St802 Entry

Lotus Sametime EntryVersion 8.0.2Version 8.0.2

Lotus Sametime EntryInstallation and Administration Guide

SC23-8758-02

NoteBefore using this information and the product it supports, read the information in Notices on page 505.

Edition notice

This edition applies to version 8.0.2 of IBM Lotus Sametime Entry (product number 5724-T65) and to all subsequentreleases and modifications until otherwise indicated in new editions.

Copyright IBM Corporation 2007, 2009.US Government Users Restricted Rights Use, duplication or disclosure restricted by GSA ADP Schedule Contractwith IBM Corp.

ContentsChapter 1. Sametime Server Installation 1

Chapter 2. Verifying systemrequirements . . . . . . . . . . . . 3

Chapter 3. Downloading Lotus Sametimefiles for installation . . . . . . . . . . 5

Chapter 4. Preparing for a newSametime installation . . . . . . . . . 7Planning for your Sametime installation . . . . . 7Preparing the AIX, Solaris, or Linux environment . . 9Preparing the TCP/IP Environment on i5/OS . . . 10

Verifying host table entries for i5/OS . . . . . 10Verifying configuration of existing i5/OS Dominoservers . . . . . . . . . . . . . . . 10Selecting a TCP/IP address for your i5/OSSametime server . . . . . . . . . . . . 11Adding a TCP/IP address on i5/OS . . . . . 11Updating the host table on i5/OS . . . . . . 12Updating the Domain Name Server for i5/OS . . 13Updating the configuration of existing i5/OSDomino servers . . . . . . . . . . . . 14Updating the HTTP server configuration oni5/OS . . . . . . . . . . . . . . . 15

Chapter 5. Installing a Domino serverand clients . . . . . . . . . . . . . 17Planning your Domino configuration . . . . . . 17Registering a server to an existing Domino domain 18Installing a Domino server . . . . . . . . . 18

Installing a Domino server on Windows . . . . 19Installing a Domino server on AIX, Linux, orSolaris . . . . . . . . . . . . . . . 19Installing a Domino server on i5/OS . . . . . 21

Installing the Notes client and Dominoadministrative client . . . . . . . . . . . 24Verifying your Lotus Domino environment . . . . 25

Verifying the Domino Server document settings 25Verifying the Domino server is accessible . . . 28

Chapter 6. Preparing to upgrade anexisting Sametime environment . . . . 29Before upgrading . . . . . . . . . . . . 29

Backing up your server data. . . . . . . . 30Summary of upgrade considerations by release . . 31Upgrading from Instant Messaging Limited Use orEntry to Sametime Standard on i5/OS . . . . . 32

Chapter 7. Installing Sametime . . . . 35Verifying you are prepared to install Sametime . . 35Installing a Sametime server on Windows, AIX,Linux or Solaris . . . . . . . . . . . . . 36

Installing from a wizard . . . . . . . . . 36Silently installing Sametime server on AIX,Linux, Windows, or Solaris . . . . . . . . 44Installing Sametime using the console on AIX,Linux, Windows, or Solaris . . . . . . . . 45

Installing Sametime server on i5/OS . . . . . . 46Verifying authority to install and set upSametime on i5/OS. . . . . . . . . . . 46Pre-accepting the Lotus Sametime softwareagreements on i5/OS . . . . . . . . . . 47Installing or upgrading Sametime on i5/OS . . 48Verifying your i5/OS library list . . . . . . 49Adding Sametime to an i5/OS Domino Server. . 50

Completing the upgrade process . . . . . . . 52Upgrading the vpuserinfo.nsf template . . . . 53Migrating user privacy information . . . . . 54

Verifying the Sametime Server Installation . . . . 57

Chapter 8. Configuring Sametime . . . 61Configuring support for IPv6 addressing with LotusSametime . . . . . . . . . . . . . . . 61

Configuring Lotus Domino for IPv6 . . . . . 61Editing the ststart script on a Linux SuSE server 69Configuring the Community Services for IPv6 . . 70Configuring the Meeting Services for IPv6 . . . 72Configuring a stand-alone Community Mux forIPv6 . . . . . . . . . . . . . . . . 74

Configuring the directory. . . . . . . . . . 76Configuring Sametime to access LDAP . . . . 76Populating the Domino Directory . . . . . . 77

Setting up single sign on authentication . . . . . 78Accessing Sametime Instant Messaging from LotusNotes . . . . . . . . . . . . . . . . 79

Chapter 9. Installing SametimeIntegration for Microsoft Office . . . . 81Installing Office Integration . . . . . . . . . 82

Troubleshooting Microsoft Office integration . . 84Installing the Meeting Integrator . . . . . . . 86Setting up Office SharePoint integration . . . . . 87

Setting up the Office SharePoint Server . . . . 87Verifying the Office SharePoint integration setup 91Troubleshooting Office SharePoint integration . . 92

Chapter 10. Preparing the Sametimeclient . . . . . . . . . . . . . . . 95Before deploying the Sametime Connect client. . . 95Installing the Sametime Connect client from a CD 97

Installing the Sametime Connect client from CDon Windows . . . . . . . . . . . . . 97Installing the Sametime Connect client from CDon Linux . . . . . . . . . . . . . . 100Installing the Sametime Connect client from CDon Mac OS X . . . . . . . . . . . . 101

Copyright IBM Corp. 2007, 2009 iii

Automatically upgrading Sametime Connect 8.0clients . . . . . . . . . . . . . . . . 102

Differences between update sites and manifests 102How the manifest update works . . . . . . 103Enabling automatic upgrades for SametimeConnect 8.0 clients . . . . . . . . . . 105

Making the client installation files available fordownload . . . . . . . . . . . . . . 107

Installing the Sametime Connect client from thenetwork . . . . . . . . . . . . . . 108

Installing optional client features . . . . . . . 109Enabling optional features in the base clientinstall . . . . . . . . . . . . . . . 109Adding optional features to the client afterinstall . . . . . . . . . . . . . . . 111

Installing client updates from a secured site . . . 114

Chapter 11. Uninstalling a Sametimeserver. . . . . . . . . . . . . . . 117Uninstalling Sametime server on Windows . . . 117Uninstalling Sametime server on AIX, Linux, orSolaris . . . . . . . . . . . . . . . . 118Removing Sametime from an i5/OS Domino Server 118

Chapter 12. Sametime ServerAdministration . . . . . . . . . . . 121

Chapter 13. What is Lotus SametimeEntry? . . . . . . . . . . . . . . 123Sametime Administration Tool. . . . . . . . 124Sametime services . . . . . . . . . . . . 125

Domino Services . . . . . . . . . . . 125Community Services . . . . . . . . . . 126

Basic networking concepts . . . . . . . . . 126Configuring the mixed environment . . . . . . 127

The mixed environment on i5/OS . . . . . 128Integrating the Limited Use and Entry offeringswith Sametime Standard . . . . . . . . 129Assign users to an appropriate home Sametimeserver . . . . . . . . . . . . . . . 131Preventing instant messaging-only users fromcreating or attending meetings . . . . . . 131End user issues in a mixed environment . . . 134

Chapter 14. Starting and stopping theSametime server . . . . . . . . . . 137Starting and stopping a Sametime server onWindows . . . . . . . . . . . . . . . 137Starting and stopping a Sametime server on AIX,Linux, or Solaris . . . . . . . . . . . . 138Starting and stopping a Sametime server on i5/OS 139Restart Chart . . . . . . . . . . . . . 140

Chapter 15. Using the SametimeAdministration Tool. . . . . . . . . 157Starting the Sametime Administration Tool . . . 157

User name and password requirements. . . . 157Details: Starting the Sametime AdministrationTool . . . . . . . . . . . . . . . 158

Overview of the Sametime Administration Toolfeatures . . . . . . . . . . . . . . . 158

Sametime Administration Tool. . . . . . . 160Monitoring the Sametime server . . . . . . 161Logging Sametime activity . . . . . . . . 161Managing users and Domino Directories . . . 162Managing users and LDAP directories . . . . 162Configuring ports and network connectivity . . 163Configuring Community Services . . . . . 163

Additional administrative tasks . . . . . . . 164Deploying multiple Sametime servers . . . . 164Managing users and LDAP directories . . . . 164Managing security. . . . . . . . . . . 165Server Overview feature. . . . . . . . . 166Message From Administrator feature . . . . 166

Adding a new Sametime administrator . . . . . 166Create a Person document for the administrator 167Create an Administrators Group document . . 168Add the Administrators Group document toSametime database ACLs . . . . . . . . 169Modifying the Server document of theSametime server . . . . . . . . . . . 171Adding and removing names from anAdministrators Group document . . . . . . 172

Roles in Sametime database ACLs . . . . . . 172Roles in the Sametime Configuration database(stconfig.nsf) . . . . . . . . . . . . 173Roles in the Domino Directory (names.nsf) . . 173Roles in the Domino Web Administrationdatabase (webadmin.nsf) . . . . . . . . 174

Skills the Sametime Administrator needs . . . . 175

Chapter 16. Special Considerationsfor Running Sametime on AIX, Linux,and Solaris . . . . . . . . . . . . 179Setting up AIX or Solaris to run a Sametime server 179Running a Sametime server as a backgroundprocess in AIX . . . . . . . . . . . . . 179Considerations for AIX, Linux, and Solaris . . . 181

