Consolidated Fixpack 8.5.1.41-005D for Domino 8.5.1

Quickr 8.5.1Fixpack Install Instructions

Consolidated Fixpack 8.5.1.41-005d for Domino 8.5.1

PTF LQ04387 for product ID 5724S31

Dec, 2013

Table of Contents

About theFixpack

Prerequisites

Installingthe Fixpack

Upgrading your places and other Quickr Domino databases

Upgrading offline installations

Applying a Fixpack to Quickr 8.5.x serversina cluster

How to activate ActiveX to import documents

How to activate Roundtrip Editing usingthe ActiveX control

How to activatethe FolderNavigator

CSRFprotection in Quickr

Additional Informationforspecialfixes

Additional Information for special fixes createdbefore Quickr 8.5.1.25

Merging NotificationTemplateUpdates

Troubleshooting

Quickr8.5.1FixList

About the Fixpack

This Fixpack package includes the following files:

Readme document:this file
LQ04387: a savefile containing the fixpack that is built and applied as an IBM i PTF to Lotus Quickr 8.5.1 for IBM i (5724S31).

Information for customers with locked down client environments:

This current build, 8.5.1.41-005d dated 2013/11/14 does nothave an updated qp2.cab.

Please Note there will be an update to qp2.cab in the next FixPack, 8.5.1.42-001a

The previous most recent update to qp2.cab was in 8.5.1.39-002a dated 2013/05/23.

Previous to that was 8.5.1.25-007a dated 2011/02/14.

2012/04/30 - Cross Site Request Forgery (CSRF) Protection

Additional CSRF protection was added to Quickr and new settings added to enable it. Please see the section CSRF protection in Quickr in this document

2012/04/30 - Additional security fixes require new Domino 8.5.1FP5 HotFix

Additional security fixes were added to Domino 8.5.1FP5 and are highly recommended to be applied to your Quickr Domino Environment. Reference the correct Domino HotFix number depending on your platform.

IBM i 5.4 - L503828

IBM i 6.1/7.1 - L603825

2012/01/16 - Quickr 8.5.1.25 and above

The FixPack version number has skipped a number of versions and is now FixPack 25 (or above). This was done as a way to highlight that this FixPack version has re-introduced some features that were in previous versions of Quickr such as using the ActiveX to import documents and the Folder Navigator. This FixPack adds support for Microsoft Office 2010 when importing through the ActiveX control. Please see additional fixes and updates in the Additional Information for special fixes section.

For more information about the 8.5.1.25 release, please refer to the Quickr Wiki.

2011/09/07 - Notification Template Updates

As of 2011/09/07, a new section has been added to describe how to merge updates to Notification Templates. This section will also list each fix that contains an updated template along with the template files that should be merged to get the updated functionality.

2010/09/29 – Fix List information

As of 2010/09/09, the Fix List will contain both the SPR and APAR number if an APAR number exists. The APAR information is useful when dealing with support.

New Quickr installations:

If you are deploying Lotus Quickr for the first time and have never installed an earlier Quickr or QuickPlace release, you should first install Domino 8.5.1. Then install this fixpack and also install the latest connectors update before configuring your Lotus Quickr server.
For more information, see the Lotus Quickr 8.5.1 information center, which is available from the Lotus Quickr documentation site:

Upgrade from an earlier release:

Before installing this fixpack or a connectors update, Lotus Quickr 8.5.1 must be installed. Therefore, if you are using an earlier release of Quickr or QuickPlace, first complete the upgrade to Quickr 8.5.1
You can install this PTF and the connectors update before or after installing Domino 8.5.1 and upgrading your Quickr server to Domino 8.5.1. However, complete the Domino upgrade and install the fixpack before you start the server and attempt to use Quickr.
If you have multiple Quickr servers running in the same IBM i LPAR, they must all be running Quickr 8.5.1 and Domino 8.5.1 in order to use this fix.

(Domino multi-versioning permits you to run other Domino or Sametime servers in the same LPAR using different Domino releases if you prefer.)

Prerequisites

Before installing this fixpack:

5724S31 V8R5M1 Quickr 8.5.1 for IBM i must already be installed on your system.

Installing this Fixpack (PTF LQ04387)

This fixpack installation procedure requires a user profile with command line capability and a user class of *SECOFR.

The PTF is provided as IBM i save file called LQ04387

1.Establish a 5250 session with the IBM i server and sign on with the appropriate user profile.

