267 Lotus blogs updated hourly. Who will post next? Home | Blogs | Search | About 
 
Latest 7 Posts
Upgrading Domino causes issues with CKEditor for Chrome users
Thu, Jul 23rd 2015 34
@Unique(view1.getColumnValues(0)) = Repeatable XPages Server Crash
Mon, Jun 22nd 2015 16
Domino KYRTool and SSL / TLS under Notes 9.02 – Positive Impressions
Wed, May 20th 2015 15
Configuring Mandrill to work with Domino for SMTP routing
Fri, May 15th 2015 13
Solved : Quirk with Domino and Relay Hosts which redirect
Fri, May 15th 2015 9
Getting Sametime meetings to work with Chrome 42 and NPAPI
Tue, Apr 21st 2015 16
Solved : UNIK Table : itemdef.exe Cannot store document – database has too many unique field names
Tue, Feb 10th 2015 17
Top 10
Upgrading Domino causes issues with CKEditor for Chrome users
Thu, Jul 23rd 2015 34
Please accept my apologies for the confusion – Dear IBM – this SHA-2 stuff is real – see below
Mon, Sep 22nd 2014 23
Solved : UNIK Table : itemdef.exe Cannot store document – database has too many unique field names
Tue, Feb 10th 2015 17
Don’t try to extract the private key from the Domino.kyr file
Fri, Oct 17th 2014 16
Getting Sametime meetings to work with Chrome 42 and NPAPI
Tue, Apr 21st 2015 16
@Unique(view1.getColumnValues(0)) = Repeatable XPages Server Crash
Mon, Jun 22nd 2015 16
SSL Certificate installation errors – copy the key from the email source
Wed, Jun 20th 2012 15
Domino KYRTool and SSL / TLS under Notes 9.02 – Positive Impressions
Wed, May 20th 2015 15
Thank you to IBM just in the nick of time : SMTP TLS 1.0
Mon, Nov 3rd 2014 14
Configuring Mandrill to work with Domino for SMTP routing
Fri, May 15th 2015 13


Sean Cull
Blog Title FoCul » pl
Blog URL http://seancull.co.uk/category/lotus/
RSS Feed https://www.focul.net/category/pl/feed/
Validate Feed feedvalidator.org or validator.w3.org
Feed Last Checked Jul 23, 2015 9:49:14 AM EST. Realtime Update:
Location Lancashire, UK


Recent Blog Posts
34
Upgrading Domino causes issues with CKEditor for Chrome users
Thu, Jul 23rd 2015 9:49a   Sean Cull
We have had a spike in help desk calls with general “oddness” in one of our XPage applications. This has been triggered by an upgrade to the Domino server that included a new CKEditor version. It seems as though Chrome ( possibly other browsers ) cache the old CKEditor files in the browser and these are not compatible with the new server version. Users of the XPage in edit mode see the following malformed page even after several days. The immediate solution is to get the use
16
@Unique(view1.getColumnValues(0)) = Repeatable XPages Server Crash
Mon, Jun 22nd 2015 4:27p   Sean Cull
We have been chasing our tails with a server that has ruin really well for a number of years and suddenly started to crash over the last few weeks. We scoured the logs, domlog, server stats etc.. and couldn’t find a pattern. It turns out it was a 4 year old bug that IBM choose not to fix. ( I have raised a PMR and sent an example ) Just like in classic notes a lookup can get too big – the 64k limit. Obviously it is good coding practice not to create such errors but why of why does
15
Domino KYRTool and SSL / TLS under Notes 9.02 – Positive Impressions
Wed, May 20th 2015 10:38a   Sean Cull
Native SSL / TLS with Domino – Looking Good Last year IBM got into a bit of a pickle when the Poodle Exploits hit and there was no support for SSLV3 in domino. At the time we moved to putting Apache Proxy Servers in front off all of our web facing servers. I needed to deploy a new XWorks server for a customer or our “Knowledge Directory” product and we wanted to do some LDAP integration. As the Apache Proxy servers only do HTTP traffic and not LDAP or SMTP I though that I wo
13
Configuring Mandrill to work with Domino for SMTP routing
Fri, May 15th 2015 4:24p   Sean Cull
Mandrill is a cloud service which is used to ensure that transactional emails such as password resets get through to end users without falling foul of spam filters. We have had to move to using this with our SaaS XPage apps as it seems to be increasingly difficult to get the Microsoft to play nice when they seem to arbitrarily block our traffic ( there may be some good reason for this that we could address but they don’t seem willing to be helpful and tell us what is tripping the SPAM flag
