LotusConnections-config.xml editieren

wsadmin starten

            cd /opt/IBM/WebSphere/AppServer/profiles/Dmgr01/bin
            [root@cnxwas1 bin]$ ./wsadmin.sh -lang jython -username wasadmin -password password
        

Kommandos eingeben oder per Copy&Paste einfügen

    
            WASX7209I: Connected to process "dmgr" on node cnxwas1CellManager01 using SOAP
            connector; The type of process is: DeploymentManager
            WASX7031I: For help, enter: "print Help.help()"
            wsadmin>AdminControl.getCell()
            'cnxwas1Cell01'
            wsadmin>execfile("connectionsConfig.py")
            Connections Administration initialized
            wsadmin>LCConfigService.checkOutConfig('/tmp','cnxwas1Cell01')
            # Edit /tmp/LotusConnections-config.xml and save your changes
            wsadmin>LCConfigService.checkInConfig('/tmp','cnxwas1Cell01')
            Loading schema file for validation: /tmp/LotusConnections-config.xsd
            Loading schema file for validation: /tmp/service-location.xsd
            /tmp/LotusConnections-config.xml is valid
            Connections configuration file successfully checked in
        

ExID mit LDAP synchronisieren

News: Groß-/Kleinschreibung egal

            wsadmin>execfile("newsAdmin.py")
            Connecting to NewsMemberServiceName: News Configuration Environment initialized
            wsadmin>NewsMemberService.syncMemberExtIdByEmail("cstoettner@stoeps.local")
            syncMemberExtIdByEmail request processed
        

Kommandos eingeben oder per Copy&Paste einfügen

Blogs: Groß-/Kleinschreibung wichtig!

            wsadmin>execfile("blogsAdmin.py")
            Connecting to {...} Blogs Administration initialized
            wsadmin>BlogsMemberService.syncMemberExtIdByEmail("cstoettner@stoeps.local")
            WASX70115E: Exception running command:
            "BlogsMemberSErvice.syncMemberExtIdByEmail("cstoettner@stoeps.local")";
            exception information:
            There is no member associated with this email address or login name:
            cstoettner@stoeps.local
            wsadmin>BlogsMemberService.syncMemberExtIdByEmail("CStoettner@stoeps.local")
            syncMemberExtIdByEmail request processed
        

Jython basics: Variablen

        # Defining a String
        x = 'Hello World'
        x = "Hello World Two"

        #  Defining an integer
        y = 10

        #  Float
        z = 8.75

        # Complex
        i = 1 + 8.07j

        # Multiple assignment
        x, y, z = 1, 2, 3
        

Jython basics: Ranges

        wsadmin>range(7)
        [0, 1, 2, 3, 4, 5, 6]

        # Include a step in the range
        wsadmin>range(0,10,3)
        [0, 3, 6, 9]

        # Good base for loops
        wsadmin>range(1,11)
        [1, 2, 3, 4, 5, 6, 7, 8, 9, 10]

        wsadmin>range(20,27)
        [20, 21, 22, 23, 24, 25, 26]
        

Jython basics: Lists und dictionaries

            #List
            wsadmin>dbs = ['activities','blogs','communities','dogear','files','forum']
            wsadmin>dbs[1]
            'blogs'
        

            # Dictionary with Performance Data
            wsadmin>minConnections = {'activities':1,'blogs':1,'communities':10,'dogear':1}
            wsadmin>maxConnections = {'activities':50,'blogs':250,'communities':200}
            wsadmin>maxConnections
            {'communities': 200, 'activities': 50, 'blogs': 250}
            wsadmin>maxConnections.keys()
            ['communities', 'activities', 'blogs']
            wsadmin>maxConnections.values()
            [200, 50, 250]
            wsadmin>maxConnections['blogs']
            250

        

Jython basics: if - elif - else

• Code mit 4 Leerzeichen einrücken, um zu gruppieren

          # Basic
          if condition :
              # print or do something
          elif other condition :
              # print or do something other
          else :
              # print or do completely different
        

          # Example
          if value.find( 'CLFWY0217E' ) > -1 :
              print "\t\tuser already converted"
          elif value.find( 'CLFWY0212E' ) > -1 :
              print "\t\tuser not found in database"
          elif value.find( ' CLFWY0209E' ) > -1 :
              print "\t\tnew identifier '" + data[1] + "' does not exist."
          else :
              print '\t\tException value: ' + value
        

Jython basics: Schleifen

     # For Loops
     dbs = ['activities','blogs','communities','dogear','files','forum','homepage']
     for db in dbs: #loop through databases
         print "Database %s" % db

        

     # While
     x = 0
     y = 3 
     while x <= y :
         print 'Value of x is: %d' %(x)
         x += 1
     else:
         print 'Completed!'

