Categories
Lotus Traveler

Lotus Traveler not sync after mail file restored

Lotus Traveler not sync after mail file restored. You might encounterd that Lotus Traveler in iphone/ipad unable to synchronize with IBM Lotus Domino server after restored user’s mail file. Restart, removed and reinstall the mail profile in iphone/ipad would not help much.

Solution for Lotus Traveler to synchonize with Lotus Domino Server after mail file restored:

1. Remove the mail profile from iphone / ipad

2. Find the device IP associaed with the user by running the command below in Domino Console

tell traveler show <user name>

3. You will be able to get the “Device ID” associated with the user from the result in the the previous step.

4. Delete the device from Lotus Traveler by the command below in Domino Console:

tell traveler delete <device id> <user name>

Note: If user have few device associated, you have to perform the same task to delete all the device.

5. Reinstall the mail profile in iPhone/iPad

6. The mail will start coming in.

Categories
Lotus Traveler

Lotus Traveler not working for iPhone / iPad

Lotus Traveler not working for iPhone / iPad

Lotus Traveler is working for Nokia Symbian but not for iPhone and iPad. You are able to login in Lotus Traveler website (example: http://server.domain.com/servlet/traveler) and generate the Apple profile. You would not ” Cannot Get Mail” error (as shown below) after you installed the Lotus Traveler profile.

Cannot Get Mail

Solution

This is most likely cause by the disabled HTTP Method. Check you Lotus Domino’s Notes.ini file and make sure you only disable TRACE in for HTTP method. Nothing more. The configuration should be like this:

HTTPDisableMethods=TRACE

Remove any other parameters in this HTTPDisableMethods other than TRACE method.

After modify the notes.ini, issue the following command in the Domino Console:

tell traveler quittell http quit

load http

load traveler

Delete existing Lotus Traveler profile from your iPhone/iPad and regenerate again from your Lotus Traveler server website.

Categories
Lotus Domino

How to repair Lotus Domino/Notes NSF file

How to repair IBM Lotus Domino/Notes NSF file

IBM Lotus Domino/Notes use NSF (Notes Storage Facility) file to storage the data together with the design. All the mail file in Lotus Domino/Notes is in *.nsf format. There are cases that these individual NSF file might get corrupted. Below are some of the example of corrupted nsf file message

Error compacting Mail *.nsf: Database is corrupt — Cannot allocate space

Cannot open NSF files

RRV bucket is corrupt

Solution

Repair the database while system is online

Run the following command in Domino Console one by one

dbcache flush
load compact [database] -C
load fixup [database] -F
load updall [database] -R -X

Repair the database with Lotus Domino shutdown

This is mainly for database that is always open and locked by Domino server or user access

1. Shutdown Lotus Domino server

2. Go to Lotus Domino installation folder

cd c:\Lotus\Domino

3. Run the repairing tasks

ncompact [database] -C
nfixup [database] -F
nupdall [database] -R -X

Notes: If the transaction log is enable, use with additional of “-J” switch for fixup and nfixup command

Reference:

https://www-304.ibm.com/support/docview.wss?uid=swg21102292

https://www-304.ibm.com/support/docview.wss?uid=swg21084388

https://www-304.ibm.com/support/docview.wss?uid=swg21085954

Categories
Lotus Domino

IBM Lotus Domino in Windows 2008 Server

IBM Lotus Domino in Windows 2008 Server

There is no more Domino Console due to the architecture changed in Windows 2008. The java server controller must be started so that you can view/manage thru the java console.

The start-up Lotus Domino service parameters for Lotus Domino in Windows 2008 Server registry must be correct in order to start the java server controller.

Registry key:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Lotus Domino Server\ImagePath

“C:\Lotus\Domino\nservice.exe”  “=C:\Lotus\Domino\notes.ini” “-jc” “-c”

 


Delete Lotus Domino Services
C:\Lotus\Domino\ntsvinst.exe -d -t”Lotus Domino Server”

 

Create New Lotus Domino Server to run under Domino Server Controller (Java)
sc create “Lotus Domino Server (Domino Server Controller)” binpath= “C:\Lotus\Domino\nservice.exe =C:\Lotus\Domino\notes.ini -jc -c” displayname= “Lotus Domino Server (Domino Server Controller)”

Categories
Lotus Traveler

Lotus Traveler (error 0x466)

Lotus Traveler (error 0x466)

Problem (Lotus Traveler failed to start)

> load traveler
12/21/2009 04:42:31 PM  Lotus Traveler: Server starting…
12/21/2009 04:42:31 PM  Lotus Traveler: The Lotus Traveler Server had an error opening the message queue TRAVELER, error 0x466.
12/21/2009 04:42:31 PM  Lotus Traveler: Unexpected Return code of 1,124 was received, processing continued.
12/21/2009 04:42:31 PM  Notes Traveler: WARNING *system Unexpected Return code of 1,124 was received, processing continued.

