Securing the soap.client.props file

Leave a reply

Every WebSphere environment has a soap.client.props file which administrators can populate with the credentials to stop an application server, nodeagent or deployment manager.  Unfortunately in most circumstances, the password is left in plain text which leaves the server vulnerable to anyone snooping around.  However, there is a solution!  WebSphere includes an application which can encrypt the password.  Here’s how you do it.

1. Open the soap.client.props file  and populate the username and password if you have not done so already.

com.ibm.SOAP.loginUserid=wasadmin

com.ibm.SOAP.loginPassword=<password>

2. Open a command prompt or terminal session.

3. Change directories to

<WASInstallDir>\profiles\<profile>\bin

For example

C:\IBM\WebSphere\AppServer\profiles\STSCAppProfile\bin

4. Execute the command

PropFilePasswordEncoder.(sh/bat) <Full Path to soap.client.props> com.ibm.SOAP.loginPassword

The command should look like:

PropFilePasswordEncoder.bat C:\IBM\WebSphere\AppServer\profiles\STSCAppProfile\properties\soap.client.props com.ibm.SOAP.loginPassword

4. Check to ensure the password has been encoded:

com.ibm.SOAP.loginUserid=wasadmin

com.ibm.SOAP.loginPassword={xor}Lz4sLCgwLTs=

 

That’s it!  Simple right?

Sametime 8.5.x and Virtualhosts

Sametime 8.5.x has really helped in consolidating management of Sametime and WebSphere configurations into a single location. However, it is with this configuration that some additional issues crop up. Several Sametime components utilize the a technology called RTC4Web. This is used extensively in the Sametime Proxy, Advanced and Meetings server components. When more than one of these components is installed in the same cell, messages may be misrouted to the incorrect location.

Virtualhosts can help to route traffic to a specific location. By default, everything is assigned to default_host. To segregate the traffic, you will need to create a new virtual host. The hostnames which you provide should always include the load balanced hostname for the service and the ports through which the service is accessed. Administrators may optionally add the backend servers and the respective ports to make it easier to troubleshoot the infrastructure in case problems arise.

Another trick with virtual hosts if that they can be used for security. If you for example, do not want users to access the Sametime proxy service directly on the backend server, administrators count theoretically restrict access to only the load balanced hostname. On the other hand, you may also remove port 80 from the virtual hosts configuration and in doing so force everyone to access the service through a secure connection on port 443.

For information on setting up the WebSphere virtual hosts, take a look at the following IBM Technote:

IBM WebSphere Proxy redirects to Sametime Proxy unexpectedly

Sametime 8.5.2 is now live!

Leave a reply

If you have been patiently waiting for the release of Sametime 8.5.2, the wait is over.  Sametime 8.5.2 is now available for download through the normal channels! One thing you will definitely want to note is the location change of the documentation. Instead of publishing the Sametime 8.5.2 in the traditional IBM information center, the documentation has been moved to the wiki.

Sametime 8.5.2 Product Documentation Wiki

Here is the announcement letter again outlining some of the improvements which have been made:

http://www-01.ibm.com/common/ssi/ShowDoc.jsp?docURL=/common/ssi/rep_ca/5/897/ENUS211-165/index.html

And finally, here are the part numbers which you need to keep an eye out for.

CF2XZML

IBM Sametime Entry and Standard V8.5.2 Multiplatform Multilingual Quickstart Guide

CZYF7ML

IBM Sametime Standard V8.5.2 Connect Clients Standalone, Notes, Network Installer, Mobile Windows Mac Linux ML

