forecast 5.7 installation for web server windows 2008 &...
TRANSCRIPT
Aditro Oy
1 (38)
Forecast Installation Page 1 of 38
Forecast 5.7
Installation for WEB Server Windows 2008 & 2012
Aditro 0y, 2014
Aditro Oy
2 (38)
Forecast Installation Page 2 of 38
Contents
Before installation .............................................................................................................................................. 3 Role Services of the Web Server ................................................................................................................... 3 Features of the Web Server ............................................................................................................................. 4 Prerequisites.......................................................................................................................................................... 4 Allow ASP.NET v4.0 in ISAP and CGI Restrictions .................................................................................. 5
Installation for WEB Server .......................................................................................................................... 6 Installing Forecast............................................................................................................................................... 6
After installation ................................................................................................................................................ 12 Act as part of the operating system ........................................................................................................... 12 Enable computer and user accounts to be trusted for delegation .................................................. 14 Trust this computer for delegation to specified services only .......................................................... 15 Users ...................................................................................................................................................................... 19 Forecast folders access rights ....................................................................................................................... 20 Forecast menu changes .................................................................................................................................. 21 More than one forecast report menu ......................................................................................................... 21 Hiding the Aditro logo ...................................................................................................................................... 21 Forecast scalability in the web server ....................................................................................................... 22 Adjusting the timeout parameter ................................................................................................................ 23 Adjusting the “Transactions Row Count” and “Add Row Count” parameters ............................. 24 Forcing Forecast to restart automatically if memory runs low ........................................................ 24 If client workstations are in different domain than the servers ...................................................... 25 Logo on the reports .......................................................................................................................................... 25 Database login options .................................................................................................................................... 25 Log in to Forecast .............................................................................................................................................. 25 MS Internet Explorer ........................................................................................................................................ 26 Mozilla Firefox ..................................................................................................................................................... 28 If Forecast doesn’t start after installation ................................................................................................ 30 Check that Managed Pipeline Mode is classic ......................................................................................... 30 On 64 bit Windows Servers Enable 32-bit Applications ..................................................................... 30 Creating a log file or Windows log .............................................................................................................. 32
Appendix A ............................................................................................................................................................ 33 Using secure communication (HTTPS) ...................................................................................................... 33
Appendix B ............................................................................................................................................................ 35 Four different ways to log into the database .......................................................................................... 35 DBUserMaintenance tool installation ......................................................................................................... 37
Appendix C ............................................................................................................................................................ 38 The report, database server and database as parameters from URL ............................................ 38
Aditro Oy
3 (38)
Forecast Installation Page 3 of 38
Before installation
Role Services of the Web Server
In Windows 2008: From Server Manager – Roles – Web Server (IIS), check that “Static Content”, “ASP.NET” and “Windows Authentication” (or Basic Authentication) are installed. If they are not, add them by clicking “Add Role Services”.
In Windows 2012: From Server Manager – Add roles and features – Server Roles -
Web Server (IIS), check that “Static Content”, “ASP.NET 4.5” and “Windows Authentication” (or “Basic Authentication”) are installed. If they are not, add them.
Aditro Oy
4 (38)
Forecast Installation Page 4 of 38
Features of the Web Server
In Windows 2008 check that .NET Framework 4.5 is installed
In Windows 2012 check that feature .NET Framework 4.5 is in use. If it isn’t, add the feature.
Prerequisites
Before starting Forecast installation these components have to be installed:
- Microsoft Visual C++ Redistributables 2010
- Microsoft .NET Framework 4.5
- Microsoft Open XML SDK
If these components are not found from the target computer, the installation will terminate.
These components can be installed from the CPM installation CD folder Components. Except .NET Framework 4.5.
Note! More than one report menus.
When updating to a new version and there are more than one report menus in old version, after update only the first menu is in use. The others have to be added manually to the web.config file. Instructions in chapter “More than one Forecast report menu”.
Aditro Oy
5 (38)
Forecast Installation Page 5 of 38
Allow ASP.NET v4.0 in ISAP and CGI Restrictions
Check that ASP.NET v4.0 is allowed in ISAP and CGI Restrictions in IIS
Aditro Oy
6 (38)
Forecast Installation Page 6 of 38
Installation for WEB Server
Installing Forecast
Note! Installation must always be done by a person with full administrative rights.
