tag:blogger.com,1999:blog-16663234588521187202024-03-14T08:33:28.483-04:00Planet NotesRob Kirklandhttp://www.blogger.com/profile/17751566264733637774noreply@blogger.comBlogger27125tag:blogger.com,1999:blog-1666323458852118720.post-12692794174305714302024-01-04T14:14:00.003-05:002024-01-04T14:14:56.739-05:00Mail Rule unintended results<p> My client asked me to help with the following problem: He registered a new user with email address "bswann@example.com". (Yes, this is a fictitious name for illustration purposes.) Internal mail was routing to this new user just fine. But mail arriving from outside the domain was being returned to sender "for policy reasons". At first I thought the message was being rejected by the Barracuda device sitting in front of the Domino mail server. But, no. Then I increased the mail routing logging level, whereupon I could see that the Domino server was doing the rejections.</p><p>While working on this problem, I sent a test message that was addressed to bswann@example.com with cc to jdoaks@example.com. (I wanted my client, Joe Doaks (yes, fictitious), to see that I was working on his problem. To my surprise, the mail server rejected both copies of the message this time.</p><p>Upon searching the Domino Directory, I found this rule:</p><blockquote style="border: none; margin: 0 0 0 40px; padding: 0px;"><p style="text-align: left;">IF the To field contains "ann@example.com", THEN reject the message. </p></blockquote><p>The rule had been created seven year ago. I disabled it. I sent another test message and (Ta Da!) the test message was delivered! It turns out that "bswann@example.com" <i>contains</i> "ann@example.com". </p><p>Then I re-wrote the rule as follows, enabled it, and tested again:</p><blockquote style="border: none; margin: 0 0 0 40px; padding: 0px;"><p style="text-align: left;">IF the To field <i>IS</i> "ann@example.com", THEN reject the message.</p></blockquote><p>And, yeah, the next test message was delivered just fine. </p><p>Happy New Year. </p><p>Rob</p>Rob Kirklandhttp://www.blogger.com/profile/17751566264733637774noreply@blogger.com0tag:blogger.com,1999:blog-1666323458852118720.post-30536746812330743802022-05-14T12:50:00.000-04:002022-05-14T12:50:30.486-04:00Configuring SAML authentication on multiple Domino servers.<p></p><h2 style="text-align: left;"><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="font-family: inherit;">Copyright 2022 by Rob Kirkland. All rights reserved.</span></span></h2><p class="MsoNormal"><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="font-family: inherit;">It seems that HCL has neglected to
publish the full set of instructions for configuring SAML authentication
between Domino HTTP servers and Microsoft ADFS. The documentation as published
results in one properly configured Domino server. But if you’re setting up multiple
Domino servers to host a single Web site behind a load balancer / IP sprayer
(i.e., you have configured multiple servers as hosts in a Web Site document),
what you’ll end up with is one server (the one on which you performed the
configuration work) that properly redirects authentication requests to ADFS and
other servers that cannot do so and end up prompting users for credentials
themselves.<o:p></o:p></span></span></p>
<p class="MsoNormal"><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="font-family: inherit;">The missing steps are:<o:p></o:p></span></span></p>
<p class="MsoListParagraphCxSpFirst" style="margin-left: 38.65pt; mso-add-space: auto; mso-list: l2 level1 lfo1; text-indent: -.25in;"><!--[if !supportLists]--><span style="font-family: inherit;"><span style="color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="mso-list: Ignore;">1.<span style="font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span></span><!--[endif]--><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">Export the Service Provider certificate, created during the
first Domino server’s (“Server1”) configuration, from the first Domino server’s
ID file.<o:p></o:p></span></span></p>
<p class="MsoListParagraphCxSpLast" style="margin-left: 38.65pt; mso-add-space: auto; mso-list: l2 level1 lfo1; text-indent: -.25in;"><!--[if !supportLists]--><span style="font-family: inherit;"><span style="color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="mso-list: Ignore;">2.<span style="font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span></span><!--[endif]--><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">Import the SP certificate into the ID files of the other Domino
server(s) hosting the Web site.<br />
</span><b><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">Important note</span></b><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">: This includes any servers not currently
existing or not currently hosting the Web site, but that may do so in the
future.)</span><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><o:p></o:p></span></span></p>
<p class="MsoNormal"><span style="font-family: inherit;"><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><b>NOTE</b>: Roberto DeLaRosa of HCL Support provided me with the instructions below. If you ever find yourself receiving support from Robi, consider yourself lucky; you are in the care of a competent and resourceful individual. </span></span></p><p class="MsoNormal"><span style="font-family: inherit;"><b><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">TIP:</span></b><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"> Consider composing the <i>set config</i> commands below in a
Notepad document, then proofreading, then pasting into the <i>Domino Command</i>
field in the Server Console.<o:p></o:p></span></span></p>
<p class="MsoNormal"><span style="font-family: inherit;"><b><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">TIP: </span></b><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">For a better understanding of what you’re going to do below,
examine Server1’s ID file and look at its Internet Certificates. The steps
below will export them from Server1 and import them into Servers 2 through n. <b>Subtip</b>:
If there are multiple Internet certificates in the export file, and you don’t
want to import them all into the target server(s), consider editing the export
file to remove the unwanted certificate(s).<o:p></o:p></span></span></p>
<p class="MsoNormal"><span style="font-family: inherit;"><b><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">TIP:</span></b><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"> Make backup copies of the server ID files before performing
the steps below. Name the backup copies such that it is clear how they are
different from other copies of the ID files. </span><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">Maybe even create a readme.txt file to clarify. And then put everything, including the export ("p12") file created below, in a zip file. Finally (and most importantly), stash the zip file in a secure place and delete any unsecured copies of it or its content.</span></span></p>
<h1 style="text-align: left;"><span style="font-family: inherit;"><b><span style="background: white; color: #4b4b4b; line-height: 107%;"><span style="font-size: medium;">Part 1:</span></span></b><span style="background: white; color: #4b4b4b; line-height: 107%;"><span style="font-size: medium;"> Exporting the Certificate from Server1’s ID file </span><span style="font-size: 10.5pt;"><o:p></o:p></span></span></span></h1>
<p class="MsoListParagraphCxSpFirst" style="mso-list: l0 level1 lfo2; text-indent: -.25in;"><!--[if !supportLists]--><span style="font-family: inherit;"><span style="color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="mso-list: Ignore;">1.<span style="font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span></span><!--[endif]--><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">Run Domino Administrator and connect to Server1, the server
that properly redirects users to the ADFS Identity Provider for authentication.<o:p></o:p></span></span></p>
<p class="MsoListParagraphCxSpMiddle" style="mso-list: l0 level1 lfo2; text-indent: -.25in;"><!--[if !supportLists]--><span style="font-family: inherit;"><span style="color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="mso-list: Ignore;">2.<span style="font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span></span><!--[endif]--><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">Open the IdP Configuration document in the idpcat.nsf<o:p></o:p></span></span></p>
<p class="MsoListParagraphCxSpMiddle" style="margin-left: 1.0in; mso-add-space: auto; mso-list: l0 level2 lfo2; text-indent: -.25in;"><!--[if !supportLists]--><span style="font-family: inherit;"><span style="color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="mso-list: Ignore;">a.<span style="font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span></span><!--[endif]--><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">Click the Certificate Management Tab <o:p></o:p></span></span></p>
<p class="MsoListParagraphCxSpMiddle" style="margin-left: 1.0in; mso-add-space: auto; mso-list: l0 level2 lfo2; text-indent: -.25in;"><!--[if !supportLists]--><span style="font-family: inherit;"><span style="color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="mso-list: Ignore;">b.<span style="font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span></span><!--[endif]--><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">Take note of the <i>Company name</i> including the exact
case. <o:p></o:p></span></span></p>
<p class="MsoListParagraphCxSpMiddle" style="margin-left: 1.0in; mso-add-space: auto; mso-list: l0 level2 lfo2; text-indent: -.25in;"><!--[if !supportLists]--><span style="font-family: inherit;"><span style="color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="mso-list: Ignore;">c.<span style="font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span></span><!--[endif]--><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">Take note of the <i>Certificate public hash value</i>. <o:p></o:p></span></span></p>
<p class="MsoListParagraphCxSpMiddle" style="mso-list: l0 level1 lfo2; text-indent: -.25in;"><!--[if !supportLists]--><span style="font-family: inherit;"><span style="color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="mso-list: Ignore;">3.<span style="font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span></span><!--[endif]--><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">Navigate to the Server, Status tab and select the Domino
console. Click the “Live” button. </span><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">(Alternatively,
you can perform the next steps in the server's local console.)</span><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><o:p></o:p></span></span></p>
<p class="MsoListParagraphCxSpMiddle" style="mso-list: l0 level1 lfo2; text-indent: -.25in;"><!--[if !supportLists]--><span style="font-family: inherit;"><span style="color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="mso-list: Ignore;">4.<span style="font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span></span><!--[endif]--><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">Use “set config” to </span><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">set the
SAMLCompanyName variable in Server1's notes.ini file. The value is the “Company
Name” observed in the step above. </span><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">Append
upper case “CN=” to the company name (this is case sensitive). Incorrect case
will cause subsequent commands to fail. <o:p></o:p></span></span></p>
<p class="MsoListParagraphCxSpMiddle" style="margin-left: 1.0in; mso-add-space: auto; mso-list: l0 level2 lfo2; text-indent: -.25in;"><!--[if !supportLists]--><span style="font-family: inherit;"><span style="color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="mso-list: Ignore;">a.<span style="font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span></span><!--[endif]--></span><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="font-family: inherit;">Syntax: <br /></span><br />
</span><span style="background: white; color: #4b4b4b; font-family: "Courier New"; font-size: 10.5pt; line-height: 107%;">set config SAMLCompanyName=CN=<Company
name></span><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"> <br /><span style="font-family: inherit;"><br /> Where <Company name> is the content of the <i>Company name</i> field in
the IdP Configuration document. <o:p></o:p></span></span></p>
<p class="MsoListParagraphCxSpMiddle" style="margin-left: 1.0in; mso-add-space: auto; mso-list: l0 level2 lfo2; text-indent: -.25in;"><!--[if !supportLists]--><span style="font-family: inherit;"><span style="color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="mso-list: Ignore;">b.<span style="font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span></span><!--[endif]--></span><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="font-family: inherit;">Example: <br /></span><br />
</span><span style="background: white; color: #4b4b4b; font-family: "Courier New"; font-size: 10.5pt; line-height: 107%;">set config SAMLCompanyName=CN=MyAmazingCompany</span><span style="background: white; color: #4b4b4b; font-family: Roboto; font-size: 10.5pt; line-height: 107%;"> <o:p></o:p></span></p>
<p class="MsoListParagraphCxSpMiddle" style="mso-list: l0 level1 lfo2; text-indent: -.25in;"><!--[if !supportLists]--><span style="color: #4b4b4b; font-family: Roboto; font-size: 10.5pt; line-height: 107%; mso-bidi-font-family: Roboto; mso-fareast-font-family: Roboto;"><span style="mso-list: Ignore;">5.<span style="font: 7.0pt "Times New Roman";"> </span></span></span><!--[endif]--><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="font-family: inherit;">Use "set config" to define the Certificate public
hash value (as defined in the document). <br />
<b>TIP:</b> A copy and paste from the IdP Configuration document helps insure
accurate transcription. <o:p></o:p></span></span></p>
<p class="MsoListParagraphCxSpMiddle" style="margin-left: 1.0in; mso-add-space: auto; mso-list: l0 level2 lfo2; text-indent: -.25in;"><!--[if !supportLists]--><span style="font-family: inherit;"><span style="color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="mso-list: Ignore;">a.<span style="font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span></span><!--[endif]--><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">set config SAMLPublicKeyHash=<hash value> <br /><br /> Where <i><hash value></i> is the content of the <i>Certificate public
hash value (base 64)</i> field of the IdP Configuration document.<o:p></o:p></span></span></p>
<p class="MsoListParagraphCxSpMiddle" style="margin-left: 1.0in; mso-add-space: auto; mso-list: l0 level2 lfo2; text-indent: -.25in;"><!--[if !supportLists]--><span style="font-family: inherit;"><span style="color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="mso-list: Ignore;">b.<span style="font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span></span><!--[endif]--></span><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="font-family: inherit;">Example: <br /><br /></span>
</span><span style="background: white; color: #4b4b4b; font-family: "Courier New"; font-size: 10.5pt; line-height: 107%;">set config
SAMLPublicKeyHash=eWJ6S2cJd+6861u+XSpmDA== <o:p></o:p></span></p>
<p class="MsoListParagraphCxSpMiddle" style="mso-list: l0 level1 lfo2; text-indent: -.25in;"><!--[if !supportLists]--><span style="color: #4b4b4b; font-family: Roboto; font-size: 10.5pt; line-height: 107%; mso-bidi-font-family: Roboto; mso-fareast-font-family: Roboto;"><span style="mso-list: Ignore;">6.<span style="font: 7.0pt "Times New Roman";"> </span></span></span><!--[endif]--><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="font-family: inherit;">Export the certificate to a file, secured with a password. <o:p></o:p></span></span></p>
<p class="MsoListParagraphCxSpMiddle" style="margin-left: 1.0in; mso-add-space: auto; mso-list: l0 level2 lfo2; text-indent: -.25in;"><!--[if !supportLists]--><span style="font-family: inherit;"><span style="color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="mso-list: Ignore;">a.<span style="font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span></span><!--[endif]--></span><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="font-family: inherit;">Syntax:<br /></span><br />
</span><span style="background: white; color: #4b4b4b; font-family: "Courier New"; font-size: 10.5pt; line-height: 107%;">certmgmt export saml pkcs12 file.p12 password</span><span style="background: white; color: #4b4b4b; font-family: Roboto; font-size: 10.5pt; line-height: 107%;"> <o:p></o:p></span></p>
<p class="MsoListParagraphCxSpMiddle" style="margin-left: 1.0in; mso-add-space: auto;"><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="font-family: inherit;">Where <i>file.p12</i> a file name to be
created. <o:p></o:p></span></span></p>
<p class="MsoListParagraphCxSpMiddle" style="margin-left: 1.0in; mso-add-space: auto;"><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="font-family: inherit;">Where <i>password</i> will be the password of
the p12 file to be created. <o:p></o:p></span></span></p>
<p class="MsoListParagraphCxSpMiddle" style="margin-left: 1.0in; mso-add-space: auto; mso-list: l0 level2 lfo2; text-indent: -.25in;"><!--[if !supportLists]--><span style="font-family: inherit;"><span style="color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="mso-list: Ignore;">b.<span style="font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span></span><!--[endif]--><b><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">IMPORTANT NOTE</span></b><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">: This
process will export the private key also, which is why the export file is
password protected. Please follow proper security protocols for storage, transport,
and password protection of this file. <o:p></o:p></span></span></p>
<p class="MsoListParagraphCxSpMiddle" style="margin-left: 1.0in; mso-add-space: auto; mso-list: l0 level2 lfo2; text-indent: -.25in;"><!--[if !supportLists]--><span style="font-family: inherit;"><span style="color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="mso-list: Ignore;">c.<span style="font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span></span><!--[endif]--></span><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="font-family: inherit;">Example command: <br /></span><br />
</span><span style="background: white; color: #4b4b4b; font-family: "Courier New"; font-size: 10.5pt; line-height: 107%;">certmgmt export saml pkcs12 mykeys.p12
s3cuR1ty@!F1rsT <o:p></o:p></span></p>
<p class="MsoListParagraphCxSpLast" style="margin-left: 1.0in; mso-add-space: auto; mso-list: l0 level2 lfo2; text-indent: -.25in;"><!--[if !supportLists]--><span style="font-family: inherit;"><span style="color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">d.<span style="font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span><!--[endif]--><b><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">Note</span></b><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">: The file will be
saved into Server1’s data directory. <o:p></o:p></span></span></p>
<h1 style="text-align: left;"><span style="font-family: inherit;"><b><span style="background: white; color: #4b4b4b; line-height: 107%;"><span style="font-size: medium;">Part 2:</span></span></b><span style="background: white; color: #4b4b4b; line-height: 107%;"><span style="font-size: medium;"> Importing the certificate into the other Domino servers’ ID files.
