This document provides tips and troubleshooting advice for administering IBM Connections. It begins with an agenda for an IBM Connections Adminblast session with Nico Meisenzahl and Christoph Stoettner. The rest of the document consists of 35 tips numbered 1 through 35 covering topics like iOS push notifications, WebSphere configuration, database tuning, TLS configuration, and debugging techniques.
Nico präsentieren eine aktualisierte Version seiner Connect 2017 Session, die nun auch Connections 6 und Orient Me Themen enthält. Machen Sie sich bereit, 60 Tipps und Tricks zu lernen, welche Sie sofort in Ihre Connections-Umgebung implementieren können um diese zu verbessern! Ihre Benutzer werden sich bedanken, denn sie werden auch von diesen Best Practice Tipps, die aus realen Projekten gesammelt wurde! Verlassen Sie diesen Vortrag mit Wissen über Cognos, Docs, CCM, FEB und Orient Me sowie DB2, TDI, SSO und IBM Cloud private.
Buckle up, join Christoph and Nico and get ready to learn 50 tips and tricks you can implement right away to improve your IBM Connections environment. Your users will thank you as they too benefit from this best practice list gathered from real-world projects while deploying and administering IBM Connections On-premises. Walk away with knowledge covering anything from Orient Me, Cognos integration, Docs, CCM and Forms Experience Builder to the back end like IBM Cloud private, DB2, TDI and SSO.
IBM Think 2018 - IBM Connections TroubleshootingNico Meisenzahl
Curious about how to make your IBM Connections environment run smoothly while reducing support effort? Need help debugging and getting to the core of some Connections challenges? Join Nico to find out how to resolve common issues, and learn troubleshooting basics and other useful knowledge to ensure an efficient Connections on-premises environment. Level up your debugging skills while learning more about back-end topics such as IBM Cloud Private, Db2, TDI, SSO, Directory and integrations like Docs, CCM, Cognos and FEB. He'll also cover the new PINK features like Orient Me, Metrics and Customizer. Walk away with Connections best-practice tips and tricks to help you provide steady and efficient social capabilities!
IBM Connections Adminblast - Connect17 (DEV 1268)Nico Meisenzahl
Buckle up, join Christoph and Nico and get ready to learn 50 tips and tricks you can implement right away to improve your IBM Connections environment. Your users will thank you as they too benefit from this best practice list gathered from real-world projects while deploying and administering IBM Connections On-premises. Walk away with knowledge covering anything from Cognos integration, docs, CCM and Forms Experience Builder to the back end and DB2, TDI and SSO.
SOCCNX11 All you need to know about Orient MeNico Meisenzahl
Orient Me is the first Connections service which is built on the new Connections Pink stack. Nico will talk about the installation, integration and administration of Orient Me. He will also provide useful insights around the used backend tools. Walk away with knowledge how to successfully run Orient Me in your own Connections environment!
IBM Connections Troubleshooting or “Get the Cow off the Ice” LetsConnect
You are an IBM Connections admin and you would like to know how to fix your problems and open tickets?
We will talk about some troubleshooting basics and other useful things to ensure that you have enough skills to get your Connections running smoothly.
There are many areas where you need different debugging skills. We will cover backend like DB2, TDI, SSO and some IBM integrations like Docs, CCM, Cognos or Forms Experience Builder. Of course we will cover Connections itself, too.
You will also get some helpful best practises which will help you within your daily work.
Best and worst practices deploying IBM ConnectionsLetsConnect
Depending on deployment size, operating system and security considerations you have different options to configure IBM Connections. This session will show good and bad examples on how to do it from multiple customer deployments. We will describe things we found and how you can optimize your systems. Main topics include simple (documented) tasks that should be applied, missing documentation, automated user synchronization, TDI solutions and user synchronization, performance tuning, security optimizing and planning Single Sign On for mail, IBM Sametime and SPNEGO. This is valuable information that will help you to be successful in your next IBM Connections deployment project. Don’t miss it.
Nico präsentieren eine aktualisierte Version seiner Connect 2017 Session, die nun auch Connections 6 und Orient Me Themen enthält. Machen Sie sich bereit, 60 Tipps und Tricks zu lernen, welche Sie sofort in Ihre Connections-Umgebung implementieren können um diese zu verbessern! Ihre Benutzer werden sich bedanken, denn sie werden auch von diesen Best Practice Tipps, die aus realen Projekten gesammelt wurde! Verlassen Sie diesen Vortrag mit Wissen über Cognos, Docs, CCM, FEB und Orient Me sowie DB2, TDI, SSO und IBM Cloud private.
Buckle up, join Christoph and Nico and get ready to learn 50 tips and tricks you can implement right away to improve your IBM Connections environment. Your users will thank you as they too benefit from this best practice list gathered from real-world projects while deploying and administering IBM Connections On-premises. Walk away with knowledge covering anything from Orient Me, Cognos integration, Docs, CCM and Forms Experience Builder to the back end like IBM Cloud private, DB2, TDI and SSO.
IBM Think 2018 - IBM Connections TroubleshootingNico Meisenzahl
Curious about how to make your IBM Connections environment run smoothly while reducing support effort? Need help debugging and getting to the core of some Connections challenges? Join Nico to find out how to resolve common issues, and learn troubleshooting basics and other useful knowledge to ensure an efficient Connections on-premises environment. Level up your debugging skills while learning more about back-end topics such as IBM Cloud Private, Db2, TDI, SSO, Directory and integrations like Docs, CCM, Cognos and FEB. He'll also cover the new PINK features like Orient Me, Metrics and Customizer. Walk away with Connections best-practice tips and tricks to help you provide steady and efficient social capabilities!
IBM Connections Adminblast - Connect17 (DEV 1268)Nico Meisenzahl
Buckle up, join Christoph and Nico and get ready to learn 50 tips and tricks you can implement right away to improve your IBM Connections environment. Your users will thank you as they too benefit from this best practice list gathered from real-world projects while deploying and administering IBM Connections On-premises. Walk away with knowledge covering anything from Cognos integration, docs, CCM and Forms Experience Builder to the back end and DB2, TDI and SSO.
SOCCNX11 All you need to know about Orient MeNico Meisenzahl
Orient Me is the first Connections service which is built on the new Connections Pink stack. Nico will talk about the installation, integration and administration of Orient Me. He will also provide useful insights around the used backend tools. Walk away with knowledge how to successfully run Orient Me in your own Connections environment!
IBM Connections Troubleshooting or “Get the Cow off the Ice” LetsConnect
You are an IBM Connections admin and you would like to know how to fix your problems and open tickets?
We will talk about some troubleshooting basics and other useful things to ensure that you have enough skills to get your Connections running smoothly.
There are many areas where you need different debugging skills. We will cover backend like DB2, TDI, SSO and some IBM integrations like Docs, CCM, Cognos or Forms Experience Builder. Of course we will cover Connections itself, too.
You will also get some helpful best practises which will help you within your daily work.
Best and worst practices deploying IBM ConnectionsLetsConnect
Depending on deployment size, operating system and security considerations you have different options to configure IBM Connections. This session will show good and bad examples on how to do it from multiple customer deployments. We will describe things we found and how you can optimize your systems. Main topics include simple (documented) tasks that should be applied, missing documentation, automated user synchronization, TDI solutions and user synchronization, performance tuning, security optimizing and planning Single Sign On for mail, IBM Sametime and SPNEGO. This is valuable information that will help you to be successful in your next IBM Connections deployment project. Don’t miss it.
Best And Worst Practices Deploying IBM ConnectionsLetsConnect
Depending on deployment size, operating system and security considerations you have different options to configure IBM Connections. This session will show examples from multiple customer deployments of IBM Connections. I will describe things I found and how you can optimize your systems. Main topics include; simple (documented) tasks that should be applied, missing documentation, automated user synchronization, TDI solutions and user synchronization, performance tuning, security optimizing and planning Single Sign On
Webinar Recording: ow.ly/Mc6w30gK7Tt
Buckle up, join Nico and get ready to learn 50 tips and tricks you can implement right away to improve your IBM Connections environment. Your users will thank you as they too benefit from this best practice list gathered from real-world projects while deploying and administering IBM Connections On-premises. Walk away with knowledge covering anything from Orient Me, Cognos integration, Docs, CCM and Forms Experience Builder to the back end like IBM Cloud private, DB2, TDI and SSO.
