I notes and sametime integration open mic_2013

iNotes and Sametime integration Overview, How to & Troubleshooting

Sandeep R Deshpande

OPEN MIC – LOTUS TEAM OPEN MIC – LOTUS TEAM ■ Sandeep Deshpande – Staff Software Engineer■ Focussing on Notes/Domino/Traveler

■ Hansraj Mali - Lotus Technical Advisor■ Focussing on Notes/Domino, LotusLive

■ J Rajendran – Lotus Technical Advisor■ Focussing on entire Notes/Domino

■ Ranjit Rai - Lotus Technical Advisor■ Focussing on entire Notes/Domino ■ Vinayak Tavargeri – Lotus Support Manager■ Facilitator for Open Mics

Agenda

● Overview of iNotes and Sametime integration using traditional stlinks method and new Sametime web client integration method

● Troubleshooting Tips● Q/A

4

Basic Sametime Server concepts:

Which version of Sametime server will support iNotes ?– Sametime Entry– Sametime Standard version (Paid version)– Both versions support chatting from Notes client and iNotes.– Sametime Entry do not support Sametime connect client, and web

conferencing feature.

– * - Sametime entry was free when this document was written. Please always check latest licensing information with IBM.

5

Care to be taken while installing Sametime Server

While installing, it will ask you about HTTP tunneling.– HTTP tunneling means redirecting the HTTP data of all

ports to only 80 port.– Tunneling is required if your firewall allows only port 80

for http and blocks everything else.– Do not select tunneling unless you have kept only one

port 80 open in firewall. Tunneling will reduce the performance of Sametime since everything will come on same port 80.

6

Authentication used by Sametime Server-

Sametime Server supports 2 types of authentications-

– 1. Secrets and Token authentication (Default authentication)– 2. Web SSO authentication.

You can use any one type of authentication.

Secrets and Token authentication is formulated from 2 databases namely “STAuthS.nsf” and “STAuthT.nsf” where “STAuthS.nsf” is a Secrets database and “STAuthT.nsf” is a Token database.

7

How iNotes & Sametime integration works ?

8

Steps required to configure Sametime with iNotes-

Summary of steps-– 1. Specify the FQHN of Sametime server in configuration

document of iNotes server.

9


2. Create a replica of STAuthS.nsf file (case sensitive on Linux platforms) from Sametime server to iNotes server.

10


3. Copy the ‘stlinks’ folder from Sametime server to iNotes server to ensure that, stlinks version is same on both the servers. (present in data\domino\html\sametime folder)

4. Use parameter iNotes_WA_SametimeProtocol=http: if you use SSL on iNotes server but not on Sametime server.

5. To enable Sametime awareness for Firefox browser, use the parameter “iNotes_WA_DisableFirefoxAwareness=0” in notes.ini of iNotes server.

(Your sametime awareness in iNotes should be working at this point if there are no other issues.)

11

Steps required to configure Buddy list-

- Keep “Prefer iNotes 8 Contact list” option “Enabled” in configuration document of iNotes server.

- 1. Enable the support for Domino servlet manager in server document > Internet protocols > Domino Web Engine of iNotes server. (Required for buddy list servlet)

12


- 2. Create a file “servlets.properties” in Notepad and add the following line.

- servlet.DWABuddyList.code=com.lotus.dwa.stbuddy.DWABuddyList

- Put this file in data directory of iNotes server.

- Please note that filename is case sensitive on Linux OS and make sure that, you do not create a file servlets.properties.txt as “txt” extension is appended in Notepad.

13


- 3. Add the ip of iNotes server into stconfig.nsf > Community connectivity > Trusted ip field.

- Now your buddy list should be working if everything is ok.- Complete steps are available in following Technote.● http://www.ibm.com/support/docview.wss?uid=swg21319618

14

Sametime server in different domain/organization

You can use Sametime server from different domain/organization than iNotes server.

You need these additional things-– 1. You must have cross certificates present between them.

– 2. Directory assistance must be configured on Sametime server pointing to directory of iNotes server.

– 3. Server document of Sametime server must be manually created (and filled with basic information like server name, FQHN, Is this Sametime Server > Yes) in iNotes server directory.

Tips

Q.- We have followed all the steps to configure Sametime with iNotes but still it is not showing awareness. What should we do now ?

Ans: – Please check the following things-

- Make sure that, you have copied “stlinks” folder from sametime server to iNotes server on the required path.

- Make sure that, your sametime server's FQHN (“sametime.acme.com”) is resolvable from client machine. It is necessary to get it resolved from client machine as well and not just iNotes server.

- Make sure that, all the services of sametime are allowed in firewall and they are running at OS level.

Tips

- Ports like 8082 should not be blocked in firewall and you should be able to do the Telnet from client machine to sametime server's FQHN on port 8082.

C:\>Telnet sametime.acme.com 8082

- Client machine must be using JRE 1.6 minimum.

- If you have Proxy server Proxy in your environment, then from the browser try to bypass the proxy for sametime FQHN and then check again. Many times it doesn't work through proxy server but works directly. You then need to do the proper mapping at proxy side.

Tips

- Make sure that, you have enabled the following option in Sametime server.

1. Login to the stcenter on the sametime server- > Click - "Administer the server"

2. Now click on the Configuration section -> Community Services -> Enable - "Allow users to authenticate using either LTPA or Sametime Token (stauths.nsf and stautht.nsf). The server uses LTPA if this item is unchecked. (The item is unchecked by default.)".

Tips

- Create a new replica of STAuthS.nsf on iNotes server.

The file name is case sensitive on Linux OS. So please don't give it like “stauths.nsf”.

- If you are using a parameter “iNotes_WA_SametimeProtocol=http:” then make sure that : is added at the end of http

- Try to use Web SSO authentication and check if that works. This indicates some issue with Secrets and Token authentication.

Tips

How to check if stlinks is working outside iNotes-

Use the following technote to download the “testlinks.html” file to your same time server.

● http://www.ibm.com/support/docview.wss?uid=swg21267289

● Put this “testlinks.html” file on sametime server's “data\domino\html” folder.

● Then access this file from your browser like this.● http://sametime.acme.com/testlinks.html

http://www.ibm.com/support/docview.wss?uid=swg21267289

http://sametime.acme.com/testlinks.html

Tips

Q.- We have changed FQHN of our Sametime server and now sametime awareness doesn't work ? What to do now ?

Ans: – If you change FQHN of sametime server after installing it, then your Secrets and Token authentication databases will become invalid. So you need to create fresh pair of databases. To do this, just delete old “STAuthS.nsf” and “STAuthT.nsf” from sametime server and follow this technote to recreate them.


Troubleshooting – (Buddy list)

Q.- Our buddy list is showing error as “Bad HTTP status 404. We have already followed proper steps then what could be the problem ?


- Make sure that, contents of servlets.properties file are not manually typed. There should not be case mismatch in contents.

E.g.- typing “dwaBuddyList” instead of “DWABuddyList” will give error

servlet.DWABuddyList.code=com.lotus.dwa.stbuddy.DWABuddyList


- Check if “.txt” extension is added to your “servlets.properties” file. This happens when you save the file in Notepad as Text type file. So remove this extension and try again.

- Make sure you have enabled “Domino servlet manager” support in server document.

- If “servlets.properties” file is already auto created on server due to some reason, then the required line must be added at the top of this file instead of end.



Q.- We are getting error “Buddy list servlet not logged into sametime server” while accessing buddy list. So what could be the problem ?


- In some cases, iNotes server was having multiple IP addresses and only first IP was added in “stconfig.nsf” > Trusted IP list. So you can add all the IP addresses of iNotes server.

- In many cases, the port 1516 was not accessible when doing Telnet to FQHN of sametime server. This either means port is blocked or FQHN is not resolvable from iNotes machine.

C:\>Telnet sametime.acme.com 1516


- If it still shows the same error, then enable the logging in “servlets.properties” file in data directory of iNotes server as below. Use the following lines.


servlet.DWABuddyList.initArgs=stserver=sametimeone.acme.com, logging=1

- Now try to access the buddy list again and once the error is reproduced, it will show the collect the log in console.log or Log.nsf. The next page shows, how the sample log looks like containing an error code.