</span><span style="font-size: 10.5pt;"><o:p></o:p></span></span></span></h1>
<p class="MsoNormal"><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="font-family: inherit;">In this part we will import the p12 file
created in Part 1 into the ID file(s) of Server2. <o:p></o:p></span></span></p>
<p class="MsoNormal"><span style="font-family: inherit;"><b><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">NOTE</span></b><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">: If more than two servers will host the Web site for which
you created the subject IdP Configuration, you will repeat this procedure on
servers 2 through n. <o:p></o:p></span></span></p>
<p class="MsoNormal"><span style="font-family: inherit;"><b><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">NOTE</span></b><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">: If additional servers may be added or substituted as Web
Site hosts in the future, and their ID files exist now, consider importing the
certificate into their ID files as well. If new but not yet registered servers
will host the Web Site, consider saving the export file (and its password) somewhere
secure. (See the earlier tip about making and securing a zip file.)<o:p></o:p></span></span></p>
<p class="MsoListParagraphCxSpFirst" style="mso-list: l1 level1 lfo3; text-indent: -.25in;"><!--[if !supportLists]--><span style="font-family: inherit;"><span style="color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="mso-list: Ignore;">1.<span style="font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span></span><!--[endif]--><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">Copy the p12 file from Server1 to the data directory of each
target server (where you wish to import). <o:p></o:p></span></span></p>
<p class="MsoListParagraphCxSpMiddle"><span style="font-family: inherit;"><b><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">NOTE for
Linux users:</span></b><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"> If a target Domino server
resides on a Linux host, make sure that the p12 file is owned by the owner of the
other Domino processes. <o:p></o:p></span></span></p>
<p class="MsoListParagraphCxSpMiddle" style="mso-list: l1 level1 lfo3; text-indent: -.25in;"><!--[if !supportLists]--><span style="font-family: inherit;"><span style="color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="mso-list: Ignore;">2.<span style="font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span></span><!--[endif]--><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">Launch the Domino Console from the administrator's client. (Alternatively,
open the local console on the target server.)<o:p></o:p></span></span></p>
<p class="MsoListParagraphCxSpMiddle" style="mso-list: l1 level1 lfo3; text-indent: -.25in;"><!--[if !supportLists]--><span style="font-family: inherit;"><span style="color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="mso-list: Ignore;">3.<span style="font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span></span><!--[endif]--><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">Enter the import command using the same details as before for
filename and password. <b>NOTE:</b> Since the file is in the server's
Domino\data directory, there's no need to enter a path. <o:p></o:p></span></span></p>
<p class="MsoListParagraphCxSpMiddle" style="margin-left: 1.0in; mso-add-space: auto; mso-list: l1 level2 lfo3; text-indent: -.25in;"><!--[if !supportLists]--><span style="font-family: inherit;"><span style="color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="mso-list: Ignore;">a.<span style="font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span></span><!--[endif]--></span><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="font-family: inherit;">Syntax: <br /></span><br />
</span><span style="background: white; color: #4b4b4b; font-family: "Courier New"; font-size: 10.5pt; line-height: 107%;">certmgmt import pkcs12 file.p12 password</span><span style="background: white; color: #4b4b4b; font-family: Roboto; font-size: 10.5pt; line-height: 107%;"><o:p></o:p></span></p>
<p class="MsoListParagraphCxSpMiddle" style="margin-left: 1.0in; mso-add-space: auto; mso-list: l1 level2 lfo3; text-indent: -.25in;"><!--[if !supportLists]--><span style="font-family: inherit;"><span style="color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">b.<span style="font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span><!--[endif]--><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">Example:</span></span><span style="background: white; color: #4b4b4b; font-family: Roboto; font-size: 10.5pt; line-height: 107%;"><o:p></o:p></span></p>
<p class="MsoListParagraphCxSpMiddle" style="margin-left: 1.0in; mso-add-space: auto;"><span style="background: white; color: #4b4b4b; font-family: "Courier New"; font-size: 10.5pt; line-height: 107%;">Certmgmt import pkcs12 mykeys.p12 s3cuR1ty@!F1rsT</span><span style="background: white; color: #4b4b4b; font-family: Roboto; font-size: 10.5pt; line-height: 107%;"><o:p></o:p></span></p>
<p class="MsoListParagraphCxSpMiddle" style="margin-left: 1.0in; mso-add-space: auto; mso-list: l1 level2 lfo3; text-indent: -.25in;"><!--[if !supportLists]--><span style="font-family: inherit;"><span style="color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">c.<span style="font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span><!--[endif]--></span><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="font-family: inherit;">Confirm that your import was successful by issuing the
following command: <br /></span><br />
</span><span style="background: white; color: #4b4b4b; font-family: "Courier New"; font-size: 10.5pt; line-height: 107%;">certmgmt show all</span><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><br /><span style="font-family: inherit;"><br /> The command will display the details of the certificate(s) that was/were
imported. <o:p></o:p></span></span></p>
<p class="MsoListParagraphCxSpMiddle" style="mso-list: l1 level1 lfo3; text-indent: -.25in;"><!--[if !supportLists]--><span style="font-family: inherit;"><span style="color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="mso-list: Ignore;">4.<span style="font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span></span><!--[endif]--><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">Restart the HTTP task on server2. <o:p></o:p></span></span></p>
<p class="MsoListParagraphCxSpMiddle" style="mso-list: l1 level1 lfo3; text-indent: -.25in;"><!--[if !supportLists]--><span style="font-family: inherit;"><span style="color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="mso-list: Ignore;">5.<span style="font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span></span><!--[endif]--><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">Test SAML authentication on server2. <o:p></o:p></span></span></p>
<p class="MsoListParagraphCxSpMiddle"><span style="font-family: inherit;"><b><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">NOTE:</span></b><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"> If the Web servers are behind a load balancer, you my need
to disable the HTTP service on all but the one Domino server being tested. <o:p></o:p></span></span></p>
<p class="MsoListParagraphCxSpMiddle"><span style="font-family: inherit;"><b><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">TIP:</span></b><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"> An easy way to determine which server you are connecting to
is to open the homepage.nsf database. First, edit the design of the <i>Intro</i>
page of the homepage.nsf database, adding computed text with a value of <i>@ServerName</i>
to one of the table cells.<o:p></o:p></span></span></p>
<p class="MsoListParagraphCxSpLast" style="mso-list: l1 level1 lfo3; text-indent: -.25in;"><!--[if !supportLists]--><span style="font-family: inherit;"><span style="color: #4b4b4b; font-size: 10.5pt; line-height: 107%;"><span style="mso-list: Ignore;">6.<span style="font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span></span><!--[endif]--><b><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">Optional cleanup</span></b><span style="background: white; color: #4b4b4b; font-size: 10.5pt; line-height: 107%;">: Delete
the p12 files from data directories of servers 1 through n. (But, as previously
suggested, keep a copy somewhere safe if you might need to perform more imports
in the future. Otherwise, you will have to create a new p12 file by performing another
export at that time.)<o:p></o:p></span></span></p><br /><p></p>Rob Kirklandhttp://www.blogger.com/profile/17751566264733637774noreply@blogger.com0tag:blogger.com,1999:blog-1666323458852118720.post-38559398697052422272021-02-19T11:28:00.003-05:002021-02-19T12:18:05.658-05:00Opening attachments in HCL Verse and Chrome<p>I've often been frustrated when trying to open or download attachments when using IBM/HCL Verse in a Chrome browser window. I always end up looking at a raw version of the file. And I have to struggle to get back to the referring message. Then, after fumbling around with it a bit, I switch to Firefox or Edge to open the file. It occurred to me this morning (duh!) that I should look up the procedure for handling attachments in HCL's documentation. There I found a solution: "<a href="https://help.hcltechsw.com/inotes/11.0.0/mail_use_attachments_t.html" target="_blank">(Google Chrome only) Save attachments by using drag and drop.</a>" </p><p>Oh, so that's how you do it! And, okay, it's a Chrome quirk that's causing the problem. </p><p>So I tried <i>drag and drop </i>and it did solve my problem.</p><p>But <i>drag and drop </i>is sort of a cumbersome procedure, especially when using a laptop computer with a small, crowded screen and a touch pad. You have to set up your desktop for it before doing it, arranging windows side-by-side, that sort of thing. Then you have to make sure you don't let up off the mouse button or touch pad during that long, perilous journey across the desktop.<br /></p><p>So, still not satisfied, it occurred to me to try right-clicking on the attachment in the message. In the menu that popped up I saw "Save link as...". Looked promising. Tried it. A <i>Save As </i>dialog opened. I navigated to the folder where I wanted to save the attachment. Clicked <i>Save</i>. Opened the saved file (in Excel in my test). Ta-da! It worked. There was my file.</p><p>Suggestion to <a href="https://twitter.com/search?q=%23HCLDSSup&src=hashtag_click" target="_blank">@HCLDSSup</a>: Add this right-click procedure to the product documentation as an alternative to drag and drop in Chrome. It's much less cumbersome. And, thanks, Reader, for reading this all the way to the end.<br /></p>Rob Kirklandhttp://www.blogger.com/profile/17751566264733637774noreply@blogger.com0tag:blogger.com,1999:blog-1666323458852118720.post-41933162776380960562020-08-17T10:00:00.000-04:002020-08-17T10:00:29.870-04:00Updall options for Note/Domino v9.0.1 documentation<p> I use the Notes/Domino maintenance tools pretty frequently to keep Domino servers and Notes workstations running at their best and to fix issues that may arise from time to time. When I run them from a command prompt I like to refer to each utility's Options pages in the product documentation to make sure that I use appropriate arguments on the command line, depending on what I need each tool to do for me. I've been doing this for years - no, decades - and you would thing that, by now, I would know all the arguments by heart. But I have never bothered to memorize them because, I don't know, I guess I'd rather put my organic storage device (a/k/a my brain) to other uses.</p><p>Anyway, I've noticed that, since HCL acquired Notes/Domino from IBM and took over the documentation of the produce, the Options pages for some of the utilities have disappeared from the documentation. The links to Updall Options in the online Domino 11 documentation, for example, no longer take one to the page that lists and explains the uses of all of the switches available to be used with the command. If I hunt long and hard enough, sometimes I may find what I'm looking for. But it feels like a real waste of time. So, for my own benefit and that of my other reader (and, okay, yours, too, if you want), below this paragraph I am quoting the content of the Domino 9.0.1 Updall Options page. I didn't try to fix any links in the quoted text and I don't know, offhand, if IBM or HCL may have made or be planning to make changes in later versions of the utility):</p><p><b><span style="font-size: large;">Updall options</span></b> <br />
<span style="font-size: small;">The Updall task manages database full-text indexes.</span>
</p><p><b><span style="font-size: small;">Note: </span></b><span style="font-size: small;">You can run the
Updall task on a server, or you can use the dbmt tool that now includes
the Updall task as well as other options instead of running Updall
alone. See the related topics for more information.</span>
</p><p><span style="font-size: small;"> You can use several methods of running the Updall task on a server.</span>
</p><ul><li type="disc"><span style="font-size: small;">From </span><b><span style="font-size: small;">Task</span></b><span style="font-size: small;"> -> </span><b><span style="font-size: small;">Start </span></b><span style="font-size: small;"> tool in the Domino® Administrator -- Use this method if you don't want to use command-line options. </span>
</li><li type="disc"><span style="font-size: small;">Using the Load Updall console
command -- Use this method if you are comfortable using command-line
options or if you want to run Updall directly at the server console when
there is no Domino Administrator running on the server machine.</span>
</li><li type="disc"><span style="font-size: small;">Program document that runs Updall -- Use this method to schedule Updall to run at particular times.</span>
</li><li type="disc"><span style="font-size: small;">Run Updall on a Win32 platform --
Use this method if you are unable to run Updall at the server console.
This method requires that you use the "n" prefix -- for example, </span><tt><span style="font-size: small;">nupdall - R</span></tt><span style="font-size: small;">.</span></li></ul>
<br />
<span style="font-size: small;">When you use these methods, you can include options that
control what Updall updates. For example, you can update all views and
not update any full-text search indexes. </span>
<p><span style="font-size: small;">The following tables describe the options you can use with Updall (</span><b><span style="font-size: small;">Task</span></b><span style="font-size: small;"> -> </span><b><span style="font-size: small;">Start </span></b><span style="font-size: small;">).
The second column lists the equivalent command-line options that you
use when you use a console command to run Updall and when you schedule
Updall to run in a Program document. </span>
</p><p><span style="font-size: small;">Use this syntax when you use the Load updall console command:</span>
</p><p><tt><span style="font-size: small;">Load updall </span></tt><i><span style="font-size: small;">databasepath options</span></i>
</p><p><span style="font-size: small;">For example:</span>
</p><p><tt><span style="font-size: small;">Load updall SALES.NSF -F</span></tt>
</p><p><span style="font-size: small;">You can specify multiple options -- for example:</span>
</p><p><tt><span style="font-size: small;">Load updall -F -M</span></tt>
</p><p><i><span style="font-size: small;">Table 1. Updall - Basic options</span></i>
</p><table border="1" style="width: 100%px;">
<tbody><tr valign="top"><td style="background-color: lightgrey; font-size: 9pt; font-weight: bold;" width="33%"><b><span style="font-size: small;">Option in Task - Start tool</span></b></td><td style="background-color: lightgrey; font-size: 9pt; font-weight: bold;" width="33%"><b><span style="font-size: small;">Command-line option</span></b></td><td style="background-color: lightgrey; font-size: 9pt; font-weight: bold;" width="33%"><b><span style="font-size: small;">Description</span></b></td></tr>
<tr valign="top"><td width="33%">
<ul><li type="disc"><span style="font-size: small;">Index all databases</span>
</li><li type="disc"><span style="font-size: small;">Index only this database or folder</span></li></ul>
</td><td width="33%"><i><span style="font-size: small;">databasepath</span></i><span style="font-size: small;"> </span>
<p><span style="font-size: small;">This option is used when running Updall as a console command.</span></p></td><td width="33%"><span style="font-size: small;">Choose the option to index all databases if you want updall to process all databases on the server.</span>
<p><span style="font-size: small;">Choose the option to specify a database or folder if
you want updall to limit processing to the specified location. To update
a database in the Domino data folder, enter the file name, for example,
</span><tt><span style="font-size: small;">SALES.NSF</span></tt><span style="font-size: small;">. To
update all databases contained in a subfolder of the data folder,
specify the path relative to the data folder, for example, </span><tt><span style="font-size: small;">DOC\README.NSF</span></tt><span style="font-size: small;">.</span></p></td></tr>
<tr valign="top"><td width="33%"><span style="font-size: small;">Update this view only</span></td><td width="33%"><i><span style="font-size: small;">database</span></i><span style="font-size: small;"> -T </span><i><span style="font-size: small;">viewtitle</span></i><span style="font-size: small;"> </span></td><td width="33%"><span style="font-size: small;">Updates a specific view in a database. Use, for example, with </span><tt><span style="font-size: small;">-R</span></tt><span style="font-size: small;"> to solve corruption problems.</span>
<p><b><span style="font-size: small;">Note: </span></b><tt><span style="font-size: small;">-T</span></tt><span style="font-size: small;"> cannot be used with .IND (indirect) files.</span></p></td></tr>
</tbody></table>
<br />
<p><i><span style="font-size: small;">Table 2. Updall - Basic options - more</span></i>
</p><table border="1" style="width: 100%px;">
<tbody><tr valign="top"><td style="background-color: lightgrey; font-size: 9pt; font-weight: bold;" width="33%"><b><span style="font-size: small;">Option in Task - Start tool</span></b></td><td style="background-color: lightgrey; font-size: 9pt; font-weight: bold;" width="33%"><b><span style="font-size: small;">Command-line option</span></b></td><td style="background-color: lightgrey; font-size: 9pt; font-weight: bold;" width="33%"><b><span style="font-size: small;">Description</span></b></td></tr>
<tr valign="top"><td width="33%"><span style="font-size: small;">Update: All built views</span></td><td width="33%"><span style="font-size: small;">-V</span></td><td width="33%"><span style="font-size: small;">Updates built views and does not update full-text indexes.</span></td></tr>
<tr valign="top"><td width="33%"><span style="font-size: small;">Update: Full text indexes</span></td><td width="33%"><span style="font-size: small;">-F</span></td><td width="33%"><span style="font-size: small;">Updates full-text indexes and does not update views. </span></td></tr>
<tr valign="top"><td width="33%"><span style="font-size: small;">Update: Full text indexes: Only those with frequency set to: Immediate or Hourly</span></td><td width="33%"><span style="font-size: small;">-H</span></td><td width="33%"><span style="font-size: small;">Updates full-text indexes assigned "Immediate" or "Hourly" as an update frequency.</span></td></tr>
<tr valign="top"><td width="33%"><span style="font-size: small;">Update: Full text indexes: Only those with frequency set to: Immediate, Hourly, or Scheduled</span></td><td width="33%"><span style="font-size: small;">-M or -S</span></td><td width="33%"><span style="font-size: small;">Updates full-text indexes assigned "Immediate," "Hourly," or "Scheduled" as an update frequency.</span></td></tr>
<tr valign="top"><td width="33%"><span style="font-size: small;">Update: Full text indexes: Those with frequency set to: Immediate, Hourly, Daily, or Scheduled</span></td><td width="33%"><span style="font-size: small;">-L</span></td><td width="33%"><span style="font-size: small;">Updates full-text indexes assigned "Immediate," "Hourly," "Daily" or "Scheduled" as an update frequency.</span></td></tr>
</tbody></table>
<br />
<p><i><span style="font-size: small;">Table 3. Updall - Rebuild options</span></i>
</p><table border="1" style="width: 100%px;">
