Minimal web.xml for authenticated webapp on WAS 8.5.5.x  

By Mikkel Heisterberg | 10/17/16 5:35 PM | - | Added by Oliver Busse

I was doing a simple servlet based web application that should on WebSphere Application Server 8.5.5.6 the other day. The servlet should require authentication. I really wanted to avoid using web.xml and go annotation based but it turned out that it wasn't possible - at least for me. Servlets are secured using the @ServletSecurity and you specify required role(s) and HTTP constraints e.g. is HTTPS required etc.

Slides and recorded, narrated, demo from my Engage.ug session on OAuth  

By Mikkel Heisterberg | 3/29/16 5:47 AM | Business - Events / People | Added by John Oldenburger

Last week at the Engage user group in Eindhoven, The Netherlands, I gave a session on OAuth 2.0, how the protocol works and how easy it is the code against. The demo I showed at the end of the session showed just how easy it is and how little code is required to make a fully functioning OAuth 2.0 Client.

Introduction to OAuth - the technology you need but never really learned  

By Mikkel Heisterberg | 11/5/15 3:50 AM | Infrastructure - Connections | Added by John Oldenburger

OAuth is core to integrations these days but I see many developers that try and use OAuth without really understanding the protocol. The protocol is very easy to understand so I created this presentation to try and explain it in easy, visual, chunks.

IBM announce dates for bringing TLS v. 1.2 to IBM Domino  

By Mikkel Heisterberg | 3/16/15 2:28 AM | Infrastructure - Notes / Domino | Added by Johnny Oldenburger

So in October of 2014 I wrote about the upcoming TLS (transport layer security) enhancements that IBM was planning to bring to IBM Domino as part of the industry wide panic about the POODLE attack which I still consider mainly theoretical. I was a bit critical towards IBM as they chose to patch their seriously lacking SSL v. 1.3 implementation and implement TLS v. 1.0 on top of IBM Domino v. 9.0.x (IBM Domino, POODLE, SHA-1 and why it's also sad when IBM decides to update the security stack).

Presentation from IBM ConnectED 2015  

By Mikkel Heisterberg | 1/29/15 1:07 AM | Business - Events / People | Added by Johnny Oldenburger

Presentation from IBM ConnectED 2015. BP205: There’s an API for that! Why and how to build on the IBM Connections PLATFORM.

Atlassian SourceTree Pro-Tip  

By Mikkel Heisterberg | 11/26/14 4:05 PM | - | Added by Johnny Oldenburger

I'm finding myself use Atlassian SourceTree more and more for my Git work as it's both intuitive, fast and very pleasing to the eye. Yesterday at an Atlassian event (Getting Git Right) I noticed that the branches were nested in one of the demos. I wondered how they did that but it turns out to be very simple.

Mac Yosemite, Java, IBM Notes  

By Mikkel Heisterberg | 10/17/14 4:24 AM | Infrastructure - Notes / Domino | Added by Kenio Carvalho

After upgrading my Mac to OS X Yosemite (10.10) I had to reinstall Java to make IBM Notes startup.

Servers upgraded to 9.0.1 and what a difference a point release makes  

By Mikkel Heisterberg | 11/15/13 12:26 AM | Infrastructure - Notes / Domino | Added by Niklas Heidloff

Yesterday night I upgraded two of our internal Domino servers to Domino 9.0.1 incl. Traveler and the new Social Edition components.

New plugin appdev values for Notes 9.0.1  

By Mikkel Heisterberg | 10/29/13 4:38 AM | - | Added by Per Henrik Lausten

With the release of Notes 9.0.1 we need new values to tweak our configuration to continue developing plugins for Notes. The new values for rcp.base_version and install_id are below. I've also updated the Configure Eclipse 4.2 for Notes 9 page.

Sametime Awareness Simulator  

By Mikkel Heisterberg | 7/12/13 1:06 AM | - | Added by Niklas Heidloff

I've been corresponding with Andy Higgins a bit about the Sametime Awareness Simulator (SAS) I wrote some years back and which is still getting surprisingly many downloads.

Java in Notes/Domino Explained: On Java Security and how it relates to Notes/Domino  

By Mikkel Heisterberg | 6/20/13 6:32 AM | - | Added by Per Henrik Lausten

I get so many questions on Java security and how it all fits together that I finally decided to blog it instead of simply answering over and over again. So here goes...

SmartCloud getting an overhaul this weekend with changes that is looooong overdue  

By Mikkel Heisterberg | 6/7/13 1:53 AM | - | Added by Per Henrik Lausten

SmartCloud getting an overhaul this weekend with changes that is looooong overdue This weekend (8-9 June 2013) IBM is releasing their June 2013 Update to the SmartCloud for Social Business.

