A few questions prior to purchasing

[Chris.Tanti]

Hi,

I have held back from purchasing v8 as I wanted to see what the general consensus was on the product. I was quite annoyed with v6 and didn�t want to make the same mistake again. I hope I am correct in saying we have settled into a good product.

I am still not entirely convinced by the SQL Reporting (my understanding is that some kind of data synch occurs, then the reports are run of the dbf mirror, rather than directly from the source, seems like a bit of a fudge).

I have a working v7 application (local, not web based) and am still a bit worried about how it will react when run through v8, it hasnt had the WAS side of its features created yet.

Can any one answer a few questions on v8 WAS, have searched through the message board, but would still like some clarification.

Apache.
Do you think its always worth running A5 behind Apache? Noticed a lot of you seem to run this set up, I presume its because it adds a layer of rigidity to the a5 web server.
Are there any walkthroughs to setting up the two server technologies so they work in tune with each other, have found some notes by Dr Peter Wayne which look very helpful, but is there any official documentation.
Is it OK to install Apache through the WAMP installer, or would it be better to go for strait Apache when you want it to work with A5?
The intended application is not for public use, just for a few select clients (probably dozens of users rather than 100�s)


SSL
If I didn�t want to register a domain name against our externally accessible fixed IP address, as I would be happy to just have access through a raw IP address, would we still be able to use an SSL certificate (doesn�t it get registered against the domain name, or can it be against the local servers name?)
I know there are instructions on how to use SSL with WAS, but if you have Apache sitting in front of it, and WAS listening to (for example) port 81 rather that the ssl port, doesnt that meen that you must install the certificate with Apache? How is this done?

Security Frame Work
How is this working out for you all, I want to be able to have reporting/record list viewing that filters based on a users company / department. (there is a company code field that appears on the tables, that should match a company code on the users login details), Is this fairly strait forward to achieve?

Up time
How often do you think the webserver will stay up for without memory problems, do you generally reset every night?, Once a month? Should I look at a way of resetting the server automatically at (for example) midnight?

Do you use any software to run WAS as a service (I vaguely remember this being mentioned before), so that after a reset the webserver kicks in without a log on and app start.

Security and reliability is going to be a big deal for me, so any suggestions would be appreciated.

[Steve Wood]

Re: A few questions prior to purchasing

SQL Reporting - Can be run on mirror or against the live sql data source.

Apache - not required and does not add any rigidity unless you are using it for load balancing for a larger project with multiple servers. You install straight from the Apache 2.57 open source install. There is official documentation, but not enough to make it an easy install unless you have Apache experience. Understanding Apache is a requirement for using the Apache module. My company supports Apache installs.

SSL - if you install Apache, then Apache listens for SSL and passes the request to Alpha on a standard port. There would be NO settings in Alpha for SSL, it would all take place at the Apache level. Also, only with Apache can you have a mixed part-SSL part-non SSL system. You need an IP address with SSL, but you don't need a domain name. You can use OpenSSL with APache for free.

Security Framework - There are more steps involved in using V8 with SF than V7 with out to accomplish the same thing (filtering, login, etc.) but the new method is more flexible and less "code" more point-click. You can do what you ask in your paragraph on SF. It took me longer to figure out how to rigidity security in V8 than V7.

I have a complete User Management module coming to market if you like.
Server - you should never have to restart the server unless you have a faulty application. But still you should use my recommendation of AlwaysUp to run as a service and to restart under various conditions.

[Chris.Tanti]

Re: A few questions prior to purchasing

Thanks for the reply Steve,

So realy the WAS alone is capable of running the application described, and theres no benefit to adding an Apache layer, I have zero experience with Apache but I know that WAMP creates a fairly neat install of all the features (inc. MySQL and PHP).

Is it worth going for Apache just to get the OPENSSL certification? unless setting SSL up on A5 is not a problem when running on a raw IP address? Using a self signed cert will I presume cause an IE error.

