OpenLM review from Softdaily.net

OpenLM review as reported by Softdaily

OpenLM System - technical overview

A new presentation that gives an overview of the technical aspects of OpenLM system was published.

The presentation can be watched at: http://www.slideshare.net/orenhg/openlm-for-flexlm-system-technical-overview

 

Serving OpenLM EasyAdmin using Apache HTTP Server

OpenLM is an application dedicated to the management of  Macrovision FLEXnet (Globetrotter FLEXlm). EasyAdmin is OpenLM's reporting component and it is an Http based application. EasyAdmin can be viewed with Internet browser from any station in the network.

By default, EasyAdmin is installed together with OpenLM Server and it is served by a dedicated HTTP server, which is also distributed with OpenLM Server install pack. After your organization decides to use OpenLM, we recommend to serve OpenLM EasyAdmin application by your organizational HTTP server in order to allow access to FLEXlm reports from any site.

This short guide outlines the steps required in order to serve your OpenLM EasyAdmin application by using your Apache HTTP server. In this guide we assume that Apache is not located on the same server as OpenLM. If your Http Server is located on on the same server as OpenLM Server it is recommended to create a Virtual Directory instead of copying the EasyAdmin Folder as demonstrated here.

 

The OpenLM EasyAdmin will be installed under the default web site, and will be accessed by using the following URL: http://<server name>/EasyAdmin

This tutorial was created using Apache HTTP server that is installed on Windows XP. The same steps apply to Apache server that can be installed on other operating systems.

Step 1: Copy EasyAdmin folder from OpenLM installation folder to the Apache HTDOCS folder

Step 2: Start OpenLM EasyAdmin using url http://localhost:82/EasyAdmin/openlm_easy_admin.html

OpenLM is now published under the default web site of your organizational server. Every system administrator or permitted user can now access FLEXlm reports, release orphaned licenses, draw usage charts, watch FLEXlm statistics, list active FLEXlm users and query the usage patterns of any specific user.


OpenLM EasyAdmin is included in every version of the OpenLM software system. OpenLM light version includes the EasyAdmin application as well, however it comes with less reporting options compared to the full OpenLM versions: OpenLM Utilizer for FLEXlm and OpenLM for ESRI ArcGIS. When using OpenLM with all its unique features, you should save a lot of money by greatly improving the use of your expensive FLEXlm licenses.

Access control for EasyAdmin using Apache HTTP Server

The use of OpenLM for the management of FLEXnet license servers provides a unique set of tools for managers and system administrators. Features range from a simple inventory management, to usage patterns and billing reports. OpenLM EasyAdmin supplies a wide range of license statistics, FLEXnet reports and management tools. The ability to control access to EasyAdmin is very important when the tool is distributed among many users.

OpenLM includes a built in web server in order to make sure that new users are able to install the software and use EasyAdmin flawlessly. Following the initial evaluation period of the software, we strongly recommend to move EasyAdmin to your preferred web server: IIS, Apache etc. Check the following article that explains how to setup OpenLM on Apache HTTP server.

Apache server supports different methods that allow you to restrict access to EasyAdmin:

1. By user - Authentication and Access control.
   


2. By Host - IP address and domain name restrictions.
   

More detailed information is available at Apache foundation site: http://httpd.apache.org/docs/1.3/howto/auth.html#access

Authentication methods supported by Apache

Basic Authentication - The most basic authentication method available,suffers from many cavities including slow authentication and security problems. Despite these problems this method is probably sufficient for protecting OpenLM EasyAdmin in an internal company network.

Digest Authentication - Same as basic authentication but it encrypts passwords and by doing that solves one of the main cavities of the Basic Authentication methods.

Database Authentication methods - One of the major problems of both the Basic and Digest Authentication methods is that the user and passwords are stored in a plain text file. Database authentication methods allows system managers to store passwords in database.

In this article we will demonstrate the Basic Authentication method.

Step A: Create the password file

Password file creation is done by using the Apache command htpasswd.exe

We created a password file with one user. Now we can add users using the same utility.

Step B: Set the configuration to use this password file

Open your Apache server configuration file: httpd.conf. Locate the virtual directory defined for EasyAdmin or add one. And add authentication to this virtual directory.


# EasyAdmin Virtual Directory

Alias /EasyAdmin "C:\Program Files\Apache Software Foundation\Apache2.2\htdocs"
<Directory "C:\Program Files\Apache Software Foundation\Apache2.2\htdocs">
        Options Indexes MultiViews FollowSymLinks
        AllowOverride All
        Order allow,deny
        Allow from all
       
        # Limit access to EasyAdmin
        AuthType Basic
        AuthName "By Invitation Only"
        AuthUserFile "C:/Program Files/Apache Software Foundation/Apache2.2/passwords/passwords"
        Require user oren

</Directory>

Step c: Access OpenLM EasyAdmin

Now OpenLM EasyAdmin is password protected. If a HTTPS protocol is used then passwords will be encrypted as well as all other communication between the server and the browser.

