Big news for security in IBM Connections

IBM Connections has a strong representation in the market of collaboration. As IBM Notes & IBM Domino have a long history in the collaboration market you can also imagine that lots of customers who are already using IBM Notes and/or IBM Domino also have IBM Connections in their infrastructure. IBM Domino can also act as an LDAP server and as we need an LDAP server also in the IBM Connections infrastructure it is for most organizations logical to use their IBM Domino environment as their LDAP supplier for IBM Connections.

But I have always lived with the assumption that all other internet protocols then HTTP which are supported by IBM Domino where vulnerable to Brute Force/ Dictionary attacks as there was not yet any configuration possibility with IBM Domino. Until last week a good friend called Christoph Stoettner contacted me on skype and told me that he had an issue on a customer site with logging in users and after some deduction and reasoning he had to conclude that the assumption of only the HTTP protocol which was protected by this Brute Force/ Dictionary attack setting in IBM Domino was a miss assumption !

Most probably you think this is all about IBM Domino why is it so big for IBM Connections. Well as I already stated in the start of my post. IBM Connections has a strong representation as a product with customers who are already running a collaboration stack of IBM called IBM Domino. So because of that it is very big news. Christoph Stoettner has already blogged about it last Friday on his blog (check it out here). So keep an eye on this post which protocols within IBM Domino are and aren’t protected but LDAP is one of the protected ones for sure so that’s good news !

IBM Connections Mobile app for android

One of the best parts of IBM Connections is the fabulous mobile application for android and iOS. But as all software in the world out there has bugs also this one consists of bugs. Last week with close working with IBM Support we have eliminated one more. So I wanted to share with you guys what the specific requirements are to have this problem.

Android offers to encrypts its internal/external memoryandroid encrypt (see screenshot).

As soon you have the medium in your android device encrypted where the IBM Connections mobile app is also on installed you encounter this problem.

 

When you have attachments in activities (for instance an microsoft document) and you want to open that document in the activity on your mobile device it would normally opened in the application which is coupled to that type of document. (most user use polaris office as that is a free app in the google play store.)

 

But you will see as soon you have and encrypted device it won’t work anymore. This has been identified by IBM and will be fixed in version 4.7.8 of the IBM Connections mobile app for android. The Estimated Time of Arrival of this version is end of this month.

Introduction of Sjaak Ursinus

Hi to all of you. I have been asked to blog here on ibmconnections.com by Stuart McIntyre. So first lets do an introduction of myself here.Sjaak Ursinus

My name is Sjaak Ursinus and I live in the Netherlands. I am working in the ICS market (IBM Collaboration Solutions formerly known as Lotus) my whole professional career. My birthday is 21 January of the fabulous year 1974 so that makes that I am currently 40 years. In the beginning of my career I have been working mainly with IBM Notes and IBM Domino but the last 7 Years of my career I have a 100% focus on IBM Connections.

I was at Lotusphere in Orlando in 2007 where the project called Ventura those days got introduced as Lotus Connections (later renamed to IBM Connections). As I had heard some rumors about the project Ventura would see its daylights during this lotusphere I was still completely surprised by the reaction of the crowd how good it got accepted. So at that time I decided to make a complete shift to IBM Connections. Its always hard for someone to start with a new product in their career. The best way to learn a new product is just to jump on to it and play with it as you solve customer problems. But the product just got released by the supplier so there where not yet of that day any customers yet. So my tactic those days was to get a good understanding of the product I had to have people where I would solve their problems for. So I got active on the public forum hosted by IBM for their product and tried to solve the problems people would leave over there. So back there I got a very good base and understanding of the product and use that knowledge still as a base for today’s helping out. Nowadays I have so many customers to serve with this product so I am not that active anymore on the public forum (I still scan the posted post still over there). I am very pleased to see that the product is very well accepted by the world and that it got big attraction even for IBM history.

Well for now this is enough about myself. I will post here some places where you can find me easily in case you want to contact me for whatever reason or helping out 🙂

platform name link
Skype sursinus / Sjaak Ursinus n/a
LinkedIn sursinus link
Facebook sjaak.ursinus link
Twitter sursinus link

Or you can always contact me via here on this blog.

Using IBM Connections? Please complete this research survey!

My good friend and esteemed analyst and author, Michael Sampson, is asking for feedback on your usage of IBM Connections:

I am running a research survey on how organizations are using IBM Connections. The survey has 17 questions, spread across four pages:

  • Demographics and Current State of Connections
  • Current and Forecasted Use of IBM Connections
  • Upgrading to Connections 5.0
  • Satisfaction, Value, and Next Steps

If you are decision-maker with reference to IBM Connections at your organization, please take the survey.

If you know people who are using IBM Connections at their organization, could you please forward them the link and ask them to take the survey?

Michael has run similar surveys previously, and the results have been very useful in terms of understanding the take-up of Connections across the world, and also the value derived at both the individual and the organisational level.

Please do take a few minutes to complete the survey – your input will be much appreciated!

