Symetrik Domino Consulting

Yesterday, I went to the “Mobilising the Lotus Notes/Domino System” seminar put on by the Lotus Society of Hong Kong.

This is the 4th IBM/Lotus event that I’ve been to in Hong Kong so far:

R8 Launch
Technical Deep Dive: Performance Improvement
Lotusphere comes to you 2008
Mobilising the Lotus Notes/Domino System

I met with Stephan Wissel and Kevin O’Connel who both work for IBM. Stephan in Singapore and Kevin in Hong Kong.

I got a couple of interesting points from them that were a bit off topic from the seminar at the end, one on one. I was discussing our inability to upgrade to R8 because the eclipse client is just too slow and sluggish and we find too many bugs. Our hardware is not up to date (up to par) and we can’t ask the business to pay for a huge hardware and software upgrade, when all they really want is Outlook client.

I learned the following:
There are some benefits to upgraded to R7 client (mail recall, view index building while you work, improved Sametime performance and awareness capability)
Additionally, we could upgrade to R8 basic client. This would give us some of the benefits of R8 client without the heavy payload of the eclipse client and a major change to the UI which would require training.

The next item at hand is how do we handle the upgrades with Smart Upgrade without it causing us more trouble than it’s worth, especially when we have no idea what hardware is out there in the field.

In doing some research on Password Recovery in 6.5.x, I came across this comment on the Notes/Domino 6 and 7 Discussion forum.

“Most security experts now agree that forcing periodic password changes doesn’t increase security – it just makes users more likely to forget or write down their passwords. Unfortunately, most corporate IT departments haven’t caught on yet. ;)”

This was posted by Posted by Dave Kern on 26.Apr.06 at 02:31 PM

Then someone asked him about that very statement in the next post, and here is his response. Read the rest of this entry »

Administrators can use the Domino console command Trace when testing connectivity issues.

For our company this is a useful and frequently used tool. Not all of our sites are connected internally with fat, secure, reliable connectivity lines.

We often switch between Internet and MPLS and sometimes the lines go down.

When testing connectivity from one server to another, or to test connectivity after changing a connection document, you can use the trace command. Read the rest of this entry »

Finally, after suggesting it be done months ago, I was able to implement salted hash for the Internet password field in our directory.

Check this technote for details and other related technotes:

http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21255244

This is configured in the Directory Profile (open the NAB, select Actions, Edit Directory Profile)
Set “Use More Secure Internet Passwords” to Yes

This will be affective from any Internet passwords that are saved in the directory from that point forward.

You should also select each person document in the NAB and select Actions\Upgrade to more secure Internet Password.

Don’t ask why it took so long to enable this.

We were getting a few strange sounding reports from a user who was trying to send email to 3 groups.

The first message was:
“A copy of this message was sent to 180 recipient(s), but the Internet format of this message was not sent to the following 34 recipient(s); , etc.”

The second message was:
“Document has invalid structure: mail.box”

We closed the client, deleted mail.box, opened the client, and let it re-create mail.box and all was fine.