CT667NA_title
1/3/00
7:47 PM
Page 1
INSTRUCTOR GUIDE
Deploying Domino Applications
LOTUS DOMINO RELEASE 5
Lotus Authorized Education: Knowledge for the Future
CT667NA_title
1/3/00
7:47 PM
Page 2
Copyright, Disclaimer of Warranties and Limitation of Liability © Copyright 1999 Lotus Development Corporation, an IBM subsidiary. All rights reserved. You must purchase one copy of the appropriate kit for each student and each instructor. You may not copy, reproduce, translate or reduce to any electronic medium or machinereadable form, in whole or part, any documents, software or files provided to you without prior written consent of Lotus Development Corporation, except in the manner described in the documentation. Annotator, NotesSQL, Notes/FX, Work The Web and the Work The Web logo are trademarks and Lotus, Lotus Express, Lotus Improv, Lotus LearningSpace, Lotus Notes, LotusScript, Lotus Forms, Lotus Organizer, SmartSuite, ScreenCam, and SmartPics, NotesMail, Ami Pro, Freelance, Freelance Graphics, Graphwriter, Manuscript, 1-2-3, 1-2-3/G, SmartIcons, Symphony, and Working Together are registered trademarks of Lotus Development Corporation. cc:Mail, cc:Mail Remote, cc:Mobile, and cc:Mail Link are trademarks of cc:Mail, Inc., a wholly owned subsidiary of Lotus Development Corporation. LearningSpace, LearningSpace Live, LearningSpace Forum, and LearningSpace Anytime are registered trademarks of Lotus Development Corporation. Learning Server is a registered trademark of the Databeam Corporation. Workplace Shell, e-business and the e-business logo are trademarks and IBM, AIX, DisplayWrite, OS/2, SNA, PROFS and Presentation Manager are registered trademarks of International Business Machines Corporation. All other brand and product names are trademarks of their respective companies. While every reasonable precaution has been taken in the preparation of this manual, the author and publishers assume no responsibility for errors or omissions, nor for the uses made of the material contained herein and the decisions based on such use. Neither the author nor the publishers make any representations, warranties or guarantees of any kind, either express or implied (including, without limitation, any warranties of merchantability, fitness for a particular purpose or title). Neither the author nor the publishers shall be liable for any indirect, special, incidental, or consequential damages arising out of the use or inability to use the contents of this book, and each of their total liability for monetary damages shall not exceed the total amount paid to such party for this book.
,QVWUXFWRU Notes to the Instructor
7DEOHRI&RQWHQWV 7RSLF
3DJH
Deploying Domino Applications Notes to the Instructor ..................................................................... vii Recommended Agenda.............................................................................. viii Icon Quick Reference ................................................................................... x Classroom Setup ........................................................................................ xiii
Module A: Determining Deployment Strategy ................................ 1 Lesson 1 Identifying User Requirements ................................................. 2 Course Scenario ....................................................................................... 4 Application Concepts ................................................................................ 8 What Are Worldwide’s Applications? ...................................................... 10 Identify Classroom Setup Exercise ......................................................... 12 User Groups ........................................................................................... 14 Creating User Groups ............................................................................. 16 Determining User Groups........................................................................ 18 Application Access for User Groups ....................................................... 20 Determine Notes User Group Access Exercise ...................................... 24 Determine Web User Access to Databases Exercise ............................ 28 Lesson 2 Identifying Application System Requirements ........................ 30 Identifying Infrastructure Capacity .......................................................... 32 Improving Database Performance .......................................................... 36 Improve Database Performance Exercise .............................................. 38 High-Availability Applications .................................................................. 40 Determine High-Availability Applications Exercise .................................. 42 Replication Concepts............................................................................... 44 Determining Replication Strategy ........................................................... 46 Worldwide’s Replication Strategy ........................................................... 48 Creating Server Groups .......................................................................... 50 Determining Where Applications Reside ................................................ 52 Selecting Web Servers for Applications ................................................. 54 Identify Servers for Databases Exercise ................................................ 56 Identifying a Server’s Access to a Database .......................................... 58 Identifying Access to Servers ................................................................. 60 Determine Server Access to Database Exercise .................................... 62 Determine User and Server Access to Servers Exercise ....................... 64 Identifying Web Server Access ............................................................... 66 Determine Web Server Access Exercise ................................................ 68
Module B: Preparing Applications for Deployment ...................... 71 Lesson 3 Setting Up Server and Database Access ............................... 72 How to Prepare Applications for Deployment ......................................... 74 Verifying Groups for Server Access ........................................................ 76 Enabling User and Server Access to Servers ........................................ 78 Enable Server Access Exercise ............................................................. 80 Controlling Database Access ................................................................. 82
Deploying Domino Applications
iii
,QVWUXFWRU Notes to the Instructor
7DEOHRI&RQWHQWV 7RSLF
3DJH
Enable Database Access Exercise ......................................................... 86 Ensuring a Consistent Database ACL .................................................... 90 Enable Web Access Exercise ................................................................. 92 Lesson 4 Organizing Databases ............................................................ 94 Enabling Database for Document Routing ............................................. 96 Using Database Catalogs to Organize Databases ............................... 102 Categorizing Databases in the Database Catalog ................................ 104 Creating and Updating the Database Catalog ...................................... 106 Using a Database Library to Organize Databases ............................... 108 Publishing Databases in a Library ..........................................................110 Enabling Database Searches ................................................................112 What Is Domain Search?........................................................................114 How to Set Up Domain Search ..............................................................116 Lesson 5 Determining a Backup Strategy ............................................ 120 Determining a Backup Process ............................................................ 122 What Is Transaction Logging? .............................................................. 126 Logging Database Transactions ........................................................... 128 Scheduling the Backup Utility ............................................................... 130
Module C: Rolling Out Applications ............................................ 133 Lesson 6 Rolling Out Databases to Servers ........................................ 134 Deploying Databases Checklist ............................................................ 136 Setting Quotas and Thresholds ............................................................ 138 Setting Database Properties.................................................................. 142 Creating Database Directory Structure ................................................. 144 Creating Directory and Database Links ................................................ 146 Signing Databases ............................................................................... 150 Updating an ECL .................................................................................. 156 Notifying Users of Changes to ECLs .................................................... 158 Deploying Database Agents .................................................................. 162 Replication Guidelines .......................................................................... 166 Cluster Replication Guidelines ............................................................. 168 Administration Process.......................................................................... 170 Creating Replicas ................................................................................. 172 Replication Settings .............................................................................. 176 Set Replication Settings ....................................................................... 180 Scheduling Replication ......................................................................... 182 Set Up Replication Schedules for Databases Exercise ........................ 188 Copying Databases to Servers ............................................................. 190 Lesson 7 Rolling Out Databases to Users ........................................... 192 Distributing Databases to Users ........................................................... 194 Distributing Encryption Keys ................................................................. 198
iv
Deploying Domino Applications
,QVWUXFWRU Notes to the Instructor
7DEOHRI&RQWHQWV 7RSLF
3DJH
Module D: Troubleshooting Application Deployment ................ 203 Lesson 8 Identifying Deployment Problems ......................................... 204 Identifying Replication Problems .......................................................... 206 Replication Monitoring Tools ................................................................. 212 Logging Replication Transactions ......................................................... 214 Viewing the Replication Topology ......................................................... 218 Creating a Replication Monitor ............................................................. 220 Verifying Replication Transactions ........................................................ 224 Resolving Replication Conflicts ............................................................ 226 Monitoring ACLs ................................................................................... 228 Determine Server Access Exercise ...................................................... 232 How to Monitor ACL Changes .............................................................. 234 Identifying Database Performance Problems ....................................... 236 Monitoring Files .................................................................................... 238 Checking Database Usage ................................................................... 240 Analyzing a Database ........................................................................... 242 Lesson 9 Solving Deployment Problems ............................................. 246 Database Access .................................................................................. 248 Managing Database Access with the Administration Process .............. 250 Managing Database Performance ........................................................ 252 Archiving Databases ............................................................................. 258 Moving Databases ................................................................................ 260 Compacting Databases ........................................................................ 262 Managing Database Elements ............................................................. 268 Design Templates ................................................................................. 270 View Indexes ........................................................................................ 278 Ensure Accuracy of Database Views Exercise ..................................... 282 Recovering Databases ......................................................................... 284 Troubleshoot Replication Exercise ....................................................... 288
Appendix A: Exercise Solutions Appendix B: Worldwide Corporation Infrastructure Plan Appendix C: Checklists and Best Practices Appendix D: Creating a Deployment Implementation Plan
Deploying Domino Applications
v
,QVWUXFWRU Notes to the Instructor
vi
Deploying Domino Applications
,QVWUXFWRU Notes to the Instructor
1RWHVWRWKH,QVWUXFWRU ■
Recommended Agenda
■
Icon Quick Reference
■
Classroom Setup
Deploying Domino Applications
vii
,QVWUXFWRU Notes to the Instructor
5HFRPPHQGHG$JHQGD Course timing and scope The Deploying Domino Applications course takes two full days to teach. The following tables give suggested module and lesson timing, including introductions, lunches, and breaks. Because of the amount of material covered and the scope of this course, cover only the material included in the agenda. Do not cover material beyond the scope of this course that relates to infrastructure setup, application development, or maintaining users and servers.
Day 1 The following table shows the recommended times for each lesson, topic, learning process, and/or other activity covered during Day 1. Time
viii
Lessons or Topics
9:00 - 9:30
Course and Student Introductions
9:30 - 10:30
Module A: Lesson 1, up to Determining User Groups
10:30 - 10:45
Break
10:45 - 11:15
Module A: Lesson 1, from Application Access for User Groups to end of lesson
11:15 - 12:00
Module A: Lesson 2, up to Worldwide’s Replication Strategy
12:00 - 1:00
Lunch
1:00 - 1:45
Module A: Lesson 2, from Creating Server Groups to end of module
1:45 - 2:15
Module B: Lesson 3, up to Enable Server Access Exercise
2:15 - 2:30
Break
2:30 - 3:00
Module B: Lesson 3, from Controlling Database Access to end of lesson
3:00 - 4:00
Module B: Lesson 4
4:00 - 4:30
Module B: Lesson 5
Deploying Domino Applications
,QVWUXFWRU Notes to the Instructor
5HFRPPHQGHG$JHQGD (continued)
Day 2 The following table shows the recommended times for each lesson, topic, learning process, and/or other activity covered during Day 2. Time
Lessons or Topics
9:00 - 10:30
Module C: Lesson 6, up to Cluster Replication Guidelines
10:30 - 10:45
Break
10:45 - 11:45
Module C: Lesson 6, from Administration Process to end of lesson
11:45 - 12:15
Module C: Lesson 7
12:15 - 1:15
Lunch
1:15 - 2:45
Module D: Lesson 8
2: 45 - 3:00
Break
3:00 - 4:30
Module D: Lesson 9
4:30 - 5:00
Exercise: Troubleshoot Replication Problems
Deploying Domino Applications
ix
,QVWUXFWRU Notes to the Instructor
,FRQ4XLFN5HIHUHQFH The following quick reference lists the learning process associated with each icon used in this courseware. For a comprehensive explanation of each icon and how to effectively deliver each learning process, refer to the Courseware Preparation Guides found on the Certified Lotus Instructor (CLI) Private page: http:// www.lotus.com/educationzone or on the instructor CD (where applicable).
Activity
Case study
Caution
Demo
x
Deploying Domino Applications
,QVWUXFWRU Notes to the Instructor
,FRQ4XLFN5HIHUHQFH (continued)
Discussion
Online exercise
Paper-based exercise
Instructor note
Presentation
Deploying Domino Applications
xi
,QVWUXFWRU Notes to the Instructor
,FRQ4XLFN5HIHUHQFH (continued)
Procedure
Review questions
Tip
Walkthrough
xii
Deploying Domino Applications
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS The following configuration information and setup instructions were used to test the Deploying Domino Applications course. If the classroom configuration and setup do not match these details, Lotus Education makes no guarantee that the learning processes in this courseware will perform as stated.
Software version This course was developed and tested using Domino R5.0a. Differences between R5.0a and R5.0.1a are noted on the instructor pages of the course.
Classroom setup tips and tools Following are suggestions for expediting the classroom setup: ■
■
Use the Domino Directory and ID files provided with the instructor materials. This will avoid several procedures in this document. Affected procedures are noted. Install all clients simultaneously from a network file server.
Caution If you do not use the Domino directory and other files provided, basic classroom setup takes a minimum of three hours to implement.
Classroom setup differs from Implementing a Domino Infrastructure course The classroom setup for the Deploying Domino Applications course differs from the Implementing a Domino Infrastructure course. In order to adequately address the goals of the Deploying Domino Applications course, it is necessary to complete this classroom setup even if it directly follows the Implementing a Domino Infrastructure course.
Deploying Domino Applications
xiii
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued)
+DUGZDUHDQG6RIWZDUH Instructor machine requirements The following table identifies the number of Notes/Domino license types required for the instructor machine(s) for this class. Notes/Domino License Type Lotus Domino R5.0a Enterprise Server
# of Instructor Server Machines
# of Instructor Client Machines
1
Lotus Domino R5.0a All Clients
1
Student machine requirements The following table identifies the number of Notes/Domino license types required for the student machines for this class. Notes/Domino License Type Lotus Domino R5.0a Enterprise Server Lotus Domino Administrator R5.0a Client
xiv
# of Student Server Machines
# of Student Client Machines
6 6
Deploying Domino Applications
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) +DUGZDUH DQG 6RIWZDUH
Machine configuration requirements The following table lists the software and hardware required per instructor and student machine to deliver this course. Software Requirements Network
■ TCPIP using either the Hosts file or DNS ■
Instructor and Student Servers
Minimum Hardware Requirements per Machine
Recommended Hardware Requirements per Machine
Internet access
Static IP addresses for servers
■ Windows NT Server 4.0 with Service Pack 4
R5 Wallpaper (R5SUPER.BMP included in instructor materials) ■
■ (Optional on instructor’s server) Third-party backup utility for demonstration in Module B.
■
Memory: 128 MB
■
Memory: 256 MB
■
Disk space: 500 MB
■
Disk space: 1 GB
■ CD-ROM drive or access to network file server for installation
■ Pagefile: 1 to 2 times physical memory
■ Support for 256 colors, 800 x 600 resolution ■ Synchronize system time with all classroom machines.
Instructor Client
■
Windows 95
■ Lotus Freelance 97 Mobile Screen Show Player ■
One of the following browsers:
Netscape Navigator 4.0 or above ■ Internet Explorer 4.0 or above ■ R5 Wallpaper (R5SUPER.BMP included in instructor materials)
■
Memory: 64 MB
■
Memory: 80 MB
■
Disk space: 300 MB
■
Disk space: 350 MB
■ CD-ROM drive or access to network file server for installation
■
Student Clients
■ Support for 256 colors, 800 x 600 resolution ■ Synchronize system time with all classroom machines.
■
Windows 95
■
Memory: 32 MB
■
Memory: 64 MB
■
One of the following browsers:
■
Disk space: 250 MB
■
Disk space: 300 MB
Netscape Navigator 4.0 or above ■ Internet Explorer 4.0 or above ■ R5 Wallpaper (R5SUPER.BMP included in instructor materials) ■
■ CD-ROM drive or access to network file server for installation ■ Support for 256 colors, 800 x 600 resolution ■ Synchronize system time with all classroom machines
Deploying Domino Applications
xv
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued)
&RXUVH0DWHULDOV Other equipment The following table lists the extra equipment needed to present the Deploying Domino Applications course. Equipment
Day the Equipment Is Required
Whiteboard or chalkboard
All
Projection device:
All
■ Projection panel to connect to overhead projection ■ RGB projector (for example, BRCO)
Instructor course materials The following table lists the materials needed to present the Deploying Domino Applications course. Materials
Module in Which the Materials Are Used
Instructor Guide
All
Classroom databases
All
Presentation file
All
Replication animation
Module A
Routing applications animation
Module B
Student course materials The following table lists the materials students will need to participate in and complete the Deploying Domino Applications course. Materials
xvi
Module in Which the Materials Are Used
Student Guide
All
Blank disk
All
Deploying Domino Applications
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued)
)LOHV,QFOXGHGZLWK,QVWUXFWRU0DWHULDOV Instructor data files The following files are included in the instructor materials: Instructor Tools Title
File Name
Deploying Domino Applications Classroom Diagrams
SA260DIAG.FMP
Routing applications animation
ROUTING.EXE
Replication animation
REP50.EXE
Domino Databases Database Title
Database File Name
Where Used
World’s Domino Directory
NAMES.NSF
Classroom setup, All modules
Customer Information
CUSTINFO.NSF
All modules
Customer Service
CUSTSVC.NSF
Sales Orders
ORDERS.NSF
Policies
POLICIES.NSF
Price List
PRICELST.NSF
Product Catalog
PRODCAT.NSF
Product Ideas
IDEAS.NSF
Product Design
PRODDSGN.NSF
Instructor Product Catalog
IPRODCAT.NSF
Instructor Product Ideas
IIDEAS.NSF
Instructor Product Design
IPRODDSG.NSF
Instructor Price List
IPRICELS.NSF
Earth’s Database Catalog
EDBCAT.NSF
Demonstration in Module B
(continued on next page) ...
Deploying Domino Applications
xvii
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) )LOHV ,QFOXGHG ZLWK ,QVWUXFWRU 0DWHULDOV
Instructor data files...
Database Title
Database File Name
Worldwide Corporation’s Homepage
WORLDHPG.NSF
Product Catalog database template
PRODCAT.NTF
Product Ideas database template
IDEAS.NTF
Module D Policies & Procedures
MDPOLICY.NSF
Module D Product Catalog
MDPRODCT.NSF
Module D Sales Orders
MDORDERS.NSF
Module D Customer Service
MDCSTSVC.NSF
Module D Customer Information
MDCSTINF.NSF
Where Used
Activity in Module D
Exercise in Module D
ID Files Certifier or User ID
File Name
/World
WORLD.ID
/SVR/World
SVR.ID
/PT/World
PT.ID
/BR/World
BR.ID
WorldHub/World
WORLDHUB.ID
Doctor Notes/World
DNOTES.ID
Web Files ■ ■ ■ ■ ■ ■ ■
xviii
CATALOGW.HTM INFOWW.HTM ORDERWW.HTM WWCORP.HTM DECORATE.JPG MEXICO.JPG MODERN.JPG Deploying Domino Applications
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued)
&ODVVURRP&RQILJXUDWLRQ Domino naming The following table lists the hierarchical naming scheme used in this courseware. Organization Name
World
Certifier
WORLD.ID (/World) PT.ID (/PT/World) SVR.ID (/SVR/World) BR.ID (/BR/World)
Domain name
World
The following table lists the naming for servers and clients used in this courseware. Instructor/ Student
Server
Client
Instructor
WorldHub/World
Doctor Notes/World
Student
PTApps01/SVR/World
Admin PTApps01/PT/World
PTApps02/SVR/World
Admin PTApps02/PT/World
PTHub/SVR/World
Admin PTHub/PT/World
BRApps01/SVR/World
Admin BRApps01/BR/World
BRApps02/SVR/World
Admin BRApps02/BR/World
BRHub/SVR/World
Admin BRHub/BR/World
Server system naming For TCP/IP connectivity to function properly, the servers and clients require the machine name of the server. This is accomplished using one of the following methods: ■ ■
■
Server system names match the Domino server name. Server system names are aliased to the Domino server names in a local Hosts file. Server system names are aliased to the Domino server names in the DNS lookup table for the TCP/IP domain.
Deploying Domino Applications
xix
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) &ODVVURRP &RQILJXUDWLRQ
Classroom setup diagram This course covers deployment of applications within a subset of an international company called Worldwide Corporation. The subset consists of the headquarters of the company located in Portugal and one regional office in Brazil. The following Domino/Notes components should be in place when the classroom setup is complete: DNN: TCPIP Network Clustered servers
Domain: World
WorldHub/World Web
Doctor Notes/World Headquarters: Portugal
Admin PTApps01/PT/World PTApps01/SVR/World
Web
Admin PTApps02/PT/World
PTApps02/SVR/World
Region: Brazil
Admin BRApps01/BR/World BRApps01/SVR/World
Admin BRApps02/BR/World
Web
BRApps02/SVR/World
Web
Web Admin PTHub/PT/World
PTHub/SVR/World
Admin BRHub/BR/World BRHub/SVR/World
Note: All servers belong to the same DNN for ease of routing.
Note Create name tents for each classroom machine with the server or user name to help students visualize the classroom setup. Place these table tents on machines during the Identify Classroom Setup Exercise in Lesson 1: Identifying User Requirements. xx
Deploying Domino Applications
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued)
,QLWLDO6HWXS&KHFNOLVW Set up the classroom checklist The following checklist defines the tasks for initial setup to be completed prior to the first day of class. Each task has a corresponding procedure in this document, including specific steps. The fourth column in the table indicates which tasks to skip if using the supplied Domino Directory and ID files. Use the following time estimates: ■ ■
Using the supplied files, classroom setup takes approximately two hours. Without using the supplied files, classroom setup takes approximately four hours.
Complete these tasks to set up the classroom prior to the start of class. Detailed procedures for each step appear on the next several pages. Task
Procedure
Skip
❏
1
Install server software.
❏
2
Set up the World Hub server.
❏
3
Install Admin/Notes client software.
❏
4
Set up the instructor’s workstation.
❏
5
Create the organizational unit certifiers.
✱
❏
6
Register student servers.
✱
❏
7
Set up and start student servers.
❏
8
Create groups.
❏
9
Nest administrators groups.
❏
10
Create Setup Profile documents.
✱
❏
11
Register Notes users.
✱
❏
12
Register Web users.
✱
❏
13
Replicate the Domino Directory in the classroom.
✱
❏
14
Set up workstations.
✱
❏
15
Set access to administer the server.
❏
16
Create a server group.
Deploying Domino Applications
✱
✱ xxi
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Set up the classroom checklist...
Task
xxii
Procedure
Skip
❏
17
Create a Connection document for classroom servers.
✱
❏
18
Create Configuration documents.
✱
❏
19
Create Domino clusters.
❏
20
Create Internet clusters.
❏
21
Set up workflow demonstration.
❏
22
Set up Distribute encryption key demonstration.
❏
23
Set up the classroom files.
❏
24
Set up the troubleshooting exercise.
❏
25
Complete classroom setup.
✱
Deploying Domino Applications
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 1: Install server software Follow these steps to install Domino servers using the appropriate license and server names. Step
Action
1
Run the Domino R5.0a server install executable (SETUP.EXE) from the appropriate server directory or the Domino R5.0a CD.
2
Click Next on the Welcome screen.
3
Click Yes to agree with the terms of the Lotus Licensing Agreement.
4
On the next screen: Enter the appropriate name and company name information, for example: Application Server.
■
■
5
Click Next.
Install files to the following folders: ■
Program files to the Lotus\Domino directory.
■
Data files to the Lotus\Domino\data directory.
Click Next. 6
On the next screen, do one of the following: a. Select Domino Enterprise Server license for the instructor’s server. Click Next to install the default server components. b. Select Application Server license for all student servers. Click Next to install the default server components.
7
Select Lotus Applications as the default group. Click Next to begin copying files.
8
Install will begin transferring files. Click Done when file transfer is complete.
9
It is not necessary to complete the product registration. Click Exit, then click Yes to confirm exiting.
10
Click Finish when setup is complete.
Deploying Domino Applications
xxiii
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 2: Set up the World Hub server Follow these steps to launch the Domino server and run setup. Step 1
Action (Optional) Copy the following files included with the instructor materials to the Domino\data directory on the instructor’s server: ■
World’s Address Book, NAMES.NSF
■
/World organization certifier ID, WORLD.ID
■
WorldHub/World server ID, WORLDHUB.ID
■
Doctor Notes/World user ID, DNOTES.ID
Note: Use the operating system to remove the read-only file attribute from each file. 2 3 4 5
Choose Start➝ Programs➝ Lotus Applications➝ Lotus Domino Server. Select First Domino server. Click
.
Select Advanced Configuration. Click
On the Server Audience screen, maintain all defaults and also select HTTP, both mail and applications. Click
6
.
.
On the Administration Settings screen, provide the following information in the Organization Identity section: ■
Domain Name: World
■
Certifier Name: World
■
Do not enter a Certifier Country code.
■
If using the supplied Domino Directory:
■
Select Use existing certifier ID. ■ Enter WORLD.ID for the certifier ID file name. If not using the supplied Domino Directory: ■
■ ■
Select Allow setup to create new certifier ID. Enter lotusnotes for the Certifier ID password. (continued on next page) ...
xxiv
Deploying Domino Applications
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 2: Set up the World Hub server... Step 7
Action Enter the following information in the New Server Identity section: ■
Server name: WorldHub
■
Server hostname: WorldHub.world.com
■
If using the supplied Domino Directory:
■
Select Use existing server ID. Enter WORLDHUB.ID for the server ID file name. If not using the supplied Domino Directory: ■ ■
■
8
Select Allow setup to create new server ID.
Enter the following information in the Administrator’s Identity section: ■
First and Last names: Doctor Notes
■
If using the supplied Domino Directory:
■
Select Use existing administrator ID. ■ Enter DNOTES.ID for the administrator ID file name. If not using the supplied Domino Directory: ■
■ ■
9
Select Allow setup to create new administrator ID. Enter lotusnotes for the administrator’s password.
In the Network and Communications Port section, follow these steps: a. Select Customize, then click Edit Ports. b. Select TCPIP for Network and Communications Port options, verify the Net Address is worldhub.world.com, and click OK.
10
Click Finish. Enter passwords when prompted.
11
Click the Set Access Control List entry button.
12
Enter GlobalAdmins as the group name for the administrators.
13
Select Also Add Anonymous with No Access. Click OK.
14
To assign roles for the GlobalAdmins group in the Domino Directory, choose File➝Database➝Open.
15
Select World’s Address Book, and click Open.
16
Choose File➝Database➝Access Control.
17
Select the GlobalAdmins entry, select the Person group User type and assign all roles to this entry.
18
Click OK, then close the Domino Directory.
19
Click the Exit Configuration button.
20
Launch the WorldHub/World server.
Deploying Domino Applications
xxv
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 3: Install Admin/Notes client software Follow these steps to install the client software on each machine. Step
Action
1
Run the Notes 5.0a client install executable (SETUP.EXE) from the appropriate directory or the Notes R5.0a CD.
2
Click Next on the Welcome screen.
3
Click Yes to agree with the terms of the Lotus Licensing Agreement.
4
On the next screen, enter each student’s Notes user name and Worldwide Corporation. Click Next.
5
Install files to the following directories: ■
Program files to the Lotus\Notes directory.
■
Data files to the Lotus\Notes\data directory.
Click Next. 6
Select the Domino Administrator client license, and click Next. Note: On instructor’s workstation, select All clients.
xxvi
7
Confirm that the group in which to include the Domino Administrator software is Lotus Applications. Click Next to begin copying files.
8
Install will begin transferring files. Click Done when file transfer is complete.
9
It is not necessary to complete the product registration. Click Exit, then click Yes to confirm exiting.
10
Click Finish.
Deploying Domino Applications
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 4: Set up the instructor’s workstation Follow these steps to set up the instructor’s workstation. Step
Action
1
Launch the Notes Domino Administrator software to start the setup program.
2
Click Next on the Welcome screen.
3
Select I want to connect to a Domino server. Click Next.
4
Select Set up a connection to a local area network (LAN). Click Next.
5
Enter WorldHub/World as the server. Click Next.
6
Select Use my name as identification. Then, enter Doctor Notes as the user name. Click Next. (The protocol is TCP/IP.)
7
Select I don’t want to set up a dial-up connection to a remote network. Click Next.
8
Select I don’t want to create an Internet mail account. Click Next.
9
Click Finish.
10
Enter lotusnotes as the user ID password. Click OK.
11
When setup is complete, click Done.
Note: If using Domino/Notes Release 5.01a, step 7 is combined with step 4 and you will be asked the following additional questions: ■ ■ ■ ■
I do/don’t want to connect to a news server. I do/don’t want to connect to another directory server. I do/don’t connect to the Internet through a proxy server. How to connect to the Internet: ■ Connect over my existing local area network. ■ Dial my Internet Service Provider.
Deploying Domino Applications
xxvii
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 5: Create the organizational unit certifiers Note: Skip this task if using the supplied Domino Directory and ID files. Follow these steps to create the organizational unit certifiers for the servers, and the Portugal and Brazil regions. Note: When prompted, click No to prevent future warnings regarding ID file recovery. Step
Action
1
From Domino Administrator, select WorldHub/World to administer.
2
Select the Configuration tab.
3
Choose Tools➝ Registration➝ Organizational Unit.
4
Select WORLD.ID as the parent certifier ID file, and click Open. Enter lotusnotes for the password, and click OK.
5
Click Registration Server. Select WorldHub/World, and click OK.
6
Click Set ID File. Select the Notes\data\ids\certs directory. Enter SVR.ID as the new certifier ID file name, and click Save.
7
Enter SVR as the Organizational Unit name.
8
Select 4 for the password quality. Enter lotusnotes for the password.
9
Select the appropriate security type for this location.
10
Enter GlobalAdmins as the name of an administrator or group of administrators to receive certification requests.
11
Click Register.
12
Click Yes to confirm registering another organizational unit.
13
Click Set ID File. Select the Notes\data\ids\certs directory. Enter PT.ID as the new certifier ID file name, and click OK.
14
Enter PT as the Organizational Unit name.
15
Select 4 for the Password quality. Enter lotusnotes for the password. (continued on next page) ...
xxviii
Deploying Domino Applications
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 5: Create the organizational unit certifiers... Step
Action
16
Select the appropriate Security type for this location.
17
Enter PTAdmins as the name of an administrator or group of administrators to receive certification requests.
18
Click Register.
19
Click Yes to confirm registering another organizational unit.
20
Click Set ID File. Select the Notes\data\ids\certs directory. Enter BR.ID as the new certifier ID file name, and click OK.
21
Enter BR as the Organizational Unit name.
22
Select 4 for the password quality. Enter lotusnotes for the password.
23
Select the appropriate Security type for this location.
24
Enter BRAdmins as the name of an administrator or group of administrators to receive certification requests.
25
Click Register.
Deploying Domino Applications
xxix
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 6: Register student servers Use the following server names when registering the student servers in the following procedure. Server Name
Server Host Name
Server ID File Name
Administrators Group
PTApps01/SVR/World
PTApps01.world.com
PTAPPS01.ID
PTAdmins
PTApps02/SVR/World
PTApps02.world.com
PTAPPS02.ID
PTAdmins
PTHub/SVR/World
PTHub.world.com
PTHUB.ID
PTAdmins
BRApps01/SVR/World
BRApps01.world.com
BRAPPS01.ID
BRAdmins
BRApps02/SVR/World
BRApps02.world.com
BRAPPS02.ID
BRAdmins
BRHub/SVR/World
BRHub.world.com
BRHUB.ID
BRAdmins
Note: Skip this task if using the supplied Domino Directory and ID files. Follow these steps to register the classroom servers. Step
Action
1
Select the Configuration tab.
2
Choose Tools➝ Registration➝ Server.
3
Enter lotusnotes as the active certifier ID file’s password, and click OK.
4
Click Registration Server. Select WorldHub/World, and click OK.
5
Click Certifier ID. Select SVR.ID and click Open.
6
Enter the password, and click OK.
7
Select a Security type and enter a Certificate expiration date. Click Continue.
8
On the Basics tab, complete the following: a. Enter a unique server name from the Server Names table. b. Enter lotusnotes as the password (required to store the ID in the Domino Directory). c. Select a password strength (recommendation 0) from the Password quality scale. d. Enter World as the domain where this server will reside. e. Enter PTAdmins as the name of the Administrator group to PT servers. Enter BRAdmins as the name of the Administrator group to BR servers. f. Click Next.
xxx
9
Repeat step 8 for each server listed in the Server names table.
10
Click Register. Deploying Domino Applications
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 7: Set up and start student servers Follow these steps to set up and launch each student server. Step 1 2 3 4
Action Launch the Domino server to run the setup program. Choose Start➝ Programs➝ Lotus Applications➝ Lotus Domino Server. Select Additional Domino server. Click Select Advanced Configuration. Click Select the Server Audience. Click ■
. .
.
For all servers, select Event Manager, Statistics.
For PTHub/SVR/World, PTApps02/SVR/World, BRHub/SVR/World, and BRApps02/SVR/World, select, in addition to above, HTTP for Web applications.
■
5
On the Administration Settings screen, complete the following information in the New Server Identity section: a. From the Server names table, enter the unique hierarchical server name used when registering the server. b. Enter the server’s host name. c. Select Get server ID from Address Book in the Server ID field.
6
In the Domain Address Book section, enter WorldHub/World as the server from which to create a replica of the Domino Directory.
7
In the Network and Communications Port section, follow these steps: a. Select Customize, then click Edit Ports. b. Select TCPIP for Network and Communications Port options. Verify the Net Address is the server’s host name, then click OK.
8
Click Finish.
9
To clear the server’s password, choose File➝ Tools➝ User ID.
10
Enter the password, and click OK.
11
Click Clear Password, enter the password, and click OK.
12
Click OK to close the User ID dialog box.
13
Click the Exit Configuration button.
14
Launch the Domino server.
Deploying Domino Applications
xxxi
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 8: Create groups Note: Skip this task if using the supplied Domino Directory and ID files. Reminder: The first server setup program created the GlobalAdmins group. Follow these steps to create user and administrator groups. Step
xxxii
Action
1
Select the People & Groups tab➝Domino Directories section➝World’s Address Book section➝Groups view.
2
Click Add Group.
3
Enter the group name: PTAdmins.
4
Select the group type: Multi-purpose.
5
Enter the group description: Portugal Administrators.
6
Add Doctor Notes to the Members field.
7
Click Save and Close.
8
Repeat steps 2 through 7 to create the following groups: ■
BRAdmins
■
PTAll
■
BRAll
■
GlobalHR
■
GlobalMarketing
■
GlobalSales
■
GlobalDistribution
■
GlobalSupport
■
PTR&D
■
PTProdMngmnt
■
PTManufacturing
■
PTEngineers
■
GlobalWorld -- add all groups as members.
■
Resellers
■
Customers
Deploying Domino Applications
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 9: Nest administrators groups Follow these steps to nest the administrators groups. Step
Action
1
Select the People & Groups tab➝Domino Directories section➝World’s Address Book section➝Groups view.
2
Select the GlobalAdmins group, and click Edit Group.
3
Enter the following user/groups in the Members field: ■
PTAdmins
■
BRAdmins
■
Worldwide Template/World
Note: The supplied Domino Directory contains a Person document for Worldwide Template/World (an ID used to sign databases in Module C). If you are not using the supplied Domino Directory, you will register this person during Task 11. 4
Click Save and Close.
Deploying Domino Applications
xxxiii
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 10: Create Setup Profile documents Note: Skip this task if using the supplied Domino Directory and ID files. Follow these steps to create a Setup Profile for administrators and employees. Step
Action
1
Select the People & Groups tab➝Domino Directories section➝World’s Address Book section➝Setup Profiles view.
2
Click Add Setup Profile.
3
On the Basics tab, complete the following: a. b. c. d. e.
xxxiv
Enter Administrators for the profile name. Select Notes as the default Internet browser. Enter WorldHub/World as the Directory server name. Enter WorldHub/World as the Catalog/Domain search server. Enter the place from which to retrieve/open pages.
4
Click Save and Close.
5
Repeat steps 1 through 4 above to create the following additional Setup Profiles: ■
SalesProfile
■
MarketingProfile
■
DistributionProfile
■
SupportProfile
■
DevelopmentProfile
■
HRProfile
Deploying Domino Applications
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 11: Register Notes users Use the following names to register users in the following procedure. Customer One Customer Two Reseller One Reseller Two
Portugal Application PTDeveloper Product PTDesigner HR PTMgr QC PTEngineer Product PTMgr Production PTManager Admin PTHub Admin PTApps01 Admin PTApps02
World Headquarters Portugal Doctor Notes
Brazil Admin BRHub Admin BRApps01 Admin BRApps02 Application BRDeveloper Customer BRSupportRep Catalog BRDesigner Shipping BRClerk HR BRConsultant
Sales Offices
Sales BRRep Tel BRMarket
Deploying Domino Applications
xxxv
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 11: Register Notes users... Use the following Admin clients names to register the administrators. Administrator Name
xxxvi
Mail Server Name
User ID File Name
Mail File Name
Admin PTApps01
PTHub/SVR/World
APTAPPS01.ID
APTAPPS01.NSF
Admin PTApps02
PTHub/SVR/World
APTAPPS02.ID
APTAPPS02.NSF
Admin PTHub
PTHub/SVR/World
APTHUB.ID
APTHUB.NSF
Admin BRApps01
BRHub/SVR/World
ABRAPPS01.ID
ABRAPPS01.NSF
Admin BRApps02
BRHub/SVR/World
ABRAPPS02.ID
ABRAPPS02.NSF
Admin BRHub
BRHub/SVR/World
ABRHUB.ID
ABRHUB.NSF
Worldwide Template
WorldHub/World
TEMPLATE.ID
None
Deploying Domino Applications
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 11: Register Notes users... Note: Skip this task if using the supplied Domino Directory and ID files. Follow these steps to register the classroom users. Step
Action
1
Select the People & Groups tab➝Domino Directories section➝World’s Address Book section➝People view.
2
Choose Tools➝ People➝ Register.
3
Enter the active certifier ID file’s password, and click OK.
4
Check Advanced to see more registration options.
5
On the Basics tab, perform the following steps: a. b. c. d. e.
Click Registration Server. Select WorldHub/World, and click OK. Enter Admin PTApps01 as the user’s First name and Last name. Keep the default password quality. Enter lotusnotes. Check Set Internet password. Click Format. Select Firstname Lastname for the Address name format and underscore (_) for the separator. Then, click OK. f. Verify that the Internet domain is world.com. 6
On the Mail tab, perform the following steps: a. Click Mail Server. Select PTHub/SVR/World, and click OK. b. Enter the mail file name from the Admins clients table.
7
On the ID Info tab, perform the following steps: a. b. c. d. e.
Click Certifier ID, select PT.ID and click Open. Enter lotusnotes and click OK. Select the appropriate Security type for this location. Enter a Certificate expiration date. Store the IDs in the Domino Directory and on disk. Use file names from the Admin Clients table.
8
On the Groups tab, select the PTAdmins and PTAll groups to which this user should be assigned. Click Add.
9
On the Other tab, select the Administrators Setup Profile.
10
Click Add Person. (continued on next page) ...
Deploying Domino Applications
xxxvii
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 11: Register Notes users... Step
Action
11
Repeat steps 5 through 10 using the PT.ID to register the following PT users: User Name
12
Groups
Setup Profile
Admin PTApps02
PTAdmins PTAll
Administrators
Admin PTHub
PTAdmins PTAll
Administrators
Application PTDeveloper
PTAll
DevelopmentProfile
Product PTDesigner
PTAll PTR&D
DevelopmentProfile
HR PTMgr
PTAll GlobalHR
HRProfile
QC PTEngineer
PTAll PTEngineers
DistributionProfile
Product PTMgr
PTAll PTProdMngmnt
DevelopmentProfile
Production PTManager
PTAll PTManufacturing
DistributionProfile
On the Basics tab, perform the following steps: a. b. c. d. e.
Click Registration Server. Select WorldHub/World and click OK. Enter Admin BRApps01 as the user’s First name and Last name. Keep the default password quality of 0. Enter lotusnotes. Select Set Internet password. Click Format. Select Firstname Lastname for the Address name format and underscore (_) for the separator. Then, click OK. f. Verify that the Internet domain is world.com.
13
On the Mail tab, perform the following steps: a. Click Mail Server, select BRHub/SVR/World, and click OK. b. Enter the mail file name from the Admins clients table. (continued on next page) ...
xxxviii
Deploying Domino Applications
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 11: Register Notes users... Step 14
Action On the ID Info tab, perform the following steps: a. b. c. d. e.
Click Certifier ID. Select BR.ID and click Open. Enter lotusnotes and click OK. Select the appropriate Security type for this location. Enter a Certificate expiration date. Store the IDs in the Domino Directory and on disk. Use file names from the Admin Clients table.
15
On the Groups tab, select the BRAdmins and BRAll groups to which this user should be assigned. Click Add.
16
On the Other tab, select the Administrators Setup Profile.
17
Click Add Person.
18
Repeat steps 12 through 17 using the BR.ID to register the following BR users: User Name
Groups
Setup Profile
Admin BRApps02
BRAdmins BRAll
Administrators
Admin BRHub
BRAdmins BRAll
Administrators
Application BRDeveloper
BRAll
DevelopmentProfile
Customer BRSupportRep
GlobalSupport BRAll
SupportProfile
Catalog BRDesigner
GlobalMarketing BRAll
MarketingProfile
Shipping BRClerk
GlobalDistribution BRAll
DistributionProfile
HR BRConsultant
GlobalHR BRAll
HRProfile
Sales BRRep
GlobalSales BRAll
SalesProfile
Tel BRMarket
GlobalSales BRAll
SalesProfile
(continued on next page) ...
Deploying Domino Applications
xxxix
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 11: Register Notes users... Step 19
Action On the Basics tab, perform the following steps: a. b. c. d.
20
On the Mail tab, select None for the Mail system.
21
On the ID Info tab, perform the following steps: a. b. c. d. e.
xl
Click Registration Server. Select WorldHub/World and click OK. Enter Worldwide Template as the user’s First name and Last name. Keep the default password quality of 0. Enter lotusnotes. Verify that the Internet domain is world.com.
Click Certifier ID. Select WORLD.ID and click Open. Enter lotusnotes and click OK. Select the International Security type. Enter a Certificate expiration date. Store the IDs in the Domino Directory and on disk. Use file names from the Admin Clients table.
22
On the Groups tab, select the GlobalAdmins and BRAll and PTAll groups to which this user should be assigned. Click Add.
23
Click Register All to begin registering all users in the registration queue.
24
Click Done.
Deploying Domino Applications
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 12: Register Web users Complete the following procedures to register Web users: ■ ■
Create Person documents for Web users. Add Web users to groups.
Create Person documents for Web users Note: Skip this task if using the supplied Domino Directory and ID files. Worldwide Corporation has customers and resellers who will access the Product Catalog database from a browser using name and password authentication. Follow these steps to register the Web users by creating Person documents. Step
Action
1
Select the People & Groups tab➝Domino Directories section➝World’s Address Book section➝People view.
2
Click Add Person.
