Lotus Connections Administration - von der Befehlszeile zur grafischen Oberfläche

46
© 2011 IBM Corporation BP114 Lotus Connections Administration – from the command line to a graphical UI Felix Binsack | General Manager | TIMETOACT Otto Foerg | Collaboration Solutions Architect | edcom

description

Die Administration von Lotus Connections besteht aus dem Editieren von XML Dateien und dem Absetzen von case-sensitiven (!) "wsadmin" Befehlen, dem Standard Command Line Interface des WebSphere Application Servers. Viele Lotus Connections Administratoren aber kommen aus der Lotus Domino Welt und sind den Domino Administrator gewöhnt, nicht jedoch daran, erst in einem Terminalfenster wsadmin zu starten, ein Pythonscript zu laden, Selektionsbefehle in temporäre Variable zu speichern und Hash Werte in Vector umzuwandeln - nur um dann am Ende einen User zu einer Community hinzufügen zu können. Dieser Ansatz für die Administration eines Systems wie Connections kann als unnötig komplex und wenig komfortabel empfunden werden.In dieser Session wird exemplarisch die Connections Administration auf der Basis von wsadmin und im Vergleich dazu mit dem Lotus Connections Administration Toolkit (CAT) demonstriert. Es wird gezeigt, wie mit dem Lotus Connections Administration Toolkit die Komplexität der Connections Administration und der Aufwand für die Systempflege reduziert werden können.CAT ist eine einfach zu installierende und leicht zu bedienende Applikation für die Konfiguration und Administration von Lotus Connections, mit kontextsensitiver Hilfe und ausführlichem Logging einschließlich Kommentarfunktion. Administrative Tasks, die in wsadmin aus einer Serie von aufeinanderfolgenden Einzelbefehlen bestehen, können in CAT per Click erledigt werden. Die Connections Administration wird wesentlich vereinfacht und auch für Administratoren ohne WebSphere Background zugänglich.

Transcript of Lotus Connections Administration - von der Befehlszeile zur grafischen Oberfläche

© 2011 IBM Corporation

BP114 Lotus Connections Administration – from the command line to a graphical UIFelix Binsack | General Manager | TIMETOACTOtto Foerg | Collaboration Solutions Architect | edcom

© 2011 IBM Corporation 2

Agenda● IBM Lotus® Connections 3.0 Administration Overview● Edit Lotus Connections Configuration Settings

● Using wsadmin● Using Lotus Connections Administration Tool (CAT)

● Activities Member Management● Using wsadmin● Using CAT

● Lotus Connections User Management● Architecture● Using wsadmin● Using CAT

● Overview of CAT Services● Q & A

© 2011 IBM Corporation 3

Lotus Connections 3.0 Administration Overview● Configuration settings

─ Common configuration properties─ Feature configuration

● Administrative Tasks include─ Member management─ Trash management─ Cache management─ Synchronization with LDAP─ Application management─ Widgets management─ Libraries & policies─ Metrics & statistics─ Scheduled jobs─ . . .

● Lotus Connections administration is based on IBM Websphere® administration !

© 2011 IBM Corporation

WebSphere Distributed System Management

From Redbook “WebSphere Application Server V7 Administration and Configuration Guide”

© 2011 IBM Corporation 5

Lotus Connections 3.0 Administration Interfaces

wsadmin  (command  line  interface)  +  XML  configura9on  files-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐Communica*on  se.ngs,  No*fica*ons  configura*on,Language  selector,  Metrics  &  sta*s*cs,Scheduled  tasks,  Life-­‐cycle  eventsUser  management-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐Configura*on  &  administra*on  for-­‐  Ac*vi*es,  Bookmarks,  Communi*es,  Files-­‐  Forums,    Profiles,  Wikis,    Search  &  News

Lotus  Connec9ons  user  interface-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐Blogs,  Homepage

WebSphere  Applica9on  Server  Integrated  Solu9ons  Console-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐WAS  services  and  processes,  Access  control,  Node  synchroniza*on,  Data  sources,  Security,  JVM  se.ngs,  SMTP,  IBM  HTTP  Server,  ...

