Categories
Lotus Domino

Recover Lotus Notes Archive to standard mail file

Recover Lotus Notes archive to standard mail file

All the Lotus Notes archive mail file look similar with the standard mail file because they are using the same mail template. You might need to use the archive mail file to replace the existing mail file in server for certain cases. However you will notice that the mail archive will have some limitation/restriction such as

1. Cannot rename the database/mailbox name. You will see the name  “Archive” in the mail file

Cannot rename mailbox

2. No archive action from the menu

No Archive Action

 

This is due the to parameters/values configured in the Archive Database Profile that will treat this database is archive file. You have to delete/modify the Archive Database Profile in order to revert/recover the Lotus Notes archive into standard mail.

Solution to Revert/Recover the Lotus Notes archive into standard mail file:

1. After open the archive mail file, select Create – Agent from the menu

Create agent

2. Give a name for the agent

agent name

3. Under Initialize sub routine, enter the following code:

Sub Initialize()

Dim session As New NotesSession
Dim db As NotesDatabase
Dim doc As NotesDocument
Set db=session.CurrentDatabase
Set doc=db.GetProfileDocument("archive database profile")
Call doc.remove(True)
If doc Is Nothing Then
MsgBox "Archive Database Profile document was successfully removed. Please restart the Lotus Notes client"
Else
MsgBox "Profile Document WAS NOT Removed",48
End if

End Sub

remove archive database profile

 

4. After you saved the agent, you should be able to use the “revert archive to standard mail” (or whichever name you used to created the agent) agent from the Action menu

revert archive to standard mail action

5. Once you run the action/agent, a message will tell you the status and you have to restart the Lotus Notes client in for the view the result

6. After restarted the Lotus Notes client, you should be able to use the mail file as normal.

In case that you do not see the “Archive” action, then you have to refresh/replace the mail template.

Categories
Lotus Domino

Useful command for Lotus Domino/Notes server maintenance

Useful command for Lotus Domino/Notes server maintenance

Below are some of the useful commands for IBM Lotus Domino/Notes server maintenance. Use in Domino Console

Command Description
load compact [database] -C Uses copy-style compaction. Use this option to solve database corruption problems.
load compact [database] -B Uses in-place compaction, recovers unused space, reduces file size unless there’s a pending structural change in which case copy-style compacting occursUses in-place compaction, recovers unused space, reduces file size unless there’s a pending structural change in which case copy-style compacting occurs
load fixup [database] -F force fixup to check all the documents. Append “-J” if transaction log is enabled
load updall [database] -R -X Rebuilds all used views and rebuilds full-text indexes
tell router compact Compact the mailx.box
tell router update config Request mail router to update/refresh the mail routing path and cost
route * force to route all the mail out
load convert -U mail\mailfile * NewMailTemplate.ntf Replace mail nsf file with new template (normally used after version upgrade). You can use the command to convert to old template and then back to new template in case the user mail file pop-up some error message when user accessing it.
dbcache flush Flush the cache on holding/opening databases. Use the command if the Domino Console show the database is in-use and you need to do some maintenance task for the particular database.
drop all Drop all the existing connection to the server. If user is actively using the server, they will not reconnect to the server immediately. Normally use this command to clear out the idle connection prior to any maintenance task so that we know who is still using the server
Categories
Lotus Domino

How to repair Lotus Domino/Notes NSF file

How to repair IBM Lotus Domino/Notes NSF file

IBM Lotus Domino/Notes use NSF (Notes Storage Facility) file to storage the data together with the design. All the mail file in Lotus Domino/Notes is in *.nsf format. There are cases that these individual NSF file might get corrupted. Below are some of the example of corrupted nsf file message

Error compacting Mail *.nsf: Database is corrupt — Cannot allocate space

Cannot open NSF files

RRV bucket is corrupt

Solution

Repair the database while system is online

Run the following command in Domino Console one by one

dbcache flush
load compact [database] -C
load fixup [database] -F
load updall [database] -R -X

Repair the database with Lotus Domino shutdown

This is mainly for database that is always open and locked by Domino server or user access

1. Shutdown Lotus Domino server

2. Go to Lotus Domino installation folder

cd c:\Lotus\Domino

3. Run the repairing tasks

ncompact [database] -C
nfixup [database] -F
nupdall [database] -R -X

Notes: If the transaction log is enable, use with additional of “-J” switch for fixup and nfixup command

Reference:

https://www-304.ibm.com/support/docview.wss?uid=swg21102292

https://www-304.ibm.com/support/docview.wss?uid=swg21084388

https://www-304.ibm.com/support/docview.wss?uid=swg21085954

Categories
Lotus Domino

IBM Lotus Domino in Windows 2008 Server

IBM Lotus Domino in Windows 2008 Server

There is no more Domino Console due to the architecture changed in Windows 2008. The java server controller must be started so that you can view/manage thru the java console.