IBM Connections 4.5 CR5 is now available

When IBM Connections was first released, all patches to the on-premises code were released as iFixes – individual fix packages that could be installed and deinstalled individually. This was really flexible and allowed issues to be patched very quickly but also lead to very time-consuming patching processes and almost every system I visited had a different set of code updates installed. Not ideal!

For the past few versions, IBM has managed updates to Connections using Cumulative Refreshes (CRs). These packages consist of a set of cumulative fixes for each of IBM Connections applications.  This is a much more manageable approach, with approximately one CR released each quarter to be installed, and single fixes available from IBM support should an issue be particularly serious.

The latest CR for IBM Connections 4.5 has just been released:

[titled_box title = “Cumulative Refresh 5 summary”]CR5 is a set of 20 fix packages, which update each application entirely. Please apply all 20 fix packages together. The CCM (Connections Content Management) package should only be installed on Connections environments which have Content Management configured. In addition to these 20 fix packages, there is a new TDISOL version released along with CR5, which can be installed on any 4.5 Connections environment. Please download TDISOL 4.5 2014-07-10 from Fix Central.

CR5 uses the same version of the Update Installer as CR4, which is published in Fix Central under this link: 4.5.0.0-IC-Multi-UPDI-20131020

CR5 includes all fixes in CR1, CR2CR3, and CR4, plus fixes LO74499 and LO74629, listed in this document. It also includes LO74571 for Connections Mail support. It is not necessary to apply these previous fixes if you are installing CR5. CR5 can also be applied on environments that have those fixes already applied.[/titled_box]

You can download IBM Connections 4.5 CR5 from Fix Central.

Apache Struts security issues ‐ time to patch your IBM Connections install

I’ve just come across an IBM technote from May 2014 that has been updated over the last few days, listing details of a number of vulnerabilities in Apache Struts:

[titled_box title=”Vulnerability Details”]Several security vulnerabilities have been reported against Apache Struts through April 2014. IBM Connections uses Struts. A version of the package that is vulnerable to these issues is used in several past versions of IBM Connections. To fix these vulnerabilities apply the fixes as detailed in the Remediation section.

The following versions of IBM Connections are impacted:

IBM Connections 5.0
IBM Connections 4.5
IBM Connections 4.0
IBM Connections 3.0.1.1 and earlier releases[/titled_box]

There are fixes for all the above mentioned versions of Connections.  Here are the two most recent:

IBM Connections 5.0 Apply APAR LO80688
IBM Connections 4.5 Upgrade to IBM Connections 4.5 CR4 and apply Interim Fix APAR LO81215

I would definitely recommend getting these security fixes on ASAP, particularly if your IBM Connections platform is public-facing…

Ephox EditLive for IBM Connections updated

The powerful enhanced rich text editor for IBM Connections, Ephox EditLive, has just been updated to version 2.5.2.45 and is available from IBM FixCentral:

1.

interim fix: 

Ephox EditLive 2.5.2.45 for IBM Connections 4.5.

Platforms: AIX, Linux, Windows
Applies to versions: 4.5.0.0
Upgrades to:
Severity: 30 – Moderate Impact/High Probability of Occurrence
Categories: Function
Abstract: This is the Ephox EditLive editor, version 2.5.2.45, for use with IBM Connections 4.5.
Restrictions: entitled, license
Jul 19, 2014

Now bundled with IBM Connections for all organisations under active maintenance, Ephox adds significant value for users of the platform.

This video shows the solution in action:

[youtube url=”http://www.youtube.com/watch?v=iwXfYX79e_M” width=”600″]

Whilst this power doesn’t come free of some administrative complexity, deployment of EditLive should definitely be a consideration in most Connections environments.

IBM Connections QuickSearch for Chrome updated

I first blogged about the IBM Connections QuickSearch plugin for Google Chrome three weeks ago. Back then it was at version 1.8.

Remarkably since then the author, Romain Lienard, has released four updated versions:

[titled_box title=”Changelog for IBM Connections QuickSearch”]

V.2.2:
– New group feature !!!
– Can now post a message to the user’s board with @mention (using the new group feature)
– Can now share a File to a group of users. To unlock the “share this file” feature you have to be first on a webpage which is an IBM Connections File URL

V2.1:
– “share this URL” now works with communities (with typeahead)

V2.0:
– new “share this URL” feature
– UI bug fixes

V1.9:
– a context menu is now available. Just select some piece of text within any webpage, then right-click and select a service to fire the search !

V1.8.1:
– can now set a default scope (in the options page)[/titled_box]

I’m so impressed by this development effort, and by the rate that new features are being added.

For example, the context-sensitive search:

QuickSearch menu

and ‘Share this URL’:

QuickSearch share

If you access IBM Connections on a regular basis and use Google Chrome as your main browser, you really would benefit from this plugin.

Grab it from the Chrome Store (it’s free), and say a big thank you to Romain (@lienardr)!

