注册 登录  
 加关注
   显示下一条  |  关闭
温馨提示!由于新浪微博认证机制调整,您的新浪微博帐号绑定已过期,请重新绑定!立即重新绑定新浪微博》  |  关闭

mylotustips的博客

IBM Lotus协作产品家族经验分享

 
 
 

日志

 
 
关于我

欢迎大家使用SR向IBM800提交问题http://www.ibm.com/support/servicerequest 可以随时查看问题状态,上传文件

网易考拉推荐

配置IBM HTTP Server for Connections  

2014-10-29 17:19:19|  分类: SocialBusiness |  标签: |举报 |字号 订阅

  下载LOFTER 我的照片书  |
When you have successfully installed IBM Connections to run on WebSphere? Application Server, you can configure IBM HTTP Server to handle web traffic by completing the following tasks:
  1. Defining IBM HTTP Server
    Define IBM HTTP Server to manage web connections.
  2. Configuring IBM HTTP Server for SSL
    Configure IBM HTTP Server to use the SSL protocol.
  3. Adding certificates to the WebSphere trust store
    Import a self-signed IBM HTTP Server certificate into the default trust store of IBM WebSphere Application Server.
  4. Determining which files to compress
    If you are not compressing content with the IBM? WebSphere? Application Server Edge components or a similar device, configure the IBM HTTP Server to compress certain types of content to improve browser performance.
  5. Updating web addresses in IBM HTTP Server
    Update the web addresses that IBM HTTP Server uses to access IBM Connections applications.

Defining IBM HTTP Server


Before you begin


Install web server plug-ins for IBM HTTP Server, if they are not already installed. For more information, go to the Installing web server plug-in web site.

About this task


IBM Connections uses a web server as the entry point for all the applications.

This procedure describes how to create a web server using the Integrated Solutions Console. There are other ways to create the web server. See the IBM WebSphere Application Server information center for more information.

Procedure

  1. Go to your Services view and start the IBM HTTP Administrator 8.0 service.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  2. The service has now started successfully.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  3. In the Integrated Solutions Console Browser window click System Administration -> Nodes.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  4. Click Add Node.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  5. Select Unmanaged node and click Next to continue.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  6. Enter a name for this node and the host name of your connections server. In this example, we use just IHS_Node and the connections server DNS nameconnections.renovations.com. Then click OK to continue.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  7. Click Save to save the last configuration changes.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  8. The unmanaged IHS_Node is now created successfully. Select both nodes and click Synchronize to synchronize the changes to the nodes.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  9. Now click Servers -> Server Types -> Web servers.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  10. Click New to create a new Web server.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  11. Select the just created IHS_Node node and enter a name for this Web server. We recommend to use the name webserver1 because it is the standard. Then click Next to continue.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  12. Click Next to continue.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  13. Remove the part with the blank character in the two path lines. Correct the Plug-in installation location directory and then enter the IBM HTTP Server Administrator Account name and password. Then click Next to continue.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  14. Click Finish to continue.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  15. Click Save to save the last configuration changes.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  16. Click System administration -> Nodes.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  17. Select all nodes and click Full Resynchronize.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  18. Next click Servers -> Server Types -> Web servers.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  19. Select the webserver1 and click Generate Plug-in.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  20. The Web Server Plug-in configuration file was created successfully.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  21. Select webserver1 again and click Propagate Plug-in.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  22. The Web Server Plug-in configuration file was propagated successfully.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  23. Open the web server configuration by clicking webserver1.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  24. Click Plug-in properties on the right side.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  25. Click Copy to Web server key store directory.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  26. The Plug-in keyring file is propagated successfully.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  27. Go back to Servers -> Server Types -> Web servers.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  28. Select webserver1 and click Start.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  29. The Web Server has started successfully.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  30. Check the Application Module Mapping configuration and if required add the IBM HTTP Server server in the applications. Click Applications -> Application Types -> WebSphere enterprise applications. The following 4 steps (31 to 34) must be repeated for all 23 applications.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  31. Click the application you want to check. Start with the Activities application.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  32. Click Manage Modules.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  33. In this example, the application module mapping is correct. All modules are mapped to the Connections Server Cluster (CL) and the Web Server (webserver1). You do not need to do any more actions and can continue with the next application.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  34. But if the modules are only mapped to the Connections Cluster, then you need to map them to the webserver1 as well. Click the CL line and hold the Ctrl-Key and click the webserver1 line. (that both lines are selected) Then click the small button directly under the Remove button to select all modules. Then click Apply. Now all modules are mapped to the CL cluster and the webserver1 server. Click OK and then Save. Then continue with the next application.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客

Configuring IBM HTTP Server for SSL


About this task


To support SSL, create a self-signed certificate and then configure IBM HTTP Server for SSL traffic. If you use this certificate in production, users might receiver warning messages from their browsers. In a typical production deployment, you would use a certificate from a trusted certificate authority.

