Kenio Blog

WebSphere Plugin Personal Certificate will expire on April 26, 2012

Kenio Carvalho — Thu, 2 Feb 2012 06:05:49 -0200

The WebSphere Support team has released a Flash technote regarding the personal certificate called "WebSphere Plugin Key" within the plugin-key.kdb that is shipped with the WebSphere Plugin install, which will expire on April 26, 2012.

Link to TechNote

Better way to remove people from type-ahead/recent contacts

Kenio Carvalho — Wed, 1 Feb 2012 21:49:17 -0200

From Notes Tips

We've had plenty of tips surrounding Recent Contacts, and it's a highly talked-about area. In Notes 8.5.3, we've continued to improve how you can control Recent Contacts/type-ahead.

In the past, we made it easier to remove "incorrect" contacts from type-ahead, by letting you delete a contact from the right-click menu:

But one problem with this method is that if you delete a contact from type-ahead in this way, they could be added back in automatically, if you send or receive more emails from them.

But in Notes 8.5.3, the new method avoids that :) Now, if you see an address that you do not want to appear in the Recent Contacts list, you can hide it by selecting the contact in the Recent Contacts view, and clicking the Hide in Typeahead button.

Then, the address won't appear in type-ahead again, unless you click Show in Typeahead

Test Database Connection on WebSphere Admin console is not a "full" test connection

Kenio Carvalho — Mon, 30 Jan 2012 10:45:42 -0200

A developer got this error

Error = Invalid Oracle URL specified DSRA0010E: SQL State = 99999, Error Code = 17,067

when use the code bellow:

private void connectLookup() throws Exception {
try {
InitialContext ctx = new InitialContext();
DataSource ds = (DataSource) ctx.lookup("jdbc/abcd1234");
connection = ds.getConnection();

if (connection == null) {
throw new Exception("Connection error....bla...bla..bla.");
}
} catch (Exception e) {
e.printStackTrace();
throw e;
}
}

When you test the connection on the websphere admin console everything is fine

The problem was i forgot to set the field Authentication Alias for XA recovery.

When you change your laptop you have a chance to review something

Kenio Carvalho — Sun, 29 Jan 2012 18:08:36 -0200

The first thing you discover is how many files are useless and you don´t have time to do a cleanup before copy all documents to the new laptop, then you decide to copy all files.
You need to install a lot of software, i need to install the following:

- Windows 7 64x SP1
- Lotus Notes 8.5.2 FP2
- Moba Xterm
-7Zip
-Winscp
- MS Office 2010 Professional
- Visio 2010
- Symphony 3.0.1
- Putty
- Cisco VPN
- VMware Player
- Firefox
-Chrome
- XMark - helpme a lot syncronizing my tags, bookmarks
- Rational Application Developer 8.0.2
- WebSphere Portal 7.0.0.1 - Admin mode
- Filezilla Client
- Fox IT
- JMeter
- Java JRE 1.6
- Enable the new laptop to work with the internet banking
- MicroTorrent
- Download Them All
- Teracopy
- K-Light Codec Pack Standard
- Virtual Clone Drive
- C-Cleaner
- Bad Boy
- Microsoft Security Essentials
- Update the new Windows :-(
- Setup alll Wireless Network to work at Home, Plansis
-

How to run ’Load Convert’ command to replace the design of mail database via Lotus Script Agent?

Kenio Carvalho — Sun, 29 Jan 2012 17:53:08 -0200

Launch IBM Lotus Domino Designer
Create an agent
Specify the trigger set as: Action Menu Selection
Specify the Target as: None
Copy and paste the following script into the Script Area:

Dim session As New NotesSession

Dim serverName, consoleCommand, consoleReturn as string
serverName = "xxxxxxxxxx/xxxxx"
consoleCommand = ("Load Convert -u mail\xxxxx.nsf * xxxxxx.ntf")
consoleReturn = session.SendConsoleCommand(serverName, consoleCommand)
Print consoleReturn,, consoleCommand

The information above is from TN 1577402

"Internal Server Error" you connect to IBM WeBsphere Portal

Kenio Carvalho — Thu, 29 Dec 2011 14:49:18 -0200

Initial connection to the Portal Server via an HTTP server reports: "Internal Server Error". Refreshing the browser results in a successful connection.

