<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Open the Floodgates</title>
	<atom:link href="http://www.civil3d.com/2007/04/open-the-floodgates/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.civil3d.com/2007/04/open-the-floodgates/</link>
	<description>Home of Raider Consulting</description>
	<lastBuildDate>Fri, 12 Mar 2010 15:11:23 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: JG Gerth</title>
		<link>http://www.civil3d.com/2007/04/open-the-floodgates/comment-page-1/#comment-14233</link>
		<dc:creator>JG Gerth</dc:creator>
		<pubDate>Thu, 03 May 2007 16:47:38 +0000</pubDate>
		<guid isPermaLink="false">http://www.civil3d.com/index.php/2007/04/open-the-floodgates/#comment-14233</guid>
		<description>Please correct me if i&#039;m wrong, but &#039;superman&#039; the password cannot be changed in vault.  From my reading in the literature, that is hardwired. see TS1058133

As is the sa password of AutodeskVault.  both are pretty risky data security /integrity issues, along with voiding the domain password policy (See same TS#). AFAIK - given physical network access, not even login, any Vault installation can be corrupted/ hacked/ edited with impunity.  Vault does not respect or understand domain security or privileges.  Yet, it is completely dependent on MS SQL Server..... which does have a built-in understanding of domain security. somehow that makes little sense.

Speaking of SQL Server....  The Autodesk DataManagement Server, ADMS, is middleware.  There&#039;s no logical reason that it should be totally dependent on MS SQL Server.  The whole point of any data manament server layer is to communicate with the database server!   Good programming practice would entail designing your Data Management Server to work with multiple SQL-based DB Servers, cleanly separating the DataManagement from the DataStore.  Failing to do so indicates problems with either the requirements for, or the implementation of, the DMS. I could understand a small developer with a two man shop cutting corners that way, coding DB-specific calls,  and not doing a quality job of DataManagement, but that&#039;s not who&#039;s developing Vault.

Presuming my infrastructure is built heavily on either Oracle, MySQL, PostgreSQL, or a different enterprise-class scalable DB, Vault still requires that I license, install, support, &amp; maintain the MS DB product, and purchase CALS for every person who will be accessing it.   The cost of Vault just became very large, simply to duplicate an already existing PostgreSQL infrastructure.  We could discuss the merits and (dis)advantages of various enterprise DB packages all day, but the essential point is that Auodesk has prevented the Vault administrator from using his tool of choice, and locked him into an expensive path.  And that was not necessary to accomplish the job of the ADMS.  

Migration -- it&#039;s my understanding that Vault 4 does not have a clean or simple migration to Vault 5.  I&#039;m hearing that secondhand, never having installed Vault 4, so it&#039;s possible I&#039;m incorrect.  The reports i have heard however, describe much conflict, wailinng, and hairpulling.

There _are_ enterprise level EDMS solutions out there (which work somewhat with AutoCAD, and have no ability at all to handle C3D dependencies).  Documentum is one of the largest players in that space.  I&#039;ve yet to see any information or planning on how to incorparate a project from Vault to Documentum.  Even Projectwise from the Bentley folks has that ability, and a moderate ability to deal with AutoCAD design drawings.  Migration between Vault and a real enterprise EDMS is a mandatory requirement.  Pretending that Vault is a sufficient answer, or ought to be a black hole that consume data but can&#039;t share it, is not realy a good thing for customers.

Security -- Ok, to be fair securty is something that cannot be judged until the product has been worked on and attacked.  But given the issues identified earlier, I cannot be optimistic that Autodesk managers have any basic understanding of database security.  The default installation that tags everyone as a single SQL user indicates to me fairly well that auditing, edit history, etc were not on the list of important items, at least not in relation to easier installations.  Since ADMS is hardwired to use MS SQL Server, any security flaws in SQL Server will automatically apply to _every_ Vault installation and user.  If that doesn&#039;t concern you, it probably should.

