Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
×
GNU is Not Unix Businesses

How Would You Argue for Open Source? 511

Nate asks: "I am currently working for an international corporation, and the site I am working at was (until very recently) entirely run on Windows. We recently purchased a Solaris server, and I am in charge of setting it up and resetting the global UNIX standard. The problem is that management doesn't want to install software that does not have 24 hour, worldwide support available along with it, yet they want the capabilities that only open source software can provide on a UNIX platform (VNC, OpenSSH, etc..) without spending insane amounts of money. I was wondering how the Slashdot community deals with convincing management that Open Source software is safe to use when creating a global standard, and what your solutions have been to supporting users working with open source software." Two years ago, Slashdot tackled the Enterprise Support question. Now, say you had that particular problem solved and the only thing left is that all-important pitch to Upper Management. What arguments would you use in your attempts to get their approval? What statistics and references would you point to, in order to back everything up?
This discussion has been archived. No new comments can be posted.

How Would You Argue for Open Source?

Comments Filter:
  • by webjedi ( 106085 ) on Wednesday May 07, 2003 @03:28PM (#5904077) Homepage
    I've had the same problem at all organizations I've been at, except for one.

    It usually ended up in me in a shouting match
    • by Anonymous Coward
      I know that there is information available on open source vs ms EULA. the doc I used was in the syndey morning herald. the beauty is, it shows that mgmt doesn't have "hand on throat" with software vendors. Thus, open source is no more risky. Also MSFT has never been successfully sued in 27 years!
      My approach is to address the FUD right up front. Fear of license, fear of lack of support. Guess what? We don't have any now!!!
    • by webjedi ( 106085 ) on Wednesday May 07, 2003 @03:44PM (#5904296) Homepage
      Sorry, trying to get a "first post", and now for more details.

      Anyhow, my tenure has been at a large document and imaging company, a not-for-profit professional organization, entertainment conglomerate, internet security development company, e-learning and training company, a small IT consulting firm, and now a large energy company. The easiest minds, at least I encountered, were at the small companies, less levels of crufty management to deal with. It also counted that I had a bit of autonomy in driving the technology vision, mainly because whatever I was tasked with "had to get done". So, I think size combinied with mission critical decisions may help leverage a case.

      The "shouting" match occurred at the entertainment company and at the not-for-profit. The first was in the case of some top brass brought in to trim budgets, where we had everything successfully running on open source stuff (which used to run on expensively leased Sun hardware [E250] and software) but was moved to some discarded Acer desktops and FreeBSD. THe stuff ran better and without any hassles on the open source stuff, but because these jokers couldn't get out of their lease with Exodus for the hardware, I was told to support the Sun environment or walk out the door, I chose the door. The latter, in the not-for-profit, the shouting match there ocurred with one of the three (yes three) IT Directors we had there during my tenure. He didn't like the idea of open source at all, in fact, that old argument of "I can get a manager from Sun on the phone 24x7" for support was met with my retort "yes, but can that manager ever give you a technical solution. WHen was the last time he sat in fron of an E450 wondering what happened to the OS when it took a dump". It was later brought up that the organization supposedly didn't run any open sourced software for important tasks (he'd been there about 4 months at the time) and I think he took a look at our SUn, Windows, and Apple machiens at the time and thought that, but I said... "well, what about Sendmail...", he replied, "well, that's and exception...", "then how about BIND?","um, well", "and Perl?!", "well, that's not... but um..."... suffice it to say, making him look bad during a pissing contest in front of his subordinates in the meeting room was not a good way to intorduce myself. He later quit after not feeling he "fit in" to the organization (that, and he physically assaulted me when a hacker broke in through a few of their misconfigured Windows and Sun servers, then got yelled at by the president of the organization... I think his name was Terry White)

      I think the best thing to do is to subtlely play to Open Source software's strengths... I wish you well.
      • by mdfst13 ( 664665 ) on Wednesday May 07, 2003 @11:14PM (#5907616)
        Red Hat's primary business is support, unlike MS which regards its primary business as writing code. The biggest difference between commercial open source support and proprietary support is that there is *more* support for open source software. Why? Because open source code is supportable by more than just the original vendor. You want support? You can hire the original coder or a third party. You can choose to debug the code yourself, add features, or change features. You have options.

        What options do you have with proprietary software? Well, you can guess at what's causing the problem and change configurations. If the problem is an actual crash or something, you can reboot, reinstall the offending program, reinstall the OS. If none of that works, you can call the vendor (who will start by having you follow those three steps, along with applying patches, blame the hardware, etc.). The vendor may or may not be able to help you. Further, it is entirely up to them whether they give you real support or not (for example, if behavior is considered to be a feature, you cannot make a software vendor change the behavior). If they choose not, then there is no recourse for you (other than switching software).

        A university where I worked considered switching to one of those MS license all your software from us and we'll give you a really great deal. As part of that, they considered moving the yellow page servers to the MS product. The deal was sold, they were ready to start. They asked MS to make a tool that would convert a flat text file generated from the information stored in the previous software's format into the MS format and MS refused. They had a nice point and click interface, and they expected the university to manually retype 60 *thousand* accounts with it. An overnight batch job would have become a multi-month project. Yellow pages info now resides on OpenVMS boxes with a custom written interface that took a couple of weeks to design.
    • It usually ended up in me in a shouting match

      "d00d, LiNux iz ub3r!! M$ W1nd0ze sux0rz!!!"

  • by Red Warrior ( 637634 ) on Wednesday May 07, 2003 @03:31PM (#5904112) Homepage Journal
    "We'll have access to the source code, and be able to update the app as needed due to new requirements or OS upgrade."
    Worked for me.
    • That argument only works assuming you have people in your company who actually have the skill to play with the source code. It seems that the longer I'm in this field, the more apparent it becomes that there are only a small number of people who actually know what's going on when they look at code, and maybe a smaller number who have actually have the skill to modify it to their needs.
      • A valid point, although you can always find contract programmers to do the programming work for you. The fact that you have the source, and can do whatever you like with it, is the important bit. Whether you have people in-house to do it or not is irrelevant.
  • by BillsPetMonkey ( 654200 ) on Wednesday May 07, 2003 @03:31PM (#5904113)
    if they want to take responsibility for aligning their IT strategy to their business objectives, or their systems provider's.
    • by TopShelf ( 92521 ) on Wednesday May 07, 2003 @05:57PM (#5905577) Homepage Journal
      I'd recommend taking the opposite approach. Propose that the company align their strategy with the systems provider, emphasizing their expertise and services that are worth every penny of their seemingly high cost. Then watch as the PHB's start talking about less expensive alternatives...
  • by dwheeler ( 321049 ) on Wednesday May 07, 2003 @03:31PM (#5904114) Homepage Journal
    For statistics about open source software / Free Software, see my paper, "Why Open Source Software / Free Software? Look at the Numbers!", at http://www.dwheeler.com/oss_fs_why.html [dwheeler.com] . It has a large collection of information you'll probably find useful.
    • by nick this ( 22998 ) on Wednesday May 07, 2003 @04:01PM (#5904480) Journal
      The article mentioned in the parent is a good one... I've used it successfully in several seminars on value proposition of open source software. It's generally been very well received.

      As far as arguing with upper management, when I was working in cubeville, I never worried about it. I just implemented it the best way I knew how, and presented it as a completed solution.

