IBM Support

Lotus Domino 8.5 Administrator Help updates

Technote (troubleshooting)


Problem

Some information in the Domino Administrator 8.5 Help database is inaccurate or missing; the help database content doesn't match the infocenter content.

Resolving the problem


Topics that are new or changed are shown in bold.

Domino's On-Disk Structure

In the first section, the following statement has been corrected:

Create_R8_Databases=1

The statement now reads:

Create_R85_Databases=1

Using Advanced Notes user registration with the Domino Administrator - To use Advanced registration with the Domino Administrator

In step 11, the following sentence has been removed from the "Location for storing user ID" section of the table:

    "ID vault not supported for this version of Domino. This setting displays if you are using a pre-Domino 8.5 server."

Using Advanced Notes user registration with the Domino Administrator - Storing user IDs in Notes ID vault

The following text has been removed:
    "You set the value for "In Notes ID vault" on the Security policy settings document."

The following text is added:
    "If a user's effective policy has a Security policy settings document that assigns the user to a vault, the "In Notes ID vault" value is selected."

Using replication with a roaming server

The following revised paragraph replaces the original paragraph:

Revised paragraph:
    "In Domino server roaming, the user's Contacts application (NAMES.NSF) may contain their user.ID file and dictionary as file attachments. Some NOTES.INI settings are roamed and each setting is stored in a roaminguserprofile note in the user's Contacts application. In file server roaming, the user.ID cannot be stored in the user's Contacts application."

Original paragraph:
    "The user's Contacts application (NAMES.NSF) may contain their user.ID file and dictionary as file attachments. Some NOTES.INI settings are roamed and each setting is stored in a roaminguserprofile note in the user's Contacts application."

Registering a roaming user

The following paragraph has been added to the "Clean-up option" section of the table in step 8:
    "The clean-up option deletes all of the databases in the user's directory. Clean-up will only occur on computers that contain a Notes multi-user install. Clean-up is typically used in a kiosk-style deployment and it is assumed that users who need to retain their data after clean-up have a single user version of the client installed on their primary machine."

Enabling RSS feeds for Lotus iNotes

The default value for iNotes_WA_FeedsSecured is incorrect. Use the information provided here instead.

iNotes_WA_FeedsSecured
    "(Optional) Use this setting to enable non-HTTP (non-secure) feeds. By default only secure feeds are enabled to the mail file. This is to avoid insecure authentication occurring as part of a feed retrieval. Use the setting iNotes_WA_FeedsSecured=0 to allow feeds to be accessed via http rather than https. The default value is 1."

Encrypting consolidated attachments

1) The encryption default is incorrect. The first paragraph is revised as follows:

Revised paragraph:

    "By default, the attachment files (.NLO files) created and stored by the Domino Attachment and Object Service (DAOS) are encrypted. You can use a NOTES.INI setting to either disable or re-enable encryption for all .NLO files created thereafter in the repository."

Original paragraph:
    "By default, the attachment files (.NLO files) created and stored by the Domino Attachment and Object Service (DAOS) are not encrypted. You can use a NOTES.INI setting that encrypts all .NLO files created thereafter in the repository."

2) The order of the two procedures is swapped, and there are other changes:

Revised procedures:

    "To stop encrypting attachment files"

    Using the Domino Administrator client, edit the NOTES.INI file on the Domino server where DAOS is enabled, and either delete the following setting or change it to 0:

    DAOS_ENCRYPT_NLO=1

    "To encrypt new attachment files"

    Edit the NOTES.INI file to include this setting:

    DAOS_ENCRYPT_NLO=1


Original procedures:
    "To encrypt new attachment files"

    Edit the NOTES.INI file on the Domino Administrator client to include this setting:

    DAOS_ENCRYPT_NLO=1

    "To stop encrypting attachment files"

    Edit the NOTES.INI file on the Domino Administrator client, and either delete the setting above or change it to this:

    DAOS_ENCRYPT_NLO=0


3) The final (Note) paragraph is revised as follows:

Revised paragraph:

    " Note An .NLO file remains either encrypted or non-encrypted based on the encryption setting's value when the .NLO file was created. Turning off encryption cannot turn it off for any given file. The only way to change the encryption setting on an existing .NLO file is to delete it in every document that references it, so that it is deleted in the repository, change the encryption setting, and then recreate the file."

Original paragraph:
    " Note An .NLO file remains either encrypted or non-encrypted based on the encryption setting's value when the .NLO file was created. Turning off encryption cannot de-encrypt any given file. The only way to change the encryption setting on an existing .NLO file is to delete it in every document that references it, so that it is deleted in the repository, change the encryption setting, and then recreate the file."