2.Run the following command to create a temporary library:

CRTLIB LIB(MYLIB) TEXT('Library for Quickr 8.5.1 Fixes')

3.Run the following command to create the necessary save file:

CRTSAVF FILE(MYLIB/LQ04387) TEXT('Quickr 8.5.1 Fix LQ04387’)

4.Transfer the PTF save file from your workstation to the System i server.

From your workstation, enter the following commands and responses when prompted:

cd xxx [change to the directory on your workstation that contains LQ04387

ftp: [your System i name or IP address]

Name: [Enter your user profile name and press ENTER]

Password: [Enter your password and press ENTER]

ftp>binary

Representation type is binary IMAGE.

ftp>put LQ04387MYLIB/LQ04387

ftp>quit

5.To end any active Quickr servers, enter the following command:

WRKDOMSVR

Use option 6 (End Domino server) to end each active server that is running Quickr.

Use the Work with Active Job (WRKACTJOB) command to determine when all Quickr servers have ended. Wait until the servers have completely shut down before continuing to the next step.

6.Determine if any Quickr hot fixes are currently installed by running the following command:

DSPPTF LICPGM(5724S31)

If any PTFs are currently applied, remove them using the RMVPTF command.

7.Run the following commands to load and apply the Quickr PTF:

LODPTF LICPGM(5724S31) DEV(*SAVF) SAVF(MYLIB/LQ04387)

APYPTF LICPGM(5724S31) SELECT(LQ04387)

8.Now you can start the Quickr servers.

Use the WRKDOMSVR command and select option 1 (Start server)

Upgrading your places and other Quickr Domino databases

After upgrading the files on your Lotus Quickr server, you may need to upgrade the place templates and other Quickr Domino databases so that they reflect the most current changes of the files you have upgraded.

To upgrade follow these steps:

Make sure the Quickr Server is running
From the Domino Console type the following commands :

*Note that you must wait for each of these commands to finish before proceeding to the next command. You will know that the command has finished when you see a message in the console such as qptool: command finished: {the command performed}

Command / Action It Performs
load qptool unlock –a / Unlock all the places.
load qptool upgrade -f –server / Upgrade all the databases on the server.
load qptool upgrade -f -a–saveformprefs / Upgrade all the places and PlaceTypes.

Upgrading offline installations

When you install a Quickr Domino Fixpack, you will also get the latest files needed for your offline installations. Clients taking a place offline for the first time after applying the Fixpack will automatically get the latest version of the offline support files installed to their machine. For client machines that already have offline places installed to their machine, the recommended way to update their machine with the latest offline support files is to:

Take note of all the subscription names from the Domino Sync Manager.
Synchronize all the places to deliver any changes from the offline places.
Delete the subscriptions from the Domino Sync Manager.
Uninstall the Lotus Domino Sync Manager to remove it from the machine.
Go to the online places that were noted and take them offline.

This will ensure that the latest version of the offline support files have been installed on the client machine.

Applying a Fixpack to Quickr 8.5.x servers in a cluster

For the Quickr cluster to run properly, each server in the cluster needs to be on the same Fixpack. To do that, perform the following steps:

*please note, The Lotus Quickr service is not available when FixPack installation is in progress, once the servers have been started, the service is available, but places may be locked during upgrade

(optional) It is highly recommended that you backup all places and PlaceTypes.

At the Domino console, use the “load qptool unlock -a” command on only one server in the cluster to unlock all the places.
Stop every Lotus Quickr server in the cluster.
Upgrade all the servers with the Fixpack.
Restart each of the servers (cluster replication and qptool replicamaker tasks should remain running).
Use the “load qptool upgrade -f -server” command on only one server in the cluster to upgrade the design of databases.
Use the “load qptool upgrade -f -a -saveformprefs” command on only one server in the cluster to upgrade places and PlaceTypes.
Let replication pass the design upgrades to all servers.

When replication has finished passing the design updates to the other servers, your Quickr cluster will then be upgraded to the latest Fixpack.

