Loading...

Thursday, October 15, 2009

Security flaw in IBM HTTP Server

If you are running IHS, there is a much needed fixpack you should install. Several vulnerabilities have been found that allow an attacker to exploit the system or cause a denial of service attack.

These vulnerabilities affect the following versions:
IBM HTTP Server version 6.0.2
IBM HTTP Server version 6.1
IBM HTTP Server version 7.0

To correct the vulnerabilities, apply Interim Fix PK91361 :
ftp://ftp.software.ibm.com/software/websphere/ihs/support/fixes/PK91361/


http://www.vupen.com/english/advisories/2009/2579

Wednesday, October 07, 2009

Monitoring the status of builds in Team Concert

No matter what version of Team Concert you are using, the following tips will apply. You can monitor the status of each step in your automated build using the following two ANT elements:
startBuildActivity, and completeBuildActivity.

These two should be treated like bookmarks to an atomic grouping of ANT tasks. For example, in your build file, you may have the following targets: setupenv, compile, test, deploy. The first sets up the environment ensuring you have the correct permissions, file sets, jars, and checks out the latest from the team stream into a local workspace. The second task compiles using the ecj-3.4.2.jar tools. The third runs JUnit tests (and perhaps functional tests as well). The last one deploys the application.

You should bookend each target with startBuildActivity, and completeBuildActivity. That is put these just inside the target itself, with all the meat of the target between the start and complete activity elements. This will tell the Jazz Build Engine to notify the Jazz Team server that it is starting on that particular task. Once the task is complete, the completeBuildActivity says "hey.. I'm done with this". That way, you can more easily tell where in your build the process fails without having to dig through your log files.

In the Eclipse/RAD/RSA/RBD client you can then see the total status as the build is progressing. You can refresh from the button on the bar in the view and you will see it change status. For this application I did, it will say "Fetching files" or "Compiling Application", etc.
Once complete, you can also check the status of each task on the "Activities" tab of the build. This tab will also show you exactly how long each step took. This may be helpful if you need to trim down the amount of time it takes to run a build.

Tuesday, October 06, 2009

The trouble with hosted solutions

If you prefer a hosted, cloud based messaging (email) solution for convenience, you need to be aware of the dangers of some of the offerings out there:

"Yesterday, it was revealed that 10,000+ Hotmail accounts were compromised and all of the usernames and passwords of these accounts were posted online. It was a major security and scam issue, but it was thought to only affect Hotmail users."


If you want something secure, check out LotusLive iNotes, a SECURE, stable platform based on the long running Lotus Domino server platform. It includes built in virus/spam controls. Built in instant messaging, charts, web forms, surveys, meetings, and more. All starting at around $3/month per user.

IBM Announces the launch of Lotus Notes/Domino 8.5.1

I am listening to the webcast on the release of Lotus Notes/Domino 8.5.1. Lots of new features in the release. For one, it has 4 times the fixes of any standard maintenance release. IBM has today announced the launch of long awaited Notes 8.5.1.

One of the major themes for this point release is on application development. The Domino Designer has undergone a MAJOR revamp and is now all under the Eclipse environment. The Domino Designer client is now FREE, a product that used to cost around $500 USD per seat. This will greatly advance the product and help new users become acquainted with the platform such as college students as well as power users already familiar with the Notes environment.

There is now a new link for developers which should be available soon: http://developer.lotus.com.

This release is further evidence of the benefits of eclipse. Peformance has been greatly improved, some in order of 75% improvement. There are several new features the biggest of which being the editor for LotusScript. There new features for extensibility which take advantage of the Eclipse extensibility plugin architecture. The LotusScript editor is the biggest feature improvement and one long requested by the Domino development community. New class browser for custom classes, script libary browser, hyperlinking between script libraries, line numbers, syntax highlighting and content assist.

XPages continues to improve. There are performance and scalability enhancements, an updated version of Dojo (1.3.2) which allows interoperability with IE8, and security enhancements for Active Content filtering. Xpages can now be built to run on the Notes client. This means that the designer can develop for both clients at the same time. XPage applications can therefore be run offline and with the exact same security model as the client. Having the same programming model for both the Notes client and web is a HUGE productivity improvement, whereby prevously both models shared many elements, but the web client always required more work after the core application was built.

IBM is also changing the licensing models for the clients. Domino Designer is now free. The client access model is being replaced so there will be only two CAL types: Enterprise and Messaging. Mesaging CALs include access to mail, calendar, Lotus Symphony, Lotus Travleer for mobie clients, Quickr Entry, and Lotus Sametime Entry. Enterprise CALs add access to Lotus Mobile Connect as well as custom developed Lotus Notes applications. Again, the Domino Designer is now free.

On the Domino Server, there is now support for SPNEGO authentication. DAOS has been enhanced to be smart about replication, meaning it will not replicate "known" attachments - those attachments to which it already has a copy, thus greatly reducing network traffic in DAOS enabled environments.

On the mobile side, Lotus Notes Traveler now supports Apple iPhone (push based) for mail, calendar and contacts and directory lookup. There is additional support for the Nokia Symbian update such as encrypted mail, remote wipe, and pw management. Other new mobile platforms are also supported.

The Notes client has not been neglected in this release either. There is some user interface "candy" as they say: drag/drop a mail message to the calendar to create a meeting, a new spell checker engine, a pluggable spell checker engine, new anti-spam integration with Lotus Protector mail integration, business card type ahead, adding a a v-card to your signature and more. The business card type ahead is SLICK! Single click action to all the user's blogs, profile, bookmarks etc.

iNotes 8.5.1 also includes more enhancements such as scroll hints, auto-refresh for mail delivery, action buttons in preview pane, and undread count on inbox AND folders. There is better pre-fetch for documents, ID-vault support. There is significant reduction in memory consumption and bandwith on the server. The ultra-light UI also has some new features particularly geared for the Apple iPhone.

All of this will be available for electronic delivery by October 12 on Passport Advantage and Partnerworld. Domino Designer will be available on the Lotus Developer site on partnerworld at http://developer.lotus.com

Useful Links:

Press release: IBM Brings Lotus Notes and Domino Software to Full Spectrum of Web Devices

ibm.com: Notes/Domino 8.5.1 overview

ibm.com: Domino Client Access Licensing

ibm.com: Licensing FAQs for Notes/Domino (updated for 8.5.1 new licensing model)

ibm.com developerWorks Lotus: Download/Experience/Connect (download of Domino Designer coming on Monday, October 12, 2009)