IBM Collaboration Solutions. Powered by IBM SmartCloud Meetings IBM Corporation

Transcription

1 Install, Deploy, and Troubleshoot IBM Connection Content Manager Open Mic - March 12, 2014 Charlie Price Advisory Software Engineer Jonathan King Advisory Software Engineer IBM Collaboration Solutions Powered by IBM SmartCloud Meetings

2 Features of Social and Content Management Social Networking in 1 word: Content Management in 1 word: COLLABORATE CONTROL Share Like Tag Comment Recommend Subscribe Follow Part of Social Business strategy Versioning Approval routing Check-in/out Access control Metadata taxonomy Document types Nested Folders Part of ECM strategy 2

3 Features of Social and Content Management Social Networking: Content Management: Person is at the Center Content is at the Center People are the most valuable asset People make connections People know things People get work done People innovate People create content Content is the most valuable asset Content records single version of truth Content - better decisions, faster Content feeds business processes Content is the collective memory Content stays with organization Content is auditable 3

4 Social Content Management is Collaboration... across all People and Content: IBM Connections Content Manager 4

5 Demo of CCM 5

6 Demo of CCM 6

7 Demo of CCM 7

8 Demo of CCM 8

9 Demo of CCM 9

10 Demo of CCM 10

11 Demo of CCM Now that the process is complete, you will see the file listed in the Library on the Overview page of the Community: 11

12 Social and Content Management... In technical terms Social Networking in 1 word: Content Management in 1 word: CONNECTIONS FILENET 12

13 Details of the FileNet components FileNet Content Engine (CE) Collection of services and components for managing different types of businessrelated content and automating business processes. Storage management engine for the family of IBM FileNet P8 products. FileNet Collaboration Services (FNCS) Provides services that can be used by IBM Connections or the Quickr Connectors Use the Content Engine APIs to complete operations in Content Engine. FileNet Content Engine Client (CE Client) Jar file (Jace.jar) containing the Content Engine api's needed for communication from FNCS to CE Must be same version as CE 13

14 Details of the FileNet components Data organization configuration and organization of FileNet in a logical grouping called P8 domain How to communicate with ldap / profiles What object store type is being used stored in the Global Configuration Domain database Object stores where FileNet content is stored FileNet has 3 options Database File system Fixed content device (Tivoli Storage Manager, Network Appliance SnapLock or EMC) Install with Connections configures File system Object store File System Object store metadata is stored in the object store database, but the document content is stored externally to the database in a shared file system 14

15 Connections Enterprise Applications Connections components IBM HTTP Server DMGR Connections WebSphere Node Homepage Common Communities Help Profiles Metrics Activities Mobile Blogs Mobile Admin Bookmarks Moderation Files News Forums Search Wikis WidgetContainer WebSphereOauth20SP Database Server Network Share LDAP Server connectionsproxy 15

16 Connections + FileNet components Connections Enterprise Applications IBM HTTP Server DMGR Database Server Connections WebSphere Node Network Share LDAP Server Homepage Common Communities Help Profiles Metrics Activities Mobile Blogs Mobile Admin Bookmarks Moderation Files News Forums Search Wikis WidgetContainer FNCS WebSphereOauth20SP FileNetEngine connectionsproxy 16

17 Details of the FileNet Componets Default Logging Logs For FNCS and CE applications C:\IBM\WebSphere\AppServer\profiles\AppSrv01\FileNet\iccluster_server1 p8_server_error.log p8_server_trace.log Logs For FNCS and CE WAS applications C:\IBM\WebSphere\AppServer\profiles\AppSrv01\logs\<clustername> SystemOut.log Logs for Communities application C:\IBM\WebSphere\AppServer\profiles\AppSrv01\logs\<clustername> SystemOut.log 17