To configure IBM HTTP Server for SSL, complete the following steps:

Procedure

  1. In your Start menu click Start -> All Programs -> IBM HTTP Server V8.0 -> Start Key Management Utility.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  2. Click the button to create a new keyring file.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  3. Enter a file name for the keyring file. In this example, we use key.kdb. Select the location to save the keyring file. We use just C:\IBM\HTTPServer\ in this example. Then click OK to continue.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  4. Enter a password twice to secure your keyring file. It is important to check the Stash password to a file option. Then click OK to continue.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  5. If you want to install a certificate issued to your company, then you must create a Certificate Request and send it to the Certificate Authority. When your request is certified you get back a file containing this certificate. Then just click Receive... to import the certificate.
  6. But if you want to create a self signed certificate for this installation you have to click New Self Signed....
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  7. Give the certificate a name. In this example we use the host name connections.renovations.com. Then click OK to continue.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  8. The new self signed certificate is created and stored in the keyring file. Close the ikeyman application.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  9. In the File Explorer navigate to the C:\IBM\HTTPServer directory. There you can see the three files that where created with the ikeyman application.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  10. In the Integrated Solutions Console navigate to Servers -> Server Types -
     
    Web servers
    .
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  11. Select webserver1 and click Stop.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  12. The webserver1 has stopped successfully. Now click webserver1 to open the configuration page.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  13. On the right side click Configuration File. Or just Edit.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  14. At the end of the file add these lines:
    LoadModule ibm_ssl_module modules/mod_ibm_ssl.so
         <IfModule mod_ibm_ssl.c>
           Listen 0.0.0.0:443
           <VirtualHost *:443>
             ServerName connections.renovations.com
             #DocumentRoot C:\IBM\HTTPServer\htdocs
             SSLEnable
           </VirtualHost>
         </IfModule>
         SSLDisable
         Keyfile "C:\IBM\HTTPServer\key.kdb"
         SSLStashFile "C:\IBM\HTTPServer\key.sth"

  15. 配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  16. Click Apply to continue.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  17. Now click OK to close the editor.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  18. Click Web servers.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  19. Select the webserver1 and click Start.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  20. The Web server has started successfully.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客

Adding certificates to the WebSphere trust store



About this task


To establish trusted server to server communication for IBM Connections, import signer certificates from IBM HTTP Server into the WebSphere Application Server default trust store.

There are different types of certificates that you can use. This procedure describes how to import a self-signed certificate. You can also import a certificate that you purchased from a third-party Certificate Authority. To help decide a key file strategy for your environment, go the IBM HTTP Server information center.

To import a public certificate from IBM HTTP Server to the default trust store in IBM WebSphere Application Server, complete the following steps.

Procedure

  1. Click Security -> SSL certificate and key management.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  2. Click Key stores and certificates.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  3. Now click CellDefaultTrustStore.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  4. Click Signer certificates.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  5. Click Retrieve from port.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  6. Enter your IBM HTTP Server DNS name, the SSL port of the IBM HTTP Server server and an alias for the certificate. Then click Retrieve signer information.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  7. The IBM HTTP Server certificate (the self signed certificate that we have created with the IBM HTTP Server key management utility) is retrieved. Click OK to continue.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  8. Click Save to save the last changes.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  9. Logout from the Integrated Solutions Console.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客

Determining which files to compress


Before you begin


This is an optional configuration. You do not need to perform this procedure if you are compressing content elsewhere in your network. Compression requires a significant amount of CPU; you must monitor resource availability if you choose to use this option.

About this task


The directives discussed here do not compress images, but do compress JavaScript?.

To specify which types of files to compress, complete the following steps:

Procedure

  1. Open your File Explorer and navigate to the C:\IBM\HTTPServer\conf directory. Then open the httpd.conf file with your Editor or Notepad.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  2. Search for the mod_deflat.so string.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  3. If the line containing the string is commented (starting with the # letter) then un-comment it by removing this # letter.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  4. Add the following lines after the un-commented LoadModule... line:
    #Only the specified MIME types will be compressed.