CZYD7ML

IBM Sametime Standard V8.5.2 Community Server Windows Multilingual

CZYD8ML

IBM Sametime Standard V8.5.2 Community Server AIX Linux Solaris Multilingual

CZYD9ML

IBM Sametime Standard V8.5.2 Community Server IBM i Multilingual

CZYE0ML

IBM Sametime Standard V8.5.2 Meeting Server Windows Multilingual

CZYE2ML

IBM Sametime Standard V8.5.2 Meeting Server AIX Multilingual

CZYE4ML

IBM Sametime Standard V8.5.2 Meeting Server Linux on x86 Multilingual

CZYE5ML

IBM Sametime Standard V8.5.2 Meeting Server Solaris Multilingual

CZYE3ML

IBM Sametime Standard V8.5.2 Meeting Server IBM i Multilingual

CZYE6ML

IBM Sametime Standard V8.5.2 Proxy Server Windows Multilingual

CZYE7ML

IBM Sametime Standard V8.5.2 Proxy Server AIX Multilingual

CZYE8ML

IBM Sametime Standard V8.5.2 Proxy Server Linux on x86 Multilingual

CZYE9ML

IBM Sametime Standard V8.5.2 Proxy Server Solaris Multilingual

CZYE1ML

IBM Sametime Standard V8.5.2 Proxy Server IBM i Multilingual

CZYF0ML

IBM Sametime Standard V8.5.2 Media Manager Windows Multilingual

CZYF1ML

IBM Sametime Standard V8.5.2 Media Manager Linux on x86 Multilingual

CZYF2ML

IBM Sametime Standard V8.5.2 System Console Server Windows Multilingual

CZYF3ML

IBM Sametime Standard V8.5.2 System Console Server AIX Multilingual

CZYF4ML

IBM Sametime Standard V8.5.2 System Console Server Linux on x86 Multilingual

CZYF5ML

IBM Sametime Standard V8.5.2 System Console Server Solaris Multilingual

CZYF6ML

IBM Sametime Standard V8.5.2 System Console Server IBM i Multilingual

CZYF8EN

IBM Sametime Standard V8.5.2 SDK Windows AIX Linux Solaris IBM i Mac English

 

WebSphere Applicaton Server Network Deployment for Sametime

CZYA0ML

WebSphere Application Server Network Deployment V7.0.0.15 Customized Installation Package Windows for Sametime 8.5.2 Multilingual

CZYA1ML

WebSphere Application Server Network Deployment V7.0.0.15 Customized Installation Package AIX Sametime for Sametime 8.5.2 Multilingual

CZYA4ML

WebSphere Application Server Network Deployment V7.0.0.15 Customized Installation Package Solaris SPARC for Sametime 8.5.2 Multilingual

CZYA2ML

WebSphere Application Server Network Deployment V7.0.0.15 Customized Installation Package Linux x86 for Sametime 8.5.2 Multilingual

CZYA3ML

WebSphere Application Server Network Deployment V7.0.0.15 Customized Installation Package IBM i for Sametime 8.5.2 Multilingual

CZYH1ML

IBM WebSphere V7.0.0.15 iFixes for Sametime V8.5.2 Windows, AIX, Linux x86, zLinux, Solaris, IBM i Multilingual

Optional parts

 

Languages: All Languages

CZIP9EN

IBM Domino 8.5.2 32 bit  for Windows English

CZJ99EN

IBM Domino Server 8.5.2 for AIX 32 bit English

CZIQ2EN

IBM Domino 8.5.2 32 bit Linux for xSeries English

CZIQ4EN

IBM Domino 8.5.2 for Solaris 32 Bit English

CZIQ5EN

IBM Domino 8.5.2 for IBM i English

CZIF0EN

IBM Notes, Designer and Domino Admin 8.5.2 for Windows 32 bit English

CZIF7EN

IBM Notes 8.5.2 basic configuration Win English Win English

CZM9UFI

IBM Notes and Domino Designer 8.5.2 for Windows XP and Vista Finnish

CZM9VDE

IBM Notes, Domino Designer and Admin 8.5.2 for Windows XP and Vista German

CZM9WKO

IBM Notes, Domino Designer and Admin 8.5.2 for Windows XP and Vista Korean

CZM9XNO

IBM Notes and Domino Designer 8.5.2 for Windows XP and Vista Norwegian

CZM9YSC

IIBM Notes, Domino Designer and Admin 8.5.2 for Windows XP and Vista SimplifiedChinese

CZM9ZES

IBM Notes and Domino Designer 8.5.2 for Windows XP and Vista Spanish

CZMA0SV

IBM Notes and Domino Designer 8.5.2 for Windows XP and Vista Swedish

CZMA1FR

IBM Notes, Domino Designer and Admin 8.5.2 for Windows XP and Vista French

CZMA2TC

IBM Notes, Domino Designer and Admin 8.5.2 for Windows XP and Vista Traditional Chinese