© 2011 IBM Corporation 6

Administration in the Connections User Interface

Blogs● Configuration parameters● Moderation

─ Approval for entries and comments─ Flagged entries and comments

© 2011 IBM Corporation 7

Administration in the Connections User Interface

Home Page● Widgets administration

For other Connections features administration from user interface not available

© 2011 IBM Corporation 8

IBM WebSphere Integrated Solutions Console● Configuration of WAS services and processes

─ Security─ JVM settings (heap size)─ Virtual hosts─ SMTP

● Management of WAS processes and related servers─ Start & stop of servers & clusters─ Node synchronization─ Management of IBM HTTP server

● Lotus Connections specific aspects─ Access control─ Data sources

● Configuration and administration of Connections features not available

© 2011 IBM Corporation 9

wsadmin● Used to

─ Change configuration settings─ Perform administrative tasks

● Background─ Standard Websphere Application

Server command line interface─ Uses Jython scripts─ Communicates with Websphere

processes via MBeans

● Usage─ Case-sensitive─ Complex multilevel commands

● Skills─ Good understanding of WebSphere

architecture and administration “useful”

Example: Display Activities Configuration:

© 2011 IBM Corporation 10

Connections XML Configuration Repository● Used for configuration of

─ Lotus Connections general ─ Lotus Connections features

● Check-out / check-in procedure required─ Why ?

– You should not work in configuration files during runtime– Syntax check during check-in is very useful– Backup copies of XML files in runtime directories are not useful

● Configuration flow─ Check-out XML file on Deployment Manager─ Edit file─ Check-in─ Synchronize changed files with Connections nodes─ Restart applications or clusters / servers (in most but not all cases)

© 2011 IBM Corporation 11

Connections 3.0 XML Configuration Files ● communities-config.xml● communities-policy.xml● contentreview-config.xml● dogear-config-cell.xml● events-config.xml● files-config.xml● forum-config.xml● forum-policy.xml● gettingstarted-config.xml● LotusConnections-config.xml● mime-files-config.xml● mime-wikis-config.xml

● news-config.xml● notification-config.xml● oa-config.xml● profiles-config.xml● profiles-policy.xml● proxy-config.tpl● proxy-search-config.tpl● search-config.xml● uiextensions-config.xml● widgets-config.xml● wikis-config.xml

© 2011 IBM Corporation 12

Example 1: Change Communication Settings (1)● Configure URLs to access a feature from your HTTP server:

─ Non-SSL─ SSL─ InterService navigation

© 2011 IBM Corporation 13

Example 1: Change Communication Settings (2)

1) Change to Deployment Manager \bin Directory:<dmgr-root>\bin

2) Start wsadmin session:wsadmin -lang jython -user <admin> -password <password> -port 8879

3) Load Connections-wide configuration script: execfile("connectionsConfig.py")

4) Check-out Connections-wide configuration file: LCConfigService.checkOutConfig("D:/WebSphere/lcc","Connections3Cell01")

5) Edit configuration file6) Check-in Connections-wide configuration file:

LCConfigService.checkInConfig("D:/WebSphere/lcc","Connections3Cell01")

7) Synchronize all WebSphere nodes8) Restart all servers / clusters

© 2011 IBM Corporation 14

Example 1: Complete wsadmin Session for Changing Communication Settings

● Beware of typos – nearly everything is case-sensitive !

© 2011 IBM Corporation 15

Is there an alternative to command line processing and XML file editing ?

© 2011 IBM Corporation 16

Connections Administration Toolkit (CAT)● Graphical user interface for configuration & administration of Lotus Connections● Supersedes command line● Edit configuration properties without accessing XML files● Perform simple and complex Lotus Connections administration tasks without

being a WebSphere Application Server administration expert

© 2011 IBM Corporation 17

Connections Administration Toolkit (CAT)

Technical background● Developed as a Java™ Enterprise Edition (JEE) application● User interface developed with Google™ Web Toolkit● Running on a WebSphere Application Server of your

