the latest, ultimative final version, current release, approved, last minute changes included...
TRANSCRIPT
The Latest, Ultimative Final Version, Current Release, Approved,
Last Minute Changes IncludedPost-Installation Checklist
Sjaak Ursinusilionx
Martin LeyrerIBM
PLATINUM & CHAMPAGNE SPONSORS
GOLD SPONSORS
SILVER SPONSORS
BRONZE SPONSORS
Martin Leyrer - IBM
• Working 5 years for IBM as an IT-Specialist
• ICS product stack since 1995
• Twitter → leyrer• Linkedin →
www.linkedin.com/in/leyrer● Blog → www.leyon.at
Sjaak Ursinus - ilionx
• Working 11 Years for ilionx as aconsultant
• Working with IBM Connections since Jan 2007
• IBM Champion since start of program• Twitter → sursinus• Skype → sursinus• Linkedin → www.linkedin.com/in/sursinus• Various other social website’s
Why ?
• Even we forget things• Info is scattered across the
Connections documentation• So far no singular check list has
emerged• Overview of „optional“ configuration
steps
Disclaimer
• NOT an installation guide• Probably incomplete• Biased towards what we think is
useful
• If you want to add something, please let us know
01. Increase Number ofOpen Files (Linux only)
• default is: 1024 open files/process• recommended limit: 8192• Martins recomendation: 65536• „ulimit -n“ to check• To change, edit/etc/security/limits.conficuser soft nofile 65536icuser hard nofile 65536
02. JDBC Connection Pool Size
• Initial WebSphere JDBC pool size:10 connections/connection pool
• Connections 5.0 CR1 Performance Tuning Guide has recommendations
• Use scripts from „Connections Administration & Scripting 101“ to set automatically
03. JVM Heap Size
• Connections needs „sufficient“ heap space, esp. Search
• Connections 5.0 CR1 Performance Tuning Guide has recommendations
• Use scripts from „Connections Administration & Scripting 101“ to set automatically
04. Change WebsphereDefault Log Language
• Open Websphere Integrated Solution Console
• Go to Servers->Server Types -> „Websphere application servers“ and select server you want to change
• Server Infrastructure → Java and Process Management → Process definition → Additional properties → Java Virtual Machine
• Add to “Generic JVM arguments”:-Duser.language=en -Duser.region=GB
05. Proper IHS TLS Settings SSLProtocolDisable SSLv2 SSLv3SSLCompression off SSLCipherSpec ALL NONESSLCipherSpec TLSv12 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256SSLCipherSpec TLSv12 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256SSLCipherSpec TLSv12 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384SSLCipherSpec TLSv12 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384SSLCipherSpec ALL TLS_RSA_WITH_AES_128_GCM_SHA256SSLCipherSpec ALL TLS_RSA_WITH_AES_256_GCM_SHA384SSLCipherSpec ALL TLS_RSA_WITH_AES_128_CBC_SHA256SSLCipherSpec ALL TLS_RSA_WITH_AES_256_CBC_SHA256SSLCipherSpec ALL TLS_RSA_WITH_AES_128_CBC_SHASSLCipherSpec ALL TLS_RSA_WITH_AES_256_CBC_SHA
# Enable strict CBC padding# https://www-01.ibm.com/support/docview.wss?uid=swg21692502SSLAttributeSet 471 1
Header add Strict-Transport-Security "max-age=15768000"
06. Redirect All Traffic ToHTTPS
06. Redirect All Traffic ToHTTPS
● httpd.conf
LoadModule rewrite_module modules/mod_rewrite.so
RewriteEngine onRewriteRule ^(.*) https://social.example.com/$1/ [R,L]
<IfModule mod_ibm_ssl.c>...
07. File Downloads ThroughIBM HTTP Server
• Improves performance significantly• Available for files stored in
– Activities– Files– Libraries– Mobile– Wikis
• Advanced Setuphttp://www-01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/install/t_install_post_files_downloads.dita?lang=en
08. Add A Reverse CachingProxy
• „Optional“ configuration• Improves performance, especially
over wide area networks (WAN)• Lots of options:
– WebSphere Edge Components– Nginx– Varnish– Apache– Squid
09. Push Notifications forMobile
• Notifications are sent, when the following events occur:
– The user is invited to join a community.– The user is invited to join a person's
network.– A task is assigned to the user.– A user is @mentioned.– A comment is added to content that the
user owns.– A synced file is modified on the server and
updated on the user's mobile device.