      Once the solution is in place, nobody ever seems to worry about it. Then at some point in the future, it's easy to point to it and say: "but we've *been* using open source all this time, and don't have problems with it".

      I think that's still the most successful implementation strategy. It's the one Microsoft used for pushing Novell out of mid-sided businesses.

  • by Binestar ( 28861 ) * on Wednesday May 07, 2003 @03:32PM (#5904122) Homepage
    Show your boss how easy it is to ind online troubleshooting documentation for the various software packages you are proposing to use, as well as documenting the entire install so a monkey could reinstall the software if something breaks.

    Your company wants to make sure that anyone who might administer those servers has access to the information they need to fix any problems that come up if the person who initially installed the software falls off the earth.

    A 24hour support line is one method of getting that support, you just have to show that there are other less expensive support routes that are just as viable.

    If need be remind your boss that it is your ass on the line if something goes wrong with the servers and you'll be the one showing up to work at 4AM on a Sunday to fix the issue.
    • by Lemmy Caution ( 8378 ) on Wednesday May 07, 2003 @03:46PM (#5904319) Homepage
      Your reply indicates a very small department or small business approach to things. It really isn't applicable. The moment you tried to do a demo of an install, you'd be laughed back to the tech support trenches from which you came.

      These are the real issues: there's a way that corporations work, a corporate culture which is comfortable with familiar things and very, very uncomfortable with unnecessary risks. Using the traditional vendors - Oracle, Sybase, HP, Compaq, Cisco, Microsoft, Sun, IBM, SAP etc. - means dealing with other corporations like themselves, with all the systems of accountability you associate with them. With few exceptions, dealing with open source solutions means dealing with grad students' summer projects - perhaps very well written ones, but with no real systems of accountability, no roadmaps, no certifications (except very questionable third-party ones) and so on.

      The way to sell open-source is *not* to sell open source. It's to sell complete, integrated solutions built on open standards (that just happen to be free - although I wouldn't even mention it, since most everyone believes you get what you pay for) - you quote a cost for the *total solution,* hardware and software, training and support and TCO over n years, versus the cost of the existing solution, and you enumerate - and, if possible, quantify - the problems of an existing, closed source solution and the benefits of the new solution. That's *it.* If you want to go on after that, have case studies handy, the more the better. Do *not* talk about installers or Gnome or skins or distributions or customizability or network transperency or anything like that - you'll sound like an idiot.
      • So my company is a private-non-profit research institute who won a large grant from IBM. That means that we had IBM come and install some big iron. And I worked with them to set up a DB2 server application, which is not yet released.
        And when they sent me install instructions it was often pages of: ln -s, perl scripts ( some of which I wrote ), etc.
        So if someone is laughing at your install instructions because it is *gasp* box specific, then they really don't know shite about how stuff actually gets don
      • back down, tiger. (Score:5, Interesting)

        by twitter ( 104583 ) on Wednesday May 07, 2003 @05:36PM (#5905386) Homepage Journal
        Binestar was answering the orignial poster's question about "24/7 support" for free software. He points out that Google is open 24 hours 7 days a week anywhere you have internet. Anyone who'd tell you that Google is not the best place to find answers is dishonest. Even if you are stuck with the most back water closed source propriatory nightmare, Google will find you a contact. Binestar got that right.

        I did not see anything about demos, installs or Gnome skins outside of your flames. Nor was there any good reason to flame free software as a "summer project".

        Your points about presenting a whole solution are useful when you need to replace a whole system in a lethargic micormanaged work environment. All that "Oracle, Sybase, HP, Compaq, Cisco, Microsoft, Sun, IBM, SAP, etc ... certifications" blah blah is so much dated marketroid bable with good bad and out of business mixed up. Wake up boss, HP is Compaq, Microsoft is worthless, Sun is good and IBM uses Linux. Well, OK, You've got a point about selling a "solution" in such an environement. It's negligence to not do your homework about the bottom line anywhere.

        At the same time, it's a good idea to talk to people you trust about what free software is all about. It is important that management understands that free software is simply a co-operative community of software writers and users. They should know that such communities have always created the software that some companies tried to comercialize in a closed source way in the 1980s. The closed source experiment is just about out of gas, becasue the free software community has ignored it to create viable alternatives. Corporate managers understand co-operative research as well as they understand bottom line issues. Free software is not such a great leap at reasonable companies and most people are tired of being jerked around by comercial software pimps.

    • by Havokmon ( 89874 ) <rick@h[ ]kmon.com ['avo' in gap]> on Wednesday May 07, 2003 @03:59PM (#5904458) Homepage Journal
      If need be remind your boss that it is your ass on the line if something goes wrong with the servers and you'll be the one showing up to work at 4AM on a Sunday to fix the issue.

      No kidding. Upper Management never seems to remember it's not THEM building the network, it's you. So they're concerned about how THEY will look if something does work, well, that goes both ways. If YOU are setting up a crap network, not only will you be the one coming in on off-hours to repair it, but your voice will carry less and less weight as it gets worse and worse..

      That actually piggy-backs the consulting Ask Slashdot from a few weeks ago.. If you're going to get stuck supporting garbage, and you know it, speak up! While the money may be good in the short term, the company will probably pay someone else to put something new in because you've been associated with the garbage.

  • by mental_telepathy ( 564156 ) on Wednesday May 07, 2003 @03:32PM (#5904123)
    It seems odd to me to decide on a solution and then develop arguments to use that solution. IT is generally a service provider for business needs. You present the business users with the available options, outline the pros and cons, and allow them to decide. The other danger of engaging in proseletyzing is that if something goes wrong, everyone will be quick to point out the guy who did all the yelling about open source.
  • Buzz words. (Score:4, Interesting)

    by The Ape With No Name ( 213531 ) on Wednesday May 07, 2003 @03:32PM (#5904125) Homepage
    When telling my boss why it would be foolish to use Oracle for a web content database when MySQL is cheaper and faster (I know, I know), she wanted to know what the TCO is on it. Huh? I just said it was free other than labor. "Well I'll have to talk about TCO. My bosses don't believe that OSS is actually free." I wish they would just leave me alone and slip the checks under the door....
    • She's right. (Score:5, Insightful)

      by Jammer@CMH ( 117977 ) on Wednesday May 07, 2003 @03:35PM (#5904165)
      Well, she's right. There is a TCO - the cost of your labor.

      So give her estimated labor costs of installing and supporting MySQL vs cost of purchasing, installing and supporting Oracle. Don't forget hardware costs.

      • And she is smart enough to know what "free other than labor" means. Her PHBs refuse to beleive that you don't have to pay for the software.
      • Re:She's right. (Score:5, Insightful)

        by sql*kitten ( 1359 ) on Wednesday May 07, 2003 @03:55PM (#5904418)
        So give her estimated labor costs of installing and supporting MySQL vs cost of purchasing, installing and supporting Oracle. Don't forget hardware costs.

        And don't forget to include the cost of porting your app to Oracle when some developer finds he has to use a subselect or a trigger or a distributed transaction :-)
        • Re:She's right. (Score:3, Insightful)

          by NineNine ( 235196 )
          And don't forget to include the cost of porting your app to Oracle when some developer finds he has to use a subselect or a trigger or a distributed transaction :-)
          Well, you know it's not gonna be the guy who suggests MySQL, because he/she doesn't know shit about databases. ('What's a trigger?').

