implementation and management of inb using 9ias inb team –[email protected]...
TRANSCRIPT
Implementation and Management of INB using 9iAS
• INB Team– [email protected]
• Presentation Available:– http://Academic.Scranton.edu/department/ssr/
• Click on iAS Presentation
• Tuesday, October 29th, 2002, 11:15am
Presentation Agenda
• Components needed to run INB• Installation of 9iAS• Setting up Test and Production environments.• Configuration Files• Security• Issues• Managing INB/Helpful Hints• Discussion
Components needed to run INB in a multi-tier architecture
Client
Windows 95,98,NT, 2000, XP
Mac-MRJ 2.2.6
Browser - Netscape 4.x,6.2), IE 5.x,6.x
JInitiator 1.1.8.19
Database Server
Oracle 8.1.7.3
Alpha Open VMS 7.3
Application ServerOracle 9iAS 1.0.2.2.2aPatch 10 for forms6i
SQLNET
Application Server Components
• Communication Services
• Business Logic Services
• Presentation Services
• Other Services– Caching Services– Content Management – Business Logic Services– Portal Services– Business Intelligence Services
The Application Server 9iASForms Listener Servlet ArchitectureThe new Forms6i patch 4 and above
Advantages of the new architecture
• Broader range of firewalls and proxies supported• No protocol restriction (HTTP /1.1 or HTTP/1.0
both work - former better)• No extra process to manage• No specific certificate to purchase/manage for
SSL deployment • Standard load balance
Oracle HTTP Listener powered by Apache
• What is it?• Where to find info?
– http://httpd.apache.org• Security alerts
• Documentation
• FAQ’s
• Mailing Lists
• As it relates to 9iAS?– Apache 1.3.19 is distributed w/9iAS 1.0.2.2.2
(NT/2000)
Installation of 9iAS for INB
• Hardware Requirements– Windows NT/2000 Server or Sun Solaris
• Physical Memory/Total Available
• Page file space or swap space
• Software Requirements:– Webserver 1.0.2.2.2a - 9iAS release 1– Forms 6.0.8.19 (patch 10)
Installation of 9iAS for INB
• Installation– FAQ 3601 - Installing Banner 5.0 Webforms
w/ias on Windows• Unclear Items
– Printer=SCTMTA15 and ClientDPI (Mac)
– FAQ 5753 -Preferred Servlet Mode Webforms Configuration
– FAQ 5090 - Implementing a Servlet Mode Webform Configuration
Installation of 9iAS for INB
– Patches Applied• #2244996 - Latest mod_plsql build
• #2424256 - HTTP Server Security Patch
• #2492925 - Open SSL Vulnerabilities
• #2302473 - Install new version of 9iAS toolkit
• Differences between FAQ 3601 and 9iAS Enterprise Installation Guide– WebCache - if you plan on using it, select it in the
configuration wizard - can configure other components later.
Setting up Test and Production environments
• Hardware/Software – Test Box
– 2 production boxes (80-100 sessions) with Round Robin
• 9iAS and fmx on each box
• The Windows Desktop– Jinitiator
– Browser
– Shortcuts
Configuration Files
• Oracle\806\forms60\server\default.env Contains instance/environment specific settings• Test.env & Prod.env – tailored for each instance - LOCAL - TNS_ADMIN - FORMS60_PATH
- REPORTS60_PATH - GRAPHICS60_PATH
More Configuration Files
• Oracle\806\forms60\server\formsweb.cfg Forms Servlet Configuration File
- Jinitiator Parameters - System parameters Base.htm, Baseie.htm, Basejini.htm - User Parameters - Specific Configuration [prod] envFile=prod.env pageTitle= PROD INB
More Configuration Files
• Oracle\isuites\apache\apache\conf\httpd.conf Main apache server configuration file• Oracle\isuites\apache\apache\conf\oracle_apache.conf
Contains includes to other configuration files• Oracle\isuites\apache\apache\conf\mime.types Mapping between MIME types & file extensions• Oracle\isuites\apache\\modplsql\cfg\wdbsvr.app
Dad Definitions for mod_plsql• Oracle\isuites\6iserver\conf\6iserver.conf 6i configuration file for Apache listener – Contains the virtual path for Banner
On-line Help Files• Oracle\isuites\6iserver\forms60\server\basejini.htm Default base HTML file to run a form on the web using Jinitiator
Security- “If you boot it.. They will come”
• Entrust (www.entrust.com) vs. Verisign– Our own certificate authority– Pricing (according to entrust site 10/2002)
• 10 entrust SSL web server certificates $1490• 10 verisign SSL web server certificates $2490
– Management• 2 year certificates• easier for management• Support
– Request Simplified
Security
• How to make INB Secure– FAQ# 7271
• Additional Information– Chain Certificate– Formsweb.cfg - connect mode and serverURL
to HTTPS
Mac Issues with Security
• Could not run INB on patch3a with/wo SSL• Able to run INB on patch 9 w/o SSL; could not
do SSL• According to notes on BORACLE, INB on a
Mac w/SSL runs under Patch 6. • According to SCT, Oracle says cannot run SSL
on any patch level and they don’t support it.• Citrix
Security
• Advanced Security Option– As long as Application Server and dbserver
are behind the same firewall, you do not need.
• Work Study Student Access outside the office and hours worked
Issues
• Netscape– Netscape 6.23 ( DLL issue, Selecting other forms)
– Wxp - Netscape 7 issue
• IE - Closing Browser, Closes Banner • Other
– Task Bar - W95, W98– Black fields on our in-house forms.
Managing INB
• Remove script (rotatelogs - Bug #2156972)• Sync Routine • Job to ensure HTTPSERVICE is running.• XLF - Log Analyzer 123• Making Banner Unavailable• Making Banner Available for Upgrade testing• Log files
– Parse the log file for Oracle errors
Logs and Trace Files
• access_log• error_log• ssl_request_log• jserv.log• mod_jserv.log• sqlnet.log
Helpful Hints
• Installation Hints– Requirements - 128 mb just for iAS– Clean Install– Enterprise Edition
• Oracle HTTP Server in SSL mode• Oracle 9iAS forms and reports server.
– Accept Defaults for Oracle Home, Wireless, portals, etc.
– Accounts and privileges– Missing Icons
Helpful Hints
– Burn CD for Jiniator– Enable Java Console
• click on jiniator in start, program
• click on show java console under basic tab
Helpful Hints
• Extract Data with/without key (FAQ #5132)
• SCT Documentation Bookshelf does not work in INB.
Discussion Items
• Forms Development
• Workstudy Security Issues
• Running INB secure on a MAC
• Documentation Bookshelf Workaround
• Production environments – Pro’s & Con’s NT vs Solaris
• Statistical Packages