IBM FileNet Connector for SharePoint Web Parts Fix Pack 2.2.1.1-SPWP-FP001 Readme
© Copyright IBM Corporation 2010.
All Rights Reserved.

About this fix

Accessing IBM FileNet documentation, compatibility matrices, and fix packs

Compatibility

Localization

New in this fix pack 

Installation, migration, upgrade, and configuration

Requirements

Install this fix pack

Uninstall this fix pack  

Product fix history

Contact customer support

Notices

Trademarks

About this fix

This document provides information about the IBM® FileNet® Connector for SharePoint Web Parts Fix Pack 2.2.1.1-SPWP-FP001.

 

Among other changes, this fix pack corrects a potential security problem where IBM FileNet Connector for SharePoint Web Parts v2.2.1 customers that have a SharePoint site enabled for anonymous access and are using the FileNet web parts credential store authentication method can accidentally map the SharePoint anonymous user to a FileNet P8 user account with an inappropriate level of access.  This happens in the following scenario:

 

1.  FileNet Web Parts v2.2.1 is deployed to a SharePoint site set for Anonymous Access.

2.  A SharePoint user is accessing the SharePoint site with anonymous access.

3.  No entry exists in the FileNet P8 Credential Store for the SharePoint anonymous user.

4.  The SharePoint user accesses the page with the FileNet Connector for SharePoint Web Parts.

5.  When prompted with the FileNet P8 login dialog, the user supplies FileNet P8 user credentials that should not be used by other users who access the same SharePoint site as the anonymous user.  For example, credentials for a FileNet P8 administrator could be entered if the administrator is testing the FileNet web parts and is the first anonymous user to access the SharePoint site.

 

With this fix applied, all SharePoint users will be required to log in to SharePoint, using their specified SharePoint credentials, and must then provide valid FileNet P8 credentials when prompted at the login screen.  Once successfully authenticated, they can continue to use the FileNet web parts until their FileNet P8 credentials change or are deleted.  To determine if your release of IBM FileNet Connector for SharePoint Web Parts contains the vulnerability, check the version.txt file in the root folder of your install media.  If the build number is sp230.314 or sp230.314b your version does contain the vulnerability.

 

In addition, this fix pack corrects a problem caused when a search template includes empty fields. The fix pack also allows you to configure a MIME type graphic to represent PDF documents when they are displayed.

Accessing IBM FileNet documentation, compatibility matrices, and fix packs

Documentation

To access documentation for IBM FileNet Connector for SharePoint:

1.       Navigate to the Information Management support page (www.ibm.com/software/data/support).

2.       Select FileNet Content Manager from the “Select a category” list.

3.       From the Product Support page, click Documentation. Under Additional Documentation support links, Product Documentation heading, click Connectors for Microsoft SharePoint.

4.       From the Product Documentation for FileNet Connector for SharePoint page, click the icon in the appropriate release column to access the documents you need.

Compatibility matrices

To access compatibility matrices for IBM FileNet Connector for SharePoint and related products:

1.           Navigate to the Information Management support page (www.ibm.com/software/data/support).

2.           As a category, select FileNet Product Family.

3.           On the FileNet Product Family support page, search for "FileNet P8 Fix Pack Compatibility Matrices".

4.           On the results page, click FileNet P8 Fix Pack Compatibility Matrices.

5.           Select the matrix for the appropriate IBM FileNet P8 release number.

Fix packs

To access fix packs for IBM FileNet SharePoint Connector for SharePoint Web Parts:

1.           Navigate to the Fix Central page (www-933.ibm.com/support/fixcentral).

2.           From the Software list, select the Product Group: Information Management.

3.           Select the Product: FileNet Connector for SharePoint Web Parts.

4.           Specify the other information relevant to your system and download the appropriate fix pack.

Compatibility

For compatibility information, see:

·             IBM FileNet P8 Hardware and Software Requirements Guide

·             IBM FileNet P8 Fix Pack Dependency/Compatibility Matrix

Localization

Available languages

In addition to English, the product is available in the following languages:

Language

Code

Chinese (Simplified)

zh-CN

Chinese (Traditional)

zh-TW

French

fr

German

de

Italian

it

Japanese

ja

Korean

ko

Portuguese (Brazilian)

pt-BR

Spanish

es

New in this fix pack

This fix pack corrects a potential security problem where IBM FileNet Connector for SharePoint Web Parts v2.2.1 customers that have a SharePoint site enabled for anonymous access and are using the FileNet web parts credential store authentication method can accidentally map the SharePoint anonymous user to a FileNet P8 user account with an inappropriate level of access. With this fix applied, the SharePoint anonymous user will see an error message when attempting to access a SharePoint site deployed with FileNet web parts. And all SharePoint users will be required to log in to SharePoint using their specified SharePoint credentials, and must then provide valid FileNet P8 credentials when prompted at the login screen.  Once successfully authenticated, they can continue to use the FileNet web parts until their FileNet P8 credentials change or are deleted.  To determine if your release of IBM FileNet Connector for SharePoint Web Parts contains the vulnerability, check the version.txt file in the root folder of your install media.  If the build number is sp230.314 or sp230.314b your version does contain the vulnerability and you should apply this fix.

In addition, this fix pack corrects a problem caused when a search template includes empty fields. The fix pack also allows you to configure a MIME type graphic to represent PDF documents when they are displayed.

For information about SharePoint Web Parts 2.2.1 new features and known issues, see the IBM FileNet P8 4.x.x Release Notes.

For details about the resolved defects in this fix pack, see "Product fix history".

Installation, migration, upgrade, and configuration

Support documentation

Before installing this fix pack, verify you have an installed copy of the latest IBM FileNet P8 Platform documentation package. This package contains additional information that you might need to perform the procedures mentioned in this readme.

Search is enabled in the help system only if you have installed it as a web site on a web server that supports Java™ applications.

Requirements

The following component must be installed before installing this fix pack:

·             SPWP-2.2.1

Install this fix pack

Follow these steps to install this fix pack:

1.       Download the Fix Pack 2.2.1.1-SPWP-FP001.zip file for your platform and extract its contents to a temporary location. To download this fix pack from the IBM support page, see Access IBM FileNet documentation, compatibility matrices, and fix packs.

2.       Run 2.2.1.1-SPWP-FP001.exe to launch the installation wizard.

3.       Follow the prompts to complete the installation wizard.

4.       Confirm a successful installation by reviewing the installation log and confirming that no errors occurred. The log is located in the installation folder named "FileNetConnectorForSharePointWebParts." The log file name is "sharepoint_web_parts_install_log_2.2.1.1_FP001.txt".

Uninstall this fix pack

This fix pack does not have an uninstall option. For support, see "Contact customer support".

Product fix history

The table lists the fixes and features in this fix pack.

SPWP-2.2.1.1-FP001

 

APAR

Defect

Type

Description

PJ36870

843248

Fix

Provides the ability to configure a MIME type graphic to display for PDF documents in the IBM FileNet SharePoint Web Parts.

PJ37035

850367

Fix

When a search template included empty fields followed by non-empty fields, empty brackets were written to the SQL. Multiple empty brackets caused a SQL error. Empty brackets are no longer written when the fields are empty.

PJ37221

857476

Fix

Corrects a potential security problem where IBM FileNet Connector for SharePoint Web Parts v2.2.1 customers that have a SharePoint site enabled for anonymous access and are using the FileNet web parts credential store authentication method can accidentally map the SharePoint anonymous user to a FileNet P8 user account with an inappropriate level of access. 

Contact customer support

For information about contacting customer support:

1.             Navigate to the Information Management support page ( http://www.ibm.com/software/data/support).

2.             Select the appropriate IBM FileNet product from the "Select a category" list.

From the Product Support page, click View all Flashes and then select: How to get support for IBM FileNet products.

Notices

This information was developed for products and services offered in the U.S.A.

IBM may not offer the products, services, or features discussed in this document in other countries. Consult your local IBM representative for information on the products and services currently available in your area. Any reference to an IBM product, program, or service is not intended to state or imply that only that IBM product, program, or service may be used. Any functionally equivalent product, program, or service that does not infringe any IBM intellectual property right may be used instead. However, it is the user's responsibility to evaluate and verify the operation of any non-IBM product, program, or service.

