Friday, August 22, 2008
New Certifications : IBM Certified SOA Associate and IBM Certified System Administrator for Websphere Application Server ND 6.1
Congratulate me!!! hehehe I just got my new IBM Certifications this week...
I'm now :
IBM Certified SOA Associate
IBM Certified System Administrator for Websphere Application Server ND
:) :) :)
There are a lot of speakers this year, most of them are good except for handful. Actually, if you ever attended this type of conference, you will know who is good and who is bad speakers ? How ? by looking at the attendance. If you see that there are not a lot of people attending his speech, he's not good. Well, I did prove it before and I've proven this again.
Some of those who I really enjoy speaking for this event are :
- Ernese Norelus - Very funny and Engaging but very witty and smart as well. Hope all speakers can have his wittines
- Kevin Tobin - He's a security expert when it comes to securing your WAS. He knows his stuff very well. Well, he asked the rest of the class if anyone wants to take on him and he claims that he can get all the password and secret stuff on your computer using a USB drive. I did almost did that, but I was thinking of putting a Virus on my machine and make my Windows Vulnerable so it can infect USB Drives, which would in-turn infect his USB drive if he attached on my machine ... hehehe just kidding..
- Raymon Josef Edward A. Lara - He's very good. A former professor, he knows how to engage and speak his stuff very well. He can communicate very well and he can make you listen to his topic and teach you and make sure you understand him.
- Rachel Reinitz - She knows ESB very well.
- Colin Tai - His topic is very engaging and you will learn more than meets the eye on Project Management
I believe the rest are good as well and perhaps I just didn't go to their sessions. But anyway, don't worry. There's always next year.. hopefully my company gets to send me again..:)
One of the things I like with this conferences is the free certification program that they have. You can take the exam without paying, though limited to 3 per person.
here are some pictures of the event :
And because I was one of the Top 3 Scorers for SOA Certification exam, I got this free gift :)
Wednesday, August 20, 2008
My Post is at : http://www-10.lotus.com/ldd/portalwiki.nsf/dx/08202008094306AMWEBJ4H.htm
How to assign a new portal administration group aside from wpsadmins
have a client who is using a single LDAP repository for both Staging and Production. However, they wanted a separate portal admin group for Staging and Production. For production environment, wpsadmins is sufficient but for staging, aside from wpsadmins, they wanted to add a new group meant for the staging administrators. Staging administrators can only access staging server and shouldn't access Production Environment. In this scenario, we cannot add the staging users under wpsadmins group. To resolve this scenario, the procedure below helps you to add a new admin group on portal different from the frequently used wpsadmins.
- Login to your WebSphere Portal as an administrator
- Go to the Administration Page
- Click on the Access -> Resource Permissions and choose Virtual Resources
- Click on Permission Icon beside Portal
- Click on the Permission Icon for Administrator
- Add the new administrator group you would like. In our example its wpsdevadmins
- Click back on Portal
Test any user under this group. Similarly, you can also delete wpsadmins from this group if there's a need.
Saturday, August 16, 2008
Anyway, watch the Jimmy Kimmel, Live. It's outrageous and damn funny. Catch it at Star World (for those on Asia) every 9:00 to 10:20. In US, they have it at ABC. (http://abc.go.com/latenight/jimmykimmel/index) Believe me.. you won't stop laughing... This is my first time watching and what the.. I love the show!!..
Friday, August 15, 2008
One of them is Wesley So, a 14 year old who attained Grandmaster and is currently the youngest Grandmaster in the world and the 7th youngest ever in the entire history of chess. What is amazing is for the fact that this boy, was never taught nor trained by any GM (unlike in some other countries) and just did it by his sheer talent and love for the game. (Maybe they should make a movie about him)
Read more about this boy at : http://en.wikipedia.org/wiki/Wesley_So
I just wished, that that Government put more money instead of parading these brilliant talents in Malacanang. They should support more on this child prodigies and talents discovered in the country. I think this country of 90 million has produced more talents "naturally" (not engineered nor imported ones as in other countries) than anywhere else in the world. With the financial support they need, and with full training that they require (such as mentoring from top GM's), I believe we will be able to produce our first World Chess Champion.
