Adventures With CCM and Libraries

Recently I’ve run into all sorts of problems deploying CCM for a customer who is running multiple servers.  In this case two of the biggest problems were down to the Filenet application server being different from the Connections application server so I’ll write them up here in case anyone else runs into the same thing.

Problem No.1 CreateObjectStore batch file fails with

“CC0050E CONTENT_FCA_ROOT_DOES_NOT_EXIST the root folder does not exist d:\ibm\connections\data\shared\ccm”

After much checking that the folder was there and did exist and the account running the CreateObjectStore did have rights I realised that it wasn’t looking on the Deployment Manager server (where the Filenet files are installed and where the batch files are run from) but on the WebSphere Application Server designed to run the CCM Application.  That server, which was a completely separate machine,  didn’t even have a D drive. It had an E drive.  Once I was able to create d:\ibm\connections\data\shared\ccm on that second server, the setup completed.

Problem No.2 Principal Name not found when running CreateGCD

This failed multiple times no matter what account we used although we had a specific account set up for CCM called ccm_administrator that had a valid email address and was in LDAP, this kept failing.  I could see the account in LDAP (Domino) , through an LDAP browser and could validate the password but CCM didn’t like it.  In the end we discovered that the site had a filter for LDAP users in Connections that required a certain attribute to be complete, that account didn’t have that attribute set so even though it was a valid LDAP account it wasn’t authorised as a Connections account.  Once that attribute was set the CreateGCD ran perfectly.

Problem No.3.  Mobile app doesn’t display library contents

This is actually a bug which is due to be fixed in a new version of the Connections mobile application (est. end April).  If the CCM application is on a server with a different hostname than the Mobile application, you can see Libraries in the Mobile application and even go into them but you can’t see library contents.  Using a browser on a mobile device works fine.

So that’s it.  A few CCM things that have stalled me or tripped me up in the past few months that I hope you can avoid 🙂

Keeping On Top Of Sametime Fixes

Thanks to Jeffrey Miller @ IBM for posting a blog page with links to all the latest fixes for the Sametime components.  He has offered to keep this up to date and I strongly suggest you bookmark the page (I did) to save trying to navigate through the hundreds of individual items on fix list and work out what supersedes what.

http://www.mymiller.name/wordpress/sametime/sametime-9-0-latest-published-versions/

Problems Deploying Sametime Policies – The Missing Link

I’ve recently run into a problem deploying Sametime Community Server 9.0.1 at two new sites and on an existing 8.5.2 IFR1 site which I’m not 100% convinced is the same issue but as part of my troubleshooting I discovered a missing piece of  policy behaviour that I”m finding extremely useful.

Prior to Sametime 9, policies were deployed on the Community Server and used the database stpolicy.nsf.  That database no longer exists in v9 and later.  In Sametime 8.5.2, if you didn’t deploy the System Console and just had a standalone Community Server you were still using stpolicy.nsf.  As of v9 of Sametime you can no longer do that as stpolicy.nsf no longer exists.   The Community Server must be deployed with the System Console in order to manage policies from within the Console itself. Carry on reading, that’s not the missing link:-)

Here’s a screenshot of the Sametime System Console showing where you set up policies, this is stored in the STSC DB2 database.

SSC Policies

From here the policies are pushed down to Community server (Domino) at intervals (approximately hourly) or when the server or policy service restarts so they can be applied to users on login.  This means that clients logging in are receiving policies from the Community server, they aren’t directly looking up policies from the System Console.  If there’s a breakdown in communication between the SSC and the Community server, you can’t push policy updates down to the users.

When installing the Sametime Community Server, the default policy is to allow minimal features through the embedded client, things like screen capture, file transfer and rich text editing are disabled, however I have discovered on two different sites with new 9.0.1 installs, the changes to the default policy were not feeding down to the clients.  The problem was where to track this down.  The policy was right in the System Console but if I turned on POLICY_DEBUG_LEVEL=5 (in the [Debug] section of sametime.ini) I could see that the policy settings being applied did not match those from the System Console.  I even created and deleted additional policies and saw them continue to be ignored through reboots.

So where was the missing piece – somewhere the Community Server was picking up old values but with no stpolicy.nsf there was seemingly nowhere for me to find them.  A separate earlier PMR to IBM pointed me to two new (to me) Xml files on the Community Server file system (domino program directory)

policies.server.xml

policies.user.xml

These are where the System Console policies are written and updated and where the Community server policy service accesses the settings to deploy to users.  The date / time stamp on those files was suspiciously that of the original install, so they hadn’t been updated since then.  The next thing to check is why these weren’t updating.

