Categories
Lotus Domino

Recover Lotus Notes Archive to standard mail file

Recover Lotus Notes archive to standard mail file

All the Lotus Notes archive mail file look similar with the standard mail file because they are using the same mail template. You might need to use the archive mail file to replace the existing mail file in server for certain cases. However you will notice that the mail archive will have some limitation/restriction such as

1. Cannot rename the database/mailbox name. You will see the name  “Archive” in the mail file

Cannot rename mailbox

2. No archive action from the menu

No Archive Action

 

This is due the to parameters/values configured in the Archive Database Profile that will treat this database is archive file. You have to delete/modify the Archive Database Profile in order to revert/recover the Lotus Notes archive into standard mail.

Solution to Revert/Recover the Lotus Notes archive into standard mail file:

1. After open the archive mail file, select Create – Agent from the menu

Create agent

2. Give a name for the agent

agent name

3. Under Initialize sub routine, enter the following code:

Sub Initialize()

Dim session As New NotesSession
Dim db As NotesDatabase
Dim doc As NotesDocument
Set db=session.CurrentDatabase
Set doc=db.GetProfileDocument("archive database profile")
Call doc.remove(True)
If doc Is Nothing Then
MsgBox "Archive Database Profile document was successfully removed. Please restart the Lotus Notes client"
Else
MsgBox "Profile Document WAS NOT Removed",48
End if

End Sub

remove archive database profile

 

4. After you saved the agent, you should be able to use the “revert archive to standard mail” (or whichever name you used to created the agent) agent from the Action menu

revert archive to standard mail action

5. Once you run the action/agent, a message will tell you the status and you have to restart the Lotus Notes client in for the view the result

6. After restarted the Lotus Notes client, you should be able to use the mail file as normal.

In case that you do not see the “Archive” action, then you have to refresh/replace the mail template.

Categories
Lotus Traveler

Lotus Traveler not sync after mail file restored

Lotus Traveler not sync after mail file restored. You might encounterd that Lotus Traveler in iphone/ipad unable to synchronize with IBM Lotus Domino server after restored user’s mail file. Restart, removed and reinstall the mail profile in iphone/ipad would not help much.

Solution for Lotus Traveler to synchonize with Lotus Domino Server after mail file restored:

1. Remove the mail profile from iphone / ipad

2. Find the device IP associaed with the user by running the command below in Domino Console

tell traveler show <user name>

3. You will be able to get the “Device ID” associated with the user from the result in the the previous step.

4. Delete the device from Lotus Traveler by the command below in Domino Console:

tell traveler delete <device id> <user name>

Note: If user have few device associated, you have to perform the same task to delete all the device.

5. Reinstall the mail profile in iPhone/iPad

6. The mail will start coming in.

Categories
Lotus Traveler

Lotus Traveler not working for iPhone / iPad

Lotus Traveler not working for iPhone / iPad

Lotus Traveler is working for Nokia Symbian but not for iPhone and iPad. You are able to login in Lotus Traveler website (example: http://server.domain.com/servlet/traveler) and generate the Apple profile. You would not ” Cannot Get Mail” error (as shown below) after you installed the Lotus Traveler profile.

Cannot Get Mail

Solution

This is most likely cause by the disabled HTTP Method. Check you Lotus Domino’s Notes.ini file and make sure you only disable TRACE in for HTTP method. Nothing more. The configuration should be like this:

HTTPDisableMethods=TRACE

Remove any other parameters in this HTTPDisableMethods other than TRACE method.

After modify the notes.ini, issue the following command in the Domino Console:

tell traveler quittell http quit

load http

load traveler

Delete existing Lotus Traveler profile from your iPhone/iPad and regenerate again from your Lotus Traveler server website.