If Terminal Services is used on the server, Forecast install have to be started from “Install Application on Terminal Server” in Control Panel.
Otherwise:
Start RunMSI.cmd from ForecastSetup folder using “Run as administrator”
or
Start selecting Forecast from the setup main page (html).
In the Documentation folder there are this document and also other server installation documents.
Aditro Oy
7 (38)
Forecast Installation Page 7 of 38
License
Before you can continue Forecast setup you must have Fakta license file ( Fakta.lic ):
For a new installation you get the license file from Aditro. For an update the default is your old license file.
If the license file is not found from the given folder or if the license file is not valid, Next button doesn’t respond.
Aditro Oy
8 (38)
Forecast Installation Page 8 of 38
Select destination folder and report folder
Choose destination folder for all programs, help-files etc… Default destination folder is C:\Program Files\Aditro\Forecast.
If you want to change the folder, press Change and select folder.
In case of update it is recommended to install to the same folder as the old version.
The report folder is the place for your reports. Press Change to change the folder.
Aditro Oy
9 (38)
Forecast Installation Page 9 of 38
Choose the amount of the application pools in IIS
Possible values are between 1 and 10.
More information in chapter Forecast scalability in the web server in this document
Aditro Oy
10 (38)
Forecast Installation Page 10 of 38
Choose the default language of Forecast
Choose default language for Forecast and press Next. This is not asked when updating to a new version.
Each user can change the UI language later from the Forecast options.
Some messages from the engine libraries always use the language that is selected here. The language of these messages can’t be changed by the user. The language can be changed by editing the HKEY_LOCAL_MACHINE.xml file in ..\Forecast\App_Data\Preferences folder and it effects all users. Parameter UILanguage defines the language.
1033 English
1035 Finnish
1053 Swedish
Aditro Oy
11 (38)
Forecast Installation Page 11 of 38
Ready to install
Pressing Install starts the installation.
Installation is finished. Press Finish.
Aditro Oy
12 (38)
Forecast Installation Page 12 of 38
After installation
Act as part of the operating system
This right is needed for the security account running Forecast application pool. The security account must have this right to impersonate Forecast users sessions to use their Windows authentication. Check first the identity of the security account. Computer management - Services and Applications - Internet Information Services - Application Pools - Forecast – Advanced
Settings... - Identity.
Aditro Oy
13 (38)
Forecast Installation Page 13 of 38
Then Administrative Tools – Local Security Policy – User Rights Assignments – Act as part of operating system – Properties - Add User or Group. Add local NETWORK SERVICE to the user list.
Aditro Oy
14 (38)
Forecast Installation Page 14 of 38
Enable computer and user accounts to be trusted for delegation
This setting is needed ONLY if the database is not on the same server as the IIS. This right makes NETWORK SERVICE account trusted for delegation.
Aditro Oy
15 (38)
Forecast Installation Page 15 of 38
Trust this computer for delegation to specified services only
This settings gives the computer account (IIS server) right to delegate credentials to the database server (MSSQLSvc) or to the report server(cifs).
.
Active Directory Users and Computers – Computers – IIS Server (Basilika in example) – Properties – Delegation tab – Check Trust this computer for delegation to specified services only – Check Use any authentication protocol – Click Add button – Click Users and Computers button – Write or Select the database server (minttu in example) –press OK
Aditro Oy
16 (38)
Forecast Installation Page 16 of 38
If SQL Server service is running under an AD account, MSSQLSvr services are not shown in this dialog. In this case:
Use setspn command to get MSSQLSvr services shown. Setspn is a command-line tool that is built into Windows Server 2008. It is available if you have the Active Directory Domain Services (AD DS) server role installed. Enter commands:
setspn -A MSSQLSvc/server.company.local DOMAIN\Account
setspn -A MSSQLSvc/ server.company.local:1433 DOMAIN\Account
In “Select Users or Computers” dialog, select the AD account that SQL Server service uses.
