Application Caches

The Application Caches window displays current memory use and statistics for select caches in OpenVPMS.
This is launched by clicking Caches in Administration - System.

The table displays:

The buttons are:

Changing a Cache

The Edit button displayed a Change Cache window for the selected cache.

This displays the current maximum elements for the cache, and provides options to select a suggested value for the cache size, or enter a new one.

The cache size should be changed if:

• there are too many cache misses vs cache hits.
  This indicates that the cache is too small and that Max Elements should be increased.
• memory consumption is too high
  Here Max Elements should be decreased.

Note that the suggested size does not take into account memory consumption.

Diagnostics

The Diagnostics window supports viewing:

SHOW ENGINE INNODB STATUS

GRANT SELECT, PROCESS ON *.* TO 'openvpms'@'localhost';

Document Locks

The Document Locks tab displays the users that have locks on documents to prevent other users from overwriting their changes. These locks are created by OpenOffice when External Edit is used to edit a document.

Each row in the table displays:

• the user login name
• the user name
• the name of the locked document
• the time when the lock expires - note that this time will normally be a couple of minutes in the future. When this time is reached the system checks that the document is still being edited, and if so renews the lock.

Locks can be filtered by login name, user name or host.

The Delete button can be used to delete a lock that needs to be cleared. Normally the lock will be removed when the document has finished being edited.

Firewall

OpenVPMS includes a firewall that can limit access to specific IP addresses.
This should be enabled where OpenVPMS is deployed on a publically accessible host with no or limited firewall support of its own.

The firewall only applies to OpenVPMS. It doen't restrict access to other applications that may be deployed on the web container.

If the web container is behind a proxy or load balancer, it needs to be configured to pass the client IP addresses through, otherwise OpenVPMS will see clients as coming from the proxy host. See Tomcat Configuration below, for instructions on how to do this for Tomcat.
 

The firewall is configured via Administration - System - Settings.

It provides the following options:

Use:

The firewall can also be configured from the command line using the toolbox firewall command.
It can take up to 5 minutes for changes to take effect.

Multifactor authentication

Multifactor authentication can be via a one-time code sent to the user's preferred email address, or using a Time-based one-time password (TOTP). The latter can be more convenient, as the user simply enters a code displayed on their mobile device.

Time-based one-time passwords are configured per-user via the TOTP Authentication button in user preferences. This displays a QR code that can be scanned into apps that support TOTP.

TOTP apps

The following apps can be used to manage Time-based one-time passwords:

• Google Authenticator
• Authy
• Enpass

A more comprehensive list can be found at this Wikipedia page.

Tomcat Configuration

If OpenVPMS is hosted behind a proxy or load balancer, Tomcat needs to be configured to pass the correct client IP addresses through.
 

This is done by adding a RemoteIpValve valve to Tomcat's server.xml. E.g., if the proxy/load balancer passes the address in the X-Forwarded-For header, it is simply a matter of adding the element to the <Host>.

<Host name="localhost"  appBase="webapps"
      unpackWARs="true" autoDeploy="true">

  <Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs"
         prefix="localhost_access_log" suffix=".txt"
         pattern="%h %l %u %t &quot;%r&quot; %s %b" />

  <Valve className="org.apache.catalina.valves.RemoteIpValve"
         remoteIpHeader="x-forwarded-for"
         protocolHeader="x-forwarded-proto"
         protocolHeaderHttpsValue="https"/>
</Host>

OpenOffice

The OpenOffice settings in Administration - System - Settings enable the OpenOffice configuration to be changed, and OpenOffice restarted.
 

This displays the:

The buttons are:

Configuration

The following OpenOffice properties can be configured:

Plugins

The Plugins screen displays the status of the plugin support in OpenVPMS.

Each row in the table displays the plugin:

• identifier
• name
• version
• status

The buttons are as follows:

Sessions

The Sessions tab displays current user sessions.

Each row in the table displays:

• the user login name
• the user name
• the host they are logged in from

NOTE: this may be the address of a firewall or proxy, rather than the user's actual address.

• when they logged in
• when they last accessed the session

Sessions can be filtered by login name, user name or host.

The buttons are:

System Settings

The System Settings window provides administrative access to system settings.

It is launched by clicking the Settings button in Administration - System.

These include:
 

• Firewall
• OpenOffice
• Password Policy
• Query
• Report

Query

The Query tab provides support to configure system-wide query options.

These include:

Report

The Report tab provides support to configure system-wide report options.

These include:

REPORT-0013: Report 'My Report.jrxml' has been terminated 
as it exceeded the maximum limit of 1,000 pages