IBM Connections and IBM Websphere Portal integration - websphere-portal

I'm integrating IBM Connections and IBM Websphere Portal using this guideline (guideline page).
To deploy portal application archive SNPortlets.paa I need to know a couple of parameters from connections installation(network deployment installation) to run the script:
-DICportletWebapp=portletWebapp
-DICblogsHomepageHandle=homepagehandle
-DICemailSetting=emailSetting
-DICtagSearchType=tagSearchType
-DICdsxAdminId=
-DICdsxAdminPwd=
(those I've tried to figured out)
-DICbaseURL=https://connections_domain
-DICprofilesContextRoot=/profiles
-DICfilesContextRoot=/files
-DICprofilesURL=https://connections_domain/profiles
-DICprofilesURLunsecured=http://connections_domain/profiles
-DICsearchContextRoot=/search
-DICnewsContextRoot=/news
-DICfilesURL=https://connections_domain/files
-DICsearchURL=https://connections_domain/search
-DICoauthURL=https://connections_domain/connections/oauth
-DICnewsURL=https://connections_domain/news
-DICoauthContextRoot=connections/oauth
The question: is there any config file or other source where can I get all those parameters?

sure they are generally included in your LotusConnections-config.xml it should be in your deployment manager.
for instance on my server it's located at...
/local/con/opt/IBM/WebSphere/AppServer/profiles/Dmgr01/config/cells/localhostCell01/LotusConnections-config/LotusConnections-config.xml
<sloc:serviceReference acf_config_file="acf-config-nf.xml" bootstrapHost="" bootstrapPort="" clusterName="conCluster" enabled="true" person_card_service_name_js_eval="generalrs.label_personcard_activitieslink" person_card_service_url_pattern="/service/html/mainpage#dashboard%2Cmyactivities%2Cuserid%3D{userid}%2Cname%3D{displayName}" serviceName="activities" ssl_enabled="true">
<sloc:href>
<sloc:hrefPathPrefix>/activities</sloc:hrefPathPrefix>
<sloc:static href="http://con.ihost.com:81" ssl_href="**https://con.ihost.com:444**"/>
<sloc:interService href="https://con.ihost.com:444"/>
</sloc:href>
</sloc:serviceReference>
-DICblogsHomepageHandle The Blogs home page handle for your IBM Connections deployment. The default is homepage.
-DICemailSetting Set to email-exposed or email-hidden depending on whether the IBM Connections server is configured to expose user email addresses or to hide them.
-DICtagSearchType Set to search or mysearch, depending on whether you want the tag cloud to display tags only for public content or tags for public content as well as for content the logged-in user contributed.
-DICdsxAdminId The user ID that is set in the dsx-admin role for the Profiles and Communities services.
-DICdsxAdminPwd The password for the dsx-admin user.
http://infolib.lotus.com/resources/connections/4.5.1/doc/accessible/plugins/en_us/html-wrapper.html
basicaly dsx-admin you shouldn't have to use.
tagSearchType and emailSettings are just flags

Related

ColdFusion 2021 - how to browse pages in a browser

I have installed ColdFusion 2021 and can access the administrator at the following URL: http://127.0.0.1:8500/CFIDE/administrator/index.cfm
I have created a site and set up the datasource, but I can't preview it in a browser. I keep getting a 404 error — The page you are trying to access can not be displayed. Please try again or notify the administrator. When I look at my DSN settings, it's default to port 1433, not 8500. When I click 'verify' for the datasource, nothing happens. The status is blank. What am I overlooking?
This is the URL I'm using to test (folder name/file name): http://localhost:8500/mysite/addAgent.cfm
Thank you.
The port 8500 for the Coldfusion administrator has it's own webserver built in.
The CF admin will only serve it's own pages. You usually need a separate webserver that talks to Coldfusion with a handler. IIS, Apache, etc. Try removing the port for your own custom pages. Think of it as a separate site.
It looks like you are confusing at least 3 concepts.
You can get to the CF admin. That is a good thing.
Inside the CF admin is the DSN Settings. That is just a normal CF admin page. Port 1433 is how SQL Server communicates with systems external to it, like ColdFusion. Port 1433 is not a page.
ColdFusion has a built in server. Are you looking for the directory that ColdFusion uses for its built in server, cf_root/cfusion/wwwroot You can just add a subdirectory and file as needed.

How to use Kerberos to secure Solr admin panel on standalone installation?