Chapter 17. Managing Sametime users 183Setting up the Domino Directory . . . . . . . 183

Benefits of using a Domino directory . . . . 183The primary Domino directory . . . . . . 184Directory views used by Sametime . . . . . 184Using multiple Domino directories . . . . . 184Using Directory Assistance . . . . . . . . 184Sharing directory information with ExtendedServer Directory Catalogs . . . . . . . . 185Register users in the Domino Directory. . . . 186Create groups in the Domino Directory. . . . 188

Setting up an LDAP directory . . . . . . . . 189Set up an LDAP connection . . . . . . . 190Replace the Domino Directory with an LDAPdirectory . . . . . . . . . . . . . . 211Replace the Domino Directory with an LDAPdirectory for i5/OS . . . . . . . . . . 224Solve token authentication problems . . . . 225Manage buddy lists and privacy lists . . . . 228

iv Lotus Sametime Entry: Installation and Administration Guide

Use Java classes to customize LDAP directorysearches . . . . . . . . . . . . . . 228

Setting user policy with Sametime . . . . . . 237What's covered in Sametime Policy . . . . . 237About Policy assignment . . . . . . . . 238Configuring the server for Policy . . . . . . 238Policy search filters . . . . . . . . . . 239Policy setting table . . . . . . . . . . 239Settings for server community (default policy) 242Settings for Instant Messaging only (defaultpolicy). . . . . . . . . . . . . . . 243Setting new policy for groups . . . . . . . 245Assign users or groups to existing policy groups 245Policy for anonymous users . . . . . . . 246Policy and LDAP . . . . . . . . . . . 247Allowing file transfers . . . . . . . . . 247

Changing user names . . . . . . . . . . 248Changing names with AdminP . . . . . . 248Changing names . . . . . . . . . . . 256

Chapter 18. Configuring SametimeConnectivity . . . . . . . . . . . . 269Ports used by the Sametime server . . . . . . 269Configuring Sametime "Networks and Ports"settings . . . . . . . . . . . . . . . 272Proxy support for Sametime clients . . . . . . 273Networks and Ports settings . . . . . . . . 274

HTTP Services settings . . . . . . . . . 276Community Services Network settings . . . . 277

Community Services connectivity and the homeSametime server . . . . . . . . . . . . 283Changing the IP address of an i5/OS Sametimeserver . . . . . . . . . . . . . . . . 285Changing the host name of an i5/OS Sametimeserver . . . . . . . . . . . . . . . . 286

Chapter 19. Configuring LotusSametime for mobile users . . . . . 289Configuring the Lotus Domino server for LotusSametime Mobile support . . . . . . . . . 289

Chapter 20. Configuring theCommunity Services . . . . . . . . 291About the Community Services . . . . . . . 291Writing custom messages for clients . . . . . . 292Managing client types and logins. . . . . . . 294

The single login type . . . . . . . . . . 294Configuring the preferred login list . . . . . 295Forcing users to connect to a home server . . . 296Client cooperation with the proxy . . . . . 296

Community Services server configuration settings 297Number of entries on each page in dialog boxesthat show names in the directory . . . . . . 298How often to poll for new names added to theSametime Community directory . . . . . . 299How often to poll for new servers added to theSametime Community . . . . . . . . . 299Maximum user and server connections to theCommunity server . . . . . . . . . . 300

Allow users to authenticate using either LTPAor Sametime Tokens (stauths.nsf and stautht.nsf) 301Allow or disallow virus scanning. . . . . . 302

Anonymous Access Settings for CommunityServices . . . . . . . . . . . . . . . 303

Anonymous users can participate in meetings orenter virtual places . . . . . . . . . . 304Users of Sametime applications can specify adisplay name so that they do not appear onlineas "anonymous." . . . . . . . . . . . 305Directory Searching and Browsing options. . . 306

Prohibiting logins from non-secure clients to theserver . . . . . . . . . . . . . . . . 307

Specifying the security level (minimum allowedclient version) . . . . . . . . . . . . 308Allowing logins from clients that do notconform to the security level . . . . . . . 310Configuring the server to send instant messagesto clients that do not conform to the securitylevel . . . . . . . . . . . . . . . 311Specifying the name to display in the title bar ofinstant messages sent by the server . . . . . 313

Deploying a Community Services multiplexer on aseparate machine . . . . . . . . . . . . 313

Installing and setting up a separate CommunityServices multiplexer . . . . . . . . . . 315

Chapter 21. Business Card . . . . . 321Setting up the business card . . . . . . . . 321

Elements available for Business Card . . . . 321Edit Business Card Attribute values . . . . . 322

Using repositories . . . . . . . . . . . . 323Using the single repository with Domino . . . 324Using the single repository with LDAP. . . . 326Using the dual repository with Domino andLDAP . . . . . . . . . . . . . . . 329Using the dual repository with Domino andcustom . . . . . . . . . . . . . . 332Using the dual repository with LDAP andDomino Notes . . . . . . . . . . . . 335Using the dual repository with LDAP andcustom . . . . . . . . . . . . . . 341Troubleshooting Business Cards . . . . . . 345

Domino LDAP special configuration data . . . . 347About the User Information servlet application . . 348UserInfoConfig Debug tracing . . . . . . . . 348Configuring the photo for Business Card . . . . 349

Photos in the LDAP directory . . . . . . 349Photos in the Domino directory . . . . . . 350

Additional configurations for black boxes . . . . 351Retrieving data from a customized database . . 351

Chapter 22. Monitoring the Sametimeserver . . . . . . . . . . . . . . 355Accessing the Monitoring charts . . . . . . . 356General server status . . . . . . . . . . . 356Logins. . . . . . . . . . . . . . . . 357Miscellaneous . . . . . . . . . . . . . 357

Contents v

Chapter 23. Using the Sametimelogging features . . . . . . . . . . 359Server community logins/logouts . . . . . . 360Server community statistics. . . . . . . . . 362Community Events . . . . . . . . . . . 363Domino log . . . . . . . . . . . . . . 363NSD log . . . . . . . . . . . . . . . 366Sametime log settings . . . . . . . . . . 366

General log settings . . . . . . . . . . 366

Chapter 24. Working with Sametimesecurity . . . . . . . . . . . . . . 369Getting started with Sametime security . . . . . 370

The required fully-qualified server name . . . 370Basic password authentication andauthentication by token . . . . . . . . . 370User requirements for basic passwordauthentication . . . . . . . . . . . . 371Changing a user's password . . . . . . . 374Ensuring Sametime servlet access when Dominorequires SSL for all connections . . . . . . 375

Domino security and the Web browser connection 375Using database ACLs for identification andauthentication . . . . . . . . . . . . . 376

Adding a name to a database Access ControlList (ACL) . . . . . . . . . . . . . 377Database ACL settings . . . . . . . . . 378Anonymous access and database ACLs . . . . 382Basic password authentication and databaseACLs . . . . . . . . . . . . . . . 384

Authentication by token using LTPA and Sametimetokens . . . . . . . . . . . . . . . . 386

Authentication by token using the DominoSingle Sign-On (SSO) feature . . . . . . . 387Altering the Domino Web SSO configurationfollowing the Sametime server installation. . . 388Manually enabling the Domino SSO feature . . 391Using the Sametime custom logon form for SSO 394Authentication by token using Secrets andTokens databases . . . . . . . . . . . 396

Configuring Sametime for SPNEGO single sign-on 398Sametime SPNEGO login sequence . . . . . 398Configuring Sametime to use Active Directory 399Validating the SPNEGO configuration . . . . 401Configuring the Sametime Connect client fortoken login . . . . . . . . . . . . . 401

Configuring Sametime to use SSL encryption . . . 402Enabling encryption for Lotus SametimeServices, and between Lotus Sametime and Webbrowsers . . . . . . . . . . . . . . 402Enabling encryption between Lotus Sametimeand the LDAP server . . . . . . . . . . 422

Chapter 25. Deploying multipleSametime servers . . . . . . . . . 437About Sametime server clusters . . . . . . . 437Advantages of using multiple Sametime servers 437Integrating a Sametime server into an existingSametime community . . . . . . . . . . 438

Installing a Sametime server into an existingSametime community . . . . . . . . . 438Configuring ports for server-to-serverconnections . . . . . . . . . . . . . 442Synchronizing the Sametime server with otherSametime servers . . . . . . . . . . . 442

Extending Sametime to Internet users . . . . . 444Positioning a Sametime server in the networkDMZ . . . . . . . . . . . . . . . 445Opening ports on the internal firewall . . . . 446Opening ports on the external firewall . . . . 449

Extending a single Sametime community acrossmultiple Domino domains . . . . . . . . . 452

Example of extending a single Sametimecommunity across two Domino domains . . . 453

Chapter 26. Setting up a CommunityServices cluster without clusteringthe Meeting Services . . . . . . . . 463Community Services cluster setup procedures . . 463

