Port 25: The Open Source Community at Microsoft : server center

Virtualizing Free Linux Distributions in Windows Server 2008 R2

Peter Galli — Tue, 11 Aug 2009 00:00:00 GMT

Jason Perlow, a columnist over at ZDNet, has written a comprehensive review on virtualizing free Linux distributions in Windows Server 2008 R2.

In his Tech Broiler column, Perlow notes that the updated Hyper-V bare-metal hypervisor virtualization layer in Microsoft's upcoming Windows Server 2008 R2, which is due to be released August 14th to MSDN and Technet customers, now has support for SUSE Linux Enterprise Server 11 and Red Hat Enterprise Linux 5.3.

"Additionally, Linux support and performance has greatly improved over the initial Hyper-V release. Microsoft also recently released its Hyper-V Linux Integration Components (Linux ICs) under the GPLv2 Open Source License," Perlow says.

The Linux ICs for Hyper-V, which are in Release Candidate status, provide synthetic device drivers that enhance I/O and networking performance when Linux OSes are virtualized under Hyper-V.

"The source code for the Linux IC's were accepted into the Linux Driver Project and should become part of the Linux Kernel within two subsequent releases and code merges - 2.6.32 is expected to be when they will be integrated, and all Linux distributions using that kernel code base going forward should be Hyper-V enabled out of the box. Yes, you heard that correctly, Microsoft is now an official Linux Kernel contributor," Perlow says.

You can read the rest of Perlow's column here.

MindTouch: Open Source Collaboration Built on .NET

Aaron Fulkerson — Tue, 04 Aug 2009 18:05:00 GMT

It has been a while since I last guest wrote at Port25, which is always a pleasure.

Today, I am writing about the latest MindTouch software release, codename Minneopa, which introduces three new innovative capabilities: the ability to capture and collaboratively edit video, the easy packaging of applications built on MindTouch for distribution, and the new capability to stage content.

However, if you are new to MindTouch, allow me to introduce the product. The canned statement reads as follows:

MindTouch Inc. is changing the way businesses share information, consume content, and collaborate. The company's open source platform, MindTouch 2009, combines the ease of use of a wiki with the scalability, security and integration capabilities of an enterprise portal, connecting enterprise systems, databases, web services, and Web 2.0 apps to create collaborative networks.

The gist, however, is that MindTouch offers an easy to use platform that looks a lot like a wiki, but behaves more like a portal with rapid application development capabilities. The architecture is unique and quite innovative because MindTouch is implemented in C# on .NET (or Mono) and consists of the following components:

A decoupled PHP client that provides a wiki like interface for collaboration, document management, mashups, and for creating composite and situational applications
Composition of more than 120 ReSTful web services
A web service orchestration engine
An acess control layer
An extensible HTTP message bus

To really appreciate the capabilities of MindTouch it is best to watch a demo as we' are truly defining a new category in collaboration.

This new Minneopa release of MindTouch buoy's our efforts to help those who are building collaborative networks on MindTouch. This is especially useful for developers, IT workers and business users to package their enterprise dashboards, composite applications and mashups for distribution.

For the collaborative video capabilities, we partnered with Kaltura, the developer of the world's first open source online video platform. The integration with Kaltura gives MindTouch users the built-in ability to collaborate, edit, publish and syndicate video directly within MindTouch. End users can record video and have multiple parties edit while retaining a complete version history -- all within a MindTouch page.

Download MindTouch Core, the free and open source edition that runs on Windows Server with IIS, Linux or even with a VMware virtual image, which should run in hypervisor without issue. Or download the native Windows Server version of MindTouch 2009, which is packaged in an easy to install Microsoft Installer (MSI) and supports Windows Server 2003/2008.

With the commercial edition, MindTouch 2009, users also benefit from a rich set of desktop tools, more features and a collection of adapters to popular enterprise systems and databases.

Mindtouch: Deki, OSS and Windows

jcannon — Wed, 16 Jul 2008 23:59:00 GMT

Our community knows that open source businesses are important to Microsoft. Nothing demonstrates this better than the fact that open source was a key theme in the recent Windows Server 2008 Launch. You can read more about that here.

One of the individuals we highlighted was Steve Bjorg, Founder and CTO at Mindtouch. Mindtouch develops an open source collaboration platform. Today, I'm excited to have Robert Mason, Mindtouch Platform Engineer, update us on the progress Mindtouch has made in delivering a first class open source experience on Windows. Take it away Bob....

