the latest, ultimative final version, current release, approved, last minute changes included...

The Latest, Ultimative Final Version, Current Release, Approved,

Last Minute Changes IncludedPost-Installation Checklist

Sjaak Ursinusilionx

Martin LeyrerIBM

PLATINUM & CHAMPAGNE SPONSORS

GOLD SPONSORS

SILVER SPONSORS

BRONZE SPONSORS

Martin Leyrer - IBM

• Working 5 years for IBM as an IT-Specialist

• ICS product stack since 1995

• Twitter → leyrer• Linkedin →

www.linkedin.com/in/leyrer● Blog → www.leyon.at

Sjaak Ursinus - ilionx

• Working 11 Years for ilionx as aconsultant

• Working with IBM Connections since Jan 2007

• IBM Champion since start of program• Twitter → sursinus• Skype → sursinus• Linkedin → www.linkedin.com/in/sursinus• Various other social website’s

Why ?

• Even we forget things• Info is scattered across the

Connections documentation• So far no singular check list has

emerged• Overview of „optional“ configuration

steps

Disclaimer

• NOT an installation guide• Probably incomplete• Biased towards what we think is

useful

• If you want to add something, please let us know

01. Increase Number ofOpen Files (Linux only)

• default is: 1024 open files/process• recommended limit: 8192• Martins recomendation: 65536• „ulimit -n“ to check• To change, edit/etc/security/limits.conficuser soft nofile 65536icuser hard nofile 65536

02. JDBC Connection Pool Size

• Initial WebSphere JDBC pool size:10 connections/connection pool

• Connections 5.0 CR1 Performance Tuning Guide has recommendations

• Use scripts from „Connections Administration & Scripting 101“ to set automatically

03. JVM Heap Size

• Connections needs „sufficient“ heap space, esp. Search

• Connections 5.0 CR1 Performance Tuning Guide has recommendations

• Use scripts from „Connections Administration & Scripting 101“ to set automatically

04. Change WebsphereDefault Log Language

• Open Websphere Integrated Solution Console

• Go to Servers->Server Types -> „Websphere application servers“ and select server you want to change

• Server Infrastructure → Java and Process Management → Process definition → Additional properties → Java Virtual Machine

• Add to “Generic JVM arguments”:-Duser.language=en -Duser.region=GB

05. Proper IHS TLS Settings SSLProtocolDisable SSLv2 SSLv3SSLCompression off SSLCipherSpec ALL NONESSLCipherSpec TLSv12 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256SSLCipherSpec TLSv12 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256SSLCipherSpec TLSv12 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384SSLCipherSpec TLSv12 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384SSLCipherSpec ALL TLS_RSA_WITH_AES_128_GCM_SHA256SSLCipherSpec ALL TLS_RSA_WITH_AES_256_GCM_SHA384SSLCipherSpec ALL TLS_RSA_WITH_AES_128_CBC_SHA256SSLCipherSpec ALL TLS_RSA_WITH_AES_256_CBC_SHA256SSLCipherSpec ALL TLS_RSA_WITH_AES_128_CBC_SHASSLCipherSpec ALL TLS_RSA_WITH_AES_256_CBC_SHA

# Enable strict CBC padding# https://www-01.ibm.com/support/docview.wss?uid=swg21692502SSLAttributeSet 471 1

Header add Strict-Transport-Security "max-age=15768000"

06. Redirect All Traffic ToHTTPS

06. Redirect All Traffic ToHTTPS

● httpd.conf

LoadModule rewrite_module modules/mod_rewrite.so

RewriteEngine onRewriteRule ^(.*) https://social.example.com/$1/ [R,L]

<IfModule mod_ibm_ssl.c>...

07. File Downloads ThroughIBM HTTP Server

• Improves performance significantly• Available for files stored in

– Activities– Files– Libraries– Mobile– Wikis

• Advanced Setuphttp://www-01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/install/t_install_post_files_downloads.dita?lang=en

08. Add A Reverse CachingProxy

• „Optional“ configuration• Improves performance, especially

over wide area networks (WAN)• Lots of options:

– WebSphere Edge Components– Nginx– Varnish– Apache– Squid

09. Push Notifications forMobile

• Notifications are sent, when the following events occur:

– The user is invited to join a community.– The user is invited to join a person's

network.– A task is assigned to the user.– A user is @mentioned.– A comment is added to content that the

user owns.– A synced file is modified on the server and

updated on the user's mobile device.