<tbody><tr valign="top"><td style="background-color: lightgrey; font-size: 9pt; font-weight: bold;" width="33%"><b><span style="font-size: small;">Option in Task - Start tool</span></b></td><td style="background-color: lightgrey; font-size: 9pt; font-weight: bold;" width="33%"><b><span style="font-size: small;">Command-line option</span></b></td><td style="background-color: lightgrey; font-size: 9pt; font-weight: bold;" width="33%"><b><span style="font-size: small;">Description</span></b></td></tr>
<tr valign="top"><td width="33%"><span style="font-size: small;">Rebuild: Full-text indexes only</span></td><td width="33%"><span style="font-size: small;">-X</span></td><td width="33%"><span style="font-size: small;">Rebuilds full-text indexes and does not rebuild views. Use to rebuild full-text indexes that are corrupted.</span></td></tr>
<tr valign="top"><td width="33%"><span style="font-size: small;">Rebuild: All used views</span></td><td width="33%"><span style="font-size: small;">-R</span></td><td width="33%"><span style="font-size: small;">Rebuilds
all used views. Using this option is resource-intensive, so use it as a
last resort to solve corruption problems with a specific database.</span></td></tr>
<tr valign="top"><td width="33%"><span style="font-size: small;">Rebuild: Full-text indexes and additionally: All unused views</span></td><td width="33%"><i><span style="font-size: small;">database</span></i><span style="font-size: small;"> -C </span></td><td width="33%"><span style="font-size: small;">Rebuilds unused views and a full-text index in a database. Requires you to specify a database. </span></td></tr>
</tbody></table>
<br />
<p><i><span style="font-size: small;">Table 4. Updall - Search Site options</span></i>
</p><table border="1" style="width: 100%px;">
<tbody><tr valign="top"><td style="background-color: lightgrey; font-size: 9pt; font-weight: bold;" width="33%"><b><span style="font-size: small;">Option in Task - Start tool</span></b></td><td style="background-color: lightgrey; font-size: 9pt; font-weight: bold;" width="33%"><b><span style="font-size: small;">Command-line option</span></b></td><td style="background-color: lightgrey; font-size: 9pt; font-weight: bold;" width="33%"><b><span style="font-size: small;">Description</span></b></td></tr>
<tr valign="top"><td width="33%"><span style="font-size: small;">Update database configurations: Incremental</span></td><td width="33%"><span style="font-size: small;">-A</span></td><td width="33%"><span style="font-size: small;">Incrementally updates search-site database configurations for search site databases.</span></td></tr>
<tr valign="top"><td width="33%"><span style="font-size: small;">Update database configurations: Full</span></td><td width="33%"><span style="font-size: small;">-B</span></td><td width="33%"><span style="font-size: small;">Does a full update of search-site database configurations for search site databases.</span></td></tr>
</tbody></table>
<br />
<p><b>Option for running Updall as part of dbmt</b>
</p><p><span style="font-size: small;">Updall performs the following tasks by default. These are also tasks that the database maintenance tools performs: </span>
</p><ul><li type="disc"><span style="font-size: small;">purges deletion stubs</span>
</li><li type="disc"><span style="font-size: small;">expires soft deleted entries</span>
</li><li type="disc"><span style="font-size: small;">updates unread lists</span></li></ul>
<br />
<span style="font-size: small;">Because the database maintenance tool is meant to replace
(and improve upon) running updall nightly, you can use the following
new option for updall to skip the tasks the preceding tasks, making
updall faster when you run it for any one-time purpose. </span>
<p><tt><span style="font-size: small;">-nodbmt</span></tt>
</p><p><span style="font-size: small;"> When you run updall as part of dbmt, Domino also
ensures that the following views are built for databases with a template
name of StdR7Mail, StdR8Mail, StdR85Mail and StdR9Mail: </span>
</p><ul><li type="disc"><span style="font-size: small;">$Inbox</span>
</li><li type="disc"><span style="font-size: small;">$Drafts</span>
</li><li type="disc"><span style="font-size: small;">$All</span>
</li><li type="disc"><span style="font-size: small;">($RepeatLookup)</span>
</li><li type="disc"><span style="font-size: small;">($ToDo)</span>
</li><li type="disc"><span style="font-size: small;">($Calendar)</span>
</li><li type="disc"><span style="font-size: small;">($Haiku_TOC)</span>
</li><li type="disc"><span style="font-size: small;">($Alarms)</span>
</li><li type="disc"><span style="font-size: small;">($iNotes)</span>
</li><li type="disc"><span style="font-size: small;">($Users)</span>
</li><li type="disc"><span style="font-size: small;">($iNotes_Contacts)</span>
</li><li type="disc"><span style="font-size: small;">($ThreadsEmbed)</span></li></ul>
<br />
<span style="font-size: small;"> After these views are built, they will not be discarded due to non-use.</span>Rob Kirklandhttp://www.blogger.com/profile/17751566264733637774noreply@blogger.com0tag:blogger.com,1999:blog-1666323458852118720.post-34018418309241577982020-07-29T13:05:00.001-04:002020-07-29T13:05:28.366-04:00Error message in Notes 11.0.1: "Insufficient memory - local heap is full"I recently (like last week) upgraded Notes on my main workstation from 10.0.1 to 11.0.1FP1. The installation went uneventfully. But when I ran Notes and tried to open my mail database, Notes locked up and presented me with an error I hadn't seen before:<br />
<blockquote class="tr_bq">
Insufficient memory - local heap is full</blockquote>
I immediately Googled the error, but got nothing very useful in return. So then I decided to run the standard array of Notes maintenance tasks: Fixup. Compact -c. Updall. Not much help there either. But I noticed that Notes wasn't failing until I clicked the Mail or Calendar links in either the Task Bar or the Open List. So I tried opening mail manually, via Ctrl+O. That did seem to have a positive effect. My mail opened! And I was able to work with it for awhile. But eventually the error message popped up again and I had to kill and restart Notes to get back to work again.<br />
<br />
So, as a last resort, I decided to give <a href="https://hclpnpsupport.hcltech.com/csm" target="_blank">HCL Support</a> a try. And pretty quickly I had a positive result. I searched my error message in the <a href="https://hclpnpsupport.hcltech.com/csm?id=kb_search" target="_blank">KnowledgeBase </a>and got <a href="https://support.hcltechsw.com/csm?sys_kb_id=8e562c491bdedc90a67e9759bc4bcba5&id=kb_article_view&sysparm_rank=4&sysparm_tsqueryId=d190235d1bda1cd0086dcbfc0a4bcba9" target="_blank">a direct hit - KB0081067.</a>. (I wonder why it didn't turn up in my Google search.)<br />
<br />
The fix in the KBase article directed me to carry out what amounted to a fresh reconfiguraton of Notes. I carried it out. It worked in that, afterwards, Notes could open my mail without the lockup. But it was a problem for me because I lost all my Desktop folders and tiles and all my bookmarks.<br />
<br />
And it seemed like more of a workaround than a solution to me. Yeah, it might get Notes to run and open my mail DB. But it didn't provide any clue as to why the error was occurring and it didn't reassure me at all that the error wouldn't occur again some day. And, for me, losing all my tiles and bookmarks was a painful solution. I sort of live and die by my Notes configuration.<br />
<br />
So I opened a support ticket. A nice, knowledgeable support tech named Nic responded and agreed that, yes, my tiles and bookmarks would be wiped out. And, no, the fix in the KBase article was not a permanent fix.<br />
<br />
I asked if increasing the size of the local heap would be a sensible thing to do. Nic said, yes it would, but the new, bigger heap would consume about 2 GB of RAM. My workstation has 16 GB of RAM, so I asked how to proceed. Nic provided me with a link to <a href="https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0038188&sys_kb_id=94b4e6d71b1ac01883cb86e9cd4bcb82" target="_blank">this additional KBase article</a> that described the procedure. I followed it. Notes is running. Mail is opening. So far, so good.<br />
<br />
I suggested to Nic that the first KBase article needs to be amended to: 1) add a caveat about losing one's Notes configuration if one follows the instructions; 2) add the fact that following the reconfiguration procedure isn't necessarily a permanent fix; 3) state that one should alternatively consider increasing the heap size if one has sufficient RAM; and 4) provide the link to the second article describing the procedure for increasing the heap size. Nic agreed that the article should be amended with those items.<br />
<br />
By the way, my experience with HCL Tech Support has been generally positive so far. And, thanks, Nic, for your helpful support.Rob Kirklandhttp://www.blogger.com/profile/17751566264733637774noreply@blogger.com0tag:blogger.com,1999:blog-1666323458852118720.post-91971470460763307792019-03-28T10:09:00.000-04:002019-03-28T10:09:27.664-04:00Is it time to renew your Domino ID Vault certificates? IBM issued a <a href="https://www-01.ibm.com/support/docview.wss?uid=ibm10878496&myns=swglotus&mynp=OCSSKTMJ&mync=E&cm_sp=swglotus-_-OCSSKTMJ-_-E%E2%80%8B" target="_blank">Technote</a> today detailing the procedure for renewing ID Vault Trust Certificates and Password Reset Certificates. They expire after 10 years. ID Vaults were first introduced in Domino 8.5, which was released December 2018, 10+ years ago now. So early adapters of the ID Vault will increasingly be having to renew their certificates.<br />
The Technote describes:<br />
<br />
<ul>
<li>The error message that signals that your certificates have expired ("<em style="background-color: white; border: 0px; color: #323232; font-family: ibm-plex-sans, "Helvetica Neue", Arial, sans-serif; font-size: 16px; margin: 0px; padding: 0px; vertical-align: baseline;">Not a valid ID or the ID is corrupted</em>");</li>
<li>The procedure for determining the expiration dates of your certificates; and </li>
<li>The procedure for renewing them. Unfortunately you can't just recertify them. You have to remove the expired ones then issue new ones.</li>
</ul>
<br />
<br />Rob Kirklandhttp://www.blogger.com/profile/17751566264733637774noreply@blogger.com0tag:blogger.com,1999:blog-1666323458852118720.post-57816081455266387582019-03-21T10:34:00.000-04:002019-03-21T10:34:08.433-04:00My favorite feature of Sametime MeetingsCall me a dinosaur, but I love Sametime Meetings. Here's why. It has the best chat functionality of any meeting software I've seen. What I like about it in particular are two things:<br />
<br />
<ul>
<li>You can categorize entries in the chat window according to five predefined categories.</li>
<li>When the meeting ends, Sametime generates a meeting report that organizes the chat entries by category.</li>
</ul>
The five categories are:<br />
<br />
<ul>
<li>Group Chat</li>
<li>Minutes</li>
<li>Action Item</li>
<li>Question</li>
<li>Starred Item</li>
</ul>
<br />
If you just enter text in the chat window, your entry defaults to Group Chat. But you can select another category before you hit Enter. That entry and all following entries are under the category you selected until you select another one.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgtRgeraSAGYcQsDc3jeJW0FxW61fz7ysDqylY9Z7-jtYsXCuBoDkaK_vvST8p7aijRgqZxCfB2f6vhoD0VeiojD5H3Ba6EcfHebGFs8AbsUfSEfaaRxriu0K6T6w4g3CyC_gZGxZ0lXrM/s1600/Sametime+Meetings+chat+window+options.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Sametime Meetings chat category pop-up list" border="0" data-original-height="359" data-original-width="597" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgtRgeraSAGYcQsDc3jeJW0FxW61fz7ysDqylY9Z7-jtYsXCuBoDkaK_vvST8p7aijRgqZxCfB2f6vhoD0VeiojD5H3Ba6EcfHebGFs8AbsUfSEfaaRxriu0K6T6w4g3CyC_gZGxZ0lXrM/s320/Sametime+Meetings+chat+window+options.png" title="Sametime Meetings chat categories" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
When you end the meeting you see the dialog below, where you can choose to generate a meeting report or not, and where to store it. I have a subscription to Sametime Meetings in IBM Connections Cloud, where I also have subscriptions to IBM Notes Mail and IBM Connections. So the dialog defaults to saving the report to "My Files", my cloud-based file storage area.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhgzEpDwpdv8Yw4rgCaqISRLH8eIqyIVKez0ZZgS7XdEtYx7TJmnzgA0WJxUeUwiCvk8oi_aDQomPfqr4JguS9zkLP3tFCo9iJhFDC_PbslFAsZ89owL_CO_IA14Zjv1HkVrllgr6t-YVE/s1600/Sametime+End+Meeting+dialog.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Sametime End Meeting dialog" border="0" data-original-height="584" data-original-width="1016" height="183" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhgzEpDwpdv8Yw4rgCaqISRLH8eIqyIVKez0ZZgS7XdEtYx7TJmnzgA0WJxUeUwiCvk8oi_aDQomPfqr4JguS9zkLP3tFCo9iJhFDC_PbslFAsZ89owL_CO_IA14Zjv1HkVrllgr6t-YVE/s320/Sametime+End+Meeting+dialog.PNG" title="Sametime End Meeting dialog" width="320" /></a></div>
<br />
I don't go around testing the features of meeting products. So it may be that other meeting software has these features too; but I haven't seen them in WebEx, GoToMeeting, or Zoom.<br />
<br />
And I really don't in my life have much call to conduct meetings. But were I, say, the Chair of a regularly scheduled meeting I might designate someone in the meeting to take meeting minutes by entering them in the meeting chat window. And I would put all action items and unresolved questions there too.<br />
<br />
By entering that information right in the chat stream for all to see, the meeting attendees could act as proofreaders, flagging errors as they occur. Then, after the meeting ends I would use the meeting report to follow up on action items, unresolved questions, and important ("Starred") items, perhaps distributing parts of the report to the people assigned to carry out each item.<br />
<br />
What's not to like about this? (Now, if only the process of installing the screen-sharing browser plug-in were a little easier and faster...)Rob Kirklandhttp://www.blogger.com/profile/17751566264733637774noreply@blogger.com0tag:blogger.com,1999:blog-1666323458852118720.post-82794037885787796242019-02-18T22:06:00.000-05:002019-02-18T22:06:07.299-05:00A Traveler user's iPhone stopped working over the weekend; interesting reason whyMonday morning I received notice that a Notes Traveler user's iPhone had stopped sending/receiving messages. I see this sort of thing occasionally and I generally respond by issuing a Tell Traveler User command to obtain the device ID of the user's mobile device, then issuing a Tell Traveler Reset command to resync the devices. That almost always resolves the user's problems.<br />
<br />
But this time when I issued the Tell Traveler User command it came back with a raft of errors I had never seen before. The first one was that the user's name wasn't in the mail database's ACL.<br />
<br />
So I opened the Domino Directory to the People view and saw that the user's Person document had two (count 'em, two) replication/save conflict documents. I thought, aha, maybe Traveler is getting misled by all the Person documents for this user.<br />
<br />
I compared the content of the three documents and none of the name fields (or for that matter any fields in the first few tabs) were different among the three documents. But I did see that the <i>Last Updated </i>field under the Administration tab was different for all three. They were all updated the previous Friday, late in the day by IAM (the SSO service used by the organization). The "winner" Person document was the most recently edited, so I deleted the two conflict documents.<br />
<br />
Then I opened her "winner" Person document and saw that she had been renamed at some point in the past (because Domino preserves a user's former names when it renames a user, say, with a new married name). I noticed also that her mail database's file name was formed from her first initial and former last name, not her new last name. That was normal. <br />
<br />
Then I opened her mail database and saw three unexpected things:<br />
<ul>
<li>The title of the database was still set to her former name; </li>
<li>The ACL had only her former name, not her new name in it; and</li>
<li>The Owner field was still set to her former name, not her new name.</li>
</ul>
All should have been set to her new name when she was renamed. I wondered if someone had attempted to rename the user manually instead of correctly telling the Administration Process to rename her. Occasionally a Windows administrator, unfamiliar with Notes architecture, will assume they can do that and, in the process, will make a mess of everything - not that I expected anyone at this company to be so dumb. <br />
<br />
It occurred to me to have a look at the Administration Requests database to see if there were any Rename-related documents in it. Sure enough, there was an <i>Initiate Rename in Domino Directory </i>document. It had been created late the previous Friday, and the request had been carried out. But, curiously, there were no follow-on Rename documents. By now there should have been a whole train of them.<br />
<br />
The Administration Process, running on each Domino server, checks the Administration Requests database every minute or so throughout the day. When it discovers new requests it attempts to carry them out. If it succeeds, it typically generates the next request in a given series. Then, when it checks again a minute later (or maybe an hour, a day, or a week later, depending on the nature of the request), it carries out that one, and so on until the whole process of (in this case) renaming the user is complete.<br />
<br />
I checked Administration Help and read about the <i>Initiate Rename </i><i><i> in Domino Directory</i> </i>step of the Rename process and it became clear to me what was going on. After the Administration Process carries out the steps required by the <i>Initiate Rename </i><i><i> in Domino Directory</i> </i>document (which are to make certain changes in the Person document, among them adding user's new name to the top of the list of names in the User Name field), it waits for the user to log into Notes. When the user does that, Notes will check with the user's mail server to see if it needs to respond to any changes made regarding the user on the server. When Notes does so, it discovers that the user has been renamed, and it makes a number of local changes as a result:<br />
<ul>
<li>Notes pulls the user's new certificate down from the server and merges it into the User ID, which as a result includes the user's new name along with her former name;</li>
<li>Notes renames the user in the ACLs of all local databases and in configuration files such as notes.ini; and</li>
<li>After Notes has done all that, it creates the next Rename request in the Administration Requests database for the user: <i>Rename Person in Domino Directory</i>.</li>
</ul>
At this point the Administration Process can complete the renaming process. That is, it can carry out the steps defined by the <i>Rename Person in Domino Directory </i>document and all of the documents that will follow it. It will rename the person in a raft of places, including (but not limited to) group documents, ACLs of various databases throughout the domain (including, most importantly from Traveler's point of view, the user's mail database), and Names fields in any databases in the domain where it locates the user's former name.<br />
<br />
So what must have happened, I concluded, is that the user was renamed in Notes so late on the previous Friday that her copy of Notes had not had the opportunity to update itself and create the <i>Rename Person in Domino Directory </i>document. So the user was renamed in the Person document, thanks to the <i>Initiate Rename </i><i><i>in Domino Directory</i> </i>document, but no place else. As a result, Traveler could not see that the newly renamed user had sufficient rights to the mail database and stopped updating the user's iPhone. The user could see over the weekend that her iPhone had stopped functioning; so she opened a support ticket, the one that was assigned to me.<br />
<br />
