Revision History: Original material produced for Sametime Release 2.5

Transcription

1

2 Disclaimer THIS DOCUMENTATION IS PROVIDED FOR REFERENCE PURPOSES ONLY. WHILE EFFORTS WERE MADE TO VERIFY THE COMPLETENESS AND ACCURACY OF THE INFORMATION CONTAINED IN THIS DOCUMENTATION, THIS DOCUMENTATION IS PROVIDED "AS IS" WITHOUT ANY WARRANTY WHATSOEVER AND TO THE MAXIMUM EXTENT PERMITTED, LOTUS DISCLAIMS ALL IMPLIED WARRANTIES, INCLUDING WITHOUT LIMITATION THE IMPLIED WARRANTIES OF MERCHANTABILITY, NONINFRINGEMENT AND FITNESS FOR A PARTICULAR PURPOSE, WITH RESPECT TO THE SAME. LOTUS SHALL NOT BE RESPONSIBLE FOR ANY DAMAGES, INCLUDING WITHOUT LIMITATION, DIRECT, INDIRECT, CONSEQUENTIAL OR INCIDENTAL DAMAGES, ARISING OUT OF THE USE OF, OR OTHERWISE RELATED TO, THIS DOCUMENTATION OR ANY OTHER DOCUMENTATION. NOTWITHSTANDING ANYTHING TO THE CONTRARY, NOTHING CONTAINED IN THIS DOCUMENTATION OR ANY OTHER DOCUMENTATION IS INTENDED TO, NOR SHALL HAVE THE EFFECT OF, CREATING ANY WARRANTIES OR REPRESENTATIONS FROM LOTUS (OR ITS SUPPLIERS OR LICENSORS), OR ALTERING THE TERMS AND CONDITIONS OF THE APPLICABLE LICENSE AGREEMENT GOVERNING THE USE OF THIS SOFTWARE. Copyright Under the copyright laws, neither the documentation nor the software may be copied, photocopied, reproduced, translated, or reduced to any electronic medium or machine-readable form, in whole or in part, without the prior written consent of Lotus Development Corporation, except in the manner described in the documentation or the applicable licensing agreement governing the use of the software. Copyright Lotus Development Corporation 55 Cambridge Parkway Cambridge, MA All Rights Reserved. Printed in the United States. Revision History: Original material produced for Sametime Release 2.5 Trademarks Domino, Sametime, and Sametime Connect are trademarks and Lotus, 1-2-3, Freelance Graphics, Lotus Notes, LotusScript, Notes, Notes Mail, and Word Pro are registered trademarks of Lotus Development Corporation. IBM PC Camera and IBM PC Camera Pro Max are trademarks and IBM is a registered trademark of International Business Machines Corporation. America Online, AOL, AOL Instant Messenger, and the Triangle Logo are registered service marks of America Online, Inc. Sun, Sun Microsystems, the Sun Logo, Java, Javascript, and JRE are trademarks or registered trademarks of Sun Microsystems, Inc. in the United States and other countries. Latitude Communications, the Latitude logo, and MeetingPlace are trademarks of Latitude Communications, Inc. Microsoft, Windows, Windows NT, and the Windows logo are registered trademarks of Microsoft Corporation in the United States, other countries, or both. MMX is a trademark and Pentium is a registered trademark of Intel Corporation in the United States, other countries, or both. Other product and company names mentioned herein may be the trademarks or registered trademarks of their respective owners.

3 Contents Chapter 1 - What s new?... 1 Welcome... 1 Welcome to Lotus Sametime... 1 Release Notes - availability and formats... 1 Lotus/IBM Web sites containing Sametime documentation... 1 New Features... 3 New Features for Sametime Chapter 2 - Things you need to know... 5 System Requirements... 5 System requirements for Sametime Server administration... 7 Do not use Sametime settings in the Server document... 7 Changing server administration parameters... 7 Supported sound cards and cameras... 7 Supported sound cards and cameras... 7 Sound cards... 8 Cameras... 8 Signing Sametime databases Signing Sametime databases Server display color setting must be higher than 256 colors Server display color setting must be higher than 256 colors Using SSL to encrypt Sametime connections to an LDAP server Using SSL with Sametime and LDAP servers Connecting to Sametime using the polling method Connecting to Sametime using the polling method Joining meetings with NetMeeting Joining meetings with NetMeeting Chat logging on the Chat logging on the Changing the directory for Record and Playback (.RAP) files Changing the directory in which.rap files are stored Setting up LDAP with multiple servers in a Web-only environment Setting up LDAP with multiple servers in a Web-only environment Proxy servers tested with Sametime Proxy servers tested with Sametime Setting up an LDAP connection to an ActiveDirectory server Setting up an LDAP connection to an ActiveDirectory server Installation Issues After Sametime uninstall, reboot before reinstalling Sametime Clicking the Cancel button while install is copying files Delay at the end of installation Deleting directories following an installation failure Directory ACL Default access setting is "No Access" iii

