Technical documentation of Application Server update project. See main infrastructure information and some tips on services and scheduler.

1. Networkplan

diag 2804d88ba96bc1cbf62250ae9d99f92a

2. Conditions testing

2.1. Software Updates

Hello Froscon. Here we check the VERSION from our variables doc. When we update the main document, it can happen that we adjust the version numbers, then new generated documents show this warning.

Update needed!

3. Infrastructure and Software

Used operating system on all servers is Windows Server 2016 Datacenter Edition.

3.1. Cool Project 6.0 - new enviroment

Hostname IP Function

grpkiwi01.example.org

10.2.105.47

ApplServer, Webserver, Cool Project

grpkiwidb01.example.org

10.2.105.48

DB, TDI, Shared Directory

3.2. Installed Applications

3.2.1. Application Server

  • Application Server Network Deployment 8.5.5 + Fixpack 13

    • D:\ABC\ApplSrv\ApplicationServer

  • Application Server Supplement 8.5.5 + Fixpack 13

  • Application Server Customization Toolbox 8.5.5 + Fixpack 13

    • D:\ABC\ApplSrv\Toolbox

  • Java SDK 8.0.5.6

  • Application Server Plugins 8.5.5 + Fixpack 13

    • D:\ABC\ApplSrv\Plugins

3.2.2. Webserver

  • ABC HTTP Server 8.5.5 + Fixpack 13

    • D:\ABC\HTTPServer

3.2.3. Datenbase Server

  • DB 1333.1 FP3 ESE

    • D:\ABC\SQLLIB

    • Datenbases: D:\ABC\NODE000

3.2.4. Directory Synchronisation

  • Directory Synchronisation 7.1.1 FP8

    • D:\ABC\DS\V7.1.1

  • Working Dir

    • D:\ABC\DS\workspace

3.2.5. Cool Project Docs Viewer

  • Cool Project Docs 2.0 CR3 IF002

    • D:\ABC\CoolProjectDocs

Voraussetzung
  • Python 2.7.15 64 Bit

    • D:\ABC\Python27

4. User and Passwords

User Passwort Funktion

dbadmin

SecurePassword123

DB Administrator

user

SecurePassword123

DB Benutzer Cool Project

ldapadmin

SecurePassword123

Cool Project Admin, LDAP User

CN=ldap,OU=Gruppen,DC=example,DC=loc

ldap

LDAP Bind User

webadmin

SecurePassword123

Webserver Config

4.1. Service User

Services and cronjobs (Scheduluer) run as example\ldapadmin. Exception is database backup, which is running as dbadmin.

Service User

ABC HTTP Server

example\ldapadmin

ABC HTTP Admin

example\ldapadmin

ABC Application Server - CellManager

example\ldapadmin

ABC Application Server - CnxNode01

example\ldapadmin

5. Backup

Both servers need to be backuped on a daily basis! Each day at 9:00pm there are dumps written to d:\backup\, include this into your snapshots or file backup!

6. Server Restart

After Update installation always start the database server grpkiwidb01.example.org first! The application server will not start without the databases.

7. Appendix

7.1. Customizing

7.1.1. Layout and CSS

customization\themes\Theme\custom.css
/*
 * Add the replacement Logo to
 * customizationDir/javascript/com/ibm/lconn/core/styles/images/logo.png
 * customizationDir/javascript/com/ibm/oneui3/styles/imageLibrary/Branding/Logos/ibmLogoOpaque16.png
 */

 body, html {
	 height:100%;
	 background-color:#fff;
	 }
.lotusui30 .lotusBanner .lotusLogo .lotusAltText {
 display: none;
}

.lotusui30 .lotusBanner .lotusIBMLogo {
 background-image: url("/com.ibm.lconn.core.styles/images/kiwi.png");
 background-position: 0px 0px;
 height: 20px;
 width: 59px;
}

.lotusui30_body .lotusFrame {
    background-color: #fff !important;
}
.lotusui30_layout .lotusColLeft {
    background: #fff !important;
}
customization\themes\Theme\applications\blogs.css
.lotusui30 .lotusTable h4 {
    margin: 0;
    padding: 0;
    font-size: 1.3em !important;
}

.lotusui30 .lotusTable td.lotusFirstCell, .lotusui30 .lotusTable th.lotusFirstCell {
    padding-left: 10px;
    padding-bottom: 20px;
    border-top: 2px solid #4178be;
}

7.2. Configuration

7.2.1. Windows Server 2016

During installation Windows Defender slowed down the whole process. That’s normal, because it likes to scan all *.jar files. So we deactivated it during the installation process.
Deactivate IPv6

All network cards have disabled IPv6, except Loopback! We used https://support.microsoft.com/de-de/help/929852/guidance-for-configuring-ipv6-in-windows-for-advanced-users, so if you need to activate again, use the script!

Activating IPv6 need extended tests, the product does not officially support it!

7.2.2. Application Server

Java Heap Size
Server (JVM) initialHeapSize (in MB) maximumHeapSize (in MB)

CellManager01 - dmgr

384

1024

Node01 - UtilCluster_server1

2560

2560

Node01 - Tools_server1

512

1024

Node01 - InfraCluster_server1

2560

2560

Node01 - AppsCluster_server1

2560

1024

Node01 - Conversion_server1

2506

2506

Node01 - nodeagent

512

768

Node01 - Viewer_server1

2506

2506

Node01 - PushCluster_server1

2560

2560

Security
Authentication

Authentication is configured to AD. Primary LDAP is w8d1746.example.org and failover dc05.example.org.

7.3. Skripts

7.3.1. Remove user from Community

the script uses hardcoded filename for mail address list.
removeUsers.py
import os
import sys

myfile = open('D:/install/mailaddresses.csv', 'r')

memberlist = []
execfile("communitiesAdmin.py")

for line in myfile.readlines():
	memberlist = [line]
	try:
		CommunitiesService.removeMembersFromCommunityByEmail('example-aktuell', memberlist)
		print memberlist[0]
	except:
		print 'Error removing ' + memberlist[0]

Folling command removes the users:

cd D:\ABC\ApplServer\AppServer\profiles\Dmgr01\bin
wsadmin.bat -lang jython -username ldapadmin -password <password>

execfile("removeUsers.py")
addUsers.py
import os
import sys

myfile = open('D:/install/mailaddresses.csv', 'r')

memberlist = []
execfile("communitiesAdmin.py")

for line in myfile.readlines():
	memberlist = [line]
	try:
		CommunitiesService.addMembersToCommunityByEmail('example-aktuell', 0, memberlist)
		print memberlist[0]
	except:
		print 'Error removing ' + memberlist[0]