CZMA4IT

IBM Notes and Domino Designer 8.5.2 for Windows XP and Vista Italian

CZMA5DA

IBM Notes and Domino Designer 8.5.2 for Windows XP and Vista Danish

CZMA7NL

IBM Notes and Domino Designer 8.5.2 for Windows XP and Vista Dutch

CZQ1BCS

IBM Notes and Domino Designer 8.5.2 for Windows XP and Vista Czech

CZQ1CHU

IBM Notes and Domino Designer 8.5.2 for Windows XP and Vista Hungarian

CZQ1DRU

IBM Notes and Domino Designer 8.5.2 for Windows XP and Vista Russian

CZQ1EEL

IBM Notes and Domino Designer 8.5.2 for Windows XP and Vista Greek

CZQ1FTR

IBM Notes and Domino Designer 8.5.2 for Windows XP and Vista Turkish

CZQ1GAR

IBM Notes and Domino Designer 8.5.2 for Windows XP and Vista Arabic

CZQ1HPT

IBM Notes and Domino Designer 8.5.2 for Windows XP and Vista Portuguese

CZQ1IPL

IBM Notes and Domino Designer 8.5.2 for Windows XP and Vista Polish

CZQ1KSI

IBM Notes and Domino Designer 8.5.2 for Windows XP and Vista Slovenian

CZQ1LSK

IBM Notes and Domino Designer 8.5.2 for Windows XP and Vista Slovakian

CZMA3JA

IBM Notes, Domino Designer and Admin 8.5.2 for Windows XP and Vista Japanese

CZMA6BP

IBM Notes and Domino Designer 8.5.2 for Windows XP and Vista Brazilian Portuguese

 

IBM Domino 8.5.2 Language Packs

CZM56BP

IBM Domino 8.5.2 Language Pack for Windows 2003, Windows 2008 and IBM Power Systems Brazilian Portuguese

CZM4TDE

IBM Domino 8.5.2 Language Pack for Windows 2003/2008 and IBM Power Systems German

CZM4XES

IBM Domino 8.5.2 Language Pack for Windows 2003/2008 and IBM Power Systems Spanish

CZM4ZFR

IBM Domino 8.5.2 Language Pack for Windows 2003/2008 and IBM Power Systems French

CZM52IT

IBM Domino 8.5.2 Language Pack for Windows 2003/2008 and IBM Power Systems Italian

CZM51JA

IBM Domino 8.5.2 Language Pack for Windows 2003/2008 and IBM Power Systems Japanese

CZM4UKO

IBM Domino 8.5.2 Language Pack for Windows 2003/2008 and IBM Power Systems Korean

CZM4WSC

IBM Domino 8.5.2 Language Pack for Windows 2003/2008 and IBM Power Systems Simplified Chinese

CZM50TC

IBM Domino 8.5.2 Language Pack for Windows 2003/2008 and IBM Power Systems Traditional Chinese

CZM54EN

IBM Domino 8.5.2 Language Pack for Windows 2003/2008 and IBM Power Systems English

CZM53DA

IBM Domino 8.5.2 Language Pack for Windows 2003/2008 and IBM Power Systems Danish

CZM4SFI

IBM Domino 8.5.2 Language Pack for Windows 2003/2008 and IBM Power Systems Finnish

CZM55NL

IBM Domino 8.5.2 Language Pack for Windows 2003/2008 and IBM Power Systems Dutch

CZM4VNO

IBM Domino 8.5.2 Language Pack for Windows 2003/2008 and IBM Power Systems Norwegian

CZM4YSV

IBM Domino 8.5.2 Language Pack for Windows 2003/2008 and IBM Power Systems Swedish

CZM68BP

IBM Domino 8.5.2 LP AIX, Solaris, Linux on xSeries, Linux zSeries Brazilian Portuguese

CZM5XDE

IBM Domino 8.5.2 LP AIX, Solaris, Linux on xSeries, Linux zSeries German

CZM61ES

IBM Domino 8.5.2 LP AIX, Solaris, Linux on xSeries, Linux zSeries Spanish

CZM63FR

IBM Domino 8.5.2 LP AIX, Solaris, Linux on xSeries, Linux zSeries French

CZM66IT

IBM Domino 8.5.2 LP AIX, Solaris, Linux on xSeries, Linux zSeries Italian

CZM65JA

IBM Domino 8.5.2 LP AIX, Solaris, Linux on xSeries, Linux zSeries Japanese

CZM5YKO

IBM Domino 8.5.2 LP AIX, Solaris, Linux on xSeries, Linux zSeries Korean

CZM60SC

IBM Domino 8.5.2 LP AIX, Solaris, Linux on xSeries, Linux zSeries Simplified Chinese

CZM64TC

IBM Domino 8.5.2 LP AIX, Solaris, Linux on xSeries, Linux zSeries Traditional Chinese