18 Install 18

19 Install Connections Install IBM Connections for Intranet and Extranet V4.5 for AIX, Windows, Linux, IBMi Multilingual eassembly (CRM1CML) IBM Connections V4.5 for Windows Multilingual (CIHC5ML) FileNet Install IBM Connections Content Manager V4.5 AIX, Windows, Linux Multilingual eassembly (CRLS4ML) FileNet CE IBM FileNet Content Platform Engine V5.2 Windows Multilingual (CIG8XML) FileNet CE Client IBM FileNet Content Platform Engine Client V5.2 Windows English (CIG9FEN) FileNet FNCS IBM FileNet Collaboration Services V2.0 Windows Multilingual (CIG7ZML) 19

20 Create the Databases 20

21 Create the Databases Note the 2 Filenet DB's FNGCD (Global Configuration Domain FNOS (Object Store 21

22 Create the Databases Note the 2 Filenet DB's FNGCD (Global Configuration Domain FNOS (Object Store 22

23 Select IBM Connections Content Manager Add-on NOTE: If installing after you have already completed the initial install, you would chose Modify in Install Manager, and make sure to leave everything you want install remained checked. The modify will only update newly selected components 23

24 Select IBM Connections Content Manager Add-on Tell the Installer where the FileNet install componets are extracted to: FNCS CE CE Client 24

25 Chose the Deployment Medium defaults to same cluster as Communities (Cluster1_server1) 25

26 Chose the Deployment Large defaults to 1 server for FNCS and FileNet Content Engine (CCMCluster_server1) 26

27 Chose the Deployment I chose small with everything on 1 cluster 27

28 Set the DB Settings Notice there are 2 db's for Filenet FNGCD: FileNet Global Configuration Domain FNOS: FileNet Object Store 28

29 Content Store When you set the shared directory it sets this for FileNet as well If you need to move the content store later... 29

30 Content Store Post install if you need to move it Connections Content Shut down the app servers on each node Update all shared" WebSphere variables: Update the C:\IBM\Connections\ConfigEngine\properties\wkplc.properties file MessageStores.MsgStore=C:${file.separator}IBM${file.separator}Connections${file.separator}data$ {file.separator}shared\\messagestores MessageStores.TempMsgStore=C:${file.separator}IBM${file.separator}Connections$ {file.separator}data${file.separator}shared\\messagestores\\temp MessageStores.PermMsgStore=C:${file.separator}IBM${file.separator}Connections$ {file.separator}data${file.separator}shared\\messagestores\\perm MessageStores.LogStore=C:${file.separator}IBM${file.separator}Connections${file.separator}data$ {file.separator}shared\\messagestores\\log Move the shared directory to the new location Start the app servers 30

31 Content Store Post install if you need to move it FileNet Content Using ACCE tool update Root directory path Restart application servers again 31

32 Install Packages page... 32

33 Troubleshooting Install CCM does not install and you may see your system missing folders and content. After reviewing the install.log, you see: [exec] Creating failure log in directory: /apps/data/profiles/dmgr/configengine/log/failureyear-month-day-time.log When you review this failure log, you will see this error message: /apps/bin/connections/45/ccm/ccm/ccm/config/includes/ccm_cust_cfg.xml:46 4: The directory you specified does not exist AND WARNING: /tmp does not have enough disk space! 33

34 Troubleshooting Install TMP Space Resolving the issue: You can resolve this issue by creating more space for the TMP directory. This is achieved by either deleting the contents of the directory and re-running setup or by allocating more disk space to the TMP directory 34

35 Troubleshooting Install Korn Shell Error in logs: CLFRP0038E IBM Connections Content Manager failed to be configured on WebSphere Application Server. Error Step Step "action-config-fncs-ccm" Solution Make sure the korn shell is installed on linux Uninstall CCM and reinstall 35

36 Configure FileNet 36

37 Create FileNet Global Configuration Domain Make sure the DMGR, Connections and specifically the FileNet cluster are running Run \IBM\Connections\addons\ccm\ccmDomainTool\createGCD.bat Takes 2 3 minutes to complete 37

38 Create FileNet Global Configuration Domain This will display information about the environment, as read during the install, enter the connections admin password 38

