Book a Demo

Author Topic: Floating Licence Server vs Keystore service  (Read 70598 times)

Paolo F Cantoni

  • EA Guru
  • *****
  • Posts: 8626
  • Karma: +259/-129
  • Inconsistently correct systems DON'T EXIST!
    • View Profile
Floating Licence Server vs Keystore service
« on: August 22, 2021, 09:44:15 pm »
We currently use a Keystore Service (on a server) to manage our Floating licences.  This week, our Keystore Service Server was inadvertently shut down by the Infrastructure Group due to some incorrect documentation.  We have to move the Keystore service from that server.

We have the option of using the FLS part of PCS instead of the Keystore Service for the new environment.  If we only use the FLS (for the present) is there an increased load on the server (as opposed the full PCS)?  As I read the documentation, we can transfer the keystore file from the KeyStore Service to the FLS directly.  Is that the case?

TIA,
Paolo
Inconsistently correct systems DON'T EXIST!
... Therefore, aim for consistency; in the expectation of achieving correctness....
-Semantica-
Helsinki Principle Rules!

qwerty

  • EA Guru
  • *****
  • Posts: 13584
  • Karma: +397/-301
  • I'm no guru at all
    • View Profile
Re: Floating Licence Server vs Keystore service
« Reply #1 on: August 23, 2021, 03:51:31 am »
Just without any plain idea, but anyway: keys are sent at a login attempt. And presumably only there. So the number of requests is analogous to the number of logins, right? How many users have you got to get the server on its knees from login attempts?

q.

Paolo F Cantoni

  • EA Guru
  • *****
  • Posts: 8626
  • Karma: +259/-129
  • Inconsistently correct systems DON'T EXIST!
    • View Profile
Re: Floating Licence Server vs Keystore service
« Reply #2 on: August 23, 2021, 08:02:35 am »
Just without any plain idea, but anyway: keys are sent at a login attempt. And presumably only there. So the number of requests is analogous to the number of logins, right? How many users have you got to get the server on its knees from login attempts?

q.
We understand all that.  My question is related to what ELSE is going on in PCS if we are only using the FLS?  Can we (at least temporarily) switch everything else off in PCS, except for the FLS?

Paolo
Inconsistently correct systems DON'T EXIST!
... Therefore, aim for consistency; in the expectation of achieving correctness....
-Semantica-
Helsinki Principle Rules!

Eve

  • EA Administrator
  • EA Guru
  • *****
  • Posts: 8110
  • Karma: +119/-20
    • View Profile
Re: Floating Licence Server vs Keystore service
« Reply #3 on: August 23, 2021, 08:29:22 am »
Almost nothing. It will wake up at a configurable time period to log connection statistics for the models you have configured. Even on a server with lots of connections it's a trivial amount of time.

You're not going to notice any increase in load.

Paolo F Cantoni

  • EA Guru
  • *****
  • Posts: 8626
  • Karma: +259/-129
  • Inconsistently correct systems DON'T EXIST!
    • View Profile
Re: Floating Licence Server vs Keystore service
« Reply #4 on: August 23, 2021, 12:15:12 pm »
Almost nothing. It will wake up at a configurable time period to log connection statistics for the models you have configured. Even on a server with lots of connections, it's a trivial amount of time.

You're not going to notice any increase in load.
Thanks, Eve,
I suspected that but wanted a more definitive response in case someone (in our organisation) asks the question.

Paolo
Inconsistently correct systems DON'T EXIST!
... Therefore, aim for consistency; in the expectation of achieving correctness....
-Semantica-
Helsinki Principle Rules!

Paolo F Cantoni

  • EA Guru
  • *****
  • Posts: 8626
  • Karma: +259/-129
  • Inconsistently correct systems DON'T EXIST!
    • View Profile
Re: Floating Licence Server vs Keystore service
« Reply #5 on: August 24, 2021, 04:47:11 pm »
We currently use a Keystore Service (on a server) to manage our Floating licences.  This week, our Keystore Service Server was inadvertently shut down by the Infrastructure Group due to some incorrect documentation.  We have to move the Keystore service from that server.

We have the option of using the FLS part of PCS instead of the Keystore Service for the new environment.  If we only use the FLS (for the present) is there an increased load on the server (as opposed to the full PCS)?
  As I read the documentation, we can transfer the keystore file from the KeyStore Service to the FLS directly.  Is that the case?

What about the highlighted bit?

TIA,
Plaolo
Inconsistently correct systems DON'T EXIST!
... Therefore, aim for consistency; in the expectation of achieving correctness....
-Semantica-
Helsinki Principle Rules!

Eve

  • EA Administrator
  • EA Guru
  • *****
  • Posts: 8110
  • Karma: +119/-20
    • View Profile
Re: Floating Licence Server vs Keystore service
« Reply #6 on: August 25, 2021, 09:16:52 am »
If it's on the same machine, then yes. If not, you'll have to start with an empty keystore file and add the keys from scratch.

