> -----Original Message----- > From: [EMAIL PROTECTED] [mailto:owner-u2- > [EMAIL PROTECTED] On Behalf Of Brenda Price > Sent: Monday, July 21, 2008 10:10 AM > To: u2-users@listserver.u2ug.org > Subject: [U2] converting from UniVerse on Redhat Linux to UniVerse on > Windows > > There is a discussion here to either do completely away from UniVerse to > SQL because 99% of our servers are windows applications and our network > administrator doesn't know much about Linux and believes because we have > to open up telnet for UniVerse and an old application on a Solaris box > of Mumps that we are making the Linux less secure and that PCI requires > we don't use telnet at all. We use SSH to login everywhere except for > the communication between UniVerse and Mumps. > >
No one likes to drive in a busy and unfamiliar city when they are late for a critical appointment. A lack of experience or knowledge is not a solid excuse to move an entire data center from one O/S to another. A fact-based business case would be far better suited for such an argument and I've yet to hear one. Any O/S migration costs money and time, so the ROI had better offset the costs. As recommended already, the .bash_profile forced logon is a good step towards compliance provided the user has no way to access the files in their home directory to make changes. It's amazingly simple to restrict telnet access so that only two machines can talk over a specific port. Iptables is quite simple to use. I set that same rule up years ago for our Digi PortServer II before PCI was even considered. If MUMPS and UniVerse are on the same machine, then all you have to do is block external telnet traffic with a single iptables statement. Anyone with moderate Google skills(and a willingness to secure the box properly) can find a few iptables examples for either scenario. If need be, provide me with the scenario and I'll provide fill-in-the-blank statements that you can put in your rc.local boot script or your ifup/ifdown scripts for the specific interface the telnet connection is on. > > As a stop gap the company may switch from Linux to Windows. I thought I > remembered a discussion on this sometime in the last couple of years. > I'll search the archives. In the meantime, has anyone have an > experience with this? If so, did the costs stay the same, go up, go > down. Any difficulties? Seems like it would be the same procedures as > we had to run when we was transferring data from our live server (linux) > to our old test server (Solaris), you had to do funxi on the data and > that was that. > Not sure about that, so I'll leave that up to the UV experts here. I just like to lurk here and learn. :) > > > They are in the process of getting comparison costs between UniVerse and > SQL now. For those with both UniVerse and SQL experience, how does the > development time differ. To me it appears that it takes the VB and SQL > folks longer to get changes done then it does on the UniVerse systems. > If we switch, it seems to me that the quick fixes users demands will be > pretty much going away. Am I correct on this? I am 99.9% certain that > the switch will happen at some point in the next few years. > I would say that it really depends on the application deployment. If you have 100 machines to maintain VB code on, then it's far more costly and time consuming to make changes in VB-SQL software than in UV derived software. You can build an update center and write your application to auto-update, but then you have to manage the update center and make sure that _everyone_ gets the changes they are supposed to. Plus, such an additional development project could be as large as the software rewrite itself. I'm a huge proponent of centrally managed software and love using Accuterm's GUI. We utilize SQL from our MV box, but it's on a reporting-only basis. > > > Brenda Price > > Affiliated Acceptance Corporation > > Sunrise Beach, MO 65079 ---------------------------------------- Glen Batchelor IT Director All-Spec Industries phone: (910) 332-0424 fax: (910) 763-5664 E-mail: [EMAIL PROTECTED] Web: http://www.all-spec.com Blog: http://blog.all-spec.com ---------------------------------------- ------- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