Community Services clustering preparations . . 464Deploying an LDAP directory server . . . . 465Installing the Sametime servers for theCommunity Services cluster . . . . . . . 466Creating a Domino server cluster . . . . . . 466Setting up replication of Sametime databases 468(Optional) Deploying separate CommunityServices multiplexers . . . . . . . . . . 470Set up the load-balancing mechanism (rotatingDNS or Network Dispatcher) . . . . . . . 476Creating a cluster document in theConfiguration database (stconfig.nsf) . . . . 478Copying a cluster document to other Sametimeservers in the community . . . . . . . . 479Configuring client connectivity for theCommunity Services cluster . . . . . . . 480

Adding a server to the Community Services cluster 484Creating multiple Community Services clusters in asingle Sametime community . . . . . . . . 485Rotating DNS Limitations with cached DNSresolve requests . . . . . . . . . . . . 486

Chapter 27. Using theStdebugTool.exe utility . . . . . . . 489Running the StdebugTool.exe utility . . . . . . 489

Trace file location . . . . . . . . . . . 490Step-by-step example of running theStdebugTool.exe utility . . . . . . . . . 490

Chapter 28. Configuring SiteMinderfor the Lotus Sametime server . . . . 493Creating configuration objects for Sametime . . . 493Configuring realms for Lotus Sametime . . . . 494Installing and configuring the SiteMinder WebAgent . . . . . . . . . . . . . . . . 496Add the DSAPI filter file name to the DominoDirectory . . . . . . . . . . . . . . . 498Enabling SiteMinder for Lotus Sametime . . . . 498

vi Lotus Sametime Entry: Installation and Administration Guide

Chapter 29. Troubleshooting . . . . . 499

Chapter 30. Glossary . . . . . . . . 501

Notices . . . . . . . . . . . . . . 505

Trademarks . . . . . . . . . . . . . . 507

Index . . . . . . . . . . . . . . . 509

Contents vii

viii Lotus Sametime Entry: Installation and Administration Guide

Chapter 1. Sametime Server InstallationSametime Server Installation provides information where you can find systemrequirements, installation, configuration, upgrade, and administration information.

Copyright IBM Corp. 2007, 2009 1

2 Lotus Sametime Entry: Installation and Administration Guide

Chapter 2. Verifying system requirementsBefore installing IBM Lotus Sametime, install the supported hardware andsoftware.

Before you begin

System requirements for Release 8.0.2 of the Lotus Sametime family of products ismaintained as an IBM Tech Note at the following Web address:http://www.ibm.com/support/docview.wss?rs=477&uid=swg27013765


Chapter 3. Downloading Lotus Sametime files for installationIBM enables users to download IBM Lotus Sametime installation kits from thePassport Advantage Web site.

Before you begin

You must have a Passport Advantage account with IBM to use this facility. Formore information on using Passport Advantage, see the following Web address:www.ibm.com/software/howtobuy/passportadvantage/paocustomer/docs/en_US/ecare.html

About this task

The Sametime 8.0.2 Download document contains a complete listing of requiredand optional parts for this release. Locate the components you need in thedocument's listing, and download the packages labelled with the correspondingpart numbers. You can view the Download document at the following Webaddress:www.ibm.com/support/docview.wss?rs=477&uid=swg24020732


Chapter 4. Preparing for a new Sametime installationPrepare your environment for a new Sametime installation.

Planning for your Sametime installationThe following IBM Lotus Sametime features should be considered prior toinstalling Lotus Sametime.

Directory Type

You can configure IBM Lotus Sametime to use the Domino directory or to connectto an LDAP directory on a third-party server. The install procedure and theinformation you need to know are different depending on the type of directoryyou select.

When Lotus Sametime is configured to connect to an LDAP directory, Sametimeusers are managed in an LDAP directory on another server. If you plan to use anLDAP directory, consult with your LDAP administrator before installing Sametime.Be prepared to specify at least the information necessary to connect to your LDAPserver. For more details, see Verifying you are prepared to install Sametime.

If you decide to use a Domino Directory, you need to consider whether you willset up a new Domino server in a new Domino domain or whether you will set upa new Domino server and add it to an existing Domino domain. Refer toPlanning your Domino configuration on page 17

Domino server dedicated to Sametime

It is always recommended that you set up a new Domino server for runningSametime. The server should only be used for Sametime. For AIX, Solaris, Linuxand i5/OS, you can use a new partitioned Domino server running on the sameserver computer with existing Domino servers.

Clustering Community Services

If you have a large number of Sametime users, you can install multiple Sametimeservers and cluster the Community Services for load balancing and to reducenetwork usage. However, you must install one Sametime server at a time. Forexample, if you have three Domino servers installed and you want to install LotusSametime on all three Domino servers, you would have to do three separateSametime installs. For more information, see Setting up a Community Servicescluster without clustering the Meeting Services.

Clustering Meeting Services

If you have a large number of Sametime servers and want to cluster MeetingServices, you can use the IBM Lotus Sametime Enterprise Meeting Server toprovide load balancing and failover support for meetings (Web conferences). TheSametime Enterprise Meeting Server is the central component of a SametimeMeeting Services cluster, providing the end-user interface, administration tool, andmeeting management functionality for all Sametime servers in the Meeting Services


cluster. You install the Sametime Enterprise Meeting Server on a separate computerand then add each of your Sametime servers to the Meeting Services cluster.

Note: The Sametime Enterprise Meeting Server is not a component of Sametime; itis distinct product that must be purchased from IBM separately. For moreinformation, see Sametime Enterprise Meeting Server.

Sametime Conversion Services

This feature converts files to slides for display in a meeting. Conversion servicescan run as an integrated function of your Sametime server or on a standaloneWindows server. If you plan to make extensive use of Sametime ConversionServices, it is preferable to run this feature on a standalone Windows server. Aremote conversion server provides more robust performance, and better-qualityrendering of slides for non-Windows Sametime servers. Even for WindowsSametime servers, remote conversion has the advantage of off-loading theworkload associated with file conversion. For additional information refer to AboutSametime Conversion Services.

Network performance

For optimal performance, the Sametime server should be placed at acentrally-located network backbone to reduce the number of network hopsbetween clients and the server. Ideally, there should be no more than one WANhop for every possible client to server connection. Clients that make multiple WANhops to connect to the server will experience slower performance than clientsconnecting through a LAN or making one WAN hop to the server. Fororganizations that have large networks, it may be necessary to install multipleSametime servers to reduce the number of WAN hops for clients. For moreinformation about working with multiple Sametime servers, see DeployingMultiple Sametime servers.

National language considerations

You do not need to select a language when installing Sametime. The languagedisplayed for Sametime interfaces is primarily determined by the individual user'slanguage settings. However, it is recommend that you install the Domino languagepack that corresponds to the language used by the majority of your Sametimeusers. If no language pack exists for your language on your preferred platform, seethe Technotes, available at http://www.ibm.com/software/support, forinformation on how to localize the Domino server.

Installing Sametime Entry or Sametime Instant MessagingLimited Use

The installation procedures described here apply to all versions of Sametime:Sametime Standard, Sametime Instant Messaging Limited Use, and SametimeEntry. If you plan to use a mixture of these different Sametime server types in yourenvironment, there are special configuration requirements to ensure that each ofyour users can access only the Sametime features they are entitled to use. SeeConfiguring the mixed environment.

Installing in an environment with other Sametime servers

Even if you have decided not to cluster your Lotus Sametime servers, there arespecial considerations when installing Sametime in an environment with other


Sametime servers. When multiple Sametime servers are installed, you mustsynchronize the Sametime servers to operate as a single community. See Deployingmultiple Sametime servers.

Preparing the AIX, Solaris, or Linux environmentSet up the environment on a computer running IBM AIX, Linux, or Sun Solarisbefore installing IBM Lotus Domino and IBM Lotus Sametime.

About this task

Before you attempt to install IBM Lotus Domino and Lotus Sametime on acomputer, you must set up the environment as described below.1. You must log in as root to install the Lotus Domino and Lotus Sametime

server.2. You must have a designated OS user that is used to start the Sametime server,

and this user must be a part of a designated OS group.The default user is "notes" and the default group is also "notes," but anynon-root username and group can be used. To verify that the designated OSuser is part of the OS group, type the following, where dominoUserName is thename of the notes user.groups dominoUserNameFor example, if you type groups notes and get the return value of notes, thisindicates that the user name "notes" is a part of the group "notes".

3. Verify the amount of disk space you have. Make sure that the file system has atleast 1GB of disk space. Type the following command: type "df -k"

Note: If you are installing from a downloaded image rather than a CD, youmust also consider the disk space required for the *.tar install files and theunpacked install files, which needs approximately 2GB of disk space.

4. (AIX only) The Input Output Completion Protocol (IOCP) must be installedand configured.If not, it will not allow the Domino setup to begin, and you will get thefollowing error:Your system is not configured with I/O Completion Ports. I/O Completion Ports must be installed in order to run the Domino 7 Server. Install and m

5. (Linux RHEL only) Disable SELinux on any RedHat operating system:a. Open the /etc/selinux/config file for editing.b. Locate the SELINUX setting.c. Change its value to either disabled or permissive.d. Save and close the file.e. Restart the Linux server.

6. Additional preparation is necessary if you plan to install Sametime on apartitioned Domino server on AIX, Linux or Solaris:a. Ensure that each partitioned server has a unique IP address.