Select all MSSQLSvc services of the db server – Press OK – Press OK
Aditro Oy
17 (38)
Forecast Installation Page 17 of 38
Add service cifs (report server is kaneli in example)
Aditro Oy
18 (38)
Forecast Installation Page 18 of 38
Aditro Oy
19 (38)
Forecast Installation Page 19 of 38
Users
Create a new User Group "FaktaWebUsers" (local or domain group). Add all users who are authorized to use Forecast to the FaktaWebUsers group. If FaktaWebUsers is a local group, add also NETWORK SERVICE to FaktaWebUsers. If FaktaWebUsers is a domain group, NETWORK SERVICE has to be given rights to access Forecast install folders (see “Forecast folders access rights” on the next page).
Aditro Oy
20 (38)
Forecast Installation Page 20 of 38
Forecast folders access rights
Give permissions for the "FaktaWebUsers" group. If FaktaWebUsers is a domain group, give permissions also for NETWORK SERVICE. Give permission ‘Read & Execute’, ‘List Folder Contents’ and ‘Read’ to the install folder (in example to the Forecast).
Give permission ‘Modify’ to the folders App_Data and XceedTemp
Aditro Oy
21 (38)
Forecast Installation Page 21 of 38
Forecast menu changes
Open Windows Vision Open forecast menu (forecast.qrm) Make changes to the menu (enter the directory path of your Vision reports) Save forecast menu By default the Forecast menu files are located in the Forecast installation folder: Forecast\App_Data\Menus
More than one forecast report menu
Add the menu and the path of the menu into the file web.config after the existing menu: <economa> <forecast> <menus> <menu file="C:\Program Files\Personec\Forecast\App_Data\Menus\Forecast.qrm"/> <menu file="C:\Program Files\Personec\Forecast\App_Data\Menus\Forecast2.qrm"/> This can also be done by using ForecastConfiguration.exe that can be started from the Forecast installation folder.
Hiding the Aditro logo If Forecast is started inside Aditro Window, the Aditro logo can be hidden to avoid double logo. Change the setting ShowLogo in web.config to false: <appSettings> <add key="ShowLogo" value="false"></add> This can also be done by using ForecastConfiguration.exe that can be started from the Forecast installation folder.
Aditro Oy
22 (38)
Forecast Installation Page 22 of 38
Forecast scalability in the web server The amount of application pools has a strong effect on the performance of Forecast. The more there will be simultaneous users, the more there should be application pools. The more there are application pools the more Forecast uses memory of the web server. The Amount of the application pools can be chosen in Forecast setup. It’s possible to select between 1 and 10. Creating application pools If there is a need to create application pools after installation or more than 10 pools are needed. Using ForecastConfiguration.exe: - Start ForecastConfiguration.exe from the Forecast installation folder (default folder name
is Forecast). - In Main tab change the “Application pool count” and press save. The new value is saved in
web.config. - In “Create/Remove IIS application pools” tab write the “Base application pool name”. The
default value is Forecast. - Press “Apply application pools” button to create the application pools and web sites in IIS. Manually: - Create new application pools to IIS. Use names Forecast_PoolX where X is a growing
number. The settings of the new application pools must be the same as in the old ones. - Create new corresponding web sites to IIS. Use the same names as are used in application
pools. The settings of the new web sites must be the same as in the old ones. - Change the number of the pools in web.config. The value must be the same as the highest
number in the names of the application pools <add key="ReportPoolCount" value="3" />
If there is going to be only a few users and/or the memory size is small in the web server, it is recommended to use only one application pool. In that case the parameter value in web.config must be 0:
<add key="ReportPoolCount" value="0" /> Important: The users should start Forecast from a link like this: //server/forecast This is to make Forecast to redirect the users to any pool and it’s more likely that different users are using different pools. If users bookmark (add to favourites) the Forecast address from the browser, the address is like this: //server /forecast_Pool3/Index.aspx In this case the user always returns to this same pool. This is not recommended.
Aditro Oy
23 (38)
Forecast Installation Page 23 of 38
Adjusting the timeout parameter Default time, after connection is lost to the web server, is 60 minutes. The time can be changed in web.config. <system.web> <sessionState mode="InProc" cookieName="sid" timeout="60" cookieless="AutoDetect"/> </system.web> This can also be done by using ForecastConfiguration.exe that can be started from the Forecast installation folder. When time expires a message is shown:
Timeout parameter can be changed. If the parameter value is set very big (several hours), the message may not be shown, when connection is lost. This may happen because IIS doesn’t
always fire "timeout expired" event, when timeout parameter is big.
