OFBiz › OFBiz - User

Setup with more than one computer

_‹ Previous Topic Next Topic _›

Classic

List

Threaded

28 messages Options

wikitec

RE: Setup with more than one computer - Security and Apache for a web server

Skip
As I had a NAT firewall I am not sure. When Compiere is first loaded a
default web screen is open where access to many areas are gained through
password protection ... It may have been a password crack ... all I know is
that someone had comprimised the computer where Compiere was loaded and
changed compieres files

cheers

> -----Original Message-----
> From: skip@theDevers [mailto:[hidden email]]
> Sent: Tuesday, 9 October 2007 2:36 PM
> To: [hidden email]
> Subject: RE: Setup with more than one computer - Security and Apache for a
> web server
>
> Philip
>
> I for one would be interested in knowing how they hacked port 80 if you
> know.
>
> Skip
>
> -----Original Message-----
> From: Philip Laing [mailto:[hidden email]]
> Sent: Monday, October 08, 2007 9:23 PM
> To: [hidden email]
> Subject: Setup with more than one computer - Security and Apache for a
> web server
>
>
> Thanks Mike
>
> That is exactly what I was looking for but I didn't quite know how to word
> it.
>
> I have slightly changed the subject to fit more closely to where the
> thread
> might be heading
>
> Thanks for the input from everyone; I have been able to glean that:
>
> 1. IP Addresses are not an issues with OFBiz's various components talking
> to
> one another, ports and configuration of OFBiz's framework files are the
> important areas to consider
> 2. It is possible to split OFBiz into 2-3 x nodes/servers during
> installation
>
> Half the challenge with setting up solutions such as OFBiz is know how it
> thinks and what it needs to communicate between the various engines.
>
> The reason I am interested is that I has a bad experience with Compiere.
> During development I had left port 80 open through my firewall to single
> computer installation and had the web server (Tomcat) hacked into and
> broken. So I am very conscious of security and I am wondered if I could
> split the web server and place in DMZ with the rest of OZBiz safely
> sitting
> behind my firewall. If they break the web server it won't be as big an
> issue to fix or protect the dbase and other parts from being compromised
> by
> ID thieves looking credit card and other ID details
>
> Thanks again for your input
>
> Philip Laing Dip. Sys Admin IT
> ASC Consultants
> 33 Vendul Crescent
> Port Macquarie NSW 2444
>
> Phone: 61 2 6582 7147
> Mobile : 0411827147
>
> Web Page: www.ascconsultants.com.au
> Email: [hidden email]
>
> > -----Original Message-----
> > From: Mike Wong [mailto:[hidden email]]
> > Sent: Tuesday, 9 October 2007 1:47 PM
> > To: [hidden email]
> > Subject: RE: Setup with more than one computer
> >
> > Philip,
> >
> > You can deploy something like this
> >
> > Computer-1 running httpd with mod_jk
> > Computer-2 running ofbiz with only mod_jk port open
> > Computer-3 running DB
> >
> > Doing so you have to change some configurations in the url.properties
> file
> > and find some way to sync all your static files to the httpd doc root.
> >
> > Mike
> >
> > -----Original Message-----
> > From: Philip Laing [mailto:[hidden email]]
> > Sent: Monday, October 08, 2007 14:35
> > To: [hidden email]
> > Subject: RE: Setup with more than one computer
> >
> >
> > Thanks Skip
> >
> > Exactly what I needed thanks for that ... now can I install over 3
> > computers?
> >
> > Computer-1 webserver
> > Computer-2 application server
> > Computer-3 database
> >
> > Thanks again ... I really appreciate your input
> >
> > Phil
> >
> >
> > > -----Original Message-----
> > > From: skip@theDevers [mailto:[hidden email]]
> > > Sent: Monday, 8 October 2007 2:55 PM
> > > To: [hidden email]
> > > Subject: RE: Setup with more than one computer
> > >
> > > Philip
> > >
> > > What you wanna do is pretty easy. Have a look at entityengine.xml in
> > > framework/entity/config.
> > >
> > > Look toward the bottom till you find the database type you use, say
> > > "localpostgres". Clone this and call it something else, then change
> > where
> > > the jdbc driver looks. For example, its currently set to