I would certainly be interested in looking at any user management modules, I have only looked at a few online videos of V8's security framework, so what would it have over and above the existing facilities?

I have read a variety of Posts regarding Server resources running out, so wondered what the average uptime of a WAS server was (in real world conditions).

[Steve Wood]

Re: A few questions prior to purchasing

The OpenSSL is free, but your Internet users will enconter a warning that the certificate is not 'signed'. You can turn that warning off for your internal users at the browser level.

The Alpha Apache module costs more than a 2-3 year SSL subscription, so skip it probably.

I have two WAS running. No down time unless I am testing a bad script. I keep RAM and CPU stastics every day.

The User Mgmt I am comleting will run all possible security features from a central page and list of users. You can roll this your own, but it will take some development time and complete understanding of the security framework functions and methods. Don't know how long it will take you, but it took me four months.

[Chris.Tanti]

Re: A few questions prior to purchasing

OK, you have convinced me.

You mentioned earlier that SQL reporting on the enterprise version uses mirrored data and direct connections.

Is it a case of the WAS creating a direct connection to display data and the local apps having to create a mirror to produce a (for example) PDF report.

I think its possible to do direct access to the data using xdialogue forms, but its the reporting I am realy interested in.

Have used Crystal previously (btw, when will Alpha produce a decent crosstab and graphing facility?!)

[Al Buchholz]

Re: A few questions prior to purchasing

OK, you have convinced me.

You mentioned earlier that SQL reporting on the enterprise version uses mirrored data and direct connections.

Is it a case of the WAS creating a direct connection to display data and the local apps having to create a mirror to produce a (for example) PDF report.

I think its possible to do direct access to the data using xdialogue forms, but its the reporting I am really interested in.

Chris

With the a5v8 Enterprise version, you can build a report that uses <SQL datasource> as the basis for the report. Therefore you are reporting directly from the SQL datasource and not a mirror of the data.

You can also report from a mirror when that is to your advantage, but you have the choice of both sources - you choose the one that fits your requirements.

[Steve Wood]

Re: A few questions prior to purchasing

OK, you have convinced me.

I'm searching around for my disclaimer and indemnification statements ;)

[mmaisterrena]

Re: A few questions prior to purchasing

Lets be a little honest here

since people arent perfect
and people create aplications
there is no perfect aplication

considering this above I can almost ashure you that you will have to restart the WAS from time to time.

As steve allready recomended you try using "AlwaysUP" for running the WAS ass a service and do this reboots automaticaly maybe once a week or so.

[Chris.Tanti]

Re: A few questions prior to purchasing

Hi Steve,

Just purchased Application Server Enterprise, and developer Licences for v8 (Don't worry, I won't hold you responsible!)

Fired up the server, switched on SSL, and created a self signed certificate. Do I have to do anything else?
When I point to the server in the browser and try and access a dummy page I placed in the root I get

401 Unauthorized
The security settings for this server are missing or incomplete.

I have not put in a Certificate Chain File, is this the problem? Do I have to do this to get A5 to display a page.

As previously explained this is an internal server with just an IP address accesible externally, was quite happy to use a non signed certificate if it only gave a skippable error message in IE/Firefox.

[JerryBrightbill]

Re: A few questions prior to purchasing

The error has no connection to running SSL. If the security framework is checked on the Application Server and you have not published anything to the server, there are no security configuration files on the server. If the files are missing, you will be prevented from opening any pages and will get the message.

Until you publish something, you can just open the Application server control panel and uncheck the Security Framework option and restart the server.

When publish anything to the server from the Alpha Five program, the required default security files are automatically created and published for the project.

[Steve Wood]

Re: A few questions prior to purchasing

Do I have to do anything else?

Glad you aren't holding me responsible;). Yeah, you have to purchase an SSL Cert from a vendor like GoDaddy or Verio, go to their website and follow -- what will be -- very specific instructions. I have instructions for the A5 side at my website on the For Developers page, in the articles. Its more like a check list, and I admit not as well written as I'd like.