39 Create FileNet Global Configuration Domain Enter the connections admin name and password again to connect to the environment and register the services 39

40 Create FileNet Global Configuration Domain 40

41 OPTIONAL - Create FileNet Global Configuration Domain change admin user If you want to use a different admin user when setting up FileNet Prior to running \IBM\Connections\addons\ccm\ccmDomainTool\createGCD.bat Update the /opt/ibm/connections/config.properties ccm.adminuser.id=<username> Change this to your current FileNet user as set in the FileNet j2calias role 41

42 Troubleshooting creategcd.bat 42

43 Troubleshooting creategcd.bat server not running If you see an error: Fix: start FileNet and run creategcd.bat again 43

44 Troubleshooting creategcd.bat domain partially created If it's partially created, and you run the tool again... 44

45 Troubleshooting creategcd.bat domain partially created Resolving: Clean OS files Drop FileNet db's (FNGCD and FNOS) Then recreate the domain. 1. Stop Connections JVM. Nodeagent and Dmgr can remain up (unless you want to clear TEMP and WSTEMP files). 2. Remove all files and directories contained WITHIN...\IBM\Connections\Data\Shared\CCM. (Do not delete the CCM directory itself.) 3. Delete the dminfo.properties file from...\ibm\websphere\appserver\profiles\dmgr\bin 4. Drop and recreate the IBM Connections Content Manager database via dbwizard. 5. Start Connections JVM 6. Run..\ccmDomainTool>createGCD.bat 7. Run..\ccmDomainTool>createObjectStore.bat 45

46 Troubleshooting creategcd.bat E_ACCESS_DENIED During the execution of the creategcd.batsh script, you may see the following exception in regard to installing Addons: com.filenet.api.exception.engineruntimeexception: FNRCE0001E: E_ACCESS_DENIED: The requester has insufficient access rights to perform the requested operation. failedbatchitem=0 errorstack={ at com.filenet.engine.persist.basegcdpersister.checkcreatepermissions(basegcdpersister.java:670) at com.filenet.engine.persist.basegcdpersister.executecreate(basegcdpersister.java:620) at com.filenet.engine.persist.basegcdpersister.executechangework(basegcdpersister.java:231) at com.filenet.engine.persist.independentpersister.executechange(independentpersister.java:329) at com.filenet.engine.persist.basegcdpersister.executechange(basegcdpersister.java:133) at com.ibm.p8qs.tools.addon.installaddon(addon.java:293) at com.ibm.p8qs.tools.addon.installalladdons(addon.java:212) at com.ibm.p8qs.tools.addon.initialize(addon.java:139) at com.ibm.p8qs.tools.addon.main(addon.java:427) 46

47 Troubleshooting creategcd.bat E_ACCESS_DENIED Resolving: 1) Access the Filenet Administration Console: 2) When the page loads, you will be presented with a dialog-box that you can select users to add as Administrators of the FileNet P8 Domain. Usually the Domain admin user seen from the 1st execution of the creategcd.batsh will already be selected for you: 47

48 Troubleshooting creategcd.bat E_ACCESS_DENIED 48

49 Troubleshooting creategcd.bat E_ACCESS_DENIED 3. If a User is not already selected, use the Add button to find a User & add them to the list of Domain Administrators. 4. Click Next, then Finish. Then logout using the menu in the upper-right corner of the page displaying the Domain Admin UserID shown in the 1st execution of the creategcd.batsh script. 5. Next, run the creategcd.batsh script again. This time you will see a: FNRCG0001E: GCD_DOMAIN_ALREADY_EXISTS exception, which you can ignore. 6. You will then be prompted for the connectionsadmin UserID & password: 49

50 Troubleshooting creategcd.bat E_ACCESS_DENIED Exception in thread "main" com.filenet.api.exception.engineruntimeexception: FNRCG0001E: GCD_DOMAIN_ALREADY_EXISTS: P8 domain already exists. failedbatchitem=0 errorstack={ at com.filenet.engine.persist.domainpersister.executechange(domainpersister.java:130) at ccmdomaintool.createp8domain(unknown Source) at ccmdomaintool.main(unknown Source) addon.sh./../fncs/ce_api Enter user name: wasadmin Enter password: 50