• The following ports must be open on each node in the cluster where the Mobile application is installed:

– Android● Port 443 (HTTPS only)

– iOS● Ports 2195 and 2196


• Check out & edit mobile-config.xml• <Push enabled="true">• <RememberPassword>true</Remem

berPassword>

...• http://www-

01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/overview/t_configure_push-note_mobile.dita?lang=en

10. Email-NotificationSender

• Default: generic email address, such as [email protected]

• Displayname and Email-Address can be changed

• Globally or per app• Easy setup

http://www-01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/admin/t_admin_act_managing_notifications.dita?lang=en

10. Email-NotificationSender

• notification-config.xml

<properties>

<property name="globalSenderName">IBM Connections Administrator</property>

<property name="globalSenderEmailAddress">[email protected] </property>

</properties>

11. Email-NotificationMobile Links

• Not included by default• Adds link to notification that opens in

mobile Connections app

• Easy setuphttp://www-01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/admin/t_admin_notifications_include_mobile_links.dita?lang=en

11. Email-NotificationMobile Links

• notification-config.xml

• <properties>

• ... <includeMobileLinksInNotifications>true</includeMobileLinksInNotifications>

• ...

• </properties>

12. Email-NotificationTLS Links

• Per default E-Mail Notifications contain only http links

• Today, Connections should be https only

• Easy setupLotusConnections-config.xml:<forceConfidentialCommunications enabled="true"/>

12. Email-NotificationTLS Links

• LotusConnections-config.xml

• <forceConfidentialCommunications enabled="true"/>

13. Add Search Languages

• Not everyone speaks & creates english-only conten

• You can have multiple languages• You have to define one primary

language• Recreate Searchindex after adding

languages

13. Add Search Languages

wsadmin -lang jython -user wasadmin -password [PWD]

execfile("searchAdmin.py")

SearchCellConfig.checkOutConfig("D:/temp", "ic-cell")

SearchCellConfig.enableDictionary("fr","${SEARCH_DICTIONARY_DIR}")

SearchCellConfig.enableDictionary("de","${SEARCH_DICTIONARY_DIR}")

SearchCellConfig.enableDictionary("it","${SEARCH_DICTIONARY_DIR}")

SearchCellConfig.setDefaultDictionary("de")

SearchCellConfig.checkInConfig("D:/temp", "ic-cell")

14. More Language RelatedSearch Settings

• For better multilingual support set

• search.ignore.punctuation.enabled

• search.language.sensitivity.enabled

• oneToTwoMapping.enabled

14. More Language RelatedSearch Settings

• Set via wsadmin command LCConfigService.updateConfig()

• Easy setuphttp://www-01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/admin/r_admin_common_props_wsadmin.dita?lang=en

15. Enable User To SetLanguage Preference


• Default: User interface is displayed in the language set by the locale settings of the web browser.

• Easy Setup:http://www-01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/admin/t_admin_common_enable_lang_change.dita?lang=en


• LotusConnections-config.xml

<languageSelector cookieDomain="" cookieName="" defaultLanguage="" enabled="true"usePermanentCookie ="false">

<language lang="en">English</language>

<language lang="de">Deutsch</language>

<language lang="fr">Fran\u00e7ais</language> </languageSelector>

16. Enable URL Preview

16. Enable URL Preview

• Connections (WAS) needs to be able to access „The Internet“

• Can facilitate a Proxy• Easy to set-up

http://www-01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/admin/t_admin_news_url_preview_config.dita?lang=en

17. Enable Sync For Files


• Not always enabled by default, so verify

• Enable before deploying the Client-Plugin

• Easy setuphttp://www-01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/admin/t_admin_enabling_file_sync.dita?lang=en


• files-config.xml

<fileSync enabled="true"> <clientDownloadLink enabled="true" url="http://public.dhe.ibm.com/ software/dw/ibm/connections/IBMConnectionsMSDesktop.zip"/><autoVersioning enabled="true"/></fileSync>

18. Enable Sync For Mobile


• Not enabled by default• Consider enabling file download via

IHS beforehand• Easy setup

http://www-01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/overview/t_configure_FileSync.dita?lang=en


• mobile-config.xml

<FileSync enabled="true">

<InactiveDevicesPurgeThreshold>180</InactiveDevicesPurgeThreshold>

<AutoSync>true</AutoSync>

</FileSync>

19. Enable Round-TripEditing For Files

19. Enable Round-TripEditing For Files

● Not enabled by default.● Enable before deploying the Client-Plugin

● Easy setuphttp://www-01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/admin/t_admin_enabling_roundtrip_edit.dita?lang=en