Enabling the plugin trace you can see the error

- TRACE: lib_rio: wait_on_socket: ServerIOTimeout fired.

In my case the IBM HTTP is on the same machine as Portal and it's not a cluster. The default value for ServerIOTimeout is -1.

Ajusting to ServerIOTimeout=120 solve the problem

You can see in the TN 1411685 that this problem was found on System I but my server is on Linux.

Security Advisory: Lotus Domino Denial of Service Vulnerability during Notes authentication processing

Kenio Carvalho — Mon, 26 Dec 2011 09:53:23 -0200

From TN 1575247

Fortiguard contacted IBM to report a denial of service attack when a malicious packet is supplied to the Domino Server via Notes RPC. This vulnerability is resolved in releases starting with 8.5.2 FP4 and 8.5.3

The following releases of IBM Lotus Domino Server are susceptible to this malicious attack:

8.5.2 FP3 and earlier
8.5.1
8.5
8.0.x

FG-VD-11-007 has been investigated by IBM and is tracked in SPR# KLYH8FTK5Y. To address the issues, you are encouraged to apply the following IBM Lotus Domino Server releases:

8.5.3
8.5.2 Fix Pack 4 (or later Fix Packs)

If you think Domino on Linux is not stable

Kenio Carvalho — Fri, 23 Dec 2011 11:29:36 -0200

One of my servers is runing for 305 days. I Know that 8.0.2 and Centos 5.2 are old but the strategy is if is not broken don't fix it.

This server is for Sametime (chat only), SMTP and some mail users using Notes.

The webadmin message is from the server, and thanks to my datacenter too.

I don't know if you can run a Windows box for a long time without reboots.

Enable User Impersonation in WebSphere Portal – an Illustrated Guide

Kenio Carvalho — Wed, 21 Dec 2011 11:07:02 -0200

If you want to enable this feature go to this link

You need to start using REST

Kenio Carvalho — Tue, 20 Dec 2011 09:04:25 -0200

With the launch of Domino Upgrade Pack 1 Domino Designers need to know how to use REST and JSON.

I found a good tutorial about REST. It is a starting point.

Certifications this year

Kenio Carvalho — Tue, 13 Dec 2011 15:31:45 -0200

This year i made several certifications and all goals achieved.

My certifications this year:

LOT-801 - IBM Lotus Domino 8.0 Application Development Update
LOT-851 - IBM Lotus Domino 8.5 Application Development Update
000-038 - IBM Tivoli Identity Manager V5.1 Fundamentals
LOT-910 - IBM WebSphere Portal 7.0 Deployment and Administration Update
000-377 - IBM WebSphere Application Server Network Deployment V7.0, Core Administration
LOT-913 - Developing WebSite Using IBM Lotus Web Content Management 7.0

The last certification was today LOT-913 with 100%. It was my first 100% on IBM Tests.

Lotus Traveler 8.5.2 Server Experiencing High CPU

Kenio Carvalho — Fri, 9 Dec 2011 13:53:32 -0200

the Traveler server is experiencing a high CPU situation for an extended time, here are some actions to take which should resolve this issue

From TN 1568658

An extended high CPU on a Traveler server can be caused by several issues.

Here is an approach to resolve this issue:

1) Make sure you have the latest Fix Packs for both Traveler and Domino installed as several known issues have been addressed in the Fix Packs.

The latest Traveler Fix Pack can be found here.

The latest Domino Fix Pack can be found here.

2) Verify the number of HTTP threads based on the number of devices using the Traveler server. The steps to check this are documented here.

3) Run a Traveler database defragmentation which will clean up and reduce the database size. This will run automatically after installing the latest Traveler fix pack. If it has been over a month since the last defrag has been done, running this again will be helpful. It is recommended to run a defrag monthly.

How to defrag the database is documented here.

4) If you have followed the 3 steps above, but the issue continues, you could be experiencing a known Domino Server issue related to the DelayQueue function. This is documented in SPR RSSN8HPLKX / APAR LO63480.

To identify this problem (on Traveler 8.5.2.4), issue the cmd: show stat traveler.delay*

If the output displays the following 2 lines, then you have encountered this defect:

Traveler.DelayQueue.Count.WrongOrder.DiscDelQ =
Traveler.DelayQueue.Count.WrongOrder.StateController =

The Domino fix for this issue is included in Domino 8.5.2.4 or later, which can be found using the link in step 1 above.
NOTE: This fix is already included in Domino Server 8.5.3 and higher releases.

