Lotus Domino

Version 7

Domino Administrator Help

G210-2213-00

Note: Before using this information and the product it supports, read the information in "Notices" at the end of this document.

First Edition (December, 2005) This edition applies to IBM Lotus Domino Administrator 7 (product number L-GHUS-5RWNHM), and to all subsequent releases and modifications, until otherwise indicated in new editions. Copyright International Business Machines Corporation 1994, 2005. All rights reserved. US Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

ContentsChapter 1. Deploying Domino . . . . . 1Guidepost for deploying Domino . . . . Functions of Domino servers . . . . . Hierarchical naming for servers and users Domino domains . . . . . . . . . Partitioned servers . . . . . . . . Certifier IDs and certificates . . . . . Domino server services . . . . . . . Table of Domino naming requirements . Building the Domino environment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 1 2 3 4 5 7 8 9 Example of output with CIO enabled: . . . . The Domino Server Setup program . . . . . . Using Domino Off-Line Services (DOLS) and Domino Web Access . . . . . . . . . . . Setting up DOLS on a server . . . . . . . Setting up Domino Web Access on a server . . . Using the Domino Server Setup program . . . . Indic language support in the Domino Server Setup program . . . . . . . . . . . . Using automatic server setup on Linux on zSeries and on UNIX . . . . . . . . . . . . . Using the Domino Server Setup program locally Using the Domino Server Setup program remotely . . . . . . . . . . . . . . Creating a server setup profile . . . . . . . Using a server setup profile . . . . . . . . Using silent server setup . . . . . . . . . The Certification Log . . . . . . . . . . . Server registration . . . . . . . . . . . . Registering a server . . . . . . . . . . Optional tasks to perform after server setup . . . Creating an additional organization certifier ID Creating an organizational unit certifier ID . . . Internet Site documents . . . . . . . . . Starting and shutting down the Domino server . . To start the server . . . . . . . . . . . To shut down the server . . . . . . . . . Starting Domino as an application or a Windows service . . . . . . . . . . . . . . . . Using instant messaging in the Domino Directory 59 59 61 61 63 69 70 70 72 72 74 76 77 80 81 82 84 84 85 86 92 93 93 93 94

Chapter 2. Setting Up the Domino Network . . . . . . . . . . . . . . 11Lotus Domino and networks. . . . . . . . NRPC communication . . . . . . . . . Resolving server names to network addresses in NRPC . . . . . . . . . . . . . . Network security . . . . . . . . . . . NRPC and Internet connection security . . . Using a Domino passthru server as a proxy . TCP/IP security considerations . . . . . . Mapped directory links and Domino data security . . . . . . . . . . . . . . Planning the TCP/IP network . . . . . . . The default configuration . . . . . . . . Advanced configurations . . . . . . . . Changing a servers IP address . . . . . . Moving to IPv6 . . . . . . . . . . . NRPC name-to-address resolution over TCP/IP Ensuring DNS resolves in TCP protocols . . Changing a servers IP address . . . . . . IPv6 and Lotus Domino . . . . . . . . Advanced Domino TCP/IP configurations . . Planning the NetBIOS network . . . . . . . Deciding whether to use NetBIOS services . . How to tell if NetBIOS is active on a system . Server name-to-address resolution over NetBIOS Setting up Domino servers on the network . . . Setting up Notes named networks . . . . . Fine-tuning network port setup on a server. . Server setup tasks specific to TCP/IP . . . . Server setup tasks specific to NetBIOS . . . . 11 . 11 . . . . . . . . . . . . . . . . . . . . . . . 12 14 14 14 16 16 17 17 17 17 17 17 19 22 24 30 33 34 34 34 35 36 36 42 51

Chapter 4. Setting Up Server-to-Server Connections . . . . . . . . . . . . 95Planning server-to-server connections . . . . . Remote (modem) access and server topology . How a server connects to another server . . Replication and server topology . . . . . Examples of server topology . . . . . . Creating a LAN connection . . . . . . . Forcing a server connection to use a specific protocol . . . . . . . . . . . . . Setting up external domain lookups . . . . Internet connections . . . . . . . . . . Direct (leased-line) connection . . . . . . Proxy connections . . . . . . . . . . Creating a server-to-server Internet connection through a proxy server . . . . . . . . Passthru servers and hunt groups . . . . . Passthru Logging . . . . . . . . . . Hunt groups. . . . . . . . . . . . Planning the use of passthru servers . . . . Example of a passthru server topology . . . Setting up a server as a passthru server . . Setting up a server as a passthru destination . Creating a passthru connection . . . . . . 95 . 96 . 97 . 98 . 100 . 104 . . . . . . . . . . . . . . 105 106 108 108 109 109 110 110 110 110 111 112 113 113

Chapter 3. Installing and Setting Up Domino Servers . . . . . . . . . . . 55Server installation . . . . . . . . . . . Installing Domino on Windows systems . . . Entering system commands correctly . . . . Using silent server installation to install Domino on Windows systems . . . . . . . . . Using Dominos express install . . . . . . Using silent server install on UNIX systems . Concurrent I/O and Direct I/O not supported on Domino servers on AIX . . . . . . . . . Example of output with CIO disabled . . . . 55 . 55 . 56 . 56 . 58 . 58 . 59 . 59

iii

Connecting a server to a hunt group . . . Planning for modem use . . . . . . . . Installing modems . . . . . . . . . . Modems and modem command files . . . Creating a Notes Direct Dialup connection . Creating a Network Dialup connection . . . Encrypting Network Dialup Connection documents . . . . . . . . . . . . Coordinating dialup ISP connections between servers . . . . . . . . . . . . . Coordinating Notes Direct Dialup connections between servers . . . . . . . . . . Configuring a communication port . . . . Modifying modem command files and acquire scripts . . . . . . . . . . . . . . Using acquire and login scripts . . . . . Writing and editing acquire and login scripts Commands for acquire and connect scripts . Connecting Notes clients to servers . . . . . Requirements for connecting Notes clients to remote servers over various access media . .

. . . . . .

114 116 116 116 117 118

. 120 . 121 . 123 . 125 . 127 . 127 128 . 129 . 130 . 130

Chapter 5. Setting up Domino and DB2 . . . . . . . . . . . . . . . 133Understanding Domino and DB2 -- Limited Availability . . . . . . . . . . . . . . DB2 Access Views . . . . . . . . . . . Query views. . . . . . . . . . . . . DB2 and Domino authentication . . . . . . Benefits of using Domino with DB2 . . . . . Domino and DB2 user accounts that are needed for Domino and DB2 . . . . . . . . . . . . Accounts required with Microsoft Windows . . Accounts required with AIX/UNIX . . . . . Using the Domino Web Administrator client with Domino and DB2 . . . . . . . . . . . . Databases created with Domino 7 . . . . . . Database storage . . . . . . . . . . . Databases not supported as DB2 enabled Notes databases . . . . . . . . . . . . . . Compact database options are enabled for Domino and DB2 . . . . . . . . . . . Domino and DB2 supported platforms and configurations . . . . . . . . . . . . . Supported platforms and hardware and software requirements . . . . . . . . . Supported configurations in Domino and DB2 Example of a local Domino and DB2 configuration . . . . . . . . . . . . Example of a remote Domino and DB2 configuration that uses separate servers . . . Example of a remote Domino and DB2 configuration that uses partitions . . . . . . Installation and setup procedures. . . . . . . Microsoft Windows . . . . . . . . . . IBM AIX . . . . . . . . . . . . . . All platforms . . . . . . . . . . . . Installing the DB2 Access server . . . . . . Domino server enablement and mapping Notes and DB2 user IDs . . . . . . . . . . . Creating the DB2 installation account . . . . 133 134 135 136 136 137 137 137 137 138 138 138 140 141 141 142 143 143 144 146 146 146 146 146 147 147

Creating the DB2 administrator and administration server account . . . . . . . Installing and setting up Domino and DB2 on Microsoft Windows - Local configuration . . . Installing and setting up Domino and DB2 and the DB2 Access server on Microsoft Windows Local configuration . . . . . . . . . . Installing and setting up Domino and DB2 on Microsoft Windows - Remote configuration . . Installing and setting up Domino and DB2 on IBM AIX - Local configuration . . . . . . . Installing and setting up Domino and DB2 and the DB2 Access server on Microsoft Windows Remote configuration . . . . . . . . . . Installing and setting up Domino and DB2 on IBM AIX - Remote configuration . . . . . . Installing and setting up Domino and DB2 and the DB2 Access server on IBM AIX -- Remote configuration . . . . . . . . . . . . Setting up DB2 on Microsoft Windows . . . . Installing and setting up Domino and DB2 and the DB2 Access server on IBM AIX -- Local configuration . . . . . . . . . . . . Installing DB2 on IBM AIX . . . . . . . . IBM AIX post-installation procedure . . . . . Creating a server ID for the DB2 Access server Installing the DB2 Access server on the DB2 server . . . . . . . . . . . . . . . Enabling the Domino server to communicate with the DB2 server procedures . . . . . . . . . Enabling Domino access to a DB2 server . . . Enabling a Domino server to communicate with a DB2 server . . . . . . . . . . . . NOTES.INI variables set by the DB2 Server Enablement Tool . . . . . . . . . . . Configuration variables modified during DB2 server enablement . . . . . . . . . . . Manually creating the Domino server user and other accounts on Microsoft Windows . . . . Mapping the DB2 ID to a Notes ID in the Domino servers Domino Directory . . . . . . . . . Allowing anonymous access to Notes data . . Mapping DB2 user names to Notes user names Using formulas to create custom patterns in user names . . . . . . . . . . . . . DB2 groups . . . . . . . . . . . . . . DB2 group classes . . . . . . . . . . . Managing DB2 groups and classes . . . . . Locking a DB2 group . . . . . . . . . . Unlocking a DB2 group . . . . . . . . . Renaming a DB2 class . . . . . . . . . Associating a DB2 group with a class . . . . Moving a DB2 enabled Notes database to another DB2 group . . . . . . . . . . Upgrading Domino 7 and DB2 . . . . . . . Prerequisites if you are running Domino 7, beta 1, 2, or 3 . . . . . . . . . . . . . . Procedure - Upgrading when you have created DB2 enabled Notes databases . . . . . . . Procedure - Upgrading when you have not created any DB2 enabled Notes databases . . .