> > > jdbc-uri="jdbc:postgresql://127.0.0.1/ofbiz".
> > >
> > > You make a new one maybe like this:
> > > "jdbc:postgresql://192.168.1.100/ofbiz".
> > >
> > > The database server can be anywhere you want.
> > >
> > > Check this out:
> > >
> >
> http://docs.ofbiz.org/display/OFBTECH/Apache+OFBiz+Technical+Production+Se
> > > tu
> > > p+Guide
> > >
> > > Here is another link:
> > >
> > > http://www.undersunconsulting.com/static/OFBizBasicProductionSetup.pdf
> > >
> > > Skip
> > >
> > > -----Original Message-----
> > > From: Philip Laing [mailto:[hidden email]]
> > > Sent: Sunday, October 07, 2007 8:50 PM
> > > To: [hidden email]
> > > Subject: RE: Setup with more than one computer
> > >
> > >
> > > Hi BJ
> > >
> > > No ... not 2 instances ... just break up the installation over 2
> > computers
> > > i.e. 1st computer with dbase installed and 2nd computer with
> application
> > > installed
> > >
> > > cheers
> > >
> > > Web Page: www.ascconsultants.com.au
> > > Email: [hidden email]
> > >
> > > > -----Original Message-----
> > > > From: BJ Freeman [mailto:[hidden email]]
> > > > Sent: Monday, 8 October 2007 10:51 AM
> > > > To: [hidden email]
> > > > Subject: Re: Setup with more than one computer
> > > >
> > > > Clarification:
> > > > it looks like you want to run two instances of ofbiz
> > > > to the same DB.
> > > > this takes extra configuration.
> > > >
> > > > FYI the apps use the web server
> > > > I think you are referring the Ecommerce side
> > > >
> > > > not sure why you want to use two instances, since the backend (apps)
> > is
> > > > ssl and 8443.
> > > > you can block that port through the fire wall if you only want intra
> > lan
> > > > communications.
> > > >
> > > > i run all behind a firewall, and both the http and https on the
> > internet
> > > > using a firewall for ports 80 and 8443.
> > > > so the DB is protected.
> > > > I believe you can route intra lan usage through a firewall for port
> > 8443
> > > > (apps)
> > > >
> > > >
> > > > Philip Laing sent the following on 10/7/2007 4:19 PM:
> > > > > Hi Fellas
> > > > >
> > > > > The network topology I would like OFBiz setup is using more than
> one
> > > > > computer using the following options:
> > > > > 1. Application Server + Dbase
> > > > > 2. Web Server + Application Server + Dbase
> > > > >
> > > > > Now . I would feel confident setting up:
> > > > >
> > > > > Option 1. (Apps + Dbase) I will be placing the Apps and Dbase
> > between
> > > a
> > > > > firewall i.e. Apps-(192.168.0.192/24) > Firewall > Dbase-
> > > > (192.168.2.100/24)
> > > > >
> > > > > Option 2. (Web Server+ Apps + Dbase) Web Server-(192.168.1.100/24)
> >
> > > > > Firewall > Dbase-(192.168.2.100/24) + Apps-(192.168.2.101/24)
> > > > >
> > > > > Notice the IP Addresses and different subnet masks. The question
> > is:
> > > > OFBiz
> > > > > should be able to talk to the *dbase*, *webserver* and or
> > *application
> > > > > server* though ports only - Not relying on the same IP addressing?
> > In
> > > > other
> > > > > words, rather than relying on TCP/IP to transfer information to
> each
> > > > node
> > > > > ... or do I need to route the disparate IP addressing so that each
> > > node
> > > > can
> > > > > see each other through IP addressing
> > > > >
> > > > > Thanks in advance
> > > > >
> > > > >
> > > > > Phil
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> >
>

wikitec

RE: Setup with more than one computer - Security and Apache for a web server

In reply to this post by SkipDever

Hi Skip

This article might help you with what I am getting at
http://www.windowsecurity.com/articles/Secure_Architecture_SQL_Web_Server.ht
ml

cheers

BJ Freeman

Re: Setup with more than one computer - Security and Apache for a web server

Phil Windows servers do have a lot of holes
one of the reasons I moved away from windows products for servers.
the one thing that most do not know is the all the user login services
are the old net lan, from dos days.
the only real security that windows machines has is the NT files system.
Since most don't clients I run into don't event use the security
permission or set them to everyone, or Admin Full, they have security
issues.

