Orbeon Forms community mailing list

Bare minimum Orbeon deployment in separate portlet app deploy

Classic

List

Threaded

4 messages Options

Stian Sigvartsen

Bare minimum Orbeon deployment in separate portlet app deploy

I'm perusing the separate portlet app deploy strategy where orbeon is deployed as a stand alone web app to the web app with xForms.

I'm only using the xForms processor of Orbeon forms in this scenario.

In this configuration, is it necessary to deploy the entire Orbeon forms or can it be scaled down?

The reason why I ask is because this is being deployed onto the Tomcat which runs our Liferay portal which resides in our presentation DMZ. Obviously this DMZ is not as secure as our internal LAN, so it is preferable to keep deployments as minimalist as possible.

At present I am thinking a separate deployment of Orbeon forms on our LAN will be appropriate for the purpose of building forms using Form Builder and these can be displayed on our Liferay portal through the Form Runner portlet in a similar fashion to WSRP.

-Stian

--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws

Tambet Matiisen

Re: Bare minimum Orbeon deployment in separate portlet app deploy

Hi Stian!

Not exactly answer to your question, but maybe it helps - Form Runner Programmer and Administrator Guide contains an example of securing Apache front-end.
http://wiki.orbeon.com/forms/doc/user-guide/form-runner-user-guide#TOC-Securing-services

This gives general idea, what resources should be secured from outside world.

Tambet

On 18.01.2011 19:22, Stian Sigvartsen wrote:

Bare minimum Orbeon deployment in separate portlet app deploy
Hi

I'm perusing the separate portlet app deploy strategy where orbeon is deployed as a stand alone web app to the web app with xForms.

I'm only using the xForms processor of Orbeon forms in this scenario.

In this configuration, is it necessary to deploy the entire Orbeon forms or can it be scaled down?

The reason why I ask is because this is being deployed onto the Tomcat which runs our Liferay portal which resides in our presentation DMZ. Obviously this DMZ is not as secure as our internal LAN, so it is preferable to keep deployments as minimalist as possible.

At present I am thinking a separate deployment of Orbeon forms on our LAN will be appropriate for the purpose of building forms using Form Builder and these can be displayed on our Liferay portal through the Form Runner portlet in a similar fashion to WSRP.

-Stian

Erik Bruchez

Re: Bare minimum Orbeon deployment in separate portlet app deploy

Administrator

In reply to this post by Stian Sigvartsen

It can certainly be scaled down. This is an often-asked question but we don't yet have an official "minimal" list of which Orbeon Forms JARs are needed or not.

In addition to JARs, it should be possible to remove some entries in web.xml, like the eXist HTTP servlet.

-Erik

On Tue, Jan 18, 2011 at 9:22 AM, Stian Sigvartsen <[hidden email]> wrote:

Hi

I'm perusing the separate portlet app deploy strategy where orbeon is deployed as a stand alone web app to the web app with xForms.

I'm only using the xForms processor of Orbeon forms in this scenario.

In this configuration, is it necessary to deploy the entire Orbeon forms or can it be scaled down?

The reason why I ask is because this is being deployed onto the Tomcat which runs our Liferay portal which resides in our presentation DMZ. Obviously this DMZ is not as secure as our internal LAN, so it is preferable to keep deployments as minimalist as possible.

At present I am thinking a separate deployment of Orbeon forms on our LAN will be appropriate for the purpose of building forms using Form Builder and these can be displayed on our Liferay portal through the Form Runner portlet in a similar fashion to WSRP.

-Stian

--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws

Stian Sigvartsen

RE: Re: Bare minimum Orbeon deployment in separate portlet app deploy

In reply to this post by Stian Sigvartsen

Message

Thanks Eric. I appreciate your guidance as always!

Removing the eXist HTTP servlet from the web.xml seems like a very sensible idea because of it's unauthenticated REST interface whenever it is deployed into the DMZ.

I'm sure it's possible to add authentication to this quite easily of course, but I don't need eXist at all for the separate portlet webapp deploy configuration. So I'll pursue this separately later... there are so many things one could look into :)

-Stian

-----Original Message-----
From: [hidden email] [mailto:[hidden email]] On Behalf Of Erik Bruchez
Sent: 20 January 2011 03:18
To: [hidden email]
Subject: [ops-users] Re: Bare minimum Orbeon deployment in separate portlet app deploy

It can certainly be scaled down. This is an often-asked question but we don't yet have an official "minimal" list of which Orbeon Forms JARs are needed or not.

In addition to JARs, it should be possible to remove some entries in web.xml, like the eXist HTTP servlet.

-Erik