20. Modify Maximum Fileand Library Size

Default maximum file size is 512 MB• Default personal library: 512 MB • Default Community library: 512 MB•

• There are limits for files in Wikis, Activities, … as well, but try to educate your users to store files in „Files“

20. Modify Maximum Fileand Library Size

• Change via FilesPolicyService• Modify „Default Policy“• Create new policies for different user

groups• Numbers > 2GB must add an "L"!

eg: 2GB are given as „2147483648L“• Easy setup:

http://www-01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/admin/t_admin_files_library_maxsize.dita?lang=en

21. Assigning tasks tomultiple people

• Marked as completed when all assigned users mark the item complete

• An activity owner can also mark the activity complete


• Disabled by default• Watch out for „side-effects“ with

Notes-Plugin and mobile apps.

• Easy setuphttp://www-01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/admin/r_admin_activities_props.dita?lang=en


• oa-config.xml

<property name="feature.multiAssignment.enabled">true</property>"

25. Community EventsDefault View

25. Community EventsDefault View

• widgets-config.xml file:

<widgetDef defId="Calendar"

...

<item name="defaultView" value="grid" />• Easy setup

http://www.lbenitez.com/2013/11/tip-how-to-change-default-view-of.html

24. Default Widgets ForCommunities


widget-config.xml<template id="default"> <widgetInstance uiLocation="col2statusposts" defIdRef="StatusUpdates" instanceId="StatusUpdates1"/><widgetInstance uiLocation="col2" defIdRef="Forum" instanceId="ForumInstance1"/><widgetInstance uiLocation="col2" defIdRef="Bookmarks" instanceId="BookmarksInstance1"/><widgetInstance uiLocation="col2" defIdRef="Files" instanceId="FilesInstance1"/></template>


widget-config.xml<template id="default"> <widgetInstance uiLocation="col2statusposts" defIdRef="StatusUpdates" instanceId="StatusUpdates1"/><widgetInstance uiLocation="col2" defIdRef="Calendar" instanceId="CalendarInstance1"/><widgetInstance uiLocation="col2" defIdRef="Forum" instanceId="ForumInstance1"/><widgetInstance uiLocation="col2" defIdRef="Bookmarks" instanceId="BookmarksInstance1"/><widgetInstance uiLocation="col2" defIdRef="Files" instanceId="FilesInstance1"/></template>


• Easy Setuphttp://www-01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/admin/t_admin_communities_change_default_widgets.dita?lang=en

22. Table Of ContentsMacro for Wikis

22. Table Of ContentsMacro for Wikis

• Disabled by default• Room for improvement• Option for more macros• Support?• Easy Setup

http://www.stoeps.de/activate-customize-table-of-contents-macro-in-ibm-connections-wiki/

23. Wiki Syntax Tab

23. Wiki Syntax Tab

Disabled by default• Enable in wikis-config.xml via editor.wikitexttab.enabled

• Easy Setup:http://www-01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/admin/r_admin_wikis_config_properties2.dita?lang=en

26. Community ActivitiesView

26. Community ActivitiesView

• oa-config.xml file:

<properties><property name="feature.communityActivitiesView.enabled">true</property> </properties>

• Easy setuphttp://www.lbenitez.com/2013/11/tip-how-to-change-default-view-of.html

27. Microbrowser Support

27. Microbrowser Support

• Not enabled by default• Renders Connections for mobile

device webbrowsers• Useful when the mobile App is not

available• Easy setup

http://www-01.ibm.com/support/knowledgecenter/SSYGQH_5.0.0/admin/overview/c_use_microbrowser.dita?lang=en

28. Bonus Tip:App Password

• Check out the Social Connecions 9 session „IBM Connections – Beyond a standard installation – Fasten your seatbelt!“ by Maik Weber and Stefan Heßler for details.

Links

• Connections Administration & Scripting 101http://scripting101.org/

• IBM Connections V5 CR1 Tuning guidehttp://www-10.lotus.com/ldd/lcwiki.nsf/dx/IBM_Connection_V5_CR1_Tuning_guide

Questions

Sjaak UrsinusIlionx

Twitter → sursinus

Skype → sursinus

Linkedin → www.linkedin.com/in/sursinus

Various other social website’s

Martin LeyrerIBM Austria

E-mail: [email protected]

Twitter: http://www.twitter.com/leyrer

Blog: http://www.leyon.at

Slideshare:http://www.slideshare.net/Martin.Leyrer

the latest, ultimative final version, current release, approved, last minute changes included...

Technology