09. Push Notifications forMobile
• The following ports must be open on each node in the cluster where the Mobile application is installed:
– Android● Port 443 (HTTPS only)
– iOS● Ports 2195 and 2196
09. Push Notifications forMobile
• Check out & edit mobile-config.xml• <Push enabled="true">• <RememberPassword>true</Remem
berPassword>
...• http://www-
01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/overview/t_configure_push-note_mobile.dita?lang=en
10. Email-NotificationSender
• Default: generic email address, such as [email protected]
• Displayname and Email-Address can be changed
• Globally or per app• Easy setup
http://www-01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/admin/t_admin_act_managing_notifications.dita?lang=en
10. Email-NotificationSender
• notification-config.xml
<properties>
<property name="globalSenderName">IBM Connections Administrator</property>
<property name="globalSenderEmailAddress">[email protected] </property>
</properties>
11. Email-NotificationMobile Links
• Not included by default• Adds link to notification that opens in
mobile Connections app
• Easy setuphttp://www-01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/admin/t_admin_notifications_include_mobile_links.dita?lang=en
11. Email-NotificationMobile Links
• notification-config.xml
• <properties>
• ... <includeMobileLinksInNotifications>true</includeMobileLinksInNotifications>
• ...
• </properties>
12. Email-NotificationTLS Links
• Per default E-Mail Notifications contain only http links
• Today, Connections should be https only
• Easy setupLotusConnections-config.xml:<forceConfidentialCommunications enabled="true"/>
12. Email-NotificationTLS Links
• LotusConnections-config.xml
• <forceConfidentialCommunications enabled="true"/>
13. Add Search Languages
• Not everyone speaks & creates english-only conten
• You can have multiple languages• You have to define one primary
language• Recreate Searchindex after adding
languages
13. Add Search Languages
wsadmin -lang jython -user wasadmin -password [PWD]
execfile("searchAdmin.py")
SearchCellConfig.checkOutConfig("D:/temp", "ic-cell")
SearchCellConfig.enableDictionary("fr","${SEARCH_DICTIONARY_DIR}")
SearchCellConfig.enableDictionary("de","${SEARCH_DICTIONARY_DIR}")
SearchCellConfig.enableDictionary("it","${SEARCH_DICTIONARY_DIR}")
SearchCellConfig.setDefaultDictionary("de")
SearchCellConfig.checkInConfig("D:/temp", "ic-cell")
14. More Language RelatedSearch Settings
• For better multilingual support set
• search.ignore.punctuation.enabled
• search.language.sensitivity.enabled
• oneToTwoMapping.enabled
14. More Language RelatedSearch Settings
• Set via wsadmin command LCConfigService.updateConfig()
• Easy setuphttp://www-01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/admin/r_admin_common_props_wsadmin.dita?lang=en
15. Enable User To SetLanguage Preference
15. Enable User To SetLanguage Preference
• Default: User interface is displayed in the language set by the locale settings of the web browser.
• Easy Setup:http://www-01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/admin/t_admin_common_enable_lang_change.dita?lang=en
15. Enable User To SetLanguage Preference
• LotusConnections-config.xml
<languageSelector cookieDomain="" cookieName="" defaultLanguage="" enabled="true"usePermanentCookie ="false">
<language lang="en">English</language>
<language lang="de">Deutsch</language>
<language lang="fr">Fran\u00e7ais</language> </languageSelector>
16. Enable URL Preview
16. Enable URL Preview
• Connections (WAS) needs to be able to access „The Internet“
• Can facilitate a Proxy• Easy to set-up
http://www-01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/admin/t_admin_news_url_preview_config.dita?lang=en
17. Enable Sync For Files
17. Enable Sync For Files
• Not always enabled by default, so verify
• Enable before deploying the Client-Plugin
• Easy setuphttp://www-01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/admin/t_admin_enabling_file_sync.dita?lang=en
17. Enable Sync For Files
• files-config.xml
<fileSync enabled="true"> <clientDownloadLink enabled="true" url="http://public.dhe.ibm.com/ software/dw/ibm/connections/IBMConnectionsMSDesktop.zip"/><autoVersioning enabled="true"/></fileSync>
18. Enable Sync For Mobile
18. Enable Sync For Mobile
• Not enabled by default• Consider enabling file download via
IHS beforehand• Easy setup
http://www-01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/overview/t_configure_FileSync.dita?lang=en
18. Enable Sync For Mobile
• mobile-config.xml
<FileSync enabled="true">
<InactiveDevicesPurgeThreshold>180</InactiveDevicesPurgeThreshold>
<AutoSync>true</AutoSync>
</FileSync>
19. Enable Round-TripEditing For Files
19. Enable Round-TripEditing For Files
● Not enabled by default.● Enable before deploying the Client-Plugin
● Easy setuphttp://www-01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/admin/t_admin_enabling_roundtrip_edit.dita?lang=en
20. Modify Maximum Fileand Library Size
Default maximum file size is 512 MB• Default personal library: 512 MB • Default Community library: 512 MB•
• There are limits for files in Wikis, Activities, … as well, but try to educate your users to store files in „Files“
20. Modify Maximum Fileand Library Size
• Change via FilesPolicyService• Modify „Default Policy“• Create new policies for different user
groups• Numbers > 2GB must add an "L"!