IBM Connections administration – keep your systems running the right wayLetsConnect
You have IBM Connections installed but now you are unsure what you need to do to keep the lights on the servers running smoothly.
User account synchronization, Database maintenance, reviewing the log files for errors, …
There are many of tasks for an IBM Connections admin – let us tell you how to schedule them into daily, weekly, monthly or even quarterly tasks.
Learn what you need to deal with immediately and which tasks you can schedule for later.
Take home some useful scripts, life saving settings and a sample schedule for your admin work
Soccnx10: IBM Connections Troubleshooting or “Get the Cow off the Ice”panagenda
You are an IBM Connections admin and you would like to know how to fix your problems and open tickets?
We will talk about some troubleshooting basics and other useful things to ensure that you have enough skills to get your Connections running smoothly.
There are many areas where you need different debugging skills. We will cover backend like DB2, TDI, SSO and some IBM integrations like Docs, CCM, Cognos or Forms Experience Builder. Of course we will cover Connections itself, too.
You will also get some helpful best practises which will help you within your daily work.
A presentation by Christoph Stoettner & Nico Meisenzahl
How to put domino in a docker container and live happy. This are my slides from last IBM Connect 2016 lightning talk. Update will be available soon on my blogs, www.msbiro.net , blog.msbiro.net
IBM Connections Adminblast - Soccnx 12 Editionpanagenda
Buckle up, join Christoph and Nico and get ready to learn 50 tips and tricks you can implement right away to improve your IBM Connections environment. Your users will thank you as they too benefit from this best practice list gathered from real-world projects while deploying and administering IBM Connections On-premises. Walk away with knowledge covering anything from Orient Me, Cognos integration, Docs, CCM and Forms Experience Builder to the back end like IBM Cloud private, DB2, TDI and SSO.
A presentation by Christoph Stoettner & Nico Meisenzahl
Automate IBM Connections Installations and morepanagenda
IBM Connections pink is based on Conductor for Containers, which provides a collection of tools to work with Docker containers and Kubernetes. To manage containers in large environments, lots of DevOps are using Ansible (an agentless software to automate administration tasks).
So why don’t use these tools to prepare your Connections operating system, like creating users, adding security settings or install all necessary packages to deploy DB2, Installation Manager, and WebSphere Application Server? Or use one of the available roles or tasks to automate even the installation of WebSphere, create cell and profiles …
In this session, you get the basics of Ansible and some hands-on to start the learning journey into “”cloud”” based software management.
A presentation by Christoph Stoettner.
Best Practices for Installing IBM Verse on PremisesTimsterC
IBM's local edition of Verse for email is hitting many enterprises. If you have not yet tried this out for yourself, then come and find out just how easy it is.Learn the tips and tricks that go into a successful deployment with a hands-on demo of the places to look out for and the finished product.We'll also show the integrations with Connections Files, Profiles and Box.
Domino 10 has some amazing self-healing capabilities that are going to make every admin’s life much easier. Learn how automatic cluster database symmetry works to ensure both NSFs and DAOS content are kept in sync across cluster mates. Understand how the repair engine remedies any missing databases or NLOs, rebuilds full text indexes, and detects and repairs corrupt NSFs and NLOs. You will also learn how to use the new commands to manually invoke corruption repair and how the new replica synchronization tool and replication currency monitoring work. Get the ins and outs of the functionality of automatic hot view updating and how to setup deletion logging so you know who/what deleted a document.
SharePoint Advanced Administration with Joel Oleson, Shane Young and Mike WatsonJoel Oleson
Global Intranets, Extranets, and Internet sites in advanced farm deployments. Lessons learned and guidance is shared in this deck... Caching, Firewall, Security, Optimization, etc... Presented with Joel Oleson, Shane Young, and Mike Watson at Tech Ed 2008
Soccnx11 Two wrongs don't make a right - Troubleshooting Connections Nico Meisenzahl
Curious on how to make your Connections environment run smoothly while reducing support effort? Need help debugging and getting to the core of some Connections challenges? Join Nico and Terri to find out how to resolve common issues, learn troubleshooting basics and other useful knowledge to ensure an efficient Connections on-premises environment. Level up your debugging skills while learning more about backend topics such as IBM Spectrum CfC, DB2, TDI, SSO, Directory and integrations like Docs, CCM, Cognos, FEB or Orient Me. Walk away with Connections best practice tips and tricks to help you provide steady and efficient social capabilities!
Domino 10 shipped jam packed with awesome new features you'll love. And in this webinar, you'll learn how to bring the best out of them with the Ytria tools. You'll learn about deletion logging, replication and synch-up, Domino On Disk Structures (ODS) and what they mean, and more—as well as how you can enable and enhance these features using our upcoming EZ Suite version 19.
On September 8, 2020 Andy Higgins and Heather Hottenstein presented Integrating HCL Domino and Microsoft 365 at DNUG. This was an upgraded presentation from the one they did in Boston at Collabsphere 2019, discussing technology that has been introduced in the last year.
For more information reach out to info@rprwyatt.com or visit rprwyatt.com
If your web application runs slowly, your reputation and business could suffer. To restore confidence, you must improve performance immediately, because frustrated users might not return to give you a second chance. You need “Web Performance First Aid.”
In this talk, Alan will share "first aid" techniques that can improve web performance within minutes.
Once your site starts to run faster, positive word of mouth may be generated among users, restoring confidence in your efforts and giving you breathing room to examine your application for further improvements.
Particular focus will be given to free tools that help diagnose performance bottlenecks, how to configure the Apache web server for speed, and making best use of the unique characteristics of IBM i.
Soccnx10: Best and worst practices deploying IBM Connectionspanagenda
Depending on deployment size, operating system and security considerations you have different options to configure IBM Connections. This session will show good and bad examples on how to do it from multiple customer deployments. We will describe things we found and how you can optimize your systems. Main topics include simple (documented) tasks that should be applied, missing documentation, automated user synchronization, TDI solutions and user synchronization, performance tuning, security optimizing and planning Single Sign On for mail, IBM Sametime and SPNEGO. This is valuable information that will help you to be successful in your next IBM Connections deployment project.
A presentation by Christoph Stoettner & Nico Meisenzahl
MES102 - Verse on Premises 2.0 Best PracticesDylan Redfield
In July 2020 Verse on Premises 2.0 was released, delivering a slew of new features. And when V12 of Notes and Domino ships, iNotes will be officially deprecated in favor of VoP. Join me to learn about the functionality that VoP 2.0 brings. Additionally, learn about deployment and administrative best practices to ensure your VoP offering meets your user’s needs.
Keith Brooks / KBMSG
Bill Malchisky / Effective Software Solutions, LLC
Leaving a mail system and going to Domino, or Connections Cloud, there are some basic things one must do, and not do.
Caution: Worst practices are here!
Comparison of two different migrations and how to make sure yours ends up as a completed mission. Including changing Operating Systems, hosted/on premises, project plans and arbitrary deadlines.
Buckle up, join Christoph and get ready to learn 50 tips and tricks you can implement right away to improve your IBM Connections environment. Your users will thank you as they too benefit from this best practice list gathered from real-world projects while deploying and administering IBM Connections On-premises. Walk away with knowledge covering anything from Cognos integration, docs, CCM and Forms Experience Builder to the back end and DB2, TDI and SSO.
BEST AND WORST PRACTICES DEPLOYING IBM CONNECTIONSNico Meisenzahl
Depending on deployment size, operating system and security considerations you have different options to configure IBM Connections. This session will show good and bad examples on how to do it from multiple customer deployments. We will describe things we found and how you can optimize your systems. Main topics include simple (documented) tasks that should be applied, missing documentation, automated user synchronization, TDI solutions and user synchronization, performance tuning, security optimizing and planning Single Sign On for mail, IBM Sametime and SPNEGO. This is valuable information that will help you to be successful in your next IBM Connections deployment project. Don’t miss it.