IBM Sanity Validation Tool for IBM Connections 4.5

A new and very neat IBM tool has been added to the IBM Collaboration Solutions Catalog in the last week or so:
[titled_box title = “The Sanity Validation Tool for IBM Connections 4.5”]The Sanity Validation Tool for IBM Connections 4.5 release was developed to help developers, system administrators, support engineers and eventually customers during their deployment of Connections. The tool was designed with the ability to run Pre-install, During and Post installation to verify a handful of common configuration requirements and settings. Refer to the Read Me file for list of System, Websphere, Database, IHS configuration settings the tool validates. The tool supports installation on Linux/DB2 LDAP.[/titled_box] You can download by clicking through from the Catalog, or by going direct to the ‘Lotus Business Solutions IBM Download site‘, logging in with your IBM ID and then searching for ‘Sanity’ to find the download in the very long list of tools on that site (there’s all sorts of interesting stuff on that list, something to investigate on a rainy day!).  You then need to fill in the obligatory IBM survey (‘Select which best describes your plans to use this software’ etc.), agree to the license and then you get to download the 176KB zip file.

Unpacking the zip file gives a folder named ‘sanity as of 9 16 2013’ (so this code has obviously been kicking around inside IBM for a while now!). This folder contains the code to be installed on your Linux server, plus a rudimentary README.txt file:

Sanity Tool unzipped

This is the first I’ve seen of this tool, so these are my comments as I go.

  1. Put the ‘sanity’ folder from inside the unpacked zip file somewhere memorable on your Connections 4.5 server (I used /opt/IBM/sanity).
  2. Check you have Python 2.6.x installed by running ‘python’ as root, e.g.
    [root@myserver sanity]# python
    Python 2.6.6 (r266:84292, Aug 28 2012, 10:55:56)
    [GCC 4.4.6 20120305 (Red Hat 4.4.6-4)] on linux2
    Type “help”, “copyright”, “credits” or “license” for more information.
  3. Make a backup and then edit conf.json using your favourite text editor, correcting these default values: [titled_box title = “Default configuration values”]”params”:{
    “connections.pathCon”:”/opt/IBM/Connections”,
    “connections.pathShare”:”/opt/IBM/Connections/data/shared”,
    “connections.pathConInst”:”/root/IBM_Connections_Install_Linux”,
    “db2.servers”:[
    {
    “name”:”activities”,
    “location”:”ictools2.swg.usma.ibm.com”,
    “username”:”db2inst1″,
    “password”:”password”,
    “path”:”/opt/ibm/db2/V10.1″,
    “dedicatedUser”:”lcuser”,
    “wizardsLocation”:”/Wizards”,
    “port”:”50000″
    }
    ],
    “driver.saveResults”:1,
    “driver.saveResultsPath”:”testResults.json”,
    “driver.quietDependencyCheck”:0,
    “IHS.pathIHS”:”/opt/IBM/HTTPServer”,
    “IHS.pathKey”:”/opt/IBM/HTTPServer/keys/ihskey.kdb”,
    “IHS.pathStash”:”/opt/IBM/HTTPServer/keys/ihskey.sth”,
    “ldap.java”:”/home/lcuser/jre1.7.0/bin/java”,
    “ldap.server”:”ilyavm.swg.usma.ibm.com”,
    “ldap.port”:”389″,
    “ldap.user”:”cn=root”,
    “ldap.password”:”lcsecret”,
    “ldap.base”:”o=renovations”,
    “ldap.filter”:”(&(objectClass=inetOrgPerson))”,
    “system.pathDB2″:”/opt/ibm/db2/V10.1”,
    “system.pathInstMan”:”/opt/IBM/InstallationManager”,
    “tdi.location”:”local”,
    “tdi.username”:”db2inst1″,
    “tdi.password”:”lcsecret”,
    “tdi.path”:”/opt/IBM/TDI/V7.1″,
    “websphere.pathWAS”:”/opt/IBM/WebSphere”,
    “websphere.server”:”ictools2.swg.usma.ibm.com”,
    “websphere.srvName”:”server1″,
    “websphere.profile”:”AppSrv01″,
    “websphere.cell”:”ictools2Cell01″,
    “wsadmin.user”:”Dmgr01″,
    “wsadmin.pass”:”passw0rd”[/titled_box] This is a little bit of a faff to get right initially, but once done can stay static for all future testing, and most likely can be used as a template for future installs of the tool on other systems.
  4. Run ‘python cmd_frontend.py’ as root (or as the user you use to run Websphere and Connections).  This kicks off a whole series of tests, e.g.: [titled_box title = “Running Sanity Check from the command line”][root@myserver sanity]# python cmd_frontend.py
    Welcome to the Sanity installation validation tool.
    Configuration File Location (default is conf.json):
    Loading config file at /opt/IBM/sanity/conf.json
    Loading test modules in the folder /opt/IBM/sanity/tests
    Loading test groups
    Verifying tests dependencies
    Starting tests…
    Starting test group: System Pre-install Check…
    Starting test: Determine if all required Linux libraries have been installed
    Searching for library packages…
    Found: compat-libstdc++-33.x86_64
    Found: compat-libstdc++-33.i686
    Found: compat-libstdc++-296-2.96
    Found: libcanberra-gtk2.i686
    Found: PackageKit-gtk-module.i686
    Found: gtk2.i686
    Found: libXtst.i686
    Test finished with result: LIBRARY ERROR: Missing library ‘libpam.so.0’Starting test: Determine if enough disk space exists to install Connections (114GB recommended)
    Getting disk space…
    Total free disk space: 14GB
    Test finished with result: Warning: Free space is less than 114GB; problems may occur when installing ConnectionsStarting test: Determine if enough memory exists to fulfill the recommended amount (8GB recommended)
    Getting total memory…
    Total memory: 7GB
    Test finished with result: Warning: Total memory is less than 8GB; problems may occur when running ConnectionsStarting test: Determine if permissions to required directories are set properly
    Checking if path exists: /opt/IBM/InstallationManager
    Path exists
    Checking access rights for /opt/IBM/InstallationManager…
    Checking admin permissions for /opt/IBM/InstallationManager…
    Admin permissions enabled
    Checking group permissions for /opt/IBM/InstallationManager…
    Test finished with result: PERMISSION ERROR: Nonroot user denied write permission for ‘Installation Manager’Starting test: Determine if uLimit is set to at least the recommended value 8200
    Getting uLimit…
    uLimit: 10240
    Total memory is greater than recommended amount (8200)
    Test successful
    Test finished with result: PASSFinished running test group: System Pre-install Check

