title page is1200 lotus domino connector user and … · 2020-05-28 · lotus domino connector user...

Title Page

IS1200Lotus Domino Connector

User and Configuration Guidefor Domino Connector 2.1.0

Version 4.3.4

Last updated April 27, 2010

EMC Part Number: 300-010-776 A02

EMC SourceOne eDiscovery - Kazeon IS1200 Lotus Domino Connector User GuideVersion 4.3.4, 2010Copyright © 2010 Kazeon Systems, Inc. All Rights Reserved.

This notice is intended as a precaution against inadvertent publication and does not imply any waiver of confidentiality. Information in this document is subject to change without notice. No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or information storage or retrieval systems, for any purpose without the express written permission of Kazeon Systems.

The software described in this document is furnished under a license agreement or nondisclosure agreement. It is against the law to copy the software onto any medium except as specifically allowed in the license or nondisclosure agreement.

Kazeon™ is the trademark of Kazeon Systems, Inc. All other trademarks and copyrights referred to are the property of their respective owners.

The text and drawings set forth in this document are the exclusive property of Kazeon Systems. Unless otherwise noted, all names of companies, products, street addresses, and persons contained in the scenarios are designed solely to document the use of Kazeon System products.

The Kazeon Information Server software is based in part on software licenses from the following:

Outside In® Content Access © 1991-2010, Chicago, Inc.

The software is based in part on the work of the Independent JPEG Group.

Code from Inxight Software, Inc. Copyright © 1996-2010. All rights reserved. www.inxight.com.

Certain icons used by the Kazeon Web applications come from the Silk Icon set(http://www.famfamfam.com/lab/icons/silk/)licensed under the Creative Commons Attribution 2.5 license(http://creativecommons.org/licenses/by/2.5/).

Last updated April 27, 2010

EMC Corporation1161 San Antonio Road

Mountain View, CA 94043

Copyright Information

http://www.famfamfam.com/lab/icons/silk/

http://www.famfamfam.com/lab/icons/silk/

http://creativecommons.org/licenses/by/2.5/

Table of Contents

Title Page .............................................................................................................. i

Preface ................................................................................................................. vAudience....................................................................................................................................................vRelated Documentation .............................................................................................................................vCustomer Support......................................................................................................................................v

Chapter 1: Introduction ...................................................................................... 1About the Kazeon Information Server ......................................................................................................1

Extending Server Functionality..........................................................................................................1Lotus Domino Background .......................................................................................................................1Domino Connector Implementation Overview .........................................................................................2

Domino Connector Implementation In New Installations .................................................................2Domino Connector Implementation Overview ..................................................................................2

Chapter 2: Installing and Configuring the Domino Agent............................... 3Basics Steps To Set Up the Kazeon Domino Agent..................................................................................3Detailed Set Up Steps................................................................................................................................4

Setting Up the Windows Platform .....................................................................................................4Add Microsoft .Net Framework to the Platform.........................................................................4

Installing the Lotus Notes Client........................................................................................................5Installing the Kazeon Domino Agent.................................................................................................5

Is This an Upgrade? ....................................................................................................................5Upgrading....................................................................................................................................5First Time Installation.................................................................................................................6

Verifying the Deployment of the Domino Agent Service................................................................10Setting JAVA Max Memory for Tomcat Process ............................................................................11Install DIIOP: Configuring the Lotus Domino Server for IS1200 Access ......................................11Configuring the Domino Agent Properties ......................................................................................15Configuring the Domino Agent for HTTPS.....................................................................................15Restoring the Properties Backup ......................................................................................................15Adding the Domino Connector License to the IS1200 ....................................................................16

Testing the IS1200 Connection to the Domino agent .............................................................................16Un-installing the Kazeon Agent ..............................................................................................................17Changing the Kazeon Service Account Username or Password .............................................................18

Chapter 3: Using Domino Servers as Repositories ....................................... 19Registering Domino Servers....................................................................................................................19Classifying Domino Servers....................................................................................................................21Searching and Reporting on Domino Servers .........................................................................................22Using Actionable Services on Domino Servers ......................................................................................22

iiiEMC SourceOne eDiscovery - Kazeon IS1200 Lotus Domino Connector User Guide

Contents

Appendix A: Configuring the Domino Agent to Use HTTPS..........................23

Glossary..............................................................................................................27

Index....................................................................................................................37

iv EMC SourceOne eDiscovery - Kazeon IS1200 Lotus Domino Connector User Guide

Preface

The EMC SourceOne eDiscovery - Kazeon IS1200 Lotus Domino Connector User Guide describes how to configure the IS1200 to use the optional Domino Connector module.

To use the Domino Connector module the appropriate optional add-on module licence must first be purchased and installed.

AudienceThis guide is intended for Administrators, Business Analysts, and Compliance Auditors.

Related DocumentationIS1200 Installation and Quick Start Guide - provides a quick introduction to installing, configuring, and using the Kazeon Information Server.IS1200 Web-Admin User and Configuration Guide- describes how to use the Web-based Administration Interface to setup and manage Kazeon clusters.

IS1200 Web-Search User Guide- describes how to use the Web-based Search Interface to perform basic and advanced search.

IS1200 Web-Reports User Guide- describes how to use the Web-based Reports Interface to perform basic and advanced reports.

IS1200 eDiscovery Case Manager Administrators Guide- for legal representatives, a primer of all the web-based Interfaces above for performing eDiscovery.

IS1200 Command Line Interface Reference Guide - describes the Kazeon Command Line Interface.

Customer SupportYou can contact Kazeon with questions or comments at [email protected] ,or call from the US and Canada toll-free: +1.877.529.3668 (+1.877.kazeon8) and Internationally: +1.650.641.8196.

vEMC SourceOne eDiscovery - Kazeon IS1200 Lotus Domino Connector User Guide

Preface

vi EMC SourceOne eDiscovery - Kazeon IS1200 Lotus Domino Connector User Guide

Chapter 1:

Introduction

This guide is provided as a companion to the Kazeon IS1200 Web-Admin User and Configuration Guide which should be read first as it contains most of the basic IS1200 server setup and maintenance information on which this guide builds.