Best And Worst Practices Deploying IBM ConnectionsLetsConnect
Depending on deployment size, operating system and security considerations you have different options to configure IBM Connections. This session will show examples from multiple customer deployments of IBM Connections. I will describe things I found and how you can optimize your systems. Main topics include; simple (documented) tasks that should be applied, missing documentation, automated user synchronization, TDI solutions and user synchronization, performance tuning, security optimizing and planning Single Sign On
Webinar Recording: ow.ly/Mc6w30gK7Tt
Buckle up, join Nico and get ready to learn 50 tips and tricks you can implement right away to improve your IBM Connections environment. Your users will thank you as they too benefit from this best practice list gathered from real-world projects while deploying and administering IBM Connections On-premises. Walk away with knowledge covering anything from Orient Me, Cognos integration, Docs, CCM and Forms Experience Builder to the back end like IBM Cloud private, DB2, TDI and SSO.
IBM Connections administration – keep your systems running the right wayLetsConnect
You have IBM Connections installed but now you are unsure what you need to do to keep the lights on the servers running smoothly.
User account synchronization, Database maintenance, reviewing the log files for errors, …
There are many of tasks for an IBM Connections admin – let us tell you how to schedule them into daily, weekly, monthly or even quarterly tasks.
Learn what you need to deal with immediately and which tasks you can schedule for later.
Take home some useful scripts, life saving settings and a sample schedule for your admin work
Soccnx10: IBM Connections Troubleshooting or “Get the Cow off the Ice”panagenda
You are an IBM Connections admin and you would like to know how to fix your problems and open tickets?
We will talk about some troubleshooting basics and other useful things to ensure that you have enough skills to get your Connections running smoothly.
There are many areas where you need different debugging skills. We will cover backend like DB2, TDI, SSO and some IBM integrations like Docs, CCM, Cognos or Forms Experience Builder. Of course we will cover Connections itself, too.
You will also get some helpful best practises which will help you within your daily work.
A presentation by Christoph Stoettner & Nico Meisenzahl
How to put domino in a docker container and live happy. This are my slides from last IBM Connect 2016 lightning talk. Update will be available soon on my blogs, www.msbiro.net , blog.msbiro.net
IBM Connections Adminblast - Soccnx 12 Editionpanagenda
Buckle up, join Christoph and Nico and get ready to learn 50 tips and tricks you can implement right away to improve your IBM Connections environment. Your users will thank you as they too benefit from this best practice list gathered from real-world projects while deploying and administering IBM Connections On-premises. Walk away with knowledge covering anything from Orient Me, Cognos integration, Docs, CCM and Forms Experience Builder to the back end like IBM Cloud private, DB2, TDI and SSO.
A presentation by Christoph Stoettner & Nico Meisenzahl
Automate IBM Connections Installations and morepanagenda
IBM Connections pink is based on Conductor for Containers, which provides a collection of tools to work with Docker containers and Kubernetes. To manage containers in large environments, lots of DevOps are using Ansible (an agentless software to automate administration tasks).
So why don’t use these tools to prepare your Connections operating system, like creating users, adding security settings or install all necessary packages to deploy DB2, Installation Manager, and WebSphere Application Server? Or use one of the available roles or tasks to automate even the installation of WebSphere, create cell and profiles …
In this session, you get the basics of Ansible and some hands-on to start the learning journey into “”cloud”” based software management.
A presentation by Christoph Stoettner.
Best Practices for Installing IBM Verse on PremisesTimsterC
IBM's local edition of Verse for email is hitting many enterprises. If you have not yet tried this out for yourself, then come and find out just how easy it is.Learn the tips and tricks that go into a successful deployment with a hands-on demo of the places to look out for and the finished product.We'll also show the integrations with Connections Files, Profiles and Box.
Domino 10 has some amazing self-healing capabilities that are going to make every admin’s life much easier. Learn how automatic cluster database symmetry works to ensure both NSFs and DAOS content are kept in sync across cluster mates. Understand how the repair engine remedies any missing databases or NLOs, rebuilds full text indexes, and detects and repairs corrupt NSFs and NLOs. You will also learn how to use the new commands to manually invoke corruption repair and how the new replica synchronization tool and replication currency monitoring work. Get the ins and outs of the functionality of automatic hot view updating and how to setup deletion logging so you know who/what deleted a document.
SharePoint Advanced Administration with Joel Oleson, Shane Young and Mike WatsonJoel Oleson
Global Intranets, Extranets, and Internet sites in advanced farm deployments. Lessons learned and guidance is shared in this deck... Caching, Firewall, Security, Optimization, etc... Presented with Joel Oleson, Shane Young, and Mike Watson at Tech Ed 2008
Soccnx11 Two wrongs don't make a right - Troubleshooting Connections Nico Meisenzahl
Curious on how to make your Connections environment run smoothly while reducing support effort? Need help debugging and getting to the core of some Connections challenges? Join Nico and Terri to find out how to resolve common issues, learn troubleshooting basics and other useful knowledge to ensure an efficient Connections on-premises environment. Level up your debugging skills while learning more about backend topics such as IBM Spectrum CfC, DB2, TDI, SSO, Directory and integrations like Docs, CCM, Cognos, FEB or Orient Me. Walk away with Connections best practice tips and tricks to help you provide steady and efficient social capabilities!
Domino 10 shipped jam packed with awesome new features you'll love. And in this webinar, you'll learn how to bring the best out of them with the Ytria tools. You'll learn about deletion logging, replication and synch-up, Domino On Disk Structures (ODS) and what they mean, and more—as well as how you can enable and enhance these features using our upcoming EZ Suite version 19.
On September 8, 2020 Andy Higgins and Heather Hottenstein presented Integrating HCL Domino and Microsoft 365 at DNUG. This was an upgraded presentation from the one they did in Boston at Collabsphere 2019, discussing technology that has been introduced in the last year.
For more information reach out to info@rprwyatt.com or visit rprwyatt.com
If your web application runs slowly, your reputation and business could suffer. To restore confidence, you must improve performance immediately, because frustrated users might not return to give you a second chance. You need “Web Performance First Aid.”
In this talk, Alan will share "first aid" techniques that can improve web performance within minutes.
Once your site starts to run faster, positive word of mouth may be generated among users, restoring confidence in your efforts and giving you breathing room to examine your application for further improvements.
Particular focus will be given to free tools that help diagnose performance bottlenecks, how to configure the Apache web server for speed, and making best use of the unique characteristics of IBM i.
Soccnx10: Best and worst practices deploying IBM Connectionspanagenda
Depending on deployment size, operating system and security considerations you have different options to configure IBM Connections. This session will show good and bad examples on how to do it from multiple customer deployments. We will describe things we found and how you can optimize your systems. Main topics include simple (documented) tasks that should be applied, missing documentation, automated user synchronization, TDI solutions and user synchronization, performance tuning, security optimizing and planning Single Sign On for mail, IBM Sametime and SPNEGO. This is valuable information that will help you to be successful in your next IBM Connections deployment project.
A presentation by Christoph Stoettner & Nico Meisenzahl
MES102 - Verse on Premises 2.0 Best PracticesDylan Redfield
In July 2020 Verse on Premises 2.0 was released, delivering a slew of new features. And when V12 of Notes and Domino ships, iNotes will be officially deprecated in favor of VoP. Join me to learn about the functionality that VoP 2.0 brings. Additionally, learn about deployment and administrative best practices to ensure your VoP offering meets your user’s needs.
Keith Brooks / KBMSG
Bill Malchisky / Effective Software Solutions, LLC
Leaving a mail system and going to Domino, or Connections Cloud, there are some basic things one must do, and not do.
Caution: Worst practices are here!
Comparison of two different migrations and how to make sure yours ends up as a completed mission. Including changing Operating Systems, hosted/on premises, project plans and arbitrary deadlines.
Buckle up, join Christoph and get ready to learn 50 tips and tricks you can implement right away to improve your IBM Connections environment. Your users will thank you as they too benefit from this best practice list gathered from real-world projects while deploying and administering IBM Connections On-premises. Walk away with knowledge covering anything from Cognos integration, docs, CCM and Forms Experience Builder to the back end and DB2, TDI and SSO.
