Domino Thoughts

Missing Rules tab in server document?

Ted Hardenburgh — Tue, 14 Feb 2012 13:12:04 -0700

Admittedly, this is an issue that is a fringe, but thought I'd post it just in case.

Yesterday, I was working to configure a client's server to use mail journaling. Everything was going smooth until I went to edit a server configuration document to add the mail rule for a couple of servers. The Rules tab was missing. I was on the Admin client, so I tried it from the Notes client and the tab showed up. So I finished the configuration and went searching for the cause. I mean, wouldn't you want to administrator the server configurations from the Admin client??

Looking around, I quickly found a technote on this issue that appears to be a throwback to the "old" days of 6.5.4/7.0. Something in the design of the Domino directory changed and a field got left behind that causes this issue. This explains why I only saw this issue on some of the older servers and not the newer ones.

A quick agent to delete the field from the document (it's in the technote) and I can now manage the server configurations from the Admin client.

Lotusphere: GBS Admins Roundtable

Ted Hardenburgh — Tue, 10 Jan 2012 10:24:04 -0700

Next week at Lotusphere, GBS will be hosting a gathering of a few of our admin experts to give some quick tips and also have time to ask questions and discuss your issues. David Brown, Chris Whisonant and myself will be leading the discussions. The session will take place on Monday, January 16 at 1pm. Please use the link below to register.

This is a "private" event in our hospitality suite, so we need to know how many will be attending.

Ask the Experts
Admins of the Round Table
Monday 1pm - 2pm
We've gathered a collection of Expert Administrators to talk about Implementing Managed Replicas, User Communication, and Using HAProxy as well as tips and tricks for administering Domino, Sametime, Connections and more.

Space for this session is limited so register today to reserve your seat.

I hope to see you there or stop by the pedestals and say "Hi!"

Join me next week for a GROUP Talk webcast

Ted Hardenburgh — Thu, 1 Sep 2011 09:07:50 -0700

Please join me next week for a GROUP Talk webcast on "Two Minute Drills for Administrators" where I'll reprise my presentation from this year's PACLUG event. The event will be at 11am EDT on September 7.

This webcast will give you some tools to manage and maintain servers and users by teaching you easy, two-minute drills to implement in your office! Discussions will focus on Notes/Domino, Quickr, Sametime, and even Connections! By taking these "two-minute drills" back to your office, you will experience easier management and increased efficiency.

Hope to "see" you there!

PACLUG Session Info now available

Ted Hardenburgh — Tue, 21 Jun 2011 16:50:33 -0700

Thanks to all who came to the session. As promised, here's the take-home stuff from the session.

Blackberry SRP changes May 28

Ted Hardenburgh — Fri, 27 May 2011 08:48:02 -0700

If you have a BES in the US, you're going to want to check your SRP configuration on the BES to make sure it will still work properly after May 28. RIM is changing some IP addresses that will affect your users.

First off, check the BES configuration and make sure that the Blackberry Router configuration is pointing to us.srp.blackberry.com and not another host name. Next, run the SRP test and make sure that you see that a successful connection is made to the following new IP addresses: 216.9.242.33 and 68.171.,242.33. You will likely see two other addresses tested - those are being retired.

Depending on your firewall configuration, you may need to update it to allow traffic over port 3101 to those addresses. A better configuration would be to allow traffic based on these recommendations from RIM. That way you'll be ahead of the curve if a change is made in the future.

Enjoy!

Join me at PACLUG June 21-22 in Las Vegas

Ted Hardenburgh — Tue, 12 Apr 2011 09:04:21 -0700

I'll be presenting at the inaugural PACLUG meeting held this June 21-22 at the Planet Hollywood Hotel/Casino in Las Vegas. It is a free event that will be featuring a number of well-known speakers from the Pacific region of the US. If you're attending THE VIEW conferences that week, why not come in a couple days early and get some additional goodness before these meetings start.

And if you're a member of one of the LUGs in the Western US, you'll get a very nice discount to attend THE VIEW Admin and Developer conferences.

To register for the free PACLUG conference to to http://paclug.org.

Android, AT&T, Traveler - Get it working with Mac/Linux

Ted Hardenburgh — Mon, 7 Mar 2011 15:53:37 -0700

Here's the second part of working with an Android device from AT&T and Lotus Traveler. This installment will talk about installing the Traveler app on your device using Sideload Wonder Machine from a Mac or Linux computer. The screenshots will be from my Mac, but the principal is the same either way.

