Dennis' Domino Blog

New feature in Domino 9: Lotusscript method warnings

Dennis van Remortel — Tue, 30 Apr 2013 13:58:00 +0000

The Domino server now warns (on the console and in the console.log) if you are using methods that could cause instability.

Time to kick that developer (in this case: me ;-) )

[0954:0002-02DC] **************************
[0954:0002-02DC] *** You are using LSI_INFO in LotusScript which is an undocumented feature
only used in a controlled environment, and is unsupported
[0954:0002-02DC] *** Please use a GetThreadInfo variation of the LSI_INFO functionality if available
[0954:0002-02DC] **************************
[0954:0002-02DC] *** Agent :   xxx
[0954:0002-02DC] *** DB    :   xxx
[0954:0002-02DC] **************************
[0954:0002-02DC] *** You are using LSI_INFO in LotusScript which is an undocumented feature 
only used in a controlled environment, and is unsupported
[0954:0002-02DC] ********************
[0954:0002-02DC] *** LSI_INFO(14) was found and is known to cause memory corruption, 
leading to server instability.  Please remove all uses of this from your application.
[0954:0002-02DC] ********************
[0954:0002-02DC] **************************
[0954:0002-02DC] *** Agent :   xxx
[0954:0002-02DC] *** DB    :   xxx
[0954:0002-02DC] **************************

Sametime meeting (Classic Community server) and Java.

Dennis van Remortel — Fri, 29 Mar 2013 08:20:00 +0000

It seems that the more recent versions of Java break the browser based meetingroom in ST Community servers.

Follow this technote #21615334 to resolve the issue.

IBM Lotus Notes Traveler Open-Redirection and Cross Site Scripting Vulnerabilities

Dennis van Remortel — Fri, 05 Oct 2012 09:13:00 +0000

IBM Lotus Notes Traveler is prone to an open-redirection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.

Attackers can exploit these issues to execute arbitrary script or HTML code, steal cookie-based authentication credentials, and conduct phishing attacks. Other attacks may also be possible.

Versions prior to IBM Lotus Notes Traveler 8.5.3 Fix Pack 2 are vulnerable.

Read more here: SecurityFocus

tap tap is this thing on?

Dennis van Remortel — Fri, 14 Sep 2012 06:30:00 +0000

Yes, this is another one of those "I'm not dead" posts, but hey, I'm not dead. It's just that life & work got in the way of this blog.
Now that the darker day's are coming upon us, I plan to complete my Installing Domino from scratch-series. Any remarks on the current chapters or future chapters is very welcome and will be used.

So for now some more silence, but expect updates over the coming weeks.

Finding deprecated/obsolete Notes.ini entries on servers

Dennis van Remortel — Thu, 24 May 2012 09:28:00 +0000

A small thing I wrote, so I didn't have to search all notes.ini's manually.
(You can use DCT, but I like my scripting )
It has a keywords document, so you can add/remove entries as you please. Put a replica on the servers you are interested in, and run it.

What notes.ini variables have become obsolete in Notes/Domino 8.x?

What notes.ini variables have become obsolete in Notes/Domino 7.x?

Obsolete notes.ini parameters for Notes/Domino 6.5

Obsolete Notes.ini variables

Keyword document:

notes.ini:

analysed:

Download:
notesini.ntf

Module x: References

Dennis van Remortel — Wed, 09 May 2012 09:52:00 +0000

Module x: References

*1 The History of Notes and Domino
*2 Introducing IBM Lotus Notes and Domino 8.5
*3 IBM Lotus Notes (wikipedia)

Module 4: Installing Lotus Notes Admin/Designer Client

Dennis van Remortel — Wed, 09 May 2012 09:44:00 +0000

Module 4: Installing Lotus Notes Admin/Designer Client

We've now setup our first server and now we need to install one of 3 versions of Lotus Notes clients. IBM kept it "simple".

IBM Lotus Notes Basic Classic "Lightweight" client
IBM Lotus Notes "new" fully functional Eclipse based client
IBM Lotus Notes Designer/Admin client Same as previous, but with possibilities to install Admin/Designer functionalities.

More information about this here. We have to download the following file:

Before we go to install the Lotus Notes Admin/Designer client, let's stop the Domino server. Enter the Command quit in the Domino Console screen, and press Send.

Wait for the text "Server shutdown completed" to appear.

Now exit the Domino Console screen, checking the "Also stop server controller and server testsetup/TST".

Now we can install the Lotus Notes Admin/Designer client. Doubleclick the executable, accept the UAC

After the unpack is complete, the actual installation is started

Accept the default path for now (remember, we are not supposed to install it on the server anyway ;-) )

Make sure you check the items as I just did. You do not want Symphony on a server.

