OpenSpirit enable cross-vendor, cross platform... Integration of Data and Applications
About Us Products Support Services Clients News Contact Us
End-User FAQ: VPN Questions

VPN Questions

What is VPN?
How do I setup VPN for use with Microsoft Windows?
What web address do I connect to?
What port does the VPN use?
How can I run OpenSpirit on Windows using VPN?
Why am I not receiving object selection events when running OpenSpirit viewers on my PC to access data using OpenSpirit's VPN service?
My User Server will not start when I lauch OpenSpirit from my PC via VPN. How can I start it?
How do I run OpenSpirit enabled vendor applications on computers using VPN or having multiple IP addresses?
How do I setup VPN for Linux?
How do I setup VPN for Solaris?

What is VPN?

VPN is an acronym for Virtual Private Network. It is a way for people to connect to our network securely through the Internet. You can connect your computer to our network so that it will appear as though it is a part of our network and you can run your programs off of our services (like OpenWorks, GeoFrame, and Finder).

Back to Top ...

How do I setup VPN for use with Microsoft Windows?

Windows 2000:

  1. Make sure you are connected to the Internet.
  2. Right click on the "My Network Places" and click on properties.
  3. Double click on "Make New Connection". This will bring up the "Network Connection Wizard".
  4. Click Next.
  5. Click the "Connect to a private network through the Internet" option button.
  6. Click Next.
  7. Click the "Do not dial the initial connection" option button.
  8. Click Next.
  9. In the text box, enter the address: guest.openspirit.com
  10. Click Next.
  11. Click the option button for either "For all users" or "Only for myself," depending on who will be accessing your machine and if you want others to connect to the VPN connection.
  12. Click Next.
  13. In the text box, give the connection a name like "OpenSpirit VPN"
  14. If you want to create a short cut onto your desk top, click the check box below the text box.
  15. Click Next.
  16. Enter in the user name and password that you have been provided with.
  17. When you click connect, your computer will become connected to the OpenSpirit domain.
  18. You are now free to connect to the OpenSpirit services that you want to use.

Once this is set up, all you need to do is:

  1. Right click on "My Network Places", then click on "Properties"
  2. Double click on the VPN connection that you created "OpenSpirit VPN"
  3. Click on "Connect;" this should connect you.

Back to Top ...

What web address do I connect to?

The web address that you should be connecting to is:
guest.openspirit.com

Back to Top ...

What port does the VPN use?

Our VPN is using a protocol called PPTP (Point to Point Tunneling Protocol). It uses port 1723 (TCP). In addition to this it also uses protocol 47 which is the Generic Route Encapsulation protocol. More information from Microsoft's website.

Back to Top ...

How can I run OpenSpirit on Windows using VPN?

Why am I not receiving object selection events when running OpenSpirit viewers on my PC to access data that uses OpenSpirit's VPN service?

Suppose you want to run the UserServer on your Windows PC at home, dialed into work using VPN. This won't work unless you do something about the IP address that is stored in the object references to objects the UserServer hosts, like the UserProfile, Session, and ProjectSet objects. Note also that applications which receive events do so by exporting an object that is called with event information. Hence, the INT viewers (or any event consumer) will not receive events unless the IP address is fixed.

Each object reference points to an object in another process, potentially running on another machine. It must contain a reference to the host machine in addition to other information that identifies the object it references. The host is identified by an IP address. When you are using VPN or when you have multiple network cards connected to separate networks, your machine has more than one IP address. The one picked up by the OpenSpirit application when it builds the object reference is arbitrary and in the case of VPN, it typically uses the IP address assigned to your machine's network adapter, not the IP address assigned to your VPN connection. The OpenSpirit services will need the object references to use the IP address assigned by the VPN host in order to communicate back to the objects running on your PC.

Now you should have two essential questions:

  1. How to find the IP address to use?
  2. How to get it passed to the OpenSpirit applications you want to run on your PC?

1. Obtaining the IP address:

You can obtain lots of detailed information using the ipconfig command in a DOS window. In the Start -> Run... dialog, enter the command cmd and click OK. In the DOS window that comes up, enter the command

ipconfig /all

It will show several IP addresses for each "adapter". You want the one labeled "IP Address" for the adapter in the VPN connection.

NOTE: Your PC will likely be assigned to a different IP address each time a new VPN connection is established. You will need to use the ipconfig command to discover the new IP address and update it in any .bat files or environment variable settings that you may have set.