You can map multiple IP addresses to one network card using the ifconfigcommand:ifconfig device alias new_IP_address netmask subnet

For example:ifconfig en0 alias 9.3.187.209 netmask 255.255.255.128

b. Ensure that each partitioned server has a DNS name that maps to its uniqueIP address.

Chapter 4. Preparing for a new Sametime installation 9

If a DNS name can be resolved to multiple IP addresses, be sure to read the"multi-homed" notes in Installing partitioned Domino servers on AIX, Linuxor Solaris.

c. It is recommended (but not required) that each partitioned server be run bya unique user account.Create a new UNIX Notes user for each partitioned server that you plan toinstall. You can use a single notes group for all partitions

Preparing the TCP/IP Environment on i5/OSYour IBM Lotus Sametime server must be configured to use one or more specificTCP/IP addresses so that it will not attempt to share TCP/IP ports with any otherHTTP servers on your system.,

About this task

This section guides you through the process of verifying your TCP/IPconfiguration, making changes if necessary to resolve conflicts between servers,and gathering the TCP/IP information that you will need to configure yourSametime server.

Results

Verifying host table entries for i5/OSIBM Lotus Sametime provides a list of host table entries that are already definedon your server.

About this task

To verify your host table entries, follow these steps:1. From any i5/OS command line, type the following command and press Enter:

CFGTCP

2. On the Configure TCP/IP display, select option 10 to work with TCP/IP HostTable entries.

3. Record each host name and the corresponding TCP/IP address as you mayneed this information later.

Results

Verifying configuration of existing i5/OS Domino serversIBM Lotus Sametime provides which TCP/IP addresses are currently being usedby your Domino servers.

About this task

Note: If you do not have any Domino servers configured on your system, you canskip this section.

To determine which TCP/IP addresses are currently being used by your Dominoservers, follow these steps:

From an i5/OS command interface, sign on to your server.


Results

Note: The following steps assume that your Domino servers are already started.1. Verify the current TCP/IP addresses for each Domino server by entering the

following command:WRKDOMCSL servername

2. From the Domino Console display, type the following command and pressEnter:sh port tcpip

3. Press F5 to refresh the screen.v If the server is using only one TCP/IP address, you will see a specificTCP/IP Local Address listed using port 1352. For example, 10.1.2.3:1352.

v If the server is using all active TCP/IP addresses, you will see *:1352displayed as the Local Address rather than a particular TCP/IP address.

4. Record the results for each Domino server, as you will use this informationlater.

Selecting a TCP/IP address for your i5/OS Sametime serverDetermine which TCP/IP addresses are already defined on your system anddecide which address you will use for your IBM Lotus Sametime server. You willalso need to determine whether you need to define additional TCP/IP addresses toavoid conflicts between servers.

About this task1. Determine which TCP/IP addresses are currently defined for your system:

v From any i5/OS command line, type the following command and pressEnter:CFGTCP

v On the Configure TCP/IP display, select option 1 to Work with TCP/IPinterfaces and display a list of the currently defined TCP/IP interfaces.

2. Verify that each of the TCP/IP addresses you recorded when you looked at theHost Table or ran the 'sh port tcpip' command is currently defined.

3. Verify that the system has enough TCP/IP addresses defined so that you canassign at least one for the exclusive use of each of the following:v Your Sametime serverv Each existing Domino serverv Each instance of the IBM HTTP server running on your system

4. Contact your network administrator to assign additional TCP/IP addresses andhost names if needed.

5. Ensure that the new host names are also added to your Domain Name Server(DNS).

6. Select the TCP/IP address you will assign to your Sametime server.7. Decide which TCP/IP addresses should be assigned to each existing Domino

server and each instance of the IBM HTTP server.Record this information, as you will use it later to ensure that existing serversare properly bound to specific IP addresses so that their port usage does notconflict with your Sametime server.

Adding a TCP/IP address on i5/OSTo configure an additional TCP/IP address for i5/OS, complete this task.


About this task

If you did not need to assign additional TCP/IP addresses, you can skip this topic.1. From any i5/OS command line, type the following command and press Enter:

CFGTCP

2. Select option 1 to work with TCP/IP interfaces.3. On the Work with TCP/IP Interfaces display, type a 1 in the Opt column and

press Enter to add a TCP/IP interface.4. On the Add TCP/IP Interface display, enter the following information:

Field Description

Internet Address Specify the TCP/IP address you want toadd. For example, enter 10.1.2.4.

Line Description Specify the name of the line description foryour LAN adapter. For example, enterTRNLINE.

Subnet Mask Specify the subnet mask that is appropriatefor your interface. For example, enter255.255.255.0.

5. Press Enter to add the new interface and return to the Work with TCP/IPInterfaces display.

6. To start an interface, type a 9 beside it and press Enter.

Updating the host table on i5/OSAdd an entry in the i5/OS host table for your IBM Lotus Sametime server.

About this task

To add a host table entry for your Sametime server, follow these steps:1. From any i5/OS command line, type the following command and press Enter:

CFGTCP

2. Type 10 and press Enter to work with TCP/IP host table entries.3. If one of the TCP/IP addresses that you selected is not listed in the Host Table,

follow these steps to add a new entry:v Type a 1 in the Opt column next to the blank Internet Address and press

Enter to add a Host Table Entry.v When the Add TCP/IP Host Table Entry display appears, enter the followinginformation:

Field Description

Internet Address Enter the TCP/IP address that you assignedto the Domino server. For example, enter10.1.2.4.

Host name Enter the fully qualified name of theDomino server as the host name. Forexample, enter stdom1.acme.com.


Note: Although you can add multiple host names for the same IP address,make sure you list the fully qualified name for your Domino server first,before any alternative short names.

v Press Enter to create the Host Table Entry.4. Follow these steps to update an existing Host Table Entry:

Note: If the TCP/IP address you want to use is listed in the table, but thecorresponding Domino server is not listed as one of the possible host names forthat address, you must update the existing host table entry to include theadditional host name.v Type a 2 in the Opt column next to the Internet Address and press Enter tochange the Host Table Entry.

v When the Change TCP/IP Host Table Entry display appears, you may needto Page Down to view the currently defined list of host names.

v When you have displayed the last host name, enter a '+' in the '+ for morevalues' prompt and press Enter.

v When the Specify More Values for Parameter HOSTNAME display appears,replace an existing host name or one of the *SAME entries with the fullyqualified name of your Domino server (for example, stdom1.acme.com).

Note: The fully qualified name of your Domino server must be listed first inthis table.

v Press Enter to update the host name. Press Enter again to change the HostTable Entry.

Note: You can remove a host name for an Internet Address by following theabove steps to update the Host Table Entry and replacing the host name with*BLANK.

Results

Updating the Domain Name Server for i5/OSIf you defined any additional host names, work with your TCP/IP administrator toensure that the new host names are added to your Lotus Domain Name Server(DNS).

About this task

If you have configured TCP/IP to search the DNS before searching the host table,you may need to make additional changes in your configuration. Follow thesesteps to check your TCP/IP Configuration Properties:1. From any i5/OS command line, type the following command and press Enter:

CFGTCP

2. On the Configure TCP/IP display, type 12 and press Enter to change theTCP/IP domain information.

3. On the Change TCP/IP Domain (CHGTCPDMN) display, look for the "Hostname search priority" setting.If the value is *REMOTE, either change this value to *LOCAL or verify withyour network administrator that the fully qualified host name is the first valuelisted in the DNS for the IP address associated with your Sametime server. Thefully qualified host name must be listed before any short names in order foryour Sametime server to function correctly.


If the value of this field is *LOCAL, you do not need to take any further action.You already ensured that the fully qualified host name was listed first in yourlocal host table in an earlier step.CAUTION:If you change the "Search order" you must stop and restart TCP/IP in orderfor the change to take effect.

4. Press F3 to exit.

Results

Updating the configuration of existing i5/OS Domino serversEnsure your existing Lotus Domino servers are correctly bound to the specific fullyqualified host names that you have assigned to them. This will prevent them fromconflicting with your IBM Lotus Sametime server. If necessary, you will modify theexisting Lotus Domino server settings to enable partitioning and specify a uniquefully qualified host name.

About this task

Even if you changed your server's fully qualified host name by modifying theserver's notes.ini file, the change may not have occurred in the server document.This procedure updates both the server document and the notes.ini file.1. Using a profile with the authorities listed in Chapter 1, end the Domino server,

if it is active, by typing the following command and pressing Enter:ENDDOMSVR DOM1

where DOM1 is the name of the Domino server.

Note: Ending the Domino server may take a few minutes.2. Change the Domino server settings by typing the following command and

pressing F4:CHGDOMSVR DOM1

where DOM1 is the name of the Domino server.3. In the Advanced services field, you should see *PARTITION or *ALL. If neither

value is specified, then specify *PARTITION.4. In the Internet Address field, enter the fully qualified host name for this

Domino server.5. Press Enter.

If the changes to the server settings were successful, the following message isdisplayed:Command CHGDOMSVR ended successfully.

6. Restart the Domino server by typing the following commands and pressingEnter:STRDOMSVR DOM1

Where DOM1 is the name of the Domino server.