147 148

149 150 150

152 153

155 157

157 159 160 161 162 164 164 165 168 169 170 171 171 172 172 173 174 174 175 175 175 175 175 176 176 176 177

iv

Lotus Domino Administrator 7 Help

Upgrading from a beta release to Domino 7 and DB2 . . . . . . . . . . . . . . . Upgrading the DB2 Access server . . . . . Converting a 32-bit instance to a 64-bit instance on IBM AIX . . . . . . . . . . . . . Upgrading to DB2 8.2.2 if you have a previous version of DB2 already installed . . . . . . Maintaining the Domino and DB2 environment Adjusting buffer pool size . . . . . . . . Copying a DB2 enabled Notes database to another DB2 enabled Domino server . . . . Domino and DB2 XA transaction services . . . Moving a DB2 database container . . . . . Replicating an NSF to DB2 . . . . . . . . Setting a DB2 server ID . . . . . . . . . Setting and modifying DB2 values in the Server document . . . . . . . . . . . . . Setting DB2 Log File Size . . . . . . . . Setting, modifying or deleting the Domino server users DB2 ID properties . . . . . . Validating DB2 user names . . . . . . . . Administering the DB2 Access server . . . . . Editing the DB2 Access server Connection document . . . . . . . . . . . . . Removing a DB2 Access server . . . . . . Testing the DB2 Access configuration . . . . Working with views in Domino and DB2 . . . . Using federated data with query views . . . . Setting the maximum number of rows in SQL queries . . . . . . . . . . . . . . Building views of large databases . . . . . Views categorized by numeric datatypes . . . Domino and DB2 XA transaction services . . .

177 177 178 179 180 180 180 181 182 182 182 183 184 184 185 185 186 186 186 187 187 188 188 188 188

Upgrading a user name from flat to hierarchical Moving a user name in the name hierarchy . . Renaming a Web user . . . . . . . . . Moving a users mail file and roaming files from the Domino Administrator or the Web Administrator . . . . . . . . . . . . Opening a users mail file . . . . . . . . Finding a user name in the domain with the Domino Administrator or the Web Administrator . . . . . . . . . . . . Broadcasting messages to Notes client users . . Recertifying a user ID . . . . . . . . . Recertifying a certifier ID or a user ID . . . . Allowing multiple users to use the same data directory . . . . . . . . . . . . . . License Tracking . . . . . . . . . . . Deploying the My Work Welcome page for Notes . . . . . . . . . . . . . . .

247 248 252

253 255

255 256 256 258 260 260 261

Chapter 8. Setting Up and Managing Groups . . . . . . . . . . . . . . 263Using groups . . . . . . . Using multiple group names . Creating and modifying groups Managing groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 263 263 263 268

Chapter 9. Creating Replicas and Scheduling Replication . . . . . . . 275Replicas . . . . . . . . . . . . . . . Deciding when to create a replica . . . . . How server-to-server replication works . . . . Guidelines for setting server access to databases Setting up a database ACL for server-to-server replication . . . . . . . . . . . . . Creating replicas using the Administration Process . . . . . . . . . . . . . . Table of replication settings . . . . . . . . Scheduling times for replication . . . . . . Scheduling server-to-server replication . . . . Customizing server-to-server replication . . . Viewing replication schedules and topology maps . . . . . . . . . . . . . . . Database.nsf.replicate statistics . . . . . . 275 275 276 277 278 279 281 286 288 290 294 295

Chapter 6. Setting Up Notes Users and Clients . . . . . . . . . . . . 189Setting up Notes users . . . . . . User registration . . . . . . . Setting up client installation for users Custom welcome page deployment . . . . . . . . . . . . . . . . . 189 189 217 233

Chapter 7. Managing Notes Users

. . 237. . . . . 237 237 237 237 237

Managing users . . . . . . . . . . . Rename a user . . . . . . . . . . . Change user roaming status . . . . . . Move or open a users files . . . . . . . Delete a user name . . . . . . . . . Synchronizing Windows 2000 Active Directory and Notes users . . . . . . . . . . Changing Notes user names with the Administration Process . . . . . . . . Renaming a Notes users common or alternate name . . . . . . . . . . . . . . Deleting a user name with the Domino Administrator . . . . . . . . . . . Deleting a user name with the Web Administrator . . . . . . . . . . . Changing a roaming user to nonroaming . . Changing a nonroaming user to roaming . . Changing a users Internet address . . . .

Chapter 10. Setting Up Calendars and Scheduling . . . . . . . . . . . . 297Calendars and scheduling . . . . . . . . Using clustered Free Time databases. . . . Example of scheduling a meeting . . . . . Users in the same domain . . . . . . . Users in different domains . . . . . . . Users in other calendar domains . . . . . Setting up scheduling . . . . . . . . Setting up the Resource Reservations database Rooms and Resources Manager . . . . . Creating Site Profile and Resource documents Editing and deleting Resource documents . . Setting user access rights to edit and delete reservations . . . . . . . . . . . . Creating Holiday documents . . . . . . 297 297 298 298 298 299 299 300 . 302 302 . 306 . 309 . 310 . . . . . . .

. 238 . 238 . 239 . 241 . . . . 242 243 244 247

Contents

v

Collecting detailed information from user calendars . . . . . . . . . . . .

.

. 312

Chapter 11. Using Policies . . . . . . 313Policies . . . . . . . . . . . . . . . Organizational and explicit policies . . . . . Policy hierarchy and the effective policy . . . Client policy lock-down . . . . . . . . . Planning and assigning policies . . . . . . Using policies to assign NOTES.INI or Location document settings to Notes client users . . . Notes application plug-in and policies . . . . Creating policies . . . . . . . . . . . Managing policies . . . . . . . . . . . 313 313 314 316 317 317 318 318 350

Increasing the servers output timeout for DOLS downloads . . . . . . . . . . . . . Setting up agents for the DOLS subscription . . Optional tasks for DOLS administrators . . . Adding a directory catalog to a DOLS subscription . . . . . . . . . . . . Viewing DOLS download information . . . Reducing DOLS download time with the client installation CD . . . . . . . . . . . Reducing DOLS download time with selective replication . . . . . . . . . . . . Web Control instructions for DOLS users . . DOLS troubleshooting and error messages . . Error messages . . . . . . . . . . .

. 387 . 387 . 388 . 388 . 389 . 389 . . . . 390 391 391 391

Chapter 12. Setting Up Domain Search 357Domain Search . . . . . . . . . . . . Support for multiple languages . . . . . Domain Search and single-database full-text search . . . . . . . . . . . . . . Implementing Domain Search . . . . . . Server configurations for Domain Search . . . Configuration for the Domain Catalog . . . Configurations for the Domain Index . . . Domain Search over a WAN . . . . . . Planning the Domain Index . . . . . . . The Domain Catalog . . . . . . . . . Assigning database categories for the Domain Search form . . . . . . . . . . . . Estimating the size of the Domain Index . . Excluding attachments from the Domain Index Domain Search security . . . . . . . . Creating and updating the Domain Index . . . To set the Domain Indexer task . . . . . Tuning Domain Indexer performance . . . Changing the location of Domain Index files Deleting databases from the Domain Index . Backing up the Domain Index and Catalog . Customizing Domain Search forms . . . . . Results forms -- where do the document titles come from? . . . . . . . . . . . . Setting up Notes users for Domain Search . . . Using Policies . . . . . . . . . . . Manual setup from a Notes workstation . . Setting up Web users for Domain Search . . . Using content maps with Domain Search . . . To assign content categories . . . . . . To view content categories . . . . . . . To change content categories . . . . . . . 357 . 357 . . . . . . . . 357 357 358 358 358 358 359 359

Chapter 14. Planning the Service Provider Environment . . . . . . . . 393Planning the xSP server environment . . . . . The Domino service provider administrator . . Ways to set up a service provider environment Securing the service provider environment . . Using Domino features in a hosted server environment . . . . . . . . . . . . . Planning the IP Address configurations in a hosted environment . . . . . . . . . . Planning the distribution of hosted organization data . . . . . . . . . . . . . . . Deciding which protocols and services to offer in the xSP environment . . . . . . . . . Deciding which applications to offer multiple hosted organizations . . . . . . . . . . Using activity logging for billing at hosted organizations . . . . . . . . . . . . Example of planning a hosted environment . . . 393 393 393 394 394 395 397 400 401 401 402

. 363 . 363 364 . 364 . 365 . 365 . 366 367 . 367 . 367 . 368 . . . . . . . . . 368 368 368 369 369 369 370 370 370

Chapter 15. Setting Up the Service Provider Environment . . . . . . . . 405Setting up the service provider environment . . Installing the first server or additional servers for hosted environments . . . . . . . . Setting up a hosted organization . . . . . Setting up the Domino certificate authority for hosted organizations . . . . . . . . . Using policies in a hosted environment . . . What happens when you register a hosted organization? . . . . . . . . . . . Example of registering a hosted organization Using Internet and Web Site documents in a hosted environment . . . . . . . . . Global Web Settings documents and the service provider environment . . . . . . . . Configuring activity logging for billing hosted organizations . . . . . . . . . . . . 405 . 405 . 406 . 406 . 406 . 407 414 . 415 . 417 . 418

Chapter 13. Setting Up Domino Off-Line Services . . . . . . . . . . 373Domino Off-Line Services . . . . . . . . . Configuring the DOLS subscription . . . . . . To edit the configuration document . . . . . Overview of DOLS administrator tasks . . . . . How DOLS works . . . . . . . . . . . . Creating a DOLS Offline Security Policy document Increasing security for DOLS subscriptions . . . 373 373 373 379 380 384 386

Chapter 16. Managing a Hosted Environment . . . . . . . . . . . . 421Maintaining hosted organizations . . Using a browser to access a hosted organizations Web site . . . . . . . . . . . . 421 . 421

vi

Lotus Domino Administrator 7 Help

Adding a hosted organization to an additional server to provide new Web applications . . . Restoring a hosted environment after a server crash . . . . . . . . . . . . . . . How the Domino service provider software responds to a DNS outage . . . . . . . . Deleting a hosted organization . . . . . . Temporarily disabling services for a hosted organization . . . . . . . . . . . . . Enabling anonymous access to a hosted organizations database . . . . . . . . . Preventing users from viewing ADMIN4.NSF in a hosted environment . . . . . . . . . Moving a hosted organization to another server Removing a hosted organization from a backup or load-balancing server . . . . . . . . . Managing Users at a hosted organization . . . Using the Resource Reservations database in a hosted environment . . . . . . . . . . Viewing hosted organizations . . . . . . .

Starting and stopping the Domino Console 422 422 422 423 423 424 424 424 427 428 429 430

.