2. Passing the IP address to OpenSpirit applications:

Running the OpenSpirit runtime client:

All you need to do is modify one file in the OpenSpirit installation directory. The file is in %OSP_HOME%/bin/etc, where %OSP_HOME% is an environment variable that was set for you to the location of the OpenSpirit installation. Usually this is something like "C:\Program Files\OpenSpirit". The file is named "ospenv.bat". Look for a section that looks like the following:

REM ORB values
set ORB_OPTS=-Dopenspirit.host=%OSP_HOST%
                              -Dopenspirit.port=%OSP_PORT% %ORB_OPTS%

Add a new line to something like:

REM ORB values
set ORB_OPTS=-DOAIAddr=10.10.10.203
set ORB_OPTS=-Dopenspirit.host=%OSP_HOST%
                              -Dopenspirit.port=%OSP_PORT% %ORB_OPTS%

Running OpenSpirit example programs (developers only):

For the OpenSpirit C++ examples you need to pass "-ORBIIOPaddr" as a command line argument to the script. For example, if your script file name is runProducer.bat, it takes the arguments "-session ", and your ipaddress is 10.10.11.123, then you would start the Producer program with:

runProducer.bat -session mySession -ORBIIOPAddr inet:
                               10.10.11.123:9000

The "-ORBIIOPaddr" arguments should end up being passed through to the osp_Connection.connect() call.

Back to Top ...

My User Server will not start when I lauch OpenSpirit from my PC via VPN. How can I start it?

Use the following procedure to start your User Server manually:

  1. Connect to our VPN network as you usually do, using your VPN username and password.
  2. Bring up a shell on your PC (command window) and verify that you are connected to our VPN network. In the shell type “ping 10.10.11.8”. If you can ping this host, then, that means that you are connected to our VPN network.
  3. Now, telnet to 10.10.11.8 (“telnet 10.10.11.8”); this machine is the OpenSpirit server, tweety. Now log in using your UNIX username and password.
  4. After you log into your account, do the following to start your User Server.
    If your client is OpenSpirit v2.7, use the following command to start your User Server:

/prod/spirit/osp27/bin/runUserServer.sh –log /prod/spirit/osp27/logs/UserServers/<userid>/UserServer.log start

If your client is OpenSpirit v2.8, use the following command to start your user server.

/prod/spirit/osp28/bin/runUserServer.sh –log ~/OpenSpirit/logs/UserServer.log start
Go back to your PC and start OpenSpirit as you usually do; your Launcher should pop right up. If you get a timeout, then issue the command a second time, right away.

Back to Top ...

How do I run OpenSpirit enabled vendor applications on computers using VPN or having multiple IP addresses?

For JAVA based vendor applications:

Same as Running the OpenSpirit runtime client v2.7 or higher.

For C++ based vendor applications:

By default it will start listening for events on the default IP address and randomly picks up an available port number. However on computers having multiple IP addresses sometimes we need to force the ORB to use one or more specific address and port number.

In order to achieve that you have to do one of the following:

  1. You can add one or more of the following to the executable’s command line arguments:
    -ORBIIOPAddr inet::<your VPN ip address>:<available port>
    (e.g. -ORBIIOPAddr inet:10.10.10.123:9000 ).
    Be aware of that it is recommended to use port numbers above 5000!
  2. You can create a configuration file with the arguments. By default the application will look for a file called .micorc in the application’s directory on windows or in your $HOME directory on Unix. You can specify the location and the name of the configuration file by settings the MICORC environment variable. It must point to a valid file on a valid path. In the .micorc file you can list the desired options line by line. The files needs end with an empty line otherwise it will ignore the last option. The file looks like that:

    -ORBIIOPAddr inet:10.10.10.123:9000
    -ORBIIOPAddr inet:guest.openspirit.com:9001

Back to Top ...

How do I setup VPN for Linux?

Assumptions

This document assumes that:

  • You are familiar with the Linux system.
  • You know how to reconfigure and recompile the Linux kernel.
  • You are familiar with configuring and compiling other software.
  • You have some basic idea how routing works, and you have been given a valid VPN account from OpenSpirit

Other Notes

  • "your_user_name" actually refers to the user name that you were given from OpenSpirit

Requirements

If you are having problems with downloading from the above sites then you may alternately try to download from the links below.

Please note, however, that the patch files are NOT completely Open-Source friendly.

You are free to download and use, but not to change and redistribute without reading the various licenses that go with each item. For this information please go to the original sites listed above for more information on this.

Please also note that these files may not be the latest and greatest.

Recompiling the Kernel:

# tar zxvf linux-2.4.19.tar.gz
# cd linux-2.4.19
# patch -p 1 < linux-2.4.19-mppe-mppc-0.94.patch
# make menuconfig

Select all your normal options and under Network Device Support Check all PPP related items including the new item:

"Microsoft PPP compression/encryption"

Make the kernel and modules and install them.

Make the new pppd

# tar zxvf ppp-2.4.1.tar.gz
# cd ppp-2.4.1
# patch -p 1 < ppp-2.4.1-mppe-mppc-0.81.patch
# ./configure
# make install

Reboot the System

Reboot the system sanely.