Though linux has some security issues they are not as prone to hacks as
Ms products, mostly from lack of interest, compared to Windows products.

This article does not address any security holes in TomCat or ofbiz.

Philip Laing sent the following on 10/8/2007 11:28 PM:

> Hi Skip
>
> This article might help you with what I am getting at
> http://www.windowsecurity.com/articles/Secure_Architecture_SQL_Web_Server.ht
> ml
>
> cheers
>
>
>> -----Original Message-----
>> From: skip@theDevers [mailto:[hidden email]]
>> Sent: Tuesday, 9 October 2007 2:36 PM
>> To: [hidden email]
>> Subject: RE: Setup with more than one computer - Security and Apache for a
>> web server
>>
>> Philip
>>
>> I for one would be interested in knowing how they hacked port 80 if you
>> know.
>>
>> Skip
>>
>> -----Original Message-----
>> From: Philip Laing [mailto:[hidden email]]
>> Sent: Monday, October 08, 2007 9:23 PM
>> To: [hidden email]
>> Subject: Setup with more than one computer - Security and Apache for a
>> web server
>>
>>
>> Thanks Mike
>>
>> That is exactly what I was looking for but I didn't quite know how to word
>> it.
>>
>> I have slightly changed the subject to fit more closely to where the
>> thread
>> might be heading
>>
>> Thanks for the input from everyone; I have been able to glean that:
>>
>> 1. IP Addresses are not an issues with OFBiz's various components talking
>> to
>> one another, ports and configuration of OFBiz's framework files are the
>> important areas to consider
>> 2. It is possible to split OFBiz into 2-3 x nodes/servers during
>> installation
>>
>> Half the challenge with setting up solutions such as OFBiz is know how it
>> thinks and what it needs to communicate between the various engines.
>>
>> The reason I am interested is that I has a bad experience with Compiere.
>> During development I had left port 80 open through my firewall to single
>> computer installation and had the web server (Tomcat) hacked into and
>> broken. So I am very conscious of security and I am wondered if I could
>> split the web server and place in DMZ with the rest of OZBiz safely
>> sitting
>> behind my firewall. If they break the web server it won't be as big an
>> issue to fix or protect the dbase and other parts from being compromised
>> by
>> ID thieves looking credit card and other ID details
>>
>> Thanks again for your input
>>
>> Philip Laing Dip. Sys Admin IT
>> ASC Consultants
>> 33 Vendul Crescent
>> Port Macquarie NSW 2444
>>
>> Phone: 61 2 6582 7147
>> Mobile : 0411827147
>>
>> Web Page: www.ascconsultants.com.au
>> Email: [hidden email]
>>
>>> -----Original Message-----
>>> From: Mike Wong [mailto:[hidden email]]
>>> Sent: Tuesday, 9 October 2007 1:47 PM
>>> To: [hidden email]
>>> Subject: RE: Setup with more than one computer
>>>
>>> Philip,
>>>
>>> You can deploy something like this
>>>
>>> Computer-1 running httpd with mod_jk
>>> Computer-2 running ofbiz with only mod_jk port open
>>> Computer-3 running DB
>>>
>>> Doing so you have to change some configurations in the url.properties
>> file
>>> and find some way to sync all your static files to the httpd doc root.
>>>
>>> Mike
>>>
>>> -----Original Message-----
>>> From: Philip Laing [mailto:[hidden email]]
>>> Sent: Monday, October 08, 2007 14:35
>>> To: [hidden email]
>>> Subject: RE: Setup with more than one computer
>>>
>>>
>>> Thanks Skip
>>>
>>> Exactly what I needed thanks for that ... now can I install over 3
>>> computers?
>>>
>>> Computer-1 webserver
>>> Computer-2 application server
>>> Computer-3 database
>>>
>>> Thanks again ... I really appreciate your input
>>>
>>> Phil
>>>
>>>
>>>> -----Original Message-----
>>>> From: skip@theDevers [mailto:[hidden email]]
