Install Quickr 8.5 for WPS - Part 3 (HTTP and LDAP)

Now I will install HTTP server to access Quickr over port 80/443 and configure LDAP (Domino LDAP)

I will use Apache HTTP server from OS installation media

• My CD is mounted under  /media/RHEL_5.8\ x86_64\ DVD/ folder.
• Navigate into the folder #cd /media/RHEL_5.8\ x86_64\ DVD/Server and install httpd rpm
• #rpm -Uvh  httpd-2.2.3-63.el5.x86_64.rpm
• After installation run #service httpd start
• Test port 80 - type your server IP in to browser. You should get apache welcome page 
• No it is time to install WAS plug-in which is used for communication betwen WAS and HTTP server
• Navigate to Quicker Installation Media IL-7.
• #cd /opt/install/IL-7/q850_extras/plugin
• #./install
• Installation wizard will be opened in a graphic mode
• Click NEXT
• Accept license NEXT
• System prerequisites check failed ... do not worry click NEXT
• See notes about this error http://www-01.ibm.com/support/docview.wss?rs=180&context=SSEQTP&q1=rhel5cert&uid=swg21260689&loc=en_US&cs=utf-8&lang=en
• Select Apache Web Server V2 and click NEXT
• Select local option
• /opt/IBM/Quickr/Plugins click NEXT
• /opt/IBM/Quickr/AppServer and click NEXT
• /etc/httpd/conf/httpd.conf and port 80 - click NEXT
• leave webserver1 and click NEXT
• Leave plugin-cfg.xml in default ... NEXT
• Check summary and click NEXT, NEXT
• Install will be finished with status: Partial Success. We must configure WAS to use  HTTP server only.
• Install FP for plugin http://www-01.ibm.com/support/docview.wss?uid=swg24031962
• Configure HTTP server in WAS console
• Go to https://<IP>:10041/admin and login
• Navigate to Servers>Web Servers and click NEW
• Step 1 - fill name, type, hostname and os. Click NEXT
• Step 2 - Click NEXT
• Step 3 - Set port 80 and /opt/IBM/Quickr/Plugins and select All. Click NEXT
• Step 4 - click FINISH
• After server is created, click SAVE link abow Web Servers table
• Edit httpd.conf as and chage last 2 lines to have module version ap22 and not ap20
• LoadModule was_ap22_module /opt/IBM/Quickr/Plugins/bin/64bits/mod_was_ap22_http.so
• WebSpherePluginConfig /opt/IBM/Quickr/Plugins/config/webserver1/plugin-cfg.xml
• #service httpd start
• Enable SSL
• install  #rpm -Uvh distcache-1.4.5-14.1.x86_64.rpm
• install  #rpm -Uvh mod_ssl-2.2.3-63.el5.x86_64.rpm
• Edit /etc/httpd/conf/ssl.conf and find line <VirtualHost _default_:443> and add under
•  RewriteEngine On
•  RewriteRule ^/$ /places/login [R]
• Edit /etc/httpd/conf/httpd.conf add this lines on the end of the file

AllowEncodedSlashes On

NameVirtualHost *:443
NameVirtualHost *:80

<VirtualHost *:80>
        ServerName examlpe.ibm.com
        ErrorLog logs/examlpe.ibm.com-error_log
        CustomLog logs/examlpe.ibm.com-access_log common
        RewriteEngine On
        RewriteCond %{HTTPS} off
        RewriteRule (.*) https://%{HTTP_HOST}/places/login
</VirtualHost>

LoadModule was_ap22_module /opt/IBM/Quickr/Plugins/bin/64bits/mod_was_ap22_http.so
WebSpherePluginConfig /opt/IBM/Quickr/Plugins/config/webserver1/plugin-cfg.xml

• Configure Domino LDAP
• goto # cd /opt/IBM/Quickr/wp_profile/PortalServer/wizard
• start graphic wizard #./configwizard.sh
• you will need only actual was admin account, LDAP bind account, hostname of LDAP, LDAP type is Domino 7 even we have 8.5.2.
• I configured LDAP as federated. All other options could be  left in defaults.
• Restart WebSphere_Portal

IBM Connections 3.0.1 on RHEL - how to install - 7. Connect Domino LDAP

In our infrastructure, we already have Domino server installed, so here I am going to show how to configure Federated Repository (add Domino LDAP).

What you will need:

• You must know FQND or IP of your Domino server
• LDAP port 389 as standard
• If your LDAP need to authenticate to reed content, you mast know some account DN and password - this will be used as bind user to bind in to LDAP
• You should have installed WAS (see previous posts)

1. Show status of dmgr server 
1. [root@ic bin]# cd /opt/IBM/WebSphere/AppServer/bin/
2. [root@ic bin]# ./serverStatus.sh -all -user wasadmin -password Pass4conn
3. If it is not started already, run: 
1. [root@ic bin]# cd /opt/IBM/WebSphere/AppServer/bin/startManager.sh
4. Backup your  wimconfig.xml file before doing any changes in the federated repository configuration
1. [root@ic bin]# cd /opt/IBM/WebSphere/AppServer/profiles/Dmgr01/config/cells/icCell01/wim/config/
2. [root@ic config]# cp wimconfig.xml wimconfig.xml.bak
5. Open web browser and go to  http://<hostname>:9060/admin  
6. Login with administrator account wasadmin and your password
1. go to Security > Global security  and in User account repository click Configure... button
2. In Repositories in the realm table click Add Base entry to Realm...
3. Click Add Repository and fill
1. Repository identifier (enter MyLDAP)
2. Select Directory type: IBM Lotus Domino
3. Enter Primary host name of your domino server
4. If you need bind enter bind and password
5. In Login properties you can add more options to login, I added email so there is uid;mail in the field
6. Click OK  and enter in to field with label:  Specifies the Lightweight Directory Access Protocol (LDAP) distinguished name (DN) that uniquely identifies this set of entries in the realm root of your Domino LDAP ... I have o=ys,c=cz
7. Click OK and SAVE
4. Restart dmgr server:
1. [root@ic bin]# /opt/IBM/WebSphere/AppServer/bin/stopManager.sh -user wasadmin -password Pass4conn
2. [root@ic bin]# /opt/IBM/WebSphere/AppServer/bin/startManager.sh -user wasadmin -password Pass4conn
5. Login again in to web Integrated Solutions Console
1. Navigate in to Users and Groups > Manage Users
2. Click on Search button. If the expected set of users is returned then LDAP is configured correctly! Make the same for groups and be sure that members of groups are correct.
6. Setup SSO
1. Go to Security > Global security in Authentication expand Web and SIP security and click Single sign-on (SSO)
2. enter  .ys.cz ... so .<domain>.com  It must start with a dot and continue with domain
3. Check  Interoperability Mode
4. OK and SAVE
5. Go to Security > Global security and click on Enable application security 
6. OK and SAVE
7. Sync nodes
1. [root@ic bin]# cd /opt/IBM/WebSphere/AppServer/profiles/AppSrv01/bin
2. [root@ic bin]# ./syncNode.sh ic.ys.cz 8879 -username wasadmin -password <your password>

Ok now we will go to Populate Profiles from the LDAP into DB2 tables.