About the Kazeon Information ServerThe Kazeon Information Servers are integrated hardware and software systems that provide information management solutions enabling organizations to efficiently and cost effectively classify, manage, and retrieve data. They provide consistent information visibility and control across distributed files, minimize the risk of un-managed files, integrate seemlessly with existing infrastructure, and scale to support billions of files for searching, reporting, and backup search and recovery.

Extending Server FunctionalityThe Kazeon Information Server’s standard functionality can be expanded with optional add-on modules like the Domino Connector. The Domino Connector requires an additional license for the Kazeon Information Server and allows the IS1200 to register, classify, search, and report on Lotus Domino Servers.

Lotus Domino BackgroundLotus Domino is an IBM server product that provides enterprise-grade email and collaboration capabilities. Originally Lotus Notes Server, it is now an application server for Lotus Notes applications as well as a web server.The core Lotus Domino services include: an email server, an applications server, a web server, a database server, and a directory server (LDAP). With add-ins it also provides data integration, instant messaging and web conferencing, document management, collaboration spaces, a mobile application server, and mobile 'Push' synchronization to handheld devices for mail, calendar, contacts, and tasks.Lotus Domino facilitates the development and dissemination of business projects and information but consolidates those resources into a server environment that the IS1200 cannot directly access.

1EMC SourceOne eDiscovery - Kazeon IS1200 Lotus Domino Connector User Guide

Chapter 1: Introduction

To provide a bridge between the IS1200 and the Lotus Domino servers, Kazeon has designed the Domino Agent, an interface that runs on its own platform and must be setup independently of the IS1200 and Lotus Domino servers. The Domino Agent allows the IS1200 to register, classify, search, and report on Lotus Domino servers. The processing power required to effectively run the Domino agent requires a dedicated platform.

Domino Connector Implementation OverviewIf Domino Connector is ordered with the original IS1200 purchase, the appropriate optional module license is automatically included in the server master license and is routinely installed along with the server license. If the Domino Connector is purchased after the original installation, the Domino Connector license key must be added to the installation before Domino Connector configuration can occur.

Domino Connector Implementation In New InstallationsThe Domino Connector software is automatically installed on all Kazeon Information Servers, the Domino Connector license key simply activates it.To use Domino Connector purchased with a new installation, simply follow the standard IS1200 hardware and software installation and configuration instructions in the Kazeon IS1200 Installation and Quickstart Guide and then use the rest of this guide to setup and configure the Domino Agent.

Domino Connector Implementation OverviewUse the following general steps to implement Domino Connector capabilities.1. Install the Domino Agent on a dedicated Windows server platform as described

later in this guide. This includes:Preparing a standard Windows server hardware platformInstalling the JDK applications on the Windows server.Installing Tomcat and Axis-2 on the Windows server.Installing the Lotus Notes Client on the Windows server.Installing the Kazeon Domino Connector on the Windows server.

2. If not already running, start a "DIIOP" process on the Domino Server.3. Use Web-Admin to add the Domino Connector license key to the IS1200, and then

quit and relaunch Web-Admin.4. Register the Domino Server as a repository on the IS1200.5. Perform an initial classification of the Domino server.6. Run searches and reports on the Domino repositories just like other repositories.

2 EMC SourceOne eDiscovery - Kazeon IS1200 Lotus Domino Connector User Guide

Chapter 2:

Installing and Configuring the Domino Agent

Kazeon's Domino Agent bridges the Kazeon IS1200 and Lotus Domino Server by presenting a registered Domino server as a standard file system to the IS1200.

This enables the IS1200 to handle the Domino Server as a standard directory, and integrates Domino Servers as standard IS1200 data repositories with only minor modifications to the generic IS1200 components.

A standard Windows platform may be used as the Domino Agent, assuming it meets the requirements stated in “Setting Up the Windows Platform” on page 4.

Basics Steps To Set Up the Kazeon Domino AgentThe Kazeon Domino Agent runs as an Axis2 web-service under the Tomcat servlet container on the Domino Agent platform. The following basic steps must occur to prepare an appropriate platform for the Kazeon Domino Agent:

Note: The Domino Agent platform hardware is not provided as part of the Lotus Domino Connector and must be provided by the user.

1. Setup an appropriate hardware platform as a Windows server,including the Microsoft .Net 2.0 Framework.

2. Install the Lotus Notes Client on the platform.

Note: The first two steps must be done before the Kazeon Domino Agent can be installed, because the installer program checks for Server and .Net before installing.

3. Install and verify the Kazeon Domino Agent and it’s required support programs on the platform.

4. Set the JAVA memory limits for the Kazeon Domino Agent platform.5. Start a DIIOP process on the Domino Server (if its not already running) to allow

the Kazeon Domino Agent to access the platform.

IS1200 Domino Agent Domino Server


Chapter 2: Installing and Configuring the Domino Agent

6. If your Domino server has been configured to require HTTPS, see “Appendix A: Configuring the Domino Agent to Use HTTPS” on page 23.

7. Add the Domino Connector license to the IS1200.8. Test the IS1200 Connection to the Domino server.

Additionally, if the Domino Connector was not purchased and installed along with the original IS1200 server, the Domino Connector license must be added to the IS1200 so the IS1200 will recognize the Domino Connector platform.

Detailed Set Up StepsThe following sections break out each of the Basic Setup Steps above in more detail.

Setting Up the Windows PlatformBecause of the processing load on the Domino Agent—when the IS1200 uses the agent to access your Domino Server—a dedicated PC platform is required for the Kazeon Domino Agent.The platform the Domino Agent is installed on must meet the following requirements:

Pentium 4 running at 3.0 GHz or better1 Gbyte of RAM or better20 Gbyte or better of available hard drive storageLocated in the same domain as the Domino server

Install the following general system software according to Microsoft documentation. Do not substitute other system software.1. Install a licensed copy of Windows 2003 Server with SP2.2. Use Windows Administration Tools/Services to disable IIS Admin and all

associated services.

Add Microsoft .Net Framework to the PlatformOnce the basic platform is setup,the Microsoft .Net Framework must be added to the platform. Browse to:http://www.microsoft.com/downloads/details.aspx?FamilyID=0856EACB-4362-4B0D-8EDD-AAB15C5E04F5&displaylang=en

The Microsoft Download page for the Net Framework opens:

Download the installer and follow Microsoft’s instructions to install it on the platform.


http://www.microsoft.com/downloads/details.aspx?FamilyID=0856EACB-4362-4B0D-8EDD-AAB15C5E04F5&displaylang=en

Detailed Set Up Steps

Installing the Lotus Notes ClientAfter installing Java, the Lotus Notes Client must be installed on the platform. The Notes Client must be purchased separately. Purchase the same Notes Client version (or higher) as your Lotus Domino server.