    Starting test group: WebSphere Pre-install tests…
    Starting test: Determine if security is enabled
    Checking WebSphere for wsadmin.sh…
    Found wsadmin.sh
    Getting WebSphere security status…
    Test finished with result: SECURITY ERROR: Security is not enabled[/titled_box]This was run on a server that has been successfully running Connections 4.5 for a year or so.  As you can see from the snippet of output above, it has already picked out some things that can be improved.  The script took about 30 seconds to run in all.

  5. The tool can also be accessed via a web page which is rather cool.  Simply run ‘python web_frontend.py’: [titled_box title = “Enabling Sanity Check via a browser”][root@ssconnus sanity]# python web_frontend.py
    Starting Server
    Press ctrl+c to stop the server[/titled_box] And then access the Connections server on port 8000, e.g. http://connections.myorg.com:8000:

    Sanity Check via web browser

    This allows the administrator to add parameters to be applied to the test, and also to select the tests to be executed:

    Sanity via web - options

    Once the tests have been run, the output is displayed in the browser, and is then stored for review later.

As I mentioned above, getting the config file correct took a little while initially, but once this is done, the tool produces some excellent output and has already proved to be very useful.  I can imagine running it on all my servers (most Connections platforms I’ve worked on are Linux/DB2 so this fits the bill for me), and using it on a regular basis – particularly during upgrades and migrations.

Whilst this is a ‘USE AS IS’ tool and is not supported, I can imagine it becoming part of most Connections admin toolkits…  It only supports Connections 4.5 today, but should in theory work on Connections 5.0 as well, perhaps with a few minor tweaks to deal with the newer version of WAS involved. I haven’t had a chance to test this yet though.  It obviously isn’t supported on Windows, AIX or System i either.

I’m not sure who in IBM is responsible for the tool, but kudos to them!  I’d love to see it included in the default Connections install for Linux, then many of the parameters could be set automatically during the install.  Till then, download it and install ASAP.  Recommended!

TemboSocial Ideas for IBM Connections

I’ve long felt that ideation is a prime use case for IBM Connections and other social collaboration platforms.

Others clearly feel the same way, and whilst standalone tools such as Yambla, BrightIdea and even Elguji’s IdeaJam have been very successful, in my experience it is when ideation is at the centre of a well-designed ESN (Enterprise Social Network) that it becomes not just a one-off task for a particular ideas generation campaign but instead core to the way that an organisation operates day-in and day-out. Of course, the orgnisational culture has to be aligned in that direction too – as you might expect, ideation is not simply a technology play!

That’s why IBM adding Ideation Blogs to Connections a few versions ago was such a good step forward – users could now publish their ideas and gather feedback in the form of comments and votes in favour of the idea.

However, whilst Ideation Blogs cover some of the principal requirements, there are a number of areas in which other platforms have gone further… For example, voting down as well as up (a very important aspect for me personally), analysis and trending of key ideas, grading of comments as well as the ideas themselves and so on.

TemboSocial logoTherefore I am delighted to see TemboSocial fully integrate their cross-platform ideation technology, Ideas, with IBM Connections.

Supporting Connections 3, 4 and 4.5 (support for the just released version 5 is coming soon), plus WebSphere Portal, TemboSocial Ideas is the ideation platform that Connections has been calling for!

[TemboSocial Ideas is now listed in our Solutions catalog]

Watch out for quotes!