How to activate ActiveX to import documents

To import a Microsoft Word document, Microsoft Excel spreadsheet, Microsoft PowerPoint presentation, HTML file, or JPEG / GIF image using the ActiveX control as was available in previous versions of Quickr, do the following:

Locate the widgetRegistryConfig_ext.js file in your widgets\resources directory:

eg:(windows)c:\Domino\data\domino\html\qphtml\widgets\resources\widgetRegistryConfig_ext.js

(unix)/local/notesdata/domino/html/qphtml/widgets/resources/widgetRegistryConfig_ext.js

The widgetRegistryConfig_ext.js file is shipped as an empty file.
If there are no modifications to this file (the file is still empty), you can copy the file widgetRegistryConfig_ext.js_ACTIVEX, which located in the same directory, directly to widgetRegistryConfig_ext.js overwriting the old one
If this file is not empty, you will have to merge the contents of the file widgetRegistryConfig_ext.js_ACTIVEX into widgetRegistryConfig_ext.js. widgetRegistryConfig_ext.js_ACTIVEX is located in the same directory as the widgetRegistryConfig_ext.js file.
If there is no widgetRegistryConfig_ext.js file, make a copy of the widgetRegistryConfig_ext.js_ACTIVEX and name the copywidgetRegistryConfig_ext.js. Then use the CHGOWN command to change the owner of the widgetRegistryConfig_ext.js file to QNOTES. For example, enter the following commands:

CHGOWN OBJ('<QP_server_data_directory>/domino/html/qphtml/widgets/resources/widgetRegistryConfig_ext.js') NEWOWN(QNOTES)

Enable the following settings in the qpconfig.xml

<unsafe_filetypes>unknown</unsafe_filetypes>

</security>

<preview_feature enabled="true">

<preview_activex enabled="true"</preview_activex>

</preview_feature>

<server_messages>

<updated_by_connector>

<![CDATA[

Edit and Save in Internet Explorer to update the Web preview.

]]>

</updated_by_connector>

</server_messages>

Restart your Quickr server and empty your web browser's cache.

*please refer to the TroubleShooting section if you have any unexpected results.

How to activate Roundtrip Editing using the ActiveX control

To use the ActiveX control for roundtrip editing a document using Internet Explorer as was available in previous versions of Quickr do the following:

Locate the widgetRegistryConfig_ext.js file in your widgets\resources directory:

eg:(windows)c:\Domino\data\domino\html\qphtml\widgets\resources\widgetRegistryConfig_ext.js

(unix)/local/notesdata/domino/html/qphtml/widgets/resources/widgetRegistryConfig_ext.js

The widgetRegistryConfig_ext.js file is shipped as an empty file.
If there are no modifications to this file (the file is still empty), you can copy the file widgetRegistryConfig_ext.js_ROUNDTRIP_EDIT, which located in the same directory, directly to widgetRegistryConfig_ext.js overwriting the old one.
If this file is not empty, you will have to merge the contents of the file widgetRegistryConfig_ext.js_ROUNDTRIP_EDIT into widgetRegistryConfig_ext.js. widgetRegistryConfig_ext.js_ROUNDTRIP_EDIT is located in the same directory as the widgetRegistryConfig_ext.js file.

If there is no widgetRegistryConfig_ext.js file, make a copy of the widgetRegistryConfig_ext.js_ROUNDTRIP_EDIT and name the copywidgetRegistryConfig_ext.js. Then use the CHGOWN command to change the owner of the widgetRegistryConfig_ext.js file to QNOTES. For example, enter the following commands:

CHGOWN OBJ('<QP_server_data_directory>/domino/html/qphtml/widgets/resources/widgetRegistryConfig_ext.js') NEWOWN(QNOTES)

Enable the following settings in the qpconfig.xml

</connectors>

Restart your Quickr server and empty your web browser's cache.

*please refer to the TroubleShooting section if you have any unexpected results.

How to activate the Folder Navigator

To activate the Folder Navigator, do the following:

Locate the widgetRegistryConfig_ext.js file in your widgets\resources directory:

eg:(windows)c:\Domino\data\domino\html\qphtml\widgets\resources\widgetRegistryConfig_ext.js

(unix)/local/notesdata/domino/html/qphtml/widgets/resources/widgetRegistryConfig_ext.js

The widgetRegistryConfig_ext.js file is shipped as an empty file.
If there are no modifications to this file (the file is still empty), you can copy the file widgetRegistryConfig_ext.js_FOLDERNAV, which located in the same directory, directly to widgetRegistryConfig_ext.js overwriting the old one.
If this file is not empty, you will have to merge the contents of the file widgetRegistryConfig_ext.js_FOLDERNAV into widgetRegistryConfig_ext.js. widgetRegistryConfig_ext.js_FOLDERNAV is located in the same directory as the widgetRegistryConfig_ext.js file.
If there is no widgetRegistryConfig_ext.js file, make a copy of the widgetRegistryConfig_ext.js_FOLDERNAV and name the copywidgetRegistryConfig_ext.js. Then use the CHGOWN command to change the owner of the widgetRegistryConfig_ext.js file to QNOTES. For example, enter the following commands:

CHGOWN OBJ('<QP_server_data_directory>/domino/html/qphtml/widgets/resources/widgetRegistryConfig_ext.js') NEWOWN(QNOTES)

Restart your Quickr server and empty your web browser's cache.