    AddOutputFilterByType DEFLATE application/atom+xml
    AddOutputFilterByType DEFLATE application/atomcat+xml
    AddOutputFilterByType DEFLATE application/javascript
    AddOutputFilterByType DEFLATE application/json
    AddOutputFilterByType DEFLATE application/octet-stream
    AddOutputFilterByType DEFLATE application/x-javascript
    AddOutputFilterByType DEFLATE application/xhtml+xml
    AddOutputFilterByType DEFLATE application/xml
    AddOutputFilterByType DEFLATE text/css
    AddOutputFilterByType DEFLATE text/html
    AddOutputFilterByType DEFLATE text/javascript
    AddOutputFilterByType DEFLATE text/plain
    AddOutputFilterByType DEFLATE text/xml
    AddOutputFilterByType DEFLATE text/xsl


    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  5. Add these lines after the AddOutputFilterByType... lines:
    # Ensures that images and executable binaries are not compressed
    SetEnvIfNoCase Request_URI \\.(?:gif|jpe?g|png|exe)$ no-gzip dont-vary
    # Ensure that proxies do not deliver the wrong content
    Header append Vary User-Agent env=!dont-vary


    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  6. Search for the mod_headers.so string.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  7. If found, check that the line is un-commented (without a trailing # letter).
  8. Then save and close the httpd.conf file.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  9. Restart the IBM HTTP Server V8.0 service.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  10. The IBM HTTP Server V8.0 service is restarting.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客

Updating web addresses in IBM HTTP Server


By default, the web address that you enter to access IBM Connections applications includes the port number for each application. To avoid using port numbers, update the web addresses by editing the LotusConnections-config.xml file. IBM HTTP Server can then redirect requests to the appropriate port for each application.

To update the web addresses to your IBM Connections applications, complete the following steps:

Procedure

  1. First you need to stop your IBM Connections Application Server.
    Open a CMD Line window and navigate to the cd C:\IBM\WebSphere\AppServer\profiles\Dmgr01\bin directory. Then enter the stopserver connections_server -username wasadmin -password passw0rd command.
    Wait until the server has stopped.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  2. When the server has stopped, change to the Dmgr Profile directory with the cd \IBM\WebSphere\AppServer\profiles\Dmgr01\bin command. Then enter thewsadmin -lang jython -username wasadmin -password passw0rd command.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  3. The wsadmin command has started successfully. You can see the wsadmin> command prompt.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  4. To initialize the Connections Administration enter the execfile(“..\config\bin_lc_admin\connectionsConfig.py”) command.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  5. Enter the command to check out the Connections Configuration file:
    LCConfigService.checkOutConfig(“C:\Install”,”connectionsCell01”).
    The first parameter in the command contains the destination directory. This directory must exist. If you use the C:\Install directory you can be sure it exists. The second parameter in the command is the name of your Cell. It is based on the hostname of the machine. You can find it here:C:\IBM\WebSphere\AppServer\profiles\Dmgr01\config\cells\xxxxx
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  6. Open your File Explorer and navigate to the C:\Install directory. Then open the LotusConnections-config.xml file for editing.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  7. In this file you can find several lines containing the port number in the path. This must be changed.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  8. Find the string
    http://connections.renovations.com:9081
    Replace with
    http://connections.renovations.com
    Click Replace All.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  9. Find the string
    https://connections.renovations.com:9444
    Replace with
    https://connections.renovations.com
    Click Replace All.
    Now save the file and close the editor.

    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  10. Switch back to the CMD line window with the IBM Connections Config Admin console and enter the LCConfigService.checkInConfig() command.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  11. Enter the synchAllNodes(.) command.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  12. To exit the wsadmin console enter the exit command.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  13. Now you can start up your IBM Connections Application Server with the
    cd \IBM\WebSphere\Appserver\profiles\AppSrv01\bin command.
    And then startserver connections_server.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  14. Wait 15 minutes until the server is started completely. Then enter the URL https://connections.renovations.com/homepage in your Browser.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  15. Understand the Risks, Add the exception and get the certificate and confirm the Security Exception
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  16. Enter the credentials of a LDAP directory user and click Log in.
    配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客



IBM Connections and the IBM HTTP Server are now configured successfully to use secure SSL connection.
配置IBM HTTP Server for Connections - mylotustips - mylotustips的博客
  评论这张
 
阅读(712)| 评论(0)
推荐 转载

历史上的今天

在LOFTER的更多文章

评论

<#--最新日志,群博日志--> <#--推荐日志--> <#--引用记录--> <#--博主推荐--> <#--随机阅读--> <#--首页推荐--> <#--历史上的今天--> <#--被推荐日志--> <#--上一篇,下一篇--> <#-- 热度 --> <#-- 网易新闻广告 --> <#--右边模块结构--> <#--评论模块结构--> <#--引用模块结构--> <#--博主发起的投票-->
 
 
 
 
 
 
 
 
 
 
 
 
 
 

页脚

网易公司版权所有 ©1997-2017