Re: Running two separate customers in a single partition with complete isolation

I just noticed this discussion. Many good thoughts, everyone.

We provide a multi-tenant web portal and student information system for
schools, which is running on a single IBM i partition. Our users include
school administrators, teachers, and patrons (parents and students).

Our situation is somewhat different than the original poster in that NONE
of our users have IBM i user profiles, nor do we provide access via IBM i
Access, FTP, or any other interface which might require IBM i user profiles.

We don't use iASPs to separate databases. Each tenant is provided separate
HTTP server instances, separate Web Portal instances, several separate
subsystems for separating HTTP and application workloads, and separate
libraries for their data. We call this configuration a "client
environment". We have procedures for "starting" and "ending" client
environments, individually or altogether.

Regarding tooling, we wrote CLLE and RPG procedures to automate the setup
of client environments.

We are in the process of evaluating a tool from a South African company,
Tembo Technologies, which is something of a change management system for
databases. When we make changes to a "master" database environment, those
changes may be automatically replicated to "shadow" database environments.

I would be pleased to show a demonstration of our Web portal and tooling,
if that would help. We have licensed our Web portal to one separate
organization which is using it to host a combination of HTTP and 5250
workloads for multiple tenants.

Nathan.