Btw, did you know that Viswanathan Anand, the GM from India who became a world champion and is the current world champion honed his tallent on chess in the Philippines ?
- Avira Anti-virus Premiums - Which I'm currently using on my home laptop. It has a very good heuristics and quite fast and very "silent" that you won't even know its running.
- NOD32 -never used but heard its very good
- Kaspersky Anti-virus - heard has the top notch detection signatures but not that good heuristics.
Let's talk about my new anti-virus first. Well it's straightforward, but before anything, things that I found out about Bit Defender and Kaspersky during installation
- After uninstalling Bit-Defender, make sure you run this tool : BitDefender_Uninstall_tool.exe found at http://forum.bitdefender.com/index.php?s=f48df6dd511e016cda47dc3e2d21c7d7&showtopic=1995 . This is to make sure that every items that BitDefender requires and installed such as registry or any hidden things are removed.
- When installing Kaspersky, it will ask you to remove Comodo Firewall. But not to worry, it may warn u that comodo is incompatible but it is actually compatible. You just need to unisnstall comodo and install it back AFTER installing kaspersky.
Manage to uninstall and install the kaspersky and it is much more faster now. In-fact, when I downloaded my emails, I dont feel the slowness. I did a scan and one thing that I liked with this product is it shows vulnerability of the software installed on my machine and the fixpack required. It is not a virus but a vulnerability or exploit if the software is left unpatch. See the following screenshots :
Right-click and click on Go To Description :
Redirects you to this page :
That's cool. it means that this software can detect vulnerabilities on my machine which most Anti-virus I've come with does not. What's the good thing on this ? It helps you close holes and exploits on your installed applications such as Office, Internet Explorer etc.
Speedwise, its speedier and faster than my old Bit Defender. I have not fully explored yet but what I can say is I'm quite happy with it so far. Here are the other screenshots of the Kaspersky AV
PortalExpress.install,com.ibm.wps.install.ExternalCommandAction$OutputWatcher, msg2, StdOut:[wsadmin] WASX7017E: Exception received while running file "D:\IBM\PortalExpress\PortalServer/config/was/wmm_SecurityConfigWmmUR.jacl";exception information: com.ibm.bsf.BSFException: error while eval'ingJacl expression:
PortalExpress.install,com.ibm.wps.install.ExternalCommandAction$OutputWatcher, msg2, StdOut:[wsadmin] invalid command name "checkUidPw"
PortalExpress.install,com.ibm.wps.install.ExternalCommandAction$OutputWatcher, msg2, StdOut:[wsadmin] while executing
PortalExpress.install,com.ibm.wps.install.ExternalCommandAction$OutputWatcher, msg2, StdOut:[wsadmin] "checkUidPw"
This is due to port conflict with Port 10000 used by BackupExec and by Portal during Security Enablement. Portal 10000 is used by Portal Installer during Security Enablement. Not sure why, but when you encounter this, make sure that you check if BackupExec is enabled.
You might run into a situation where a portlet that works correctly in a development environment that uses the credential vault for storing user data no longer works correctly in the higher (for example, QA or production) environments.The error is:AbstractCrede E com.ibm.wps.command.credentialvault.AbstractCredentialVaultCommand execute EJPSK0042E: Operation could not be performed successfully. Missing parameter: Segment ID.
This problem usually happens when the defaultUserSegment is missing from the higher environments. This omission can happen if you use release builder to promote the release to an empty portal, as the slot data is seen as being private data so is not exported as part of the release.
To correct this problem, you can create and import a file to supply the missing data.
Create a file based on http://www-1.ibm.com/support/docview.wss?uid=swg21259823
Then, import this file to the higher environments using XMLAcces.If your environment is missing a different segment, you can alter the file contents above. To determine the missing segment, look at an export from the higher environment compared to the lower, or development, environment. Change the segment tags in the XML file sample given above to the correct lines from the lower environment's XML. Then import the file to resolve the issue.
