Recent
Installing Domino 11.0.1 FP2 on iSeries 
By Rainer Brandl | 2/23/21 5:26 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro
In the weekend I had to migrate a Domino environment from 9.0.1.x to the latest release. What I could see during the migration:Backup the NOTES.INI before you run the "UPDDOMSVR" command (!)Maybe it was in this environment but after running the UPDDOMSVR the NOTES.INI only contained 3 lines and all the other informations have been gone. Therefore we had to restore the NOTES.INI from the backup we took before
How the get personalized access to Domino using proton/domino-db
By Heiko Voigt | 2/22/21 6:44 AM | Development - Notes / Domino | Added by Andi Kress
First of all, everything you will read in this post is already available on the AppDevPack documentation. Maybe not so explicit as I try to write this up here but with some common sense, these finings are obvious. What are we looking at ? Well, in the past months I had to deal with personalized access to HCL Domino Data through the AppDevPack. This means, our code will have to do CRUD Operations based on a Domino User and her effective ACL settings in the respective Applications.
Addressing ill informed opinions of HCL Domino
By Cormac McCarthy | 2/22/21 4:12 AM | Business - News | Added by Roberto Boccadoro
Something that has been discussed with HCL Ambassadors, HCL and within Domino People on an ongoing basis is ill informed opinions of HCL Domino.
Get the name right for a start.
It's 21 and we are on to 12 #dominoforever
By Oliver Busse | 2/18/21 3:02 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro
I love using click-bait-ish titles, right? This one addresses the year we're now in and "12" of course is referencing the version of HCL Notes and Domino which is currently under heavy beta testing around the globe. HCL just released the second iteration of it to the public. If you are not registered to the beta forum to give feedback then you should do so asap - it can only get better with your contributions.
Fake News About Notes and Domino – This is the Real News
By NCUG | 2/17/21 4:31 PM | Business - News | Added by Oliver Busse
In the past week news stories have spread around the tech world stating that while HCL took over Notes and Domino from IBM, “not much has been happening with the platform.” This is fake news! People, meet Notes/Domino V12 Beta 2.
A quick one - doc.PostedDate in Java Agent...
By Heiko Voigt | 2/12/21 2:58 AM | Development - Notes / Domino | Added by Roberto Boccadoro
One of my customers built an agent that sends out automated e-mails in Domino by a Java Agent via a technical users mail file.
Yesterday, they came to me asking why all of the emails they are sending out are going to the Drafts Folder in the respective Mail file.
Domino CI build with Jenkins and Docker
By Martin Pradny | 2/12/21 2:44 AM | Development - Notes / Domino | Added by Oliver Busse
I wanted to make this work for a very long time, but there were always some parts missing, so I could not get the full process running. Finally, the wait is over. The following paragraphs describe a way to build Notes/Domino apps automatically on a Jenkins server, allowing parallel builds and all "normal" continuous-integration behavior, without having to think too much about Domino specifics.
“OneMK” – makefiles made easy
By Ulrich Krause | 2/11/21 8:45 AM | Development - Notes / Domino | Added by Oliver Busse
HCL recently has released a new version of the C API Toolkit for Notes/Domino 11.0.1. I had already written about it here.
Thomas Hampel reported that there will also be another release of the toolkit after the release of version 12 of Notes / Domino. In this version the makefiles will be included again, which are missing in version 11.0.1.
HCL SafeLinx – SSL Issues
By Milan Matejic | 2/11/21 8:35 AM | Infrastructure - SafeLinx | Added by Roberto Boccadoro
If you are using HCL SafeLinx and you cannot access your websites using “HTTPS” and you see the following error in the HCL SafeLinx “wg.log” log file:
PKCS12_parse failed, return 587686001 (error:23076071:PKCS12 routines:PKCS12_parse:mac verify failure
Then, most likely, either you are using the wrong password for the “P12” file, database where your SSL certificates reside, or your HCL SafeLinx Server is installed on Linux and the password for the “P12” file contains some special characters that need to be escaped.
Developers: New C API Toolkit 11.0.1 now available
By Thomas Hampel | 2/9/21 2:18 AM | Development - Notes / Domino | Added by Roberto Boccadoro
Good news for developers and partners out there who work on plugins and extensions for Domino.
We just published a new version of the C API Toolkit, actually the first new version since more than 7 years.