. 477

Chapter 19. Using Domino with Windows Synchronization Tools . . . 479Setting up Domino Active Directory synchronization . . . . . . . . . . . . To set up Domino Active Directory synchronization . . . . . . . . . . . Enabling the Notes synchronization options . . Specifying Notes settings . . . . . . . . Mapping Active Directory fields and groups with Domino Directory fields and groups . . . Mapping Active Directory containers to Notes certifiers and policies . . . . . . . . . . Synchronizing users and groups . . . . . . Registering new users in Active Directory and in Domino Directory simultaneously . . . . Renaming Active Directory and Notes users and groups . . . . . . . . . . . . . . Deleting Active Directory and Notes users and groups . . . . . . . . . . . . . . Disabling Active Directory synchronization prior to uninstalling the Domino Administrator . . . 479 480 480 481 483 484 485 486 490 490 491

Chapter 17. Setting Up the Administration Process . . . . . . . 431The Administration Process . . . . . . . . Administration servers . . . . . . . . . The Administration Requests database . . . . The Certification Log . . . . . . . . . . Specifying the administration server for the Domino Directory . . . . . . . . . . . Setting up the Administration Process . . . . Administration Process support of secondary Domino Directories . . . . . . . . . . Processing administration requests across domains . . . . . . . . . . . . . . Setting up ACLs for the Administration Process The Administration Requests database . . . . Managing Administration Process requests . . Customizing the Administration Process . . . Adminstration Process Statistics . . . . . . Administration request messages . . . . . . 431 431 432 432 432 433 435 435 438 441 448 450 453 454

Chapter 20. Planning Directory Services . . . . . . . . . . . . . 493Overview of Domino directory services. . . . Using directory servers in a Domino domain Planning LDAP features . . . . . . . . Planning directory access control . . . . . Planning new entries in the Domino Directory Planning the management of entries in the Domino Directory . . . . . . . . . . Planning directory services for Notes clients . Planning directory services in a multiple-directory environment . . . . . Planning internationalized directory services Planning directory customization . . . . . Directory services terms . . . . . . . . . 493 493 . 494 . 496 497 . 498 . 498 . 499 503 . 504 . 504

Chapter 18. Setting Up and Using Domino Administration Tools . . . . 459The Domino Administrator . . . . . . . . Installing the Domino Administrator . . . Setting up the Domino Administrator . . . Starting the Domino Administrator . . . . Navigating Domino Administrator . . . . Selecting a server to administer in the Domino Administrator . . . . . . . . . . . Setting Domino Administration preferences . Tools and preferences for debugging in the Domino Administrator . . . . . . . . Domino Administrator tabs. . . . . . . Web Administrator . . . . . . . . . . Setting up the Web Administrator . . . . Starting the Web Administrator . . . . . Using the Web Administrator . . . . . . The Server Controller and the Domino Console . Starting and stopping the Server Controller . . . . . . 459 459 459 459 460

Chapter 21. Setting Up the Domino Directory . . . . . . . . . . . . . 507The Domino Directory . . . . . . . . . Setting up the Domino Directory for a domain Using a central directory architecture in a Domino domain . . . . . . . . . . Controlling access to the Domino Directory . Corporate hierarchies . . . . . . . . . Setting up Notes clients to use a directory server . . . . . . . . . . . . . . Customizing the Directory Profile . . . . Scheduling replication of the Domino Directory . 507 507 . 508 . 512 . 514 . 516 . 516 517

. 460 . 461 . . . . . . . . 466 467 469 470 473 473 476 477

Chapter 22. Setting Up the LDAP Service . . . . . . . . . . . . . . 519The LDAP Service . . . . . . LDAP service features . . . How the LDAP service works . Setting up the LDAP service . . . . . . . . . . . . . . . . . . . . . . . . . 519 519 519 522

Contents

vii

Starting and stopping the LDAP service . . Customizing the LDAP service configuration Setting up clients to use the LDAP service . . Using LDAP to search a Domain index . . . Monitoring the LDAP service . . . . . . RFCs supported by the LDAP service . . .

. 523 524 . 539 . 540 . 541 . 543

Chapter 23. Managing the LDAP Schema . . . . . . . . . . . . . . 545LDAP Schema . . . . . . . . . . . Attributes . . . . . . . . . . . Object classes . . . . . . . . . . Abstract object classes . . . . . . . Structural object classes . . . . . . . Auxiliary object classes . . . . . . . Syntaxes . . . . . . . . . . . . The Domino LDAP schema . . . . . . The schema daemon . . . . . . . . Domino LDAP Schema database . . . . Methods for extending the schema . . . Guidelines for extending the schema . . Extending the schema using the Schema database . . . . . . . . . . . . Deleting schema elements from the Schema database . . . . . . . . . . . . Schema-checking . . . . . . . . . Searching the root DSE and schema entry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 545 545 545 545 545 546 546 546 548 549 551 552

Picking the server(s) to run the Dircat task . . Specifying the Domino Directories for the Dircat task to aggregate . . . . . . . . . . . Controlling which information is aggregated into a directory catalog . . . . . . . . . Full-text indexing directory catalogs . . . . . Planning issues specific to Extended Directory Catalogs . . . . . . . . . . . . . . Planning issues specific to condensed Directory Catalogs . . . . . . . . . . . . . . Multiple directory catalogs . . . . . . . . Overview of setting up a condensed Directory Catalog . . . . . . . . . . . . . . Overview of setting up an Extended Directory Catalog . . . . . . . . . . . . . . The Dircat task . . . . . . . . . . . . Opening the configuration document for a directory catalog . . . . . . . . . . . Monitoring directory catalogs . . . . . . .

613 614 614 619 620 622 624 625 630 633 635 635

Chapter 27. Setting Up Extended ACLs . . . . . . . . . . . . . . . 637Extended ACL . . . . . . . . . . . . How other database security features restrict extended ACL access settings . . . . . . Elements of an extended ACL . . . . . . Extended ACL access settings . . . . . . Extended ACL subject . . . . . . . . Extended ACL target . . . . . . . . . Extended ACL examples. . . . . . . . Extended ACL guidelines . . . . . . . Setting up and managing an extended ACL . . 637 . . . . . . . . 637 638 638 643 645 650 652 653

. 553 . 556 . 556 . 557

Chapter 24. Using the ldapsearch Utility . . . . . . . . . . . . . . . 559ldapsearch Utility . . . . . . . . . Table of ldapsearch parameters . . . Using search filters with ldapsearch . . Using ldapsearch to return operational attributes . . . . . . . . . . . Examples of using ldapsearch . . . . . . . . . . . . . . . 559 . 559 . 561 . 562 . 562

Chapter 28. Overview of the Domino Mail System . . . . . . . . . . . . 659Messaging overview . . . . . . . . . . . Supported routing, format, and access protocols The Domino mail server and mail routing . . . How mail routes in a Domino system . . . . Domino mail files . . . . . . . . . . . Mail clients . . . . . . . . . . . . . Mail security . . . . . . . . . . . . Working with other mail systems in your organization . . . . . . . . . . . . . Mail performance and monitoring . . . . . The Domino Directory and mail routing . . . Overview of routing mail using Notes routing Overview of routing mail using SMTP . . . . The Domain Name System (DNS) and SMTP mail routing . . . . . . . . . . . . . Examples of using multiple MX records . . . 659 660 661 663 664 665 666 667 667 667 669 671 674 675

Chapter 25. Setting Up Directory Assistance . . . . . . . . . . . . 565Directory Assistance . . . . . How directory assistance works Directory assistance services . Directory assistance concepts . Setting up directory assistance . Directory assistance examples . Monitoring directory assistance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 565 565 566 572 582 599 603

Chapter 26. Setting Up Directory Catalogs . . . . . . . . . . . . . 605Directory Catalogs . . . . . . . . . . . Condensed Directory Catalogs. . . . . . Directory catalogs on servers compared to directory assistance for individual Domino Directories . . . . . . . . . . . . Extended Directory Catalogs . . . . . . Overview of directory catalog setup . . . . Planning directory catalogs . . . . . . . Directory catalogs and client authentication . Directory catalogs and Notes mail encryption . 605 . 605

Chapter 29. Setting Up Mail Routing. . . . . 607 607 609 610 610 613 Planning a mail routing topology . . . . . Connection topologies for mail routing . . The Domino mail router . . . . . . . Clients accessing the Domino server . . . Sample mail routing configurations . . . Creating a Configuration Settings document Routing internal mail . . . . . . . . . . . . . . .

677. . . . . . . 677 677 678 680 680 688 689

viii

Lotus Domino Administrator 7 Help

Configuring Domino to send and receive mail over SMTP . . . . . . . . . . . . . 702

Chapter 30. Customizing the Domino Mail System . . . . . . . . . . . . 721Customizing mail . . . . . . . . . . Requirements for a working mail system . Controlling messaging . . . . . . . Improving mail performance . . . . . Controlling message delivery . . . . . Setting server mail rules . . . . . . . Customizing message transfer . . . . . Customizing Notes routing . . . . . . Customizing SMTP Routing . . . . . Setting up and using message disclaimers . Mail journaling . . . . . . . . . . Setting inbound and outbound MIME and character set options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 721 721 721 722 725 733 737 751 755 789 792

. 798

Integration with DOLS and Sametime . . . . Registering Domino Web Access users . . . . Providing a log-on URL for Domino Web Access users . . . . . . . . . . . . . . . Secure mail for Domino Web Access . . . . . Using realm documents in Domino Web Access Renaming a Domino Web Access user . . . . Monitoring Domino Web Access activity . . . Customizing the look of Domino Web Access Using Domino Web Access agents . . . . . Configuring Domino Web Access for users . . Domino Access for Microsoft Outlook . . . . . Setting up users for installation . . . . . . Upgrading Domino Access for Microsoft Outlook from 6.5.x to 7.0 . . . . . . . . Installing Domino Access for Microsoft Outlook Working with Domino Access for Microsoft Outlook . . . . . . . . . . . . . .

867 868 868 869 870 870 870 871 872 872 884 885 886 886 890

Chapter 31. Setting Up Shared Mail

817817 818 818 819 819 819 822 831

Chapter 35. Monitoring Mail . . . . . 891Tools for mail monitoring . . . . . . . Tracking mail messages . . . . . . . How mail tracking works . . . . . . Generating mail usage reports . . . . . Mail routing event generators . . . . . Setting up mail monitoring . . . . . . Setting up the Reports database . . . . Controlling the Mail Tracking Collector . . Configuring the server for message tracking Tracking a mail message . . . . . . . Generating a mail usage report . . . . Viewing mail usage reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 891 891 891 892 892 892 892 893 895 896 898 900

Shared mail overview . . . . . . . . . . Using multiple active shared mail databases . . How using shared mail affects a users mail file quota . . . . . . . . . . . . . . . How Domino maintains the security of a shared mail database . . . . . . . . . . . . How shared mail works . . . . . . . . . Setting up shared mail databases . . . . . . Managing a shared mail database . . . . . Disabling shared mail . . . . . . . . .