          Good post. Wish /. hadn't cut me off from modding long ago.

          Back to PL/SQL...
      • Re:She's right. (Score:5, Informative)

        by MmmmAqua ( 613624 ) on Wednesday May 07, 2003 @05:03PM (#5905078)
        Um, I'm all for MySQL (we use it locally on my company's web servers), but are you also going to estimate the labor costs involved in recovering a failed MySQL database, or the labor costs involved in making MySQL fault-tolerant?

        MySQL has many strengths, but reliability on an enterprise scale isn't one of them. MySQL is best suited for "edge" services, or for convenience services in-house. Oracle may gouge you for every cent they can, but there really aren't any databases that can compete with Oracle for enterprise features.

        That said, TCO shouldn't be one of your arguments. In my experience, the best arguments address the suitability of the package/software to the problem, the ease of deployment, and scalability. Every time I've heard someone bring up TCO, somebody else asks about support. And USENET is not a suitable answer for most technical directors. If your company uses Oracle, BTW, you should point out that Oracle's recommended platform for new installations is Linux. You don't get a much better endorsement than that (at least, as far as your bosses are concerned).

        #include "disclaimer.h"
    • Re:Buzz words. (Score:5, Insightful)

      by t0ny ( 590331 ) on Wednesday May 07, 2003 @04:28PM (#5904730)
      When telling my boss why it would be foolish to use Oracle for a web content database when MySQL is cheaper and faster (I know, I know), she wanted to know what the TCO is on it. Huh? I just said it was free other than labor. "Well I'll have to talk about TCO. My bosses don't believe that OSS is actually free." I wish they would just leave me alone and slip the checks under the door....

      This is why most pure tech people generally cant get things done (or done "technically" right); because they sometimes have an inability to provide things that are asked for.

      Management and Tech are two different languages. Your boss was telling you how she wanted to explain it to HER bosses, and you basically said "oh, I dont feel I need to". Well, when she doesnt feel like listening to your suggestions in the future, you will know why.

      I get ahead by making my boss's job easier, not harder.

    • Re:Buzz words. (Score:4, Insightful)

      by Fastolfe ( 1470 ) on Wednesday May 07, 2003 @04:43PM (#5904880)
      But she has a perfectly valid point. When MySQL breaks, are you the only/best option for fixing it? Do you really consider yourself that much of an expert that you could handle any conceivable problem that you might face? What if a hardware problem causes data corruption? Would you know how to recover from that? What if a library incompatibility comes up in the future and breaks MySQL. Would you be able to troubleshoot that and get the database back up? How long would it take you to do that? What if you run across a problem you have no idea how to resolve? Are you confident enough in your ability to find a solution via newsgroups or mailing lists?

      Now what happens when you're on vacation? What happens when you've left the company? How does additional staffing (and training, since it may be very difficult to find a MySQL guru as smart as you might be) factor into your costs?

      The point is, from an enterprise management perspective, things aren't as simple as some of us think. We think, yah, I can support this pretty easily. I haven't had a problem yet with it that I haven't been able to resolve (given enough time). Now ask yourself if that's sufficient for the project, or if you're going to need something or someone else to fall back on.

      The "guru" support model works very well for smaller businesses, but frequently has major problems scaling to support an enterprise.

      Now, I'm not saying that you (or someone else) might not have problems with this anyway (given that MySQL is actually fairly popular), but others reading this might not have the same luck with any OSS project. Just because the source is available doesn't mean it's cheaper to use than a commercially-supported product.
  • by diatonic ( 318560 ) on Wednesday May 07, 2003 @03:32PM (#5904131) Homepage
    I guess it depends on how much money is considered 'insane'. RedHat offers support, HP sells contracts supporting Linux... I would think the support costs would not exceed a comparable contract supporting Windows systems.

    .:diatonic:.
  • by ibirman ( 176167 ) on Wednesday May 07, 2003 @03:34PM (#5904151) Homepage
    If your company wants to pay for support, find out who the lead programmers are on the project and pay them a monthly fee to be available for support. Everyone wins...

    • by GlassHeart ( 579618 ) on Wednesday May 07, 2003 @04:08PM (#5904536) Journal
      find out who the lead programmers are on the project and pay them a monthly fee to be available for support.

      First of all, this may not be possible at all. The people in question may have full time jobs, or other commitments that prevent them from offering personal support. In many cases, these people may not even live in the same country or even time zone as you.

      Secondly, good programmers don't necessarily make good support staff. They may simply not enjoy the work.

      Thirdly, you're imagining a low monthly fee for support. Big commercial vendors can afford a low fee because you don't really need their services most of the time, and the cost of their staff is amortized over many clients. A programmer who needs to stay on-call for you 24/7 may cost a lot more than commercial support, which can defeat the cost savings of using free software.

      Finally, your idea obviously doesn't scale well at all, once more than a few companies do this.

      • Slow down there, young fella.

        It may not work some of the time -- hell, it may not work most of the time.

        But, if it works just a few times, everybody is indeed a winner. The developer (team?) gets some extra dough to work on what has been happening for free. The business gets some support. The developer gets feedback on what's buggy / slow / needs improving. The business knows it has the expert if it wants to spend a little cash and get additional features.

        I agree, it won't be the ideal route very oft
  • Oooh I know (Score:2, Flamebait)

    I'd whine and bitch about how bad M$ is, I'd point to the Developers Developers Developers movie, I'd make fun of Bill G's hairstyle, anything other than features or facts! After all, that's how open source is usually promoted.

    Troll? Hardly, perhaps a flamebait, but go look at the longhorn story [slashdot.org], then tell me I'm wrong...

  • Superior! (Score:3, Insightful)

    by Zo0ok ( 209803 ) on Wednesday May 07, 2003 @03:35PM (#5904167) Homepage
    I would say, after working in a commercial project seeing how RUP, non tech project managers, budgets, time limits and politics affects how commercial software is written, it is obvoius why open source often is superior. I mean, people being genuinly inspired when coding, projects being truly tech-oriented, programmer puts his own pride and reputation behind the code, and no budgets or time constraints - no doubt that generates good stuff.
  • by jasonditz ( 597385 ) on Wednesday May 07, 2003 @03:35PM (#5904169) Homepage
    Just because its open source doesn't mean there's not someone offering support on it. I'm sure if you pay enough you can get 24-hr support for about any piece of OSS.
  • by Funksaw ( 636954 ) on Wednesday May 07, 2003 @03:35PM (#5904170)
    Talk about two things:

    Cost: Cost of rollout of a commercial product is comparable or more than the cost of 3rd party support contracts for open software.

    Risk Management: Buying proprietary software gives you support, but the support is with a monopoly supplier who can then choose to charge whatever it wishes down the road for both software upgrades and support. Tying yourself to a monopoly supplier is a poor risk, since every move a monopolist will make will not be for the benifit of your company, but for the benifit of thiers. Similarly, with Open Source, since our company has the right to modify the software, every change you make will be for the benifit of your company.

    Upper Management does not grok Geek. Upper Management groks Dollars and groks Risk.

    Just keep that in mind.

