Friday 22 May 2020

Must do - high security risk

If you see this in your logfiles:

6320/8992       Sat Mar  7 22:21:02.011000              secnodemgr.c674
        WARNING:Default Single Sign-on node configuration is being used. This is a potential security risk. Please refer to EnterpriseOne Security Administration Guide to setup Single Sign-on Node Configuration and Single Sign-on Token Lifetime Configuration.

Call me, I'll show you how I can log in as any user without a password.

Really, that is enough said!

Tuesday 19 May 2020

Remove pesky e1pages in bulk

This is cool, and you might need it!  SVds helped me (actually gave me this).

This will secure out all E1pages.  Sometimes they are slow and mostly admin don't want them.  If there are 100s (like you have UXOne), then you want to get rid of them all!

You cannot add a security record to hide *ALL for E1PAGES - annoying!

So delete them and add them with this SQL!   Happy Daze!

delete from sy920.f00950w where WSWOSETY = 'VIEW' and WSWOUSER = 'SM00001';

Insert into sy920.f00950w
select distinct '1589869974:'||rownum,'VIEW',WOWOTYP,'NOE1PAGES','*ALL','*ALL','*ALL',WOWOBNM,'*ALL','*ALL','','','0','','','','','','','','','','','','SM00001','W00950UOP','F5PLAY1',to_date('19-MAY-20','DD-MON-RR'),'','',WOWOOBNMS,0,0,'','','','','','',0,0,null,null
from ol920.f9860W where WOWOTYP in ('COMPOSITE','E1PAGE');
commit;


Monday 18 May 2020

JDE town hall

Fusion5 are hosting a JD Edwards town hall on Wednesday.    That's this Wednesday 20th.

You can register here, free:  

You do not need to be a Fusion5 customer - but you must have a thirst for knlwledge!

We are going to cover off all of the latest enhancements in tools and applications, getting a special update direct from oracle in Denver!

Ensure that you register so you can get the recording, just in case the timezone does not work out.

You'll hear about some of our amazing JDE support options too.  There are some snippets about our JD Edwards managed services too - all focused on education though.

Agenda:
  • Introduction and Welcome- Andrew Bloxsom, Senior Executive, Fusion5 AU

  • New JDE Solution Enhancement- ERP Insights - Shannon Moir, Director JDE and Innovation, Fusion5 AU 

  • Oracle JDE KeynoteLive from the United States

  • New JDE Solution - Automated testing - Ben O' Malley, Consulting Manager & ​Jenni Parousis, Senior Consultant, Fusion5 AU 

  • New JDE Solution - Fraud Tracking - Andrew Bloxsom, Senior Executive, Fusion5 AU  

  • Q&A, Close

Live from the United States we will be hearing from:

Robert (Bob) MonahanVice President, Oracle JD Edwards Product Management. 

And Gary Grieshaber, Vice President, Oracle JD Edwards Product Management & Advanced R&D.

Both Bob & Gary are responsible for the Product Management of Oracle JD Edwards. This includes product roadmap, requirements, design, delivery, and go-to market functions.


Wednesday 13 May 2020

LoRaWAN - implementation of a proof of concept solution

The challenge

The innovation team has been involved in a POC for a client.  The POC is pretty simple - asset tracking - start with 50 assets.  Many customers want to know where assets are.  In our situation we needed to find these on a daily basis - we are talking about ladders.  This customer is unique, where the plant they want to track assets on is quite large, square km in fact.  A square km is huge and we might be dealing with more than 1km2, perhaps 4 or 8.  you can easily cover 1000 acres, probably closer to 2000 acres with a single aerial.  I'm guessing that if you were out of town, the theoretical radius of 7km (pie x radius squared) = 37807 acres.  I'm saying that you need to test your aerial placement and property to know exactly how far you will get.

Our challenge was to choose a technology that could facilitate this process.  A little about the assets we are tracking, they do not have a power supply.  We wanted as little maintenance as possible from a device perspective.  It would of course be good to have OTA, as this is critical functionality if you want to change some internal device configuration.  More about this later.

We wanted the solution to be as inexpensive as possible too, as paying for 50 sim cards, data plans and more might be a little prohibitive.  The other factor of course is that 4G enabled devices are pretty expensive in terms of battery - so this was not going to be good from a maintenance perspective.   We did not want to be chasing these devices around the plant to replace batteries.

The solution

We decided that LoRaWAN would be a good solution.  This is known to use extremely low power and provide the type of throughput that we wanted.  We looked into device manufacturers and wanted a device that has a GPS capability.  You can get LoRaWAN devices that have built in GPS, but others will triangulate based upon the accurate GPS location of at least 3 aerials.  LoRaWAN works like your own cellphone tower.  So you buy a gateway and some devices and program them to talk.  This is a secure protocol, each device has a certificate installed and communicates only the encrypted messages - therefore eaves dropping is really irrelevant unless someone has your keys. 


RAK systems LoRaWAN gateway

You can see from the above that we made a purchase from the iot-store.  The exact device is this one:  https://www.iot-store.com.au/products/outdoor-lorawan-gateway-rak7249-sx1301-openwrt .  This was chosen as it has wireless and 4G capability, which is favuorable for secure sites.   There are no holes in the client network for the transfer of the data.

We are essentially sending the data directly to google cloud from the gateway.  And then we use the amazing tools available to us there (in terms of IoT HUB, pub/sub, firebase and more).  The solution has been completely decoupled from any ERP, but can be plugged in very easily using google pub/sub.

We are able to see easily where all of the devices are.  We can search certain attributes and see only the assets that match your criteria.  We have some historical views and some heat maps, which are amazing.  

