Serving OpenLM EasyAdmin using Apache HTTP Server

OpenLM is an application dedicated to the management of  Macrovision FLEXnet (Globetrotter FLEXlm). EasyAdmin is OpenLM's reporting component and it is an Http based application. EasyAdmin can be viewed with Internet browser from any station in the network.

By default, EasyAdmin is installed together with OpenLM Server and it is served by a dedicated HTTP server, which is also distributed with OpenLM Server install pack. After your organization decides to use OpenLM, we recommend to serve OpenLM EasyAdmin application by your organizational HTTP server in order to allow access to FLEXlm reports from any site.

This short guide outlines the steps required in order to serve your OpenLM EasyAdmin application by using your Apache HTTP server. In this guide we assume that Apache is not located on the same server as OpenLM. If your Http Server is located on on the same server as OpenLM Server it is recommended to create a Virtual Directory instead of copying the EasyAdmin Folder as demonstrated here.

 

The OpenLM EasyAdmin will be installed under the default web site, and will be accessed by using the following URL: http://<server name>/EasyAdmin

This tutorial was created using Apache HTTP server that is installed on Windows XP. The same steps apply to Apache server that can be installed on other operating systems.

Step 1: Copy EasyAdmin folder from OpenLM installation folder to the Apache HTDOCS folder

Step 2: Start OpenLM EasyAdmin using url http://localhost:82/EasyAdmin/openlm_easy_admin.html

OpenLM is now published under the default web site of your organizational server. Every system administrator or permitted user can now access FLEXlm reports, release orphaned licenses, draw usage charts, watch FLEXlm statistics, list active FLEXlm users and query the usage patterns of any specific user.


OpenLM EasyAdmin is included in every version of the OpenLM software system. OpenLM light version includes the EasyAdmin application as well, however it comes with less reporting options compared to the full OpenLM versions: OpenLM Utilizer for FLEXlm and OpenLM for ESRI ArcGIS. When using OpenLM with all its unique features, you should save a lot of money by greatly improving the use of your expensive FLEXlm licenses.

Access control for EasyAdmin using Apache HTTP Server

The use of OpenLM for the management of FLEXnet license servers provides a unique set of tools for managers and system administrators. Features range from a simple inventory management, to usage patterns and billing reports. OpenLM EasyAdmin supplies a wide range of license statistics, FLEXnet reports and management tools. The ability to control access to EasyAdmin is very important when the tool is distributed among many users.

OpenLM includes a built in web server in order to make sure that new users are able to install the software and use EasyAdmin flawlessly. Following the initial evaluation period of the software, we strongly recommend to move EasyAdmin to your preferred web server: IIS, Apache etc. Check the following article that explains how to setup OpenLM on Apache HTTP server.

Apache server supports different methods that allow you to restrict access to EasyAdmin:

1. By user - Authentication and Access control.
   


2. By Host - IP address and domain name restrictions.
   

More detailed information is available at Apache foundation site: http://httpd.apache.org/docs/1.3/howto/auth.html#access

Authentication methods supported by Apache

Basic Authentication - The most basic authentication method available,suffers from many cavities including slow authentication and security problems. Despite these problems this method is probably sufficient for protecting OpenLM EasyAdmin in an internal company network.

Digest Authentication - Same as basic authentication but it encrypts passwords and by doing that solves one of the main cavities of the Basic Authentication methods.

Database Authentication methods - One of the major problems of both the Basic and Digest Authentication methods is that the user and passwords are stored in a plain text file. Database authentication methods allows system managers to store passwords in database.

In this article we will demonstrate the Basic Authentication method.

Step A: Create the password file

Password file creation is done by using the Apache command htpasswd.exe

We created a password file with one user. Now we can add users using the same utility.

Step B: Set the configuration to use this password file

Open your Apache server configuration file: httpd.conf. Locate the virtual directory defined for EasyAdmin or add one. And add authentication to this virtual directory.


# EasyAdmin Virtual Directory

Alias /EasyAdmin "C:\Program Files\Apache Software Foundation\Apache2.2\htdocs"
<Directory "C:\Program Files\Apache Software Foundation\Apache2.2\htdocs">
        Options Indexes MultiViews FollowSymLinks
        AllowOverride All
        Order allow,deny
        Allow from all
       
        # Limit access to EasyAdmin
        AuthType Basic
        AuthName "By Invitation Only"
        AuthUserFile "C:/Program Files/Apache Software Foundation/Apache2.2/passwords/passwords"
        Require user oren

</Directory>

Step c: Access OpenLM EasyAdmin

Now OpenLM EasyAdmin is password protected. If a HTTPS protocol is used then passwords will be encrypted as well as all other communication between the server and the browser.

