Lotus Domino Administrator 7 Help - Setting up Domino Web Access with Sametime

INSTALLATION

Setting up Domino Web Access with Sametime
Domino Web Access (DWA) integrates an instant messaging (IM) capability so that users can chat with their co-workers online and maintain an instant messaging list that shows the online status of other users. The instant messaging awareness feature also displays online status next to the names of people in mail messages, views and folders.

There are two versions of Sametime available for Domino 7.0, however these instruction apply to both version. References to the Sametime server also apply to installing the limited use version. The two versions are:

IBM Lotus Instant Messaging Limited Use -- the default instant messaging capability that is included in Domino 7.0.
IBM Lotus Sametime® -- the full instant messaging product that includes Web conferencing capabilities. It is available only if your organization purchased it.

For complete information on installing IBM Lotus Sametime, see the IBM Lotus Sametime 7.0 Installation Guide for your operating system, and the IBM Lotus Sametime 7.0 Administrator's Guide. To view or download the Sametime documentation, go to http://www.lotus.com/LDD/doc.

Configuration Notes

For Mozilla, you must have at least Sametime 3.1 to run instant messaging integration. Previous versions of Lotus Sametime are not supported in Domino Web Access on Mozilla.
When you install Domino 7.0, the stlinks files that are installed in the stlinks directory (for example, C:\st\domino\Data\domino\html\sametime\stlinks), are overwritten. If you have modified stlinks files (for example, if the Sametime server is configured for tunneling) these files will be replaced. When you are upgrade to 7.0, these files are backed up in a file called stlinks.sav. For additional information, see the topic Customizing STLinks files for tunneling or reverse proxy servers.
To access the Sametime server using a protocol that is different from the current Web page's protocol, use the NOTES.INI configuration setting iNotes_WA_SametimeProtocol.
Sametime integration with Domino Web Access is not supported with JRE 1.4.1.

Part 1 - Set up Domino Web Access on a Domino server
1. Set up Domino Web Access on a server by making the appropriate selections during server setup.

2. Register users with the Domino Web Access (DWA7.NTF) mail template.

Part 2 - Set up the Sametime server
If possible, the Sametime server should be in the same Domino domain as the Domino Web Access server. Follow the instructions in the IBM Lotus Sametime 7.0 Installation Guide to install and configure instant messaging on a dedicated Domino server in the same Domino domain as the Domino Web Access server.

If the Sametime server is in a different domain than your Domino Web Access server, follow the instructions in Setting up Sametime and Domino Web Access in different domains.

Make sure the Sametime server is functioning properly before proceeding. If you have multiple Sametime servers in a single community, also make sure that Domino single sign-on (SSO) is functioning properly between the servers. For complete information on working with multiple Sametime servers, see the IBM Lotus Sametime 7.0 Administrator's Guide, available on http:\\www.lotus.com/ldd/doc.

Part 3 - Create Connection documents
You need Connection documents for the Domino Web Access and the Sametime server if the Sametime server is not in the same domain as the Domino Web Access server. Also, if the Sametime server is in the same domain as the Domino Web Access server, but is not clustered with the registration server, you need a Connection document in order to replicate the Domino Directory.

Create Connection documents using the standard procedure, and include the information below:

On the Domino Web Access server:

Enter the Sametime server's name in the "Destination server" field. For example: Sametime/Acme.
Enter the Domino Web Access server's name in the "Source domain" field.
Enter the Sametime server's name in the "Destination domain" field.

On the Sametime server:

Enter the Domino Web Access server's name in the "Destination server" field.
Enter the Sametime server's name in the "Source domain" field.
Enter the Domino Web Access server's name in the "Destination domain" field.

Part 4 - Specify the Sametime server for Domino Web Access users
There are two ways to specify a Sametime server for Domino Web Access users. You can edit the Configuration Settings document for the Domino Web Access server, or you can edit the person document for each user who uses instant messaging.

Method 1

To enable instant messaging and set the Sametime server for all Domino Web Access users at one time, use the Instant Messaging settings in the Configuration Settings document, Domino Web Access tab. After you have done this, individual users can enable or disable instant messaging on their local Domino Web Access clients by setting a User Preference.

Method 2

If you choose not to enable instant messaging for all users, then you must edit the person document for each user who will use instant messaging:

1. From the Domino Administrator, click the People & Groups tab.

2. Select the Domino Web Access Domino directory, then click People.

3. Double-click a name to open the user's Person document.

4. Click Edit.

5. Enter the name of the Sametime server in the "Sametime server" field. For example, Sametime/Sales/Acme/UK.

6. Click "Save & Close."

7. Repeat Steps 3 though 6 for each person.

Part 5 - Set up Domino Web SSO authentication between the DWA server and IM server
Domino single sign-on (SSO) authentication allows Web users to log in once to a Domino or WebSphere server, and then access any other Domino or WebSphere server in the same DNS domain that is enabled for single sign-on (SSO) without having to log in again. In a multiple server environment, it is possible that one or more servers in your Domino domain are already configured for Domino SSO, and the Domino Directory already contains a Domino Web SSO configuration document. When you install Sametime, it creates a Web SSO configuration document called LtpaToken unless one already exists in the Domino directory. If an LtpaToken configuration document already exists, Sametime does not attempt to alter it.