Aditro Oy
24 (38)
Forecast Installation Page 24 of 38
Adjusting the “Transactions Row Count” and “Add Row Count” parameters
“Transaction Row Count” parameter limits the amount of rows that can be fetched to the Transactions tab of Forecast. If row count is higher than the parameter value, any rows are fetched. Default value is 100000. This parameter effects to the load of the IIS server, not the workstation. Value can be changed in web.config. “Add Row Count” parameter limits the amount of rows that can be selected in Add rows dialog. Default value is 100. These parameters can be changed in web.config. <configuration xmlns="http://schemas.microsoft.com/.NetConfiguration/v2.0"> <economa>
<forecast> <settings> <setting name="transactionsRowCount" value="100000"/> <setting name="addRowCount" value="100"/> </settings> This can also be done by using ForecastConfiguration.exe that can be started from the Forecast installation folder.
Forcing Forecast to restart automatically if memory runs low Forecast can be set to restart the application pool if memory runs low in the Forecast server. Parameters to set this option on and parameters to adjust the restart, are set in memoryManager section of web.config. <configuration xmlns="http://schemas.microsoft.com/.NetConfiguration/v2.0"> <economa>
<forecast> <settings/> <memoryManager
enabled="true" availableMemoryLimit="70" mainProcessMemoryLimit="70" restartConfirmationTimeout="10" timeoutBeforeRestart="15" />
enabled When this is “true”, the memory manager is activated and Forecast checks the memory every 30 seconds
availableMemoryLimit The limit (maximum value) of available memory (physical-RAM
+ virtual-swap) in percents (0 means - no limit) mainProcessMemoryLimit The limit (maximum value) of physical memory (RAM) in
percents that w3wp process uses (0 means - no limit)
restartConfirmationTimeout Timeout in minutes. If either of the limits is exceeded longer
than this, restart process is started timeoutBeforeRestart The timeout in minutes between memory overloading (restart
process is started)and server restarting (Time to save changes before restart)
When either of the memory limits exceeds longer time than is defined in the restartConfirmationTimeout parameter, a message like this is shown to all users:
Aditro Oy
25 (38)
Forecast Installation Page 25 of 38
This can also be done by using ForecastConfiguration.exe that can be started from the Forecast installation folder.
If client workstations are in different domain than the servers See Appendix A.
Logo on the reports If you want to see logo on the reports, you have to add the path where the logo exist to the HKEY_LOCAL_MACHINE.xml file in the APP_DATA\Preferences folder. Forecast looks for a logo in the specified folder (“Header Frame” must be selected in the Options): 1. If the logo file exists under the name UnitID_Logo.bmp, it is used. 2. If the logo file exists under the name Logo.bmp, it is used. The contents of HKEY_LOCAL_MACHINE.xml: <?xml version="1.0" encoding="UTF-16"?> <HKEY_LOCAL_MACHINE> <Software> <TietoEnator>
<Fakta> <Vision> <PrintOptions HtmlTemplatePath="C:\Program Files\Personec\Forecast\App_Data\Preferences"/> </Vision> </Fakta> </TietoEnator> </Software> </HKEY_LOCAL_MACHINE> After the path is added, remove all user xml files from the APP_DATA\Preferences folder and restart the Forecast application pool.
Database login options Default way to log into the database is Windows authentication. If some other database login is needed see Appendix B.
Log in to Forecast
Start browser and connect to default start page //server/Forecast.
Aditro Oy
26 (38)
Forecast Installation Page 26 of 38
MS Internet Explorer To use copy/paste feature in Forecast, IE requires -Forecast should be in “Local Intranet” zone (recommendable)
or
-Internet Options/Security/Custom level/Scripting/Allow Programmatic Clipboard Access set to.