3
Complete the following fields on the Basics tab: ■
First name: Customer
■
Last name: One
■
User name: Customer One
■
Internet password: lotusnotes
4
Click Save and Close.
5
Repeat steps 2 through 4 to add Person documents with the following information: First Name
Last Name
User Name
Internet Password
Customer
Two
Customer Two
lotusnotes
Reseller
One
Reseller One
lotusnotes
Reseller
Two
Reseller Two
lotusnotes
Deploying Domino Applications
xli
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Add Web users to groups Note: Skip this task if using the supplied Domino Directory and ID files. Follow these steps to add the Web user names to Web groups. Step
xlii
Action
1
Select the People & Groups tab➝Domino Directories section➝World’s Address Book section➝Groups view.
2
Choose Tools➝Groups➝Manage.
3
Select Customer One in the left pane, and select the Customers group in the right pane. Then, click Add.
4
Repeat step 3 to add Customer Two to the Customers group.
5
Select Reseller One in the left pane, and select the Resellers group in the right pane. Then, click Add.
6
Repeat step 5 to add Reseller Two to the Resellers group.
7
Click OK to close the Manage Groups dialog box.
Deploying Domino Applications
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 13: Replicate the Domino Directory in the classroom Note: Skip this task if using the supplied Domino Directory and ID files. Before setting up the clients, follow these steps to force replication from WorldHub/World to all classroom servers to distribute the new Person documents. Step
Action
1
From Domino Administrator on the instructor’s workstation, select WorldHub/World to administer.
2
Select the Server tab➝Status tab.
3
Choose Tools➝Server➝Replicate.
4
Select PTHub/SVR/World for the server with which to replicate.
5
Select the Push replication style.
6
Click Replicate.
7
Repeat steps 4 through 6 for all other classroom servers.
8
Click Done.
Deploying Domino Applications
xliii
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 14: Set up workstations Follow these steps to set up each of the students’ workstations. Step
Action
1
Launch the Domino Administrator workstation software to start the setup program.
2
Click Next on the Welcome screen.
3
Select I want to connect to a Domino server. Click Next.
4
Select Set up a connection to a local area network (LAN). Click Next.
5
Enter the name of the mail server from the Admin Clients table. Click Next.
6
Enter the administrator name from the Admin Clients table. Click Next. (The protocol is TCP/IP.)
7
Select I don’t want to set up a dial-up connection to a remote network. Click Next.
8
Select I don’t want to create an Internet mail account. Click Next.
9
Click Finish.
10
Enter lotusnotes as the user ID password. Click OK.
11
When setup is complete, click Done.
12
From Domino Administrator, add the assigned server to the Favorites list for each Admin client.
Note: If using Domino/Notes Release 5.01a, step 7 is combined with step 4 and you will be asked the following additional questions: ■ ■ ■ ■
xliv
I do/don’t want to connect to a news server. I do/don’t want to connect to another directory server. I do/don’t connect to the Internet through a proxy server. How to connect to the Internet: ■ Connect over my existing local area network. ■ Dial my Internet Service Provider.
Deploying Domino Applications
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 15: Set access to administer the server Note: Skip this task if using the supplied Domino Directory and ID files. Follow these steps to set administrators’ access for each server. Step
Action
1
Select WorldHub/World to administer.
2
Select the Configuration tab➝Server section➝Current Server Document.
3
Click Edit Server.
4
Select the Security tab. Enter Doctor Notes/World and LocalDomainServers in the following fields: ■
Create replica databases
■
Create new databases
■
Allowed to use monitors
5
Select the Server Tasks tab➝Administration Process tab.
6
Enter 5 in the Normal Request Settings section➝Interval field.
7
Click Save and Close.
8
Restart the server.
9
Repeat steps 1 through 8 to set access for all classroom servers. Enter the following information for step 4: ■
For PT servers, enter PTAdmins and LocalDomainServers
■
For BR servers, enter BRAdmins and LocalDomainServers
Deploying Domino Applications
xlv
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 16: Create a server group Note: Skip this task if using the supplied Domino Directory and ID files. Follow these steps to create server groups. Step
xlvi
Action
1
Select the People & Groups tab➝Domino Directories section➝World’s Address Book section➝Groups view.
2
Click Add Group.
3
Enter ClassroomServers for the group name.
4
Select the Servers only group type.
5
Enter the group description: Server group for Classroom Servers.
6
Add all student servers to the Members field.
7
Click Save and Close.
Deploying Domino Applications
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 17: Create Connection document for classroom servers Note: Skip this task if using the supplied Domino Directory and ID files. Follow these steps to create one Connection document to replicate NAMES.NSF and ADMIN4.NSF to all classroom servers. Step
Action
1
Select WorldHub/World to administer.
2
Select the Configuration tab➝Replication section➝Connections view.
3
Click Add Connection.
4
On the Basics tab, select Local Area Network for the Connection type.
5
Verify that the Source server (WorldHub/World) and Source Domain (World) fields are correct.
6
Enter ClassroomServers as the Destination server group and World as the Destination domain.
7
Click Choose ports. Select TCPIP, and click OK.
8
On the Routing/Replication tab, complete the following fields:
9
10
■
Replication task: Enabled
■
Replicate databases of ___ priority: Low & Medium & High
■
Replication Type: Pull Push
■
Files/Directories to Replicate: NAMES.NSF, ADMIN4.NSF
■
Replication Time Limit: blank
■
Routing Task: None
On the Schedule tab, complete the following fields: ■
Schedule: Enabled
■
Call at times: 12:00 AM - 11:59 PM
■
Repeat interval of: 5 minutes
■
Days of week: Sun, Mon, Tue, Wed, Thu, Fri, Sat
Click Save and Close.
Deploying Domino Applications
xlvii
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 18: Create Configuration documents Note: Skip this task if using the supplied Domino Directory and ID files. Follow these steps to set variables in the NOTES.INI file using a Configuration document.
xlviii
Step
Action
1
Select the Configuration tab➝Messaging section➝Configurations view.
2
Click Add Configuration.
3
Check Yes to use these settings as the default settings for all servers.
4
Select the NOTES.INI Settings tab.
5
Click Set/Modify Parameters.
6
Select the Log_MailRouting variable in the Item field.
7
Enter a value of 30 for the selected NOTES.INI variable. Click Next.
8
Repeat steps 6 and 7 to set each of the following logging variables: ■
Log_Replication=3
■
Log_Sessions=1
■
Log_Tasks=1
■
Log_View_Events=1
9
Click OK when finished setting variables.
10
Click Save and Close.
Deploying Domino Applications
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 19: Create Domino clusters Create the following two clusters for the classroom: ■ ■
PTHub and PTApps02 BRHub and BRApps02
Follow these steps to create Domino clusters. Step
Action
1
Select WorldHub/World.
2
Select the Configuration tab➝Cluster section➝All server documents view.
3
Select PTHub/SVR/World and PTApps02/SVR/World to be placed in the cluster. Click Add to Cluster.
4
Click Yes to begin the process of adding the servers to the new cluster.
5
Select Create new cluster. Click OK.
6
Enter PTCluster for the cluster name. Click OK.
7
Click Yes to immediately update the Server document in the Domino Directory on WorldHub/World.
8
Click OK when presented with the confirmation message.
9
Repeat steps 3 through 8 to create the cluster with BRHub and BRApps02.
Note: The cluster server tasks will start on the designated servers once the Domino Directory replicates to the new cluster servers based on the Administration Process schedule.
Deploying Domino Applications
xlix
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 20: Create Internet clusters Configure the following two Internet clusters to use an ICM: ■ ■
PTHub (ICM) and PTApps02 BRHub (ICM) and BRApps02
Follow these steps to set up the Internet Cluster Manager. Step 1
Action Verify that the HTTP task is running on the following servers: ■
PTHub/SVR/World
■
PTApps02/SVR/World
■
BRHub/SVR/World
■
BRApps02/SVR/World
2
Select PTHub/SVR/World to administer.
3
Select the Configuration tab➝Server section➝Current server document.
4
Click Edit Server.
5
Select the Server Tasks tab➝Internet Cluster Manager tab.
6
In the Basics section, complete the following fields: ■
Cluster name: PTCluster
■
ICM Notes port: TCPIP
■
ICM hostname: Enter PTHub.world.com or the server’s IP address.
■ TCP/IP port number: A port different from the HTTP port number for the Web server, for example, 8080.
l
7
Click Save and Close.
8
Edit the NOTES.INI file, and add ICM to the ServerTasks line.
9
Restart the server for the changes to take effect.
10
Repeat steps 2 through 9 for BRHub/SVR/World.
Deploying Domino Applications
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 21: Set up workflow demonstration Note: Skip this task if using the supplied Domino Directory and ID files. Follow these steps to create the mail-in database documents necessary to demonstrate the workflow application. Step
Action
1
Select the People & Groups tab➝Domino Directories section➝World’s Address Book section➝Mail-In Databases & Resources view.
2
Click Add Mail-In Database.
3
On the Basics tab, enter Instructor Product Design for the Mail-in name, and Demonstration for Module B for the Description.
4
On the Database Information tab, enter the following information: ■
Domain: World
■
Server: WorldHub/World
■
File name: IPRODDSG.NSF
5
Click Save and Close.
6
Repeat steps 2 through 5 to create a mail-in database document with the following information: ■
Mail-in name: Instructor Product Catalog
■
Description: Demonstration for Module B
■
Domain: World
■
Server: WorldHub/World
■
File name: CRITICAL\IPRODCAT.NSF
Deploying Domino Applications
li
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 22: Set up Distribute encryption key demonstration Follow these steps to create a secret encryption key necessary to demonstrate merging and distributing keys. Step
Action
1
From Doctor Notes’ workstation, choose File➝Tools➝User ID.
2
Enter the ID’s password, and click OK.
3
Click the Encryption panel.
4
Click New.
5
Enter a name that describes the purpose of the new key.
6
Select North American only if the key is to be used in the U.S. and Canada; select International if the key is to be used in additional countries. Note: You may not have a choice based on the ID’s security type.
lii
7
(Optional) Enter a comment to explain the key’s use. For example, the databases to use it with or the people who have copies of it.
8
Click OK to create the key.
9
Click OK to close the User ID dialog box.
Deploying Domino Applications
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 23: Set up the classroom files Follow these steps to properly set up the necessary classroom files for this class. Note: All of the files on the instructor’s CD have the read-only file attribute set. After copying the files, use the operating system to remove the read-only file attribute. Step 1
Action Copy the following files anywhere on the instructor’s workstation. Title
2
File Name
Deploying Domino Applications Classroom Diagrams
SA260DIAG.FMP
Routing applications animation
ROUTING.EXE
Replication animation
REP50.EXE
Copy the following files to the Domino\data directory on the instructor’s server. Note: Do not use Domino Copy, or replica IDs will be lost. Replica IDs were used to set up routing for workflow application. Title
File Name
Earth’s Database Catalog
EDBCAT.NSF
Instructor Product Design
IPRODDSG.NSF
Instructor Product Ideas
IIDEAS.NSF
Policies and Procedures
POLICIES.NSF
Product Design
PRODDSGN.NSF
Product Ideas
IDEAS.NSF
Worldwide’s Homepage
WORLDHPG.NSF
Product Catalog Template
PRODCAT.NTF
Product Ideas Template
IDEAS.NTF (continued on next page) ...
Deploying Domino Applications
liii
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 23: Set up the classroom files... Step 3
Action Create a directory named Domino\data\critical on the instructor’s server, and copy the following files to this directory. Note: Do not use Domino Copy, or replica IDs will be lost. Replica IDs were used to set up routing for workflow application. Title
4
File Name
Customer Information
CUSTINFO.NSF
Customer Service
CUSTSVC.NSF
Instructor Price List
IPRICELS.NSF
Instructor Product Catalog
IPRODCAT.NSF
Price List
PRICELST.NSF
Product Catalog
PRODCAT.NSF
Sales Order
ORDERS.NSF
Create a subdirectory, such as Domino\data\ModuleD, on the instructor’s server and each student server. Copy the following files to this subdirectory. Title
File Name
Module D Customer Information
MDCSTINF.NSF
Module D Customer Service
MDCSTSVC.NSF
Module D Policies & Procedures
MDPOLICY.NSF
Module D Product Catalog
MDPRODCT.NSF
Module D Sales Orders
MDORDERS.NSF (continued on next page) ...
liv
Deploying Domino Applications
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 23: Set up the classroom files... Step
Action
5
Copy the Worldwide Corporation’s Homepage database, WORLDHPG.NSF, to the Domino\data directory on the following Web servers:
6
■
WorldHub/World
■
PTApps02/SVR/World
■
PTHub/SVR/World
■
BRApps02/SVR/World
■
BRHub/SVR/World
Create a directory named Notes\data\ids\certs on the instructor’s workstation, and copy the following files to this directory. Certifier Name
7
8
9
File Name
/World
WORLD.ID
/SVR/World
SVR.ID
/PT/World
PT.ID
/BR/World
BR.ID
Copy the following files to all classroom Web servers in the domino\data\domino\html directory: ■
CATALOGW.HTM
■
INFOWW.HTM
■
ORDERWW.HTM
■
WWCORP.HTM
Copy the following files to all classroom Web servers in the domino\data\domino\icons directory: ■
DECORATE.JPG
■
MEXICO.JPG
■
MODERN.JPG
Set up Windows on each classroom machine with the Notes/Domino R5 wallpaper: R5SUPER.BMP
Deploying Domino Applications
lv
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Task 24: Set up the troubleshooting exercise Complete the following procedures to set up the troubleshooting exercise: ■ ■
Create a database copy. Change a replication setting.
Create a database copy Students will attempt replication of the Module D Sales Orders database, but the attempt will fail because there is no database replica, only a database copy. Follow these steps to create the database copy. Step 1
From the instructor’s workstation, add a bookmark or database icon for the Module D Sales Orders database on WorldHub/World.
2
Choose Database➝Delete from the right-click pop-up menu.
3
Click Yes to confirm deleting the database.
4
Open the Module D Sales Orders database on a student server.
5
Choose File➝Database➝New Copy.
6
Select WorldHub/World as the server where this new database will reside.
7
Click the file folder to select the Domino\data\ModuleD directory.
8
Verify that the following options are selected in the Copy section:
9
lvi
Action
■
Database design and documents
■
Access Control List
Click OK.
Deploying Domino Applications
,QVWUXFWRU Notes to the Instructor
&ODVVURRP6HWXS (continued) ,QLWLDO 6HWXS &KHFNOLVW
Change a replication setting Students will attempt replication of the Module D Customer Service database, but the attempt will fail because replication is temporarily disabled for this replica on student servers. Follow these steps to modify a replication setting. Step
Action
1
Open the Module D Customer Service database on WorldHub/World.
2
Choose File➝Replication➝Settings.
3
Click the Other tab.
4
Deselect the Temporarily disable replication Replication setting.
5
Click OK.
Task 25: Complete classroom setup Shut down the classroom servers after classroom setup is complete in order to prevent the Catalog server task from starting at 1:00 AM as specified, by default, in the NOTES.INI file. Students will create a Database Catalog at the end of Day 1 in Module B: Preparing Applications for Deployment.
Deploying Domino Applications
lvii
,QVWUXFWRU Notes to the Instructor
lviii
Deploying Domino Applications
$ 'HWHUPLQLQJ'HSOR\PHQW 6WUDWHJ\ Lesson 1 Identifying User Requirements Lesson 2 Identifying Application System Requirements
,QVWUXFWRU Lesson 1 ■ Identifying User Requirements
,GHQWLI\LQJ8VHU 5HTXLUHPHQWV
Course overview This course was designed to allow students practice in planning, implementing, and troubleshooting an application deployment.
Module overview The overall goal of this module is to define a plan for deploying applications using Worldwide Corporation as the scenario company. This module gives students practice in determining what types of information users need, where they need it, and how they will access the information. Students will map out where the applications should reside by identifying user groups, user locations, and access required using Worldwide’s infrastructure as implemented in the classroom.
Lesson overview This lesson focuses on identifying types of user groups within Worldwide Corporation, where user groups are located, and what type of access they need.
2
Deploying Domino Applications
,QVWUXFWRU Lesson 1 ■ Identifying User Requirements
,GHQWLI\LQJ8VHU 5HTXLUHPHQWV
Identifying information needs Carefully plan application deployment to ensure that users and servers have appropriate access to information. To ensure that information is accessible to users: ■ ■
■
Identify user groups according to their information needs and location. Determine the type of access they need based on how they need to use the information. Identify applications that are critical to the success of the company.
One of the main components of a successful application rollout is user acceptance. User acceptance may involve issues that are beyond the control of the administrator (and beyond the scope of this course), such as lack of user training, poor database design, or lack of applicability to the users’ jobs. In addition to planning, incorporate the following into the deployment to help alleviate user acceptance problems: ■ ■
Training and communication Communication with application developers
Objectives After completing this lesson, you should be able to: ■ ■ ■
Define the classroom scenario. Determine user groups based on application needs. Determine the type of access users require.
Student Guide Page No.2
3
,QVWUXFWRU Lesson 1 ■ Identifying User Requirements
&RXUVH6FHQDULR Planning the deployment Tell students that Module A: Determining Deployment Strategy provides the basis for planning a deployment. Due to its planning nature, this module contains mostly written exercises. The remainder of the course focuses on system activities required to implement the deployment strategy defined in this module.
Review course scenario Briefly review Worldwide Corporation’s charter as described on the Student Guide page. This should be a review from the Implementing a Domino Infrastructure course.
Remove pages from Appendix B The following pages have been duplicated at the end of Appendix B: Worldwide Corporation Infrastructure Plan. Have students remove them from Appendix B to use throughout the class. Description Organizational Structure User Needs Group Naming Conventions Application Types
Show classroom servers Briefly review the classroom setup. Show servers in classroom using Domino Administrator Server pane. Tell students that classroom setup reflects two parts of the company: Headquarters (Portugal) Brazil ■ This is a change from the Implementing a Domino Infrastructure classroom setup, which only used Portugal. ■
4
Deploying Domino Applications
,QVWUXFWRU Lesson 1 ■ Identifying User Requirements
&RXUVH6FHQDULR What is Worldwide Corporation? Worldwide Corporation is an international pottery manufacturer. The company is headquartered in Lisbon, Portugal. Worldwide Corporation manufactures and sells ceramics worldwide. Products include tiles, china, and various kinds of pottery. The corporate office houses manufacturing, research and development, product management, quality control, human resources, and system administration. Manufacturing is done in Portugal. Regional offices are located in the UK and Brazil. Each regional office also includes the following functions: ■ ■ ■ ■ ■
Sales and marketing Customer support Distribution Human resources System administration
There are several smaller sales offices and resellers throughout each region, and some sales representatives who work from their homes. Merchandise is sold directly to retail stores, to resellers, and through catalogs. System administration is localized in each of the regional offices and monitored from the corporate office. The company employs 5000 people worldwide and grossed $100 million last year.
Classroom implementation The classroom environment consists of two regions: corporate headquarters in Portugal (PT), and the Brazil (BR) regional office.
Student Guide Page No.3
5
,QVWUXFWRU Lesson 1 ■ Identifying User Requirements
&RXUVH6FHQDULR (continued)
Server types in the classroom Review the server types that Worldwide uses as part of its infrastructure. Tell students that for the purposes of this class, we will deploy only the following types of servers to demonstrate deploying applications: ■ ■ ■
Application Hub Web
Mail servers are not necessary for application deployment.
Review server licenses Review types of server licenses and relate to classroom setup and server types. Review when to use each type. For example, if the company has only one or two servers, they would probably use Application or Enterprise licenses to take advantage of multiple capabilities on all servers. However, if the company has many servers, they may want to use the Mail server license on some servers and the Application license on others to separate tasks.
6
Deploying Domino Applications
,QVWUXFWRU Lesson 1 ■ Identifying User Requirements
&RXUVH6FHQDULR (continued)
What are Worldwide’s server types? The following table lists the types of servers Worldwide has deployed and their associated tasks. Server Type
Tasks
Mail
Stores users’ mail and databases and routes mail across the intranet and Internet.
Application
Stores application databases.
Web
Provides access to an application from a client other than a Notes client, such as a Web browser to the Internet or to corporate intranet. Can use either: ■
Domino HTTP stack
■
Microsoft IIS
Hub
Routes mail and replicates databases to and from other hub or spoke servers.
Internet Messaging
Provides non-Domino mail services, such as:
Student Guide Page No.4
■
POP3
■
IMAP
■
SMTP
■
NNTP
■
LDAP
7
,QVWUXFWRU Lesson 1 ■ Identifying User Requirements
$SSOLFDWLRQ&RQFHSWV Review the concepts as they pertain to application deployment The concept of databases should be a review from the Implementing a Domino Infrastructure course. Important points on this student page are: ■
The difference between applications and databases (an application may contain more than one database as well as other elements) For the purposes of this class, the term database is used to describe a single .NSF file. The term application is used to describe a database that is dependent on other databases to function. For example, the Purchase Order application uses information in other databases and, therefore, all databases must be deployed simultaneously. When deploying applications that contain or rely on multiple databases, make sure all databases are deployed at the same time and in the same way, and are tested together to ensure that the application functions properly. ■
■
Describe application types Describe the basic types of Domino applications referencing specific examples of Worldwide’s applications.
Show sample databases Open two or more databases to illustrate the different database types.
8
Deploying Domino Applications
,QVWUXFWRU Lesson 1 ■ Identifying User Requirements
$SSOLFDWLRQ&RQFHSWV What is a database? A Domino database is a container for the application. It includes the application design and data together in one file called a Notes Storage Facility (NSF). For example, a user’s mail file is a Domino database (username.NSF) and the Domino directory is a Domino database (NAMES.NSF). Some Domino system databases use different file extensions, such as MAIL.BOX. A Domino database is unique in that it can hold any type of data, including applications, mail, directory, graphic, video, and sound files.
What is an application? An application is a solution to a particular problem that may include one or more databases and other components, such as Java applets. The following table describes the basic types of Domino applications. Application Type
Description
E-mail/PIM (Personal Information Management)
Synchronization of applications and mail, server to server and client to server communication, and mobile communication; calendar, task management, personal journal, document libraries
Broadcast/Reference
Repository for distribution of information and easy lookup and search of information
Tracking/Workflow
Provides trail of and prompts for actions in a business process
Discussion
Allows for layered conversation between workgroup members on specific subjects
Student Guide Page No.5
9
,QVWUXFWRU Lesson 1 ■ Identifying User Requirements
:KDW$UH:RUOGZLGH·V$SSOLFDWLRQV" Review class databases Briefly review the databases that will be deployed in this class, covering: ■ ■
Database names Purpose
Ask the following questions to introduce students to some deployment issues: ■
■
■
■
■
10
Which databases might contain sensitive information? Answer: Customer Service, Customer Information, Product Design, Sales Order Which databases may be accessible by all users? Answer: Policies and Procedures, Ideas Which databases may be accessible by specific user groups requiring different access? Answer: All databases, for example: ■ Sales Order: Access to create orders, access to view orders ■ Product Design: Access to create or change design, access to view design for manufacturing purposes Which databases might be deployed on the Web? Answer: Product Catalog, Price List, Sales Order Why? Answer: To provide access to customers, resellers, and mobile sales representatives.
Deploying Domino Applications
,QVWUXFWRU Lesson 1 ■ Identifying User Requirements
:KDW$UH:RUOGZLGH·V$SSOLFDWLRQV" Databases ready for deployment Worldwide will deploy the following applications: Application/Database
Description
Application Type
Policies and Procedures (POLICIES.NSF)
Outlines company operating procedures.
Reference
Product Catalog (PRODCAT.NSF)
Lists and describes company products.
Reference
Sales Order (ORDERS.NSF)
Allows creation of sales orders by Sales. Allows viewing of sales orders by customers, resellers, and distribution.
Workflow
(Uses product catalog, customer information, and price list databases.) Customer Service (CUSTSVC.NSF)
Tracks customer support calls.
Customer Information (CUSTINFO.NSF)
Stores information about Worldwide’s customers.
Reference
Product Ideas (IDEAS.NSF)
Repository for employees to submit ideas for new products.
Discussion
Product Design (PRODDSGN.NSF)
Tracks and documents the product design process.
Workflow
Price List (PRICELST.NSF)
Stores product prices.
Reference
Student Guide Page No.6
Workflow
(Uses Customer Information database.)
11
,QVWUXFWRU Lesson 1 ■ Identifying User Requirements
,GHQWLI\&ODVVURRP6HWXS([HUFLVH Facilitate exercise This exercise takes approximately 10 minutes to complete. The exercise may be done in one of the following ways: ■
■
■
Have each server team fill in the diagram on their own. If using this method, display the slide indicated at the bottom of the page to review. Draw the diagram on the board, and fill in by asking each server team to identify user/server name (and server type) of the machine at which they are seated, along with an Organizational Unit, Domino Named Network (DNN), or Domain. Walk students through finding information in Domino Administrator, such as Server Pane, and the Configuration and People & Groups tabs.
Review DNNs Remind students that within DNNs, mail is routed automatically. Tell students that typically, companies create a DNN for each organizational unit or region for better control over information routed across regions. However, for ease of routing between applications in the classroom, there is only one DNN.
Display Classroom Setup Components slide From the SA260DIAG.FMP presentation file, display Slide 1: Classroom Setup Components to review the classroom components found in the exercise.
Reinforce organizational units Ask students: How would you determine the regions in which users belonged? Answer: Person document
■
How would you determine one region from another? Answer: Organizational unit, for example, BR
■
12
Deploying Domino Applications
,QVWUXFWRU Lesson 1 ■ Identifying User Requirements
,GHQWLI\&ODVVURRP6HWXS([HUFLVH Locate scenario components in classroom Using Domino Administrator, locate and document the following components on the classroom setup diagram: ■ ■ ■ ■
Servers (name and types) Clients (names) Organizational units Domains and DNNs
Student Guide Page No.7
13
,QVWUXFWRU Lesson 1 ■ Identifying User Requirements
8VHU*URXSV Provide site examples Provide examples of when and why an administrator might use specific group types. For example, tell students that if they need to add or change user access to a server, instead of editing the Server document and restarting the server, they can simply change the group.
(Optional) Display User Groups slide Display Slide 2: User Groups to reinforce how groups are used to access servers and databases.
14
Deploying Domino Applications
,QVWUXFWRU Lesson 1 ■ Identifying User Requirements
8VHU*URXSV Use groups to provide access to servers and databases The following illustration shows that the PTSales group in the Domino Directory includes Marcus Frank, which provides him with access to: ■ ■
The appropriate server, PTApps01/SVR/World, using the Server document The Sales Order database, using the database ACL
Note: If a person is listed explicitly in the ACL and as a member of a group that is listed in the ACL, the user is granted the access for the explicit name.
Granted access to server
PTApps01/SVR/World
Marcus Frank
Granted access to database
Domino Directory (NAMES.NSF)
Sales Orders (SALES.NSF)
PTApps01 Server document Access server field: PTSales
Access control list PTSales: Reader access
PTSales Group document Members: John Grey Marcus Frank Maria Sorenz
Student Guide Page No.8
15
,QVWUXFWRU Lesson 1 ■ Identifying User Requirements
&UHDWLQJ8VHU*URXSV Create and nest groups Demonstrate how to create the GlobalDesigners group to allow for updating database design. ■
■
Add Doctor Notes, Application PTDeveloper, and Application BRDeveloper to the GlobalDesigners group. Nest the GlobalDesigners group within the GlobalWorld group.
Define groups for specific purposes Tell students that the BRAdmins and PTAdmins groups were created during classroom setup to identify who can administer PT and BR servers. The GlobalDesigners group created in the previous demo could be used to provide more restricted access than administrators to application developers primarily, but may contain a system administrator.
Show group management tool Demonstrate the group management tool. Note that you must move one user at a time; multi-user selection is not available.
16
Deploying Domino Applications
,QVWUXFWRU Lesson 1 ■ Identifying User Requirements
&UHDWLQJ8VHU*URXSV Create a group Follow these steps to create a group. Step
Action
1
Select the People & Groups tab➝Domino Directories section➝Address Book section➝Groups view.
2
Click Add Group.
3
Enter group name, for example: GlobalDesigners.
4
Select the Multi-purpose group type.
5
Enter group description, for example: Application Developers.
6
Add people (or groups) to the Members field, for example: Application PTDeveloper and BRAdmins.
7
Click Save and Close.
Nest a group Nesting groups makes group management easier by including smaller groups inside another group. For example, a new employee in Portugal would be added to the PTAll group. Since the PTAll group is nested inside the GlobalWorld group, the new Portugal employee also becomes a member of the GlobalWorld group. Follow these steps to nest groups. Step
Action
1
Select the People & Groups tab➝Domino Directories section➝Address Book section➝Groups view.
2
Choose Tools➝ Groups➝ Manage.
3
In the left pane, select the groups to be included, for example: GlobalDesigners.
4
In the right pane, select the group to include the other groups in, for example: GlobalWorld.
5
Click Add.
6
When finished managing groups, click Done.
Student Guide Page No.9
17
,QVWUXFWRU Lesson 1 ■ Identifying User Requirements
'HWHUPLQLQJ8VHU*URXSV Review criteria for determining user groups Using a specific database as an example, reinforce criteria for determining user groups with students by asking the questions on the Student Guide page in reference to the chosen database. Point out that in addition to specific departments requiring access to databases for their jobs, some groups must also need to update the documents in the database. For example, although everyone in the company needs to access the Policies and Procedures database, the Human Resources department is responsible for keeping the information updated. A Human Resources group is necessary to allow a different access to edit information in the database.
Refer to Appendix B If not done previously, have students tear out the Quick Reference Pages from the back of Appendix B: Worldwide Corporation Infrastructure Plan. Point out that Worldwide used this information along with the Organizational Chart to determine their user groups.
Review Worldwide groups Briefly review the groups Worldwide has created. GlobalAdmins and GlobalDesigners were created to allow updating database design and access. Point out that user groups are dependent on many factors and that companies create groups based on their needs. For example, since only the regions (Brazil and UK) contain sales functions, Worldwide could have defined a sales group for each region (BRSales and UKSales) to segregate information specific to each region. However, in this scenario, Worldwide wants all sales representatives to have access to the same information.
18
Deploying Domino Applications
,QVWUXFWRU Lesson 1 ■ Identifying User Requirements
'HWHUPLQLQJ8VHU*URXSV Criteria for determining groups Consider the following when determining necessary groups: ■ ■
■ ■
What department(s) needs to use the information in this database/application? What department(s) would most likely have to update, add, or change the information in this database/application? Who should be able to change the design of this database/application? Who should be able to change the access to this database/application?
Worldwide’s user groups The following table lists the departments, locations, and group names for each Worldwide application. Application/Database
Department
Location
Group Name
Policies and Procedures
All Worldwide employees Human resources
All Regions
GlobalWorld GlobalHR
Product Catalog
All Worldwide employees Marketing
All Regions
GlobalWorld GlobalMarketing
Sales Order
Sales Customers Resellers Distribution
All Regions
GlobalSales Customers Resellers GlobalDistribution
Customer Service
Support
All Regions
GlobalSupport
Customer Information
Sales Support Distribution
All Regions
GlobalSales GlobalSupport GlobalDistribution
Product Ideas
All Worldwide employees
All Regions
GlobalWorld
Product Design
Research & Development Product management Manufacturing
Portugal
PTR&D PTProdMngmnt PTManufacturing
Price List
Sales Marketing Distribution
All Regions
GlobalSales GlobalMarketing GlobalDistribution
GlobalAdmins and GlobalDesigners were created previously.
S t u d e n t G u i d e P a g e N o . 10
19
,QVWUXFWRU Lesson 1 ■ Identifying User Requirements
$SSOLFDWLRQ$FFHVVIRU8VHU*URXSV Review access controls This should be a review from the Implementing a Domino Infrastructure course. Important points on this student page are: ■
■ ■
■
There are several methods of control, which provide flexibility but also require planning. Use methods together to provide tighter control. Application developers typically set privileges to refine database access and roles to control design elements. Although administrators typically do not set roles and privileges, they should understand them.
Note the significance of user types Explain to students the importance of specifying the correct user type. This will prevent someone from attempting to gain access using a user ID containing the server’s common name as if the user were a server.
Emphasize the meaning of privileges Use an example, such as a person may have Author access but may not be able to create documents if the Create Documents privilege is not checked. Suggest a circumstance when allowing Author access without Create Documents access may be useful, such as if you want a user to be able to edit a document, but not create new documents. For example, you may choose to give employees Author access to the Domino Directory to allow users to edit their Person documents. In this case, the user’s name must be listed in an Authors field in the document in order to be able to edit the document.
20
Deploying Domino Applications
,QVWUXFWRU Lesson 1 ■ Identifying User Requirements
$SSOLFDWLRQ$FFHVVIRU8VHU*URXSV Access control mechanisms The following mechanisms determine who can access a database and are set in the database ACL. Mechanism
Description
Access Control List
Every Domino database has an Access Control List.
User Types
User types indicate whether an ACL entry is that of a person, server, or group.
An Access Control List (ACL) determines who can access the database, and the access level.
This feature provides additional security. ACL Privileges
ACL privileges refine access by allowing or denying access to perform such tasks as create documents, delete documents, or create personal agents. These privileges vary by access level. For example, selecting Create documents allows a user with Author or above access level to create documents.
Database Roles
Although the Access Control List is the first level of security, additional security is available using roles to control create, edit, or read access to documents. A role defines a subset of users, servers, or both to provide controlled access to database design elements or to some database functions. A role is similar to a group, but is created in the database ACL, while a group is defined in the Domino Directory. A role only applies to the database in which it was created. A role must be created before it is assigned to a name or group in the ACL (Manager access is required). Roles in the ACL appear in brackets -- for example, [Sales]. Roles are typically set by application developers.
S t u d e n t G u i d e P a g e N o . 11
21
,QVWUXFWRU Lesson 1 ■ Identifying User Requirements
$SSOLFDWLRQ$FFHVVIRU8VHU*URXSV (continued)
Present best practices for user access Present the suggested use for each access level when assigning users and user groups access in a database ACL.
22
Deploying Domino Applications
,QVWUXFWRU Lesson 1 ■ Identifying User Requirements
$SSOLFDWLRQ$FFHVVIRU8VHU*URXSV (continued)
Best practices for user access The following table summarizes the suggested use for ACL levels. Level
Suggested Use for Users
No access
Assign to -Default- and a deny access group for a restricted database.
Depositor
Assign as the default access for mail-in or survey databases.
Reader
Assign as the default access for informational databases, such as Policies and Procedures.
Author
Assign as the default access for interactive discussion databases. Note: The application must use Author fields in documents.
Editor
Assign sparingly to those who must edit documents created by others.
Designer
Assign sparingly to application developers responsible for updating the database design.
Manager
Assign sparingly to an administrators group responsible for updating the ACL. Note: Depending on the size of the company, Manager access may be given to database owners in addition to or instead of an administrator. Recommendation: Give yourself Manager access.
S t u d e n t G u i d e P a g e N o . 12
23
,QVWUXFWRU Lesson 1 ■ Identifying User Requirements
'HWHUPLQH1RWHV8VHU*URXS$FFHVV ([HUFLVH Determine appropriate access level for administrators and designers Allow students approximately 15 minutes to complete this exercise. Remind students that the User Needs section should have been torn out of Appendix B: Worldwide Corporation Infrastructure Plan as reference for this exercise. If they have not done so already, tell them to remove the Quick Reference Pages from Appendix B. Tell students that the Privilege/Role column was filled in by the application developer. Therefore, they do not need to add privileges and roles.
24
Deploying Domino Applications
,QVWUXFWRU Lesson 1 ■ Identifying User Requirements
'HWHUPLQH1RWHV8VHU*URXS$FFHVV ([HUFLVH Identify user group access to applications Based on the purpose of each application and the groups that need to access it, determine the level of access required for each group. Refer to the User Needs section in Appendix B: Worldwide Corporation Infrastructure Plan. Privileges and roles have been filled in by the application developer. Application/Database
Group
Policies and Procedures
GlobalWorld GlobalHR
Product Catalog
Sales Order
ACL Level
User Type
Privilege/Role
Delete documents
GlobalWorld GlobalMarketing
Delete documents [Marketing]
GlobalSales
Delete documents
GlobalDistribution Customers Resellers Customer Service
GlobalSupport
Delete documents
Customer Information
GlobalSales
Delete documents
GlobalSupport GlobalDistribution Product Ideas
GlobalWorld
Create documents Delete documents
PTProdMngmnt
Delete documents [ProductManager] (continued on next page) ...
S t u d e n t G u i d e P a g e N o . 13
25
,QVWUXFWRU Lesson 1 ■ Identifying User Requirements
'HWHUPLQH1RWHV8VHU*URXS$FFHVV([HUFLVH (continued)
Review Worldwide’s access Review the solution to this exercise in Appendix A: Exercise Solutions. Tell students that even though their answers may be different, they are not wrong. Explain why Worldwide identified certain access levels or ask students to offer suggestions. Tell students that the access levels defined by Worldwide will be used in the next module to set access for databases.
GlobalDesigners and GlobalAdmins access Ask students what access the following groups should have: Group Name
ACL Level
User Type
Privilege/ Role
GlobalDesigners
Designer
Person Group
All
GlobalAdmins
Manager
Person Group
All
Ask if there are any questions on the privileges and roles defined by the application developer.
26
Deploying Domino Applications
,QVWUXFWRU Lesson 1 ■ Identifying User Requirements
'HWHUPLQH1RWHV8VHU*URXS$FFHVV([HUFLVH (continued)
Identify user group access to applications...
Application/Database Product Design
Group
ACL Level
User Type
Privilege/Role
PTR&D
Delete documents [R&DManager]
PTProdMngmnt
Create documents [ProductManager]
PTEngineers
Create documents [Engineer]
PTManufacturing Price List
GlobalSales GlobalMarketing
Delete documents [Marketing]
GlobalDistribution
S t u d e n t G u i d e P a g e N o . 14
27
,QVWUXFWRU Lesson 1 ■ Identifying User Requirements
'HWHUPLQH:HE8VHU$FFHVVWR 'DWDEDVHV([HUFLVH Introduce the exercise Allow students approximately 15 minutes to complete this exercise.
Consider alternate methodology If students are having difficulty with this exercise, use the following discussion to help students determine the appropriate access.
Discuss Web user access to databases Refer to the User Needs and Application Types sections of Appendix B: Worldwide Corporation Infrastructure Plan. Then, ask the following questions: ■
■
■
■
■
28
Which Worldwide databases should allow anonymous access? Answer: The Product Catalog database, because Worldwide wants anyone to be able to view its products. What level of access should anonymous users be given in Worldwide’s other applications? Answer: No Access. Do any databases require name and password authentication from a browser? Answer: Yes. The Sales Order application grants customers and resellers Reader access, so these groups will need to provide a valid name and password to gain access to their sales order. Point out that based on the company scenario, customers and resellers can only view their sales orders from the Web. In the future, Worldwide plans to allow customers and resellers to create sales orders from the Web. Suppose there is no anonymous entry and the default access to the Product Catalog is Reader. Joe, a user, has Manager access to the Product Catalog. If Joe accesses the Product Catalog from a Web browser anonymously, what access does he have? Answer: Reader, because Joe is accessing the Product Catalog as Anonymous, which gets the Default access. What user type is Anonymous? Answer: Unspecified, because it is neither a person nor a group.
Deploying Domino Applications
,QVWUXFWRU Lesson 1 ■ Identifying User Requirements
'HWHUPLQH:HE8VHU$FFHVVWR 'DWDEDVHV([HUFLVH Considerations for Web user access to databases Consider the following questions to help determine the appropriate access for Web users to Web-enabled applications. Item
Ask This Application Question
❏
Which applications allow anonymous access?
❏
What access level do anonymous users need?
❏
Which applications require name and password authentication?
❏
What access level do authenticated users need?
Web database access Complete the following table to determine the appropriate user access to your assigned database. Database Name
Anonymous Access (Y/N)
Anonymous Access Level
Group Name for Name & Password Access
Name & Password Access Level
Secure Transactions (Y/N)
Policies and Procedures Product Catalog Sales Order Customer Service Customer Information Product Ideas Product Design Price List
S t u d e n t G u i d e P a g e N o . 15
29
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
,GHQWLI\LQJ$SSOLFDWLRQ 6\VWHP5HTXLUHPHQWV
Provide lesson overview This lesson focuses on identifying application topology, including where applications will reside (on what servers) and where and how they will be replicated.
30
Deploying Domino Applications
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
,GHQWLI\LQJ$SSOLFDWLRQ 6\VWHP5HTXLUHPHQWV
Determining application infrastructure In addition to identifying user groups and user access needs, deployment planning involves determining where applications should be placed and where and how they will replicate to other servers in the infrastructure. Server access controls must be identified to allow the information to replicate correctly. Evaluate server capacity to determine if the infrastructure is sufficient for the deployment and if any changes should be made. For example, servers may need to be clustered to allow constant access to critical applications. Upgrades to server or network hardware or software may be required to accommodate heavily used databases.
Objectives After completing this lesson, you should be able to: ■ ■ ■ ■
Identify server capacity. Identify high-availability applications. Identify application topology, including application placement and replication. Identify type of access required by servers.
S t u d e n t G u i d e P a g e N o . 16
31
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
,GHQWLI\LQJ,QIUDVWUXFWXUH&DSDFLW\ Briefly present capacity planning considerations Capacity planning is beyond the scope of this course. This course does not include practice on capacity planning. For the purposes of this course, students should assume that server and network capacity have been checked and are sufficient to support the application architecture.
32
Deploying Domino Applications
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
,GHQWLI\LQJ,QIUDVWUXFWXUH&DSDFLW\ Best practices for capacity planning Following are recommendations for optimum performance and reliability of the infrastructure for application deployment: ■
■
■
■
■
■ ■
Use transaction logging for better I/O utilization and transaction throughput and reduction in CPU cycles. Put transaction log on a dedicated disk; separate channel or separate controller. ■ Do not use RAID5. (RAID1 can be used.) Optimize transaction logging by setting the Runtime/Restart performance field in the Server document to: ■ Startup for reliability ■ Runtime for performance Use clusters (Domino and Internet) to increase throughput, balance workload, and enhance reliability. Use a general guideline of 500-1000 users per system; if more than 1000 users, consider using a cluster. Dedicate servers in specific geographies for localized information. Plan projected growth for three to five years.