Lotus Connections installation● Installed within a few minutes using standard WebSphere

application deployment techniques● Accessed with your browser

© 2011 IBM Corporation 18

Lotus Connections 3.0 Administration Interfaces

Connec&ons  Administra&on  Toolkit  (CAT)-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐Communica*on  se.ngs,  No*fica*ons  configura*on,Language  selector,  Metrics  &  sta*s*cs,Scheduled  tasks,  Life-­‐cycle  eventsUser  management-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐Configura*on  &  administra*on  for-­‐  Ac*vi*es,  Bookmarks,  Communi*es,  Files-­‐  Forums,    Profiles,  Wikis,    Search  &  News

Lotus  Connec&ons  user  interface-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐Blogs,  Homepage

WebSphere  Applica&on  Server  Integrated  Solu&ons  Console-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐WAS  services  and  processes,  Access  control,  Node  synchroniza*on,  Data  sources,  Security,  JVM  se.ngs,  SMTP,  IBM  HTTP  Server,  ...

© 2011 IBM Corporation 19

Demo 1: Change Communication Settings with

Connections Administration Toolkit (CAT)

© 2011 IBM Corporation 20

Lotus Connections Configuration with CAT: What we have seen● Configure Lotus Connections with your browser from everywhere

● No need for a wsadmin session● No check-out / check-in of XML files required● No editing of XML files

● Connections Administration Toolkit (CAT) displayes the current communication settings

● Change communication settings for one, multiple or all Lotus Connections features with one click

© 2011 IBM Corporation 21

And how about administration ?

Can I as administrator add new members to Activities ?

© 2011 IBM Corporation 22

Steps for Activities Member Management● Select user● Select activity● Perform task

© 2011 IBM Corporation 23

Example 2: Add an Additional Member to an Activity (1)

1) Change to Deployment Manager \bin Directory:<dmgr-root>\bin

2) Start wsadmin session:wsadmin -lang jython -user <admin> -password <password> -port 8879

3) Load Activities configuration script: execfile("activitiesAdmin.py")

4) We have to define the new member and store it in a temporary variable: newMember=ActivitiesMemberService.fetchMemberByName(“Olga Belousova”)

5) We have to select the activity and store it in a temporary variable: act=ActivityService.fetchActivityById("FFFGc66a55370a2c423eafa5bd0a4b443a70")

© 2011 IBM Corporation 24

Example 2: Add an Additional Member to an Activity (2)

6) Unfortunately our variables are of type hash, but the method for adding members to an activity expects vector, so we have to convert them:

from java.util import Vector

newMemberVec = Vector()

newMemberVec.add(newMember)

actVec = Vector()

actVec.add(act)

7) Finally we can add the new member to the activity:AccessControlService.setMembersAccess(actVec,newMemberVec)

© 2011 IBM Corporation 25

Difference Between Hash and Vector ?

● A vector is a list (aka “array”) of hash values

© 2011 IBM Corporation 26

Example 2: Complete wsadmin Session for Adding a New Member to an Activity

● Beware of typos – nearly everything is case-sensitive !

© 2011 IBM Corporation 27

Demo 2: Add a New Member to an Activity with

Connections Administration Toolkit (CAT)

© 2011 IBM Corporation 28

Activities Member Management with CAT: What we have seen● Filter activities by any combination of criteria:

─ Activity type (all, completed, deleted)─ Activity name─ User (creator, member, owner)─ Activity ID (UUID)─ Date

● Display properties for selected activity● Perform tasks on one or multiple activities:

─ Delete─ Restore─ Purge─ Add / remove authors, reader and owner

© 2011 IBM Corporation 29

© 2011 IBM Corporation 30

Connections User Management Architecture

We have several repositories containing user data:● Corporate directory (LDAP)

─ Source for Profiles database─ Contains a field which acts as primary key between directory and Connections

– Must be unique and may never change !─ Contains the allowed login items used for Connections authentication

– email, uid, loginId– These must be unique !

● Profiles database─ Gets initially populated from and periodically synced with corporate directory─ The “External ID” (ExtId) is the key

● Application databases─ One database per feature─ These also contain the ExtId

© 2011 IBM Corporation 31

Connections User Management – The Challenge

Problems can happen if:● A user has different extid's in these repositories:

─ A user leaves the company, comes back and gets a new identity in corporate directory

– New identity = new extid !!– Old data are associated with old extid– User cannot access his/her old data

─ Cut & paste a person record in Lotus Domino® Directory– Copied Notes® document = new dominoUnId = new extid !!