Just a reminder to be watchful of non-standard characters in IBM Connections user names, and also to thoroughly review your IBM Connections TDI logs on a regular basis.  This is a current APAR (IBM ID required):

[titled_box title = “IBM APAR LO81076”]LO81076: USERS WHO ARE REGISTED WITH QUOTATION MARKS IN THEIR NAMES CANNOT USE CONNECTIONS PROPERLY
APAR status 
OPEN
Error description
Users who are registered using identifiers that are in quotation marks (Jennifer “Jen” Doe) cannot use most of the functions of profiles.

Internet Explorer displays many errors after the user logs in and the Profiles home page is displayed. Firefox simply doesn’t show certain features such as the search entry box[/titled_box]

I’m sure that this particular APAR will get resolved in an upcoming fix for Connections 4.5 (I’m not sure if 5.0 is similarly afflicted?), however these types of issue do crop up every so often, so be ready for them!

Greenhouse now running IBM Connections 5.0

This was a pleasant surprise this morning:

Greenhouse at Connections 5.0

Yes, the IBM Greenhouse has been upgraded to IBM Connections 5.0.0.0.

New features including External Collaboration (which isn’t strictly relevant to the Greenhouse), improvements to Files and file-sync (using the new mobile apps and desktop plugins), plus significant significant enhancements to the activity stream and @mentions should all now be visible on the community test/demo platform.

Check it out!

PS. As the Greenhouse was already running the NextGen theme there aren’t too many changes visually…

PPS. The Greenhouse has over 100,000 members… Pretty amazing:

IBM Greenhouse members

Time (image from http://www.vectorelectronics.eu/s_allo.php)

32 slots

Mark McCormack:

1440 minutes per day …

480 minutes of sleep – 480 minutes of family time – 480 minutes of work … which gives 32 x 15 minute bites.

What’s the best and most profitable use of these 32 slots?

I’m going to start to plan my day in this way – allocating work to 32 slots each day… Divide and conquer!

(Quote via Michael Sampson)

Trust

Open Business: A new manifesto of trust in the workplace

As those who know me well would vouch, I’ve never been in this business for the technology.  Yes I love my gadgets and shiny objects of desire as much as the next person, but neither they nor speeds’n’feeds nor software feature lists get me out of bed in the morning.  It’s the possibilities for empowering real people to do real work in new, more productive and enjoyable ways that get my creative juices flowing and my backside out of bed at 5am in the morning.

After 22 years or so of a career that has seen those real people shift from being asked to do their work on DOS-based word processors to primitive forms of groupware running on green screens, to graphical office suites, via Lotus Notes to powerful new forms of social collaboration technology often accessed via mobile devices, it’s become clear to me that what the world does not need is yet another technology that promises to revolutionise the workplace.  We’ve had plenty of those over the years – some have seen success, far more have failed and disappeared without trace along the way.

The issue is that for most of the population, the way that we work as individuals, teams and organisations has fundamentally stayed remarkably consistent over the last couple of decades. We’re still asked to report to the office between 9 and 5 each day, we’re still expected to be at our desks for vast tracts of time working independently on our own curated lists of tasks and actions, to participate in regularly scheduled review meetings that seem to go on for ever without any work actually being done, whilst trying to ensure that our efforts and achievements are recognised by the line manager that we only see a few times a year and yet holds all the power when it becomes time for that annual review and pay discussion!

Yes, this is possibly an overly negative perspective – hopefully not all the above is representative of your own situation, but I would imagine that there is more than a grain of truth to at least one of two aspects of the paragraph above in most workplaces.

Future of WorkI’ve been giving a great deal of thought to the ‘Future of Work‘ in recent months, to what it means to be a knowledge worker within an organisation in 2014, and how that might change as we look forward through this decade to 2020 and beyond.  The rise of social, mobile and cloud technologies in recent years should mean that the workplace of 2020 will look and operate very differently to those that we are familiar with today.

Clearly the technology of now and the future will change how it appears, but that’s not what I think is important.  After all, we’ve been predicting self-driving cars, robot assistants and the like for decades (and that is exciting), but if the fundamental way in which live and work does not evolve for the better then there is little point to the innovations in technology.  What I (and many others) are looking for is a radical departure in the manner in which organisations are organised, leaders operate, teams collaborate and employees work and live.  Technologies come and go, but if a CEO still operates as if in an ivory tower, delivering read-only strategy documents via a corporate hierarchy dominated by middle-aged grey-haired men, emailed out to thousands of employees to be stored for eternity in folders that will be looked at, refusing to be held accountable (or indeed accessible) to their employees/partners/customers then we are no further forward.

In short, the ‘future of work’ has to look different to the reality of today.  Business has to be more ‘open’.  Open in terms of leadership, strategy, collaboration, information and knowledge sharing, relationships, responsibility, honesty, accessibility and most importantly, culture.  The tools we’re currently calling ‘Social Business’ will clearly play a part, but deploying yet another technology won’t make the blindest bit of difference without a overarching and hugely significant change of approach throughout the organisation, amongst every team and in every individual. [Luis Suarez covers this topic incredibly well, and this deck from the 90:10 Group is a great introduction.]