Considerations for capacity planning When deploying applications, consider the following: ■ ■ ■ ■ ■ ■
Server and network capacity Whether to cluster or partition servers How to cluster servers Database size Frequency of use and resource requirements of databases View rebuild time (the more databases per server, the longer the build time) ■ Check view refresh option times ■ Number and size of views
S t u d e n t G u i d e P a g e N o . 17
33
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
,GHQWLI\LQJ,QIUDVWUXFWXUH&DSDFLW\ (continued)
Provide location of Clusters Learner-Directed Offering Mention the Implementing and Maintaining Domino Clusters Learner-Directed Offering available from http://www.Notes.net to students.
Introduce Domino Administrator online Help Allow students approximately five minutes to complete this activity. The purpose of this activity is for students to find information on cluster planning and to become familiar with using the online Help.
Review cluster planning example Briefly review the example in the Determining the number of placement of replicas in a cluster document in the Domino 5 Administration Help database to emphasize cluster planning considerations. The following table shows this example of how to determine cluster needs. Database Title
34
Size
Max. Concurrent Users
Transaction Rate
Growth Rate
Need for Availability
Suggested Number of Replicas
Product Discussion
2 GB
500
High
High
High
2
Sales Tracking
1 GB
200
Medium
High
Critical
2 or more
Classified Ads
800 MB
45
Medium
Medium
Low
0
Company Research
1.5 GB
20
Low
Medium
Medium
0 or 1
Deploying Domino Applications
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
,GHQWLI\LQJ,QIUDVWUXFWXUH&DSDFLW\ (continued)
Cluster considerations The following list identifies considerations around the number and placement of replicas in a cluster: ■
■
■
■ ■
■
Creating too many replicas can add unnecessarily to the overhead of maintaining a system and affect performance. Balance between users' requirements for data availability and the physical ability servers. For constant availability of a specific database, consider placing replicas on every server in the cluster if there is adequate disk space and resources. Distribute the busiest databases to different servers. If a server has significantly more or less processing power than the other servers, consider altering the number of databases on the server and the number of databases that can fail over to the server. Because busy databases in a cluster can create a lot of replication events, install replicas on the fastest disk hardware available on the server. Place these replicas where other processes are not in contention — for example, on a partition other than the one that contains the operating system swap file.
Use online Help for cluster planning Follow these steps to find help on cluster planning. Step
Action
1
From Domino Administrator, choose Help➝Help Topics.
2
Click Search.
3
Enter Planning a Cluster, then click Search. Briefly read through the information on cluster planning.
4
Enter Determining the number and placement of replicas in a cluster, then click Search. Briefly read through the information on placing replicas on cluster servers.
S t u d e n t G u i d e P a g e N o . 18
35
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
,PSURYLQJ'DWDEDVH3HUIRUPDQFH Briefly point out essential database properties The figures on the student page provide a complete list of database properties of which the system administrator should be aware. Do not attempt to cover the entire list in detail. Point out the following database properties that affect database performance, then introduce the exercise on the next student page. ■ ■ ■ ■ ■ ■ ■ ■ ■
Display images after loading Don’t maintain unread marks Document table bitmap optimization Don’t overwrite free space Disable transaction logging Don’t allow headline monitoring Limit entries in $UpdatedBy fields Limit entries in $Revisions fields $Undelete Expire Time (in hours)
(Optional) Show how to set database properties Open the database properties box while discussing properties. Students will set properties in Module B: Preparing Applications for Deployment.
36
Deploying Domino Applications
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
,PSURYLQJ'DWDEDVH3HUIRUPDQFH Database properties that affect performance Some database properties are dependent upon the database design and others affect database (and server) performance. The following figures show who should be responsible for setting database properties.
✱✱
✱✱ ✱✱
✱✱
✱ ✱ ✱✱ ✱
✱
✱ ✱✱ ✱✱ ✱✱ ✱✱
✱
✱✱
✱ ✱✱ ✱✱ ✱ ✱✱ ✱✱ ✱✱
S t u d e n t G u i d e P a g e N o . 19
✱✱ ✱ System Administrator determines property ✱✱ ✱✱ ✱✱
setting
✱✱ System Administrator and Application Developer jointly determine property setting
37
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
,PSURYH'DWDEDVH3HUIRUPDQFH ([HUFLVH Provide guidance as necessary Allow students approximately 10 minutes to complete this exercise. The following are the selections that Worldwide will implement. Review these with the students. Property
38
Database
Display images after loading
All databases
Don’t maintain unread marks
Policies and Procedures Product Catalog Price List Customer Information
Document table bitmap optimization
All databases
Don’t overwrite free space
All databases
Disable transaction logging
Policies and Procedures
Don’t allow headline monitoring
Policies and Procedures
Limit entries in $UpdatedBy fields
Product Catalog Product Design Product Ideas
Limit entries in $Revisions fields
Product Catalog Price List Customer Information Customer Service Sales Order
$Undelete Expire Time (in hours)
None
Deploying Domino Applications
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
,PSURYH'DWDEDVH3HUIRUPDQFH ([HUFLVH Determine database properties Administrators should set database properties correctly in order to provide high database performance. The following table lists the properties and suggested settings. For each database property, identify the Worldwide database or databases for which it should be set. Property
Suggested Setting
Display images after loading
Enable. Users can override this setting in the Location document.
Don’t maintain unread marks
Enable for reference databases such as Help, the Domino Directory, and other Domino system databases.
Document table bitmap optimization
Enable to improve performance under the following situations: ■
When databases use the Form= view selection formula.
■
When large databases contain small views.
Don’t overwrite free space
Enable for databases that are otherwise secure, or do not require security.
Disable transaction logging
Enable for databases with static information that does not change frequently.
Don’t allow headline monitoring
Enable for databases that do not change frequently.
Limit entries in $UpdatedBy fields
Limit entries for databases whose documents are edited frequently.
Limit entries in $Revisions fields
Limit entries for databases that are:
$Undelete Expire Time (in hours) S t u d e n t G u i d e P a g e N o . 20
■
Very large
■
Replicate frequently or do not replicate at all
■
Static — do not change frequently
Database
Enable for databases that allow soft deletions. 39
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
+LJK$YDLODELOLW\$SSOLFDWLRQV Present considerations for high-availability applications Present the material on the student page.
40
Deploying Domino Applications
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
+LJK$YDLODELOLW\$SSOLFDWLRQV High-availability application considerations A high-availability application is one that contains information critical to the success of the company. The information must be constantly available and up-todate. To determine whether an application requires high availability, ask the following questions: ■
■ ■
Does the success of the company depend on the application being constantly available? What is the impact if the information in this application is out of date? What is the impact if the information in this application is unavailable?
Application deployment considerations Application deployment considerations for high-availability applications include: Component
Consideration
Replication schedules
Ensure that schedules allow frequent update of information.
Clusters
Consider using a cluster for constant access to information, failover, load balancing, and immediate replication.
S t u d e n t G u i d e P a g e N o . 21
41
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
'HWHUPLQH+LJK$YDLODELOLW\ $SSOLFDWLRQV([HUFLVH Point out appropriate Appendix B sections Allow students approximately five minutes to complete this exercise. Students should use the User Needs and Application Types sections in Appendix B: Worldwide Corporation Infrastructure Plan.
Point out issues with multiple database applications Remind students that some applications include multiple databases. Therefore, if one of the databases is critical, then all databases within the application are also critical.
Review Worldwide’s critical applications Refer students to the exercise solution in Appendix A: Exercise Solutions to review Worldwide’s critical applications.
42
Deploying Domino Applications
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
'HWHUPLQH+LJK$YDLODELOLW\ $SSOLFDWLRQV([HUFLVH Identify Worldwide’s critical applications Using the User Needs and Application Types sections from Appendix B: Worldwide Corporation Infrastructure Plan, answer the following questions for each application to determine whether it is critical to Worldwide Corporation. Application/Database
Does the success of the company depend on the application being constantly available? (Y/N)
If Yes, Why?
Policies and Procedures
Product Catalog
Sales Order
Customer Service
Customer Information
Product Ideas
Product Design
Price List
S t u d e n t G u i d e P a g e N o . 22
43
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
5HSOLFDWLRQ&RQFHSWV Show students the Replication animation Run the Replication Animation, REP50.EXE, included with the instructor materials, to provide students with an overview of replication. Use this tool as a basis for discussing server-to-server replication as it applies to this course.
Review the concepts as they pertain to application deployment The concept of replication should be a review from the Implementing a Domino Infrastructure course. Important points on the accompanying student page are: ■ ■
■
■
Replication keeps the information in databases synchronized. Databases and servers must have appropriate access in order for databases to replicate properly. Replication schedules must be set to update information appropriately for user needs. There is no “master copy” of a database, but the replica on the hub server is used to accumulate and distribute the changes to all other replicas.
(Optional) Display Replication slide Display Slide 6: Replication to explain the illustration on the student page.
44
Deploying Domino Applications
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
5HSOLFDWLRQ&RQFHSWV What is replication? Databases reside on servers and clients throughout an organization. Replication is the process that keeps databases synchronized on all systems over time. Replication enables exchanging modifications between special copies of databases. The special copies are called replicas. A replica ID is a unique number that identifies a database and all its replicas. Because replicas share a replica ID with one another, they can exchange information through replication. Through replication, Notes makes all of the replicas essentially identical over time, as shown in the following graphic. PTHUB PTAPPS01 PTAPPS02 Replicas of database on all servers contain different data
PTAPPS01 database replicates
Stage 1
Stage 2
w ith H ub
Stage 3 PTAPPS02 database
replicates with Hub
PTAPPS01 database replicates with Hub
Stage 4
Note: Databases and servers must have the appropriate access in order for databases to replicate properly.
S t u d e n t G u i d e P a g e N o . 23
45
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
'HWHUPLQLQJ5HSOLFDWLRQ6WUDWHJ\ Present checklist Provide students with an overview of the considerations for determining a replication strategy.
46
Deploying Domino Applications
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
'HWHUPLQLQJ5HSOLFDWLRQ6WUDWHJ\ Identify when and how to replicate databases checklist When planning a replication strategy, consider these checklist items: Item
❏
Task Establish a replication topology. For example: ■
Which servers will replicate?
■
In what order will servers replicate?
■
How much time is expected to be required for replication to complete? ■ ■ ■
❏
Number of hubs Number of spokes per hub Average replication time per database
Determine what will happen during the replication session. For example: ■
Which server will initiate the call?
■
Which server will receive the call?
■
On which port will this session happen?
■
Which database(s) will be replicated?
■
What priority of databases will be replicated?
■
What replication types would be best?
■
When and how often will replication occur?
■
Is there a time limit for replication?
■
How will mobile users access databases?
For information on evaluating replication topologies and enabling multiple replicators, refer to the Domino 5 Administration Help database.
S t u d e n t G u i d e P a g e N o . 24
47
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
:RUOGZLGH·V5HSOLFDWLRQ6WUDWHJ\ Briefly review hub-and-spoke topology Using Worldwide’s (classroom) topology, describe a hub-and-spoke topology and how databases are replicated within a hub-and-spoke topology.
Present replication strategy Present Worldwide’s replication strategy. Point out that Worldwide determined their strategy based on the considerations and best practices discussed on the previous pages. Tell students that the replication intervals and directories were determined based on critical vs. non-critical applications.
Display Worldwide’s Replication Strategy slide Display Slide 7: Worldwide’s Replication Strategy to review the replication strategy. Students will implement this strategy later in this course.
48
Deploying Domino Applications
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
:RUOGZLGH·V5HSOLFDWLRQ6WUDWHJ\ What is Worldwide’s replication topology? Worldwide Corporation implemented a hub-and-spoke replication topology. In this topology, the hub initiates replication with the “spoke” servers. The corporate hub server (WorldHub) will be the main hub and take overall control of replication. There will be Connection documents from the main hub to all regional hub servers. Worldwide has chosen Pull-Push as its replication type. The following diagram shows Worldwide Corporation’s replication topology.
Web WorldHub/World
PTApps01/SVR/World
Web PTApps02/SVR/World
Web PTHub/SVR/World
BRApps01/SVR/World
Web BRApps02/SVR/World
Web BRHub/SVR/World
Following are the replication intervals and directory locations for replicas: ■ ■ ■ ■
■
■
Databases from WorldHub to PT/BRHubs are every two hours. Databases from PT/BRHubs to PT/BRApps02 are every two hours. Databases from PT/BRHubs to PT/BRApps01 are every six hours. NAMES.NSF and ADMIN4.NSF are every 60 minutes from WorldHub to PT/ BRHubs. Domino\data directory contains POLICIES.NSF, IDEAS.NSF, and PRODDSGN.NSF Domino\data\critical directory contains PRODCAT.NSF, ORDERS.NSF, CUSTSVC.NSF, CUSTINFO.NSF, and PRICELST.NSF
S t u d e n t G u i d e P a g e N o . 25
49
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
&UHDWLQJ6HUYHU*URXSV Work in teams Allow approximately 10 minutes to complete this activity. Since there are only three groups to create, group students into three teams, and assign each team a group to create.
50
Deploying Domino Applications
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
&UHDWLQJ6HUYHU*URXSV Create Servers only groups for replication Work in assigned teams, and follow these steps to create your assigned group. Step
Action
1
From Domino Administrator, select your assigned server to administer.
2
Select the People & Groups tab➝Domino Directories section➝ World’s Address Book section➝Groups view.
3
Click Add Group.
4
Enter one of the following group names: ■ ■ ■
5
HubServers PTAppsServers BRAppsServers
Select the Servers only group type. Note: This is the only group type that will work to replicate with a group of servers using a Connection document.
6
Enter one of the following descriptions: ■ ■ ■
7
All regional hub servers Application servers in Portugal Application servers in Brazil
Enter (or select) the appropriate server names for members of the group, as follows: For HubServers: ■ ■ ■
WorldHub/World PTHub/SVR/World BRHub/SVR/World
For PTAppsServers: ■ ■
PTApps01/SVR/World PTApps02/SVR/World
For BRAppsServers: ■ ■
8
S t u d e n t G u i d e P a g e N o . 26
BRApps01/SVR/World BRApps02/SVR/World
Click Save and Close.
51
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
'HWHUPLQLQJ:KHUH$SSOLFDWLRQV5HVLGH Differentiate database copy and database replica When deploying the applications in Module C: Rolling Out Applications, students will create replicas of databases on their servers. The following exercise should identify where all replicas will reside.
52
Deploying Domino Applications
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
'HWHUPLQLQJ:KHUH$SSOLFDWLRQV5HVLGH Guidelines for application placement To determine where to put replicas of each database, follow these guidelines: ■ ■ ■
■
Balance the load between database use and size. Put databases on hub servers to ensure complete replication cycles. Replicas should reside on servers that belong to the same LAN as the majority of users for the database. Ensure all database dependencies are met.
Application placement checklist When planning where to put databases, consider these checklist items: Item
❏
Ask This Application Placement Question Determine whether to cluster servers. For example: ■
❏
Are there any high-availability applications?
Determine how to cluster servers. For example: ■
How many servers will be clustered?
■
Which servers will be clustered?
❏
Determine which databases to put on clustered servers.
❏
Determine which databases to put on regional servers. For example: ■
❏
Determine whether to put databases on the Web server. For example: ■
❏
❏
■
Is the topology hub-and-spoke?
■
Are there databases that will be replicated to multiple servers?
Determine where to put replicas of databases. For example: What servers are in the same regions as the database’s user groups?
Determine whether there are any dependencies between databases. For example: ■
S t u d e n t G u i d e P a g e N o . 27
Do any databases contain information to be accessed by external users, such as customers or resellers?
Determine which databases to put on hub servers. For example:
■
❏
Do any databases contain localized information, such as regional products or price lists?
Does a database depend on other databases to function properly?
53
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
6HOHFWLQJ:HE6HUYHUVIRU$SSOLFDWLRQV Present the best practice Students set up Web servers in the Implementing a Domino Infrastructure course. Present the best practice.
Show how to set location for Web files Open a Server document to show how to set locations for Web files. Mention that files can be anywhere on the system, but the path must be in the Server document.
54
Deploying Domino Applications
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
6HOHFWLQJ:HE6HUYHUVIRU$SSOLFDWLRQV The Domino Web server Domino provides an integrated Domino Web application server. As a Web application server, the Domino Web server allows browser clients to participate in applications built in Domino databases and HTML pages. When a browser client requests a Domino database element, the Domino Web server converts the database element to an HTML file, then sends it to the browser to display.
Best practice for placing Web files The Server document includes information about where the Domino Web server should look for certain Web files. If the applications being deployed include HTML, CGI, or icon files, verify the designated locations on the Internet Protocols tab➝HTTP tab➝Mapping section as shown in the following figure. Then, place the Web files in the appropriate location:
S t u d e n t G u i d e P a g e N o . 28
55
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
,GHQWLI\6HUYHUVIRU'DWDEDVHV([HUFLVH Review database locations Allow students approximately 10 minutes to complete this exercise. Tell students to assume that the server and network capacity has been checked and is sufficient to support the databases.
Remind students where clusters are If students are having trouble remembering, remind them that PTHub and PTApps02 servers are clustered, and BRHub and BRApps02 servers are clustered. Have the students draw circles around them.
Cluster replication Remind students that even though clusters replicate automatically, it is a good idea to schedule replication between clusters because if the destination server is unavailable, the change is stored in memory on the source server until the destination server becomes available. If the source server shuts down before replication completes, the change is lost unless a manual replication is performed. (This is covered in more detail in Module C: Rolling Out Applications.)
Display Identify Servers for Databases slide Display Slide 5: Identify Servers for Databases to review the locations for databases.
Point out where critical databases should go Tell students that critical databases should reside on the PTApps02 and BRApps02 server.
56
Deploying Domino Applications
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
,GHQWLI\6HUYHUVIRU'DWDEDVHV([HUFLVH Determine where databases reside Refer to the Application Types section in Appendix B: Worldwide Corporation Infrastructure Plan to determine where to put databases using the criteria previously defined in this module: Types of servers (application, hub, Web) Types of applications (critical, localized information, external access) User groups and locations Database use and size (use can be determined by how many user groups access the database)
■ ■ ■ ■
Circle the servers that will be clustered. Write the following database names on servers in the diagram: ■ ■ ■ ■
POLICIES.NSF PRODCAT.NSF ORDERS.NSF CUSTSVC.NSF
■ ■ ■ ■
CUSTINFO.NSF IDEAS.NSF PRODDSGN.NSF PRICELST.NSF
Clustered servers
Web WorldHub/World
PTApps01/SVR/World
BRApps01/SVR/World
Web
Web
PTApps02/SVR/World
BRApps02/SVR/World
Web
Web
PTHub/SVR/World
S t u d e n t G u i d e P a g e N o . 29
BRHub/SVR/World
57
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
,GHQWLI\LQJD6HUYHU·V$FFHVVWRD 'DWDEDVH Note default server groups Remind students that LocalDomainServers and OtherDomainServers are default server groups.
Provide examples of access controls Server access controls should be a review from the Implementing a Domino Infrastructure course. Highlight specific examples for using server access levels to control access to databases. Examples from the documentation: Privileges: To prevent certain changes from replicating without deselecting privileges for each user, you can deselect a particular privilege for a server entry in the ACL. For example, to prevent all document deletions made in a database on a particular server from replicating, deselect Delete documents in the ACL entry for the server. Then, when users who have Delete documents access in the ACL delete documents, the deletions do not replicate.
Present best practices Use the table on the student page to provide students with the best practices for determining the most appropriate server access.
58
Deploying Domino Applications
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
,GHQWLI\LQJD6HUYHU·V$FFHVVWRD 'DWDEDVH Server access Setting access controls in the database allows users (or user groups) specific access to databases. Server access must also be set in the database to allow servers to replicate information in the database correctly. In addition, access to the server can be set to allow or deny access to users and servers in the Server document.
Best practices for server access The following table summarizes the suggested use for server ACL levels. Mechanism
Suggested Use for Servers
Access Control List
In addition to determining user access to databases, the ACL determines server access to the database. Level
Suggested Use for Servers
No access
Assign to OtherDomainServers.
Depositor
Not applicable.
Reader
Assign to servers to allow the server to receive information from a replica, but not send changes back to the other server. Use only if the server needs to access the document, but not replicate the document.
Author
Not applicable, because servers do not author documents.
Editor
Assign to servers that store replicas of the database in order to distribute edits to documents.
Designer
Assign to servers that application developers use to update the database design.
Manager
Assign sparingly to one server to distribute ACL changes to other servers.
User types
Designate a server ACL entry as a Server or Server group in order to prevent someone from using a fraudulent ID to access a database.
ACL privileges
In general, for servers, enable all the privileges that the selected access level allows. This ensures that the server has access that is as high as users might have and can replicate all user changes.
S t u d e n t G u i d e P a g e N o . 30
59
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
,GHQWLI\LQJ$FFHVVWR6HUYHUV Discuss why students might use access controls Ask students why they might use: Anonymous access? Answer: To allow users, customers, and resellers access to the Product Catalog on the Web. ■
Registered users? Answer: To force a Web user to enter a valid name and password before being granted access to the database. ■
SSL? Answer: To make sure they use a secure connection to access the database on the server.
■
Open Server document Students should be familiar with the Server document. However, you may want to open a Server document to show the fields where access controls are set.
60
Deploying Domino Applications
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
,GHQWLI\LQJ$FFHVVWR6HUYHUV Server access controls in Server document Following are the mechanisms used to control user and server access to servers. These access controls are set in the Server document. Mechanism
Description
Server Access List
The server access list controls the access that Notes users and Domino servers have to a server.
Anonymous access
Anonymous access: ■
Lets Notes users and Domino servers access the server without having the server validate and authenticate them.
■
Provides the general public (including non-Notes users) with access to servers for which they are not cross-certified.
Non-Notes users and clients are users that access the Notes environment through a Web browser or other e-mail client. A Domino server supports these non-Notes protocols: IMAP, LDAP, NNTP, POP3, and Web. User types include: Registered users: Users listed in the Domino Directory or a trusted directory with: ■
A valid user name and password
■
A valid X.509 certificate
Non-registered users: Users who either do not have an X.509 certificate, Internet password, or are not listed in the Domino Directory or a trusted directory. SSL connections
If SSL is set on a server, the server can require an SSL connection on a protocol-by-protocol basis for all databases or on an individual database. For example, force clients and servers to use SSL to connect to a specific server port, such as port 443 for HTTPS requests, and deny access to clients and servers that use port 80 for HTTP requests. After you set up SSL on a Domino server, you must give the clients access to databases on the server. For anonymous users, add the name Anonymous to database ACLs and design element access lists. For client authentication, add the user’s name to database ACLs and design element access lists to control the client's access to databases. Domino uses the User name field in the Person document in the following ways: ■
■
S t u d e n t G u i d e P a g e N o . 31
Authenticates the user if the supplied user name matches any name in the User name field in the Person document. Matches only the first name listed in the User name field to look to determine database access.
61
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
'HWHUPLQH6HUYHU$FFHVVWR'DWDEDVH ([HUFLVH Remainder of course activities and exercises For the remainder of the course, students will work with one database unless otherwise instructed. Assign one of the following databases to each server team for this exercise and the remainder of the course: ■ ■ ■ ■
POLICIES.NSF PRODCAT.NSF ORDERS.NSF CUSTSVC.NSF
■ ■ ■ ■
CUSTINFO.NSF IDEAS.NSF PRODDSGN.NSF PRICELST.NSF
Introduce the exercise Allow students approximately 15 minutes to complete this exercise. Remind students to review the server access guidelines in the previous section and to use the online Help to find details on access levels.
Display Identify Servers for Databases slide Display Slide 5: Identify Servers for Databases so that students can see the servers on which database replicas reside.
62
Deploying Domino Applications
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
'HWHUPLQH6HUYHU$FFHVVWR'DWDEDVH ([HUFLVH Identify server access to databases For Worldwide’s databases, determine the appropriate access for each server group to your assigned databases. Application/Database
Policies and Procedures
Server Group
ACL Level
User Type
Privilege/ Role
LocalDomainServers HubServers
Product Catalog
LocalDomainServers HubServers
Sales Order
LocalDomainServers HubServers
Customer Service
LocalDomainServers HubServers
Customer Information
LocalDomainServers HubServers
Product Ideas
LocalDomainServers HubServers
Product Design
LocalDomainServers HubServers
Price List
LocalDomainServers HubServers
S t u d e n t G u i d e P a g e N o . 32
63
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
'HWHUPLQH8VHUDQG6HUYHU$FFHVVWR 6HUYHUV([HUFLVH Introduce the exercise Allow students approximately 15 minutes to complete this exercise.
64
Deploying Domino Applications
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
'HWHUPLQH8VHUDQG6HUYHU$FFHVVWR 6HUYHUV([HUFLVH Identify user and server access to servers For your assigned server, identify which user groups and servers need access to your server. Server
Server Access List
WorldHub/World (Web)
PTHub/SVR/World (Web)
PTApps01/SVR/World
PTApps02/SVR/World (Web)
BRHub/SVR/World (Web)
BRApps01/SVR/World
BRApps02/SVR/World (Web)
S t u d e n t G u i d e P a g e N o . 33
65
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
,GHQWLI\LQJ:HE6HUYHU$FFHVV Show the Server document Open a Server document, and show the Ports tab➝Internet Ports tab➝Web tab. Remind students that they enabled these features in the Implementing a Domino Infrastructure course.
66
Deploying Domino Applications
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
,GHQWLI\LQJ:HE6HUYHU$FFHVV Web server access considerations Consider the following checklist items to help determine the appropriate access for Web users to Web-enabled applications and Web servers. Ask This Application Question
Enable This Feature on the Servers Where These Applications Reside
Which applications require secure transactions?
Enable SSL on these servers.
Which applications allow anonymous access?
Enable Anonymous access on these servers.
Which applications require name and password authentication?
Enable Name and Password authentication on these servers.
The following figure shows the authentication options under the Ports tab➝Internet Ports tab➝Web tab in the Server document.
S t u d e n t G u i d e P a g e N o . 34
67
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
'HWHUPLQH:HE6HUYHU$FFHVV([HUFLVH Introduce the exercise Allow students approximately 15 minutes to complete this exercise.
Display Identify Servers for Databases slide Display Slide 5: Identify Servers for Databases so that students can see the servers on which database replicas reside.
Consider alternate methodology If students are having difficulty with this exercise, use the following discussion to help students determine the appropriate access.
Determine appropriate Web access to Web servers While displaying Slide 5: Identify Servers for Databases in the presentation file, ask the following questions: ■
■
68
If the Product Catalog allows anonymous access, which servers should allow anonymous access? Answer: The following servers: ■ In Portugal, PTHub/SVR/World and PTApps02/SVR/World ■ In Brazil, BRHub/SVR/World and BRApps02/SVR/World If the Sales Order application requires name and password Web authentication, which servers should allow name and password authentication? Answer: The following servers: ■ In Portugal, PTHub/SVR/World and PTApps02/SVR/World ■ In Brazil, BRHub/SVR/World and BRApps02/SVR/World
Deploying Domino Applications
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
'HWHUPLQH:HE6HUYHU$FFHVV([HUFLVH Web user access to databases The following table shows the results from the Determine Web User Access to Databases Exercise completed earlier. Database Name
Anonymous Access (Y/N)
Policies and Procedures
Anonymous Access Level
Group Name for Name & Password Access
Name & Password Access Level
Secure Transactions (Y/N)
No Access
✔
Product Catalog
Reader
Sales Order
No Access
Customer Service
No Access
Customer Information
No Access
Product Ideas
No Access
Product Design
No Access
Price List
No Access
Customers Resellers
Reader
✔
Web server settings Use the results from the above table to complete the following table by identifying: ■ ■
Which classroom servers are Web servers? What Web authentication options should be set on your assigned server?
Server Name
Web Server
Anonymous Access
Name & Password Access
SSL Port Enabled
PTHub/SVR/World PTApps01/SVR/World PTApps02/SVR/World BRHub/SVR/World BRApps01/SVR/World BRApps02/SVR/World
S t u d e n t G u i d e P a g e N o . 35
69
,QVWUXFWRU Lesson 2 ■ Identifying Application System Requirements
70
Deploying Domino Applications
% 3UHSDULQJ$SSOLFDWLRQVIRU 'HSOR\PHQW Lesson 3 Setting Up Server and Database Access Lesson 4 Organizing Databases Lesson 5 Determining a Backup Strategy
,QVWUXFWRU Lesson 3 ■ Setting Up Server and Database Access
6HWWLQJ8S6HUYHUDQG 'DWDEDVH$FFHVV
Review types of access Students completed the planning for server and database access in Module A: Determining Deployment Strategy. In this lesson, students will set up user and server access to databases and the server on which database replicas will reside using the information gathered in Module A. Review the types of access as outlined on the student page, then present the objectives for this lesson.
72
Deploying Domino Applications
,QVWUXFWRU Lesson 3 ■ Setting Up Server and Database Access
6HWWLQJ8S6HUYHUDQG 'DWDEDVH$FFHVV
Types of access After thorough planning, Worldwide Corporation administrators are ready to prepare the servers and databases for deployment. Setting up the appropriate access involves the following tasks: ■ ■
■ ■
Set user access to the database. Set server access to the database in the database ACL in order for servers to be able to successfully replicate documents and database elements. Allow users access to the server where the database resides. Allow servers access to all other servers where replicas of the database reside.
Objectives After completing this lesson, you should be able to: ■ ■ ■ ■
Enable access to the server. Enable access to the database. Set up databases for Web access. Set database properties for optimum performance.
S t u d e n t G u i d e P a g e N o . 38
73
,QVWUXFWRU Lesson 3 ■ Setting Up Server and Database Access
+RZWR3UHSDUH$SSOLFDWLRQVIRU 'HSOR\PHQW Provide an overview of preparing applications for deployment Use the procedure on the student page to provide students with an overview of the tasks involved in preparing applications for deployment. These tasks are covered in more detail in this module.
74
Deploying Domino Applications
,QVWUXFWRU Lesson 3 ■ Setting Up Server and Database Access
+RZWR3UHSDUH$SSOLFDWLRQVIRU 'HSOR\PHQW Prepare to deploy applications checklist Complete these tasks to prepare applications for deployment. Task
Procedure
❏
1
Verify groups for server access.
❏
2
Enable user and server access to servers.
❏
3
Verify groups for database access.
❏
4
Set user and server access in the database ACL.
❏
5
Enforce a consistent database ACL.
❏
6
Set up Web access to servers.
❏
7
Set database ACL for Web user access.
❏
8
Set database properties.
❏
9
Enable document routing to mail-in databases.
❏
10
Set up a Database Catalog.
❏
11
Create database libraries.
❏
12
Enable single database and domain-wide searching.
❏
13
Determine a backup strategy.
❏
14
Enable transaction logging.
❏
15
Schedule a backup utility.
S t u d e n t G u i d e P a g e N o . 39
75
,QVWUXFWRU Lesson 3 ■ Setting Up Server and Database Access
9HULI\LQJ*URXSVIRU6HUYHU$FFHVV Verify the GlobalAdmins group Use the procedure on the student page to verify that the GlobalAdmins group includes two other group names: PTAdmins and BRAdmins.
76
Deploying Domino Applications
,QVWUXFWRU Lesson 3 ■ Setting Up Server and Database Access
9HULI\LQJ*URXSVIRU6HUYHU$FFHVV Verify group names Before enabling server access, verify that all necessary group names exist and have the correct group membership. Follow these steps to verify the groups. Step
Action
1
Select the People & Groups tab➝Domino Directories section➝Address Book section➝Groups view.
2
Choose Tools➝Groups➝Manage.
3
In the left pane, select the group to view.
4
Click Details to view group membership.
5
Click Close when done viewing group membership.
6
Repeat steps 3 through 5 for each group.
7
When finished managing groups, click Done.
S t u d e n t G u i d e P a g e N o . 40
77
,QVWUXFWRU Lesson 3 ■ Setting Up Server and Database Access
(QDEOLQJ8VHUDQG6HUYHU$FFHVVWR 6HUYHUV Review server access lists Use the procedure on the student page to allow the following groups access to WorldHub/World: ■ ■
78
GlobalAdmins LocalDomainServers
Deploying Domino Applications
,QVWUXFWRU Lesson 3 ■ Setting Up Server and Database Access
(QDEOLQJ8VHUDQG6HUYHU$FFHVVWR 6HUYHUV Server access lists The Server document in the Domino Directory includes server access fields for allowing the following access: ■ ■
User access to the server where the database resides. Server access to all other servers where replicas of this database reside.
Enable access to the server The Server document in the Domino Directory includes fields for controlling access to the server. Follow these steps to allow access to the server. Step
Action
1
From Domino Administrator, select the server to administer.
2
Select the Configuration tab➝Server section➝Current server document.
3
Click Edit Server.
4
Select the Security tab.
5
In the Server access section➝Access Server field, enter or select the groups that include the following: ■
Users listed in the database ACL who require access to use the database.
■
Servers listed in the database ACL that require access to replicate the database.
6
Click Save and Close.
7
Restart the server for changes to take effect.
Best practice for using groups Use groups to simplify administration tasks. By using groups to control access to resources, new users can be added to a group, which in turn dynamically provides the user with access to any resources to which the group has access.
S t u d e n t G u i d e P a g e N o . 41
79
,QVWUXFWRU Lesson 3 ■ Setting Up Server and Database Access
(QDEOH6HUYHU$FFHVV([HUFLVH Review groups and server replicas Allow students 10 minutes to complete this exercise. Review the groups that require access to each server, as planned in Module A: Determining Deployment Strategy.
Display Identify Servers for Databases slide From the presentation file, display Slide 5: Identify Servers for Databases so that students can see the servers on which database replicas reside.
Remind students to restart servers Ask students the following question: Do changes to the server access list take effect immediately? Answer: No. The students must restart the server for the changes to take effect. ■
80
Deploying Domino Applications
,QVWUXFWRU Lesson 3 ■ Setting Up Server and Database Access
(QDEOH6HUYHU$FFHVV([HUFLVH Verify Worldwide’s server access groups The following information was gathered in the Determine User and Server Access to Servers Exercise in Module A: Determining Deployment Strategy. For your assigned server, verify that all groups exist and contain the correct membership. Server PTHub/SVR/World (Web)
Server Access List LocalDomainServers GlobalWorld
PTApps01/SVR/World
LocalDomainServers GlobalWorld
PTApps02/SVR/World (Web)
LocalDomainServers GlobalWorld
BRHub/SVR/World (Web)
LocalDomainServers GlobalWorld
BRApps01/SVR/World
LocalDomainServers GlobalWorld
BRApps02/SVR/World (Web)
LocalDomainServers GlobalWorld
Set server access lists Using the previous table, edit the Server document for your assigned server to allow access by the appropriate servers and users who require access to database replicas on your assigned server.
S t u d e n t G u i d e P a g e N o . 42
81
,QVWUXFWRU Lesson 3 ■ Setting Up Server and Database Access
&RQWUROOLQJ'DWDEDVH$FFHVV Review types of database access Review the types of database access and privileges as outlined on the student page.
Introduce the activity Allow at most five minutes to complete this activity. Students should perform this activity using the database assigned to them in Module A: Determining Deployment Strategy. Students should modify their assigned database on WorldHub/World.
82
Deploying Domino Applications
,QVWUXFWRU Lesson 3 ■ Setting Up Server and Database Access
&RQWUROOLQJ'DWDEDVH$FFHVV Database Access Control Lists (ACL) Use database ACLs to set the following levels of access and privileges: ■ ■ ■ ■
Each user of the database. Each server that stores a replica of the database. The group of application developers who will update the database design. The group of administrators/database managers who will update the ACL.
Set a database Access Control List There are two groups that need access to every database in Worldwide’s Domino environment, GlobalDesigners and GlobalAdmins. Follow these steps to add entries for these groups to your assigned database. Note: Manager access is required to perform this activity. Step
Action
1
From Domino Administrator, select WorldHub/World to administer.
2
Select the Files tab.
3
Select the database, then double-click to open the database.
4
Choose File➝Database➝Access Control.
5
Follow these steps to add an entry: a. Click Add. b. Click to select the GlobalDesigners group from the Domino Directory. c. Click OK. d. Select the following access: ■ User type: Person group ■ Access level: Designer ■ ACL privileges: Check all privileges and roles (if any)
6
7
S t u d e n t G u i d e P a g e N o . 43
Repeat step 5 to add an entry for the GlobalAdmins group, assigning the following access: ■
User type: Person group
■
Access level: Manager
■
ACL privileges: Check all privileges and roles (if any)
Click OK to close the Access Control List dialog box.
83
,QVWUXFWRU Lesson 3 ■ Setting Up Server and Database Access
&RQWUROOLQJ'DWDEDVH$FFHVV (continued)
Add an ACL entry to multiple databases Use the procedure on the student page to demonstrate adding an entry for the GlobalWorld group with Reader access to the Domino Directory and Notes Log ACLs.
84
Deploying Domino Applications
,QVWUXFWRU Lesson 3 ■ Setting Up Server and Database Access
&RQWUROOLQJ'DWDEDVH$FFHVV (continued)
Modify multiple database ACLs simultaneously Users and servers should have the appropriate access to databases based on the tasks they need to perform. Follow these steps to use the Manage ACL tool to add the same entries to multiple databases simultaneously. Step
Action
1
Select the Files tab.
2
Select the databases to modify.
3
Choose Tools➝ Database➝Manage ACL. Note: This tool does not display existing ACL entries.
4
To add an entry, follow these steps: a. Click Add. b. Enter the person, server or group, or click to select the name. c. Click OK. d. Select a user type, access level, ACL privileges, and roles.
5
To rename an entry, follow these steps: a. Click Rename.
6
b. Enter or click
to select the current name in the From text box.
c. Enter or click d. Click OK.
to select the new name in the To text box.
To delete an entry, follow these steps: a. Click Remove. b. Enter or click c. Click OK.
7
S t u d e n t G u i d e P a g e N o . 44
to select the name to remove from the ACL.
Click OK to close the Multi ACL Management dialog box.
85
,QVWUXFWRU Lesson 3 ■ Setting Up Server and Database Access
(QDEOH'DWDEDVH$FFHVV([HUFLVH Introduce the exercise Allow students approximately 10 minutes to complete this exercise. Provide students with the following information: ■
■
Each server/administrator team should perform this exercise on the same database to which they were assigned in Module A: Determining Deployment Strategy. Review the groups and the level of access determined by planning in Module A. (continued on next page) ...
86
Deploying Domino Applications
,QVWUXFWRU Lesson 3 ■ Setting Up Server and Database Access
(QDEOH'DWDEDVH$FFHVV([HUFLVH Verify Worldwide’s groups for database access The following information was gathered in the Determine Notes User Group Access Exercise in Module A: Determining Deployment Strategy. For your assigned databases, verify that all groups exist and contain the correct membership. Application/Database Policies and Procedures
Product Catalog
Sales Order
Customer Service
Customer Information
Group
ACL Level
User Type
Privilege/Role
GlobalWorld
Reader
Person group
GlobalHR
Editor
Person group
Delete documents
LocalDomainServers
Editor
Server group
All
HubServers
Manager
Server group
All
GlobalWorld
Reader
Person group
GlobalMarketing
Editor
Person group
Delete documents [Marketing]
LocalDomainServers
Editor
Server group
All
HubServers
Manager
Server group
All
GlobalSales
Editor
Person group
Delete documents
GlobalDistribution
Reader
Person group
LocalDomainServers
Editor
Server group
All
HubServers
Manager
Server group
All
GlobalSupport
Editor
Person group
Delete documents
LocalDomainServers
Editor
Server group
All
HubServers
Manager
Server group
All
GlobalSales
Editor
Person group
Delete documents
GlobalSupport
Reader
Person group
GlobalDistribution
Reader
Person group
LocalDomainServers
Editor
Server group
All
HubServers
Manager
Server group
All
(continued on next page) ...
S t u d e n t G u i d e P a g e N o . 45
87
,QVWUXFWRU Lesson 3 ■ Setting Up Server and Database Access
(QDEOH'DWDEDVH$FFHVV([HUFLVH (continued)
Introduce the exercise... Review the groups and the level of access determined by planning in Module A: Determining Deployment Strategy.
Provide the server name Instruct students to edit the database ACLs on WorldHub/World.
88
Deploying Domino Applications
,QVWUXFWRU Lesson 3 ■ Setting Up Server and Database Access
(QDEOH'DWDEDVH$FFHVV([HUFLVH (continued)
Verify Worldwide’s groups for database access... Application/Database Product Ideas
Product Design
Price List
Group
ACL Level
User Type
Privilege/Role
GlobalWorld
Author
Person group
Create documents Delete documents
PTProdMngmnt
Editor
Person group
Delete documents [ProductManager]
LocalDomainServers
Editor
Server group
All
HubServers
Manager
Server group
All
PTR&D
Editor
Person group
.Delete documents [R&DManager]
PTProdMngmnt
Author
Person group
Create documents [ProductManager]
PTManufacturing
Reader
Person group
PTEngineers
Author
Person group
Create documents [Engineer]
LocalDomainServers
Editor
Server group
All
HubServers
Manager
Server group
All
GlobalSales
Reader
Person group
GlobalMarketing
Editor
Person group
GlobalDistribution
Reader
Person group
LocalDomainServers
Editor
Server group
All
HubServers
Manager
Server group
All
Delete documents [Marketing]
Set database ACLs Using the previous table, edit the database ACLs to allow the appropriate servers and users access to your assigned databases. Set the ACLs for the databases located on the WorldHub/World server.
S t u d e n t G u i d e P a g e N o . 46
89
,QVWUXFWRU Lesson 3 ■ Setting Up Server and Database Access
(QVXULQJD&RQVLVWHQW'DWDEDVH$&/ Stress importance of consistent ACLs Inconsistent ACLs can cause replication problems. Students will have an opportunity to troubleshoot ACL replication problems in Module D: Troubleshooting Application Deployment.
Verify the correct ACL before enabling Ask students: What might happen if the ACL is incorrect, and you enforce a consistent ACL? Answer: They could lock themselves out of the ACL because the database ACL will be enforced on the local workstation as well as on all server replicas.
■
Tell students that they should verify the ACL before performing enforcing a consistent ACL.
Introduce the activity Allow students 10 minutes to complete this activity. Each server/administrator team should perform this activity on the same database to which they were assigned in Module A: Determining Deployment Strategy. Students should modify the database on WorldHub/World.
90
Deploying Domino Applications
,QVWUXFWRU Lesson 3 ■ Setting Up Server and Database Access
(QVXULQJD&RQVLVWHQW'DWDEDVH$&/ Best practice for standardizing the ACL Consider the following when setting the database ACL: ■ ■
■
■
The ACL should be the same on all replicas. One server or group of servers should have Manager access to distribute the ACL, and all other non-Manager servers should replicate with the Manager server to ensure consistent ACL distribution. A group of people should have Manager access to change the ACL, for example, GlobalAdmins. Set the ACL before distributing the database.