Note: Starting the Domino server may take a few minutes.7. Using a Domino Administrator Client, edit the server settings in the Server

Document so that the Domino HTTP server binds to the specific host name.v Select the Configuration tab.v In the left pane, click Server and select All Server Documents.


v Open the server document for the Domino server and click the Edit Serverbutton.

v Select the Internet Protocols tab, and then select the HTTP tab.v In the Host name(s) field, verify the DNS name for the TCP/IP address thatyou specified in the Change Domino Server command.

v In the Bind to host name field, select Enabled.v Select the Ports tab, then select the Internet Ports tab, then select the Webtab.

v Verify in the HTTP settings that the TCP/IP port has a port numberspecified. The default port number is 80.

v Click Save and Close.8. Stop and restart the Domino server.9. When the Domino server has restarted, access it through a Notes client or a

Web browser to make sure it is still accessible using TCP/IP.

Results

Updating the HTTP server configuration on i5/OSYour IBM Lotus Sametime server will use the Lotus Domino HTTP server. It ispossible that you may have already configured IBM HTTP Server for i5/OS onyour system for other applications. If so, then you must verify that each instance ofthe HTTP server is bound to a specific TCP/IP address. This will prevent it fromconflicting with your Lotus Sametime server.

About this task

To change the HTTP server settings using commands, follow these steps:1. If the HTTP server is currently running, type the following command on any

i5/OS command line and press Enter to end it:ENDTCPSVR SERVER(*HTTP)

2. Start the HTTP Administration server by typing the following command andpressing Enter:STRTCPSVR SERVER(*HTTP) HTTPSVR(*ADMIN)

3. Open the IBM HTTP server configurations page.v Start your Web browser.v Enter the following URL:http://mysystem:2001where mysystem is the name of your system.

v Click IBM Web Administration for i5/OS.v Select the Manage tab.v Select the HTTP Servers tab.

4. Select a configuration from the menu at the top of the screen, and complete thefollowing items for each configured instance of the HTTP server:v From the list on the left pane, select General Server Configuration.v In the right pane, find the IP address and port table in the section called

Server IP address and ports to listen on.v If one of the rows in the table has an asterisk (*) in the IP Address column,then the server is listening on all IP addresses. Select that row. Replace theasterisk (*) with the IP address for this server and click Continue.


v When finished updating the server IP address table, click Apply to save yourchanges.

5. When each instance of the HTTP server is configured to use a specific IPaddress, restart the HTTP servers by typing the following command andpressing Enter:STRTCPSVR SERVER(*HTTP)

Results


Chapter 5. Installing a Domino server and clientsProvides general instructions for installing and setting up an IBM Lotus Domino

server that you will use to run Lotus Sametime.

Before you begin

If you have never installed and set up a Domino server, it is stronglyrecommended that you refer to the Lotus Domino documentation to get a fullunderstanding of how to install and set up a Domino server.

About this task

For general instructions, click any of the following topics for information oninstalling and setting up a Domino server:

Planning your Domino configurationYour IBM Lotus Sametime server will run on a Lotus Domino server. Consider thefollowing before installing the Lotus Domino server you will use for LotusSametime.v You must install the Lotus Sametime server on a Lotus Domino server. Forinformation on supported releases of Lotus Domino, refer to the DetailedRequirements tech note for the current Lotus Sametime release at the followingWeb address:http://www.ibm.com/support/docview.wss?rs=477&uid=swg27013765

v Lotus Sametime uses the directory, security, and replication features of theDomino server. The Sametime server should be completely dedicated tosupporting the real-time, interactive communication services of Lotus Sametime.Therefore, it is highly recommended that you create a new Domino server forrunning Sametime and do not use the Sametime server for other high-demandDomino services such as mail storage and routing, application and databasestorage, or centralized directory and administration services.IBM AIX, Linux, Sun Solaris and IBM i (the new name for IBM i5/OS) can runmultiple partitioned Domino servers on the same system. For these serverplatforms, you can create a new Domino server on the same system as yourexisting production server. (For i5/OS, adding Sametime to an existingproduction server is not supported.)

v If you already have a Domino server configured in the environment where youwill install Sametime, you have the option of setting up the Sametimeenvironment in one of the following ways: Install a new Domino server in a new Domino domain for running Sametime. Add a new Domino server to the existing Domino domain for running

Sametime.If you do not have any Domino servers configured in the environment whereyou plan to install Sametime, then you will install a new Domino server in anew Domino domain.

Using a new Lotus Domino server in a new domain for running Lotus Sametime


When you install a new Domino server in a new Domino domain for runningSametime:v The Sametime server is in its own Domino domain and additional configurationis required to access Domino servers outside the domain.

v No users are in the Domino Directory at the time the server is created, otherthan the server administrator. Therefore, if you select the Domino Directory asthe user repository for your Sametime server, you will need to add all of yourSametime users to the Domino Directory. See Populating the Lotus Dominodirectory.

Using a new Lotus Domino server in an existing Lotus Domino domain forrunning Lotus Sametime

When you use a new Domino server in an existing Domino domain for runningSametime:v The Domino Directory is shared by all of the servers in the domain. Users cansee all members registered in the Domino Directory and determine if they areonline.

v Domino Directory as the user repository, you will not need to add these users tothe directory. However, before a user can use Sametime, the user's directoryentry must be updated with the name of a home Sametime server and anInternet password. See Populating the Lotus Domino directory.

v If you are choose to add a server to an existing Domino domain for use as aLotus Sametime server, you need to register the server before installing Domino.See Registering Domino server with an existing Domino domain.

Registering a server to an existing Domino domainTo register a server to an existing IBM Lotus Domino domain for use as an IBMLotus Sametime server.

About this task

If you are adding a server to an existing Domino domain for use as a Sametimeserver, you need to register the server before you can install Domino. When youdo so, make sure to specify the following settings during registration:1. Store the server ID file that is created during registration somewhere on the

system your server where you will configure the Sametime server. Record thepath name; you will need to specify it when you configure the Sametimeserver.

2. Use the same network name as the first Domino server in the Domino domain.

What to do next

The registration process creates a Server document in the Domino Directory.

Installing a Domino serverIBM Lotus Sametime runs on a IBM Lotus Domino server. After reviewing thesteps for Planning your Domino server configuration, install a Domino server bycompleting the process for your server platfom:


Installing a Domino server on WindowsStep-by-step instructions for installing the IBM Lotus Domino server as the firstserver in a Lotus Domino domain are provided. These steps describe a basic LotusDomino server installation that can support IBM Lotus Sametime.

About this task

To install Lotus Domino on a Windows platform, follow these steps.1. Run the install program (setup.exe), which is on the Domino server installation

CD.2. Read the Welcome screen, and click Next. Then read the License Agreement

and click Yes.3. Enter the administrator's name and the company name. Do not elect to install

Lotus Domino on partitioned servers.4. Choose the program and data directory in which to copy the software. Make

note of the locations you provide for the Domino program and data directories.You will need this information when you install Lotus Sametime. Click Next.

5. Select "Domino Enterprise Server" as the server type.6. Click Next to accept all components.7. Specify the program folder or accept Lotus Applications as the program folder

that will contain the software.8. Click Finish to complete the install program.9. Choose Start - Programs - Lotus Applications - Lotus Domino Server to start

the Server Setup program.

What to do next

Using the Domino Server Setup Program Locally: After installing Domino, thefirst time you start the server, the Domino Server Setup Program launches. TheServer Setup program asks a series of questions and guides you through the setupprocess.

Installing a Domino server on AIX, Linux, or SolarisIf you are installing a new IBM Lotus Domino server for your IBM LotusSametime server, use these general directions.

About this task

The Lotus Domino installation programs for all versions of UNIX are simplyscripts that ask for configuration information and then install the software in theappropriate directories. The instructions below are provided to remind you of thenecessary steps to install Lotus Domino; this procedure assumes that you have aworking knowledge of Domino administration.

To install Lotus Domino:1. Place the CD in the CD-ROM drive.2. Become the root user by logging in as the root user or using the "su" command.

Open Operations Navigator.3. Mount the Lotus Domino CD for your server platform (AIX, Solaris or Linux)

to make it available. You can mount the CD using the SMIT utility or theappropriate version of the following command:mount -r -v -cdrfs /dev/cd0 /cdrom

Chapter 5. Installing a Domino server and clients 19

4. Using the above example, change to the /cdrom directory and start theinstallation script using the following command:./install

5. Follow the directions on each panel of the script, making sure to retain theinformation you provide for the location of the Domino executable directoryand the Domino data directory. You will need this information when you installLotus Sametime.

What to do next

If you are installing partitioned Domino servers, see Installing partitioned Dominoservers on AIX, Linux or Solaris.

After you have installed the Domino server, you must start and stop the Dominoserver at least once before installing the Sametime server. This allows certain filesto be created that Lotus Sametime needs in order to install correctly.

Installing partitioned Domino servers on AIX, Linux or SolarisTo install and configure partitioned IBM Lotus Domino servers on AIX, Linux, orSolaris, you need to perform several additional steps.

About this task

When installing Lotus Domino

1. When prompted to install more than one Lotus Domino server on thiscomputer, click Yes.

2. When prompted for the location of the data directory and the Notes useraccount, be sure to specify a unique location for the data directory and theappropriate user name for each partitioned server.

After installation completes, configure the Lotus Domino servers

1. Configure each server using the notes user account. For example, log in asnotes and run /opt/lotus/bin/server to configure the first server. Then log out,log in as notes2 and configure the second server, and so on.