The start-up Lotus Domino service parameters for Lotus Domino in Windows 2008 Server registry must be correct in order to start the java server controller.

Registry key:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Lotus Domino Server\ImagePath

“C:\Lotus\Domino\nservice.exe”  “=C:\Lotus\Domino\notes.ini” “-jc” “-c”

 


Delete Lotus Domino Services
C:\Lotus\Domino\ntsvinst.exe -d -t”Lotus Domino Server”

 

Create New Lotus Domino Server to run under Domino Server Controller (Java)
sc create “Lotus Domino Server (Domino Server Controller)” binpath= “C:\Lotus\Domino\nservice.exe =C:\Lotus\Domino\notes.ini -jc -c” displayname= “Lotus Domino Server (Domino Server Controller)”

Categories
Lotus Domino

Disable Lotus Domino/Notes HTTP TRACE / TRACK Methods

Disable Lotus Domino/Notes HTTP TRACE / TRACK Methods

HTTP TRACE / TRACK Methods
Synopsis : Debugging functions are enabled on the remote web server.

Description :

The remote webserver supports the TRACE and/or TRACK methods. TRACE
and TRACK are HTTP methods which are used to debug web server
connections.

In addition, it has been shown that servers supporting the TRACE
method are subject to cross-site scripting attacks, dubbed XST for
“Cross-Site Tracing”, when used in conjunction with various weaknesses
in browsers. An attacker may use this flaw to trick your legitimate
web users to give him their credentials.

 

See also :

http://www.cgisecurity.com/whitehat-mirror/WH-WhitePaper_XST_ebook.pdf
http://www.apacheweek.com/issues/03-01-24
http://www.kb.cert.org/vuls/id/288308
http://www.kb.cert.org/vuls/id/867593

Solution : Disable these methods.

Risk factor :

Medium / CVSS Base Score : 5.0
(CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N)

Plugin output : Nessus sent the following TRACE request :

—————————— snip ——————————
TRACE /Nessus2072953470.html HTTP/1.1
Connection: Close
Host: 192.168.1.61
Pragma: no-cache
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Language: en
Accept-Charset: iso-8859-1,*,utf-8

—————————— snip ——————————

and received the following response from the remote server :

—————————— snip ——————————
HTTP/1.1 200 OK
Server: Lotus-Domino
Date: Fri, 11 Sep 2009 17:13:13 GMT
Connection: close
Pragma: no-cache
Cache-Control: no-cache
Expires: Fri, 11 Sep 2009 17:13:13 GMT
Content-Type: message/http
Content-Length: 294

TRACE /Nessus2072953470.html HTTP/1.1
Connection: Close
Host: 192.168.1.61
Pragma: no-cache
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Language: en
Accept-Charset: iso-8859-1,*,utf-8
—————————— snip ——————————

CVE : CVE-2003-1567, CVE-2004-2320
BID : 9506, 9561, 11604, 33374
Other references : OSVDB:877, OSVDB:3726, OSVDB:5648, OSVDB:50485

Nessus ID : 11213

How to Disable HTTP TRACE/TRACK for IBM Lotus Domino Server

Option 1:

If you are using Internet Sites, you have to edit Web Site document.

1. Go to Web Site document – Configuration tab

2. Un-check TRACE and OPTIONS

Option 2:

If you are using the Web Configuration view instead of Internet Site, you can disable HTTP methods by using the notes.ini variable HTTPDisableMethods with a value of the method name. 

Append the command below in to Notes.ini for LotusDomino Server

HTTPDisableMethods=TRACE

Restart HTTP Service:

Restart your HTTP service for the setting to take effect by the running the command below in Domino console:

Tell http restart

Option 3:

Run the following command from the Domino Console:

set configuration HTTPDisableMethods=TRACE

tell http restart

Remark: Do not disable CONNECT and OPTIONS method because it will be used by Lotus Traveler

Resouce and Reference: 

http://www-01.ibm.com/support/docview.wss?uid=swg21201202