IBM Client Self Assist

Problem:

How to reset multiple users' password at one time in Connections Cloud

Diagnostic:

Currently there is no mechanism to reset password of multiple users in one click.  So answer to your question is No. Customer can submit enhancement request for the same at the below link

https://connections.ideas.aha.io/ideas?project=IDEACNCTNS

Workaround:

there is way to change password , Customer can use update operation in LLIS to change user's password.

Users email will be notified that the account has been updated \. Please note the admin who changes the password via llis need to inform about the password to the users.

Below CSV file format can be used to change the password ,

emailAddress,action,password

<<Email-id>>,update,<<user new password>>

e.g.

emailAddress,action,password

check_llispass@mailinator.com,update,passw0rd2

Problem:

When upgrade Connections db, there is warning like insufficient privileges.

Diagnostic:

Connect to related database, use select * from syscat.dbauth

It can be seen that the Admin user is changed to some other user.

Cause:

It is found that customer changed default DB2 admin user from Administrator to some other user else. This cause

Solution:

Inside the Connections upgrade sql scripts, find " Connect to <DB_NAME>", then modify it to " Connect to <DB_NAME> user <User_NAME> using <USER_PASSWORD>. "

Then re-run the scrips.

Problem:

It is found that when running sync_all_dns directly, or run it via Windows task, when sync_all_dns is done, the windows is not closed automatically.

Environment:

Windows

Solution:

1. Create a bat file with below content:
@echo off
call D:\IBM\Wizards\TDIPopulation\win\TDI\sync_all_dns.bat
exit
Then sync_all_dns finished, window will be closed.

2. Run this bat file instead of sync_all_dns.

Problem:

Docs works fine.

It is found that some documents fail to be opened in Docs with warning "Document cannot be opened. The document extension is valid, but the content cannot be read, because it is either corrupted or encrypted."

Environment:

Docs 2.0 CR3

Cause:

This issue may cause by the document is created by 3rd party software(non-Microsfot Office). And these software may have their own functional code that Docs doesn't support.

Solution:

Try to open issue document in MS Office and save as a new document, then re-upload to Docs, or copy content out from issue document and paste into Docs. That will resolve this issue.

Problem:

In some scenario, due to "Allow others to share these files" is selected by default, it is found that  all files that uploaded are all can be shared by the user who got shared with.
For some customers, it is NOT the way they want it be.

They need it  work like "DO NOT allow others to share these files".

Environment:

Connections 5.5 or 6.0

Diagnostic:

In Connections Files database, Media table, there is a column named "SHARED_VIRAL".  this column contains whether the file is "Allow others to share this file" or not.

If it is "1", then it is "Allow others to share this file".  If it equals to "0",  then it is "DO NOT allow others to share this file"

Solution:

[IT IS HIGHLY SUGGESTED THAT NOT PERFORM THIS ACTION UNLESS YOU HAVE NO OTHER WAYS ]

Backup your Files database first in case you need roll back.

Then, run SQL update command to update SHARED_VIRAL column value. If you want "Allow others to share this file", then update it to "1". If you want  "DO NOT allow others to share this file", then update to "0"

Problem:

It is found that after upgrade from old major version(like 5.0 or 5.5) to latest version of Connections (6.0), Profiles page shows nothing when edit "My Profile"

Environment:

Old Environment: 5.5, or 5.0

Diagnostic:

There is no errors in logs on Web page.

Cause:

One potential cause (most seen) is old customization directly used in new version of Connections.

Solution:

Shut down Connections Server and remove(backup it first) customization, then test and see if Profiles page works.

Relevant links:

https://www.ibm.com/support/knowledgecenter/SSYGQH_6.0.0/admin/customize/c_customize_overview.html

Problem:

When doing upgrade to CR3 ifix 004. Customer found the Conversion upgrade failed. Docs/Viewer service installed successfully.

Environment:

CR3 ifixes

Diagnostic:

Review iFixInstall.log, it shows:

2018-11-22 10:40:06,062 INFO DocsConversion update failed!
2018-11-22 10:40:06,062 DEBUG Traceback (most recent call last):
  File "./applypatch.py", line 61, in update_product
    restart(target_buildinfo)
  File "./applypatch.py", line 258, in restart
    update_conversion_binary()
  File "./applypatch.py", line 426, in update_conversion_binary
    raise Exception(result)
Exception: 用 SOAP 连接器连接到节点 DMNode01 上的进程“dmgr”；进程的类型为：DeploymentManager
WASX7303I: 已将下列选项传递至脚本编制环境，它们将作为参数存储在 argv 变量中：“[remote_install_a_version, localhost.localdomain, [\'localhost.localdomain\'], 8, IBMConversionCluster]”。
Job 154123476079012573 failed!

This means WAS JOB failed while installing Conversion.

Cause:

Usually, WAS Job would fail due to timeout or other issues.

Solution:

There is a way to install/upgrade Conversion without job manager.

Please check the section Update Conversion Without Jobmanager to upgrade Conversion service. (This will not imapct Docs/Viewer service which got installed sucessfully.)

PatchGuide.pdf|View Details

Problem:

After installing Docs, customer found that they can't edit or preview documents.

Environment:

Docs 20CR3

Diagnostic:

Get the Viewer Systemout.log, Docs Systemout.log, Conversion systemout.log

In Viewer server, it shows:

[11/16/18 14:39:35:746 CST] 00000195 TextDocumentS E   CLFAF409W: Viewer conversion fails.Conversion error occurred. Error code:1214 Error message:Server returned unexpected status Document id:b0c456925b71234a9f6ed96bb73c3303 Document mimetype:application/msword Document version:1
[11/16/18 14:39:35:747 CST] 00000195 Job           E   Request on IBM Docs Component :  request 4dmEZ7IGghrOp9xHcU+5qWAS3vVB1g/nnAjLnTG9nBUJsxrwCLtyNHMMb1Riq5gE response 4dmEZ7IGghrOp9xHcU+5qQQoSETEXjanwVw3lsQu8N1234GLKntusSSyz5Xry3rd with information { problem_id 4dm1243ghrOp9xHcU+5qWAS3vVB1g/nnAjLnTG9nBUgGRyJCOAf/WYbCpF24kxc5YFmz91234wcPv8XYHt19WZEKWSjceLPMR9Wke2HoSwgzRTia8RB4PISLCUHEug+ , JobExecutionException com.ibm.concord.viewer.job.exception.JobExecutionException .}

In Conversion systemout.log, it shows:

[11/15/18 22:13:02:500 CST] 000000e7 ConversionSer W   CLFAE525W: Convert from ${VIEWER_SHARE}/preview/103/1016/80aa2ac1-3c59-4111-8301-78852c57f845/1537944399185/80aa2ac1-3c59-4220-8301-78852c57f845/contentfile(application/vnd.openxmlformats-officedocument.spreadsheetml.sheet) to ${VIEWER_SHARE}/preview/103/1016/80aa2ac1-3c59-4111-8301-78852c57f845/1537944399185/80aa2ac1-3c59-4220-8301-78852c57f845/pictures(application/gif). Request on IBM Docs Component :  request 4dmEZ7IGghrOp9xHcU+5qTdWKht1dnhavXPyje0wRLeU/ZBpRM3Jgjhzqy7kTPGc with information {Conversion is cancelled because the target folder does not exist.
Pls check the shared storage for Document Format Conversion Server. If it is a mounted NFS/CIFS directory on Document Format Conversion Server, make sure the mount is working

This error indicate that Conversion service can't find ${VIEWER_SHARE} directory

Solution:

Go to WAS Admin Console, Websphere Varaiables, find out ${VIEWER_SHARE} and update  to correct address. They sync all nodes, restart Docs server.

Please also make sure ${Docs_SHARE} ,  ${VIEWER_SHARED_DATA_ROOT}, ${DOCS_SHARED_DATA_ROOT} are mapped to correct directory.

Problem:

How to embed a Video from Connections Files into Wikis

Environment:

Connections or Connections Cloud

Cause:

So far, Connections Files doesn't have shared video as HTML Code function.

Solution:

To embed a Video from Connections Files into Wikis, you can follow below steps:

1. Go to Connections Files, open the Video you want to embed into Wikis. (Please make sure the Video you want to Embed has been shared or has proper access right  )

2. Move Mouse to Video and right Click "Inspect Element"

3. In the pop out debug console, you will see video info like below:

4. Copy HTML Code out by move Mouse to that code, right click Copy -> Outer HTML

5. Paste copy content into a notepad and modify it:

6. Leave the text only same as see in Debug Console in Step 4. Remove others.

7. In this case. You must give a value "none" to autoplay, otherwise, it plays with both front side and background side. And you can add Width = , Height =  to control video window size.

8. When text is ready, copy it and go to Wikis side, Edit the wiki page you want to embed this Video. Click HTML Source view, paste the code into it:

9. Save and you can see the video from Connections File is embedded into Wikis

Note: all video control is with Right Click: Play, Pause, Mute... etc.

Reference:

Please check attachment document with screenshot in it.

How to embed a Video from Connections Files into Wikis.docx|View Details

1. PeopleDB had recorded the last login date/time for every user.

Connect to the PEOPLEDB, find the table named "PROFILE_LAST_LOGIN", there is a column named "PROF_LAST_LOGIN" which records the user' last login time .Refer to following snapshot.

2. Steps.

1) Create a new notepad, copy the following sample code to the notepad, save it as a .sql file,such as "sample.sql". If you want to rename the output file or put it into another directory, modify "E:\test.sql" to what you want.

Connect to PEOPLEDB;
EXPORT TO "E:\test.sql" OF DEL SELECT
EMPLOYEE.PROF_DISPLAY_NAME as NAME,
EMPLOYEE.PROF_MAIL_LOWER as EMAIL,
EMPLOYEE.PROF_LAST_UPDATE as LAST_PROFILE_UPDATE,
PROFILE_LAST_LOGIN.PROF_LAST_LOGIN as LAST_LOGIN
FROM EMPINST.EMPLOYEE as EMPLOYEE
INNER JOIN EMPINST.PROFILE_LAST_LOGIN as PROFILE_LAST_LOGIN
ON EMPLOYEE.TENANT_KEY = PROFILE_LAST_LOGIN.TENANT_KEY
WHERE EMPLOYEE.TENANT_KEY IN ('00000000-0000-0000-0000-040508202233')
AND EMPLOYEE.PROF_STATE = 0
AND EMPLOYEE.PROF_KEY = PROFILE_LAST_LOGIN.PROF_KEY;

2) Copy this SQL file to the machine where DB2 is deployed. such as "E:\sample.sql".

