358 Lotus blogs updated hourly. Who will post next? Home | Downloads | Events | Pods | Blogs | Search | myPL | About 
Latest 7 Posts
Do you monitor your Connections environment?
Tue, Sep 23rd 2014 100
MWLUG here I come
Fri, Aug 22nd 2014 84
dandering for dosh -the story so far
Wed, Jun 4th 2014 59
Registration for ICONUK now open
Thu, May 1st 2014 80
Please sponsor us Dandering for Dosh
Fri, Apr 25th 2014 76
Fun and games with Commuity wigets
Thu, Apr 24th 2014 81
Help shape connections search
Thu, Apr 10th 2014 56
Top 10
Connections 4.0 cr issues when you have a shared data folder not on the WAS server
Fri, Nov 15th 2013 158
Connections 4.x search – well that was a weird problem
Fri, Oct 4th 2013 129
Issues with Install manager GUI on RHEL 6.3 ?
Wed, Apr 3rd 2013 109
Do you monitor your Connections environment?
Tue, Sep 23rd 2014 100
LTPA issue update
Wed, Mar 2nd 2011 99
MWLUG here I come
Fri, Aug 22nd 2014 84
Speaking at Engage
Fri, Feb 14th 2014 83
Fun and games with Commuity wigets
Thu, Apr 24th 2014 81
Registration for ICONUK now open
Thu, May 1st 2014 80
Please sponsor us Dandering for Dosh
Fri, Apr 25th 2014 76

Locked down doesn’t mean locked out

Over the past few days I have been installing a Connections environment in a locked down windows environment with a very agressive group policy.

Which was a lot more locked down than I expected it to be, so here are a few gotchas that I discovered that may assist you if you are in the same situation.

In this scenario we were using 3 machines:

machine 1 – DB2, TDI and Domino (for LDAP)

machine 2 – Connections (Deployment manger and Connections node)

machine 3 – HTTP server


The Group Policy would only allow the db2admin user to do anything DB related. For the databases to install and function correctly I had to follow these steps.

Create the db2admin and lcuser accounts as a local machine admin, logon as the db2admin to install and configure db2, be logged on as the db2admin user to use the connections db creation wizard (it would work as another user to create them but all the grants failed) – normally I would add my machine admin account to the corrrect db2 groups, but the windows policy was not playing ball.

Once db2 is installed and the Connections dbs created the only users with access to the dbs are db2admin and lcuser – regardless of the users that were placed in the db2 windows groups – to query the DBs you must connect to the db with either of the valid users.


Appeared to work correctly (thank you TDI)  – but I did find the issue in my previous post that if you use TDI 7.1 and then downgrade the connections wizards don’t work as expected.

HTTP Server

Installed as expected, but there were a few issues with communicating with the deployment manager.


Connections installed as expected, but took a long time, longer than normal.

Ports and other considerations

Pass the coms team / firewall team – whomever looks after such things a copy of the WebSphere plugin file and ask them to open all ports listed between HTTP and Depolyment manager machine, also port 8008 should be opened up for HTTP Admin.

Becuase of issues between the HTTP server and Dmgr/Connections machine, the news application was not mapped properly and plugin did not generate. This caused issues with the news app, which manifested itself with recomendations widgets, media gallery widgets and who do i know widgets throwing errors (no errors in the system out log) – after checking the http server error log, I found it was trying to serve news up from the webserver, after checking the plugin news wasn’t mapped.

This was easily resolved by remapping the news app to the webserver, regenerating and propagating the plugin file.

The Connections machine itself requires access to the internet for RSS feeds – if the machine can’t get out it can not retrieve RSS feeds and will give a nasty error.

It was a little challanging, especially when you have to justify every port, but once I spent 5 mins explaining how the environment hangs together and what the ports are required for it was no problem at all.

No doubt I shall be using this blog post to remind me of what needs to be opened up when I hit this issue again  :)






Feb 15, 2012
35 hits

Recent Blog Posts

Do you monitor your Connections environment?
Tue, Sep 23rd 2014 8:11a   Sharon Bellamy
After being to a few user groups lately and seeing all the great monitoring tools for Domino I am interested in what people use to monitor connections. The WebSphere piece of connections can put a lot of people off and I am wondering if something was available would you use it? If you do monitor, what do you use If something was available with a *dashboard* would you use it? What features would you like in a monitoring app Would you be interested in something bundled in Nagios etc I have creat [read] Keywords: connections domino websphere