Paolo F Cantoni

  • EA Guru
  • *****
  • Posts: 8626
  • Karma: +259/-129
  • Inconsistently correct systems DON'T EXIST!
    • View Profile
Re: Floating Licence Server vs Keystore service
« Reply #7 on: August 25, 2021, 09:55:00 am »
If it's on the same machine, then yes. If not, you'll have to start with an empty keystore file and add the keys from scratch.
So it contains a lock to the machine it was created on?

OK, I'll get Sales to confirm our licences and enter from scratch.

Paolo
Inconsistently correct systems DON'T EXIST!
... Therefore, aim for consistency; in the expectation of achieving correctness....
-Semantica-
Helsinki Principle Rules!

skiwi

  • EA Expert
  • ****
  • Posts: 2081
  • Karma: +46/-82
    • View Profile
Re: Floating Licence Server vs Keystore service
« Reply #8 on: August 26, 2021, 12:42:39 pm »
Note there is one irritant with the PCS KS. It requires a user id and password, DAMY.
Orthogonality rules
Position and Team disestablished, thanks austerity.
Now itinerant.

Paolo F Cantoni

  • EA Guru
  • *****
  • Posts: 8626
  • Karma: +259/-129
  • Inconsistently correct systems DON'T EXIST!
    • View Profile
Re: Floating Licence Server vs Keystore service
« Reply #9 on: August 26, 2021, 02:50:48 pm »
Note there is one irritant with the PCS KS. It requires a user id and password, DAMY.
At what point?  When I'm requesting a key?  Do I supply my AD username/password so that it can tie the key to me?

Any special settings in the dialog (e.g. port?). If we're using HTTPS: I thought only the server name was required.

TIA,
Paolo
Inconsistently correct systems DON'T EXIST!
... Therefore, aim for consistency; in the expectation of achieving correctness....
-Semantica-
Helsinki Principle Rules!

skiwi

  • EA Expert
  • ****
  • Posts: 2081
  • Karma: +46/-82
    • View Profile
Re: Floating Licence Server vs Keystore service
« Reply #10 on: August 27, 2021, 06:14:12 am »
Only once, when you first set up the connection to the key server.
In the EA in Register > Add Key > Get Shared Key > Shared Keystore ... > Sparx Keystore Server
« Last Edit: August 27, 2021, 06:16:47 am by skiwi »
Orthogonality rules
Position and Team disestablished, thanks austerity.
Now itinerant.

Paolo F Cantoni

  • EA Guru
  • *****
  • Posts: 8626
  • Karma: +259/-129
  • Inconsistently correct systems DON'T EXIST!
    • View Profile
Re: Floating Licence Server vs Keystore service
« Reply #11 on: August 27, 2021, 08:13:04 am »
Only once, when you first set up the connection to the key server.
In the EA in Register > Add Key > Get Shared Key > Shared Keystore ... > Sparx Keystore Server
Does that mean the AD identity needs to have access to the server?  Our initial try using what you said failed.

Paolo
Inconsistently correct systems DON'T EXIST!
... Therefore, aim for consistency; in the expectation of achieving correctness....
-Semantica-
Helsinki Principle Rules!

skiwi

  • EA Expert
  • ****
  • Posts: 2081
  • Karma: +46/-82
    • View Profile
Re: Floating Licence Server vs Keystore service
« Reply #12 on: August 27, 2021, 10:01:46 am »
No, the licence server has no connection to AD.
It doesn't really do anything, because getting a licence doesn't influence what permissions you have in the model.
We just told everyone in our instructions for connecting to the LS what the user name and password is.
Orthogonality rules
Position and Team disestablished, thanks austerity.
Now itinerant.

Paolo F Cantoni

  • EA Guru
  • *****
  • Posts: 8626
  • Karma: +259/-129
  • Inconsistently correct systems DON'T EXIST!
    • View Profile
Re: Floating Licence Server vs Keystore service
« Reply #13 on: August 27, 2021, 10:06:35 am »
No, the licence server has no connection to AD.
It doesn't really do anything, because getting a licence doesn't influence what permissions you have in the model.
We just told everyone in our instructions for connecting to the LS what the user name and password is.
Sorry, Skiwi, now I'm really confused.  <context>I'm not setting up the server - Infrastructure is.  They know nothing about Sparx EA or PCS or FLS and I don't know what they did.  :-X</context>  Was there a username/password that they (infrastructure) entered that we have to use?  The username/password, can't be repository-based since we are able (with the old Keystore) to use multiple repositories.

Help!  :-[

Paolo
Inconsistently correct systems DON'T EXIST!
... Therefore, aim for consistency; in the expectation of achieving correctness....
-Semantica-
Helsinki Principle Rules!

Eve

  • EA Administrator
  • EA Guru
  • *****
  • Posts: 8110
  • Karma: +119/-20
    • View Profile
Re: Floating Licence Server vs Keystore service
« Reply #14 on: August 27, 2021, 11:41:39 am »
In the PCS license configuration you will find that it allows configuration of multiple groups, and the credentials for each of those groups. By default, your request one of those groups in EA by specifying the appropriate name and password.

However, it does allow you to link each group to one (or more?) active directory groups, which provides for more flexibility  than the active directory integration in the legacy keystore service.