Introduction

iNotes support for the Sametime Proxy Server version 8.5 was introduced in Domino release 8.5.2 as a tech preview. Installation and configuration information can be found in the following IBM developerWorks article.

developerWorks Article: http://www.ibm.com/developerworks/lotus/downloads/inotes_sametime_proxy.html

This wiki article will explain how to configure the IBM WebSphere Caching Proxy server and an apache proxy server for an iNotes and Sametime Proxy deployment.

WebSphere Caching Proxy Server Configuration

The IBM WebSphere Edge Caching Proxy server can be configured simply by editing the ibmproxy.conf file. It is highly recommended to make a backup copy of ibmproxy.conf prior to editing the file. Below is a list of the minimum entries/changes required to configure the Edge server with an iNotes and Sametime Proxy server. Please consult the Edge server's administration documentation for an explanation of all the configuration directives.

Minimum Required Directives
First we need to enable PUT and DELETE method directives as required by the Sametime Proxy server. Then we add rewrite and mapping rules for iNotes and Sametime with junction points in order for requests to be sent to the proper server. Lastly, in order to keep access secure, it's recommended to configure SSL between the client browser and the reverse proxy server. This is done by setting SSL directives and creating a key database. Please refer to the administration documentation for details on enabling SSL.

Method Directives:
Enable GET
Enable HEAD
Enable POST
Enable PUT
Enable DELETE

URL Rewriting Rules and Directives:
JunctionRewrite on UseCookie

Mapping Rules:

Proxy	/inotesmail/*	http://inotesServer.company.com/*
Proxy	/stwebclient/*	http://stproxyServer.company.com:9080/stwebclient/*
Proxy	/stwebapi/*	http://stproxyServer.company.com:9080/stwebapi/*
Proxy	/stbaseapi/*	http://stproxyServer.company.com:9080/stbaseapi/*
Proxy	/stmobile/*	http://stproxyServer.company.com:9080/stmobile/*

ReversePass	http://inotesServer.company.com/*	https://rproxy.company.com/inotesmail/*
ReversePass	http://stproxyServer.company.com:9080/stwebclient/*	https://rproxy.company.com/stwebclient/*
ReversePass	http://stproxyServer.company.com:9080/stwebapi/*	https://rproxy.company.com/stwebapi/*
ReversePass	http://stproxyServer.company.com:9080/stbaseapi/*	https://rproxy.company.com/stbaseapi/*
ReversePass	http://stproxyServer.company.com:9080/stmobile/*	https://rproxy.company.com/stmobile/*

Note: the mapping rules for stmobile are required to support Sametime on mobile devices and do not apply for integration into iNotes.

SSL Directives:
SSLEnable on
SSLCaching on

KeyRing <Explicit path to key.kdb>
KeyRingStash <Explicit path to key.sth>

Note: In addition to the SSL directives, SSL must be configured using the iKeyman utility. Please consult the proxy server's documentation for details on configuring SSL.

Apache Server Configuration

The apache server is configured by editing the httpd.conf, and for SSL an additional user defined configuration file is used. For details on how to configure apache as a reverse proxy server, and to enable SSL please consult the documentation at www.apache.org. The following apache configuration entries is an example of how to configure the apache server for an iNotes and Sametime Proxy server deployment. These entries are added to the user defined SSL configuration file.

<VirtualHost *:443>

ProxyRequests Off

<Proxy *>
Order deny,allow
Allow from all
</Proxy>
 

ProxyPass	/inotesmail	http://inotesServer.company.com/
ProxyPass	/mail/	http://inotesServer.company.com/mail/
ProxyPass	/iNotes/	http://inotesServer.company.com/iNotes/
ProxyPass	/domjs/	http://inotesServer.company.com/domjs/
ProxyPass	/iredir.nsf	http://inotesServer.company.com/iredir.nsf
ProxyPass	/names.nsf	http://inotesServer.company.com/names.nsf
ProxyPass	/stwebclient/	http://stproxyServer.company.com:9080/stwebclient/
ProxyPass	/stwebapi/	http://stproxyServer.company.com:9080/stwebapi/
ProxyPass	/stbaseapi	http://stproxyServer.company.com:9080/stbaseapi/
ProxyPass	/stmobile	http://stproxyServer.company.com:9080/stmobile
ProxyPassReverse	/inotesmail/	http://inotesServer.company.com/
ProxyPassReverse	/stwebclient/	http://stproxyServer.company.com:9080/stwebclient/
ProxyPassReverse	/stwebapi/	http://stproxyServer.company.com:9080/stwebapi/
ProxyPassReverse	/stbaseapi/	http://stproxyServer.company.com:9080/stbaseapi/
ProxyPassReverse	/stmobile/	http://stproxyServer.company.com:9080/stmobile/

</VirtualHost>

Domino Server Configuration

The Sametime Proxy server used by iNotes users is defined on the Domino server by setting a notes.ini var. There are two possible server settings, iNotes_WA_SametimeProxyServer and iNotes_WA_SametimeProxyServerSSL. We recommend using both settings as follows:

• For intranet/internal users, set iNotes_WA_SametimeProxyServer to the URL of the actual Sametime Proxy server. For example: "http://stproxyServer.company.com:9080". In the case where intranet/internal users are required to make a secure connection, "https://stproxyServer.company.com:9443" can be used for this setting.
• For internet users, set iNotes_WA_SametimeProxyServerSSL to the URL of the reverse proxy. For example: "https://rproxy.company.com"