BEST AND WORST PRACTICES DEPLOYING IBM CONNECTIONSNico Meisenzahl
Depending on deployment size, operating system and security considerations you have different options to configure IBM Connections. This session will show good and bad examples on how to do it from multiple customer deployments. We will describe things we found and how you can optimize your systems. Main topics include simple (documented) tasks that should be applied, missing documentation, automated user synchronization, TDI solutions and user synchronization, performance tuning, security optimizing and planning Single Sign On for mail, IBM Sametime and SPNEGO. This is valuable information that will help you to be successful in your next IBM Connections deployment project. Don’t miss it.
SUTOL 2016: IBM Connections Deployment Best and Worst Practicespanagenda
A presentation by Christoph Stoettner
Depending on deployment size, operating system and security considerations you have different options to configure IBM Connections. This session will show good and bad examples on how to do it from multiple customer deployments. IBM Champion Christoph Stoettner will describe things he found and how you can optimize your systems. This is valuable information that will help you to be successful in your next IBM Connections deployment project.
Experiences of implementing Oracle SOA Cloud Service in mid 2016. Topics include: topologies; user and key management; SSL and certificates; provisioning automation (eProseed Accelerator for Oracle Cloud); monitoring post go-live, etc.
This presentation was delivered by Simon Haslam and Kiran Tailor at the UKOUG Tech16 conference in Birmingham on 5/12/16.
EasyEngine - Command-Line tool to manage WordPress Sites on NginxrtCamp
EasyEngine is a Command Line Tool to Manage WordPress Sites on Nginx Server.
Apart from site management, it installs php, mysql, nginx, postfix, memcache and everything else required to run high traffic WordPress sites.
You can serve millions of page-views on $5 digitalocean plan using EasyEngine! ;-)
These slides are from WordCamp Mumbai 2014 session.
SHOW102 XPages: Still No Experience Necessary IBM Connect 2014Kathy Brown
IBM Connect 2014
XPages: Still No Experience Necessary
Step by Step see how to create an XPages application. Create a help desk ticket app, including CRUD (Create, Read, Update, Delete)
Want to build an XPages application, but not sure how? Kathy and Dave will show you how to build a sample help desk application from start to finish. Step by Step they will show you how to create, read, update, and delete tickets. Along the way you'll be introduced the most common XPages concepts like SSJS, Custom Controls, View and Repeat Controls, Extension Library, CSS frameworks, and much more. Go home with a working application that you can use today!
MongoDB: How We Did It – Reanimating Identity at AOLMongoDB
AOL experienced explosive growth and needed a new database that was both flexible and easy to deploy with little effort. They chose MongoDB. Due to the complexity of internal systems and the data, most of the migration process was spent building a new identity platform and adapters for legacy apps to talk to MongoDB. Systems were migrated in 4 phases to ensure that users were not impacted during the switch. Turning on dual reads/writes to both legacy databases and MongoDB also helped get production traffic into MongoDB during the process. Ultimately, the project was successful with the help of MongoDB support. Today, the team has 15 shards, with 60-70 GB per shard.
(ATS4-PLAT01) Core Architecture Changes in AEP 9.0 and their Impact on Admini...BIOVIA
AEP 9.0 will see several changes to the core infrastructure which will require changes to the way the server is managed as well as new deployment options that may affect the ways that protocol developers deliver content to their users. We will cover the addition of Tomcat as a new side by side service with Apache, new administration features: exporting and importing server configurations, maintenance mode, and new deployment options: HTTPS and HTTP only modes, deploying behind reverse proxies, and HTTP load balancing.
Engage 2022: The Superpower of Integrating External APIs for Notes and Domino...Serdar Basegmez
Session De13 from Engage User Group Conference 2022 with Thilo Volprich
"In the jungle, no application walks alone. Sooner or later, applications will need to interact with other internal and external applications.
Luckily, Notes/Domino is a powerful platform to access data from other systems and provides wide range of possibilities to interact with different APIs.
This session focuses on how to architect various integration scenarios to implement secure and robust solutions for your Notes/Domino platform.
Whether you use LotusScript or Java, come to this session to see the best practices with real-world use cases."
(25/May/2022)
1049: Best and Worst Practices for Deploying IBM Connections - IBM Connect 2016panagenda
Depending on deployment size, operating system and security considerations you have different options to configure IBM Connections. This session show good and bad examples on how to do it from multiple customer deployments. Christoph Stoettner describes things he found and how you can optimize your systems. Main topics include simple (documented) tasks that should be applied, missing documentation, automated user synchronization, TDI solutions and user synchronization, performance tuning, security optimizing and planning Single Sign On for mail, IBM Sametime and SPNEGO. This is valuable information that will help you to be successful in your next IBM Connections deployment project.
A presentation from Christoph Stoettner (panagenda).
Similar to Social Connections 12 - IBM Connections Adminblast (20)
Cloud-Native & Sustainability: How and Why to Build Sustainable WorkloadsNico Meisenzahl
Cloud-native technologies have revolutionized the way we build and deploy applications, enabling greater scalability, flexibility, and reliability. In this talk, Nico will explore the concept of sustainability in the context of cloud-native workloads and discuss the benefits of building sustainable applications.
Nico will cover best practices for designing and implementing sustainable cloud-native workloads, as well as share real-world examples.
This talk will guide you through the technical details of sustainable cloud-native workloads and provide actionable steps for everyone interested in building sustainable applications in the cloud.
Container Day Security: How to Prevent Your Kubernetes Cluster From Being HackedNico Meisenzahl
Nico will show how to prevent your Kubernetes cluster from being hijacked by introducing you to best practices as well as useful open-source projects based on real-world examples.
You’ll learn everything you need to know to build and run secure Kubernetes clusters including:
- basics like shift left and container image security
- ensure supply chain security
- implement Kubernetes policies
- introduce Kubernetes network security
- rely on Container Runtime Security
- many more…
Don't miss this session to learn everything you need to know to securely run your Kubernetes-based workloads.
Cloud Love Conference: Kubernetes is awesome, but...Nico Meisenzahl
… you should also know when not to use it. This is what Philip and Nico will talk about in this session. They will share all the things they have learned and seen over the past years.
Philip and Nico share real-world examples of what they've seen in projects and tell you what went wrong and what could have been done better. And why Kubernetes has been the wrong choice for some of them. Applications and use-cases that do not fit Kubernetes are just one example we will talk about.
Join this talk to learn how to take full advantage of Kubernetes and learn where it fits to run your workload successfully.
That said: We love Kubernetes!
How to Prevent Your Kubernetes Cluster From Being HackedNico Meisenzahl
Nico and Philip will show how to prevent your Kubernetes cluster from being hijacked by introducing you to best practices as well as useful open source projects based on real-world examples.You’ll learn everything you need to know to build and run secure Kubernetes clusters.
Container Days: Hijack a Kubernetes Cluster - a WalkthroughNico Meisenzahl
Nico will show how to hijack a Kubernetes cluster based on common attack vectors. You'll also learn why it's important to implement zero-trust to prevent data leaks and malicious workloads from being executed on a hijacked cluster.
Furthermore, he will show you how to protect your cluster from being taken over by sharing useful insights, configurations, and toolsets.
This talk is not intended to be an in-depth security talk, but to provide you with best practices and also make you aware of certain attack vectors and how to prevent them.
Nico will show how to hijack a Kubernetes cluster based on common attack vectors. You'll also learn why it's important to implement zero-trust to prevent data leaks and malicious workloads from being executed on a hijacked cluster.
Furthermore, he will show you how to protect your cluster from being taken over by sharing useful insights, configurations, and toolsets.
This talk is not intended to be an in-depth security talk, but to provide you with best practices and also make you aware of certain attack vectors and how to prevent them.
Azure Zürich User Group: Azure Kubernetes Service – more than just a managed ...Nico Meisenzahl
You are already running Kubernetes-based workloads on Azure Kubernetes Service and want to get more out of it?
This is your session! In this talk, Nico will show you all the nice features you get with AKS besides just Kubernetes. Learn all the details about the available add-ons, integrations, and toolsets to integrate and secure your Kubernetes-based applications.