For more information about Domino Web SSO authentication, see the topic Multi-server session-based name-and-password authentication for Web users (single sign-on).

Configure the Domino Web Access server for Web SSO

Complete the steps in this section if your DWA server is not configured for Web SSO, and you want to use the Web SSO document that Sametime created to configure it.

1. Ensure that the Domino Directory has replicated throughout the Domino domain since you installed Sametime.

2. Update the Web SSO Configuration document that was created when you installed Sametime (LtpaToken):

Open the Domino Directory and select the Configurations - Web - Web Configurations view.
From within this view, expand the list of Web SSO Configurations.
Open the "Web SSO Configuration for LtpaToken" document in edit mode. (If you are unable to edit the document, record the settings in the document, and then delete it and create a new one.)
Update these fields if necessary:

Domino Server Names -- make sure this field contains the name of all of the DWA servers and Sametime servers that should participate in Single Sign-on.

DNS Domain -- make sure this is the fully-qualified domain name of the DWA and Sametime server.

Click Save & Close.

3. Enable single sign-on and basic authentication in the Server document for the DWA server as described in Enabling single sign-on and basic authentication. When you update the Web SSO Configuration field, select LtpaToken from the list.

4. Ensure that the updates replicate to all of the servers in the domain.

Update Domino Web Access server Web SSO configuration

Complete the steps in this section if your DWA server is already configured for Domino Web SSO. You must add the Sametime server to your configuration:

5. Update your existing Domino Web SSO Configuration document.

Open the Domino Directory and select the Configurations - Web - Web Configurations view.
From within this view, expand the list of Web SSO Configurations.
Open the Domino Web SSO document that you are using for your DWA server in edit mode.
Update these fields if necessary:

Domino Server Names -- make sure this field contains the name of all of the DWA servers and Sametime servers that should participate in Single Sign-on.

DNS Domain -- make sure this is the fully-qualified domain name of the Sametime server.

Click save & Close.

6. Update the Server document for the Sametime server.

Open the server document.
Click Internet Protocols - Domino Web Engine, and select the Web SSO Configuration field.
From the drop-down list, select the Web SSO Configuration that you are using for the DWA server.
Click Save & Close.

7. Ensure that the updates replicate to all of the servers in the domain.

Although Domino SSO is the preferred authentication method, you can continue to use secrets and tokens authentication databases, if you are already using them. For example, if any of the servers in your domain is configured for something other than multiple server SSO, (single server SSO for example) you must use secrets and tokens authentication. For information on setting up Secrets and Tokens authentication, see the topic Setting up Secrets and Tokens authentication for instant messaging in Domino Web Access.

Part 6 - (for mixed environments only) Copy the SametimeApplet folder on the Domino Web Access server to the Sametime server
For a mixed environment, in which the users' mail files are based on the INOTES5.NTF mail template, and they are using Domino Web Access Chat, you must copy the SametimeApplet folder from the Domino Web Access server to the same location on the Sametime server. On the Domino Web Access server, the applets are located in the <data directory>\domino\html directory.

Note Chat is the Domino Web Access feature that provided awareness and allowed people to chat with co-workers in Domino Web Access prior to 6.5.2. To use Chat, you must also lower the value of the instant messaging security setting in the SAMETIME.INI file to allow a connection from an older client. For iNotes5 and iNotes6 mail templates, use VP_SECURITY_LEVEL=20. For more information on specifying the minimum security level, see the IBM Lotus Sametime 7.0 Installation Guide (available on http://www.lotus.com/LDD/doc), which details this setting.

Part 7 - Verify that instant messaging works with Domino Web Access
1. Make sure that replication is complete, the Person documents exist on the Sametime server, and that the updated Web SSO document exists on all of the servers that will participate in single sign-on..

2. If you have not already done so, follow the instructions in the IBM Lotus Sametime 7.0 Installation Guide to verify that instant messaging is working properly before you test whether it is working with Domino Web Access clients.

3. Launch Domino Web Access in a browser. In any view or document in which online awareness appears, click the Active status icon of the person you want to chat with to test the instant messaging connection.

Note If the instant messaging status does not appear next to the Welcome username text in Domino Web Access, check the user's Person document in the Domino directory. If you configured the Sametime server by populating this document, make sure the "Sametime server" field is correct (Basics tab, under Real-Time Collaboration).

Customizing STLinks files for tunneling or reverse proxy servers

Setting up Sametime and Domino Web Access in different domains

Setting up Secrets and Tokens authentication for instant messaging in Domino Web Access

Troubleshooting Sametime in Domino Web Access

Using Domino Off-Line Services (DOLS) and Domino Web Access

Glossary

Help on Help

All Help Contents

Glossary

Help on Help

All Help Contents