Chapter 32. Setting Up the POP3 Service . . . . . . . . . . . . . . 833The POP3 service . . . . . . . . . . . Supporting outbound mail service for POP3 clients . . . . . . . . . . . . . . Authenticating with the server . . . . . Accessing a mail file from the Notes client and a POP3 client . . . . . . . . . . . Setting up the POP3 service . . . . . . Setting up POP3 users . . . . . . . . . 833 . 833 . 833 . 834 . 834 . 836

Chapter 36. Setting Up the Domino Web Server . . . . . . . . . . . . 903The Domino Web server . . . . . . Web server features . . . . . . Making Web site content changes. . Setting up a Domino server as a Web Hosting Web sites . . . . . . . Custom Web server messages . . . Improving Web server performance . . . . . . . server . . . . . . . . . . . . . . . . . . . . 903 904 904 905 914 934 937

Chapter 33. Setting Up the IMAP Service . . . . . . . . . . . . . . 841The IMAP service . . . . . . . . . . Supporting outbound mail service for IMAP clients . . . . . . . . . . . . . Authenticating with the server . . . . How Domino modifies mail files to support IMAP . . . . . . . . . . . . . Setting up the IMAP service . . . . . Starting and stopping the IMAP task . . Customizing the IMAP service . . . . Setting up IMAP users . . . . . . . . . . . . . . . . 841 . 841 . 841 . . . . . 842 843 843 843 855

Chapter 37. Setting Up Domino to Work with Other Web Servers . . . . 941Setting up Domino to work with other Web servers 941 Setting up Domino to work with IBM HTTP Servers . . . . . . . . . . . . . . 941 Setting up Domino to work with Microsoft IIS servers . . . . . . . . . . . . . . 942

Chapter 38. Setting Up the Web Navigator . . . . . . . . . . . . . 949The Web Navigator . . . . . . . . Setting up a Web Navigator server . . Customizing the Web Navigator . . . The Web Navigator database . . . . Customizing the Web Navigator database . . . . . . . . . . . . . . . 949 949 952 954 955

Chapter 34. Setting Up Domino Web Access . . . . . . . . . . . . . . 867Domino Web Access . Security . . . . . . . . . . . . . . . . . . . . . . . 867 . 867

Contents

ix

Chapter 39. Planning Security . . . . 963Overview of Domino security . . . . . . . Know the business . . . . . . . . . Identify assets and threats (risk analysis) . . Develop strategies to protect your computing environment . . . . . . . . . . . . Develop incident handling procedures . . . Plan and deliver employee training . . . . Keep processes current . . . . . . . . The Domino security model . . . . . . The Domino security team . . . . . . . Security planning checklists . . . . . . Security policies . . . . . . . . . . Setting up an Internet certificate authority . . . 963 . 963 . 963 . . . . . . . . . 964 964 965 965 965 967 969 973 973

Chapter 40. Controlling Access to Domino Servers . . . . . . . . . . 977Server access for Notes users, Internet users, and Domino servers . . . . . . . . . . . Types of server access controls . . . . . Server access list . . . . . . . . . . Deny access list . . . . . . . . . . Notes ID lock out . . . . . . . . . . Anonymous access . . . . . . . . . Network port access . . . . . . . . . Setting up Notes user, Domino server, and Internet user access to a Domino server . . Customizing access to a Domino server . . Validation and authentication for Notes and Domino . . . . . . . . . . . . . . . . . . . . 977 977 977 977 977 978 978

Roles in the ACL . . . . . . . . . . . Managing database ACLs . . . . . . . . Using the Administration Process to update ACLs . . . . . . . . . . . . . . . Setting up the Administration Process for database ACLs . . . . . . . . . . . Managing database ACLs with the Web Administrator . . . . . . . . . . . . Editing entries in multiple ACLs . . . . . Viewing all database ACLs on a server . . . Using the ACL log . . . . . . . . . . Enforcing a consistent access control list . . . Updating Readers and Authors fields . . . . Setting up database access for Internet users Preventing users from accessing forms and views in a Web application . . . . . . . Maximum Internet name-and-password access Requiring an SSL connection to a database

1038 1040 1040 1041 1041 1041 1042 1043 1043 1044 1044 1044 1045 1046

Chapter 43. Protecting User Workstations with Execution Control Lists . . . . . . . . . . . . . . . 1047The execution control list . . . . . The workstation ECL . . . . . How the workstation ECL works . Determining effective access . . . ECL security access options . . . The administration ECL . . . . Deploying and updating workstation . . . . . . . . . . . . ECLs . . . . . . . . . . . . 1047 1047 1047 1048 1048 1050 1055

. 978 . 979 . 993

Chapter 41. Protecting and Managing Notes IDs . . . . . . . . . . . . . 995Domino server and Notes user IDs . . . . . . 995 Certificates . . . . . . . . . . . . . 995 Password-protection for Notes and Domino IDs 997 The password quality scale . . . . . . . . 999 Verifying user passwords during authentication 1000 Setting up password verification . . . . . 1002 Using 128-bit ID file encryption . . . . . . 1003 Assigning multiple passwords to server and certifier IDs . . . . . . . . . . . . 1003 ID recovery . . . . . . . . . . . . 1004 Public key security . . . . . . . . . . 1010 User and server key rollover . . . . . . . 1014 Using cross-certificates to access servers and send secure S/MIME messages . . . . . . 1016 Adding cross-certificates to the Domino Directory or Personal Address Book . . . . 1017

Chapter 44. Setting Up Name-and-Password and Anonymous Access to Domino Servers . . . . . . . . . . . . . 1057Name-and-password authentication for Internet/intranet clients . . . . . . . . . Name-and-password authentication over non-SSL secured connections . . . . . . . Name-and-password authentication over SSL Customizing name-and-password authentication . . . . . . . . . . . . Setting up basic name-and-password authentication . . . . . . . . . . . . Session-based name-and-password authentication for Web clients . . . . . . Controlling the level of authentication for Internet clients . . . . . . . . . . . Managing Internet passwords . . . . . . Multi-server session-based name-and-password authentication for Web users (single sign-on) . Anonymous Internet/intranet access . . . . Validation and authentication for Internet/intranet clients . . . . . . . . 1057 1058 1058 1058 1058 1060 1065 1068 1069 1077 1079

Chapter 42. Controlling User Access to Domino Databases . . . . . . . 1025The database access control list . . Default ACL entries . . . . . Acceptable entries in the ACL . Configuring a database ACL . . Access levels in the ACL . . . Access level privileges in the ACL User types in the ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1025 1025 1026 1032 1033 1035 1038

Chapter 45. Encryption and Electronic Signatures . . . . . . . 1081Encryption . . . . . . Public and private keys Encryption strength . . . . . . . . . . . . . . . . . . . . . . . . 1081 . 1081 . 1082

x

Lotus Domino Administrator 7 Help

Interoperability issues . Mail encryption . . . Electronic signatures .

. . .

. . .

. . .

. . .

. . .

. . .

. . .

. 1082 . 1083 . 1085

Chapter 46. Setting Up a Domino Server-Based Certification Authority . 1089Domino server-based certification authority . . Issued Certificate List (ICL) . . . . . . Certificate Revocation List (CRL) . . . . Setting up a server-based Domino certification authority . . . . . . . . . . . . Administering a Domino CA . . . . . . Migrating a certifier to the CA process . . Adding a certifier to the CA process . . . Viewing certifiers running under the CA process . . . . . . . . . . . . . Creating a certifier for a server-based CA . . To create a Notes certifier . . . . . . . To create an Internet certifier . . . . . . Key usage extensions and extended key usage Creating the Certificate Requests database . . Setting up SSL on a server-based CA server . . To set up SSL on a server-based CA server Signing server certificates using the Certificate Requests database . . . . . . . . . . To sign a server certificate request . . . . Modifying a server-based CA . . . . . . To modify a certifier through the ICL . . . To modify a certifier through the Certifier document . . . . . . . . . . . . Viewing certificate requests . . . . . . . Revoking a certificate . . . . . . . . . To revoke a certificate . . . . . . . . Backing up and recovering a certifier . . . . To back up a certifier . . . . . . . . To recover a certifier. . . . . . . . . Disabling a certifier . . . . . . . . . . Processing client certificate requests from IBM Workplace users . . . . . . . . . . . . 1089 . 1089 . 1090 . . . . . . . . 1090 1091 1092 1093

Securing messages with S/MIME . . . . . Setting up Notes and Internet clients for SSL authentication . . . . . . . . . . . . Internet certificates for SSL and S/MIME . . . Setting up Notes clients for S/MIME . . . . Setting up Notes and Internet clients for SSL client authentication . . . . . . . . . . Setting up SSL for Notes or Domino using SMTP . . . . . . . . . . . . . . Using SSL when setting up directory assistance for LDAP directories . . . . . . . . .

1123 1124 1125 1130 1133 1135 1136

Chapter 49. Rolling Out Databases

11371137 1137 1138 1140 1141 1142

1093 1094 1094 1094 1096 . 1098 . 1099 1100 . . . . . . . . . . . . 1101 1101 1102 1102 1103 1103 1103 1103 1104 1104 1104 1104

Database design, management, and administration Creating a database . . . . . . . . . . Rolling out a database . . . . . . . . . Copying a new database to a server . . . . Creating a Mail-In Database document for a new database . . . . . . . . . . . . Signing a database or template . . . . . .

Chapter 50. Organizing Databases on a Server . . . . . . . . . . . . . 1145Organizing databases on a server . . . . . Directory links . . . . . . . . . . Database links . . . . . . . . . . . Creating directory folders . . . . . . . Creating directory and database links . . . Restricting access to a servers data directory . . . . . 1145 1145 1145 1145 1146 1147

Chapter 51. Setting Up and Managing Full-text Indexes . . . . . . . . . 1149Full-text indexes for single databases . . . . Database indexes and replication . . . . Database indexes and the Domain Index . . Security and full-text indexes for single databases . . . . . . . . . . . . Restricted field names in full-text indexing Creating and updating full-text indexes for single databases . . . . . . . . . . Changing update frequency for a databases full-text index . . . . . . . . . . . Manually updating full-text indexes for single databases . . . . . . . . . . . . Deleting full-text indexes for single databases . 1149 . 1149 . 1149 . 1149 1150 . 1150 . 1152 . 1152 1153

. 1105

Chapter 47. Setting Up SSL on a Domino Server . . . . . . . . . . 1107SSL security . . . . . . . . . . . . Internet protocols supported by Domino and SSL . . . . . . . . . . . . . . Setting up SSL on a Domino server . . . . Setting up database access for SSL clients . . Managing server certificates and certificate requests . . . . . . . . . . . . . Creating a self-certified certificate to test SSL certification . . . . . . . . . . . . Modifying SSL cipher restrictions . . . . Authenticating Web SSL clients in secondary Domino and LDAP directories . . . . . SSL session resumption . . . . . . . . . 1107 . 1107 . 1107 . 1118 . 1118 . 1120 . 1120 . 1121 . 1122

Chapter 52. Setting Up Database Libraries and Catalogs . . . . . . . 1155Database libraries . . . . . . . . . Server libraries . . . . . . . . . Local libraries . . . . . . . . . . Creating a database library and assigning librarians . . . . . . . . . . . Publishing databases in a library . . . Database catalogs . . . . . . . . . Uses for a servers database catalog . . Administering a servers database catalog Setting up a servers database catalog . . . . . . . . . . . . 1155 . 1155 . 1155 . . . . . . 1155 1156 1157 1157 1157 1157

Chapter 48. Setting Up Clients for S/MIME and SSL . . . . . . . . . 1123SSL and S/MIME for clients . . . . . . . Authenticating clients and servers using SSL . 1123 1123

Contents

xi

Chapter 53. Monitoring the Domino Server . . . . . . . . . . . . . . 1159Monitoring the Domino system . . . . . . . Monitoring Configuration database . . . . . Monitoring server shutdown . . . . . . . Monitoring processes running in the Domino server environment . . . . . . . . . . Monitoring events on the Domino system . . Event generators . . . . . . . . . . . Event handlers . . . . . . . . . . . Viewing an event report . . . . . . . . Viewing event messages, causes, and solutions Customizing the appearance of the Domino server console and Domino Administrator console . . . . . . . . . . . . . . Statistics and the Domino system . . . . . Platform statistics . . . . . . . . . . Using the Domino Administrator to monitor statistics . . . . . . . . . . . . . . Using mail-in statistics . . . . . . . . . Charting statistics . . . . . . . . . . 1159 1159 1160 1160 1161 1161 1169 1175 1175

Configuring traps for Domino events . Configuring traps for NetView for AIX Troubleshooting the Domino SNMP Agent Check Server Tasks . . . . . . . Check MIB Values using the SNMP Management Station . . . . . .

