collaborationben | A blog on Sametime, Quickr, Connections, Portal and more https://web.archive.org/web/20160402191255/http://collaborationben.com

Thu 10 Dec 2020 10:37:53 AM CET

Link to the Internet Wayback Machine, the content is still very valuable: A blog on Sametime, Quickr, Connections, Portal and more

Upgrade Elasticsearch | Elasticsearch Reference [7.10] https://www.elastic.co/guide/en/elasticsearch/reference/current/setup-upgrade.html

Sun 06 Dec 2020 09:02:12 AM CET

Upgrade Elasticsearch, seems like some work. I think about HCL Connections 7, where the update ist not documented.

node-red-contrib-ibmconnections (node) - Node-RED https://flows.nodered.org/node/node-red-contrib-ibmconnections

Sat 14 Nov 2020 10:33:39 PM CET

HCL Connections NodeRed nodes

Favicons in Connections 6.0 – Martijn's Blog https://blog.martdj.nl/2018/12/31/favicons-in-connections-6-0/

Wed 04 Nov 2020 09:32:43 AM CET

Administering Connections 6.5 CR1 https://help.hcltechsw.com/connections/v65/admin/welcome/welcome_admin.html

Wed 28 Oct 2020 07:25:14 PM CET

Administering Connections 6 CR6 https://help.hcltechsw.com/connections/v6/admin/welcome/welcome_admin.html

Wed 28 Oct 2020 07:24:43 PM CET

Preferences and policies for the HCL Connections Desktop Plug-ins for Microsoft Windows https://help.hcltechsw.com/connections/v65/connectors/enduser/r_files_prefs_and_policies_windows.html

Thu 08 Oct 2020 05:31:27 PM CEST

Deploying Elasticsearch Metrics with the data migrated from the metrics relational database https://help.hcltechsw.com/connections/v65/admin/install/cp_config_es_migrate_cognos_data.html

Wed 07 Oct 2020 09:13:13 PM CEST

Overflowing OAuth token cache https://blog.martdj.nl/2019/07/15/overflowing-oauth-token-cache/

Fri 02 Oct 2020 12:01:53 PM CEST

It turns out that the clou of the solution was in this little piece: security.oauth20.token.limit.error. The users were running into a limit.
The OAuth token limit is set in the <DMGR profile path>/config/cells/<yourCell>/oauth20/connectionsProvider.xml file:

<!-- optional limit for the number of tokens a user/client/provider combination can be issued -->
<parameter name="oauth20.token.userClientTokenLimit" type="ws" customizable="true">
    <value>250</value>
</parameter>

The default value is ‘250’. The recommended value is ‘500’. You can see if your users were indeed running into this limit by running the following SQL query (query based on MS SQL server, but pretty similar in DB2 or Oracle):

Extending OAuth Cache count to 500

RTE Error fix through OH2P_CACHE (HCL Connections) https://shaarli.stoeps.de/?hZ2Baw

Thu 01 Oct 2020 05:31:35 PM CEST

Sort all tokens by username and count:

SELECT authCache.USERNAME, person.DISPLAYNAME, COUNT(*) AS tokens
  FROM HOMEPAGE.OH2P_CACHE AS authCache
  INNER JOIN HOMEPAGE.LOGINNAME AS loginName ON (loginName.LOGINNAME = authCache.USERNAME)
  INNER JOIN HOMEPAGE.PERSON AS person on(person.PERSON_ID = loginName.PERSON_ID)
  GROUP BY authCache.USERNAME, person.DISPLAYNAME
  ORDER BY COUNT(*) DESC

Show token count for single user

SELECT count(*) FROM HOMEPAGE.OH2P_CACHE WHERE  clientid = 'conn-rte' AND USERNAME = 'username'

Delete tokens for single user:

DELETE FROM HOMEPAGE.OH2P_CACHE WHERE  clientid = 'conn-rte' AND USERNAME = 'username'

Solution:

Edit /opt/IBM/WebSphere/AppServer/profiles/Dmgr01/config/cells/<cellname>/oauth20/connectionsProvider.xml and set

<!-- optional limit for the number of tokens a user/client/provider combination can be issued -->
<parameter name="oauth20.token.userClientTokenLimit" type="ws" customizable="true">
    <value>250</value>
</parameter>

this value to 500!

news-config.xml:

<!-- Each month a scheduled task runs to cleanup the oauth 2P Cache table in Homepage. -->
    <task description="Job to clean up the OAuth 2P Cache" enabled="true" interval="0 0 6 ? * SUN" mbeanMethodName="" name="OAuth2PCacheCleanup" scope=    "cluster" serverName="unsupported" startby="" targetName="ScheduledTaskService" type="internal">
</task>