Late Monday morning I telephoned the user. Because it was a holiday (President's Day), she still had not attempted to open and log into Notes on her laptop. I asked her to do so and, voila, all the dominoes described above started falling and, voici, eventually her iPhone started working again. Oh la la!Rob Kirklandhttp://www.blogger.com/profile/17751566264733637774noreply@blogger.com1tag:blogger.com,1999:blog-1666323458852118720.post-47235400173068087542018-12-17T12:12:00.003-05:002018-12-17T12:12:52.126-05:00Notes/Domino security vulnerability patched by IBM. You should apply this fix soon.IBM has discovered and (on Friday, December 14, 2018) released a patch for a security vulnerability in NSD (Notes System Diagnostics) for Windows. So now is a really good time to upgrade your Windows-based Domino servers to 9.0.1FP10IF5 and your Windows-based Notes clients to version 9.0.1FP10IF6. (Or you could upgrade them to version 10.) <a href="https://www-01.ibm.com/support/docview.wss?uid=ibm10743405&myns=swglotus&mynp=OCSSKTMJ&mynp=OCSSKTWP&mync=E&cm_sp=swglotus-_-OCSSKTMJ-OCSSKTWP-_-E" target="_blank">Here's the Technote with the details.</a> Rob Kirklandhttp://www.blogger.com/profile/17751566264733637774noreply@blogger.com0tag:blogger.com,1999:blog-1666323458852118720.post-60161877889481065312018-10-12T13:58:00.001-04:002018-10-12T14:01:08.900-04:00Beware of stray cablesI just watched <a href="https://youtu.be/Le6LP43SHcM" target="_blank">this scary video demonstration</a> by Kevin Mitnick of <a href="https://blog.knowbe4.com/knowbe4s-chief-hacking-officer-kevin-mitnick-demonstrates-the-usb-ninja-cable-attack" target="_blank">KnowBe4</a> of a lightning cable that infects any computer you plug it into (well, the demo used a Windows 10 computer) with malware. In the demo Kevin suggests that we stop leaving cables plugged into our work computers, implying that the demo lightning cable could be swapped in when our back is turned. And don't use any old cable that you might find lying around? "You need to stop, look, and think", he says, "before you plug <i>any</i> <i>device </i>into your computer."<br />
<br />
But Kevin leaves a lot of other questions unanswered:<br />
<ul>
<li>How can we determine if a cable is malicious?</li>
<li>How can we tell if a cable we buy in a store is malicious or not? </li>
<ul>
<li>Do we have to stop buying non-Apple branded lightning cables now?</li>
<li>Are Apple branded cables save, even? </li>
</ul>
<li>Can we use anti-malware software to protect ourselves if such a cable is plugged into our machine?</li>
</ul>
Hey, reader, sleep well tonight! Rob Kirklandhttp://www.blogger.com/profile/17751566264733637774noreply@blogger.com0tag:blogger.com,1999:blog-1666323458852118720.post-13920516018312495052018-02-20T23:19:00.000-05:002018-02-20T23:19:10.965-05:00IBM Notes 9.0.1, MacOS High Sierra, and Java 8. Part 2.After I wrote my Jan 24 post about running Notes on MacOS in Basic Mode, IBM released Notes 9.0.1 for MacOS Interim Fix 13. IF13 provides a fix for the problem I described in that post, which was that upgrading Java on the Mac to a version higher (more recent) than Java 8 Update 151 caused Notes to fail to start. That surprised me because, on the Windows platform Notes provides its own JVM; you can install whatever Oracle JVMs you like under Windows without affecting Notes at all. But it turns out that Notes running on the MacOS platform does not come with its own JVM and does rely on the Oracle JVM that you install on the machine. And, of course, Java 8 Update 152 caused Notes to choke and die.<br />
<br />
In any case, the workaround at that time was to run Notes in Basic Mode, which effectively reverts Notes to running the old Release 7 Notes client written in C++, naked of the Expeditor wrapper that provides the new features of Notes that debuted in Release 8. In Basic Mode, Notes does not use any Java-based features.<br />
<br />
Another odd thing that I discovered since writing my last post is that the Notes 9.0.1 installer for the MacOS platform is "broken" with respect to MacOS High Sierra. The first time you run it on a machine running MacOS, it fails in the Provisioning stage, with the following error message:<br />
<blockquote class="tr_bq">
<span style="background-color: white; color: #121212; font-family: Arial, Helvetica, sans-serif; font-size: 14px;">File /Applications/IBM Notes.app/Contents/MacOS/rcp/rcplauncher.properties not found. Provisioning process failed to launch or was terminated before status could be determined.</span></blockquote>
Then the installation fails.<br />
<br />
The fix for this is, of all things, to rerun the installer. The second time around it succeeds all the way through. Go figure.Rob Kirklandhttp://www.blogger.com/profile/17751566264733637774noreply@blogger.com1tag:blogger.com,1999:blog-1666323458852118720.post-37826120755859952062018-01-24T14:28:00.003-05:002018-01-24T14:28:43.076-05:00How to run IBM Notes in Basic Mode on MacOSLate last week a RockTeam client notified me that a user upgraded Java on his Macintosh to Java 9.0.1, then discovered that IBM Notes would no longer start on the machine. The client is a software publisher and the user is a developer. He figured out how to run Notes in Basic Mode (i.e., without the Eclipse wrapper that provides additional, Java-based functionality to the Notes client, which is known as "Standard Mode") and concluded that his upgrade of Java must have caused the problem.<br />
<br />
My client asked me to help figure out what the problem was and how to get Notes running again in Standard Mode. With IBM's help (I opened a PMR) I soon discovered two things:<br />
<ul>
<li><a href="https://www-10.lotus.com/ldd/dominowiki.nsf/dx/Various_ways_to_launch_Notes_client" target="_blank">This IBM document</a> states that 64-bit Notes running on MacOS does not support Basic Mode.</li>
<li><a href="http://www-01.ibm.com/support/docview.wss?uid=swg22012665" target="_blank">This IBM document</a> states that 64-bit Notes will not run on MacOS if you upgrade Java to version 8 Update 152 (or later).</li>
</ul>
The first document above turns out to be inaccurate; Notes will in fact run in Basic Mode on the Mac. The second document is accurate; Notes will not currently run in Standard Mode if you install Java 8 Update 152 or later on your Mac. So the user has two options: Downgrade or remove Java; or settle for running Notes in Basic Mode. Running in Basic Mode, one loses the Open button, the full-text search field in the upper right corner of the Notes window, and the right sidebar and all the Java-based apps that it contains. The subject user has decided for now to live with Basic Mode. The company isn't a big user of the "Social Edition" features of Notes, so Basic Mode probably meets all of this user's current needs.<br />
<br />
What interested me about this was that, from the way he described the problem, it was obvious that our user was not a Notes guru, knowledgeable about Notes's different running modes. He is a developer, though, and knowledgeable about Java and Eclipse. So he was able to just figure out how to get Notes to run without Eclipse. I thought that was pretty ingenious of him and asked how he managed to do it. So far the only answer I've received from him is "by brute force".<br />
<br />
But I did some testing myself and learned that you can indeed start Notes in Basic Mode on the Mac. Here are the two ways I found:<br />
<ul>
<li>Set the variable <i>UseBasicNotes=1 </i>in <i>Notes Preferences</i>. <i>Notes Preferences </i>is the Mac equivalent of notes.ini, where one would set this variable on the other supported Notes platforms. When you set this variable, Notes <i>always</i> starts in Basic Mode, i.e., without trying to wrap itself in Eclipse. If you want to run Notes in Standard Mode, you have to remove this variable or reset its value to "0".</li>
<li>Issue this command in Terminal:<br /><blockquote class="tr_bq">
"/Applications/IBM Notes.app/Contents/MacOS/notes" -basic</blockquote>
<ul>
<li>NOTE: The quotes are necessary because of the space between "IBM" and "Notes.app". </li>
<li>Notice also (my fellow geek) that I appended "-basic" to the command. Under Windows you could append either "-sa" or "-basic", but "-sa" did not work for me under MacOS.</li>
</ul>
</li>
</ul>
I know there's a way to create a script to run the above command with a mouse click (or two). I'm not a UNIX guru, so I don't know how by heart. When I find some time, I'll figure it out and post that information here.Rob Kirklandhttp://www.blogger.com/profile/17751566264733637774noreply@blogger.com0tag:blogger.com,1999:blog-1666323458852118720.post-63710343976712675312017-12-15T17:43:00.001-05:002017-12-19T11:31:43.068-05:00How to locate a document with a bad NLO reference (or What to do when fixup -d -j fails)<div dir="ltr">
A user has a local mail database. Every time it replicates with the mail server, replication takes 5-8 minutes as it tries repeatedly to replicate the same 1500+ documents. Running fixup, compact, updall against the mail database on the server revealed this error message:</div>
<div dir="ltr">
<span style="font-family: "courier new" , "courier" , monospace;"><span style="font-size: 9pt;">The database <pathname>.nsf attempted to access a missing file: H:\DAOS\0007\E5128368DF400D54DE01F369AFAAF560FCB85F350007FAC9.nlo: File does not exist</span></span></div>
<div dir="ltr">
<span style="font-family: sans-serif; font-size: 9pt;">It seems that the replication process was getting hung up because of a document contained an invalid NLO reference.</span></div>
<div dir="ltr">
<span style="font-family: sans-serif; font-size: 9pt;">The quick and dirty way to deal with a problem like this is to issue the following </span><span style="font-size: 9pt;"><span style="font-family: "courier new" , "courier" , monospace;">fixup</span></span><span style="font-family: sans-serif; font-size: 9pt;"> command, which deletes documents that contain invalid NLO references:</span></div>
<div dir="ltr">
<span style="font-family: "courier new" , "courier" , monospace;"><span style="font-size: 9pt;">load fixup -d -j <pathname>.nsf</span></span></div>
<div dir="ltr">
<span style="font-family: sans-serif; font-size: 9pt;">This command did not, however, resolve the problem for us because (I discovered later) the problem document included two attachments, both pointing to NLO objects. But the second pointer was valid, so fixup decided not to delete the document. </span></div>
<div dir="ltr">
<span style="font-family: sans-serif; font-size: 9pt;">The solution to this problem was to locate the document that had the bad NLO reference. Here is the way to do that:</span></div>
<ol dir="ltr">
<li><span style="font-family: sans-serif; font-size: 9pt;">Set the following notes.ini variable on the mail server (no server restart needed): <span style="font-family: "courier new" , "courier" , monospace;">Debug_DAOS_Diagnostics=1</span></span></li>
<li><span style="font-family: sans-serif; font-size: 9pt;">Run the following command at a console prompt: <span style="font-family: "courier new" , "courier" , monospace;">Tell DAOSMgr listnlo MAP -V <pathname>.nsf</span></span><ul>
<li><span style="font-family: sans-serif; font-size: 9pt;">This causes the creation in the mail server's Data folder of a text file, <em><span style="font-family: "arial" , "helvetica" , sans-serif;">listnlo.txt</span></em>, that contains a list of all NLO references in <pathname>.nsf.</span></li>
</ul>
</li>
<li><span style="font-family: sans-serif; font-size: 9pt;">Make a local copy of <em>listnlo.txt</em>. It is a comma-delimited file.</span> Open it in a spreadsheet program or a text editor.</li>
<li>Search for the NLO's hash key, which is the file name of the NLO file.<ul>
<li>In my case, I searched for "<span style="font-family: "courier new" , "courier" , monospace;"><span style="font-size: 9pt;">E5128368DF400D54DE01F369AFAAF560FCB85F350007FAC9</span></span>".</li>
</ul>
</li>
<li>The Note ID (hex format) of the document appears in the second column of the row that contains the search term.</li>
<li>In <strong>Domino Administrator</strong> under the <strong>Files </strong>tab, select the database in question and use <em>Find Note</em> (<em>Tools </em>pane, <em>Database </em>section) to find the problem document by its <strong>Note ID</strong>. Alternatively you can use a third-party tool, such at <strong>Ytria's ScanEZ</strong>.</li>
<li>Open the subject database on the mail server and use the information provided by the <em>Find Note</em> dialog (<strong>document date, subject, etc.</strong>) to locate the problem document in the database.</li>
<li>Decide what to do about the problem document. Possible fixes include:<ul>
<li>Delete the problem document.</li>
<li>Delete the problem attachment from the document.</li>
<li>Restore the problem attachment from backup.</li>
</ul>
</li>
<li><strong>Optional but recommended:</strong> Reset the notes.ini variable, Debug_DAOS_Diagnostics, to 0 or NULL.<ul>
<li>se co Debug_DAOS_Diagnostics=0; OR</li>
<li>se co Debug_DAOS_Diagnostics=</li>
</ul>
</li>
</ol>
<div dir="ltr">
Thanks to the following bloggers for this fix: Cristian D'Aloisio, Ralf Petter, Ulrich Krause</div>
<div dir="ltr">
<br /></div>
Copyright 2017 by Rob KirklandRob Kirklandhttp://www.blogger.com/profile/17751566264733637774noreply@blogger.com0tag:blogger.com,1999:blog-1666323458852118720.post-53240403317266849532017-09-01T11:53:00.000-04:002017-09-01T12:08:00.580-04:00Here are four good reasons to upgrade your IBM Notes mail clients to the latest Fix/Feature PackReason #1: <a href="http://www-01.ibm.com/support/docview.wss?uid=swg21999385&myns=swglotus&mynp=OCSSKTWP&mync=E&cm_sp=swglotus-_-OCSSKTWP-_-E" target="_blank">It fixes a Denial of Service vulnerability.</a><br />
<br />
Reason #2: <a href="http://www-01.ibm.com/support/docview.wss?uid=swg21999384&myns=swglotus&mynp=OCSSKTWP&mync=E&cm_sp=swglotus-_-OCSSKTWP-_-E" target="_blank">It fixes <i>another </i>Denial of Service vulnerability.</a><br />
<br />
Reason #3: <a href="http://www-01.ibm.com/support/docview.wss?uid=swg21997877&myns=swglotus&mynp=OCSSKTWP&mync=E&cm_sp=swglotus-_-OCSSKTWP-_-E" target="_blank">It fixes an Open Source zlib vulnerability.</a><br />
<br />
Reason #4: <a href="https://www-01.ibm.com/support/docview.wss?uid=swg22002676&myns=swglotus&mynp=OCSSKTWP&mync=E&cm_sp=swglotus-_-OCSSKTWP-_-E#" target="_blank">It fixes an Open Source libpng vulnerability.</a><br />
<br />
If your users are running Notes 9.x for Windows, you want to upgrade them to Notes 9.0.1 FP9.<br />
<br />
If your users are running 64-bit Notes 9.x for Mac, you want to upgrade them to Notes 901 64-bit Mac IF11.<br />
<br />
If your users are running Notes 8.5.3 for Windows, you want to upgrade them to Notes 8.5.3 FP6 IF15. Then start preparing to upgrade your Domino servers and Notes clients to 9.0.1, because Domino/Notes 8.5.3 will be going out of support soon. You <i>can </i>upgrade your users to Notes 9.0.1 before you upgrade your servers to Domino 9.0.1.<br />
<br />
If your users are running earlier than Notes 8.5.3, you want to upgrade them because you are running an unsupported version of Notes/Domino. Plus, the four vulnerabilities listed above are just the four most recently fixed vulnerabilities. Your old, unsupported copies of Notes harbor others too.<br />
<br />
If your mail databases are hosted in IBM Connections Cloud or if you have implemented IBM Verse on-premises, you could migrate your users from IBM Notes to IBM Verse. But if you are running IBM Verse on-premises, I recommend that you upgrade your Domino mail servers to Domino 9.0.1 FP9. (I'll tell you why in my next post.)<br />
<br />
And remember that, if you are hosting your Notes mail on on-premises Domino servers, your Notes/Domino licensing probably includes IBM SmartCloud Notes licensing. That means you can migrate your users' mail databases to IBM Connections Cloud-based Domino mail servers at no additional cost beyond your current licensing costs. If you are not sure what your Notes/Domino rights and restrictions are, ask me; I can help you to sort that out.<br />
<br />
Also, if you don't think you can migrate away from Notes to Verse because you are still running Notes-only Domino applications, that's okay, because Notes is a great product. But if you would like to upgrade your apps, ask me about your options for browser-enabling your Notes applications. There are <i>lots </i>of options available.<br />
<br />
Finally, if you are thinking about migrating from Notes/Domino to Exchange/Outlook or Office 365 or Google Apps or SoHo or whatever, ask me why you should reconsider. IBM Connections Cloud is superior to those other platforms -- runs circles around them, in fact -- in any number of ways. And it is getting better at an accelerating pace.<br />
<br />
Addendum: I can help you automate (or at least streamline) your users' Notes upgrade process, so you don't have to babysit each upgrade.<br />
<br />
<br />Rob Kirklandhttp://www.blogger.com/profile/17751566264733637774noreply@blogger.com0tag:blogger.com,1999:blog-1666323458852118720.post-47244576375861806482017-08-25T18:08:00.002-04:002017-08-25T18:08:35.649-04:00IBM Notes 9.0.1 Feature Pack 9 is available and here is my favorite enhancementIBM Notes 9.0.1 Feature Pack 9 includes this:<br />
<blockquote class="tr_bq">
<span style="background-color: white; font-family: verdana, arial, sans-serif; font-size: 11px;">High resolution support for the Notes® Client</span><span style="background-color: white; font-family: verdana, arial, sans-serif; font-size: 11px;">The Notes® client on Windows correctly scales text and icons when high resolution monitors or custom DPI settings are used. </span></blockquote>
This might seem like a minor fix, but for me it is great news. If you have shopped for Windows computers lately you may have noticed that many of the laptops now sport fantastically high screen resolutions. I recently bought (<a href="http://www.planetnotes.com/2017/04/a-beautiful-but-ultimately.html" target="_blank">then regrettably returned</a>) an HP Spectre laptop (aircraft carrier, really - it was BIG) with a 4000x3000 pixel display. Then I bought (and kept) a Microsoft Surface that has a 3000x2000 pixel screen. The problem I had with both of them was that IBM Notes, which is my bread-and-butter software, couldn't cope with such high resolution screens. Either the text would be so small that I needed a magnifying glass to read it or, if I tried to use Windows or Notes text resizing tools to enlarge the text, it would enlarge in unsatisfactory ways. For example, the text would be large enough to read, but the line height would not change, resulting in the tops of the letters being hidden and the whole exercise of reading the text very unsatisfactory.<br />
<div>
<br /></div>
<div>
I had found two workarounds for the situation. At first I simply reduced the screen resolution of my new laptop to an old-fashioned 2048x1024 (or less) so that I could read the content in my Notes windows. That worked fine. But it irritated me to have spent all that money and to be unable to use one of the nicest features of my new laptop. </div>
<div>
<br /></div>
<div>
Later I noticed that, if I started my computer in high resolution mode with no external monitor attached, the text and icons in my Notes window would be properly sized and would look okay. But then if I attached an external monitor (my highest resolution one being 2048x1024) and moved the Notes window onto it, it would not resize properly. But then if I rebooted with the external monitor still attached, the Notes window, when reopened on that monitor, would display properly sized text and icons. But then if I moved the Notes window back onto the native monitor, the text in it would again be improperly sized. Or if I simply unplugged the external monitor, forcing the windows on it to move onto the native monitor, same result. But rebooting would again fix the text sizing issue.</div>
<div>
<br /></div>
<div>
In other words, my second workaround was to reboot the laptop (or, as I later discovered would also work, to simply log out of Windows, then log back in) whenever I wanted to connect to and use my external monitor or to disconnect from it. Doing so would fix the text in the Notes window. But it was a hassle to have to shut down and reopen the various programs I typically run every time I needed to connect my laptop to or disconnect it from my external monitor. All in all, a pretty unsatisfactory situation.</div>
<div>
<br /></div>
<div>
All that is fixed now with the happy release of Notes 9.0.1 Feature Pack 9. Now, if I unplug my external monitor, Notes repositions itself to the native monitor and resizes its text and icons exactly as it should. And if I plug the external monitor back in, Notes reverses the process exactly as it should - everything properly formatted and sized, all text easily readable. I am a very happy camper. </div>