IBM may have patents or pending patent applications covering subject matter described in this document. The furnishing of this document does not grant you any license to these patents. You can send license inquiries, in writing, to:

IBM Corporation
J74/G4
555 Bailey Avenue
San Jose, CA 95141
U.S.A.

For license inquiries regarding double-byte (DBCS) information, contact the IBM Intellectual Property Department in your country or send inquiries, in writing, to:

Intellectual Property Licensing
Legal and Intellectual Property Law
IBM Japan Ltd.
1623-14, Shimotsuruma, Yamato-shi
 Kanagawa 242-8502 Japan

The following paragraph does not apply to the United Kingdom or any other country where such provisions are inconsistent with local law: INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some states do not allow disclaimer of express or implied warranties in certain transactions, therefore, this statement may not apply to you.

This information could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein; these changes will be incorporated in new editions of the publication. IBM may make improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time without notice.

Any references in this information to non-IBM Web sites are provided for convenience only and do not in any manner serve as an endorsement of those Web sites. The materials at those Web sites are not part of the materials for this IBM product and use of those Web sites is at your own risk.

IBM may use or distribute any of the information you supply in any way it believes appropriate without incurring any obligation to you.

Licensees of this program who wish to have information about it for the purpose of enabling: (i) the exchange of information between independently created programs and other programs (including this one) and (ii) the mutual use of the information which has been exchanged, should contact:

IBM Corporation
J46A/G4
555 Bailey Avenue
San Jose, CA  95141-1003
U.S.A.

Such information may be available, subject to appropriate terms and conditions, including in some cases, payment of a fee.

The licensed program described in this document and all licensed material available for it are provided by IBM under terms of the IBM Customer Agreement, IBM International Program License Agreement or any equivalent agreement between us.

Any performance data contained herein was determined in a controlled environment. Therefore, the results obtained in other operating environments may vary significantly. Some measurements may have been made on development-level systems and there is no guarantee that these measurements will be the same on generally available systems. Furthermore, some measurements may have been estimated through extrapolation. Actual results may vary. Users of this document should verify the applicable data for their specific environment.

Information concerning non-IBM products was obtained from the suppliers of those products, their published announcements or other publicly available sources. IBM has not tested those products and cannot confirm the accuracy of performance, compatibility or any other claims related to non-IBM products. Questions on the capabilities of non-IBM products should be addressed to the suppliers of those products.

All statements regarding IBM's future direction or intent are subject to change or withdrawal without notice, and represent goals and objectives only.

This information contains examples of data and reports used in daily business operations. To illustrate them as completely as possible, the examples include the names of individuals, companies, brands, and products. All of these names are fictitious and any similarity to the names and addresses used by an actual business enterprise is entirely coincidental.

COPYRIGHT LICENSE:

This information contains sample application programs in source language, which illustrate programming techniques on various operating platforms. You may copy, modify, and distribute these sample programs in any form without payment to IBM, for the purposes of developing, using, marketing or distributing application programs conforming to the application programming interface for the operating platform for which the sample programs are written. These examples have not been thoroughly tested under all conditions. IBM, therefore, cannot guarantee or imply reliability, serviceability, or function of these programs. The sample programs are provided "AS IS", without warranty of any kind. IBM shall not be liable for any damages arising out of your use of the sample programs.

Trademarks

·         IBM, the IBM logo, and ibm.com are trademarks or registered trademarks of International Business Machines Corporation in the United States, other countries, or both. If these and other IBM trademarked terms are marked on their first occurrence in this information with a trademark symbol (® or ™), these symbols indicate U.S. registered or common law trademarks owned by IBM at the time this information was published. Such trademarks may also be registered or common law trademarks in other countries. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.

·         Java and all Java-based trademarks are trademarks of Sun Microsystems, Inc. in the United States, other countries, or both.

·         Microsoft, Windows, Windows NT, SQL Server, and the Windows logo are trademarks of Microsoft Corporation in the United States, other countries, or both.

·         UNIX is a registered trademark of The Open Group in the United States and other countries.

·         Other company, product, or service names might be trademarks or service marks of others.