2. During configuration, make sure that any field referring to the server's name orIP address is set up properly. By default, the IP address and server name fieldsfor each configuration contain the IP address and server name of the firstserver. For each additional server, you must update these fields so that they areappropriate for that partition.

3. After configuration for each server is complete, complete the following stepsfor each partitioned Lotus Domino server:v Start the Lotus Domino serverv Open a browser and go to server's Lotus Domino Directory (usuallynames.nsf).

v Open the Server document for this particular Lotus Domino serverv Choose Internet Protocols / HTTP tab and fill in the Host name with thefully qualified name of the server, and then enable Bind to host name. ForMulti-homed, do not enter the Host name; instead enter all IP addresses intothe Host name field.

v Save and close the server document.v Open the notes.ini file and add the following field:TCPIP_TcpIpAddress=0,(server_ip):1352


After configuring the Lotus Domino servers

1. Start each partitioned Lotus Domino server, one at a time2. Verify each server has successfully started3. Verify no errors are reported4. Stop each Lotus Domino server.

Installing a Domino server on i5/OSFollow these steps to set up a Lotus Domino server in a new Lotus Dominodomain. If you are not installing Lotus Domino in a new Lotus Domino domain,see Adding a Domino server to an existing Domino domain on i5/OS.1. Launch the appropriate Domino wizard, depending on whether or not you

have already installed Domino:v If you have not already installed Domino, launch the Domino InstallShieldWizard from a Windows workstation by running the setup.exe file locatedon the Domino product CD-ROM. Once you complete the installation, youare given the option to launch the Domino Server Setup Wizard to configurea Domino server.

v If you have already installed Domino, launch the Domino Server SetupWizard from a Windows workstation by running the domwzd.exe file locatedon the Domino product CD-ROM.

2. Follow the instructions on each wizard display to configure the new Dominoserver. Be sure to specify that you are configuring a Domino server in a newdomain. If you need help with a particular setting, click Help.

3. Configure the Domino server with the following settings:

Note: This chapter only documents settings that directly apply to thisSametime installation. For settings that are not documented below, you canenter your own values.

Display Description

Server Name Enter the name of the new Domino serverwhere you will add Sametime. For example,specify STDOM1.

Advanced server settings Specify Yes for Enable server partitioning toallow multiple Domino servers to run on thesame system.

Domain Name Enter the name of the Domino domain. Forexample, enter Acme.

Administrator's Name and Password Specify the Domino administrator's name.This administrator will also be the Sametimeserver administrator.

Specify a password for the DominoAdministrator.


Display Description

Internet Services Select Web Browsers (HTTP services).

Sametime requires that you use the DominoHTTP server.

Deselect Directory Services (LDAPservices).

Even if you plan to use an LDAP directory,you should not run it on the same serverwhere you run Sametime.

Domino Network Settings Click Customize to view the AdvancedNetwork Settings.

Advanced Network Settings Click the checkbox associated with the IPaddress for this server. Ensure that only onecheckbox is selected.

You must edit the Host Name field andreplace the IP address with the fullyqualified Internet host name for this server.Type over the IP address displayed in theHost Name column and replace it with thefully qualified host name for the server. Forexample, STDOM1.ACME.COM. You mustpress Enter for the change to take effect.

Also, type the fully qualified host name inthe field at the bottom of the display.

When finished, click OK and continue untilDomino server setup is complete.

4. Start the Domino server if it is not already started.

Adding a Domino server to an existing Domino domain on i5/OSTo add a Lotus Domino server to an existing Lotus Domino domain, follow thesesteps:1. Register the additional server for your normal operating environment. You

must specify the following settings during registration:v Store the server ID file that is created during registration somewhere on thesystem where you will configure the Sametime server. Record the path name;you will need to specify it when you configure the Sametime server.

v Change the owner of the ID file to Qnotes by right-clicking the file in iSeriesNavigator and selecting Permissions.

v Use the same network name as the first Lotus Domino server in the LotusDomino domain.

2. Launch the appropriate Domino wizard, depending on whether or not youhave already installed Domino:v If you have not already installed Domino, launch the Domino InstallShieldWizard from a Windows workstation by running the setup.exe file located


on the Domino product CD-ROM. Once you complete the installation, youare given the option to launch the Domino Server Setup Wizard to configurea Domino server.

v If you have already installed Domino, launch the Domino Server SetupWizard from a Windows workstation by running the domwzd.exe file locatedon the Domino product CD-ROM.

3. Follow the instructions on each wizard display to complete the addition of thenew Domino server. Be sure to specify that you are configuring an additionalDomino server in an existing domain. If you need help with a particularsetting, click Help.

4. Configure the Domino server with the following settings:

Note: This chapter only documents settings that directly apply to thisSametime installation. For settings that are not documented below, you canenter your own values.

Display Description

Registered Name Provide the registered name of theadditional Domino server where you willadd Sametime. For example, specifySales1/Acme.

Advanced server settings Specify Yes for Enable server partitioning toallow multiple Domino servers to run on thesame system.

Internet Services Select Web Browsers (HTTP services).

Sametime requires that you use the DominoHTTP server.

Deselect Directory Services (LDAPservices).

Even if you plan to use an LDAP directory,you should not run it on the same serverwhere you run Sametime.

Domino Network Settings Click Customize to view the AdvancedNetwork Settings.


Display Description

Advanced Network Settings Click the checkbox associated with the IPaddress for this server. Ensure that only onecheckbox is selected.

You must edit the Host Name field andreplace the IP address with the fullyqualified Internet host name for this server.Type over the IP address displayed in theHost Name column and replace it with thefully qualified host name for the server. Forexample, STDOM1.ACME.COM. You mustpress Enter for the change to take effect.

Also, type the fully qualified host name inthe field at the bottom of the display.

When finished, click OK and continue untilDomino server setup is complete.

Results

Installing the Notes client and Domino administrative clientUse the IBM Lotus Domino software that shipped with IBM Lotus Sametime toinstall and configure the Domino Administrator and IBM Lotus Notes clients onthe administration workstation.

Before you begin

To administer the Domino server, you must install and configure at least oneMicrosoft

Windows

PC as the administration workstation.

About this task

Note: Before you can install the Domino and Lotus Notes clients, you must installand set up the Domino server.

To install and configure the Domino Administrator and Lotus Notes clients:1. Insert the Lotus Notes Client CD into the PC you plan to use as the

administrator's workstation.2. Follow the instructions on each panel of the Lotus Notes installation wizard,

selecting to install both the Domino Administrator and Lotus Notes clients.3. Copy the certifier ID and administrator ID files from the Domino data directory

of your Domino server to the Lotus Notes data directory of the Administratorworkstation. You can use File Transfer Protocol (FTP) or another method, oryou can let the initial communications between the server and administrationworkstation copy the files for you automatically.

4. If necessary, start the Domino Server.5. Open Lotus Notes.6. Follow the instructions in the setup wizard to configure the Lotus Notes client.

If you have moved the certifier and administrator ID files to the PC you havedesignated as your administration workstation, indicate the correct location


when asked. If you have not copied the ID files, simply provide the useradministrator name you specified during HTTP setup. You will be promptedfor the password for this ID. The ID files will be copied and stored on youradministration workstation for you automatically.

What to do next

When you have set up the Domino Administrator and Lotus Notes clients, you areready to begin preparing the Domino server for Lotus Sametime installation

Verifying your Lotus Domino environmentVerify your Lotus Domino server environment.

Verifying the Domino Server document settingsAfter installing the Lotus Domino server and before installing IBM LotusSametime, you should edit the Lotus Domino server document to make sure thefields are completed as described below.

About this task1. Start the Domino server. The steps for starting and stopping a Domino server

are the same as for starting and stopping a Sametime server. See the followingfor more information:v Starting and stopping a Sametime server on Windowsv Starting and stopping a Sametime server on AIX, Linux or Solarisv Starting and stopping a Sametime server on i5/OS

Note: Starting the Domino server may take a few minutes.2. Open the Domino Administrator client and click the Configuration tab.3. Expand the Server section and then click All Server Documents.4. Open the Server document for the Domino server on which you are installing

Lotus Sametime. Use the table below to verify the appropriate values for thefields in the Server document. Make changes to the document if necessary.

Server Document Values

Basics tab

Fully qualified Internet host name This field is completed during the Dominoserver install, and should contain the fullyqualified host name as known by the DNSserver.

In a test environment, the local hosts tablecan be used as well as DNS.Note: This CANNOT be a numeric IPaddress.

Load Internet configurations fromServer\Internet Sites documents

Disabled

Directory assistance database name If a Directory Assistance database does notalready exist on the server, Sametime willcreate one during server installation and thisfield will be set to da.nsf



Directory Type Make sure this field says "Primary DominoDirectory."

If this field contains "ConfigurationDirectory," shutdown the Domino server andreplicate names.nsf from a master server.Master servers have a Directory Type ofPrimary Domino Directory. If you are unsureabout a server, check the Directory Typefield in the Server document.

Security tab

Administrators This field is completed during the Dominoserver install, and should contain the nameof the Sametime administrator. If not, clickthe arrow to select a name from an addressbook.

Internet authentication Default is "Fewer name variations withhigher security", the recommended settingfor tighter security.