Short Demo Video: MindTouch Deki 8.05.2

This demo video goes through a lot of information quickly. It shows the basics of collaboration in MindTouch Deki and then demonstrates a mashup with a Microsoft Silverlight charting package. NOTE: With MindTouch Deki creating mashups, dynamic reports and dashboards does not require programming ability.

Hello! It’s great to be asked to guest blog here at Port 25. Last you had heard from us, we had written about MindTouch Deki from the start being written in C#, but running solely on Mono inside of a Linux environment. Well, that’s all about to change… I’m happy announce that for the first time, MindTouch is releasing an official Windows-based beta version of MindTouch Deki. Specifically, you may now install using a MindTouch-created Microsoft Windows MSI!

MindTouch Deki is an open source collective intelligence platform. In other words, it is an enterprise wiki that sits atop a web-services framework and enables mashups, dashboards, and dynamic reporting from disparate systems and databases. MindTouch Deki provides a unique collaboration tool for enterprises and workgroups. Rather than taking the less useful approach of other collaborative and Enterprise 2.0 applications by providing a simple walled-garden / point application, MindTouch has developed Deki with the collaborative intuition of a highly polished and robust enterprise wiki, but is also able to federate and mashup application and data silos. It was developed on Microsoft .NET using C#, and, until today, has only officially supported installations on Linux using Mono.

Although this is a beta release, the MindTouch team has worked hard to include all major features and functionality currently available to Deki users on Linux-based operating systems. Please report any problems or issues that you may discover either at our forums or by filing a bug. This new MindTouch Deki MSI beta supports IIS 7 on Microsoft Windows Server 2008 and Microsoft Vista only. However, the final release of the MSI will also support IIS 6 on Microsoft Windows Server 2003. Download the MindTouch Deki MSI today. We're very excited to at last be offering support for Microsoft IIS 6 and 7 on Vista, Windows Server 2003, and 2008. MindTouch Deki has enjoyed a groundswell of adoption with daily downloads in the thousands; by (finally) introducing an easy and officially supported means of installing on Windows Server and Windows Vista we are expecting great things! Now, Systems Integrators and .NET developers can return to their existing customer base (and find new customers) to deliver more value by "adding the 2.0" to the enterprise infrastructure in the form of a collaborative surface atop the existing infrastructure that they've already deployed.

Write MindTouch for more information about our web-oriented architecture or for a high level explanation read about our technologies at the website. Finally, expect to see more Microsoft-related updates from MindTouch in the coming months… Subscribe to our monthly eNewsletter at www.MindTouch.com to stay up to date on new Microsoft related products and offerings.

Thanks,
Bob Mason

Is High Performance Computing naturally Open Source (ie. for tinkerers)?

anandeep — Wed, 18 Jun 2008 13:17:00 GMT

I have always been fascinated by clusters. Some people envision working with desktops or workstations when they think of “working with computers”. For me working with computers was always with a large collection of computers in a back room somewhere. And how cool if you could make all those computers collaborate with each other working to solve cool things like genome mapping, movie special effects, simulations of car crashes or simulations of molecules being formed!

So you can imagine I jumped at the chance to work with the Windows High Performance Computing team. This is the same team that builds Windows HPC Server 2008.

I think most of the people working in the team are from the “large collection of computers in back room somewhere” school. Would be really different in the Mac software division I assume!

I work with the Open Source Software Lab and we are all things “Open Source” to the rest of the company. The HPC Server team wanted us to make sure that their product played nice with Linux infrastructure and vice-versa. The usual suspects like AD, Samba, LDAP. CIFS etc were involved. We had to make sure that these recurrent interoperability themes were addressed in the HPC environment. I also got a chance to dig into ROCKS, OSCAR, MPI stacks and job schedulers etc etc.

This was a very rewarding experience not only for the technology exposure that I got but the pervasiveness of knowledge of Open Source within the team. They were far ahead of the other product groups in this regard and “got” the Open Source ethos. In fact, prior to my interactions with them they had released an open source MPI stack based on Argonne National Lab’s MPI implementation.

The other reason was that a lot of their customers were relentlessly open source! The conventional wisdom is that HPC applications and infrastructure require a lot of tinkering. Of course, there are some applications like FEM and CFD and that are well understood, but the general feeling was that complete control and access to the underlying infrastructure is a must for getting the most performance out of a cluster. And performance is the main thing in “High Performance Computing”.

Linux is seen providing that access by HPC customers and there is a large base of Linux for HPC in academia, the national labs and other institutions that use large clusters for doing their thing.