    -- Funksaw.
  • redhat (Score:4, Informative)

    by asv108 ( 141455 ) * <asv@@@ivoss...com> on Wednesday May 07, 2003 @03:36PM (#5904175) Homepage Journal
    Redhat AS has a 24x7 support option [redhat.com]. I'm sure there are quite a few 3rd parties that offer 24x7 Linux support as well.

    that only open source software can provide on a UNIX platform (VNC, OpenSSH, etc..)

    VNC and OpenSSH are available for windows so they might not be convincing. Try using ROI and TCO as persuaders.

    • Re:redhat (Score:5, Interesting)

      by Pop n' Fresh ( 411094 ) on Wednesday May 07, 2003 @03:42PM (#5904269)
      Microsoft's license agreement for Win XP makes it illegal for you to use any desktop remote control software other than Microsoft's built-in stuff. That means that if you use VNC to control an XP box, you are in violation of the license agreement. It also states that you can't access an XP machine from anything other than another XP machine. From the license agreement:

      "Except as otherwise permitted by the NetMeeting, Remote Assistance, and Remote Desktop features described below, you may not use the Product to permit any Device to use, access, display, or run other executable software residing on the Workstation Computer, nor may you permit any Device to use, access, display, or run the Product or Product's user interface, unless the Device has a separate license for the Product."
      • This sounds like great grounds for web conferencing companies like WebEx, GotoMyPC, etc. to sue Microsoft for Sherman Anti-trust Act tying violations. Particularly since Microsoft purchased one of their competitors, PlaceWare recently.

        Triple damages, mmm.

        --LP, who doesn't mind MS software actually, but *hates* the EULAs coming from that lawyer's-son Gates.
      • Re:redhat (Score:3, Interesting)

        by medeii ( 472309 )

        Except that it's not technically illegal: I'm not using the Product (Windows XP) to permit another Device to use/access/etc. the host computer, I'm using a different program. Similarly, their restriction on using other devices to use/access/etc. the operating system is so overly broad as to be completely unenforceable. Under the terms you quoted, technically you'd need another license for your monitor, mouse, and keyboard. Each. Additionally, do you really think they would get away with requiring separa

  • IBM (Score:5, Insightful)

    by sql*kitten ( 1359 ) on Wednesday May 07, 2003 @03:36PM (#5904184)
    Now, say you had that particular problem solved and the only thing left is that all-important pitch to Upper Management. What arguments would you use in your attempts to get their approval? What statistics and references would you point to, in order to back everything up?

    I wouldn't even bother. I would call the local IBM Global Services office and ask them to pitch for the job, and dangle the carrot (whether it exists or not right now, it might to in the future) of outsourcing the management of said Open Source infrastructure to them. I assume that you don't actually care who runs it from day to day just so long as it's Open Source. They'll make a far more convincing argument that you can alone - remember they employ people full-time to do nothing but research and put together fancy presentations (as do all consulting firms... you don't think the slick performers doing the presentation will actually show up to do the work, do you?).
    • Unfortunately IBM isn't very likely to want to support OpenSSH and VNC. They will probably want to sell you some of their support tools.
      • Unfortunately IBM isn't very likely to want to support OpenSSH and VNC. They will probably want to sell you some of their support tools.

        I've worked with IGS before. They aren't in any way constrained to use IBM technology, they're a completely distinct P&L. Last job I used them for was implementing BEA WebLogic on Suns! They'll do anything they can make money at.
        • Re:IBM (Score:3, Insightful)

          by Jason Earl ( 1894 )

          IGS has a good reputation for supporting whatever you happen to use. However, you can't expect the fine folks at IGS to be real excited about selling your boss on the idea of using OpenSSH and VNC. Those guys are salesmen, and they will undoubtedly see that your boss is wavering on the idea of using Free Software to fill important roles. A few quick sales pitches from the folks at IGS about some really neat IBM tools and VNC and OpenSSH are torpedoed (never mind that VNC and OpenSSH would be cheaper and

  • First, there is no one size fits all canned argument. You need to identify a few things before you even ask this question:

    1. For what kind of server[s] do you want OSS adoption
    2. How many of them are deployed
    3. etc etc

    Then, rate these in order of importance, and your bullet point cost/benefit arguments to the director or executive will be more succinct. You see, you don't want a hodge podge of OSS evangelizing, you want relevant points given the specifics of your organization.

    Or, if you just really want
  • Testimonials (Score:5, Insightful)

    by 4of12 ( 97621 ) on Wednesday May 07, 2003 @03:36PM (#5904191) Homepage Journal

    What you need are testimonials from others running mission-critical applications using FOSS.

    One Fortune 500 executive won't achieve comfort with this kind of a spending and deployment decision (face it, they don't know the tech) until, unless, and, only if, they have seen more than one other Fortune 500 executive put their own necks on the chopping block, made a courageous decision, and have it succeed wildly with no glitches whatsoever.

    Getting those testimonials might be hard for an individual on their own ("Mr. Big's office, how may I help you? Right...."), but the web is full of articles showing different businesses using FOSS successfully.

    If you were tied into a vendor with a lot of FOSS contacts (eg, RH, IBM), then they could probably help you find those important reference testimonials. Sun is late getting on board the FOSS bandwagon, despite having produced a lot the standards and technology that has made it possible. Their Solaris servers will run FOSS just fine and interoperate with Linux machines, etc.

  • by tdemark ( 512406 ) on Wednesday May 07, 2003 @03:37PM (#5904204) Homepage
    ...give it to them:

    Form a new company with you as the only employee.

    Submit monthly invoice for $50,000 to your current company for "OSS Platinum Support".

    Sit back and watch the money roll in.

    This works to your benefit since they'll probably call you at all hours of the night to initiate the support call, anyway...

    - Tony
    • not just funny, but true. Hell, it's not a bad idea at all. Some companies don't realize (most companies in fact) that those people they hire to work on the computers are not just there to swap out faulty hard drives. I can't help it that companies are so sold on the concept of outside sources for support that they cannot understand that their linux tech can do that. perhaps they can't bear not having something external to blame in front of shareholders.
  • by dtolton ( 162216 ) * on Wednesday May 07, 2003 @03:38PM (#5904213) Homepage
    There are so many different angles to attack this issue from, and unfortunately there are more sides to the issue than we'd like to admit. However I think there are several areas that would be good to discuss:

    - Closed source has more bugs, and the exploits are typically more severe.
    - Actual turn around time for Closed source is much slower than open source for new features and enhancements.
    - Closed source hampers IT productivity as the fear of sharing "Intellectual Property" infects and permeates many people that work in closed source environments

    one of my favorite all time articles is written by Clay Shirky, entitled In Praise of Evolvable Systems [shirky.com]

    This article addresses what many people consider to be open source's weekpoint. It is however it's strongest point. This is a fantastic read and is a must in any presentation to management about open source and open standards in general.
  • by mattsucks ( 541950 ) on Wednesday May 07, 2003 @03:38PM (#5904214) Homepage
    software that does not have 24 hour, worldwide support available along with it

    ... and say hello to the 24 hour, worldwide support team.
  • by ciurana ( 2603 ) on Wednesday May 07, 2003 @03:38PM (#5904220) Homepage Journal
    Greetings,

    We have a number of clients, from mid- to large enterprises, who have switched to *NIX/Linux over the last 3 years following our advice. The key for us was to define quantifiable targets in terms of $$$ and time-to-resolution, and kept statistics of similar environments running Windoze or commercial *NIX software.