51 Troubleshooting creategcd.bat E_ACCESS_DENIED 11. After the password is entered, the script will resume execution to add 3 add-ons and then terminate, returning to the command-prompt: 12. Enter the Username & password of your environment's connectionsadmin. 13. At this point you should see: [INFO] You have successfully registered IBM FileNet Services for Lotus Quickr 1.1 Extensions in the P8 domain ICDomain. [INFO] You have successfully registered IBM FileNet Services for Lotus Quickr 1.1 Supplemental Metadata in the P8 domain ICDomain. [INFO] You have successfully registered IBM FileNet Services for Lotus Quickr 1.1 Publish Metadata in the P8 domain ICDomain. [INFO] All IBM FileNet Services for Lotus Quickr 1.1 Addons have previously been registered in the P8 domain ICDomain. No changes were made. 51

52 Troubleshooting creategcd.bat FNRCG0005E: GCD Domain does not exist In some cases you may get the following error: "com.filenet.api.exception.engineruntimeexception: FNRCG0005E: GCD_DOMAIN_DOES_NOT_EXIST: The P8 domain does not exist. Create the P8 Domain and retry the request." This is possible if you had a failed Connections Content Manager (CCM) installation and had uninstalled it. To resolve this issue, you can remove the file dminfo.properties found under <DM_Profile>/bin/ The rerun creategcd. 52

53 Troubleshooting creategcd.bat When to rerun creategcd If the script fails at the point of "Creating Domain and GCD...", you may rerun the creategcd.bat script after fixing the error as stated in the message. However, if the failure of the creategcd script is after the point of "Setting Server Cache...", you cannot rerun creategcd.bat directly. Instead you must drop and recreate the Connections Content Manager databases using the DB Wizard. 53

54 Create FileNet Object Store 54

55 Create FileNet Object Store creategcd.bat finishes in FNCS directory Change dir back to ccmdomaintool Run \IBM\Connections\addons\ccm\ccmDomainTool\createObjectStore.bat Takes 5 10 min 55

56 Create FileNet Object Store Enter FileNet admin password 56

57 Create FileNet Object Store 57

58 Troubleshoot createobjectstore.bat 58

59 Troubleshooting Create FileNet Object Store lookupname=ibm+connections+4.5+documentation#action=opendocum ent&res_title=troubleshooting_the_ccmdomaintool_ic45&content=pdcont ent&sa=true If you run into an error at the step stating "Creating Object Store...", you can rerun the tool after fixing the error in the message. If you see errors on other steps after Creating Object Store... completes successfully, you cannot rerun createobjectstore.shbat, since the Object Store has been created. Instead, you will need to perform the configuration through manual steps or run the DBWizard to drop the CCM database. 59

60 Troubleshoot CCM 60

61 Library Errors 61

62 Connections Directory Provider? Connections community has a list of members. Community's library in FileNet have an ACL. 62

63 Connections Directory Provider? Connections Directory Provider CPE 63

64 CPE LDAP groups Community roles LDAP server A in Group1 A in Group3 Connections Directory Provider Connections server A owner, Community1 A member, Community2 Connections Directory Provider multiplexes group membership from LDAP and Connections communities 64

65 How is a user identified? guid - uuid - custom DN uid 660e73... Z1094 cn=jdoe... jdoe jdoe@... CPE LDAP Connections Access to library in Filenet Who is the user? Connections Directory Provider Do they have access? 65

66 Troubleshooting CCM prof_guid not default Important settings from profiles database for CCM integration prof_guid prof_source_uid prof_uid or prof_mail (depends on what is first attribute in login filter) Check prof_guid in map_dbrepos_from_source.properties guid=ibm-entryuuid If this is anything other than the default from table, you need to update LotusConnections-config.xml For example, if you have guid=uid set <sloc:servicereference profiles_directory_service_extension_enabled="true" servicename="directory" custom_user_id_attribute="uid"/> 66