This example is basic, more complex and secure methods are available by the use of Apache HTTP server.

Summary

The implementation of access control for EasyAdmin is very simple if you serve EasyAdmin with an Apache HTTP server. There are two categories of tools, based on host or on user. The methods that are based on user authentication are more flexible and offer different levels of security, depending on the organization's needs.

The use of OpenLM for the management of FLEXnet license servers provides a unique set of tools for managers and system administrators. Features range from a simple inventory management, to usage patterns and billing reports. OpenLM EasyAdmin supplies a wide range of license statistics, FLEXnet reports and management tools. The ability to control access to EasyAdmin is very important when the application is distributed among many users.

What is new in version 1.5.1.2 of OpenLM

Version 1.5.1.2 of OpenLM is a maintenance release that fixes several issues which were found in version 1.5.1.1

The issues that were addressed in this version are:

• Full support for ArcGIS 9.3.
• Redesign of Workstations TAB in OpenLM EasyAdmin (Available only in the full version).
• Enhancements to the usage charts in EasyAdmin.
• Fix a problem that was found at OpenLM for ESRI ArcGIS when working with "overwrite existing projects" mode.

How to configure OpenLM "Denial Notifications"

Denial notification is a very useful new feature in OpenLM version 1.5. This feature is very effective in optimizing the usability of existing licenses.

Please watch this short video in order to see how it works.

In order to enable the Denials feature it necessary to install and configure the Log Reader as a first step. Please follow these steps and make sure that you are able to see the Denials Reports in your EasyAdmin Denial Tab.

Now you need to open the OpenLM Server configuration form and move to the OpenLM Agent Policy Tab. Check the "Available License Notification" and set the desired "Reservation Period" or accept the default (60 minutes).

Click apply and restart the server.

Make sure that your users have OpenLM Agent version 1.5.1.1. Otherwise, they will not be able to get the notifications.

How to install OpenLM Log Reader on your FLEXlm server

What is the purpose of OpenLM Log Reader?

OpenLM Log Reader is a daemon service that reads FLEXlm debug log file and sends the information to OpenLM Server.

The action enables OpenLM to offer additional capabilities:

• Store important information in OpenLM Database.
• Store and report information about license denials that users experience.
• Send users notice when the software they need becomes available.

How is the OpenLM Log Reader implemented?

OpenLM is a Java program that can run on multiple platforms - Windows, UNIX, Linux and more. OpenLM Log Reader for Windows is distributed with an MSI installer that installs the files to the hard disk and creates a windows service called: OpenLM Log Reader.

How to install?

OpenLM Log Reader on Windows Installation is a typical "Next, Next" installation. Double Click the MSI file and follow the instructions. Following to the software installation a new service is added to windows services. The service is yet to be configured and theretofore will not get started just yet.

Requirements

OpenLM Log Reader service configuration requires some data regarding the monitored license manager. It is simple to collect the information by using LMTOOLS program - lmtools.exe.

Open LMTOOLS and go to the "Config Services" tab. Locate the path of FLEXlm debug log file and copy and save it for the next step.

Once done, go to the "Services" tab and click the "Perform Status Inquiry" button. The text will show in the window in the top search for the string similar to: 27000@license_server_status

You will need the port and server name for the next stage.


OpenLM Log Reader configuration

You have to configure OpenLM Log Reader so it will be able to track your log file.

Navigate to OpenLM Log Reader installation folder: C:Program FilesGlobalMapsOpenLMLogReader

Open the file config.xml using your favorite text editor.

You need to modify several parameters in order to allow OpenLM Log Reader, to read and send the information to the OpenLM Server. The required information is:

1. The name of OpenLM server.
2. The name of FLEXlm server (exactly as shown in FLEXlm output).
3. The port of FLEXlm server.
4. Path to FLEXlm debug log file.
   

An example (attributes that need to be edited are marked red):

<ulm>
<receiver receiver_url="http://openlm_server:7016/OpenLMServer" sending_time_out="45"/>

<log_files>
<log server="license_manager_name" port="27000" file_path="C:Templmgrd9.log" size_limit="1" time_interval="10"/>
<log server="license_manager_name" port="9857" file_path="C:Tempacadlmgrd_acad.log" size_limit="1" time_interval="10"/>
...
</log_files>
</ulm>

Any number of port/files can be added, according to the number of FLEXlm servers that run on the machine. When you are done with all the modifications, restart the OpenLM Log Reader server.