The first thing to do is test that the Community Server can access and read policies using your wasadmin (or whatever your administrative account it) account.  To do that launch a browser on the Community Server and go to http://sscserver.turtlehost.net:9080/stpolicy/policy/all – you should be prompted for a login, give it your wasadmin name and credentials and the policies should display as a string of values in your browser.  If that works but the policies.server.xml and policies.user.xml files still aren’t updating then the problem may be with how you are telling the Community Server to connect to the SSC.

In the Domino program directory there is a “console” subdirectory and in there is a console.properties file that tells the Community Server how to connect to the System Console.  The contents of that property file are

SSCEncodedAuthorization= [the encoded password for the wasadmin account or whatever your admin account is}
SSCSSLEnabled]=false
SSCHTTPPort=9080
SSCHostName=sscserver.turtlehost.net
SelectedDeploymentId={deployment id of the community server plan in the SSC}
SSCHTTPSPort=9443
LogLevel=FINEST

What’s missing from there is the SSCUserName which identifies the name of the user who is going to login (usually wasadmin) and SSCPassword which contains the unencrypted password for wasadmin (removed and replaced with SSCEncodedAuthorization on first use).  Both of those were required in 8.5.2 versions but don’t seem to be there in 9.0.1  It may be that they shouldn’t be needed but twice now I have seen policies not update after initial install and adding those values to the console.properties , removing the SSCEncodedAuthorization and restarting fixed the problem permanently.  If you add the SSCPassword and remove the SSCEncodedAuthorization you can tell if the connection to the SSC was successful because the properties file will then remove the SSCPassword and replace the SSCEncodedAuthorization.

So there you have it – three missing pieces to help debug policy deployment in Sametime

1. The Domino server based XML files policies.server.xml and policies.user.xml

2. The URL http://sscserver.turtlehost.net:9080/stpolicy/policy/all

3. The console.properties file in the console subdirectory under the Domino program directory

 

Get a load of these speakers…

I’m really excited by the breadth of world class speakers and moderators joining us at CSCEvent.   Take a look below and visit our agenda.  It’s only 2 weeks away and not only do you have us, LDC and these speakers but it’s being held at one of the most fun locations in London, The Soho Hotel (look at those seats!).  There are still a few places left so please join us and register here

The Collaboration Stack Community event, taking place in London on March 21st is nearly at capacity (although we have been warned people register and don’t come 😦 )  Hope to see you there!

Video From Spark Ideas @ Connect 2014?

If you missed Spark Ideas and our great speakers or just want to see them again, the videos of each talk are now uploaded to our Vimeo channel. Thanks to Chris Miller and Spiked Studios for recording producing and uploading!

Spark Ideas Videos

  • Get your motor running – Head out on the highway – Looking for adventure – And whatever comes our way (Debora Cole)
  • Fighting For Rural Internet (Bill Buchan)
  • Living without walls: How some goats, an orphan and a very long cup of tea changed my life (Colleen Burns)
  • Meet my 3 Friends Pain, Suffering and Sacrifice (Gaby Spaszewski)
  • Introverts in the wild (Tim Davis)
  • Operation Pencil Box (Norman Cox)
  • One Stupid Thing, Every Day (Julian Robichaux)
  • Bicycles & Community (Jamie Magee)
  • Is love enough? The passion to help children find a home for good (Stuart McIntyre)

Something Different This Way Comes..

If you’re in the UK (or visiting) and have any kind of interest or background in Collaborative technologies, we, together with our friends at LDC, are putting together a new networking event in London on March 21st.  The agenda can be found on our website http://cscevent.com/agenda and you’ll see we are trying something different (and no-one, least of all us, will be selling to you.)

This is a technologically agnostic networking event for those who work in or are interested in collaborative software. Our goal is to create space for ideas, to learn from others and get a view of how various sectors like cloud, mobility and security are unfolding.

It’s a chance to step back, consider and develop your strategy in the context of others’ experiences. We hope you come along with a willingness not just to listen but also to share.

We have two types of sessions during the day, followed by an evening drink / beers in nearby Soho.

