Litware HR - A Multitenant sample application

New Post: Datacenter Provisioning fails with ADAM error

dhollas — Tue, 15 Jul 2008 23:19:31 GMT

We've attempted without success to install the Production 1.0.0 on our Windows Server 2003 R2 x64 The Production 1.0.0 was the first public release of LitwareHR. The system requirements for that release called for W2K3 SP1 or R2

So what happens is the creation of the ADAM configuration fails with the IdentityStore_ADAMInstanceConfigurator.exe throwing an exception;

Unhandled Exception: System.Reflection.TargetInvocationException: Suystem.DirectoryServices.DirectServiceCOMexception (0x8007202f): A constraint violation occurred. ---- End of inner exception stack trace ---- at System.DirectoryServices.DirectoryEntry.Invoke(String methodName, Object[] args) at Provisioning.Library.ADAM.ADAMManager.CreateUser(String userDistinguishedName, String cpn, String password, String email, String instancePort, DirectoryEntry parentDE) as ADAMInstanceConfigurator.Program.Main(String[] args)

Any suggestions would be appreciated.

New Post: Why does authorization not use AzMan?

eugeniop — Tue, 15 Jul 2008 17:42:38 GMT

Our goal was to demonstrate Claim based security (authorization to be more explicit). In this context, "actions" is just one type of claim, but Litware infrastructure is more generic, so you we could expand it to use other claim types (e.g. "Gold Package", "Silver Pacakage"). This enables federation between two organizations, with all the good things about that.

Actions (which translate to the operations in LWHR or res#op claim type in Bizatlk Identity Services) are just convenient of course, because the ServiceAuthzManager is straight forward.

I guess, we could have used the same store, but I guess it was just simpler to do this.

Frankly, in retrospective, I would probably mock out all the identity store using an in-memory implementation (just one less dependency to worry about, as demonstrated in other threads of this forum)

kim777 wrote:
I'm interested to find out why the developers choose to use ADAM/AD to store the Users, Roles and the relationship between them but to put the Actions and the association between Actions and Roles in the database 'TenantMetadataStore'.

It seems the AzMan library provides authorization by storing users, roles and actions (called operations) also in ADAM/AD.

Why was the current design chosen instead of either
- store Users, Roles and Actions in ADAM and manage the Actions using the same API currently used for users and roles
- use AzMan to manage ADAM containing Users, Roles, Actions.

Thanks
Kim

BTW: great example code, but where are your code comments ;)

New Post: Network Load Balancing

eugeniop — Tue, 15 Jul 2008 17:32:28 GMT

I understand. Honestly, I don't know top of my head, but I will do some research.

There are 2 layers though: the web sites and the web services. Nothing should prevent you to use NLB with no affintiy on the web sites. What we are talking here is what happens between the sites and the WCF web services, which as Hamdan says, uses wsFederationBinding. I need to dig into the WCF docs to see how you can achieve this.

aakshir wrote:
OK NLB can be configured this way, but reliability is an essential factor of SaaS if you are going to convince the long tail isnt it? So isnt there a reliable NLB configuration you recommend other than "with affinity" which suits the WCF architecture litwareHR is built on? After all it's something that we can't hide from which is this kind of applications is not meant to be installed on a single server!

New Post: Datacenter Provisioning fails with ADAM error

eugeniop — Tue, 15 Jul 2008 17:27:26 GMT

Which version of LitwareHR are you using?

dhollas wrote:
Using the Production 1.0 version on Windows Server 2003 R2 x64

The creation of the ADAM configuration was unsuccessful and fails with the IdentityStore_ADAMInstanceConfigurator.exe throwing an exception;

New Post: Network Load Balancing

aakshir — Mon, 07 Jul 2008 18:08:51 GMT

OK NLB can be configured this way, but reliability is an essential factor of SaaS if you are going to convince the long tail isnt it? So isnt there a reliable NLB configuration you recommend other than "with affinity" which suits the WCF architecture litwareHR is built on? After all it's something that we can't hide from which is this kind of applications is not meant to be installed on a single server!

New Post: Datacenter Provisioning fails with ADAM error

dhollas — Sun, 06 Jul 2008 05:25:41 GMT

Using the Production 1.0 version on Windows Server 2003 R2 x64

The creation of the ADAM configuration was unsuccessful and fails with the IdentityStore_ADAMInstanceConfigurator.exe throwing an exception;

New Post: Why does authorization not use AzMan?

kim777 — Fri, 04 Jul 2008 03:54:57 GMT

I'm interested to find out why the developers choose to use ADAM/AD to store the Users, Roles and the relationship between them but to put the Actions and the association between Actions and Roles in the database 'TenantMetadataStore'.