     Value of x is: 0
     Value of x is: 1
     Value of x is: 2
     Value of x is: 3
     Completed!
        

Change DataSource Parameters

• changeDataSource.py
• Setting Default Parameters as mentioned in
  IBM Connections 4.0 Performance Tuning Guide

            #Define a dictionary with database names and parameters

           perf = {'activities':{'minConnections':1,'maxConnections':50},
                'blogs':{'minConnections':1,'maxConnections':250},
                'communities':{'minConnections':10,'maxConnections':200},
                'dogear':{'minConnections':1,'maxConnections':150},
                'files':{'minConnections':10,'maxConnections':100},
                'forum':{'minConnections':50,'maxConnections':100},
                'homepage':{'minConnections':20,'maxConnections':100},
                ...
                'wikis':{'minConnections':1,'maxConnections':100}}

            statementCacheSize = 100 #change to 50 for oracle
        

            # perf.keys() gives a list of all databases in perf
            for db in perf.keys(): # Looping through databases, first values in dictionary
                # db.upper() convert the database name to capitals
                print 'Change DataSource parameters for: %s' % db.upper()

                t1=AdminConfig.getid('/DataSource:' + db + '/')
                print '  statementCacheSize: ' + str(statementCacheSize)
                print '  minConnections: ' + str(perf[db]['minConnections'])
                print '  maxConnections: ' + str(perf[db]['maxConnections'])
                AdminConfig.modify(t1,'[[statementCacheSize "' + str(statementCacheSize) + '"]]')
                AdminConfig.modify(t1,'[[connectionPool [[minConnections "' + str(perf[db]['minConnections']) + '"][maxConnections "' + str(perf[db]['maxConnections']) + '"]]]]')

                AdminConfig.save()
        

SyncAllMember

EmailMatch = sys.argv[0]

# Loading Connections Administration Commands
execfile("activitiesAdmin.py")
execfile("blogsAdmin.py")
execfile("communitiesAdmin.py")
execfile("dogearAdmin.py")
execfile("filesAdmin.py")
execfile("forumsAdmin.py")
execfile("homepageAdmin.py")
execfile("newsAdmin.py")
execfile("profilesAdmin.py")
execfile("wikisAdmin.py")

apps = ['Activities','Blogs','Communities','Dogear','Files','Forums','News','Wikis']

        

def memService(appname,EmailMatch):
    if("Activities" == appname) :
        print "\tActivitiesMemberService.syncAllMembersByExtId"
        ActivitiesMemberService.syncAllMembersByExtId( {"updateOnEmailLoginMatch": EmailMatch } )
    elif("Blogs" == appname) :
        print "\tBlogsMemberService.syncAllMembersByExtId"
        BlogsMemberService.syncAllMembersByExtId( {"updateOnEmailLoginMatch": EmailMatch } )
    elif("News" == appname) :
        print "\tNewsMemberService.syncAllMembersByExtId"
        NewsMemberService.syncAllMembersByExtId( {"updateOnEmailLoginMatch": EmailMatch } )
    elif("Dogear" == appname) :
        print "\tDogearMemberService.syncAllMembersByExtId"
        DogearMemberService.syncAllMembersByExtId( {"updateOnEmailLoginMatch": EmailMatch } )
    elif("Communities" == appname) :
        print "\tCommunitesMemberService.syncAllMembersByExtId"
        CommunitiesMemberService.syncAllMembersByExtId( {"updateOnEmailLoginMatch": EmailMatch } )
    elif("Files" == appname) :
        print "\tFilesMemberService.syncAllMembersByExtId"
        FilesMemberService.syncAllMembersByExtId( {"updateOnEmailLoginMatch": EmailMatch } )
    elif("Forums" == appname) :
        print "\tForumsMemberService.syncAllMembersByExtId"
        ForumsMemberService.syncAllMembersByExtId( {"updateOnEmailLoginMatch": EmailMatch } )
    elif("Wikis" == appname) :
        print "\tWikisMemberService.syncAllMembersByExtId"
        WikisMemberService.syncAllMembersByExtId( {"updateOnEmailLoginMatch": EmailMatch } )
    else :
        print "\tUnknown application name '" + appname + "'"
        