Any and all of these issues can be fixed.  Most of them are design flaws rather than bug.  But is there any interest in Autodesk&#039;s part to do so?</description>
		<content:encoded><![CDATA[<p>Please correct me if i&#8217;m wrong, but &#8217;superman&#8217; the password cannot be changed in vault.  From my reading in the literature, that is hardwired. see TS1058133</p>
<p>As is the sa password of AutodeskVault.  both are pretty risky data security /integrity issues, along with voiding the domain password policy (See same TS#). AFAIK &#8211; given physical network access, not even login, any Vault installation can be corrupted/ hacked/ edited with impunity.  Vault does not respect or understand domain security or privileges.  Yet, it is completely dependent on MS SQL Server&#8230;.. which does have a built-in understanding of domain security. somehow that makes little sense.</p>
<p>Speaking of SQL Server&#8230;.  The Autodesk DataManagement Server, ADMS, is middleware.  There&#8217;s no logical reason that it should be totally dependent on MS SQL Server.  The whole point of any data manament server layer is to communicate with the database server!   Good programming practice would entail designing your Data Management Server to work with multiple SQL-based DB Servers, cleanly separating the DataManagement from the DataStore.  Failing to do so indicates problems with either the requirements for, or the implementation of, the DMS. I could understand a small developer with a two man shop cutting corners that way, coding DB-specific calls,  and not doing a quality job of DataManagement, but that&#8217;s not who&#8217;s developing Vault.</p>
<p>Presuming my infrastructure is built heavily on either Oracle, MySQL, PostgreSQL, or a different enterprise-class scalable DB, Vault still requires that I license, install, support, &amp; maintain the MS DB product, and purchase CALS for every person who will be accessing it.   The cost of Vault just became very large, simply to duplicate an already existing PostgreSQL infrastructure.  We could discuss the merits and (dis)advantages of various enterprise DB packages all day, but the essential point is that Auodesk has prevented the Vault administrator from using his tool of choice, and locked him into an expensive path.  And that was not necessary to accomplish the job of the ADMS.  </p>
<p>Migration &#8212; it&#8217;s my understanding that Vault 4 does not have a clean or simple migration to Vault 5.  I&#8217;m hearing that secondhand, never having installed Vault 4, so it&#8217;s possible I&#8217;m incorrect.  The reports i have heard however, describe much conflict, wailinng, and hairpulling.</p>
<p>There _are_ enterprise level EDMS solutions out there (which work somewhat with AutoCAD, and have no ability at all to handle C3D dependencies).  Documentum is one of the largest players in that space.  I&#8217;ve yet to see any information or planning on how to incorparate a project from Vault to Documentum.  Even Projectwise from the Bentley folks has that ability, and a moderate ability to deal with AutoCAD design drawings.  Migration between Vault and a real enterprise EDMS is a mandatory requirement.  Pretending that Vault is a sufficient answer, or ought to be a black hole that consume data but can&#8217;t share it, is not realy a good thing for customers.</p>
<p>Security &#8212; Ok, to be fair securty is something that cannot be judged until the product has been worked on and attacked.  But given the issues identified earlier, I cannot be optimistic that Autodesk managers have any basic understanding of database security.  The default installation that tags everyone as a single SQL user indicates to me fairly well that auditing, edit history, etc were not on the list of important items, at least not in relation to easier installations.  Since ADMS is hardwired to use MS SQL Server, any security flaws in SQL Server will automatically apply to _every_ Vault installation and user.  If that doesn&#8217;t concern you, it probably should.</p>
<p>Any and all of these issues can be fixed.  Most of them are design flaws rather than bug.  But is there any interest in Autodesk&#8217;s part to do so?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: James Wedding, P.E.</title>
		<link>http://www.civil3d.com/2007/04/open-the-floodgates/comment-page-1/#comment-14196</link>
		<dc:creator>James Wedding, P.E.</dc:creator>
		<pubDate>Thu, 03 May 2007 14:32:26 +0000</pubDate>
		<guid isPermaLink="false">http://www.civil3d.com/index.php/2007/04/open-the-floodgates/#comment-14196</guid>
		<description>Fair enough. In this case, though, you have at least two years of Vault in front of you. Isn&#039;t that enough to learn something new and better? In terms of superman, I&#039;d guess he should pick a better password?
 