Follow the instructions that come with the Notes Client package to install the Notes Client on the platform.

Installing the Kazeon Domino AgentOnce the platform has been setup, and the Lotus Notes Client has been installed, the Kazeon Domino Agent may be installed on the platform. The Kazeon supplied installer will automatically install Tomcat and other the required Java support files before installing the agent, and make other required changes to registry values and environmental variables.

Is This an Upgrade?If this is the first time the Domino Agent is installed, skip the following section and go straight to the First Time Installation section. If you are re-installing an updated version of the Domino Agent, follow the instructions in the Upgrading section and then proceed to the First Time Installation section.

UpgradingSuccessfully upgrading a previously installed version of the Domino Agent requires that the previous version be removed first. However, if you have made changes to the default property settings of the Domino Agent since it was first installed, you should first backup those changes before you un-install the previous version so they can be re-implemented after the installation.

WARNING! If a previous versions of the Kazeon Domino Agent has been installed, it must first be removed using the Uninstaller that came with the previous version. If the previous version did not provide an uninstaller, the previous version must be removed using Add/Remove Programs from the Control Panel.

If changes were made to "kazdominoservice.properties" on the Domino Agent since it was first installed, do the following to backup those changes:1. On the Domino Agent platform, copy the existing:

<tomcat_install_location>\webapps\axis2\WEB-INF\services\dominoservice\kazdominoservice

properties to a temporary location likec:\Tempkazdominoservice.properties.bck"

2. Uninstall the current Domino Agent using: Control Panel->Add Remove Programs



First Time InstallationThe agent requires some supporting library files first.

Do the following:1. Copy the file, KazeonDomino.zip (which contains the agent installer files)

from the IS1200 to the agent platform by doing the following:From a browser window on the agent platform go to:http://<your_IS1200_node_name>/manager, the following page appears:

Click the Kazeon Connectors link circled above.From the page that appears (right): Click the Lotus Domino Agent link.When the standard Save dialog appears, save the zip file it specifies to the agent platform, the desktop is a good place.Extract the contents of the zip file to the agent platform. There should be four files extracted, Setup.exe, Infrastructure.msi, and Agent.msi and Uninstall.exe.

2. Run the Setup.exe file.The installer dialog opens.

Click Next to continue.

The following screens install the various support software required by the Kazeon Domino Agent.



3. When the Kazeon Domino Setup Configuration dialog appears:

Leave the defaults in the Infrastructure Component Configuration Parameters section.

Make the following entries in the Domino Agent Parameters section:

Domino User ID: Enter the fully qualified internet address of a Domino user (possibly the mailbox administrator) that has access privileges to ALL mailboxes on the Domino server. This is the same user ID that is recorded in the IS1200 Identity Vault and associated with the Domino server when it is registered as a data repository. This user ID will be used as a proxy user when opening Domino mailboxes for classification.Password and Re-enter Password: Enter the internet password of the Domino user (the same password used in the Domino Identity) entered in the step above.Administrator ID: Enter the username of the Domino Directory Administrator. These credentials are used when LDAP calls are made to the Domino server to fetch the list of users using the mailbox filters (for example in the include/exclude filters).Password and Re-enter Password: Enter the password of the user above.

Click OK to continue.4. The following screens appear:

Click Next to continue. Click Next to continue.5. When the screen at right appears:




6. The Select Installation Folder screen appears:

Leave the default installation location,

select the Everyone radio button,

and click Next to continue.

7. When the screen at right appears:


8. As the following screens appear:

Click Next to continue, Click Close.9. Now the installer is ready to

install the actual Kazeon Domino Agent.




10. When the following screens appear:

Click Next to continue. Click Next to Continue.11.When the Select Installation Folder dialog appears:

Accept the default location,

Select the Everyone radio button,


12. As the following screens appear:

Click Next to continue. Click Next to continue.13. When the Kazeon Domino Agent

finishes installing,


14. The dialog at right opens:

Click Yes.



15. When the dialog at right opens,locate the NCSO.jar file,and click Open.

The shot at right was taken by mapping a drive on the Domino Server to the platform running the installation. This allowed the administrator to locate the .jar file on the Domino Server.

If you do not know where to find this file, check with your IS1200/Domino-Server administrator.

16. When the screen at right appears:

Click Exit to close the installer.

Verifying the Deployment of the Domino Agent Service1. Start Tomcat.2. Verify the Domino Agent is installed properly by doing the following:

a. In a platform browser window, open: http://localhost:8080/axis2/services/listServices

b. If the following page appears, the Domino Agent is properly installed.



Setting JAVA Max Memory for Tomcat ProcessThe JAVA memory limits on the Domino Agent platform must be increased to accommodate the IS1200 access requirements, do the following:1. From a Windows Explorer window on the Domino Agent platform,

go to tomcat_install>\bin2. Run the file tomcat5w.exe (see the screenshot below).3. From the dialog that opens, click the JAVA tab to select it.4. Make the Java Options field look like the screenshot below:

Specifically, ensure the first line looks like this: -Xmx512m

Note: This assumes the agent platform has at least 1GIG of RAM,adjust appropriately for lower RAM situations.

5. Click OK and close out of the Domino Agent platform.

Install DIIOP: Configuring the Lotus Domino Server for IS1200 AccessOnce the Kazeon Domino Agent platform has been setup and configured, some configuration steps on the Lotus Domino server itself are necessary to allow the Domino Agent to access the Lotus Domino server on behalf of the IS1200. Your Domino Administrator may need to help with these steps.

The Domino Agent runs as an Axis2 web-service under the Tomcat servlet container on the agent platform. The Domino Agent uses the IBM Java/Corba toolkit API to connect to the Domino Server. To recognize and work with the Java/Corba API, the Domino Server must be running the ndiiop process.