Furthermore, Nico will give a preview of potential new features from the AKS roadmap.
Nico will show how to hijack a Kubernetes cluster based on common attack vectors. You'll also learn why it's important to implement zero-trust to prevent data leaks and malicious workloads from being executed on a hijacked cluster.
Furthermore, he will show you how to protect your cluster from being taken over by sharing useful insights, configurations, and toolsets.
This talk is not intended to be an in-depth security talk, but to provide you with best practices and also make you aware of certain attack vectors and how to prevent them.
Nico will show how to hijack a Kubernetes cluster based on common attack vectors. You'll also learn why it's important to implement zero-trust to prevent data leaks and malicious workloads from being executed on a hijacked cluster.
Furthermore, he will show you how to protect your cluster from being taken over by sharing useful insights, configurations, and toolsets.
This talk is not intended to be an in-depth security talk, but to provide you with best practices and also make you aware of certain attack vectors and how to prevent them.
Continuous Lifecycle: Enhance Your Compliance and Governance With Policy-Base...Nico Meisenzahl
Whether you want to get started with Governance or improve your current process, this talk will show you how to improve your compliance by implementing policy-based CI/CD (Continuous Integration / Continuous Delivery) with Open Policy Agent.
Nico will tell you all the details about Open Policy Agent and how you can easily integrate it into your existing CI/CD pipelines.
Join this session to learn all the details on how to stay compliant with project dependencies or control your Infrastructure and Kubernetes deployment pipelines.
Nico will show how to hijack a Kubernetes cluster based on common attack vectors. You'll also learn why it's important to implement zero-trust to prevent data leaks and malicious workloads from being executed on a hijacked cluster.
Furthermore, he will show you how to protect your cluster from being taken over by sharing useful insights, configurations, and toolsets.
This talk is not intended to be an in-depth security talk, but to provide you with best practices and also make you aware of certain attack vectors and how to prevent them.
Nico will show how to hijack a Kubernetes cluster based on common attack vectors. You'll also learn why it's important to implement zero-trust to prevent data leaks and malicious workloads from being executed on a hijacked cluster.
Furthermore, he will show you how to protect your cluster from being taken over by sharing useful insights, configurations, and toolsets.
This talk is not intended to be an in-depth security talk, but to provide you with best practices and also make you aware of certain attack vectors and how to prevent them.
GitLab Commit: Enhance your Compliance with Policy-Based CI/CDNico Meisenzahl
Whether you want to get started with Governance or improve your current process, this talk will show you how to improve your compliance by implementing policy-based CI/CD (Continuous Integration / Continuous Delivery) with GitLab CI and Open Policy Agent.
Philippe and Nico will tell you all the details about Open Policy Agent and how you can easily integrate it into your existing CI/CD pipelines. Join our session to learn how to improve compliance, from gating your dependencies to controlling your infrastructure.
Azure Meetup Hamburg: Production-Ready Terraform Deployments on AzureNico Meisenzahl
Infrastructure-as-code is key to keeping up with our rapidly changing world. In this talk, you will learn everything you need to get started with Terraform on Azure. Nico will show you all the fundamentals and best practices you need to know to use Terraform on Azure. Furthermore, you will learn how to scaffold a production-ready and secure Terraform project that you can use as a blueprint for your environments.
Join Nico and walk away with all the details you need to use Terraform in production!
Builder.ai Founder Sachin Dev Duggal's Strategic Approach to Create an Innova...Ramesh Iyer
In today's fast-changing business world, Companies that adapt and embrace new ideas often need help to keep up with the competition. However, fostering a culture of innovation takes much work. It takes vision, leadership and willingness to take risks in the right proportion. Sachin Dev Duggal, co-founder of Builder.ai, has perfected the art of this balance, creating a company culture where creativity and growth are nurtured at each stage.
Let's dive deeper into the world of ODC! Ricardo Alves (OutSystems) will join us to tell all about the new Data Fabric. After that, Sezen de Bruijn (OutSystems) will get into the details on how to best design a sturdy architecture within ODC.
GraphRAG is All You need? LLM & Knowledge GraphGuy Korland
Guy Korland, CEO and Co-founder of FalkorDB, will review two articles on the integration of language models with knowledge graphs.
1. Unifying Large Language Models and Knowledge Graphs: A Roadmap.
https://arxiv.org/abs/2306.08302
2. Microsoft Research's GraphRAG paper and a review paper on various uses of knowledge graphs:
https://www.microsoft.com/en-us/research/blog/graphrag-unlocking-llm-discovery-on-narrative-private-data/
UiPath Test Automation using UiPath Test Suite series, part 4DianaGray10
Welcome to UiPath Test Automation using UiPath Test Suite series part 4. In this session, we will cover Test Manager overview along with SAP heatmap.
The UiPath Test Manager overview with SAP heatmap webinar offers a concise yet comprehensive exploration of the role of a Test Manager within SAP environments, coupled with the utilization of heatmaps for effective testing strategies.
Participants will gain insights into the responsibilities, challenges, and best practices associated with test management in SAP projects. Additionally, the webinar delves into the significance of heatmaps as a visual aid for identifying testing priorities, areas of risk, and resource allocation within SAP landscapes. Through this session, attendees can expect to enhance their understanding of test management principles while learning practical approaches to optimize testing processes in SAP environments using heatmap visualization techniques
What will you get from this session?
1. Insights into SAP testing best practices
2. Heatmap utilization for testing
3. Optimization of testing processes
4. Demo
Topics covered:
Execution from the test manager
Orchestrator execution result
Defect reporting
SAP heatmap example with demo
Speaker:
Deepak Rai, Automation Practice Lead, Boundaryless Group and UiPath MVP
Slack (or Teams) Automation for Bonterra Impact Management (fka Social Soluti...Jeffrey Haguewood
Sidekick Solutions uses Bonterra Impact Management (fka Social Solutions Apricot) and automation solutions to integrate data for business workflows.
We believe integration and automation are essential to user experience and the promise of efficient work through technology. Automation is the critical ingredient to realizing that full vision. We develop integration products and services for Bonterra Case Management software to support the deployment of automations for a variety of use cases.
This video focuses on the notifications, alerts, and approval requests using Slack for Bonterra Impact Management. The solutions covered in this webinar can also be deployed for Microsoft Teams.
Interested in deploying notification automations for Bonterra Impact Management? Contact us at sales@sidekicksolutionsllc.com to discuss next steps.
Transcript: Selling digital books in 2024: Insights from industry leaders - T...BookNet Canada
The publishing industry has been selling digital audiobooks and ebooks for over a decade and has found its groove. What’s changed? What has stayed the same? Where do we go from here? Join a group of leading sales peers from across the industry for a conversation about the lessons learned since the popularization of digital books, best practices, digital book supply chain management, and more.
Link to video recording: https://bnctechforum.ca/sessions/selling-digital-books-in-2024-insights-from-industry-leaders/
Presented by BookNet Canada on May 28, 2024, with support from the Department of Canadian Heritage.
JMeter webinar - integration with InfluxDB and GrafanaRTTS
Watch this recorded webinar about real-time monitoring of application performance. See how to integrate Apache JMeter, the open-source leader in performance testing, with InfluxDB, the open-source time-series database, and Grafana, the open-source analytics and visualization application.
In this webinar, we will review the benefits of leveraging InfluxDB and Grafana when executing load tests and demonstrate how these tools are used to visualize performance metrics.
Length: 30 minutes
Session Overview
-------------------------------------------
During this webinar, we will cover the following topics while demonstrating the integrations of JMeter, InfluxDB and Grafana:
- What out-of-the-box solutions are available for real-time monitoring JMeter tests?
- What are the benefits of integrating InfluxDB and Grafana into the load testing stack?
- Which features are provided by Grafana?
- Demonstration of InfluxDB and Grafana using a practice web application
To view the webinar recording, go to:
https://www.rttsweb.com/jmeter-integration-webinar
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered QualityInflectra
In this insightful webinar, Inflectra explores how artificial intelligence (AI) is transforming software development and testing. Discover how AI-powered tools are revolutionizing every stage of the software development lifecycle (SDLC), from design and prototyping to testing, deployment, and monitoring.