    Two test cases that immediately come to mind are Samba and VNC. In the first case the monetary quantification was instant: $0 against licenses for a 75-person department. There were no calls to support at all once we switched the servers. For the VNC case at another company, we pitted it against PC Anywhere. Once users understood the new logon sequence, they began champion VNC by themselves because they realized that *NIX machines and Macs were opened to their control, some of which had been closed before.

    Both of my examples focused on solving specific problems, with a set time line and quantification targets. Don't try to implement everything in one single deployment because if something non-mission-critical breaks that affects a mission-critical app or service you'll invalidate your own case.

    Good luck and have fun!

    E
  • It's not about being easy to support. Windows can be quite hard to "support." It's about having your ass covered, so if your website or intranet goes down, you have someone to sue for all the thousands of dollars per second you lose.

    We all know *NIX is easy to administer and troubleshoot. That's not the problem.

    Consider a company that contracts out support and/or deployment. They'll be more or less liable for downtime.

    • Re:Fellas, (Score:3, Insightful)

      by Kpau ( 621891 )
      Will someone please point to ANY example of a successful lawsuit against Microsoft (or IBM/Sun/HP for that matter) for producing faulty software that impacted someone's business???

      The whole "gives us someone to blame" is a complete crock of manure. I used to write software for government apps... they always built a one year warranty into the product. Guess what we spent most of our time doing? Trying to prove a reported bug was actually a request for a new feature.

      As far as contract support goes... tho
  • It was easy (Score:3, Funny)

    by SomeOtherGuy ( 179082 ) on Wednesday May 07, 2003 @03:40PM (#5904229) Journal
    A small presentation showing the cost of Microsoft Word VS. gvim on 5000 desktops should be a good start. (And yet there is still that grumpy old guy with the beard who insists on compiling Emacs on all the servers....errr...)

  • by jonfelder ( 669529 ) on Wednesday May 07, 2003 @03:41PM (#5904250)
    If your company wants 24/7 support go with a company that provides linux solutions. Buy IBM servers with linux on them and get a support contract. Likewise some Linux distros like RedHat provide 24/7 support contracts.
  • by Neck_of_the_Woods ( 305788 ) * on Wednesday May 07, 2003 @03:41PM (#5904253) Journal
    My software is free and that makes it better..NEENER NEENER NEENER!!!

  • You just can't beat (Score:5, Informative)

    by PotatoHead ( 12771 ) <doug.opengeek@org> on Wednesday May 07, 2003 @03:41PM (#5904255) Homepage Journal
    this guy if you want all the Microsoft dirt present and future.

    http://www.aaxnet.com/editor/edit021.html

    That is his latest. Look around on the site a little. Lots of stuff there with many current references.

  • "sir, we should open source this because in building you something proprietary i will be giving myself job security. you will need me forever." ;-P
  • What statistics and references would you point to, in order to back everything up?


    CIO: My techie's say that UNIX is the best and is backed up by the entire Slashdot community.
    CEO: Your telling me that you trust techie's over marketing droid's?
    CIO: Yes, sir.
    CEO: Your fired. Have a nice day.

  • Updates (Score:5, Insightful)

    by Jason1729 ( 561790 ) on Wednesday May 07, 2003 @03:44PM (#5904288)
    MS has stopped releasing security updates for NT4, so companies using it are forced to decide between having security holes or paying MS for a newer version that locks them into a more draconian license agreement. How long until your company faces the same problem with whatever version of windows they use?

    With open source, you can patch whatever version you're running, or just upgrade whatever is necessary without the draconian eulas.

    Jason
    ProfQuotes [profquotes.com]
  • "Evangelism" originally (and stil does) refer to the behavior of spreading religious fervor. This is no coincidence.

    Please preach your religion somewhere else.

  • by fudgefactor7 ( 581449 ) on Wednesday May 07, 2003 @03:45PM (#5904302)
    They'll ask you "Why go with Solaris over any other Unix variant?" Better have that answer.
    They'll ask you "Why not Linux?" Have an asnwer.
    They'll ask you "Will it work with our existing Windows infrastructure?" Answer that as well.
    They'll ask "How much will the rollout cost?" Better have those figures handy.
    They'll want to know "Why not just stick with Windows, especially since Windows 2003 is about to ship?" Have a retort ready for that.
    They'll want to know (if they're savvy) how the data crunching numbers will compare UNIX to Windows, MySQL to MS SQL. You'll want that handy, too.
    And finally, they'll want to know why should they switch to a different platform when they're already so heavily invested in Windows. Got an answer other than "Windows sucks"? You better know those things, becuase bosses aren't about to "just take your word for it" they demand facts, figures, and spreadsheets for proof--and if anything goes wrong it's your ass. Switching is fine, but you better be ready for the backlash and have oodles of proof ready or the resistance will be an unsurmountable chasm.
  • Easy. Stop making it a big deal. What you are meant to be providing is a solution that suits your company's IT needs. You are not the company Open Source advocater, shouting blue murder every time someone implements a system which isn't open source.

    Use clear cut facts. Show the TCO, show the support channels, show the migration cost and schedules, provide a backup plan if things go pear-shaped, etc. Basically, the FACTS. And while you are at it, keep your own mind open. Y'know, often, closed sou
  • by Zebra_X ( 13249 ) on Wednesday May 07, 2003 @03:46PM (#5904315)
    Before you go to upper management find out how much the non-open source applications are going to cost. Factor in any consulting fees for setup. Then factor in the cost for global support on an ongoing basis over say the course of the next five years. I'd also suggest adding in any special hardware requirements.

    Next find your open source "products". Then find developers who are very comfortable with the "products" that you are recommending. Factor in the cost of hiring them and their salary on an on going basis. They will be your "support" team. Also factor in hardware if needed.

    The first hurdle is to prove that it will cost less or at the very least no more than the "off the shelf" products. Then you'll need to put your sales hat on and do a side by side "feature comparison" of the OSS alternatives to the products that you evaluated.

    Most of all, be objective and very matter of fact about your presentation. Prove to them that OSS is the way to go becuase it costs less to aquire and maintian and has an equal or superior feature set. Apache is a great case study...

    Good luck!
  • Comment removed (Score:4, Insightful)

    by account_deleted ( 4530225 ) on Wednesday May 07, 2003 @03:46PM (#5904324)
    Comment removed based on user account deletion
  • Sun's solaris comes with quite a few supported Free and Open Source packages, and if your boss doesn't like that he can pay for Sun's own equivalents (or from other vendors) as he sees fit. Note that Sun actually supports some Free and Open Source software in the same was as it does its own; however it also ships unsupported free software. Don't get the two confused.
  • My experience (Score:5, Insightful)

    by cvd6262 ( 180823 ) on Wednesday May 07, 2003 @03:49PM (#5904341)
    I work at a university, and over two years ago, they asked me to help evaluate authoring systems for online courses. One of their requirements was that the company we chose needed to be willing to partner with the institution to extend the capabilities of their software to meet our needs. We gave several suggestions, but I told them they should get on board with MIT's OKI and OpenCourseWare.

    They had two concerns about open source solutions: 1. There is no company behind most open source solution. No company means no tech support. 2. OKI was just getting off the ground and would not be ready for prime time for a while.

    Over a year later, the university finally chose a company to go with for their authoring system. We paid for a 30-day trial and got 5 days into it before we realized their marketing people had straight-up lied about its feature set.