http://i90.photobucket.com/albums/k246/tygati/worlds_finest/wf311_1.jpg

But other than that, I don&#039;t have much to share. Enlighten us instead of throwing out challenges. The idea is to share knowledge.</description>
		<content:encoded><![CDATA[<p>Fair enough. In this case, though, you have at least two years of Vault in front of you. Isn&#8217;t that enough to learn something new and better? In terms of superman, I&#8217;d guess he should pick a better password?</p>
<p><a href="http://i90.photobucket.com/albums/k246/tygati/worlds_finest/wf311_1.jpg" rel="nofollow">http://i90.photobucket.com/albums/k246/tygati/worlds_finest/wf311_1.jpg</a></p>
<p>But other than that, I don&#8217;t have much to share. Enlighten us instead of throwing out challenges. The idea is to share knowledge.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: JG Gerth</title>
		<link>http://www.civil3d.com/2007/04/open-the-floodgates/comment-page-1/#comment-14192</link>
		<dc:creator>JG Gerth</dc:creator>
		<pubDate>Thu, 03 May 2007 14:18:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.civil3d.com/index.php/2007/04/open-the-floodgates/#comment-14192</guid>
		<description>As a former Workcenter user, I could point out that Autodesk spending significant amounts of money, time, effort, and marketing into a drawing manager only to abandon it later is not unheard of.....  

Vault is interesting, and to someone who has not invested any time or money into enterprise EDMS packages, it may look interesting.  But, if an individual has, then exercising due diligence on Vault will point out a huge number of issues, from security, to migration, to infrastructure.  Conceptually Vault has potential, but the implementation is of great concern.  As an exercise to a vault proponent, explain &#039;superman&#039; and why that would be an item of concern.</description>
		<content:encoded><![CDATA[<p>As a former Workcenter user, I could point out that Autodesk spending significant amounts of money, time, effort, and marketing into a drawing manager only to abandon it later is not unheard of&#8230;..  </p>
<p>Vault is interesting, and to someone who has not invested any time or money into enterprise EDMS packages, it may look interesting.  But, if an individual has, then exercising due diligence on Vault will point out a huge number of issues, from security, to migration, to infrastructure.  Conceptually Vault has potential, but the implementation is of great concern.  As an exercise to a vault proponent, explain &#8217;superman&#8217; and why that would be an item of concern.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: James Wedding, P.E.</title>
		<link>http://www.civil3d.com/2007/04/open-the-floodgates/comment-page-1/#comment-13834</link>
		<dc:creator>James Wedding, P.E.</dc:creator>
		<pubDate>Tue, 01 May 2007 13:43:13 +0000</pubDate>
		<guid isPermaLink="false">http://www.civil3d.com/index.php/2007/04/open-the-floodgates/#comment-13834</guid>
		<description>Vault isn&#039;t going anywhere means that it&#039;s the project management tool of choice for at least a couple of versions. I don&#039;t think they&#039;ve built this tool, refined it for 5 years in the Mechie game, ported it to C3D and Core, to let it go away.

I&#039;ve spoken to sources inside Adesk and Vault is on the product roadmap for C3D for every version that&#039;s been penciled in.</description>
		<content:encoded><![CDATA[<p>Vault isn&#8217;t going anywhere means that it&#8217;s the project management tool of choice for at least a couple of versions. I don&#8217;t think they&#8217;ve built this tool, refined it for 5 years in the Mechie game, ported it to C3D and Core, to let it go away.</p>
<p>I&#8217;ve spoken to sources inside Adesk and Vault is on the product roadmap for C3D for every version that&#8217;s been penciled in.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: mike shick</title>
		<link>http://www.civil3d.com/2007/04/open-the-floodgates/comment-page-1/#comment-13811</link>
		<dc:creator>mike shick</dc:creator>
		<pubDate>Tue, 01 May 2007 09:09:27 +0000</pubDate>
		<guid isPermaLink="false">http://www.civil3d.com/index.php/2007/04/open-the-floodgates/#comment-13811</guid>
		<description>Can you elaborate on &quot;Vault isn&#039;t going anywhere?&quot;  Thanks.</description>
		<content:encoded><![CDATA[<p>Can you elaborate on &#8220;Vault isn&#8217;t going anywhere?&#8221;  Thanks.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: James Wedding, P.E.</title>
		<link>http://www.civil3d.com/2007/04/open-the-floodgates/comment-page-1/#comment-13407</link>
		<dc:creator>James Wedding, P.E.</dc:creator>
		<pubDate>Sun, 29 Apr 2007 03:12:29 +0000</pubDate>
		<guid isPermaLink="false">http://www.civil3d.com/index.php/2007/04/open-the-floodgates/#comment-13407</guid>
		<description>BTW, there was another comment here from a user named cadtag. I searched and could not tie a person to the username. Tell me who you are, and we&#039;ll publish your post. 

