приглашаем вас на очередное онлайн-собрание клуба IBM Collaboration, которое состоится 7 февраля 2019 г. в 11:00 МСК. (GMT+3) Компания Panagenda известна тем, что разрабатывает решения для администрирования IBM Domino/Notes, Connections и инфраструктуры, с которыми работают миллионы пользователей во всем мире. IBM и Panagenda связывают тесные партнерские отношения, в частности Panagenda MarvelClient Essentials поставляется в комплекте с IBM Notes 10.0.1. Во время семинара мы узнаем, как продукты Panagenda помогут нам в администрировании, и познакомимся с опытом их использования. Докладчик: Владислав Татаринцев, технический директор компании CYONE, официального партнера компании Panagenda. Мероприятие будет проводиться через WebEx, регистрация здесь: https://ibm.webex.com/ibm-ru/onstage/g.php?MTID=e1430766fbf3d46c14db2efe101958012 Мероприятие открытое, перешлите, пожалуйста, ссылку всем, кому тема может быть интересна. Записи и презентации наших прошлых встреч вы можете найти в сообществе IBM Connections Cloud по адресу https://ibm.biz/collabclub . Мы приглашаем в это сообщество всех, кто регистрируется на наши мероприятия. Если вы не получали приглашение или имеете какие-то другие проблемы с доступом, сообщите об этом в ответном письме. Мы также рады видеть вас в нашей группе в Facebook https://www.facebook.com/groups/ibmcollabru
Продолжаем серию вебинаров, которыу проводим с IBM Россия, 31 января проводим вебинар на тему безопасности IBM Domino, как правильно настроить систему, как обезопасить себя от различных атак. Регистрация https://ibm.webex.com/ibm-ru/onstage/g.php?MTID=e95f1d800bbf880cfe7e78052cc8b4893 Если у вас нет возможности участвовать, все равно записывайтесь, всем кто зарегистрируется пришлем видео повтор и материалы. До встречи, Владислав
In some cases you may overtake environment, and now always you have all passwords. If this is an ID VAULT, you may want to recreate it, if this is cert.id or OU you may have a bad day. There is a way to recover cert.id file from Certificate Authority document. If you are one of CA administrators, Certificate Authority document will contain encrypted cert.id (different name, so just rename it). In Password field you will see a random password for this cert.id which will be different from original cert.id. Just write it down, and change password for cert.id and Voir-la, you have just restored cert.id, dont forget to backup it.
2 Factor authentication is a security default nowadays. This feature is a must-have! There are several way to do 2FA, call some cloud API, install 2FA server. These scenarios are ok for some clients, and not ok for others.
Solution that I want to describe is pretty simple and as result stable, and can be installed and configured under 20 minutes!
It is based on DSAPI (Domino Security API) file, which is small DLL (Windows) or .so (Linux), that is loaded with Domino HTTP and small configuration database (our lovely NSF)
Solution is able to send SMS codes via GSM Modem or Clickatell Cloud [cloud again ;) ], or use TOTP for example Google Authenticator. With TOTP you need nothing else than Domino. There is even a way to allow user to decide receive a SMS or use TOTP, or even sent it to alternative email like myphonenumber@sms.att.com
As always in enterprise, this solution has flexible and configurable settings for all customer needs.
2FA also helps to be compliant with GDPR. GDPR Regula says " that in addition to login/password pair you should have additional security". 2FA perfectly covers this , since this is a security on top.
Since I am big fan of monitoring, solutions allows to monitor 2FA statistics. If user's password is leaked to hackers and hacker fail on 2FA, SMSLogin.FailedLogins will start to grow. Since we monitor around 200-400 different aspects of Domino with Monitoring solution, one of our customers was able to detect account hack attempt. Hacker got password, but 2FA stopped from getting in.
Video above shows that 2FA is installed under 20 min. User friendly Self Enrollment portal allows users to enable 2FA, while watching Redirect database. https://www.youtube.com/watch?v=4qbhEnKtsjU
IBM Domino/Notes 10.0.1 are in Gold Candidate status. I think we are few weeks away from Web Posting state and availability.
A lot of cool things will be available in 10.0.1, AutoUpdate of clients, built on Google AutoUpdate engine, as well I am looking forward new search engine that will be enabled by default Apache Tika. Search is one of great improvements of Notes 10.
Many users reported that after upgrade to OS X Mojave IBM Notes hangs, I also experienced such issue. IBM Has posted an official technote that issue lies in OS X and way how to fix it. If you have OS X users, make sure that have proper checkboxes set in Security settings
Many of us use TDI (Tivoli Directory integrator) or new name is IBM Security Directory integrator. On IBM Identity Management training where TDI (let me use old name) is also used, and we came across tuning of TDI.
For large Connections environments tuning might be needed, great guide. Even from 2010, still a lot of valuable information.
While the intention is quite clear, to extend number of seats, I am a bit sceptic that people without proper knowledge can understand Notes licensing and PVU calculations, or plan deployment. So far it is not clear if partners who have certificates will have advantage, lets wait for @IBM clarification.
Domino is a Swiss knife for Enterprise, or Ferrari from Software point of view. Beautiful software, for beginners a bit complicated, with own ideology, but software that can do a lot of things. I think people need some knowledge to sell it, and loyal old partners of IBM should have benefit or advantage in selling software professionally.
As IBM Instructor from 2004 and DUAL PCLP Certified in all releases from 5->8.5 I am thirsty to hear about Certification for Notes 10/Domino 10 as Administrator, Developer and Instructor.