Enforce a consistent ACL Each server replica should have exactly the same database ACL in order to ensure the appropriate user and server access to the database. Follow these steps to enforce a consistent database ACL for your assigned database. Step
Action
1
From Domino Administrator, select WorldHub/World.
2
Select the Files tab.
3
Select your assigned databases to modify.
4
Choose Tools➝ Database➝Manage ACL.
5
Click the Advanced panel.
6
Select Enforce a consistent ACL across all replicas of this database.
7
Click OK to close the Manage ACL dialog box.
8
Click OK to confirm the databases were processed.
Caution Before enforcing a consistent ACL, verify that an administrators group and at least one server have Manager access in the database ACL in order to prevent being locked out from making future changes to the database ACL.
S t u d e n t G u i d e P a g e N o . 47
91
,QVWUXFWRU Lesson 3 ■ Setting Up Server and Database Access
(QDEOH:HE$FFHVV([HUFLVH Introduce the exercise Allow students approximately five minutes to complete this exercise. Students should be able to edit the database ACL and edit the Server document on their own. Students should modify the database on WorldHub/World.
(Optional) Test access to database Instruct students to test access to their assigned database from a Web browser. Students should use the following URL: http://worldhub/database.nsf?OpenDatabase where database.nsf is the student’s assigned database.
92
Deploying Domino Applications
,QVWUXFWRU Lesson 3 ■ Setting Up Server and Database Access
(QDEOH:HE$FFHVV([HUFLVH Set up Web access to databases and servers Use the information below gathered in the Determine Web User Access to Databases and Determine Web Server Access exercises in Module A: Determining Deployment Strategy to set up the appropriate Web access for your assigned database and server. Set up the database by editing the database ACL on WorldHub/World.
■
Database Name
Anonymous Access (Y/N)
Policies and Procedures
Anonymous Access Level
Name & Password Access Level
Secure Transactions (Y/N)
No Access
✔
Product Catalog
Reader
Sales Order
No Access
Customer Service
No Access
Customer Information
No Access
Product Ideas
No Access
Product Design
No Access
Price List
No Access
■
Group Name for Name & Password Access
Customers Resellers
✔
Reader
Set up the server by editing the Server document.
Server Name
Web Server
Anonymous Access
Name & Password Access
✔
✔
✔
PTApps02/SVR/World
✔
✔
✔
BRHub/SVR/World
✔
✔
✔
✔
✔
✔
PTHub/SVR/World PTApps01/SVR/World
BRApps01/SVR/World BRApps02/SVR/World
S t u d e n t G u i d e P a g e N o . 48
93
,QVWUXFWRU Lesson 4 ■ Organizing Databases
2UJDQL]LQJ'DWDEDVHV
Introduce objectives Introduce the objectives for this lesson. In this lesson, students will categorize databases by type, then complete the following tasks: ■ ■ ■ ■ ■
Create necessary mail-in database documents for workflow applications. Create a Database Catalog. Create a database library. Create an index to search for text in a database. Set up domain-wide searching.
Note: We will not enable SSL at this point, but consider SSL for the future.
94
Deploying Domino Applications
,QVWUXFWRU Lesson 4 ■ Organizing Databases
2UJDQL]LQJ'DWDEDVHV
Methods to organize databases All databases should be organized to make them easy to find and use. Database catalogs provide a list of all of the databases on a server so users can quickly search for the database they need. Database libraries include lists of databases specific to workgroups for easy access to job-related databases. Organizing elements of a database, such as the full-text index, allows easy access to information within a database. Workflow applications require documents to route from one database to another. A database must be enabled to allow routing to occur.
Objectives After completing this lesson, you should be able to: ■ ■ ■
Enable a database for document routing. Categorize databases. Organize database elements.
S t u d e n t G u i d e P a g e N o . 49
95
,QVWUXFWRU Lesson 4 ■ Organizing Databases
(QDEOLQJ'DWDEDVHIRU'RFXPHQW 5RXWLQJ Review applications Briefly review Worldwide’s applications, focusing on the Product Design workflow application.
Display Routing Applications Animation Describe document routing. Show the Routing Applications Animation, ROUTING.EXE.
Ask for examples of mail-in databases Students were introduced to mail-in databases in the Implementing a Domino Infrastructure course. Ask students: ■
96
Where do system administrators routinely use a mail-in database? Answer: To store backed up ID files.
Deploying Domino Applications
,QVWUXFWRU Lesson 4 ■ Organizing Databases
(QDEOLQJ'DWDEDVHIRU'RFXPHQW 5RXWLQJ Document routing Documents are routed among mail and non-mail databases. Documents that are routed to mail databases use the Person document to find the receiving database. Documents that are routed to non-mail databases use a Mail-In document to find the receiving database.
Mail-in databases Mail-in databases are most often part of a workflow application. A mail-in database is used to store documents that other parts of the application create and route to the database. Another example of a mail-in database is used in ID file backup. Administrators create a repository to which users can mail a backup of their IDs.
S t u d e n t G u i d e P a g e N o . 50
97
,QVWUXFWRU Lesson 4 ■ Organizing Databases
(QDEOLQJ'DWDEDVHIRU'RFXPHQW5RXWLQJ (continued)
Show the workflow application Perform the following steps using the instructor copies of the databases. Important: Access the databases on WorldHub/World from Doctor Notes’ workstation to ensure proper access. This demo may not work otherwise. Step
Action
Instructor Product Ideas database 1
Click New Product Idea to create and save a new idea document.
2
As the Product Manager, select Product Management➝New ideas to review.
3
Open the document created in step 1.
4
Click Edit Document.
5
Click Change Status.
6
Select Investigate product, and click OK.
7
Click Yes to save the changes. This action routes the product idea document to the Instructor Product Design database.
Instructor Product Design database 8
As the R&D Manager, select R&D Management➝New ideas to review.
9
Open the document created in step 1.
10
Click Edit Document.
11
Click Notify Engineer.
12
Select Doctor Notes from the list, and click OK.
13
Click Yes to save the changes. This action sends a memo to the engineer, including a document link to the product idea to which the engineer is assigned.
14
As the Engineer, open your mail file, and view the new memo.
15
Click the Document link included in the memo to open the product design document in the Instructor Product Design database.
16
Click Edit Document.
17
Enter the design specifications.
18
When the design is complete, click Mark Design Complete.
19
Click Yes to save the changes. This action routes the design document to the Instructor Product Catalog database. (continued on next page) ...
98
Deploying Domino Applications
,QVWUXFWRU Lesson 4 ■ Organizing Databases
(QDEOLQJ'DWDEDVHIRU'RFXPHQW5RXWLQJ (continued)
Worldwide’s workflow application Worldwide Corporation’s Product Ideas, Product Design, Product Catalog and Price List databases are an example of a workflow application that routes documents to another database. The following diagram shows the workflow:
Product Ideas database
Mail worthwhile product ideas
Notify assigned engineer Product Design database
Engineer’s mail file
Mail completed product designs
Add to Price List Product Catalog database
S t u d e n t G u i d e P a g e N o . 51
Price List database
99
,QVWUXFWRU Lesson 4 ■ Organizing Databases
(QDEOLQJ'DWDEDVHIRU'RFXPHQW5RXWLQJ (continued)
Show the workflow application... Step
Action
Instructor Product Catalog database 20
As the Marketing Manager, select the Completed Product Designs view.
21
Open the document created in step 1 under the Not published category.
22
Click Edit Document.
23
Click Add to Price List Database.
24
On the Product Pricing form, enter the US Dollar retail price.
25
Before saving the document, choose File➝Database➝Properties to show that you are currently working in the Instructor Price List database.
26
Click Save and Close to close the product pricing document. This action results in a new document in the Instructor Price List database.
27
In the product design document, click Edit document once again.
28
Click Create Product Catalog Document.
29
Click Yes to save the changes.
30
Complete the editable fields.
31
Click Save and Close to close the product catalog document. This action results in a new document in the Instructor Product Catalog database.
32
Click Cancel to close the product design document.
33
Select Products➝By Product Name to see the new product document.
Instructor Price List database 34
Select Products➝By Product Name to see the new price list document.
Review the necessary mail-in database documents Review the workflow diagram on the previous student page to recap which mail-in database documents are necessary. Group students into two teams and assign each team a document to create. Allow students approximately five minutes to complete this activity. Step 5: Note that the Product Catalog is a critical application (replicates every two hours). Therefore, it will be placed in the Domino\data\critical directory in Module C: Rolling Out Applications.
100
Deploying Domino Applications
,QVWUXFWRU Lesson 4 ■ Organizing Databases
(QDEOLQJ'DWDEDVHIRU'RFXPHQW5RXWLQJ (continued)
Create a mail-in database document Worldwide Corporation’s workflow application requires mail-in database documents to enable document routing to other databases. The instructor will assign each team a mail-in database name. Work in teams, and follow these steps to create the mail-in database document. Step
Action
1
From Domino Administrator, select your assigned server to administer.
2
Select the People & Groups tab➝Domino Directories section➝World’s Address Book section➝Mail-In Databases & Resources view.
3
Click the Add Mail-In Database button.
4
On the Basics tab, enter the following information: ■
Team 1:
■
Mail-in name: Product Design ■ Description: Sends new product ideas to the Product Design database. Team 2: ■
■ ■
5
Mail-in name: Product Catalog Description: Sends completed product designs to the Product Catalog database.
On the Database Information tab, enter the following information: ■
Team 1:
■
Domain: World ■ Server: PTApps02/SVR/World ■ File name: PRODDSGN.NSF Team 2: ■
■ ■ ■
6
S t u d e n t G u i d e P a g e N o . 52
Domain: World Server: PTApps02/SVR/World File name: CRITICAL\PRODCAT.NSF
Click Save and Close.
101
,QVWUXFWRU Lesson 4 ■ Organizing Databases
8VLQJ'DWDEDVH&DWDORJVWR2UJDQL]H 'DWDEDVHV Present Database Catalogs Describe the purpose and use of a Database Catalog. Show the contents of Earth’s Database Catalog, EDBCAT.NSF. Database libraries and domain catalogs are covered later in this lesson.
102
Deploying Domino Applications
,QVWUXFWRU Lesson 4 ■ Organizing Databases
8VLQJ'DWDEDVH&DWDORJVWR2UJDQL]H 'DWDEDVHV Methods to categorize databases Domino/Notes includes the following tools to help users locate a database in the Domino domain: ■ ■ ■
Database Catalog Database library Domain catalog
What is a Database Catalog? A Database Catalog lists all database names and the server on which they reside. Users can look through the Database Catalog to find the server on which a particular database resides.
Best practice for Database Catalogs Most companies should use one Database Catalog for the domain, and store replicas of the Database Catalog on all domain servers. The exception would be if the Database Catalog becomes so large that it is no longer manageable or useful. In this case, consider creating a different Database Catalog for each server in the domain.
S t u d e n t G u i d e P a g e N o . 53
103
,QVWUXFWRU Lesson 4 ■ Organizing Databases
&DWHJRUL]LQJ'DWDEDVHVLQWKH'DWDEDVH &DWDORJ Introduce the activity Allow students approximately five minutes to complete this activity. Each server/administrator team should perform this activity on the same database to which they were assigned in Module A: Determining Deployment Strategy. Students should modify the database on WorldHub/World.
104
Deploying Domino Applications
,QVWUXFWRU Lesson 4 ■ Organizing Databases
&DWHJRUL]LQJ'DWDEDVHVLQWKH'DWDEDVH &DWDORJ Set up databases to include in the Database Catalog By default, each new database is set up to be included in the Database Catalog. List only those databases that are necessary in the catalog. The databases can be categorized in the catalog to make it easier for users to find the appropriate database. Follow these steps to set up databases for the catalog. Note: At least Designer access is required to perform this procedure. Step
Action
1
From Domino Administrator, select WorldHub/World.
2
Select the Files tab.
3
Double-click to open your assigned database.
4
Choose File➝Database➝Properties.
5
Select the Design tab, and select List in Database Catalog as shown in the following figure:
6
In the Categories box, type one or more categories for the database. Separate category names with a comma or semicolon.
S t u d e n t G u i d e P a g e N o . 54
105
,QVWUXFWRU Lesson 4 ■ Organizing Databases
&UHDWLQJDQG8SGDWLQJWKH'DWDEDVH &DWDORJ Populate the Database Catalog on WorldHub/World Use the procedure on the student page to create the database documents in the Database Catalog. Once the Catalog server task has populated the database, have students look through the Database Catalog and find the database to which they assigned a category in the last activity. Briefly show each of the views in the Database Catalog.
106
Deploying Domino Applications
,QVWUXFWRU Lesson 4 ■ Organizing Databases
&UHDWLQJDQG8SGDWLQJWKH'DWDEDVH &DWDORJ Populate the Database Catalog The Catalog server task creates, populates, and updates the Database Catalog on a server. By default, the Catalog server task runs at 1:00 AM. Follow these steps to manually create, populate, or update the Database Catalog. Step
Action
1
From Domino Administrator, select the server to administer.
2
Select the Server tab➝Status tab.
3
Choose Tools➝ Task➝Start.
4
Select Cataloger from the list of server tasks.
5
Click Start Task.
6
Click Done.
7
View the Database Catalog to locate a database by clicking the Server tab➝Analysis tab➝Catalog (5.0) section➝Databases section➝By Category view.
S t u d e n t G u i d e P a g e N o . 55
107
,QVWUXFWRU Lesson 4 ■ Organizing Databases
8VLQJD'DWDEDVH/LEUDU\WR2UJDQL]H 'DWDEDVHV Differentiate Database Catalog and database library A Database Catalog contains all databases on the server or in the domain. Most often a company uses one Database Catalog for the domain, or one Database Catalog per server. A database library stores links to selected databases that have something in common and are used by a particular user group. There can be more than one database library on a server.
Introduce the activity Allow students five minutes to complete this activity.
108
Deploying Domino Applications
,QVWUXFWRU Lesson 4 ■ Organizing Databases
8VLQJD'DWDEDVH/LEUDU\WR2UJDQL]H 'DWDEDVHV What is a database library? A database library is a database that contains links to databases that are used by a particular user workgroup. For example, the human resources department might create a database library for new employees that contains links to all corporate information databases.
What is a librarian? A librarian is anyone who creates a database library. By default, the librarian gets Manager access in the database ACL. A librarian can publish databases in the library and make other users librarians.
Create a database library Each Worldwide Corporation region should have a database library containing databases relevant to the region. Follow these steps to create a database library.the Domino 5 Administration Help database. Step
Action
1
From Domino Administrator, choose File➝Database➝New.
2
Select your assigned server on which the database library will reside.
3
Enter an appropriate database title, such as PT Library or BR Library, and file name for the library.
4
Select the Database Library template (DBLIB4.NTF). Note: It may be necessary to check Show Advanced Templates.
5
Click OK to create the database library.
6
When the new database opens, choose File➝Database➝Access Control.
7
Add the following ACL entries:
8
■
PTAdmins or BRAdmins: Manager access
■
PTAll or BRAll: Reader access
Select the Librarians view. Open the Librarians document. Note that you can edit this document to add more librarians.
Note: For more information, see Creating a database library and assigning librarians in the Domino 5 Administration Help database. S t u d e n t G u i d e P a g e N o . 56
109
,QVWUXFWRU Lesson 4 ■ Organizing Databases
3XEOLVKLQJ'DWDEDVHVLQD/LEUDU\ Provide students with activity guidelines Allow students 10 minutes to complete this activity. Students should include all the databases that will reside on their assigned server in the database library. Databases only reside on WorldHub/World at this point in the course.
Display Identify Servers for Databases slide From the SA260DIAG.FMP presentation file, display Slide 5: Identify Servers for Databases so that students can see the servers on which database replicas reside.
110
Deploying Domino Applications
,QVWUXFWRU Lesson 4 ■ Organizing Databases
3XEOLVKLQJ'DWDEDVHVLQD/LEUDU\ Add databases to the library To publish a database in a database library means to add a database to the library. Unlike a Database Catalog, which lists all the databases on a server, a library contains a list of databases the librarian has chosen to include, from one server or several servers. Follow these steps to publish a database in a library. Note: This procedure requires at least Author access to the database library. Step
Action
1
From the Notes client, add a bookmark for each database on WorldHub/ World that will reside on your assigned server.
2
Select the first database icon to publish in the library from your bookmarks page.
3
Choose File➝Database➝Publish.
4
Select your database library title from the Available libraries list, and click OK.
5
Enter information in the following fields: ■
In the Abstract field, type a short description of the database that will appear in the view.
■
In the Long Description field, type a more complete description of the database contents. Users will see this description when they open the document.
6
Click Save Database Entry.
7
Repeat steps 2 through 6 to add the other databases that will reside on your assigned server to the library.
8
Open the library to see the databases.
S t u d e n t G u i d e P a g e N o . 57
111
,QVWUXFWRU Lesson 4 ■ Organizing Databases
(QDEOLQJ'DWDEDVH6HDUFKHV Review full text index Students created a full text index in the Implementing a Domino Infrastructure course. Explain how and when a full text index is updated. Explain that the full text index should only be deleted through Domino, not through the operating system. Allow students approximately five minutes to complete this activity.
(Optional) Show full text index subdirectories Show subdirectories created in conjunction with the full text index.
112
Deploying Domino Applications
,QVWUXFWRU Lesson 4 ■ Organizing Databases
(QDEOLQJ'DWDEDVH6HDUFKHV Full text index Domino/Notes includes the ability to create a full text index for a database which can be used to search for specified information within the database. For a database that resides on the server, the full text index files reside on the server.
Create a full text index Application developers or system administrators with as least Designer access can create a full text index for a database. Follow these steps to create a full text index for searching. Step
Action
1
From Domino Administrator, select your assigned server to administer.
2
Select the Files tab.
3
In the Help directory, select the Notes 5 Help, Domino 5 Designer Help, and Domino 5 Administration Help databases.
4
Choose Tools➝ Database➝ Full Text Index. This tool creates a full text index for searching for each of the selected databases.
5
Select Create, then click OK to create the full text index.
Result: Dialog box displays databases processed and number of errors.
S t u d e n t G u i d e P a g e N o . 58
113
,QVWUXFWRU Lesson 4 ■ Organizing Databases
:KDW,V'RPDLQ6HDUFK" Present Domain Search Make the following points: ■ ■
■ ■
114
Search servers in a cluster can take advantage of load balancing and failover. The Domain Catalog task scans the Domino Directory and databases on the server to collect database information. Replication keeps Domain Catalogs synchronized. Only the Domain Catalog replicates, the Domain Index does not.
Deploying Domino Applications
,QVWUXFWRU Lesson 4 ■ Organizing Databases
:KDW,V'RPDLQ6HDUFK" Domino supports domain-wide searching Domino supports performing searches throughout selected files in the domain. Domain search: ■
■ ■ ■
Stores a central index which includes content extracted from local and remote Domino Databases and file systems Uses a Domain Catalog to store information about databases in the domain Implements easily, using default configuration Permits customizing search/results forms
How Domain Search works Domain Search uses the following components: ■
■
■
Domain Catalog stores database information, and resides on designated servers. Domino replication keeps the Domain Catalogs on designated servers in synchronization. One server in the domain performs the following functions: ■ Stores the Domain Catalog index ■ Runs the Domain Indexer task, which keeps the index up-to-date
Best practice for Domain Search server A Domain Search server should, in most cases, be a dedicated server. The Domain Search server will be kept very busy maintaining the Domain Index and servicing Domain Search requests.
S t u d e n t G u i d e P a g e N o . 59
115
,QVWUXFWRU Lesson 4 ■ Organizing Databases
+RZWR6HW8S'RPDLQ6HDUFK Provide an overview of setting up Domain Search Use the checklist on the student page to give students an overview of Domain Search.
Introduce the activity Allow students approximately five minutes to complete this activity. Each server/administrator team should perform this activity on the same database to which they were assigned in Module A: Determining Deployment Strategy. Students should modify the database on WorldHub/World.
116
Deploying Domino Applications
,QVWUXFWRU Lesson 4 ■ Organizing Databases
+RZWR6HW8S'RPDLQ6HDUFK Setting up Domain Search checklist Complete these tasks to set up Domain Search. Task
Procedure
❏
1
Enable multi-database indexing for all databases to be included in the Domain Search.
❏
2
Enable domain-wide catalog, and schedule the Domain Indexer in the Server document.
❏
3
Run the Catalog server task to create the Domain Catalog database.
❏
4
Restart the server for the Domain Indexer to start.
Task 1: Enable multi-database indexing Only databases that are enabled for multi-database indexing are included in the Domain Catalog. Domain Search will only look for information in databases that are listed in the Domain Catalog. Worldwide Corporation wants to include all of its applications in Domain Search. Follow these steps to enable multi-database indexing in order to include the database in Domain Search. Step
Action
1
From Domino Administrator, select WorldHub/World.
2
Select the Files tab.
3
Select your assigned databases to include in the search.
4
Choose Tools➝ Database➝Multi-Database Index.
5
Select Enable.
6
Click OK.
7
Click OK when notified of the number of databases that were processed.
S t u d e n t G u i d e P a g e N o . 60
117
,QVWUXFWRU Lesson 4 ■ Organizing Databases
+RZWR6HW8S'RPDLQ6HDUFK (continued)
Schedule the Domain Indexer task on WorldHub/World Use the procedure on the student page to edit the WorldHub/World Server document and schedule the Domain Indexer task.
Perform Tasks 3 and 4 Perform the following tasks on WorldHub/World: ■ ■
Run the Catalog server task to create the Domain Catalog database. Restart the server for the Domain Indexer to start.
Search for information across databases in the domain Demonstrate the following. Note: It may be necessary to wait 10-15 minutes for the Domain Index to be completely built and for Domain Search to be fully functional. Step
Action
1
Specify a Search Server by choosing File➝Preferences➝Location Preferences.
2
On the Servers tab, enter WorldHub/World in the Catalog/domain search server field.
3
Click Save and Close.
4
To initiate the search from a Notes client, click the Magnifying glass navigator button
. Then, choose Domain Search from the menu.
Note: It may be necessary to display the horizontal scroll bar when searching.
118
5
Enter XYZ Corporation for the search text.
6
(Optional) Search using the additional search options under More.
Deploying Domino Applications
,QVWUXFWRU Lesson 4 ■ Organizing Databases
+RZWR6HW8S'RPDLQ6HDUFK (continued)
Task 2: Schedule the Domain Indexer task Follow these steps to enable and schedule the Domain Indexer server task on the search server where the Domain Index will reside. Step
Action
1
From Domino Administrator, select the dedicated search server where the Domain Index will reside.
2
Select the Configuration tab➝Server section➝Current Server Document.
3
Click Edit Server.
4
Select the Server Tasks tab➝Domain Indexer tab.
5
Complete the following fields:
6
■
Domain wide indexer: Enabled
■
Schedule: Enabled
■
Any scheduling times, as necessary
■
(Optional) Limit domain-wide indexing to the following servers
Click Save and Close.
Note: The instructor will complete Tasks 3 and 4 on WorldHub/World.
S t u d e n t G u i d e P a g e N o . 61
119
,QVWUXFWRU Lesson 5 ■ Determining a Backup Strategy
'HWHUPLQLQJD%DFNXS 6WUDWHJ\
Introduce backup options Present the backup options for a Domino server while introducing the objectives for this lesson.
120
Deploying Domino Applications
,QVWUXFWRU Lesson 5 ■ Determining a Backup Strategy
'HWHUPLQLQJD%DFNXS 6WUDWHJ\
Back up critical files Domino/Notes does not include a built-in backup utility. However, administrators have two options for backing up the databases that reside on a Domino server: ■ ■
Record all database transactions, then back up the transaction log files. Use a traditional third-party backup utility to back up all server files.
Objectives After completing this lesson, you should be able to: ■ ■
Set up transaction logging. Identify backup strategy.
S t u d e n t G u i d e P a g e N o . 62
121
,QVWUXFWRU Lesson 5 ■ Determining a Backup Strategy
'HWHUPLQLQJD%DFNXS3URFHVV Discuss server backups Present the material on the student page, then ask the following questions: What methods are you currently using to perform backups? What tools do you use? ■ Why not just use replication for database backups? ■ Answer: A damaged database can sometimes replicate; if that happens, your only recourse is to restore the database from a server backup (if you made a backup!). Also, using replication to make backups can be very time-consuming with large databases. ■
Which files should be backed up daily? Answer: The Domino Directory (NAMES.NSF) and, if using Shared Mail, the Shared Mail database(s) (and any other files considered critical to the company). ■
Strategy for this section The next few pages discuss backup and transaction logging best practices. You do not need to go over these in detail. However, students should take away the following points: ■ ■ ■ ■ ■
Back up the infrastructure before making changes. Back up servers regularly. Use transaction logging to increase data integrity and efficiency. Know when and how to use transaction logging. Use a third-party backup utility. Some are compatible with transaction logging and some are not.
Currently available third-party backup utilities for R5 At the time of publishing, the available third-party backup utilities from R5 are the following IBM products: ■ ■
ADSM Tivoli
If students ask, they should contact their local sales representative for up-to-date information. 122
Deploying Domino Applications
,QVWUXFWRU Lesson 5 ■ Determining a Backup Strategy
'HWHUPLQLQJD%DFNXS3URFHVV Backup methods After determining and documenting the current infrastructure, perform a complete backup of all servers before making any changes. Whether the infrastructure is new or was previously in place, a new administrator should establish a basis from which to recover lost data. There are two choices for backup procedures: ■ ■
Traditional method of making backup copies of files Backup using transaction logging: Transaction logging creates Log files that capture database changes, allowing faster database updates and easier backup.
In addition, copy IDs to a disk and store the disk in a secure place. IDs to backup should include: ■ ■ ■
Server ID Organization and organizational unit certifiers User IDs
Do not back up using only Domino replication Never rely only on replication as your method of database backup. Multiple copies of data in multiple locations do not ensure data integrity. A damaged or accidentally changed database may replicate, and then the only recourse is to recover the database from a server backup tape.
Third-party backup utilities Domino supports several third-party backup utilities. Because there are files that Domino always keeps open (notably LOG.NSF, NAMES.NSF, and the server ID file), the backup utility must be able to back up open files while the server is running. For more information on backing up a Domino server, see Backing up the Domino server in the Domino 5 Administration Help database.
S t u d e n t G u i d e P a g e N o . 63
123
,QVWUXFWRU Lesson 5 ■ Determining a Backup Strategy
'HWHUPLQLQJD%DFNXS3URFHVV (continued)
Present the backup and restore API Domino R5 provides APIs for backing up databases. Vendors with compliant backup products can hook into these APIs to create backup and restore applications for the server. The backup and restore API allows for the following types of backup applications: ■ ■ ■ ■
Online full backup Online incremental backup Online database restore API Online media recovery API
Briefly describe each type.
Describe benefits of compliant backup utilities Compliant third-party backup utilities use the backup API and may provide some or all of the backup applications listed above. Compatible utilities work with R5, but do not provide all the same capabilities. Suggest that students contact their backup vendor to confirm the options available.
124
Deploying Domino Applications
,QVWUXFWRU Lesson 5 ■ Determining a Backup Strategy
'HWHUPLQLQJD%DFNXS3URFHVV (continued)
Best practices for backups The following guidelines describe recommendations for backups and apply to both methods of backup. ■
■ ■
■
■ ■ ■ ■
Back up all Domino server data files, including: ■ Databases, template files, the NOTES.INI file, ID files, and certifiers. ■ Files that may remain open during backup. Domino keeps some files open while it runs (LOG.NSF, NAMES.NSF, MAIL.BOX and the server ID file). If the backup utility cannot back up open files, shut down the server before creating the backup file. ■ User Mail files. Back up servers after major network changes. Back up databases (or logs, in the case of transaction logging) incrementally Monday through Thursday, and perform a full backup on Friday. Using the company’s standardized backup procedures, back up files directly to tape or to a file server and then to tape. Reuse incremental tapes each week. Create a new tape on the last Friday of each month. Reuse Friday tapes each month, except on the last Friday (use a new tape). Reuse each “last Friday” tape each year, except the last one of the year.
This process ensures that, on any given date, the data is current as of: ■
■ ■ ■
Yesterday (as a result of last Friday’s full backup and this week’s incremental backups) Each Friday of this month The last Friday of each month over the past 12 months The last Friday of each year the process has been in place
S t u d e n t G u i d e P a g e N o . 64
125
,QVWUXFWRU Lesson 5 ■ Determining a Backup Strategy
:KDW,V7UDQVDFWLRQ/RJJLQJ" Review transaction logging Students enabled transaction logging in the Implementing a Domino Infrastructure course. Emphasize that the files should be put on a separate device, because the log file size may eventually compromise server performance. Explain that the classroom configuration is an exception because there is relatively little server activity and few databases, compared to a live site.
126
Deploying Domino Applications
,QVWUXFWRU Lesson 5 ■ Determining a Backup Strategy
:KDW,V7UDQVDFWLRQ/RJJLQJ" Database transaction logging Transaction logging is a feature available with the Domino Application Server and Domino Enterprise Server licenses. Transaction logging sequentially records database operations performed by users. For example, if the server goes down, when the server restarts, transaction logging will: ■
■
Replay the log for any transactions that were completed prior to the server going down, but which are not reflected in the databases. Write the changes to the databases.
Note: Third-party developers may use an Application Programming Interface (API) to replay the history and bring databases up-to-date, as part of database repair and backup.
Best practice for transaction logging Transaction logs contain a large amount of data and consequently take a large amount of space on the server. As a result, it is best to store the transaction log file on a separate physical device.
S t u d e n t G u i d e P a g e N o . 65
127
,QVWUXFWRU Lesson 5 ■ Determining a Backup Strategy
/RJJLQJ'DWDEDVH7UDQVDFWLRQV Provide students with storage information Allow students approximately 10 minutes to complete this activity. For step 6, provide students with an appropriate path Drive:\Notes\Logdir for the transaction log file; where Drive is any available drive on the servers.
Restart the server Check to see if transaction logging has been enabled. If not, have students restart the server a second time.
128
Deploying Domino Applications
,QVWUXFWRU Lesson 5 ■ Determining a Backup Strategy
/RJJLQJ'DWDEDVH7UDQVDFWLRQV Enable transaction logging Follow these steps to begin to log database transactions. Step
Action
1
From Domino Administrator, select your assigned server to administer.
2
Select the Files tab; choose Tools➝ Disk Space. Note free disk space.
3
Select the Configuration tab➝ Server section➝Current server document.
4
Click Edit Server.
5
Select the Transactional Logging tab.
6
Enable transaction logging as shown in the following figure:
7
In the Log path field, enter the path (provided by the instructor) for the transaction log file.
8
Consider free disk space from step 2 to determine the appropriate value for the Maximum log space field.
9
Use pop-up Help to note the difference between the circular and archive logging styles, then accept the defaults for all other transaction logging options.
10
Click Save and Close.
11
Restart the Domino server to begin logging database transactions: a. Select the Server tab➝ Status tab➝ Console button➝ Live button. b. Enter Restart server on the command line, and press Enter.
12
Using the operating system, view the log files in the C:\Notes\Logdir directory.
Note: Transaction logging is enabled for the server, but administrators can disable transaction logging for a particular database. For more information, see Disabling transaction logging for a particular database in the Domino 5 Administration Help database.
S t u d e n t G u i d e P a g e N o . 66
129
,QVWUXFWRU Lesson 5 ■ Determining a Backup Strategy
6FKHGXOLQJWKH%DFNXS8WLOLW\ Present Program documents Briefly describe the purpose of a Program document.
Point out other uses for Program documents Administrators can also use Program documents to schedule Domino server tasks to run periodically. Students will have an opportunity to create a Server Program document in Module D: Troubleshooting Application Deployment.
(Optional) Schedule a backup utility If a third-party backup utility is available in the classroom, use the procedure on the student page to create a Server Program document to run the backup utility daily.
130
Deploying Domino Applications
,QVWUXFWRU Lesson 5 ■ Determining a Backup Strategy
6FKHGXOLQJWKH%DFNXS8WLOLW\ Program documents Program documents allow administrators to schedule the running of a Domino server task, such as COMPACT or third-party program, such as a backup utility. Using a Program document, administrators can specify when and how often the program runs.
Create a Server Program document Schedule the third-party backup utility to run at specified times using a Server Program document in the Domino Directory. Follow these steps to create a Server Program document. Step
Action
1
From Domino Administrator, select the server to administer.
2
Select the Configuration tab➝Server section➝Programs view.
3
Click Add Program.
4
Enter the executable program name in the Program name field.
5
Enter the command line necessary to run the program in the Command line field.
6
Enter the fully distinguished name of the server on which this program should run in the Server to run on field.
7
Specify the time, repeat interval, and days of week that this program should run on the Schedule tab.
8
Click Save and Close.
Note: To view all programs scheduled to run on a server, use the Show Schedule server command at the remote server console. The following figure is an example of a completed Server Program document:
S t u d e n t G u i d e P a g e N o . 67
131
,QVWUXFWRU Lesson 5 ■ Determining a Backup Strategy
132
Deploying Domino Applications
& 5ROOLQJ2XW$SSOLFDWLRQV Lesson 6 Rolling Out Databases to Servers Lesson 7 Rolling Out Databases to Users
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
5ROOLQJ2XW'DWDEDVHVWR 6HUYHUV
Activities and exercises Students will use their assigned database for all activities and exercises in this module except when creating replicas, where they will use all databases that reside on their server.
Review objectives This lesson focuses on distributing databases to servers by creating replicas and scheduling replication. Also covered are tasks that precede creation of replicas, such as signing databases and agents and updating ECLs.
134
Deploying Domino Applications
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
5ROOLQJ2XW'DWDEDVHVWR 6HUYHUV
Creating replicas and scheduling replication Rolling out databases to servers requires copying new databases to an initial server and then creating replicas on other servers to enable appropriate access by users. Once replicas are created, a schedule must be set up to allow database updates in a timely and efficient manner.
Objectives After completing this lesson, you should be able to: ■ ■ ■ ■
Create database copies and replicas. Set up replication schedules for databases. Sign databases and agents. Deploy agents.
S t u d e n t G u i d e P a g e N o . 70
135
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
'HSOR\LQJ'DWDEDVHV&KHFNOLVW Provide an overview of rolling out databases Use the procedure on the student page to provide students with an overview of the tasks involved in deploying applications. These tasks are covered in more detail in this module.
136
Deploying Domino Applications
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
'HSOR\LQJ'DWDEDVHV&KHFNOLVW Roll out databases to servers and workstations checklist Complete these procedures to roll out applications to servers and workstations. Task
Procedure
❏
1
Set quotas and thresholds.
❏
2
Set database properties.
❏
3
Create database directory structure.
❏
4
Create directory and database links.
❏
5
Sign database.
❏
6
Update the Administration ECL in Domino Directory.
❏
7
Notify users of changes to ECLs.
❏
8
Deploy database.
❏
9
Make sure you have Manager access in the database ACL and Create replica databases access in the Server Access section of the Server document in the Domino Directory.
❏
10
Create replicas.
❏
11
Set replication settings.
❏
12
Set up replication schedules.
❏
13
Copy database(s) to server(s).
❏
14
Verify that the database appears in the Open Database dialog box.
❏
15
Distribute databases to users.
❏
16
Distribute encryption keys.
❏
17
Notify users that database is available.
S t u d e n t G u i d e P a g e N o . 71
137
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
6HWWLQJ4XRWDVDQG7KUHVKROGV Quotas on applications It is not necessary to set a quota on a database. Many administrators set quotas only on Mail databases, since they are more likely to increase in size rapidly.
Restrictions on mail files Restrictions on maximum mail size may be set on mail files. If the message size is exceeded, documents in workflow applications will not route.
138
Deploying Domino Applications
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
6HWWLQJ4XRWDVDQG7KUHVKROGV What are quotas and thresholds? Quotas are limits that provide one method for monitoring and controlling database size. Once a database reaches its assigned quota, additional documents cannot be added. Administrators receive a disk quota exceeded message in the Miscellaneous Events section of the Log file (LOG.NSF). Users receive a similar message when attempting to save documents to the database. Thresholds provide a mechanism for warnings when quotas are approaching. Warning messages display in the Miscellaneous Events section of the Log file (LOG.NSF) to alert the administrator when a quota is approaching so that preemptory action can be taken. For example, if a database quota is set to 100 MB, setting a threshold for 90 MB allows time to take appropriate action, such as compacting the database to reduce the size or allocating more disk space.
Caution Users may be able to add documents to a database that has reached its quota if the database contains unused space made available by deleted documents.
S t u d e n t G u i d e P a g e N o . 72
139
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
6HWWLQJ4XRWDVDQG7KUHVKROGV (continued)
Set quotas Allow approximately five minutes to complete this activity. Remind students to work with databases on WorldHub since they have not been copied to students’ servers yet.
Show thresholds in Notes Log file Show where thresholds are viewed in the Notes Log file.
140
Deploying Domino Applications
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
6HWWLQJ4XRWDVDQG7KUHVKROGV (continued)
Worldwide’s quotas Worldwide Corporation determined database quotas as follows based on database size and projected growth. Database
Size at Time of Deployment
Quota
Threshold
Product Design
50 MB
100 MB
70 MB
New Product Ideas
10 MB
50 MB
30 MB
Policies and Procedures
30 MB
50 MB
40 MB
Customer Service
50 MB
100 MB
60 MB
Customer Information
40 MB
80 MB
70 MB
Sales Orders
50 MB
100 MB
70 MB
Product Catalog
30 MB
60 MB
40 MB
Price List
50 MB
70 MB
60 MB
Set database quotas and thresholds Follow these steps to set quotas on databases using the numbers defined by Worldwide Corporation. Step
Action
1
Select WorldHub/World. Select the Files tab.
2
Select your assigned database.
3
Choose Tools➝Database➝Quotas, or drag selected databases to Quotas.
4
Click More Info to display the current database size, and any existing quota or warning thresholds for the selected databases. Click OK.
5
Below Quota warning thresholds, select Set database quota to x MB. Specify a maximum size in megabytes the selected databases can attain.
6
Below Warning threshold, select Set warning threshold to x MB and specify a size in megabytes, less than the quota, at which a message appears in the Log file (LOG.NSF).
7
Click OK.
S t u d e n t G u i d e P a g e N o . 73
141
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
6HWWLQJ'DWDEDVH3URSHUWLHV Provide guidance as necessary Allow students approximately 15 minutes to complete this activity. Students should modify the database on WorldHub/World. If necessary, review the settings determined in Module A: Determining Deployment Strategy that students should enable prior to them setting the database properties. Property Display images after loading
Enable. Users can override this setting in the Location document.
Don’t maintain unread marks
Enable for reference databases such as Help, the Domino Directory, and other Domino system databases.
Document table bitmap optimization
Enable to improve performance under the following situations: ■
When databases use the Form= view selection formula.
■
When large databases contain small views.
Don’t overwrite free space
Enable for databases that are otherwise secure, or do not require security.
Disable transaction logging
Enable for databases with static information that does not change frequently.
Don’t allow headline monitoring
Enable for databases that do not change frequently.
Limit entries in $UpdatedBy fields
Limit entries for databases whose documents are edited frequently.
Limit entries in $Revisions fields
Limit entries for databases that are:
$Undelete Expire Time (in hours)
142
Setting
■
Very large
■
Replicate frequently or do not replicate at all
■
Static —
do not change frequently
Enable for databases that allow soft deletions.
Deploying Domino Applications
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
6HWWLQJ'DWDEDVH3URSHUWLHV Improve database performance Administrators should set database properties correctly in order to provide high database performance. Use the information from the Determine database properties exercise in Module A: Determining Deployment Strategy. Follow these steps to improve performance by setting database properties for your assigned databases. Step
Action
1
From Domino Administrator, select WorldHub/World.
2
From the Files tab, open your assigned databases.
3
Choose Edit➝Properties.
4
On the Basics tab on Databases Properties box, check Display images after loading. Click OK when prompted with the warning message.
5
On the Advanced tab database:
, set the following properties for your assigned
Property
S t u d e n t G u i d e P a g e N o . 74
Database
Don’t maintain unread marks
Policies and Procedures Product Catalog Price List Customer Information
Document table bitmap optimization
All databases
Don’t overwrite free space
All databases
Disable transaction logging
Policies and Procedures
Don’t allow headline monitoring
Policies and Procedures
Limit entries in $UpdatedBy fields at 5
Product Catalog Product Design Product Ideas
Limit entries in $Revisions fields at 5
Product Catalog Price List Customer Information Customer Service Sales Orders
$Undelete Expire Time (in hours)
None
143
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
&UHDWLQJ'DWDEDVH'LUHFWRU\6WUXFWXUH Present best practices Present best practices and describe directory structure for the classroom.
Create directories Allow approximately five minutes to complete this activity.
144
Deploying Domino Applications
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
&UHDWLQJ'DWDEDVH'LUHFWRU\6WUXFWXUH Best practices for creating directories for replication Use subdirectories to group related databases rather than copy them to the root directory. ■ ■
Users can find related databases more easily if they are in one location. This also helps administrators by allowing them to replicate "like" databases, since Connection documents allow replication according to directory.
Classroom directories The directory structure for this class is: ■ ■
Non-critical applications in domino\data directory Critical applications in domino\data\critical directory
Create directory folders Follow these steps to create a directory folder for critical databases. Step
Action
1
Select your server.
2
Select the Files tab. Select the domino\data folder.
3
Choose Tools➞Folder➞New.
4
In the Create New Folder dialog box, enter critical.
5
Click OK.
S t u d e n t G u i d e P a g e N o . 75
145
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
&UHDWLQJ'LUHFWRU\DQG'DWDEDVH/LQNV What is a link? Describe the basic purpose of links.
Why create links? Ask students for examples of how Worldwide Corporation might use: ■
■
Directory links Answer: They might put all PT (or BR) databases in a separate directory and create links for PT (or BR) groups only to that directory. Database links Answer: They might add a link to a database that has confidential information, such as customer information, to add an additional layer of security. Answer: They might move the Customer Support or Product Design database to a separate server to save space, since these databases are larger and have a higher degree of user activity. Answer: They might create a link to allow access to temporary users. For example, the company may hire contractors to do product design and create a link to allow restricted access to the Product Design database.
Ask students for examples of how they use links.
146
Deploying Domino Applications
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
&UHDWLQJ'LUHFWRU\DQG'DWDEDVH/LQNV Why use directory links? Directory links allow an administrator to point users and/or groups to specific directories on a server. This provides: ■
■
Increased security by permitting access to a directory to selected users or groups. Distribution of directories on servers to optimize disk space. Users can link to directories outside of the domino\data directory or on another server.