Rob Kirklandhttp://www.blogger.com/profile/17751566264733637774noreply@blogger.com1tag:blogger.com,1999:blog-1666323458852118720.post-43826448833315984862017-04-06T16:38:00.000-04:002017-07-28T18:13:22.542-04:00Thwart spearphishing attacks by using digital signatures in IBM Notes Mail<style type="text/css">
p.p1 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px 'Helvetica Neue'; color: #454545}
</style>
<br />
<div class="p1">
<b>In case you aren't inclined to read this post through and through, despite the beauty of its prose, here's the bottom line: Spearphishers cannot easily spoof a digitally signed message; so you should enable default digital signing of messages by all of your users to prevent spearphishing attacks.</b><br />
<br />
Recently a friend told me about a security breach at his company. The breach was a textbook spearphishing attack. A member of the accounting department received an email message that purported to be from the company CEO. In the message, the “CEO” directed the recipient to wire umpteen thousands of dollars to a certain bank account. The email arrived late Friday afternoon and urged the recipient to wire the money “before close of business today”. The CEO was, of course, not around, so could not be reached to verify. The recipient bookkeeper did as directed and the company never saw the money again. </div>
<div class="p2">
<br /></div>
<div class="p1">
Even more recently (because it's tax season, I suppose) I read that <a href="https://blog.barkly.com/w-2-phishing-scam-2017-statistics">someone has been very successfully using spearphishing messages to trick companies into sending their employees' W-2 forms to the spearphisher</a>. This spearphisher has succeeded so far in collecting some 120,000 W-2 forms from a number of organizations.</div>
<div class="p2">
<br /></div>
<div class="p1">
It occurred to me that if the victim companies used <b>IBM Notes Mail</b> they could easily have thwarted these spearphishing attacks.</div>
<div class="p2">
<br /></div>
<div class="p1">
Phishing attacks in general are a type of social engineering attack in which the attacker blasts a deceptive email out to as many recipients as possible, hoping to trick some of the recipients into responding in a way that will enable the attacker to rip off the respondent in some way. Spearphishing attacks are phishing attacks aimed at a single recipient. The email (or other attack vector) is finely tuned to trick the recipient into trusting the sender and responding positively. The email typically purports to be from a trusted, authoritative executive within the recipient’s organization; the email may direct the recipient to send money to some bank account and do it immediately because time is of the essence, as in my first example. Or, as in my second example, the goal may be to get the recipient to give away confidential information such as, oh, I don’t know, how about: <i>The W-2 forms of every one of the organization’s employees!</i></div>
<div class="p2">
<br /></div>
<div class="p1">
The feature of Notes that could have prevented these spearphishing attacks is <i>digital signing of documents</i>. IBM Notes for decades now has included a feature permitting senders to sign outgoing messages digitally. This is not a “written” signature at the bottom of outgoing messages, but rather an encrypted hash of the message that accompanies the message and enables the recipient to verify that 1) the message really came from the purported sender and 2) the content of the message was not altered en route to the recipient. When the recipient of the message opens it, Notes verifies the integrity of the hash and assures the recipient that the message is genuine. In the message header it displays “This message is digitally signed." In the Status Bar (bottom of the window) it briefly displays "Signed by <sender’s fully distinguished name> on <date> <time>, according to <certifier name>”. </div>
<div class="p1">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEigrvYnXpCAK7ITty63Rm0kqvYhymquM4HlhRoIN67tSMHB277wDY8ylSdpAJ371Gq6a8U97zCR2ZU8lQ6zznuZtrtqvRkG0e31YsW27gvx4LexKR4y6ceKH9vgIoK6MGzuHRP_XlJ5SG0/s1600/digital+signature+cues.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEigrvYnXpCAK7ITty63Rm0kqvYhymquM4HlhRoIN67tSMHB277wDY8ylSdpAJ371Gq6a8U97zCR2ZU8lQ6zznuZtrtqvRkG0e31YsW27gvx4LexKR4y6ceKH9vgIoK6MGzuHRP_XlJ5SG0/s1600/digital+signature+cues.png" /></a></div>
<div class="p1">
<br /></div>
<div class="p1">
A spearphisher could not easily spoof such a message because to do so he would have to obtain the sender’s private key, which only exists in the sender’s Notes user ID file. The spearphisher would have to obtain a copy of the purported sender’s ID file and learn its password (or, even harder, obtain a certifier ID and learn its password). That is, he would have to compromise both parts of a Notes user’s two-factor security. Not impossible, but not an easy thing for a total and remote stranger to pull off. </div>
<div class="p2">
<br /></div>
<div class="p1">
Digital signing of messages has been available in Notes since at least 1993. But it is voluntary by default. Notes users have to check a box to digitally sign any message before sending it. (They can check another box to digitally encrypt the message, too, if they want.) As you might guess, in most organizations hardly anyone ever checks the boxes or has any clue about why they might want to do so. </div>
<div class="p2">
<br /></div>
<div class="p1">
What Notes organizations can do (and should do <i>soon</i>, because spearphishers are clearly getting <a href="https://blog.barkly.com/airline-phishing-attack-90-percent-success-rate?utm_source=hs_email&utm_medium=email&utm_content=50119311&_hsenc=p2ANqtz--x2J8vzvcOJ1QtWDGwcXAqT9N_ZDNAFuWPlSDeaU3lgZe9iWC_q04gIqzsUhOqLU9LKoJBVrqpPY6mqPZ3OOKtCl-g6w&_hsmi=50119311" target="_blank">really good at their craft</a>) is enable digital signatures by default, so that messages are digitally signed unless the sender turns off the feature.<br />
<br />
First, of course, Notes administrators should <i>notify their users</i> that they will enable this feature.<br />
<br />
Before that, though, and most importantly of all, Notes admins should <i>educate their users</i> so that<br />
<ul>
<li>The users become appropriately paranoid about responding to mail that asks them to do potentially problematic things.</li>
<li>The users know why digital signing is important.</li>
<li>The users know that they should always look for the notice that the message is digitally signed before assuming a message from a purported Notes user is genuine. </li>
</ul>
And as I write and think about how serious this spearphishing/ransomware plague is getting, it occurs to me that, in parallel with educating the users, the Notes admins should get management on board and get HR to pitch in and revise personnel policies to make it clear to everyone in the organization that <i>thou shalt [do certain things]</i> <i>and thou shalt not [do certain other things] with respect to email</i>.</div>
<div class="p1">
</div>
<div class="p1">
And all of that being said and done, and now that the users know what to expect, what to do, and why it's important, the admins should enable default digital signing of Notes mail. </div>
<div class="p2">
<br /></div>
<div class="p1">
Enabling default digital signing of messages is <i>very easy</i> or <i>moderately</i> <i>easy</i> depending on a number of factors. Enabling it is <i>very easy </i>if all of an organization’s mail users use Notes to send and receive mail, and the only mail the organization is concerned about protecting with digital signatures is internal mail. An admin sets a particular field in a policy and applies the policy to the target users. Done.</div>
<div class="p2">
<br /></div>
<div class="p1">
Enabling default digital signing of messages is <i>moderately easy </i>if users also use Web browsers or non-Notes (POP, IMAP, IMSMO) mail programs or mobile devices to send and receive mail, because you can’t enable default digital signatures <i>in non-Notes clients </i>by policy. Rather, you have to convince users to enable it as a default in their user preferences. (That pretty much means that you <i>really </i>must educate your users in the importance of digital signatures, and not just pay lip service to it.) <i>And </i>you have to make sure that their ID files have either been merged into their mail databases or reside in an ID Vault. (But if your non-Notes mail users' mail resides on IBM cloud-based mail servers, their IDs must reside in the cloud-based ID Vault; merging their ID into their mail database won't be sufficient.)</div>
<div class="p1">
<br /></div>
<div class="p1">
Finally, if you also want to give users the option to sign messages addressed to recipients whose mail does not reside on Domino servers, the implementation process becomes not so easy at all. I'll be happy to discuss the complications involved in that process if either you or my other reader expresses interest in reading about it. But for now, I'll leave this discussion here:<br />
<ul>
<li>Educate management, HR, and your users about the dangers of spearphishing and how to cope with it. </li>
<li>For your Notes mail users, use policies to enable default digital signing of messages to other Notes users.</li>
<li>For your non-Notes, Domino-based mail users who have Notes IDs, encourage them strongly to enable the preference to sign outgoing mail by default. And get their Notes IDs merged into their mail databases or an ID Vault.</li>
<li>For your non-Notes, Domino-based mail users who do not have Notes IDs, re-register them to generate Notes IDs for them.</li>
<li>If you have non-Domino email users (Exchange, O365, Google, whatever), take two aspirin and call me in the morning.</li>
</ul>
</div>
Rob Kirklandhttp://www.blogger.com/profile/17751566264733637774noreply@blogger.com0tag:blogger.com,1999:blog-1666323458852118720.post-82673219423854525802015-10-04T15:17:00.001-04:002015-10-04T15:17:30.590-04:00Jumping over hurdles to upgrade Domino<div style="-webkit-font-smoothing: antialiased; -webkit-tap-highlight-color: transparent; background-color: white; border: 0px; box-sizing: border-box; color: #444444; font-family: 'Helvetica Neue', HelveticaNeue, Helvetica, Arial, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 21px; margin-bottom: 15px; outline: none 0px; padding: 0px; vertical-align: baseline;">
Here’s what I had to do to the other day to apply Interim Fix 2 to a Domino server running version 9.0.1 Fixpack 4: Shut down Domino, the Domino Controller, the Java Console, NSD, and (wait for it, wait for it) Windows Management Instrumentation. Huh? Apparently WMI or one of its dependent apps grabs onto one or more Domino DLLs and won’t let go. Or some damn thing. One of the dependent apps was VMware Helper. I wonder if that was the culprit. I remember running into a similar problem years ago upgrading Domino on a Xen VM. That might explain why one only sees problems like this occasionally (when least welcome, of course).</div>
<div style="-webkit-font-smoothing: antialiased; -webkit-tap-highlight-color: transparent; background-color: white; border: 0px; box-sizing: border-box; color: #444444; font-family: 'Helvetica Neue', HelveticaNeue, Helvetica, Arial, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 21px; margin-bottom: 15px; margin-top: 15px; outline: none 0px; padding: 0px; vertical-align: baseline;">
Anyway, until I stopped the WMI service, I kept getting this error when I tried to apply IF2: “Notes/Domino related process is still running”. Thanks to <a href="http://brandlrainer.blogspot.com/2013/10/installing-interim-fix-for-ibm-domino.html" style="-webkit-font-smoothing: antialiased; -webkit-tap-highlight-color: rgba(26, 26, 26, 0.298039); background-image: linear-gradient(rgba(68, 68, 68, 0) 50%, rgba(68, 68, 68, 0.247059) 50%); background-position: 0px 1.15em; background-repeat: repeat-x; background-size: 1em 2px; border: 0px; box-sizing: border-box; color: #444444; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none 0px; padding: 0px 0px 0.15em; text-decoration: none; vertical-align: baseline;">Rainer Brandl</a> for that tip.</div>
<div style="-webkit-font-smoothing: antialiased; -webkit-tap-highlight-color: transparent; background-color: white; border: 0px; box-sizing: border-box; color: #444444; font-family: 'Helvetica Neue', HelveticaNeue, Helvetica, Arial, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 21px; margin-bottom: 15px; margin-top: 15px; outline: none 0px; padding: 0px; vertical-align: baseline;">
This morning, I tried the same thing on another Domino server and it didn’t work. Same error message. More research. Thanks to <a href="http://blog.nashcom.de/nashcomblog.nsf/dx/solution-for-notesdomino-related-process-is-still-running-when-applying-a-fixpack-or-hotfix.htm" style="-webkit-font-smoothing: antialiased; -webkit-tap-highlight-color: rgba(26, 26, 26, 0.298039); background-image: linear-gradient(rgba(68, 68, 68, 0) 50%, rgba(68, 68, 68, 0.247059) 50%); background-position: 0px 1.15em; background-repeat: repeat-x; background-size: 1em 2px; border: 0px; box-sizing: border-box; color: #444444; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none 0px; padding: 0px 0px 0.15em; text-decoration: none; vertical-align: baseline;">Daniel Nashed</a> for the following workaround:</div>
<div style="-webkit-font-smoothing: antialiased; -webkit-tap-highlight-color: transparent; background-color: white; border: 0px; box-sizing: border-box; color: #444444; font-family: 'Helvetica Neue', HelveticaNeue, Helvetica, Arial, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 21px; margin-bottom: 15px; margin-top: 15px; outline: none 0px; padding: 0px; vertical-align: baseline;">
Set Domino and NSD to Manual in Windows Services, rename the Domino directory, restart Windows, rename the Domino directory back to original, apply the patch, reset the services to automatic, restart NSD and Domino. </div>
<div style="-webkit-font-smoothing: antialiased; -webkit-tap-highlight-color: transparent; background-color: white; border: 0px; box-sizing: border-box; color: #444444; font-family: 'Helvetica Neue', HelveticaNeue, Helvetica, Arial, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 21px; margin-bottom: 15px; margin-top: 15px; outline: none 0px; padding: 0px; vertical-align: baseline;">
Daniel didn’t actually say anything about resetting the Windows services. That was my own “belt-and-suspenders” add-on. Don’t know if it was really necessary. But I got past the error message. Finally. </div>
<div style="-webkit-font-smoothing: antialiased; -webkit-tap-highlight-color: transparent; background-color: white; border: 0px; box-sizing: border-box; color: #444444; font-family: 'Helvetica Neue', HelveticaNeue, Helvetica, Arial, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 21px; margin-bottom: 15px; margin-top: 15px; outline: none 0px; padding: 0px; vertical-align: baseline;">
But IF2 still wouldn’t install because blah blah blah. Look at the UPGRADE.LOG. Wrong version of something in the Domino directory. I suspected I may have failed to notice if IF1 was installed on this server. So I ran the IF1 installer, which offered to uninstall IF1, and then did so. Then I succeeded, finally, in installing IF2. </div>
<div style="-webkit-font-smoothing: antialiased; -webkit-tap-highlight-color: transparent; background-color: white; border: 0px; box-sizing: border-box; color: #444444; font-family: 'Helvetica Neue', HelveticaNeue, Helvetica, Arial, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 21px; margin-bottom: 15px; margin-top: 15px; outline: none 0px; padding: 0px; vertical-align: baseline;">
Had that not worked, I might have tried these other things: </div>
<ul style="-webkit-font-smoothing: antialiased; -webkit-tap-highlight-color: transparent; background-color: white; border: 0px; box-sizing: border-box; color: #444444; font-family: 'Helvetica Neue', HelveticaNeue, Helvetica, Arial, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 21px; list-style: none; margin: 15px 0px; outline: none 0px; padding: 0px 0px 0px 35px; vertical-align: baseline;">
<li style="-webkit-font-smoothing: antialiased; -webkit-tap-highlight-color: transparent; border: 0px; box-sizing: border-box; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; list-style-type: disc; margin: 0px; outline: none 0px; padding: 0px 0px 0px 5px; vertical-align: baseline;">Run the Fixpack 4 installer. See what it says. Depending on what it says, maybe uninstall/reinstall it, then try to install IF2 again.</li>
<li style="-webkit-font-smoothing: antialiased; -webkit-tap-highlight-color: transparent; border: 0px; box-sizing: border-box; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; list-style-type: disc; margin: 0px; outline: none 0px; padding: 0px 0px 0px 5px; vertical-align: baseline;">Run the 9.0.1 installer in Repair mode. Then reinstall FP4 and IF2.</li>
<li style="-webkit-font-smoothing: antialiased; -webkit-tap-highlight-color: transparent; border: 0px; box-sizing: border-box; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; list-style-type: disc; margin: 0px; outline: none 0px; padding: 0px 0px 0px 5px; vertical-align: baseline;">Uninstall 9.0.1, strip everything from the Program directory, reinstall all.</li>
</ul>
<div style="-webkit-font-smoothing: antialiased; -webkit-tap-highlight-color: transparent; background-color: white; border: 0px; box-sizing: border-box; color: #444444; font-family: 'Helvetica Neue', HelveticaNeue, Helvetica, Arial, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 21px; margin-bottom: 15px; margin-top: 15px; outline: none 0px; padding: 0px; vertical-align: baseline;">
Luckily I didn’t have to get that radical. </div>
<div style="-webkit-font-smoothing: antialiased; -webkit-tap-highlight-color: transparent; background-color: white; border: 0px; box-sizing: border-box; color: #444444; font-family: 'Helvetica Neue', HelveticaNeue, Helvetica, Arial, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 21px; margin-top: 15px; outline: none 0px; padding: 0px; vertical-align: baseline;">
I love working on Sunday mornings.</div>
Rob Kirklandhttp://www.blogger.com/profile/17751566264733637774noreply@blogger.com1tag:blogger.com,1999:blog-1666323458852118720.post-40870678229391373162014-09-19T23:51:00.000-04:002014-10-10T23:07:37.323-04:00Benefits of SmartCloud: The Network EffectAn interesting aspect of IBM Connections Cloud (formerly known as IBM SmartCloud for Social Business) is that all organizations that participate in it belong to a single directory. That fact has some useful implications. In particular it means that, if they want to, Connections Cloud users can interact, within Connections Cloud, with other Connections Cloud users outside their own organization. Here's an example of what I mean:<br />
<br />
My organization, Rockteam, is an IBM Business Partner providing software and hardware services for a number of IBM customers. Years ago Rockteam migrated our mail to Connections Cloud (back when it was branded LotusLive), and later we subscribed to the features known until recently as IBM SmartCloud Connections (now known as IBM Connections Social Cloud), IBM SmartCloud Meetings (now IBM Connections Meetings Cloud), and IBM SmartCloud Docs (now IBM Connections Docs Cloud) in order to maximally leverage Connections Cloud's benefits. My own role at Rockteam is to help our clients install, configure, and maintain a variety of IBM's server products. I also help my customers (and other IBM Business Partners) to join and migrate their mail to IBM Connections Cloud themselves and to find the best ways to maximize its benefits for their organizations. In other words, I develop relationships; and IBM Connections Cloud can strengthen these relationships.<br />
<br />
A nice thing about using Connections Cloud for mail is that Sametime Instant Messaging is included with it. What's really nice about that is that, not only can you chat with the other Connections Cloud mail users in your own organization, but you can also chat with any other Connections Cloud mail user in any other organization. For me that provides two benefits:<br />
<ol>
<li>I can chat up IBM experts when I need to.</li>
<li>My customers can chat me up when they need to.</li>
</ol>