Presentation from ISBG: An Introduction to Working With the Activity Stream  

By Mikkel Heisterberg | 5/24/13 2:12 AM | - | Added by Per Henrik Lausten

What is this session about? The future of business is social and the activity stream is the way events and messages are communicated in the social business. In this session you will learn all there is to know about the activity stream including exactly what it is and how to interact with it using your favorite development environment whether that be JavaScript, XPages, Java or even the plain vanilla HTTP based REST API. This session is for you if you want to start working the Activity Stream.

Setting up LDAP failover for Websphere Application Server  

By Mikkel Heisterberg | 5/2/13 12:23 AM | Infrastructure - Connections | Added by Niklas Heidloff

As you may know LDAP is crucial to Websphere Application Server (WAS) when using it for IBM Connections so it makes good sense to configure failover for LDAP. If the LDAP server becomes unavailable you can no longer log in (actually you can't even log into ISC - see Websphere Application Server Security - make sure file based auth continues if federated repository is unavailable) and WAS can have a hard time reconnecting to the LDAP.

Looking up a datasource from an IBM Connections event handler  

By Mikkel Heisterberg | 5/1/13 2:12 AM | - | Added by Niklas Heidloff

For a customer project I'm working on these days I'm writing an event handler for IBM Connections Profiles to integrate two profile systems in real-time using the IBM Connections 4.0 Event SPI. Pretty powerful stuff in case you've never looked into it.

Remember to secure your IBM HTTP Server when implementing IBM Connections  

By Mikkel Heisterberg | 3/25/13 1:56 PM | Infrastructure - Connections | Added by Per Henrik Lausten

In Security Now! episode 396 starting at 12:22 (to 25:25) Steve and Leo were talking about various SSL attacks and how one could verify sites. I decided to check out one of my own stock IBM Connections installs i.e. I verified the stock IBM HTTP Server (IHS) install. That was not a pleasant experience as the default IBM HTTP Server is very insecure in that it accepts SSL v.2 and hence some very weak ciphers.

Using DiscoveryServlet for debugging Connections Mail  

By Mikkel Heisterberg | 3/10/13 3:36 PM | Infrastructure - Connections | Added by Per Henrik Lausten

When you install Connections Mail having a way to diagnose how Connections sees a particular users mail setup can be very helpful e.g. which mail system, which hostname, mail file etc.

Slides from BP209 - In The Land Of The Social Apps The API Is King  

By Mikkel Heisterberg | 1/29/13 11:42 AM | - | Added by Niklas Heidloff

Below is the slide deck from Ryan and my session at IBM Connect 2013 earlier today.

Configure Eclipse 4.2 (Juno) for Notes 9  

By Mikkel Heisterberg | 12/17/12 12:22 AM | - | Added by Niklas Heidloff

Yesterday after publishing my updated article on configuring Eclipse 3.5 for Notes 9 I wondered why I was still using such an old Eclipse build. Now Lotus Expeditor and hence Notes is still based on Eclipse 3.4 but since we develop for what's called a target platform that shouldn't matter so I wanted to move to Eclipse 4.

Configure Eclipse 3.5 for Notes 9  

By Mikkel Heisterberg | 12/17/12 12:10 AM | - | Added by Niklas Heidloff

Next after upgrading my Notes client to IBM Notes 9 I updated my Eclipse environment to use Notes 9. The steps are basically the same as previously but for good measure I updates my guidelines. The document is now titled Configure Eclipse 3.5 for Notes 9.

Missing passthru_nonProxyHosts for IBM Connections widget proxy  

By Mikkel Heisterberg | 11/5/12 11:41 PM | Infrastructure - Connections | Added by Niklas Heidloff

When writing widgets for IBM Connections (version 1, 2, 3 and 4) and you have an iWidget (judgement still out on the OpenSocial gadget support) that needs to talk to other network resources than the IBM Connections server you need to change the proxy-config.tpl to work around the same origin policy restrictions imposed on JavaScript running in a browser.

An IBM webcast you do not want to miss  

By Mikkel Heisterberg | 11/2/12 3:45 AM | - | Added by Per Henrik Lausten

This is a webcast not to miss. IBM will discuss the next version of Notes and also discuss the open beta that will start soon!! And as one who has been using the next Notes version for a while I can honestly say that you want to see this.

Domino rules as an API application server platform  

By Mikkel Heisterberg | 10/21/12 11:58 PM | - | Added by Niklas Heidloff

Over the last 1.5 years we at OnTime have been making a serious investment into rewriting our backend for the OnTime Group Calendar product. The most fundamental change has been the change from a traditional Notes/Domino application (if it ever was a such) to be a server/API first approach.