Do the following to start ndiiop on the Domino Server.1. If the Domino Server is running,

use the server "load console" command to start the ndiiop and nhttp process.If the Domino Server is not running, ensure that the notes.ini file on the server contains ndiiop and http as one of the tasks. If not modify it as follows, ServerTasks=<any other tasks>,http, diiop



and then start the Domino server. 2. For the Domino Agent to browse the Domino Server NSF files, the flag

"Allow HTTP clients to browse database" must be enabled.For example, on Domino Server 8.0.1a. Open the Domino Administrator, and from the menus select

Configuration > Internet Protocols > R5 Basicsthe following screen appears.

b. Select the tabs circled above.c. Set Allow HTTP clients to browse database as shown (circled).



3. Check the setting for the LDAP server port. a. Select the tabs circled in blue below.

b. Note the LDAP server port number circled above in red.The default value is 389. If LDAP is running on a different port (as above), then the value in the kazdominoservice.properties should be changed as follows. The properties file is located at:<Tomcat_install_location>\webapps\axis2\WEB-INF\services\dominoservice

Using the example above, make the bolded change shown below: #Ldap port for connecting to the Domino LDAP server

LdapPort = 389

To: #Ldap port for connecting to the Domino LDAP server

LdapPort = 12389



4. Use the Domino Administrator to create user KazAdmin on the Domino Server.5. Use the Domino Administrator to give KazAdmin the following rights on the

following files: Reader Access to <Domain>->Configuration->Current Server DocumentFrom the Domino Administrator menus, select File > Database >Access ControlThe following screen appears:

Select KazAdmin, ensure the Access drop-down is set to Reader,and set all the options as shown above.Designer Access for all files in the folder <Domain>->Files->mail.In the KazDomain tab, select the Files tab, and the screen changes to:



Right click mail (circled above) and choose Access Control->Manage,the following dialog appears:

Select KazAdmin and set the options as shown.

Configuring the Domino Agent PropertiesIf the DIIOP Port on the Domino server has been changed to something other than the normal default, then the new value should also be specified in kazdominoservice.properties for the property "DiiopPort".

In general, make sure all the properties listed in the kazdominoservice.properties file match the values of the same properties on the Domino Server.

Configuring the Domino Agent for HTTPSIf your organization requires secure connections (HTTPS), then the Domino Server may be configured with a certificate and may require the Domino Agent to communicate with it using HTTPS.

This requires additional setup steps. See “Appendix A: Configuring the Domino Agent to Use HTTPS” on page 23 for details.

Restoring the Properties BackupIf you just installed the Domino Agent for the first time, skip this section.

If you are doing an upgrade over a previous version, and you have property changes that you backed up earlier (see “Is This an Upgrade?” on page 5), then restore the properties from the backup files now.

Compare all the properties in your backup file: c:\Temp\kazdominoservice.properties.bck

to the ones under the current<tomcat_install_location>\webapps\axis2\WEB-INF\services\dominoservice\kazdominoservice.properties



and change all the current settings to reflect the previous backup’s settings.

Adding the Domino Connector License to the IS1200If the Domino Connector was not purchased with the original IS1200 server, the Domino Connector license must be added to the IS1200 before using the Domino Connector. The Domino Connector license key is provided in the sales confirmation email received from Kazeon when the connector was purchased.

To install the key:1. Open Web-Admin,

2. Select Licenses under Administration3. Click Add License in the tool-bar to open the Add License dialog.4. Copy the key from the sales confirmation email, and paste it into the dialog.5. Click the dialog Add button.

See the IS1200 Web-Admin User Guide chapter Installing License Keys for further details.

Testing the IS1200 Connection to the Domino agentOnce all the steps above are completed, run the test program dominotest to verify the configuration and test the connection between the IS1200 and the Domino agent: The command is installed in /opt/openkaz/bin and provides the following help (usage) if specified without options.

dominotest -v -d <domain> -x <domsrv> -i <identity> [-w <websrv> -p <port>] [-m <mailbox> [-f <folder>]]

-d <domain> : specify the domain for the lotus domino server-x <domsrv> : specify the lotus domino server-w <websrv> : specify the webserver hostname, if not specified it is the

same as domsrv-p <port> : specify the port to contact the webservice, if not specified

the default is 80-m <mailbox> : specify the mailbox to enumerate, if not specified all

mailboxes are enumerated. For e.g if the specific NSF file to be


Un-installing the Kazeon Agent

accessed is under the <Domino_server_install>\data\mail\foo.nsf then you need to specify the value as “mail\foo.nsf”

-f <folder> : specify the folder to enumerate, if not specified all folders are enumerated

-v : verbose mode for listing messages-i <identity> : specify the identity configured to connect to the lotus

domino server

Do the following from a started cluster1. Login as root2. Run the domino test command. For example,

to access the file mail\achuak4.nsf on the server domino7 using the agent platform vmlotus1

dominotest -d kazeon -x domino7 -w vmlotus1 -p 80 -m "mail\achuak4.nsf" -i kazadminid

The system responds with something similar to:Pinging Lotus Domino Server (domino7Ping Lotus Domino Server (domino7).....SuccessfulPinging Kazeon Lotus Domino Services Agent host (vmlotus1)Ping Kazeon Lotus Domino Services Agent host

(vmlotus1).....SuccessfulConnecting to Lotus Domino Connector.....(domain=kazeon,

domsrv=domino7, websrv=vmlotus1, port=80, identity=kazadminid)...Successful

Enumerating Folders in mailbox (mail\achuak4.nsf) on Lotus Domino Server (domino7)

Found 8 folders in mailbox (mail\achuak4.nsf) on Lotus Domino server (domino7)

3. Verify that folders and messages are accessible by running the same command with the -m <nsf_file_path> option to enumerate folders in the user's mailbox and with the -m <nsf_file_path> -f <foldername> options to enumerate the messages in the user's NSF folder <foldername>.

If these tests are successful and the enumerations are completed, the domino repository is ready to be registered and classified.

Un-installing the Kazeon AgentTo uninstall the Kazeon Domino Agent, locate the uninstaller program downloaded in step 1 of “Installing the Kazeon Domino Agent” on page 5 above.

Do the following:1. Run the Uninstall.exe

program.

The dialog at right opens.




2. When the warning dialog appears, click Yes to continue.

3. The Uninstall Selection dialog opens, Check the boxes of all components you wish to remove and click OK.

WARNING! You may want to check only the Kazeon Domino Agent box as the other supporting files may be needed by other servers running on the same platform.