We are using GPS data types, these enable us to do simple triggers on the back-end tables - enabling us to geo-fence or trigger alerts on distance traveled.

Below is how I tested the range of the devices.  I'm in urban Melbourne and got some fairly good reception for about 1.5km.  I was expecting a lot more.

Size of one of the devices


You can see that I've done LoRaRUN also, to test the device.  We programmed the device to send a message every minute (so you'll see how slow I run - 5min km's).  The map below is the history of one of the devices.

 

It's interesting to note that there are some dead points, to assist with this you are going to need a couple of aerials I believe.  Multiple gateways will assist with the dead spots that you see above.


A funny story is that I also tried to test the range of the devices with my drone.  This was highly unsuccessful, as the drone's crash sensors were picking up the lorawan device and the drone was flying erratically.  I would not recommend that!

The good thing about using the drone, was that there are no dead-spots with the reception, therefore the range could be tested clearly.


Below you can see how the yabby LoRaWAN (with GPS) device (we are partnering with digitalmatter) for their hardware.  It's been reliable so far and suits the Australian conditions.   We mounted them high on the ladders to maximise the chance that they would get signal.  We also needed to be careful about being away from where feet or hands were and that they were not a hazard of any type.  We were happy with the results on a number of ladders.

Another nice thing about the yabby, is that it takes AAA batteries.  When we choose an update every 24 hours, or on movement (once movement has stopped for X seconds), the yabby can get a fix for the GPS (a battery intensive operation) and then send the location.  Pretty cool that you can schedule this or base it on the internal movement sensors.   Each yabby cost about 90 Australian dollars, these prices are bound to come down - but you need to be tracking an asset that has some inherit value.



Above is some of the configuration options that you get for the yabby.  Note that this can be done OTA too.  A cable can flash one of these bad boys in about 4 seconds, so we get our fleet done pretty quickly.


This is the guts if the yabby

Some more details - allowing people to upload pictures of the asset and then see the historical movements.

Below is the history marker map, which plots all of the historical locations of the device


Here we have a heat map of where the device has been.

Conclusion

We were able to get a pretty nice proof of concept for LoRaWAN and GPS tracking of devices for a reasonable cost.  We are looking at about 7K of hardware and then some services.  If you are a large mine, processing plant or port - you could also track valuable assets within the range of the LoRaWAN network that you establish.  It's an incredible technology that will allow you an inexpensive solution with very low (to no) ongoing charges.

In this type of deployment, you don't need servers.  You don't need holes in your network, you get signals that allow you to save money and hopefully make better decisions.  You'll find things quicker, you'll choose the right tool for the right job, not just the closest one.  The data is available natively on a mobile device too!

Lessons for me:

  • OTA is critical for the devices, don't have problems in the field and not be able to make changes
  • ensure that your battery life and settings have been road tested
  • additional aerials are going to assist with "Dead spots"
  • don't home-brew everything
  • lora-alliance might be appropriate with the right security
  • Test as much as possible
  • Keep your corporate network separate
  • have a test device with a high update speed (every minute)
  • Good mapping and instant feedback, "strategic" storage of data

JDE?

This is my JDE blog, so lets cover it off.  This portal could easily be used with Cafe1 to provide realtime location data (and historical data) for any asset in E1.  You could easily map this back to JDE a number of ways.  All of the expensive bulk data is going to be in google cloud storage, if you want to do statistical or big data analysis down the track.  Very low cost and ready for big data.   You could easily write JDE programs that would update any of the OTA settings (just say you wanted to update the idle time for a device, this could be done with JDE and orchestration).  

You could also use pub/sub from google and display notifications in JDE, but let's be honest - if we were using pub/sub, we'd probably use email or text message.

We can build up a solution like this for you - totally turn key.  You install the gateway (or two) and you get your devices and website, all pre-programmed and ready to go.

Of course I'm talking about GPS data, this could be temp, pressure - anything.  email me if you  need to know more!




Tuesday 5 May 2020

RTE to Azure - the great escape

Want to get your RTE messages into Azure Service Bus easily?  Of course you do.  Then you have complete control to write some cool code in Azure, that perhaps calls some orchestrations and then fires off some powerApps or does nice workflow - because sorry...  JDE does not do that too well.

What is an RTE?  Real Time Event, built in events in JDE that fire off when a condition occurs, like RTABOUT - Real Time Address Book Out - WOW.  Fires when there is an add or change to an AN8 entry...  Double wow.

You can get these going pretty quickly, but then what?  You are probably already bored.  But what if you created some Azure Message Queues, and then attached some code to them, even did some nice dashboards with Azure Monitor - you'd know how often things are changing and what time - that is cool too - like BAM.

The hard bit, is you might need to come to ask and purchase our EA that will sit and listen to your RTE queues and then shoot the messages off to your Azure.  You could send them to us and we can do all of your integrations for you (to be honest).

The weblogic screen looks a bit like below.  You can start and stop.  Because messages are guaranteed, this is a robust solution.  You can pause the queues, you have complete control of the downstream functionality.  This is really nice.

Another design advantage is this can be highly available. So you can have this running on multiple RTE servers that are active.  If JD Edwards does what it is supposed to do (doesn't it always) you could have multiple RTE servers, multiple listeners and this software will pull from the RTE server that actually got the message (they do fight sometimes).


There is a really simple config file to map JDE RTE queues to Azure Queues


This is a monitor that can show you the messages getting to Azure - now you need to start coding!


All done.  Reach out if you are interested in getting involved.  This is a pretty cool piece of tech to enabled more native integration to JD Edwards using Azure Service Bus.  This could also be used to talk directly to SQS in AWS if you like - you only need to ask.