Accept the defaults, now the install starts. This can take a while.

Now the install has been completed, let's start the server first (start the service or double click the icon on the desktop). When the server's running (check via the Lotus Domino Console), start Lotus Notes so we can fill in the details.

Double click the Lotus Notes icon. You'll get prompted by the configuration wizard.

Enter your Admin name + servername here.

Enter your password.

Accept the defaults and click Finish.

Congratulations, you've now installed your first Lotus Notes client. In the next chapter we'll explain the usage of the 3 clients, and get into administration for our server/users.

Module 3: First run configuration

Dennis van Remortel — Wed, 09 May 2012 09:38:00 +0000

Module 3: First run configuration

Now that the installation has been completed, we are going to get ready to start Lotus Domino for the first time. On the Desktop of the server you now see 2 icons. 1 is the actual server, the other is the management console. We start by starting the Domino Server.

When you click that, you'll get the following prompt (UAC):

You now get the Domino Server setup screen. Click Next to advance.

The next screen allows for 2 choices:

Setup the first server or a standalone server This option is used for your first server, to begin building you Domino environment. If you reinstall the first server, also choose this option, and provide the "existing" ID files.
Setup an additional server You'll use this option when installing a 2nd/3rd etc server in your Domino environment.

We choose to "Setup the first server or a standalone server". Click next to continue.

In this screen we have to enter a name for our server. In this case we are going for something generic like "testsetup", which is fine for now. Name your servers to integrate with your current naming conventions. Domino server and usernames are built using a Hierarchical structure. So this server is going to be named testsetup/<name>. The <name> part will be filled in later. Click next to continue.

This screen is one of the most important screens in configuring a Notes/Domino environment. As I explained in the previous step, the names are Hierarchical, and here is where you define the "Organization" part of the name. all names will be under this "Organization". Also this will give you a file (cert.id) and the password you enter here. Keep this password + ID very safe. It's the most important part of your future empire!

The next screen will prompt you for the Domino Domain Name. Common practice is that you use the Organization part for this, but it can been random. Click Next to continue.

In this screen we'll register an administator account. Please make this a "unique" name, but not your own! Doctor Notes is an example IBM uses in their documentation, but anything goes.
We'll also save a local copy of this ID file, as we will use that later on. Click Next to continue.

The next screen allows us to enable/disable various services we want to load on our server. We'll uncheck all for now and click Customize.
Here you can see the variety of tasks (we'll explain them later on in the series) Domino has to offer, but also shows you the ones that will be loaded with the server. For now click Cancel, and continue with Next in the previous screen.

We can configure the network settings from this screen. Make sure the hostname listed is pingable on both the server and all clients in the network. Click on customize to configure this.

Enter the hostname in both highlighted fields and click on Ok to close the dialog.

Click Next to advance to the next screen.

Accept the defaults in this screen, as it increases the standard security level.

Review your settings and click Setup to continue the configuration setup.

Wait untill this process completes.

Congratulations, the installation has now been completed.
We now have 3 very important files, that are the base of a Lotus Domino environment.

The Certifier ID (cert.id)
The Server ID (server.id)
The Administrator ID (admin.id)

These files should be kept safe at all times, as they will allow you to do all the interesting things.

Doubleclick the Lotus Domino server icon on the Desktop

When you click that, you'll get the following prompt (UAC):

The following screen display's:

We choose "Start Domino as a Windows service" and we check both checkboxes at "Always start Domino as a service at system startup" and "don't ask me again" before clicking OK.

The server is now started in the background, so we doubleclick the "Lotus Domino Console" icon on the desktop. When you click that, you'll get the following prompt (UAC):

The Lotus Domino Console application let's you view the Lotus Domino server console, and allows you to type in commands directly on the server.

Before we shutdown the server, give it 10-15 minutes to complete the initial tasks it needs to do.
In the meantime, we'll go to the next chapter.

Next: Installing Lotus Notes Admin/Designer Client

Dennis' Domino Blog

New feature in Domino 9: Lotusscript method warnings

Sametime meeting (Classic Community server) and Java.

IBM Lotus Notes Traveler Open-Redirection and Cross Site Scripting Vulnerabilities

*tap* *tap* is this thing on?

Finding deprecated/obsolete Notes.ini entries on servers

Module x: References

Module x: References

Module 4: Installing Lotus Notes Admin/Designer Client

Module 4: Installing Lotus Notes Admin/Designer Client

Module 3: First run configuration

Module 3: First run configuration

tap tap is this thing on?