How to install OpenLM Log Reader on UNIX/Linux

The purpose OpenLM Log Reader is to send the information from FLEXlm report log to OpenLM server. You have to install OpenLM Log Reader on every FLEXlm server you monitored by OpenLM. If you have more then one FLEXlm server installed on one server you will need only one installation on the server, it will monitor all the log files.

OpenLM Log Reader was developed using Java so it can run on any operating system supported by FLEXlm floating license manager.

First download OpenLM Log Reader software from OpenLM website downloads area. The download include the following files and folders:

Main folder: openlm_log_reader

lib - Java libraries used by OpenLM Log Reader.
openlm_log_reader.jar - Log Reader executable.
openlm_log_reader_config.xml - OpenLM Log Reader configuration file.
openlm_log_reader.properties - Logger properties.

The steps we need in order to accomplish the task are:
1. Make sure that JRE with version of at least 1.5 is available on the machine (where you typically install software /usr/local).
2. Copy the software to the FLEXlm server (where you typically install software /usr/local).
3. Create a software service that will start with the operating system and run in the background (command: java -jar MyLogReader.jar config.xml).
4. Configure the software.


Configure the path of your log file (Optional)

Edit openlm_log_reader.properties and modify the log file path so it will fit your installation. By default it will create a directory named log under the installation folder.

Configure OpenLM Log Reader (Mandatory)

Open the file config.xml using your favorite text editor.

You need to modify several parameters in order to allow OpenLM Log Reader, to read and send the information to the OpenLM Server. The required information is:

1. The name of OpenLM server.
2. The name of FLEXlm server (exactly as it shows in FLEXlm output).
3. The port of FLEXlm server.
4. Path to FLEXlm debug log file.
   

An example (attributes that need to be edited are marked red):

<ulm>
<receiver receiver_url="http://openlm_server:7016/OpenLMServer" sending_time_out="45"/>

<log_files>
<log server="license_manager_name" port="27000" file_path="C:Templmgrd9.log" size_limit="1" time_interval="10"/>
<log server="license_manager_name" port="9857" file_path="C:Tempacadlmgrd_acad.log" size_limit="1" time_interval="10"/>
...
</log_files>
</ulm>

Any number of port/files can be added, according to the number of FLEXlm servers that run on the machine. When you are done with all the modifications, restart the OpenLM Log Reader server.

Using OpenLM free version to manage your FLEXlm server

Summary

FLEXlm is a floating license manager that is widely used by high end software manufactures. FLEXlm command line based interface is very inconvenient and extremely limited. Most companies need the ability to monitor usage time, have a convenient management interface, manage multiple servers, produce billing reports and a lot more.
OpenLM is a cost effective alternative to Accresso FLEXnet manager. OpenLM Light is a free version targeted towards small teams with a single FLEXlm floating license server.
This article shows how the free version of OpenLM can manage your FLEXlm server.

Short

FLEXlm is a floating license manager that is widely used by high end software manufactures. Most companies need the ability to monitor usage time, have a convenient management interface, manage multiple servers, produce billing reports and a lot more.
OpenLM is a cost effective alternative to Accresso FLEXnet manager. This article shows how the free version of OpenLM can manage your FLEXlm server.

What is FLEXnet (FLEXlm) floating license server

FLEXnet is a license manager which implements both node-locked and floating licensing models.
A node-locked license enables the software user to install and use the software on a specific computer (network node in FLEXlm terminology). However with the floating license model, the software can be installed on any number of computers. In order to activate the software, a license needs to be drawn from the License Pool. Once all licenses are in use, no new users will be able to activate their software, even if they have it installed on their computer.
The number of licenses on the servers are limited to the number of purchased licenses. When the number of simultaneous (concurrent) users is equal to the number of licenses the next user will not be able to activate the software - in FLEXlm terminology this user received a "Denial".

Who is using FLEXnet (FLEXlm) floating license server

The FLEXnet license manager is incorporated into the software products of more then 2000 vendors. Following 20 years of activity, FLEXnet is in use at many organizations, from small companies to global ones. FLEXnet libraries are sold to software vendors that incorporate them into their software. End users receive FLEXnet when they purchase different software packages.

The need

The interface of the FLEXnet software is based mostly on a command line which is very inconvenient and extremely limited. While it might be sufficient for companies with a small number of users and licenses, it is not sufficient for the larger companies. For example, FLEXnet has the ability to reflect some information on license activity in real time, but it does not collect any information on the usage over time.