Thursday, August 14, 2008
The table ICMUT01424001 of the WebSphere Portal under JCR schema contains the references of all the PDM. What we did is to update the ID (the numeric number between ). Since when importing PDM, this number is auto-generated thus losing the references from WCM. So we updated the table data to fix this.
The link : http://www-1.ibm.com/support/docview.wss?rs=203&context=SW000&dc=DB510&dc=DB520&dc=D800&dc=D900&dc=DA900&dc=DA800&dc=DB530&dc=DA600&dc=D600&dc=D700&dc=DA500&dc=D200&dc=DA410&dc=DA450&dc=DA430&dc=DA440&dc=DB540&dc=DB400&q1=database+table+usage&uid=swg21255445&loc=en_US&cs=UTF-8&lang=all contains the list of Tables WCM uses (WCM Tables). This is very helpful if you want to know more about WCM/JCR Tables of WebSphere Portal
Wednesday, August 13, 2008
Scenario : Data in the database are intact. But Portal is behaving weirdly. First of all, no pages are showing and no pages are accessible and WPSAdmin cannot even access the Administration Page. Secondly, contents are not shown and documents are not shown. Thirdly, it's nearing the launch date.
What we did :
First thing that came to our mind is how are we going to make portal work with all the data inside. We did some troubleshooting but we gave up as there is no point going to the database and find if there's any mapping incorrectly done. So, we decided that, we need to dump all the data.
Based on experience, we should be able to dump the portal by using the migration concept, which is to use the following tools :
XMLAccess to dump the pages and configuration of portal
WPSconfig to dump the Contents
WPMigrate to dump the documents.
Step 1 : I created a file called :ExportRelease.xml based on this link : http://publib.boulder.ibm.com/infocenter/wpdoc/v6r0/topic/com.ibm.wp.exp.doc/wps/admxmsmp.html?resultof=%22%45%78%70%6f%72%74%52%65%6c%65%61%73%65%2e%78%6d%6c%22%20#admxmsmp__export_rel
Step 2: Run xmlaccess to download the files. I ran :
xmlaccess.bat -in ExportRelease.xml -user wpsadmin -password password -url http://intranet:10038/wps/config -out D:\Backup\PortalConfig.xml
Note that when dumping, use the Portal Port rather than the HTTP Port. HTTP Port produces a timeout which will disconnect the command with the WAS, resulting to an error.
For more information, check this out : http://publib.boulder.ibm.com/infocenter/wpdoc/v6r0/topic/com.ibm.wp.ent.doc/wps/adxmltsk.html#adxmltsk__transfer
Step 3: Backup the files located at [PortalServer]
Step 4: Backup the following :
- Themes and Skins
Step 5: For our case, since I'm using my own developed desktop SSO Module, I need it for reference but its not require so I did a backup of the security.xml and other security related XML Files. If in doubt, just backup the wp_profile
Step 6 : Remember to backup your application database. This is not the Portal but your own application database. We missed out this part so we have to manually do a recover. We will have another post on how we did that.
Step 7 : We dump the WCM Content (thanks to my WCM Analysts, Mei mei Oen and Julius Soestrisno). Since we have more than 10 libraries, we have to connect to each of the libraries. This is quite a long process but please be referred to : http://publib.boulder.ibm.com/infocenter/wpdoc/v6r0/topic/com.ibm.wp.ent.doc/wcm/wcm_config_wcmlibrary_export.html?resultof=%22%69%6d%70%6f%72%74%2d%77%63%6d%2d%64%61%74%61%22%20
Basically the command to dump is : WPSconfig.bat export-wcm-data
If you have multiple libraries, you need to do this for all the libraries. If you can't remember your WCM Library name, you can refer to the dumped file PortalConfig.xml and search for all instances of :
Step 8 : Dump the Documents by running this command :
Step 9 : For us, since we're very KIASU, we backup the whole IBM Folder and Database
Step 10 : Uninstall Portal and DB2
Step 11 : Re-install Portal and Db2 with the same fixpack level.
