From owner-freebsd-questions@freebsd.org Wed Jun 26 04:40:26 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7BB761598986 for ; Wed, 26 Jun 2019 04:40:26 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mout.kundenserver.de (mout.kundenserver.de [212.227.17.10]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "mout.kundenserver.de", Issuer "TeleSec ServerPass Class 2 CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 5B8788C9D0 for ; Wed, 26 Jun 2019 04:40:25 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from r56.edvax.de ([178.8.37.5]) by mrelayeu.kundenserver.de (mreue107 [212.227.15.183]) with ESMTPA (Nemesis) id 1MqJVd-1iJ7wa25dz-00nPk9; Wed, 26 Jun 2019 06:34:47 +0200 Date: Wed, 26 Jun 2019 06:34:43 +0200 From: Polytropon To: Allen Schaaf Cc: Alejandro Imass , FreeBSD Questions Subject: Re: I've got a major question... Message-Id: <20190626063443.51ad3f1b.freebsd@edvax.de> In-Reply-To: References: Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K1:KYG/QF/ZulclTHkN2gBbsO3EwRPVzWc4phBQA1iO5nz2AhQBG4q fvnP6AHJCh7bWHNUat/S0rUwPVaKoIYh3Uu4SGyE4t/ADKy1FnzpVGKvD32D7rkM6hWH0Gs DryHyKR+6Bn2aA5NWiPWerLahabu7rsbj50PCL2X18xsW++cpgRtiYfo7femc78ah0Bt5cd zntvvr+xyEqr8UANumnlw== X-Spam-Flag: NO X-UI-Out-Filterresults: notjunk:1;V03:K0:QAKPqZrxktI=:xZBuY06d5m7uKUMAd+aVzd xkMnvAqbbFVZ02Si6s6u13tb3abrRneI26p8E9cHYtk6XtHfoaWkRVi3VSKGjf+wdod9sQGfo wFTU2oo/hxDLpo0RHQsUdhVThSdTdLC4dtgZXoFedvrIcgWour3hlJOyFpQwY6PGjFKz76l1j A0yvVXxSzj4tbyY26Z0TnPLl1cBtHj/fVzgBiQLWdjZxhCd7KV96vCuRTvE+kVpiUY6JkitCO OkdMD7BxNQWd86PnY76lTa2UN0NU3Dc/k5dUFl8YTf33Z8s57MBQ/w/V1kHWdVhpWxAezN98W OqyjvEwc+y6p+OyEjprpMukppp5CrmP7mcGjSAPmNO42FK94kK0umDvJq/BzK6ps5Bb2c12LV 3ibpxsdnFioJuzK4R2M3vFoVfdOc8RFDB9k/LkvCRGMDzfWhcbETXSF/7vQSlgyqxpUYQfO8R 29mFjKO94w5FDnqNnu+qu+vc8ve59Hd12nG06sa4fIUX34GaWToIiEpWisXLf9BZ3XipZeWhC lJ1omb35c8llgkcqqIfOfK6myjrIC+UnG1wkY1ps3N4yOaadYJfrI42wTHSd4oFn8OW3bC44v 3RAw08ib0zSdoz/dE9WSDy+hxojJXmnI/jCi8iJRCROTaKiovIZBSMpHfw/Slb/hRf79BFS14 CKV3McW4aewnOlt1WSRod9LZNveBMbYWt7hkVft+16oA/5vWbPCZkZWIjqQjIYZ1zYjclfY00 Q5rYu7yjPHgtLsUAdXRBLTMq/8otilPEXgKjVrLhfii9T1yubPDD8lmu1PY= X-Rspamd-Queue-Id: 5B8788C9D0 X-Spamd-Bar: ++ Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [2.98 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; HAS_REPLYTO(0.00)[freebsd@edvax.de]; MV_CASE(0.50)[]; HAS_ORG_HEADER(0.00)[]; TO_DN_ALL(0.00)[]; MX_GOOD(-0.01)[cached: mx01.schlund.de]; RECEIVED_SPAMHAUS_PBL(0.00)[5.37.8.178.zen.spamhaus.org : 127.0.0.11]; RCVD_TLS_LAST(0.00)[]; R_DKIM_NA(0.00)[]; ASN(0.00)[asn:8560, ipnet:212.227.0.0/16, country:DE]; MIME_TRACE(0.00)[0:+]; FROM_EQ_ENVFROM(0.00)[]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.63)[-0.631,0]; REPLYTO_EQ_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; NEURAL_SPAM_SHORT(0.63)[0.628,0]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[edvax.de]; AUTH_NA(1.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; NEURAL_SPAM_LONG(0.65)[0.646,0]; MID_CONTAINS_FROM(1.00)[]; RCVD_IN_DNSWL_NONE(0.00)[10.17.227.212.list.dnswl.org : 127.0.5.0]; R_SPF_NA(0.00)[]; RWL_MAILSPIKE_POSSIBLE(0.00)[10.17.227.212.rep.mailspike.net : 127.0.0.17]; RCVD_COUNT_TWO(0.00)[2]; IP_SCORE(-0.05)[ip: (-1.32), ipnet: 212.227.0.0/16(-1.40), asn: 8560(2.47), country: DE(-0.01)] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Jun 2019 04:40:26 -0000 On Tue, 25 Jun 2019 11:57:54 -0700, Allen Schaaf wrote: > One of the things I > want to do is use Thunderbird - or a better alternative - for > e-mail for both the staff and the board. This needs to be done > once we either move to Windows 10 or a FreeBSD system. Thunderbird is the common solution to abolish "Outlook" or web-based mailers. Users tend to find it much more intuitive in use, and it provides a basis for higher productivity. Of course there are alternatives, depending on what your users need: Something more lightweight? > Running any financial banking system is a bit more complex than > we think, primarily because we have to meet auditing > requirements. What we do is almost totally local desktops and > printers, plus paper copies of things for monitoring various > things. That could develop into severe problems, two paths: First, "Windows 7" (as you mentioned it) is near EOL and will hardly get any further approval, let alone the required security updates; second, using single-user desktops is always a security nightmare when they run "Windows", even "Windows 10", as the "non-corporate" versions don't offer you the control neccessary. Everything you do will be O(n) where n