Changing the Kazeon Service Account Username or PasswordSome companies require that passwords must be changed at regular intervals. After the installation is complete and the system is operational, if the username or password of the Kazeon Service account and/or the LDAP account used by the Kazeon Agent must be changed, do the following on the Domino Agent platform.1. Open a command prompt.2. Change the directory to:

<Tomcat_installation_path>\webapps\axis2\WEB-INF\services\dominoservice

3. To update the Kazeon service account userName and/or password,run the following:registerDominoAccount.bat <new_user_name> <new_password>

4. To update the LDAP account userName and/or password,run the following: registerLdapAccount.bat <new_user_name> <new_password>


Chapter 3:

Using Domino Servers as Repositories

This chapter describes how to register a Domino Server as a data repository, classify it, and then run searches and reports on the email contents of the Domino Server.

Registering Domino ServersTo classify files or email on Domino servers, you must first register the Domino server as a data repository on the IS1200. Registering a Domino Server is slightly different than registering NFS or CIFS filers. First, see the Registering and Managing Repositories chapter of the Kazeon IS1200 Web-Admin User Guide for general information on registering repositories, then return here for details on registering Domino servers.

As with any repository, a metadata file system must first be registered and available before a Domino server can be registered. Because Domino servers can contain large amounts—terabytes—of data, a single dedicated metadata file system should be created for each Domino server that will be registered. Before continuing, create and register a metadata file system for each Domino server that will be registered. See the Registering and Managing Repositories chapter of the Kazeon IS1200 Web-Admin User Guide for information on registering metadata repositories

Use the following procedure to register a Domino server as a data repository.1. From Web-Admin click Lotus Domino Server under Repositories in the left-

navigation pane, The Add Repository tab appears:


Chapter 3: Using Domino Servers as Repositories

Note: The Lotus Domino Server menu item will not appear unless you have a Lotus Domino license installed. See “Adding the Domino Connector License to the IS1200” on page 16 for details.

2. Ensure that Lotus Domino is selected in the Repository Type drop-down menu.3. Fill in the following fields:

Name. Enter a repository reference name (the IS1200 will use this name whenever listing this Domino repository in IS1200 menus). Repository names must be unique.Metadata Repository. From the drop-down menu, select the metadata repository created and dedicated to this Domino server, or leave as <auto select> to allow the IS1200 to pick an appropriate metadata directory. This metadata respository is described on the previous page.Lotus Domino OptionsIdentity. From the drop-down menu, select an identity containing a username and password that has administrator access rights to the Domino server, or use the Create Identity button to create a new identity with those privileges. An identity containing the same username and password registered for KazAdmin (in step 4 of “Install DIIOP: Configuring the Lotus Domino Server for IS1200 Access” on page 11) on the Domino server can be used here. See the Kazeon IS1200 Web-Admin User Guide chapter The Identity Vault for more information about identities.Domino Server. Enter the hostname or IP address of the Domino server to register as a repository.Connector Server. Enter the pathname or IP address of the Kazeon Domino Connector (the Domino Agent platform) created and configured in the previous chapter to access your Domino servers.Connector Port. Leave the default of 80 as is, unless your IS1200 Administrator indicates otherwise.Domain. Enter the domain name that the IS1200 server, the Domino server, and the Domino Agent platform all occupy.Specify Use: Leave the Source Repository radio button selected. Domino servers may only be registered as source repositories, they cannot be targets.

4. Submit. Click to register the Domino server as a repository.


Classifying Domino Servers.

Classifying Domino Servers.To deep classify an Domino server do the following:1. From any Web-Admin page, click Deep Crawl under Jobs in the left navigation

pane, the Deep Crawl tab opens.

2. Ensure that Lotus Domino is selected in the Show drop-down menu.3. Add Source button: If a Domino repository needed does not appear in the

Repositories scroll-box, then click the Add Source button to open a new Add Repository tab where you can add the required new repository.

4. Description. Optional, enter a description for the deep crawl.5. Repositories. Click-to-select any user mailboxes or folders in the available

listing (the left-hand scrolling list). Click the plus sign preceding the listing to expand folders. Select either a mail box or folder, and click the Right Arrow ( ) button to add it to the list to classify (the right-hand scrolling list). Click any mailbox or folder in the right-hand list, and click the Left Arrow ( ) to remove it from the list to be classified. Once a repository is available in the right-hand box, the listing may be double-clicked, or selected and the icon clicked, to edit that line manually.

6. If the Advanced Options header is clicked to expand it, the standard Include/Exclude Filters for NFS/CIFS files are replaced by Mailbox Filters and Folder Filters for Domino Servers shown above. When specifying what mailboxes or folder to include or exclude, you can enter strings with wildcards, for example: Include: t* or Exclude: A*These strings are case sensitive and may not use bracketed RegEx expressions.

7. Fill out all other Job Scheduler pages and fields as described in the Kazeon IS1200 Web-Admin User Guide manual to finish scheduling the deep crawl. Date filters must be provided.


Chapter 3: Using Domino Servers as Repositories

Searching and Reporting on Domino ServersDomino servers are searched using the Web-Search interface. See the IS1200 Web-Search User Guide for general information on using Web-Search.

Reports are done on Domino servers using the Web-Reports interface. See the IS1200 Web-Reports User Guide for general information on using Web-Reports.

Both searches and reports on Domino servers are created and scheduled the same way as searches and reports on other repositories.

Note: Kazeon's Domino Connector indexes only email messages and attachments (or composite objects containing email and attachments) on Domino servers and does not provide classification or indexing services (and hence cannot search or report on) the following information on Domino Servers:Calendars, Contacts, Notes, Shared/Public folders on Domino servers

Using Actionable Services on Domino ServersAfter using searches or reports on Domino servers, some Actionable Services can be performed on the results. For complete information about using Actionable Services see the Actionable Services chapters of the Kazeon IS1200 Web-Search User Guide and the Kazeon IS1200 Web-Reports User Guide.

Generally, Domino servers may not be selected as the targets of Actionable Services, regardless of the result sources. In other words, neither search nor report results from any kind of repository (Domino or otherwise) can be copied or moved TO a Domino server.