Talking Technical

In this room each event will present two or three speakers who want to offer their views
on a technology and why they like it. We will then open up the floor for further
discussion with the audience who are welcome to ask questions and offer their own
content or viewpoints

Work and Life

This room brings informal discussions and roundtables around a variety of subjects
that effect us all. How do we run our work days, our lives, our downtime and our
interests. How do we get trained, plan work, track work and connect with each other.
Each event will be an open discussion with a moderator working through a series of
prepared questions for the room to open up discussion. The moderators here are not
necessarily subject-matter experts and the audience is expected to participate.

We will have to limit numbers to CSCEvent so if you definitely want to come you can register via  Eventbrite

Hope to see you there!

BP304: What We Wish We Had Known: Becoming an IBM Connections Administrator

This is my presentation with Paul Mooney on Connections administration.  In it we attempted to cover all the key things about Connections administration we think you need to get started.  I realise it’s a very heavily graphics based presentation and I will be uploading some speaker notes to go with it next week hopefully.

IBM Connect Wrap Up

Hello again.. well i’m still in the US but now fully recovered from Connect and the nasty bug that took me out and apparently used me as a carrier to take out 40% of the community.  Last year I spent most of Connect down with flu so this year I thought ahead, got a flu jab and lasted until Weds night, right after the geek challenge before being wiped out by a stomach bug.  Curse you random travel bugs preying on my lack of sleep and reduced immunity!!!

So how was my Connect?  Truthfully I had braced myself for this year , I was concerned there would be a small pocket of techies roaming amongst HR bods and it would feel like we were visiting our own conference.  There was definitely a touch of that,  but mostly I was really pleased to see so many first time attendees in sessions and certainly the ones I was at and did were well attended.  It was a very different Connect for me as well.  Usually I am tied up doing presentations but manage to get to sessions too and meet with friends – this year it was wall to wall presentations , customer meetings and IBM meetings.  I barely managed to get to the labs and to the showcase not at all.  I didn’t even make the Social Cafe at the back of the showcase – one minute it was Sunday and everyone was setting up and next it was Thurs morning and it was all over.  From a business sense it was great and I made a lot of contacts within IBM that may regret giving me their business cards,  but I didn’t get to learn as much as I do usually and I have a long list of sessions to track down.

What about the news from IBM? I actually enjoyed the Opening General Session which was well paced and i’m used to there being little technical “how we did this” content.  That’s not what the OGS is anymore and no I don’t expect to hear new features about Notes or Domino during it.  Those are both mature established products, I want to know IBM is continuing to support and develop them yes but I don’t expect exciting news to come just from those products.  Mail Next is interesting and reinforces support for Domino which is clearly the back end architecture.  It’s good to see IBM attempting to innovate in the mail , calendaring, personal productivity space and using their best server to do that – overlaying what appears to be a slick web interface with some , I assume, J2EE application analytics.  All I need to know about Mail Next is that it was in the Design , not Development, lab for us to see.  It’s an evolving concept and I don’t need to know answers to the technical questions beyond “yes it’s Domino underneath” right now. We’ll see what happens and I hope there’s a design program to support its development throughout 2014.

Other than that there were some great technical sessions. There’s no doubt the combination of technologies available to us is getting more complex, not just within IBM, and so the technical skill required to select, design, install and support them is too.  That led to some difficulty in writing sessions – mine with Chris Miller entitled “Simplifying The S’s: Single Sign-On, SPNEGO and SAML” took some creative thinking as well as some real concentration when attending them.  In short if you come to Connect to learn, the lotusphere track presentations this year were at a higher technical level than ever before.

Other than that I saw a few friends this week, not as many as I’d like.  The Dolphindor cards put together by Julian Robichaux, Kathy Brown, Chris Miller and myself were, I think, a big success.  Check out our Facebook page for some hilarious photos – thanks to everyone to joined in, hope you had a good time.  The Spark Ideas sessions were wonderful even if they did make me cry and hopefully Chris will be able to upload the videos to the Nerd Girls’ Vimeo channel so you can all see them. The Great Geek Challenge, possibly our last one, was a lot of fun and thanks to Carl for bringing the electrocution machine to make awarding the final big prize fair and to Kathy and Katie for running the room.

My final thank yous to the guys at LDC Mark Myers, Matt White, Julian Woodward to the goddess herself, Susan Bulloch, to Chris and Kathy and Carl and Paul and everyone who laughed with me and made me feel part of the community.

It was a good year.  Possibly one of my best despite all the things, and people, I missed.  I’m cautiously optimistic about 2015.