How can I use Kerberos to secure the Solr Admin panel on a standalone (non- Solr-Cloud) configuration? I've tried using https://cwiki.apache.org/confluence/display/solr/Kerberos+Authentication+Plugin but I don't understand how to set up authentication without Zookeeper/security.json.
As specified in the same wiki page you link to, you can specify you want to use the Kerberos Plugin as a Java System Property on node start up.
For example, in your solr.in.sh, you can add SOLR_AUTHENTICATION_OPTS="-DauthenticationPlugin=org.apache.solr.security.KerberosPlugin". You'll need a JAAS config file as well as some additional properties as well, you can see these specified in the "Define a JAAS Configuration File" and "Solr Startup Parameters" sections on the same page.
Note: The solr.kerberos.principal you specify must be the SPNEGO SPN (i.e. HTTP/solr.example.com#EXAMPLE.COM) for the full qualified domain name of the host the Solr node is located on.
This is likely different to the service principal you use for the internode communication that you register in your JAAS config file (something like solr/solr.example.com#EXAMPLE.COM).

How to set permissions for WebDAV in IBM WebSphere portal 8.0.0.1

I was trying to install new theme in IBM Portal 8001, using webDAV anyclient I am uploading the static resources of theme in theme list but it doesn't upload all files.
Do i have to give any permissions to webDAV in portal?
I have already added the 'all portal users' access to THEME MANAGEMENT in portal access control. Even though it doesn't upload the files.
I have tried using WebDrive, Bitkinex clients also still it doesn't upload the files.
In addition to access rights you need to enable the write for non administrative users. See below the instructions
To enable write access for all authenticated users, proceed as
follows:
Add the following property to the WP ConfigService resource environment provider in the WebSphere® Application Server
administrative console: filestore.writeaccess.allowed.
Set the value for the property to true .
restart the portal server for the new setting to take effect.
https://serverfault.com/questions/555638/how-do-i-enable-webdav-write-access-in-websphere-portal-8-0
it doesn't upload all files? or none? If is partially uploaded is probably a limitation of the WebDAV client; try using ConfigEngine task to upload zip to WebDAV store:
http://www-01.ibm.com/support/knowledgecenter/SSYJ99_8.0.0/dev/csa2r_cfgtsk_webdavdplzip.dita
ConfigEngine.sh webdav-deploy-zip-file -DTargetURI=dav:fstype1/themes// -DZipFilePath=/tmp/YourTheme.zip

Azure MobileServices Live/UAT/Dev environments

I have an azure mobile service that will go live at some point. So I need to create UAT and dev versions which would point to the UAT and dev databases. What I am struggling with is how to create these.
The namespace in my live, UAT and Dev databases need to be the same but if I create a new mobile service called myAppName_UAT, it's going to want to use MyAppName_UAT as the namespace and so will not find any of the tables.
Has anyone overcome this problem? Once the product goes live I'll need to be able to test the mobile apps against the Dev db without affecting live which surely must be a common scenario?
Any advice would be very gratefully received.
Edit: What I'm specifically after is how to manage the multiple environments within the Azure Portal. I can deploy all the other components of my UAT environment but I'm stuck on the mobile service.
I am not asking for a way for my applications to switch config files or to migrate data between databases. Does anyone have any experience of running azure applications with multiple components where they ran multiple mobile services?
Do you use a Version Control? For me, you just need to create branches to separate the 'UAT' and 'dev' versions.
About the databases:
You can use web.config transformations to switch the connection string between your databases.
http://msdn.microsoft.com/en-us/library/dd465326.aspx
How do I use Web.Config transform on my connection strings?
=================================================================================
Update:
Ok, now I understood what you want.
Create your two versions of mobile services:
1-Log in Windows Azure Management Portal (http://manage.windowsazure.com)
2-Create your test mobile services (if you already have then, skip this step):
2.1- New -> Compute -> Mobile Services
2.2- Url - MyMobileServicesTest
2.3- Database -> Create a new (test db).
3-Create your production mobile services (if you already have then, skip this step):
2.1- New -> Compute -> Mobile Services
2.2- Url - MyMobileServicesProduction
2.3- Database -> Create a new (production db).
Right now, you have two different versions.
Using Windows Azure SDK:
//public static MobileServiceClient MobileService = new MobileServiceClient(
// "AppUrl",
// "AppKey"
//);
Pay attention: AppUrl will be "MyMobileServicesTest.azure-mobile.net/" or "MyMobileServicesProduction.azure-mobile.net/". The app key, each environment will have it's own. You can store this settings in a config file and switch according to what you are doing.
More information:
http://www.windowsazure.com/en-us/develop/mobile/tutorials/get-started-with-data-dotnet/
Multiple mobile services can share the same database. You only need to specify the same schema name in web.config in each mobile service:
<appSettings>
<add key="MS_MobileServiceName" value="MyAppName" />
</appSettings>
Updated:
The setting above only works in localhost, but not after publishing to live.
Need to do the following trick in order to make it work. Just hard code the schema name into function OnModelCreating. This way the database schema name will not depend on the mobile service name any more:
protected override void OnModelCreating(DbModelBuilder modelBuilder)
{
string schema = "MyAppName"; // ServiceSettingsDictionary.GetSchemaName();
if (!string.IsNullOrEmpty(schema))
{
modelBuilder.HasDefaultSchema(schema);
}
modelBuilder.Conventions.Add(
new AttributeToColumnAnnotationConvention<TableColumnAttribute, string>(
"ServiceTableColumn", (property, attributes) => attributes.Single().ColumnType.ToString()));
}