MWLUG here I come
Fri, Aug 22nd 2014 4:10p   Sharon Bellamy
I have been a bit quiet on the blog lately. I have been a little busy both work wise and home wise what with making costumes and building armour (more of that in another post) but this weekend I fly out to my very first MWLUG. I am really looking forward to it after hearing so many great things about it. I will be speaking on the thursday morning, but am arriving on sunday the 24th so will get to spend a few days seeing the sites and working from the hotel room. If you are going to be there I a [read] Keywords:

dandering for dosh -the story so far
Wed, Jun 4th 2014 6:14a   Sharon Bellamy
We are just about to start dandering for dosh day 3 & so far despite a few injuries (mainly to me), some very rough terrain and much scorching of the sun – we all appear to be enjoying it Day 2 mostly involved us being mountain goats, although we did get an hour on the beach on the fabulous Warren & kitty ‘ s inflatable sofas. Loving the dander so far – more news and pictures to follow ;). The post dandering for dosh -the story so far appeared first on Social Shaz [read] Keywords:

Registration for ICONUK now open
Thu, May 1st 2014 6:12a   Sharon Bellamy
Registration for Icon UK is now open Head over to the registration page and sign up early as placed are limited. If you would like to speak please submit your abstracts before 30th June. There are four tracks this year, Management/Strategy, Development, Admin and Open Source. If you are interested in sponsoring please email sponsors@iconuk.org. I am all resisted and really looking forward to the event – see you there The post Registration for ICONUK now open appeared first on Social S [read] Keywords: admin development email

Please sponsor us Dandering for Dosh
Fri, Apr 25th 2014 6:12a   Sharon Bellamy
The Cube Soft team (Nathan and I) have joined with some other fantastic members of the ICS (Lotus) Community and are joining this years Dander for Dosh. 10 Geeks, 100 Miles, 5 days – what could possibly go wrong In previous years a group of community members have raised money for worthy causes with a sponsored walk across some of the British Isles most beautiful country side. This years walk is the Lleyn Peninsula Coastal Path (Edge of Wales Walk) 85 miles in five days, and as our coordinato [read] Keywords: lotus community

Fun and games with Commuity wigets
Thu, Apr 24th 2014 6:11a   Sharon Bellamy
Last night we managed to close a PMR that had been open for a few weeks on a strange issue with Community Widgets. After remapping the connections admin user everything worked exactly as expected except for 2 tiny issues – Adding the blogs and surveys widgets inside a community thew a nasty error. Thanks to Justin Cornell in IBM support we managed to get to the bottom of the issue by remapping the widgets admin user even though it was mapped correctly. Jump over to the Cube Soft Blog -  Fu [read] Keywords: admin connections ibm community widgets


Help shape connections search
Thu, Apr 10th 2014 1:11p   Sharon Bellamy
If you are interested in helping IBM shape the search application inside Connections there is a survey that you can participate in. This is a short survey to better understand attitudes and behaviours around search and how users – well – use it You can find the search survey here Fill it in and you will make a Connections product manager very happy [read] Keywords: connections ibm application

Odd issue with Connections Mail
Wed, Apr 2nd 2014 6:10a   Sharon Bellamy
I have been looking to implement Connections mail for a while for one of my customers, after finally sorting out some SSO issues we had been seeing I was ready to deploy into their DEV/TEST environment. No problem I thought – Connections mail is a very simple install a couple of config files and a quick wsadmin command to get the help to work. Once I had deployed I was seeing the strangest issues - Contact your system administrator: Missing element with class=”os-site-mail-notify [read] Keywords: connections google skype

Speaking at Engage
Fri, Feb 14th 2014 11:10a   Sharon Bellamy
I will be speaking at Engage by BLUG in March – a big thank you to Theo and the team for the opportunity On Monday the 17th of March I will be Christoph Stoettener’s assistant again in delivering – Adm04. Practical Solutions for Connections Administrators – Tips and Scripts for Your Daily Business – 14:45 – 15:30, room: B On Tuesday the 18th of March I will be speaking with my friend and college Mr Tim Clark – Adm08. Collaboration Stack – Lessons L [read] Keywords: collaboration connections

so I DID make it to Connect
Tue, Feb 4th 2014 3:10p   Sharon Bellamy
So thanks to some very good fortune and help from an old and awesome friend I was able to make the Connect conference in Orlando last week. I will post my full round up later in the week – but the highlights The Good SPEAKING for the first time with my good friend Christoph Stoettner  I am not ashamed to say I was extremely nervous about speaking at Connect for the first time, but if I have the opportunity to do so again I will grab it with both hands The flow for the first two days wit [read] Keywords: connections domino ibm sametime community twitter

Created and Maintained by Yancy Lent - About - Blog Submission - Suggestions - Change Log - Blog Widget - Advertising - Mobile Edition