When the target for an Actionable Service is not an Domino server (for example an NFS or CIFS repository), the following applies:

From the Actionable Services Manage Files menu:Result files can NOT be moved from an Domino server to another repositoryResult files can be copied from and Domino server to another repositoryResult files can NOT be deleted, restored, or locked on Domino servers

Result files from Domino servers can be Re-ClassifiedResult files from Domino servers can have new Metadata Tags or Policy Groups added to the appropriate metadata repositoryResult listings from Domino servers can be exported to XML or CSV filesResult files from Domino servers can be downloaded to other repositories as PST files

Note: While some Actionable Services, like delete, cannot be applied to search and report results from Domino servers, the services still appear in Actionable services menus to allow services across multiple repositories (which all may, or may not, be Domino servers). If these services are applied to Domino repositories, the job will report failures.


Appendix A:

Configuring the Domino Agent to Use HTTPS

If your organization requires secure connections (HTTPS), then your Domino Server may be configured with a certificate and may require the Domino Agent to communicate with it using HTTPS. This requires additional setup steps. This appendix describes those steps.

The steps below are necessarily general, as it is not the purpose of this guide to repeat all the detailed instructions of the Domino Server User and Configuration manual. For specific details on how to accomplish the general steps below, see your Domino Server documentation.

To modify the Domino Agent to use HTTPS, do the following:

Note: If Domino Server files “keyfile.kyr” and “keyfile.sth” already exist,skip to step 3.

1. Create a key ring on the Domino Server. Open the Server Certificate Admin (certsrv.nsf) database on a Domino Server and use its forms to create and populate a key ring. See Domino Administrator Help for detailed information.

2. Move the keyring to the server. The keyring consists of a keyring file (KYR file) and a stash file (STH file). These files are generated on the computer used to access the Server Certificate Admin database. Move or copy the two keyring files to the Domino Server, under the data directory. For example, if you create a keyring with a self-certified certificate using the default names (selfcert.kyr, and selfcert.sth) and copy the files to the Domino Server data directory, then the following two files should be found on the Domino server at:

<domino_server_install_location>\data\selfcert.kyr.

<domino_server_install_location>\data\selfcert.sth.

3. Once the keyring files are on the server, starting or restarting the DIIOP task generates a file called “TrustedCerts.class” in the data directory.


Appendix A: Configuring the Domino Agent to Use HTTPS

Copy “TrustedCert.class” to the Domino Agent platform ( <tomcat_install_location>\certs ) and put it in the classpath along with NCSO.jar as follows by running the utility “<tomcat_install>\bin\tomcat5w.exe”.

Go to the Java tab and under the Java Classpath and add the following entries.<tomcat_install>\ webapps\axis2\WEB-INF\lib\NCSO.jar;

<tomcat_install>\certs

Be sure the entries for Initial Memory Pool and Maximum Memory Pool are the same as shown above.

4. Verify the SSL configuration for the Domino Server by doing the following:a. Open the Domino Administrator.b. Under the Current Server document, go to tab Ports->Internet Ports.c. Under the SSL settings specify the SSL key file name

(for example “selfcert.kyr”).d. Go to DIIOP tab and check that the SSL port no is correct. Default is 63149.

Enable the SSL port.e. Set the Name & Password and Anonymous authentication settings as desired. Based on the settings in step e.) above, indicate the corresponding settings in Domino Agent configuration file “kazdominoservice.properties” by changing the configuration values:

HTTPRedirectToSSL

NamePasswordEnforced

AnonymousAccessAllowed.

found at: <tomcat_installation_folder>\webapps\axis2\WEB-INF\services\dominoservice\kazdominoservice.properties

Use the configuration file comments to decide how to set these values.


27

Glossary

Active Directory (AD)A technology created by Microsoft that provides a variety of network services, including: LDAP-like directory services, Kerberos-based authentication, and DNS-based naming and other network information.

Actions, Actionable ServicesAre procedures such as copy, move, delete, tagging, etc, that can be applied to search and report results. They allow the IS1200 to be and effective file management tool for registered repositories.

Access Control List (ACL)A file system level data file that specifies how users or groups may access resources on a computer or network, like an application, file or printer, and the rights they have to it, for example read access, write access, and so forth.

Advanced SearchA search made from the Advanced Search link. Allows searching for extracted metadata by tag-value pairs, and allows multiple variable and boolean searches.

Assignment RuleA classification rule that tags files with metadata and assigns files to policy groups.

AuditingA service that allows the IS1200 to record all system events according to who did what, when, and the event result. This data is especially useful to Legal Service Providers when providing an audit trail for responsive data produced during eDiscovery.

Authorization RuleA policy that filters search results to ensure that the assigned files can only be viewed by authorized users.

28

Glossary

AuthenticationThe process of identifying users based on user name and password to ensure that only authorized users can access the IS1200.

Basic SearchA search made from the Search page using only the Search field. Searches only the content found in the fullText field populated during classifications.

CAS DeviceEMC’s Content Addressed Storage (CAS) devices are cluster-able archival devices that host archival business file content such as email, office productivity files (like word processing and spreadsheet files), images, and other file documents.

CASIDA unique IS1200 ID for each classified file that the system generates during basic classification.

Centera ServerThe EMC Centera server is a networked storage system specifically designed to store and provide fast, easy access to fixed content (information in its final form). It is a CAS device providing long-term retention and assured integrity designed to store and manage data that require or have legally mandated retention periods, for example medical records and files relevant to legal matters.

Celerra ServerAn EMC server designed to store and manage archival data. The Celerra File Level Retention (FLR) server also allows enforcing enterprise or governmental retention policies.

Classification RuleRules that the system implements during data classification to extract metadata, tag files, and assign files to policy groups. The two types of classification rules are extraction rules and assignment rules.

Classification ServiceAn IS1200 service that accesses registered repositories and extracts and records their metadata. Sometime called a “crawl”.

ClusterA set of appliance nodes working as an IS1200 unit. A cluster can contain a maximum of four nodes.

CSV, Comma Separated ValuesA file type used to transfer data between applications such as databases and spreadsheets.

Glossary

29

Command Line Interface (CLI)The CLI is a traditional command line interface that allows direct communications with the IS1200 “backend” using a the set of commands defined in the IS1200 Command Line Interface Reference Guide.

Common Internet Filing System (CIFS)A protocol used by Microsoft to access computer systems and directories over the internet.

Container (file/object)A file that contains other files, such as a ZIP, JAR, or PST file.

CustodianA legal term used by Legal Service Providers (LSP) and other legal personnel to describe the owners or responsible parties for electronic documents pertinent (responsive) to a legal matter.

DataA file of any type and size such as a short email, a word processor document, or a large spreadsheet.

Data ClassificationThe process during which the IS1200 reads data on the data file system. During basic classification, the IS1200 extracts file system metadata. During deep classification, it extracts custom metadata and assigns files to policy groups.

DatamapA report that lists the electronic storage locations of all possible sources of relevant ESI. This can include standard file servers, groupware servers, email servers—and their backup and archive systems—as well as custodian’s desktop and laptop computers.

Data-MountThe NFS file system that is accessed by the IS1200 to parse data and extract metadata.

Data ServerThe file server that exports an NFS or CIFS file system so that the IS1200 can classify data on the file system to create metadata.

Data-ShareThe CIFS file system to be accessed by the IS1200 to extract metadata.

Data RepositoryA networked file system registered with the IS1200 so it can be classified, search, and reported on.

30

Glossary

Data VerificationBuilds on Auditing and is only available when system auditing is enabled. For job services like Actionable Services Copy or Move, Legal Hold Copy, and Single-Step Collections, Data Verification generates an audit trail proving that files were not altered during these actions. This is especially valuable in eDiscovery situations.

DeduplicationA process that identifies file or email object and sub-object duplicates based on their digest values. Digests are numerical values that are calculated based on file and email contents and are unique for all unique objects. Digest values allow objects to be compared very quickly. Digests are calculated during basic and deep classifications or during collections when indexing is enabled.

Digests are calculated differently for standard files, emails, and container objects. For standard files, a physical digest is computed for the entire file much like a hash value. For email objects, just the subject, the message content (including attachments), and certain specific addresses are combined and an email digest value is calculated from the combination. Container objects, like ZIP or PST files, and their sub-objects have digests calculated both as complete objects and as individual sub-objects.

Note: Calculating email digests requires access to the email object’s fullText and only classifications that include the fullText rule can produce email digests. Emails classified without the fullText rule receive the same physical digest that other files do. Consequently, identical emails on different repositories, one classified with and one without the fullText rule, will not be identified as duplicates!

Deduplication may be applied to export processes (Actionable Services like Download, Legal Export, and Copy) to create only unique copies of file and email objects and sub-objects to a destination.

When the deduplicate option is used along with the Generate Manifest option, a manifest summary and a detailed list or report may be produced to identify all duplicates that were ignored in the export process, allowing them to be identified later.

Reduplication may also be applied to tagging processes to allow a single file copy to be reviewed, but apply metadata tags to all its copies.

Domino Sever (Lotus)A Lotus server providing groupware solutions and storage.

Documentum Sever (EMC)The EMC Documentum server manages business content including documents, photos, video, medical images, e-mail, Web pages, fixed content, XML-tagged documents, etc. The Documentum core is a repository that stores content securely under compliance rules and appears as a unified environment, even though content may reside on multiple servers and physical storage devices within a distributed environment.

Glossary

31

eDiscoveryThe process of reviewing electronic files to determine their relevances and responsiveness to a legal matter or case.

eDiscovery Case ManagerA IS1200 web-application that facilitates eDiscovery for Legal Service Providers.

Enterprise VaultA Symantec networked repository for archived email.

Extended AttributesUser-defined keywords that are extracted during data classification.

Extraction RuleExtracts user-defined keywords (custom metadata) to add to the metadata file.

Exchange Server (Microsoft)A microsoft server designed to store and manage email.

FederationA defined group of member-clusters on a Federation server that can be managed, searched, and reported on as a group. Member-clusters are referred to as Federated clusters.

Federation ServerAn single-node IS1200 server, with a Federation license, that allows consolidated searching and reporting of up to eight Federated member-clusters of its defined Federation.

FilerA file server that exports its file systems using NFS or CIFS protocol.

fullTextThe “content” portion of a file, this is the textual content of word processing files and message content for emails. The extraction fulltext rule is used to save file content to metadata during classifications and saves up to 10 megabytes of content by default. This default may be changed, but it is not recommended. Fulltext extraction is required for the Previewer pane to work and to generate Concepts in the Results Grouping pane.

GroupwareCollaborative software designed to help people involved in common tasks achieve their goals. Incorporates services such as email, calendaring, text chat, wiki, web-sharing, document control, and advanced search.

Hash ValuesHash values are used to compare one file with another for duplicates.

32

Glossary

An extremely simplified description of hashing is that the numeric values of all bytes in a file are added into a grand total. The chances of two different files yielding the same result (hash value) are remotely small, so hash values can be used to identify duplicate files, or compare files with the same name to decide if they have been modified.

Computing hash on an entire file is called a full-hash, and computing hash on a portion of the file is called a partial-hash. A “partial hash” may also be used to increase classification speed and “hashing” can be turned on, or off to increase classification speed.

Identity VaultAn encrypted database of usernames and passwords the IS1200 uses to store the credentials used to access registered data repositories, send email notifications, and work with authentication services.

Kazeon EVAgentA IS1200 service installed on the Enterprise Vault server.

Kaz-mountThe NFS file system that is the IS1200 metadata repository. on which the IS1200 stores metadata.

Kazeon Query LanguageA programming language used in classification and assignment rules to identify files that should received specified metadata tags.

Kaz-serverThe file server where the metadata repository is located.

Kaz-shareThe CIFS file system on which the IS1200 stores metadata.

Kaz SchemaDefines the set of metadata fields used to build a Search Index for registered data repositories (file systems).

Legal HoldFiles placed on legal hold are either copied to a secure secondary location where they can preserved for later use, or are locked in their original locations against further change until a legal matter is resolved.

Legal Service Provider (LSP)A lawyer or trained legal professional that provides legal services for a fee.

Logging ruleLogging rules audit user actions on files such as file access, creation, modification, and deletion.

Glossary

33

LocalRefers to the local resources (usually the metadata repository) of the Federation server.

Logging ruleLogging rules audit user actions on files such as file access, creation, modification, and deletion.

Manifest ReportsManifest reports reconcile Actionable Services object-counts with the search result object-counts they are performed on because processes such as deduplication can result in the two counts not matching. The reports details the count differences and the reasons for the differences.

Member-clusterAny of the clusters registered to a particular Federation.