Redirect Loop Problem for Web Policy Agent?

I followed the installation guide for an Apache Web Policy Agent, but it always results in an endless redirect loop between web and application server. Firefox says "The page isn't redirecting properly" and Chrome thinks that "This webpage has a redirect loop". The setup is an Apache 2 on port 80 with a small demo app and a Web Policy Agent, and a Tomcat 7 server on port 8080 with an OpenAM server (the former OpenSSO from Sun):
App URL http://hostname.example.com:80/ (App and Agent, running on Apache 2.2.16)
OpenAM Server URL http://hostname.example.com:8080/openam (running on Tomcat 7.0.12)
The Live HTTP Header Firefox plugin shows that the policy agent and the OpenAM server (i.e. the Apache and Tomcat servers) redirect to each other, although the server sets the SSO Token Cookie correctly. The name of the SSO Token Cookie has the default value "iPlanetDirectoryPro". Any idea how to solve the problem?
After a whole week I finally figured it out, with the help of Stackoverflow and the OpenAM Mailing list. There were two main problems: missing log files and missing cookie domains. Installing the OpenAM server and the Web Policy Agent is difficult, there are a lot of log files and many different configuration options. If you select the wrong options, it won't work. It is impossible to make it work without knowing what is going on, which can only be determined by a suitable log file.
Missing Log for Web Policy Agent : The log level must be set in the "Java properties" files. There are two "Java Properties" files for the Web Policy Agent, OpenSSOAgentBootstrap.properties and OpenSSOAgentConfiguration.properties. The log and debug level which is named com.sun.identity.agents.config.debug.level can and must be defined in both (!) files, and it should be set to the high level, all:4 or all:5. The format is important. Even if you do this, the AgentConfiguration.properties file is only used when the agent is not working in centralized config mode. The profile must be set to "local".
Missing Cookie Domain: Do not forget to enter the right Cookie Domain during the setup of the OpenAM server in the beginning, or add it afterwards if it is missing. On the OpenAM server, go to Configuration > System > Platform and change the Cookie Domain Value to your domain (for instace .example.com) if it is missing. Otherwise the browser will lose your cookie during the redirect process. Somehow I had an empty entry for the cookie domain at the OpenAM server, I guess a forgot a dot (example.com instead of .example.com) so that it was invalid (or something like that).
This troubleshooting site was helpful to locate the problem.
#0x4a6f4672, Your post was absolutely helpful . Some more to add to your answer. The following changes is what i had to do in the config to make it running, at-least getting it running it for alfresco.
com.sun.identity.agents.config.user.mapping.mode=USER_ID(Dont use HTTP_HEADER)
com.sun.identity.agents.config.user.attribute.name=uid
com.sun.identity.agents.config.user.principal=true(Dont use false)
com.sun.identity.agents.config.user.token=SsoUserHeader(Keep it as per what is specified in you application- in my case alfresco)
Now you are not running the Agent in centralised mode but in local mode the setting which is specified for profile attribute can be only set via property file so add the following.
com.sun.identity.agents.config.profile.attribute.fetch.mode=HTTP_HEADER
com.sun.identity.agents.config.profile.attribute.mapping[uid]=SsoUserHeader(whatever you want the header to come in browser as)
As told by 0x4a6f4672, it is difficult to debug and unless you are in local mode , so switch to local mode immediately and start tracing the logs and make the property changes accordingly.

Resources