It seems the AzMan library provides authorization by storing users, roles and actions (called operations) also in ADAM/AD.

Why was the current design chosen instead of either
- store Users, Roles and Actions in ADAM and manage the Actions using the same API currently used for users and roles
- use AzMan to manage ADAM containing Users, Roles, Actions.

Thanks
Kim

BTW: great example code, but where are your code comments ;)

Source code checked in, #13257

eugeniop — Tue, 01 Jul 2008 19:41:41 GMT

GeoRSS util libraries used for Virtual Earth mashup. It includes: library, unit tests and simple GeoRSS Feed sample for demonstration.

Source code checked in, #13041

eugeniop — Mon, 30 Jun 2008 16:57:24 GMT

LitwareHR - May 2008 Release (this is essentially the same content you get when yuo download the MSI from the releases section and run it on your desktop)

New Post: Build fails on Vista Home Premuim and VS2008

dhollas — Fri, 27 Jun 2008 04:27:20 GMT

Installing Vista SP1 did solve the issue with 'OpenRemote'. But It is a two-edge sword. The ADAM ADS is not compatable with Vista SP1. The install still fails. I have run into the same issue noted within another thread http://www.codeplex.com/LitwareHR/Thread/View.aspx?ThreadId=29147
Any suggestions is appreciated.

pgnanaprakash wrote:
If it is the missing component, it will show the error on reference. am I right? What it throw the error was, it doesn't have the function on ServerManager class. After installing the SP1 for Vista, it solved.

New Post: Build fails on Vista Home Premuim and VS2008

pgnanaprakash — Mon, 23 Jun 2008 06:59:49 GMT

If it is the missing component, it will show the error on reference. am I right? What it throw the error was, it doesn't have the function on ServerManager class. After installing the SP1 for Vista, it solved.

Commented Issue: An error was encountered while creating the virtual folder

pgnanaprakash — Mon, 23 Jun 2008 06:48:59 GMT

Hello,

After I finished the data center provisioning, I proceed to run tenant provisioning. I encountered the following error after I enter the data for Contoso. The following is the detail of error message and stack trace. Can anyone help me on this issue or give me some pointer as to what I have done wrong? I am currently running this on Window 2003 R2. I logged in as administrator. Thanks.

Server Error in '/' Application.
--------------------------------------------------------------------------------

"An error was encountered while creating the virtual folder"
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.ServiceModel.FaultException`1[[System.ServiceModel.ExceptionDetail, System.ServiceModel, Version=3.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]: "An error was encountered while creating the virtual folder"

Source Error:

Line 42: public void DoProvisioning(string tenantName, string tenantAlias, int domainModel, string adminPassword)
Line 43: {
Line 44: base.Channel.DoProvisioning(tenantName, tenantAlias, domainModel, adminPassword);
Line 45: }
Line 46:

Source File: c:\Program Files\Microsoft AST\LitwareHR\Src\Litware\LitwareHR.Portfolio.Gateways\ProvisioningGateway.cs Line: 44

Stack Trace:

[FaultException`1: "An error was encountered while creating the virtual folder"]
System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg) +1779570
System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type) +826
LitwareHR.Portfolio.Contract.IProvisioningUC.DoProvisioning(String tenantName, String tenantAlias, Int32 domainModel, String adminPassword) +0
LitwareHR.Portfolio.Gateways.UnSecureChannel.DoProvisioning(String tenantName, String tenantAlias, Int32 domainModel, String adminPassword) in c:\Program Files\Microsoft AST\LitwareHR\Src\Litware\LitwareHR.Portfolio.Gateways\ProvisioningGateway.cs:44
LitwareHR.Portfolio.Gateways.ProvisioningGateway.DoProvisioning(String tenantName, String tenantAlias, Int32 domainModel, String adminPassword) in c:\Program Files\Microsoft AST\LitwareHR\Src\Litware\LitwareHR.Portfolio.Gateways\ProvisioningGateway.cs:34
TryWizard_Default.DoProvisioningButton_Click(Object sender, EventArgs e) in c:\Program Files\Microsoft AST\LitwareHR\Src\Litware\Litware.WebSite\TryWizard\Default.aspx.cs:42
System.Web.UI.WebControls.Button.OnClick(EventArgs e) +105
System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument) +107
System.Web.UI.WebControls.Button.System.Web.UI.IPostBackEventHandler.RaisePostBackEvent(String eventArgument) +7
System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument) +11
System.Web.UI.Page.RaisePostBackEvent(NameValueCollection postData) +33
System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +5102
--------------------------------------------------------------------------------
Version Information: Microsoft .NET Framework Version:2.0.50727.42; ASP.NET Version:2.0.50727.42

Best regards
Boon
Comments: ** Comment from web user: pgnanaprakash **

Hi,

I am also facing the problem.