Categories
Lotus Domino

Useful command for Lotus Domino/Notes server maintenance

Useful command for Lotus Domino/Notes server maintenance

Below are some of the useful commands for IBM Lotus Domino/Notes server maintenance. Use in Domino Console

Command Description
load compact [database] -C Uses copy-style compaction. Use this option to solve database corruption problems.
load compact [database] -B Uses in-place compaction, recovers unused space, reduces file size unless there’s a pending structural change in which case copy-style compacting occursUses in-place compaction, recovers unused space, reduces file size unless there’s a pending structural change in which case copy-style compacting occurs
load fixup [database] -F force fixup to check all the documents. Append “-J” if transaction log is enabled
load updall [database] -R -X Rebuilds all used views and rebuilds full-text indexes
tell router compact Compact the mailx.box
tell router update config Request mail router to update/refresh the mail routing path and cost
route * force to route all the mail out
load convert -U mail\mailfile * NewMailTemplate.ntf Replace mail nsf file with new template (normally used after version upgrade). You can use the command to convert to old template and then back to new template in case the user mail file pop-up some error message when user accessing it.
dbcache flush Flush the cache on holding/opening databases. Use the command if the Domino Console show the database is in-use and you need to do some maintenance task for the particular database.
drop all Drop all the existing connection to the server. If user is actively using the server, they will not reconnect to the server immediately. Normally use this command to clear out the idle connection prior to any maintenance task so that we know who is still using the server
Categories
Lotus Domino

How to repair Lotus Domino/Notes NSF file

How to repair IBM Lotus Domino/Notes NSF file

IBM Lotus Domino/Notes use NSF (Notes Storage Facility) file to storage the data together with the design. All the mail file in Lotus Domino/Notes is in *.nsf format. There are cases that these individual NSF file might get corrupted. Below are some of the example of corrupted nsf file message

Error compacting Mail *.nsf: Database is corrupt — Cannot allocate space

Cannot open NSF files

RRV bucket is corrupt

Solution

Repair the database while system is online

Run the following command in Domino Console one by one

dbcache flush
load compact [database] -C
load fixup [database] -F
load updall [database] -R -X

Repair the database with Lotus Domino shutdown

This is mainly for database that is always open and locked by Domino server or user access

1. Shutdown Lotus Domino server

2. Go to Lotus Domino installation folder

cd c:\Lotus\Domino

3. Run the repairing tasks

ncompact [database] -C
nfixup [database] -F
nupdall [database] -R -X

Notes: If the transaction log is enable, use with additional of “-J” switch for fixup and nfixup command

Reference:

https://www-304.ibm.com/support/docview.wss?uid=swg21102292

https://www-304.ibm.com/support/docview.wss?uid=swg21084388

https://www-304.ibm.com/support/docview.wss?uid=swg21085954

Categories
Lotus Domino

IBM Lotus Domino in Windows 2008 Server

IBM Lotus Domino in Windows 2008 Server

There is no more Domino Console due to the architecture changed in Windows 2008. The java server controller must be started so that you can view/manage thru the java console.

The start-up Lotus Domino service parameters for Lotus Domino in Windows 2008 Server registry must be correct in order to start the java server controller.

Registry key:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Lotus Domino Server\ImagePath

“C:\Lotus\Domino\nservice.exe”  “=C:\Lotus\Domino\notes.ini” “-jc” “-c”

 


Delete Lotus Domino Services
C:\Lotus\Domino\ntsvinst.exe -d -t”Lotus Domino Server”

 

Create New Lotus Domino Server to run under Domino Server Controller (Java)
sc create “Lotus Domino Server (Domino Server Controller)” binpath= “C:\Lotus\Domino\nservice.exe =C:\Lotus\Domino\notes.ini -jc -c” displayname= “Lotus Domino Server (Domino Server Controller)”

Categories
Lotus Traveler

Lotus Traveler (error 0x466)

Lotus Traveler (error 0x466)

Problem (Lotus Traveler failed to start)

> load traveler
12/21/2009 04:42:31 PM  Lotus Traveler: Server starting…
12/21/2009 04:42:31 PM  Lotus Traveler: The Lotus Traveler Server had an error opening the message queue TRAVELER, error 0x466.
12/21/2009 04:42:31 PM  Lotus Traveler: Unexpected Return code of 1,124 was received, processing continued.
12/21/2009 04:42:31 PM  Notes Traveler: WARNING *system Unexpected Return code of 1,124 was received, processing continued.