TrustNow clearly this kind of fundamental change takes time and a huge amount of effort and buy-in.  It will not happen overnight.  However, each of us can make a difference in our own work, the way that we deal with others, how we deliver on our commitments and so on.  That’s why this terrific post by John Wenger on Medium really made me sit up and take notice.  He asks the question ‘Can I trust you?’ and goes on to set out a new manifesto of trust:

Want me to trust you? Be a man (or woman) of your word; not a man (or woman) of words. Words don’t cut it. I’ve been lied to too many times. I want to see trustworthy action. Let’s instigate a manifesto of trust. It could say something like this:

  • I will strive to build and maintain good relationships with all.
  • If I make a promise or a commitment, I will strive to keep it;
  • If I break a promise or ‘drop the ball’ with my commitments, I will front up and be accountable and I will work to put things right.
  • No excuses, no blaming, no avoiding, no sweeping under the carpet.
  • No wriggling out of embarrassing conversations or trying to change the subject.
  • I will endeavour to be real with people; no obfuscation, no power games.
  • I will strive to develop myself: this means becoming more self-reflective and more open to others’ feedback about me.

In the realm of the networked workplace, I will trust you when I feel that you value my contributions and that you encourage others to do the same. I will trust you when you are constant. A psychologist friend of mine had a mantra which went, “The best predictor of future behaviour is past behaviour.” While I don’t agree with that entirely , there is some truth in it. My trust in you will build over time, when you are repeatedly and consistently authentic and trustWORTHY. We will not necessarily gain trust in each other simply because we have played some simplistic ‘trust games’ during our one and only staff training day.

Trust is one of the guiding principles of an Open Business – trust in one another, trust in our leaders and trust in the organisation.

So here’s my thought for today…

Do you trust the people you work with?  Can they trust you?  If not, isn’t it about time that we fixed this?

IBM Connections 5.0 Reviewer’s Guide published

To aid understanding of the features and abilities of the Connections product, IBM offers a Reviewer’s Guide – a document that details all the new features available in the latest release plus a comprehensive review of all the existing features.

Compiled by the IBM Connections product management team, this guide is a fantastic resource for existing and prospective customers, partners and anyone that is looking to learn more about the Connections solution.

The Reviewer’s Guide for IBM Connections 5.0 was published by IBM today:

With IBM Connections, IBM continues to provide flexibility for our customers and additional capabilities to provide a comprehensive comprehensive enterprise social software solution. In IBM Connections 5.0 we introduce major updates to features that allow for collaboration with external users, better attention management tools, and features allowing for easier management and viewing of files; all in addition to various update for all applications within connections.

This document will highlight all the new features available in this release as well as as comprehensive review of all the existing features.

This guide provides a summary of the applications that are included in IBM Connections 5.0. It is important to note that these applications can be used within an organization as needed—all together or as individual applications. Capitalizing on a flexible and modular architecture, organizations may start with a single application and add other applications when they choose. As in previous releases of IBM Connections, applications can be installed easily and naturally fit into the user experience, so it is easy to expand as needed.

It is available for download from Scribd or can be viewed below:

The rise of the Community Manager and the Collaboration Garden: an IBM Social Business Briefing

For our third IBM Social Business Briefing (aka Wicked Wednesdays) on 25th April at Royal Exchange in London, we felt the time was right to move the discourse from thought leadership and education to a more practical footing.

Of course, we still leveraged the superb network of independent thought leaders who we are lucky to have at our events BUT at this latest event we changed / evolved the format.

On this occasion I framed the discussion on the emerging role of the Community Manager (seen by some as the ‘rock star of the Enterprise’) and then actually used a collaboration platform to discuss, collaborate and innovate around the chosen topic.

The objective or rather the output of the debate was not simply to gain a better understanding of this subject (the fastest growing job role in Social Business) but also to create a job description for the role of Community Manager which could then be downloaded and iterated by users.

To help us achieve this we introduced attendees to the Collaboration Garden – a place where the Wicked Wednesday discussion and collaboration goes on in and around the physical events.

Once inside the Garden, users could not only record their opinions and raise questions but they could also examine (through the software) the potential responsibilities and attendant tools on hand to assist a Community Manager with user adoption – e.g. gamification and social media feeds.

The overall sentiment was that this was our best Wicked Wednesday to date and pointed the way forward for future events.  Weaving the use of the collaboration platform into the discussion from the start had a number of important effects:

  • It forced us all ‘to drink our own champagne
  • Individuals contributed to the Garden on-premise and remotely (including from Spain and Ireland)
  • It highlighted how much was lost when we simply spoke and did not record
  • Live collaboration in the platform allowed for multi-threaded conversations which themselves were profoundly different to normal conversation
  • Those who were not familiar with a social collaboration platform experienced it in a way that was far more refreshing and natural then the traditional demo mode

Wicked Wednesdays are all about sharing and collaborating with those who attend the latest trends, twists and turns in the Social Business journey. We take risks at this event; we have to in order to keep things fresh and real.  So it was particularly gratifying to hear that the new format was warmly welcomed by those involved.