    So, we went with the company our university had ranked number two on the list. We worked with them for 6 months, hired one of their people to work for them on a university paycheck, and gave them a substantial fee every month for licensing. Then the company decided to get out of the authoring systems market, pulled our license and left us with nothing.

    In the meantime, OKI has picked up steam, and the 11 universities that got on early with them have been developing solutions that will soon be GPLed.

    The long-short is that having a company behind the product is a double-edged sword. Sure, they could give you tech support, but what happens if/when they're gone?
  • by AwesomeJT ( 525759 ) on Wednesday May 07, 2003 @03:52PM (#5904381) Homepage
    In the beginning, no large company would use Apache because it was open source and therefore was not supported by any specific company. Nice thing about OSS is that large projects like Apache are supported 24x7 worldwide by MANY companies -- so if one company provides poor support, you can use another one. BTW, Apache is up to 63 percent of all websites now. :-) And now that it runs on windows, it will become even more popular. Same is true for Linux which has the backing of many large companies, so there is no shortage of technical support. And I haven't even touched on the web forums, newsgroups, list servers, websites, of free support avialable. And traditional media too -- books, magazines, etc all cover OOS projects like Apache, OpenSSL, Linux/*nix, etc. Support is not an issue. I think the reliablity factor of running on a *nix platform will help a lot.
  • by tempest303 ( 259600 ) <jensknutson@@@yahoo...com> on Wednesday May 07, 2003 @03:54PM (#5904409) Homepage
    I'm a little surprised this hasn't come up yet...

    If you're looking for "enterprise" level support (God I hate that word!), Red Hat [redhat.com] offers exactly what you're looking for, from what it looks like. Maybe you should give Red Hat a call and get one of their sales people to pimp themselves to your boss? :)
  • by mseeger ( 40923 ) on Wednesday May 07, 2003 @03:55PM (#5904420)
    Hi,

    "Worldwide and 7*24h Support" and "Open Source" are no contradictions. I think we (NetUSE [netuse.de]) are not the only company to offer support for Open Source products like SSH, Squid, Apache etc.

    Typical customers purchase support like helpdesk, patch services or (espescially for Solaris) packaging.

    It's not a lot of work to offer SSH packages that you can remove and install in a newer version without a new host key. But it's those small things a lot of customers pay gladly for.

    Thanks to Open Source and the community, companies like are ours usually faster with patches than a lot of other big software companies i could name.

    On the other side the Open Source products get a benefit when enhancements on the request of customers (LDAP support here, there another command line option) find their way back into the community. I believe this is win-win at its best.

    Open Source says "you can patch/modify/package it by yourself". But it's not a holy duty to do so.

    Yours, Martin

    P.S. If you want to use OSS and don't know where to spend your huge support budget, feel free to contact me ;-).

  • by BrianWCarver ( 569070 ) on Wednesday May 07, 2003 @03:58PM (#5904453) Homepage

    No, I don't work for them, but Linuxcare [linuxcare.com] has a professional looking website using the CEO-lingo that might comfort the big-wigs you need to convince. There are other companies that support Free Software too, check out Red Hat's Support Services [redhat.com]. A site called OpenEnterprise [theopenenterprise.com] looks to have a ton of resources on exactly what you're asking for.

    Also, take a look at IT Management's special report on Linux [earthweb.com]. It offers a lot of ammo to you in making a presentation. You can point to the other heavy-hitters that are using Free solutions and have concrete examples of success.

    The same site even has an article entitled Selling the 'Suits' on your IT project [earthweb.com] which looks to have some good advice for you.
  • by Fastolfe ( 1470 ) on Wednesday May 07, 2003 @03:58PM (#5904455)
    convincing management that Open Source software is safe to use

    Most Open Source advocates really need to think about something before they go charging in assuming OSS without vendor support is really better for all situations: Management wants 24x7 support not because they think the software is unstable, but because they cannot afford downtime when that software does fail.

    "So what?" you say, "I've been using this stuff for years and I can solve pretty much any problem they might run across. I am 24x7 support!" What happens when you're gone? On vacation? What happens when you get burned out and sick of being the only guy capable of supporting an application that's taken off in the enterprise and now has a hundred installations all over the world? What happens when you have trouble finding someone with the skill sets needed to replace you?

    This "guru" support model simply does not scale. This is why management wants 24x7 support: so that no matter what happens to their gurus, they always have a toll-free 800 number to call to get someone that knows what they're doing on the problem. If that person can't solve it, a good maintenance contract might even involve getting the vendor to fly an engineer out there to fix the problem. This is very much about making management feel good about getting the support they need to solve their problems.

    The alternative is to spend an exceptional amount of money training a staff equivalent to the staff of the vendor to be just as smart and available as a vendor offering 24x7 support. It's not just about hiring two or three strategically-placed gurus.

    Now, with that out of the way, OSS can still work in the enterprise, provided you approach the situation intelligently. Can your organization staff up a support group internally to support this application without requiring a maintenance contract with a vendor? (And can you keep them busy enough to make it cheaper in the long run?) Certain skillsets are pretty common nowadays, such as administration of Apache. It may be perfectly realistic to be able to staff up a small group to support common OSS applications in an enterprise. If someone leaves the company, it's realistic that they can be replaced or someone else trained to fill the vacancy, but you can never count on being able to hire a small army of "gurus" capable of adapting to any OSS application at the drop of a hat. This is very unrealistic (not to mention extremely expensive).

    But not all OpenSource projects fit into this category. Frequently they'll be smaller projects that might be used plenty on the Internet, but either because there's a guru out there actually setting it up and administering it (that can adapt to just about anything), or because the author made it exceptionally easy for a novice to get it running. Neither of these options is acceptable in an enterprise setting! Your guru won't be there forever, and your army of novices won't have a clue how to fix a novice-friendly application when it breaks.

    The bottom line is that you need to consider your company's true support expenses here: if an application needs 24x7 support, you either need to have a staff of people on-hand to guarantee support for this application (across your enterprise), at a significant expense, or there needs to be a vendor out there willing to assume 24x7 support for a fraction of that cost.
  • by davebooth ( 101350 ) on Wednesday May 07, 2003 @04:02PM (#5904491)
    Instead of technical arguments, go for the financial ones. The only technical part of your pitch is the required functionality. Then you present alternative strategies to achieve it. In dealing with senior management, particularly as I move from purely sysadmin stuff into more management work myself, I've learned that when they say "We dont want software without 24/7 global support" what they really mean is "We dont understand the implications so we're going to stick with the way we've always done things until someone convinces us different."

    Personally, in your position, I'd build several possible scenarios...

    1. No open source
    2. Some open source
    3. All open source

    That would be a minimum, the important thing is that every one of them has to achieve what the company needs. The costs will differ, the risks will differ, the long-term implications of things like scalability will differ and these will all play into the management viewpoint. They dont care how "good" the software is or isnt. All you can do is the risk analysis and the cost/benefit presentation, making them aware of precisely the levels of risk each solution exposes the company to and precisely how much it will cost to avoid those risks. Every software package is a risk, whether open source or not. Every piece of hardware is a risk. Lose your main production data server and how much business do you lose per hour whilst its down? How long will it take to get it back in each of your scenarios? How likely is the outage in the first place? Since every solution you present meets the same needs, does it matter which one they choose?

    Now, my personal opinion based on experience in the past is that when the analysis is complete the case for open source in at least some of the application areas of a unix environment will be a complete no-brainer. As you work up the results, however, you might be surprised at some of the places it doesnt give an appreciable benefit. Remember that the time you spend scripting and configuring stuff is part of the cost, as is employee learning time. Dont leave anything out. Be absolutely straight presenting the best comparable info you can and dont try and slant it either way. If they make the wrong choice and it bites the company in the butt it then wont be your fault, even if the wrong choice was your recommendation too.

  • by sheetzam ( 454981 ) on Wednesday May 07, 2003 @04:10PM (#5904545) Homepage
    The March 15th edition of CIO magazine had a front page article about Open Source: http://www.cio.com/archive/031503/opensource.html. My favorite quote, very applicapable to this situation:
    "We will guarantee the same [service-level agreements] for Linux that we do for proprietary OSs," says Dan Frye, director of IBM's Linux Technology Center. "Response times, fix times, uptime--we'll sign all those same contracts for Linux."
    That pretty much says it all: 24/7 support with contractual guaruntees for Linux. There are plenty of other places willing to do similar for other open source software. Best point though: if you don't like the vendor you first choose for that support, you can actually pick up and move to someone else WITHOUT changing your software too!
  • by Aardpig ( 622459 ) on Wednesday May 07, 2003 @04:12PM (#5904567)

    I was once working for a leading financial information provider (>16,000 employees), and I was tasked with setting up a listserver, at minimal cost (read no expenditure beyond the cost of my own labour). I ended up opting for an open source SMTP-based listserver, which was far cheaper than the closest closed-source equivalent (free as in beer vs. over 11,000 pounds). I also used Mhonarc to provide a web interface to the message archive, with Perl bits bolted on to add functionality.

    I had to put the listserver on the far side of the SMTP gateway, since the company was using some really fucked-up mail system. When I told one of the company software architects that SMTP played a role in the listserver functionality, he told me that SMTP was forbidden on the internal network. He then (very helpfully) pointed out that I should go ahead anyhow, since by the time the PHBs found out, the listserver would be up, running and proving its worth.

    I left the company five years ago, but as far as I know the listserver still sees a great deal of use. The moral of this story is this: if the PHBs tell you to solve a problem, don't start evangelising about open source. Just implement the solution in open source, and after six months the software will have proven its worth. Hell, in my case I'm not even sure whether the PHBs realized the listserver was a) using SMTP, or b) using open-source software.

  • by derfla8 ( 195731 ) on Wednesday May 07, 2003 @04:18PM (#5904625)
    I've seen an argument that open source is only free is one's time is worthless. I work for a multi-national and we have similiar requirements of twenty-four hour worldwide support. From what I've seen in technology three is never a swiss-army knife solution despite what many people here on slashdot believe, open source is not always the best answer.

    Nowadays, management has a very different spin on IT. Gone are the days where IT wrongly drove business and the CIO had the company by the privates. Management teams are now IT savvy, and no longer write blank cheques to IT based on IT's requirements.

    The argument that, if it is broken we have the source and we can fix it is no argument at all. Unless you are an IT company, your core business is not the business of IT. Why would you pour resources into IT to develop a skillset in your company to maintain software? How does that improve profitability? It doesn't. The cost of having one expert to fix a handful of problems, will never be competitive against an organization who's business model revolves around maintaining their product.

    Take a look at how commercial software is built and maintained. Direction is driven by customers and revenue. How is open source driven? I don't know, maybe someone can help me. Who manages the product life-cycle in open source?

    I am not anti-open-source, nor anti-Microsoft. I believe that for your case, you should ask management for their requirements. If one of their answers is 24/7 world-wide vendor support. You just have to accept it and move on. Sometimes their answers are not technically driven. Remember you are probably working for a company built on capatilism. Again, accept it and move on. They sign your paycheques not the other way around.

    -Many recipes are "open source." Why do people still eat out? You'd pay less than half, and have control over the source if you cook yourself!
  • support (Score:3, Insightful)

    by uslinux.net ( 152591 ) on Wednesday May 07, 2003 @05:05PM (#5905102) Homepage
    There are plenty [linuxcare.com] of companies [uslinux.net] which specialize [redhat.com] in support [pantek.com] for Linux [reliablepenguin.com] and Open Source [google.com].

    I mean really, you don't need to pay millions of dollars for support, though it is more difficult to find 24x7x365 support with 4 hour turnaround when you're talking $10,000/year instead of $250,000.

    Then again, does your company really *need* that level of support? I would venture to say that they probably don't. If you build redundancy into your systems, you should be able to get by in most cases, albeit under heavier load. For 24x7x365 support, expect to spend $$$$.
  • by Doktor Memory ( 237313 ) on Wednesday May 07, 2003 @05:13PM (#5905164) Journal
    According to your description, your employers have given you a clear, comprehensible and not unreasonable-sounding mandate: don't deploy any software that doesn't have 24-hour, world-wide support.

    Why not, then, do your job by finding and implementing packages that fit their requirements, rather than wasting their time trying to shoehorn in unsupported crapware because you happen to think it's K-Rad?

    As a rule, companies that have requirements like the ones you describe have them for very good reasons.
  • by dcavanaugh ( 248349 ) on Wednesday May 07, 2003 @05:13PM (#5905171) Homepage
    For any given product you might want to use, consider the commercial alternatives, and the associated risks:
    • Product fails to live up to expectations
    • Product fails to keep up with competitors
    • Quality of vendor support goes downhill
    • Vendor is acquired by another company
      • The above-mentioned problems begin to appear
      • New parent company initiates a death-march migration to their "other" product
      • Acquisition eliminates competition, maintenance cost escalates
    • Vendor goes out of business; product is orphaned

    Consider this: Digital Equipment Corp. was once the #2 IT company in the world, with a huge software portfolio supported by an army of "world class" IT professionals. In the late 80's their products and support were awesome. Then it got ugly. By the time Compaq bought the remaining scraps, the "world class" software portfolio was sold off in bits and pieces. Where are those products now? Where is the support? If I had invested heavily in any DEC's software development tools, it would be a total write-off today. GNU is still there, isn't it?

    When you buy a commercial software product, there is a real risk of failure, for all the reasons described above. When a manager makes a committment to a commercial software package, he or she can expect to be held accountable for what happens to that investment. If you start with open source products, the approval chain is generally short-circuited because the expenditure of $0 is with almost everyone's approval range. If the product fails to perform, you walk away from your investment of $0 and migrate to a commercial package. Of course, the people who sell commercial products are well aware of open source, and each has a reasonable migration path. Try calling Microsoft and tell them that you want some help in switching from Samba to Windows 2003 and watch them open the floodgates of support. On the other hand, if the OSS product performs well, you demonstrate the success to every level of management that will listen, calculate the ROI and deploy even more open source products in the future.

    Now let's consider the risk the other way around. You buy Windows 2000, Microsoft IIS, and SQL Server because M$ has wonderful 24x7 commercial support. But Code Red, Code Blue, Nimda, Klez, and SQL Slammer come along and now your server is now owned by a 12-year-old who is renting it out as a spam gateway. The criticism for a technical debacle is bad enough, but then you get the CEO asking why it was necessary to spend big money AND face this nightmare when open source alternatives are proving to be somewhat more secure at a much lower cost. I doubt that my CEO would say such a thing, but open source is now getting coverage in Forbes and WSJ, so you never know. If you had installed Linux/Apache/MySQL and the same thing happened, at least you don't have to explain how the purchase price is now a total writeoff.