for app in apps:
    print "Sync all Members by EXTID for " + app
    memService(app, EmailMatch)


        

Restore Security Roles

• Skript liest Rollen aus den Backup Textdateien
• Praktisch nach Fixpack Installation

import os
import sys

# Restore Security Role from Textfile (created with j2eerolebackup

path = sys.argv[0]
if path == '':
    path='../temp/j2eebackup' # path where Backup is stored
    print "Setting path to %s!" % path

if not os.path.exists(path):
    print "Path does not exists, please provide directory with your backup files!"
    sys.exit()

        

def convertFile2Dict(appname):
    # function to convert backup txt files of Security Role Backup to a dictionary
    filename = path + '/' + appname + ".txt"
    myfile = open(filename,'r')

    count = 0
    dict = {}

    for line in myfile.readlines():
        # for loop through file to read it line by line
        if (':' in line) and (count > 12):
            value = line.split(':')[0]
            # cred = line.split(':')[1].strip('\n')
            cred = line.split(':')[1]
            # cred = cred.strip(' ')
            cred = cred.strip()
            if value == "Role":
                role = cred
                dict[role] = {}
            dict[role][value] = cred
        count += 1
    return dict

        

def setSecurityRoles(dictionary,appName):
    strRoleChange = '['
    for role in dictionary.keys():
        # Loop through Roles
        strRoleChange += '[\"' + role + '\" '
        strRoleChange += dictionary[role]['Everyone?'] + ' '
        strRoleChange += dictionary[role]['All authenticated?'] + ' '
        strRoleChange += '\"' + dictionary[role]['Mapped users'] + '\" '
        strRoleChange += '\"' + dictionary[role]['Mapped groups'] + '\"] '
    strRoleChange += ']]'
    AdminApp.edit(appName, '[-MapRolesToUsers' + strRoleChange +']')
    print "Setting Roles and Users for %s" % appName
    AdminConfig.save()

apps = AdminApp.list()
appsList = apps.split(lineSeparator)
# Test with some Apps:
# appsList = ['Blogs','Activities','Wikis']
# or Single App:
# appsList = ['Blogs']
for app in appsList:
    # For testing: set app to example applicatio
    setSecurityRoles(convertFile2Dict(app),app)
print "Restore of Security Roles finished!"

        

Weitere Skript Blogs

• http://www.kbild.ch
• z.B. Set Default Security Roles and Restrict Roles to Administrators
• Download Link
• Praktisch für konsistentes und initiales setzen der Rollen

            # ConfigureConnectionsRolesRestricted
            # 
            # Author: Klaus Bild
            # E-Mail:
            # If you want to set multiple Admins or Groups
            #  
            # Variables for Usermapping
            connwasadmin = 'wasadmin'
            connadmin = 'Admin1|Admin2'
            connmoderators = 'Moderator1|Moderator2'
            connmetrics = 'Metrics1|Metrics2'
            connmobile = 'Mobile1|Mobile2'
        

            # Variables for Groupmapping
            connadmingroup = 'CNXAdmins'
            connmoderatorgroup = 'CNXModerators'
            connmetricsgroup = 'CNXMetricsAdmins'
            connmobilegroup = 'CNXMobileAdmins'

            appName = 'Activities'
            # "role" Yes No = everyone
            # "role" No Yes = All Authenticated
            # "role" No No  = None
            AdminApp.edit( appName, '[-MapRolesToUsers [["person" No Yes "" ""] 
              ["everyone" Yes No "" ""] ["reader" Yes No "" ""] 
              ["metrics-reader" No Yes "" ""] 
              ["search-admin" No No "' + connwasadmin + '|' + connadmin + '" "' + connadmingroup + '"] 
              ["widget-admin" No No "' + connwasadmin + '|' + connadmin + '" "' + connadmingroup + '"] 
              ["admin" No No "' + connwasadmin + '|' + connadmin + '" "' + connadmingroup + '"] 
              ["bss-provisioning-admin" No No "" ""] ]]' )
            print "Setting Roles and Users for Activities"
            AdminConfig.save()
            ...
        

Check ExId Bash Script

if [ -z "$1" ]; then
    echo "USAGE: `basename $0` mailaddress"
    exit ;
fi


MAIL=$1

db2 -x "connect to peopledb" | grep alias | awk '{print $5}'
db2 -x "SELECT PROF_GUID, PROF_MAIL FROM EMPINST.EMPLOYEE WHERE PROF_MAIL_LOWER = '${MAIL,,}'"
db2 -x "connect reset" > /dev/null 
while true; do
    printf "Which email address should be used for Lookup?\n"
    read  MAIL
    break
done
        

db2 -x "connect to OPNACT"| grep alias | awk '{print $5}'
db2 -x "select EXID from activities.oa_memberprofile where email = '$MAIL'"
db2 -x "connect reset" > /dev/null
db2 -x "connect to BLOGS"| grep alias | awk '{print $5}'
db2 -x "select EXTID from blogs.rolleruser where EMAILADDRESS = '$MAIL'"
db2 -x "connect reset" > /dev/null
db2 -x "connect to SNCOMM"| grep alias | awk '{print $5}'
db2 -x "select DIRECTORY_UUID from SNCOMM.MEMBERPROFILE where email = '${MAIL,,}'"
db2 -x "connect reset" > /dev/null
db2 -x "connect to dogear"| grep alias | awk '{print $5}'
db2 -x "select MEMBER_ID from DOGEAR.PERSON where email = '${MAIL,,}'"
db2 -x "connect reset" > /dev/null
db2 -x "connect to files"| grep alias | awk '{print $5}'
db2 -x "select DIRECTORY_ID from FILES.USER where email = '$MAIL'"
db2 -x "connect reset" > /dev/null
db2 -x "connect to forum" | grep alias | awk '{print $5}'
db2 -x "select EXID from FORUM.DF_MEMBERPROFILE where email = '$MAIL'"
db2 -x "connect reset" > /dev/null
db2 -x "connect to Homepage"| grep alias | awk '{print $5}'
db2 -x "select EXID from HOMEPAGE.PERSON where USER_MAIL = '$MAIL'"
db2 -x "connect reset" > /dev/null
db2 -x "connect to wikis"| grep alias | awk '{print $5}'
db2 -x "select DIRECTORY_ID from WIKIS.USER where email = '$MAIL'" | grep "-"
db2 -x "connect reset" > /dev/null


        

create_cacerts.sh

        TMP1=`mktemp -d` 
        trap "rm -rf $TMP1" EXIT

        while getopts h:p:f:?: option
        do
            case "${option}"
                in
                h) SERVERNAME=${OPTARG};;
                p) SERVERPORT=${OPTARG};;
                f) STORECACERTS=${OPTARG};;
                ?) echo "USAGE: `basename $0` -h hostname -p port -f Certfile\n"
                echo "You have to type a password for keyfile twice and set\n"
                echo "the key to trusted!"
                exit
                ;;
            esac
        done

        if [ -z "$SERVERNAME" ] | [ -z "$SERVERPORT" ] | [ -z "$STORECACERTS" ] ; then
            echo "USAGE: `basename $0` -h hostname -p port -f Certfile"
            echo "You have to type a password for keyfile twice and set\n"
            echo "the key to trusted!"
            exit
        fi
        

        openssl s_client -showcerts -connect $SERVERNAME:$SERVERPORT < /dev/null > $TMP1/cst-key.out
        openssl x509 -outform DER < $TMP1/cst-key.out > $TMP1/cst-key.der
        openssl x509 -inform der -in $TMP1/cst-key.der -out $TMP1/cst-key.pem
        keytool -import -alias Selfsigned -keystore $STORECACERTS -file $TMP1/cst-key.pem