We are planning our next Wicked Wednesday/Social Business Briefing to take place in June and in keeping with our need to innovate we are experimenting with moving the venue from the Royal Exchange to a comfortable, friendly, coffee shop in the city which should be fun.

For more information, feel free to contact us directly.

Collaboration Matters awarded IBM Platinum Achievement Award

Collaboration Matters were delighted and incredibly honoured to be publicly recognised by IBM last week at the Software Partner Marketing College at IBM South Bank in London.

The ‘IBM Software Platinum Achievement Award – Outstanding Marketing Achievement’ recognised those business partners that have marketed IBM’s and their own solutions in innovative and ground-breaking ways over the past year.  Finalists were Portal, Applicable, Barrachd and Collaboration Matters with Collaboration Matters taking the award.

Activities that were highlighted in considering the award included:

  • The Collaboration Diner at UC Expo (breaking the mould for trade show stands, by making the main event the conversation and contribution, not the sales effort)
  • Our ongoing series of Social Business Breakfast sessions (combining education and discussion on topics and issues relating to Social Business all through a combination of face-to-face and tool-based collaboration)
  • The Collaboration Garden (an exclusive invite-only Social Business platform allowing organisations and individuals to trial, learn, discuss and be educated around the power of Social within Business)

Key to all of these initiatives has been our focus on being ‘refreshingly different‘ – an IBM Business Partner like no other.  It is great to see IBM reward our efforts:

“Collaboration Matters are creating innovative solutions with IBM collaboration technology in response to the Social Business models more and more customers want to pursue.”
Mark Barrett, Business Unit Executive, Partner Sales, Software Business, UK and Ireland

Thanks must go to my colleague Rooven (who was behind the concept for the Collaboration Diner), to the team at Arrow ECS (our VAD) and to all those at IBM UK who have supported our efforts this year.

Warning for IBM Connections admins – change that Plugin keyfile password!

If you are running IBM Connections (any version) and have configured your SSL connect between the HTTP Server and WAS by importing the WAS SSL certificate into the Plugin keyfile (versus creating your own keyfile) and haven’t changed the default password, go do so now!

As this IBM technote states, the default password expires on April 26th, 2012:

The password to the plugin-key.kdb file that is shipped with WebSphere Application Server expires on April 26, 2012 US EDT. On distributed this file is placed in the [Plugin_Home]/config/{webservername} directory when a web server plug-in is configured on an installed web server.

CVE-2012-2162

If you are using the WebSphere Key and Certificate Management generated plug-in key store you are NOT affected. If, however, you are using the key store installed by default with the Web Server Plug-in for WebSphere Application Server and you have NEVER changed the key store’s password, then you must change the plug-in key store’s password, which removes the pending password expiration, to avoid a security exposure. Generally, as a best practice, IBM recommends you always change passwords from the default value to enhance the security of your system.

In reference to this specific security exposure concern, a majority of users do not reference the affected file at runtime and therefore are not impacted. However, a small minority of users must take action and use certificate management tools to remove the password expiration prior to April 26, 2012 to avoid experiencing this issue.

All the instructions for fixing this issue are contained in the technote, so take a read and make sure you’ve got this covered.

For the record, my advice when configuring a new Connections environment is to create a new keyfile with your own password, create a self-signed certificate or request a certified one from Verisign etc, then to import the certificates into WAS.  This is all detailed in the presentation that Rob Wunderlich and I gave at Lotusphere 2011.

Connections Desktop Plug-ins for Microsoft Windows now available

The IBM Connections Desktop Plug-ins Microsoft Windows is intended for Microsoft Windows users, adding social networking features and functionality from IBM Connections services, including Activities, Communities, Files, and Profiles.

The IBM Connections Desktop Plug-ins for Microsoft Windows provides the following features from Windows Explorer:

  • Upload files for personal use or to share with others
  • Upload files to a community or attach them to an Activity
  • Share existing Connections files with other users or with a community
  • Drag and drop files from your desktop to Connections Files or to a community
  • View and manage versions of your files
  • Add comments to files or recommend files
  • Edit and publish local drafts to Connections
  • Pin or follow folders and files for easier tracking
  • View business cards for people and invite them to your network
  • Easily access all Connections features via browser links

The IBM Connections Desktop Plug-ins Microsoft Windows supports:

  • IBM Connections 3.0.1.1
  • Microsoft Windows XP SP3 (32-bit), Windows Vista (32-bit), Windows 7 SP1 (32-bit, 64-bit)

I’ve been looking forward to this plug-in for a very long time, so I’m excited we have it for deployment today.  I know a number of customers that have been holding back on full-scale deployment of Connections until they have native access to Connections Files, so this will make a significant difference.  Hopefully the Mac version won’t be too far behind 😉

A fix for the Chrome header issue

Stuart blogged back in January about a known issue with downloading files from the files application using Chrome.