    There are many people who use risk as their logic in support of closed source. Having seen more than a few defuct products and vendors, I say that risk really is the central issue, but that open source risk is more managable.
  • by Foofoobar ( 318279 ) on Wednesday May 07, 2003 @05:18PM (#5905215)
    I ever so recently got a job for a company whose incomes relys heavily on Microsofties. Their big concern is that they wanted to support Microsoft as much as possible and I wanted to go towards an open source solution (specifically an LAMP architecture). I managed to get my way on everything but the server (still have to run Win2k) and am quite pleased with how much I was able to maneuver.

    My best suggestion to you is do your research. Show those benchmarks. Show the community support (which is far better than 24 hr support because when you post to a news group, IRC channel or even a bulletin board, your solution will be found in a matter of minutes).

    Also, show them the vast amounts of documentation freely available online (and with each product). Trying finding how to configure the intracies of IIS in comparison with Apache.

    Also, look for product comparisons of software packages. For instance, MySQL vs. SQL Server; in recent benchmarks, MySQL was rated alongside Oracle 9i for speed and comes with it's own ODBC-to-ODBC bridge which SQL Server does not (and which can be purchased for $5400).

    Make as strong a case as you can and gear it towards their pocketbook and level of tech experience.

    And if that doesn't work, remind them that Code Red and Nimda took out 80,000 Windows machines; that's 80,000 machines that run proprietary code which is not cross platform compliant. Does ASP work on Unix, Linux, BSD or MAC? How about Visual Basic? IIS? You get my point. Cross platform compliancy is another good one because if they want to ever move to a different OS, they are screwed if they go with Microsoft.

    The savings in cost, the community support, cross compliancy... what is there argument?
  • by Ignorant Aardvark ( 632408 ) * <cydeweys.gmail@com> on Wednesday May 07, 2003 @05:22PM (#5905256) Homepage Journal
    Your corporation will always have 24/7 access to tech support on open source solutions. All they need to do is "Ask Slashdot", and within an hour they'll get hundreds of insightful, informative, witty, or (regrettably) flamebait suggestions.
  • by pLnCrZy ( 583109 ) on Wednesday May 07, 2003 @05:26PM (#5905293)
    I've discovered that there is a time and a place for every battle. Sometimes it's better to let people figure it out for themselves. I've been down this road with companies that I've consulted for many times. They all follow the "hit-by-a-bus" strategy... if our admin gets hit by a bus, we need software that any other person can support if we need to bring them in. Sadly, there aren't many people out there actually worth their salt and too many of them only specialize in certain commercial apps.

    My strategy: Make the case to the management plain and simple. Open source software is constantly being improved and will [potentially] always be free (unless the author goes to the dark side...). Tell them they can save XXX dollars and get great features. If they still argue, say OK fine. Get quotes from all the major vendors of high-dollar commercial apps (i.e. Citrix Metaframe instead of VNC (yes there is a Unix version), commerical SSH (yes there are plenty) instead of OpenSSH, etc.) Compile all the costs, slap it on the CFO's desk and say "Ok I'm ready to implement all this just buy all that stuff." Then the CFO will scratch his head and say "Maybe this open-source stuff isn't such a bad idea after all."

    Reminds me of a very similar battle I went through wtih a client some time back. The CEO *insisted* on M$ ISA Server (becasue people with "MCSE" after their names are a dime-a-dozen. Trust me, I know, I have one as well, only because my employer paid me to go get it) I told him that it was a waste of money. He didn't believe me. So I set up two servers -- one with ISA Server and one with Linux and IP Tables. He quickly saw the light when I dropped the $2400 quote on his desk to buy the license for ISA when the demo expired, and had no such quote for the other server.

    Sun Tzu. :)

  • by calethix ( 537786 ) on Wednesday May 07, 2003 @05:31PM (#5905343) Homepage
    "management doesn't want to install software that does not have 24 hour"

    Tell them for about $40 a month, they can buy you a cellphone and make you their 24hr on call person. And of course since you'll be salaried, you won't get over time for those 2am calls. They'll like that. ;)
  • by Get Behind the Mule ( 61986 ) on Wednesday May 07, 2003 @06:52PM (#5906013)
    Your management has legitimate concerns, but these can be addressed with some open source packages, if the project is sufficiently mature and well-supported. This is where I see you making a common mistake: you speak of open source software as if all open source projects are the same.

    For some of the very well-known open source projects -- such as Apache, much of what constitutes Linux, sendmail, Perl -- the documentation is excellent, the online resources are extensive and up-to-date, there are many opportunities for simple customization, and above all, there are full-time consultants and consulting firms who know the stuff very well and can be hired to help. In fact, if the latter is true, then your management can get exactly what they're looking for: full-time support.

    Many other open source projects are obviously someone's part-time diversion, and it shows. There are many missing features and a few bugs, and no one who can get around to fixing them. The options for configuration and customization are limited. The documentation was done as an afterthought, it has whole critical chapters saying nothing more than "TBD", and it was apparently never proofread by a native speaker of English. (Sorry to have to add that last one, but unfortunately it's an all too common problem.) This is the stuff your management wants to stay away from, and they have good reason.

    You mentioned two specific services you need: VNC and SSH. So why don't you research the quality of the available open source solutions? Evaluate them with respect to project maturity, online resources, quality of the documentation, and especially, find out if you can hire someone to provide support. I personally don't know what you can get, but if you're lucky, you can present your management with a professional solution that will satisfy their needs. And if you can't find that, then you shouldn't be going with the open source stuff anyway -- then your bosses may have saved you from a lot of heartache.
  • by mindstrm ( 20013 ) on Wednesday May 07, 2003 @06:52PM (#5906015)
    If you base the argument on that, you are fighting a battle you can't win.

    Your battle should be about choosing the best tools for the job.
    Yes, the fact that a tool is open is a plus... but seriously..

    The reason many of us would rather use linux over solaris is NOT because of the cost.. it's because linux is more flexible and has more tools readily available. IF linux cost the same amount, we would still choose it.

  • by Billly Gates ( 198444 ) on Wednesday May 07, 2003 @08:03PM (#5906528) Journal
    The RedHat network offers 24x7 support if you have a full subscription. Also they have redhat certified servers from IBM or Dell that will work great if that also is an issue.

    Last install VNC ans ssh on solaris. Don't tell them. First look at the sun cd full of extra's. If its there then its supported by Sun and its no big deal.

    Also look at there website and make downloads for solaris there. If they question the software tell them its from SUN.

    They invested alot of money in hardware and bussiness has no sense in sunken costs or bad investements.

    If arm twisting was used just to ditch Windows then by all means keep you mouth quiet. Someone likely betted his reputation and his job on Sun.

    Solaris is a good OS. Expensive but good and is a Unix just like Linux or FreeBSD.

    Running open source software on SUN will let Linux or FreeBSD later on after they get used to running it.

THEGODDESSOFTHENETHASTWISTINGFINGERSANDHERVOICEISLIKEAJAVELININTHENIGHTDUDE

Working...