This example is basic, more complex and secure methods are available by the use of Apache HTTP server.

Summary

The implementation of access control for EasyAdmin is very simple if you serve EasyAdmin with an Apache HTTP server. There are two categories of tools, based on host or on user. The methods that are based on user authentication are more flexible and offer different levels of security, depending on the organization's needs.

The use of OpenLM for the management of FLEXnet license servers provides a unique set of tools for managers and system administrators. Features range from a simple inventory management, to usage patterns and billing reports. OpenLM EasyAdmin supplies a wide range of license statistics, FLEXnet reports and management tools. The ability to control access to EasyAdmin is very important when the application is distributed among many users.

What is new in version 1.5.1.2 of OpenLM

Version 1.5.1.2 of OpenLM is a maintenance release that fixes several issues which were found in version 1.5.1.1

The issues that were addressed in this version are:

• Full support for ArcGIS 9.3.
• Redesign of Workstations TAB in OpenLM EasyAdmin (Available only in the full version).
• Enhancements to the usage charts in EasyAdmin.
• Fix a problem that was found at OpenLM for ESRI ArcGIS when working with "overwrite existing projects" mode.

How to configure OpenLM "Denial Notifications"

Denial notification is a very useful new feature in OpenLM version 1.5. This feature is very effective in optimizing the usability of existing licenses.

Please watch this short video in order to see how it works.

In order to enable the Denials feature it necessary to install and configure the Log Reader as a first step. Please follow these steps and make sure that you are able to see the Denials Reports in your EasyAdmin Denial Tab.

Now you need to open the OpenLM Server configuration form and move to the OpenLM Agent Policy Tab. Check the "Available License Notification" and set the desired "Reservation Period" or accept the default (60 minutes).

Click apply and restart the server.

Make sure that your users have OpenLM Agent version 1.5.1.1. Otherwise, they will not be able to get the notifications.

How to install OpenLM Log Reader on your FLEXlm server

What is the purpose of OpenLM Log Reader?

OpenLM Log Reader is a daemon service that reads FLEXlm debug log file and sends the information to OpenLM Server.

The action enables OpenLM to offer additional capabilities:

• Store important information in OpenLM Database.
• Store and report information about license denials that users experience.
• Send users notice when the software they need becomes available.

How is the OpenLM Log Reader implemented?

OpenLM is a Java program that can run on multiple platforms - Windows, UNIX, Linux and more. OpenLM Log Reader for Windows is distributed with an MSI installer that installs the files to the hard disk and creates a windows service called: OpenLM Log Reader.

How to install?

OpenLM Log Reader on Windows Installation is a typical "Next, Next" installation. Double Click the MSI file and follow the instructions. Following to the software installation a new service is added to windows services. The service is yet to be configured and theretofore will not get started just yet.

Requirements

OpenLM Log Reader service configuration requires some data regarding the monitored license manager. It is simple to collect the information by using LMTOOLS program - lmtools.exe.

Open LMTOOLS and go to the "Config Services" tab. Locate the path of FLEXlm debug log file and copy and save it for the next step.

Once done, go to the "Services" tab and click the "Perform Status Inquiry" button. The text will show in the window in the top search for the string similar to: 27000@license_server_status

You will need the port and server name for the next stage.


OpenLM Log Reader configuration

You have to configure OpenLM Log Reader so it will be able to track your log file.

Navigate to OpenLM Log Reader installation folder: C:Program FilesGlobalMapsOpenLMLogReader

Open the file config.xml using your favorite text editor.

You need to modify several parameters in order to allow OpenLM Log Reader, to read and send the information to the OpenLM Server. The required information is:

1. The name of OpenLM server.
2. The name of FLEXlm server (exactly as shown in FLEXlm output).
3. The port of FLEXlm server.
4. Path to FLEXlm debug log file.
   

An example (attributes that need to be edited are marked red):

<ulm>
<receiver receiver_url="http://openlm_server:7016/OpenLMServer" sending_time_out="45"/>

<log_files>
<log server="license_manager_name" port="27000" file_path="C:Templmgrd9.log" size_limit="1" time_interval="10"/>
<log server="license_manager_name" port="9857" file_path="C:Tempacadlmgrd_acad.log" size_limit="1" time_interval="10"/>
...
</log_files>
</ulm>

Any number of port/files can be added, according to the number of FLEXlm servers that run on the machine. When you are done with all the modifications, restart the OpenLM Log Reader server.