Why use database links? Database links allow users (including browser users) to connect to databases that are not in the domino\data directory. This provides distribution of databases on servers to optimize disk space. Users can link to databases outside of the domino\data directory or on another server. (Browser users cannot access databases on other servers, however.)
S t u d e n t G u i d e P a g e N o . 76
147
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
&UHDWLQJ'LUHFWRU\DQG'DWDEDVH/LQNV (continued)
Create links Allow approximately five minutes to complete this activity. Mention that normally you would create a directory link outside the server’s data directory structure. The purpose of this activity is to show how to create links.
Show link access Demonstrate how to see who has access to a link by right-clicking the mouse and choosing Update Link.
148
Deploying Domino Applications
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
&UHDWLQJ'LUHFWRU\DQG'DWDEDVH/LQNV (continued)
Create directory and database links Worldwide Corporation wants to allow access to the Product Catalog application to customers and resellers through database links. Follow these steps to create links to the Product Catalog database. Step
Action
1
Select your server.
2
Select the Files tab. Choose Tools➞Folder➞New Link.
3
In the Link name box, enter a name for the link as the link name should appear to the user. Enter Product Catalog. (Domino automatically appends a DIR extension to the file name for a directory link, and an NSF extension for a database link.)
4
Next to Link to a, select Database.
5
In the Path and filename to that folder or database box, enter the complete path to the directory or database to which the link points. For example, enter C:\LOTUS\DOMINO\DATA\CRITICAL\PRODCAT.NSF. (Directories must already exist. Domino will not create them.)
6
To restrict access to the directory to all users except customers and resellers, enter the names of specific users to whom you want to grant access in the Who should be able to access this link? box. Click the Person icon ino Directory.
7
to select customers and resellers from the Dom-
Click OK.
Note: Be sure to move the databases named in this activity to the directory specified in step 5.
S t u d e n t G u i d e P a g e N o . 77
149
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
6LJQLQJ'DWDEDVHV Describe signatures Describe electronic signatures. Mention that there are two kinds of signing: 1. A user signs a document to certify that they are the author of the document and no one has edited it. 2. An application developer signs a design element. The most important design element to sign is an agent. Agents are discussed later in this lesson.
ECLs described in the following section If students have questions on ECLs, address them in the next section.
150
Deploying Domino Applications
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
6LJQLQJ'DWDEDVHV What is an electronic signature? An electronic signature verifies that the person who originated the data is the author and that no one has altered the data. Electronic signatures are added to mail messages and fields or sections of documents.
Why sign databases? Administrators or application developers sign templates and databases: ■ ■
■
To ensure data integrity So the name associated with the signature can be added to the Administration Execution Control List (ECL) Allows any databases created from the template to inherit the signature
Note: The last person to save a design element, signs the element.
Best practice for signing databases Create a special ID to use for signing databases and distribute to selected individuals within the company.
S t u d e n t G u i d e P a g e N o . 78
151
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
6LJQLQJ'DWDEDVHV (continued)
Sign databases Allow approximately five minutes for this activity. Note that in the real world, the ID designated for signing database elements would not be stored in the Domino Directory, but would be in a secure location accessible by a limited number of people.
152
Deploying Domino Applications
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
6LJQLQJ'DWDEDVHV (continued)
Sign databases Worldwide Corporation signs all of their databases to prevent data tampering and to enforce consistent ECLs. Application developers submit the database to administrators, who then sign the database using a predefined ID. Follow these steps to sign databases. Step
Action
1
Select the People & Groups tab➞Domino Directories section➞World’s Address Book section➞People view.
2
Double-click to open the Person document for Worldwide Template.
3
Select the UserID file attachment. Right-click, and choose Detach from the pop-up menu.
4
Enter TEMPLATE.ID for the file name and click Detach.
5
Close the Person document.
6
Choose File➞Tools➞Switch ID. Select TEMPLATE.ID and click Open. Enter Lotusnotes for the password and click OK.
7
Select your server. Select the Files tab. Select your assigned database.
8
Choose Tools➞Database➞Sign.
9
Select All design documents to sign every design element.
10
Select Update existing signatures only (faster) to update only design elements that have been signed previously.
11
Click OK.
Result: A dialog box shows the number of databases processed and the number of errors that occurred. The Notes Log file (LOG.NSF) contains details of errors. 12
S t u d e n t G u i d e P a g e N o . 79
Choose File➞Tools➞Switch ID. Select your user ID and click Open. Enter Lotusnotes for the password, and click OK to switch back to your ID.
153
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
6LJQLQJ'DWDEDVHV (continued)
Show signed elements Using the Domino Designer, open one of the classroom databases to show the signature.
154
Deploying Domino Applications
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
6LJQLQJ'DWDEDVHV (continued)
Display signed design element Follow these steps to view the signed design elements. Step
Action
1
In the Domino Designer client, open the database.
2
Select Forms in the Navigator pane. Select a form, then double-click to open the form.
Result: The status bar displays the user ID used for signing, the date and time signing occurred, and the certifier associated with the name on the ID used for signing.
S t u d e n t G u i d e P a g e N o . 80
155
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
8SGDWLQJDQ(&/ Review ECLs Review ECL settings and provide examples of why settings may or may not be used. Updating and distributing ECLs is discussed in Lesson 7: Rolling Out Databases to Users. Mention that Administrators can create ECLs and select cannot change, but that the user has ultimate control over allowing an action even if it is prevented in the ECL. However, the user cannot modify the ECL.
156
Deploying Domino Applications
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
8SGDWLQJDQ(&/ What is an Execution Control List? An Execution Control List (ECL) controls: ■ ■
Workstation access to database elements. Other users’ access to the file system on a workstation.
The ECL limits the actions of formulas and scripts when they run on a workstation. For example, an ECL can prevent another person's code from running on a computer and damaging or erasing data. An administrator can allow users to change their own ECLs or can supply consistent ECLs to users. Before databases and templates are opened on a workstation, the ECL looks for the signature. The ECL then checks that signature against its settings to determine what level of access to grant.
Why enforce ECLs? Administrators can update the Administration ECL and distribute the changes to users’ workstation ECLs to provide consistency. The workstation setup program uses the Administration ECL in the Domino Directory to set up the workstation ECL. When users run Setup, the setup program copies the Administration ECL to their workstations, and the Administration ECL becomes the default workstation ECL. Several database templates include @functions that perform one or more of the actions controlled by ECLs. When using databases created with these templates, users may receive messages if their ECLs do not allow these actions.
S t u d e n t G u i d e P a g e N o . 81
157
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
1RWLI\LQJ8VHUVRI&KDQJHVWR(&/V Edit Administration ECL Use the procedure on the student page to demonstrate how to edit the existing default Administration ECL. Add an entry for Worldwide Template/World with all access privileges.
158
Deploying Domino Applications
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
1RWLI\LQJ8VHUVRI&KDQJHVWR(&/V Edit the Administration ECL Worldwide administrators want to make changes to the new and existing ECLs. Follow these steps to change the default Administration ECL. Step
Action
1
Select the Configuration tab➞Server section➞All server documents view.
2
Click inside the Server document.
3
Select Actions➞Edit Administration ECL.
4
Make the following changes to the ECL:
5
S t u d e n t G u i d e P a g e N o . 82
■
Add the user name from the ID used to sign databases with all access levels.
■
(Optional) Deselect Allow end user to modify.
Click OK.
159
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
1RWLI\LQJ8VHUVRI&KDQJHVWR(&/V (continued)
Distribute ECL Make sure the Domino Directory with the new Administration ECL has replicated throughout the domain before sending the memo.
160
Deploying Domino Applications
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
1RWLI\LQJ8VHUVRI&KDQJHVWR(&/V (continued)
Distribute ECLs The administrators need to distribute the new ECLs to users. Follow these steps to distribute the new ECLs by sending a memo containing a button that users can click to update their ECLs to reflect the change. Step
Action
1
Address a memo to users whose ECLs you want to update.
2
Choose Create➞Hotspot➞Button to add a button to the memo that executes this formula: @RefreshECL (“server”:“Domino Directory file name”;“”)
3
Describe the purpose of the memo and instruct users to click the button.
4
Click Send.
Result: When a user clicks the button in the memo, the Administration ECL is merged into the user's existing workstation ECL. Any entries in the Administration ECL are added to the user's ECL, but any entries the user has customized remain.
S t u d e n t G u i d e P a g e N o . 83
161
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
'HSOR\LQJ'DWDEDVH$JHQWV Review agents Briefly review what an agent is and how agents might be used with databases.
Review agent restrictions Describe the types of restrictions and how they might be used.
162
Deploying Domino Applications
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
'HSOR\LQJ'DWDEDVH$JHQWV What is an agent? Some databases may contain agents as part of their design. An agent is a program that performs a series of automated tasks according to a set schedule or at the request of a user. An agent consists of three components: ■ ■ ■
Trigger (when it acts) Search (what documents it acts on) Action (what it does)
Agent restrictions Following are the types of restrictions that can be placed on agents and how they are used. These restrictions coincide with fields in the Server document. Agent Restriction
Description
Run personal agents
Users and groups allowed to run personal agents on the server. Leave the field blank to let any user group with at least Reader access with the Create personal agents privilege in the ACL for a database that resides on this server run personal agents.
Run restricted LotusScript/Java agents
Users and groups allowed to run agents created with a specific set of LotusScript and Java features. Leave the field blank to deny access to all users and groups.
Run unrestricted LotusScript/Java agents
Names of users and groups allowed to run agents created with all LotusScript and Java features. Leave the field blank to deny access to all users and groups.
Agent guidelines Following are guidelines on running agents and setting agent restrictions. ■
■
Run agents manually to monitor execution time and server performance for complicated agents before setting them to run on schedule. Create groups for each agent restriction and add the group name to the field.
S t u d e n t G u i d e P a g e N o . 84
163
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
'HSOR\LQJ'DWDEDVH$JHQWV (continued)
(Optional) Show how to sign an agent Show the procedure for signing an agent.
Enable agent restrictions Allow five minutes for this activity.
164
Deploying Domino Applications
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
'HSOR\LQJ'DWDEDVH$JHQWV (continued)
Sign agents Agents should be signed to ensure accuracy and integrity. Follow these steps to sign an agent. Step
Action
1
Select the Files tab.
2
Select the databases to sign.
3
Choose Tools➞Database➞Sign.
4
Select All documents of type. Select Agent.
5
Click OK.
Allow access to run LotusScript/Java agents Follow these steps to enable access to run LotusScript/Java agents. Step
Action
1
Edit the Server document for your server.
2
Select the Security tab. Scroll down to the Agent Restrictions section.
3
Complete the following fields: ■
Run personal agents: Blank
■
Run restricted LotusScript/Java Agents: */World or PTAll, BRAll
■
Run unrestricted LotusScript/Java Agents: GlobalAdmins, GlobalDesigners
4
Select the Server Tasks tab➞Agent Manager tab.
5
Click the Max concurrent agents field label to see a description of the field. Leave the default.
6
Click the Max LotusScript/Java execution time field label to see a description of the field. Leave the default.
7
Click Save and Close.
8
Restart the server.
S t u d e n t G u i d e P a g e N o . 85
165
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
5HSOLFDWLRQ*XLGHOLQHV Review when and why to create replicas Mention that the default in the Server document is that no one can create replicas.
166
Deploying Domino Applications
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
5HSOLFDWLRQ*XLGHOLQHV Deciding when to create replicas Create replicas on servers only when necessary. The more replicas, the greater the demand on server and network resources and the greater the need for additional maintenance. Create a replica of a database to: ■ ■ ■ ■ ■ ■
■
Improve performance of a heavily used database. Distribute network traffic. Keep a test database separate from a production version of the database. Keep a database available even if one server goes down. Make a database available to users in remote locations. Provide a replica containing only a subset of information that is relevant to a particular work group. Set up Domino system administration — for example, Domino Directory, Administration Requests database, and other critical system databases.
Best practices for replication Follow these guidelines for replication. ■
■
■
■
■
Create a backup database from which to restore information if data becomes corrupted. Since corrupted data often replicates, use this only as a secondary backup method. To prevent unnecessary proliferation of replicas, assign Create Replica databases access to only a few administrators. Then have users and application developers send their requests for new replicas to those administrators. Set up all appropriate documents in the Domino Directory, including a Mail-In Database document if the database is designed to receive mail. Ensure that all databases that rely on one another are copied simultaneously and have the correct access levels. Make sure that users and other servers are listed in the server's Access Control List.
S t u d e n t G u i d e P a g e N o . 86
167
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
&OXVWHU5HSOLFDWLRQ*XLGHOLQHV Describe cluster replication Point out the differences between standard Domino and cluster replication and important points about cluster replication.
168
Deploying Domino Applications
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
&OXVWHU5HSOLFDWLRQ*XLGHOLQHV How cluster replication works Replication in clusters is event-driven. The Cluster Replicator task (CLREPL) constantly synchronizes data among replicas in a cluster. Whenever a change occurs to a database in the cluster, the Cluster Replicator immediately pushes the change to the other replicas in the cluster. Therefore, all replicas are always identical because each change immediately replicates to other servers in the cluster. However, the source and destination server must be available for replication to complete. If the destination server is unavailable, the change is stored in memory on the source server until the destination server becomes available. If the source server shuts down before replication completes, the changes in memory are lost, and require manual or scheduled replication to push the changes from the replica on the source to the destination server. (Lotus recommends performing manual replication if a cluster member is restarted.)
Best practices for cluster replication To ensure reliability for replicas in a cluster: ■
■
■ ■ ■
■
Force immediate replication with all cluster members using the REPLICA task when restarting a clustered server. Schedule replication between clustered servers on a regular basis, for example, every hour. View the replication log to see what databases are not synchronized and why. Create a replication monitor. Use standard replication to limit replication of database elements. The Cluster Replicator does not enforce advanced settings, such as disabling replication of database elements. Create a Connection document using the cluster name as the destination.
S t u d e n t G u i d e P a g e N o . 87
169
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
$GPLQLVWUDWLRQ3URFHVV Describe the Administration Process Describe the Administration Process and how it is used in creating replicas.
170
Deploying Domino Applications
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
$GPLQLVWUDWLRQ3URFHVV What is the Administration Process? The Administration Process is a program that automates routine administrative tasks. The Administration Process automates these tasks: ■
■ ■
Name management tasks, such as rename person, rename group, delete person, delete group, delete server name, recertify users, and store Internet certificate. Mail file management tasks, such as delete a Mail file and move a Mail file. Server document management tasks, such as store CPU count, platform, and place network protocol information in Server document.
Components of the Administration Process Maintaining the Administration Process requires monitoring key components. The following table lists the components of the Administration Process. Component
Description
Administration Process task
Posts and responds to requests in the Administration Requests database. Replicas of the Administration Requests database distribute requests made on one server to other servers in the domain or distributes mail requests to servers in other domains.
Administration server
Server responsible for completing the Administration Process request.
Administration Requests database (ADMIN4.NSF)
Every server in the domain stores a replica of the Administration Requests database.
Certification Log (CERTLOG.NSF)
The Administration Process requires the database to perform name changes and recertifications.
If the Administration Requests database does not exist, the server creates a replica stub of the Administration Requests database and waits for it to be initialized from the Administration server in the domain.
This log contains a permanent record of how servers and users are registered, including information about the certifier ID. The Certification Log also contains messages that describe the results of recertification requests that the Administration Process is processing.
S t u d e n t G u i d e P a g e N o . 88
171
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
&UHDWLQJ5HSOLFDV What access is required? Ask students what access is needed to create replicas: What access do you, as administrators, need? Answer:
■
■ ■
Create Replica access in the Server document of the destination server(s). At least Reader access in the ACL of the databases on the source server.
What access does the source server need? Answer: Create Replica access in the Server document of the destination server(s).
■
What access does the destination server need? Answer: At least Reader access in the ACL of the source replica.
■
Is there anything else that needs to be in place? Answer: If using the Administration Process, make sure it is running on both the destination and source servers. ■
Check access Mention that if a security setting is changed, the server must be restarted. Allow approximately five minutes to complete this activity.
172
Deploying Domino Applications
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
&UHDWLQJ5HSOLFDV How to create replicas Create replicas in one of the following ways: If You...
Then...
Do not have access to Domino Administrator
Create a single replica manually
Want to adjust replication and other settings during creation of replica
Create a single replica manually
Want to create multiple replicas on multiple servers
Create multiple replicas using the Administration Process
Replica vs. replica stub Until a replica is populated, it is known as a replica stub. Replica stubs can be populated during creation or by using a replication schedule.
Ensure proper access for creating replicas Follow these steps to set appropriate access to databases and servers. Step
Action
1
Select your server.
2
Select the Configuration tab➞Server view➞Current Server Document.
3
Select the Security tab. Scroll down to Server Access section➞Create replica databases field.
Result: The field should contain PTAdmins or BRAdmins and LocalDomainServers. 4
Close the Current Server document.
5
Select WorldHub/World to administer.
6
Select the Files tab. Select your assigned database.
7
Choose File➞Database➞Access Control.
Result: The ACL should contain LocalDomainServers with Editor access and HubServers with Manager access.
S t u d e n t G u i d e P a g e N o . 89
173
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
&UHDWLQJ5HSOLFDV (continued)
Create replicas using the Administration Process Demonstrate how to create replicas of two or more databases on BRHub/SVR/ World.
(Optional) Show replica stub Show the replica stub database title on the Files tab.
Use all databases for the following activity For this activity, have students create replicas of all databases that reside on their server.
Review where to create replicas Allow approximately five minutes to complete this activity. Students should create replicas of all the databases that reside on their server from WorldHub. Have students at hub servers perform the replication first from WorldHub. Then have other students perform replication from PTHub and BRHub. This way the replication history will show a linear path. Mention that replicas can also be created by choosing: Tools➞Database➞Create Replica
Display Identify Servers for Databases slide Display Slide 5: Identify Servers for Databases so that students can see where to create replicas.
174
Deploying Domino Applications
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
&UHDWLQJ5HSOLFDV (continued)
Create replicas using the Administration Process Follow these steps to create replicas of databases using the Administration Process. Step
Action
1
Select a server to administer.
2
Select the Files tab.
3
Select two or more databases.
4
Drag and drop the selected databases to the destination server in the server pane.
5
Select Create Replica in the dialog box, enter a directory, and click OK.
Create replicas manually Databases were identified for specific servers in Module A: Determining Deployment Strategy. Follow these steps to create replicas of all databases that reside on your server. Replicas should be created from WorldHub to PTHub and BRHub and then from PTHub and BRHub to the Apps servers. Step
Action
1
Open the database on WorldHub or another Hub server. (The instructor will tell you which server from which to create the replica.)
2
Choose File➞Replication➞New Replica.
3
Select your server as the destination server (server on which to place the replica).
4
Keep the default file name and title for the new replica. Place critical applications in the domino\data\critical directory. Place non-critical applications in the domino\data directory.
5
Select Create: Immediately, to create a replica stub that is populated when the destination server next replicates with the source server.
6
Select Copy Access Control List to copy the ACL from the original to the new replica. Click OK.
S t u d e n t G u i d e P a g e N o . 90
175
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
5HSOLFDWLRQ6HWWLQJV Focus on administrative settings Review replication settings. Focus on the following settings: ■ ■ ■
Remove documents not modified in the last x days Only replicate incoming documents saved or modified after: date Scheduled replication priority
These settings are most applicable to the administrator.
Open replication settings Open replication settings to show where each setting is as you describe the settings.
Discuss the impact of replication settings Ask students: What is the impact if the Remove documents not modified in the last 90 days setting is not checked? Answer: The server will remove deletion stubs that are 90 days or more old. ■
What is the impact if the Remove documents not modified in the last 90 days setting is checked? Answer: The server will remove deletion stubs that are 90 days or more old and remove other documents that are at least 90 days old. ■
How might Worldwide use Scheduled replication priority? Answer: This setting can be used as an alternative to the domino\data\critical directory. Administrators can create different Connection documents for each priority (low, medium, and high), and schedule replication at different intervals. For example, low=10 hours, medium=6 hours, and high=2 hours. ■
176
Deploying Domino Applications
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
5HSOLFDWLRQ6HWWLQJV Settings that control replication The following table describes the replication settings and how they affect replication. Setting
Controls
Remove documents not modified in the last x days (default= 90 days).
When Domino purges document deletion stubs and, optionally, unmodified documents.
Only replicate incoming documents saved or modified after: date
The cutoff date, so that a replica only receives documents created or modified since the date. Which documents are scanned during the first replication after clearing the replication history.
Receive summary and 40KB of rich text only
The size of documents that a replica receives.
Replicate a subset of documents
Which documents a replica receives.
Replicate
Which non-document elements this replica receives.
Do not send deletions made in this replica to other replicas
Whether a replica can send document deletions to other replicas.
Do not send changes in database title & catalog info to other replicas
Whether a replica can send changes to the database title and Database Catalog categories to other replicas.
Do not send changes in local security property to other replicas
Whether a replica can send changes to the Encryption database property (in the Basics tab of the Database properties box) to other replicas.
Temporarily disable replication
Whether a replica can replicate.
Scheduled replication priority
The replication priority of a database used in Connection documents for scheduling replication. Note: This setting can be used as an alternative to the domino\data\critical directory. Administrators can create different Connection documents for each priority (low, medium, and high), and schedule replication at different intervals. For example, low=10 hours, medium=6 hours, and high=2 hours.
CD-ROM publishing date
S t u d e n t G u i d e P a g e N o . 91
The publishing date for a database on a CD-ROM.
177
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
5HSOLFDWLRQ6HWWLQJV (continued)
Review purge interval Review purge interval and deletion stubs.
Use time line to describe purge interval Draw a time line for 120 days. Mark increments of 0, 30, 60, 90, and 120. If a document is deleted on day 1, then the deletion stub is not removed until day 120 because if the purge interval is set at 90 days, deletion stubs are ready for removal at day 90. But the purge interval checks for stubs that require removal at 1/3 of its value, which in this case is 30 days. So, it will require 30 more days before it is removed.
178
Deploying Domino Applications
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
5HSOLFDWLRQ6HWWLQJV (continued)
Purge interval and deletion stubs The purge interval controls when Domino purges deletions stubs from a database. Deletion stubs are markers that remain from deleted documents so that Domino knows to delete documents in other replicas of the database. Domino regularly removes deletion stubs that are at least as old as the value specified in the Remove Documents Not Modified In The Last__Days setting. It checks for deletion stubs that require removal at 1/3 of this value. Note: When deleting documents, be sure to coordinate with the owner or manager of the database.
Replication and purge intervals When setting the purge interval, check that it coincides with replication schedules. Shortening the purge interval may result in deleted documents being replicated back to the replica. Replication should occur more frequently than the purge interval. For example, if the purge interval is set to 30 days and replication occurs once every two weeks, then deletion stubs will be replicated before they are removed.
S t u d e n t G u i d e P a g e N o . 92
179
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
6HW5HSOLFDWLRQ6HWWLQJV Review Worldwide’s settings Ask the students: Why is Remove documents not modified in the last 90 days enabled for only the Product Ideas and Customer Service databases? Answer: These databases have documents that do not need to remain in the database for any reason. What should administrators do prior to every 30 days? Answer: Archive old documents.
Use two databases for the following activity For this activity, have students customize replicas of the Customer Service and Product Ideas databases that reside on their server.
Some students will not perform step 4 Allow approximately five minutes for this activity. Step 4: The PTApps02 server team does not have the Customer Service or Product ideas databases on their server. Have the PTApps02 server team perform the activity on the databases on WorldHub.
180
Deploying Domino Applications
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
6HW5HSOLFDWLRQ6HWWLQJV Worldwide’s replication settings Worldwide has decided to use the following replication settings: Setting
For
Enable Remove documents not modified in the last 90 days
■
Product Ideas
■
Customer Service
Do not enable Remove documents not modified in the last 90 days
■
Product Design
■
Customer Information
■
Policies and Procedures
■
Product Catalog
■
Price List
■
Sales Orders
Customize replication Follow these steps to set replication settings for the replicas just created. Step
Action
1
Select your server.
2
Select the Files tab. Open your assigned database(s).
3
Choose File➞Replication➞Settings.
4
Enable Remove documents not modified in the last 90 days for the Product Ideas and Customer Service databases.
5
Click Other.
6
For Scheduled replication priority, select Low for Product Ideas and Policies and Procedures, and High for the following databases: ■
Customer Service
■
Customer Information
■
Product Catalog
■
Price List
■
Sales Orders
7
Click Advanced.
8
Check Forms, Views, Agents, Access control list, Deletions.
9
Click OK.
S t u d e n t G u i d e P a g e N o . 93
181
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
6FKHGXOLQJ5HSOLFDWLRQ Review Connection documents and server groups Briefly review Connection documents and their purpose. Students should be familiar with Connection documents from the Implementing a Domino Infrastructure course. Review the concept of server groups, specifically the groups created in Module A: Determining Deployment Strategy. These groups will be used when setting up replication.
182
Deploying Domino Applications
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
6FKHGXOLQJ5HSOLFDWLRQ What are Connection documents? Connection documents: ■ ■ ■ ■ ■
Connect one or more servers for the purposes of mail routing and replication. Identify how and when information is exchanged during replication. Allow scheduling of replication between specific servers at specific times. Should be kept to a minimum to reduce network traffic. Reside in the Domino directory.
Replication schedule considerations Consider the following when creating replication schedules: ■ ■
■ ■ ■
Verify that Server documents have access to other servers to replicate. Cluster considerations, such as: ■ Force immediate replication with all cluster members using the REPLICA task when restarting a cluster. ■ Schedule replication between cluster servers on a regular basis, for example, every hour. Remember time zone differences for remote offices. Ensure the proper replication interval. Do not overlap Connection documents (Server A should not call Server B if Server B is calling Server A at the same time, especially when using Pull-Pull replication).
S t u d e n t G u i d e P a g e N o . 94
183
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
6FKHGXOLQJ5HSOLFDWLRQ (continued)
Reference best practices Best practices should have been previously discussed and are included for reference.
184
Deploying Domino Applications
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
6FKHGXOLQJ5HSOLFDWLRQ (continued)
Best practices for replication scheduling Following are guidelines for scheduling replication: ■
■
■
■
■
■
Schedule the Domino Directory and other administrative databases, such as ADMIN4.NSF, to replicate regularly throughout the day (guideline: every hour). Schedule all other databases to replicate at a less frequent time interval, such as every six hours. Place critical applications in a separate subdirectory under the domino\data directory. Then, create a Connection document specifying this subdirectory to replicate at a more frequent interval (guideline: every two hours). Use scheduling priorities of low, medium, and high to set scheduling of replication based on importance of databases. Have Hub servers initiate replication to provide centralized logging and free up spoke server resources. Use server groups. Using server groups facilitates administration by: ■ Reducing the number of Connection documents required to replicate with more than one server. ■ Simplifying the process of including a new server in the replication topology.
S t u d e n t G u i d e P a g e N o . 95
185
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
6FKHGXOLQJ5HSOLFDWLRQ (continued)
Create a Connection document Create a sample Connection document. Briefly go over the Routing/Replication and Scheduling fields. Students will create the six Connection documents necessary for replication in the classroom in the exercise at the end of this lesson.
186
Deploying Domino Applications
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
6FKHGXOLQJ5HSOLFDWLRQ (continued)
Create a Connection document Follow these steps to create a Connection document. Step
Action
1
Select the Configuration tab➞Server section➞Connections view.
2
Click Add Connection.
3
Select Local Area Network in the Connection type field.
4
On the Basics tab, complete the fields shown in the following figure:
5
Select the Routing/Replication tab and complete these fields:
6
Select the Schedule tab and complete these fields:
7
Click Save and Close.
S t u d e n t G u i d e P a g e N o . 96
187
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
6HW8S5HSOLFDWLRQ6FKHGXOHVIRU 'DWDEDVHV([HUFLVH Show Worldwide’s Replication Strategy slide Display Slide 7: Worldwide’s Replication Strategy so students can see where databases will replicate.
Determine Connection documents Allow 10 minutes to complete this exercise. There are six Connection documents: ■ ■ ■ ■ ■ ■
WorldHub to Hubservers (120 minutes domino\data\critical) WorldHub to Hubservers (360 minutes domino\data) PTHub to PTAppsServers (120 minutes domino\data\critical) PTHub to PTAppsServers (360 minutes domino\data) BRHub to BRAppsServers (120 minutes domino\data\critical) BRHub to BRAppsServers (360 minutes domino\data)
Create Connection documents Allow 10 minutes to complete this exercise. If there are six server teams, assign each team a Connection document to create. If less, assign two or more to one team. Remind students to use: ■ ■
188
Server groups when creating Connection documents. Online Help to determine field entries.
Deploying Domino Applications
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
6HW8S5HSOLFDWLRQ6FKHGXOHVIRU 'DWDEDVHV([HUFLVH Determine Connection documents Use the information from Worldwide’s Replication Strategy in Module A: Determining Deployment Strategy to identify Connection documents. Connection from
Connection to
To Directory
Interval
Create Connection documents Create the Connection document assigned to you by the instructor. Set replication schedules according to the table above.
S t u d e n t G u i d e P a g e N o . 97
189
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
&RS\LQJ'DWDEDVHVWR6HUYHUV Why copy databases? In most situations, administrators will create replicas rather than copies of databases. Ask students for examples of why they might copy a database versus creating a replica. Possible answers include: ■ ■
■ ■ ■
Moving databases from a test environment into a production environment Moving databases to server so that it is accessible by a new group of users (if it is no longer needed by the original user group) Troubleshooting purposes New installation Moving a databases from one server to another to improve performance
Copy a database Demonstrate how to copy a database. (Students will not copy databases in this class; they will create replicas.) Copy the Product Ideas database and the Product Catalog database to BRHub/ SVR/World. Copy Ideas to domino\data and Product Catalog to domino\data\critical. Show the replica IDs in the Product Catalog.
190
Deploying Domino Applications
,QVWUXFWRU Lesson 6 ■ Rolling Out Databases to Servers
&RS\LQJ'DWDEDVHVWR6HUYHUV Copying considerations ■
■
Determine whether the application developer used replica IDs in any database formulas. If so, the formulas will not work if the database is copied because the replica ID will change. Copying a database is not the same as creating a replica. A copy of a database contains a different replica ID than the original. In order to replicate, databases must have the same replica ID.
Copy databases Follow these steps to copy databases to servers. Step 1
Action To include the database in the Open Database dialog box, before copying: a. b. c. d.
Select the Database icon from Bookmarks. Choose File➞Database➞Properties. Select the Design tab. Select Show in 'Open Database' dialog.
2
Choose File➞Database➞New Copy.
3
Next to Server, click the arrow to display a list of servers. Then, select the server on which you want to place the copy.
4
Next to Title, enter a title for the database. The Database icon and the Open Database dialog box display this title.
5
Next to File Name, enter the path and file name of the database. Limit the file name to eight characters plus the NSF extension.
6
Select Database design and documents to copy the database design and all documents.
7
Select or deselect Copy: Access Control List.
8
To verify that database appears in the Open Database dialog box after copying: Choose File➞Database➞Open.
S t u d e n t G u i d e P a g e N o . 98
191
,QVWUXFWRU Lesson 7 ■ Rolling Out Databases to Users
5ROOLQJ2XW'DWDEDVHVWR 8VHUV
Review objectives This lesson focuses on distributing databases to workstations using Setup Profiles.
192
Deploying Domino Applications
,QVWUXFWRU Lesson 7 ■ Rolling Out Databases to Users
5ROOLQJ2XW'DWDEDVHVWR 8VHUV
Adding databases to workstations To enable users access to databases from their workspaces, database links are created in the Setup Profile. This allows automatic distribution and update of databases when users connect to the server. Encryption keys and ECLs are also distributed to users to provide additional access to database elements. Some databases include agents. Administrators must enable appropriate access to agents to ensure operability of the database.
Objectives After completing this lesson, you should be able to: ■ ■
Add databases to users’ workspaces. Distribute encryption keys.
S t u d e n t G u i d e P a g e N o . 99
193
,QVWUXFWRU Lesson 7 ■ Rolling Out Databases to Users
'LVWULEXWLQJ'DWDEDVHVWR8VHUV Describe how to add databases to workstations Describe how Setup Profiles are used to distribute databases. Mention the considerations for mobile users, such as sales representatives.
194
Deploying Domino Applications
,QVWUXFWRU Lesson 7 ■ Rolling Out Databases to Users
'LVWULEXWLQJ'DWDEDVHVWR8VHUV Adding databases to workstations To allow users access to databases from their workstations, create database links for: ■ ■
Bookmarks Replicas
Adding database links and replicas to the users’ Setup Profiles automatically distributes the databases to each user’s workspace. Users receive updates when they authenticate with any server in the domain whose Domino Directory contains the Setup Profile.
Multiple database considerations Be sure to include all databases used by an application in the Setup Profile.
Remote user considerations Following are considerations when distributing databases to remote users. ■
■
Mobile users can schedule replication using a Location document and the Replicator Workspace page to replicate with the server to receive database updates. Mobile users should encrypt databases locally.
S t u d e n t G u i d e P a g e N o . 100
195
,QVWUXFWRU Lesson 7 ■ Rolling Out Databases to Users
'LVWULEXWLQJ'DWDEDVHVWR8VHUV (continued)
Assign profiles to teams Allow five minutes for this activity. Point out the table where profiles are assigned to server teams so students know which profile they should use for the activity. Tell students that if a mobile directory catalog existed, they could also create a link to it.
Display Identify Servers for Databases slide Display Slide 5: Identify Servers for Databases and, if necessary, Slide 4: User Organizational Chart. Have students use the diagram(s) to determine what databases go with which profiles.
196
Deploying Domino Applications
,QVWUXFWRU Lesson 7 ■ Rolling Out Databases to Users
'LVWULEXWLQJ'DWDEDVHVWR8VHUV (continued)
Worldwide Setup Profiles Worldwide administrators have created the following Setup Profiles to register users. Use the profile assigned to your server team to perform the activity. Setup Profile
Server Team
SalesProfile
PTApps01
SupportProfile
PTApps02
DistributionProfile
PTHub
MarketingProfile
BRApps01
HRProfile
BRApps02
DevelopmentProfile
BRHub
Edit Setup Profiles Follow these steps to add the appropriate databases to your team’s existing Setup Profile. (Use the Identify Servers for Databases Exercise solution from Module A: Determining Deployment Strategy to determine databases for profiles.) Step
Action
1
Select the People & Groups tab➞Domino Directories section➞World’s Address Book section➞Setup Profiles view.
2
Select your Setup Profile, and click Edit Setup Profile.
3
Select the Databases tab and complete these fields: ■
Default databases added to bookmarks
■
Create As new replicas on user's machine
To create a database link: a. b. c. d. 4
S t u d e n t G u i d e P a g e N o . 101
Open the database. Choose Edit➞Copy As Link➞Database Link. Place the cursor in the desired field and choose Edit➞Paste. Optionally, add text to describe the link.
Click Save and Close.
197
,QVWUXFWRU Lesson 7 ■ Rolling Out Databases to Users
'LVWULEXWLQJ(QFU\SWLRQ.H\V Describe encryption keys Describe encryption keys and how they are used.
198
Deploying Domino Applications
,QVWUXFWRU Lesson 7 ■ Rolling Out Databases to Users
'LVWULEXWLQJ(QFU\SWLRQ.H\V Encryption keys Encryption keys are created by application developers to allow selected access to data in particular fields of a document. For example, in a payroll application, all employees are allowed to view public data, such as name, address, job title. However, only the payroll department is allowed access to employee salaries. In this case, the application developer encrypts the salaries field and generates an encryption key. The encryption key is given only to payroll department employees. Note: Administrators do not always have access to encryption keys. In some companies, such as government agencies or banks, the database owner may be responsible for distribution of encryption keys.
How to distribute encryption keys If permitted, upon receiving encryption keys from an application developer, distribute the key to the appropriate users by either: ■ ■
Mailing the key Exporting the key to a text file
Prior to distributing, merge the encryption key with your user ID.
Best practices for encryption keys Administrators may not decide who receives encryption keys, but will most likely distribute the keys. Therefore, administrators should: ■ ■
Create a policy for backup and management of encryption keys. Create a “dummy” ID that includes all encryption keys.
S t u d e n t G u i d e P a g e N o . 102
199
,QVWUXFWRU Lesson 7 ■ Rolling Out Databases to Users
'LVWULEXWLQJ(QFU\SWLRQ.H\V (continued)
Before performing demo An encryption key should have been created as part of classroom setup. If you did not use the files provided as part of classroom setup and did not create an encryption key as part of classroom setup, you will not be able to perform these demos. Create an encryption key and then perform the demos or skip the demos.
Show merging and distributing encryption key Use the procedures on the student page to demonstrate how to merge and distribute encryption keys. Since Doctor Notes’ ID contains the encryption key, consider using the following sequence: 1. Acting as the application developer, Doctor Notes mails the encryption key to PTAdmins and BRAdmins. 2. Students view the e-mail and merge the encryption key into their own ID. 3. Students distribute the encryption key via e-mail to PTAll and BRAll.
200
Deploying Domino Applications
,QVWUXFWRU Lesson 7 ■ Rolling Out Databases to Users
'LVWULEXWLQJ(QFU\SWLRQ.H\V (continued)
Merge encryption keys Worldwide administrators have received encryption keys to distribute to the finance department. The administrators received the keys via an e-mail from the application developer. Follow these steps to merge encryption keys. Step
Action
1
Open the mail message from the application developer containing the attached encryption key.
2
Choose Actions➞Accept Encryption.
3
Enter the password, and click OK.
4
Type any comments about the encryption key, for example, the name of the database and field in which the encryption key is used.
5
Click Accept.
Distribute encryption keys The Worldwide administrators plan to distribute the keys via e-mail. Follow these steps to distribute encryption keys. Step
Action
1
Choose File➞Tools➞User ID.
2
Enter the Notes password, and click OK.
3
Click Encryption.
4
In the Encryption keys box, select the encryption key to distribute.
5
Click Mail.
6
Complete the To:, cc:, and Subject: fields of the message heading in the Mail Address Encryption Key dialog box.
7
Click Send.
8
Click Yes or No when you see the message Should recipients be allowed to send this key to other users? Then, click Done.
S t u d e n t G u i d e P a g e N o . 103
201
,QVWUXFWRU Lesson 7 ■ Rolling Out Databases to Users
202
Deploying Domino Applications
' 7URXEOHVKRRWLQJ $SSOLFDWLRQ'HSOR\PHQW Lesson 8 Identifying Deployment Problems Lesson 9 Solving Deployment Problems
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
,GHQWLI\LQJ'HSOR\PHQW 3UREOHPV
Explain the purpose of the lesson Although the application developer is generally responsible for maintaining the database, administrators are responsible for server-related issues that affect the database. This lesson discusses the tools available to the administrator to detect and troubleshoot server-related issues.
Classroom setup considerations To complete the demonstrations in this module, log replication events and the topology map must be available on WorldHub/World; these should be enabled or left on during initial classroom setup.
Present the objectives Present the objectives listed on the Student Guide page.
204
Deploying Domino Applications
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
,GHQWLI\LQJ'HSOR\PHQW 3UREOHPV
Overview To ensure optimum application performance and reliability, monitor and maintain databases once they have been deployed. This includes troubleshooting deployment oversights, and detecting and solving problems as they arise. This lesson describes how to use Domino Administrator to monitor database replication issues. It also discusses how to solve common database problems, such as server access and database usage issues.
Objectives After completing this lesson, you should be able to: ■ ■ ■
Monitor replication. Monitor database performance. Monitor database activity.
S t u d e n t G u i d e P a g e N o . 106
205
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
,GHQWLI\LQJ5HSOLFDWLRQ3UREOHPV If necessary, briefly revisit replication considerations Quickly review the key replication points in the bulleted list below to provide context for the material on the student page. Replication between databases on different servers requires: ■ ■ ■
A replica ID, which is automatically created for a database Appropriately configured database and server ACLs. A Connection document for each pair of servers specifying replication details, such as: ■ The replication schedule to choose call times, days, and repeat intervals, and ■ Replication settings to choose replication type
Note: Cluster replication is event-driven; replicas in a cluster are synchronized as soon as a change to a replica takes place.
206
Deploying Domino Applications
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
,GHQWLI\LQJ5HSOLFDWLRQ3UREOHPV Replication factors that affect data transfer Several factors affect whether and how data transfer occurs. The following table summarizes some of the replication factors affecting Domino databases. Consider these factors when setting up or troubleshooting replication issues: Factors
Description
Possible Replication Problems
Replica ID
The unique ID given to a database at the time the database is created. Replicas share the same replica ID.
Databases are not replicas (they do not share the same replica ID).
Replica ID cache
The list of databases eligible for replication.
The database is not listed in the replica ID cache if replication is temporarily disabled for the database, or the database resides outside the normal data directory structure and there is no database or directory link.
Replication schedule
The Connection documents determining the time, type, and databases to replicate.
Connection documents contain inaccurate server names and dates/times to replicate databases.
Replication type
The direction in which data is replicated.
Incorrect replication type for topology, or the replication type is Pull but there is no Connection document for the other server to push.
Replication history
List of dates/times when two resources successfully replicated.
Resource date and time is incorrect. Clearing history forces a complete document scan. Note: This dramatically increases replication time.
S t u d e n t G u i d e P a g e N o . 107
207
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
,GHQWLI\LQJ5HSOLFDWLRQ3UREOHPV (continued)
Note who is responsible for security settings Note who may be responsible for the security settings: the application developer and/or the system administrator.
208
Deploying Domino Applications
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
,GHQWLI\LQJ5HSOLFDWLRQ3UREOHPV (continued)
Security factors that affect replication In addition to the replication factors that affect database replication, the following access considerations also affect replication. Consider these factors when setting up or troubleshooting replication issues: Factors
Description
Possible Replication Problems
Authentication
The two Notes/Domino resources must compare certificates to verify that they share a certificate in common.
Servers are unable to authenticate because they do not share a certificate in common.
Server access list
List of people, servers, and groups allowed to access the server.
Resource not allowed access to the server.
Access Control List
Access level, roles, or privileges assigned to groups, users, and servers in the database ACL that determine access to documents.
Insufficient access level, and/or role assignments for servers can prevent document replication.
Document Read Access and Author Access
List of groups, users, and servers allowed to read and edit documents.
Insufficient document read/author access for servers can prevent document replication.