. . . . .

. . . . .

. . . .

1205 1206 1207 1207

. 1207

Chapter 55. Using Server Health Monitoring . . . . . . . . . . . . 1209Server Health Monitor . . . . . . . . . Table of Server Health Monitor statistics . . Table of Server Health Monitor ratings . . Using the Server Health Monitor . . . . Server Health reports . . . . . . . . Working with Server Health Monitor statistics Viewing server health with the Server Health Monitor . . . . . . . . . . . . . . . . . . 1209 1210 1211 1212 1214 1215

1175 1177 1179 1182 1185 1185

. 1216

Chapter 56. Monitoring Domino Domains . . . . . . . . . . . . . 1219Domino Domain Monitoring (DDM) . . . . . Domino domain monitoring . . . . . . . DDM probes . . . . . . . . . . . . Maintaining DDM Probes . . . . . . . . DDM server collection hierarchy . . . . . Managing the DDM server collection hierarchy Domino Domain Monitor database (DDM.NSF) Viewing events in the Domino Domain Monitor database . . . . . . . . . . . Maintaining the Domino Domain Monitor database. . . . . . . . . . . . . . Using IBM Lotus instant messaging in the Domino domain monitor database . . . . . Filtering events in DDM . . . . . . . . 1219 1219 1220 1242 1243 1245 1247 1248 1249 1252 1253

Chapter 54. Using the Domino SNMP agent . . . . . . . . . . . . . . 1189The Domino SNMP Agent . . . . . . . . . The Domino SNMP Agents main functions Out-of-band server status through the MIB Control of a Domino server through SNMP Real-time alerts on server status . . . . . Forwarding of Domino events as SNMP traps Domino statistics through the MIB . . . . SNMP security . . . . . . . . . . . Domino SNMP Agent architecture . . . . . . About the Domino MIB . . . . . . . . . System requirements . . . . . . . . . . Microsoft Windows requirements . . . . . IBM AIX requirements . . . . . . . . . Linux requirements . . . . . . . . . . Solaris requirements . . . . . . . . . . z/OS requirements . . . . . . . . . . Configuring the Domino SNMP Agent . . . . Special considerations for partitioned servers Configuring the Domino SNMP Agent for Microsoft Windows . . . . . . . . . . Configuring the Domino SNMP Agent for AIX Configuring the Domino SNMP Agent for Linux . . . . . . . . . . . . . . . Configuring the Domino SNMP Agent for Solaris . . . . . . . . . . . . . . Configuring the Domino SNMP Agent for z/OS . . . . . . . . . . . . . . . Completing the configuration of the Domino SNMP Agent . . . . . . . . . . . . Manually starting and stopping the Domino SNMP Agent . . . . . . . . . . . . Using NET-SNMP with the Domino SNMP Agent . . . . . . . . . . . . . . Using the Domino MIB with your SNMP management station . . . . . . . . . . . Configuring traps for HP OpenView . . . . 1189 1189 1189 1189 1190 1190 1192 1192 1192 1193 1193 1194 1194 1194 1194 1194 1194 1194 1196 1196 1197 1198 1199 1201 1203 1203 1205 1205

Chapter 57. Transaction Logging and Recovery . . . . . . . . . . . . . 1255Transaction logging . . . . . . . . . . . Understanding the database instance ID (DBIID) . . . . . . . . . . . . . . How transaction logging works . . . . . . Planning for transaction logging . . . . . . Setting up a Domino server for transaction logging . . . . . . . . . . . . . . Changing transaction logging settings . . . . Disabling transaction logging for a specific database. . . . . . . . . . . . . . View logging . . . . . . . . . . . . Using transaction logging for recovery . . . Fault recovery . . . . . . . . . . . . . Operating systems and fault recovery . . . . Enabling fault recovery . . . . . . . . . Specifying a cleanup script for fault recovery Setting up a Fault Reports database . . . . . Creating a Fault Reports database . . . . . Collecting diagnostic information after a server or client crash . . . . . . . . . . . . . . Writing status bar history to a log file . . . . Setting up automatic diagnostic data collection on clients . . . . . . . . . . . . . 1255 1256 1256 1257 1257 1259 1259 1260 1260 1261 1261 1261 1261 1262 1262 1263 1264 1264

xii

Lotus Domino Administrator 7 Help

Setting up automatic diagnostic data collection on the server . . . . . . . . . . . . 1264 Enabling the Fault Analyzer task on the server 1265 Using the IBM_TECHNICAL_SUPPORT directory 1266

Chapter 58. Using Log Files

. . . . 1269. 1269 1269 . 1270 . 1271 1273 . 1273 . 1274 . 1274 . 1274

Recertifying a server ID . . . . . . Uninstalling a Domino partitioned server To remove all Domino partitions on a computer . . . . . . . . . . To remove one Domino partition . . Upgrading a server name to hierarchical .

. . . . .

. . . . .

. 1326 . 1327 . 1327 . 1327 . 1327

The Domino server log (LOG.NSF) . . . . . Controlling the size of the log file (LOG.NSF) Viewing the log file (LOG.NSF) . . . . . Searching the log file (LOG.NSF) . . . . The Domino Web server log (DOMLOG.NSF) Setting up the Domino Web server log (DOMLOG.NSF) . . . . . . . . . . Viewing the Domino Web server log (DOMLOG.NSF) . . . . . . . . . . Logging Domino Web server requests . . . Domino Web server logging to text files . .

Chapter 62. Using Activity Trends

13291329 1330 1331 1332 1335 1337 1340 1342 1342 1343 1344 1346 1348 1349 1350 1351 1351 1352 1352 1353 1357 1358

Chapter 59. Setting Up Activity Logging . . . . . . . . . . . . . 1279Activity Logging . . . . . . The information in the log file Configuring activity logging . Viewing activity logging data . . . . . . . . . . . . . . . . . . . . . . . . 1279 1279 1286 1287

Chapter 60. Maintaining Databases

12891289 1289 1292 1295 1297 1298 1306 1307 1312 1314 1314 1315 1317

Database maintenance . . . . . . . . . . The Files tab in the Domino Administrator Monitoring replication of a database . . . . Monitoring database activity . . . . . . . Replicating unread marks . . . . . . . . Updating database indexes and views . . . . Synchronizing databases with master templates Fixing corrupted databases . . . . . . . Moving databases . . . . . . . . . . Converting non-mail databases . . . . . . Deleting databases . . . . . . . . . . Database analysis . . . . . . . . . . Running a database analysis . . . . . . .

Chapter 61. Maintaining Domino Servers . . . . . . . . . . . . . 1319Changing the server administrator . . . . . Setting and managing passwords for the server console . . . . . . . . . . . . . . Setting a new server console password . . Changing an existing server console password Removing a server console password . . . Decommissioning a Domain Search server . . To decommission a Domain Search server . Decommissioning a server. . . . . . . . Before decommissioning a server . . . . To run an analysis report on Decommission Server . . . . . . . . . . . . . Viewing the report in the Results database Report comparisons . . . . . . . . . Deleting a server name . . . . . . . . . Finding a server name in the domain with the Domino Administrator or the Web Administrator To view the log of locations . . . . . . . 1319 . 1320 . 1320 1320 . 1320 . 1320 . 1320 . 1321 . 1321 . 1321 1322 . 1324 . 1325 . 1325 . 1326

Activity Trends . . . . . . . . . . . . Setting up Activity Trends . . . . . . . . Understanding how Activity Trends collects data . . . . . . . . . . . . . . . Activity Trends server and statistics profiles Resource balancing in Activity Trends . . . . Primary and secondary goals for resource balancing . . . . . . . . . . . . . Understanding resource-balancing behavior Analyzing resource-balancing distributions Creating a proposal for balanced resources Evaluating server activity for resource balancing . . . . . . . . . . . . . Understanding current and projected profile charts . . . . . . . . . . . . . . Using resource balancing in Activity Trends to decommission a server . . . . . . . . . Submitting a resource-balancing plan to the Domino Change Manager . . . . . . . . Domino Change Manager . . . . . . . . Using the Tell ChangeMan command at the Domino console . . . . . . . . . . . ACLs for the Domino Change Control database Default ACL settings for the Domino Change Control database . . . . . . . . . . . Setting ACLs for mail database moves during resource balancing . . . . . . . . . . Resource-balancing plans . . . . . . . . Database move sequences . . . . . . . . Setting up plan documents for resource balancing . . . . . . . . . . . . . Working with Domino Change Manager constraints . . . . . . . . . . . . .

Chapter 63. Improving Server Performance . . . . . . . . . . . 1361Improving Domino server performance . . . . Tools for measuring server performance . . . Improving basic server performance and capacity . . . . . . . . . . . . . . Improving partitioned server performance and capacity . . . . . . . . . . . . . . Improving Agent Manager performance . . . Improving server performance using the configuration collector . . . . . . . . . Improving database and Domino Directory performance . . . . . . . . . . . . Tips for tuning mail performance . . . . . Improving Windows 2000 server performance Improving UNIX server performance . . . . Sources for improving server performance 1361 1361 1362 1364 1364 1366 1366 1367 1369 1369 1370

Contents

xiii

Chapter 64. Improving Database Performance . . . . . . . . . . . 1371Setting advanced database properties . . . Database properties that optimize database performance . . . . . . . . . . Soft deletions . . . . . . . . . . The database cache . . . . . . . . Tools for monitoring database size . . . Monitoring database size . . . . . . Compacting databases . . . . . . . Determining the file format of a database Compact options . . . . . . . . . Database size quotas . . . . . . . Deleting inactive documents . . . . . Allowing more fields in a database . . . . . . . . . . . . . . . . 1371 . . . . . . . . . . . 1371 1376 1376 1379 1379 1379 1381 1382 1386 1387 1389

Chapter 65. Using Server.Load . . . 1391Server.Load . . . . . . . . . . . . . 1391 Server.Load agents . . . . . . . . . . 1391 Server.Load metrics and messaging statistics 1392 Setting up clients and servers for Server.Load 1395 Built-in and custom Server.Load scripts . . . 1396 Running the built-in Server.Load workloads 1401

Chapter 66. Troubleshooting . . . . 1431Troubleshooting . . . . . . . . Troubleshooting tools . . . . . Troubleshooting the Domino system Overview of server maintenance . . . . . . . . . . . . . . . . . 1431 1431 1433 1508