12/21/2009 04:42:31 PM  Lotus Traveler: Server stopping…
12/21/2009 04:42:31 PM  Notes Traveler: SEVERE *system Lotus Traveler Server could not be started, Exception was com.lotus.sync.admin.NTSInitException: The Lotus Traveler Server had an error opening the message queue TRAVELER, error 0x466..
com.lotus.sync.admin.NTSInitException: The Lotus Traveler Server had an error opening the message queue TRAVELER, error 0x466.
at com.lotus.sync.admin.MainTask.openDominoQueue(MainTask.java:516)
at com.lotus.sync.admin.MainTask.runNotes(MainTask.java:839)

12/21/2009 04:42:32 PM  Lotus Traveler: Server stopped.

Solution

Starting or rebooting the Traveler server will generally clear this issue up and return to normal function.

Upgrade to later version is the problem still arised.

Resource and Reference

http://www-01.ibm.com/support/docview.wss?uid=swg21406958

Categories
Lotus Domino

Disable Lotus Domino/Notes HTTP TRACE / TRACK Methods

Disable Lotus Domino/Notes HTTP TRACE / TRACK Methods

HTTP TRACE / TRACK Methods
Synopsis : Debugging functions are enabled on the remote web server.

Description :

The remote webserver supports the TRACE and/or TRACK methods. TRACE
and TRACK are HTTP methods which are used to debug web server
connections.

In addition, it has been shown that servers supporting the TRACE
method are subject to cross-site scripting attacks, dubbed XST for
“Cross-Site Tracing”, when used in conjunction with various weaknesses
in browsers. An attacker may use this flaw to trick your legitimate
web users to give him their credentials.

 

See also :

http://www.cgisecurity.com/whitehat-mirror/WH-WhitePaper_XST_ebook.pdf
http://www.apacheweek.com/issues/03-01-24
http://www.kb.cert.org/vuls/id/288308
http://www.kb.cert.org/vuls/id/867593

Solution : Disable these methods.

Risk factor :

Medium / CVSS Base Score : 5.0
(CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N)

Plugin output : Nessus sent the following TRACE request :

—————————— snip ——————————
TRACE /Nessus2072953470.html HTTP/1.1
Connection: Close
Host: 192.168.1.61
Pragma: no-cache
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Language: en
Accept-Charset: iso-8859-1,*,utf-8

—————————— snip ——————————

and received the following response from the remote server :

—————————— snip ——————————
HTTP/1.1 200 OK
Server: Lotus-Domino
Date: Fri, 11 Sep 2009 17:13:13 GMT
Connection: close
Pragma: no-cache
Cache-Control: no-cache
Expires: Fri, 11 Sep 2009 17:13:13 GMT
Content-Type: message/http
Content-Length: 294

TRACE /Nessus2072953470.html HTTP/1.1
Connection: Close
Host: 192.168.1.61
Pragma: no-cache
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Language: en
Accept-Charset: iso-8859-1,*,utf-8
—————————— snip ——————————

CVE : CVE-2003-1567, CVE-2004-2320
BID : 9506, 9561, 11604, 33374
Other references : OSVDB:877, OSVDB:3726, OSVDB:5648, OSVDB:50485

Nessus ID : 11213

How to Disable HTTP TRACE/TRACK for IBM Lotus Domino Server

Option 1:

If you are using Internet Sites, you have to edit Web Site document.

1. Go to Web Site document – Configuration tab

2. Un-check TRACE and OPTIONS

Option 2:

If you are using the Web Configuration view instead of Internet Site, you can disable HTTP methods by using the notes.ini variable HTTPDisableMethods with a value of the method name. 

Append the command below in to Notes.ini for LotusDomino Server

HTTPDisableMethods=TRACE

Restart HTTP Service:

Restart your HTTP service for the setting to take effect by the running the command below in Domino console:

Tell http restart

Option 3:

Run the following command from the Domino Console:

set configuration HTTPDisableMethods=TRACE

tell http restart

Remark: Do not disable CONNECT and OPTIONS method because it will be used by Lotus Traveler

Resouce and Reference: 

http://www-01.ibm.com/support/docview.wss?uid=swg21201202