S t u d e n t G u i d e P a g e N o . 108
209
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
,GHQWLI\LQJ5HSOLFDWLRQ3UREOHPV (continued)
Show students how to set the cluster failover in R5 MailClusterFailover lets the mail router fail over to other cluster members on transient delivery failures. Follow these steps to configure cluster failover in R5. Step
210
Action
1
Select the Configuration tab➞Server section➞Configurations view.
2
Choose the appropriate server and click Edit Configuration.
3
Select the Router/SMTP tab➞ Advanced tab➞Controls tab.
4
In the Additional Controls section, choose Cluster failover and choose enabled for last hop only.
Deploying Domino Applications
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
,GHQWLI\LQJ5HSOLFDWLRQ3UREOHPV (continued)
Cluster replication considerations The Cluster Replicator task synchronizes data among replicas in a cluster. Use the following table to help troubleshoot common cluster replication issues. Problem
Possible Cause/Solution
Database is not replicating.
CLDBDIR was not replicated between servers in the cluster.
A server in a cluster does not contain a replica.
When a server is added to a cluster, Domino does not automatically create replicas on cluster members.
Insufficient access to maintain replicas in a cluster.
Servers in a cluster require equal access to data (preferably Manager access).
Mail delivery is not occurring on clustered mail servers when a server is down.
Edit the NOTES.INI file, and add the parameter for cluster failover as follows:
Replication among cluster servers is incomplete or out of sync.
The source or destination server is unavailable; changes stored in memory are lost if the source server shuts down before replication is complete.
S t u d e n t G u i d e P a g e N o . 109
MailClusterFailover=1
211
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
5HSOLFDWLRQ0RQLWRULQJ7RROV Show students the Statistics & Events view Note that the monitors for replication and database ACL are enabled by default.
Explain how students can use the tools Review each of the tools in the table on the student page. Explain how each tool is best used. For example, monitors can be configured to email administrators about the occurrence of a specific problem or condition; in contrast, the replication topology map provides an at-a-glance indication of each server’s current status.
212
Deploying Domino Applications
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
5HSOLFDWLRQ0RQLWRULQJ7RROV Monitors, logs, and more Domino provides several tools for use in monitoring and troubleshooting replication problems. The following table describes the function of some of these tools. Tool Replication topology maps
Function Displays the replication topology and identifies connections between servers. Use it as a first, graphical view of what might be wrong between servers.
Replication Monitor
Notifies the administrator when database replication does not occur within a specific time period.
Database ACL Monitor
Reports all ACL changes, including changes made by replication.
Replication and Save conflicts
A response document indicating that there are two or more versions of the same document with differing information.
Use it to identify access problems that prevent data transfer.
They are indicative that a problem exists. Replication History
Records each successful replication session for a database.
Replication events in LOG.NSF
Shows details about replication events between servers.
Use it to tell at a glance whether or not replication is occurring.
Helps identify the problems the servers are having during the replication process.
Note: In addition to using the tools in the table above, administrators can use the server console to force server-to-server replication, which is useful for testing purposes.
S t u d e n t G u i d e P a g e N o . 110
213
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
/RJJLQJ5HSOLFDWLRQ7UDQVDFWLRQV Show students replication events in the log file The log file on WorldHub should have replication transactions, per the classroom setup. Follow these steps to view the log file. Step
214
Action
1
Select the Server tab➝Analysis tab➝Notes Log section.
2
Look for replication problems in the following views: ■
Miscellaneous events
■
Phone calls
■
Replication events
Deploying Domino Applications
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
/RJJLQJ5HSOLFDWLRQ7UDQVDFWLRQV Logging replication events Every Domino server automatically creates a log file (LOG.NSF) at first server startup. The log file reports all server activity, and provides detailed information about databases and users on the server. Administrators can configure the log file to record replication events. The information is useful in determining the cause of replication failure between specific servers, and in verifying the number of replication updates.
The log replication values The table below contains a list of all of the replication log values administrators can choose to record: The Value
Will Log...
0
No replication events.
1
Which databases are replicated.
2
A summary for each database replicated.
3
Information about each document replicated.
4
Information about every field replicated.
5
Information about space savings.
S t u d e n t G u i d e P a g e N o . 111
215
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
/RJJLQJ5HSOLFDWLRQ7UDQVDFWLRQV (continued)
Review the procedure with students Note that the LOG_REPLICATION variable was set on all classroom servers during classroom setup.
216
Deploying Domino Applications
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
/RJJLQJ5HSOLFDWLRQ7UDQVDFWLRQV (continued)
Configure logging replication events Follow these steps to record replication activity in the Notes Log at the database level. Step
Action
1
Select the Configuration tab➝Server section➝Configurations view.
2
Click Add Configuration.
3
Enter a server or group name in the Group or Server name field.
4
Select the NOTES.INI Settings tab.
5
Click Set/Modify Parameters.
6
Click the down arrow next to Item. Select LOG_REPLICATION from the drop-down list, and click OK.
7
View the Help description, and enter a value. Click Next, then click OK. Note: There are several log level options from which to choose.
8
Click Save and Close.
Note: When using a Configuration document, restarting the server is not necessary unless changes must take effect immediately.
S t u d e n t G u i d e P a g e N o . 112
217
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
9LHZLQJWKH5HSOLFDWLRQ7RSRORJ\ Show students the classroom topology The maps task should already be running on the instructor server; if it is not, use the steps in the Student Guide to start the task. Follow the steps below to show students the topology map for the classroom. Step
218
Action
1
Select the Replication tab.
2
Select the Replication Topology section➞By connections view.
3
Review the classroom topology with students: ■
Click on a dotted line between servers to retrieve the Connection document between servers.
■
Point out that a solid line indicates clustered servers.
■
Select the By Clusters view to show the clustered servers.
Deploying Domino Applications
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
9LHZLQJWKH5HSOLFDWLRQ7RSRORJ\ Generate topology maps Topology maps provide a graphical representation of servers replication topology and status. The MAPS task is included on the ServerTaskes= line in the NOTES.INI file and loads by default during server startup. Follow these steps to view replication topology maps. Step
Action
1
Select the Server tab➝Status tab.
2
Choose Tools➝Task➝Start.
3
Select Maps Extractor from the task list.
4
Click Start Task, then click Done.
Result: The server will create and update the mail and replication maps for the Administrator Clients. 5
Select the Replication tab.
6
Choose Replication Topology, and select the topology to view, such as By Connections, or By Clusters.
Note: Double-clicking the dotted lines in the topology map will open the Connection document for a server. Solid lines indicate clustered servers.
S t u d e n t G u i d e P a g e N o . 113
219
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
&UHDWLQJD5HSOLFDWLRQ0RQLWRU Provide guidance for activity Allow students approximately 5 to 10 minutes to complete this activity. Students should create the replication monitor for a critical database that resides on their assigned server. Since a monitor for NAMES.NSF is set up by default, students should not set up another monitor for the same purpose.
Step 5: Note regarding missing Notification profile button If students do not see the Create a new notification profile for this event button, Lotus Education has found in testing that following these steps will fix the problem: 1. Delete the EVENTS4.NSF database on the server. 2. Stop the EVENT task on the server. 3. Restart the EVENT task on the server.
Result: The EVENT task will create a new Statistics & Events database (EVENTS4.NSF).
220
Deploying Domino Applications
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
&UHDWLQJD5HSOLFDWLRQ0RQLWRU Create a Replication Monitor Follow these steps to enable the Replication Monitor and monitor replication events for a database on your server. Step
Action
1
Select the Configuration tab➝Statistics & Events section➝Monitors section➝Replication view.
2
Click New Replication Monitor.
3
On the Basics tab, complete the following fields: ■
File name: IDEAS.NSF (or PRODCAT.NSF).
■
Server(s), Only the following: Your assigned server
■
Server(s) with which the database must replicate: All in the domain
■
Time-out: 1; Note: The default is 24 hours.
4
On the Other tab, select Warning (high) from the Generate a Replication event severity drop-down box.
5
Click Create a new notification profile for this event.
6
Click Next to begin.
7
Select the Mail Notification Method, and click Next.
8
Click the arrow next to What email address(es) do you want this sent to?, select your name from the directory, and click Add. Click OK, then click Next.
9
Click Finish.
10
Click OK to save and close the monitor document.
Best practice for using the Replication Monitor for NAMES.NSF Since NAMES.NSF is a critical database, it is a good administrative practice to use and customize the Replication Monitor for that database as appropriate. Note: The monitor for NAMES.NSF is set up by default.
S t u d e n t G u i d e P a g e N o . 114
221
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
&UHDWLQJD5HSOLFDWLRQ0RQLWRU (continued)
Introduce the activity Allow students approximately 10 minutes to complete this activity, then complete the task below.
Step 9: Push changes from WorldHub to student servers To help students complete the activity, push changes from WorldHub/World back down to student servers, once all students have completed step 8 of the activity. Follow these steps to force replication. Step
Action
1
Ensure all students have pushed their changes from IDEAS.NSF to WorldHub/World.
2
From Domino Administrator, select the Server tab➝Status tab➝Console button➝Live button.
3
In the command line at the bottom of the screen, enter the following commands to force replication from WorldHub/World: Push PTApps01/SVR/World IDEAS.NSF (or PRODCAT.NSF) Push PTApps02/SVR/World IDEAS.NSF (or PRODCAT.NSF) Push PTHub/SVR/World IDEAS.NSF (or PRODCAT.NSF) Push BRApps01/SVR/World IDEAS.NSF (or PRODCAT.NSF) Push BRApps02/SVR/World IDEAS.NSF (or PRODCAT.NSF) Push BRHUB/SVR/World IDEAS.NSF (or PRODCAT.NSF)
Result: The server will push all the changes it received in IDEAS.NSF from WorldHub/World down to the replica of the Product Ideas database on the specified classroom servers.
222
Deploying Domino Applications
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
&UHDWLQJD5HSOLFDWLRQ0RQLWRU (continued)
Force replication and view the results Administrators can force Domino to replicate changes to a server instead of waiting for regularly scheduled replication to occur. Follow these steps to force replication. Step
Action
1
Select your server to administer.
2
Select the Files tab.
3
Open the database for which you just created a replication monitor. Change the ACL, and save the change.
4
Select the Server tab➝Status tab.
5
Choose Tools➝Server➝Replicate.
6
Select WorldHub/World as the server with which to replicate.
7
Select the Push replication style.
8
Click Replicate to begin replicating.
Result: The server should send the changes from the replica of the database you just changed on the current server, to the WorldHub/World server. 9
Once all of the servers have replicated their changes to WorldHub/World, the instructor will Push the changes back down to the classroom replicas.
10
View your mail file to see the notification message.
S t u d e n t G u i d e P a g e N o . 115
223
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
9HULI\LQJ5HSOLFDWLRQ7UDQVDFWLRQV Show students replication history Follow the steps on the student page to show the class replication history for the Product Ideas database (IDEAS.NSF).
Emphasize the repercussions of deleting replication history Because Domino uses replication history to determine which documents to scan for changes, deleting replication history can significantly increase the time required to replicate the database.
(Optional) Clear replication history Show how to clear the replication history and cutoff date.
224
Deploying Domino Applications
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
9HULI\LQJ5HSOLFDWLRQ7UDQVDFWLRQV Using the replication history The first time a server replica successfully replicates, Domino creates an entry in the replication history. The history contains the name of the other server, and the date and time of the last replication. If a database does not replicate successfully, Domino does not update the replication history; therefore, a review of the replication history provides a quick way to determine the time of the last successful database replication.
Look at the replication history Follow these steps to view the replication history for a database. Step
Action
1
Open the database, and choose File➝Replication➝History.
2
View the history either by Date or Server Name
3
To clear one entry, select the entry in the window, and click Zoom➝Remove➝Yes.
4
To clear the entire history, click Clear➝Yes.
5
Click Done when finished.
When to clear the replication history Do not clear the database replication history unless: ■ ■
The database does not contain all the documents it should. The database’s replication history is not synchronized with other replicas.
If cleared, during the next replication Domino will scan all of the documents modified or created during the time specified in the Only replicate incoming documents saved or modified after replication setting; if the setting is blank, Domino will scan all documents in the database. Both procedures are timeconsuming. Note: Clearing the replication history requires Manager access.
S t u d e n t G u i d e P a g e N o . 116
225
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
5HVROYLQJ5HSOLFDWLRQ&RQIOLFWV Discuss who should make changes When troubleshooting replication conflicts, application developers and system administrators should work together to solve the problem. The application developer should usually be the person who changes the database, since that person, as a general rule, will know which document is correct.
Resolve a replication conflict Follow these steps to show students how to resolve a replication conflict: 1. Create a replication conflict. 2. Edit and save the parent document to resolve the conflict.
Point out the note on the student page If an administrator incorporates changes into a conflict document, any response documents to the original main document are not associated with the conflict document. This is particularly problematic if the original document is deleted, since the responses to that document are no longer associated with any document.
226
Deploying Domino Applications
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
5HVROYLQJ5HSOLFDWLRQ&RQIOLFWV Identifying replication conflicts Replication conflicts appear in a view as a response document to a main document. They are entitled Replication or save conflict and are preceded by a diamond. Replication conflicts occur when the same document in a different replica has changed since the last replication, and either: ■
■
The application developer did not enable the merge replication conflict option, or The option was enabled, but the same field was edited on the same document on different servers, so Domino is unable to resolve the conflict.
Resolve replication conflicts The system administrator or the application developer can follow these steps to resolve a replication or save conflict. Step
Action
1
Review the main document and the conflict document to identify the differences.
2
Copy the changes to keep from the conflict document into the main document; or open and save the conflict document.
3
Delete the replication or save conflict document.
Note: When the conflict document becomes the main document, it has a new document ID, and any links to the original parent document are lost.
Minimizing replication and save conflicts To reduce replication and save conflicts: ■ ■ ■ ■
Change the form design to merge replication conflicts. Change the form design to use versioning. Limit how many people have Editor or higher access. Adjust the ACL to restrict Editor access. Use Author access with an Authors field.
S t u d e n t G u i d e P a g e N o . 117
227
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
0RQLWRULQJ$&/V Explain how the ACL affects replication Use the material on the student page to review how the ACL affects replication. Note that this is an example of what not to do. It is provided to show the impact of improper settings and changes.
Ask students the following question after reviewing step 4 What access do Servers A and B have when replication completes? Answer: Server A has Manager access and Server B has Designer access in both database ACLs.
228
Deploying Domino Applications
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
0RQLWRULQJ$&/V Why monitor a database ACL? ACL changes are distributed via replication in much the same way as documents. The replication is two-way, but during any single-direction replication, the ACLs are either pulled or pushed, never both. If database ACLs are at odds with each other, a replication that would otherwise be successful will not occur. One way to ensure that properly set ACLs do not change is to monitor the ACLs, and request that Domino send notification if a change occurs.
Example: How the ACL affects replication The following diagram and steps show how the ACL can affect replication: Server A DB.NSF
Server B DB.NSF
ACL Settings Server A: Manager Server B: Designer
ACL Settings Server A: Manager Server B: Manager
ACL modified: 10/2/99
ACL modified: 10/1/99
Server A initiates Pull-Push replication with Server B 1. Server A sees that it has the most recently changed database ACL; therefore, Server A will not attempt to pull Server B’s database ACL. 2. Both database ACLs remain unchanged. Server A pulls documents from DB.NSF on Server B according to the ACL on Server A. 3. When Pull replication is complete, Server A will again see that it has the most recently changed database ACL; therefore, Server A will attempt to push its database ACL to Server B. 4. Server A has sufficient access to modify the database ACL on Server B. Server A will overwrite the database ACL on Server B. 5. The database ACLs on Server A and Server B are now the same. Server A has Manager access and Server B has Designer access in both database ACLs. Server A distributes documents according to the changed database ACL on Server B. (continued on next page) ...
S t u d e n t G u i d e P a g e N o . 118
229
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
0RQLWRULQJ$&/V (continued)
Explain how the ACL affects replication Continue explaining how the ACL affects replication and refer to the material on the student page.
Ask the following questions after reviewing step 4 What access do Servers A and B have when replication completes? Answer: Server A and Server B both have Designer access in both database ACLs. ■
Will either server accept ACL changes now? Answer: No. At this point, neither server will accept database ACL changes from the other because neither one lists the other as Manager.
■
How would you attempt to fix this problem? Answer: Change the database ACL on Server B to allow Server A Manager access. Make the same change in the database ACL on Server A, then replicate.
■
230
Deploying Domino Applications
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
0RQLWRULQJ$&/V (continued)
Example: How the ACL affects replication... The next day, the administrator modifies the database ACL on Server A, changing Server A’s access to Designer:
Server A DB.NSF
Server B DB.NSF
ACL Settings Server A: Designer Server B: Designer
ACL Settings Server A: Manager Server B: Designer
ACL modified: 10/3/99
ACL modified: 10/2/99
Server A initiates Pull-Push replication with Server B: 1. Server A sees that it has the most recently changed database ACL; therefore, Server A will not attempt to pull Server B’s database ACL. 2. Both database ACLs remain unchanged. Server A pulls documents from DB.NSF on Server B according to the ACL on Server A. 3. When Pull replication is complete, Server A will again see that it has the most recently changed database ACL; therefore, Server A will attempt to push its database ACL to Server B. 4. Server A has sufficient access to modify the database ACL on Server B. Server A will overwrite the database ACL on Server B. Note: This occurs despite Server A having only Designer access in the database ACL on Server A. 5. The database ACLs on Server A and Server B are now the same. Server A and Server B both have Designer access in both database ACLs. Server A distributes documents according to the changed database ACL on Server B. At this point, neither server will accept database ACL changes from the other, because neither one lists the other as a Manager. To fix this problem, change the database ACL on Server B to allow Server A Manager access. Make the same change in the database ACL on Server A, then replicate.
S t u d e n t G u i d e P a g e N o . 119
231
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
'HWHUPLQH6HUYHU$FFHVV([HUFLVH Review problems and solutions Allow students approximately 10 minutes to complete this exercise, then review the server access problems and solutions from the following table:
232
Solution
Problem
5
Changes were made to Server A’s replica by someone with Author access. Server A’s changes do not replicate to Server B.
1
Design changes were made to the replica on Server A, but do not replicate to Server B.
2
A replica on Server A includes a form access list that limits who can read documents created with the form. Server B needs to pull new documents and changes to documents created with the form.
4
Server B needs to receive changes from a replica on Server A, but should not send changes to Server A.
3
ACL changes on Server A's replica should replicate to Server C by way of Server B.
6
User whose name changed is unable to access database due to incorrect ACL.
Deploying Domino Applications
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
'HWHUPLQH6HUYHU$FFHVV([HUFLVH Identify appropriate server access guidelines Follow these guidelines when setting server access: Assign an access level that is at least as high as the highest user access level. Include servers in read access lists for database design elements. Assign appropriate access to intermediate servers. Assign Reader access for one-way replication. Give a server Reader access to a replica when you want to allow the server to receive information from the replica, but not to send changes back. 5. Assign Editor access to allow author’s changes to replicate. If a replica includes documents containing fields of the Authors data type which allows authors to modify their own documents, a server must have at least Editor access to replicate modifications. 6. A database that does not replicate should have at least one server in its ACL to serve as the administration server for the database. This allows the Administration Process on a server to update names in the ACL.
1. 2. 3. 4.
Enter the number of the guideline that will most likely solve the problem. Solution
Problem Changes were made to Server A’s replica by someone with Author access. Server A’s changes do not replicate to Server B. Design changes were made to the replica on Server A, but do not replicate to Server B. A replica on Server A includes a form access list that limits who can read documents created with the form. Server B needs to pull new documents and changes to documents created with the form. Server B needs to receive changes from a replica on Server A, but should not send changes to Server A. ACL changes on Server A's replica should replicate to Server C by way of Server B. A user whose name changed is unable to access a database due to an incorrect ACL.
S t u d e n t G u i d e P a g e N o . 120
233
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
+RZWR0RQLWRU$&/&KDQJHV Show students how to enable the ACL change monitor Follow the procedure in the Student Guide to show students how to enable the ACL change monitor.
Step 5: Note regarding missing Notification profile button If students do not see the Create a new notification profile for this event button, Lotus Education has found in testing that following these steps will fix the problem: 1. Delete the EVENTS4.NSF database on the server. 2. Stop the EVENT task on the server. 3. Restart the EVENT task on the server.
Result: The EVENT task will create a new Statistics & Events database (EVENTS4.NSF).
234
Deploying Domino Applications
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
+RZWR0RQLWRU$&/&KDQJHV Enable the ACL Change Monitor Follow these steps to monitor ACL changes using the ACL Change Monitor. Step
Action
1
Click the Configuration tab➝Statistics & Events section➝Monitors section➝ACL Change view.
2
Click New ACL Change Monitor.
3
On the Basics tab, complete the following: a. Enter the database File name to monitor. b. Choose the Server(s) to monitor.
4
On the Other tab, select a severity level from the Generate a Replication event severity drop-down box.
5
Click Create a new notification profile for this event.
6
Click Next to begin.
7
Select Notification Method, and click Next.
8
Select the appropriate Notification Options, then click Next.
9
Click Finish.
10
Click OK to save and close the monitor document.
Note: ACL change monitors generate events to the Server tab➝Analysis tab➝Statistics Reports section➝Events view in Domino Administrator.
S t u d e n t G u i d e P a g e N o . 121
235
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
,GHQWLI\LQJ'DWDEDVH3HUIRUPDQFH 3UREOHPV Present the monitoring and troubleshooting tools Refer to the material on the student page.
Discuss possible problems and solutions Present the problems on the student page, and ask students for possible solutions.
236
Deploying Domino Applications
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
,GHQWLI\LQJ'DWDEDVH3HUIRUPDQFH 3UREOHPV Possible database problems The following table summarizes some of the database issues administrators encounter. Consider these factors when setting up or troubleshooting database issues. Problem
Possible Solutions ■
Set database properties.
■
Compact database.
■
Update view index.
■
Create replica on another server.
■
Move to another disk.
■
Compact database with file size reduction.
■
Move the database to a more powerful server.
■
Place the database on clustered servers, and configure load balancing.
■
Move the database to a more powerful server.
■
Upgrade server.
Large database
■
Move the database to a larger disk or to its own disk.
Low or no usage
■
Poor performance opening or using the database Low disk space
High usage impacts server performance
Low system resources
■
Archive or copy documents from the database. Remove the database.
Monitors and logs Domino provides several tools for use in monitoring and troubleshooting performance problems. The following table summarizes some of these tools. Tool
Function
File monitor
Monitors files for usage and white space.
Database analysis
Collects specified information about a database(s) from several sources, and places them in one database.
Database section of the Notes Log (LOG.NSF)
Provides information about database size and usage.
S t u d e n t G u i d e P a g e N o . 122
237
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
0RQLWRULQJ)LOHV Introduce the activity Allow students approximately 10 minutes to complete this activity.
Ask if students can monitor multiple databases During the activity, ask the following question: Is it possible to monitor multiple databases with one file monitor setting? Answer: No. Create a file monitor for each database that requires monitoring.
238
Deploying Domino Applications
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
0RQLWRULQJ)LOHV Why use a file monitor Use file monitors to determine user inactivity and white space in selected databases and servers. A file monitor is useful in triggering maintenance on a database when particular thresholds are met.
Create a file monitor for a database Follow these steps to enable the monitor. Step
Action
1
From Domino Administrator, click the Configuration tab➝Statistics & Events section➝Monitors section➝File view.
2
Click New File Monitor.
3
On the Basics tab, complete the following fields:
4
■
File name: IDEAS.NSF or PRODCAT.NSF
■
Server(s), Only the following: Your assigned server
■
What to monitor: Select Monitor for user inactivity and Monitor unused space
On the Unused Space tab, complete the following: a. Enter 75% in the Trigger the event when unused space exceeds field. b. Select Automatically compact the database when the above condition is met.
5
On the User Inactivity tab, select Daily with a Minimum sessions of 10.
6
Click OK to save and close the monitor document.
Note: View the results under the Server tab➝Analysis tab➝Statistics section➝Events view.
S t u d e n t G u i d e P a g e N o . 123
239
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
&KHFNLQJ'DWDEDVH8VDJH Ask when database usage information may be helpful When discussing the material on the student page, ask the following question: Question: When might database usage information be helpful to have? Answer: The information is helpful during database maintenance, when administrators need to know who is working in the database.
Introduce the activity Allow students approximately five minutes to complete this activity.
240
Deploying Domino Applications
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
&KHFNLQJ'DWDEDVH8VDJH Using the log files to monitor databases In addition to setting up a file monitor to trigger statistics and events about database size and usage, it is also possible to check database size and usage in the log file.
View database statistics Follow these steps to view database usage recorded in the log file. Step
Action
1
From the Server pane, select your assigned server to administer.
2
Select the Server tab➝Analysis tab.
3
Do one or both of the following:
4
■
Select the Notes Log section➝Database section➝Sizes view.
■
Select Notes Log section➝Database section➝Usage view.
Open a Database Activity Log entry and review the information.
Result: Record the database name, size, and usage.
5
Close the Activity log.
6
From the Files tab, open the database you reviewed.
7
Choose File➝Database➝Properties.
8
Select the Information (i) tab. Then, click User Detail.
Result: Record the database name, size, and usage.
S t u d e n t G u i d e P a g e N o . 124
241
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
$QDO\]LQJD'DWDEDVH Introduce uses for the database analysis tool Use the material in the Student Guide to support a discussion of the ways in which the database analysis tool may be put to use.
242
Deploying Domino Applications
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
$QDO\]LQJD'DWDEDVH Consolidating data Database analysis lets administrators collect information about one or more databases from different sources, such as the replication history and the log file (LOG.NSF), and view the information in one “results” database.
The results database A database analysis creates a database from the Database Analysis template (DBA4.NTF). The database stores the results analysis documents. Once created, administrators can either overwrite its contents or append new results to the database.
S t u d e n t G u i d e P a g e N o . 125
243
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
$QDO\]LQJD'DWDEDVH (continued)
Introduce the activity Allow students approximately five minutes to complete this activity.
244
Deploying Domino Applications
,QVWUXFWRU Lesson 8 ■ Identifying Deployment Problems
$QDO\]LQJD'DWDEDVH (continued)
Use the Database Analysis tool Follow these steps to run the Database Analysis tool on your server. Step
Action
1
Select your assigned server from the Server pane.
2
Select the Files tab.
3
Select World’s Directory (NAMES.NSF).
4
Click Tools➝Database➝Analyze. Or, drag the selected database(s) to the Analyze tool.
5
In the Analyze last x days of activity field, enter 7 to represent a week’s worth of information to report. Note: You can specify up to 99. The higher the number, the longer it takes to generate the results.
6
Select the following options: ■
Replication: Find replicas on other servers
■
Replication: Replication history
■
In Log file: Miscellaneous Events view
7
Click Results.
8
Specify the server, title, and file name of the database in which to store the results, and click OK. Note: The Results database should be created on a local client rather than on a server. If multiple people generate results databases on a server, they should each specify a different file name to prevent conflicting results.
9
If the specified results database already exists, select Overwrite database to write over the existing contents, or select Append to this database to add the new results to existing ones.
10
Click OK twice to run the analysis.
11
To see the results, open the local Results database and choose one of the available views.
12
Open Database Analysis Results documents in the selected view.
S t u d e n t G u i d e P a g e N o . 126
245
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
6ROYLQJ'HSOR\PHQW 3UREOHPV
Explain the purpose of the lesson Now that students have setup monitors and log files, and been introduced to ways to troubleshoot database deployment problems, they now will learn how to solve problems that may arise.
Present the objectives Present the objectives listed on the Student Guide page.
246
Deploying Domino Applications
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
6ROYLQJ'HSOR\PHQW 3UREOHPV
Overview Once monitors and log files are configured to collect and report specified information; administrators can use the resulting information to troubleshoot and fix a variety of database issues.
Objectives After completing this lesson, you should be able to: ■ ■ ■ ■
Manage database access. Manage database performance. Manage database elements. Recover a database.
S t u d e n t G u i d e P a g e N o . 127
247
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
'DWDEDVH$FFHVV Review the Administration Process with students Students should already be familiar with the Administration Process; it is covered in the Implementing a Domino Infrastructure course.
248
Deploying Domino Applications
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
'DWDEDVH$FFHVV Maintain consistent, current ACLs To maintain database security, ensure the ACL is updated and uniform among servers. To do this: ■
■
Set up an administration server for the Administration Process in the Domino Administrator to manage ACLs for multiple databases and Readers and Authors field. Enforce consistent ACLs among database replicas.
When an Administrator does not have Manager access When an administrator does not have Manager access to a database, it is possible to change the ACL on the server by starting NLNOTES.EXE on the server to access the database locally. Note: This should only be done if the application developer and/or database managers are unavailable to make changes to the database themselves.
Using the Administration Process The Administration Process is a server program that automatically: ■
■ ■
Renames or deletes groups, servers, users, personal views, folders, and agents Updates the Domino Directory and database ACL Updates the Readers and Authors fields for all documents in a database
S t u d e n t G u i d e P a g e N o . 128
249
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
0DQDJLQJ'DWDEDVH$FFHVVZLWKWKH $GPLQLVWUDWLRQ3URFHVV Show students how to select an administration server Follow the steps on the student page to show students how to choose an administration server; however, do not change the current administration server. Explain that by default, the administration server is the first server in the domain.
250
Deploying Domino Applications
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
0DQDJLQJ'DWDEDVH$FFHVVZLWKWKH $GPLQLVWUDWLRQ3URFHVV Select an administration server to manage ACLs To use the Administration Process to update and manage names in an ACL or in Reader and Author fields, assign an administration server to the database. Follow these steps to assign an administration server to a database. Step
Action
1
Select the server that stores the databases.
2
From the Files tab, select the databases to manage.
3
Choose Tools➝Database➝Manage ACL.
4
Click Advanced, and select Modify Administration Server setting.
5
In the Server field, select an administration server.
6
Select Modify fields of type Reader or Author, and click OK.
S t u d e n t G u i d e P a g e N o . 129
251
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
0DQDJLQJ'DWDEDVH3HUIRUPDQFH Respond to questions about threads If students ask about threads, tell them that increasing the number of threads does not always increase performance. Even though there are more threads, the system resources may not be able to handle the load, or it may expose a bottleneck elsewhere. Therefore, increasing threads needs to be balanced with monitoring system resources.
252
Deploying Domino Applications
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
0DQDJLQJ'DWDEDVH3HUIRUPDQFH Database performance issues During database deployment, performance issues may arise. This may be caused by several factors, including: ■ ■ ■ ■
Database size (usually attributable to the view size) Amount of database use Server performance System I/O and memory
Performance resources The following table lists some resources for additional performance information. Resource
Location
Lotus Performance Zone
www.lotus.com/performance
Optimizing Server Performance
Domino 5 Administration Help
Optimizing Your Server Performance: Parts 1 and 2
www.notes.net/today.nsf
Best Practices Guide
www.lotus.com/bpg
NotesBench Consortium Web site
www.notesbench.org
S t u d e n t G u i d e P a g e N o . 130
253
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
0DQDJLQJ'DWDEDVH3HUIRUPDQFH (continued)
Review the performance issues and solutions Review the material on the student page; ensure that students understand the relationship between the problems and solutions.
254
Deploying Domino Applications
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
0DQDJLQJ'DWDEDVH3HUIRUPDQFH (continued)
Resolving performance issues The following table describes possible solutions to database performance issues. Issue Large database
Description Large databases require more I/O and use more memory.
Potential Resolution ■
Decrease the size of the database by using Compact or by archiving unused parts of a database.
■
Decrease the number of views in the database.
■
Use selective replication.
■
Upgrade the I/O and memory.
■
Move database to a more powerful server.
Large database view
View takes a long time to display.
Increase the view buffer on the server using the NSF_BUFFER_POOL_SIZE variable in the NOTES.INI file.
High database usage
All users access the same database from the same server.
■
Divide users across multiple replicas. (For single server environments, put database on different hardware array and use database link.)
■
Use clusters.
■
Use clusters.
■
Make sure the server is running only the most important tasks. Disable services not needed.
■
Pay attention to the Indexer (UPDALL) task. This is the most time-consuming task.
■
Upgrade the I/O and memory.
■
Increase the number of database open/ close handles in the cache using the NSF_DBCACHE_MAXENTRIES setting in the NOTES.INI file.
Server performance
System I/O and memory
S t u d e n t G u i d e P a g e N o . 131
Server is overloaded. Many server tasks are started by default.
Large databases require more I/O and use more memory.
255
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
0DQDJLQJ'DWDEDVH3HUIRUPDQFH (continued)
Remind students of the purpose of DBCACHE DBCACHE holds a recently opened database in memory; databases in the cache open more quickly than databases which are not in the cache.
256
Deploying Domino Applications
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
0DQDJLQJ'DWDEDVH3HUIRUPDQFH (continued)
Responding to performance problems If users complain of slow response time, consider using one of the following solutions: ■
■ ■
■
Increase NSF_DBCACHE_MAXENTRIES in the NOTES.INI file to decrease the I/O activity. Remove unused parts of the database. Move the database to another server that has more memory and I/O resources. Compact the database.
When to clear the database cache DBCACHE holds the a database that was recently opened in memory. If a database is in the cache, an administrator cannot move or delete it. Use the following console command to clear the cache in preparation for a move or deletion: DBCACHE FLUSH
S t u d e n t G u i d e P a g e N o . 132
257
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
$UFKLYLQJ'DWDEDVHV Introduce the activity Allow students approximately five minutes to complete this activity. If time does not permit this activity, follow the steps on the student page to demonstrate archiving parts of a database on WorldHub/World. Choose any classroom database.
258
Deploying Domino Applications
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
$UFKLYLQJ'DWDEDVHV Before archiving Before archiving a database or parts of a database, check the Notes Log to verify database usage.
Archive parts of a database To improve the performance of a database, administrators archive documents that have not been accessed or modified in the last 90 days. Follow these steps to archive parts of a database. Step
Action
1
Select PTApps01/SVR/World to administer.
2
Select the Files tab.
3
Open your assigned database.
4
Select File➞Database➞Properties.
5
Select the Basics tab.
6
Click Archive Settings.
7
Complete the Basics panel as follows: a. Select Archive all documents not read or accessed on your assigned server, and enter 90. b. Select Archive all documents not modified or updated and enter 90. c. Enter the Archive database (for example: AR_PRODDSGN.NSF).
8
Complete the Advanced panel as follows: a. Select Automatically on server. b. Select Log archiving activity on your assigned server. c. Select Do not delete documents that have responses.
9
Click OK.
Note: If implementing archiving based on the last accessed or read, set the advanced database property for Maintain last accessed.
S t u d e n t G u i d e P a g e N o . 133
259
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
0RYLQJ'DWDEDVHV Move the Product Design database Use the procedure on the student page to demonstrate moving a database from WorldHub/World to another classroom server. Step 3: Select PTApps01/SVR/World. Step 5: Select the Product Design database (PRODDSGN.NSF). Step 6: Move the database to PTApps02/SVR/World. Step 9: Select the DevelopmentProfile Setup Profile. Step 13: After saving the profile, switch to a user that is assigned the DevelopmentProfile server profile, and verify the update.
260
Deploying Domino Applications
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
0RYLQJ'DWDEDVHV Move a database Follow these steps to move a database from one server to another. Step
Action
1
Click the Domain bookmark, and expand All Servers.
2
Select Pin Bookmarks.
3
Select a server to move a database from.
4
Select the Files tab.
5
Select the database to move.
6
Drag the selected database to the target server and select Move database. Click OK.
7
Create a database link to the new database location: a. Open the database on the new server. b. Choose Edit➞Copy as Link➞Database Link. c. Close the database.
8
Select the People & Groups tab➞Domino Directories section➞Address Book section➞Setup Profiles view.
9
Select the appropriate Setup Profile.
10
Click Edit Setup Profile.
11
Click Databases, and in the Default databases added to bookmarks field, paste the new database link.
12
Click Save and Close.
S t u d e n t G u i d e P a g e N o . 134
261
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
&RPSDFWLQJ'DWDEDVHV Note the ability to compact a database while in it Unlike previous releases of Domino, it is possible to compact a database while it is in use in R5.
262
Deploying Domino Applications
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
&RPSDFWLQJ'DWDEDVHV What is compact? Domino tries to reuse unused space created when users delete documents and attachment from a database. It does this instead of immediately reducing the file size. If Domino is unable to reuse the space or, due to fragmentation, it cannot reuse the space effectively, administrators must compact the database to remove the unused space.
Styles of compacting R5 uses three styles of compacting: In-place compacting with space recovery In-place compacting with space recovery and reduction in file size Copy-style compacting
■ ■ ■
Compacting recommendations Use compacting as follows. If You Want To... ■
Recover unused space but not reduce the size of the database.
■
Retain the same DBIIDs.
■
Allow users and servers access to databases during compaction.
■
Have the least system impact.
■
Reduce the size of the database in addition to recovering unused space.
■
Assign new DBIIDs.
■
Allow users and servers access to databases during compaction.
■
Make a new copy of a database (new DBIID).
■
Not allow users and servers access to databases during compaction.
S t u d e n t G u i d e P a g e N o . 135
Then Use In-place compacting with space recovery
In-place compacting with space recovery and reduction in file size
Copy-style compacting
263
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
&RPSDFWLQJ'DWDEDVHV (continued)
Compact a database Use the procedure on the student page to demonstrate compacting a database. Choose any database on WorldHub to compact.
264
Deploying Domino Applications
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
&RPSDFWLQJ'DWDEDVHV (continued)
Compact database Worldwide administrators would like to reduce the size of the database. However, transaction logging is enabled. The administrators decide to use in-place compacting with space recovery to make the database more efficient but retain the DBIID. This type of compaction also has the least system and user impact. Follow these steps to compact a database. Step
Action
1
From the server on which the database resides, select the Files tab.
2
Select the database to compact.
3
Do one of the following: ■
Choose Tools➞Database➞Compact, or
■
Drag the appropriate database to the Compact tool.
4
Select In-place.
5
(Optional) Select options.
6
Click OK.
S t u d e n t G u i d e P a g e N o . 136
265
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
&RPSDFWLQJ'DWDEDVHV (continued)
Introduce the activity Allow students approximately 10 minutes to complete this activity.
266
Deploying Domino Applications
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
&RPSDFWLQJ'DWDEDVHV (continued)
Compact databases using a Program document Administrators want to set up regular compacting of databases. Follow these steps to set up automatic in-place compaction for the databases on your server every Friday at 2:00 AM. Step
Action
1
Select the Configuration tab.
2
Select the Server section➞Programs view.
3
Click Add Program.
4
Complete the Basics tab as follows to compact and recover disk space: ■
Program name: Compact
■
Command line: Compact -b
■
Server to run on: Your Server
Note: The -b parameter recovers disk space. 5
6
On the Schedule tab, complete as follows: ■
Enabled/disabled: Enabled
■
Run at times: 2:00 AM
■
Repeat interval of: 0 (run program once)
■
Days of week: Friday
Click Save and Close.
Note: For additional information on allowed parameters for the Compact server task, refer to Running Compact using a Program document➞Command line options in the Domino 5 Administration Help database.
S t u d e n t G u i d e P a g e N o . 137
267
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
0DQDJLQJ'DWDEDVH(OHPHQWV Clarify the designs and templates relationship Refer to the note on the student page.
Clarify view and index definitions Review the definitions on the student page and note the following: ■ ■
268
A view index displays documents in a view. A full-text index is another example of an index.
Deploying Domino Applications
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
0DQDJLQJ'DWDEDVH(OHPHQWV Database elements Database elements determine the way a database looks. The following table includes several database elements. Element
Description
Templates
A design that is used as a starting point for a new database. Application developers can choose to update the design of a database based on changes to the assigned template.
Designs
A database design that allows sharing design elements among databases and storing design elements within a template. An application developer can enable the design template, also called a master template, so that when it changes, the change automatically occurs in all databases created with that template.
View index
An internal filing system that Notes uses to build the list of documents to display in a database view or folder. View indexes should be kept up-to-date so that information in views and folders stays synchronized with document updates.
Search indexes
A full-text index is an index of the text in a database. To perform advanced searches for text in a database, users need an up-todate full-text index that reflects the latest content of a database.
Note: Administrators can pull the design elements from multiple databases into one database.
S t u d e n t G u i d e P a g e N o . 138
269
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
'HVLJQ7HPSODWHV Introduce the activities Allow students approximately 15 minutes to complete both activities.
Note for the Create a replica of the template activity For step 3, in the Create a replica of the template activity, students must select Templates only from the Show me drop-down box to see the template files.
270
Deploying Domino Applications
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
'HVLJQ7HPSODWHV Determine the template in use Follow these steps to determine which template is used to create a database. Step
Action
1
Select the Files tab and select either the Product Ideas (IDEAS.NSF) or Product Catalog (PRODCAT.NSF) database.
2
Choose File➝Database➝Properties.
3
Select the Design tab , and note the template name in the Inherit design from template field.
Note: It is the application developer’s responsibility to ensure the appropriate template is in use.
Create a replica of the template The template must reside on the server in order to update the design of databases that use that template. Follow these steps to create a replica of the template on your assigned server. Step
Action
1
Select the WorldHub/World server.
2
Select the Files tab.
3
Open either the Product Ideas Template (IDEAS.NTF) or Product Catalog Template (PRODCAT.NTF) database.
4
To verify that this is the correct template, choose File➝Database➝ Properties.
5
Select the Design tab . The template name in the Database is a template field should be the same as step 3 from the previous activity.
6
Choose File➞Replication➞New Replica.
7
Select your assigned server from the Server drop-down box.
8
Accept the default file name for the new replica.
9
Select Create: Immediately.
10
Click OK.
S t u d e n t G u i d e P a g e N o . 139
271
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
'HVLJQ7HPSODWHV (continued)
Show how to start the Designer task Use the procedure on the student page to demonstrate starting the Designer task.
272
Deploying Domino Applications
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
'HVLJQ7HPSODWHV (continued)
Updating database design Regular updates are performed with the tools described in the following table. Tool Designer task
Description ■
Synchronizes databases with a master template or templates. The Designer task updates all databases that inherit their design from an updated master template.
■
Runs on all databases on server.
■
Runs daily by default at 1:00 AM. Runs before UPDALL.
Note: The UPDALL task updates the view indexes of databases changed by Designer. File➞Database... ■
Refresh Design
■
Replace Design
Specific to a single database: ■
Refresh Design: Updates design elements with changes in the template linked to the database.
■
Replace Design: Updates design elements in a database with design elements in a new template.