9
Solved : Quirk with Domino and Relay Hosts which redirect
Fri, May 15th 2015 12:27p   Sean Cull
This took me 4 hours to suss out so I hope that this helps some one else. If you set up a Relay Host in IBM Domino and are using authentication and it doesn’t work then read on. The first sign of an issue is that the emails just stay in the inbox. Enable SMTPCLIENTDEBUG=1   ( yes I know it says client but it works on the server ) tell router quit load router looking in the log you will now see a trace that says SMTPClient: Attempting to Connect: Host smtp.eu-west-1.mandrillapp.co
16
Getting Sametime meetings to work with Chrome 42 and NPAPI
Tue, Apr 21st 2015 12:35p   Sean Cull
If you get a message saying that your Java Plugin is not supported when you go to share a screen in “Sametime” you need to adjust your chrome settings as per this note https://www.java.com/en/download/faq/chrome.xml The change takes a few seconds : In your URL bar, enter: chrome://flags/#enable-npapi Click the Enable link for the Enable NPAPI configuration option. Click the Relaunch button that now appears at the bottom of the configuration page. The post Getting Sametime
17
Solved : UNIK Table : itemdef.exe Cannot store document – database has too many unique field names
Tue, Feb 10th 2015 2:07p   Sean Cull
I recently got this message when trying to replicate a Lotus Notes / XPage database that I had been working on. I had already ticked the “Allow More fields in database” option. The application does use documents with programmatically generated fields but when I ran some code to count the notesitems in the documents the largest document had 750 fields. After some time I came across the itemdef.exe application from IBM. This lists the contents of the “UNIK” table in the n
5
FoCul Best Practice ? Faceted Filtering in XPages Using Java Beans
Thu, Jan 29th 2015 5:11p   Sean Cull
Improved User Experience We have found that one of the most difficult parts of developing modern XPage applications has been providing the faceted filtering that users expect from modern web apps. By faceted I mean filtering that is intelligent ? If I choose the Ford manufacturer I should not then be presented with choices for models from Audi. This demo of the FoCul Knowledge Directory shows how we have achieved this in XPages without having to use SQL or SOLR databases. Choosing any f
14
Thank you to IBM just in the nick of time : SMTP TLS 1.0
Mon, Nov 3rd 2014 5:08p   Sean Cull
IBM has released fix packs to allow SMTP mail to be routed via TLS 1.0 rather than SSL V3 to eliminate the Poodle vulnerability. It is very straight forward to apply. The fix pack also covers HTTP traffic too so no more Apache Reverse Proxy servers unless you want them for other reasons. This is the 853 FP6 IF2 release – http://www-01.ibm.com/support/docview.wss?uid=swg21663874 Interestingly today we had our first emails that were being rejected by recipients because of SSL V3 so this is
6
When using Apache in front of Domino you need the NE rewrite attribute
Thu, Oct 23rd 2014 3:11p   Sean Cull
Over the last week or so I have been moving to using an Apache server in front of my Domino servers. This has been working really well until I had a problem with Mark Leusink’s Auto Login’s module The code includes some code that calls a url constructed as /autoLogins_v113.nsf/rememberMe.xsp?to=/dev/preprodprojectlibrary.nsf The Apache rewrite engine returns this as /autoLogins_v113.nsf/rememberMe.xsp?to=%252Fdev%252Fpreprodprojectlibrary.nsf whereas Domino would normally return
12
Solving the SSL V3 / SHA-2 / TLS / MD5 / Poodle problem on Linux – Part 3 – Converting a Domino SSL certificate / Private Key to Apache
Wed, Oct 22nd 2014 2:11p   Sean Cull
Part 1 – What is the problem Part 2 – Installing a simple Linux Reverse Proxy on the same box ( 20 mins ) Part 3 – ( This Post ) Converting your Domino SSL Certificate to work with Apache (30 mins ) Note that the easiest option to install a verified SSL certificate into the Apache server is to buy a new one. However, if you have a copy of Windows XP handy you can convert your existing Domino SSL certificates to Apache certificates with the following scheme. Many thanks to D