This is the first HCL shipment of the C API and it signals an ongoing commitment to revamp the C API delopment story,
it now supports building applications using the GUI environment for Visual Studio 2017.
Virtual, Faster, Better! How to deploy HCL Notes 11.0.1 FP1 for Citrix/VDI
By Prominic.NET | 2/9/21 2:17 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro
Deploying Notes on virtual desktops (or VDI) is a great way to achieve a smoother performance and a better user and admin experience for older versions of the software. During the Collabsphere 2020 conference Chris Adler from Panagenda presented how to deploy the latest version of HCL Notes 11.0.1 FP1 for Citrix/VDI.
Happy Valentine - or not? #dominoforever
By Oliver Busse | 2/9/21 2:14 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro
Ok, this has nothing to do with Feb 14 aka Valentine's Day. I chose this title as my Let's Encrypt certificate for this page was going to expire on exact that date.
I recently saw it and just now retweeted the Tweet of Detlev's blog post regarding the updated Let's Encrypt certificates that you have to add to your cacerts on Domino to keep the great LE4D app running without errors. If you use LE on your Domino server utilizing LE4D then YOU MUST act now - before it's too late (maybe on Valentine's Day...)
A Simpler Load-Balancing Setup With HAProxy
By Jesse Gallagher | 2/8/21 2:47 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro
...where by "simpler" I mean relative to the setup I detailed six years ago.
For a good long time now, I've had a reverse-proxy + load balancer setup that uses nginx for the main front end and HAProxy as an intermediary to do the actual load balancing. The reason I set it up this way was that I was constrained by two limitations:
nginx's built-in load balancing didn't do sticky sessions like I needed, which would break server-side-state frameworks like XPages
HAProxy didn't do HTTPS
In the intervening half-decade, things have improved. I haven't checked on nginx's load balancing, but HAProxy sprouted splendid HTTPS capabilities. So, for the new servers I've been setting up, I decided to take a swing at it with HAProxy alone.
CAPI SDK 11.0.1 for HCL Notes / Domino released
By Ulrich Krause | 2/8/21 2:45 AM | Development - Notes / Domino | Added by Roberto Boccadoro
HCL has released a new version of the CAPI SDK on Flexnet. The version number has increased from 9.0.1 to 11.0.1. Unfortunately, the changes are not documented. The “whats new” view only shows the changes in V9.0.1.
Therefore I did a comparison of the versions myself. Here is what I found.
OpenNTF February Webinar: Introduction to Ansible for Newbies
By OpenNTF | 2/8/21 1:55 AM | Business - Events / People | Added by Oliver Busse
This talk is for Domino admins and developers who would like to learn Ansible basics. Ansible is an automation engine to automate deployments. HCL provides a set of Ansible playbooks and roles to deploy a complete HCL Connections 7 environment. Come learn what Ansible is and why you should use it in this webinar.
"Subjective Alternative Name" is missing from Certificate
By Cormac McCarthy | 2/5/21 1:17 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro
Firstly, it would be remiss to not state the obvious here:- in Domino 12 there is a complete overhaul of how you initiate certs and cert requests within Domino.
With the new CertMgr you can “magically” get a cert with LetsEncrypt. If you haven’t tried the beta of Domino 12 please do. It is magic.
Or if not a magic cert with Let’s Encrypt, a completely overhauled GUI if you want to be able to create certs with another third party CA (or even internal CA), or if you “just” want a wildcard cert.
However until Domino 12 comes out in production, I’m generally still using OpenSSL.
Notes / Domino is forever
By Kenio Carvalho | 2/4/21 5:50 PM | Infrastructure - Notes / Domino | Added by Oliver Busse
Yesterday it seemed like it would be an ordinary working day but a client called me informing about the expiration of a certifier. It would be normal to resolve the problem with the re-certification procedures but it was a special certificate.
Notes Tips #20: Repeat Meetings Randomly
By Hogne B. Pettersen | 2/4/21 3:33 PM | Infrastructure - Notes / Domino | Added by Oliver Busse
We’ve all been there: You want to create a repeating meeting, but realise that one of the dates within the repeating interval collides with another meeting. Notes and Domino is the only system that can deal elegantly with this. Read on to learn how!
LE4D - Let’s Encrypt 4 Domino - Network Error - Changed LE Roots
By Detlev Poettgen | 2/4/21 2:51 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro
Let's Encrypt changed its own server SSL certificates used to communicate with their API endpoints in December 2020.