Synchronize databases with master templates Worldwide application developers have changed the design of a template that was used for several databases. To process changes to the database design immediately, manually run the Designer task. Follow these steps to update all databases on the server that use the template. Step
Action
1
Make sure that a replica of the master template exists on each server. If it does not, create a replica of the master template on each server that stores databases that inherit from the master template.
2
Select the server on which to run Designer.
3
Select the Server tab➝Status tab.
4
Choose Tools➝Task➝Start.
5
Select Designer. Click Start Task, then click Done.
S t u d e n t G u i d e P a g e N o . 140
273
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
'HVLJQ7HPSODWHV (continued)
Explain when to update a database design Refer to the table on the student page.
Ask students when to use replace versus refresh Ensure students understand the difference between refreshing and replacing a database design. To do this, ask the following questions: ■
■
274
If the application developer has made changes to the template used to create a database, should you use refresh or replace? Answer: Refresh. If the application developer created a new template for an existing database, should you use refresh or replace? Answer: Replace.
Deploying Domino Applications
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
'HVLJQ7HPSODWHV (continued)
ACL impact on design distribution To receive design changes from a source server: ■
■
The database replica on the destination server must give the source server at least Designer access, and The source server replica must give the destination server at least Reader access.
Criteria for updating design Update a database design under the following conditions: If the Database Design Is
Use Designer Task
Use This Database Option
Modified
Yes
Refresh design
Not building views properly
Yes
Refresh design
Corrupt
No
■
Fix template
■
Refresh design
Or
S t u d e n t G u i d e P a g e N o . 141
■
Create new template
■
Replace design
275
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
'HVLJQ7HPSODWHV (continued)
Update database design Allow students approximately five minutes to complete this activity. Some servers have the Product Ideas database, some have the Product Catalog, and some have both. Ask students with both to choose one.
276
Deploying Domino Applications
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
'HVLJQ7HPSODWHV (continued)
Update database design Application developers have modified the design for the Product Ideas and the Product Catalog databases. Follow these steps to refresh the design of the database on each server. Step
Action
1
Select your server to administer.
2
Select the Files tab.
3
Open either the Product Ideas (IDEAS.NSF) or Product Catalog (PRODCAT.NSF) database.
4
Choose File➞Database➞Refresh Design.
5
Select your assigned server from the list, and click OK.
6
Click Yes to confirm refreshing the design.
S t u d e n t G u i d e P a g e N o . 142
277
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
9LHZ,QGH[HV Compare server tasks to shortcuts After reviewing the comparison table on the Student Guide page, ask students to describe advantages of the tasks over the user keyboard shortcuts. Answers might include: ■ ■ ■
278
Work on multiple databases. UPDALL runs on a schedule. A Program document can run UPDALL.
Deploying Domino Applications
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
9LHZ,QGH[HV Why update view indexes? Over time, view indexes become out-of-date and may become corrupt. Users may no longer see the expected documents or view changes. It is possible to update database view indexes manually, or to configure server tasks to update all database view indexes.
Server tasks that update the view index The UPDATE task updates views and folders. The UPDALL tasks updates views and full-text indexes. The following table compares the two tasks. Characteristic Schedule
UPDATE
UPDALL
Loaded on the server by default and runs continuously
■
Daily at 2:00 AM
■
On demand
■
Program document
Databases affected
Changed
All
Refresh view index
Yes
Yes
Update full-text index
Yes
Yes
Rebuilds corrupted views
Yes
Yes
Rebuilds corrupted full-text indexes
Yes
Yes
Purges deletion stubs
No
Yes
Discards unused view indexes
No
Yes (after 45 days)
Ignores Refresh index view property (Value set by application developer)
Yes
Yes
Customize (with options)
No
Yes
S t u d e n t G u i d e P a g e N o . 143
279
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
9LHZ,QGH[HV (continued)
Show how to refresh a view Follow the procedure on the student page to show how to refresh a view.
280
Deploying Domino Applications
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
9LHZ,QGH[HV (continued)
Refresh a view Open a database with new documents and refresh the view using any or all of the following options:
■
The refresh button
■
The F9 key
■
CTRL
+ SHIFT + F9
Note: CTRL + SHIFT + F9 rebuilds all views in the database, not just the current view, as does F9.
S t u d e n t G u i d e P a g e N o . 144
281
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
(QVXUH$FFXUDF\RI'DWDEDVH9LHZV ([HUFLVH Ensure database views are accurate Allow students approximately 10 minutes to complete this activity. Remind students to use Help➞Index➞Updall Task to find the appropriate options.
282
Deploying Domino Applications
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
(QVXUH$FFXUDF\RI'DWDEDVH9LHZV ([HUFLVH Schedule a server task Worldwide administrators have received notification that some views for critical databases are not up-to-date. The administrators need a way to update views for critical databases on a regular basis to ensure accuracy. However, building Indexes on large databases can take considerable time and system resources, which administrators would like to avoid. Create a Program document to solve this problem.
S t u d e n t G u i d e P a g e N o . 145
283
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
5HFRYHULQJ'DWDEDVHV Recommend using transaction logging for recovery Review the options for recovering a database, and emphasize the advantages of using transaction logging.
284
Deploying Domino Applications
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
5HFRYHULQJ'DWDEDVHV When to restore a database When transaction logging logs changes to databases, a server automatically uses the transaction log to restore and recover databases after a system failure (for example, after server failures or power failures); therefore, transaction logging helps prevent database corruption. If, after using repair tools, the database is still corrupt or lost, restore the database from: ■ ■ ■
A backup database copy A media backup An undamaged replica
Recovering a database Recommendations for restoring databases include: ■ ■
■
Do not rely on replication as a database backup. Replicas may be corrupt. Recover a database using a third-party backup utility to restore a database backup and archived transaction log files. Use transaction logging whenever possible for the three main benefits described in the following table.
Benefit
Description
Quicker server restarts
Transaction log recovery applies or undoes only transactions not written to disk at the time of the failure.
Saves processing time
Allows Domino to defer database updates to disk during periods of high server activity. Transactions record sequentially in Log files more quickly. Because transactions are already recorded, Domino safely defers database updates until a period of low server activity.
Simplifies daily backup procedure
S t u d e n t G u i d e P a g e N o . 146
Use a third-party backup utility to perform daily incremental backups of transaction logs, rather than perform full database backups.
285
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
5HFRYHULQJ'DWDEDVHV (continued)
Present best practice If necessary, remind students where to find replication history and the replication cutoff date.
286
Deploying Domino Applications
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
5HFRYHULQJ'DWDEDVHV (continued)
Best practices for restoring databases When restoring a database, clear the replication history and replication cutoff date to ensure that the entire database is restored. For more information on replication history and replication cutoff date, see the Domino 5 Administration Help database.
S t u d e n t G u i d e P a g e N o . 147
287
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
7URXEOHVKRRW5HSOLFDWLRQ ([HUFLVH
Prepare for the exercise Prepare for the exercise just prior to the students starting by adding each student server to the Not access server field in WorldHub/World's Server document.
Note If the classroom was not set up with the default server names, the exercise results will not match the material. The ACLs for the module databases are tailored for the exercises.
Provide guidance as necessary This exercise is comprehensive, and students may require some instructor guidance. Allow students approximately 40 minutes to complete this exercise.
Assign students problems Assign each student a sequence of problems to work on to ensure that no two teams are working on the same database at the same time, and to avoid replication conflicts. Team
288
Sequence of Problems
Team 1
2, 3, 4, 5, 6
Team 2
3, 4, 5, 6, 2
Team 3
4, 5, 6, 2, 3
Team 4
5, 6, 2, 3, 4
Team 5 and Team 6
6, 2, 3, 4, 5
Deploying Domino Applications
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
7URXEOHVKRRW5HSOLFDWLRQ ([HUFLVH
Exercise overview In this exercise, attempts at replicating databases will fail. Use the tips previously discussed to troubleshoot problems when replication fails. Work in administrator/ server teams to complete this exercise.
S t u d e n t G u i d e P a g e N o . 148
289
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
7URXEOHVKRRW5HSOLFDWLRQ([HUFLVH (continued)
Walk through Problem 1: Replication with instructor’s hub fails Problem 1 must be done with the class as a whole as follows: ■ ■
■
Have one server team try to replicate with WorldHub. View the Notes Log (Server tab➞Analysis tab) and ask students why it failed. ■ Replication fails because the student server is listed in the Not access server field in the instructor’s hub Server document. Have all student teams edit the hub Server document, and remove their server name from the Not access server field.
All server teams should perform each of the remainder of the problems according to the sequence on the previous page.
Review Problem 2: Replication with Module D Policies and Procedures fails Use the following information to review and discuss student findings. Replication fails because the instructor’s hub server is listed in the database ACL with No Access. ■ Students should: 1. Edit the database ACL on the student server and modify the server’s ACL entry, changing the access to at least Reader. 2. Replicate this ACL change. ■
Review Problem 3: Replication with Module D Product Catalog fails Use the following information to review and discuss student findings. The ACL change will not replicate because the student server is listed in the database ACL with Designer access. ■ Students should: 1. Edit the database ACL on the instructor’s server to modify the server’s ACL entry, changing the access to Manager. 2. Replicate this ACL change. ■
290
Deploying Domino Applications
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
7URXEOHVKRRW5HSOLFDWLRQ([HUFLVH (continued)
Problem 1: Replication with instructor’s hub fails The server team assigned by the instructor should perform these tasks as directed by the instructor. 1. Replicate with the instructor’s server from the remote server console. 2. View the error in the Notes Log to determine the problem. 3. Make the appropriate changes to fix the problem.
Problem 2: Replication with Module D Policies and Procedures fails 1. Replicate Module D Policies and Procedures with the instructor’s server. 2. View the error in the Notes Log, then view the database Access Control List to determine the problem. 3. Make the appropriate changes to fix the problem.
Problem 3: Replication with Module D Product Catalog fails 1. Add an ACL entry to Module D Product Catalog on your server. 2. Replicate Module D Product Catalog with the instructor’s server. 3. Check the Module D Product Catalog ACL on the instructor’s server to verify that the ACL change replicated. 4. View the database Access Control List to determine the problem. 5. Make the appropriate changes to fix the problem.
S t u d e n t G u i d e P a g e N o . 149
291
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
7URXEOHVKRRW5HSOLFDWLRQ([HUFLVH (continued)
Review Problem 4: Replication with Module D Sales Orders fails Use the following information to review and discuss student findings. ■
■ ■
Replication fails because a replica of Module D Sales Orders does not exist on the student servers. Students should notice that a database copy does exist for this database. Students should create a replica of Module D Sales Orders on their server.
Review Problem 5: Replication with Module D Customer Service fails Use the following information to review and discuss student findings. ■
■
Replication fails because the Replication setting Temporarily disable replication is set on Module D Customer Service on the student servers. Students should remove the Temporarily disable replication option.
Review Problem 6: Replication with Module D Customer Information fails Use the following information to review and discuss student findings. ■
■
292
Replication fails because the Do not send deletions made in this replica to other replicas replication setting is set on Module D Customer Information on the student servers. Students should remove the Do not send deletions made in this replica to other replicas option.
Deploying Domino Applications
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
7URXEOHVKRRW5HSOLFDWLRQ([HUFLVH (continued)
Problem 4: Replication with Module D Sales Orders fails 1. 2. 3. 4.
Replicate Module D Sales Orders with the instructor’s server. View the error in the Notes Log. View the database properties to determine the problem. Make the appropriate changes to fix the problem.
Problem 5: Replication with Module D Customer Service fails 1. 2. 3. 4.
Replicate Module D Customer Service with the instructor’s server. View the error in the Notes Log. View the Replication Settings to determine the problem. Make the appropriate changes to fix the problem.
Problem 6: Replication with Module D Customer Information fails 1. Delete a document in Module D Customer Information on the server. 2. Replicate Module D Customer Information with the instructor’s server. 3. View Module D Customer Information on the instructor’s server to see if the document was deleted from that replica. 4. View the Replication Settings to determine the problem. 5. Make the appropriate changes to fix the problem.
S t u d e n t G u i d e P a g e N o . 150
293
,QVWUXFWRU Lesson 9 ■ Solving Deployment Problems
294
Deploying Domino Applications
$SSHQGL[ ([HUFLVH6ROXWLRQV
$
,QVWUXFWRU Appendix A ■ Exercise Solutions
/HVVRQ ,GHQWLI\LQJ8VHU 5HTXLUHPHQWV ,GHQWLI\&ODVVURRP6HWXS([HUFLVH Locate scenario components in classroom The following diagram depicts the initial classroom setup.
DNN: TCPIP Network
Domain: World WorldHub/World Doctor Notes/World
Portugal
Admin PTApps01/PT/World PTApps01/SVR/World
Admin PTApps02/PT/World PTApps02/SVR/World
Admin PTHub/PT/World PTHub/SVR/World
A ■ 2
Brazil
Admin BRApps01/BR/World BRApps01/SVR/World
Admin BRApps02/BR/World BRApps02/SVR/World
Admin BRHub/BR/World BRHub/SVR/World
Deploying Domino Applications
,QVWUXFWRU Appendix A ■ Exercise Solutions
'HWHUPLQH1RWHV8VHU*URXS$FFHVV ([HUFLVH Identify user group access to applications The following table lists the appropriate access level for each group that requires access to each database. Application/Database
Group
ACL Level
User Type
Policies and Procedures
GlobalWorld
Reader
Person group
GlobalHR
Editor
Person group
GlobalWorld
Reader
Person group
GlobalMarketing
Editor
Person group
Delete documents [Marketing]
GlobalSales
Editor
Person group
Delete documents
GlobalDistribution
Reader
Person group
Customers
Reader
Person group
Resellers
Reader
Person group
Customer Service
GlobalSupport
Editor
Person group
Delete documents
Customer Information
GlobalSales
Editor
Person group
Delete documents
GlobalSupport
Reader
Person group
GlobalDistribution
Reader
Person group
GlobalWorld
Author
Person group
Create documents Delete documents
PTProdMngmnt
Editor
Person Group
Delete documents [ProductManager]
Product Catalog
Sales Order
Product Ideas
Privilege/Role
Delete documents
(continued on next page) ...
Deploying Domino Applications
A ■ 3
,QVWUXFWRU Appendix A ■ Exercise Solutions
'HWHUPLQH1RWHV8VHU*URXS$FFHVV([HUFLVH (continued)
Identify user group access to applications... Application/Database Product Design
Price List
Group
ACL Level
User Type
Privilege/Role
PTR&D
Editor
Person group
Delete documents [R&DManager]
PTProdMngmnt
Author
Person group
Create documents [ProductManager]
PTEngineers
Author
Person group
Create documents [Engineer]
PTManufacturing
Reader
Person group
GlobalSales
Reader
Person group
GlobalMarketing
Editor
Person group
GlobalDistribution
Reader
Person group
Delete documents [Marketing]
The following groups should appear in every database ACL: Group Name
A ■ 4
ACL Level
User Type
Privilege/Role
GlobalDesigners
Designer
Person group
All
GlobalManagers
Manager
Person group
All
Deploying Domino Applications
,QVWUXFWRU Appendix A ■ Exercise Solutions
'HWHUPLQH:HE8VHU$FFHVVWR 'DWDEDVHV([HUFLVH Web database access The following table shows the appropriate user access to the Worldwide’s databases. Database Name
Anonymous Access (Y/N)
Policies and Procedures Product Catalog
Anonymous Access Level
Group Name for Name & Password Access
Name & Password Access Level
Secure Transactions (Y/N)
No Access
✔
Reader
Sales Order
No Access
Customer Service
No Access
Customer Information
No Access
Product Ideas
No Access
Product Design
No Access
Price List
No Access
Deploying Domino Applications
Customers Resellers
Reader
✔
A ■ 5
,QVWUXFWRU Appendix A ■ Exercise Solutions
/HVVRQ ,GHQWLI\LQJ$SSOLFDWLRQ 6\VWHP5HTXLUHPHQWV 'HWHUPLQH+LJK$YDLODELOLW\ $SSOLFDWLRQV([HUFLVH Identify Worldwide’s critical applications The following table shows which Worldwide applications are deemed critical. Application/Database
A ■ 6
Does the success of the company depend on the application being constantly available? (Y/N)
If Yes, Why?
Policies and Procedures
N
Product Catalog
Y
Part of Sales Order application
Sales Order
Y
Potential for financial loss to the company is application is down
Customer Service
Y
Potential for dissatisfied customers if application is down
Customer Information
Y
Part of Sales Order and Customer Service applications
Product Ideas
N
Product Design
N
Price List
Y
Part of Sales Order application
Deploying Domino Applications
,QVWUXFWRU Appendix A ■ Exercise Solutions
,GHQWLI\6HUYHUVIRU'DWDEDVHV([HUFLVH Determine where databases reside The following diagram depicts on which servers each database should reside. Note: Servers that are circled are clustered.
All Databases WorldHub/World Web
POLICIES.NSF IDEAS.NSF PRODDSGN.NSF
PTApps01/SVR/World PRODCAT.NSF PRICELST.NSF CRITICAL
Web PTApps02/SVR/World POLICIES.NSF
IDEAS.NSF PRODDSGN.NSF PRODCAT.NSF Web PRICELST.NSF
PTHub/SVR/World
Deploying Domino Applications
POLICIES.NSF IDEAS.NSF
BRApps01/SVR/World PRODCAT.NSF ORDERS.NSF CUSTSVC.NSF CUSTINFO.NSF PRICELST.NSF
CRITICAL
Web
BRApps02/SVR/World POLICIES.NSF IDEAS.NSF PRODCAT.NSF ORDERS.NSF Web CUSTSVC.NSF CUSTINFO.NSF PRICELST.NSF BRHub/SVR/World
A ■ 7
,QVWUXFWRU Appendix A ■ Exercise Solutions
'HWHUPLQH6HUYHU$FFHVVWR'DWDEDVH ([HUFLVH Identify server access to databases The following table shows the appropriate access level for each server or server group to each of Worldwide’s databases. Application/Database Policies and Procedures
Product Catalog
Sales Order
Customer Service
Customer Information
Product Ideas
Product Design
Price List
A ■ 8
Server Group
ACL Level
User Type
Privilege/ Role
LocalDomainServers
Editor
Server group
All
HubServers
Manager
Server group
All
LocalDomainServers
Editor
Server group
All
HubServers
Manager
Server group
All
LocalDomainServers
Editor
Server group
All
HubServers
Manager
Server group
All
LocalDomainServers
Editor
Server group
All
HubServers
Manager
Server group
All
LocalDomainServers
Editor
Server group
All
HubServers
Manager
Server group
All
LocalDomainServers
Editor
Server group
All
HubServers
Manager
Server group
All
LocalDomainServers
Editor
Server group
All
HubServers
Manager
Server group
All
LocalDomainServers
Editor
Server group
All
HubServers
Manager
Server group
All
Deploying Domino Applications
,QVWUXFWRU Appendix A ■ Exercise Solutions
'HWHUPLQH8VHUDQG6HUYHU$FFHVVWR 6HUYHUV([HUFLVH Identify user and server access to servers The following table shows the type of access each user group and server should be allowed to each Worldwide server. Server WorldHub/World (Web)
Server Access List LocalDomainServers GlobalAdmins
PTHub/SVR/World (Web)
LocalDomainServers GlobalWorld
PTApps01/SVR/World
LocalDomainServers GlobalWorld
PTApps02/SVR/World (Web)
LocalDomainServers GlobalWorld
BRHub/SVR/World (Web)
LocalDomainServers GlobalWorld
BRApps01/SVR/World
LocalDomainServers GlobalWorld
BRApps02/SVR/World (Web)
LocalDomainServers GlobalWorld
Deploying Domino Applications
A ■ 9
,QVWUXFWRU Appendix A ■ Exercise Solutions
'HWHUPLQH:HE6HUYHU$FFHVV([HUFLVH Web server settings The following table shows the appropriate Web server settings for each classroom server. Server Name
Web Server
Anonymous Access
Name & Password Access
SSL Port Enabled
WorldHub/World
✔
✔
✔
✔
PTHub/SVR/World
✔
✔
✔
✔
PTApps02/SVR/World
✔
✔
✔
✔
BRHub/SVR/World
✔
✔
✔
✔
✔
✔
✔
✔
PTApps01/SVR/World
BRApps01/SVR/World BRApps02/SVR/World
A ■ 10
Deploying Domino Applications
,QVWUXFWRU Appendix A ■ Exercise Solutions
/HVVRQ 6HWWLQJ8S6HUYHUDQG 'DWDEDVH$FFHVV (QDEOH6HUYHU$FFHVV([HUFLVH Verify Worldwide’s server access groups Follow these steps to verify the server access groups. Step
Action
1
From Domino Administrator, select your assigned server to administer.
2
Select the People & Groups tab➝Domino Directories section➝World’s Address Book section➝Groups view.
3
Choose Tools➝ Groups➝ Manage.
4
In the left pane, select the HubServers group to view.
5
Click Details to view group membership.
6
Click Close when done viewing group membership.
7
Repeat steps 4 through 6 for each of the following groups: ■ ■ ■
8
GlobalAdmins LocalDomainServers GlobalWorld
When finished managing groups, click Done.
Deploying Domino Applications
A ■ 11
,QVWUXFWRU Appendix A ■ Exercise Solutions
/HVVRQ 6HWWLQJ8S6HUYHUDQG'DWDEDVH$FFHVV (continued) (QDEOH 6HUYHU $FFHVV ([HUFLVH
Set server access lists Follow these steps to allow access to the server. Step
Action
1
From Domino Administrator, select your assigned server to administer.
2
Select the Configuration tab➝Server section➝Current server document.
3
Click Edit Server.
4
Select the Security tab.
5
In the Server access section➝Access Server field, enter or select the groups for your assigned server as shown in the following table: Server
Server Access List
PTHub/SVR/World (Web)
LocalDomainServers GlobalWorld
PTApps01/SVR/World
LocalDomainServers GlobalWorld
PTApps02/SVR/World (Web)
LocalDomainServers GlobalWorld
BRHub/SVR/World (Web)
LocalDomainServers GlobalWorld
BRApps01/SVR/World
LocalDomainServers GlobalWorld
BRApps02/SVR/World (Web)
LocalDomainServers GlobalWorld
6
A ■ 12
Click Save and Close.
Deploying Domino Applications
,QVWUXFWRU Appendix A ■ Exercise Solutions
(QDEOH'DWDEDVH$FFHVV([HUFLVH Verify Worldwide’s groups for database access Follow these steps to verify the server access groups. Step
Action
1
From Domino Administrator, select your assigned server to administer.
2
Select the People & Groups tab➝Domino Directories section➝World’s Address Book section➝Groups view.
3
Choose Tools➝ Groups➝ Manage.
4
In the left pane, select the GlobalWorld group to view.
5
Click Details to view group membership.
6
Click Close when done viewing group membership.
7
Repeat steps 4 through 6 for each of the following groups: ■ ■ ■ ■ ■ ■ ■ ■ ■ ■ ■
8
GlobalHR HubServers GlobalMarketing GlobalSales GlobalDistribution Customers Resellers GlobalSupport PTR&D PTProdMngmnt PTManufacturing
When finished managing groups, click Done.
Deploying Domino Applications
A ■ 13
,QVWUXFWRU Appendix A ■ Exercise Solutions
(QDEOH'DWDEDVH$FFHVV([HUFLVH (continued)
Set database ACLs Follow these steps to set a database ACL. Note: As an alternative to using these steps, you can add ACL entries to multiple databases simultaneously using the procedure in the Modify multiple database ACLs simultaneously section of Lesson 3: Setting Up Server and Database Access. Step
Action
1
From Domino Administrator, select your assigned server to administer.
2
Select the Files tab.
3
Select the Policies and Procedures database, then double-click to open the database.
4
Choose File➝Database➝Access Control.
5
To add an entry, follow these steps: a. b. c. d.
Click Add. Click to select the GlobalHR group. Click OK. Select the following access: ■ User type: Person group ■ Access level: Editor ■
6
ACL privileges: Delete documents
Repeat step 5 to add each of the following entries: Group
7
ACL Level
User Type
Privilege/Role
GlobalWorld
Reader
Person group
LocalDomainServers
Editor
Server group
All
HubServers
Manager
Server group
All
Click OK to close the Access Control List dialog box. (continued on next page) ...
A ■ 14
Deploying Domino Applications
,QVWUXFWRU Appendix A ■ Exercise Solutions
(QDEOH'DWDEDVH$FFHVV([HUFLVH (continued)
Set database ACLs... Repeat steps 3 through 7 in the previous procedure for each of the following databases: Application/ Database Product Catalog
Sales Order
Customer Service
Customer Information
Group
ACL Level
User Type
Privilege/Role
GlobalWorld
Reader
Person group
GlobalMarketing
Editor
Person group
Delete documents [Marketing]
LocalDomainServers
Editor
Server group
All
HubServers
Manager
Server group
All
GlobalSales
Editor
Person group
Delete documents
GlobalDistribution
Reader
Person group
LocalDomainServers
Editor
Server group
All
HubServers
Manager
Server group
All
GlobalSupport
Editor
Person group
Delete documents
LocalDomainServers
Editor
Server group
All
HubServers
Manager
Server group
All
GlobalSales
Editor
Person group
Delete documents
GlobalSupport
Reader
Person group
GlobalDistribution
Reader
Person group
LocalDomainServers
Editor
Server group
All
HubServers
Manager
Server group
All
(continued on next page) ...
Deploying Domino Applications
A ■ 15
,QVWUXFWRU Appendix A ■ Exercise Solutions
(QDEOH'DWDEDVH$FFHVV([HUFLVH (continued)
Set database ACLs... Application/ Database Product Ideas
Product Design
Price List
A ■ 16
Group
ACL Level
User Type
Privilege/Role
GlobalWorld
Author
Person group
Create documents Delete documents
PTProdMngmnt
Editor
Person group
Delete documents [ProductManager]
LocalDomainServers
Editor
Server group
All
HubServers
Manager
Server group
All
PTR&D
Editor
Person group
Delete documents [R&DManager]
PTProdMngmnt
Author
Person group
Create documents [ProductManager]
PTEngineers
Author
Person group
Create documents [Engineer]
PTManufacturing
Reader
Person group
LocalDomainServers
Editor
Server group
All
HubServers
Manager
Server group
All
GlobalSales
Reader
Person group
GlobalMarketing
Editor
Person group
GlobalDistribution
Reader
Person group
LocalDomainServers
Editor
Server group
All
HubServers
Manager
Server group
All
Delete documents [Marketing]
Deploying Domino Applications
,QVWUXFWRU Appendix A ■ Exercise Solutions
(QDEOH:HE$FFHVV([HUFLVH Set up Web access to databases Follow these steps to set a database ACL. Step
Action
1
From Domino Administrator, select your assigned server to administer.
2
Select the Files tab.
3
Select the Policies and Procedures database, then double-click to open the database.
4
Choose File➝Database➝Access Control.
5
To add an entry, follow these steps: a. b. c. d.
Click Add. Enter Anonymous. Click OK. Select No Access for the Access level.
6
Click OK to close the Access Control List dialog box.
7
Repeat steps 3 through 6 for each of the following databases: ■ ■ ■ ■ ■ ■
8
Product Catalog: In step 5d, select Reader for the Access level. Customer Service Customer Information Product Ideas Product Design Price List
To set the appropriate access to the Sales Orders database, repeat steps 3 through 6 to add the Anonymous entry and the following additional entries: ■ ■
Customers: Reader access Resellers: Reader access (continued on next page) ...
Deploying Domino Applications
A ■ 17
,QVWUXFWRU Appendix A ■ Exercise Solutions
(QDEOH:HE$FFHVV([HUFLVH (continued)
Set up Web access to servers Follow these steps to allow anonymous access and name and password authentication on Worldwide servers. Step
Action
1
From Domino Administrator, select your assigned Web server to administer (PTApps01/SVR/World, PTHub/SVR/World, BRApps01/SVR/World, BRHub/SVR/World).
2
Select the Configuration tab➝Server section➝Current server document.
3
Click Edit Server.
4
Select the Security tab.
5
In the Server access section➝Access Server field, add the Customers and Resellers groups.
6
Select the Ports tab➝Internet Ports tab➝Web tab.
7
Set the following TCP/IP authentication options: ■ ■
8
Set the following SSL authentication options: ■ ■ ■
9
A ■ 18
Name & password: Yes Anonymous: Yes
SSL port status: Enabled Name & password: Yes Anonymous: Yes
Click Save and Close.
Deploying Domino Applications
,QVWUXFWRU Appendix A ■ Exercise Solutions
/HVVRQ 5ROOLQJ2XW'DWDEDVHVWR 6HUYHUV 6HW8S5HSOLFDWLRQ6FKHGXOHVIRU 'DWDEDVHV([HUFLVH Determine Connection documents You will need the following Connection documents: Source Server
Destination Server Group
Databases to Replicate
Repeat Interval
WorldHub/World
HubServers
Blank (to indicate all databases in common)
360 minutes
WorldHub/World
HubServers
critical\
120 minutes
PTHub/SVR/World
PTAppsServers
Blank (to indicate all databases in common)
360 minutes
PTHub/SVR/World
PTAppsServers
critical\
120 minutes
BRHub/SVR/World
BRAppsServers
Blank (to indicate all databases in common)
360 minutes
BRHub/SVR/World
BRAppsServers
critical\
120 minutes
Deploying Domino Applications
A ■ 19
,QVWUXFWRU Appendix A ■ Exercise Solutions
/HVVRQ 5ROOLQJ2XW'DWDEDVHVWR6HUYHUV (continued) 6HW 8S 5HSOLFDWLRQ 6FKHGXOHV IRU 'DWDEDVHV ([HUFLVH
Create Connection documents Follow these steps to create Connection documents. Step
Action
1
From Domino Administrator, select your assigned server to administer.
2
Select the Configuration tab➞Replication section➞Connections view.
3
Click Add Connection.
4
On the Basics tab, select Local Area Network in the Connection type field.
5
Complete the Source server and Source Domain fields from the Connection documents table.
6
Complete the Destination server or server group, and Destination domain from the Connection documents table.
7
Click Choose ports, select TCPIP, and click OK.
8
On the Routing/Replication tab, complete the following fields: Field
9
Value
Replication Task
Enabled
Replicate databases of ___ priority
Low & Medium & High
Replication Type
Pull Push
Files/Directories to Replicate
From the Connection documents table
Replication Time Limit
Blank
Routing Task
None
On the Schedule tab, complete the following fields: Field
A ■ 20
Value
Schedule
Enabled
Call at times
12:00 AM - 11:59 PM
Repeat interval
From the Connection documents table
Days of week
Sun, Mon, Tue, Wed, Thu, Fri, Sat
10
Click Save and Close.
11
Repeat steps 3 through 10 to create the 5 additional Connection documents.
Deploying Domino Applications
,QVWUXFWRU Appendix A ■ Exercise Solutions
/HVVRQ ,GHQWLI\LQJ'HSOR\PHQW 3UREOHPV 'HWHUPLQH6HUYHU$FFHVV([HUFLVH Identify appropriate server access guidelines Based on the following guidelines for setting server access, the following table shows the likely solution for each problem. 1. Assign an access level that is as least as high as the highest user access level. 2. Include servers in read access lists for database design elements. 3. Assign appropriate access to intermediate servers. 4. Assign Reader access for one-way replication. Give a server Reader access to a replica when you want to allow the server to receive information from the replica, but not to send changes back. 5. Assign Editor access to allow author’s changes to replicate. If a replica includes documents containing fields of the Authors data type which allows authors to modify their own documents, a server must have at least Editor access to replicate modifications. 6. A database that does not replicate should have at least one server in its ACL to serve as the administration server for the database. This allows the Administration Process on a server to update names in the ACL.
Solution
Problem
5
Changes were made to Server A’s replica by someone with Author access. Server A’s changes do not replicate to Server B.
1
Design changes were made to the replica on Server A, but do not replicate to Server B.
2
A replica on Server A includes a form access list that limits who can read documents created with the form. Server B needs to pull new documents and changes to documents created with the form.
4
Server B needs to receive changes from a replica on Server A, but should not send changes to Server A.
3
ACL changes on Server A's replica should replicate to Server C by way of Server B.
6
User is unable to access database due to incorrect ACL.
Deploying Domino Applications
A ■ 21
,QVWUXFWRU Appendix A ■ Exercise Solutions
/HVVRQ 6ROYLQJ'HSOR\PHQW3UREOHPV (QVXUH$FFXUDF\RI'DWDEDVH9LHZV ([HUFLVH Schedule a server task Follow these steps to schedule the Updall server task to run periodically using a server Program document. Step
Action
1
Select the Configuration tab➞Server section➞Programs view.
2
Click Add Program.
3
Complete the Basics tab as follows: ■ ■ ■
4
Select the Schedule tab, and complete as follows: ■ ■ ■ ■
5
A ■ 22
Program name: Updall Command line: Updall domino\data\critical -V Server to run on: Your Server
Enabled/disabled: Enabled Run at times: 2:00 AM Repeat interval of: 0 (run program once) Days of week: Friday
Click Save and Close.
Deploying Domino Applications
,QVWUXFWRU Appendix A ■ Exercise Solutions
7URXEOHVKRRW5HSOLFDWLRQ([HUFLVH Problem 1: Replication with instructor’s hub fails Follow these steps to determine the cause of the problem. Step 1
Action Replicate with the instructor’s server using these steps: a. Select the Server tab➞Status tab. b. Choose Tools➞Server➞Replicate. c. Select WorldHub/World in the Which server do you want to replicate with? field. d. Accept the default options. Click Replicate, then click Done.
2
View the error in the Notes Log using these steps: a. Select the Server tab➞Analysis tab➞Notes Log section➞Replication Events view. b. Double-click to open the document with the most recent date and time.
3
Edit the Server document for WorldHub/World to fix the problem. a. Select the Configuration tab➞Server section➞All server documents view. b. Select the Server document for WorldHub/World. c. Click Edit Server. d. On the Security tab, remove your assigned server’s name from the Not access server field. e. Click Save and Close.
Deploying Domino Applications
A ■ 23
,QVWUXFWRU Appendix A ■ Exercise Solutions
7URXEOHVKRRW5HSOLFDWLRQ([HUFLVH (continued)
Problem 2: Replication with Module D Policies and Procedures fails Follow these steps to determine the cause of the problem. Step 1
Action Replicate with the instructor’s server using these steps: a. Select the Server tab➞Status tab. b. Choose Tools➞Server➞Replicate. c. Select WorldHub/World in the Which server do you want to replicate with? field. d. Select Selected database. e. Click Database. Select the Module D Policies and Procedures database from the list, then click OK. f. Click Replicate, then click Done.
2
View the error in the Notes Log using these steps: a. Select the Server tab➞Analysis tab➞Notes Log section➞Replication Events view. b. Double-click to open the document with the most recent date and time.
3
Modify the database ACL to fix the problem. a. b. c. d. e. f.
A ■ 24
Select the Files tab. Double-click to open the Module D Policies and Procedures database. Choose File➞Database➞Access Control. Select the entry for WorldHub/World. Select the Editor access level. Click OK.
Deploying Domino Applications
,QVWUXFWRU Appendix A ■ Exercise Solutions
7URXEOHVKRRW5HSOLFDWLRQ([HUFLVH (continued)
Problem 3: Replication with Module D Product Catalog fails Follow these steps to determine the cause of the problem. Step 1
Action Add an ACL entry. a. b. c. d. e. f. g.
2
Select the Files tab. Double-click to open the Module D Product Catalog database. Choose File➞Database➞Access Control. Click Add. Enter any valid user, server, or group name, and click OK. Select any access level. Click OK.
Replicate with the instructor’s server using these steps: a. Select the Server tab➞Status tab. b. Choose Tools➞Server➞Replicate. c. Select WorldHub/World in the Which server do you want to replicate with? field. d. Select Selected database. e. Click Database. Select the Module D Product Catalog database from the list, then click OK. f. Click Replicate, then click Done.
3
View the database ACL for Module D Product Catalog on the instructor’s server. a. b. c. d. e. f. g. h.
Select WorldHub/World to administer. Select the Files tab. Double-click to open the Module D Product Catalog database. Choose File➞Database➞Access Control. Note that the ACL entry did not replicate. Select the entry for your assigned server. Select the Manager access level. Click OK.
Deploying Domino Applications
A ■ 25
,QVWUXFWRU Appendix A ■ Exercise Solutions
7URXEOHVKRRW5HSOLFDWLRQ([HUFLVH (continued)
Problem 4: Replication with Module D Sales Orders fails Follow these steps to determine the cause of the problem. Step 1
Action Replicate with the instructor’s server using these steps: a. Select the Server tab➞Status tab. b. Choose Tools➞Server➞Replicate. c. Select WorldHub/World in the Which server do you want to replicate with? field. d. Select Selected database. e. Click Database. Select the Module D Sales Orders database from the list, then click OK. f. Click Replicate, then click Done.
2
View the error in the Notes Log using these steps: a. Select the Server tab➞Analysis tab➞Notes Log section➞Replication Events view. b. Double-click to open the document with the most recent date and time.
3
View the database properties for Module D Sales Orders on WorldHub/ World. a. b. c. d. e. f.
4
View the database properties for Module D Sales Orders on your assigned server. a. b. c. d. e. f.
A ■ 26
Select WorldHub/World to administer. Select the Files tab. Double-click to open the Module D Sales Orders database. Choose File➞Database➞Properties. Select the i tab. Note the replica ID.
Select your assigned server to administer. Select the Files tab. Double-click to open the Module D Sales Orders database. Choose File➞Database➞Properties. Select the i tab. Note that the replica ID is different from the Module D Sales Orders database on WorldHub/World. These databases are not replicas.
Deploying Domino Applications
,QVWUXFWRU Appendix A ■ Exercise Solutions
7URXEOHVKRRW5HSOLFDWLRQ([HUFLVH (continued)
Problem 5: Replication with Module D Customer Service fails Follow these steps to determine the cause of the problem. Step 1
Action Replicate with the instructor’s server using these steps: a. Select the Server tab➞Status tab. b. Choose Tools➞Server➞Replicate. c. Select WorldHub/World in the Which server do you want to replicate with? field. d. Select Selected database. e. Click Database. Select the Module D Customer Service database from the list, then click OK. f. Click Replicate, then click Done.
2
View the error in the Notes Log using these steps: a. Select the Server tab➞Analysis tab➞Notes Log section➞Replication Events view. b. Double-click to open the document with the most recent date and time.
3
View the replication settings for Module D Customer Service on your assigned server. a. b. c. d. e. f.
Select your assigned server to administer. Select the Files tab. Double-click to open the Module D Customer Service database. Choose File➞Replication➞Settings. Select the Other tab. Deselect Temporarily disable replication.
Deploying Domino Applications
A ■ 27
,QVWUXFWRU Appendix A ■ Exercise Solutions
7URXEOHVKRRW5HSOLFDWLRQ([HUFLVH (continued)
Problem 6: Replication with Module D Customer Information fails Follow these steps to determine the cause of the problem. Step 1
Action Delete a document from Module D Customer Information. a. b. c. d. e.
2
Select your assigned server to administer. Select the Files tab. Double-click to open the Module D Customer Information database. Select a document, and press Delete. Press F9, then click Yes to confirm deleting the document.
Replicate with the instructor’s server using these steps: a. Select the Server tab➞Status tab. b. Choose Tools➞Server➞Replicate. c. Select WorldHub/World in the Which server do you want to replicate with? field. d. Select Selected database. e. Click Database. Select the Module D Customer Information database from the list, then click OK. f. Click Replicate, then click Done.
3
View Module D Customer Information on WorldHub/World. a. b. c. d.
4
View the replication settings for Module D Customer Information on your assigned server. a. b. c. d. e. f.
A ■ 28
Select your assigned server to administer. Select the Files tab. Double-click to open the Module D Customer Information database. Note that the document was not deleted.
Select your assigned server to administer. Select the Files tab. Double-click to open the Module D Customer Information database. Choose File➞Replication➞Settings. Select the Send tab. Deselect Do not send deletions made in this replica to other replicas.
Deploying Domino Applications
$SSHQGL[
%
:RUOGZLGH&RUSRUDWLRQ ,QIUDVWUXFWXUH3ODQ
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
$ERXW7KLV'RFXPHQW Worldwide Corporation’s infrastructure This document gives an overview of Worldwide Corporation’s infrastructure. It is intended to provide an overall view of the environment as designed by the planning team. It does not provide details on specific Domino functionality. This document will be continually updated. Administrators should refer to the Policies and Procedures database on any Worldwide Corporation server for the latest version of this document. Lotus Domino/Notes is Worldwide Corporation’s global standard for electronic mail and for developing and deploying groupware applications.
B ■ 2
Deploying Domino Applications
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
2UJDQL]DWLRQ6WUXFWXUH Worldwide Corporation’s organizational chart The structure of Worldwide Corporation appears below:
World Headquarters Portugal
Customer One Customer Two Reseller One Reseller Two
Administrator
Portugal Manufacturing Research and Development Product Management Quality Control Human Resources System Administration
Brazil Sales and Marketing Customer Support Distribution Human Resources System Administration
Sales Offices
Sales Reps
Deploying Domino Applications
B ■ 3
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
8VHU1HHGV Application access by department Worldwide Corporation’s users require the following access to applications. (User needs were determined by function across all geographies.) Application/Database
User Group
Policies and Procedures database
All Worldwide employees
Product Catalog database
All Worldwide employees
Domino Server Application
Human Resources
Located on Servers in... Lisbon All regions
Web
Marketing
Lisbon All regions
Sales Order application
Sales
Application
Lisbon
(uses product catalog, customer information, and price list databases) *
Customers
Web
All regions
Application
Lisbon
At this time, customers and resellers can only view their own orders from the Web. In the future, Worldwide will allow creation of sales orders by customers and resellers. Customer Service application
Resellers Distribution
Support
(uses Customer Information database) * Customer Information database
All regions Sales
Application
Lisbon
Support
Web
All regions
Application
Lisbon
Distribution Product Ideas database
All Worldwide employees
All regions
Product management Product Design database
Application
Lisbon
Sales
Application
Lisbon
Marketing
Web
All regions
Research and development Product management Manufacturing Engineers
Price List database
Distribution
Note: Asterisks (*) indicate critical applications.
B ■ 4
Deploying Domino Applications
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
8VHU1HHGV (continued)
User group access Each group requires the following type of access to Worldwide’s applications. Application/Database
User Group
Needs Access to
Policies and Procedures database
All Worldwide employees
Read documents.
Human Resources
Create, edit, or delete documents authored by anyone.
Product Catalog database
All Worldwide employees
Read documents.
Marketing
Create, edit, or delete documents authored by anyone. View completed product designs.