3) Launch the DB2 Administrator Command Window as below.

Then run command "db2 -tvf E:\sample.sql" on the pop command window. The command output is as below:

4) Then open "E:\test.sql" via notepad, the sample information is as below.   The 1st column is user name, the 2nd is email address, the 3rd is the last modify date/time of user's profile, the 4th is the user's last login date/time .

***********************************

"User01","user01@docscn.com","2018-07-27-11.45.54.680000","2018-11-05-08.10.53.498000"
"User02","user02@docscn.com","2018-07-27-11.45.54.852000","2018-10-16-08.52.23.918000"
"James harden","jamesharden@docscn.com","2018-07-27-11.45.54.414000","2018-11-12-08.50.13.327000"
"Lebron James","lebronjames@docscn.com","2018-07-27-11.45.54.539000","2018-07-26-12.45.12.617000"
"Kobe Bryant","kobebryant@docscn.com","2018-11-08-14.39.25.826000","2018-11-09-08.51.14.306000"

***********************************

Note that This sample code is for DB2 run on Windows.and It is provided with no warranties, assumptions, or liabilities, and you use it at your own risk. Don't call IBM support if you have a problem with it. :-)

Problem:

Connections used to work fine.
However, after restarting Server including host OS, Connections doesn't work and lots of features thrown errors:
An error occurred when creating the script tags for the page, you may missing one or more resource bundles from your provision directory.

Environment:

Connections 5.5 or 6.0

Diagnostic:

Check and see if the Provision folder and see if it can be accessed.

You can find Provision directory in Websphere variables: CONNECTIONS_PROVISION_PATH  in Websphere Admin Console.

Cause:

This issue usually indicates that your Connections server fail to communicate with Provision folder.

Solution:

Re-map your shared directory to your Connections server and restart Connections server.

Note:
1. From IBM Docs 2.0 CR3, It supports customer to deploy Conversion server on Linux.
2. This article is for customer who want to add Docs cluster node on Linux.
3. This article is also for customer who want to reinstall Docs cluster node, e.g, Linux OS corrupt. For this case, customer need to remove node on DMGR first, then install Linux and WAS.

Detail Steps:
1. From Directory {DMGR_Install_Root}/config/cells/{Cell_Name}/IBMDocs-config/,  for files concord-config.json, viewer-config.json and conversion-config.json, you can find following script, please modify "build_version" from  "2.0.0.3" to "2.0.0" manually.
"build-info": {

    "build_version": "2.0.0.3",

    "build_description": "IBM Connections Docs 2.0.0",

    "ifix_version": 25,

    "product_name": "IBM Connections Docs",

    "build_timestamp": "20170331-1216"

  }

Note: this is a defect, will be fixed in 2.0CR3ifix005. In other word, if the target version of Docs server is 2.0CR3ifix005 or higher, you do not need to do this step.

2.Add Docs, Conversion and Viewer Nodes, follow the link below:
https://www.ibm.com/support/knowledgecenter/SSFHJY_2.0.0/deploy/add_new_nodes_into_connections_docs_clusters.html

It has the following description:
To add servers into installed IBM Docs for workload balancing, for Docs and Conversion servers you need to add new cluster members into the cluster, and then run install_node.bat or install_node.sh on the new added machines. For Viewer and Proxy servers, you only need to add new cluster members.

Note:
1). To install node for Docs server on Linux, you need to run install_node.sh, this file is located in Docs2.0 installation package for Linux, e.g,  Docs2.0/IBMConnectionsDocs-repo/native/DocsApp/installer.
2). To install node for Conversion server on Linux, you need to run the install_node.sh, this file is located in following directory of Docs2.0CR3 package. You need to copy the file [CR3_Package]/DocsConversion_Linux_2.0.0.zip to the Conversion server you just added, then run the install_node.sh.
IBMConnectionsDocs_2.0_CR3\DocsConversion_Linux_2.0.0.zip\installer\install_node.sh

3. If the target version of Docs server is 2.0CR3, the whole process of adding node is completed. If the target version of Docs server is higher than 2.0CR3, e.g 2.0CR3ifix005, you need to run upgrade_node.sh, this file is located in following directory of Docs2.0CR3ifix005 package,
IBMConnectionsDocs_CR3_iFix005.zip\DocsConversion\docs_remote_installer.zip\installer\upgrade_node.sh

About the parameters when you run upgrade_node.sh, you can refer to following link:
https://www.ibm.com/developerworks/community/blogs/0c3c692f-457c-413f-a4b0-a21f4a34136e/entry/How_to_add_Add_Docs_Cluster_Node?lang=en_us

4. Do the same from Step1 to Step3, if you want to add more nodes.

Use Admin to login below URL:
https://<server>/connections/config/highway.main.gatekeeper.tiles
In left, click "Gatekeeper",  edit option FILES_ENABLE_FOLDER_ZIP_DOWNLOAD_FOR_NESTED_FOLDER, set it to True.

No need to restart server to take effect.

When you open a folder of Connections files again, you can see "download this folder" option. Click it, then you can download all files under this folder.

Note:
a. "download this folder" can download files under this folder only, can not download files under it's sub-folder.
b. after enable this setting, if the number of files that needed to be downloaded is large or multiple users download files simultaneously, it may cause server performance issue.
c. not recommend to modify other settings of Gatekeeper.

Problem:

It is found that when there are huge size(i.e.: 500G) of documentations in Connections, Index would not be successfully built or updated.

Solution:

1. Increase timeout for seedlist requests: https://www.ibm.com/support/knowledgecenter/SSYGQH_6.0.0/admin/admin/t_admin_search_set_seedlist_timeout.html
2. Reduce Pagesize in Search-config.xml, reduce it from 500 to 100.  <crawlerSettings maxCrawlerThreads="3" pageSize="500" persistenceLocation="${CRAWLER_PAGE_PERSISTENCE_DIR}"/>
3. Sync all nodes. Restart Connections.
4. Run IndexNow or re-create Index to build index https://www.ibm.com/support/knowledgecenter/SSYGQH_6.0.0/admin/admin/t_admin_search_one_off_tasks.html or https://www.ibm.com/support/knowledgecenter/SSYGQH_6.0.0/admin/admin/t_admin_search_create_index.html

Problem:

Preview is working, but when edit documents such as ppt or xlsx, it failed to be opened in Docs with error "Conversion service is not available"

Environment:

Docs 2.0 CR3

Diagnostic:

Review logs of Docs server. It is found that:

[18-9-25 23:30:29:037 CST] 000000f2 DocEntitlemen W error when executing SQL: SELECT * FROM "CONCORDDB"."DOC_ENTITLEMENT "WHERE" LEVEL_NAME " =?

                                com.ibm.db2.jcc.am.SqlSyntaxErrorException: The statement failed because the authorization ID does not have the authorization or privilege required to perform the operation.Authorization ID: "LCUSER".Action: "SELECT".Object: "CONCORDDB.DOC_ENTITLEMENT"..SQLCODE=-551, SQLSTATE=42501, DRIVER=4.21.29

Check j2c alias in WAS Admin console. It is mapped to LCUSER.

Per Docs installation documentation, they need to use docsuser.

https://www.ibm.com/support/knowledgecenter/SSFHJY_2.0.0/deploy/creating_dedicated_db2user.html

It is confirmed that customer changed the related SQL to let LCUSER get granted instead of docsuser.

Review the appGrants.sql that used to grant access to LCUSER.

It is found that only half application db granted by LCUSER like below:

GRANT CONNECT ON DATABASE TO USER DOCSUSER@

GRANT INSERT,UPDATE,SELECT,DELETE ON "CONCORDDB"."USERPREFERENCE" TO USER LCUSER@

GRANT INSERT,UPDATE,SELECT,DELETE ON "CONCORDDB"."DOCEDITORS" TO USER LCUSER@

...

GRANT INSERT,UPDATE,SELECT,DELETE ON "CONCORDDB"."PRODUCT" TO USER LCUSER@

GRANT INSERT,UPDATE,SELECT,DELETE ON "CONCORDDB"."HKTASK" TO USER LCUSER@

GRANT INSERT,UPDATE,SELECT,DELETE ON "CONCORDDB"."PRODUCT" TO USER DOCSUSER@

GRANT INSERT,UPDATE,SELECT,DELETE ON "CONCORDDB"."HKTREG" TO USER DOCSUSER@

...

GRANT INSERT,UPDATE,SELECT,DELETE ON "CONCORDDB"."CUSTOMER_CREDENTIAL" TO USER DOCSUSER@

This is totally incorrect as there is only one user can be mapped to docsJAASAuth in J2C Authentication.

Solution:

Re-edit this appGrants.sql and re-set to docsuser. Then, follow below documentation to create a docsuser in Linux and add it to related db2admin group.

https://www.ibm.com/support/knowledgecenter/SSFHJY_2.0.0/deploy/creating_dedicated_db2user.html

After that, Run appGrants.sql.

Change docsJAASAuth in J2C Authentication of WAS Admin console.

Synchronize node and restart all Docs server.

Problem:

After restart Docs server, it is found that most of spreadsheet document can’t be opened in Docs. This function used to work fine.