Production - API Endpoint: https://acme-v02.api.letsencrypt.org/directory
Staging - API Endpoint: https://acme-staging-v02.api.letsencrypt.org/directory
This may result in Let's Encrypt 4 Domino (LE4D) no longer being able to communicate with the API during agent execution for certificate updates.
The reason for it is, that the Let's Encrypt root / intermediate certificate are no longer trusted.
XPages: Dealing With "Cookie name X is a reserved token"
By Jesse Gallagher | 2/3/21 2:04 PM | Development - Notes / Domino | Added by Andi Kress
The other day, John Dalsgaard asked a question in the XPages Slack Community to do with an exception that a client was seeing when going to any XPage...
OCSP stapling and why it matters -- Improve your HTTPS performance
By Daniel Nashed | 2/2/21 5:20 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro
In one of my last posts I checked the Domino server HTTPS security rating.
One of the features I configured was the OCSP stapling, which leads to a better rating.
But why is OCSP stapling important and how can you check your server on your own?
A Partially-Successful Venture Into Improving Reverse Proxies With Domino
By Jesse Gallagher | 2/2/21 5:19 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro
I've long been an advocate for Domino's HTTPEnableConnectorHeaders notes.ini setting. That's the one that lets you pass some WebSphere-derived headers like $WSRA and (particularly-dangerously) $WSRU to Domino and have them fully override the normal values for the incoming host, user, and more.
I'm still a big fan of it, but it always come with the irritating absolute requirement that Domino not be publicly-accessible, lest any schmoe come along and pretend to be any user on your server. That's fine and all, but sometimes it's useful to have Domino be accessible without the proxy, such as for troubleshooting. What I really want it selective enabling of this feature based on source IP. So I set out this weekend to try to implement this.
Domino V11.0.1 Cookbook
By Rainer Brandl | 2/2/21 5:18 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro
HCL is offering a cookbook about Domino V11.01 where you can findSystem requirementsStep-by-Step instructions for fresh installation, upgrades and removalDownload links.It´s very helpful !!
Notes From A Week in Administration-Land
By Jesse Gallagher | 1/27/21 1:33 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro
This past week, I've been delving back into the world of Domino administration for a client and taking the opportunity to brush up on the niceties we've gotten in the past few releases. A few things struck me as I went along, so I'll list them here in no particular order.
HCL Domino & ADFS – SSO Suddenly stops working
By Milan Matejic | 1/26/21 2:28 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro
If you are using ADFS with Domino as a Single Sign-On solution, and you get a call from a friendly user telling you that Single Sign-On stopped working, check if you are seeing the following error on the HCL Domino server console: SECCheckAndParseSAMLResponse> VerifyAssertionSignature : Document has been modified or corrupted since signed! (signature)
Domino 12 Beta 1 - HTTPS Review & Ratings
By Daniel Nashed | 1/25/21 2:39 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro
Now that Domino V12 Beta1 is available, I took the opportunity to look into the current state of TLS and ciphers in Domino.
Rating of the results
You can see from the rating that we are at a very high score.
Even without TLS 1.3 support, this already looks great!
And looking into details you see, that you could switch to ECDSA keys already for most web servers.
If are are interested in the details and want to test your own server -- even if not exposed to the internet .. continue reading and see the details from the commented results.
What is HCL’s Project Yuzu?
By NCUG | 1/25/21 2:00 AM | Business - News | Added by Oliver Busse
I’m sure we are all familiar with this situation: Your company runs a solution for collaboration. It can be combination of SharePoint, Teams, Yammer and Microsoft 365, it can be HCL Connections, Notes, Sametime or it can be a combination of HCL tools and Microsoft tools (yes, they do integrate). What these solutions have in common is that it’s at times easy to keep track of your stuff.
Domino V12 Let’s Enrypt DNS-01 Challenges delegating a sub-domain to Digital Ocean
By Daniel Nashed | 1/25/21 1:23 AM | Infrastructure - Notes / Domino | Added by Martin Pradny
Domino V12 Beta 1 supports DNS-01 challenge validation for Let's Encrypt and other ACME providers. The beta ships with two providers available in DXL file ready to import. I took the configuration as a reference and implemented a Digital Ocean configuration.