Category Archives: Lotus Connections

IBM Verse on Premises Integration with Connections and Docs issue with iNotes_WA_Security_NonceCheck

During the week we integrated IBM Connections and IBM Docs in our test environment and everything worked fine. Then we moved the configuration to production and most of the stuff was working, like showing Business cards, profile pictures and Connections files to add into mails. Docs Viewer and uploading files from a mail to Connections generated an error: “because of an internal server error”

I digged into it with Burpsuite and Fiddler4, in the meantime a customer called me and described the same symptoms. Within the traces I found that the systems which didn’t upload the files had following header set:

X-IBM-INOTES-NONCE: <none>

and the working one had:

X-IBM-INOTES-NONCE: 2640941AE5454F5853E6732F79E7D2F5

So i searched a little bit on X-IBM-INOTES-NONCE and found that is introduced in Notes/Domino 8.5.2 and shall prevent XSS.

You can disable this with iNotes_WA_Security_NonceCheck=0 and this is mentioned in a technote, that sometimes proxies or F5 needs this setting. First we tried that on our testsystems and we seemed to be right, the upload was broken too.

We removed the notes.ini entry (or set it to 1) and after a http restart the file upload from VOP and the IBM Viewer worked!

Thanks to Thomas who digged into this with me today.

Update 2017-11-20

IBM released a technote on this.

Missing images in Wikis after migration to IBM Connections 5.5

Wikis in IBM Connections 5.5 have a little bug, because the link (/library instead of /wikis/form/api/library) for images are wrong and so they are not displayed.

There is a technote, which should solve this issue, but the used way with ProxyPass is not what i want to use. When you use ProxyPass and ProxyPassReverse you should add a ProxyRequest off to be more secure. ProxyPass to localhost can be a problem too, i would suggest to change localhost to the Connections IHS Hostname.

Why do I use a different approach?

Most of my deployments already use a RewriteRule to redirect the hostname to there Connections Homepage, so i don’t need an additional module (which needs ressources and can have security considerations), when i can solve the image issue through mod_rewrite.

RewriteRule "^/library/(.*)" "/wikis/form/api/library/$1" [R,L]

If you haven’t set <forceConfidentialCommunications enabled="true"/> in LotusConnections-config.xml you need to set the RewriteRule and the ProxyPass config within your http and your https configuration parts!

Example httpd.conf:

... 
# HTTP configuration
<VirtualHost *:80>
    ServerName connections.example.com

    RewriteEngine On

     # Redirect hostname to Homepage
    RewriteRule ^\/$ https://connections.example.com/homepage [noescape,L,R]

    # Fix wrong wiki image URL
    RewriteRule "^/library/(.*)" "/wikis/form/api/library/$1" [R,L]
</VirtualHost>
# HTTPS configuration
<VirtualHost *:443>
    ServerName connections.example.com

    RewriteEngine On

    # Redirect hostname to Homepage
    RewriteRule ^\/$ https://connections.example.com/homepage [noescape,L,R]

    # Fix wrong wiki image URL
    RewriteRule "^/library/(.*)" "/wikis/form/api/library/$1" [R,L]

    SSLEnable
    SSLProtocolDisable SSLv2 SSLv3
</VirtualHost>
...

Social Connections 8 Boston

Social Connections 8 ended some hours ago and first I want to thank the organization team! It was a great job and an awesome conference you built here. The speaker gift was an absolute great idea!

It was the first time Social Connections headed to the United States and the location at IBM Boston was a well made decision. I visited the Boston area the first time and enjoyed all the days.

I already arrived on Sunday evening and had the pleasure to stay with Victor and his family until we headed to Boston. Thanks for the hospitality!

Opening session speaker Susan Livingston showed great new stuff around IBM Connections and IBM Verse. I think the most important is the planned function of synchronizing IBM Connections Files based on folders. Nested folder functionality is nice, i know that lots of people asking for this, but in my opinion i prefer to tag files and give me more possible keywords to find content.

2015-04-16 09.45.04

Editor enhancements sound really good, i hope that all these functions will appear in all IBM Connections application, to get a continuous experience.

2015-04-16 09.52.23

During the conference I had two sessions:



But the most important i met lovely people! Most of them i know online since years and we follow each other, discuss on several chats or share information through several blogs.

Oliver Heinz made perfect photos during the event and I’m sure they will be published on Flickr soon.

You can find some of my pictures in my Flickr Album.

Social Connections VI in Prague

This week starts in the beautiful town Prague with Social Connections VI. I met great people and first of all i want to thank the organisation team for this great event.

At the end we made the traditional image with all attendees.

Foto © 2014 by Oli Heinz

Foto ©2014 by Oli Heinz

I enjoyed two very delicious dinners and had great discussions around IBM ICS, met old and new friends. After years of tweets, forum entries and virtual talks i finally met Martin in person and had an entertaining evening with him and Sjaak.

Foto © 2014 by Oli Heinz

Foto ©2014 by Oli Heinz

Big thanks to Oliver Heinz who made fantastic photos of prague, us and around the event. All pictures in this blog posts are made by him.

My session “Script it!

This time i made a session without support of Klaus or Sharon, but i was happy with the result and i hope that some attendees will help to get the IBMCNX Community scripts more complete.

"Foto by Oli Heinz (http://twitter.com/oliheinz)"

Foto ©2014 by Oli Heinz

And for everyone the offer again, you see the different kinds of persistent Skype group chats, if you want to join, send me a short message.

During this week we heared several announcements:

I see forward to Social Connections VII and hope to meet lots of you there!

New version of “Administration Scripts for WebSphere”

As preparation for Social Connections VI in Prague next week i redesigned the “Administration Scripts for IBM Websphere“.

Some highlights:

  • all scripts are moved to a subfolder with DMGR/bin (folder name: ibmcnx)
  • tested in multinode environments
  • added some classes everybody can use for his own scripts
  • adding policies to libraries (personal and communities) are using search now

New scripts:

  • documentation of all jvm settings of each application server
  • create a file with all documentation in one step
  • create cluster members for additional nodes

Sharon created a document with the content of all of our presentations and collected several tipps all around connections and community scripts. She will share this next time. We started to share parts of this document and more documentations (installation, usage) for scripts and IBM Connections on:

Scripting101.org

The new version can be downloaded from: