Lessons Management Hub. Operating System requirements

Transcription

1 Lessons Management Hub Operating System requirements

2 LMH Operating System requirements The purpose of this document is to define the minimum technical requirements required for Lessons Management Hub (LMH) to operate successfully on an IT system. The infrastructure requirements for LMH are extremely small. A normal installation of a web site and a database could be obtained via external webhosting for GBP20/USD35 per month. The database charges would be higher if LMH was also being used to store the documents associated with lessons. If for any reason your IT system does not meet the minimum requirements described below, please contact service@lessonlearner.com for further advice. SqlServer LMH requires Microsoft SqlServer. The system has been tested on SQLServer 2005, 2008 R2, 2012 and SQLExpress. The tasks which the SQLServer Administrator will be asked to do are: Create a database; Restore the database from the script generated from the Lesson Learner Limited database; Create a default user for the Web Site with DB_Datareader and DB_DataWriter permissions; Organise Maintenance tasks for Database backup and file truncation as appropriate; Run update scripts as sent by Lesson Learner. Clients may re-use the data from the LMH database in other applications. However modifications to the LMH database will invalidate the Support Maintenance agreement. Where LMH Document Register is being used to store documents (as opposed to a file link or url) and IF searching is required of the content (as opposed to title and description) then Full Text Indexing needs to be enabled. In those circumstances it is normal to install the Adobe addon to SQLServer so that PDF files can be read. More details in the Configuration manual. LMH Web Site LMH is a standard Microsoft.NET Site tested under IIS6, IIS7.5 and IIS8.The system has been tested with Internet Explorer 8,9,10,11; and Mozilla Firefox and Chrome. Note that the user s Pop Up Blocker must be OFF and the system automatically checks this and advises users. The system has been tested with.net 3.5, 4.0, and but is normally shipped with settings to.net It is desirable to run LMH in the.net4 Integrated Pipeline pool. The Systems Administrator is required to create the site as an application. It is a requirement of LMH that you have Microsoft Report Viewer 10 or above installed in the GAC. This is a standard Microsoft component available as a free download and is supplied as part of the LMH installation.

3 The Systems Administrator should download and install ReportViewer in the GAC. Having multiple versions of Report Viewer in the GAC at the same time is permissible. Microsoft report Viewer 10 is standard for all.net versions up to For.NET and above LMH requires Version 11 or above. The only non-microsoft Component in LMH is the Karamasoft UltimateSpell spell checker. This dll is provided as part of the bin of the LMH system. All the support files including the Custom Dictionary are supplied as part of the LMH site. The System Administrator needs to give the IISUser modify and write permissions to UltimateSpellInclude\customdictionary sub-folder and files so that they can add client specific terms to the Spell Checker. In the web.config you will need to specify your SMTP Mail Server address for sending s from the system. The default from address is specified by the OMH System Administrator within LMH Configuration. There is an option to have LDAP authentication of passwords. In that case, the Web.config will specify the Membership provider details and the LMH Administrator (see below) needs to set a switch in the Configuration screen under Administration. There is an option to have Single Sign-On (SSO) or Windows Active Directory authentication. If SSO is used then the validation of the site must be set to Windows in web.config. SSO uses Windows Identity and then the LDAP server for Groups. Installation Issue: With some IIS8 and IIS8.5 new installations (not an upgrade from IIS7.5) we have that the Systems Administrators have had to perform the following: Click "Start button" in the search box, enter "Turn windows features on or off" in the features window, Click: "Internet Information Services" Click: "World Wide Web Services" Click: "Application Development Features" Check (enable) the features. Check all but CGI. Symptom: This error message referring to part of the web.config Config Error: This configuration section cannot be used at this path.

4 Security Model/User Validation Here is a summary of the options Levels of Access A User names and passwords in LMH. Log-on to LMH - as you see on the demo site. B User names in LMH, no password. Log-on to LMH. Use LDAP authentication to check password. C Single Sign-On. User list in LMH with no password. As users access the site the User List is updated with Windows name, login, address. Then it scans the AD groups LMH_Admin, LMH_Login and LMH_RO for the user thus giving the LMH permission levels. No log-on to LMH necessary. We provide a test routine to show what LMH is detecting in the AD system. D - Public. Suitable for an Intranet Access. No log-on, no identity. Access controlled by Intranet access and path. Users can browse. Users can add a lesson, and modify it in the same session, only providing part of the data. After they end the Browser session, they cannot access that lesson except if they have A-C above. The LMH Administrator gets an to alert that a new partial lesson has been added. There is an option in configuration to permit: Under A failed logins can add themselves as Read Only users. We saw this as a mechanism for take-on of the user list under A Under C a failed log-on (not a member of those AD Groups) can be directed to public. Access can be controlled to the single lesson level for sensitive lessons which are available to a group of people, or roles. Normally access works like this: - Browsers are read only. - LMH_RO A read-only user can still subscribe to a parameter value in the taxonomy and be advised by if a lesson covers that topic. - Think of an LMO as an equivalent of a PMO are Administrators LMH_Admin - Then there are the people who are involved in Managing Lessons, Validating lessons or responsible for actions. They are granted LMH_Login. Access to the database by all users is through one defined SQLServer Authenticated User via the web.config of the site. SSO used Windows Identity plus the LDAP server for Group Authentication.

5 LMH uses s to alert people to tasks which have been assigned to them. There is no facility for the system to receive s but a Tasks portal has been provided where people can log on and add more comments including users who are read-only for all other aspects of the LMH. The s are sent from a designed FROM address which the LMH Administrator can nominate. It is recommended that the Lesson Learned Manager address is used as the FROM in case people reply to s that they receive. If the SMTP server defined in the web.config setting requires authentication, the administrator will have to be alerted as they will be required to enter the password for that address in the Configuration screen of LMH. What can I change? The following system oriented items can changed at any time by the LMH Administrator who is typically a user responsible for Lessons Learned: Set up Users Address of your own Help Desk for LMH Return address for system generated messages (generally the same as above) Date Format Company logo The opening text of the alert and action s User List User Roles (Administrator, Logon, Read Only) Organisational Roles LMH uses this to bulk assign responsibility for actions, or security on Lessons which restricts who can see a lesson. Note that SSO may replace the need to maintain users and roles What can t I change? You cannot, and must not attempt to, change the name of the organisation appearing on the screens and reports. The software will cease to function if this is attempted because name on the screen reflects the name of the licensee. If the name on the screen isn t that of the licensee, please contact service@lessonlearner.com immediately.