eg: 2GB are given as „2147483648L“• Easy setup:
http://www-01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/admin/t_admin_files_library_maxsize.dita?lang=en
21. Assigning tasks tomultiple people
• Marked as completed when all assigned users mark the item complete
• An activity owner can also mark the activity complete
21. Assigning tasks tomultiple people
• Disabled by default• Watch out for „side-effects“ with
Notes-Plugin and mobile apps.
• Easy setuphttp://www-01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/admin/r_admin_activities_props.dita?lang=en
21. Assigning tasks tomultiple people
• oa-config.xml
<property name="feature.multiAssignment.enabled">true</property>"
25. Community EventsDefault View
25. Community EventsDefault View
• widgets-config.xml file:
<widgetDef defId="Calendar"
...
<item name="defaultView" value="grid" />• Easy setup
http://www.lbenitez.com/2013/11/tip-how-to-change-default-view-of.html
24. Default Widgets ForCommunities
24. Default Widgets ForCommunities
widget-config.xml<template id="default"> <widgetInstance uiLocation="col2statusposts" defIdRef="StatusUpdates" instanceId="StatusUpdates1"/><widgetInstance uiLocation="col2" defIdRef="Forum" instanceId="ForumInstance1"/><widgetInstance uiLocation="col2" defIdRef="Bookmarks" instanceId="BookmarksInstance1"/><widgetInstance uiLocation="col2" defIdRef="Files" instanceId="FilesInstance1"/></template>
24. Default Widgets ForCommunities
widget-config.xml<template id="default"> <widgetInstance uiLocation="col2statusposts" defIdRef="StatusUpdates" instanceId="StatusUpdates1"/><widgetInstance uiLocation="col2" defIdRef="Calendar" instanceId="CalendarInstance1"/><widgetInstance uiLocation="col2" defIdRef="Forum" instanceId="ForumInstance1"/><widgetInstance uiLocation="col2" defIdRef="Bookmarks" instanceId="BookmarksInstance1"/><widgetInstance uiLocation="col2" defIdRef="Files" instanceId="FilesInstance1"/></template>
24. Default Widgets ForCommunities
24. Default Widgets ForCommunities
• Easy Setuphttp://www-01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/admin/t_admin_communities_change_default_widgets.dita?lang=en
22. Table Of ContentsMacro for Wikis
22. Table Of ContentsMacro for Wikis
• Disabled by default• Room for improvement• Option for more macros• Support?• Easy Setup
http://www.stoeps.de/activate-customize-table-of-contents-macro-in-ibm-connections-wiki/
23. Wiki Syntax Tab
23. Wiki Syntax Tab
Disabled by default• Enable in wikis-config.xml via editor.wikitexttab.enabled
• Easy Setup:http://www-01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/admin/r_admin_wikis_config_properties2.dita?lang=en
26. Community ActivitiesView
26. Community ActivitiesView
• oa-config.xml file:
<properties><property name="feature.communityActivitiesView.enabled">true</property> </properties>
• Easy setuphttp://www.lbenitez.com/2013/11/tip-how-to-change-default-view-of.html
27. Microbrowser Support
27. Microbrowser Support
• Not enabled by default• Renders Connections for mobile
device webbrowsers• Useful when the mobile App is not
available• Easy setup
http://www-01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/overview/c_use_microbrowser.dita?lang=en
28. Bonus Tip:App Password
• Check out the Social Connecions 9 session „IBM Connections – Beyond a standard installation – Fasten your seatbelt!“ by Maik Weber and Stefan Heßler for details.
Links
• Connections Administration & Scripting 101http://scripting101.org/
• IBM Connections V5 CR1 Tuning guidehttp://www-10.lotus.com/ldd/lcwiki.nsf/dx/IBM_Connection_V5_CR1_Tuning_guide
Questions
Sjaak UrsinusIlionx
Twitter → sursinus
Skype → sursinus
Linkedin → www.linkedin.com/in/sursinus
Various other social website’s
Martin LeyrerIBM Austria
E-mail: [email protected]
Twitter: http://www.twitter.com/leyrer
Blog: http://www.leyon.at
Slideshare:http://www.slideshare.net/Martin.Leyrer
END