But is this really true?

I think that HPC has gone through a typical evolution – it starts with a few people who have a pressing need. There is a cross disciplinary team formed that builds software to do their job and a community grows around it. The community reaches critical mass and people start making building tools to make it more convenient. ROCKS is an example of this. Great skill, knowledge and ability is needed to get the job done.

However, these skilled people now become overloaded. The tools and the infrastructure that they created become so popular that everyone, including people who do not have background that was assumed before, wants to use it for their ends. So the community responds and builds standardized, easy-to-use infrastructure pieces that start to fit seamlessly together. Some control is lost, but ease-to-use is the primary focus.

The infrastructure for HPC has reached that stage (ROLLS with ROCKS). Windows HPC Server 2008 is built for this ease-of-use too.

However, the applications have not reached the stage of ease-of-use. They have to be coded with a lot of domain knowledge and have to built from scratch to truly scale while running on clusters. That means that the application writers demand more control of the underlying infrastructure and want more access to it than the users and maintainers want.

I am going out on a limb and making a prediction here – soon end users will be able to specify instead of coding applications, be it genome comparison or physics simulation. This is similar to accountants finding spreadsheets. There will probably be a few different models for different types of applications but that stage will come pretty quickly.

The infrastructure that runs these user-specified applications will be adaptive and will take these specifications and automatically tune them for high performance on the clusters.

This is where the perception of needing control to the lowest levels will be moot. The best adaptive infrastructure will be the one adopted.

Bold enough for you?

Technical Analysis: Security Considerations for rdesktop and Windows Terminal Services

jcannon — Tue, 17 Jun 2008 16:10:00 GMT

Abstract: Microsoft Terminal Services provides an important set of functionality for remote administration and centralized application management. This service allows administrators to log in remotely and with full access to the system. Similarly, users can log in and run specific applications, which are centrally managed by IT personnel. The standard client for Linux systems is rdesktop. Rdesktop is shipped with many Linux distributions and this paper briefly looks at common security considerations around using this client application in Windows environments.

Download Security Considerations for rdesktop and Windows Terminal Services

Note: This paper represents testing and documentation in a lab environment. User Account Control (UAC) is an essential security component to Windows and Microsoft does not recommend turning off UAC in production environments.

Technical Analysis: Remote Administration of Windows Systems with SSH

jcannon — Wed, 11 Jun 2008 13:22:00 GMT

Abstract: SSH has largely replaced Telnet for remote administration of UNIX and Linux systems, but has not yet been used much on Windows. SSH is generally considered to be more secure than Telnet and the Berkeley remote commands (rlogin, etc). This paper uses SSHWindows, a minimal package of Cygwin and OpenSSH. It is available from http://sshwindows.sourceforge.net. The paper is written such that an average Windows system administrator can get an SSH server up while understanding how to make use of security features.

Download Remote Administration of Windows Systems with SSH (PDF)

Note: This paper represents testing and documentation in a lab environment. User Account Control (UAC) is an essential security component to Windows and Microsoft does not recommend turning off UAC in production environments.

Technical Analysis: OpenSSH on Linux using Windows/Kerberos for Authentication

jcannon — Fri, 06 Jun 2008 14:35:00 GMT

Abstract: Secure remote access to UNIX and Linux systems is generally accomplished through SSH. The most frequent implementation of that protocol is OpenSSH, originally written for the OpenBSD project but now ported to a wide variety of platforms. This paper will show how to use OpenSSH with the Kerberos portion of Active Directory to automate authentication.

Download OpenSSH on Linux using Windows/Kerberos for Authentication

Technical Analysis: VIM, PowerShell and Signed Code

jcannon — Thu, 29 May 2008 15:59:00 GMT

Abstract: In the UNIX and Linux world, vi and EMACS have long held positions as the best-developed editors for handling large amounts of code or other text. More recently, an improved vi clone has emerged named VIM (Short for Vi, IMproved). VIM features syntax highlighting, a vi-like command-line interface, and many powerful features for editing large text projects. It has quickly become one of the favorite text editors outside the Windows world. This analysis looks at using VIM with Windows PowerShell, with considerations for code signing.

Download VIM, Powershell & Signed Code.

Managing Towards Open

Sam Ramji — Tue, 29 Apr 2008 19:59:00 GMT

I have the privilege of interacting almost every day with technical and business experts who are creating the future of software—including both core engineering teams at Microsoft and thought leaders across a broad spectrum of open source communities. Especially in the last few months, I’ve been able to take more time to articulate where I think this is going – such as writing how open source has influenced Windows Server 2008 and participating in Infoworld’s roundtable on the state of open source.