Select More name variations with lowersecurity if Domino Directory authenticationis being used and you want users to be ableto use short names.

Access server Leave this field blank if possible. If you doinclude entries, you must add the followingto the list of trusted directories:

Sametime Development/Lotus NotesCompanion Products

Run unrestricted methods and operations After you install the Sametime server, thisfield should include these entries:

v The name of the serverv The name of the administratorv Sametime Development/Lotus NotesCompanion Products

Note: If you have signed agents with anadditional signature, include that name hereas well.

Ports - Notes Network Ports tab

Port TCPIPNote: This must be typed exactly as shownin all uppercase letters or you will not beable to add Lotus Sametime to this server.

Protocol TCP



Net Address The fully qualified host name for theDomino server as known by the DNS server.

This should match both of the following:

v The fully qualified Internet host name onthe Basics tab above

v The Host Name on the InternetProtocols-HTTP tab specified below.

Commonly:computername.internetdomain.com

For example, stdom1.acme.com.Note: This CANNOT be a numeric IPaddress.

Ports - Internet Ports - Web tab

TCP/IP port number 80 (or 8088 if tunneling is being used)

TCP/IP port status Enabled

Name & password Yes

Anonymous Yes

Internet Protocols - HTTP tab

Host name The fully qualified host name of the Dominoserver as known by the DNS server.

This should match both of the following:

v The fully qualified Internet host name onthe Basics tab above

v The Net Address on the Ports - NotesNetwork Ports tab tab above

Commonly:computername.internetdomain.com

For example: stserver1.acme.comNote: Normally, this CANNOT be anumeric IP address. For AIX, Linux orSolaris servers with multiple valid IPaddresses (multi-homed), enter all of the IPaddresses instead of the host name.

Bind to Host name Disable -- for Microsoft Windows servers;also for IBM AIX, Linux, and Solaris serverswhen not using partitioned Domino servers

Enable -- for i5/OS servers; also for IBMAIX, Linux, and Solaris servers when usingpartitioned Domino servers



Allow HTTP clients to browse databases Yes (enable) for portals, otherwise, notnecessary

Home URL This field is set to "stcenter.nsf" during LotusSametime installation.

DSAPI filter file names If this field is set to NDOLEXTN (DominoOffline Services), remove the value andleave this field blank.

Internet Protocols - Domino Web Enginetab

Session Authentication This field is set to Multiple Servers (SSO)during Sametime installation.

If single sign on (SSO) is not being used,you can change this to single-server.

Web SSO Configuration This field is set to LtpaToken duringSametime installation.

Java servlet support Domino Servlet Manager

5. Click Save and Close, if you made changes6. Stop and restart the Domino server for the changes to take effect.

Verifying the Domino server is accessibleBefore installing IBM Lotus Sametime, verify that the IBM Lotus Domino server isaccessible from client workstations.

About this task

Test client access (using HTTP) to a Lotus Notes database hosted on your LotusDomino server.

Start a Web browser on the workstation and attempt to access names.nsf (or someother convenient database) by entering the following address into the location bar:If you have set names.nsf to be inaccessible from clients, test with a database thatclients can access.http://hostname.yourco.com/names.nsf

If you can sign on using the server administrator ID and internet password toview the contents of names.nsf, the Domino server is accessible and ready forinstallation of Sametime.


Chapter 6. Preparing to upgrade an existing Sametimeenvironment

If you are upgrading an IBM Lotus Sametime installation to any version of LotusSametime 8.0.2 (Standard, Entry or Instant Messaging Limited Use), this sectioncontains information that you need to know.

Before upgradingBefore upgrading to IBM Lotus Sametime 8.0.2, determine whether you need toadditionally upgrade your Lotus Domino and your operating system releases, anddecide whether to preserve your existing Lotus Sametime data.

Different releases of Lotus Sametime support different upgrade paths:v IBM Lotus Sametime 8.0.2 supports upgrades of Lotus Sametime 3.1, 6.5.1, 7.x,and 8.x. If your current version is installed on a version of Domino earlier than7.0, you must upgrade the Domino server to at least 7.0 before upgrading yourcurrent installation of Lotus Sametime to 8.0.2.

v For Lotus Sametime versions prior to 3.1, either uninstall the earlier versionbefore installing Lotus Sametime 8.0.2, or first upgrade to 3.1, 6.5.1, 7.x, or 8.xbefore upgrading to Sametime 8.0.2.

v If you are upgrading a Sametime server that is managed by the IBM LotusSametime Enterprise Meeting Server, you must remove the Sametime serverfrom the Enterprise Meeting Server before performing the upgrade. Once theupgrade is complete, add the Sametime server back in to the Enterprise MeetingServer.

v When upgrading Lotus Sametime on Microsoft Windows, IBM AIX, Linux orSolaris, the install program provides the option of preserving your existing LotusSametime data, which includes meeting information, contact lists andconfiguration settings, or overwriting this information.

v For IBM i5/OS Sametime servers: The i5/OS installation program always preserves the Lotus Sametime data on

existing servers. If you do not want to preserve the Lotus Sametime data,remove Lotus Sametime from the server (RMVLSTDOM command) and thenadd it to the server again (ADDLSTDOM command).

V5R3 or later is required; V6R1 is required for IPv6 addressing. You mustupgrade to at least V5R3 before installing Lotus Sametime 8.0.2. LotusSametime releases prior to Lotus Sametime 3.1 are not supported on i5/OSV5R3 or later; if you are running a release of Lotus Sametime prior to 3.1,consider upgrading to Lotus Sametime 3.1 or 6.5.1 (on Lotus Domino6.0.3/6.5.0 or later) before upgrading the operating system. Consider otherLotus Domino servers and related Lotus products that may be running on thesame system in your upgrade plans. Make sure that your currently installedserver releases are all supported on the new operating system level. For themost up to date and detailed information about the combinations of Domino,Sametime, and other Lotus Domino related product releases that aresupported on current i5/OS releases, see the Lotus Software for i5/OSCompatibility Guide on the Web at: http://www.ibm.com/systems/i/software/domino/pdf/releasesupport.pdf


If your current Lotus Sametime servers are running on a Lotus Dominorelease that is not supported by Lotus Sametime 8.0.2, your Lotus Sametimeservers must be upgraded to a supported Lotus Domino release beforeinstalling Lotus Sametime 8.0.2.Lotus Sametime servers that are running a multiversion-capable LotusDomino release are not updated automatically when you install a new releaseof Lotus Domino. You must update manually your Lotus Sametime servers tothe newer Lotus Domino release by running the UPDDOMSVR commandbefore installing Lotus Sametime 8.0.2.If you neglect to upgrade an existing Lotus Sametime server to a supportedlevel of Lotus Domino before upgrading to Lotus Sametime 8.0.2, the upgradewill fail for that server. To correct this problem, you must update the server toa supported level of Lotus Domino and then install Lotus Sametime again.

Backing up your server dataBefore installing IBM Lotus Sametime, you should back up all important serverdata.

About this taskv names.nsf - This is optional if you can replicate from another Domino server.v notes.ini - Back up this file for possible reference after upgrade.v da.nsf - Back up this file if you are using directory assistance.v vpuserinfo.nsf - This contains user storage and privacy information, such asbuddylists.

v meetingserver.ini, sametime.ini, stconfig.nsf (It is not necessary to backup thesefiles on i5/OS as they are saved automatically during the upgrade process)

v All recorded meeting files (.rap)v All customized data files, templates or applications (.ntf, .mdm, .scr, .bmp, .mac,.smi, .tbl)

v All ID files, desktop.dsk, and pubnames.ntf.


Summary of upgrade considerations by releaseThe following table summarizes considerations for upgrading to IBM LotusSametime from previous releases.

Upgrading from release Considerations

Sametime 8.0.1 or earlier v Carefully verify that your system satisfiesall of the Sametime 8.0.2 systemrequirements. Sametime 8.0.2 requiresLotus Domino 7.0 or later.

v For i5/OS: During upgrade to standardSametime 8.0.2, web conferencing isenabled on all existing Sametime servers,even if it had been previously disabled. Ifnecessary, run the CHGLSTDOMcommand to disable web conferencing onselected servers after upgrade. See"Enabling or disabling Web Conferencingfor an i5/OS Sametime server".

v For servers with Web Conferencingcapability: If you are currently using aremote slide conversion server, upgradingto Sametime 8.0.2 Conversion Services isrecommended. For information aboutupgrading Conversion Services fromprevious Sametime releases, see "AboutSametime Conversion Services".

Sametime 7.5.1 or earlierv All considerations listed above.v For servers with Web Conferencingcapability: If you are currently runningSametime Conversion Services on aseparate system, you must upgrade to an8.0.x version of Sametime ConversionServices. Sametime 8.0.2 servers cannotuse a release of Sametime ConversionServices prior to 8.0; Sametime 8.0.2Conversion Services is recommended. Forinformation about upgrading ConversionServices from previous Sametime releases,see "About Sametime ConversionServices".

v For i5/OS: Installation of a LanguagePack is no longer required in order to runSametime in languages other than English.