Aditro Oy
27 (38)
Forecast Installation Page 27 of 38
If prompt is enabled, this dialog will appear every time when clipboard is used:
If Forecast is used with IE from the IIS server, the use of chart requires that Protected Mode is
not enabled:
Aditro Oy
28 (38)
Forecast Installation Page 28 of 38
Mozilla Firefox
If you don’t want the browser to ask user and password when the user is logging in to Forecast, you can add the FireCast add-on to Firefox.
To add the add-on to Firefox, start browser and write this url: Server/forecast/firefox/firecast.xpi For example
Aditro Oy
29 (38)
Forecast Installation Page 29 of 38
Write username and password to the Forecast site
Press Install Now
Restart Firefox after the add-on install. You can see the add_ons by selecting Add_ons (Lisäosat) – Extensions (Laajennukset) from the Firefox menu
Aditro Oy
30 (38)
Forecast Installation Page 30 of 38
If Forecast doesn’t start after installation
Check that Managed Pipeline Mode is classic
From Server Management – Roles – Web Server (IIS) – Internet Information Services (IIS) Management, select Forecast application pool. Select Advanced Settings... Check that “Managed Pipeline Mode” is “Classic”.
On 64 bit Windows Servers Enable 32-bit Applications
From Server Management – Roles – Web Server (IIS) – Internet Information Services (IIS) Management, select Forecast application pool. Select Advanced Settings... Check that “Enable 32-Bit Applications” is “True”.
Aditro Oy
31 (38)
Forecast Installation Page 31 of 38
Aditro Oy
32 (38)
Forecast Installation Page 32 of 38
Creating a log file or Windows log
To write log from Forecast there are some settings in web.config file that can be adjusted. Log is defined in <configuration><log> branch of web.config file. Log is turned on or off using <TraceLevel>. Possible values of TraceLevel are Off, Error, Warning, Info and Verbose. TraceLevel can be set in three different branches: <configuration><log><TraceLevel> <configuration><log><file><TraceLevel> <configuration><log><windows><TraceLevel> If only the first is defined, file and Windows logs uses that one. The second and third
TraceLevel definitions overrides the first. <configuration><log><file><Filename> defines the path and the file name for the log file or just the path where the trace.txt file is created. If this is not defined, setting <configuration><appSettings><add key="tempDirectory" value="xxx\yyy" /> is used. <configuration><log><file>< SizeLimitInMb > defines the maximum size of the log file. <configuration><log><file>< Split > value “false” stores log in one file. value “true” splits the file according to the trace level. <configuration><log>< windows >< SourceName > defines the name of the application to the Windows log. Example:
<log>
<!-- Defines the TraceLevel - [Off, Error, Warning, Info, Verbose] --> <TraceLevel>Off</TraceLevel> <!-- Enables logging to file --> <file> <!-- Defines file or folder name for logging--> <Filename>App_Data\Temp</Filename> <!-- Overrides TraceLevel --> <TraceLevel>Off</TraceLevel> <!-- Defines log file limit --> <SizeLimitInMb>10</SizeLimitInMb> <!-- Stores old logs in one file or splits it to different files according to the trace level --> <Split>false</Split> </file> <!-- Enables logging to Windows log --> <windows> <!-- Overrides TraceLevel -->
<TraceLevel>Error</TraceLevel> <!-- Defines the source name --> <SourceName>Forecast</SourceName> </windows>
</log>
Aditro Oy
33 (38)
Forecast Installation Page 33 of 38
Appendix A
Using secure communication (HTTPS)
Secure communication is needed in case when database, reports or menus are not on same server as IIS and client workstations are in different domain than servers.
A certificate is needed in IIS server.
In IIS Manager choose properties from WebSites/Default Web Sites/Forecast.
Press Edit… in Authentication and access control
Aditro Oy
34 (38)
Forecast Installation Page 34 of 38
Select “Basic authentication(password is sent in clear text)”. Press OK.
In Forecast properties press Edit… in Secure Communications.
Select “Require secure Channel (SSL)”. Press OK.
Aditro Oy
35 (38)
Forecast Installation Page 35 of 38
Appendix B
Four different ways to log into the database
When Forecast is installed, it has to be decided how to log into the database. Only one of these four options can be used in a Forecast instance.
In three of these four options login information is saved in the DATABASE_LOGIN_INFORMATION.xml file in Forecast installation folder. All data in that file is encrypted.
