05. Enable Lotus Sametime (scenario 2)

Added by James A Riel | Edited by IBM contributor

Dana Liburdi on May 31, 2009 | Version 4

Edit
More Actions ▼

Abstract

No abstract provided.

Tags: SSO, ltpa

< Previous | Contents | Next

You can enable the awareness, instant messaging, and Web conferencing (meeting) features of IBM® Lotus® Sametime® in places. Then members of a place can see when other members are online, chat with other members, and schedule and participate in online meetings with other members all from within the place.

Prepare the servers to enable Lotus Sametime features in places

Before you can enable Lotus Sametime features in places, you must prepare the servers. The steps described here assume that you are enabling the Lotus Sametime features for the first time rather than upgrading an existing integration configuration.

The steps also assume that you installed either Lotus Sametime or IBM Lotus Quickr™ first and are now integrating with the other product. If instead you are installing both of the products at the same time, you should set up multi-server session-based authentication (single sign-on) between the IBM Lotus Domino® servers on which they run before installing the products. Using this approach, you can first isolate and solve any authentication problems that might arise between the Lotus Domino servers.

Make sure that you have installed or upgraded to Lotus Quickr. When prompted for the administrator name and password during a new installation, type a name that is not in the LDAP directory.

Connect Lotus Quickr to the same LDAP directory that you also use for Lotus Sametime. Both servers must use the same directory.

Make sure that you have installed Lotus Sametime Version 7.5 or later. For more information, see the Lotus Sametime installation guide that is appropriate for your platform, available on the Web at http://www.lotus.com/ldd/doc.

Note Configure the Lotus Sametime server to use HTTP port 80 or to tunnel over port 80; this step is required for the awareness feature.

Verify that awareness and instant messaging are working for Lotus Sametime. If you plan to integrate Web conferencing (meetings) with Lotus Quickr, verify, too, that Web conferencing is working.

Perform the following steps to update the Web SSO Configuration for Ltpa token document that was created when you installed Lotus Sametime:
1. Ensure that the Lotus Domino Directory on the server has replicated throughout the Lotus Domino domain since you installed Lotus Sametime.
2. Using IBM Lotus Notes® open the Lotus Domino Directory on the Lotus Sametime server.
3. Click the Configuration > Web Server Configurations view.
4. From within this view, expand the list of Web SSO Configurations.
5. Open the Web SSO Configuration for Ltpa Token document in edit mode. If you cannot edit the document, contact an administrator about getting edit access or editing the document for you.
6. Make sure that the Domino Server Names field contains the name of each of the Lotus Quickr and Lotus Sametime servers that should participate in single sign-on.
7. Make sure that the DNS Domain field contains the fully-qualified DNS domain name of the Lotus Quickr and Lotus Sametime servers.
8. Click Keys > Create Domino SSO Key if you want to create a new key for SSO.
9. Open the Server document for the Lotus Sametime server.
10. Click Internet Protocols > Domino Web Engine.
11. In the HTTP Sessions section, select LtpaToken in the Web SSO Configuration field.
12. Click Save and Close.
13. Replicate the edits to the Lotus Quickr server.

Perform the following steps to enable single sign-on authentication on the Lotus Quickr server:
1. From IBM Lotus Notes, open the Lotus Domino Directory for the domain.
2. Open the Server document for the Lotus Quickr server in edit mode.
3. Click Ports > Internet Ports > Web and then in the Name & password field for the Web port select Yes.
4. Click Internet Protocols > Domino Web Engine, and in the Session authentication field select Multiple Servers (SSO), and then click OK.
5. In the Web SSO Configuration field, select LtpaToken.
6. Click Save and Close.
7. Add the following setting to the notes.ini file on the Lotus Quickr server:
```
NoWebFileSystemACLs=1 
```
8. Create a database from the Domino Web Server Configuration template (domcfg5.ntf), giving the database the file name domcfg.nsf.
9. Open the database you created and click Add Mapping to open a mapping document.
10. In the Target Database field of the mapping document, type
```
lotusquickr/resources.nsf 
```
11. In the Target Form field, type
```
QuickPlaceLoginForm 
```
  and then click Save and Close to preserve your changes to the document.

Restart the Lotus Domino servers.

Perform the following steps to verify that single sign-on is working between Lotus Quickr and Lotus Sametime:
1. From a browser, connect to the Lotus Quickr server. Because multi-server sign-on is enabled, you must enter the fully qualified host name to connect, for example,
```
http://qpserver.acme.com/quickplace 
```
2. Log in to Lotus Quickr using the name of an external user registered in the LDAP directory.
3. Create a test place and verify that you can add several members from the LDAP directory.
4. Using the same browser session, connect to the Lotus Sametime server. For example, enter
```
http://stserver.acme.com/stcenter.nsf 
```
5. Go to the Attend Meeting page and verify that you are still logged on to the server. If you can authenticate once and remain logged in to both Lotus Quickr and Lotus Sametime, multi-server sign-on is working. If you must authenticate more than once, multi-server sign-on is not working and you must resolve the problem before continuing.