● A login item is not unique─ A group of users is sharing a mail address─ Same uid for more than one user─ We know this things happen ...

© 2011 IBM Corporation 32

New with Connections 3: Inactive Users● Users can become inactive

─ Automatically - if they are removed from corporate directory─ Manually - by usage of wsadmin commands

● Inactive means:─ A user's mail address and login details are removed from the Connections

databases and can now be used by other people– no more conflicts are happening as in 2.5

─ The inactive user's name is displayed in italics and grey in membership lists─ Their name is not returned in searches of the company directory─ Their name no longer displayes when using type-ahead─ The inactive user never receives email notifications from Lotus Connections

● This makes it a lot easier as with Connections 2.5, but inconsistencies still can happen─ Affected users cannot log on

© 2011 IBM Corporation 33

Troubleshooting User Management Problems● Synchronize the Profiles database with the corporate directory

● If this doesn't help, use the ProfilesService commands

● If this doesn't help, use the MemberService commands for the feature(s) affected

© 2011 IBM Corporation 34

Example 3: ProfilesService Commands

1) Change to Deployment Manager \bin Directory, start wsadmin session and load the Profiles configuration script:

execfile("profilesAdmin.py")

2) Inactivate a user: ProfilesService.inactivateUser(“[email protected]”)

3) Activate a user and (optionally) specify user properties: ProfilesService.activateUserByUserId(“B0EE9F65-4EEA-9997-C125-77F9003E9E2F”, email=“[email protected]”, displayName=“Joe Doe”)

4) Update user properties in Profiles database: ProfilesService.updateUser(“[email protected]”, email=“[email protected]”)

© 2011 IBM Corporation 35

Example 3: ProfilesService Commands

5) Swap user properties from one extid to another:ProfilesService.swapUserAccessByUserId(“JDoeRetired2010”, “JdoeRehired2011”)

6) Publish user data from Profiles to applications:ProfilesService.publishUserData(“[email protected]”)

© 2011 IBM Corporation 36

Example 3: MemberService Commands

1) Change to Deployment Manager \bin Directory, start wsadmin session and load the application specific configuration script

2) Inactivate a user: <App>MemberService.inactivateMemberByEmail(“[email protected]”)

3) Synchronize a user's extid in the application database with corporate directory: <App>MemberService.syncMemberExtIdByEmail(“[email protected]”, {"allowInactivate" : "true"})

4) Synchronize a user's extid in the application database with corporate directory and allow swap of user properties from one extid to another:

<App>MemberService.syncMemberByExtId(“B0EE9F65-4EEA-9997-C125-77F9003E9E2F”, {"newExtId" : "28D48C08-6BC8-777A-C125-7589003D9025",“allowExtIdSwap” : “true”})

5) Repeat steps 1) – 4) for each application as needed

© 2011 IBM Corporation 37

Demo 3: User Management with Connections Administration Toolkit (CAT)

© 2011 IBM Corporation 38

User Management with CAT: What we have seen● Filter an user by extid, mail or loginId● Display properties for selected user from Profiles● Display extid(s) of the selected user from all applications● Activate or inactivate the selected user in all applications with one click● Sync the selected user in selected applications with Profiles● Sync the selected user in selected applications with corporate directory

© 2011 IBM Corporation 39

Overview of CAT: Common Configuration & Administration● Common configuration properties

─ Communication settings─ Language selector

● Notifications configuration● User management● For all Lotus Connections features

─ Metrics & statistics─ Scheduled tasks─ Life-cycle events

© 2011 IBM Corporation 40

Overview of CAT: Feature Configuration & Administration (1)● Activities

─ Configuration properties─ Display information on activities─ Membership management─ Trash management─ Export & import

● Bookmarks─ Configuration properties─ View & link thresholds─ Replace URLs─ Delete bookmarks

● Forums─ Configuration properties─ Display information on forums─ Delete forums & topics─ Trash management

● Communities─ Configuration properties─ Display information on Communities─ Change community properties─ Create communities─ Membership management─ Managed applications─ Remove bookmarks & tags─ Widget administration

● Files─ Configuration properties

– Restrict file types– Displaying files inline– Many more ...