How does that work? Well, a few weeks ago I wrote in this very post a detailed description of a procedure for enabling SmartCloud users outside my SmartCloud organization to see my SmartCloud Profile. From there I described how one could parlay that into things like chatting with each other in Sametime Instant Messaging. Then, a week or two later, at approximately the same time as it rebranded SmartCloud to Connections Cloud, IBM rolled out a major upgrade to SmartCloud Connections. Mostly the upgrade added and improved features. It also disabled a feature. Yes, the one I described in so much detail here. The ability to publicize to other SmartCloud Organization one's Profile.<br />
<br />
I was dismayed at first because I thought the disabling of this feature meant that I would no longer be able to work with members of other Connections Cloud organizations using the powerful features of Connections Social Cloud or of Sametime Chat. But then I noticed that I was still a member of some non-Rockteam communities and I realized that there must still be a way to enable all that. So I did some digging. And what I discovered is that now you can enable all those things without first publicizing your profile.<br />
<br />
All you have to do is this: Invite other Connections Cloud users to join your network; or accept their invitations to join their network. The only trick is that, when you do invite another Connections Cloud user to join your network, you have to use that person's Connections Cloud email address. Having done that (invited/accepted), the two of you can now work, er, collaborate with each other using all of the following Connections Cloud features:<br />
<div>
<ul>
<li>Each can see the other's full profile. </li>
<li>Each can see what other network contacts both have in common.</li>
<li>Each can see what communities both belong to, and can invite the other to join communities.</li>
<li>Each can add the other to his/her Sametime contact list, see the other's presence icon in the contact list, and chat the other up when the other also shows as present.</li>
<li>Each can share files with the other and see a list of files the other has shared with him/her or made visible to his/her organization.</li>
<li>Each can participate in activities with the other.</li>
<li>Each can invite the other to meetings.</li>
<li>Each can sever the network relationship at any time.</li>
</ul>
It's true that some of these benefits are available between Connections Cloud users and non-users, who you invite not to join your network, but rather to be guests in specific communities. But others, such as Sametime chatting, are only available within one's own organization or between networked SmartCloud users. As a Connections Cloud user who receives services from and provides services to other Connections Cloud users, I like this feature a lot.</div>
Rob Kirklandhttp://www.blogger.com/profile/17751566264733637774noreply@blogger.com1tag:blogger.com,1999:blog-1666323458852118720.post-62641548857834952092014-07-19T11:26:00.000-04:002014-07-19T12:12:05.463-04:00How to force iNotes into Full Mode on a tablet computerWith IBM Notes Traveler and IBM Connections apps available for mobile devices, it's not all that often anymore that I try to get into IBM SmartCloud from a browser, especially on my phone, where the form factor is just too, too small. But on a tablet like the iPad it's still useful sometimes. Of course, when I do, if I try to look at my mail, calendar, or contacts, it defaults to displaying them in the iNotes UltraLight interface. That's fine most of the time and it's perfect for a phone with its, again, small screen. But a tablet's screen is big enough to accommodate the iNotes Full interface. And sometimes I wish I could switch over to it. Don't get me wrong. I think the iNotes UltraLight interface is brilliant. But sometimes it's just too minimalist.<br />
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkMzqRWvqlrpmZjucXicznKnZov7kxSNlFsayixFIyv-0wwBz5IS0gH_EEIerr_6eBsTohjt0yn9zpD-TrwjHnx-mh0ctxF3eeyxxrvGF4sFs7XDPlKqhauIhySdu0FZcFo1ZTss3302w/s1600/017f7728d3a1a2efa3e29c6f79ffba96443e1b7f0a.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img alt="iNotes UltraLight interface" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkMzqRWvqlrpmZjucXicznKnZov7kxSNlFsayixFIyv-0wwBz5IS0gH_EEIerr_6eBsTohjt0yn9zpD-TrwjHnx-mh0ctxF3eeyxxrvGF4sFs7XDPlKqhauIhySdu0FZcFo1ZTss3302w/s1600/017f7728d3a1a2efa3e29c6f79ffba96443e1b7f0a.jpg" height="300" title="iNotes UltraLight interface" width="400" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">IBM SmartCloud displays iNotes UltraLight mail interface in iPad's browser</td></tr>
</tbody></table>
A few years ago I decided to go to Lotusphere without a laptop computer in tow. Having bought and fallen in love with an iPad I thought I'd try surviving a week that year with just the iPad, my iPhone and the laptops they provide at Lotusphere. And I managed just fine, but I wished I could bring up iNotes on the iPad in Full interface mode. Lotusphere was (and its successor Connect is) about the greatest place in the world to have such a wish because you can just go to any of the labs and talk to IBM's own experts on any subject. I did just that and the guys in the lab helped me figure out how to force iNotes into Full mode. We bookmarked it in Safari, I thanked them, and I went on my way (while, behind me I heard one of them say to another, "See, I told you people would want to use this stuff on an iPad".)<br />
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiNaDNBE7E3cH95NojxtGKTZvCeVCaWFqIMrswo1B5OGQsUUth4m_O3LHBedABvctQfZQCOBKc0sLyCqb_m9ji11BwtQHFMhP0kNafsAz81zada87ahzWAPHkOz6k5Nb8GisYiQrHu_rDM/s1600/01e9e90aeb7cd0100c9fddfd2ffb5817ac4c01d172.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img alt="iNotes Full interface" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiNaDNBE7E3cH95NojxtGKTZvCeVCaWFqIMrswo1B5OGQsUUth4m_O3LHBedABvctQfZQCOBKc0sLyCqb_m9ji11BwtQHFMhP0kNafsAz81zada87ahzWAPHkOz6k5Nb8GisYiQrHu_rDM/s1600/01e9e90aeb7cd0100c9fddfd2ffb5817ac4c01d172.jpg" height="300" title="iNotes Full interface" width="400" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">IBM SmartCloud can display iNotes Full mail interface in iPad's browser</td></tr>
</tbody></table>
I went years with that bookmark on my iPad, using it less and less frequently as I got more into the Traveler/Connections app groove and out of the SmartCloud-by-browser groove. (One reason for that is that the apps offer a much better editing experience, providing, as they do, access to Apple's double-edged editing tools.) Then, just the other day, I got a question from a customer, a new Notes/iNotes/SmartCloud Connections user, wanting to know if there was a way to get the Full mail/calendar/contacts interface on a tablet. Oh, yes there is, and I know how to do it! I went looking for my bookmark and, omigod, it was gone! I don't know where it went, but I could no longer find it on my iPad.<br />
<br />
So I had to relearn how to force Full mode on a tablet. I experimented with the URL, but the darn thing kept coming up in UltraLight mode. I Googled it, but, surprise, it doesn't seem to be a topic that has been discussed much in GoogleSpace. What the heck, I even opened a PMR with IBM SmartCloud to find out if they knew the answer. But then, impatient for them to get back to me, I went back to work on the URL and (ta da!) I cracked it.<br />
<br />
Here's the URL that appears in the Safari browser on the iPad when you click Mail in the SmartCloud interface and brings up iNotes UltraLight (substitute your own mail path name for the zeroes, ones, and twos):<br />
<a href="https://mail.notes.na.collabserv.com/data0/20027883/20097966.nsf/iNotes/Mail/?OpenDocument&Form=m_HomeView">https://mail.notes.na.collabserv.com/data0/11111111/22222222.nsf/iNotes/Mail/?OpenDocument&Form=m_HomeView</a><br />
<br />
Here's how I changed it to force iNotes to come up in Full mode:<br />
<a href="https://mail.notes.na.collabserv.com/data0/20027883/20097966.nsf/iNotes/Mail/?OpenDocument&ui=inotes_full">https://mail.notes.na.collabserv.com/data0/11111111/22222222.nsf/iNotes/Mail/?OpenDocument&ui=inotes_full</a><br />
<br />
As you can see, the key (which I had missed initially) was not to add "&ui=iNotes_Full" but rather to substitute it for "&Form=m_HomeView". And here's a plus: Once you are in Full mode, you stay in Full mode. Touching any of the mail-related links on the screen returns that screen in Full mode as well.<br />
<br />
The next thing that happened was that I got a call-back from IBM SmartCloud Support. I told the guy I had solved the problem and he said, "Oh, really? Would you please send me the solution, so we'll have it in case anyone else ever asks?" That made my day. Well, sort of. The fact that they didn't already know the answer reminded me that this is a solution in search of a problem. A smaller and smaller problem as IBM continues to enhance its mobile Traveler and Connections apps.<br />
<br />
But, hey, it gives me, all from within the browser interface on my iPad, access to my mail views, folders, rules, archives, and delegated mail databases, all of the calendar views, my To Dos and Notebook entries, my iNotes preferences, and even the Sidebar-base Sametime Communications widget. <b>Caveat: Not officially supported by IBM. </b>And not, perhaps, 100% functional. I get occasional 404 errors; but when I click OK, Safari tries again and my data finally appears. And I haven't actually tested everything, so who knows what else might break?<br />
<br />
I'm good with that. Thank, IBM, for some great software.<br />
<br />
Copyright 2014 Rob KirklandRob Kirklandhttp://www.blogger.com/profile/17751566264733637774noreply@blogger.com7tag:blogger.com,1999:blog-1666323458852118720.post-81428397281776082702014-07-18T03:30:00.002-04:002014-07-18T03:30:48.031-04:00Set Up your SmartCloud Meetings meeting room in the SmartCloud calendar<div style="text-align: left;">
<span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">I am an IBM<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">SmartCloud</span><span class="CSS_20097966 indicatortag" role="group" type="indicator"> Notes and IBM </span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">SmartCloud</span><span class="CSS_20097966 indicatortag" role="group" type="indicator"><span class="Apple-converted-space"> </span>Meetings user who works mostly remotely from my colleagues and customers. Therefore, when I create meeting<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag" role="group" type="indicator">invitations in Notes or iNotes, I like to add my<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">SmartCloud</span><span class="CSS_20097966 indicatortag" role="group" type="indicator"> Meetings meeting room and call-in information to </span><span class="CSS_20097966 indicatortag" role="group" type="indicator">virtually all of my </span><span class="CSS_20097966 indicatortag" role="group" type="indicator">meeting invitations. In fact, I do it even for face-to-face meetings because these days you just<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag" role="group" type="indicator">can't assume that nobody will </span><span class="CSS_20097966 indicatortag" role="group" type="indicator">want to attend remotely.</span></span><br />
<br />
<span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">Including<span class="Apple-converted-space"> </span>meeting room and call-in information in a meeting invitation is<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">one-click</span><span class="CSS_20097966 indicatortag" role="group" type="indicator"> easy. Well, almost. I have had new<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">SmartCloud</span><span class="CSS_20097966 indicatortag" role="group" type="indicator"> users try it and fail, then ask me how I do it. Their problem turns out to be that,</span><span class="CSS_20097966 indicatortag" role="group" type="indicator"> before you can do it, you have to define a meeting room.<span class="Apple-converted-space"> </span></span></span><br />
<br />
<span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">The problem is that, where Sametime Meetings users are expected (and presumably taught how) to set up their own meeting rooms,<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">SmartCloud</span><span class="CSS_20097966 indicatortag" role="group" type="indicator"><span class="Apple-converted-space"> </span>Meetings users have a meeting room predefined for them and are expected to use that one meeting room exclusively. So nobody teaches them how to define a meeting room. After all, if their meeting room is predefined, they don't need to define one, right?<span class="Apple-converted-space"> </span></span></span><br />
<br />
<span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator"><span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">Er</span><span class="CSS_20097966 indicatortag" role="group" type="indicator">, wrong. When new<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">SmartCloud</span><span class="CSS_20097966 indicatortag" role="group" type="indicator"> Notes or iNotes users try to include meeting room information in a meeting invitation, they are presented with an empty list of meetings, as illustrated below, and no information as to what they should do about it. Where is their predefined meeting room?</span></span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhaaXmR3x6kIKNbopw767FKKfTQFFTdbMDkXzq0ypbPJWFyICgA9yYg1vV_c7Z_9CoRhFTxnuPYr55n_iduGr77j-a4LEb_W1LakkGJMXLFbT9Rqh8q439eq4b74wDIoonGbEvLakjhv4E/s1600/SmartCloud_iNotes_Reserve_Online_Meeting_dialog.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhaaXmR3x6kIKNbopw767FKKfTQFFTdbMDkXzq0ypbPJWFyICgA9yYg1vV_c7Z_9CoRhFTxnuPYr55n_iduGr77j-a4LEb_W1LakkGJMXLFbT9Rqh8q439eq4b74wDIoonGbEvLakjhv4E/s1600/SmartCloud_iNotes_Reserve_Online_Meeting_dialog.png" height="320" width="316" /></a></div>
<span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">Because it's the only available option, they try clicking New, which brings up the form below, which presents two problems:</span></span><br />
<ul>
<li><span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">It<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag" role="group" type="indicator">prompts them for the Meeting URL, which they don't know how to provide.<span class="Apple-converted-space"> </span></span></span></li>
<li><span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">It does<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag" role="group" style="font-style: italic;" type="indicator">not<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag" role="group" type="indicator">prompt them for the Meeting ID, which they also need and also don't know how to provide</span><span class="CSS_20097966 indicatortag" role="group" type="indicator">.</span></span></li>
</ul>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjJMRLOsVXn2HLGxE8V7bu9pAWRyJd8DbqMLYA-cK3l0fYUvC97LDykjLn4Z3Q7IDfQr2vpqZCJy-TW2VE1oUVvoSnTGT_sk0oplQvsJwEHOwEYBO6d-OUZfyTwOys4CZJl6zJout7gncs/s1600/SmartCloud_iNotes_New_Online_Meeting_dialog.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjJMRLOsVXn2HLGxE8V7bu9pAWRyJd8DbqMLYA-cK3l0fYUvC97LDykjLn4Z3Q7IDfQr2vpqZCJy-TW2VE1oUVvoSnTGT_sk0oplQvsJwEHOwEYBO6d-OUZfyTwOys4CZJl6zJout7gncs/s1600/SmartCloud_iNotes_New_Online_Meeting_dialog.png" height="248" width="320" /></a></div>
<span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">What nobody tells the new user is:<span class="Apple-converted-space"> </span></span></span><br />
<ul>
<li><span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">That one needs to gather the information for this screen beforehand; and</span></span></li>
<li><span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">W</span><span class="CSS_20097966 indicatortag" role="group" type="indicator">here to get this information.</span></span></li>
</ul>
<span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">And ther</span><span class="CSS_20097966 indicatortag" role="group" type="indicator">e's another problem. If the user tries to navigate directly between the meeting invitation screen and the screen where the meeting information appears, the one screen closes before the other one opens. The user needs to navigate in such a way that both screens remain open so that she can easily copy/paste the information. In other words, the user needs to open the meetings<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag" role="group" type="indicator">dashboard </span><span class="CSS_20097966 indicatortag" role="group" type="indicator">in one tab or browser window and the calendar<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">app</span> <span class="CSS_20097966 indicatortag" role="group" type="indicator">in another.</span></span><br />
<br />
<span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">Here is what the user can do to easily gather the needed information and use it to create a meeting room:</span></span><br />
<ol>
<li><span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">Log into IBM<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">SmartCloud</span><span class="CSS_20097966 indicatortag" role="group" type="indicator">, then navigate to the<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">SmartCloud</span><span class="CSS_20097966 indicatortag" role="group" type="indicator"><span class="Apple-converted-space"> </span>Meetings dashboard. (Click<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">Apps</span><span class="CSS_20097966 indicatortag" role="group" type="indicator">,<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag" role="group" type="indicator">Meetings (New) in the Ribbon or, if your organization is "</span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">newish</span>"<span class="CSS_20097966 indicatortag" role="group" type="indicator"> to<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">SmartCloud</span><span class="CSS_20097966 indicatortag" role="group" type="indicator">, it might just say "Meetings"</span><span class="CSS_20097966 indicatortag" role="group" type="indicator">.)<span class="Apple-converted-space"> <div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgb6igayTVaaiOO2n6xbFfsE87_S1TMpLPy2cFqWPECnT76jyv6OZzs64CcdPnfqd7gA1gnQ4tv3J8MxTBNf8X48KcxUmL3kf8Gs4oD3vwe1iergLqPjh7zw9ky95PGOQ4txaOUyRs7wPY/s1600/SmartCloud_iNotes_Ribbon_with_Partial_Apps_Menu.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgb6igayTVaaiOO2n6xbFfsE87_S1TMpLPy2cFqWPECnT76jyv6OZzs64CcdPnfqd7gA1gnQ4tv3J8MxTBNf8X48KcxUmL3kf8Gs4oD3vwe1iergLqPjh7zw9ky95PGOQ4txaOUyRs7wPY/s1600/SmartCloud_iNotes_Ribbon_with_Partial_Apps_Menu.png" height="84" width="320" /></a></div>
</span></span></span></li>
<li><span style="font-family: Verdana,sans-serif;"><span class=".64cmdicatortag CSS_20097966 indicatortag" role="group" type="indicator">There one sees that a meeting room has<span class="Apple-converted-space"> </span>indeed been predefined. There, too, are the Meeting ID and Meeting URL.<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgYJrsm46vpGRLI8yf3rNVfcDV2gJVDgJYGY6tEboLyAIMlWAOSGCc9hG_Q8rmJUq08bkjbj2bZitzZNwMRCNbBHN2zFrqbegPkrAVWD31Ylm9cvJ0AzPFsQiUl8KR44cslihbscGD73p0/s1600/SmartCloud_iNotes_Meetings_Dashboard_with_Meeting_Room_info.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgYJrsm46vpGRLI8yf3rNVfcDV2gJVDgJYGY6tEboLyAIMlWAOSGCc9hG_Q8rmJUq08bkjbj2bZitzZNwMRCNbBHN2zFrqbegPkrAVWD31Ylm9cvJ0AzPFsQiUl8KR44cslihbscGD73p0/s1600/SmartCloud_iNotes_Meetings_Dashboard_with_Meeting_Room_info.png" height="63" width="320" /></a></div>
</span></span></li>
<li><span style="font-family: Verdana,sans-serif;"><span style="background-color: white; color: black; display: inline ! important; float: none; font-size: 16.3636px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 17.4545px; text-align: left; text-indent: -28.0063px; text-transform: none; white-space: normal; word-spacing: 0px;">Optionally (but recommended), set a password for the predefined meeting room.<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilyGE1ORuIXgphqwu1lx7TqOQDiuiHxQgEYyB45DZlj1UarPWTO-tyLRkrsAqJ1AIoJ9za-8rkec5u5TsD229CIxkjLCqZkLLlB8olJ1xsBw9NoD6qQPWNfCryxTzD-Wq3MOp8-Bti578/s1600/SmartCloud_iNotes_Meetings_Dashboard_with_Meeting_Security_info.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilyGE1ORuIXgphqwu1lx7TqOQDiuiHxQgEYyB45DZlj1UarPWTO-tyLRkrsAqJ1AIoJ9za-8rkec5u5TsD229CIxkjLCqZkLLlB8olJ1xsBw9NoD6qQPWNfCryxTzD-Wq3MOp8-Bti578/s1600/SmartCloud_iNotes_Meetings_Dashboard_with_Meeting_Security_info.png" height="72" width="320" /></a></div>
</span></span></li>
