Implementation and Management of INB using 9iAS INB Team Presentation Available: – Click on iAS Presentation Tuesday, October 29th, 2002, 11:15am

Presentation Agenda Components needed to run INB Installation of 9iAS Setting up Test and Production environments. Configuration Files Security Issues Managing INB/Helpful Hints Discussion

Components needed to run INB in a multi-tier architecture Client Windows 95,98,NT, 2000, XP Mac-MRJ Browser - Netscape 4.x,6.2), IE 5.x,6.x JInitiator Database Server Oracle Alpha Open VMS 7.3 Application Server Oracle 9iAS a Patch 10 for forms6i SQLNETSQLNET

Application Server Components Communication Services Business Logic Services Presentation Services Other Services –Caching Services –Content Management –Business Logic Services –Portal Services –Business Intelligence Services

The Application Server 9iAS Forms Listener Servlet Architecture The new Forms6i patch 4 and above

Advantages of the new architecture Broader range of firewalls and proxies supported No protocol restriction (HTTP /1.1 or HTTP/1.0 both work - former better) No extra process to manage No specific certificate to purchase/manage for SSL deployment Standard load balance

Oracle HTTP Listener powered by Apache What is it? Where to find info? – Security alerts Documentation FAQs Mailing Lists As it relates to 9iAS? –Apache is distributed w/9iAS (NT/2000)

Installation of 9iAS for INB Hardware Requirements –Windows NT/2000 Server or Sun Solaris Physical Memory/Total Available Page file space or swap space Software Requirements: –Webserver a - 9iAS release 1 –Forms (patch 10)

Installation of 9iAS for INB Installation –FAQ Installing Banner 5.0 Webforms w/ias on Windows Unclear Items –Printer=SCTMTA15 and ClientDPI (Mac) –FAQ Preferred Servlet Mode Webforms Configuration –FAQ Implementing a Servlet Mode Webform Configuration

Installation of 9iAS for INB –Patches Applied # Latest mod_plsql build # HTTP Server Security Patch # Open SSL Vulnerabilities # Install new version of 9iAS toolkit Differences between FAQ 3601 and 9iAS Enterprise Installation Guide –WebCache - if you plan on using it, select it in the configuration wizard - can configure other components later.

Setting up Test and Production environments Hardware/Software –Test Box –2 production boxes ( sessions) with Round Robin 9iAS and fmx on each box The Windows Desktop –Jinitiator –Browser –Shortcuts

Configuration Files Oracle\806\forms60\server\default.env Contains instance/environment specific settings Test.env & Prod.env – tailored for each instance - LOCAL - TNS_ADMIN - FORMS60_PATH - REPORTS60_PATH - GRAPHICS60_PATH

More Configuration Files Oracle\806\forms60\server\formsweb.cfg Forms Servlet Configuration File - Jinitiator Parameters - System parameters Base.htm, Baseie.htm, Basejini.htm - User Parameters - Specific Configuration [prod] envFile=prod.env pageTitle= PROD INB

More Configuration Files Oracle\isuites\apache\apache\conf\httpd.conf Main apache server configuration file Oracle\isuites\apache\apache\conf\oracle_apache.conf Contains includes to other configuration files Oracle\isuites\apache\apache\conf\mime.types Mapping between MIME types & file extensions Oracle\isuites\apache\\modplsql\cfg\wdbsvr.app Dad Definitions for mod_plsql Oracle\isuites\6iserver\conf\6iserver.conf 6i configuration file for Apache listener – Contains the virtual path for Banner On-line Help Files Oracle\isuites\6iserver\forms60\server\basejini.htm Default base HTML file to run a form on the web using Jinitiator

Security- If you boot it.. They will come Entrust ( vs. Verisign –Our own certificate authority –Pricing (according to entrust site 10/2002) 10 entrust SSL web server certificates $ verisign SSL web server certificates $2490 –Management 2 year certificates easier for management Support –Request Simplified

Security How to make INB Secure –FAQ# 7271 Additional Information –Chain Certificate –Formsweb.cfg - connect mode and serverURL to HTTPS

Mac Issues with Security Could not run INB on patch3a with/wo SSL Able to run INB on patch 9 w/o SSL; could not do SSL According to notes on BORACLE, INB on a Mac w/SSL runs under Patch 6. According to SCT, Oracle says cannot run SSL on any patch level and they dont support it. Citrix

Security Advanced Security Option –As long as Application Server and dbserver are behind the same firewall, you do not need. Work Study Student Access outside the office and hours worked

Issues Netscape –Netscape 6.23 ( DLL issue, Selecting other forms) –Wxp - Netscape 7 issue IE - Closing Browser, Closes Banner Other –Task Bar - W95, W98 –Black fields on our in-house forms.

Managing INB Remove script (rotatelogs - Bug # ) Sync Routine Job to ensure HTTPSERVICE is running. XLF - Log Analyzer 123 Making Banner Unavailable Making Banner Available for Upgrade testing Log files –Parse the log file for Oracle errors

Logs and Trace Files access_log error_log ssl_request_log jserv.log mod_jserv.log sqlnet.log

Helpful Hints Installation Hints –Requirements mb just for iAS –Clean Install –Enterprise Edition Oracle HTTP Server in SSL mode Oracle 9iAS forms and reports server. –Accept Defaults for Oracle Home, Wireless, portals, etc. –Accounts and privileges –Missing Icons

Helpful Hints –Burn CD for Jiniator –Enable Java Console click on jiniator in start, program click on show java console under basic tab

Helpful Hints Extract Data with/without key (FAQ #5132) SCT Documentation Bookshelf does not work in INB.

Discussion Items Forms Development Workstudy Security Issues Running INB secure on a MAC Documentation Bookshelf Workaround Production environments – Pros & Cons NT vs Solaris Statistical Packages