Installation for WEB Server Windows 2003

1 (32) Forecast 1.3 Installation for WEB Server Windows 2003 Aditro Oy, 2009 Forecast Installation Page 1 of 32

2 (32) Contents Installation for WEB Server... 3 Installing Forecast... 3 After installation... 9 Act as part of the operating system... 9 Allow ASP.NET in Web Service Extensions... 11 Enable computer and user accounts to be trusted for delegation... 12 Trust this computer for delegation to specified services only... 13 Users... 17 Forecast folders access rights... 18 Forecast menu changes... 19 More than one forecast report menu... 19 Adjusting the timeout parameter... 20 Adjusting the Transactions Row Count and Add Row Count parameters... 21 Logo on the reports... 21 If client workstations are in different domain that the servers... 21 Log in to Forecast... 21 MS Internet Explorer... 22 Mozilla Firefox... 24 Enable 32-bit web applications in 64-bit Windows... 27 If printing to PDF doesn t work in 64-bit Windows... 27 Appendix A... 29 Appendix A... 29 Installing.Net v2.0 framework... 29 Appendix B... 31 Using secure communication (HTTPS)... 31 Forecast Installation Page 2 of 32

3 (32) Installation for WEB Server Installing Forecast Note! Installation must always be done by a person with full administrative rights. Start selecting Forecast from the setup main page. Forecast installation will work only in Windows Server 2003 operating system. In the Documentation folder there are also this document and other server installation documents. Forecast Installation Page 3 of 32

4 (32) License Before you can continue Forecast setup you must have Fakta license file ( Fakta.lic ): For a new installation you get the license file via a diskette or e-mail, for an update the default is your old license file. Forecast Installation Page 4 of 32

5 (32) Select destination folder Choose destination folder for all programs, help-files etc Default destination folder is C:\Program Files\Personec\Forecast. If you want to change the folder, press Browse and select folder. Select report folder This folder is the place for your own reports. Press Browse in order to change the folder. Forecast Installation Page 5 of 32

6 (32) Choose the language of Forecast Choose default language for Forecast and press Next. Check setup information Check the components and folders selected. Pressing Next starts the actual installation. Forecast Installation Page 6 of 32

7 (32) PDF Printer installation This window stays sometimes behind other installation windows. In this case it can be activated from the task bar. Press OK. If you don t have.net v2.0 framework and Visual Studio 2005 redistributables installed they are installed according Appendix A. Forecast Installation Page 7 of 32

8 (32) Setup Complete Forecast Installation Page 8 of 32

9 (32) After installation Act as part of the operating system This right is needed for the security account running Forecast application pool. The security account must have this right to impersonate Forecast users sessions to use their Windows authentication. Check first the identity of the security account. Computer management - Services and Applications - Internet Information Services - Application Pools - Forecast - Properties - Identity tab. Forecast Installation Page 9 of 32

10 (32) Then Administrative Tools Local Security Policy User Rights Assignments Act as part of operating system Properties - Add User or Group. Add local NETWORK SERVICE to the user list. Forecast Installation Page 10 of 32

11 (32) Allow ASP.NET in Web Service Extensions Check that ASP.NET is allowed in Internet Information Services/Web Service Extensions. Forecast Installation Page 11 of 32

12 (32) Enable computer and user accounts to be trusted for delegation This setting is needed ONLY if the database is not on the same server as the IIS. This right makes NETWORK SERVICE account trusted for delegation. Forecast Installation Page 12 of 32

13 (32) Trust this computer for delegation to specified services only This settings gives the computer account (IIS server) right to delegate credentials to the database server (MSSQLSvc) or to the report server(cifs).. Active Directory Users and Computers Computers IIS Server (Basilika in example) Properties Delegation tab Check Trust this computer for delegation to specified services only Check Use any authentication protocol Click Add button Click Users and Computers button Write or Select the database server (minttu in example) press OK Forecast Installation Page 13 of 32

14 (32) Select all MSSQLSvc services Press OK Press OK If SQL Server service is running under an AD account, MSSQLSvr services are not shown in this dialog. In this case: Use setspn command to get MSSQLSvr services shown. When you install the Setspn.exe tool from Windows Server 2003 Support Tools, you should be able to access the tool at a command prompt (cmd.exe). Enter commands: setspn -A MSSQLSvc/server.company.local DOMAIN\Account setspn -A MSSQLSvc/ server.company.local:1433 DOMAIN\Account select the AD account that SQL Server is running under. Forecast Installation Page 14 of 32

15 (32) Add service cifs (report server is kaneli in example) Forecast Installation Page 15 of 32

16 (32) Forecast Installation Page 16 of 32

17 (32) Users Create a new User Group "FaktaWebUsers" (local or domain group). Add all users who are authorized to use Forecast to the FaktaWebUsers group. If FaktaWebUsers is a local group, add also NETWORK SERVICE to FaktaWebUsers. If FaktaWebUsers is a domain group, NETWORK SERVICE has to be given rights to access Forecast install folders (see Forecast folders access rights on the next page). Forecast Installation Page 17 of 32

18 (32) Forecast folders access rights Give permissions for the "FaktaWebUsers" group. If FaktaWebUsers is a domain group, give permissions also for NETWORK SERVICE. Give permission Read & Execute, List Folder Contents and Read to the install folder (in example to the Forecast). Give permission Modify to the folders App_Data and XceedTemp Forecast Installation Page 18 of 32