>>>> Sent: Monday, 8 October 2007 2:55 PM
>>>> To: [hidden email]
>>>> Subject: RE: Setup with more than one computer
>>>>
>>>> Philip
>>>>
>>>> What you wanna do is pretty easy. Have a look at entityengine.xml in
>>>> framework/entity/config.
>>>>
>>>> Look toward the bottom till you find the database type you use, say
>>>> "localpostgres". Clone this and call it something else, then change
>>> where
>>>> the jdbc driver looks. For example, its currently set to
>>>> jdbc-uri="jdbc:postgresql://127.0.0.1/ofbiz".
>>>>
>>>> You make a new one maybe like this:
>>>> "jdbc:postgresql://192.168.1.100/ofbiz".
>>>>
>>>> The database server can be anywhere you want.
>>>>
>>>> Check this out:
>>>>
>> http://docs.ofbiz.org/display/OFBTECH/Apache+OFBiz+Technical+Production+Se
>>>> tu
>>>> p+Guide
>>>>
>>>> Here is another link:
>>>>
>>>> http://www.undersunconsulting.com/static/OFBizBasicProductionSetup.pdf
>>>>
>>>> Skip
>>>>
>>>> -----Original Message-----
>>>> From: Philip Laing [mailto:[hidden email]]
>>>> Sent: Sunday, October 07, 2007 8:50 PM
>>>> To: [hidden email]
>>>> Subject: RE: Setup with more than one computer
>>>>
>>>>
>>>> Hi BJ
>>>>
>>>> No ... not 2 instances ... just break up the installation over 2
>>> computers
>>>> i.e. 1st computer with dbase installed and 2nd computer with
>> application
>>>> installed
>>>>
>>>> cheers
>>>>
>>>> Web Page: www.ascconsultants.com.au
>>>> Email: [hidden email]
>>>>
>>>>> -----Original Message-----
>>>>> From: BJ Freeman [mailto:[hidden email]]
>>>>> Sent: Monday, 8 October 2007 10:51 AM
>>>>> To: [hidden email]
>>>>> Subject: Re: Setup with more than one computer
>>>>>
>>>>> Clarification:
>>>>> it looks like you want to run two instances of ofbiz
>>>>> to the same DB.
>>>>> this takes extra configuration.
>>>>>
>>>>> FYI the apps use the web server
>>>>> I think you are referring the Ecommerce side
>>>>>
>>>>> not sure why you want to use two instances, since the backend (apps)
>>> is
>>>>> ssl and 8443.
>>>>> you can block that port through the fire wall if you only want intra
>>> lan
>>>>> communications.
>>>>>
>>>>> i run all behind a firewall, and both the http and https on the
>>> internet
>>>>> using a firewall for ports 80 and 8443.
>>>>> so the DB is protected.
>>>>> I believe you can route intra lan usage through a firewall for port
>>> 8443
>>>>> (apps)
>>>>>
>>>>>
>>>>> Philip Laing sent the following on 10/7/2007 4:19 PM:
>>>>>> Hi Fellas
>>>>>>
>>>>>> The network topology I would like OFBiz setup is using more than
>> one
>>>>>> computer using the following options:
>>>>>> 1. Application Server + Dbase
>>>>>> 2. Web Server + Application Server + Dbase
>>>>>>
>>>>>> Now . I would feel confident setting up:
>>>>>>
>>>>>> Option 1. (Apps + Dbase) I will be placing the Apps and Dbase
>>> between
>>>> a
>>>>>> firewall i.e. Apps-(192.168.0.192/24) > Firewall > Dbase-
>>>>> (192.168.2.100/24)
>>>>>> Option 2. (Web Server+ Apps + Dbase) Web Server-(192.168.1.100/24)
>>>>>> Firewall > Dbase-(192.168.2.100/24) + Apps-(192.168.2.101/24)
>>>>>>
>>>>>> Notice the IP Addresses and different subnet masks. The question
>>> is:
>>>>> OFBiz
>>>>>> should be able to talk to the *dbase*, *webserver* and or
>>> *application
>>>>>> server* though ports only - Not relying on the same IP addressing?
>>> In
>>>>> other
>>>>>> words, rather than relying on TCP/IP to transfer information to
>> each
>>>>> node
>>>>>> ... or do I need to route the disparate IP addressing so that each
>>>> node
>>>>> can
>>>>>> see each other through IP addressing
>>>>>>
>>>>>> Thanks in advance
>>>>>>
>>>>>>
>>>>>> Phil
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>
>
>
>
>