67 Troubleshooting CCM prof_guid not default Important settings from profiles database for CCM integration prof_guid prof_source_uid prof_uid or prof_mail (depends on what is first attribute in login filter) prof_source_uid must be the distinguished name of the user in WebSphere LDAP Check prof_source_uid in map_dbrepos_from_source.properties distinguishedname=$dn 67

68 Troubleshooting CCM prof_guid not default Important settings from profiles database for CCM integration prof_guid prof_source_uid prof_uid or prof_mail (depends on what is first attribute in login filter) prof_uid or prof_mail must be the same value as the first ldap attribute WebSphere login filter Federated Repository CCM Cluster jvm argument 68

69 Troubleshooting CCM Authentication issues require Waltz/Sonata tracing lookupname=ibm+connections+4.5+documentation#action=opendocument&res_title= Enabling_Waltz_and_Sonata_traces_ic45&content=pdcontent 69

70 Troubleshooting CCM Documents added directly in FileNet cannot be found in Connections search In CCM, only files that are added through Communities will be included in the Connections search index. Documents in legacy libraries that existed before FileNet/Connections integration, document added outside of CCM, and documents in linked libraries will not be indexed and will thus not be included in search results. If you have linked libraries, you can enable search in linked libraries lookupname=ibm+connections+4.5+documentation#action=opendocument&res_title=enabling_s earch_in_linked_libraries_ic45&content=pdcontent&sa=true 70

71 CCM poor performance Problem: Very poor performance when accessing community containing library widget Cause: users with access to large number of groups Solution: set the following JVM argument on Filenet side to retrieve nested groups from Waltz, -Dibm.filenet.security.connectionsProvider.disableRecursiveParentCall=true 71

72 CCM poor performance Problem: Very poor performance when submitting for approval or approving a document Cause: list of approvers are members of large numbers of communities Solution: Filenet CR3 soon to be released addresses this issue 72

73 Additional post configuration steps Configure FileNet to publish event to the Activity Stream lookupname=ibm+connections+4.5+documentation#action=opendocument&res_title =Configuring_Filenet_to_be_an_Activity_Stream_producer_with_a_new_deployment_i c45&content=pdcontent Allow Anonymous access and public community libraries lookupname=ibm+connections+4.5+documentation#action=opendocument&res_title =Setting_up_anonymous_access_for_a_new_FileNet_deployment_ic45&content=pdco ntent Apply latest CR to system NOTE: Step by step instructions of these provided at end of presentation 73

74 Troubleshooting Anonymous access and public community libraries Symptom: Anonymous (not logged in) user sees error in library widget on a public community Solutions: Verify anonymous access enabled in FNCS (anonymousaccessenabled setting) Verify anonymous role configured on FNCS app in WAS Account must be valid on CPE directory Should not have any particular privileges Do not use an admin account for this! 74

75 Troubleshooting Anonymous Access to CCM Libaries Settings to check Look at fncs-siteprefs.properties in \IBM\WebSphere\AppServer\profiles\AppSrv01\installedApps\<cell>\FNCS.ear\lib\props.jar Does this include anonymousaccessenabled=true enablepropertysheettemplateminmax=true Fix fncs-siteprefs.properties in C:\IBM\Connections\addons\ccm\FNCS\properties\ Uninstall the FNCS enterprise application in Integrated Solutions Console Run C:\IBM\Connections\addons\ccm\FNCS\configmanager\configwizard.bat As detailed in step 2.3 from NOTE: This issue typically happens after a CR upgrade, when we forget to backup and reapply the default fncs-siteprefs.properties in \IBM\Connections\addons\ccm\FNCS\properties\ 75

76 Press *1 on your telephone to ask a question. Visit our Support Technical Exchange page or our Facebook page for details on future events. To help shape the future of IBM software, take this quality survey and share your opinion of IBM software used within your organization: IBM Collaboration Solutions Support page IBM Collaboration Solutions Support 76