I think that many people are seeing that the interrelationship between Microsoft and open source is being changed fundamentally (and for mutual benefit).

Today, Bob Muglia and Brad Anderson announced that System Center will have the ability to deliver automated management across heterogeneous IT environments, such as UNIX and Linux. What I see as a best practice for commercial and community engagement with open source technology plays a big part in this.

Specifically, Microsoft will deliver an agent infrastructure and management packs (MPs) for monitoring Linux and UNIX platforms for System Center Operations Manager 2007. Early partners like Xandros and Quest are delivering cross-platform MPs for MySQL and Apache, and Oracle, respectively. Microsoft and Novell are collaborating on the SUSE Linux Enterprise MP.

The agent infrastructure Microsoft is building to interoperate with UNIX and Linux is built leveraging industry standards and open source such as WS-Management and OpenPegasus. Pegasus is an open-source implementation of the DMTF CIM and WBEM standards coded in C++, designed to be portable, and licensed under an MIT license, and work is underway to integrate with the newly DMTF ratified WS-Management standard. Pegasus already ships as part of major Linux and UNIX distros.

It simply makes great technical and business sense to cooperate with the OpenPegasus community to build upon an industry-standards based, cross-platform technology. Just as important, however, is preserving the virtuous cycle of contribution, benefit, and subsequent contribution: Microsoft is joining the OpenPegasus Steering Committee. The agent technology—being built will be contributed back to the community under the Microsoft Public License (MS-PL), an OSI approved open source license.

I greatly appreciate Allen Brown's positive comments (Allen is the President and CEO for The Open Group) and the support and education we’ve received from the sponsors and maintainers of Pegasus. He said:

“We are pleased to have Microsoft join the OpenPegasus Steering Committee and welcome their commitment as a positive step for the global open source development community. Since The Open Group initiated the OpenPegasus project seven years ago, it has been deployed across a wide range of IT platforms worldwide. We look forward to Microsoft’s active participation in the continuing development of the project.”

Today’s announcement and the business and technical decisions made by the System Center team are a great example of the fact that commercial innovation, industry partnerships, and open source participation can all work together to make the whole greater than the sum of its parts. My enthusiasm and excitement—and my applause for the System Center team, partners like Xandros, Quest, and Novell, and the OpenPegasus community—is tempered solely by my conviction this is not the only or last example of the best of Microsoft, partners, and open source growing together. This is a great day – and there are more great days to come.

PHP on Windows

hjanssen — Tue, 04 Mar 2008 13:50:00 GMT

I have this really odd feeling of Dejavu. The last blog I wrote (here), I started by saying that I have been very delinquent with writing blogs. So what do I do? I continue to be very delinquent with my blogs!

If anything, I am consistent! :)

So, why this sudden re-emergence of myself on port25? (Besides the fact that I just realized that it has been months since I last blogged, that is) Well we have been keeping ourselves very busy in the last few months. A lot of that work relates directly to PHP, so I wanted to talk about some of these efforts.

We have significantly increased our work in this area. And my group continues to find itself at the middle of pretty much all of these efforts. The SQL Server driver for PHP is now in its second release (Get the latest bits here). And we continue to make improvements and enhancements going forward to this driver.

We have also been working very closely with the PHP community on improving PHP performance on Windows. This is an effort that will be ongoing and probably accelerating in the months to come.

With the release of Windows Server 2008, I wanted to take a moment and highlight some of the things that have been done to make Windows an excellent PHP Deployment platform.

First of all, Microsoft late last year released FastCGI for IIS6 and IIS7. IIS7 is integrated with Windows Server. IIS7 has as part of its deployment FastCGI included (not an optional download as is the case with IIS6) this in effect means that with IIS7, Microsoft has added out of the box Microsoft-supported software designed to run PHP on IIS.

Equally as interesting, we have been working with Zend to help them certify Zend Core for Windows Server 2008. I think this makes it one of the first PHP products to be certified for WS2008. Which makes Windows PHP ready :). Imagine that, PHP running on Windows Server, fully certified!

To this end we will continue to work with Zend very closely to continue to improve PHP on Windows.

Secondarily (although not directly related to Windows Server) we have also been working with Zend to provide Cardspace functionality in the Zend Framework. You can get it here, and read more about how to use it at the Zend website here. Which is another way in which Microsoft has added support to PHP for Microsoft technologies.