25


The log looks like below. 09/27/2010 10:04:56 HTTP JVM: TRACE: Logging in to sametime.acme.com

class=com.lotus.dwa.stbuddy.STBuddyListSA, method=login09/27/2010 10:04:56 HTTP JVM: TRACE: Got logged out event before login, reason = -2147483129 class=com.lotus.dwa.stbuddy.STBuddyListSA, method=loggedOut09/27/2010 10:04:56 HTTP JVM: TRACE: Try to relogin class=com.lotus.dwa.stbuddy.STBuddyListSA, method=loggedOut09/27/2010 10:05:26 HTTP JVM: TRACE: Logging in to sametime.acme.com class=com.lotus.dwa.stbuddy.STBuddyListSA, method=login

26


Here the negative error code -2147483129 means the port 1516 of Sametime server was not accessible from iNotes server.

So make sure that, port 1516 is accessible via FQHN of Sametime server and not just IP.

Many times it is just accessible over IP but not over FQHN To confirm, if it is blocked at iNotes machine or Sametime

server machine, please Telnet from any other client machine and confirm if that is accessible.

27

2nd Method- Sametime Web client integration method-

This is newer method of configuring Sametime with iNotes as compared to traditional “stlinks” integration. Primarily used for Domino 9 but can also be used for Domino 8.5.x servers.

But it needs Sametime Proxy server in addition to existing Sametime Community server.

Sametime Proxy server needs WAS (Websphere Application Server) and on top of WAS, Sametime Proxy server will run.

28

Diagram – iNotes and Sametime Web client integration

29

Sametime Web client integration method-

Make the following settings in the configuration document of the iNotes server-

30

Sametime Web client integration method- Sametime awareness in iNotes 9 using Web Client

integration method-

31

Sametime Web client integration method-

Sametime Chat window (Rich) in iNotes 9 using Web Client integration method-

32

Troubleshooting – (Sametime Web Client integration)

Q.- Sametime awareness is not coming in iNotes via new method “Sametime Web Client integration”. So what could be the problem ?


- First make sure that, you are able to connect successfully to Sametime Proxy server's web client via the URL

http://sametime.acme.com:9080

- In few cases it was found that, Sametime Community Server was rejecting the connections from iNotes Proxy Client because “VPS_ALLOWED_LOGIN_TYPES=” in sametime.ini was not containing hex value “14A4” of iNotes Proxy client.

http://sametime.acme.com:9080/

33

Troubleshooting – (Sametime Web Client integration)

-If using Sametime Proxy 8.5.2 server, you should install IFR1 on it, if you are facing issue with iNotes integration. Also install IFR1 on Sametime Community server if using version 8.5.2.

- Check if your Web SSO is working properly by trying to open the names.nsf of iNotes server from browser and then without closing browser, try to open the names.nsf of sametime server by changing URL. If it asks for authentication, then it means, Web SSO is not working properly.

Troubleshooting – (Sametime Web Client integration)-

Q.- We are using out custom Mail85.ntf template on Domino 9 server. But sametime awareness doesn't work using Sametime Web Client integration method. So what should we do ?

Ans: – If using old Mail85.ntf template on Domino 9, please copy “dojo-1.5.1” folder from data\domino\js directory from Domino 8.5.3 to Domino 9 server. By default Domino 9 does not have Mail85.ntf or Forms85.nsf files on it. You need to copy them from old server.

Differences between 2 methods-No. Traditional stlinks method New Sametime Web Client

integration method

1. Needs 8 to 9 steps to configure Sametime in iNotes

Needs only 1-2 steps to configure Sametime in iNotes

2. Works directly with Sametime Community server (no need to have Sametime Proxy server)

Needs a Sametime Proxy server in addition to existing Sametime Community server

3. Domino 8.5 supports both methods

Domino 9 supports only this method.

4. Can work with Secrets and Token authentication and Web SSO as well.

Works only with Web SSO (does not support Secrets and Token authentication of stlinks method)

5. Needs a separate configuration for buddy list

Does not need separate configuration for buddy list

36

Useful links

Complete steps to configure-● http://www.ibm.com/support/docview.wss?uid=swg21319618

Buddy list troubleshooting -● http://www.ibm.com/support/docview.wss?uid=swg21258358● http://www.ibm.com/support/docview.wss?uid=swg21317895

Which version of Domino is recommended for Sametime server-● http://www-01.ibm.com/support/docview.wss?uid=swg21096416




Questions?

Documents

I notes and sametime integration open mic_2013