To start, download the Lotus Traveler app from your Traveler server. This isn't the installer app that is downloaded initially from the Traveler web page, this is the actual Traveler app that will run on your phone. You'll need to point your browser to it directly and download it yourself. The URL you'll use is http(s)://"your traveler server"/traveler/LotusTraveler/android/LotusTraveler.apk. Make sure you download the file named LotusTraveler.apk and not LotusInstaller.apk.

Now go download the Sideload Wonder Machine app (registration required) and install it according to the instructions. After SWM is installed, copy the LotusTraveler.apk file into the folder called "2-Place-App-Here" in the location where SWM is installed.

On your Android device, enable USB Debugging in Settings > Applications > Development.

Connect your phone to the Mac or Linux computer and allow the USB drivers to be installed if they aren't already.

Open a Terminal session on your Mac and navigate to the installed location of SWM. In my case, it is in my home folder in the swm-mac folder. You can see the listing of files and folders after I copied the LotusTraveler.apk file to the appropriate location.

Execute the menu.sh script and you'll see the menu below. Choose "1. Push app to phone" to begin the install process.

After choosing the install option, you'll see a prompt reminding you to have the apk file in the correct location. Press Enter to continue and you'll next see the listing of apps available to be installed. Press Enter again and it will push the app to the phone. The password that the app is requesting is your Mac account password.

Once the install is done, you'll see the option to restart your phone. Traveler doesn't require the restart. You can go in and configure your Traveler server connection and begin receiving email, calendar and contact data from Domino on your phone.

Android, AT&T, Traveler - Getting them to play nice

Ted Hardenburgh — Mon, 7 Mar 2011 09:11:01 -0700

So, if you're a Lotus Notes user who bought an Android device on the AT&T network, you probably want to try out Lotus Traveler. Unfortunately, when you try to install Traveler on your device, you'll get a rude awakening. AT&T doesn't like apps that aren't in the market and they block you from installing it.

That's where a nice app called Sideload Wonder Machine comes in. This post will cover using it on Windows to install Lotus Traveler, and another post will cover Mac (and Linux).

First off, you'll need to download the Lotus Traveler app from your Traveler server. This isn't the installer app that is downloaded initially from the Traveler web page. You'll need to point your browser to it directly and download it yourself. The URL you'll use is http(s)://"your traveler server"/traveler/LotusTraveler/android/LotusTraveler.apk. Make sure you download the file named LotusTraveler.apk and not LotusInstaller.apk.

Now go download the Sideload Wonder Machine app (registration required) and install it according to the instructions. Once you're done, you'll be ready to go.

On your Android device, enable USB Debugging in Settings > Applications > Development.

Connect your phone to the PC and allow the USB drivers to be installed if they aren't already.

Launch SWM and click the Choose APK file. Navigate to the download location and choose the APK file.

Click the Install button and you'll see a command prompt with the progress. (You may also get a prompt from Windows asking permission for the app to run.)

Close out of SWM and unplug your device and you'll be ready to login to Traveler and start syncing.

GROUP Talk this Wednesday - Sametime 8.5 installs and Domino 8.5.2 administration

Ted Hardenburgh — Mon, 8 Nov 2010 10:29:55 -0700

So you can't make it to the ILUG conference in Belfast, what to do? Join GROUP online for a webinar with Chris Whisonant, Phil Witton and me, the "Admins of the Round Table" to talk about Sametime 8.5 installs and Domino 8.5.2 Administration. Bring your questions for our round table discussion and also we'll cover the Sametime 8.5.x install process and what's new in the Domino 8.5.1 and 8.5.2 releases that administrators should be checking out.

Join us this Wednesday, November 10 from 11am - 12pm ET (8-9am PT). Go to http://gbs.com/events for more info or click here to register for the webcast.

"See" you this Wednesday!

Domino won’t let that user on to the server? Try this...

Ted Hardenburgh — Thu, 26 Aug 2010 08:43:13 -0700

Have you ever deleted a user from Domino and added them to the Deny Access group only to have HR come back and say, "We've rehired John Doe and he needs back into Notes right now." Of course you have, and if you've ever done this, you may have come across an issue trying to get the user connected back in after removing their name from the Deny Access group and trying to get the user setup in Notes again. This is because the NameLookup cache hasn't expired.