1. Windows authentication
When user opens a report from the report menu of Forecast, Forecast looks the name of the database server and database from the report and tries to log into the database using the same windows user identity that is used to open Forecast.
This is the default option that is used if any configurations are made regarding the database login after Forecast installation.
To use this option:
- These options have to be set in the web.config file:
<appSettings>
<add key=" UseDBAuthentication" value="false" />
<add key=" UserSavedDBLogin " value="false" />
</appSettings>
If these rows are missing from the web.config file (like in old installations), it means that their value is false.
2. Database user from XML file by Forecast user
This option makes it possible for one report to log into several databases. Database is always looked from the xml file and never from the report (qrd). Database username and password are never shown to the user.
- Forecast opens DATABASE_LOGIN_INFORMATION.xml file from the Forecast installation folder ...\Forecast\App_Data\Preferences.
- When a report is opened, Forecast looks for the Forecast user from the XML file. If user is found, Forecast looks for databases defined for the user.
- If there is only one database defined for the user, Forecast connects to that database using the user name and password found from the xml file alongside the database.
- If there are more than one database defined for the user, a dialog is shown where user can choose the database
Aditro Oy
36 (38)
Forecast Installation Page 36 of 38
To use this option:
- Open the web.config file and set these options:
<appSettings>
<add key=" UseDBAuthentication" value="true" />
<add key=" UserSavedDBLogin " value="false" />
</appSettings>
- Use DBUserMaintenance tool to create the DATABASE_LOGIN_INFORMATION.xml file to the folder ...\Forecast\App_Data\Preferences
- In DBUserMaintenance tool choose the login type “Database users by Forecast user” and create the needed logins.
3. Database user from XML file by Database
Database username and password are never shown to the user.
- Forecast opens DATABASE_LOGIN_INFORMATION.xml file from the Forecast installation folder ...\Forecast\App_Data\Preferences.
- Forecast looks the database server and database from the report (qrd) and tries to find the same server and database from the xml file.
- If the server and database matches, Forecast connects to the database using the username and password found alongside the database in the xml file.
To use this option:
- Open the web.config file and set these options:
<appSettings>
<add key=" UseDBAuthentication" value="true" />
<add key=" UserSavedDBLogin " value="false" />
</appSettings>
- Use DBUserMaintenance tool to create the DATABASE_LOGIN_INFORMATION.xml file to the folder ...\Forecast\App_Data\Preferences
- In DBUserMaintenance tool choose the login type “Database users by database server” and create the needed logins.
Aditro Oy
37 (38)
Forecast Installation Page 37 of 38
4. Connect dialog. Database user asked from the user.
- Database user and password are asked from the user in the connect dialog. Forecast user can save the database user and password and connect automatically next time.
To use this option:
- Open the web.config file and set these options:
<appSettings>
<add key=" UseDBAuthentication" value="true" />
<add key=" UserSavedDBLogin " value="true" />
</appSettings>
DBUserMaintenance tool installation
DBUserMaintenance tool can be installed from the CPM installation CD folder InstallationCD\DatabaseUserMaintenanceTool.
Aditro Oy
38 (38)
Forecast Installation Page 38 of 38
Appendix C
The report, database server and database as parameters from URL
It’s possible to set report file name and path, database server and database in Forecast URL. When the report is set from the URL, the Report is opened when Forecast is opened and report menu is hidden. The report menu can be shown by clicking the “Show/Hide Menu” button.
When database server and database are set in the URL, the corresponding values in report definition are replaced with them.
The key words that can be used in Forecast URL are:
Report=value
DBServer=value
DB=value
The parameters are separated with &
If there are spaces in the parameters, they are replaced with pluses (+).
Example URL with the report name and path:
ForecastServer/Forecast/IndexPooled.aspx?Report=C:\Forecast+Reports\Report.qrd
Example URL with the report name and path, database server and database:
ForecastServer/Forecast/IndexPooled.aspx?Report=C:\Forecast+Reports\Report.qrd&DBServer=DatabaseServer&DB=ForecastDatabase
If only one application pool is used, replace IndexPooled.aspx with Index.aspx