77 Configure FileNet to publish events to Activity Stream 77

78 Configure Publishing Events to Activity Stream Open browser to /acce and login as FileNet admin user 78

79 Configure publishing Events to Activity Stream Set Properties as follows Property Property Value Activity Stream Retrieval URL {ecm_files} NOTE: write exactly as shown here Activity Stream HTTP Endpoint URL Activity Stream Gadget URL {connections}/resources/web/com.ibm.social.ee/connectionse E.xml NOTE: write exactly as shown here Note {connections} and case in ConnectionsEE.xml 79

80 Configure publishing Events to Activity Stream Set Properties as follows Property Property Value Config 1 password Config 2 localadmin Before saving... NOTE: login name and password of user and will be encrypted after input. This user must be in the trustedexternalapplication role on the Widget Container application in IBM Connections. By default, the Connections administrator has these privileges After saving... 80

81 Configure publishing Events to Activity Stream Set Properties as follows Property Property Value Activity Stream Extended Settings a. Click the small triangle associated with the Property Value for this entry and select Display or Edit Value. b. Sequentially enter the following five entries by placing each of the strings in the Enter a string value field and clicking Add for each entry. When finished, click OK. activitystreamretrievalurl={0}/atom/library/{1}%3b{2}/{3}/{4}/entry activitystreamanonymousretrievalurl={0}/atom/anonymous/library/ {1}%3B{2}/{3}/{4}/entry activitystreamoauthretrievalurl={0}/atom/oauth/library/{1}%3b{2}/ {3}/{4}/entry activitystreamfilelinkurl={0}/atom/library/{1}/document/{2}/media/ {3} activitystreamnullifyactionableurl={0}/connections/opensocial/ basic/rest/activitystreams/@me/@all/@all/{1} 81

82 Configure publishing Events to Activity Stream Set Properties as follows Property Property Value Download Count Ignored User Ids SID of user(s) that will not count as downloading a file. This needs to at least include connectionsadmin user that builds the search index Download Count Anonymous User Ids SID of user(s) that will count as downloading a file as anonymous Activity Stream Ignored Users SID of user(s) that will not publish events to Activity Stream Ids 82

83 Configure publishing Events to Activity Stream Set Properties as follows Generate SID Run \IBM\Connections\addons\ccm\ccmDomainTool\generateSID.bat 83

84 Configure publishing Events to Activity Stream Set Properties as follows Generate SID Enter the FileNet admin's password 84

85 Configure publishing Events to Activity Stream Set Properties as follows Generate SID Enter the login name of user you need SID 85

86 Configure publishing Events to Activity Stream Set Properties as follows Generate SID Enter the login name of user you need SID 86

87 Configure publishing Events to Activity Stream Set Properties as follows Generate SID Copy SID of user S

88 Configure publishing Events to Activity Stream Set Properties as follows Property Property Value Download Count Ignored User Ids S Download Count Anonymous User Ids I left this blank Activity Stream Ignored Users I left this blank Ids 88

89 Configure publishing Events to Activity Stream Set Properties as follows Click Save and Close 89

90 Configure publishing Events to Activity Stream Stop and Start FNCS and FileNetEngine applications 90

91 Test library publishing Events to Activity Stream Log Back into the restricted community from earlier Upload a new file Note: test1.txt was uploaded prior to configuring Activity Stream from above test2.txt uploaded after configuring the Activity Stream 91

92 Test library publishing Events to Activity Stream Click on Recent Updates test2.txt appears in the stream, test1.txt does not... 92

93 Troubleshooting Library Widget Publishing Events to the Activity Stream 93

94 Troubleshooting Publishing to Activity Stream Possible 400/404 errors when seeing trying to view an event, or users get logged out when trying to view the published event: Resolving: Check the Activity Stream Retrieval URL value in the Collaboration Config document. Make sure it is NOT set to ecm_files. This value should be exactly as described in the documentation: {ecm_files} lookupname=ibm+connections+4.5+documentation#action=opendocument&res_title= Configuring_Filenet_to_be_an_Activity_Stream_producer_with_a_new_deployment_ic 45&content=pdcontent 94