Managing database activity recording in databases - Enable activity recording in a single database's User Activity dialog box

The required access level is stated incorrectly in step 1 of the procedure:

Revised procedure:

    "Even if the server administrator uses the No_Force_Activity_Logging setting in the NOTES.INI file to disable automatic activity recording in databases, you can enable recording for a single database.

    1. Make sure that you have Manager access in the database ACL.

    2. Open the database and choose File - Application - Properties.

    3. Click the i tab, and then click User Detail.

    4. Select Record Activity to enable activity recording.

    5. (Optional) Select "Activity is Confidential" to allow only users with at least Designer access in the database ACL to view the activity.

    6. Click OK."



Original procedure:
    "Even if the server administrator uses the No_Force_Activity_Logging setting in the NOTES.INI file to disable automatic activity recording in databases, you can enable recording for a single database.

    1. Make sure that you have Designer or Manager access in the database ACL.

    2. Open the database and choose File - Application - Properties.

    3. Click the i tab, and then click User Detail.

    4. Select Record Activity to enable activity recording.

    5. (Optional) Select "Activity is Confidential" to allow only users with at least Designer access in the database ACL to view the activity.

    6. Click OK. "


ID vault limitations

The following Note has been added to this topic:

    Note: You can use the CA process when registering users into the vault.

The following text has changed:

Revised text
    "The ID vault and IBM(R) Lotus(R) iNotes(R) will co-exist together without any conflicts. However, currently iNotes cannot use the copy of the ID file in the vault; it can only use the copy of the ID file in the mail file."

Original text
    "The IDs of IBM(R) Lotus(R) iNotes(R) users can be stored in a vault, but currently there is no support for synchronization of IDs in user mail files."

Assigning users to a vault

The following text has been added:
    " Note The ID Vaults - Create and ID Vaults - Manage tools both provide the option to create a group of home servers and assign the group to a dynamic policy."

ID vault FAQs - Is the ID vault compatible with users who have roaming IDs?

The following text has changed:

Revised text
    "Yes, the two features work together. The roaming feature provides a consistent Notes user experience on different computers. The ID vault ensures that changes made to an ID file are synchronized across all client computers that support the ID vault."

Original text
    "A vault can be used in an environment with users who roam their IDs, but the IDs are not stored in the vault."

ID vault FAQs - Can programs that use the Notes API interact with a vault?

Revised text
"Yes, developers can use the ResetUserPassword method available in C, Java®, JavaScript® or LotusScript® to develop a custom application for resetting passwords. This can be a self-service application that allows users to reset their own passwords or an application that help desk personnel use to reset user passwords.

Original text

"No, only Notes clients can interact with a vault. For example, ID recovery is available for Notes clients but not for a third-party program that uses the Notes C API.


Preparing IDS for recovery

The following Note has been added to this topic:

    " Note For recovery to work, the administrator ID and the user ID must have key sizes of 1024 or less."

ID vault NOTES.INI settings

This is a new topic with the following contents:

    "The following NOTES.INI settings pertain to the ID vault. For information on each setting, go to the Notes.ini page on the Lotus(R) developerWorks(R) Web site at http://www-128.ibm.com/developerworks/lotus/documentation/notes-ini/.

    • IDV_POLL_INTERVAL
    • IDVault_Max_Auth_Failures
    • IDVault_Max_Auth_Failure_Cache_Size
    • IDVAULT_RESYNC_INTERVAL
    • SECURE_DISABLE_AUDITOR
    • IDVAULT_COUNT1
    • IDVaultLastFlushTime
    • IDVaultLastServer
    • IDVAULT_STAMP1
    • DEBUG_IDV_CONNECT
    • DEBUG_IDV_TRACE
    • DEBUG_IDV_TRUSTCERT
    • DEBUG_IDV_UPDATE
    • DEBUG_IDVAULT_SERVER_SELECTION"

    Note: The DEBUG settings have to be set to "1" to be enabled and "0" or removed to be disabled. The following examples show the DEBUG settings enabled: .

    • DEBUG_IDV_CONNECT=1
    • DEBUG_IDV_TRACE=1
    • DEBUG_IDV_TRUSTCERT=1
    • DEBUG_IDV_UPDATE=1

    You can set the DEBUG settings dynamically using a "set config" command.

Related information

Lotus Domino documentation page
A simplified Chinese translation is available

Document information

More support for: IBM Domino
Administration

Software version: 8.5

Operating system(s): AIX, IBM i, Linux, Solaris, Windows

Reference #: 1348130

Modified date: 14 August 2009