In Conversion logs, it shows:

[9/13/18 11:07:02:669 CST] 000000c5 Job           E   /opt/IBM/docs_data/job_cache/default_org/job_cache/123/411/124318145/4cccf7021ccaddd86c0aed79280edd7/error.json

                                 com.ibm.concord.job.exception.JobExecutionException: com.ibm.concord.platform.exceptions.ConversionException: Exception occurred with error code: CLFAD1209, message: The file extension mismatches with the content of the document, and additional data: {"target":"\/opt\/IBM\/docs_data\/draft\/external.rest\/default_org\/draft\/123/411/124318145/4cccf7021ccaddd86c0aed79280edd7\/concord","correctFormat":"unsupported null","detail_msg":"Invalid document type: asFormat=unsupported null","jobid":"2a0fcccc-79d0-4cfd-952e-7cc97969c5fe","source":"\/opt\/IBM\/docs_data\/draft\/external.rest\/default_org\/draft\/307\/450\/169118145\/temp\/673548f1-a1db-4ed4-883e-95a8eaaacd82\/contentfile.xlsx","native_err_code":415}

               at com.ibm.concord.job.object.ImportDraftFromRepositoryJob.exec(ImportDraftFromRepositoryJob.java:181)

Environment:

2.0 CR3 IFIX004

Diagnostic:

Enable Trace for Conversion server , set com.ibm.symphony to FINEST.

In trace, it shows:

[9/13/18 15:24:52:665 CST] 0000011c MSOfficeOOXML 2   The source file is not a valid zip file.

This info indicate that there is something wrong with source file.

Run test against:

media_meta_url and media_get_url (these two URL can be found in concord-config.json file)

Through test, it is found that meta can be opened, but fail to download from file repository via media_get_url

Cause:

Docs uses API to get files from 3^rd party file repository, when get the source file failed. It would cause Docs to fail to open the specific format document.

Solution:

Ask 3^rd party file repository engineer to fix their repository issue and make sure file can be download via API and the downloaded zip file can be opened without any issues. Then, Docs shall work.

Problem:

In IBM Connections 6.0 CR2 or previous version, Rich Content widget misses its title if the viewer is anonymous or a member of the community.

Environment:

6.0 CR2 or previous 6.0 version.

Cause:

This is a known issue caused by “the h2 text would be hidden unexpectedly”

Solution:

Upgrade to 6.0 CR2 if your Connections environment is not at the this level.

Then, follow below step to enable communities-rich-content-widget-show-title-to-members :

1. Use a user who has  Common Admin Role to login to Connections page(for example Homepage). If you don’t know how to add a user to Admin Role for Common, please refer below documentation:

              https://www.ibm.com/support/knowledgecenter/SSYGQH_6.0.0/admin/admin/t_create_admin_blogs.html

2. Then, access below URL:

              http://<ServerName>/connections/config/highway.main.gatekeeper.tiles

              (Note: If you have authentication issue, try to add Admin Role of Homepage,Common and Community to the same user, then try to access gatekeeper page)

3. On Gatekeeper page, find “communities-rich-content-widget-show-title-to-members” and click Edit.
4. Set the value to “True”, then save the option.
5. Restart Common, Homepage and Communities app to let the new setting takes effect.

Problem:

In Some scenario, after remount Network Shared Drive. Docs can preview documents but fail to edit it. It shows "Docs service is not available" on the web page, "com.ibm.concord.draft.exception.DraftDataAccessException: Exception occurred with error code: CLFAD1601, message: cannot access the draft data, and additional data: {"detail_msg":"Read or write draft meta file error","draftDesc":"default_org 12343314-293b-4ed1-92bb-4444228d7a2e E:\\cdata\\docs_data\\draft\\default_org\\draft\\912\\251\\12343314-293b-4ed1-92bb-4444228d7a2e}" on server side.

Environment:

Docs 2.0 or higher version.

Cause: (if applicable)

Review Network Shared Drive privileges, you can see that the authentication had been changed between two mountings. This cause Docs fail to open related folders on network shared drive. 

Solution:

There are two temp solution:

1. Download the issue document, then delete the original one in Connections Files. Re-upload document back to Connections Files.

2. Go to docs_data on Network shared drive. use Document ID to locate the specific folder for this document, then, delete msg.json ,meta.json of inside that folder.

Problem:

It is found that if the content is more than around 600  Chinese characters in an Activity description of an Entry, it failed to be saved.

Environment:

Connections 5.0, 5.5, 6.0

Cause: 

Activity description will be saved into ACTIVITIES.OA_NODE table Description column. The default length for this column is 2048 bit. Which mean, it can store 666 Chinese characters at the most. If including punctuation and spaces, it would save less Chinese characters.(one Chinese Characters will take 3 bit when Language is set to GTF-8)

Solution:

It is suggested not to input so many characters. If customer has such requirement, they can consider to add details to a document then attach to this Entry.

Problem:

During the maintenance, customer found that their CCM server fails to start.

There is no change to their servers.

Environment:

Windows 2012

Cause: 

CCM server Java process hangs in the back end, and fail to be shut down. And it also cause new CCM process fail to start.

Solution:

Kill the Java process or reboot hosting OS will resolve this issue.

活动名称

IBM智慧服务开发大赛

活动规则

报名截止日期：2018年7月31日

项目时间 ：2018年7月31日至2018年10月31日 

1. 以团队方式报名，每个团队2-4人，并选出队长一人，组员2-3人。

2. 队长负责收集团队成员的信息，请填写报名表，并发送到指定地址。具体信息请扫描海报右侧二维码获得。

3. 队长负责项目的进度报告和沟通过程，项目开始后，如果有人员变动，允许更换队长和补充队员各一次。

4. 项目代码在Github上进行托管，交付时，交付的文档和代码都应保存在Github上，并使用MIT License。

5. 项目到达截止日期时，IBM专家将对所有项目结果进行评审，优胜队伍的成员将会获得额外奖励。

你的收获

1. 学校和IBM双重认可的实习经历，IBM出具的实习经历证书。

2. IBM Executive的亲笔中英文推荐信。

3. 获得行业领先的软件设计方法（Design Thinking）和敏捷开发方法的指导。

4. 体验和理解国际公司的工程师文化和人才要求，增加自己的国际化视野，帮助自己建立良好的职业发展规划。

5. 优胜队伍将获得额外奖励。

报名方式

队长负责收集团队成员的信息，请填写如下报名表文件，并发送到邮箱 huangyp@cn.ibm.com 。

报名表.xlsx|View Details

项目列表

1. 针对IBM产品Detail System Requirement 知识的问答系统|View Details

2. 利用已有故障分析报告进行自动故障诊断的多轮问答系统|View Details

3. 自然语言理解中时间表达方式的识别和转换|View Details

4. 使用图片区块识别技术进行网页清洗方法|View Details

5. 基于现有知识库的自然语言校准系统|View Details

6. 自然语言多轮对话中上下文的识别与分类|View Details

Problem:

How to change Language of IBM Docs (On-Prem Version)

Cause: 

IBM Docs only follow Browser Language settings.

Solution:

Change Browser Language settings in each supported browser will get IBM Docs Language changed.

Problem:

Some users can't get policies even default policies that is defined on SSC.

Environment:

Sametime 9.0.1

Diagnostic: (if applicable)

1. Use issue user to login with Sametime Client that other user can get the default policies.  This issue user still can't policies.

2. Check SSC logs, it shows fail to update db POLICY.ASSIGNMENT

Cause: (if applicable)

The essence of the problem is that the STSC database - in the assignment table - the column size is 128 - it appears the records that are stored (the assignment usernames) are 'really close to that size'
 

Solution:

Change Table length to a bigger value:
ALTER TABLE POLICY.ASSIGNMENT
ALTER COLUMN USER_ID SET DATA TYPE VARCHAR(256);

1. From {DMGR_Install_Root}/config/cells/{Cell_Name}/IBMDocs-config/,

  "build-info": {

    "build_version": "2.0.0.3",

    "build_description": "IBM Connections Docs 2.0.0",

    "ifix_version": 25,

    "product_name": "IBM Connections Docs",

    "build_timestamp": "20170331-1216"

  }

  for concord-config.json, viewer-config.json and conversion-config.json, modify "build_version" from  "2.0.0.3" to "2.0.0" manually.

2. Add Docs, Conversion and Viewer Nodes, follow this –https://www.ibm.com/support/knowledgecenter/SSFHJY_2.0.0/deploy/add_new_nodes_into_connections_docs_clusters.html

After this, Docs, Conversion and Viewer Applications are already CR3, we just need to upgrade Conversion binary file.

3. Upgrade Conversion Server.

Copy the file [CR3_Package]/DocsConversion/docs_remote_installer.zip to the Conversion server you just added. Extract it to directory [DOCS_REMOTE_INSTALLER], for example, C:\temp\docs_remote_installer. Make sure that UAC(User Account Control) on Conversion server.

From Start, run cmd.exe, and then run command:

a. cd [DOCS_REMOTE_INSTALLER]\installer\

b. upgrade_node.bat --installroot [CONVERSION_INSTALL_ROOT] --symcount

[SYM_COUNT]

• [CONVERSION_INSTALL_ROOT] is the install directory of Conversion, you can get it

through WebSphere Console > Environment > WebSphere variables >

CONVERSION_INSTALL_ROOT

• [SYM_COUNT] is the number of symphony instances, you can get this by counting how

many inst* in [CONVERSION_INSTALL_ROOT]\symphony. Usually it is 4 or 8, but

you should confirm it by yourself.

c. Check fixpack.log in directory [CONVERSION_INSTALL_ROOT]\logs\.

4. Do the same from Step1 to Step3, if you want to add more nodes.

Problem:

In Some scenario, customer has to self-build schedule task for Docs.  how to check if it is working fine

Solution:

Try to open a task manager or prompt, kill soffice instance, check few minutes later and see soffice auto start again.

Problem:

Number of pages of docx file is different between IBM Docs and Microsoft Word

Environment:

Docs on cloud

Solution:

This is working as design.

The composing format is different between Docs and Microsoft Office.

The line height defined in Docs Document Paragraph is different from the Office Word's.  That may cause different lines in one page between Docs Document and Office Word.

Workaround: insert a page break when there needs a new page.

Problem:

It is found that some of users can't access to specific Library files. These files can be accessed by other users.

Environment:

Connections 5.5 CR2

Solution:

Stop Server and Nodeagent.

