Symetrik Domino Consulting

Archive for the ‘NAB’ Category

It’s shocking. simply shocking.

I reported a few days ago that I finally got all of the Domino servers in our environment to 6.5.6 FP3 (plus a couple of Hotfixes – the DWA on Windows Vista, and Out of Office Hot Fix).

I have been noticing a few small things that have not been working as I thought they would. Very minor, but nonetheless weren’t working right.

So I decided to update the design of our customized NAB template. Let me prelude this with saying that I joined this rag tag Domino admin group 15 months ago. There were 2 guys running it, one with a developer background and one with no Lotus Notes/Domino experience at all. They’d both learned everything on the job, and they had both inherited it from a couple of guys who had obviously installed Domino only by the sheer merit of being able to read the instruction manual.

The design changes aren’t that bad actually, except for the fact that no one really knows why the 30 or so non-standard agents are for. Upon digging through the design, I found that the most of the design element are 6.0 design!!!! Read the rest of this entry »

Today at the office we had a situation that had never come up before. We recently created a new user, which has the same name as a very old user.

A particularly important group of users regularly send to the old user, using just his common name, example “guru”

Suddenly, these important users started getting the Ambiguous Name Dialog Box which I’m sure that they have never seen before, and I’m sure they hit enter, and the result is that the new user, who is listed first in the ambiguous name dialog box receives the email.

Important users complain, heads roll, management wants the new user’s name changed (even though his name follows our newly implemented naming convention). Read the rest of this entry »

When working on some new partitioned servers today, I saw this on the console of all three servers.

06/18/2008 04:41:03 PM Router: Connection from server NOTESVN1/DOMAIN not used; Server not found in Domino Directory.
06/18/2008 04:41:03 PM Router: Connection from server NOTESVN1/DOMAIN not used; Server not found in Domino Directory.
06/18/2008 04:41:03 PM Router: Connection from server NOTESVN1/DOMAIN not used; Server not found in Domino Directory.
06/18/2008 04:41:03 PM Router: Connection from server NOTESVN1/DOMAIN not used; Server not found in Domino Directory.
06/18/2008 04:41:03 PM Router: Connection from server NOTESVN1/DOMAIN not used; Server not found in Domino Directory.

I couldn’t quite figure it out because the 3 partitioned servers I was building/working on had nothing to do with this new cluster that another team member had just built for our Vietnam office. Read the rest of this entry »

Finally, after suggesting it be done months ago, I was able to implement salted hash for the Internet password field in our directory.

Check this technote for details and other related technotes:

http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21255244

This is configured in the Directory Profile (open the NAB, select Actions, Edit Directory Profile)
Set “Use More Secure Internet Passwords” to Yes

This will be affective from any Internet passwords that are saved in the directory from that point forward.

You should also select each person document in the NAB and select Actions\Upgrade to more secure Internet Password.

Don’t ask why it took so long to enable this.

The directory catalog is supposed to be used for mobile users so that they can address mail to users or groups remotely without having to have a replica copy of the huge NAB on their laptop. For some organizations, this is not a big deal, they can just create a local replica of the NAB if it’s small enough.

For other organizations the NAB is 1GB plus in size, and managing that on a local replica for all users, and even the possibility of security vulnerabilities can be a big issue.

Other environment use dc.nsf so that their users can search via first name instead of last name. (seriously, it happens).

Let me explain how it works: Read the rest of this entry »