12/21/2009 04:42:31 PM  Lotus Traveler: Server stopping…
12/21/2009 04:42:31 PM  Notes Traveler: SEVERE *system Lotus Traveler Server could not be started, Exception was com.lotus.sync.admin.NTSInitException: The Lotus Traveler Server had an error opening the message queue TRAVELER, error 0x466..
com.lotus.sync.admin.NTSInitException: The Lotus Traveler Server had an error opening the message queue TRAVELER, error 0x466.
at com.lotus.sync.admin.MainTask.openDominoQueue(MainTask.java:516)
at com.lotus.sync.admin.MainTask.runNotes(MainTask.java:839)

12/21/2009 04:42:32 PM  Lotus Traveler: Server stopped.

Solution

Starting or rebooting the Traveler server will generally clear this issue up and return to normal function.

Upgrade to later version is the problem still arised.

Resource and Reference

http://www-01.ibm.com/support/docview.wss?uid=swg21406958

Categories
Lotus Domino

Disable Lotus Domino/Notes HTTP TRACE / TRACK Methods

Disable Lotus Domino/Notes HTTP TRACE / TRACK Methods

HTTP TRACE / TRACK Methods
Synopsis : Debugging functions are enabled on the remote web server.

Description :

The remote webserver supports the TRACE and/or TRACK methods. TRACE
and TRACK are HTTP methods which are used to debug web server
connections.

In addition, it has been shown that servers supporting the TRACE
method are subject to cross-site scripting attacks, dubbed XST for
“Cross-Site Tracing”, when used in conjunction with various weaknesses
in browsers. An attacker may use this flaw to trick your legitimate
web users to give him their credentials.

 

See also :

http://www.cgisecurity.com/whitehat-mirror/WH-WhitePaper_XST_ebook.pdf
http://www.apacheweek.com/issues/03-01-24
http://www.kb.cert.org/vuls/id/288308
http://www.kb.cert.org/vuls/id/867593

Solution : Disable these methods.

Risk factor :

Medium / CVSS Base Score : 5.0
(CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N)

Plugin output : Nessus sent the following TRACE request :

—————————— snip ——————————
TRACE /Nessus2072953470.html HTTP/1.1
Connection: Close
Host: 192.168.1.61
Pragma: no-cache
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Language: en
Accept-Charset: iso-8859-1,*,utf-8

—————————— snip ——————————

and received the following response from the remote server :

—————————— snip ——————————
HTTP/1.1 200 OK
Server: Lotus-Domino
Date: Fri, 11 Sep 2009 17:13:13 GMT
Connection: close
Pragma: no-cache
Cache-Control: no-cache
Expires: Fri, 11 Sep 2009 17:13:13 GMT
Content-Type: message/http
Content-Length: 294

TRACE /Nessus2072953470.html HTTP/1.1
Connection: Close
Host: 192.168.1.61
Pragma: no-cache
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Language: en
Accept-Charset: iso-8859-1,*,utf-8
—————————— snip ——————————

CVE : CVE-2003-1567, CVE-2004-2320
BID : 9506, 9561, 11604, 33374
Other references : OSVDB:877, OSVDB:3726, OSVDB:5648, OSVDB:50485

Nessus ID : 11213

How to Disable HTTP TRACE/TRACK for IBM Lotus Domino Server

Option 1:

If you are using Internet Sites, you have to edit Web Site document.

1. Go to Web Site document – Configuration tab

2. Un-check TRACE and OPTIONS

Option 2:

If you are using the Web Configuration view instead of Internet Site, you can disable HTTP methods by using the notes.ini variable HTTPDisableMethods with a value of the method name. 

Append the command below in to Notes.ini for LotusDomino Server

HTTPDisableMethods=TRACE

Restart HTTP Service:

Restart your HTTP service for the setting to take effect by the running the command below in Domino console:

Tell http restart

Option 3:

Run the following command from the Domino Console:

set configuration HTTPDisableMethods=TRACE

tell http restart

Remark: Do not disable CONNECT and OPTIONS method because it will be used by Lotus Traveler

Resouce and Reference: 

http://www-01.ibm.com/support/docview.wss?uid=swg21201202