Sales Order application
Sales
Create, edit, or delete documents authored by anyone.
Distribution
Read documents.
Customers
Read their own orders from a Web browser.
Resellers
Read their own orders from a Web browser.
Customer Service application
Support
Create, edit, or delete documents authored by anyone.
Customer Information database
Sales
Create, edit, or delete documents authored by anyone.
Support
Read documents.
Distribution
Read documents.
All Worldwide employees
Create documents, and edit the documents they author.
Product Management
Create, edit, or delete documents authored by anyone.
Product Ideas database
Route documents to the Product Design database. (continued on next page) ...
Deploying Domino Applications
B ■ 5
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
8VHU1HHGV (continued)
User group access... Application/Database Product Design database
User Group Research and Development
Needs Access to Create, edit, or delete documents authored by anyone. Review new product designs to assign an engineer.
Product Management
Create documents, and edit the documents they author.
Manufacturing
Read documents.
Engineers
Create documents, and edit the documents they author. Change the status of product designs.
Price List database
Sales
Read documents.
Marketing
Create, edit, or delete documents authored by anyone. Interact with the Product Catalog database.
Distribution
B ■ 6
Read documents.
Deploying Domino Applications
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
6HUYHUVE\7DVN Tasks to be performed by each server Worldwide Corporation will designate servers to specific tasks based on Information Groups. The following table lists the servers, associated tasks, and rationale behind the decision. Server Type Mail
Tasks Stores users’ mail and databases and routes mail across the intranet and Internet
Rationale ■ ■ ■ ■
■
Application
Stores application databases
■ ■
■
■
Web
Provides access to an application from the Internet or to corporate intranet. Can use either: ■ ■
■
■
Domino HTTP stack Microsoft IIS
Provide easier administration. Minimize server processor load. Reduce network traffic. Provide predictable server performance and grouping of users. Allow user access to databases when mail server is down. Provide easier administration. Group applications by usage, replication needs, and/or security requirements. Allow tuning of server to optimize performance and response time independent of mail usage. Ease of expansion by adding new database servers as usage and storage needs increase. Can place outside the firewall for Internet access. Provide employees with access to corporate information from a browser.
Hub
Routes mail and replicates databases to and from other hub or spoke servers
Provides easier administration and maintenance.
Internet Messaging
Provides non-Domino mail services such as:
Use Domino server to:
■ ■ ■ ■ ■
Deploying Domino Applications
POP3 IMAP SMTP NNTP LDAP
■
Provide employees with access to non-Domino mail files.
B ■ 7
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
6HUYHUVE\/RFDWLRQ Worldwide Corporation’s domain There will be one Domino Domain (World) that includes all Worldwide Corporation offices. Worldwide Corporation’s Internet domain name was previously established as World.com.
Topology Worldwide Corporation has selected a hub-and-spoke topology for ease of management and future expansion. Each regional office will have a hub server and one or more spoke servers. Each site will be set up to run independently, although they will be connected to the corporate hub. Connection documents are required for replication to tell the corporate hub how and when to communicate with other servers and for spoke servers to connect to the corporate hub. Portugal (Lisbon) is the center of the infrastructure. Lisbon houses the main hub server and has high-speed links running to the offices. Each individual Domino server is responsible for its own mail routing and replication events. The hub server is responsible for replication of the critical databases between all its spoke servers. The following map shows the locations and types of servers.
Portugal Hub
Mail
Corporate Hub
Brazil Hub
Application Mail
Application
B ■ 8
Hub
UK Mail
Application
Deploying Domino Applications
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
6HUYHUVE\/RFDWLRQ (continued)
The Lisbon hub server The hub server is the administration server for the Worldwide Corporation domain and replicates the Directory Catalog and the Administration Requests database to all other Domino servers within the Worldwide Corporation domain (World). Sales offices and sales reps will dial in to their local regional hub server using Notes clients and Internet clients, such as browsers. Customers and vendors will have access through a Web server in Lisbon.
Domino Named Networks The regional sites will be logically grouped into Domino Named Networks (DNN), since they share a common protocol (TCP/IP) and are constantly connected. Grouping the Domino Named Networks this way will ensure that users see information on their local servers to reduce network traffic. Each country office has one or more Domino servers. The following table shows the countries to be configured and the Domino Named Networks (DNN) for each country. Country
Country code
DNN
Connect status
Portugal
PT
WorldPTNET1
WAN
United Kingdom
UK
WorldUKNET1
WAN
Brazil
BR
WorldBRNET1
WAN
Deploying Domino Applications
B ■ 9
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
6\VWHP$GPLQLVWUDWLRQ System administration allocation System administration is locally controlled by region, but monitored from the Lisbon office. Administration tasks are controlled by regional administrators. General policies and guidelines are maintained and distributed from the Lisbon office. Implementation and design changes are carried out after business justifications are submitted and approved. All system administrators use the Domino Administrator for all administration tasks.
B ■ 10
Deploying Domino Applications
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
1HWZRUN Wide Area Network expansion Worldwide Corporation added to their existing WAN by: ■ ■ ■ ■ ■ ■
Incorporating TCP/IP as their primary network protocol Developing a plan to phase out non-TCP/IP protocols over time Using AT&T’s global frame relay network as its global WAN Adding networking to the Rio office Adding networking connections to all offices from the Lisbon office Upgrading existing server network cards and adding network cards
Although the WAN was upgraded, Worldwide Corporation does not want to rely solely on the network. They purchased additional servers for regional offices to ensure reliability and consistency across geographical locations.
Deploying Domino Applications
B ■ 11
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
'LUHFWRU\6WUDWHJ\ Domino Directory and Directory Catalogs There will be only one Domino domain (World) for the entire Worldwide Corporation Domino environment. The model matches the physical layout of the Worldwide Corporation WAN. The first configured server (the corporate hub) will have full administration rights over the entire domain. The Domino Directory will reside on the corporate hub server in Lisbon, and replicate to each regional hub server. The corporate hub will create Directory Catalogs, and replicate to regional hubs for use by remote users. Remote users can keep a local replica of the Directory Catalog on the client for faster response time and timely encryption of messages. System administrators will periodically update the Directory Catalog and replicate once a day to hub servers. Directory access is from: ■ ■ ■
B ■ 12
Notes clients Web browsers Other e-mail and directory clients
Deploying Domino Applications
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
5HSOLFDWLRQ7RSRORJ\ Hub-and-spoke topology A hub-and-spoke topology will be used for replication. This structure consists of a main hub with two spoke servers, which are the regional hub servers. Each regional hub server also has its own spoke servers. The corporate hub server will be the main hub and take overall control of replication. There will be Connection documents from the main hub to all regional hub servers. Replication will be Pull Push. The following map shows Worldwide Corporation’s replication topology. Corporate Hub
Portugal Hub Mail
Application
Brazil Hub
UK Mail
Application
Deploying Domino Applications
Hub
Mail
Application
B ■ 13
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
$SSOLFDWLRQ7\SHV Locations for applications Types of applications will be separated and reside on different application servers to isolate problems and simplify management. All applications will be replicated to the Lisbon hub for central control and reliability. Application/Database
Policies and Procedures database
Product Catalog database
Resides on Lisbon Hub and...
■ ■
■ ■
■
Sales Order application
■ ■
■
Customer Service application
■ ■
Customer Information database
■ ■
■
Product Ideas database
■ ■
Product Design database
■ ■
Price List database
■ ■ ■
B ■ 14
Replication Schedule from the Lisbon Hub...
Policies and Restrictions
Regional hubs Regional non-clustered application servers
Every six hours during mutual off-peak hours for Lisbon and regional hubs
Local languages and customs,
Regional hubs Regional clustered application servers Regional Web servers
Every two hours during mutual off-peak hours for Lisbon and regional hubs
Local languages and regulations
Regional hubs Regional clustered application servers Regional Web servers
Every two hours
Local languages and customs
Regional hubs Regional clustered application servers
Every two hours
Local languages and currencies
Regional hubs Regional non-clustered application servers Regional Web servers
Every two hours
Local languages
Regional hubs Regional non-clustered application servers
Every six hours
Local languages
Lisbon hub Lisbon non-clustered application servers
Every six hours
Regional hubs Regional clustered servers Regional Web servers
Every two hours
escalation procedures
Deploying Domino Applications
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
0DLO5RXWLQJ6WUDWHJ\ Internal and external mail routing Each region will have its own server that is responsible for local mail delivery, but will rely on the corporate mail server for inbound Internet mail: ■ ■
Simple Message Transfer Protocol (SMTP) will route mail to the Internet. The Notes Remote Procedure Call, NRPC, will route mail within the corporate intranet.
The following configuration provides for ease of configuration and optimum load balancing and failover: ■ ■ ■ ■
■
One Internet domain ISP as a relay host to Internet Regional Domino Named Networks (one for each region) The Corporate Hub in Lisbon is enabled to route external mail using the SMTP protocol. All mail servers have Connection documents and route mail using NRPC internally.
Mail administrators Administrators must perform the following tasks: ■
■
■
Store the Internet domain name in the Foreign SMTP and Global Domain documents. List the inbound mail servers in the MX records in the Domain Name Service under the domain’s name. Only one is required. (Note that load balancing for multiple servers is dependent on the algorithm used by the client SMTP system to select a server from the MX records.) Configure complete address lookup or configure local part only lookup to identify each mail recipient’s mail server so that the router can make the final delivery.
Deploying Domino Applications
B ■ 15
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
0DLO5RXWLQJ6WUDWHJ\ (continued)
Mail clients Initially, all mail users will have Notes mail files. In the future, some mail users may use other Internet mail client software. At that time, Worldwide Corporation will set up select Internet POP3 Messaging Servers for non-Notes mail clients to access mail files on the Domino server.
Mail monitors and controls The following mechanisms will be put into place for monitoring and controlling mail: ■ ■ ■
■
Automated testing of mail routers Mail quotas Maximum message size for inbound and outbound message set to 10 megabytes. User restrictions, such as full text indexing
Mail Routing topology The following map shows Worldwide Corporation’s mail routing topology:
Internet
Corporate Hub
Portugal Hub Mail
Application
Brazil Hub
UK Mail
Application
B ■ 16
Hub
Mail
Application
Deploying Domino Applications
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
:RUOGZLGH&RUSRUDWLRQ1DPLQJ &RQYHQWLRQV Organization and organizational unit naming The following table defines the Worldwide Corporation naming scheme. Organization Component
Value
Certifier
Organization (O)
World
CERT.ID
Organizational Units (OU)
PT: Portugal UK: United Kingdom BR: Brazil SVR: All servers
PT.ID UK.ID BR.ID SVR.ID
Organizational units are based on geographical regions. The servers’ organizational unit will be used for better control of management and creation of servers. All organizational units and common names are descendants of the organization certifier /World.
User naming The following table provides user naming conventions. Type
Syntax
Common name for Domino environment
Firstname Lastname
Internet mail addressing
[email protected] where username = Firstname_Lastname
Deploying Domino Applications
B ■ 17
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
:RUOGZLGH&RUSRUDWLRQ1DPLQJ&RQYHQWLRQV (continued)
Server naming The following table provides examples of regional server names. Country
Country code
Server names
Portugal
PT
PTHUB01/SVR/World (Hub/Comm) PTAPPS01/SVR/World (Application) PTMAIL01/SVR/World (Mail)
United Kingdom
UK
UKHUB01/SVR/World (Hub) UKAPPS01/SVR/World (Application) UKMAIL01/SVR/World (Mail)
Brazil
BR
BRHUB01/SVR/World (Hub) BRAPPS01/SVR/World (Application) BRMAIL01/SVR/World (Mail)
Naming examples The following table provides naming examples. If You Want to... Create a new server.
Create a new organizational unit.
Then... Use the name XXType##/SVR/World, where: XX is the standard country code ■ Type is the server type, for example, Mail ■ ## is the server number of this type For example, the first mail server in Australia might be: AUMAIL01/SVR/World ■
Use the standard country code that identifies the location of the organizational unit. A new organizational unit for Canada might be: /CN/World
Create a new user.
Certify under the regional organizational unit where the user works. A new user named Sara Jones in London would be: Sara Jones/UK/World The corresponding Internet name would be:
[email protected]
B ■ 18
Deploying Domino Applications
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
:RUOGZLGH&RUSRUDWLRQ1DPLQJ&RQYHQWLRQV (continued)
Certifier/ID management policy The following table describes the certifier/ID management policy. Type Organization certifier
Management Policy Lisbon system administrators create the O certifier. Lisbon system administrators create the OU certifiers. Access is limited to two administrators using multiple passwords. Store IDs on multiple floppy disks in protected areas.
Organizational unit certifiers
Regional administrators and Lisbon administrators keep copies of OU certifiers. Store IDs on multiple floppy disks in protected areas.
Server IDs
Lisbon system administrators create all server IDs. Store IDs on the server. Use only for the server.
User IDs
Regional administrators create user IDs. Regional system administrators keep copies of IDs in a secure database on the regional hub server. Use a Certification Log database to track certification. All Certifier IDs have multiple passwords and expiration dates of two years from date of creation. Store backups in a secure off-site location.
Key files for Internet (X.509) Certificates
Using Domino as a Certificate Authority, administrators will create X.509 certificates using the Certificate Authority Application on a workstation and store the CA key ring on that workstation, not on the server. Do not distribute these files to other administrators in the organization. Store the certificates in a secure off-site location. Store in corporate user Notes ID files. Store in trusted LDAP directories (for customers)
Deploying Domino Applications
B ■ 19
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
:RUOGZLGH&RUSRUDWLRQ1DPLQJ&RQYHQWLRQV (continued)
Hierarchical naming for Worldwide Corporation The following diagram shows the organization hierarchy, including currently planned server names.
/World
/PT/Word
/UK/World
/BR/World
/SVR/World PTHub01 UKHub01 BRHub01 PTMail01 UKMail01 BRMail01 PTApps01 UKApps01 BRApps01
B ■ 20
Deploying Domino Applications
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
5HPRWH$FFHVV Internet access The following Internet access will be used: ■ ■
Authenticated access for employees Public access Web server for vendors, resellers, and customers, including controlled access to servers, applications, and data
The following table describes types of access. Employees
Customers
Vendors
X.509 certificates
Anonymous access to catalog and public company information.
Anonymous access
Resellers Authenticated access through outside LDAP directories.
Future: Username and password access to information about their own orders, for example, shipping information.
Remote users Users at offices that do not have direct connections to the WAN can use an Internet Server Provider (ISP) to access the Domino system through a local Firewall server. Remote users can dial in to their mail server through the local Firewall servers.
Deploying Domino Applications
B ■ 21
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
6HUYHU&RQILJXUDWLRQVDQG6HFXULW\ Server licenses The following table lists the server licenses that will be used for each of the server types. Server type
Server license
Rationale
Domino Mail and Internet Messaging servers
Domino Mail Server
To provide Domino and Internet mail services
Application and Web servers
Domino Application Server
To provide custom database applications for Notes and Web clients
Hub server
Domino Enterprise server
To provide the following services: ■ ■ ■
Clustering Partitioning Transaction logging
File structure The following table lists the standard file structure on the servers. Path
Contents
Description
Domino
System files, client files
Client files will be installed for network distribution purposes.
Domino\data
Databases, general data files
Domino system databases that are required for Domino to function properly.
Domino\data\critical
Databases
Critical applications that require frequent replication.
Use the default installation file paths whenever possible to ensure standardized training and ease of support and troubleshooting. Tip: Store Domino executables on a separate disk than Domino data for better performance. These areas of the Domino file structure are only accessible to designated personnel for installation purposes. All other Domino data is protected by operating system security and is accessible to Domino administrators only.
B ■ 22
Deploying Domino Applications
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
6HUYHU&RQILJXUDWLRQVDQG6HFXULW\ (continued)
Configuration documents Every Worldwide Corporation server has its own server Configuration document. This ensures that each server configuration can be modified separately and that there is a log of any changes made. The Domino configuration database will be used for server setup to streamline and automate setup. A Configuration document exists for each server type (for example, hub, mail, application) and is then distributed to other servers of the same type.
Domino servers by server type The following table lists the minimum requirements for all server configuration documents. Domino server type Standard services for all servers
Recommended options ■ ■ ■
Mail Router Replicator Indexer
■ ■ ■ ■
Agent Manager Administration Process Event Manager Statistics
■
Calendar Connector Schedule Manager HTTP for Web mail
Application servers
■
Standard services only, no additional services
Hub servers
■ ■
HTTP, Both Mail and Applications SMTP (Lisbon hub only)
Web servers
■
HTTP for Web Applications
Internet messaging servers
■
POP3 and SMTP IMAP LDAP NNTP
Mail servers
■ ■
■ ■ ■
Deploying Domino Applications
B ■ 23
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
6HUYHU&RQILJXUDWLRQVDQG6HFXULW\ (continued)
Group naming for server access Groups will be used to determine access to servers and for added security. The following naming convention will be used to identify the location and type of group: region[global]descriptionofgroup For example: PTAdmins or GlobalSales Within groups, names are sorted in alphabetical order.
Deny access groups As an added security feature, Worldwide Corporation will use four groups, which represent our access denial to any Worldwide Corporation servers. In each server restrictions setting, these groups will be added in the Not access server fields. The following table describes the four groups. Group name
Description
Deny Access A-F
Denial for people whose surnames begin with A-F.
Deny Access G-L
Denial for people whose surnames begin with G-L.
Deny Access M-R
Denial for people whose surnames begin with M-R.
Deny Access S-Z
Denial for people whose surnames begin with S-Z.
Before deleting a user from the Domino system, add the user to one of these groups. This will ensure immediate denial to any Worldwide Corporation server. Note: This is subject to replication of the changes throughout the domain, which will take no longer than 60 minutes.
B ■ 24
Deploying Domino Applications
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
6HUYHU&RQILJXUDWLRQVDQG6HFXULW\ (continued)
Server configuration plan The following table describes the server configuration plan. Standard
Requirement
Database size quotas
No database size quotas
Database names
No database naming standards
File system directory structure
Standard directory structure, for example: \Domino\Data\Global\HR1 \Domino\Data\Global\Marketing \Domino\Data\Local\Marketing \Domino\Data\Local\Dev1
Groups spanning the entire organization
One global group for the entire company, for example: GlobalWorld (for all Worldwide Corporation employees) One group for all server administrators, for example: GlobalAdmins Groups for specific categories of employees, for example: GlobalSales
Groups at all sites
A group for each region, for example: PTAll (for all Worldwide Corporation employees in Portugal) One group for administrators per region, for example: PTAdmins (for all server administrators in Portugal)
Deploying Domino Applications
B ■ 25
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
&OLHQW&RQILJXUDWLRQVDQG6HFXULW\ Client licenses: Client licenses will be: ■
■ ■
Notes Client for most users, all generic IDs, and any contractual or affiliate accounts Domino Designer for users who will create, modify, or design databases Domino Administrator for system administrators
Desktop deployment User Setup Profiles will be used to set up users’ desktops. For Internet mail, account documents will be created locally for each mail protocol. Mail will be stored in Notes Rich Text format. Worldwide Corporation will use setup profiles to create and update Location and Connection documents on workstations for dialup users to determine where and how to locate the servers.
Client IDs and certificates The following table describes the policy regarding client IDs and certificates: Type Notes client IDs
Policy Certify all IDs using a Domino certificate. Users responsible for secure or encrypted information, such as pricing information to resellers, will hold an Internet (X.509) certificate. Stored on workstations for all users and encrypted locally. Copies are kept in a secure location by local as well as corporate administrators.
Internet client browsers
B ■ 26
Accept CA certificate as a trusted root. Store internal signed client certificates for access to secure information.
Deploying Domino Applications
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
&OLHQW&RQILJXUDWLRQVDQG6HFXULW\ (continued)
Client database access Groups will be used to determine access to applications. The following naming conventions will be used to identify location and type of group: region[global]databasenameaccess For example: RioCustomerServiceReaders or GlobalPoliciesReaders Within groups, names are sorted in alphabetical order.
File storage Client-based data files, such as IDs, NOTES.INI, and *.DSK, will be stored on the workstation for all users and encrypted locally.
Deploying Domino Applications
B ■ 27
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
,PSOHPHQWLQJWKH'HSOR\PHQW3ODQ Implementation checklist Complete these tasks to implement the Domino/Notes components of the Worldwide Corporation deployment plan. Task
B ■ 28
Procedure
❏
1
Set up the first server.
❏
2
Add an administrator’s workstation.
❏
3
Add Domino servers.
❏
4
Add Notes clients.
❏
5
Set administration preferences.
❏
6
Set up access to servers.
❏
7
Set up access to the Domino Directory.
❏
8
Set up server logging.
❏
9
Synchronize Domino system databases throughout the domain.
❏
10
Add mobile clients.
❏
11
Route mail internally.
❏
12
Route mail to the Internet.
❏
13
Set up Calendaring and Scheduling.
❏
14
Configure the Domino Web server.
❏
15
Set up a certifying authority for SSL and S/MIME.
❏
16
Set up Internet protocols for SSL.
❏
17
Set up browser and Notes clients for SSL and S/MIME.
❏
18
Configure Internet messaging servers.
❏
19
Set up non-Domino messaging clients.
Deploying Domino Applications
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
4XLFN5HIHUHQFH3DJH 2UJDQL]DWLRQ6WUXFWXUH Worldwide Corporation’s organizational chart The structure of Worldwide Corporation appears below:
World Headquarters Portugal
Customer One Customer Two Reseller One Reseller Two
Administrator
Portugal Manufacturing Research and Development Product Management Quality Control Human Resources System Administration
Brazil Sales and Marketing Customer Support Distribution Human Resources System Administration
Sales Offices
Sales Reps
Deploying Domino Applications
B ■ 29
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
&ODVVURRP1RWHV
B ■ 30
Deploying Domino Applications
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
4XLFN5HIHUHQFH3DJH 8VHU1HHGV Application access by department Worldwide Corporation’s users require the following access to applications. (User needs were determined by function across all geographies.) Application/Database
User Group
Policies and Procedures database
All Worldwide employees
Product Catalog database
All Worldwide employees
Domino Server Application
Human Resources
Located on Servers in... Lisbon All regions
Web
Marketing
Lisbon All regions
Sales Order application
Sales
Application
Lisbon
(uses product catalog, customer information, and price list databases) *
Customers
Web
All regions
Application
Lisbon
At this time, customers and resellers can only view their own orders from the Web. In the future, Worldwide will allow creation of sales orders by customers and resellers. Customer Service application
Resellers Distribution
Support
(uses Customer Information database) * Customer Information database
All regions Sales
Application
Lisbon
Support
Web
All regions
Application
Lisbon
Distribution Product Ideas database
All Worldwide employees
All regions
Product management Product Design database
Application
Lisbon
Sales
Application
Lisbon
Marketing
Web
All regions
Research and Development Product management Manufacturing Engineers
Price List database
Distribution
Note: Asterisks (*) indicate critical applications. Deploying Domino Applications
B ■ 31
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
4XLFN5HIHUHQFH3DJH (continued) 8VHU 1HHGV
User group access Each group requires the following type of access to Worldwide’s applications. Application/Database
User Group
Needs Access to
Policies and Procedures database
All Worldwide employees
Read documents.
Human Resources
Create, edit, or delete documents authored by anyone.
Product Catalog database
All Worldwide employees
Read documents.
Marketing
Create, edit, or delete documents authored by anyone. View completed product designs.
Sales Order application
Sales
Create, edit, or delete documents authored by anyone.
Distribution
Read documents.
Customers
Read their own orders from a Web browser.
Resellers
Read their own orders from a Web browser.
Customer Service application
Support
Create, edit, or delete documents authored by anyone.
Customer Information database
Sales
Create, edit, or delete documents authored by anyone.
Support
Read documents.
Distribution
Read documents.
All Worldwide employees
Create documents, and edit the documents they author.
Product Management
Create, edit, or delete documents authored by anyone.
Product Ideas database
Route documents to the Product Design database. (continued on next page) ...
B ■ 32
Deploying Domino Applications
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
4XLFN5HIHUHQFH3DJH (continued) 8VHU 1HHGV
User group access... Application/Database Product Design database
User Group Research and Development
Needs Access to Create, edit, or delete documents authored by anyone. Review new product designs to assign an engineer.
Product Management
Create documents, and edit the documents they author.
Manufacturing
Read documents.
Engineers
Create documents, and edit the documents they author. Change the status of product designs.
Price List database
Sales
Read documents.
Marketing
Create, edit, or delete documents authored by anyone. Interact with the Product Catalog database.
Distribution
Deploying Domino Applications
Read documents.
B ■ 33
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
&ODVVURRP1RWHV
B ■ 34
Deploying Domino Applications
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
4XLFN5HIHUHQFH3DJH *URXS1DPLQJ&RQYHQWLRQV Group naming for server access Groups will be used to determine access to servers and for added security. The following naming convention will be used to identify the location and type of group: region[global]descriptionofgroup For example: PTAdmins or GlobalSales Within groups, names are sorted in alphabetical order.
Deploying Domino Applications
B ■ 35
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
&ODVVURRP1RWHV
B ■ 36
Deploying Domino Applications
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
4XLFN5HIHUHQFH3DJH $SSOLFDWLRQ7\SHV Locations for applications Types of applications will be separated and reside on different application servers to isolate problems and simplify management. All applications will be replicated to the Lisbon hub for central control and reliability. Application/Database
Policies and Procedures database
Product Catalog database
Resides on Lisbon Hub and...
■ ■
■ ■
■
Sales Order application
■ ■
■
Customer Service application
■ ■
Customer Information database
■ ■
■
Product Ideas database
■ ■
Product Design database
■ ■
Price List database
■ ■ ■
Replication Schedule from the Lisbon Hub...
Policies and Restrictions
Regional hubs Regional non-clustered application servers
Every six hours during mutual off-peak hours for Lisbon and regional hubs
Local languages and customs,
Regional hubs Regional clustered application servers Regional Web servers
Every two hours during mutual off-peak hours for Lisbon and regional hubs
Local languages and regulations
Regional hubs Regional clustered application servers Regional Web servers
Every two hours
Local languages and customs
Regional hubs Regional clustered application servers
Every two hours
Local languages and currencies
Regional hubs Regional non-clustered application servers Regional Web servers
Every two hours
Local languages
Regional hubs Regional non-clustered application servers
Every six hours
Local languages
Lisbon hub Lisbon non-clustered application servers
Every six hours
Regional hubs Regional clustered servers Regional Web servers
Every two hours
Deploying Domino Applications
escalation procedures
B ■ 37
,QVWUXFWRU Appendix B ■ Worldwide Corporation Infrastructure Plan
&ODVVURRP1RWHV
B ■ 38
Deploying Domino Applications
$SSHQGL[
&
&KHFNOLVWVDQG%HVW 3UDFWLFHV
,QVWUXFWRU Appendix C ■ Checklists and Best Practices
/HVVRQ ,GHQWLI\LQJ8VHU 5HTXLUHPHQWV Best practices for user access The following table summarizes the suggested use for ACL levels. Level
Suggested Use for Users
No access
Assign to -Default- and a deny access group for a restricted database.
Depositor
Assign as the default access for mail-in or survey databases.
Reader
Assign as the default access for informational databases, such as Policies and Procedures.
Author
Assign as the default access for interactive discussion databases. Note: The application must use Author fields in documents.
Editor
Assign sparingly to those who must edit documents created by others.
Designer
Assign sparingly to application developers responsible for updating the database design.
Manager
Assign sparingly to an administrators group responsible for updating the ACL. Note: Depending on the size of the company, Manager access may be given to database owners in addition to or instead of an administrator. Recommendation: Give yourself Manager access.
C ■ 2
Deploying Domino Applications
,QVWUXFWRU Appendix C ■ Checklists and Best Practices
/HVVRQ ,GHQWLI\LQJ$SSOLFDWLRQ 6\VWHP5HTXLUHPHQWV Best practices for capacity planning Following are recommendations for optimum performance and reliability of the infrastructure for application deployment: ■
■
■
■
■
■ ■
Use transaction logging for better I/O utilization and transaction throughput and reduction in CPU cycles. Put transaction log on a dedicated disk; separate channel or separate controller. ■ Do not use RAID5. (RAID1 can be used.) Optimize transaction logging by setting the Runtime/Restart performance field in the Server document to: ■ Startup for reliability ■ Runtime for performance Use clusters (Domino and Internet) to increase throughput, balance workload, and enhance reliability. Use a general guideline of 500-1000 users per system; if more than 1000 users, consider using a cluster. Dedicate servers in specific geographies for localized information. Plan projected growth for three to five years
Considerations for capacity planning When deploying applications, consider the following: ■ ■ ■ ■ ■ ■
Server and network capacity Whether to cluster or partition servers How to cluster servers Database size Frequency of use and resource requirements of databases View rebuild time (the more databases per server, the longer the build time) ■ Check view refresh option times ■ Number and size of views
Deploying Domino Applications
C ■ 3
,QVWUXFWRU Appendix C ■ Checklists and Best Practices
/HVVRQ ,GHQWLI\LQJ$SSOLFDWLRQ6\VWHP5HTXLUHPHQWV (continued)
Identify when and how to replicate databases checklist When planning a replication strategy, consider these checklist items: Item
❏
❏
Task Establish a replication topology. For example: ■
Which servers will replicate?
■
In what order will servers replicate?
■
How much time is expected to be required for replication to complete? ■
Number of hubs
■
Number of spokes per hub
■
Average replication time per database
Determine what will happen during the replication session. For example: ■
Which server will initiate the call?
■
Which server will receive the call?
■
On which port will this session happen?
■
Which database(s) will be replicated?
■
What priority of databases will be replicated?
■
What replication types would be best?
■
When and how often will replication occur?
■
Is there a time limit for replication?
■
How will mobile users access databases?
For information on evaluating replication topologies and enabling multiple replicators, refer to the Domino 5 Administration Help database.
C ■ 4
Deploying Domino Applications
,QVWUXFWRU Appendix C ■ Checklists and Best Practices
/HVVRQ ,GHQWLI\LQJ$SSOLFDWLRQ6\VWHP5HTXLUHPHQWV (continued)
Guidelines for application placement To determine where to put replicas of each database, follow these guidelines: ■ ■ ■
■
Balance the load between database use and size. Put databases on hub servers to ensure complete replication cycles. Replicas should reside on servers that belong to the same LAN as the majority of users for the database. Ensure all database dependencies are met.
Application placement checklist When planning where to put databases, consider these checklist items: Item
❏
Ask This Application Placement Question Determine whether to cluster servers. For example: ■
❏
Are there any high-availability applications?
Determine how to cluster servers. For example: ■
How many servers will be clustered?
■
Which servers will be clustered?
❏
Determine which databases to put on clustered servers.
❏
Determine which databases to put on regional servers. For example: ■
❏
Determine whether to put databases on the Web server. For example: ■
❏
❏
Do any databases contain information to be accessed by external users, such as customers or resellers?
Determine which databases to put on hub servers. For example: ■
Is the topology hub-and-spoke?
■
Are there databases that will be replicated to multiple servers?
Determine where to put replicas of databases. For example: ■
❏
Do any databases contain localized information, such as regional products or price lists?
What servers are in the same regions as the database’s user groups?
Determine whether there are any dependencies between databases. For example: ■
Does a database depend on other databases to function properly?
Deploying Domino Applications
C ■ 5
,QVWUXFWRU Appendix C ■ Checklists and Best Practices
/HVVRQ ,GHQWLI\LQJ$SSOLFDWLRQ6\VWHP5HTXLUHPHQWV (continued)
Best practice for placing Web files The Server document includes information about where the Domino Web server should look for certain Web files. If the applications being deployed include HTML, CGI, or icon files, verify the designated locations on the Internet Protocols tab➝HTTP tab➝Mapping section as shown in the following figure. Then, place the Web files in the appropriate location:
C ■ 6
Deploying Domino Applications
,QVWUXFWRU Appendix C ■ Checklists and Best Practices
/HVVRQ ,GHQWLI\LQJ$SSOLFDWLRQ6\VWHP5HTXLUHPHQWV (continued)
Best practices for server access The following table summarizes the suggested use for server ACL levels. Mechanism
Suggested Use for Servers
Access Control List
In addition to determining user access to databases, the ACL determines server access to the database. Level
Suggested Use for Servers
No access
Assign to OtherDomainServers.
Depositor
Not applicable.
Reader
Assign to servers to allow the server to receive information from a replica, but not send changes back to the other server. Use only if the server needs to access the document, but not replicate the document.
Author
Not applicable, because servers do not author documents.
Editor
Assign to servers that store replicas of the database in order to distribute edits to documents.
Designer
Assign to servers that application developers use to update the database design.
Manager
Assign sparingly to one server to distribute ACL changes to other servers.
User types
Designate a server ACL entry as a Server or Server group in order to prevent someone from using a fraudulent ID to access a database.
ACL privileges
In general, for servers, enable all the privileges that the selected access level allows. This ensures that the server has access that is as high as users might have and can replicate all user changes.
Deploying Domino Applications
C ■ 7
,QVWUXFWRU Appendix C ■ Checklists and Best Practices
/HVVRQ 6HWWLQJ8S6HUYHUDQG 'DWDEDVH$FFHVV Prepare to deploy applications checklist Complete these tasks to prepare applications for deployment. Task
C ■ 8
Procedure
❏
1
Verify groups for server access.
❏
2
Enable user and server access to servers.
❏
3
Verify groups for database access.
❏
4
Set user and server access in the database ACL.
❏
5
Enforce a consistent database ACL.
❏
6
Set up Web access to servers.
❏
7
Set database ACL for Web user access.
❏
8
Set database properties.
❏
9
Enable document routing to mail-in databases.
❏
10
Set up a Database Catalog.
❏
11
Create database libraries.
❏
12
Enable single database and domain-wide searching.
❏
13
Determine a backup strategy.
❏
14
Enable transaction logging.
❏
15
Schedule a backup utility.
Deploying Domino Applications
,QVWUXFWRU Appendix C ■ Checklists and Best Practices
/HVVRQ 6HWWLQJ8S6HUYHUDQG'DWDEDVH$FFHVV (continued)
Best practice for standardizing the ACL Consider the following when setting the database ACL: ■ ■
■
■
The ACL should be the same on all replicas. One server or group of servers should have Manager access to distribute the ACL, and all other non-Manager servers should replicate with the Manager server to ensure consistent ACL distribution. A group of people should have Manager access to change the ACL, for example, GlobalAdmins. Set the ACL before distributing the database.
Deploying Domino Applications
C ■ 9
,QVWUXFWRU Appendix C ■ Checklists and Best Practices
/HVVRQ 2UJDQL]LQJ'DWDEDVHV Best practice for Database Catalogs Most companies should use one Database Catalog for the domain, and store replicas of the Database Catalog on all domain servers. The exception would be if the Database Catalog becomes so large that it is no longer manageable or useful. In this case, consider creating a different Database Catalog for each server in the domain.
Best practice for Domain Search server A Domain Search server should, in most cases, be a dedicated server. The Domain Search server will be kept very busy maintaining the Domain Index and servicing Domain Search requests.
Set up Domain Search checklist Complete these tasks to set up Domain Search.
C ■ 10
Task
Procedure
❏
1
Enable multi-database indexing for all databases to be included in the Domain Search.
❏
2
Enable domain-wide catalog, and schedule the Domain Indexer in the Server document.
❏
3
Run the Catalog server task to create the Domain Catalog database.
❏
4
Restart the server for the Domain Indexer to start.
Deploying Domino Applications
,QVWUXFWRU Appendix C ■ Checklists and Best Practices
/HVVRQ 'HWHUPLQLQJD%DFNXS 6WUDWHJ\ Best practices for backups The following guidelines describe recommendations for backups and apply to both methods of backup. ■
■ ■
■
■ ■ ■ ■
Back up all Domino server data files, including: ■ Databases, template files, the NOTES.INI file, ID files, and certifiers. ■ Files that may remain open during backup. Domino keeps some files open while it runs (LOG.NSF, NAMES.NSF, MAIL.BOX and the server ID file). If the backup utility cannot back up open files, shut down the server before creating the backup file. ■ User Mail files. Back up servers after major network changes. Back up databases (or logs, in the case of transaction logging) incrementally Monday through Thursday, and perform a full backup on Friday. Using the company’s standardized backup procedures, back up files directly to tape or to a file server and then to tape. Reuse incremental tapes each week. Create a new tape on the last Friday of each month. Reuse Friday tapes each month, except on the last Friday (use a new tape). Reuse each “last Friday” tape each year, except the last one of the year.
This process ensures that, on any given date, the data is current as of: ■
■ ■ ■
Yesterday (as a result of last Friday’s full backup and this week’s incremental backups) Each Friday of this month The last Friday of each month over the past 12 months The last Friday of each year the process has been in place
Best practice for transaction logging Transaction logs contain a large amount of data and consequently take a large amount of space on the server. As a result, it is best to store the transaction log file on a separate physical device.
Deploying Domino Applications
C ■ 11
,QVWUXFWRU Appendix C ■ Checklists and Best Practices
/HVVRQ 5ROOLQJ2XW'DWDEDVHVWR 6HUYHUV Roll out databases to servers and workstations checklist Complete these procedures to roll out applications to servers and workstations. Task
C ■ 12
Procedure
❏
1
Set quotas and thresholds.
❏
2
Create directory and database links.
❏
3
Create directory folders.
❏
4
Sign database.
❏
5
Sign agents.
❏
6
Edit Administration ECL in Domino Directory.
❏
7
Update Admin ECL for existing workstations.
❏
8
Allow access to run agents on the server.
❏
9
Copy database(s) to server(s).
❏
10
Verify that the database appears in the Open Database dialog box.
❏
11
Make sure you have Manager access in the database ACL and Create replica databases access in the Server Access section of the Server document in the Domino Directory.
❏
12
Create replicas.
❏
13
Set replication settings.
❏
14
Create Connection documents.
❏
15
Set up replication schedules.
❏
16
Create/update Setup Profiles.
❏
17
Merge encryption keys.
❏
18
Distribute encryption keys.
❏
19
Notify users that database is available.
Deploying Domino Applications
,QVWUXFWRU Appendix C ■ Checklists and Best Practices
/HVVRQ 5ROOLQJ2XW'DWDEDVHVWR6HUYHUV (continued)
Best practices for creating directories for replication Use subdirectories to group related databases rather than copy them to the root directory. ■ ■
Users can find related databases more easily if they are in one location. This also helps administrators by allowing them to replicate "like" databases, since Connection documents allow replication according to directory.
Best practice for signing databases Create a special ID to use for signing databases and distribute to selected individuals within the company.
Best practices for replication Follow these guidelines for replication. ■
■
■
■
■
Create a backup database from which to restore information if data becomes corrupted. Since corrupted data often replicates, use this only as a secondary backup method. To prevent unnecessary proliferation of replicas, assign Create Replica databases access to only a few administrators. Then have users and application developers send their requests for new replicas to those administrators. Set up all appropriate documents in the Domino Directory, including a Mail-In Database document if the database is designed to receive mail. Ensure that all databases that rely on one another are copied simultaneously and have the correct access levels. Make sure that users and other servers are listed in the server's Access Control List.
Deploying Domino Applications
C ■ 13
,QVWUXFWRU Appendix C ■ Checklists and Best Practices
/HVVRQ 5ROOLQJ2XW'DWDEDVHVWR6HUYHUV (continued)
Best practices for cluster replication To ensure reliability for replicas in a cluster: ■
■
■ ■ ■
■
Force immediate replication with all cluster members using the REPLICA task when restarting a clustered server. Schedule replication between clustered servers on a regular basis, for example, every hour. View the replication log to see what databases are not synchronized and why. Create a replication monitor. Use standard replication to limit replication of database elements. The Cluster Replicator does not enforce advanced settings, such as disabling replication of database elements. Create a Connection document using the cluster name as the destination.
Best practices for replication scheduling Following are guidelines for scheduling replication: ■
■
■
■
■
■
C ■ 14
Schedule the Domino Directory and other administrative databases, such as ADMIN4.NSF, to replicate regularly throughout the day (guideline: every hour). Schedule all other databases to replicate at a less frequent time interval, such as every six hours. Place critical applications in a separate subdirectory under the domino\data directory. Then, create a Connection document specifying this subdirectory to replicate at a more frequent interval (guideline: every two hours). Use scheduling priorities of low, medium, and high to set scheduling of replication based on importance of databases. Have Hub servers initiate replication to provide centralized logging and free up spoke server resources. Use server groups. Using server groups facilitates administration by: ■ Reducing the number of Connection documents required to replicate with more than one server. ■ Simplifying the process of including a new server in the replication topology.
Deploying Domino Applications
,QVWUXFWRU Appendix C ■ Checklists and Best Practices
/HVVRQ 5ROOLQJ2XW'DWDEDVHVWR 8VHUV Best practices for encryption keys Administrators may not decide who receives encryption keys, but will most likely distribute the keys. Therefore, administrators should: ■ ■
Create a policy for backup and management of encryption keys. Create a “dummy” ID that includes all encryption keys.
Deploying Domino Applications
C ■ 15
,QVWUXFWRU Appendix C ■ Checklists and Best Practices
/HVVRQ 6ROYLQJ'HSOR\PHQW3UREOHPV Best practices for restoring databases When restoring a database, clear the replication history and replication cutoff date to ensure that the entire database is restored. For more information on replication history and replication cutoff date, see the Domino 5 Administration Help database.
C ■ 16
Deploying Domino Applications
$SSHQGL[
'
&UHDWLQJD'HSOR\PHQW ,PSOHPHQWDWLRQ3ODQ
,QVWUXFWRU Appendix D ■ Creating a Deployment Implementation Plan
3ODQQLQJ&RQVLGHUDWLRQV The elements of a sound implementation plan Before deploying applications, administrators should have a realistic implementation plan to follow. The following list contains some of the steps planners should take to create a sound implementation plan: ■
■ ■ ■
■ ■ ■ ■ ■ ■ ■
Check existing company policies and procedures (such as ISO) and follow corporate procedures whenever possible. Set up project team. Set up project plan with timeline. Create a communication vehicle for the implementation plan that includes planners, administrators, application developers, and users (as appropriate). Set up user training. Communicate with users regarding database roll-out, use, and training. Communicate with application developers regarding roll-out issues. Create test environment for both users and servers. Create a test plan. Create a roll-back plan. Evaluate the roll-out once it is complete.
Tailoring the implementation plan Because each site and project may vary in size and scope, planners should make appropriate provisions in the project plan and roll-out based on the following: ■ ■ ■ ■ ■ ■
D ■ 2
The corporate culture Time constraints Technical resources Human resources Database priority User expertise
Deploying Domino Applications