MetadataData about data. Metadata is used to search for information and to create reports. Metadata can be file system or custom metadata that the IS1200 extracts from files during classification. file system metadata includes file type, and file path extracted during basic classification. Custom metadata is generated during deep classification.

Metadata RepositoryA registered respiratory the IS1200 uses exclusively to record the metadata extracted from registered data repositories during classification services.

Network File System (NFS)A protocol used primarily by Unix based computers for accessing computer systems and filers over the internet.

Network Information System (NIS)A network naming, administration, and authentication system for smaller networks that was developed by Sun Microsystems and is used primarily by Unix systems.

NodeA single IS1200 appliance.

PEA FilesA Pool Entry Authorization (PEA) file is generated by the Centera server administrator. A PEA file defines what applications and users can perform read, write, delete, query, copy, or hold operations for Centera objects.

Policy GroupAssociates one or more authorization rule and logging rule with one or more files to protect information and audit user actions on files.

34

Glossary

PST FilesPersonal STorage files are generally used by email programs like Microsoft Outlook to store user email locally. PST files are also called “composite” files, because they are packages meant to efficiently store a number of smaller related files. Another example of a composite file is a ZIP storage file

RetentionThe process of enforcing corporate or legal standards for how long certain kinds of files must be preserved for access. Examples of retained files include files responsive to legal matters and medical records.

RolesAll IS1200 have roles, either admin, auditor, or end-user. If a legal license is installed, there are also legalAdmin, legalSupervisor, legalReviewer, and custodian roles. All users have a role, and the role determines what parts of the IS1200 interface can be seen, and how much of search and report results are viewed.

Search IndexAn IS1200 database that stores and indexes the file content metadata (including extended attributes, and fullText) for standard and custom user-defined metadata produced by extraction rules during classifications.

SharePoint Sever (Microsoft)A Microsoft server in the groupware category.

SourceOne Archive Server (EMC)The EMC SourceOne server is a comprehensive, policy-based system that automatically collects, organizes, indexes and retains messages and associated attachments and stores them in designated archives connected to shared storage. EMC SourceOne provides indexed searching that works with both EMC storage and other brands such as IBM or NetApp.

TagsThe names of metadata fields. Tags are always associated with a value. For example, the metadata tag “filename” for any given file is always followed by a value (a text string) containing the actual filename.

Web-AdminAn IS1200 web application used by IT personnel to administer the server itself, and when the IS1200 is used to help administer other IT resources. Web-Admin is the preferred interface for administering the server.

Web-ReportsAn IS1200 web application that provides advanced reporting capabilities based on IS1200 metadata.

Web-SearchAn IS1200 web application that provides basic, advanced, and specialized email searches against IS1200 metadata.

Glossary

35

XML, eXtensible Markup Language fileA file type that uses the XML language to define and describe data that can be transferred between applications like databases and spreadsheets.

36

Glossary

Index

AAccess Control List 27ACL 27Actionable Services 27Actions 27Active Directory 27AD 27Add License 16Advanced Options 21Advanced Search 27Assignment Rule 27assignment rules 27

definition 27, 28Audience vAuditing 27authentication

definition 28authorization rules 27Axis-2 2Axis2 3

BBasic Search 28

CCAS Devices 28CASID 28Celerra 28Centera 28CIFS 29classification rule 28Classification Service 28CLI 29clusters 28Comma Separated Values 28Command Line Interface 29Command Line Interface Reference Guide

vCommon Internet Filing System 29Connector Port 20Connector Server 20Container 29CSV 28Custodian 29customer support v

Ddata 29data classification 29Data Repository 29data server 29Data Verification 30Datamap 29data-mount 29data-share 29Designer Access 14DIIOP 2Documentation

other vDocumentum 30Domain 20Domino 30Domino Agent

Installing, Configuring 3Setup 3verifying 10

Domino ConnectorImplementation 2license key 16Overview 2

Domino Connector license key 16Domino Servers

classifying 21registering 19


Index

DominoSetup.msi 6

EeDiscovery 31eDiscovery Case Manager 31eDiscovery Case Manager AdministratorsGuide vEnterprise Vault 31Exchange 31extended attributes 31eXtensible Markup Language 35extraction rules 31

FFederation 31Federation Server 31filer 31fullText 31

GGroupware 31

HHash Values 31

IIdentity 20Identity Vault 32Installation and Quick Start Guide v

JJob Scheduler pages 21

KKaz Schema 32KazAdmin 15kazdominoservice.properties 13Kazeon Domino Agent

installing 5Kazeon EVAgent 32Kazeon Information Server 1Kazeon Query Language 32kaz-mount 32kaz-server 32kaz-share 32

LLDAP 13Legal Hold 32Legal Service Provider 32license key 16local 33logging rule 32, 33Lotus Domino Background 1Lotus Domino Server

configuring 11Lotus Notes Client 3, 5LSP 32

MManifest Reports 33Member-cluster 33metadata 33metadata file system 19Metadata Repository 20, 33

Nndiiop 11Network File System 33Network Information System 33NFS 33NIS 33nodes 33Notes user

registering 11

Ppolicy groups 33PST 34

RReader Access 14Register a Notes user 11Related Documentation vRepositories 19Retention 34Roles 34

SSearch Index 34SharePoint 34SourceOne Server 34


Index

TTags 34Tomcat 3, 10

WWeb-Admin v, 16, 19, 21, 34Web-Reports v, 22, 34Web-Search v, 22, 34Windows 2003 Server 4Windows Platform

hardware requirements 4

XXML 35


Index


© 2011 - 2013 EMC Corporation. All Rights Reserved. EMC believes the information in this publication is accurate as of its publication date. The information is subject to change

without

notice.

THE INFORMATION IN THIS PUBLICATION IS PROVIDED “AS IS.” EMC CORPORATION MAKES NO

REPRESENTATIONS OR

WARRANTIES OF ANY KIND WITH RESPECT TO THE INFORMATION IN THIS PUBLICATION, AND

SPECIFICALLY

DISCLAIMS IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.

Use, copying, and distribution of any EMC software described in this publication requires an applicable software license.

EMC2, EMC, and the EMC logo are registered trademarks or trademarks of EMC Corporation in the United State and other

countries.

All other trademarks used herein are the property of their respective owners.

title page is1200 lotus domino connector user and … · 2020-05-28 · lotus domino connector user...

Documents