Learn about:
• The Future of Testing: How AI is shifting testing towards verification, analysis, and higher-level skills, while reducing repetitive tasks.
• Test Automation: How AI-powered test case generation, optimization, and self-healing tests are making testing more efficient and effective.
• Visual Testing: Explore the emerging capabilities of AI in visual testing and how it's set to revolutionize UI verification.
• Inflectra's AI Solutions: See demonstrations of Inflectra's cutting-edge AI tools like the ChatGPT plugin and Azure Open AI platform, designed to streamline your testing process.
Whether you're a developer, tester, or QA professional, this webinar will give you valuable insights into how AI is shaping the future of software delivery.
Accelerate your Kubernetes clusters with Varnish CachingThijs Feryn
A presentation about the usage and availability of Varnish on Kubernetes. This talk explores the capabilities of Varnish caching and shows how to use the Varnish Helm chart to deploy it to Kubernetes.
This presentation was delivered at K8SUG Singapore. See https://feryn.eu/presentations/accelerate-your-kubernetes-clusters-with-varnish-caching-k8sug-singapore-28-2024 for more details.
"Impact of front-end architecture on development cost", Viktor TurskyiFwdays
I have heard many times that architecture is not important for the front-end. Also, many times I have seen how developers implement features on the front-end just following the standard rules for a framework and think that this is enough to successfully launch the project, and then the project fails. How to prevent this and what approach to choose? I have launched dozens of complex projects and during the talk we will analyze which approaches have worked for me and which have not.
Connector Corner: Automate dynamic content and events by pushing a buttonDianaGray10
Here is something new! In our next Connector Corner webinar, we will demonstrate how you can use a single workflow to:
Create a campaign using Mailchimp with merge tags/fields
Send an interactive Slack channel message (using buttons)
Have the message received by managers and peers along with a test email for review
But there’s more:
In a second workflow supporting the same use case, you’ll see:
Your campaign sent to target colleagues for approval
If the “Approve” button is clicked, a Jira/Zendesk ticket is created for the marketing design team
But—if the “Reject” button is pushed, colleagues will be alerted via Slack message
Join us to learn more about this new, human-in-the-loop capability, brought to you by Integration Service connectors.
And...
Speakers:
Akshay Agnihotri, Product Manager
Charlie Greenberg, Host
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...James Anderson
Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM
The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management.
The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM).
Speakers:
Bob Boule
Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle.
Gopinath Rebala
Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.
3. • Consultant at panagenda
• IBM Connections since version 3.0 / 2010
• IBM Notes / Domino since 2008
• Focusing in ICS
– Deployment & consulting
– Optimization and migration
• “panagendian” since 2016
• IBM Champion
Nico Meisenzahl
3
@nmeisenzahl
linkedin.com/in/nicomeisenzahl
meisenzahl.org
nico.meisenzahl
+49 170 7355081
nico.meisenzahl@panagenda.com
4. • Senior Consultant at panagenda
– IBM Notes / Domino since 1999
– IBM Connections since version 2.5 / 2009
• Experience in
– Migrations
– Deployments
– Administration
– Performance Analysis
• Focusing in
– Deployment and Optimizing IBM Connections
– Monitoring / panagenda ConnectionsExpert
• Husband and father
• Beer or Wine?
Christoph Stoettner
4
@stoeps
linkedin.com/in/christophstoettner
www.stoeps.de
christophstoettner
+49 173 8588719
christoph.stoettner@panagenda.com
6. #1 Are your iOS push notifications working?
• APNS (Apple Push Notification Service) certificates expired on September 20!
• iFix is available for 4.5 CR5, 5.0 CR4, 5.5 CR3, 6.0 (June Fix)
– http://www-
01.ibm.com/support/docview.wss?uid=swg22008484&myns=swglotus&mynp=OCSSYGQH&mync=E&c
m_sp=swglotus-_-OCSSYGQH-_-
6
7. #2 Use custom user for WebSphere services
• Stopping WebSphere requires a user and password
– soap.client.props
– Service definition (/etc/init.d/ or Windows registry)
• Increase security
– Use different passwords
• Plain password on Linux
• Encoded (not encrypted) on Windows
– Create a local WebSphere user with “operator” access level
• WebSphere service user only needs access level to start/stop/restart the environment
7
8. #3 Surveys Setup with Connections 6.0
• stax.properties needs to be customized
– Java 1.8 only
– Within <installdir>/java_1.8_64/jre/lib
• WebSphere Plugin ESI Cache needs to be disabled
– WAS 8.5.5.10 +
8
9. #4 globalSenderEmailAddress is not working completely
• <property name="globalSenderEmailAddress">mail@mail.com</property>
<property name="alwaysUseGlobalSender">true</property>
<property name="globalSenderName">Connections Newsletter</property>
• If you use globalSenderEmailAddress (notification-config.xml)
– Mails contain reply-to address “news-admin@example.com”
– So replies of users can’t be delivered
• You need to configure all mail addresses one by one
– RegEx is your friend: w*-admin@example.com
9
10. #5: Orient Me Installation Cheat Sheet
• Define mount points
– /pv
– /var/lib
– /opt
• Don’t use Hosts entries!
– If you need them startup a small bind container instead
• Installation is possible using sudo but you will need the root password
• Setup needs direct internet access
– Customize Installation to allow proxy usage
• Change your admin user password!
– Some manually tasks are needed
• More information
– https://meisenzahl.org/2017/06/02/social-connections-11-need-know-
orient/
10
11. #6 WAS & 4096-bit SSL keys
• Will not work out of the box if using 4096-bit key
• On IBM HTTP Server
• With any third-party integration (iNotes, …)
• You need to copy the unrestricted java policy to every node
– Download here https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=jcesdk
– Copy to <was_home>/<java_version>/jre/lib/security
– You need to redo this every WebSphere Java update ;-)
• WebSphere Application Server is now able to connect to those hosts
11
12. #7 Do not change the Community catalog seedlist url
• Using https://cnx.pana.local
– Connections will try to access seedlists using HTTPS on host cnx.pana.local
– Does not support TLS 1.2
• Using https://localhost
– This is the default value which will do something complete different
– Connections will use a internal (not HTTPS) request to access the seedlists
– Supports multi-node environments
12
13. #8 Do not trigger seedlist validation regularly
• Seedlist validation does not delete temp files
– New seedlist data will be created every time
– Could cause full disk space
• <localdata>/search/persistence/seedlist*.attempted.xml
• Amount depends on environment
• Happens when
– Accessing /search/serverStatus
– Calling SearchService.validateSeedlist("")
13
14. #9 Configure Textbox.io using JVM generic properties
• You can use JVM generic properties instead of the application.conf file
– -Dephox.allowed-origins.origins.0=https://cnx.pana.local
-Dephox.allowed-origins.origins.1=http://cnx.pana.local
-Dephox.allowed-origins.url=https://cnx.pana.local/ephox-allowed-origins/cors
– Skip the last line for 5.5 CR2 / 6.0 and later.
• It prevents new code to be loaded
14
15. #10 You’re using SPNEGO and don’t know LimitRequestFieldSize?
• If so, some of your users may be unable to use SSO
– Users with many group memberships
– Mostly VIPs ;-)
• SPNEGO authentication header can have up to 12392 bytes
– Default LimitRequestFieldSize size is 8192 bytes
• Add LimitRequestFieldSize 16384 into your httpd.conf
– Will prevent: HTTP 400 - Bad Request (Request header too long)
– The whole group membership is stored within the header
15
16. #11 Tuning your database
• Heavily increase performance by running DB2 maintenance tasks
• Scripts available within <cnxroot>/xkit/connections.sql/
• Run in following order:
– Runstat
– Reorg
– Runstat
• Run them regularly
• You need to build own scripts for custom databases
– https://meisenzahl.org/2017/02/25/connections-database-performance-tuning/
16
17. #12: Download Connections 6.0 software
• This list of part numbers will help you
– http://www-01.ibm.com/support/docview.wss?uid=swg24043485
– Unfortunately, not everything is included, but it‘s a good starting point
17
18. #13 “TLS 1.2 only” environments
• Possible, but you need:
– Connections 6.0
– Connections 5.5 CR2 +
• including latest Textbox.io, FEB
• WebSphere 8.5.5.9
• FileNet Config Manager will not work
• Docs/Viewer 2 CR1 IF7 +
• You need to configure some more stuff (Documentation)
• Java 1.8 (6.0 only): Customize JVM Generic Properties
– -Dcom.ibm.jsse2.overrideDefaultTLS=true
• Please do not try this with a previous Connections version!