<li><span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">Leave the Meetings dashboard screen open while you </span><span class="CSS_20097966 indicatortag" role="group" type="indicator">open a meeting invitation. Do this as follows:<span class="Apple-converted-space"> </span></span></span></li>
<ol style="list-style-type: lower-alpha;">
<li><span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">C</span><span class="CSS_20097966 indicatortag" role="group" type="indicator">lick the IBM<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">SmartCloud</span><span class="CSS_20097966 indicatortag" role="group" type="indicator"><span class="Apple-converted-space"> </span>for Social<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag" role="group" type="indicator">Business tab in the browser to open the original<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">SmartCloud</span><span class="CSS_20097966 indicatortag" role="group" type="indicator"> landing page.</span><span class="CSS_20097966 indicatortag" role="group" type="indicator"> Or open a new browser window and connect to </span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">SmartCloud</span><span class="CSS_20097966 indicatortag" role="group" type="indicator"> again from that window.</span></span></li>
<li><span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">Then click the "Sign in" link again to open<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">SmartCloud</span><span class="CSS_20097966 indicatortag" role="group" type="indicator"><span class="Apple-converted-space"> </span>again in yet another tab or window. Result: Three browser tabs and/or windows are open: The<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">SmartCloud</span><span class="CSS_20097966 indicatortag" role="group" type="indicator"> landing page, the Meetings page, and the user's Home page. The user can now copy/paste between screens.</span></span></li>
</ol>
<li><span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">Under this new browser tab or window, navigate back to the iNotes calendar and create a new meeting invitation. There, click the links again to return to the New Online Meeting dialog. Now do the following:</span></span></li>
<ol style="list-style-type: lower-alpha;">
<li><span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">Change "Select service" to "</span><span class="CSS_20097966 indicatortag" role="group" type="indicator">IBM<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">SmartCloud</span><span class="CSS_20097966 indicatortag" role="group" type="indicator"><span class="Apple-converted-space"> </span>Meetings". This causes an additional field (Meeting ID) to appear in the form.</span></span></li>
<li><span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">In "Meeting room name", enter any name you want for your meeting room.</span></span></li>
<li><span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">In "Meetin</span><span class="CSS_20097966 indicatortag" role="group" type="indicator">g URL", paste the URL from the "Your meeting link" field on the Meetings dashboard (under the Meetings browser tab).</span></span></li>
<li><span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">In "Meeting ID", paste the<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">eight-digit</span><span class="CSS_20097966 indicatortag" role="group" type="indicator"><span class="Apple-converted-space"> </span>number from the "Meeting ID" field on the Meetings dashboard.</span></span></li>
<li><span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">In "Password" enter or paste the meeting room password if you set one.</span></span></li>
<li><span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">In "Call-in information" enter the dialing information to access your bridge or conference line. If one has to dial a phone number followed later by another number, such as a PIN, a conference bridge or an extension, separate the two sequences with either one or more commas (",") or a semi-colon (";").<span class="Apple-converted-space"> </span></span><span class=".64cmdicatortag CSS_20097966 indicatortag" role="group" type="indicator">If the last set of numbers requires a pound symbol ("#") at the end, add it here. That way the invitee doesn't have to dial it manually at meeting time.</span></span></li>
<ol style="list-style-type: lower-roman;">
<li><span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">Each comma inserts a two-second pause into the dialing sequence. One comma is usually<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag" role="group" type="indicator">sufficient</span><span class="CSS_20097966 indicatortag" role="group" type="indicator">, but you can insert more than one for a longer pause.<span class="Apple-converted-space"> </span></span></span></li>
<li><span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">A semi-colon inserts a "wait", where the numbers following the semi-colon aren't dialed until you manually tell the phone to dial them.<span class="Apple-converted-space"> </span></span></span></li>
<li><span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">On<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">smartphones</span><span class="CSS_20097966 indicatortag" role="group" type="indicator"> a soft button typically appears<span class="Apple-converted-space"> </span>on-screen that, when touched, initiates the waiting number sequence.<span class="Apple-converted-space"> </span></span></span></li>
</ol>
<li><span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">The<span class="Apple-converted-space"> </span>completed dialog looks similar to<span class="Apple-converted-space"> </span>this:<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyLnq8x1qzMG601g_0jkY8q7Qj4Sz1oI6xwX8ermJwmy2CcJ96Ha-Kz7s6oD0iXhip6R5iLy9REgE3cgihJAN8VjzrJorIwje8WhgX8QmQgh4Aryz9VLfM-8WtqI9Gr9JfyDdGAugJDKo/s1600/SmartCloud_iNotes_New_Online_Meeting_dialog_filled_In.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyLnq8x1qzMG601g_0jkY8q7Qj4Sz1oI6xwX8ermJwmy2CcJ96Ha-Kz7s6oD0iXhip6R5iLy9REgE3cgihJAN8VjzrJorIwje8WhgX8QmQgh4Aryz9VLfM-8WtqI9Gr9JfyDdGAugJDKo/s1600/SmartCloud_iNotes_New_Online_Meeting_dialog_filled_In.png" height="249" width="320" /></a></div>
</span></span></li>
<li><span style="font-family: Verdana,sans-serif;"><span style="background-color: white; color: black; display: inline ! important; float: none; font-size: 16.3636px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 17.4545px; text-align: left; text-indent: -28.0063px; text-transform: none; white-space: normal; word-spacing: 0px;">Click OK. The newly defined meeting room appears in the list. It is selected. Details about it appear in the bottom portion of the dialog.<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjgwPZaN5XChFu7q7CcD1j8X490ZkZ18pJk60nL54fsOuIExn0QJMucHuYmiCraoTzzpZDjDcDU0AGa3xEDdy6YEIrC4Fx2tTQD8xnawdh1C4NE_JgBOny_F_t6oDGG5drOCWmuFz_O8NY/s1600/SmartCloud_iNotes_Reserve_Online_Meeting_dialog_one_entry.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjgwPZaN5XChFu7q7CcD1j8X490ZkZ18pJk60nL54fsOuIExn0QJMucHuYmiCraoTzzpZDjDcDU0AGa3xEDdy6YEIrC4Fx2tTQD8xnawdh1C4NE_JgBOny_F_t6oDGG5drOCWmuFz_O8NY/s1600/SmartCloud_iNotes_Reserve_Online_Meeting_dialog_one_entry.png" height="320" width="316" /></a></div>
</span></span></li>
<li><span style="font-family: Verdana,sans-serif;"><span style="background-color: white; color: black; display: inline ! important; float: none; font-size: 16.3636px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 17.4545px; text-align: left; text-indent: -28.0063px; text-transform: none; white-space: normal; word-spacing: 0px;">Click OK to close the dialog. The meeting room and call-in information appear in the meeting invitation.<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhx031KTrix1gI277ywY1Fd3Idg_BQAMNBWK48ggvxUjMGX8itBE0467yB0dN6To0N-FhyWBV8qPt8OImMK5Cqcgc6Vp_Hxqj5qt0Tqt9HgjjwGyvcXnl0m92cxOBKYaR4_LIwX7660eQI/s1600/SmartCloud_iNotes_Meeting_Invite_Partial_with_Online_Meeting_and_call-in_info.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhx031KTrix1gI277ywY1Fd3Idg_BQAMNBWK48ggvxUjMGX8itBE0467yB0dN6To0N-FhyWBV8qPt8OImMK5Cqcgc6Vp_Hxqj5qt0Tqt9HgjjwGyvcXnl0m92cxOBKYaR4_LIwX7660eQI/s1600/SmartCloud_iNotes_Meeting_Invite_Partial_with_Online_Meeting_and_call-in_info.png" height="186" width="320" /></a></div>
</span></span></li>
</ol>
<li><span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">Either complete or cancel the meeting invitation. You're finished.</span></span></li>
</ol>
<span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">From now on, the newly defined meeting room will appear in the list, preselected, in the Reserve Meeting Room dialog, and you can just click Online Meeting, then OK, to include its information in a meeting invitation.<span class="Apple-converted-space"> </span></span></span><br />
<br />
<span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">For some meetings you don't really need a meeting room; rather,<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag" role="group" type="indicator">all</span><span class="CSS_20097966 indicatortag" role="group" type="indicator"> you need is call-in information.</span><span class="CSS_20097966 indicatortag" role="group" type="indicator"> Here is how to set up your call-in information in<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">SmartCloud</span><span class="CSS_20097966 indicatortag" role="group" type="indicator"><span class="Apple-converted-space"> </span>so you can insert it into meeting invitations with a single mouse click:</span></span><br />
<ol>
<li><span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">Log into<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">SmartCloud</span><span class="CSS_20097966 indicatortag" role="group" type="indicator"><span class="Apple-converted-space"> </span>and open your mail or calendar window. If you are already logged into<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">SmartCloud</span><span class="CSS_20097966 indicatortag" role="group" type="indicator"><span class="Apple-converted-space"> </span>and you have open tabs that have<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">unsaved</span><span class="CSS_20097966 indicatortag" role="group" type="indicator"><span class="Apple-converted-space"> </span>edits, save them before you proceed further, because when you save your<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag" role="group" type="indicator">preferences in step </span><span class="CSS_20097966 indicatortag" role="group" type="indicator">5</span><span class="CSS_20097966 indicatortag" role="group" type="indicator"><span class="Apple-converted-space"> </span>below, all open tabs will close and<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">unsaved</span><span class="CSS_20097966 indicatortag" role="group" type="indicator"><span class="Apple-converted-space"> </span>edits will be<span class="Apple-converted-space"> </span>discarded.</span></span></li>
<li><span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">Click More in the Mail or Calendar<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">Taskbar</span><span class="CSS_20097966 indicatortag" role="group" type="indicator">, then click Preferences. The Preferences page will appear under another tab in the mail or calendar<span class="Apple-converted-space"> </span>window.</span></span></li>
<li><span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">In the navigation (left) pane of the Preferences page, expand Calendar, then select Meeting. The contents of the main (right) pane will change<span class="Apple-converted-space"> </span>accordingly.</span></span></li>
<li><span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">Under Conference Call Information enter your calling number. Use commas (",") to introduce two-second delays or semi-colons (";") to introduce waits, as previously described.</span></span></li>
<li><span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">Click Save and Close. Click OK in the warning dialog that appears. All<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">SmartCloud</span><span class="CSS_20097966 indicatortag" role="group" type="indicator"><span class="Apple-converted-space"> </span>tabs will close, then the Mail or Calendar tab from which you initiated the<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag" role="group" style="text-indent: -0.7410000201066336cm;" type="indicator">above </span><span class="CSS_20097966 indicatortag" role="group" type="indicator">steps will reopen.</span></span></li>
</ol>
<span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">Now, whenever you create a meeting, you can add your call-in information by clicking the "Call-in Number" link in iNotes or checking the "Include conference call information in the Location"<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">checkbox</span><span class="CSS_20097966 indicatortag" role="group" type="indicator"><span class="Apple-converted-space"> </span>in Notes.</span></span><br />
<span style="font-family: Verdana,sans-serif;"><span class="CSS_20097966 indicatortag" role="group" type="indicator">Copyright 2014 Rob<span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">Kirkland</span>,<span class="CSS_20097966 indicatortag" role="group" type="indicator"><span class="Apple-converted-space"> </span></span><span class="CSS_20097966 indicatortag misspellWord" role="group" style="background-image: url(https://apps.na.collabserv.com/docs/static/20140429-1626/images/underline.gif) !important; background-position: 50% 100%; background-repeat: repeat-x !important;" type="indicator">Rockteam</span></span><br />
<br /></div>
Rob Kirklandhttp://www.blogger.com/profile/17751566264733637774noreply@blogger.com0tag:blogger.com,1999:blog-1666323458852118720.post-36638664124800544832014-07-17T21:12:00.000-04:002014-10-10T11:01:59.874-04:00How to enter a conference call phone number into a meeting invitation<div class="post_body" style="-webkit-tap-highlight-color: rgba(0, 0, 0, 0); -webkit-text-stroke-width: 0px; background-color: white; box-sizing: border-box; color: #444444; float: left; font-family: 'Helvetica Neue', HelveticaNeue, Helvetica, Arial, sans-serif; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 19.600000381469727px; orphans: auto; outline: none 0px; overflow: visible; padding-top: 2px; text-align: left; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; width: 500px; word-spacing: 0px;">
<div style="-webkit-tap-highlight-color: rgba(0, 0, 0, 0); box-sizing: border-box; margin: 0px 0px 10px; outline: none 0px;">
I love my iPhone. I love that I can open meeting invitations on it and
that the meeting phone number is recognized and highlighted, so that, if
I touch it, the iPhone dials it for me. I love it even more if the
meeting organizer entered the next bit of information correctly. That
would be the conference access code. If entered correctly, the iPhone
either pauses for a couple seconds, then dials it, or the iPhone
displays a button (or maybe just the words - depends on the iOS version)
that says “Dial xxxxxxx#” (where “xxxxxxx#” is the conference access
code, which in this example ends with the pound/hash sign).</div>
<div style="-webkit-tap-highlight-color: rgba(0, 0, 0, 0); box-sizing: border-box; margin: 0px 0px 10px; outline: none 0px;">
Trouble is, many users don’t know how to enter the phone information so
that the iPhone (and probably the Android, too) will work this way. The
way you do it is like one of these:</div>
<div style="-webkit-tap-highlight-color: rgba(0, 0, 0, 0); box-sizing: border-box; margin: 0px 0px 10px; outline: none 0px;">
nnnnnnnnnn,xxxxxxx#<br />
or<br />
nnnnnnnnnn;xxxxxxx#</div>
<div style="-webkit-tap-highlight-color: rgba(0, 0, 0, 0); box-sizing: border-box; margin: 0px 0px 10px; outline: none 0px;">
The n’s are the phone number. The x’s are the conference access code. In
the first example, they are separated by a comma, which causes the
phone to pause two seconds, then continue with the next string of
numerals. In the second example, they are separated by a semicolon,
which causes the phone to pause until you signal it to continue, which
you do, on my iPhone, by touching the words “Dial xxxxxxx#”.</div>
<div style="-webkit-tap-highlight-color: rgba(0, 0, 0, 0); box-sizing: border-box; margin: 0px 0px 10px; outline: none 0px;">
This works with extensions too. And it works with successive strings.
For example, someone the other day told me that his phone number was
(xxx)xxx-xxxx, then dial 8, then dial 123. In my contact record for him,
I entered this: (xxx)xxx-xxxx,8,123</div>
<div style="-webkit-tap-highlight-color: rgba(0, 0, 0, 0); box-sizing: border-box; margin: 0px 0px 10px; outline: none 0px;">
Here’s what people do that I hate, In the meeting invitation, they (oh, so helpfully) enter this sort of thing:</div>
<div style="-webkit-tap-highlight-color: rgba(0, 0, 0, 0); box-sizing: border-box; margin: 0px 0px 10px; outline: none 0px;">
Conference Dial-in Number: (xxx)xxx-xxxxParticipant Access Code: xxxxxxx#</div>
<div style="-webkit-tap-highlight-color: rgba(0, 0, 0, 0); box-sizing: border-box; margin: 0px 0px 10px; outline: none 0px;">
Now, when I want to dial in, I have to do one of the following:</div>
<ul style="-webkit-tap-highlight-color: rgba(0, 0, 0, 0); box-sizing: border-box; margin: 0px 0px 10px; outline: none 0px;">
<li style="-webkit-tap-highlight-color: rgba(0, 0, 0, 0); box-sizing: border-box; outline: none 0px;">Write down the access code, then dial in, then manually enter the access code.</li>
<li style="-webkit-tap-highlight-color: rgba(0, 0, 0, 0); box-sizing: border-box; outline: none 0px;">Memorize the access code, then dial in, then manually enter the access code.</li>
<li style="-webkit-tap-highlight-color: rgba(0, 0, 0, 0); box-sizing: border-box; outline: none 0px;">Dial
in, go back to the calendar app and look at the access code, memorize
it or write it down, then return to the phone app and manually enter the
access code.</li>
</ul>
<div style="-webkit-tap-highlight-color: rgba(0, 0, 0, 0); box-sizing: border-box; margin: 0px 0px 10px; outline: none 0px;">
This is a drag.</div>
<div style="-webkit-tap-highlight-color: rgba(0, 0, 0, 0); box-sizing: border-box; margin: 0px 0px 10px; outline: none 0px;">
Not helpful.</div>
<div style="-webkit-tap-highlight-color: rgba(0, 0, 0, 0); box-sizing: border-box; margin: 0px 0px 10px; outline: none 0px;">
No thanks.</div>
<div style="-webkit-tap-highlight-color: rgba(0, 0, 0, 0); box-sizing: border-box; margin: 0px; outline: none 0px;">
The next time someone does this to you, send them the URL to this blog post.</div>
</div>
Rob Kirklandhttp://www.blogger.com/profile/17751566264733637774noreply@blogger.com2tag:blogger.com,1999:blog-1666323458852118720.post-69857447966742510532012-10-14T09:34:00.000-04:002012-10-14T09:34:34.704-04:00How to turn a Notes View into a Widget: It's easy, but not always as easy as you may think.<br />
The other day IBM Tech Support showed me a cool, maybe undocumented
feature of Notes 8.5.x. The following day I discovered a useful
application of the feature. For my reader who doesn't have time to read
my witty and snappily written (but, okay, long-winded) prose below, the
short (two-sentence) version of this post is (so as not to spoil it for
my other reader) at the very end of this post.<br />
<br />
You may know that the personal productivity Notes apps (mail,
calendar, to-do, contacts, notebook) are composite apps. That means the
pieces of them that appear on screen (navigation pane, views, forms) are
written as "components" that can be rearranged on screen and wired up
to work with each other in custom ways using the Composite Application
Editor. The Composite App Editor is available (if installed) when a
composite app is open on screen. Get to it in the Actions menu by
clicking Edit Application. One of the nice aspects of composite apps is
that they aren't confined to running in Notes. Each component can
potentially be combined with any other component (whether originally
intended ro work together or not) and can be run in other Eclipse-based
containers or in WebSphere Portal.<br />
<br />
All this only works in Notes when it is running in Standard Mode. In
Basic Mode, these apps are plain old Notes apps, like any other. That
means, of course, that much of the code underlying the new functionality
is written in Java. And when something goes wrong in Notes these days,
it's almost always a Java-driven piece of the product that goes haywire.