Clear Server Cache. (Both Temp and wstemp folder but keep these two folder)

Relevant links:

https://developer.ibm.com/answers/questions/200115/how-do-i-clean-the-websphere-application-servers-c/

Problem:

Customer wants to customize URL of Connections Social Cloud from apps.na.collabserv.com to some URL like connectoins.test.com

Environment:

Connections Social Cloud S2

Solution:

IBM doesn't support support customize URL of Connections Social Cloud URL

Problem:

When launch Sametime client v9.0.1.1 hotfix dated 2017-12-12
(9011-ST-Client-FP-GSAI-AUH33Z) on XenDesktop
User get this error:
Sametime audio and video is unavailable. Ask your administrator to
update your media engine

Environment:

XenDesktop server version: v7.15                                        
Citrix Receiver version: v4.9 

Sametime Media Engine version:  9.0.1HF_2016-06-24
Sametime client version Standalone 9.0.1_20171212
(9011-ST-Client-FP-GSAI-AUH33Z)
End user local machine OS Windows 7 Professional SP1 (64 bit)

Troubleshooting:

The prompt message is different in various scenario:

• No software installed:
  Audio and video is unavailable.
  Contact your administrator to install the necessary software.
  [Continue without installing]
• Old version installed:
  Audio and video is unavailable. Ask your administrator to update your Media Engine.
  [Continue]

Solution:

Open a service request and request to obtain and install hotfix JSMH-AWLMYF to resolve this problem.

Problem: The maximum files listed under CCM library is 500. Customer want to know how to change this? 

Environment: Windows 7 64bit, Connections Desktop Plug-in for Microsoft Windows (2017.07)

Solution:

There's a button called "Get All" in Explorer toolbar.

As the response will take longer to load meta data for more than 500 files, in order to avoid timeout, please refer to Technote #1994269

User encountered "Operation time out" error with IBM Connections Desktop Plugin for Microsoft Windows 

http://www-01.ibm.com/support/docview.wss?uid=swg21994269

Change the registry setting for Timeout, by default, it's 30 (seconds).

To change it as 90:

1. Expand the registry key: 
HKEY_CURRENT_USER\Software\IBM\Social Connectors\Servers 
2. Add a new DWORD value named "APPRcvTimeOut" 
3. Give it a value of 90 (Decimal)

发布时间：2017-11-21

这个6.0 CR1的安装包，包括了 Day 1，June Update 以及所有fix吗?

是的，6.0 CR1 (LO92189)包含 Day 1(LO91711)、June  2017 Update(LO92151)和50多个问题的修订程序

数据库Schema是否需要更新？

6.0 Homepage和Activities数据库的Schema需要更新，详情参考技术文档 #2009306：

http://www-01.ibm.com/support/docview.wss?uid=swg22009306

请注意：随着6.0 CR1发布的数据库Schema更新脚本存在一个已知问题，可能导致Connections 调查问卷 Widget 注册失败。

安装完6.0 ​CR1之后，请更新数据库Schema，下载60cr1-database-updates_20171128.zip，其中包含数据库脚本和相应的批处理命令，这个安装包中修复了导致Connections 调查问卷 Widget 注册失败的问题。

TDISOL是否需要更新？

是的，TDISOL修订程序编号是LO93316，下载地址如下：

https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=Collaboration%2BSolutions&product=ibm/Lotus/Lotus+Connections&release=6.0.0.0&platform=All&function=aparId&apars=LO93316&source=fc

CCM组件是否需要更新？

是的，与6.0 CR1相对应的CCM版本如下：

FileNet Content Engine Server 5.2.1.7

FileNet Content Engine Client 5.2.1.7

IBM Content Navigator (FNCS) 2.0.3.8

6.0 CR1中有哪些新功能，修复了哪些问题?

6.0 CR1支持RTF和TXT类型文件的预览

更好的支持Orient Me

6.0 CR1修复了以下问题：

Rich Content Widget 相关问题

Chrome 60浏览器中无法拷贝粘贴图片

Chrome 60浏览器无法评论状态更新
Connections管理员无法访问博客

博客搜索索引不更新……

详见：Fix list for IBM Connections 6.0 CR1

http://www.ibm.com/support/docview.wss?uid=swg22009255

从哪里下载这个CR1的安装包?

http://www.ibm.com/support/fixcentral/swg/quickorder?product=ibm/Lotus/Lotus+Connections&release=6.0.0.0&platform=All&function=fixId&fixids=6.0.0.0-IC-Multi-CR01-LO92189&includeRequisites=1&includeSupersedes=0&downloadMethod=http&source=fc

如何安装这个6.0 CR1的安装包?

请参考Upgrade Guide to IBM Connections 6.0 CR1 with Connections Content Manager.pdf

https://www-01.ibm.com/support/docview.wss?uid=swg22009611&aid=1

Problem:

User is working with IBM Connections.while clicking on "rich content"  in communities user getting error "page cannot be created due to an error".

Environment:

Connections 5.5 CR2, Windows 2012 R2

Troubleshooting:

Admin confirmed user has logged in to the Connections, so the suggestions in Technote #1980201 does not apply.

Title: Rich text editor widget contents throws error "the page could not be created due to an error"  
URL: http://www-01.ibm.com/support/docview.wss?uid=swg21980201  
 

Collected fiddler session, noticed following request failed:

GET https://connections.acme.com/connections/rte/community/af767c1a-1df3-49e2-a491-19e66c3c10ff/entry?acls=true  

500 Internal Server Error (text/html)  
   

Solution:

Check out following article:
http://www.ibm.com/support/knowledgecenter/SSYGQH_5.5.0/admin/install/t_exchange_keys_network.html

Retrieved SSL cerificate key from IHS (Specify hostname connections.acme.com and port 443 )

Synchronized nodes and tested, user is able to visit the Private community and see Rich content widget loading contents properly. 

The insecure FTP upload to Ecurep will be terminated soon due to security concern.

1. Download the Filezilla client from http://filezilla-project.org

2. Create a new site to SFTP.ECUREP.IBM.COM

• Click File > Site Manager,
• Click New Site.
• Host: sftp.ecurep.ibm.com
• Protocol: SFTP - SSH File Transfer Protocol
• Logon type: Anonymous
• Click OK.

3. Connect to SFTP.ECUREP.IBM.COM

• Click File > Site Manager,
• Locate the site
• Click Connect
• Compare the fingerprint shown in pop up window
  
  with http://www-05.ibm.com/de/support/ecurep/send_ftp.html#sftp
• 
• Check "Always trust this host, add this key to the cache"
• Click OK

4. Browse to /toibm/lotus directory

5. Rename the file by adding full PMR number as prefix. e.g.:
Original name is video.mp4
Rename to 05888.123.672.video.mp4

6. Upload the file 05888.123.672.video.mp4

Done.

Problem: Certain users cannot see their Report-to chain.

Customer want to know how to specify another field LineLeader as manager and update the Report-to chain.  
 

Troubleshooting:

1. The user who didn't see Report-to chain does not have manager field set in LDAP source.  

2. Checked the map_dbrepos_from_source.properties  
managerUid=$manager_uid  
 

Note: The field value #$manager_uid represents lookup of UID of manager using DN in manager field.  
      
3. Tried directly modifying map_dbrepos_from_source.properties  
managerUid=$manager_uid as  
managerUid=lineleader

Run sync_all_dns script only update the PROF_MANAGER_UID field in  EMPINST.EMPLOYEE table.  
The Report-to chain is not updated with lineleader's name as expected.  
 

Solution:

1. In the tdi directory, there is a js file - profiles_functions.js  
locate following function: 
function func_map_to_db_MANAGER_UID(fieldname) {  
   
Note: the purpose of this function is to get the manager field from ldap and pull out the uid of the user in that field.  
   
IBM TDI use the manager field based on this line:  
    var dn = work.getString("manager");  
   
to use an attribute other than manager, update this line to    
    var dn = work.getString("lineLeader");  

   
2. Modify following file in TDISOL directory:

map_dbrepos_from_source.properties 

Modify:
managerUid={func_map_to_db_MANAGER_UID}
   
Try making this change, and run sync_all_dns script.

For more details, refer to following KC article:  
Configuring the Manager designation in user profiles
https://www.ibm.com/support/knowledgecenter/en/SSYGQH_5.5.0/admin/install/r_report-to_chains_profiles.html
 

問題現象：

Connections採用中等部署，兩個節點。

訪問其中一個節點時， Connections 頁面內容不顯示，僅顯示導航條和腳注。另一個節點正常。

診斷：

18:01 完成 server1 （正常節點）啟動

18:05 Chrome 62 與Firefox 顯示正常

18:07 停止server1 （正常節點），啟動server2 （非正常節點）

18:10 清除Chrome 62快取，並重新登入，問題重現。

18:12 通過 Fiddler記錄Web瀏覽器訪問

分析.saz比對正常節點與非正常節點的請求內容。

發現獲取Common包的resources時遇到了一些問題。

GET https://connections.acme.com/connections/resources/web/_js/?include=lconn.core.bundle_common~&etag=20171019.102109&exclude=dojo.main~&_proxyURL=https%3A%2F%2Fconnections.acme.com%2Fconnections%2Fresources&ss=20171019.102109&lang=zh&country=TW&variant=
500 Internal Server Error (text/javascript)

alert('[Resource js "lconn.core.ckeditor" has an unresolved dependency on: lconn.core.ckplugins.icpublishBinaryData.js]');

GET https://connections.acme.com/connections/resources/web/lconn/homepage/nls/zh-tw/hpuistrings.js
404 Not Found (text/html)

GET https://connections.acme.com/connections/resources/web/lconn/homepage/nls/zh/hpuistrings.js
404 Not Found (text/html)

GET https://connections.acme.com/connections/resources/web/lconn/homepage/nls/hpuistrings.js
404 Not Found (text/html)

建議：

請最終用戶清理緩存和Internet臨時資料夾看能否復現問題。如果依然存在問題，請換一台電腦再試。
參考文檔：
IBM Connections users can create new Wikis but cannot edit existing Wikis
http://www.ibm.com/support/docview.wss?uid=swg21649363

如果問題在另一台電腦也能復現，請您提取兩個節點上的以下檔案（對比大小和時間戳）：
<profile_root>/installedApps/<cell>/Common.ear/connections.web.resources.war/WEB-INF/eclipse/plugins/com.ibm.lconn.core.web.resources_<version>.jar
 

比對該檔案後發現時間戳相同，但大小不同，Server1為10615KB,Server2為10610KB。

從Server1複製至Server2，重啟Connections應用伺服器後，沒有出現畫面不完整的情況。

For instance, the URL is:
https://conn6.win.com/communities/service/html/communitystart?communityUuid=02948a17-a136-4a45-b15c-b5fff48cde4e#fullpageWidgetId=Wa5071c9b83a9_414d_9f95_f167425c24ae&section=files

Step 1: Launch wsadmin
C:\IBM\WebSphere\AppServer\profiles\Dmgr01\bin>wsadmin -lang jython -user wasadm
in -password passw0rd -port 8879
WASX7209I: Connected to process "dmgr" on node CellManager01 using SOAP connecto
r;  The type of process is: DeploymentManager
WASX7031I: For help, enter: "print Help.help()"

Step 2: Execute filesAdmin script
wsadmin>execfile("filesAdmin.py")
Connecting to WebSphere:name=FilesAdminService,type=LotusConnections,cell=Cell01,node=Node01,*
Files Administration initialized.