CZM6AEN

IBM Domino 8.5.2 LP AIX, Solaris, Linux on xSeries, Linux zSeries English

CZM67DA

IBM Domino 8.5.2 LP AIX, Solaris, Linux on xSeries, Linux zSeries Danish

CZM5WFI

IBM Domino 8.5.2 LP AIX, Solaris, Linux on xSeries, Linux zSeries Finnish

CZM69NL

IBM Domino 8.5.2 LP AIX, Solaris, Linux on xSeries, Linux zSeries Dutch

CZM5ZNO

IBM Domino 8.5.2 LP AIX, Solaris, Linux on xSeries, Linux zSeries Norwegian

CZM62SV

IBM Domino 8.5.2 LP AIX, Solaris, Linux on xSeries, Linux zSeries Swedish

CZQ3RTH

IBM Domino 8.5.2 LP AIX Thai

CZU5LCS

IBM Domino 8.5.2 Language Pack for Windows 2003/2008 Czech

CZQ39HU

IBM Domino 8.5.2 Language Pack for Windows 2003/2008 Hungarian

CZQ3CRU

IBM Domino 8.5.2 Language Pack for Windows 2003/2008 Russian

CZQ37EL

IBM Domino 8.5.2 Language Pack for Windows 2003/2008 Greek

CZQ3DTR

IBM Domino 8.5.2 Language Pack for Windows 2003/2008 Turkish

CZQ35AR

IBM Domino 8.5.2 Language Pack for Windows 2003/2008 Arabic

CZQ3APT

IBM Domino 8.5.2 Language Pack for Windows 2003/2008 Portuguese

CZQ38IW

IBM Domino 8.5.2 Language Pack for Windows 2003/2008 Hebrew

CZU5MPL

IBM Domino 8.5.2 Language Pack for Windows 2003/2008 Polish

CZQ3FSI

IBM Domino 8.5.2 Language Pack for Windows 2003/2008 Slovenian

CZQ3ESK

IBM Domino 8.5.2 Language Pack for Windows 2003/2008 Slovakian

CZQ3GTH

IBM Domino 8.5.2 Language Pack for Windows 2003/2008 Thai

CZU5NCS

IBM Domino 8.5.2 LP Linux on xSeries Czech

CZQ3LHU

IBM Domino 8.5.2 LP AIX, Linux on xSeries Hungarian

CZQ3PRU

IBM Domino 8.5.2 LP Linux on xSeries Russian

CZQ3JEL

IBM Domino 8.5.2 LP Linux on xSeries Greek

CZQ3QTR

IBM Domino 8.5.2 LP Linux on xSeries Turkish

CZQ3HAR

IBM Domino 8.5.2 LP Linux on xSeries Arabic

CZQ3MPT

IBM Domino 8.5.2 LP Linux on xSeries Portuguese

CZQ3KIW

IBM Domino 8.5.2 LP Linux on xSeries Hebrew

CZU5PPL

IBM Domino 8.5.2 LP AIX, Linux on xSeries Polish

 

IBM Edge Components

C1I4YML

IBM Edge Components V7.0 for Windows on x86-32 bit, Multilingual

C1I50ML

IBM Edge Components V7.0 for Windows on x86-64 bit, Multilingual

C1I52ML

IBM Edge Components V7.0 for AIX 32-bit, Multilingual

C1I7LML

IBM Edge Components V7.0 for Linux on Intel 32-bit, Multilingual

C1I58ML

IBM Edge Components V7.0 for Solaris SPARC 32-bit, Multilingual

 

IPV6

C1I4ZML

IBM Edge Components for IPv6 V7.0 for Windows on Intel 32-bit, Multilingual

C1I51ML

IBM Edge Components for IPv6 V7.0 for Windows on x86 64-bit, Multilingual

C1G2DML

IBM Edge Components for IPv6 V7.0 for AIX 32-bit, Multilingual

C1I53ML

IBM Edge Components for IPv6 V7.0 for AIX 64-bit, Multilingual

C1I7MML

IBM Edge Components for IPv6 V7.0 for Linux on 32-bit, Multilingual

C1I7PML

IBM Edge Components for IPv6 V7.0 for Linux on x86 64-bit, Multilingual

C1I7IML

IBM Edge Components for IPv6 V7.0 for Solaris SPARC 32-bit, Multilingual

C1I7JML

IBM Edge Components for IPv6 V7.0 for Solaris SPARC 64-bit, Multilingual

 

IBM DB2

CZ1HKML

IBM DB2 9.7 – Limited Use for Windows on 32-bit AMD and Intel systems (x86)

CZ1HLML

IBM DB2 9.7 – Limited Use for Windows on AMD64 and Intel EM64T systems (x64)

CZ1HMEN

IBM DB2 9.7 – Limited Use for 64-bit AIX

CZ1HPEN

IBM DB2 9.7 – Limited Use for Solaris on UltraSPARC systems

CZ1HREN

IBM DB2 9.7 – Limited Use for Linux on 32-bit AMD and Intel systems (x86)

CZ1HSEN

IBM DB2 9.7 – Limited Use for Linux® on AMD64 and Intel® EM64T systems (x64)

 

Sametime Gateway

CRE9SML

IBM Sametime Gateway Server 8.5.2 Multiplatform Multilingual eAssy

CZYF9ML

IBM Sametime Gateway Server 8.5.2 Windows IBM i Multilingual

CZYG0ML

IBM Sametime Gateway Server 8.5.2 SOL SPARC Multilingual

IBM Sametime 8.5.2 Product Announcement

Leave a reply

The next major release of Sametime is just around the corner.  Yesterday, Sametime 8.5.2 was officially announced to the public.  For those of you looking for the download in the Software Downloads site, it isn’t there yet.  Sametime 8.5.2 will be available for download on June 10, 2011.