SkipDever

RE: Odd Error

In reply to this post by BJ Freeman

Hi guys

I have the need to develop a purchasing application that scans the last
months sales, compares estimated shipping times and onhand quantities to
generate purchacing recommendations (actually a good deal more complicated
than this, but thats the gist). The resulting file is presented to the user
who examines it over a few days and takes action on it. Then, it gets
deleted. There is an undetermined number of files to be created (depending
on how many people are doing purchasing at that time) all with the same
structure.

This means that I'll have to create a few temporary tables to hold the data
and then delete them after the work is finished.

I have a similiar need for aging Accounts Receivable.

What is the recommended way of creating temporary tables and then deleting
them when they are no longer needed? I know how to do this in SQL, just not
in Ofbiz.

Skip

vijay Si

Re: Odd Error

I think Dynamic Views could help, but again u need to test performance

On 10/11/07, skip@theDevers <[hidden email]> wrote:

>
> Hi guys
>
> I have the need to develop a purchasing application that scans the last
> months sales, compares estimated shipping times and onhand quantities to
> generate purchacing recommendations (actually a good deal more complicated
> than this, but thats the gist). The resulting file is presented to the
> user
> who examines it over a few days and takes action on it. Then, it gets
> deleted. There is an undetermined number of files to be created
> (depending
> on how many people are doing purchasing at that time) all with the same
> structure.
>
> This means that I'll have to create a few temporary tables to hold the
> data
> and then delete them after the work is finished.
>
> I have a similiar need for aging Accounts Receivable.
>
> What is the recommended way of creating temporary tables and then deleting
> them when they are no longer needed? I know how to do this in SQL, just
> not
> in Ofbiz.
>
> Skip
>
>

BJ Freeman

Re:MRP was Odd Error

In reply to this post by SkipDever

have you looked thru the manufacturing module?
you can always define and entity for your data
then clear it out when finished.

skip@theDevers sent the following on 10/10/2007 8:32 PM:

> Hi guys
>
> I have the need to develop a purchasing application that scans the last
> months sales, compares estimated shipping times and onhand quantities to
> generate purchacing recommendations (actually a good deal more complicated
> than this, but thats the gist). The resulting file is presented to the user
> who examines it over a few days and takes action on it. Then, it gets
> deleted. There is an undetermined number of files to be created (depending
> on how many people are doing purchasing at that time) all with the same
> structure.
>
> This means that I'll have to create a few temporary tables to hold the data
> and then delete them after the work is finished.
>
> I have a similiar need for aging Accounts Receivable.
>
> What is the recommended way of creating temporary tables and then deleting
> them when they are no longer needed? I know how to do this in SQL, just not
> in Ofbiz.
>
> Skip
>
>
>
>

jonwimp

Re: Odd Error

In reply to this post by vijay Si

I don't think Dynamic Views can help here. The "purchasing recommendation" is generated once, and
is then presented again and again to the end-user. It is not generated every time the end-user
needs to see it.

How about creating a permanent table for both "purchasing recommendation" and aging AR? Why does
it have to be a temporary table?

When talking about "temporary data", I think it's still alright to store them in permanent tables.
Login history is temporary enough. So is Visit(s). And others. I even stored "temporary passwords"
in permanent tables, and just delete those passwords that are superseded by the creation of
"permanent passwords".

Jonathon

vijay Si wrote:

> I think Dynamic Views could help, but again u need to test performance
>
> On 10/11/07, skip@theDevers <[hidden email]> wrote:
>> Hi guys
>>
>> I have the need to develop a purchasing application that scans the last
>> months sales, compares estimated shipping times and onhand quantities to
>> generate purchacing recommendations (actually a good deal more complicated
>> than this, but thats the gist). The resulting file is presented to the
>> user
>> who examines it over a few days and takes action on it. Then, it gets
>> deleted. There is an undetermined number of files to be created
>> (depending
>> on how many people are doing purchasing at that time) all with the same
>> structure.
>>
>> This means that I'll have to create a few temporary tables to hold the
>> data
>> and then delete them after the work is finished.
>>
>> I have a similiar need for aging Accounts Receivable.
>>
>> What is the recommended way of creating temporary tables and then deleting
>> them when they are no longer needed? I know how to do this in SQL, just
>> not
>> in Ofbiz.
>>
>> Skip
>>
>>
>
>
> ------------------------------------------------------------------------
>
> No virus found in this incoming message.
> Checked by AVG Free Edition.
> Version: 7.5.488 / Virus Database: 269.14.7/1062 - Release Date: 10/10/2007 5:11 PM

SkipDever

RE: Odd Error

Jonathon

For the A/R aging, there is no need to delete the table at the end, you
could just delete all the records before you start over the next month.
(Although if you wanted to split the work up to an unknown number of people,
you would need some temporary files).

The purchacing is somewhat different (in the current use case) because the
number of people assigned to purchasing this run is unknown until runtime.

I could just create like 10 tables, and use the first x, but this seems
pretty crude when the simple ability to dynamically create and destroy
tables would make it easy and less work on the underlying db.

So, is there really no way to dynamically create and delete tables?

BJ sez there are some samples in the Manufacturing module. Is this already
done there? (I havent looked at it because I don't have a need for
Manufacturing atm).

Skip

-----Original Message-----
From: Jonathon -- Improov [mailto:[hidden email]]
Sent: Thursday, October 11, 2007 4:38 AM
To: [hidden email]
Subject: Re: Odd Error

I don't think Dynamic Views can help here. The "purchasing recommendation"
is generated once, and
is then presented again and again to the end-user. It is not generated every
time the end-user
needs to see it.

How about creating a permanent table for both "purchasing recommendation"
and aging AR? Why does
it have to be a temporary table?

When talking about "temporary data", I think it's still alright to store
them in permanent tables.
Login history is temporary enough. So is Visit(s). And others. I even stored
"temporary passwords"
in permanent tables, and just delete those passwords that are superseded by
the creation of
"permanent passwords".

Jonathon

vijay Si wrote:
> I think Dynamic Views could help, but again u need to test performance
>
> On 10/11/07, skip@theDevers <[hidden email]> wrote:
>> Hi guys
>>
>> I have the need to develop a purchasing application that scans the last
>> months sales, compares estimated shipping times and onhand quantities to
>> generate purchacing recommendations (actually a good deal more
complicated

>> than this, but thats the gist). The resulting file is presented to the
>> user
>> who examines it over a few days and takes action on it. Then, it gets
>> deleted. There is an undetermined number of files to be created
>> (depending
>> on how many people are doing purchasing at that time) all with the same
>> structure.
>>
>> This means that I'll have to create a few temporary tables to hold the
>> data
>> and then delete them after the work is finished.
>>
>> I have a similiar need for aging Accounts Receivable.
>>
>> What is the recommended way of creating temporary tables and then

deleting

>> them when they are no longer needed? I know how to do this in SQL, just
>> not
>> in Ofbiz.
>>
>> Skip
>>
>>
>
>
> ------------------------------------------------------------------------
>
> No virus found in this incoming message.
> Checked by AVG Free Edition.
> Version: 7.5.488 / Virus Database: 269.14.7/1062 - Release Date:

10/10/2007 5:11 PM