– You will find the whole story here https://meisenzahl.org/2016/10/26/using-tls-1-2-only-configuration-
with-ibm-connections/
18
19. #14 Tuning search index
• Only use one search dictionary!
– Issues since Connections 2.5
• Enable “Accent-insensitive search”
– You will find “René” when searching for ”Rene”
• Enable “1 to 2 matching”
– You will find “Stoettner” when searching for “Stöttner”
• Integrate Connections type ahead search (Apache Solr)
• “Ignore Punctuation” setting is not working
– Searching for “IBM” will not display “I.B.M” within results
19
20. #15 Orient Me sizing
• CFC Master, Boot, Proxy node
– 4 CPU, 2.x GHZ, 8GB memory, and at least 100GB disk
• Worker node
– 8 CPU, 2.x GHZ, 24GB memory, and 100GB disk
• Storage (for MongoDB and Solr indexes)
– 100GB disk
• You would like to run a small Orient Me development environment?
– 6.0.0.1+ will not run with less than 8 Cores
– Downsizing Orient Me is possible but not supported!
– More information:
• https://meisenzahl.org/2017/07/06/downsizing-orient-me/
20
21. #16 How-to: Set EMPLOYEE_EXTENED role for all users
• Export all user mail addresses using a SQL export
• Change role using a wsadmin call
– ProfilesService.setBatchRole(EMPLOYEE_EXTENDED, "mail.txt")
• More information
– http://www.stoeps.de/adding-employee_extended-to-all-users/
• Changing role directly within the database is not supported!
21
22. #17 Using Textbox.io spellchecking service with Chrome
• You need to import your SSL chain into the WebSphere cacerts store
– cacerts store is located in <was_home>/<java_version>/jre/lib/security
– You need to redo this every WebSphere Java update
• If not, you will get a HTTP 500 for https://<url>/ephox-spelling/1/correction
• More information (thanks Michael!)
– https://www.urspringer.de/2016/02/16/ssl-certificate-issue-with-ephox-textbox-io-editor-in-ibm-
connections-5-5/
22
23. #18 Read-only and read-write profile fields
• Synced profile fields should be read-only!
• Please recheck your configuration
– We have seen this too many times!
• Customize profiles-type.xml as needed
– readwrite
– read
23
24. #19 ACCE (FileNet Admin Interface) login isn’t working
• Exclude /acce from mod_deflate (httpd.conf)
– SetEnvIf Request_URI ^/acce(.*) no-gzip dont-vary
• Use English as browser language
24
25. #20 Surveys setup: Browser language
• Launches on new installation or upgrade when access /surveys
• Will not work with non-English browser languages
– UI is only available in English
• Tip: Use portable Firefox
25
26. #21 Fix for IBM Cloud private 1.2 & CfC 1.1
• Certificates for GUI and Docker registry expired at August 22
– Access to GUI is denied after successfully authentication
– Pull/push request are not working (like Orient Me installation)
• IBM released a Fix which replaces those certificates
– https://www.ibm.com/developerworks/community/blogs/fe25b4ef-ea6a-4d86-a629-
6f87ccf4649e/entry/Certificate_update?lang=en
• Not needed for new deployments
26
27. #22 Post-upgrade task: Connections fixes
• Delete temp directories after every iFix or CR update
– <appsrv-profile>/temp/*
– <appsrv-profile>/wstemp/*
• Use a shell/cmd script!
– Otherwise look twice or search your backup!
• If not, you will get nice UI bugs ;-)
27
28. #23 Debug FileNet without ACCE
• Why? You have issues on startup or you are unable to access /acce
• Add debug settings using JVM generic properties
– -DskipTLC=true -Dlog4j.configuration=file://log4j.xml
• More information
– https://meisenzahl.org/2015/12/13/debugging-filenet-issues-without-using-acce/
28
30. #25 When doing a FileNet or Docs upgrade…
• …do not forget to remap applications
– FileNet & Navigator
– Docs, Viewer & Conversion
• Without they will not be accessible through IHS
30
31. #26 Recheck /docs and /viewer interservice URL
• There were some issues in previous versions
– Missing interservice URLs
– Double entries
• Some stuff isn’t working properly without
– CCM integration
– Access file preview via Activity Stream
31
32. #27 New Orient Me deployments
• Use latest fix version (6.0.0.3)
• 6.0.0.2 fixes a Docker version issue
– Older versions will not install successfully!
• Every fix release needs a complete uninstall & reinstall
– This may change in the future
• Check your mountpoints
32
33. #28 How-to: Delete Communities using REST
• First REST call will put the Community into the trash
• Second call will purge the Community completely
• Tip: When creating Communities within monitoring checks you should execute the REST
call twice!
• More information
– https://www-
10.lotus.com/ldd/lcwiki.nsf/xpAPIViewer.xsp?lookupName=IBM+Connections+5.5+API+Documentation
#action=openDocument&res_title=Deleting_communities_programmatically_ic55&content=apicontent
33
34. #29 Post-upgrade task: Connections database scripts (DB2)
• Recheck NUMDB value after every Connections database upgrade
– db2 get dbm cfg | grep NUMDB
• SQL update scripts sometimes include NUMDB settings
• If not, you will get issues when using integrations like Docs, FEB or third-
party
34
35. #30 Oracle: Check user password expiration
• Oracle database users are created through the Connections Wizard SQL
scripts
• Oracle default user password expiration value is 365 days
– ALTER PROFILE DEFAULT LIMIT PASSWORD_LIFE_TIME UNLIMITED
35
36. #31 Debug user synchronization
• Profile & user synchronization (<tdisol>/etc/profiles_tdi.properties)
– source_ldap_debug=true
– debug_*=true (update profile, collect, managers, …)
– trace_profile_tdi_javascript=* (debug, fine, finer, all)
• TDI issues (<tdisol>/etc/log4j.properties)
– log4j.rootCategory=DEBUG, Default
• sync_updates_clean_temp_files=false
– This will force TDI not to delete the temp files
• LDAP export
• Database export
36
37. #32 Connections and Docs with UNC share access
• Recheck your configuration after installing Connections or Docs UNC share
access
– WebSphere variables - Slashes have to be forward slashes
– sib-engine.xml - Slashes have to be backward slashes
• Alternatively use ${MESSAGE_STORE_PATH}
• More information (Thanks Victor!)
– https://notesbusters.com/2016/02/22/connections-5-5-install-problem-for-
websphere-cluster-settings-with-unc-shares/
37
38. #33 Don’t miss to import the DB2
• DB2 will work 90 days without a license
• You can check your license status using db2licm –l
– Expiry date: "Permanent“
• Tip: You will need a new TSAMP license when using DB2 HADR with TSAMP
after upgrading to DB2 10.5 FP8 (Connections 5.5)
38
39. #34 Debug Windows Connections plugin
• Launch DITrace.exe (<installpath>/Connections Desktop Plugins)
• Reproduce issues
• Save traces using DITrace.exe
• More information
– https://www-01.ibm.com/support/docview.wss?uid=swg21681420
39
40. #35 Connections & Google Chrome 60
• Chrome 60 breaks some stuff in nearly all Connections versions (4.0, 4.5, 5,
5.5 6.0)
– Commenting status updates will not work
– Community events functionally is broken
• IBM released fixes for 5.5 CR1+ and 6.0
– http://www-01.ibm.com/support/docview.wss?uid=swg22007236
40
41. #36 Strong ciphers configuration (SSL LABS A)
• SSLCipherSpec ALL NONE
• SSLCipherSpec ALL +TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
SSLCipherSpec ALL +TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SSLCipherSpec ALL +TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
SSLCipherSpec ALL +TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
SSLCipherSpec ALL +TLS_RSA_WITH_AES_128_GCM_SHA256 SSLCipherSpec
ALL +TLS_RSA_WITH_AES_256_GCM_SHA384 SSLCipherSpec ALL
+TLS_RSA_WITH_AES_128_CBC_SHA256 SSLCipherSpec ALL
+TLS_RSA_WITH_AES_256_CBC_SHA256
• Notes 8.5.x and < TLS 1.2 support (SSL LABS A-)
– SSLCipherSpec ALL +TLS_RSA_WITH_AES_128_CBC_SHA
– SSLCipherSpec ALL +TLS_RSA_WITH_AES_256_CBC_SHA
41
42. #37 Connections browser push notification
• Connections 5.5 and 6 only
– New App: PushNotification
• Based on long-polling requests
– Client sends POST request to /push/form/comet/connect
– Server holds the request open and waits until response information becomes available
– Server responses or timeout kills the request
– Client sends new POST request...