is the number of installations, instead of doing it O(1) with a centralized server, connected to individual workstations that do not have any local software (!) installed. Backup strategies benefit from this approach, too. And FreeBSD is actually a great foundation to achieve this. Also allow me to mention the high licensing costs - money you spend for no real benefit. > The auditing requirements as to how to do things is more complex > than a small banking system can do totally in-house. All of our > primary record keeping is done on external systems. the two > biggest ones are the corporate credit union Catalyst: > https://www.catalystcorp.org/ and the other one on the financial > end that we refer to as Mercury Mod, a company based in Silicon > Valley - I don't have their correct name so I can't provide a > link. the next major outside service is ADP for our payroll and > help with human resources. How do you interface with them? I know the question sounds stupid, but there are so many ways to do it (send CSV files per e-mail, send optical media via snail mail - yes, I have seen exactly this recently! -, use a web client, use some dedicated specific tool, write your own tool using a library that provides an API, etc.). I think _this_ is the key problem you need to solve (rather than getting rid of outdated "Windows" desktops, which is fairly easy). A FreeBSD installation with a desktop system, generic office productivity software and browsing tools solves many business needs. Additional training for the staff (as it is required with changing versions of "Windows" and "MS Office" is usually not needed). Primary tools will typically include: - Firefox - Thunderbird - LibreOffice You can also create a good pre-configuration that is a "skeleton" for every new user. You can centralize parts of configuration so updates will be available to every user upon login automatically. Depending on where the users "come from", choose the desktop environment and additional tools. FreeBSD offers enough choice to find something suitable. What you also get (as a nice benefit) is that LibreOffice is able to open "MS Office" files that "MS Office" itself has stopped supporting. You can also re-save it in a standardized (!) format. Furthermore, you can use external programs to create (!) standardized office files (typically called ODF - open document format, refering to word processing and spreadsheet files in the first place). So for example, you could have a batch-based, web-based or terminal- based program that requests certain information, calculates stuff, and outputs a wordprocessing file for further use. Or a PDF file, if no change is needed afterwards. Do you require specific external hardware? Check if it is supported. If you have laser printers, they commonly speak PS or PCL; newer ones speak PDF. If neither of the "big 3 standards" is supported, dive into detail (hplip, for example). In worst case, replace the non-printers for something usable. Do you have any other hardware you need to support, like barcode scanners, USB security tokens, label printers? Investigate. > To show you how slow the process of change is, ADP has been used > less than 6 months. Everything was done with hand written time > sheets and spreadsheet calculations and a lot of sloppiness. Here some in-house solution would surely be better. I know certain companies where it is done this way for decades, requires staff (to do things worse that a computer program could do better and faster), and is a "nice" display of "We don't master our tools, but we call ourselves professionals."; for example, data entry is done from scratch (!) each month, and results are calculated manually (!) and then entered into a spreadsheet, which is then printed, carried over to another clerk (!), who then re-enters the numbers (!) into a different system (!), calculate, rinse, repeat, print... I think you get the idea. :-) A key component of your plan should include to spot "bullshit work" you find on your way, and find a better solution. Office PCs with "Windows" and "Excel" seem to foster the growth of this specific kind of "bullshit work". > I'm sure the external systems are on mainframe, possibly ERPs as > well, but nothing we have in-house is either. You commonly interface with the mainframe systems though a kind of "front-end" (as mentioned above). Running _this_ on FreeBSD will probably be one of the tricky things, except of course it is a web interface. -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ...