250 likes | 381 Views
Implementation and Management of INB using 9iAS. INB Team Maureen.Castaldi@scranton.edu Lisa.Cornell@scranton.edu Cindy.Hricko@scranton.edu Presentation Available: http://Academic.Scranton.edu/department/ssr/ Click on iAS Presentation Tuesday, October 29th, 2002, 11:15am.
E N D
Implementation and Management of INB using 9iAS • INB Team • Maureen.Castaldi@scranton.edu • Lisa.Cornell@scranton.edu • Cindy.Hricko@scranton.edu • Presentation Available: • http://Academic.Scranton.edu/department/ssr/ • Click on iAS Presentation • Tuesday, October 29th, 2002, 11:15am
Presentation Agenda • Components needed to run INB • Installation of 9iAS • Setting up Test and Production environments. • Configuration Files • Security • Issues • Managing INB/Helpful Hints • Discussion
Components needed to run INB in a multi-tier architecture Database Server Oracle 8.1.7.3 Alpha Open VMS 7.3 Client Windows 95,98,NT, 2000, XP Mac-MRJ 2.2.6 Browser - Netscape 4.x,6.2), IE 5.x,6.x JInitiator 1.1.8.19 Application Server Oracle 9iAS 1.0.2.2.2a Patch 10 for forms6i SQLNET
Application Server Components • Communication Services • Business Logic Services • Presentation Services • Other Services • Caching Services • Content Management • Business Logic Services • Portal Services • Business Intelligence Services
The Application Server 9iASForms Listener Servlet ArchitectureThe new Forms6i patch 4 and above
Advantages of the new architecture • Broader range of firewalls and proxies supported • No protocol restriction (HTTP /1.1 or HTTP/1.0 both work - former better) • No extra process to manage • No specific certificate to purchase/manage for SSL deployment • Standard load balance
Oracle HTTP Listener powered by Apache • What is it? • Where to find info? • http://httpd.apache.org • Security alerts • Documentation • FAQ’s • Mailing Lists • As it relates to 9iAS? • Apache 1.3.19 is distributed w/9iAS 1.0.2.2.2 (NT/2000)
Installation of 9iAS for INB • Hardware Requirements • Windows NT/2000 Server or Sun Solaris • Physical Memory/Total Available • Page file space or swap space • Software Requirements: • Webserver 1.0.2.2.2a - 9iAS release 1 • Forms 6.0.8.19 (patch 10)
Installation of 9iAS for INB • Installation • FAQ 3601 - Installing Banner 5.0 Webforms w/ias on Windows • Unclear Items • Printer=SCTMTA15 and ClientDPI (Mac) • FAQ 5753 -Preferred Servlet Mode Webforms Configuration • FAQ 5090 - Implementing a Servlet Mode Webform Configuration
Installation of 9iAS for INB • Patches Applied • #2244996 - Latest mod_plsql build • #2424256 - HTTP Server Security Patch • #2492925 - Open SSL Vulnerabilities • #2302473 - Install new version of 9iAS toolkit • Differences between FAQ 3601 and 9iAS Enterprise Installation Guide • WebCache - if you plan on using it, select it in the configuration wizard - can configure other components later.
Setting up Test and Production environments • Hardware/Software • Test Box • 2 production boxes (80-100 sessions) with Round Robin • 9iAS and fmx on each box • The Windows Desktop • Jinitiator • Browser • Shortcuts
Configuration Files • Oracle\806\forms60\server\default.env Contains instance/environment specific settings • Test.env & Prod.env – tailored for each instance - LOCAL - TNS_ADMIN - FORMS60_PATH - REPORTS60_PATH - GRAPHICS60_PATH
More Configuration Files • Oracle\806\forms60\server\formsweb.cfg Forms Servlet Configuration File - Jinitiator Parameters - System parameters Base.htm, Baseie.htm, Basejini.htm - User Parameters - Specific Configuration [prod] envFile=prod.env pageTitle= PROD INB
More Configuration Files • Oracle\isuites\apache\apache\conf\httpd.conf Main apache server configuration file • Oracle\isuites\apache\apache\conf\oracle_apache.conf Contains includes to other configuration files • Oracle\isuites\apache\apache\conf\mime.types Mapping between MIME types & file extensions • Oracle\isuites\apache\\modplsql\cfg\wdbsvr.app Dad Definitions for mod_plsql • Oracle\isuites\6iserver\conf\6iserver.conf 6i configuration file for Apache listener – Contains the virtual path for Banner On-line Help Files • Oracle\isuites\6iserver\forms60\server\basejini.htm Default base HTML file to run a form on the web using Jinitiator
Security- “If you boot it.. They will come” • Entrust (www.entrust.com) vs. Verisign • Our own certificate authority • Pricing (according to entrust site 10/2002) • 10 entrust SSL web server certificates $1490 • 10 verisign SSL web server certificates $2490 • Management • 2 year certificates • easier for management • Support • Request Simplified
Security • How to make INB Secure • FAQ# 7271 • Additional Information • Chain Certificate • Formsweb.cfg - connect mode and serverURL to HTTPS
Mac Issues with Security • Could not run INB on patch3a with/wo SSL • Able to run INB on patch 9 w/o SSL; could not do SSL • According to notes on BORACLE, INB on a Mac w/SSL runs under Patch 6. • According to SCT, Oracle says cannot run SSL on any patch level and they don’t support it. • Citrix
Security • Advanced Security Option • As long as Application Server and dbserver are behind the same firewall, you do not need. • Work Study Student Access outside the office and hours worked
Issues • Netscape • Netscape 6.23 ( DLL issue, Selecting other forms) • Wxp - Netscape 7 issue • IE - Closing Browser, Closes Banner • Other • Task Bar - W95, W98 • Black fields on our in-house forms.
Managing INB • Remove script (rotatelogs - Bug #2156972) • Sync Routine • Job to ensure HTTPSERVICE is running. • XLF - Log Analyzer 123 • Making Banner Unavailable • Making Banner Available for Upgrade testing • Log files • Parse the log file for Oracle errors
Logs and Trace Files • access_log • error_log • ssl_request_log • jserv.log • mod_jserv.log • sqlnet.log
Helpful Hints • Installation Hints • Requirements - 128 mb just for iAS • Clean Install • Enterprise Edition • Oracle HTTP Server in SSL mode • Oracle 9iAS forms and reports server. • Accept Defaults for Oracle Home, Wireless, portals, etc. • Accounts and privileges • Missing Icons
Helpful Hints • Burn CD for Jiniator • Enable Java Console • click on jiniator in start, program • click on show java console under basic tab
Helpful Hints • Extract Data with/without key (FAQ #5132) • SCT Documentation Bookshelf does not work in INB.
Discussion Items • Forms Development • Workstudy Security Issues • Running INB secure on a MAC • Documentation Bookshelf Workaround • Production environments – Pro’s & Con’s NT vs Solaris • Statistical Packages