Preamble

Before i begin with my securing article, i want to say something on security on IBM Connections. Mainly i don’t like the thing, that IBM only support very special versions of software.

So we must use WebSphere 7.0.0.21, DB2 9.7.0.5, IHS 7.0.0.11 and so on. Each product had updates the last months and i think we won’t get support when we use other versions.

So i have to chances. On the first side i can update my software to limit vulnerabilities and get perhaps no support, or i will have vulerable software with support.

Just my 2 cent and i hope i will get answer, if i will get support with higher program versions.

I had an issue with daily newsletters in Connections 3.x, where newsletters were sent every 25 and not 24 hours.

This is fixed in Connections 4, now newsletters are arriving every 24 hours.

Today IBM released CR1 on IBM Fixcentral. CR1 is a set of 17 cumulative fixes and enable Mobile Admin (didn’t verified this, hope it will be there) too.

1. Links for all CR1 Downloads (Multi OS Fixes)

2. Fix list for IBM Connections 4.0 CR1 – Very long, seems to fix a lot

3. IBM Connections 4.0 CR1 Post-install Deployment Configuration Steps

4. Update strategy for IBM Connections 4.0

5. Cross-product relationship information

You have to download 18 packages, because a new update installer is mandatory!

The last days i used to integrate Sametime in IBM Connections. I did this a few times the last two years, but i used ST 8.5.1 and older Connections Versions.

First of all, it is much easier to apply now. You mustn’t add Proxy entries to your IHS (IBM HTTPServer) or activate awareness lookup in profiles-config.xml – BUT you have to install exactly the right versions.

I mapped the wc_defaultport of Sametime Proxy to 80 and 443, so i mustn’t have special thoughts on firewalls. Now i checked out uiextensions-config.xml and added the URL of my Sametime Proxy Server. A good description can be found in Connections Wiki .

Since version 3.0 bookmarks (dogear) module of Connections can be configured to open bookmarks in a new window, but the configuration does not include bookmarks in the Community module.

To get this function consistent and it would be good, when IBM adds the dogear configure switch to communities too.

Until this, you can follow this:

Go to [AppServer-Root]/profiles/[Communities-WAS]/installedApps/[cellname]/Communities.ear/comm.web.war/WEB-INF/tags

Edit displaybookmark.tag and change following line:

<a id="b_uri_${bookmark.uuid}" href="<tango:safeURL>${bookmark.uri}">

to

<div id="b_entry_${bookmark.uuid}">
  <h4>
    <a target="_blank" id="b_uri_${bookmark.uuid}" href="<tango:safeURL>${bookmark.uri}>
    </a>
  </h4>
</div>

To recompile the jsps and activate this changes, edit and save the bookmarks.jsp.

Windows

Edit and save following files:

Today i installed Kudos at a customer site. As always i come to the point to add the Leaderboard Widget to Connections Homepage, so i mapped my user in ISC – Applications – Homepage – Map User roles to the Admin Role. The existing entry for wasadmin (a non ldap user) was still present after adding my account.

I logged in to Connections Homepage, but Administration Tab was missing. When i call the Administration Link https://connections.customersite.com/homepage/admin/openAdminPage.action i get a not authorized message. Restarting homepage didn’t solve the issue.

After some tests i removed the local wasuser from admin role and logged in again. And voilà i got a administration tab. Don’t know why this happened, i’m sure that i have other installations where i get a administration tab with a local user. I will investigate this the next days.

IBM releases a new version of Connections Mobile App. It looks good and works very smooth. Wiki integration is much better than in the old one. The new app supports multi Server Accounts.

http://feeds.lbenitez.com/ _{r/SocializeMe/}3/GZIIfL3uZho/demo-ibm-connections-mobile-app-for.html[Demo: IBM Connections Mobile App for Android]:

IBM today released a new update for the IBM Connections App for Android mobile devices. 

(Via Socialize Me )

Cool day, thanks IBM.

http://www-01.ibm.com/support/docview.wss?uid=swg21591682&myns=swglotus&mynp=OCSSYGQH&mync=R

New Mobile fix for IBM Connections available:

http://www-933.ibm.com/support/fixcentral/swg/quickorder?parent=ibm/Lotus&product=ibm/Lotus/Lotus+Connections&release=All&platform=All&function=fixId&fixids=3.0.1.1-IC-Multi-Mobile-IFLO68457&includeSupersedes=0&source=fc

There is a new Sametime Fix for integration in Connections 3.0.1.1 and portal 7.0.0.2: OBEN-8SRQTP

Via http://www-01.ibm.com/support/docview.wss?uid=swg21588293

I installed Connections 3.0.1.1 with a Sametime Proxy 8.5.1 (like installation of 3.0.1) and it works.

The new fixpack for IBM Connections 3.0.1 is available. You can download the nearly 1 GB sized file on IBM Fixcentral.

Fixlist and installation instructions are linked on Fix Central.

Update

Some details of the Readme :

Prerequists

• WebSphere Application Server fixes: PM56596 and ​PM51310​ to WAS 7.0.0.x. Please contact IBM WebSphere Application Server support to obtain the fixes.​

• Integration with Sametime 8.5.2 requires Sametime hotfix OBEN-8SDLGS. Please contact IBM Sametime support to obtain the fix.​

So no direct download of the prerequists! You have to contact IBM Support for these downloads.

Update 21.03.2012

IBM changes the Readme for this Fixpack. They deleted the prerequisted WAS Fixes. So you can install without PM56596 and PM51310.

The required fix OBEN-85DLGS for IBM Connections 3.0.1.1 is available for download at IBM Fix Central now.

Cite from Fix Readme :

Installation instructions

Prerequisite: The Sametime System Console must be at version 8.5.2 IFR

1. If not, then you will see a failure message during the fix install noting an incorrect version level. Refer to Installing Sametime 8.5.2 Interim Feature Release 1 on the Sametime System Console to get started .

This fix must be installed on top of a Sametime Proxy Server 8.5.2 Interim Feature Release 1 (IFR 1). If the server is running 8.5.2 (without the IFR 1 fix), then the IFR 1 fix will be automatically installed.