To get the user on to the server, you can issue the command "show nlcache reset" on each server they need access to. So if you've got a mail server, directory server, catalog server, Sametime server, app server that they need to get on to, you'll need to go to each server's console and issue the command. Or, you can use the Send Command to Selected Servers dialog in the admin client to send the command once to all the servers you want.

Another use for this command is if a user changes their Internet password and it "isn't working" - submit the command and they'll be able to get in.

Directory Assistance - watch for design changes

Ted Hardenburgh — Tue, 27 Apr 2010 10:10:07 -0700

Working on an issue with directory assistance this morning - an admin had created a new directory database to support external users and added it to the existing DA.nsf. While testing the database, the test external users couldn't login - got an invalid password error everytime. Reviewing the configurations, everything looked fine.

I got involved and enabled debug_directory_assistance=1 and debug_namelookup=1 and started testing. The debug output revealed that the search wasn't hitting the new directory database, even though a "show xdir" showed it was there and further checking revealed it was configured as expected.

Then I went to look at the design and found out something interesting. There were duplicate views and forms in the database, and the database was using a "newer" design than the server. After replacing the design of the database and rebuilding the views, the users were able to login successfully.

There is a technote that describes this situation as well, though it refers to Domino 7, guess it isn't just that release ;). The important thing to look for is two "Directory Assistance" views visible in the view navigator. If you see this, you'll want to replace the design.

Help us find a cure for cystic fibrosis

Ted Hardenburgh — Wed, 14 Apr 2010 16:30:28 -0700

As many of you that know me are aware, my son Andrew has cystic fibrosis. He's 15 now, a freshman in high school and on the freshman baseball team and also participates in Model United Nations. He's pretty healthy for someone with the disease and we're very grateful.

Great Strides is the biggest fund raiser for the Cystic Fibrosis Foundation and I'm asking for your help. Please make a donation by clicking the link here, or use the button on the right side of the website. The CF Foundation is the biggest supporter of research to find a cure and development of new therapies for CF patients.

Please watch the video by comedian and long-time CF Foundation supporter Lewis Black ("The Daily Show") for more information. Thanks!

You can find more info at his site - http://andrewsangels.com

How to max out a Notes database

Ted Hardenburgh — Fri, 26 Feb 2010 07:43:00 -0700

Working with a client recently, we came across some unusual behavior with one mail file. The user reported that his database had gotten to be 64GB and he wasn't sure how. Looking at the database properties, it did show up as 64GB, but there were only around 10K documents and the percent used in the database was around 3%. Something wasn't quite right.

Running a compact -c managed to get the database back down to around 2 GB, but over a few days, the database grew again to where it was 7 GB with no document growth as the user was archiving documents as well. I created a new replica of the database and monitored the size for a few days and it remained steady, nothing like the original. Looking at the database properties on the original database, I found that the Advanced Database property to "Optimize Document Table Map" was checked for some reason. This isn't the normal setting for a mail file, and apparently there's a reason for it.

While this setting is supposed to improve performance of databases, in this case it didn't. This may be due in part to the use of views that are Form specific can cause too many documents to be eligible for inclusion in a view - I'm not a developer so I can't be definitive about it.

To fix this issue, a compact -f was executed to disable the setting and correct the database size. After that was done, the database has seen "normal" growth since.

So the lesson here is - just because you read that something is good for you, doesn't always make it so.

Lotus Notes Diagnostic Failure Reports - How Not to Use Them

Ted Hardenburgh — Wed, 24 Feb 2010 09:30:18 -0700

I came across a Twitter post that referenced a Facebook photo gallery (Facebook login required) that a user posted regarding all the crashes and fault reports he was filling out, and evidently not getting any response. Reading the comments the user adds, he isn't getting a response from the recipient of the comments.

The fault report can be a valuable tool in resolving issues - or it can send your users further over the edge if not used wisely. Here are my suggestions if you're going to enable comment collection on the fault reports:

If you're going to ask your users for comments after a crash, you better read them and act on them. They are already "unhappy" about whatever lost documents/data they were working on, don't make it worse by not doing anything with the information they give you.

Respond to the comments. Acknowledge the user's comment so they at least think you're doing something about it. That way the user gets that "warm fuzzy" feeling that you care. This alone can help win a user over.

If you don't want the comments, configure the ADC to just submit the crash files in the background so the user isn't involved. This way you'll get the information you want, and not make your user any more upset than they currently might be.

Actually look at the diagnostic reports and see what's going on!! I can't tell you how many times I take a look at a customer environment where they have diagnostic collection configured and just ignore it - it's a black hole that apparently no one cares about. Well, my friends, that's the first step to user/management anger and enough reason to find something else that "works" better.