Step 12: Transfer Database to Db2
Step 13 : Re-configure Portal Security with AD.
Step 14 : Test and do a backup of all things so that there's a checkpoint in-case the next steps fail
This is it.. next steps is to restore the settings :
Step 15 : run WPSConfig action-empty-portal to empty the portal configuration
Step 16 : Copy back the
Step 17 : Copy back the Installabe apps folder and the rest of files (including theme and skins)
Step 18 : Import the configuration by following this commands :
xmlaccess.bat -in PortalConfig.xml-user wpsadmin -password password -url http://intranet:10038/wps/config
Step 19 : Once done, do a login and test. Voila!! We can see now everything. However, web content is still not there so :
Step 20 : Re-import web content by running the command : WPSconfig.bat import-wcm-data. Ofcourse, follow the instructions on this link : http://publib.boulder.ibm.com/infocenter/wpdoc/v6r0/topic/com.ibm.wp.ent.doc/wcm/wcm_config_wcmlibrary_export.html?resultof=%22%69%6d%70%6f%72%74%2d%77%63%6d%2d%64%61%74%61%22%20
Step 21: Re-import Documents by running the command : WPmigrate.bat staging-to-production-pdm60-import
Voila!!! Done. We manage to revert back everything. Ofcourse we did some manual things like check the security, update the Portlets,etc. but that's it.
Stay tune next time on this scenario : You forgot to backup your DB2 database and your database was uninstalled, but the Datafiles are still there. How do you recover these data files ?.
- Previous day, your portal is working fine but the next day, suddenly nobody can login
- You manage to fix the login but another issue arises. Your WCM Content cannot be seen by both normal users, WPSADMINS group and the WPSADMIN himself
- PDM Content also cannot be seen
- All applications shows "Application Error, please contact your system administrator for more details"
- All the pages that you've created magically is gone
- To make the matters worst, the site will be launch on that same week
- However, the database still contains the information you need.
These happened to me and my team, and we happily recovered the system. Well after hard work and some combination of advance technique.
This is the summary of the events. I will tell you on the next post how we manage to recover the system.
Portal Version : Non-clustered Websphere Portal 6.0 Express with fixpack 22.214.171.124 integrated with DB2 and Active Directory. SSO via Credential vault to external systems.
- August 7, 2008 - We did some tuning on Portal in preparation for the launch. We left the clients premises at 5:30 and the portal is still working fine.
- August 8, 2008 - Customer reported that she cannot login to Portal. My colleague tested and it indeed cannot login I was in a meeting that time and have to rush to my clients place
- Still on same day - We investigated and we found out that the error we are receiving is Account Locked error. We tested the account using Softerra and all the accounts work. However in Portal, all accounts are locked.
- Still on the same day - We decided to redo the security by running a WPSConfig disable-security and WPSConfig enable-security-ldap
- Still on the same day - After re-doing the security, all accounts worked but lo and behold, data and contents are missing. Furthermore, all applications are not accessible (error) and , the most painful thing, no pages are accessible, even the Portal Administrator Page
- Still on the same day - We tried to access via the URL mapping, but no pages are accessible.
- Still on the same day - We investigated the database and all database are available.
- Still on the same day - We decided to re-do the enabling of security but it didnt work. (silly yes, but when your in this state, you will do whatever to recover anything.)
- We checked with the client if there is a backup but, sadly, no backup is available. Jia lat. That's it.. or is it ?
- Hmmmm... up to the next post. We will show you how we manage to recover everything...
So we have an EC2 instance on AWS. But we need to terminate it as the project has to give way to something urgent and therefore not on for...
My current work nowadays involves a lot of multi-threading application. And also a lot of simultaneous users. We need to serve them fast (as...