​Step 3: Create a new policy, allowing files total size up to 5GB.
wsadmin>FilesPolicyService.add("5GB Community Policy", 5368709120L)
A policy was added with the new id 86c0c36b-416e-49d1-9f0a-97a7ad37bb54 .

Step 4: Query the Community Library ID based on UUID:

wsadmin>FilesLibraryService.getByExternalContainerId('02948a17-a136-4a45-b15c-b5fff48cde4e')
{summary=3 pigs are building houses, percentUsed=0.0038631726056337357, label=Wa
5071c9b83a9_414d_9f95_f167425c24ae, type=community, title=3 pigs, themeName=defa
ult, externalInstanceId=Wa5071c9b83a9_414d_9f95_f167425c24ae, externalContainerI
d=02948a17-a136-4a45-b15c-b5fff48cde4e, size=82961, policyId=00000000-0000-0000-
0000-000000000001, lastUpdate=Mon Jul 17 13:26:41 CST 2017, ownerUserId=00000000
-0000-0000-0000-000000000000, maximumSize=2147483648, id=01feebc4-aa25-47e8-b4c5
-cb6a7df5aa7e, createDate=Thu Jul 13 22:33:50 CST 2017}

Here the id '01feebc4-aa25-47e8-b4c5-cb6a7df5aa7e' is exactly what we needed for Step 5.

Step 5: Assign the policy to the specific community

wsadmin>FilesLibraryService.assignPolicy('01feebc4-aa25-47e8-b4c5-cb6a7df5aa7e', '86c0c36b-416e-49d1-9f0a-97a7ad37bb54')
The policy with the id 86c0c36b-416e-49d1-9f0a-97a7ad37bb54 is now assigned to t
he library with the id 01feebc4-aa25-47e8-b4c5-cb6a7df5aa7e .
 

Problem:

In some scenario, customer has multiple OUs in their LDAP. And they only wants to sync users from specific OUs.

Environment:

Connections 6.0/5.5/5.0

Solution:

1. Create several tdisol directories. Each directory for one specific OU.

Such as, Directory One for OU 1, Directory TWO for OU2, etc.

2. Set search base in profile_tdi.properties in tdisol_1 to the the OU you want to do synchronize.

Such as: ou=OU1, DC=CIB, DC=COM

3. The same action for other Directories.

4. Then set sync_source_url_enforce=true in profile_tdi.properties in each tdisol directory.

5. Then, use sync_all_dns of tdisol directories each for each OU.

环境：Sametime 8.5.2 IFR1 CF3, Redhat Linux 5.4

诊断：看 NSD 日志 Sep 25 10:58:34 VM Stats 的一组数据：

top 每秒刷新显示负载。

    <@@ System Information -> VM Stats -> Virtual Memory (last 10 secs) @@>              
        procs -----------memory---------- ---swap-- -----io---- --system-- -----cpu------
         r  b   swpd   free   buff  cache   si   so    bi    bo   in   cs us sy id wa st 
         2  0      0 837212  69472 1150580    0    0     3     1  120   72  2  1 97  0  0
         1  0      0 837212  69472 1150580    0    0     0     0 1014 1861 16  9 75  0  0
         4  2      0 837152  69480 1150468    0    0    40   628 1133 2689 19 12 68  1  0
         1  0      0 836728  69480 1150688    0    0   352     0 1188 3538 23 10 63  4  0
         1  0      0 836232  69488 1150856    0    0     0   188 1026 2048 15 10 74  0  0
         1  0      0 836232  69488 1150856    0    0     0     0 1025 1886 15 10 75  0  0
         1  0      0 836232  69488 1150864    0    0     0     0 1008 1997 15 10 75  0  0
         1  0      0 836232  69488 1150864    0    0     0    28 1017 1879 15 10 75  0  0
         1  0      0 836232  69488 1150896    0    0     0     0 1014 1910 16 10 74  0  0
         1  0      0 836232  69496 1150888    0    0     0    64 1022 1923 13 12 75  0  0

r 表示运行队列(就是说多少个进程真的分配到CPU)，当这个值超过了CPU数目，就会出现CPU瓶颈了。
如果运行队列过大，表示你的CPU很繁忙。
当前有1个CPU内核的运行队列为4，非常繁忙。

b 表示阻塞的进程。
当前有1个CPU内核的阻塞进程为2，非常繁忙。

swpd   虚拟内存已使用的交换文件大小，如果大于0，表示你的机器物理内存不足了，

要么是程序内存泄露，那么该扩充内存或者把耗内存的任务迁移到其他机器了。
当前为0，说明内存充足。

free   空闲的物理内存的大小
机器内存总共3G，剩余837M。足够使用。

buff   Linux系统用来存储目录里面有什么内容\权限等的缓存，
目前使用64M，可以忽略不计。

cache  Linux系统用来记忆打开的文件缓存
本机大概占用1150多M(把空闲的物理内存的一部分拿来做文件和目录的缓存，是为了
提高程序执行的性能，当程序使用物理内存时，buffer/cache的速度很快)

si  每秒从磁盘读入虚拟内存的大小，如果这个值大于0，表示物理内存不够用或者内
存泄露了，要查找耗内存进程解决掉。
目前为0，正常。

so  每秒虚拟内存写入磁盘的大小，如果这个值大于0，同上。
目前为0，正常。

bi  系统上所有的磁盘每秒接收的块数量，默认块大小是1024byte
0～352，磁盘写入速度差不多352K每秒

bo  系统上所有的磁盘每秒发送的块数量，例如我们读取文件，bo就要大于0。bi和bo
一般都要接近0，不然就是IO过于频繁，需要调整。
0～628，磁盘读取速度差不多628K每秒，偏高。

in  每秒CPU的中断次数，包括时间中断
0～1188，偏高

cs  每秒上下文切换次数，例如我们调用系统函数，就要进行上下文切换，
线程的切换，也要进程上下文切换，这个值要越小越好，太大了，要考虑调低线程或者进程的数目
要尽量避免频繁调用系统函数，每次调用系统函数，我们的代码就会进入内核空间，导致上下文切换，
上下文切换耗费资源，上下文切换次数过多表示你的CPU大部分浪费在上下文切换，导致CPU干正经事的时间少了，CPU没有充分利用。
72～3538，偏高

一般来说，id + us + sy + wa = 100。

us 用户CPU时间。
2～23之间，正常

sy 系统CPU时间，如果太高，表示系统调用时间长，例如是IO操作频繁。
1～12之间，正常

id 空闲CPU时间。
63～97之间，正常

wa 等待IO CPU时间。
0～4之间，正常

接下来，我们分析一下NSD里Sametime community 服务器的 Server 线程
总共113个线程，其中80个(70%)是在等待网络输入输出。
__kernel_vsyscall            
pthread_cond_wait            
iocp_ProcessEpoll            
iocp_WaitForStatus           
nti_GetQueuedCompletionStatus
PortDriver_IOCPWaitForAnyIO  
NetIOCPWaitForAnyIO          
WorkThreadTask               
Scheduler                    
ThreadWrapper                
start_thread                 
clone

处于CLOSE_WAIT状态的连接有：

http      23366 notes  144u  IPv4      60545       0t0      TCP

127.0.0.1:38807->127.0.0.1:64867 (FIN_WAIT2)

http      23366 notes  145u  IPv4      60546       0t0      TCP

127.0.0.1:64867->127.0.0.1:38807 (CLOSE_WAIT)

可能与会议服务有关。

解决：

询问管理员得知，这台服务器只用于文本聊天，并不使用会议功能，参考以下文档：

《如何禁用Sametime的会议功能，只使用聊天功能》

管理员手工编辑meetingserver.ini文件，通过更改"enabled=1"为"enabled=0"

将下列所有服务禁用：

[SOFTWARE\Lotus\Sametime\MeetingServer\Services\ActivityProvider]
[SOFTWARE\Lotus\Sametime\MeetingServer\Services\AVMMP]
[SOFTWARE\Lotus\Sametime\MeetingServer\Services\BroadcastGateway]
[SOFTWARE\Lotus\Sametime\MeetingServer\Services\CalendarService]
[SOFTWARE\Lotus\Sametime\MeetingServer\Services\CapacityMonitor]
[SOFTWARE\Lotus\Sametime\MeetingServer\Services\EventBridge]
[SOFTWARE\Lotus\Sametime\MeetingServer\Services\GWController]
[SOFTWARE\Lotus\Sametime\MeetingServer\Services\H323MCU]
[SOFTWARE\Lotus\Sametime\MeetingServer\Services\Logger]
[SOFTWARE\Lotus\Sametime\MeetingServer\Services\MaterialManager]
[SOFTWARE\Lotus\Sametime\MeetingServer\Services\SharedObjectServer]
[SOFTWARE\Lotus\Sametime\MeetingServer\Services\StatisticsServer]
[SOFTWARE\Lotus\Sametime\MeetingServer\Services\STLinks]
[SOFTWARE\Lotus\Sametime\MeetingServer\Services\T120MCU]
[SOFTWARE\Lotus\Sametime\MeetingServer\Services\TokenServer]
[SOFTWARE\Lotus\Sametime\MeetingServer\Services\WhiteboardServer]

注意，要保留下面的社区服务为启用状态：
[SOFTWARE\Lotus\Sametime\MeetingServer\Services\CommunityServer]
[SOFTWARE\Lotus\Sametime\MeetingServer\Services\ConfigurationBridge]
[SOFTWARE\Lotus\Sametime\MeetingServer\Services\EventServer]
[SOFTWARE\Lotus\Sametime\MeetingServer\Services\JavaServiceManager]
  

Domino服务器的版本是852FP4,建议先升级安装853FP6，再安装853FP6IF18，
避免LDAP搜索嵌套组导致CPU占用率过高的已知问题，编号为： SPR MJON9GQHLL。
http://www-01.ibm.com/support/docview.wss?uid=swg1LO79283

853FP6IF18 下载地址：（需要登陆FixCentral下载，下载之前需要验证授权）
http://www-01.ibm.com/support/docview.wss?uid=swg21663874#DominoDownloads

在上述更改完成，安装Domino的修订程序853FP6IF18之后，CPU利用率降到1-2%

Checked subscription of customer.

