAP"

   Note: The order of the AUTHENTICATE_METHODS flag can be reversed.

   If the original order of the flags is used (AUTHENTICATE_METHODS = AuthMethod_SOAP,AuthMethod_LogViewingGroup), then a Web client, that is both a MassTransit contact with Active Directory authentication and a member of the authorized log viewing group, will be navigated to the MassTransit plug-in once authenticated. The only way that user will be able to view the Log is if privileges are given to that individual user via the MassTransit Administrator when the account is created or edited; then, the Log tab will be present in the user interface of the Web client.

   If the current order of the flags is reversed (AUTHENTICATE_METHODS = AuthMethod_LogViewingGroup,AuthMethod_SOAP), then the user will be navigated to the Log Viewer, but will not be navigated to the plug-in for file transfer.

   The default approach is recommended.

4. Configure the AUTHORIZED_LOG_VIEWING_GROUP setting appropriately with the Active Directory group that will control the log access. This will be the Active Directory group whose members can view the MassTransit log without having a contact in the Contacts window of the MassTransit Administrator application.
            AUTHORIZED_LOG_VIEWING_GROUP="CN=MT_LOG_VIEWER,OU=GROUPS,DC=YOUR_DOMAIN,DC=COM"
5. Once you’ve completed the above steps, you will need to restart IIS and the MassTransit Engine for the changes to take effect:
   1. Open the IIS Manager from Start → Administrative Tools → IIS Manager and click on the Restart button in the administration console of IIS.
   2. Open the Services console from Start → Administrative Tools → Services and highlight the MassTransit service. Click on the Restart button.