─ Library management─ Policy management─ Delete files of inactive users

© 2011 IBM Corporation 41

Overview of CAT: Feature Configuration & Administration (2)● Profiles

─ Configuration properties– Board– Following– Networking– Photos– Pronunciation– Reporting structure– Status updates– Tagging– Search

─ Widgets management─ Cache management

● News─ Configuration properties

● Wikis─ Configuration properties

– Restrict file types– Maximum sizes– Page versioning– Displaying files inline– Many more ...

─ Library management─ Policy management─ Delete wikis

● Search─ Configuration properties

– Dictionaries– Index settings

─ Index management

© 2011 IBM Corporation 42

Ideas for Future Releases of CAT

Content Quality Features:● Merge & move

─ Content of blogs, communities, wikis

● Tag management─ Preconfigured list─ Default tags─ Common tag list for all features

● Taxonomy─ Instead of a folksonomy

● Profiles─ Allow delegated editing

● Global search & replace─ Change URLs of links, images, files

© 2011 IBM Corporation 43

Ideas for Future Releases of CAT

Technical Features:● Orphans handling

─ e.g. wiki entries without parent

● Content deletion─ For inactive users

● Archiving─ Inactive communities, blogs and wikis─ Completed activities

© 2011 IBM Corporation 44

Q & A

Your ideas and suggestions are very welcome !

More informations on http://www.timetoact.de/cat

Please visit us in the showcase at booth # 229

© 2011 IBM Corporation 45

Related SessionsMonday

11:00 What's New in IBM Lotus Connections 3.0 Swan 5-6 ID30101:00 Powering a Market Leading Business with Social Collaboration Dolphin Northern A-E INV101

Tuesday 10:00 Customizing Lotus Connections 3.0 Dolphin Southern I AD30411:15 What's New in IBM Lotus Connections 3.0 Dolphin Southern III ID301R01:30 Best Practices for a Happy and Healthy

IBM Lotus Connections Deployment! Swan Mockingbird ID30203:30 Lotus Connections User Management, SSO and Federated Policy Swan Mockingbird ID30404:45 Extending the Social Network: Part One Dolphin Southern I AD30104:45 Build Large-scale Performing Enterprise Solutions

for IBM Lotus Connections Swan Mockingbird ID30504:45 IBM Lotus Connections Administration:

From the Command Line to a Graphical UI Swan 1-2 BP114

Wednesday 08:30 Extending the Social Network: Part Two Dolphin Southern I AD30204:15 Compliance and Moderation with Lotus Connections 3.0 Swan Mockingbird ID306

Thursday 10:00 Twelve MORE Things Your Mother Never Told You

About Deploying IBM Lotus Connections 3.0 Dolphin Southern I BP105

© 2011 IBM Corporation 46

Legal Disclaimer© IBM Corporation 2011. All Rights Reserved.

The information contained in this publication is provided for informational purposes only. While efforts were made to verify the completeness and accuracy of the information contained in this publication, it is provided AS IS without warranty of any kind, express or implied. In addition, this information is based on IBM’s current product plans and strategy, which are subject to change by IBM without notice. IBM shall not be responsible for any damages arising out of the use of, or otherwise related to, this publication or any other materials. Nothing contained in this publication is intended to, nor shall have the effect of, creating any warranties or representations from IBM or its suppliers or licensors, or altering the terms and conditions of the applicable license agreement governing the use of IBM software.

References in this presentation to IBM products, programs, or services do not imply that they will be available in all countries in which IBM operates. Product release dates and/or capabilities referenced in this presentation may change at any time at IBM’s sole discretion based on market opportunities or other factors, and are not intended to be a commitment to future product or feature availability in any way. Nothing contained in these materials is intended to, nor shall have the effect of, stating or implying that any activities undertaken by you will result in any specific sales, revenue growth or other results.

IBM, the IBM logo, Lotus, Lotus Notes, Notes, Domino, Quickr, Sametime, WebSphere, UC2, PartnerWorld and Lotusphere are trademarks of International Business Machines Corporation in the United States, other countries, or both. Unyte is a trademark of WebDialogs, Inc., in the United States, other countries, or both.

Java and all Java-based trademarks are trademarks of Sun Microsystems, Inc. in the United States, other countries, or both.