Currently they have entitlement for S1, which includes Connections Meeting and Chat (based on IBM Sametime)

The account was provisioned at AP site.

To integrate Jabber on-premises with Connections Cloud:

1. Customer must have paid for Jabber on-premises, that's a pre-requisite for enabling Jabber integration.
https://www-10.lotus.com/ldd/bhwiki.nsf/xpDocViewer.xsp?lookupName=What+is+new#action=openDocument&res_title=Cisco_Jabber_integration_now_includes_Clicktocall_and_Clicktovideo_call_capabilities&content=pdcontent

BTW: When you enable individual users for Jabber, all other chat products are disabled for everyone in the organization.

2, Login to Connections Cloud admin page.

ii. In the list of users, locate the name of a user who will receive access to Jabber and click  > Add Third-Party Apps. (for NA, CE site)

For AP site, admin can use this url:
https://apps.ap.collabserv.com/manage/user/updateUser/isv/input?subscriberId=xxxx

Where "xxxx" is the user's subscriberId.
If you click on the user in the User Account list, in the browser url, you will see the subscriber id (it's called entityId, however).
 

3. Selecting the “chat” icon - opens a new tab in Chrome

- with this address xmpp://

• Jabber must be installed on client devices.
  Jabber is a native application, which means that it must be installed directly on any device where it will be used.
• The Jabber ID must match the Connections Cloud ID if you want to support the Click to Chat, Click to Video Chat, and Click to Call features.
  When you click the Chat, Phone, or Video icon (in the Connections Cloud business card or Profile; or in the Verse Important to Me bar or business card) to start a Jabber chat or call with another person, the correct user can only be located if their Jabber ID matches their Connections Cloud ID; otherwise the chat window might open to a nonexistent Jabber user.

I believe you can check Settings

System > Default Apps > Choose default app by protocol

For more details, please refer to
https://www.ibm.com/support/knowledgecenter/en/SSL3JX/admin/bss/topics/c_jabber_overview.html
https://www.ibm.com/support/knowledgecenter/en/SSL3JX/admin/bss/topics/t_enable_jabber.html
http://www-01.ibm.com/support/docview.wss?uid=swg22006969

 

Problem:

Connections administrator enabled SSL module on IBM HTTP Server following Knowledge center article by
LoadModule ibm_ssl_module modules/mod_ibm_ssl.so:
https://www.ibm.com/support/knowledgecenter/en/SSYGQH_5.5.0/admin/install/t_configure_ihs.html

NSFOCUS scan report indicate server had CVE-2011-1473 vulnerabilities.

Environment:

Connections 5.5 CR3
IBM HTTP Server & Websphere Application Server 8.5.5.10
Redhat Linux 7.2

Troubleshooting:

1. Get httpd.conf from <IHS>/conf/ folder

2. Determine IHS version
http://www-01.ibm.com/support/docview.wss?uid=swg21640806

3. WAS version
https://www.ibm.com/support/knowledgecenter/en/SSAW57_8.5.5/com.ibm.websphere.nd.doc/ae/rins_versionInfo.html

Solution:

mod_ibm_ssl.so is NOT OpenSSL library, therefore it's not affected by CVE-2011-1473 security vulnerabilities.

If the NSFOCUS tool determines whether server is vulnerable by reading the handshake information between client

and Websphere Application Server. e.g:

C:\OpenSSL-Win32\bin>openssl s_client -connect conn6.win.com:8881
CONNECTED(00000160)
depth=1 C = US, O = IBM, OU = CellManager01, OU = Cell01, OU = Root
Certificate,
 CN = conn6.win.com
verify error:num=19:self signed certificate in certificate chain
---
Certificate chain
 0 s:/C=US/O=IBM/OU=CellManager01/OU=Cell01/CN=conn6.win.com
   i:/C=US/O=IBM/OU=CellManager01/OU=Cell01/OU=Root
Certificate/CN=conn6.win.com

 1 s:/C=US/O=IBM/OU=CellManager01/OU=Cell01/OU=Root
Certificate/CN=conn6.win.com

   i:/C=US/O=IBM/OU=CellManager01/OU=Cell01/OU=Root
Certificate/CN=conn6.win.com

---
Server certificate
-----BEGIN CERTIFICATE-----
MIIDvzCCAqegAwIBAgIGAmD/V5cQMA0GCSqGSIb3DQEBCwUAMHcxCzAJBgNVBAYT
AlVTMQwwCgYDVQQKEwNJQk0xFjAUBgNVBAsTDUNlbGxNYW5hZ2VyMDExDzANBgNV
...
wutO6AJIPOPQ8GPFcKm/q/sQFeLKPidmtlSPuMDsbaUXrJHF9sv6xJ9AEwH7lOqf
ob6r
-----END CERTIFICATE-----
subject=/C=US/O=IBM/OU=CellManager01/OU=Cell01/CN=conn6.win.com
issuer=/C=US/O=IBM/OU=CellManager01/OU=Cell01/OU=Root
Certificate/CN=conn6.win.c
om
---
No client certificate CA names sent
Server Temp Key: DH, 1024 bits
---
SSL handshake has read 2657 bytes and written 374 bytes
Verification error: self signed certificate in certificate chain
---
New, SSLv3, Cipher is DHE-RSA-AES256-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE

In the shakehand information above, “Secure Renegotiation IS supported” does not represent "SSL Renegotiation" is allowed on server.

With original information provided by Websphere support:

The IHS Server Hello is going to show the renegotiation_info extension which is needed for renegotiation support/enablement.
This only shows that we support it.
It does not mean we will allow the renegotiation.
We need to broadcast this secure renegotiation indicator even though we do not accept renegotiation to protect against a type of MITM attack.

So OpenSSL is just checking for the presence of the field,  but not that we actually allow a renegotiation.

中文翻译：

IHS服务器在握手时显示支持重新协商扩展（renegotiation_info）,这只表明 IHS 支持它。
这并不意味着 IHS 将允许重新协商。
根据规范，为了防止中间人攻击，即使 IHS 不允许重新协商，IHS 也需要表明对重新协商的支持。

所以 OpenSSL 如果仅通过检查该字段标记，就会误以为 IHS 允许重新协商。

In fact, In IBM HTTP Server for WebSphere Application Server Version 8.5, SSLRenegotiation had been disabled by default.

Unless admin specified "SSLRenegotiation on" in httpd.conf, it's not enabled so server is not vulnerable as CVE-2011-1473.

Please check following page for more details:

https://www.ibm.com/support/knowledgecenter/SSEQTP_8.5.5/com.ibm.websphere.ihs.doc/ihs/rihs_ssldirs.html?view=kc#rihs_ssldirs__SSLRenegotiation

SSLRenegotiation directive

PROBLEM: Users unable to login to Sametime server,  

Stusers crashed over and over again.
I VpLaunch   19/Sep/17, 14:18:35 stusers exited (RESTART). It will be restarted.  
I Users      19/Sep/17, 14:18:35 Started, version 8.5.0.0  
I Authentica 19/Sep/17, 14:18:35 Notes version of Asynchronous Authentication initialize  
I Authentica 19/Sep/17, 14:18:36 Initialized authentication notes interface, version 8.5.0.0  
I Authentica 19/Sep/17, 14:18:36 Initialization completed  
E TokenAuthe 19/Sep/17, 14:20:18 Exception handler: the end.  
I VpLaunch   19/Sep/17, 14:20:18 stusers ended with exit code 101 and is out of recovery limits. will not be restarted  
 

Envionment:  Sametime 8.5 Domino 8.5.2 FP4 Redhat Linux 5.4

Troubleshooting
Found error in sametime.log
E Directory  19/Sep/17, 09:15:22 Directory "Address Book Backup"  has the same id as directory "Address Book Backup", ignore  
Cause: 
Admin has enabled Directory Assistance and pointing to local names.nsf, leads to infinite loop.
Solution:

Remove the local names.nsf entry in DA.nsf 

Restarted Sametime service and users are able to login.

Problem:

Using Connections 5.5 CR3 with TLS 1.2 enabled, the Rich Text Editor is reporting that the spelling service was not found (https://connections-dev.acme.com/ephox-spelling).

Environment: 
Connections 5.5 CR3
EphoxEditor 3.0.1.143 with Textbox.io1.3.1.83.

Both Dev and Test environment where customer have enabled TLS 1.2 only mode is experiencing this problem.  

Production environment have not yet been configured with TLS 1.2 only mode and the spelling service is currently working.

Troubleshooting:

Followed technote 1986390  http://www-01.ibm.com/support/docview.wss?uid=swg21986390

Manually added both root and intermediate certificate to the Java trust store, restarted JVM, with no effect.

After updated EphoxEditor to 3.5.1.3 and Textbox.io 2.2.1.58.(Jun.2017).

No difference in the error log.