# reboot

Install pptpclient

# tar zxvf pptp-linux-1.1.0-1.tar.gz
# cd pptp-linux-1.1.0-1
# tar zxvf pptp-linux-1.1.0.tar.gz
# cd pptp-linux-1.1.0
# make # cp pptp /usr/sbin
# cd ..
# cp pptp-command /usr/sbin
# cp pptp_fe.pl /usr/sbin
# cp xpptp_fe.pl /usr/sbin
# cp options.pptp /etc/ppp
Configure pptpclient

NOTE: Text shown in bold red font is the input you type

# pptp-command

  1. start
  2. stop
  3. setup
  4. quit

What task would you like to do?: 3

  1. Manage CHAP secrets
  2. Manage PAP secrets
  3. List PPTP Tunnels
  4. Add a NEW PPTP Tunnel
  5. Delete a PPTP Tunnel
  6. Configure resolv.conf
  7. Select a default tunnel
  8. Quit

?: 1

  1. List CHAP secrets
  2. Add a New CHAP secret
  3. Delete a CHAP secret
  4. Quit
?: 2
Add a NEW CHAP secret.
NOTE: Any backslashes (\) must be doubled (\\).
Local Name:
This is the 'local' identifier for CHAP authentication.
NOTE: If the server is a Windows NT machine, the local name should be your Windows NT username including domain. For example:
domain\\username
Local Name: guest-osp\\your_user_name
Remote Name:
This is the 'remote' identifier for CHAP authentication. In most cases, this can be left as the default. It must be set if you have multiple CHAP secrets with the same local name and different passwords. Just press ENTER to keep the default.
Remote Name [PPTP]: [just hit enter]
Password:
This is the password or CHAP secret for the account specified. The password will not be echoed.
Password: [enter in your password]

Adding secret guest-osp\\your_user_name PPTP *****

  1. List CHAP secrets
  2. Add a New CHAP secret
  3. Delete a CHAP secret
  4. Quit

?: 4

  1. Manage CHAP secrets
  2. Manage PAP secrets
  3. List PPTP Tunnels
  4. Add a NEW PPTP Tunnel
  5. Delete a PPTP Tunnel
  6. Configure resolv.conf
  7. Select a default tunnel
  8. Quit
?: 4

Add a NEW PPTP Tunnel.

  1. Other
    Which configuration would you like to use?: 1
    Tunnel Name: OpenSpirit
    Server IP: guest.openspirit.com
    What route(s) would you like to add when the tunnel comes up? This is usually a route to your internal network behind the PPTP server. You can use TUNNEL_DEV and DEF_GW as in /etc/pptp.d/ config file TUNNEL_DEV is replaced by the device of the tunnel interface. DEF_GW is replaced by the existing default gateway. The syntax to use is the same as the route(8) command.
    Enter a blank line to stop.
    route: [enter]
    Local Name and Remote Name should match a configured CHAP or PAP secret.
    Local Name is probably your NT domain\username.
    NOTE: Any backslashes (\) must be doubled (\\).

Local Name: guest-osp\\your_user_name
Remote Name [PPTP]: [enter]
Adding OpenSpirit_Guest - 10.10.11.9 - guest-osp\\your_user_name - PPTP
Added tunnel OpenSpirit

  1. Manage CHAP secrets
  2. Manage PAP secrets
  3. List PPTP Tunnels
  4. Add a NEW PPTP Tunnel
  5. Delete a PPTP Tunnel
  6. Configure resolv.conf
  7. Select a default tunnel
  8. Quit

?: 6

Use a PPTP-specific resolv.conf during tunnel connections? [Y/n]:y

  1. Other
    Which configuration do you want to use?: 1
    What domain names do you want to search for partially specified names?
    Enter all of them on one line, seperated by spaces.
    Domain Names: openspirit.com Enter the IP addresses of your nameservers
    Enter a blank IP address to stop.
    Nameserver IP Address: 10.10.11.5
    Nameserver IP Address: [enter]
    Copying /etc/resolv.conf to /etc/resolv.conf.real...
    Creating link from /etc/resolv.conf.real to /etc/resolv.conf
  1. Manage CHAP secrets
  2. Manage PAP secrets
  3. List PPTP Tunnels
  4. Add a NEW PPTP Tunnel
  5. Delete a PPTP Tunnel
  6. Configure resolv.conf
  7. Select a default tunnel
  8. Quit
?: 8

Starting pptpclient and Testing

First we start up the pptpclient via the pptp-command script.

# pptp-command start

  1. OpenSpirit
    Start a tunnel to which server?: 1
    All routes added.
    Tunnel OpenSpirit is active on ppp1. IP Address: 10.10.11.101
    #

You should now be connected to our VPN and should be able to connect to the OpenSpirit network and test via ping.

# ping snoopy (or at least snoopy's IP address - 10.10.11.5)

Back to Top ...

How do I setup VPN for Solaris?

We have not found any VPN clients for Solaris. If you know of one please contact us.

Back to Top ...

Site Map      Legal      Privacy

 
OpenSpirit Home