Appendix A Server Commands . . . . . . . . . . . . 1511Domino server commands . Broadcast . . . . . Dbcache Disable . . . Dbcache Flush. . . . Dbcache Show . . . Drop . . . . . . . Exit . . . . . . . Help . . . . . . . Load . . . . . . . Platform . . . . . . Pull . . . . . . . Push . . . . . . . Quit . . . . . . . Replicate . . . . . Restart Port . . . . Restart Server . . . . Restart Task . . . . Route . . . . . . Save . . . . . . . Set Configuration . . Set Rules . . . . . Set SCOS . . . . . Set Secure . . . . . Set Statistics . . . . Show Agents . . . . Show AI. . . . . . Show Allports . . . . Show Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1511 1512 1513 1513 1514 1514 1514 1514 1515 1515 1516 1517 1518 1518 1519 1520 1520 1520 1521 1521 1521 1522 1522 1523 1523 1523 1523 1524

Show Configuration . . . . . . . . . Show Directory . . . . . . . . . . Show Diskspace . . . . . . . . . . Show Heartbeat . . . . . . . . . . Show Memory . . . . . . . . . . Show Monitors . . . . . . . . . . Show Opendatabases . . . . . . . . Show Performance . . . . . . . . . Show Port . . . . . . . . . . . . Show Schedule . . . . . . . . . . Show SCOS . . . . . . . . . . . Show Server . . . . . . . . . . . Show Stat . . . . . . . . . . . . Show Stat Platform . . . . . . . . . Show Tasks. . . . . . . . . . . . Show Transactions . . . . . . . . . Show Users . . . . . . . . . . . Show Xdir . . . . . . . . . . . . Start Consolelog . . . . . . . . . . Start Port . . . . . . . . . . . . Stop Consolelog . . . . . . . . . . Stop Port . . . . . . . . . . . . Sucache refresh . . . . . . . . . . Sucache show . . . . . . . . . . . Tell . . . . . . . . . . . . . . Administration Process Tell Commands . . Agent Manager Tell commands . . . . . Certificate Authority process tell commands Change Manager tell commands . . . . Cluster Replicator Tell commands . . . . DIIOP Tell commands . . . . . . . . Directory Cataloger Tell commands . . . LDAP Tell commands . . . . . . . . Router Tell commands . . . . . . . . Schedule Manager Tell commands . . . . SMTP Server Tell commands . . . . . . Statistic Collector Tell Commands . . . . Web Navigator Tell commands . . . . . Web Server Tell commands . . . . . . Trace . . . . . . . . . . . . . . Domino and DB2 server commands . . . . DB2 Access . . . . . . . . . . . . DB2 Catalog . . . . . . . . . . . DB2 Group . . . . . . . . . . . . DB2 Group Info . . . . . . . . . . DB2 Info . . . . . . . . . . . . DB2 Purge . . . . . . . . . . . . DB2 Reconnect . . . . . . . . . . Using a console to send commands to a server Capturing server command output in a file Entering commands at the console at the server Sending Controller and shell commands from a remote console . . . . . . . . . . . Sending commands from the Domino Administrator console . . . . . . . . . Adding commands to the Commands menu Adding a group of servers to the Send menu Sending commands from a Web Administrator console . . . . . . . . . . . . . . Using the Domino Character Console to access the server console . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

1524 1525 1526 1526 1526 1527 1527 1527 1527 1528 1528 1529 1530 1530 1531 1531 1532 1533 1534 1535 1535 1535 1535 1536 1536 1537 1538 1539 1540 1540 1541 1542 1542 1542 1543 1544 1544 1544 1544 1545 1546 1546 1547 1547 1548 1549 1550 1551 1551 1551 1551

. 1552 . 1553 1555 1555 . 1555 . 1556

xiv

Lotus Domino Administrator 7 Help

To start the cconsole program Remote cconsole . . . . . Additional console commands Command line switches . .

. . . .

. . . .

. . . .

. . . .

. . . .

. . . .

1556 1556 1556 1556

Appendix B Server TasksDomino server tasks . Running server tasks . . . . . . . . . . . . . . . .

1559. 1559 . 1561

Appendix C NOTES.INI Settings . . . . . . . . . . . . . 1563Editing the NOTES.INI file . . . . . To edit the NOTES.INI file using a Configuration Settings document . . Assigning Notes.INI settings through user NOTES.INI Settings . . . . . . . . Admin . . . . . . . . . . . AgentThreadDebug . . . . . . . Allow_Access . . . . . . . . . Allow_Access_portname. . . . . . Allow_Anonymous_Access_From_DB2 Allow_Passthru_Access. . . . . . Allow_Passthru_Callers . . . . . Allow_Passthru_Clients . . . . . Allow_Passthru_Targets . . . . . AMgr_DisableMailLookup . . . . AMgr_DocUpdateAgentMinInterval . AMgr_DocUpdateEventDelay . . . AMgr_NewMailAgentMinInterval . . AMgr_NewMailEventDelay . . . . AMgr_SchedulingInterval . . . . . AMgr_UntriggeredMailInterval . . . AMgr_WeekendDays . . . . . . AppleTalkNameServer . . . . . . AutoLogoffMinutes . . . . . . . BatchRegFile . . . . . . . . . BillingAddinOutput . . . . . . . BillingAddinRuntime . . . . . . BillingAddinWakeup . . . . . . BillingClass . . . . . . . . . BillingSuppressTime . . . . . . . CDP_Command . . . . . . . . CertificateExpChecked . . . . . . CertifierIDFile . . . . . . . . . ClockType . . . . . . . . . . Clrepl_Obeys_Quotas . . . . . . Cluster_Replicators . . . . . . . COMnumber . . . . . . . . . Compact_Retry_Rename_Wait . . . Console_Log_Enabled . . . . . . Console_Loglevel. . . . . . . . Console_Log_Max_Kbytes . . . . . Country_Language . . . . . . . Create_File_Access . . . . . . . Create_Replica_Access . . . . . . CSEnblRstTm . . . . . . . . . CTF . . . . . . . . . . . . DateOrder . . . . . . . . . . DateSeparator . . . . . . . . . DB2Database . . . . . . . . . . . . 1563 1563 1563 1563 1564 1564 1564 1564 1565 1565 1566 1566 1566 1566 1567 1567 1567 1568 1568 1568 1568 1569 1569 1569 1569 1570 1570 1570 1571 1571 1571 1572 1572 1572 1572 1573 1573 1574 1574 1574 1575 1575 1575 1576 1576 1576 1576 1577 . . . policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

DB2DBCodepage . . . . . . . . DB2_DBS_Per_Schema . . . . . . DB2Directory . . . . . . . . . DB2Init . . . . . . . . . . . DB2Instance . . . . . . . . . DB2QueryViewRowLimit . . . . . DB2UDFPath . . . . . . . . . DB2UDFServer . . . . . . . . DB_Creation_Default_Type . . . . DB2_DBS_PER_SCHEMA . . . . . DDE_Timeout . . . . . . . . . DDM_SecProbe_PersonDoc_Limit . . Debug_Outfile. . . . . . . . . Debug_Roaming . . . . . . . . Debug_Smart_Upgrade . . . . . . Debug_SSL_Cert . . . . . . . . DEBUG_SSO_TRACE_LEVEL . . . Debug_ThreadID . . . . . . . . Debug_Fault_Analyzer . . . . . . Default_Index_Lifetime_Days . . . Deny_Access . . . . . . . . . Deny_Access_portname . . . . . . Desktop . . . . . . . . . . . DIIOPConfigUpdateInterval . . . . DIIOPCookieCheckAddress . . . . DIIOPCookieTimeout . . . . . . DIIOP_Debug_Invoke . . . . . . DIIOP_DUP_KEYRING . . . . . DIIOPDNSLookup . . . . . . . DIIOPIgnorePortLimits . . . . . . DIIOPIORHost . . . . . . . . DIIOPLogLevel . . . . . . . . Dircat_Include_Readerslist_Notes . . Directory . . . . . . . . . . Disable_Cluster_Replicator . . . . Disable_SaveNSDConfig . . . . . Disable_SaveServerConfig . . . . . Disable_View_Rebuild_Opt . . . . DisabledPorts . . . . . . . . . DisableLDAPOnAdmin . . . . . Display_MessageID . . . . . . . Display_MessageSeverity . . . . . Domain . . . . . . . . . . . DominoCompleteDocType . . . . . DominoDisableLastModifiedWithETAGS DominoDisablePassthruHTML . . . DominoNoBanner . . . . . . . DominoNoDirLinks . . . . . . . DominoR5IntlURLDecoding . . . . DominoValidateFramesetSRC . . . . DominoXURLProcess . . . . . . Dont_Cache_Monitor_Formulas . . . Dont_Use_Remembered_Addresses. . DST . . . . . . . . . . . . DSTlaw . . . . . . . . . . . DST_Begin_Date . . . . . . . . DST_End_Date . . . . . . . . EditExpnumber . . . . . . . . EditImpnumber . . . . . . . . EmptyTrash . . . . . . . . . Enable_ACL_Files . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

1577 1577 1577 1578 1578 1578 1579 1579 1579 1579 1580 1580 1580 1581 1581 1581 1581 1582 1582 1582 1583 1583 1583 1584 1584 1584 1585 1585 1586 1586 1586 1586 1587 1587 1587 1588 1588 1588 1589 1589 1589 1590 1590 1590 1590 1591 1591 1592 1592 1592 1593 1593 1593 1594 1594 1595 1595 1596 1596 1596 1597