95 Troubleshooting Publishing to Activity Stream When adding a file, submitting for preview or approving/rejecting in CCM library, an error is thrown: 10/4/13 14:04:12:709 CEST] a MessageHandle E com.ibm.lconn.news.consumer.internal.impl.messagehandlersupport handlemessage CLFWX0011E: This is most likely due to the FileNet event containing invalid users in the to field. Resolving: Make sure the users set to approve are valid users of the community and have valid addresses. Synchronize Community member tables: lookupname=ibm+connections+4.5+documentation#action=opendocument&res_title= Synchronizing_user_data_using_administrative_commands_ic45&content=pdcontent&s a=true 95

96 Allow Anonymous Access to FileNet 96

97 Allow Anonymous Access to FileNet Authentication data on unprotected URLs In the IBM Integrated Solution Console Navigate to Security -> Global Security -> Web security -> General Settings. Make sure Authenticate only when the URI is protected is selected and Use available authentication data when an unprotected URI is accessed also is selected. 97

98 Allow Anonymous Access to FileNet Map Everyone to Authenticated Role in FNCS Continuing in the WebSphere Administration console, Navigate to Applications -> WebSphere Enterprise Applications -> FNCS Click Security role to user/group mapping. Select the Authenticated option and then select Map Special Subjects and Everyone. Click OK to save your changes. 98

99 Allow Anonymous Access to FileNet Install Authentication Filter code Still in WebSphere Administration console Navigate to WebSphere Enterprise Applications. Select FNCS option and Click Update 99

100 Allow Anonymous Access to FileNet Install Authentication Filter code Select the Replace, add, or delete multiple files option. Either on local or remote file system browse to /IBM/Connections/ccm/cc m/ ccm/auth_filter_patch/ auth_filter_patch.zip. Click Next and OK to update the application. 100

101 Allow Anonymous Access to FileNet Configure anonymous user runas role We need to set up a system user that will act as the anonymous user. In this install I created a user in the filesystem called localanon Click Applications -> WebSphere enterprise applications -> fncs -> User RunAs roles, Select the Anonymous role and enter the username and password of the user designated for the anonymous access role. Click Apply Click Ok to save 101

102 Allow Anonymous Access to FileNet Configure anonymous user in ACCE Open browser to /acce and login as FileNet admin user 102

103 Allow Anonymous Access to FileNet Configure anonymous user in ACCE 103

104 Allow Anonymous Access to FileNet Configure anonymous user in ACCE 104

105 Allow Anonymous Access to FileNet Configure anonymous user in ACCE 105

106 Allow Anonymous Access to FileNet Configure anonymous user in ACCE 106

107 Allow Anonymous Access to FileNet Configure anonymous user in ACCE 107

108 Allow Anonymous Access to FileNet Configure anonymous user in ACCE 108

109 Allow Anonymous Access to FileNet Configure anonymous user in ACCE 109

110 Allow Anonymous Access to FileNet Configure anonymous user in ACCE 110

111 Allow Anonymous Access to FileNet Configure anonymous user in ACCE Update the following property: Property Property Value Download Count Anonymous User Ids SID of user(s) that will count as downloading a file as anonymous 111

112 Allow Anonymous Access to FileNet Configure anonymous user in ACCE Run \IBM\Connections\addons\ccm\ccmDomainTool\generateSID.bat 112

113 Allow Anonymous Access to FileNet Configure anonymous user in ACCE Enter the FileNet admin's password 113

114 Allow Anonymous Access to FileNet Configure anonymous user in ACCE Enter the login name of user you need SID This should match the user set in the RunAs role set earlier (localanon) 114

115 Allow Anonymous Access to FileNet Configure anonymous user in ACCE Copy SID of user S

116 Allow Anonymous Access to FileNet Configure anonymous user in ACCE Property Property Value Download Count Anonymous User Ids S