[29/08/17 10:17:00:066 AWST] 000002c8 SystemOut     O 2017-08-29 10:17:
00 [ironbark-akka.actor.default-dispatcher-33] ERROR akka.actor.
ActorSystemImpl - Error during processing of request HttpRequest(POST,
https://connections-dev.acme.com/1/correction,List

spray.can.Http$ConnectionException: ErrorClosed(Connection reset by peer)
	at spray.can.client.HttpHostConnectionSlot.reportDisconnection(HttpHostConnectionSlot.scala:228) ~[spray-can_2.11-1.3.2.jar:na]
	at spray.can.client.HttpHostConnectionSlot$$anonfun$connected$1.applyOrElse(HttpHostConnectionSlot.scala:161) ~[spray-can_2.11-1.3.2.jar:na]
	at akka.actor.Actor$class.aroundReceive(Actor.scala:465) ~[akka-actor_2.11-2.3.9.jar:na]
	at spray.can.client.HttpHostConnectionSlot.aroundReceive(HttpHostConnectionSlot.scala:33) ~[spray-can_2.11-1.3.2.jar:na]
	at akka.actor.ActorCell.receiveMessage(ActorCell.scala:516) [akka-actor_2.11-2.3.9.jar:na]
	at akka.actor.ActorCell.invoke(ActorCell.scala:487) [akka-actor_2.11-2.3.9.jar:na]
	at akka.dispatch.Mailbox.processMailbox(Mailbox.scala:254) [akka-actor_2.11-2.3.9.jar:na]
	at akka.dispatch.Mailbox.run(Mailbox.scala:221) [akka-actor_2.11-2.3.9.jar:na]
	at akka.dispatch.Mailbox.exec(Mailbox.scala:231) [akka-actor_2.11-2.3.9.jar:na]
	at scala.concurrent.forkjoin.ForkJoinTask.doExec(ForkJoinTask.java:260) [scala-library-2.11.6.jar:na]
	at scala.concurrent.forkjoin.ForkJoinPool$WorkQueue.runTask(ForkJoinPool.java:1339) [scala-library-2.11.6.jar:na]
	at scala.concurrent.forkjoin.ForkJoinPool.runWorker(ForkJoinPool.java:1979) [scala-library-2.11.6.jar:na]
	at scala.concurrent.forkjoin.ForkJoinWorkerThread.run(ForkJoinWorkerThread.java:107) [scala-library-2.11.6.jar:na]

Cause:

The latest Ephox/Textbox.io release EphoxTbioServices v2 resolved this type of TLS only issue, but one thing it noted was to:

• Removing the ephox.allowed-origins.url configuration from either the jvm properties or application.conf 
• Making sure the ephox.allowed-origins.origins configuration is available to the spelling service. 

Given the fact that editor is usually deployed with everything on the same server, customer should consider removing the url setting entry in the application.conf file .

application.conf:(before modification)

ephox {
  allowed-origins {
    origins = [
      "https://connections-dev.acme.com",
      "http://connections-dev.acme.com"
    ]
    url = "https://connections-dev.acme.com/ephox-allowed-origins/cors"
  }
}

application.conf:(after modification)

ephox {
  allowed-origins {
    origins = [
     "https://connections-dev.acme.com"
    ]
  }
}
 

After removing url = "https://connections-dev.acme.com/ephox-allowed-origins/cors" from application.conf and restarting the
EphoxTbioServices application, the spelling service is now working properly.

Problem:

After upgrade to 5.5 CR3, customer found that they can't move files between folders.

An error occurs like below:

Environment:

Connections 5.5 CR3

Diagnostic:

There is no error on server side no matter what trace is enabled.

On Fildder trace, it has no issues as well.

Cause:

This is simple web page issue.

During upgrade, there are web page jar updated.

Under <Connections_Data>\shared\provision\webresources folder, there is jars related to Files web page:

com.ibm.lconn.files.web.resources jar.

It has time stamp in its name.

For 5.5 CR3, its time stamp should be com.ibm.lconn.files.web.resources_3.0.0.20170412-2240.

But for issue customer, their com.ibm.lconn.files.web.resources jar is com.ibm.lconn.files.web.resources_3.0.0.20151204-1501.jar.

This jar belongs to 5.5 with no CR. That also means, during upgrade, this jar got upgrade failed.

Solution:

Copy com.ibm.lconn.files.web.resources_3.0.0.20170412-2240.jar and use it to replace com.ibm.lconn.files.web.resources_3.0.0.20151204-1501.jar.

Then restart Connections server clusters.

Problem:

It is found that some end users fail to open Library(CCM) folders and get "Exception occurs while connecting to server 302".

Customer can open folders in Library(CCM) on Connections web page, and in Desktop plugin, it used to work before. No system changed was made.

Environment:

Desktop Plugin 15.0

Connections 5.0

Solution:

To resolve this issue, you just need simply disconnect the current site and re-connect to this site. After that, folders under Library(CCM) can be opened with no issues.

One specific user's unable to login
Logout reason code [80000211]
Logout reason name [ST_CONNECT_BAD_LOGIN]
Login in progress [true]
Attempt reconnect [false]
Logout message [输入的登录信息与任何现有帐户都不匹配。检查您的用户名和
密码并重新输入，或联系系统管理员。]

Resolution Summary: 
Found a replication saving conflict document on sametime community server for specific user.

It was created just before issue start occurs.

Admin removed it and ran following command to update view index:
load updall -r names.nsf

User is able to login

Problem:

User can view metrics in IE browser using HTTP.

But cannot view metrics in IE browser using HTTPS.

"Content was blocked because it was not signed by a valid security

certificate."

Environment:

Connections 5.5 CR2

Cognos BI Server/Transformer 10.2.2

Cause:

The issue will happen when a web page try to load content in an iframe

from another server with a self signed SSL certificate.

Troubleshooting:

Enabled com.ibm.connections.metrics.*=all as trace in runtime tab.

Get following output while running:

[8/23/17 16:00:18:937 CST] 0000035c ReportRespons 3 com.ibm.connections.metrics.ui.common.bo.response.ReportResponseFull outputToString {"today":"2017-08-23T16:00:18+0800","app":"system","ds_filter_content":[],"report_url":"https:\/\/cognos.acme.com:9444\/cognos\/servlet\/dispatch\/ext?b_action=cognosViewer&ui.action=run&ui.name=main&run.outputFormat=&run.prompt=false&cv.header=false&cv.toolbar=false&ui.object=%2fcontent%2ffolder%5b%40name%3d%27IBMConnectionsMetrics%27%5d%2fpackage%5b%40name%3d%27Metrics%27%5d%2ffolder%5b%40name%3d%27global%27%5d%2ffolder%5b%40name%3d%27overview%27%5d%2freport%5b%40name%3d%27main%27%5d&run.outputLocale=en&productLocale=en&p_lclocale=en&p_textDirection=off&p_uplevel=2&p_upnum=12&p_range=12&p_rangetype=M&p_endDate=20170731&p_metricsstartdate=20170417&p_customizeddate=0&p_coverinvaliddate=1&p_spanweeks=0&p_showuserinfo=1&cv.toolbar=false&cv.header=false","name":"overview","app_filter_enable":false,"date_range":[{"end_date":"2017-07-31T00:00:00+08:00","start_date":"2016-08-01T00:00:00+08:00"}],"hasReport":true,"exportable":false,"cognosEndDate":"2017-08-22T16:00:18+08:00","apps":[],"offset":"28800000","label":"Connections","errorCode":null,"hierarchy":[],"cognosStartDate":"2017-04-17T00:00:00+08:00","dr_filter_enable":true,"ds_filter_enable":false,"metricName":null,"configId":"d27f4858-688f-4cce-8653-ae4ed6e68249"}

Solution:

-Click IE menu : Internet Options

Security (tab)

Sites (button)

-Enter the URL address for your Cognos server: e.g.:

https://cognos.acme.com

- Click Add (button)

The URL for metrics on Connections server is:

https://conn.acme.com/metrics

The certificate was issued by conn.acme.com to conn.acme.com

- Added self-signed certificate to "Intermediate Certification Authorities", "Trusted publishers" and "Trusted Root Certification Authorities"

The URL for dispatch on Cognos server is:

https://cognos.acme.com:9444/cognos/servlet/dispatch/ext

The certificate was issued by conn to cognos.acme.com

- Added self-signed certificate to "Intermediate Certification Authorities", "Trusted publishers" and "Trusted Root Certification Authorities"

- View Certificate, in Certification Path tab, click "conn",

- Added "conn" to "Trusted Root Certification Authorities"

Restart IE browser and it works fine.

Note:

The same solution applies for Chrome/Firefox browsers.

Not only trusting self-signed certificate for IHS server or WAS server hosting Connections application,

But also trusting self-signed certificate for WAS server hosting Cognos application.

Problem:

After upgrade from 5.0 to 6.0, no matter what action is done, index can't be built up. There is no file generated under Index folder.

Environment:

All environment.

Cause: 

When doing database upgrade, there is a step needs to be done:

Running a Java migration from 5.0 to 5.5

If missing this step. Index will not be generated.

Solution:

Re-upgrade database. And do the following step in the upgrading work.

https://www.ibm.com/support/knowledgecenter/en/SSYGQH_6.0.0/admin/migrate/t_migrate_run_java_from_50_to_55.html

Problem:

Admin upgraded 5.0 database using in-place method to 6.0, but none of
previously created activities are visible.

Environment:

Connections 6.0

WAS 8.5.5.10

DB2 11.1

Redhat Linux 7.3

Troubleshooting:

-What version did you migrate from and what is the new version
(including CRs, IFRs, etc.)?
5.0 Day30 Fix -> 6.0

-Is this happening in your production environment? If so, did this
process work successfully in your test environment?

Pre-production environment, there's no other testing environment.

-Can any users access activities? What about admin users?

They can create new activities in 6.0 but cannot see any old activities
created in 5.0

-Is this Community Activities? What about stand-alone Activities?

It happened to both Community / Stand-alone Activities

-Can you create a new Activity without issue?

Yes, new activity works fine

-Does this problem occur across all browsers?

Yes, reproducible on Chrome 59 and IE 11

-If you browse to Activities from the navigation menu, can you see the
list of Activities under My Activities?