4 Contents Directory has "Enforce consistent ACLs" option selected Do not install Multimedia Services using the setup.exe file Domino or name must include the IP host name Install directory name cannot have special characters or a space Installing Sametime without a fully qualified domain name Microsoft IIS HTTP server is not detected by installation Ping the before installation (verify DNS setup) Replicate the Secrets database in multiple server environments Sametime installation locates nonexistent Netscape browsers servlets.properties file renamed during Sametime installation Uninstall before reinstalling the Uninstalling Sametime - delete Server/Connection documents Windows locale settings must be correct "Ordinal XXX not found" error during installation "Server not responding" error appears in stsetup.log file Sametime Connect client issues Cannot add meeting participant to Sametime Connect List Changing Sametime Connect for browsers server connectivity Do not run both versions of Sametime Connect on the same machine Invitation indicates no available tools if Connect is closed Meeting cannot be started due to error 0x No error for empty proxy fields in Sametime Connect for browsers Sametime Connect display problems at 256 colors Sametime Connect startup screen is upside down Meeting Room client issues Computer entering standby mode drops audio Databeam Farsite files should not be attached to a meeting Empty browser frame or browser crash during client install Files with embedded objects distort in the whiteboard Gray whiteboard, screen sharing buttons disabled, no A/V HTML files do not display correctly in the whiteboard Initial chat transcripts do not appear in instant meetings Meeting Room client hangs when loading whiteboard/other applet Only one spreadsheet in a file converts to whiteboard format Participant List problems with Netscape browsers Repeated saves when converting multiple spreadsheet Excel file Web browser issues Admin pages do not display in Sametime Administration Tool Available Tools do not appear with Netscape/Win Cannot attend meetings using Netscape IE 4.01 returns script errors when saving a meeting Installing the Sametime Client Package with Netscape 3.x Java virtual machine must be installed with IE 5.01/ JavaScript errors when creating meetings with Netscape Meeting names with quotations display incorrectly Netscape does not authenticate using international characters iv

5 Contents Netscape locks up when resizing Administration window Netscape opens empty and Notepad opens with.tmp file displayed No browser is set as the default Proxy tunneling does not work with IE Repeated prompts for Microsoft IE VM install Sametime issues using Discussion database with Internet Explorer Unsupported browsers Wrong MeetingPlace information when scheduling conference call issues A member of a group cannot authenticate when attending a meeting Access Control Lists are unavailable to the administrator Accessing Print Capture help on Windows 2000 systems Broadcast connections monitoring does not show multicast users Broadcast monitoring does not count TCP streams Cannot delete or edit a meeting with a telephone conference call Cannot import recorded meeting Cannot search by first and last names Changing HTTP port of the Changing the Broadcast gateway control port Collaboration options visible after being disabled by admin DiagnosticsFileOutput.txt file using too much disk space Directory Searching and Browsing settings in Administration Tool Disconnections from Community Services with NAT Discussion or TeamRoom database inoperable Discussion/TeamRoom databases and Notes Clients Do not use a directory name when creating a Discussion db Domino Capacity Monitor fails to start Error scheduling meeting that includes telephone conference call HTTPS in URL listed in the meeting details document is incorrect Instant meeting fails if.tmp file type associated with Notepad Invited servers require same HTTP port number for meeting links Latitude MeetingPlace server does not call user back Listed user name appears not active in the public group Maximum online meeting password length Meeting does not go active after changing Windows NT system time Meeting name does not appear on connected (or "invited") server Meetings - date problems and meeting activation/closure issues Meetings are not recorded as expected Meetings do not become active on connected ("invited") server Multicast address ranges for Broadcast Services not working NetMeeting crashes when entering meeting password NetMeeting meetings do not extend past scheduled end time New Meeting page does not display "Telephone conference call" New Poll dialog box extends off the screen No meetings in the "Today s Meetings" view of the Meeting Center Presence lists are grayed out in Discussion database v

6 Contents Renaming the stcenter.nsf database Restart the server when changing logging options Scheduling a telephone conference call crashes Sametime nhttp Self registered user cannot change password Spaces in Domino domain name break Sametime Connection documents STLog.nsf on invited server does not record names Subscript out of range 47 error when creating repeating meetings Telephone conference calls and "invited" s Usage Limits and Denied Entry for Broadcast Meetings User cannot save the whiteboard User ID displays as numbers/characters in Administration Tool Users only logged into a database cannot be invited to a meeting Users unable to log in to Community Services Using Lotus Notes client stops Domino processes on Sametime Using self-registration with multiple s Using "Alt+159" accented characters with user registration Verifying the version number of a Whiteboard saving issues with DBCS characters "Message received when inviting others to a meeting " (no node name config)" in NetMeeting or ST Log Multimedia Services NetMeeting video window freezes Poor audio quality with G.711 audio codec and TCP Tunneling Unable to join audio/video meeting with NetMeeting LDAP issues Administrator cannot attend meetings or use Sametime databases Configuring LDAP directory settings after installation Group members in Exchange server LDAP directory not online Performance slow when using Sametime with LDAP Sametime Connect 2.0 or 2.5 client required in LDAP environments Unable to add groups from Domino LDAP directory to buddy lists Security issues Web browser authentication with cascaded address books STMtgManagement API reports abnormal programming exception Chapter 4 - Documentation updates Help Online and print documentation A broadcast meeting that uses NetMeeting as a tool A meeting created by an Anonymous user does not have a Moderator Location of "Join Call" button incorrect in end-user help Administrator s Guide Allowing users with Reader access to select unlisted meetings Time to buffer broadcast audio/video data set in milliseconds Installation Guide Microsoft IIS server not detected by Sametime installation Using Sametime with Domino versions more recent than vi

7 Contents Provide feedback for Sametime documentation Provide feedback for Sametime documentation Chapter 5 - Interoperability Sametime compatibility Do not use Java Sametime Connect with Sametime 1.5 home server Sametime Connect 1.5 cannot participate in chat meetings SSL and instant meetings with Sametime 1.5 servers Sametime compatibility Accessing help in a mixed environment General compatibility issues for invited servers Sametime Connect 2.5 client to Sametime 2.0 server connectivity Sametime Domino compatibility Sametime 2.5 compatibility with Domino Sametime Connect for browsers interoperability Sametime Connect for browsers interoperability Chapter 6 - History of changes Product change reporting Overview of product change reporting vii

8

9 About Release Notes August 31, 2001 The online Release Notes database contains information about Lotus Sametime 2.5. These Release Notes contain the following chapters: What's New introduces you to Sametime, tells you about the new features and enhancements in this release, and points you to further information. Things You Need to Know describes supported platforms and environments and other information that you need to know before installing this release. Troubleshooting describes known limitations and issues associated with this release of Sametime. Documentation Updates describes errata and updates to the Sametime documentation. History of Changes contains information about fixes and enhancements made in past releases of Sametime. You can edit the documents in the online database to suit the particular needs of your site. However, if you do edit the contents of the database, it must be strictly for the sole use of users within your organization. You cannot resell or otherwise distribute this documentation, modified or unmodified, to anyone outside your organization. Lotus assumes no responsibility for the technical accuracy of any modifications made to this documentation. The following information applies to the United States and Canada only: If you print the electronic online Release Notes, we recommend you print on regular 8.5-by-11 inch paper, using a laser printer. This step ensures that page size and other formatting is maintained. ix

10

11 Chapter 1 - What's new? Chapter 1 - What's new? The What's new chapter introduces you to Sametime, tells you about the new features and enhancements in this release, and points you to further information. Welcome Welcome to Lotus Sametime These Release Notes for Lotus Sametime contain the latest information available for Sametime release 2.5. The Release Notes include topics about known issues, system requirements, documentation updates, and information not available in other Sametime documentation. Be sure to read the topics in the Things You Need to Know section and the list of known issues in the Troubleshooting section before installing the Sametime software. Release Notes - availability and formats The Release Notes are available both in online format and as a printable PDF file. The PDF version (STRN25.PDF) is included on the Sametime CD; it can be viewed and printed using Adobe Acrobat Reader software (version 3.0 or higher). Visit the Adobe site at to download the latest version of the Adobe Acrobat Reader. The online Lotus Notes Database version (STRN25.NSF) is installed as part of the in the Sametime data directory. It can be directly viewed and searched using a Notes client. Lotus/IBM Web sites containing Sametime documentation The following Lotus Web sites are designed to help you locate the latest information on Lotus Sametime 2.5: is the Lotus Development Corporation home page, which contains general information on all Lotus products and services, including press releases, downloadable software, support, and purchasing information. You can use this Web site to access the following Web pages. You can also access these pages directly using the specific URL. contains links to IBM Redbooks that include in-depth information on deploying Sametime in your environment and using the Sametime developer's toolkit. After accessing this web site, search on "Sametime." The two currently available IBM Redbooks for Sametime are Lotus Sametime Deployment Guide, and Lotus Sametime Application Development Guide. 1

12 Chapter 1 - What's new? contains Sametime product and developer information, including the latest information on Sametime developer's tools and the protocols used by Sametime that make online awareness and real-time collaboration possible. This Web site includes white papers, reviewer's guides, common questions and solutions, and newsletters relating to Sametime's features and benefits. contains the latest tools and information for enabling applications and web sites with Sametime technology. Use this web site to download the latest version of the Sametime Toolkit, work with sample applications, participate in discussions using Sametime technology, learn the latest tips and tricks, and review whitepapers and Redbook information. contains Notes application development and Business Partner information, including development tips and techniques, innovative applications, developer discussions, and updates on the latest product releases. You can also use this Web site to find out information and request an application for the Lotus Business Partner program. contains Lotus Education information on all Lotus products, including course descriptions, schedules, Lotus Authorized Education Center locations, and Lotus certification information. contains support information on all Lotus products, including common questions and solutions, user discussions, downloadable files, and Lotus support phone numbers. You can also use this Web site to search the KnowledgeBase for technical information on Lotus products. is the site brought to you by Iris Associates, the group that develops Notes and Domino. This site contains a technical webzine with articles for end-users, application developers and systems administrators, and an active discussion cafe with several discussion forums for exchanging ideas about Domino, Notes, and Sametime and sharing your thoughts with Iris. contains Domino, Notes, and Sametime documentation databases and Adobe Acrobat.pdf files that you can download, information on ordering additional documentation, product tips, and documentation feedback forms. To access information on the Web, you must use a Web browser, such as Web Navigator, Netscape Navigator, or Internet Explorer. If you need information on connecting your Notes workstation to the Web, contact your Lotus Notes server administrator. 2

13 Chapter 1 - What's new? New Features Sametime Connect client, Sametime Meeting Room client, Sametime Broadcast client, Sametime Administration Tool, Web browsers,, Multimedia Services New Features for Sametime 2.5 The table below summarizes the most important new features and enhancements available in Sametime 2.5. The table includes end-user and administrator features. Feature or Enhancement Polling Send Web Pages Whiteboard Enhancements New Participant List Description The Moderator can send questions to meeting participants and instantly view the responses. Polling options include the ability to mark correct answers, allow anonymous responses, and show the responses to all meeting participants. The Sametime Administration Tool includes a Meeting Services configuration setting that enables the administrator to make the Polling collaborative feature available or unavailable to end users. The Moderator can direct meeting participants to specific Web pages by opening a browser window on each participant's computer screen. Participants can explore the Web page, go to different Web pages, or close the window without affecting what other participants see during the meeting. The Sametime Administration Tool includes a Meeting Services configuration setting that enables the administrator to make the Send Web Pages feature available or unavailable to end users. The Moderator can now save edited whiteboard files as attachments to the meeting details. The Sametime Administration Tool includes a Meeting Services configuration setting that the adminstrator can use to allow or not allow end users to save the whiteboard. The whiteboard includes a new Pointer Tool that allows participants to display markers on the whiteboard. The Participant List now contains more information about meeting participants. Click the Participant List details button at the bottom of the Participant List to see: the Moderator, the current speaker, hands raised, who is sharing a screen, who is controlling the shared screen, who is waiting to talk (in meetings including the Request Microphone mode of computer audio), and who has permission to speak and permission to edit/share. 3

14 Chapter 1 - What's new? Feature or Enhancement Two Versions of Sametime Connect Hand Raise Who Controls the Shared Screen Repeating Meetings Record Meetings (Record and Playback) Polling Connectivity Option PDF Version of the Sametime User's Guide Accessibility Description Sametime Connect now comes in two slightly different versions: Sametime Connect for the desktop and Sametime Connect for browsers. Both versions of Connect allow users to see when their colleagues are online, send instant messages, and start instant meetings. The system administrator determines which version(s) of Connect are available. Sametime Connect for browsers is written in the Java programming language and runs in a user's Web browser while Sametime Connect for the desktop runs as a standalone Windows application on the user's Windows desktop. A participant can "raise a hand" during meetings to get the Moderator's attention. A hand icon appears next to the participant's name in the Participant List. Sametime now provides two ways to confirm who is controlling a shared screen. The initials of the participant controlling the screen appear beside the cursor, and an arrow icon appears in the Participant List details. The Participant List details also indicate which participant is sharing the screen. Users can now easily edit and delete a series of repeating Sametime meetings. Users can record Sametime meetings and store the recordings on the. Users can view recorded meetings at their convenience. Options are available in the Sametime Meeting Center that enable the administrator to manage the Sametime Record and Playback (.RAP) files. See the Sametime 2.5 Administrator's Guide (sthelpad.nsf or sthelpad.pdf) for more information. The Sametime Meeting Room client can use a polling method to connect to the. This connectivity method enables the Meeting Room client to connect to the through HTTP proxies that require authentication or through proxies that buffer data. The polling connectivity method also enables the Meeting Room client to connect to the when the Meeting Room client runs in a Web browser that uses a Proxy Auto Configuration (PAC) file to connect to a proxy server. For more information, see "Connecting to Sametime using the polling method" in the "Things you need to know" section of these Release Notes. All of the Sametime documentation is now available in PDF format. You can print the PDF file, or download it to your computer. The PDF file is available at the following Web site: Click the "Doc Library" button, and then click the link to search for documentation by product. Click the Sametime link to locate the Sametime 2.5 documentation. The Sametime Meeting Center has been redesigned to work better with screen readers and standard Windows accessibility features. 4

15 Chapter 2 - Things you need to know Chapter 2 - Things you need to know The Things you need to know chapter describes supported platforms and environments and other information that you need to know before installing this release. System Requirements Sametime Connect client, Sametime Meeting Room client, Sametime Broadcast client,, Multimedia Services System requirements for Sametime 2.5 Sametime 2.5 server (Web-only or Domino environment) Certified operating system versions Windows NT Server 4.0 (Service Pack 6a installed) Windows 2000 Server (Service Pack 1 or 2 installed) Windows 2000 Advanced Server (Service Pack 1 or 2 installed) Processors supported RAM Disk space Disk swap space Network protocols supported Pentium II 350MHz minimum All operating systems: 256 MB (minimum) 512 MB (recommended) 500 MB free disk space minimum 1 GB is recommended to allow space for meeting, meeting attachments, and recorded meetings 64 MB TCP/IP Web browsers supported Netscape Navigator 4.5 Netscape Communicator 4.7 Microsoft Internet Explorer 4.01 with Service Pack 2 Microsoft Internet Explorer 5.01 Microsoft Internet Explorer 5.5 with Service Pack 1 Interoperates with Lotus Domino server versions or higher 5

16 Chapter 2 - Things you need to know Sametime 2.5 client system requirements Certified operating system versions Processors supported RAM Web browsers supported Additional requirements for Audio/Video Windows 95 OSR2 Windows 98 Windows 98SE Windows NT Workstation 4.0 (Service Pack 5 installed) Windows 2000 Professional Windows Millenium Pentium II 233 MHz or higher 96 MB for Windows 2000 Professional and Windows NT Workstation w/sp5 or SP6a 64 MB for Windows 95 OSR2/98/98SE/ME; 96MB is recommended for audio/video Netscape Navigator 4.5 Netscape Communicator 4.7 Microsoft Internet Explorer 4.01 with Service Pack 2 Microsoft Internet Explorer 5.01 Microsoft Internet Explorer 5.5 with Service Pack 1 Sound card: Full-duplex required for interactive meetings; half-duplex required for broadcast meetings Microphone and speakers: A headset that includes a boom microphone performs best. If a desktop microphone is used, a unidirectional dynamic microphone that uses batteries is preferred. (Avoid microphones with on/off switches unless they are of high quality.) Video capturing software: Video for Windows Camera: A high-quality USB or PCMCIA PC camera. (Do not use parallel port cameras.) A camera is optional. Users who do not have a camera can participate in an audio/video meeting. When a user without a camera speaks, no video is displayed to other users in the meeting. 6