One more thing, if you collect the crash info, run the analyzer task on the database so you can see if there are some issues occurring more often than others and then find the fix. Many times there's a Hot Fix or update to a new maintenance release that resolves the issue. Things you can push out easily with SmartUpgrade - this is where it really proves useful.

IBM Tech Note - What is Automated Diagnostic Collection?

N/D 8.5 Admin Help - Setting up automatic diagnostic data collection on clients

Deploying Blackberry Custom Apps and device.xml

Ted Hardenburgh — Wed, 23 Sep 2009 11:17:41 -0700

We're working with a customer on deploying a custom app to some users' Blackberry devices and everything so far has gone well. One user called to say that they haven't seen the icon on their device yet. Going through the BES policy logs (thankfully, one of the smaller logs), I found that the user was causing the following error to be written to the log:

[20000] (09/15 13:47:13.750):{0xB70} {username@domain.com, PIN=XXXXXXXX, UserId=419}PollForMissingApps: GetHHCodePackages reported: HHCM_DEVICE_NOT_SUPPORTED. Upgrade your copy of device.xml

Device.xml is the "master" list of Blackberry devices. It includes model numbers, networks, and other information. It is something that is copied into software packages by the apploader. If the device isn't listed in the device.xml file, the software doesn't get deployed. Checking the BES, the user had a model 8830m and our device.xml on the server didn't know what that was. So there you go... any devices put out since this client's BES software was installed - and it's not that old, would be excluded from installing software.

To resolve the issue, you need an updated device.xml. Where does one obtain a new version if they aren't ready to install BES 5.0? Why, update your Blackberry Desktop Software, of course. There's a RIM technote that tells the reader to just install the desktop software on the server, but why install Desktop software on a Server, especially when all you need is one file? How about this - update the Desktop software on your Desktop and copy the file you need to the server? The device.xml file is kept in c:\Program Files\Common Files\Research in Motion\AppLoader. You need to replace it in the similar location on the BES server.

Next, on the BES server, go to the :\Program Files\Common Files\Research in Motion\shared\applications folder and in each application you've deployed, delete the PkgDbCache.xml and the specification.pkg file. Also, go to the :\Program Files\Research in Motion\Blackberry Enterprise Server\PackageCace folder and delete all the subfolders in it.

Now you can open up a command prompt and go to :\Program Files\Common Files\Research in Motion\AppLoader and enter the command "loader /reindex" to rebuild all the packages and include the updated device.xml.

If you need to resend the software to the users, you can go into the Blackberry Manager, right-click on the user's name and choose the "Deploy Applications" action to force the policy to be checked. Once this was done, the user's device picked up the software deployment policy and downloaded the application.

So, if your users get new devices quicker than you update the BES software, you'll want to check the device.xml file and update it before you deploy a custom app to them via the BES.

And one other item - what's with the using "you" and "your" for errors that reference the server. Why not make the error "Upgrade the copy of device.xml on the server" - that's much plainer and easily understood. By no means is this the only instance I've seen that type of error, but just thought I'd throw that out there.

SMTP Mail tries to route to A record instead of MX

Ted Hardenburgh — Wed, 10 Jun 2009 08:33:23 -0700

We've seen this at a couple of clients recently running Domino 8.0.x. A user sends an email to a known, valid email address and it gets rejected. The user receives a Delivery Failure Report with a generic "SMTP Permanent Error" message. We get involved and look at the log and notice that the server which the message was sent to was "domain.com". Looking up the MX records, we find that the MX record should be mail.domain.com or sometimes mail.hostingprovider.com. Domino is using the domain's A record to send mail to for some reason. Evidently the cache used by Domino is incorrect. Stopping and starting the router resolves the issue for the near term, but we have seen this come back periodically.

There's a technote that talks about this issue. The workaround is to create a program document that periodically calls the "tell router update config" command which forces the router to clear the cache and try all pending messages again. We normally will set the program to run once an hour to reduce the possibility of a user reporting an issue. There also may be a hotfix for this if you contact IBM Support. The technote refers to Domino 7, 8 and 8.5 as possible releases where this can occur.

For those that may not know how to create a program doc that calls a server console command:

Create a new program document in the Domino directory.

On the Basics tab, the Program field should have "nserver" entered.

In the command field, enter "-c "tell router update config"".

Change the schedule to whatever you're comfortable with.