Recognizing the need, Macrovision (which recently sold it's software unit to Acresso software company) created the FLEXnet manager software which helps system administrators to get real management capabilities on floating licenses in their organizations. OpenLM created a compatible and very cost effective alternative, which includes most of the FLEXnet manager features plus additional features that are available solely at OpenLM.

Using the free alternative - OpenLM Light version

OpenLM is provided in several versions

• OpenLM Utilizer: includes features such as multiple server monitoring, license statistics, reports, billing and much more.

• OpenLM for ESRI ArcGIS: has special extension to allow for unique features, including automatic TIMEOUT capabilities and more.

• OpenLM Light: a free limited version which includes some of the OpenLM software features.

While the investment in OpenLM Utilizer will prove itself worthwhile in a very short time, some small organizations still prefer to use the OpenLM Light - free version.

This article describes the capabilities of the OpenLM Light free version.

OpenLM Architecture

OpenLM is a server application which is normally installed on the license server, but it could also be installed on any server or station just as well.
OpenLM Server is implemented as a Windows Service that is able to monitor any number of Floating License servers (mainly FLEXnet/FLEXlm).
OpenLM EasyAdmin is the OpenLM interface and it is implemented as a web application which can be served by any web server (Apache, Jakarta Tomcat, Microsoft IIS, etc.). OpenLM could be accessed from any workstation on the network, or even externally.

OpenLM Agent is an optional component which could be used to allow end users to query license availability. The use of the Agent offers the ability to enhance license usage in many ways.

OpenLM Installation

OpenLM server is distributed as an MSI file and could be easily installed on a server or Windows XP workstation that has .Net 2 installed.
The installation should take no longer than 5 minutes and it does not require configuration, except the addition of your list of license severs. The free version is limited to only one license server so only one license server can be added.

By default EasyAdmin is installed and served using an embedded web server - SHTTPD. The purpose of distributing SHTTPD is to offer a quick and easy installation of the software. However, it is recommended to install EasyAdmin on a regular HTTP server following the initial installation. This article explains how to install EasyAdmin on your IIS web server - How to install.

The installation of OpenLM EasyAdmin Agent is simple and can be done manually on every workstation or distributed to all workstations automatically. A sample distribution for the KIX script language can be downloaded from OpenLM downloads area.

OpenLM Configuration

OpenLM is automatically configured out of the box therefore only minimal configuration work is required. OpenLM configuration form is simple and friendly as can be seen in the following image (The license servers tab is open):

Additional important configuration is the Notifications configuration which allows OpenLM to send email messages to the system administrator. The relevant parameters can simply be copied from the mail client or taken from the system administrator. Configuring notification will allow OpenLM Server to send messages concerning problems with the license server, updates to OpenLM Software and more.

Software Updates

OpenLM has an automatic software update mechanism that notifies and updates the software automatically as updates become available.
The system is working differently for the Agent and the Server.

OpenLM Server - Message on new versions and updates are sent to the system administrator. The system administrator can, at his convenience, download and update the server.

OpenLM Agent - The update process for the agents is controlled by the system administrator. Once the administrator decides to allow the OpenLM Agents to be updated, he/she can start the process by using the OpenLM configuration form and by directing the new software version into the chosen location (URL or URI), accessible to the workstations.

Management, Reports and FLEXnet license statistics

The free version of OpenLM offers a slick interface for license management and some reporting capabilities that can address the needs of small organizations. OpenLM EasyAdmin control panel page shows information on activity of the license server in four floating windows (limited to only one FLEXlm server while the full version of the software can show the activity of any number of FLEXlm license servers).

The license tab window shows information on the licenses which are available on the server.
A click on the usage button opens a pop-up window which enables the user to draw FLEXlm license statistics with resolution of minutes and hours (the full version of OpenLM supplies daily, weekly and monthly statistics).

Active products enable users to manage the active users in a very efficient way. Showing the listing of active users, removing licenses and additional actions. The filter that pops at the left side of the tab, filters lists that may contain thousands of rows, in a fraction of a second.

All EasyAdmin tabs include easy and convenient filters that enable the user to filter reports according to any value.

The full version of OpenLM includes the workstations user activity and closed process tab, that supply advanced management and statistical tools.

Conclusion

Small companies with one FLEXlm floating license server can enjoy the free OpenLM software to manage their floating licenses. The software enhances the management capabilities of the system administrator and enables more efficient usage of licenses. Both small and larger companies can enjoy significant savings by implementing OpenLM Utilizer, which has many additional features at very low cost.

Oren Gabay, CTO
oren@openlm.com
http://www.openlm.com