The main focus on this release has been around the Sametime media functionality.  Some of the functionality which has been lacking such as NAT support and firewall traversal have finally been reintroduced.   Also, browser based web meetings and the Sametime Web client will get audio and video support.  These two changes are significant since it represents the reintroduction of features that I know customers have been asking for since the first version of Sametime 8.5 was released.

In the mobile space, a native client for Android devices will be available and a Sametime meeting client will be available for Blackberry devices.  Those of you looking for an iOS client will have to still use the Sametime Proxy web client for a bit longer.

There have been some pretty significant changes in way the Sametime system console.  For example, there is now closer integration with Sametime Advanced and the way that deployment plans are created.  Gone are the issues with using the guided activity to create Domino LDAP profiles and there is better policy management control and more granular administrative rights.  Platform-wise, Sametime 8.5.2 will use a newer release of WebSphere and DB2 along with support for Windows 2008 R2 and Novell SUSE Linux Enterprise Server 11.

Finally, the product name has been changed.  Sametime is now officially referred to as IBM Sametime.  Stay tuned on June 10th and get ready to start your download!

Official Sametime 8.5.2 Product Announcement letter

Do you really have Sametime 8.5.1 FP1 applied?

1 Reply

Update: Several changes were made to this post after the initial posting.  I would like to clarify that the Sametime Cluster Guided Activity should be used whenever possible to update a product cluster.

Sametime 8.5.1 FP1, also known as 8.5.1.1 has many fixes which should be applied to an environment.  However, in the initial release of the fixpack, a critical step was missing from the readme file.  The IBM installation manager will install the files onto the server, however to commit the changes to a clustered environment, you will need to perform one additional step through the integrated solutions console.  This is the process to upgrade the existing cluster.  The steps for this can be found under, the section “Upgrading a cluster of Lotus Sametime 8.5 Proxy Servers on AIX, Linux, Solaris, or Windows” in the Sametime information center.  Here is the abridged version of the guide:

  1. Navigate to the Sametime System Console.
  2. Navigate to Sametime System Console – guided activities – Cluster WebSphere Application Servers.
  3. Click Next to begin the guided activity
  4. Select the Product to cluster.
  5. Select “Upgrade existing cluster”
  6. Confirm that the application servers hosting the application are stopped.
  7. Follow the prompts to confirm and start the upgrade.
  8. Once the upgrade is complete navigate to System Administration – Nodes
  9. Select all of the Node and click Full Resynchronize  Wait 1-2 minutes for this to complete.
  10. Navigate to Servers – WebSphere Application Servers.
  11. Select the servers hosting the application you just upgraded and click Start.
  12. Confirm that the application servers start successfully.
  13. Repeat the procedure for each application cluster.

In case there are problems updating a component with the guided activity, the following procedure can be used to manually deploy the update to the cluster:

  1. Navigate to the Sametime System Console.
  2. Navigate to the Applications – Application Types – WebSphere enterprise applications
  3. Select an Enterprise Application.  (In this example, use ConferenceFocus).  Click update.
  4. Select the option “Replace the entire application”.  Click on the “Remote file system” option.
  5. Click on Browse.
  6. Select the node containing the application files.
  7. Navigate to D:IBMWebSphere<Component>PNSametime<Component>OfferingSametimeServerSMServer<Component>installableApps.  (Note these paths may vary per component)
  8. Select the component name (Example: ConferenceFocus.ear).
  9. Click OK.
  10. Click Next.
  11. Under “How do you want to install the application?”, select “Fast Path”.  Leave the rest of the settings as default.
  12. Click Next.
  13. Under the “Select installation options” page, accept the defaults and click Next.
  14. Under “Map modules to servers”, select all of the modules from the list by clicking the ( ) option.
  15. Under clusters and servers, select the cluster and/or server which is hosting the enterprise application.
  16. Click Apply.  The server name should change to the list of servers selected under Clusters and Servers.
  17. Click Next.
  18. Review the summary page.
  19. Click Finish.
  20. Click Rollout update to synchronize and update the servers.