17 Chapter 2 - Things you need to know Server administration Sametime Administration Tool, Do not use Sametime settings in the Server document The Server document in the Domino Directory contains a Sametime tab. The settings available in the Sametime tab of the Server document have no affect on Sametime operations and should not be used. Administrator's should use the Sametime Administration Tool to change administration settings. The Sametime Administration Tool accesses the Configuration database (STCONFIG.NSF) and the Sametime.ini file which store the Sametime administration settings. Sametime Administration Tool Changing server administration parameters With Sametime 2.5, the server administration parameters accessed by the XML-based Sametime Administration Tool are stored in the Configuration database (STCONFIG.NSF) on the and in the Sametime.ini file. It is recommended that you use the Sametime Administration Tool to change server administration parameters. If you directly access the STCONFIG.NSF database or the Sametime.ini file to change a server administration parameter, you must restart the before the change will take affect. Generally, you should not change administration settings by accessing the STCONFIG.NSF database with a Lotus Notes client. Use the Sametime Administration Tool to change administration settings. Supported sound cards and cameras Multimedia Services Supported sound cards and cameras The administrator has the option of installing the Sametime Multimedia Services on the Sametime 2.5 server. The Sametime Multimedia Services provide IP audio/video capabilities to Sametime. The sound cards and cameras supported by the Multimedia Services are listed below. 7

18 Chapter 2 - Things you need to know Sound cards Recommended sound cards The following sound cards are recommended for use with Sametime. CrystalWare (integrated) Montego A3D Xstream SoundBlaster Live Value Supported sound cards The following sound cards have been tested with Sametime. ALS120 Aureal Vortex A3D SQ1500 Aureal SB Audio PCI 64V ES1887 (integrated) Montego II A3D Montego II Quadzilla Rockwell WaveArtist SoundBlaster PCI 128 SoundBlaster PCI 512 SoundBlaster 32 AWE SIIG SoundWave Pro PCI Yamaha DS-XG (integrated) Creative Crystal PnP Es 1868 Creative Sound Blaster Creative 16 Plug & Play Creative AWE64 Creative SoundBlaster PCI Addonic (PCI) Crystal Audio (DELL onboard sound card) Crystal SoundFusion PCI Audio Accelerator Cameras Recommended cameras The following cameras are recommended for use with Sametime. The cameras listed below are all USB cameras. IBM PC Camera 3Com Home Connect Intel PC Camera Pro Pack Supported cameras The table below lists supported cameras for each operating system. The table includes all cameras that have been tested with Sametime to date. If your preferred camera is not listed, check with your system administrator to obtain the most recent information about supported cameras. Note: All product and company names mentioned herein may be the trademarks or registered trademarks of their respective owners. 8

19 Chapter 2 - Things you need to know Operating system Windows 95 OSR2 Windows 98 Windows NT 4, Service Pack 6 Windows 2000 Professional Supported cameras Intel PC Camera Pro Pack Boser BS105B (requires capture card) Logitech QuickCam Express Orite USB PC Camera Winnov Videum Board (PCI capture card only; does not include a camera) GV-VCP2 (PCI capture card only; does not include a camera) ATI All-In-Wonder Pro (PCI capture card only; does not include a camera) IBM PC Camera IBM PC Camera Pro Max Creative Video Blaster WebCam 3 Intel PC Camera Pro Pack Intel PC Camera Pack Kodak DVC325 Logitech QuickCam Home Logitech QuickCam Express Logitech QuickCam WebCam Logitech QuickCam VC Alpa Cam Nogatech USB Digital Micro Cam Creative Video Blaster WebCam Go Webeye PC370 Boser BS105B (requires capture card) I-O Data USB-CCD GV-VCP2 (PCI capture card only; does not include a camera) GNet DZ eye Orite USB PC Camera QuickCapture-EZ Video Capture card CA-120P, Orite Technology (requires capture card) 3Com Home Connect 3Com Big Picture 3Com Home Connect Hauppauge WinTV (PCI capture card only; does not include a camera) Webeye PC370 Logitech QuickCam VC Alpa Cam Orite USB PC Camera IBM UltraPort TM IBM PC Camera Nogatech USB Digital Micro Cam Kodak DVC325 Windows Me Creative Video Blaster WebCam 3 Intel PC Camera Pro Pack IBM PC Camera Pro Max 3Com Home Connect Logitech QuickCam Home ATI All-In-Wonder Pro (PCI capture card only; does not include a camera) Hauppauge WinTV (PCI capture card only; does not include a camera) Winnov Videum Board (PCI capture card only; does not include a camera) 9

20 Chapter 2 - Things you need to know Signing Sametime databases Signing Sametime databases Some Sametime databases contain agents that access the Directory and provide authentication support for Sametime. Agents within these databases are signed by the "Sametime Development/Lotus Notes Companion Products" ID. If the security policies of your organization require you to re-sign databases with a different ID, you must re-sign the following Sametime database and templates: STCONF.NTF STDISC50.NTF STTEAM50.NTF STSRC.NSF After re-signing these files, ensure that the signer you have used is listed in the Directory ACL and in the "Run unrestricted agents" field of the Server document. The minimal Directory ACL requirements for the signer ID are: Access: Reader Roles: [Group Creator], [Group Modifier], [UserCreator], [UserModifier] Server display color setting must be higher than 256 colors Server display color setting must be higher than 256 colors The server machine on which Sametime is installed must have a video card installed and a display color setting higher than 256 colors. A 16-bit color setting is recommended. The following problems can occur if the server machine has a display color setting of 256 colors or less: The images in whiteboard attachments do not display correctly on the whiteboard. Users cannot save the whiteboard. The Meeting Room client opens with a gray whiteboard. Screen-sharing buttons are disabled in the Meeting Room client. Audio/Video features do not work. When a user attends a meeting, an additional Meeting Room client opens in a different window and flashes periodically. Shortly after these problems appear, meetings on the may fail to become active. 10

21 Chapter 2 - Things you need to know Using SSL to encrypt Sametime connections to an LDAP server Using SSL with Sametime and LDAP servers When Sametime is configured to connect to an LDAP server, directory information and passwords are transmitted over the connections between the and the LDAP server. The administrator can protect this information by using SSL to encrypt the data passing between the and the LDAP server. Using SSL to encrypt the connections between the and the LDAP server can adversely affect the performance of the server. For this reason, the administrator may want to consider the level of protection that is needed before enabling SSL. The administrator has the following options: Encrypt all data - This option encrypts all directory information and passwords that are transmitted between the and the LDAP server. This option provides the most security but can affect server performance. Encrypt only user passwords - This option encrypts passwords but not directory information (such as user names) passing over the connection between the Sametime and LDAP servers. This option provides an intermediate level of security and affects server performance less than encrypting all data transmitted between the Sametime and LDAP servers. Encrypt no data - This option allows all passwords and directory information to pass in the clear (unencrypted) between the Sametime and LDAP servers. This option does not affect server performance and should be used if the administrator feels there is no opportunity for an unauthorized user to eavesdrop on the connections between the and the LDAP server. These options and the connections that occur between a Sametime and LDAP server are briefly discussed below. Connections between the Sametime and LDAP server When Sametime is configured to connect to an LDAP server, Sametime can make five separate connections to the LDAP server. Sametime makes a separate connection for each of the following actions: Authenticating users Resolving a user name to a distinguished name as part of the login procedure Resolving user and group names (for example, as a response to an "Add Person or Group" request from a Sametime Connect client) Browsing the directory Getting the content of public groups Encrypting all data If the administrator feels there is a security risk associated with directory information and passwords passing over the connections between the and the LDAP server, the administrator can encrypt all data that passes over all five connections. To encrypt all data passing over all five connections, the administrator should select the "Use SSL to authenticate and encrypt the connection between the and the LDAP server" option in the LDAP Directory - Connectivity settings of the Sametime Administration Tool. When this option is selected, all of the data transmitted on all five connections between the and the LDAP server is encrypted. 11

22 Chapter 2 - Things you need to know Encrypting only passwords If the administrator is not concerned with directory information (such as user names) being transmitted unencrypted between the Sametime and LDAP servers, the administrator can use a setting in the Sametime.ini file to ensure that only information transmitted over the "Authenticating users" connection between the Sametime and LDAP servers is encrypted. This connection carries the user passwords that are maintained in the LDAP directory and used for authentication. To ensure that only passwords are encrypted, the administrator must: 1. Disable the "Use authenticated binding to the LDAP server" option in the LDAP Directory - Connectivity settings of the Sametime Administration Tool. Note: Disabling this setting means that the will bind to the LDAP server as an anonymous user. It is important for the to use anonymous binding instead of authenticated binding when connecting to the LDAP server. When authenticated binding is used, the transmits the administrator user name and password on all five connections to the LDAP server. If you leave this setting enabled, the administrator name and password and user passwords are encrypted on the "authenticating users connection," but the administrator name and password are transmitted in the clear (unencrypted) on the other four connections Enable the "Use SSL to authenticate and encrypt the connection between the and the LDAP server" option in the LDAP Directory - Connectivity options of the Sametime Administration Tool. Open the Sametime.ini file and set the parameter below to "1." [Directory] ST_DB_LDAP_SSL_ONLY_FOR_PASSWORDS=1 If set to 1, the ST_DB_LDAP_SSL_ONLY_FOR_PASSWORDS setting encrypts only the first connection (or the "authenticating users" connection) of the five connections to the LDAP server. To encrypt only passwords, you must also select the "Use SSL to authenticate and encrypt the connection between the and the LDAP server" and deselect the "Use authenticated binding to the LDAP server option" in the Sametime Administration Tool as described above. Note: The following combinations of settings produce the effects described below: If the "Use SSL to authenticate and encrypt the connection between the and the LDAP server" setting is selected, and the Sametime.ini file ST_DB_LDAP_SSL_ONLY_FOR_PASSWORDS flag is enabled (set to 1), and the "Use authenticated binding to the LDAP server" option is also selected, the administrator user name and password is sent in the clear (unencrypted) on four of the five connections to the LDAP server. If the "Use SSL to authenticate and encrypt the connection between the and the LDAP server" setting is selected, and the Sametime.ini file ST_DB_LDAP_SSL_ONLY_FOR_PASSWORDS flag is not configured (set to 0 or non-existent), all data on all five connections is encrypted. Encrypting no data If the adminstrator is not concerned with unauthorized users eavesdropping on transmissions between the Sametime and LDAP servers, the administrator should disable the "Use authenticated binding to the LDAP server" option in the LDAP Directory - Connectivity settings of the Sametime Administration Tool. 12

23 Chapter 2 - Things you need to know Connecting to Sametime using the polling method Sametime Meeting Room client, Connecting to Sametime using the polling method Sametime 2.5 includes a new "polling" connectivity method, which is not described in the Sametime 2.5 Administrator's Guide. The polling connectivity method enhances Sametime connectivity by enabling the Sametime Meeting Room client and the Sametime Broadcast client to connect to the in network environments that include: HTTP proxies that require authentication - Previous releases of the Sametime Meeting Room client could not connect to the through an HTTP proxy that requires authentication. The polling method enables the Sametime 2.5 Meeting Room client to establish connections with the server through HTTP proxies that require authentication. Proxies that buffer data - Previous versions of the Sametime Meeting Room client required data to trickle continuously from the server to the client over a persistent connection. Some proxies store data in a buffer and transmit the data when a specifed amount of data is in the buffer. These proxies do not allow data to trickle continuously from the server to the client; therefore, previous Sametime releases did not work with these proxies. The polling connectivity method can transmit data through these proxies. Proxy Auto-Configuration Files - Internet Explorer has an "Automatically detect settings" connectivity option that enables the browser to get the information it requires to connect to a proxy server from a Proxy Auto-Configuration (PAC) file stored on a local server. Previous versions of the Sametime Meeting Room client could not access the data contained in the PAC file and therefore could not establish connections with the. The polling connectivity method enables the Meeting Room client to establish connections with Sametime when the Meeting Room client is running in a Web browser that gets proxy connectivity information from a PAC file. Connection Attempts The Sametime Meeting Room and Broadcast clients make attempts to connect to the using three different methods. The polling method is the third connection attempt that the client tries. These connection attempts occur as described below The client attempts to make a direct TCP/IP connection to the. This connection attempt fails if the client accesses the through a proxy server or if the port on which the connection attempt occurs is blocked by the network configuration. If the direct TCP/IP connection attempt fails, the Meeting Room client reads the Web browser proxy setttings from the Java System Properties of the Java Virtual Machine. If the Web browser proxy settings specify an HTTP proxy server, the Meeting Room client uses the proxy settings to establish a "virtual connection" through the HTTP proxy. This "virtual connection" requires the use of a long-lasting HTTP connection to the. This connection method provides the client with an event-driven, real-time, connection to the server. Some network environments may prevent this connection method from succeeding. If the Web browser proxy settings do not specify a proxy server, the Meeting Room client attempts a direct HTTP connection (that is, an HTTP connection that does not occur through a proxy server) to the. 13

24 Chapter 2 - Things you need to know This connection method described in step 2 will not be successful if: The connection is attempted through an HTTP proxy that requires authentication The connection is attempted through a proxy that buffers data The browser is configured to use a PAC file which the Sametime client cannot retrieve or decode The port on which the connection is attempted is blocked by the network configuration. Note: Both of the connection attempts above are described in greater detail in the Sametime 2.5 Administrator's Guide. See "Connecting to the Meeting Services" and "Connecting to the Broadcast Services" in the "Configuring Sametime Connectivity" chapter of the Sametime 2.5 Administrator's Guide for more information. 3. If the client cannot connect using either of the methods above, the client attempts the polling method. The details of the polling method are described below. About the Polling method The Sametime client uses the Web browser's settings to connect to the proxy server. For example, if the browser is configured to use a PAC file, the client uses the Java URLConnection() class to connect to the server. Features of the Java URLConnection() class enable the client to automatically get the proxy connection settings. The proxy server establishes connections with Sametime on behalf of the client. The Sametime client then enters a polling mode. The client creates a connection to the server, posts any data that it has, receives data from the server, and then closes the connection. The client repeats this process at three-second intervals. When the Meeting Room or Broadcast client is operating in this way, the presentation may exhibit a halting quality similar to an animation that has some of its frames removed. Both the host client (the user controlling a shared application or the whiteboard) and the participant clients (other users attending the meeting) poll the server. If the host client begins making rapid changes to a shared application or whiteboard, the polling interval decreases. If the host client makes several rapid changes, the host client immediately pushes the data to the server. The participant clients get the data from the server, close the connection, and then immediately create another connection instead of waiting for the three-second interval to elapse. Shorter polling intervals enable meetings with high levels of activity to progress efficiently. The polling method ensures that Sametime clients can establish connections with the in almost any network environment. Note that the polling connectivity method creates more network traffic and can limit the scalability of the. 14

25 Chapter 2 - Things you need to know Joining meetings with NetMeeting, Multimedia Services Joining meetings with NetMeeting This topic discusses the ways in which you use Microsoft NetMeeting to join meetings on the Sametime server. This discussion assumes that the administrator has installed the Multimedia Services on the and enabled the following two settings in the Sametime Administration Tool: "Allow people to choose NetMeeting (or other T.120 compatible client) for screen sharing and whiteboard instead of Sametime Web-based meeting tools" in the Configuration - Meeting Services - General Settings of the Sametime Administration Tool. If this option is not enabled, users can attend meetings with NetMeeting, but cannot use the screen sharing or whiteboard components of NetMeeting during the meeting. "Allow H.323 clients (such as Microsoft NetMeeting) to join a Sametime meeting" in the Configuration - Connectivity - Interactive Audio/Video Network settings of the Sametime Administration Tool. If this option is not enabled, users can attend meetings with NetMeeting, but cannot use the audio/video components of NetMeeting during the meeting. If the two administrative options above are enabled, the is configured to allow users to attend meetings on the server with the Microsoft NetMeeting client and use the screen-sharing, whiteboard, audio, and video features of NetMeeting. Note: For more information about the administration settings above, see the Sametime 2.5 Administrator's Guide. These settings are discussed in the topic "General settings for Meeting Services" in the "Configuring the Meeting Services" chapter and the topic "Interactive Audio/Video network settings" in the "Configuring Sametime Connectivity" chapter. Starting NetMeeting from a Web link (recommended use of NetMeeting with Sametime) When using NetMeeting with the, users must start NetMeeting from a Web link in the Sametime Meeting Center to use the screen-sharing, whiteboard, audio, and video features of the NetMeeting client. To ensure that NetMeeting is launched from the Web link, the end user should select the "Use NetMeeting" option on the Tools tab of the New Meeting page on the when creating the meeting. When the "Use NetMeeting" option is selected, the collaborative activities (screen sharing, whiteboard, audio, and video) that are available to NetMeeting users are determined by the two administrative settings described above. To attend the meeting, the user clicks a meeting name in the Sametime Meeting Center. The Meeting Details document, which contains a link to launch NetMeeting, appears. The user selects this link to launch NetMeeting on the user's local machine and connect to the meeting. NetMeeting must already be installed on the user's machine. Note: Netscape users may have to download and install a plug-in to launch Microsoft NetMeeting from a Netscape browser. See the Sametime 2.5 User's Guide (available from the Documentation link of the home page) for more information. Creating and attending NetMeeting meetings in this way ensures that all collaborative activities allowed by the administrator are available to the NetMeeting clients in the meeting. 15

26 Chapter 2 - Things you need to know Attending meetings directly from NetMeeting If the "Use NetMeeting" option on the Tools tab of the New Meeting page is selected, it is also possible for NetMeeting users to attend the meeting by starting NetMeeting on their Windows desktops and attending the meeting by entering the name in the NetMeeting user interface. Attending meetings with NetMeeting in this way is not recommended and is possible only if the administrator disables the "Allow H.323 clients (such as Microsoft NetMeeting) to join a Sametime meeting" in the Configuration - Connectivity - Interactive Audio/Video Network settings of the Sametime Administration Tool. If the user starts NetMeeting from the Windows desktop instead of launching it from the Web link as described above, the screen-sharing and whiteboard features can be used in the meeting, but audio and video features cannot. Attending Sametime Meeting Room client meetings with NetMeeting If the user selects the "Use the Sametime Meeting Room" option in the Tools tab of the user interface when creating the meeting (instead of selecting the "Use NetMeeting" option), the user expects other users to attend the meeting using the Sametime Meeting Room client. However, it is possible for NetMeeting users to participate in the audio/video part of a meeting for which the "Use the Sametime Meeting Room" option was selected during Meeting creation. Note that NetMeeting users cannot participate in any screen- sharing or whiteboard activity in the meeting. Note: The "Allow H.323 clients (such as Microsoft NetMeeting) to join a Sametime meeting" setting in the Configuration - Connectivity - Interactive Audio/Video Network settings of the Sametime Administration Tool must be enabled for NetMeeting clients to participate in a meeting in this way. NetMeeting users can use the following procedure to attend the audio/video part of a meeting that was created as a meeting for Sametime Meeting Room clients: Before the meeting begins, view the meeting details and write down the audio conference ID number. To view the details, click the meeting name in the Sametime Meeting Center. Start Microsoft NetMeeting from the Windows desktop. (Microsoft NetMeeting 3.01 is required.) Choose Tools - Options, and click the Advanced Calling button. Select the "Use a gateway to call telephones and video conferencing systems" check box. Enter the DNS name or IP address of the in the Gateway field. (For example, www. sametimeserver.com.) Click OK in the Advanced Calling Options dialog box, and then click OK in the Options dialog box. Click the Call button. Enter the audio conference ID from step 1 in the To field. Select "Phone number" in the Using drop-down box. Click Call to join the meeting. Note: Under no circumstances can Sametime Meeting Room client users and Microsoft NetMeeting users participate in screen-sharing and whiteboard activities in the same meeting. The screen-sharing/whiteboard capabilities of the Sametime Meeting Room client and the NetMeeting client are not compatible. If the "Use NetMeeting" option is selected in the Tools tab of the user interface during meeting creation, users must attend the meeting with the NetMeeting client to use screen-sharing and the whiteboard. If the "Use the Sametime Meeting Room" option is selected in the Tools tab, users must attend the meeting with the Sametime Meeting Room client to use screen-sharing and the whiteboard. 16