• Use Nginx as proxy
– https://www.ibm.com/support/knowledgecenter/SSYGQH_6.0.0/admin/install/inst_post_nginx.html
• Or recheck your threads configuration on IHS and WAS
– ThreadLimit in httpd.conf
– Web Container Thread Pool for every App-Server
42
43. #38 Customize log language
• WAS: Customize JVM generic properties for all JVMs
– -Duser.language=en -Duser.region=US
– Non-English logs are causing issues
• TDI: Customize ibmdisrv.sh/bat
– LOG_4J="-Dlog4j.configuration=file:etc/log4j.properties”
-Duser.language=en -Duser.region=US
43
44. #39 Secure your mod_proxy configuration
• LoadModule proxy_module modules/mod_proxy.so
LoadModule proxy_http_module modules/mod_proxy_http.so
• ProxyRequests Off
• <Proxy *>
Order deny,allow
Allow from all
</Proxy>
• ProxyPass /abc http://<fqdn>/abc
ProxyPassReverse /abc http://<fqdn>/abc
44
45. #40 Configure log rotation
• WAS
– Within JVM settings
– Don't forget to configure all JVMs
– Issues within Connections installer (5.5 only)
• Recheck settings after installation!
• DB2
– db2 update dbm cfg using diagsize 256
– Delete logs after X days (crontab, scheduled task)
• TDI
– Customize <tdisol>/etc/log4j.properties
• log4j.appender.Default=org.apache.log4j.RollingFileAppender
log4j.appender.Default.MaxFileSize=10MB
log4j.appender.Default.MaxBackupIndex=10
• IHS
– Customize httpd.conf
• ErrorLog "|/<ihsroot>/bin/rotatelog –l /opt/IBM/HTTPServer/log/error_log.%Y.%m.%d 10M"
• CustomLog"|/<ihsroot>/bin/rotatelog –l /opt/IBM/HTTPServer/log/access_log.%Y.%m.%d 10M" common
– Delete logs after X days using crontab or scheduled task
45
46. #41 Orient Me & SPNEGO
• SSO will not work by default
• Customize configmap connections-env
– ic-homepage-url: https://cnx6.pana.local/social/auth/blue-auth
• Redeploy pods
– orient-webclient-*
– itm-services-*
46
47. #42 Monitoring WAS
• Using PMI
– Analyze WebSphere related stuff (Connections pool size, Heap size)
– Included
– More information
• http://www.ibm.com/support/knowledgecenter/SS7K4U_8.5.5/com.ibm.websphere.nd.multiplatform.doc/ae/c
prf_pmidata.html
• Using Health Center
– Full stack (CPU, I/O, Java runtime, Threads)
– Eclipse IDE Plugin
– More information
• http://www.ibm.com/support/knowledgecenter/SS3KLZ/com.ibm.java.diagnostics.healthcenter.doc/topics/intr
oduction.html
47
48. #43 How-to: Add customized profile types
• Why?
– Customize displayed/available profile fields
– Enable or disable profile widgets
• Configure “profileType” within map_dbrepos_from_source.properties
• Customize profiles-types.xml
• Customize widgets-config.xml
– <layout resourceSubType=”<customprofile>”>
…
</layout>
– profileType default needs to be the last one!
48
49. #44 Orient Me & https only Connections environment
• You need to customize the connections-env configmap
– Redeploy orient-webclient-* and itm-services-* pods afterwards
• More information (Thanks Charlie!)
– https://www.ibm.com/developerworks/community/blogs/4021cbfe-77ed-4a39-89de-
59b2fd63adb5/entry/Configuring_Connections_srever_to_only_allow_https_traffic_causes_status_upda
tes_likes_comments_from_Orient_Me_to_fail
49
50. #45 How-to: Configure mobile push using forward proxy
• Connections environment is unable to connect to Apple/Google push
gateway directly
• Customize mobile-config.xml
– <ProxyHost> </ProxyHost>
<ProxyPort> </ProxyPort>
• Configure authentication alias if needed
– proxyMobilePushNotificationJAASAuth
50
51. #46 WebSphere & DH key size
• WAS supports only 2048 bit or less
• Enforce a specific DH key size
– <washome>/<java_version>/jre/lib/security/java.security
• jdk.tls.disabledAlgorithms=DH keySize <768
• Define DH key size on Domino
– Default DH key size was increased to 4096 bit with Domino 9.0.1 FP4 IF2
– SSL_DH_KEYSIZE=2048 (notes.ini)
• Requires at least Domino 9.0.1 FP3 IF2
– Mail integration!
• More information (Thanks Ben!)
– https://collaborationben.com/2016/07/12/ibm-connections-mail-and-ephemeral-diffie-hellman-key-
size-error/
51
53. #48 Extend wsadmin on Linux
• rlwrap will allow you to use command history and arrow keys within wsadmin
– https://github.com/hanslub42/rlwrap
• rlwrap ./wsadmin –lang jython
• This is also working for other command line based tools
– db2
– SQLPLUS
53
54. #49 Enable LDAP groups with two or more Domino directories
• Enable your Connections environment to use more than one Domino directory
– Internal and external users
– Special directory topology
• Define your repositories with their Base DN
• You need to edit the wimconfig.xml
– These changes are not supported within ISC
• Customize following lines (one line for every repository)
– OLD: <config:baseEntries name="o=pana" nameInRepository="o=pana"/>
NEW: <config:baseEntries name="o=pana" nameInRepository=""/>
– No need to customize other lines!
54
55. #50 Monitoring IHS
• Customize httpd.conf
– LoadModule status_module modules/mod_status.so
– <IfModule mod_status.c>
ExtendedStatus On
<Location /server-status>
SetHandler server-status
Order deny, allow
Allow from 127.0.0.1
</Location>
</IfModule>
• Access using /server-status
55
56. #51 connectionsAdmin J2C role
• Do not use a local WebSphere repository user
• Many problems are related to this
– Thumbnail generation in Gallery (3.0)
– CCM and Docs stop working after some time (5.5)
– Easier CCM migration (side-by-side)
• Changing the connectionsAdmin user is possible
– https://www-10.lotus.com/ldd/lcwiki.nsf/dx/Change_password_of_connectionsAdmin
56
57. #52: Use variables in widgets-config.xml
• Widget documentations often show path names in widgets-config.xml
• Or even worse copies files to application ear
• Better move the files to
{CONNECTIONS_CUSTOMIZATION_PATH}/communities
• Use {communitiesSvcRef} as a replacement in widgets-config.xml
• If you want to change the PATH, just change the WebSphere variable
57
58. #53 Orient Me: Indices cleaner job
• Indicies will not be deleted which could cause full disk space
• /var/lib/elasticsearch/
• Solution #1: Create a short script and schedule it using cronjob
– More information
• http://www.stoeps.de/orient-me-elasticsearch-and-disk-space/
• Solution #2: Change Docker storage driver to Devicemapper
– Devicemapper is the recommended one for RHEL/CentOS (by Docker)
– Will be official supported by IBM in future Orient Me releases
– More information
• https://meisenzahl.org/2017/09/04/orient-me-rethink-your-docker-
storage-driver-configuration/
58