Contents

xv

EnableBiDiNotes . . . . . . . . . . . 1597 Enforce_Personal_Agents . . . . . . . . 1597 ExtMgr_AddIns . . . . . . . . . . . 1598 Fault_Analyzer_Match_Percentage . . . . . 1598 FaultRecoveryFromINI . . . . . . . . . 1599 FileDlgDirectory . . . . . . . . . . . 1599 Fixup_Tasks . . . . . . . . . . . . 1599 FormulaTimeout . . . . . . . . . . . 1599 FT_Domain_Directory_Name . . . . . . . 1600 FT_Domain_IdXthdsS . . . . . . . . . 1600 FT_Index_Attachments . . . . . . . . . 1600 FT_Intl_Setting . . . . . . . . . . . 1600 FT_Max_Search_Results . . . . . . . . 1601 FT_No_Compwintitle . . . . . . . . . 1601 FTG_No_Summary . . . . . . . . . . 1601 FT_Summ_Default_Language . . . . . . 1602 FTUpdate_Idle_Time . . . . . . . . . 1602 FTUpdate_Idle_Time_MS . . . . . . . . 1602 GuessMIMEBodyLang . . . . . . . . . 1603 Health_Report_Purge_After_N_Days . . . . 1603 HTTPEnableConnectorHeaders . . . . . . 1603 HTTPLogUnauthorized. . . . . . . . . 1604 HTTP_PWD_Change_Cache_Hours . . . . 1604 ICMNotesPort . . . . . . . . . . . . 1604 ID_Recovery_Suppress_Recovery_Msg . . . 1604 IM_Enable_SSO . . . . . . . . . . . 1605 IMAILExactSize . . . . . . . . . . . 1605 IMAP_Config_Update_Interval . . . . . . 1605 IMAP_Convert_Nodisable_Folder_Refs . . . 1606 IMAPDisableFTIImmedUpdate . . . . . . 1606 IMAPDisableMsgCache . . . . . . . . 1607 IMAPGreeting . . . . . . . . . . . . 1607 IMAPNotesPort . . . . . . . . . . . 1607 IMAPRedirectSSLGreeting . . . . . . . . 1607 IMAP_Session_Timeout . . . . . . . . 1608 IMAPShowIdleStatus . . . . . . . . . 1608 IMAPSSLGreeting . . . . . . . . . . 1608 IM_No_Setup . . . . . . . . . . . . 1608 IM_USE_CANONICAL_NAME . . . . . . 1608 Incoming Mail Sound . . . . . . . . . 1609 INET_Authenticate_with_Secondary . . . . 1609 iNotes_WA_AuthTokenName. . . . . . . 1609 iNotes_WA_AutoUseWebmail . . . . . . 1610 iNotes_WA_DefaultFormatPlainText . . . . 1610 iNotes_WA_DisableActCntSecurity . . . . . 1610 iNotes_WA_DisableBothFormats . . . . . . 1611 iNotes_WA_DisableRecodeMIMECharset . . . 1611 inotes_WA_DisableReuseChildWindows . . . 1611 iNotes_wa_GZIP_Content_Types_Excluded 1611 iNotes_wa_GZIP_Content_Types_Included 1612 iNotes_wa_GZIP_Disable . . . . . . . . 1612 iNotes_WA_LogoutRedirect . . . . . . . 1612 iNotes_WA_LogoutScrubType . . . . . . 1613 iNotes_WA_MaxRowsPerLine . . . . . . 1614 iNotes_WA_NameLookupMaxNumMatch . . 1614 iNotes_WA_NamePickerSearchAccentInsensitive 1615 iNotes_WA_NoWebmail . . . . . . . . 1615 iNotes_WA_OpenElementNoStore . . . . . 1615 iNotes_WA_PortalLogout . . . . . . . . 1616 iNotes_WA_PortalOffline . . . . . . . . 1616 iNotes_WA_PortalSkipEndIESession . . . . 1616

iNotes_WA_PrintUserStyleSheet . . . . iNotes_WA_QueryAgents . . . . . . iNotes_WA_SametimeNameFormat . . . iNotes_WA_SametimeProtocol . . . . iNotes_wa_SecMailPreferNotes . . . . iNotes_WA_SkipEndIESession . . . . iNotes_WA_UseInternetAddrForXsp . . InstallType . . . . . . . . . . . JavaEnableJIT . . . . . . . . . . JavaJITName . . . . . . . . . . JavaMaxHeapSize . . . . . . . . JavaMinHeapSize . . . . . . . . JavaNoAsyncGC . . . . . . . . . JavaNoClassGC . . . . . . . . . JavaStackSize . . . . . . . . . . JavaUserClasses . . . . . . . . . JavaVerbose . . . . . . . . . . JavaVerboseGC . . . . . . . . . KeyFileName . . . . . . . . . . KitType . . . . . . . . . . . . LANnumber . . . . . . . . . . LDAPBatchAdds . . . . . . . . . LDAPConfigUpdateInterval . . . . . LDAPGroupMembership . . . . . . LDAPIdleSessionExtendedTimeout . . . LDAPIdleSessionExtendedTimeoutClients LDAPIdleSessionTimeout . . . . . . LDAPNotesPort . . . . . . . . . LDAPPre55Outlook . . . . . . . . LDAPName_Update_Suppress_Time . . Location . . . . . . . . . . . . Log . . . . . . . . . . . . . Log_AgentManager . . . . . . . . Log_Authentication . . . . . . . . Log_Connections . . . . . . . . . Log_Console . . . . . . . . . . Log_DirCat . . . . . . . . . . LogFile_Dir . . . . . . . . . . Log_Replication . . . . . . . . . Log_Sessions . . . . . . . . . . LogStatusBar . . . . . . . . . . Log_Tasks . . . . . . . . . . . Log_Update . . . . . . . . . . Log_View_Events . . . . . . . . MailBoxDisableTDNLogging . . . . . MailCharSet . . . . . . . . . . MailCompactDisabled . . . . . . . MailCompactHour . . . . . . . . MailConvertMIMEonTransfer. . . . . Mail_Disable_Implicit_Sender_Key . . MailLogToEventsOnly . . . . . . . Mail_Log_To_MiscEvents . . . . . . MailServer . . . . . . . . . . . MailSetup . . . . . . . . . . . Mail_Skip_NoKey_Dialog . . . . . . MailSystem . . . . . . . . . . . MailTimeout . . . . . . . . . . MailTimeoutMinutes . . . . . . . MailUpgradeFolder . . . . . . . . Map_Retry_Delay . . . . . . . . Max_Config_Files . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

1616 1617 1617 1618 1618 1619 1619 1620 1620 1620 1620 1621 1621 1621 1621 1622 1622 1622 1623 1623 1623 1624 1624 1624 1625 1626 1626 1626 1626 1627 1627 1627 1628 1628 1629 1630 1630 1630 1631 1631 1631 1632 1632 1632 1633 1633 1634 1634 1635 1635 1635 1635 1636 1636 1637 1637 1637 1637 1638 1638 1638

xvi

Lotus Domino Administrator 7 Help

Max_NSDInfo_Files . . . . . . . . Memory_Quota . . . . . . . . . MinNewMailPoll . . . . . . . . . Move_Mail_File_Expiration_Days . . . MSAACompatibility . . . . . . . . MSAAFieldNameHelp . . . . . . . MTCDailyTasksHour . . . . . . . MTMaxResponses . . . . . . . . Names . . . . . . . . . . . . NB_Collect_Response_Times . . . . . NB_SSL_Option . . . . . . . . . NetWareSocket . . . . . . . . . NetWareSpxSettings . . . . . . . . NewMailInterval . . . . . . . . . NewUserServer . . . . . . . . . NoDesignMenu . . . . . . . . . NoExternalApps . . . . . . . . . No_Force_Activity_Logging . . . . . NoMailMenu . . . . . . . . . . NoMsgCache . . . . . . . . . . NotesStreamPlatformDefault . . . . . NSF_Buffer_Pool_Size . . . . . . . NSF_DbCache_Disable . . . . . . . NSF_DbCache_Maxentries. . . . . . NSF_Quota_Method . . . . . . . . Num_Compact_Rename_Retries . . . . NWNDSPassword . . . . . . . . NWNDSUserID . . . . . . . . . OptimizeImagePasteSize . . . . . . Passthru_Hangup_Delay . . . . . . Passthru_LogLevel . . . . . . . . PhoneLog . . . . . . . . . . . PKCS11_Library . . . . . . . . . Platform_Statistics_Disabled . . . . . POP3ConfigUpdateInterval . . . . . POP3_Disable_Cache . . . . . . . POP3DNSLookup . . . . . . . . POP3Domain . . . . . . . . . . POP3_Enable_Cache_Stats . . . . . . POP3MarkRead . . . . . . . . . POP3_Message_Stat_Cache_NumPerUser. POP3NotesPort . . . . . . . . . portname_MaxSessions . . . . . . . Ports . . . . . . . . . . . . . Process_Monitor_Disabled . . . . . . ProgramMode . . . . . . . . . . Repl_Error_Tolerance . . . . . . . ReplicationTimeLimit . . . . . . . Replicators . . . . . . . . . . . Repl_Obeys_Quotas . . . . . . . . Report_DB . . . . . . . . . . . ReportUseMail . . . . . . . . . RouterAllowConcurrentXferToAll . . . RouterDisableMailToGroups . . . . . RouterDSNForNullReversePath . . . . RouterEnableMailByDest . . . . . . RTR_Logging . . . . . . . . . . Sched_Dialing_Enabled . . . . . . . Sched_Purge_Interval . . . . . . . Schedule_Check_Entries_When_Validating Schedule_No_CalcStats . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

1639 1639 1639 1639 1640 1640 1640 1641 1641 1642 1642 1643 1643 1643 1643 1643 1644 1644 1645 1645 1645 1645 1646 1646 1646 1647 1647 1647 1648 1648 1648 1649 1649 1649 1650 1650 1650 1650 1651 1651 1651 1651 1652 1652 1652 1653 1653 1653 1653 1654 1654 1654 1654 1655 1655 1655 1656 1656 1656 1657 . 1657

Schedule_No_Validate . . . . . . Schema_Daemon_Breaktime . . . . Schema_Daemon_Idletime . . . . . Schema_Daemon_Reloadtime. . . . Schema_Daemon_Resynctime . . . Schema_Daemon_Resynctime . . . ScriptCountryID . . . . . . . . ScriptLanguageID . . . . . . . Secure_Disable_FullAdmin . . . . SecureMail . . . . . . . . . . Server_Availability_Threshold . . . Server_Cluster_Default_Port . . . . Server_Console_Password . . . . . ServerKeyFileName . . . . . . . Server_Max_Concurrent_Trans . . . Server_MaxSessions . . . . . . . Server_MaxUsers . . . . . . . . ServerName . . . . . . . . . ServerNoReplRequests . . . . . . ServerPullReplication . . . . . . ServerPushReplication . . . . . . Server_Restart_Delay . . . . . . Server_Restricted . . . . . . . . Server_Session_Timeout . . . . . Server_Show_Performance . . . . ServerTasks . . . . . . . . . ServerTasksAthour . . . . . . . Server_TransInfo_Range . . . . . Setup . . . . . . . . . . . . SetupDB . . . . . . . . . . Setup_First_Server_Public_Key_Width . SetupServerAddress . . . . . . . SetupServerName . . . . . . . Shutdown_Monitor_Disabled . . . . SMIME_Strong_Algorithm . . . . SMIME_Weak_Algorithm . . . . . SMTPAllHostsExternal . . . . . . SMTP_Config_Update_Interval . . . SMTPDebug . . . . . . . . . SMTPDebugIO . . . . . . . . SMTPExpandDNSBLStats . . . . . SMTPExpandDNSWLStats . . . . SMTPGreeting . . . . . . . . . SMTPNotesPort . . . . . . . . SMTPNoVersionInRcvdHdr . . . . SMTPMaxForRecipients . . . . . SMTPMTA_Space_Repl_Char. . . . SMTPRelayHostsandDomains . . . SMTPSaveImportErrors . . . . . SMTPStrict821AddressSyntax . . . . SMTPStrict821LineSyntax . . . . . SMTPTimeoutMultiplier . . . . . SMTPVerifyAuthenticatedSender . . SSLCipherSpec . . . . . . . . SSL_Resumable_Sessions . . . . . SSL_Trace_KeyFileRead . . . . . SwapPath . . . . . . . . . . TCP_DefaultZone . . . . . . . TCP_EnableIPV6 . . . . . . . . TCP/IPportname_PortMappingNN . . TCP/IPportname_TCPIPAddress . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