My environment is

Vista Enterprise with SP1
VS 2008
IIS 7.0

Anybody knows about ADAM for vista?

Regards,
Prakash

New Post: Build fails on Vista Home Premuim and VS2008

eugeniop — Mon, 23 Jun 2008 03:18:37 GMT

pgnanaprakash wrote:
Hi all,

I resolved this issue by installing Vista SP1. :)

Regards,
Prakash

My best guess is a missign component. Did you run the "dependency checker" tool beforehand?

New Post: ProvisioningService.svc could not be activated

eugeniop — Mon, 23 Jun 2008 03:02:32 GMT

pgnanaprakash wrote:
Hi,

I am also getting the same error. Please help me to resolve it.

my working environment is

Vista Enterprise
IIS 7.0
VS 2008 Prefessional Edition

Regards,
Prakash

Have you checked the event log? Ca you please post the exception?

Thx

New Post: Survey - Areas of interest

Northlondonguy — Sun, 22 Jun 2008 20:58:26 GMT

Hi... I do have a specific suggestion for SSDS functionality.

In a multi-tenanted application, specific database tables can hold the data for many 'Tenant' companies. For security reasons, it is essential to ensure that the users of a particular 'Tenant' company only see data belonging to that Tenant company.

Within SQL sever, I believe that it is possible to create a 'view' on the database schema to help implement the required separation. The SaaS/Multi-tenancy developer then programmes against the 'view' and then, even if a mistake is made in the programming of the 'where' clause (e.g. accidentally omitting 'where Tenant ID = 123') then the query does not go on to include the data belonging to other Tenant companies.

It would be great if such a 'view' could be implemented in SSDS to help insulate data in the Containers and Entities, for each tennant and provide some protection for the application developer.

Please let me know if you you need further explaination.

Rgds

New Post: Build fails on Vista Home Premuim and VS2008

pgnanaprakash — Sun, 22 Jun 2008 16:35:10 GMT

Hi all,

I resolved this issue by installing Vista SP1. :)

Regards,
Prakash

New Post: Build fails on Vista Home Premuim and VS2008

pgnanaprakash — Sun, 22 Jun 2008 09:01:37 GMT

Hi,

I am also facing this issue in my VISTA configuration.

Any clue to resolve this?

Regards,
Prakash

New Post: ProvisioningService.svc could not be activated

pgnanaprakash — Sun, 22 Jun 2008 07:51:25 GMT

Hi,

I am also getting the same error. Please help me to resolve it.

my working environment is

Vista Enterprise
IIS 7.0
VS 2008 Prefessional Edition

Regards,
Prakash

New Post: Survey - Areas of interest

Northlondonguy — Fri, 20 Jun 2008 22:13:45 GMT

Hi Eugenio,

Thank you for the opportunity to provide some input.

I am evaluating SSDS primarily as a candidate for re-writing a commercial (Web based) application package as a single instance, multi-tenanted SaaS application. (Similar to SalesForce.com) but in a different vertical. Users will have a high proportion of windows mobile devices (50%) as well as windows desktop computers (50%).

Right now, I am primarily interested in:

Multi-Tenancy support
Tooling
Screen (Web Page) generation
Report Generation
n-tier, application framework (linking/controlling: UI, presentation, business, data and persistance layers)
Internationalization

I am 'subscribing' to Microsoft's S+S model and would very much like the application to be able to use SSDS running both 'in the cloud' and 'on-premise', as required by the customer(s).

Hope this helps.

Rgds.

New Post: Survey - Areas of interest

eugeniop — Thu, 19 Jun 2008 18:40:05 GMT

As I enter a planning period, I'd very much appreciate any input folks might have for us. I'm interested in learning from you what areas would like us to cover in our next set of deliverables.

Examples:

- Security aspects (SSO, identity federation, etc)
- Integration (data & process)
- Database design
- Performance & scalability
- Tooling

My hope is to get a general idea of the areas first, and then put together a set of more structured questions to get more details.

Thanks in advance!
Eugenio