4
Solving the Domino SSL V3 / SHA-2 / TLS / MD5 problem on Linux – Part 1
Sat, Oct 18th 2014 5:20p   Sean Cull
Part 1 – ( This post ) What is the problem Part 2 – Installing a simple Linux Reverse Proxy on the same box ( 20 mins ) Part 3 – Converting your Domino SSL Certificate to work with Apache (30 mins ) What is the problem ? There are a number of separate problems that can be solved ( from a Http perspective ) using the method set out here if you are running Domino on Linux SSL3 is currently vulnerable and Domino cannot use anything newer The Poodle exploit as detailed by Bill
11
Solving the SSL V3 / SHA-2 / TLS / MD5 problem on Linux – Part 2
Sat, Oct 18th 2014 5:20p   Sean Cull
Part 1 – What is the problem Part 2 – ( This Post ) Installing a simple Linux Reverse Proxy on the same box ( 20 mins ) Part 3 – Converting your Domino SSL Certificate to work with Apache (30 mins ) The Fix This fix is to add an Apache Server in front of Domino where Domino is running on a Linux box. All of the web serving functionality will be handled by Apache. It should take about 20 minutes. Note at the end of this step you will be using a self signed SSL certificate. P
16
Don’t try to extract the private key from the Domino.kyr file
Fri, Oct 17th 2014 4:57a   Sean Cull
I have been making some good progress with addressing the SSL issues by using an Apache Server in front of Domino and running on the same box – from a HTTP / HTTPS point f view it is actually pretty straight forward. One rub though is that I wanted to re-sue my existing SSL certs I think I could have done this using Windows XP ( no joke ) and Keyman to extract the private key from the Keyring as per this technical article from IBM How to export the private key from a Domino keyfile by usin
12
More Domino SSL woes – MD5 CSRs not accepted
Mon, Oct 13th 2014 10:33a   Sean Cull
So we moved suppliers for SSL certificates after our last one stopped doing SHA-1. We settled on https://www.startssl.com as they were recommended and seem to have a good approach. Unfortunately they will not accept CSR requests using an MD5 checksum as it is not secure enough – what is the only option in Domino ? Apparently a number of better known SSL suppliers have adopted the same policy. There are workarounds using ikeyman if you have an XP machine to run it on. Not going to say an
23
Please accept my apologies for the confusion – Dear IBM – this SHA-2 stuff is real – see below
Mon, Sep 22nd 2014 4:40a   Sean Cull
I just received this from our usual SSL Certificate supplier. Another 2 hours wasted in help tickets – the 3rd time in 2 months that I have struggled to apply SSL certificates to Domino. In total confusion over SHA1 / 2 has caused me over 1.5 days of unbillable work over the last 2 months. IBM you might as well throw away all the work you did on XPages if you behave like this – your offering is only as strong as its weakest link. Vlad I. 22.9.2014. 11:16 AM Dear Sean, Please ac
4
Nice things customers say
Fri, Aug 22nd 2014 10:15a   Sean Cull
A nice way to end the week “Working with FoCul has provided a great partnership, improving the ABB processes and services whilst retaining the ability to customise our products at short notice to meet specific customer needs. The benefit has been a 30% efficiency saving, allowing ABB to deliver over £15M of studies more competitively.” http://www.prime-toolkit.com/demo
6
SNTT – getting access to a Git derived nsf/ntf when you are not in the ACL
Wed, Aug 20th 2014 9:55a   Sean Cull
Sometimes when you pull down a git based Notes design you find that you cannot open the NSF that you have crated from the On Disk Project because you do not have access in the ACL. Open the folder structure of the ODP at file system level and use a text editor to change the line below. You then need to refresh the ODP via Package Explorer. Don’t forget to push this change back to Git or the next person will struggle too.




Created and Maintained by Yancy Lent - About - Planet Lotus Blog - Advertising - Mobile Edition