1657 1658 1658 1658 1659 1659 1659 1659 1660 1660 1660 1661 1661 1661 1661 1662 1662 1662 1663 1663 1663 1664 1664 1664 1665 1665 1665 1666 1666 1666 1667 1667 1667 1667 1668 1668 1669 1669 1670 1670 1670 1671 1671 1671 1672 1672 1672 1672 1673 1673 1674 1674 1674 1675 1675 1676 1676 1676 1677 1677 1677

Contents

xvii

Temp_Index_Max_Doc . . TimeSeparator . . . . . TimeZone . . . . . . Topology_WorkInterval . . TransLog_MaxSize . . . TransLog_Path . . . . TransLog_Performance . . TransLog_Status . . . . TransLog_Style . . . . TransLog_UseAll . . . . Update_Disable_Fulltext . Update_Disable_Views . . Update_Fulltext_Thread . Update_Idle_Time . . . Update_Idle_Time_MS . . Update_No_BRP_Files . . Update_No_Fulltext . . . Updaters . . . . . . Update_Suppression_Limit Update_Suppression_Time UpgradeApps . . . . . UseFontMapper . . . . $Use_ST_IM . . . . . ViewExpnumber . . . . ViewImpnumber . . . . View_Rebuild_Dir . . . WCT_IM_Use_Lookup . . WebAuth_Verbose_Trace . WebSess_Verbose_Trace . Window_Title . . . . . WinInfoboxPos . . . . WinSysFontnumber . . . XPC_Console . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

1678 1678 1678 1679 1679 1679 1679 1680 1680 1681 1681 1681 1681 1682 1682 1682 1682 1683 1683 1683 1683 1684 1684 1684 1685 1685 1685 1686 1686 1687 1687 1687 1687

Time-based execution requests .

.

.

.

.

. 1786

Appendix G Accessibility and Keyboard Shortcuts in Domino Administrator . . . . . . . . . . . 1789Accessibility and keyboard shortcuts . . . . Enabling and using extended accelerator keys Keyboard shortcuts . . . . . . . . . Keyboard shortcuts for the Domino Administrator user interface . . . . . . Keyboard shortcuts for databases . . . . Keyboard shortcuts for dialog boxes . . . Keyboard shortcuts for properties boxes . . Keyboard shortcuts for documents . . . . Keyboard shortcuts to select and move text in a document . . . . . . . . . . . Keyboard shortcuts to move the cursor in a document . . . . . . . . . . . . Keyboard shortcuts to change text and paragraph properties in a document . . . Keyboard shortcuts when working in views . 1789 1789 . 1790 . . . . . 1790 1791 1791 1791 1792

. 1793 . 1793 . 1794 1794

Appendix H Server.Load Command Language . . . . . . . . 1797Server.Load script conventions . . Server.Load commands . . . . . @Else command . . . . . . @EndIf command . . . . . @If command . . . . . . . Add command . . . . . . BeginCrit command . . . . . BeginLoop command . . . . BeginLoop2 command . . . . Break command . . . . . . Cal command . . . . . . . ChangeTo command . . . . CheckForNewMail command . . Close command . . . . . . Console command . . . . . DBClose command . . . . . DbDelete command . . . . . Delete command . . . . . . Drop command . . . . . . EndCrit command . . . . . Entries command. . . . . . ErrorDelay command . . . . FindByKey command . . . . FindByName command . . . GetAll command . . . . . . Help command . . . . . . If command . . . . . . . ImailCheckForNewMail command ImailCloseMailbox command . . ImailFetchEntry command . . ImailFetchOld command . . . ImailGetLastEntries command . ImailGetNewMail command . . ImailHelp command . . . . ImailListMailboxes command . ImailLogin command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1797 1797 1797 1797 1798 1798 1799 1799 1799 1799 1799 1800 1801 1802 1802 1802 1802 1802 1803 1803 1803 1803 1804 1804 1804 1804 1804 1805 1805 1805 1805 1805 1805 1805 1805 1806

Appendix D System and Application Templates . . . . . . . 1689System and application templates . . . . . . 1689

Appendix E Customizing the Domino Directory . . . . . . . 1695The Domino Directory template . . . . . . Rules for customizing the Domino Directory Customizing the Domino Directory template Creating a copy of the Domino Directory template . . . . . . . . . . . . . Customizing a visible view in the Domino Directory . . . . . . . . . . . . Using the Domino Directory to extend the LDAP schema . . . . . . . . . . . Applying template customizations to the Domino Directory database . . . . . . Upgrading to a new Domino Directory template . . . . . . . . . . . . . . 1695 1695 1697 . 1697 . 1698 . 1698 . 1708 . 1709

Appendix F Administration Process Requests . . 1711Administration process requests . . . . . Administration Process Requests -- One Domain . . . . . . . . . . . . Cross Domain Administration Requests . . . . . 1711 . 1711 . 1771

xviii

Lotus Domino Administrator 7 Help

ImailLogout command . . . . . . . ImailOpenMailbox command . . . . . ImailPostMessage command . . . . . ImailSetSeen command . . . . . . . Index command . . . . . . . . . LDAPLookup command . . . . . . Lookup command . . . . . . . . NABRetrievePOP3Mail command . . . NABUpdate command . . . . . . . Navigate command . . . . . . . . NewMail command . . . . . . . . NewReplicateDB command . . . . . NoteAdd command . . . . . . . . Open command . . . . . . . . . Pause command . . . . . . . . . Populate command . . . . . . . . Quit command . . . . . . . . . Read command . . . . . . . . . Replicate command . . . . . . . . RetrievePOP3Mail command . . . . . Rewind command . . . . . . . . Rewind2 command . . . . . . . . RSVPInvitation command . . . . . . SendMessage command and SendMessage profile command . . . . . . . . . SendSMTPMessage command . . . . SessionsClose command . . . . . . SessionsOpen command . . . . . . SetContextStatus command . . . . . SetCalProfile command . . . . . . . SetReplID command . . . . . . . Stamp command . . . . . . . . . Unread command . . . . . . . . Update command . . . . . . . . WebGet command . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

1806 1806 1806 1806 1807 1807 1807 1808 1808 1808 1809 1809 1809 1809 1810 1810 1811 1811 1811 1811 1812 1812 1812 1812 1813 1813 1813 1813 1813 1814 1814 1814 1814 1814

Using a Domino 5 certificate authority . . . Setting up a Domino 5 certificate authority Creating the Domino Certificate Authority application . . . . . . . . . . . . Creating a CA key ring file and certificate Configuring the Domino Certificate Authority application profile . . . . . . . . . Setting up SSL on the CA server . . . . Displaying the CA key ring file . . . . . Exporting the CA key ring file . . . . . Signing server certificates . . . . . . . Viewing requests for certificates . . . . .

. 1831 1831 . 1831 1832 . . . . . . 1833 1833 1834 1834 1835 1835

Appendix K Upgrading Notes Clients . . . . . . . . . . . 1837Upgrading Notes clients . . . . . . . . . Before you upgrade the Notes client . . . . Notes Client features and their Domino server and template dependencies . . . . . . . . Using IBM Lotus Notes Smart Upgrade . . . . Prerequisites . . . . . . . . . . . . To use Lotus Notes Smart Upgrade, follow this procedure: . . . . . . . . . . . . . How Smart Upgrade performs an upgrade Smart Upgrade server failover to another clustered server . . . . . . . . . . . Smart Upgrade Tracking Reports database Creating a Lotus Notes Smart Upgrade database. . . . . . . . . . . . . . Creating a database link to the Smart Upgrade Database . . . . . . . . . . . . . Controlling the number of concurrent Smart Upgrade downloads . . . . . . . . . . Adding update kits to the Lotus Notes Smart Upgrade database . . . . . . . . . . Running a silent upgrade using optional arguments . . . . . . . . . . . . . Creating a Lotus Notes Smart Upgrade desktop policy settings document . . . . . Creating a master policy document for Lotus Notes Smart Upgrade . . . . . . . . . Assigning the Lotus Notes Smart Upgrade master policy to users and groups . . . . . Notes users and Lotus Notes Smart Upgrade Maintaining Lotus Notes Smart Upgrade . . . 1837 1838 1838 1843 1843 1843 1844 1845 1845 1846 1846 1847 1847 1851 1852 1852 1853 1854 1854

Appendix I Server.Load Scripts . . . . . . . . . . . . . . 1819Server.Load scripts . . . . . . Sample Server.Load scripts . . Idle Workload script . . . . . R5 IMAP Workload script . . . R5 Simple Mail Routing script . R5 Shared Database script . . . SMTP and POP3 Workload script Web Idle Workload script . . . Web Mail Workload script . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1819 1819 1821 1821 1824 1826 1828 1828 1829

Index . . . . . . . . . . . . . . 1855

Appendix J Setting Up a Domino 5 Certificate Authority . . . 1831

Contents

xix

xx

Lotus Domino Administrator 7 Help

Chapter 1. Deploying DominoThis chapter outlines the steps required to deploy IBM Lotus Domino(TM) 7 successfully and introduces important concepts that you need to know before you install Domino servers.

Guidepost for deploying DominoWhether youre setting up IBM Lotus Domino 7 and IBM Lotus Notes 7 for the first time or adding to an established Domino environment, planning is vital. Along with determining your companys needs, you need to plan how to integrate Domino into your existing network. After planning is complete, you can begin to install and set up Domino servers and the Domino Administrator and build the Domino environment. The following list describes, in order, the process to use to deploy Domino. 1. Determine your companys server needs. Decide where to locate each server physically, taking into consideration local and wide-area networks and the function of each server. 2. Develop a hierarchical name scheme that includes organization and organizational unit names. 3. Decide whether you need more than one Domino domain. 4. Understand how server name format affects network name-to-address resolution for servers. Ensure that the DNS records for your company are the correct type for the server names. 5. Determine which server services to enable. 6. Determine which certificate authority -- Domino server-based certification authority, Domino 5 certificate authority, third-party -- to use. 7. Install and set up the first Domino server. 8. Install and set up the Domino Administrator on the administrators machine. 9. Complete network-related server setup. 10. If the Domino server is offering Internet services, set up Internet site documents. There are some instances where Internet Site documents are required. 11. Specify Administration Preferences. 12. Create additional certifier IDs to support the hierarchical name scheme. 13. Set up recovery information for the certifier IDs. 14. Add the administrators ID to the recovery information for the certifier IDs and then distribute the certifier IDs, as necessary, to other administrators. 15. Register additional servers. 16. If you did not choose to do so during first server setup, Create a group in the Domino Directory for all administrators, and give this group Manager access to all databases on the first server. 17. Install and set up additional servers. 18. Complete network-related server setup for each additional server. 19. Build the Domino environment.

Functions of Domino serversBefore you install and set up the first Domino server, consider the function and physical location of the servers that your company needs and determin