Monday, October 27, 2008

Serving OpenLM EasyAdmin using Apache HTTP server
















 


Serving OpenLM EasyAdmin using Apache HTTP Server




OpenLM is an application dedicated to the management of  Macrovision FLEXnet (Globetrotter FLEXlm). EasyAdmin is OpenLM's reporting component and it is an Http based application. EasyAdmin can be viewed with Internet browser from any station in the network.



By default, EasyAdmin is installed together with OpenLM Server and it is served by a dedicated HTTP server, which is also distributed with OpenLM Server install pack. After your organization decides to use OpenLM, we recommend to serve OpenLM EasyAdmin application by your organizational HTTP server in order to allow access to FLEXlm reports from any site.

This short guide outlines the steps required in order to serve your OpenLM EasyAdmin application by using your Apache HTTP server. In this guide we assume that Apache is not located on the same server as OpenLM. If your Http Server is located on on the same server as OpenLM Server it is recommended to create a Virtual Directory instead of copying the EasyAdmin Folder as demonstrated here.


 


The OpenLM EasyAdmin will be installed under the default web site, and will be accessed by using the following URL: http://<server name>/EasyAdmin


This tutorial was created using Apache HTTP server that is installed on Windows XP. The same steps apply to Apache server that can be installed on other operating systems.

Step 1: Copy EasyAdmin folder from OpenLM installation folder to the Apache HTDOCS folder



Step 2: Start OpenLM EasyAdmin using url http://localhost:82/EasyAdmin/openlm_easy_admin.html







OpenLM is now published under the default web site of your organizational server. Every system administrator or permitted user can now access FLEXlm reports, release orphaned licenses, draw usage charts, watch FLEXlm statistics, list active FLEXlm users and query the usage patterns of any specific user.


OpenLM EasyAdmin is included in every version of the OpenLM software system. OpenLM light version includes the EasyAdmin application as well, however it comes with less reporting options compared to the full OpenLM versions: OpenLM Utilizer for FLEXlm and OpenLM for ESRI ArcGIS. When using OpenLM with all its unique features, you should save a lot of money by greatly improving the use of your expensive FLEXlm licenses.


Access control for EasyAdmin using Apache HTTP Server











Access control for EasyAdmin using Apache HTTP Server



The use of OpenLM for the management of FLEXnet license servers provides a unique set of tools for managers and system administrators. Features range from a simple inventory management, to usage patterns and billing reports. OpenLM EasyAdmin supplies a wide range of license statistics, FLEXnet reports and management tools. The ability to control access to EasyAdmin is very important when the tool is distributed among many users.




OpenLM includes a built in web server in order to make sure that new users are able to install the software and use EasyAdmin flawlessly. Following the initial evaluation period of the software, we strongly recommend to move EasyAdmin to your preferred web server: IIS, Apache etc. Check the following article that explains how to setup OpenLM on Apache HTTP server.

Apache server supports different methods that allow you to restrict access to EasyAdmin:


  1. By user - Authentication and Access control.

  2. By Host - IP address and domain name restrictions.

More detailed information is available at Apache foundation site: http://httpd.apache.org/docs/1.3/howto/auth.html#access



Authentication methods supported by Apache

Basic Authentication - The most basic authentication method available,suffers from many cavities including slow authentication and security problems. Despite these problems this method is probably sufficient for protecting OpenLM EasyAdmin in an internal company network.

Digest Authentication
- Same as basic authentication but it encrypts passwords and by doing that solves one of the main cavities of the Basic Authentication methods.

Database Authentication methods - One of the major problems of both the Basic and Digest Authentication methods is that the user and passwords are stored in a plain text file. Database authentication methods allows system managers to store passwords in database.

In this article we will demonstrate the Basic Authentication method.

Step A: Create the password file

Password file creation is done by using the Apache command htpasswd.exe




We created a password file with one user. Now we can add users using the same utility.

Step B: Set the configuration to use this password file

Open your Apache server configuration file: httpd.conf. Locate the virtual directory defined for EasyAdmin or add one. And add authentication to this virtual directory.


# EasyAdmin Virtual Directory

Alias /EasyAdmin "C:\Program Files\Apache Software Foundation\Apache2.2\htdocs"
<Directory "C:\Program Files\Apache Software Foundation\Apache2.2\htdocs">
        Options Indexes MultiViews FollowSymLinks
        AllowOverride All
        Order allow,deny
        Allow from all
       
        # Limit access to EasyAdmin
        AuthType Basic
        AuthName "By Invitation Only"
        AuthUserFile "C:/Program Files/Apache Software Foundation/Apache2.2/passwords/passwords"
        Require user oren

</Directory>

Step c: Access OpenLM EasyAdmin


Now OpenLM EasyAdmin is password protected. If a HTTPS protocol is used then passwords will be encrypted as well as all other communication between the server and the browser.

This example is basic, more complex and secure methods are available by the use of Apache HTTP server.

Summary

The implementation of access control for EasyAdmin is very simple if you serve EasyAdmin with an Apache HTTP server. There are two categories of tools, based on host or on user. The methods that are based on user authentication are more flexible and offer different levels of security, depending on the organization's needs.

The use of OpenLM for the management of FLEXnet license servers provides a unique set of tools for managers and system administrators. Features range from a simple inventory management, to usage patterns and billing reports. OpenLM EasyAdmin supplies a wide range of license statistics, FLEXnet reports and management tools. The ability to control access to EasyAdmin is very important when the application is distributed among many users.