19 (32) Forecast menu changes Open Windows Vision Open forecast menu (forecast.qrm) Make changes to the menu (enter the directory path of your Vision reports) Save forecast menu Location of forecast menu More than one forecast report menu Add the menu menu and the path of the menu into the file web.config. <economa> <forecast> <menus> <menu file="c:\program Files\Personec\Forecast\App_Data\Menus\Forecast.qrm"/> <!-- More menus <menu file=" C:\Program Files\Personec\Forecast\App_Data\Menus\Forecastmenu2.qrm "/> --> </menus> </forecast> </economa> Make changes to the new menu and save it. Forecast Installation Page 19 of 32

20 (32) Location of web.config Adjusting the timeout parameter Default time, after connection is lost to the web server, is 60 minutes. The time can be changed in web.config. <system.web> <sessionstate mode="inproc" cookiename="sid" timeout="60" cookieless="autodetect"/> </system.web> When time expires a message is shown: Timeout parameter can be changed. If the parameter value is set very big (several hours), the message may not be shown, when connection is lost. This may happen because IIS doesn t always fire "timeout expired" event, when timeout parameter is big. Forecast Installation Page 20 of 32

21 (32) Adjusting the Transactions Row Count and Add Row Count parameters Transaction Row Count parameter limits the amount of rows that can be fetched to the Transactions tab of Forecast. If row count is higher than the parameter value, any rows are fetched. Default value is 100000. This parameter effects to the load of the IIS server, not the workstation. Value can be changed in web.config. Add Row Count parameter limits the amount of rows that can be selected in Add rows dialog. Default value is 100. These parameters can be changed in web.config. <configuration xmlns="http://schemas.microsoft.com/.netconfiguration/v2.0"> <economa> <forecast> <settings> <setting name="transactionsrowcount" value="100000"/> <setting name="addrowcount" value="100"/> </settings> Logo on the reports If you want to see logo on the reports, you have to add the path where the logo exist to the HKEY_LOCAL_MACHINE.xml file in the APP_DATA\Preferences folder. Vision looks for a logo in the specified folder ( Header Frame must be selected in the Options): 1. If the logo file exists under the name UnitID_Logo.bmp, it is used. 2. If the logo file exists under the name Logo.bmp, it is used. The contents of HKEY_LOCAL_MACHINE.xml: <?xml version="1.0" encoding="utf-16"?> <HKEY_LOCAL_MACHINE> <Software> <TietoEnator> <Fakta> <Vision> <Settings HtmlTemplatePath="C:\Program Files\Personec\Forecast\App_Data\Preferences"/> </Vision> </Fakta> </TietoEnator> </Software> </HKEY_LOCAL_MACHINE> If client workstations are in different domain that the servers See Appendix B. Log in to Forecast Start browser and connect to default start page //server/forecast. Forecast Installation Page 21 of 32

22 (32) MS Internet Explorer To use copy/paste feature in Forecast, IE 7 requires -Forecast should be in Local Intranet zone (recommendable) or -Internet Options/Security/Settings/Scripting/Allow Programmatic Clipboard Access set to. Forecast Installation Page 22 of 32

23 (32) If prompt is enabled, this dialog will appear every time when clipboard is used: If Forecast is used with IE from the IIS server, the use of chart requires that Protected Mode is not enabled: Forecast Installation Page 23 of 32

24 (32) Mozilla Firefox If you do not want that the browser asks user and password when the user is logging in to forecast, you can add the FireCast add-on. Start browser and write the next url: Server/forecast/firefox/firecast.xpi For example Forecast Installation Page 24 of 32

25 (32) You can see the add_ons by selecting Tools(Työkalut) Add_ons(Lisäosat) Extensions(Laajennukset). To use copy/paste feature in Forecast the FireCast add-on updates also signed.applets.codebase_principal_support property value to true. First time when Forecast tries to access the clipboard following dialog will appear and user will decide allow or deny to the clipboard: Forecast Installation Page 25 of 32

26 (32) In case of user check Remember this decision and answer Deny the Paste functionality will not work silently. To fix it: Go to \Documents and Settings\<USER>\ApplicationData\Mozilla\Firefox\Profiles\<prefix>.default folder Find <pref.js> file Remove all rows started with user_pref("capability.principal from the <pref.js> file Save <pref.js> Next time FF will ask user for permission for copy to clipboard Forecast Installation Page 26 of 32

27 (32) Enable 32-bit web applications in 64-bit Windows If Forecast doesn t work after installation enable 32-bit web applications by entering this command in command prompt: cscript.exe C:\Inetpub\AdminScripts\adsutil.vbs set W3SVC/AppPools/Enable32BitAppOnWin64 1 Command is reversed when last parameter is 0. If printing to PDF doesn t work in 64-bit Windows If there is some kind of trouble when printing to PDF in 64-bit Windows, these changes to the properties of Fakta PDF Printer are worth trying: In ports tab add a new local port NUL: and select it. Forecast Installation Page 27 of 32

28 (32) In Advanced tab uncheck Enable advanced printing features. (To uncheck it, Spool print documents so program finishes printing faster must be temporary selected.) Forecast Installation Page 28 of 32

29 (32) Appendix A Installing.Net v2.0 framework You only need to press Next to continue after accepting the license agreement, the installation may take several minutes. Accept and press Install. Forecast Installation Page 29 of 32

30 (32) Press Finish. MS Visual Studio 2005 redistributables will install automatically. Forecast Installation Page 30 of 32

31 (32) Appendix B Using secure communication (HTTPS) Secure communication is needed in case when database, reports or menus are not on same server as IIS and client workstations are in different domain than servers. A certificate is needed in IIS server. In IIS Manager choose properties from WebSites/Default Web Sites/Forecast. Press Edit in Authentication and access control Forecast Installation Page 31 of 32

32 (32) Select Basic authentication(password is sent in clear text). Press OK. In Forecast properties press Edit in Secure Communications. Select Require secure Channel (SSL). Press OK. Forecast Installation Page 32 of 32