Can the time in which a changed Internet password is cached ever be modified

Kenio Carvalho — Wed, 30 Nov 2011 07:31:47 -0200

When AdminP processes a password change in Lotus Notes/Lotus Domino, the old password is cached by the server for two days. What if this cache period is too long or too short ? Can the cache period ever be modified?

Yes, the cache period can be modified by setting the following parameter in the server's notes.ini file:
HTTP_Pwd_Change_Cache_Hours.

Use the following format:

HTTP_Pwd_Change_Cache_Hours=x
(where x is the number of hours of caching time for the old password)

During the cache period, both old and new passwords are valid, assuming the change has replicated to the server being accessed.

In addition, the Security Settings Document --> Password Management --> "Allow users to change Internet password over HTTP" field must be set to Yes.

The information above is from TN1084395

Native failover support for scheduled agents in Domino

Kenio Carvalho — Thu, 24 Nov 2011 20:04:27 -0200

There is no native failover support for scheduled agents in Domino. I know this issue i think since i start to work as a Domino Administrator 12 years ago.

From TN 109833034

This issue has been reported to Lotus Quality Engineering in the form of an enhancement request; however, there are currently no plans to address it.

Basically, scheduled agents run only on the server on which they are scheduled to run. If Server A is clustered with Server B and Server A goes down, any scheduled agents on Server A are not going to run on Server B, even though they are clustered.

One way around this is to code the agents so that they poll the other server for availability. If the server is available, they do not run; if it is not available, they do run. It is important to note that this workaround is not supported by Lotus.

An optional workaround is:

1. Create a single agent (AgentCore) with the core processing code you need and set the trigger to "Agent list selection".
2. Create a second agent (AgentTriggerPrimary) with code that calls the AgentCore agent. Schedule this agent to run on the Primary Cluster Server.
3. Create a third agent (AgentTriggerBackup) with code that checks to see if the Primary Cluster Server is available. If it is not, it calls the AgentCore agent, otherwise it exits. Schedule this agent to run on the Failover Cluster Server.

Deleted documents are reappearing after replication

Kenio Carvalho — Thu, 10 Nov 2011 11:45:27 -0300

This kind of problem is old but you can use new tools to solve the problem.

Yesterday, in one of our applications a lot of old documents reappear like ghosts. According the TN 1098733 the problem is caused by:

1. The purge interval is more frequent than the replication schedule.
If a document is deleted and the deletion stub is purged before replication, the other replica copy does not have the information that the document has been deleted and replicates the document just like a new document.

2. A document was modified on one database replica after it was deleted on another replica copy.
If a document gets modified on one replica copy of the database after it was deleted from another replica, the modified date on the existing document is newer and would overwrite the deletion stub (there is no replication conflict with deletion stubs, the document just reappears).

3. A document was modified more often than the deleted document
If a document gets modified more often on a replica copy than of the database with the deleted document, it will come back after replication even if it was deleted after the last modification. This is because the sequence number (number of modifications) takes precedence over the modified date - and since there can't be a conflict with a deletion stub it reappears after next replication.

But in Domino Administrator you don't have any tool to help. Its where the ScanEZ, a powerful tool, can help to solve this kind of problem.

Go to this link and see a good article about the tool and how ScanEZ was used in this scenario.

For more information about ScanEZ go to this link

Este tipo de problema é antigo mas existem ferramentas novas para ajudar a resolver o problema.

Ontem, uma de nossas aplicações, muitos documentos aqntigos reapareceram como "fantasmas"

Usei o ScanEz para achar quais documentos estavam com problemas e solulcioná-lo rápidamente, excluindo tais documentos.

Red Hat 6 Linux OS: Domino will not install

Kenio Carvalho — Wed, 9 Nov 2011 09:01:36 -0200

Domino installer does not start and goes to command prompt immediately.