This continues the close relationship with Zend into the future, and I am expecting to work with them on a whole host of other PHP related efforts going forward.

As you could read in earlier blogs by Garrett Serrack we hosted the Apache Software Foundation guys here in Redmond last week. So look for a blog from me later this week on the wrap-up of that visit.

Dominic Sartorio on SpikeSource and Open Source Interoperability

Community Contributor — Wed, 27 Feb 2008 23:33:00 GMT

First, many thanks to Microsoft’s Port 25 Team for the opportunity to post today!

Today SpikeSource announced the availability of five additional PHP-based applications on the Windows Server 2008 platform. Gallery, Mantis, Moodle, PhpBB and WebCalendar are available for free download from www.spikesource.com. We welcome you to take a look and to offer your feedback!

Similar to the previous applications we released on Windows Server (Drupal, Alfresco), SpikeSource delivered these as turnkey “SpikeIgnited” applications, with all components needed to run the application available in a single one-click-install distribution. We have also included a variant of our SpikeNet update service optimized for Windows Server 2008.

“That’s great”, you might say, “SpikeSource has ‘Ignited’ a few more apps, so what’s the big deal?” We believe the big deal is that these applications also run on a stack of other Microsoft products in addition to Windows, namely, IIS/Fast-CGI and SQL Server Express, with which many open source products have historically not interoperated well. Quite a bit of engineering went into assembling this “WISP” stack and building/testing these PHP applications, and this know-how is an important step towards improving the interoperability between the worlds of Microsoft and open source.

Why do this? Because customers want it. Throughout SpikeSource’s history, nearly 50% of our customer’s request Windows versions of our open source applications, and most of them also care about interoperating with IIS, SQLServer, Sharepoint, ActiveDirectory and so forth. Our experience is representative of the industry. Ask any commercial OSS ISV with a server-side application, and they’ll tell you the same thing, with similar numbers.

Also, last December, the Open Solutions Alliance (www.opensolutionsalliance.org) published a report (pdf) summarizing the results of its customer outreach efforts. One of the key findings was that customers want better open source and Microsoft interoperability, and moreover, they felt this was the issue that the industry has collectively done the least to address. While there has been a lot of unfortunate history that has gotten in the way of this, ultimately customers don’t care as much about grudges as they care about everything simply working. Together, SpikeSource and Microsoft’s open source lab are doing something about it.

The release of these five PHP applications is just a first step. By taking five commonly used PHP applications and making them run better on a Windows stack, we took a step towards better interoperability, and we also built some technical expertise that we intend to leverage more broadly and share with the community in the future.

So, stay tuned, and we welcome your input. What other types of open source applications are important to run well on Windows? What specific technical issues do you have that you would like to see us solve? What more can we do? Please send us your feedback!

Dominic Sartorio
Sr Director, Product Management, SpikeSource
President, Open Solutions Alliance

How open source has influenced Windows Server 2008

Sam Ramji — Wed, 27 Feb 2008 12:00:00 GMT

When I think about what works really well in open source development and technology, the following things stand out:

Modular architectures
You can find these wherever you see participation at scale – and often a rearchitecture to a more modular system precedes expanded participation. Great examples of this are Firefox, OpenOffice, and X11 – from both the historical rearchitecture and the increased participation that resulted. The Apache HTTP server and APR are good examples that have been modular for as long as I can recall.
Programming language agnostic
A given project uses a consistent language, but there are no rules on what languages are in scope or out of scope. Being open to more languages means opportunity to attract more developers – the diversity of PHP/Perl/Python/Java has been a core driver in the success of a number of projects including Linux.
Feedback-driven development
The “power user” as product manager is a powerful shift in how to build and tune software – and this class of users includes developers who are not committing code back, but instead submitting CRs and defects – resulting in a product that better fits its end users.
Built-for-purpose systems
Most frequently seen in applications of Linux, the ability to build a system that has just what is needed to fulfill its role and nothing else (think of highly customizable distributions like Gentoo or BusyBox, as well as fully custom deployments).
Sysadmins who write code
The ability of a skilled system administrator to write the “last mile” code means that they can make a technology work in their particular environment efficiently and often provide good feedback to developers. This is so fundamental to Unix and Linux environments that most sysadmins are competent programmers.
Standards-based communication
Whether the standard is something from the IETF or W3C, or simply the implementation code itself, where these are used projects are more successful (think of Asterisk and IAX2) and attract a larger ecosystem of software around them.