Cannot view 5.0 old activities but can view 6.0 new created activities

-Can you collect a Fiddler trace reproducing the problem?

Collected and found

https://conn6.win.com/activities/service/atom2/forms/activitynode?activityNodeUuid=FFFG4d535bfa772d41f88d9290a0e9e7ea2c&entry=817d0136-cc3c-4e33-892a-98e00c5c1d6f returns error:

<error xmlns="http://www.ibm.com/xmlns/prod/sn">
  <code>404</code>
  <message>Identifier: LCF6B83B27550049AE845B336052D5E17D
Request denied</message>
  <displaymessage></displaymessage>
  <errortype></errortype>

  <trace>java.lang.Exception: Identifier: LCF6B83B27550049AE845B336052D5E17D
Request denied</trace>
</error>

- Can you enable run time debug on the Websphere Application server
running Activities application?

com.ibm.openactivities.*=all: com.ibatis=finest:
com.ibatis.common.jdbc.SimpleDataSource=finest:
com.ibatis.common.jdbc.ScriptRunner=finest:
com.ibatis.sqlmap.engine.impl.SqlMapClientDelegate=finest:
java.sql.Connection=finest: java.sql.Statement=finest:
java.sql.PreparedStatement=finest: java.sql.ResultSet=finest:
com.ibm.openactivities.ExecutionContext=all

-What DB type do you have (DB2, Oracle, SQL)?

DB2 11.1

-Did you follow the migration steps that we have documented?

https://www.ibm.com/support/knowledgecenter/en/SSYGQH_6.0.0/admin/migrate/t_update_3.0.1_DB2_manual.html

- Did you get any errors when you were migrating the Activities
database?

No issues reported while migrating (Later on we found it's incorrect)

- What was the size of the old Activities database? What is the size of
the new Activities database?
Old database size: 1603538944
New database size: 1428983808 (something must be lost)

Observed following error in trace.log:

[7/20/17 15:43:20:571 CST] 0000015b Connection    1 com.ibatis.common.logging.jakarta.JakartaCommonsLoggingImpl debug {conn-100116} Preparing Statement:          SELECT OA_MEMBERPROFILE.MEMBERID         FROM  ACTIVITIES.OA_MEMBERPROFILE OA_MEMBERPROFILE         WHERE (MEMBERTYPE=1 OR MEMBERTYPE=2 OR MEMBERTYPE=3 OR MEMBERTYPE=8)         and OA_MEMBERPROFILE.EXID = ?                   
[7/20/17 15:43:20:572 CST] 0000015b PreparedState 1 com.ibatis.common.logging.jakarta.JakartaCommonsLoggingImpl debug {pstm-100117} Executing Statement:          SELECT OA_MEMBERPROFILE.MEMBERID         FROM  ACTIVITIES.OA_MEMBERPROFILE OA_MEMBERPROFILE         WHERE (MEMBERTYPE=1 OR MEMBERTYPE=2 OR MEMBERTYPE=3 OR MEMBERTYPE=8)         and OA_MEMBERPROFILE.EXID = ?                   
[7/20/17 15:43:20:572 CST] 0000015b PreparedState 1 com.ibatis.common.logging.jakarta.JakartaCommonsLoggingImpl debug {pstm-100117} Parameters: [455244c4-2c0b-47a9-a9fc-b578304c9f43]
[7/20/17 15:43:20:573 CST] 0000015b PreparedState 1 com.ibatis.common.logging.jakarta.JakartaCommonsLoggingImpl debug {pstm-100117} Types: [java.lang.String]
[7/20/17 15:43:20:574 CST] 0000015b ResultSet     1 com.ibatis.common.logging.jakarta.JakartaCommonsLoggingImpl debug {rset-100118} ResultSet
[7/20/17 15:43:20:574 CST] 0000015b OpenActivitie 1 sun.reflect.GeneratedMethodAccessor209 invoke debug.ibatis.printCallStack.enabled: false
[7/20/17 15:43:20:575 CST] 0000015b LoggedSqlMapE 3 sun.reflect.GeneratedMethodAccessor323 invoke Ibatis execution: MemberProfile.getMemberIdByExtId : elapsedTime = 4
[7/20/17 15:43:20:575 CST] 0000015b MemberProfile 1 sun.reflect.NativeMethodAccessorImpl invoke0 Memberprofile is not found by exid, input options = {oa_memberlogin=OA_MEMBERLOGIN, oa_memberprofile=OA_MEMBERPROFILE, oa_memberprincipal=OA_MEMBERPRINCIPAL, dbType=DB2, applyOrgIdRestrict=false, orgEnabled=true, applyOrgIdJoinInSql=false, exId=455244c4-2c0b-47a9-a9fc-b578304c9f43}
                                 java.lang.Exception: Memberprofile is not found by exid, input options = {oa_memberlogin=OA_MEMBERLOGIN, oa_memberprofile=OA_MEMBERPROFILE, oa_memberprincipal=OA_MEMBERPRINCIPAL, dbType=DB2, applyOrgIdRestrict=false, orgEnabled=true, applyOrgIdJoinInSql=false, exId=455244c4-2c0b-47a9-a9fc-b578304c9f43}
    at com.ibm.openactivities.internal.service.store.sqlmapdao.MemberProfileSqlMapDao.getMemberIdByExId(MemberProfileSqlMapDao.java:472)
    at sun.reflect.GeneratedMethodAccessor271.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:37)
    at java.lang.reflect.Method.invoke(Method.java:611)
    at com.ibatis.dao.engine.impl.DaoProxy.invoke(DaoProxy.java:64)
    at com.sun.proxy.$Proxy128.getMemberIdByExId(Unknown Source)
    at com.ibm.openactivities.internal.service.core.MemberProfileCatalogBo.getMemberIdByExId(MemberProfileCatalogBo.java:136)
    at com.ibm.openactivities.util.GroupsCache.loadPrincipalCache(GroupsCache.java:156)
    at com.ibm.openactivities.util.GroupsCache.getMemberProfile(GroupsCache.java:114)

Asked admin to ran SQL query against OPNACT (activities) database for Connections 6.0.

SELECT OA_MEMBERPROFILE.MEMBERID        

FROM  ACTIVITIES.OA_MEMBERPROFILE OA_MEMBERPROFILE        

WHERE (MEMBERTYPE=1 OR MEMBERTYPE=2 OR MEMBERTYPE=3 OR MEMBERTYPE=8)        

and OA_MEMBERPROFILE.EXID = '455244c4-2c0b-47a9-a9fc-b578304c9f43' 

Result: Failed to find entry

Ran SQL query against OPNACT (activities) database for Connections 5.0

Result: Able to find entries.

Decide to run upgrade script again.

Solution:

1.Suggested customer to backup 6.0 db:
2.Drop 6.0 activities database
3.Backup 5.0 activities database
4.Restore activities database from 5.0 to 6.0 environment
5.Apply 6.0 database update wizard

Two tips:

1. Found admin is using root user to execute dbwizard.
SQL0551N  The statement failed because the authorization ID does not
have the required authorization or privilege to perform the operation.
Authorization
ID: "ROOT".  Operation: "INSERT". Object: "ACTIVITIES.OA_SCHEMA".

They should switch to db2inst1, the database instance owner.

2. When su - db2inst1, user failed when executing following command:
EXPORT TO OA_NODE_ASSIGNEE.ixf OF IXF MESSAGES
OA_NODE_ASSIGNEE.EXPORT.txt SELECT NODEUUID AS ASSIGNEEUUID,
ACTIVITYUUID, NODEUUID, ASSIGNEDTO AS MEMBERID, COMPLETESTAT, ORGID
FROM ACTIVITIES."OA_NODE" "OA_NODE" where "OA_NODE".ASSIGNEDTO is not
null and "OA_NODE".NODEUUID not in ( select NODEUUID from
ACTIVITIES."OA_ASSIGNEE")
SQL3006C  An I/O error occurred while opening the message file.

Tested by creating new file via "vi" in the
dbwizard/connections.sql/activities/db2/ folder and get failed.

So copied the .sql files to /tmp/conncectionsdb2 folder
chmod 777 ./* (to make everyone able to read/write)

EXPORT TO OA_NODE_ASSIGNEE.ixf OF IXF MESSAGES
OA_NODE_ASSIGNEE.EXPORT.txt SELECT NODEUUID AS ASSIGNEEUUID,
ACTIVITYUUID, NODEUUID, ASSIGNEDTO AS MEMBERID, COMPLETESTAT, ORGID
FROM ACTIVITIES."OA_NODE" "OA_NODE" where "OA_NODE".ASSIGNEDTO is not
null and "OA_NODE".NODEUUID not in ( select NODEUUID from
ACTIVITIES."OA_ASSIGNEE")

Number of rows exported: 7643

IMPORT FROM OA_NODE_ASSIGNEE.ixf OF IXF MESSAGES
OA_NODE_ASSIGNEE.IMPORT.TXT INSERT INTO ACTIVITIES.OA_ASSIGNEE

Number of rows read         = 7643
Number of rows skipped      = 0
Number of rows inserted     = 7643
Number of rows updated      = 0
Number of rows rejected     = 0
Number of rows committed    = 7643

After verification, restart the procedure from very beginning.

3. Ran following command:
db2 connect to OPNACT
db2 select DBSCHEMAVER from ACTIVITIES.OA_SCHEMA

If schema version is 69, then enter the following commands:

    db2 -td@ -vf upgrade-50-50CR1.sql >>upgrade-50-50CR1.log
    db2 -td@ -vf upgrade-50CR1-55.sql >>upgrade-50CR1-55.log
    db2 -td@ -vf upgrade-55-55CR2.sql >>upgrade-55-55CR2.log
    db2 -td@ -vf upgrade-55CR2-60.sql >>upgrade-55CR2-60.log
    db2 -td@ -vf appGrants.sql >>appGrants.log
    db2 -td@ -vf reorg.sql >>reorg.log
    db2 -td@ -vf runstats.sql>>runstats.log

Checked log files and found these tasks completed successfully.

After restarting application server, visiting old entries in Activities works again.

Reference: