Configure mobilefist operational analytics with *websphre application server (network depoyment) cluster* on a separate machine(server) [closed] - websphere-8

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 6 years ago.
Improve this question
Currently I have configured mobilefirst server 7.1 on websphere application server cluster with two nodes (two machine).
My reference :
https://www.ibm.com/support/knowledgecenter/SSHS8R_7.1.0/com.ibm.worklight.installconfig.doc/admin/t_setting_up_WL_WAS_ND_8_cluster_env.html
Now I want to setup analytics server for this setup. For analytics I have a separate server.
For that I found these two links :
http://www.ibm.com/support/knowledgecenter/SSHSCD_7.1.0/com.ibm.worklight.installconfig.doc/monitor/t_installing_op_analytics_websphere.html
As per above link, We can enable WAS to accept analytics by deploying analytics war on WAS.
http://www.ibm.com/support/knowledgecenter/en/SSHSCD_7.1.0/com.ibm.worklight.installconfig.doc/monitor/t_configuring_op_analytics.html
As per this link, While creating mobilefirst server war, we have to congiure analytics detail in worklight properties.
Here my question is where will be thae configuration of ip/domain, port, database etc. of analytics? Does it require mobilefirst server on this seprate for analytics?

Analytics is not a relational database. Analytics uses Elasticsearch as it's method of storing information.
Elasticsearch is a search engine based on Lucene. It provides a distributed, multitenant-capable full-text search engine with an HTTP web interface and schema-free JSON documents.
Elasticsearch stores it's data on the filesystem of the machine you install on unless you tell it otherwise through environment entries.
IP/domain - host of the machine you installed on
port - I believe you set this when you are installing the WAR on WAS.
No, Analytics does not require MobileFirst Platform runtime server to be installed on the same machine. Operational Analytics is a separate server that gets it's data forwarded to it by the runtime server.
Does that answer all of your questions?

Related

SSH CA for managing Github SSH Certificates [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
We don’t allow questions seeking recommendations for books, tools, software libraries, and more. You can edit the question so it can be answered with facts and citations.
Closed 1 year ago.
Improve this question
Github now support authentication via an OpenSSH certificate: https://github.blog/2019-08-14-ssh-certificate-authentication-for-github-enterprise-cloud/.
However, I cannot find any recomendations for a certificate authority to manage these SSH certificates.
There seem to be numerous options surrounding certificate management for servers and productions environments, e.g. BLESS, CASSH etc.
What would you recommend for managing SSH certificates for developers to access Github?
In an ideal world, this would allow for custom configuration by developer. It would be able to interact with an existing active directory to authenticate users attempting to create certificates and it would be a managed service.
I work at smallstep and we have an open source certificate authority that can issue SSH certificates. We also have a hosted product that does single sign-on for SSH (along with auto-provisioning of posix users, SSH and sudo access control, and audit logging). Both the open source and productized versions allow you to connect certificate issuance to your single sign-on provider using OAuth OIDC. See this youtube video for an example of the end-user experience. It's pretty rad.
We're about to drop some new functionality in the open source CA that will allow you to add the login#github.com extension to SSH certificates which should be the last piece you need for your use case. This blog post is a good place to start if you want to try the SSH CA while you wait for that issue to close (which should happen very soon now). We're also integrating this into our hosted SSO for SSH product if you want the additional features offered there, or if you just don't want to run a CA yourself.
I'll try to remember to swing by with an update once everything is released. In the meantime if you (or anyone else who reads this) is interested I'd love to hear your feedback. I'm mike at smallstep's domain name.
We just launched support for GitHub Certificates in our fully managed EZSSH product We use your AAD identity to create a short term certificate, you can learn more about it in our GitHub blog post.
If your organization runs an internal secure web server, if you want to encrypt emails that are exchanged within your organization, or if you use digital certificates to authenticate employees onto the VPN, then you can setup and act as your own Certificate Authority (CA) and issue your own digital certificates for internal use.
Search the internet for the "Open Source Certificate Authority
or "Certificate Authority" software to find relevant out of the box solutions.
See also Certificate Authority explained in more details.
For GitHub support for SSH certificate authorities it is available with GitHub Enterprise Cloud and GitHub Enterprise Server 2.19+.
More details: https://help.github.com/en/github/setting-up-and-managing-organizations-and-teams/about-ssh-certificate-authorities
https://help.github.com/en/github/setting-up-and-managing-organizations-and-teams/managing-your-organizations-ssh-certificate-authorities

Best approach to connect to SQL Server from a non-domain web host [closed]

Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed 7 years ago.
Improve this question
I want to connect to SQL Server using a domain account from a web host that is NOT in the domain. This is a plain vanilla ASP.NET web app. This off-domain site hits Reporting Services using domain credentials and I don't know why this isn't allowed for SQL connections.
We have a lot of internal apps (win form and web form) and this is the last one to convert to integrated security so we can manage permissions across the board via AD, but if I have to do it in SQL, then I can accept defeat.
Has anyone figured out how to do this or is it just not possible?
You can Connect to domain SQL Server 2005 from non-domain machine and later versions but this requires that you can connect to the domain from the remote machine.
You can connect to Reporting Services using domain credential because it uses NTLM for Windows Integrated authentication which goes through HTTP authentication. Direct connections to SQL Server don't use HTTP so this type of authentication isn't available.
You will need to join the SQL box to the Web App domain or the other way around or make a trust relationship between the domains
runas /netonly /user:domain\username "c:\path\ssms.exe"
look at this post here:
http://www.mssqltips.com/sqlservertip/3250/connect-to-sql-servers-in-another-domain-using-windows-authentication/

Unicorn multiple machines setup [closed]

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 10 years ago.
Improve this question
I have a good experience with Unicorn configuration with conjunction of Nginx, it works really well after optimizations and tuning procedures. But now I have got a question what is the best way to spread the load across multiple machines with Unicorns.
The question is you have 3 machines (Nginx load balancer, 2 APP servers with Unicorns), how do you manage load balancing of Unicorns with serving static assets.
Do you now any drawbacks with connection to Unicorn over TCP (timeouts, connection lost), is there any other way to upstream socket connection over the network (maybe port forwarding over SSH)? Unicorn designed to be stateless, but how do you manage the edge cases?
I don't want to serve static from balancer node, so would it be ok to setup Nginx on each of APP server and setup dumb Nginx balancer in front of them?
P.S. My current configuration is well-tested and can be found on Github, but the setup with Nginx+Unicorn on the same machine that already became a bottleneck.
UPDATE: Development is rigidly depends on the specific server configuration. Bottlenecks are going to happen not just because of developer's decisions, but also with the environment where he run it. Stackoverlow is full with highly marked Q&A related to the hard-to-know details about specific configuration. Alex who answered below works with Github I'm really appreciate to have a reply by such qualified person!
Don't access the Unicorns over TCP/network.
Your setup seems just fine, you can simply add a load-balancer in front of the APP servers, but I would suggest Keepalived (LVS ftw) as load-balancer instead of Nginx.
You can have them balance connections to the APP servers running Nginx+Unicorns over sockets.

SSH smoke & mirrors [closed]

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 11 years ago.
Improve this question
Situation:
I've been given SSH access to a server running LAMP (Redhat) and the brief is to migrate files and database from current live server to this new development server for testing.
Further this SSH access is contained within a Protected Workspace, so basically I have to access this companies internal network and then I can access the server there through SSH.
Issue:
SSH - WTF?? :- In the murky world of media agency smoke and mirrors alas I'm not allowed to admit weakness and it appears that I won't have access to my familiar tools (filezilla + sequelpro)
I managed to logon to the server yesterday with Putty though have no idea how to achieve the mission:
Create a database
Import data to that database
Upload files
Set permission on files and folders
At what address will I be able to view the website?
Is there a kind soul out there who can point me in the right direction?
Thanks.
What's the problem with FileZilla? If its available on the server - run it, SSH has nothing to do with that. You'll probably want to have X server running on your computer though, and set up port forwarding in Putty to allow applications running through SSH to connect to it.
SSH is what it is: secured shell connection. Once you gained access through SSH you can do everything you could do using local console.

How do I choose web hosting? [closed]

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 10 years ago.
Improve this question
I have a couple of personal web-based projects in the pipeline, and am unable to chose how to host them.
I have questions in the area of domain names and actual file hosting (which I believe are separate topics, though many companies provide both).
Domain Names
I have a domain name registered with Freeparking.co.uk, but they don't offer the kinds of services I think I need. Can I just transfer the domain name to somewhere else? Apart from anything the only thing they do is to host a page with a full-page frame on it, which I configure a URL for. Basic URL hiding, but that means that people can't bookmark specific pages in my websites.
Hosting
I wish to host ASP.NET applications (plural) using SQL Server 2005. What are the steps to choosing a hosting environment, and how do I connect the domain name to the hosting environment?
Domain names are best kept separate from the hosting. Decent domain registrars let you freely define name severs, which in then give the IP address for the domain. Typically (but not necessarily) these name servers are provided by the hosting company. So, the steps are:
Choose the hosting provider (sorry, I have don't recommendations on ASP hosting providers).
Configure the name servers so that at least the A record of yourdomain.com points to the ip of your server (this is often automatically done by the hosting company).
Configure your domain name at the registrar so that it refers to the the above mentioned name servers.
Also the domain name registrar can provide the name server stuff, or you can use for example EveryDNS.
your domain name is just an IP address in their Name Server which drives Domain Name System - DNS. Check that Freeparking actually do NameServer stuff.
You can choose what ever host that meets your requirements.
your host will have there own DNS system (ie the IP address of the server that will be your web application host).
Ask Freeparking to point your Domain Name the name at the new IP.
I needed the same ASP.Net and SQL and went for DiscountASP.net (although they are in the US), excellent service so far =>
They also do the email side too. The MX part of your domain name.

Resources