Domino requires the following packages to be installed. They can be located on the RHEL6 distribution disks or installed via RPM.

glibc-2.12-1.7.el6.i686
libgcc-4.4.4-13.el6.i686
libstdc++-4.4.4-13.el6.i686

The packages listed above are sufficient to install Domino in silent and console modes.
To run GUI Domino installer, you will need additional xWindows packages:

libXtst-1.0.99.2-3.el6.i686
libXmu-1.0.5-1.el6.i686
libXp-1.0.0-15.1.el6.i686

To run GUI setup you will need two more packages:
libXft-2.1.13-4.1.el6.i686.rpm
libXi-1.3-3.el6.i686.rpm

Installing the packages above plus any dependencies will allow the installer to run.

The information above is from the TN 1455332

Transformação das redes Sociais - Social Technologies Event at Plansis

Kenio Carvalho — Sat, 29 Oct 2011 10:02:43 -0200

:: Abstract not available ::

How to replace a corrupt database replica in a clustered Lotus Domino environment

Kenio Carvalho — Fri, 28 Oct 2011 07:16:10 -0200

From TN 1228354. This is the last option

Ensure that the corrupt replica is not in use by any user or server.
On the Domino server hosting the corrupted database, enter the following command: "dbcache flush" (command may require entering two or three time to release the database).
Using operating system commands, delete the corrupt replica file.
Using the Lotus Notes client, open the "good" replica located on the other clustered server.
Create a new replica on the server where the "bad" replica was deleted.
Select File -> Replication -> New Replica.
Complete the replication.
Stop the Cluster Directory task on the server where the new replica was created by running the console command "tell CLDBDIR quit"
Restart Cluster Directory task by running the command "load CLDBDIR"
Verify database replica is on clustered server: Open Cluster Directory database and select the view, Databases by Replica ID
Verify that each replica copy of the same NSF file has the same Replica ID value.

Caveats with "After new mail has arrived" triggered agents on Domino servers

Kenio Carvalho — Mon, 24 Oct 2011 10:37:43 -0300

Today i an agent stop to working . The cause was the wrong signature but in this case was not access rights

The TN 1099178 explain the problem:

In order for "After new mail has arrived" triggered agents to run on Notes/Domino Servers, the following must be true:

1. The signer of the agent (the last person to save or enable the agent) must have their mail file located on the same server as where the agent will run. The server determines this by taking the name of the last person to save the agent, performing a person lookup into the Domino Directory and retrieving the Mail Server from that user's Person document. If the Mail Server in the Person document is different than the current server, the agent will not run. If the person is not found in the directory, the agent will not run. This person lookup is performed every time the agent loads to run. Remember, if the User ID is hierarchical, the user name in the Person document must also be hierarchical. This is stored in the field "FullName" in the Person document.

2. Historical Detail: In Notes R4, if the agent is a Formula agent (as opposed to a Simple Action or Script agent), then there is an additional requirement that the agent be saved as a R4 type agent, rather than an R3/R4 Compatible agent (which is the default). An agent will save as a R4 agent when a feature that is exclusive to R4 is used within the agent.

Note: This limitation no longer applies to formula agents created or saved in R5. R5 does not save agents in the R3/R4 compatible format. Existing agents that are still in the R3/R4 compatible agent format will still not run under R5 until they are resaved using an R5 client.

Workarounds for the Mail Server Lookup caveat in Requirement #1 above

In Notes 4.5x and later:

You can add a parameter to the NOTES.INI file that disables this mail lookup check. The NOTES.INI parameter must be set on the server where the agent is to be run. The parameter is:

AMgr_DisableMailLookup=1

Historical Detail: In 4.5x releases prior to 4.5.3 and in release 4.6, if the above INI parameter is set to 0, then it still acts as if it is set to 1. So, in those Notes releases if you want to re-enable the mail lookup, the INI parameter must be removed entirely.

Note: This parameter does not prevent the following warning when saving the agent; however, the agent still runs:

"Unable to determine the execution access privileges for this agent on ; agent may not run."

Basic Steps to Install Lotus Notes 8.5.1 (or later) Multi-User on Citrix XenApp

Kenio Carvalho — Sat, 22 Oct 2011 09:19:20 -0200

Thetechnote 1447614 outlines the steps to install Multi-user 8.5.1 or later releases, on Citrix XenApp with a customized data directory for new and existing Notes Installs. These instructions do not include steps to store the data directory on a remote file share, because this configuration is not supported.