So where did we apply these ideas to the development of Windows Server 2008?

Modular architectures was applied in multiple areas, but the one that stands out most to me is Internet Information Server 7 (IIS7). IIS7 has been rearchitected for flexibility as 40 individual modules, enable more to be written by community developers or delivered as out-of-band releases. This has already enabled performance improvements and independent evolution, and I expect to see further enhancements.
Programming language agnostic is something we’ve delivered on with support for PHP on IIS7 and the enhancements to FastCGI (which can be used by any of the P* languages). We set a goal of having PHP certified on Windows Server 2008, and we’ve achieved that. We’ll continue to improve runtime, security, and manageability support for non-.NET languages and the applications that are built on them, as well as testing the full stacks of PHP-based applications running on Windows Server, IIS, and SQL Server.
Feedback-driven development based on developer and customer trials (RDPs, TAPs, and Betas in our process) led to a range of “feature completion” developments that connected different components – like connecting Windows Firewall with Active Directory central policy, and the end-to-end improvements in SMB 2.0. Features like the RODC (Read-Only Domain Controller) have become more and more solid through experience with early alpha and beta customer deployments, and requests to enforce things like BitLocker encryption of user disks from a central authority have achieved full support.
Built-for-purpose systems such as DNS, DHCP, file and web serving can be created through wizard-driven configuration thanks to Windows Server Core. The goal of having a minimum attack surface and a small hardware footprint, inspired by the capabilities mentioned above, yet achievable by a broad base of admins has been achieved. Additionally, this has created an opportunity for Windows admins to become much more knowledgeable about the low-level structure of the operating system.
Sysadmins who write code are first-class citizens in the PowerShell-driven infrastructure. We’ve increased Windows administrators’ opportunity to master the full surface area of WMI and demonstrate that mastery in reusable, low-level scripts. As we evolve this to support multiple language bindings and bash aliasing, this should become a comfortable home for highly skilled sysadmins.
Standards-based communication such as in CardSpace (with support for X.509, SAML, Kerberos tokens, and more) and the Web Services stack (not only are all 38 Web Services standard under the Open Specification promise, but our implementations have achieved a high level of interop with Apache’s Axis web services stack), and beta support for emerging standards like Xen virtualization represent a small subset of the standards built into Windows Server 2008.

Overall, we’ve learned and continue to learn from open source development principles. These are making their way into the mindset, development practices, and ultimately into the products we bring to market.

I’ve focused here on “what Microsoft has learned from Open Source” – and ironically, I’ve agreed to do a panel at OSBC on 3/25 with Jim Zemlin of the Linux Foundation on “what Open Source can learn from Microsoft”. As all of the different organizations in IT continue to evolve, we’ll learn from each others’ best practices and make increasingly better software. As in science, this incremental improvement will move all of us forward.

Technical Analysis: Installing Apache on Windows

jcannon — Tue, 12 Feb 2008 13:21:00 GMT

Abstract: By many estimates, Apache is the world's most popular web server software, hosting more than half of active domains according to Netcraft. Typically, Apache is run on Linux or UNIX, but it runs quite well on Windows. This paper provides an introduction to running this software on Windows and provides a framework for understanding how Apache on Windows is fundamentally different from Apache on Linux.

Download Installing Apache on Windows

Note:This paper represents testing and documentation in a lab environment. User Account Control (UAC) is an essential security component to Windows and Microsoft does not recommend turning off UAC in production environments.

Technical Analysis: Apache with mod_auth_kerb and Windows Server

jcannon — Fri, 25 Jan 2008 21:58:00 GMT

Abstract: The Apache authentication module mod_auth_kerb allows Apache to authenticate users against a Kerberos KDC including one from ActiveDirectory. Kerberos itself can be fairly complex to set up. This guide will attempt to show the specific steps required to make this possible as well as discuss security limitations specific to the interoperability matters. This guide assumes a basic understanding of Kerberos V and that the Active Directory domain controller is properly configured prior to starting this process.

Technical Analysis: Installing Apache with SSL on Windows

jcannon — Fri, 04 Jan 2008 17:02:00 GMT

Abstract:
Often SSL or TLS is required to secure data from web applications. Sometimes this is just prudent to prevent confidential or sensitive data from being confiscated. Sometimes this is required by regulations like HIPAA or industry bodies, such as the Payment Card Industry. This guide will show how to install Apache with SSL on Windows.

Download Report Installing Apache on Windows