Connections Chrome issue

IBM do not officially support Chrome with Connections 3.0.1 – but our good friend & IBM Champion Sjaak Ursinus has devised a work around.

Header edit Content-Disposition ^(.*)creation-date=(.*);smodification-date=(.*);$ “$1creation-date=”$2″; modification-date=”$3″;”

ensure the mod_header module is uncommented httpd.conf

save and close the file.

Restart the HTTP server to pick up the change

Sjaak’s full explanation can be found on the Connections Forum.

[Originally posted on The Connections Blog by Sharon Bellamy where it had 16 comments]

An issue with custom themes and communities

I have had a PMR open for some time relating to a bit of a known issue with Custom themes and Connections communities.

There was an issue where you would create a custom theme :

commTheme1

In my case I also customised the coloured community themes also:

commTheme2

When clicking on forums, blogs etc the theme was stripped out displaying:

commTheme3

It appears there was a step missing from the wiki!!

http://www-10.lotus.com/ldd/lcwiki.nsf/dx/Defining_a_community_theme_ic301

Step 1.dd. Remove the file theme.css from the corporateTheme directory

In my case I had based my custom theme on the default theme and had used it as the default Community theme (which has no theme.css), so all communities with the default theme appeared correctly.

BUT, I had also lightly customised the coloured community themes – removing (or renaming) the theme.css from each coloured theme has resolved the issue.

Thank you mr Kieran Reid for investigating and confirming this was the issue.

[Originally posted on The Connections Blog by Sharon Bellamy where it had no comments]

Issue with Connections media widget timing out

Whilst building a new Connections environment for a customer we noticed a strange issue when uploading large files to the media gallery.

Connections media gallery timeout
Initially I thought it was related to the size of the file, but the same file will upload to the Connections files application without issue. There is very little errors in the SystemOut.log for the Connections server, so I was baffled.

A PMR was opened and the very helpful Mr Dave McCarthy was the PMR owner and we then started on our investigation. During the testing I noticed that the uploads appeared to timeout after 20 mins, exactly 20 mins. After some experimenting on 4 different Connections systems, it was confirmed that it was a timeout, regardless of the file policy or file library size. So not many people are on a internet connection that may take 20 mins to upload a video, but we know it is an issue as the customer I was building the system for confirmed this.

After much digging through existing PMRs Dave was stumped, so the PMR was passed up the chain to the development team. Who confirmed very quickly that their is a setting in the config.js which is buried in the news ear file which has a time out set to 1200 sec (20 minutes)!! Change this setting and as if by magic the timeout issue is resolved.

To change the time out setting do the following :

/installedApps//News.ear/qkr.lw.war/WEB-INF/pages/js/config.js

Find this section, (Line 450), that specifies some timeout values,
including one for upload that is set to 1200 sec (20 minutes):

timeout: {
request: 60,
update: 200,
upload: 1200,
retrieveFiles: 100,
userSearch: 200,
userTypeahead: 10
},

Raise the upload value from 1200 to what is needed to complete the large file upload on your connection speed and save the file. Then restart the News application to make the change effective. This file should be changed on the primary Connections node if you have more than one and sync the changes around the other nodes.

The Collaboration Diner – an Introduction

Anyone that follows me on Twitter will have seen that this week has been rather dominated by a single topic, The Collaboration Diner, and was brought to you by the hashtag #cbdiner 😉

So I hear you cry, what is The Collaboration Diner?

Many of you, especially those in North America, will be aware of a rather famous 1942 painting by Edward Hopper known as ‘Nighthawks‘:

Nighthawks

Painted soon after the attack at Pearl Harbour, the painting is thought to detail the alienation felt by those in a strange city, and the interaction, consolation and prospective relationships that could be found within the diners that were scattered on street corners throughout New York and other cities.  Diner customers could ‘network’ with the few others in the physical location they inhabited.

In 2003, Wired magazine commissioned comic artist Josh Ellingson to bring the diner situation up to date in the face of the emergence of free wi-fi, ubiquitous mobile devices and laptops:

Once again, the diner or coffee shop had become the place where relaxation and re-connecting could be combined, but this time connections were as likely to be with those hundreds or thousands of miles away.  In 2003, it was likely that this would have been via a relatively small group of friends or colleagues that the individual was in regular contact with.

Now bring the situation up to the modern day. Social and Mobile dominate. Almost every individual carries at least a mobile phone, most a smartphone and many more than one device. Multiple social networks are reachable from these devices, personal, professional and organisational sites provide a constant connection to friends, family, colleagues, customers and partners. Business is as likely to be carried out in a diner in a strange city as at one’s own desk.

However, the diner is still a useful metaphor for the  meeting place, for the clash of cultures, the possibility of accidents and incidents leading to passionate discourse and idea-sparking conversations.

Thus we have seen the birth of The Collaboration Diner brought to you by Collaboration Matters, with its first outing at the UC Expo show in London this past week.

Look out for future posts detailing what was involved, why it was such an innovative concept, and what discussions took place there.  One thing’s for sure, tech trade shows have never seen anything like it!