Anonymity doesn&#039;t fly at civil3d.com. Own your opinion, or keep it to yourself. 
JW</description>
		<content:encoded><![CDATA[<p>BTW, there was another comment here from a user named cadtag. I searched and could not tie a person to the username. Tell me who you are, and we&#8217;ll publish your post. </p>
<p>Anonymity doesn&#8217;t fly at civil3d.com. Own your opinion, or keep it to yourself.<br />
JW</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: JG Gerth</title>
		<link>http://www.civil3d.com/2007/04/open-the-floodgates/comment-page-1/#comment-13356</link>
		<dc:creator>JG Gerth</dc:creator>
		<pubDate>Sat, 28 Apr 2007 22:00:13 +0000</pubDate>
		<guid isPermaLink="false">http://www.civil3d.com/index.php/2007/04/open-the-floodgates/#comment-13356</guid>
		<description>James,  
The fundamental key to the &#039;relationship&#039; between Autodesk  developers and the user population is that the users are customers.  E.G. the people who pay for the salaries and perks the developers and corporate VPs in Autodesk enjoy.   

Frequently that does not seem to be recognized by Autodesk the corporation.  Occasionally, as in the return of 3dsOut, it is.  But, as a user of Autodesk software, and a paying customer of Autodesk, I do not often see that the customer/user really counts.  Judging from your comments it&#039;s a point you do not see as relevant.  I would hope that you consider your own customer&#039;s interests a priority in your business even if the mega-corporations do not.

MyFeedback is marginally useful in helping the developers locate specific issues, but the design decisions and architectural flaws in the software are predicated on decisions made within Autodesk&#039;s ivory towers with little apparent regard for the customer.  
Many seem driven by internal corporate politics rather than being customer driven.

Just call me a curmudgeon, but I really do expect a better product and better service for my hard earned dollars.</description>
		<content:encoded><![CDATA[<p>James,<br />
The fundamental key to the &#8216;relationship&#8217; between Autodesk  developers and the user population is that the users are customers.  E.G. the people who pay for the salaries and perks the developers and corporate VPs in Autodesk enjoy.   </p>
<p>Frequently that does not seem to be recognized by Autodesk the corporation.  Occasionally, as in the return of 3dsOut, it is.  But, as a user of Autodesk software, and a paying customer of Autodesk, I do not often see that the customer/user really counts.  Judging from your comments it&#8217;s a point you do not see as relevant.  I would hope that you consider your own customer&#8217;s interests a priority in your business even if the mega-corporations do not.</p>
<p>MyFeedback is marginally useful in helping the developers locate specific issues, but the design decisions and architectural flaws in the software are predicated on decisions made within Autodesk&#8217;s ivory towers with little apparent regard for the customer.<br />
Many seem driven by internal corporate politics rather than being customer driven.</p>
<p>Just call me a curmudgeon, but I really do expect a better product and better service for my hard earned dollars.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: MAnderson</title>
		<link>http://www.civil3d.com/2007/04/open-the-floodgates/comment-page-1/#comment-13131</link>
		<dc:creator>MAnderson</dc:creator>
		<pubDate>Fri, 27 Apr 2007 13:31:50 +0000</pubDate>
		<guid isPermaLink="false">http://www.civil3d.com/index.php/2007/04/open-the-floodgates/#comment-13131</guid>
		<description>Glad to hear Mark is doing well! Keep up the good work.</description>
		<content:encoded><![CDATA[<p>Glad to hear Mark is doing well! Keep up the good work.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