(The C++ code, having been around and debugged since the beginning of
time, is pretty rock solid in Notes. The Java code, into which Notes was
cradled starting in version 8.0, has a way to go before the significant
bugs get worked out of it.)<br />
<br />
Anyway, I was on the phone with IBM Tech Support (a great, extremely
helpful bunch of people, by the way) and we needed to know if a problem
we were troubleshooting was in the Java or C++ portion of the product.
To find out, we had to go to Basic Mode. If the problem continued to
rear its ugly head, we would know to look for it not in the Java code
but on the C++ side. Normally, you get into Basic Mode by restarting
Notes, appending either the -sa or -basic command line argument. (I
guess nobody (including me) could remember "-sa" (because, like, who
knows what "sa" stands for?), so later they added "-basic". Thank you,
IBM, very much.)<br />
<br />
Restart Notes, kind of a hassle. But the Tech Support guy clued me in
to a neat trick. Instead of restarting all of Notes, you can leave
Notes running in Standard Mode and just start an individual application
in Basic Mode by holding down Ctrl+Alt while clicking the app in the
Start List. Whoa! Too Cool! (I'm pretty geeky. This made my day.)<br />
<br />
So, we did that and, of course, the problem disappeared. Like I said,
Notes problems these days occur in the Java code, not the rock solid
C++ code. End of that story.<br />
<br />
The following day I discovered how this trick could come in handy
with respect to Widgets, yet another nice, Java-based feature that
appeared in Notes in, er, Notes 8.0.1, I think. The Widget app is a
Notes Sidebar app. Non-running widgets appear there as tiles or in a
list. When you run a widget, it opens in one of several places: in the
Sidebar, in a tab on the main portion of the Notes app, or in its own
window. Nice versatility, that. One of the sweet, stupidly easy things
you can do with Widgets is turn any Notes view into a widget. (Well,
almost any view - keep reading)<br />
<br />
I had been having a dialog with my friend Dan about some Notes
limitations that he had been experiencing. He had been getting pretty
fed up by Notes and was saying things like "Notes has a really crappy
search tool" and "Notes isn't very customizable", to which, to his
surprise, I answered "Are you kidding? Notes has great search
functionality" and "Are you kidding? Note is fabulously customizable."<br />
<br />
One of the things Dan complained about was that the scrolling was way
too slow when he wanted to file an email. It turns out I couldn't help
him speed up the scrolling. It's a known issue when a Notes Mail
database (running in Standard Mode) has more than, say, 200-250 folders,
that scrolling slo-o-ws down. So, as a workaround, Dan wanted to close
the mini-view window in the lower left of his Notes screen, so that he
could maximize his folder pane to reveal more of his (insanely huge
number of) folders. But he also uses the Follow Up mini view to keep
track of things he needs to get done. So I pointed out that he could use
the regular follow-up view. To which he replied that he needs it
visible all the time, not hidden amongst the tabbed views.<br />
<br />
That's when it occurred to me that he could turn the Follow Up view
(the big one, not the mini-view) into a widget. And that's when I
discovered that NOT all views can become widgets with stupid ease. Views
configured as Components cannot be easily turned into standalone
widgets. And that's when I realized that the Ctrl+Alt trick might come
in handy.<br />
<br />
Okay, so I wanted to turn Dan's Follow Up view into a widget that
could appear in his right sidebar OR in a little window anywhere on his
screen that suited Dan. When I say "stupidly easy", here's what I mean:
To turn a Notes view into a widget, you open the view, click the
"Configure a widget from Current Context" icon in the Toolbar (or use
the menu), select "Open this view", and click OK.<br />
<br />
(Life will never get easier than that. When it does, it will be
because I, Robot, am running things now and you humans can just sit back
and suck your thumbs.)<br />
<br />
But when I tried to make a widget out of the Follow Up view, the
dialog box didn't offer to "Open this view". Instead, I could "Just
configure a widget for now" or "Wire as an action". Neither option
actually caused the view to appear in a widget window. Arrgh! I had to
scratch my head for awhile before I realized why. Luckily, the cause and
solution dawned on me before the headscratching drew blood from my
thinning scalp.<br />
<br />
In a Composite App such as Notes Mail, views are not really views
like they are in regular Notes apps. They are Components. Because I was
trying to turn a Component into a widget, I was getting a whole other,
not very useful set of choices than I expected.<br />
<br />
But, wait! What if I open Notes Mail in Basic Mode? Would I be able
to turn the Follow Up view into a widget then? The answer, to make this
long story less long, is YES. Worked like a charm.<br />
<br />
So, to recap:<br />
<br />
<ol>
<li>You can open a composite app like Notes Mail in Basic Mode when
Notes is still running in Standard Mode by pressing Ctrl+Alt while
clicking the app's link in the Open List.</li>
<li>You can turn a view in a composite app like Notes Mail into a widget
by first opening the app in Basic Mode as in #1, then clicking the
"Configure a Widget from Current Context" icon in the Toolbar, selecting
"Open this view", and clicking OK.</li>
</ol>
<br />
Pretty cool, nay?<br />
<br />
<br />Rob Kirklandhttp://www.blogger.com/profile/17751566264733637774noreply@blogger.com0tag:blogger.com,1999:blog-1666323458852118720.post-10339453257395560392010-09-13T21:18:00.000-04:002010-09-15T21:18:51.640-04:00A satisfying ending to a Domino 8.5.2 installation dilemma<div style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; color: black; font-family: Arial, Helvetica, sans-serif; font-size: 13px; margin-bottom: 8px; margin-left: 8px; margin-right: 8px; margin-top: 8px;"><div dir="ltr">Today I had one of those "walk-on-water" moments that occasionally make consulting satisfying. Over the weekend I assisted a client in upgrading nine Domino servers from version 7.0.2 to 8.5.2. The marathon upgrade went generally smoothly. The main problem with it was there were just not enough hours in the weekend to upgrade (via compact -c) all of the databases on all of the servers. In particular, the headquarters mail server has an eye-popping number of multi-gigabyte mail databases on it. Those top execs just can't bear to part with any of their mail, and of course you can't enforce quotas against them; they'd have you (a lowly tech) drawn-and-quartered if you tried. So the one mail server never did get all of its databases upgraded to ODS 51. But except for that and a couple other minor problems, everything was working great on Monday morning.</div><div dir="ltr">Then a field technician in England reported that he couldn't set up a Notes workstation for a user who had been registered the previous week. The Notes setup kept failing with the following error message:</div><div dir="ltr">The Policy and/or Settings document assigned to you has been edited by an unauthorized person. Please notify your Administrator that you cannot proceed with the client setup.</div><div dir="ltr">Some Googling revealed that this error message arises when a policy or settings document is (as the message plainly says) signed by one who is unauthorized to sign it.. How could this happen? As follows: An administrator might in the past have created Policy and/or Settings documents that worked just fine. But then the administrator left the company and his account was removed from the domain. As a result, the retired administrator's signatures on the Policy and/or Settings documents were no longer those of an authorized signer, which is defined as one who has Editor access to the Domino Directory and is assigned the Policy Creator and Policy Modifier roles. See Technotes 1110644 and 1205444. Both of these Technotes state further that, to re-sign a Policy or Settings document you can, among other techniques, edit and save it.</div><div dir="ltr">How did this apply to us? That was not clear. As we could plainly see in the Policies and Settings views, the signer of all of the the Policy and Settings documents in the domain was a generic user named "Administrator" who is still to this day being used to create new users and who has the requisite access rights and roles assigned. So the error message seemed to be bogus, telling us something which was demonstrably untrue. Nonetheless, we tried editing/saving the policy and settings documents to apply new signatures. And, according to the Policies and Settings views, this worked. The views showed that each newly saved document had a new signer. But even though this new signer also had sufficient rights and roles assigned, we discovered that we could not register a new user into the England OU. So our problem was not only that we couldn't set up a new workstation for users registered before the upgrade, but also that we couldn't register new users after the upgrade.</div><div dir="ltr">We were scratching our heads over this and hunkering down for a long siege against this problem, when one of us had the bright idea of looking at the console of the mail server in question. (In this particular domain, there are several regional OUs. Each region also has a dedicated mail server. Also, each OU has an organizational policy with several OU-specific settings documents assigned to it. So our problem was affecting the England OU, the England mail server, and the England-specific policy and settings documents.)</div><div dir="ltr">There on the England mail server's console, in bright purple letters, was a cascade of error messages, repeating every few seconds:</div><div _mce_style="padding-left: 30px;" dir="ltr" style="padding-left: 30px;">Policies and settings documents signed by XXXXX are no longer valid because this person does not have the required access level or roles to the Domino Directory.</div><br />
<div dir="ltr">More Googling revealed that this new error message had the same cause as the earlier message, that is, that a Policy or Settings document was signed by an insufficiently authorized entity. The server was trying to apply a mail policy to the mail users on the server, but it didn't like the signature on the policy or mail settings document. However, this message told us one other bit of information that the earlier message had left out, which was that the Policy or Settings document was signed by the mail server itself, not, as the Policies and Settings views claimed, by the Administrator who actually created or last edited each document. Either the error message or the views were lying to us.</div><div dir="ltr">But the server did not in fact have the Policy Creator or Policy Modifier roles assigned to it in the ACL of the Domino Directory. So that meant that the error messages were perhaps not bogus after all. Assigning those roles to the server in the ACL should have solved our problem. We'll never know, however, if it would have done so, because our second bout with Google revealed one other fact -- that there was another (newer?) way to re-sign the Policies and Settings documents:</div><br />
<div _mce_style="padding-left: 30px;" dir="ltr" style="padding-left: 30px;">Select the documents in the Policies or Settings views, then in the Actions menu choose Resign Policy.</div><br />
<div dir="ltr">We tried that and it worked like magic. The cascade of messages in the server's console abruptly stopped. Thereafter, we found we could once again register new users and set up Notes for them. Later we checked the other mail servers and discovered that the Mexico server was experiencing the same problem. So we re-signed all of the policies and settings documents. Just like that, the Mexico server's messages stopped too.</div><br />
<div dir="ltr">Conclusion: Something happened that shouldn't have when we upgraded two of the nine servers. Apparently that something is that, somehow, the upgraded servers' signatures were applied to the Policy and/or Settings documents. Also, the Policies and Settings views tell us that the last editor of a document is the signer of it, which makes sense. The Technotes cited above tell us that too. But in our case saving the Policy or Settings document did not apply a new signature to it. So the view is misleading in that regard (and so are the Technotes). I think I'll tell Lotus about this.</div><br />
</div>Rob Kirklandhttp://www.blogger.com/profile/17751566264733637774noreply@blogger.com0tag:blogger.com,1999:blog-1666323458852118720.post-90913555174301714092010-08-29T21:17:00.000-04:002010-09-15T21:17:36.166-04:00Lotus Notes Domino 8.5.2 so far - painful<div style="background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; color: black; font-family: Arial, Helvetica, sans-serif; font-size: 13px; margin-bottom: 8px; margin-left: 8px; margin-right: 8px; margin-top: 8px;">So far, we've attempted one Domino and four Notes 8.5.2 upgrades. The server installation went off cleanly, but took forever. Of the four Notes installs: One completed without errors (on a relatively clean, new Windows 7 machine). One completed but with problems (on a clean, old Vista machine), and I'll try a repair and see if that fixes it; otherwise, it's uninstall/reinstall. Two failed completely (on a Windows 7 and a Vista machine, both with lots of widgets). One was remedied by uninstall/reinstall. The other will go that route too when I find the time. The error, some of them, anyway, have to do with provisioning problems and MUI problems, and that's all I know at this time.<br />
Update: Repair of the one machine (where 8.5.2 installed by "with problems") had no positive effect. The machine is useable. But the Home tab reads "%str.HomeTitle.Keywords". That's the only problem at the moment, one that is not a killer. But the fact that the title of the Home tab is broken in that way implies that I'll encounter other problems. I think I'll just uninstall/reinstall and see if that fixes it.<br />
The one failure (Win7) was on Carlos's machine. He blamed the failure on a music widget. How he decided that was the cause of his problem, I don't know. But un/reinstall did fix it, so he says.<br />
The other failure (Vista) was on my primary machine. It also has lots of third-party widgets on it. We'll see what happens when I un/reinstall there.</div>Rob Kirklandhttp://www.blogger.com/profile/17751566264733637774noreply@blogger.com0tag:blogger.com,1999:blog-1666323458852118720.post-29659276216823022122010-08-15T21:15:00.000-04:002010-09-15T21:15:48.032-04:00Some thoughts about Lotus Domino high availability<div style="font-family: Arial, Helvetica, sans-serif; font-size: 13px;"><span style="font-family: sans-serif; font-size: x-small;">Someone wondered out loud today if a new Domino domain we're about to configure should rely on Domino clustering or Windows clustering to provide high availability. It occurred to me awhile back that another way of providing high availability would be to virtualize our servers. I'd intended to write something about this. Maybe now I will.</span><br />
<br />
<span style="font-family: sans-serif; font-size: x-small;">The goal is for our servers to be available for something approaching 24x7x365. Here is my first pass at this:</span><br />
<br />
<span style="font-family: sans-serif; font-size: small;"><b>Domino clustering</b></span></div><ul style="font-family: Arial, Helvetica, sans-serif; font-size: 13px;"><li><span style="font-family: sans-serif; font-size: x-small;">Up to six Domino servers can be clustered together.</span></li>
<li><span style="font-family: sans-serif; font-size: x-small;">The servers keep close tabs on each other.</span></li>
<li><span style="font-family: sans-serif; font-size: x-small;">They communicate frequently with each other.</span></li>
<li><span style="font-family: sans-serif; font-size: x-small;">They consume a lot of network bandwidth. Therefore, it's a good practice for the servers to be connected to a second network segment, dedicated to inter-server communications.</span></li>
<li><span style="font-family: sans-serif; font-size: x-small;">They consume a lot of processor time. Clustered servers a noticeably slower to respond to a user request than are non-clustered servers.</span></li>
<li><span style="font-family: sans-serif; font-size: x-small;">Not every cluster member need be identical. They can have different processors, different amounts of RAM and disk capacity, different OSes, different physical platforms, and different subsets of databases on them.</span></li>
<li><span style="font-family: sans-serif; font-size: x-small;">You can take down a cluster member for maintenance whenever you want (though you'll want to gently shoo the users off the server first) and Notes users will automatically fail over to another member of the cluster.</span></li>
<li><span style="font-family: sans-serif; font-size: x-small;">You can set up the cluster to fail HTTP users over as well.</span></li>
<li><span style="font-family: sans-serif; font-size: x-small;">You can tune each cluster member to turn away new requests upon reaching a defined level of activity - load balancing.</span></li>
<li><span style="font-family: sans-serif; font-size: x-small;">Domino admins would manage the cluster.</span></li>
<li><span style="font-family: sans-serif; font-size: x-small;">Domino Enterprise or Utility license.</span></li>
</ul><div style="font-family: Arial, Helvetica, sans-serif; font-size: 13px;"><span style="font-family: sans-serif; font-size: small;"><b>Windows clustering</b></span></div><ul style="font-family: Arial, Helvetica, sans-serif; font-size: 13px;"><li><span style="font-family: sans-serif; font-size: x-small;">Two Windows servers share access to a single drive array. One is the active server and runs a Domino server that resides on the shared drive array. The other is a hot backup and would take over control of the drive array and restart the Domino server from the array should the active server go down for any reason.</span></li>
<li><span style="font-family: sans-serif; font-size: x-small;">A short outage (less than a minute?) would exist until the Domino server came back up.</span></li>
<li><span style="font-family: sans-serif; font-size: x-small;">You could configure the two Windows servers to share two arrays. Each server could be active on one array, passive on the other. That way, you wouldn't be wasting a whole server for the sole purpose of insuring that the Domino server comes back up quickly should the active Windows box go down.</span></li>
<li><span style="font-family: sans-serif; font-size: x-small;">Windows admins would manage the cluster.</span></li>
<li><span style="font-family: sans-serif; font-size: x-small;">Special Windows licensing?</span></li>
</ul><div style="font-family: Arial, Helvetica, sans-serif; font-size: 13px;"><span style="font-family: sans-serif; font-size: small;"><b>Virtual machines</b></span></div><ul style="font-family: Arial, Helvetica, sans-serif; font-size: 13px;"><li><span style="font-family: sans-serif; font-size: x-small;">A virtual machine on which a Domino server resides and runs would itself reside on a LUN on a Storage Area Network (or a similar "independent-disk" technology). Any VM host that can access the LUN could host the VM running the Domino server.</span></li>
<li><span style="font-family: sans-serif; font-size: x-small;">If the host on which the Domino-resident VM was running should go down for any reason, another host could take control of the LUN and restart the Domino VM within a short period of time. This is the high availability.</span></li>
<li><span style="font-family: sans-serif; font-size: x-small;">If the VM on which Domino runs or Domino itself had to go down for any reason, the Domino server is out of service.</span></li>
<li><span style="font-family: sans-serif; font-size: x-small;">One could piggyback Domino clustering on top of the virtualization, so that, when a VM running Domino (or Domino itself running on the VM) goes down, Domino failover would cause users to find another Domino server in the cluster. (Could one also run Windows clusters comprised of two VMs? Would there be any benefit to doing so?)</span></li>
<li><span style="font-family: sans-serif; font-size: x-small;">The primary benefit of virtualizing the machine on which Domino runs is to make more intensive use of available hardware resources. One could run multiple VMs on a single VM host, rather than have to run each hosted machine on its own, dedicated physical box.</span></li>
<li><span style="font-family: sans-serif; font-size: x-small;">Another benefit of virtualization is that any machine dependent on old technology could continue to run as a virtual machine where it might not be able to continue existence as a physical machine if the underlying hardware/software platform is no longer available. Don't know that this is relevant to Domino.</span></li>
</ul>Rob Kirklandhttp://www.blogger.com/profile/17751566264733637774noreply@blogger.com0