Sametime 7.5 or earlierv All considerations listed above.v For servers with Web Conferencingcapability: Sametime 7.5.1 introduced anew option for running slide conversionservices natively on your AIX, Solaris ori5/OS Sametime server. For all serverplatforms, the method for configuringslide conversion services changed in 7.5.1.See "About Sametime ConversionServices" for more information.

Chapter 6. Preparing to upgrade an existing Sametime environment 31

Upgrading from release Considerations

Sametime 7.0 or earlierv All considerations listed above.v The format for storing privacyinformation changed in Sametime 7.5.When upgrading to Sametime 8.0.2 fromSametime 7.0 or earlier, stored privacyinformation appears to be lost. A utility isavailable that you can run after upgradingyour server to migrate the privacyinformation to the new format. See"Migrating user privacy information".

Sametime 6.5.1 or earlierv All considerations listed above.v The format of the Key Store used for SSLchanged in Sametime 7.0. See "Using SSLwith Sametime."

Upgrading from Instant Messaging Limited Use or Entry to SametimeStandard on i5/OS

IBM Lotus Sametime for IBM i5/OS allows you to easily upgrade from the InstantMessaging Limited Use or Entry version of Lotus Sametime to the same release ofLotus Sametime Standard. Because upgrading to Lotus Sametime Standard onlyrequires installing an additional product option (option 1), you can perform theupgrade with minimal disruption to your existing environment.

Before you begin

This topic applies only if you are upgrading the feature set of your LotusSametime server not the release number itself. If you are upgrading the release(for example, from 8.0.1 to 8.0.2), follow the standard upgrade instructions detailedelsewhere in this section.

Note: If you are upgrading an Entry or Instant Messaging Limited Use version ofSametime 8.0.1 or earlier to Lotus Sametime Standard 8.0.2, this section is notapplicable. When upgrading to 8.0.2 from any previous release, whether Entry,Limited Use or Sametime Standard, simply follow the standard upgradeinstructions detailed elsewhere in this section.

About this task

If you are already using the Instant Messaging Limited Use or Entry version ofLotus Sametime 8.0.2, then you have already performed many of the tasksnecessary to support Lotus Sametime Standard. This topic provides the remainingsteps necessary to upgrade an existing environment where only the *BASE productoption is installed, to a Lotus Sametime Standard environment featuring the WebConferencing capabilities of product option 1.

Note: When upgrading to Lotus Sametime Standard, all existing Instant MessagingLimited Use or Entry servers are automatically upgraded to Lotus SametimeStandard servers. If you want to change any of the servers back to InstantMessaging Limited Use or Entry servers, see Enabling or disabling WebConferencing for an i5/OS Sametime server.


To upgrade to Lotus Sametime Standard, follow the steps below.1. Verify that the following software is installed on your system: i5/OS - Portable

Application Solutions Environment (PASE), 5722SS1 or 5761SS1, option 33.2. To upgrade by installing only option 1, you must use the downloaded image of

Sametime Standard 8.0.2 for i5/OS.The CD-ROM media always installs both product options of Lotus Sametime,5724J23, *BASE and option 1, so it is not suitable for this procedure.The downloaded image for Lotus Sametime Standard contains instructions forinstalling both product options, *BASE and option 1. Complete only the stepsthat pertain to installing from the savefile called Q5724J23WC which containsoption 1.

3. Start the server and complete the steps in Verifying the Sametime Serverinstallation to verify the Web conferencing capabilities of your server.

Chapter 6. Preparing to upgrade an existing Sametime environment 33

Chapter 7. Installing SametimeThese instructions are appropriate for all types of IBM Lotus Sametime serverinstallations, including:

Before you beginv New Sametime installationv Upgrade to existing Sametime installationv All versions of Sametime: Standard, Entry and Instant Messaging Limited Use

Verifying you are prepared to install SametimeBefore starting the IBM Lotus Sametime installation verify that you are prepared todo so.

Before you begin

Make sure you have completed the following:v Reviewed the Sametime Release Notes for last-minute changes or additions thatmay impact the server install.

v Verified that the required hardware and software components are in place andworking.

v Verified that your Domino server is properly configured and you can access itfrom a web browser using the server administrator ID and internet password.See Verifying your Domino environment.

v Backups are complete. See Backing up your server data.

Make sure you have the following information about your Domino server:v The fully qualified host namev The location of the Domino data directoryv For Windows, AIX and Solaris: the location of the Domino program directory

Make sure you know the type of directory (Domino Directory or LDAP directory)that you are going to use.v If your organization uses LDAP directories, you should select LDAP as thedirectory type during the server installation.

v For Windows, AIX, Linux and Solaris, the installation program allows you tospecify all of the information necessary to fully configure the connection andaccess to a single LDAP server. For i5/OS, you can specify basic LDAPconnection information when adding Sametime to your Domino server. For allserver platforms you can complete or change the LDAP configuration using theSametime Administration tool after installing your Sametime server.

v If you select LDAP directory, be prepared to specify at least the followinginformation during server installation: Fully qualified host name of the LDAP server IP Port number that Sametime will use to connect to the LDAP server. Bind distinguished name (DN) is the name that the Sametime server will use

when binding to the LDAP directory. If not specified, the LDAP server mustallow anonymous access from the Sametime server.


Bind password is the password associated with the Bind distinguished name Administrator name (DN) is the distinguished name of an LDAP

administrator with authority to browse the LDAP directory. This is usedwhen configuring policies and may be the same as the Bind distinguishedname.

Note: If you do not know this information, contact your LDAP administrator. Ifthe Sametime server cannot connect to the LDAP server, the server will not start.

For AIX, Linux and Solaris:v Make sure that the Domino server was installed as root. See Preparing the AIX,Linux, or Solaris Environment for additional information.

v Verify that neither the lotus bin directory (by default /opt/ibm/lotus/bin) northe Domino program directory is in your $PATH environment variable. Thedefault Domino program directory is: AIX: /opt/ibm/lotus/notes/latest/ibmpow Linux: /opt/ibm/lotus/notes/latest/linux Solaris: /opt/ibm/lotus/notes/latest/sunspa

Note: The server install will not run if either directory is in your $PATH.

For the server computer where you plan to install Sametime:v Temporarily disable any screen savers and turn off any virus-detection software.v Turn off any virus-detection software.v For Windows, AIX, Solaris and Linux servers: Complete any pending rebootactions you may have from installing other applications. Make sure that allapplications on the server computer (including the Domino Server Administratorand the Web browser) are closed. All Domino services must be stopped.Otherwise, you might corrupt any shared files and the installation programmight not run properly.

v For i5/OS servers: shut down any existing Sametime servers.

Installing a Sametime server on Windows, AIX, Linux or SolarisThis section describes the various methods for installing an IBM Lotus Sametimeserver on Windows, AIX, Linux or Solaris servers.

Installing from a wizardLaunch the interactive install wizard on the server to install a IBM Lotus Sametimeserver from a CD-ROM or a downloaded image.

About this task

This section describes the most common method for installing a Sametime server.

Running the Sametime installation wizard on WindowsFollow the steps in this section to run the interactive IBM Lotus Sametimeinstallation wizard from a Windows server. This should be the same computerwhere your IBM Lotus Domino server is located (for a new Sametime installation)or where an existing Sametime server is located (for a Sametime upgrade).


About this task

Note: If you get the message "Lotus Sametime Server Requires IBM LotusDomino" during installation, that means a supported Domino server version wasnot found. Click Cancel, install the appropriate version of IBM Lotus Domino, andthen restart the installation.

To install Lotus Sametime on Microsoft Windows:1. Make sure you have read and completed the steps in Verifying you are

prepared to install Sametime.2. For a new Lotus Sametime installation, shut down the Domino server. If

upgrading Lotus Sametime, shut down the Lotus Sametime server.3. Insert the Lotus Sametime installation CD in the CD-ROM drive for the

system. The CD loads and the main dialog box displays. (If you are installingfrom an image that you have downloaded, extract the image and double clickServer\setupwin32.exe.)

4. Select the language to be used for the install wizard.5. When the Welcome page is displayed, click Next.6. Read and accept the License agreement and then click Next.7. Specify the Lotus Domino data directory where Lotus Sametime should be

installed. This should be the data directory specified when you installed theLotus Domino server.

8. If this is a new installation, choose Install a new instance. If you areupgrading from a previous version, choose how to upgrade your currentversion:v Install a new instance - Select this option to remove all Sametime datafrom the existing Sametime server (including meeting information, contactlists and configuration settings) and begin with a clean installation ofSametime.

v Upgrade existing instance - Select this option to preserve your existingdata and upgrade the existing installation of Lotus Sametime.

9. If the Lotus Domino server ID is password protected, enter the password andclick Next.

10. For new Lotus Sametime server installations and upgrades from InstantMessaging Limited Use or a Sametime version prior to 7.5.1, specify the serverto use for slide conversion. If upgrading from Lotus Sametime 7.5.1, thisprompt is not shown and the existing slide conversion configuration ispreserved. See About Sametime conversion services for more information.v Use this Lotus Sametime server - Select this option if you prefer to run theslide conversion services natively on your Sametime server or if you are notprepared to configure a separate conversion server at this time. You canchoose to configure a remote conversion server at a later time.

v Use Lotus Sametime slide conversion server - Select this option if youprefer to use a remote conversion server and are prepared to provide theHost name and port at this time.