117 Allow Anonymous Access to FileNet Configure anonymous user in ACCE Click Save and Close 117

118 Allow Anonymous Access to FileNet Restart the FNCS application 118

119 Testing Anonymous Access to CCM Libraries 119

120 Testing Anonymous Access to CCM Libraries Login to /communities Create a public or moderated community Add the library widget Upload a file 120

121 Testing Anonymous Access to CCM Libraries Logout this should send you back to Public Communities Click on the public community you just created The Library widget and files should appear 121

122 Troubleshooting Anonymous Access to CCM Libraries Settings to check FNCS RunAs role user 122

123 Troubleshooting Anonymous Access to CCM Libaries Settings to check Look at fncs-siteprefs.properties in \IBM\WebSphere\AppServer\profiles\AppSrv01\installedApps\<cell>\FNCS.ear\lib\props.jar Does this include anonymousaccessenabled=true enablepropertysheettemplateminmax=true Fix fncs-siteprefs.properties in C:\IBM\Connections\addons\ccm\FNCS\properties\ Uninstall the FNCS enterprise application in Integrated Solutions Console Run C:\IBM\Connections\addons\ccm\FNCS\configmanager\configwizard.bat As detailed in step 2.3 from NOTE: This issue typically happens after a CR upgrade, when we forget to backup and reapply the default fncs-siteprefs.properties in \IBM\Connections\addons\ccm\FNCS\properties\ 123

124 Install CCM CR3 124

125 Install 4.5 CR3 Files Needed Connections cr update strategy Online guide FileNet requirements per CR DB schema update per CR Detailed Steps for CR2 or CR

126 Install 4.5 CR3 Files Needed Connections CR3 package - uid=swg Includes UpdateInstaller CR3 jar files for each application 126

127 Install 4.5 CR3 Files Needed Cognos and Database Updates Includes Database Updates -- Cognos Server Updates 127

128 Install 4.5 CR3 Files Needed FileNet Includes FileNet Content Engine FP2 FileNet CE Client FP2 FileNet Collaboration Services IF

129 Get the Software

130 Install 4.5 CR3 Order of first 3 not important... Upgrade FileNet Content Engine Server (CE) Upgrade FileNet Content Engine Server Client and FileNet Collaboraton Services (FNCS) Apply Connections 4.5 CR Update CCM Update Database schema versions for CR3 Apply Cognos fixes for 4.5 CR (Not done in this lab) Upgrade of FileNet consists of uninstalling system files on DMGR and ear file from WebSphere, then reinstalling and configuring. 130

131 Install 4.5 CR3 Upgrade FileNet Collabroation Services Uninstall / Reinstall FNCS After install, run C:\IBM\Connections\addons\ccm\FNCS\configmanager.bat During gui you get to a point where it asks for Content Platform Engine URL 131

132 Install 4.5 CR3 Upgrade FileNet Collabroation Services In FileNet Collaboration Services - 2 options to communicate with FileNet CE iior method used for single server environment iiop://filenet_host.domain.com:bootstrapport/filenet/engine iiop://connections.demos.com:2811/filenet/engine in my environment corba method used for clustered environments corbaloc:rir:/cell/clusters/<cluster name>/filenet/engine corbaloc:rir:/cell/clusters/iccluster/filenet/engine in my environment NOTE: Connections is always a clustered environment However, Connections configured jvm arguments where this setting is not used, so it doesn't matter what you enter 132

133 Install 4.5 CR3 Upgrade FileNet Collaboration Services I recommend using corba method, and unchecking Test the connection to the Content Platform Engine In our offocial doc I explain this in more detail, and actually leave test connection checked When that's done, you must use the iiop method 133

134 Press *1 on your telephone to ask a question. Visit our Support Technical Exchange page or our Facebook page for details on future events. To help shape the future of IBM software, take this quality survey and share your opinion of IBM software used within your organization: IBM Collaboration Solutions Support page IBM Collaboration Solutions Support 134