The purpose of this document is to outline the procedure for installing
and integrating IBM Lotus Connections with IBM Lotus Quickr using SiteMinder.
The configuration on which this document is based also required that the
Quickr installation be fully SSL secured.
As part of this integration both Lotus Connections and Lotus Quickr must
be connected to the same LDAP but can have seperate HTTP Servers. This
document focuses on the steps required on the Lotus Connections side of
A corresponding document exists detailing the changes required on the Quickr
side of this set-up and can be found in the on-line Lotus Quickr Wiki.
The following table lists the specifications and software used on the Lotus
Connections side of this config. Note that the LDAP and SiteMinder servers
are shared by both products.
Connections Application Server
Windows 2003 SP2
Lotus Connections 2.0.1 (+
Websphere Application Server 6.1.13
1 CPU @ 2.33 GHz
3.5 GB RAM
Windows 2003 SP2
IBM HTTP Server V6.1.013
1 CPU @ 2.33 GHz
3 GB RAM
MS Active Directory 2003
CA SiteMinder Server
SiteMinder Server V6
INSTALLATION AND CONFIGURATION
A brief summary of the installation steps and the order in which they were
executed is as follows:
1. Installation of Application Server and Database
2. Population of profiles database from LDAP.
3. Installation of Lotus Connections – during
testing a non-cluster, multi profile installation was used.
4. Installation of HTTP Server and WebSphere
Application Server plugins for HTTP server.
5. Configuration of IBM HTTP Server for use
6. Mapping of Lotus Connections features to
7. Installation\Configuration of SiteMinder
WebAgent on HTTP Server Machine
8. Installation\Configuration of SiteMinder
ASA on Websphere Application Server Machine.
9. Enable SiteMinder for Lotus Connections
10. Installation of Lotus Connections Connector
for Lotus Quickr
Steps 1-6 are explained in more detail in the Lotus Connections InfoCenter
which is available at http://publib.boulder.ibm.com/infocenter/ltscnnct/v2r0/index.jsp.
Steps 7-9 are detailed in the document “Integrating Netegrity SiteMinder
6.0 with IBM Lotus Connections 2.0
” which is available at
The final step regarding the installation of the connector is also discussed
in the infocenter and is the last step in a non-siteminder configuration
where no other web access management system is used.
However when using SiteMinder and SSL there are a number of config issues
and other considerations that need to be addressed to ensure proper functionality
of SiteMinder and the integration points between Lotus Connections and
Lotus Quickr. Therefore the focus for the remainder of this document is
on this area of the configuration.
Note that in order for the integration to work correctly, the Connections
and Quickr servers must have single-sign-on enabled between both
products. The Quickr server must also enable the business card link. More
detail on this is to be found in the Quickr Wiki available at http://www-10.lotus.com/ldd/lqwiki.nsf/archive?openview&title=Deployment&type=cat&cat=Deployment&sort=I
INTEGRATION POINTS BETWEEN CONNECTIONS AND QUICKR
The following are the integration points between connections and quickr:
- Ability to publish document from Activities
to Quickr places.
Users will notice links to Quickr
places in the left navigation bar and that a space has been created on
the overview page for RSS feeds to come from both of
these places, see below.
- Can create Communities with associated Quickr
ACTIVITIES PUBLISH FEATURE
To enable the publish feature to work the <PublishFile> setting
in the file 'oa-config.xml' needs to be changed, as per the “Enabling
users to publish file attachments to Lotus Quickr” section in the
SSL Quickr Integration
However as this is an SSL Quickr deployment the server specified in this
file must be https and contain the port number 443, as below.
Avoiding Time-out Issues
When a user selects to publish a document from Activities to Quickr a window
will pop up to load a list of possible places where this document can be
published. Occasionally the loading of this list can timeout and leave
this window in a loading state indefinitely. This will only happen where
the configuration is particularly slow - due to connection speeds between
the various components of the set-up, for example this could happen in
the SiteMinder/SSL configuration as there is two layers of security.
The default time-out value is set in a configuration file on the Connections
Activities server and its value is 15 seconds. If time-outs occur then
this value needs to be changed accordingly as per the technote on this
issue, available at http://www-01.ibm.com/support/docview.wss?uid=swg21328043.
COMMUNITIES INTEGRATION POINTS
The installation of the Lotus Connections Connector for Quickr ensures
the presence of the Communities integration points. However when using
SiteMinder and SSL some tweaking is required to ensure proper functionality
of the applications.
The communities-quickr-config.xml File.
The installation of the connector creates the 'communities-quickr-config.xml'
file in the following folder:
To enable the use of SSL a manual change is required in this file. The
field, useSSL,must be set to true.
Another change is also required in this file when using SiteMinder, the
field useSSO must be set to false as SiteMinder is now facilitating SSO
between Communities and Quickr.
Supporting Lotus Quickr Authenticated Feeds
In order for the feeds from Quickr Wiki/Teamspace to load in the connections
environment a change is required to the 'proxy-config.xml' file. This is
discused in the connections InfoCenter but there is a change beyond this
required to load these feeds in Communities due to the presence of SiteMinder
The SiteMinder cookie (SMSESSION) and the SSL credentials (WWW-Authenticate)
need to be added to the above section's of the proxy config file. This
ensures that the proper credentials are passed between the two applications
and that the feeds can load (Note that, for the Profiles component of connections
similar changes are required to it's proxy config file in order for it
to obtain the 'Recent Posts' feed when viewing a persons profile). Users
will see authentication error's in place of the relevant feed if this step
After all of these changes are made the Connections and Quickr servers
should be restarted.
The modification's described in this document are required when attempting
to set up Lotus Connections \ Quickr integration using SiteMinder and SSL.
These changes are necessary to ensure correct functionality between the
products under this configuration.
To compliment these document system administrators should also see documents
available in the Lotus Quickr Wiki as referenced in this article to ensure
proper integration from the Quickr perspective with this configuration.
Once these steps have been completed the integration between the products
will be complete and is ready for use.