Save and close the document.

Great Strides 2009 - Finding a cure for Cystic Fibrosis

Ted Hardenburgh — Thu, 23 Apr 2009 05:30:00 -0700

My son Andrew has Cystic Fibrosis, a life-threatening genetic disease. 30,000 children and adults in the US have CF. Even as recently as the 1980's, the average life expectancy of a CF patient was less than 15 years. Today, the average is 37 years. This is due to the remarkable research and the results of that research that is funded in part or in whole by the Cystic Fibrosis foundation. The CF Foundation is now funding pharma companies to help develop treatments for the symptoms that affect CF patients as well as funding research to find a cure for CF.

Andrew is now 14 years old, in eighth grade and looking forward to starting high school next year. He plays on two baseball teams and the school soccer team, as well as running around with friends. He is considered by his doctors as a very healthy CF patient, but still was hospitalized twice in the last 18 months for operations to remove mucus build-up in his sinuses, a side effect of his CF, as well as a CF "tune-up."

This is an exciting time for CF researchers and CF families. One of the drugs funded by the CF Foundation is in Phase 2 trials. This drug treats one of the basic causes of CF, and the results so far are very encouraging.

The Great Strides walk that my family will participate in next month is the major fund-raising effort of the Cystic Fibrosis Foundation and provides the funds to support the types of research that are yielding fantastic results. Please consider making a donation at my walk page to help us find a cure for Andrew and everyone else that has Cystic Fibrosis. Ninety cents of every dollar donated to CFF goes towards research and other efforts to support CF patients.

Please donate and help Andrew and others with CF. For more information about Andrew and CF, check out the Andrew's Angels website.

Thanks!

Lotusphere Comes To You - LA Version

Ted Hardenburgh — Thu, 9 Apr 2009 11:59:06 -0700

Next Tuesday, April 14 is the Los Angeles area LCTY. The venue has moved due to responses from the IBM El Segundo facility to the Embassy Suites - LAX South. If you haven't RSVP'd yet, you better do it quickly, go to the IBM website and sign-up today.

I will be at the event, so if anyone wants to meet up afterwards for a beverage, add a comment or email me.

PS - If you're in Florida next week Lotus911 is sponsoring LCTY events in Tallahassee and Jacksonville on April 14 and 15, respectively. Go to http://www.lotus911.com/register to sign up.

The Mysterious Disappearing Pickup Truck

Ted Hardenburgh — Wed, 11 Feb 2009 17:39:54 -0700

Too funny...a driver's truck drives off on its own at a 7-11 store in Laguna Beach.

The story

What Really Happens When You Disable Soft-Deletions in the 8.5 Mail file - An Update

Ted Hardenburgh — Mon, 9 Feb 2009 09:39:01 -0700

This is an "update" to my previous post where I posted the link to the less than helpful "technote" that stated that disabling soft-deletes in the 8.x mail files is no longer supported. A couple of comments on the post, and some other posts asked the question - "so what does this mean?" and I was wondering the same thing, since the "technote" offers no actual technical information aside from a screenshot of the database properties dialog. It would have been nice to include some background information, but since I'm sure the person that knows is busy looking for a job inside IBM or elsewhere, we should cut them some slack.

In my testing of what happens, it appears that the only difference is that the "Delete" toolbar action (the trash can) no longer appears when the soft delete option is disabled. It is replaced with the "X" delete toolbar action item and that the user is prompted that the document(s) will be immediately removed from the mail file. You should be aware that disabling Soft Deletions in an existing database will result in all currently soft-deleted documents being purged from the database once you change the setting, but you'll get a warning reminding you when you change the setting.

With Soft Deletes:

Without Softdeletes:

This cascades to all other views and folders (based on, or upgraded to, the new template design). Now, what this means as to "support" from IBM, I guess they'll tell you to re-enable the Soft Deletion setting if you call them with an issue.

Aside from that, in my rather short review of the issue, I don't see anything critical. For me the bigger issue with regards to soft deletes is, "Why disable them?" With soft deletions, the user has the option to "undelete" something they accidentally deleted, the user isn't interrupted with a dialog when deleting and it just looks, feels and is more elegant and user-friendly. Using hard deletes is a nuisance to the user.

I'll keep my eye on this, but if, say maybe, the author of the original un-technote wants to update the document with useful information so we know better why it's not supported, that wouldn't be a bad thing either.

PS - Kathleen pinged me to say that the technote in question will be updated soon.