*please refer to the TroubleShooting section if you have any unexpected results.

CSRF protection in Quickr

For Cross Site Request Forgery (CSRF) protection, Lotus Quickr for Domino supports a nonce check and HTTP header check. By default, the CSRF protection is disabled.

(Nonce keys are used to prevent unauthorized access to data and protect against replay attacks. You can refer to RFC 2617 or other Internet resources for more information about nonce keys.)

To enable both the nonce and HTTP header check, perform the following steps:

1. Enable the following settings in the qpconfig.xml file:

<xsrf_service_protection enabled="true">

<restricted_service_protection enabled="false">Jakarta Commons-HttpClient,IBM-Connectors</restricted_service_protection>

</xsrf_service_protection>

</security>

2. Restart your Quickr server, and empty your web browser's cache.

To enable nonce only check for services so that only requests with the correct nonce tokens are allowed, perform the following steps:

1. Enable the following settings in the qpconfig.xml file:

<xsrf_service_protection enabled="true">

<restricted_service_protection enabled="true"/>

</xsrf_service_protection>

</security>

2. Restart your Quickr server, and empty your web browser's cache.

Note: Enabling a nonce only check limits some product features. With nonce only enabled, the Lotus Quickr Connectors will not work correctly and an IBM Connections Activity File cannot be published to a Quickr for Domino place.

Additional Information for special fixes

*Please note: each row in the following table represents a specific issue as described by the SPR / Description column, these special fixes (the Instructions column) only need to be applied if you encounter that specific issue. Applying these fixes if you do not encounter the issue specified may cause unexpected results and is not recommended.

SPR / Description

Instructions

A feature was added to allow a place owner or manager the ability to set whether Authors and Editors have the rights to create a folder.

To allow a place owner or manager the ability to disable create folder rights for Authors and Editors, please set the following qpconfig.xml setting:

<server_settings>
<folder_create enabled="true" />
</server_settings>
After restarting your server and clearing your browser's cache, log into a place and go into the Customize / Basics page and uncheck the option "Folder Creation : Allow Place Editor or Place Author", that place will no longer allow an Author or Editor the ability to create folders.
To disable folder creation for Authors and Editors in a room, go into that room's Customize / Basics page and uncheck the option " Folder Creation : Allow Room Editor or Room Author".
Please note, to also prevent Authors and Editors from creating folders in a room's Table of Contents via the Connectors, you must also set the following qpconfig.xml setting.
<server_settings>
<connectors>
<checkFolderToTOC enabled="false" />
</connectors>
</server_settings>

CRAY87TRS5 - Enable the browser client to remember View preferences, such as how many items to show per page.

To enable this feature, please set the following qpconfig.xml setting

<server_settings>
<cookies>
<folder enabled="true" />
</cookies>
<server_settings>

When Quickr is configured to be used in a cluster and Domino Internet Site Documents are in use, notifications sent may use a different hostname than the cluster hostname

/ To specify which server notifications should be coming from, please set the new qpconfig.xml setting hosturl_notification:
<cluster>
<master virtual="true" ssl="false">
<port>80</port>
<hostname>qp.ibm.com</hostname>
<path_prefix</path_prefix>
</master>
<hosturl_notification>

</cluster>

When using Tivoli Access Manager (TAM) the username and password fields are not needed when a user creates a place since the user is already logged in.

To enable this feature, please set the following notes.ini setting:

QuickPlaceTAM=1

By default qptool repair repairs all issues found when parsing through a place. Those being folderEnhance,page,database,dn.

folderEnhance fixes Folders
page fixes Document issues
database fixes Database issues
dn fixes DN and Name issues /

A new notes.ini setting has been added to allow you to selectively choose which type of repair 'qptool repair' should run.

Set the following notes.ini setting as such:

QPTOOLREPAIR_TYPE=folderEnhance,page,database,dn
You may choose one, some or all of the options.

SPR / Description

Instructions

DWHN8NEGEV - Custom HTML forms are not mapped correctly when publishing to FileNet.

A new qpconfig.xml option (isPage) was added when defining the form. When defining a form that is a Custom HTML form, please set isPage="false"