Random rambling about technology, BlackBerry, Lotus Domino, accents and the pursuit of happiness.


View Darren Duke's profile on LinkedIn
Admin

Darren Duke Blog Zone

Pop Quiz - who knows the encryption strength and alogrithm that Lotus Notes port encryption uses?

Darren Duke  July 18 2010 12:20:36 PM
Nathan got me thinking, and when I think I search the web. In an earlier post Nathan commented about Notes encryption. Now I swear that every 6 months or so I am asked by a customer about the strength and algorithm that Lotus Notes uses when connecting over an encrypted port. I also swear I search for this information every 6 months too and I always come up with 64 bit RC 2 as the "possible" answer in this ancient SearchDomino post ....

Well this time I searched I hit pay-dirt. Based on technote 1097816 we get the following:
S Encryption Strength
The first value is the key length
The second value is the algorithm
Length
128
(new in Notes/Domino 6)
64
40
(only used for R3 Int'l or WW40 versions)

Algorithm
22
= RC4
2F
= RC2
A Algorithm 4:1 = RC4
2:0 =
RC2 (R3 Intl or WW40)






Now, this is not  listed (as far as I can tell) anywhere in any help, be it admin or client. The technote also outlines how to test it and I did just that. As you can see below when I connected to my server I am connecting as 128 bit RC4.

Image:Pop Quiz - who knows the encryption strength and alogrithm than Lotus Notes port encryption uses?

So there you have it and why the hell is this not in the trace information or the help?

The most useful feature of Lotus Notes that most users can’t use - Full Text Indexing

Darren Duke  July 18 2010 06:28:04 AM


In a comment on Ed Brill's blog post about Google's dubious marketing I asked (comment 11) to allow full text indexes to be moved to different, non-Domino data storage. See, Google are saying you can't really search your mail file, or to quote Ed:
....they [Google] seem to have a total blind spot to the full-text search engine in Notes, asserting that sort by sender and browsing folders are the only ways to "search" in Notes


Anyone reading this blog will know that Google's assertion is as blatant a lie are there is. But, alas, most companies do not have full text indexing turned on for all, if any, of  their mail users.

Why not? Is it IBM that have the blindspot here?

After all, full text indexing a Notes database application immeasurably increased the usability, value and experience of Lotus Notes so why not turn it on? Disk space is the why. Storage consistently rates as one of the major concerns for IT in any survey you can find, so why double the storage needed  on my shiny new SAN just to enable searching? It is a good question and one that has never been addressed.

We can move attachments out to different storage.

We can move view rebuilds out to different storage.

Why can't we move full text indexes to different storage? Why do they have to reside in the same OS directory/folder as the mail file?

With Lotus Notes 8, IBM tackled head on the user interface issues with Lotus Notes. Now they need to tackle the usability of full text indexes and their location on the server. Yes you can use a local replica, indeed on this very blog I show you how to set that up, but IBM, you must tackle the issue at the lowest common denominator, the server-based mail file user. With the plethora of thin client technologies on the market (Citrix, Terminal Services and VMware View) more and more organizations have to use server based mail files due to "thin clients" having no storage. Add to that the brilliant experience that is iNotes, yet for most it is crippled beyond simple actions like sending and reading emails due to, you guessed it, being a server based mail file with no full text index.

Tripp Black elaborates my feelings on Ed's blog (comment 30):

The reason that Google can get away with the Full Text comment is, that as implemented, most companies cram as many users on a box until the experience is pretty dismal - No FT Indexes allowed. At a couple RTP companies (which one converted to MS live but still has $$$ going out to reinvent the apps), I told friends how to setup local replicas, turn on replication and then have FT Indexes. Suddenly, Notes was fast, you could find something and it didn't SUCK!. What a concept...... It took years of crippling Notes to get Notes to be evil to escape at any cost.


User satisfaction is king. And right now, due in some large part to this restriction, the majority of user are anything but satisfied when it comes to searching. And the shocker here is not that lack of functionality but being able to enable said functionality. IBM Lotus need to focus on the removal of every single roadblock that prevents full text indexing from being enabled.

As indicated above, there is already an IdeaJam for this, and it already has over 70 votes. 70 votes? That's a pretty unanimous cry for help. As Hynek Kobelka comments on the idea:
Very good idea ! And it should be so easy to accomplish :-)


To reduce storage on the server  IBM Lotus gave us DAOS and I would have to say this has been a leading factor in the massive and fast adoption of Domino 8.5.x in the last 18 months. If IBM wants to see another fast uptake on a Notes/Domino release why not add this? It is a win-win. The user wins with increased functionality and IT wins by being able to use cheap storage for FTI's.

What am I missing here?

The 2006 version of Lotus Notes vs the 2006 version of GMail

Darren Duke  July 16 2010 12:35:33 PM
By now you have probably read Google's attempt to take a swipe at Notes that Ed Brill posted about. Most (if not all) of what Google claim is wrong or a lie. Apparently "Don't be evil" does not stretch to lies. Any way Chris Whisonant has done a very good response. So in an attempt at humor and righting some blatant wrongs, mis-truths and lies I decided to pit the 2006 version of Lotus Notes against the 2006 version of Gmail.

All facts about Lotus Notes and  Gmail were gleaned from wikipedia. I will use the production code for each platform as of June 30th 2006. So for Lotus Notes we have 7.0 For Gmail we have nothing. It was in beta from 2004 through 2007. But that's OK because in the Google post they did not seem to care either, "Don't be evil".....erm.....OK....so on with the show.

In Lotus Notes in 2006 you....

Can access your email in an ajax based web experience (called DWA), a Notes client, a mobile device and any POP3 or IMAP mail client from anywhere in the world
View messages and their replies
Place a message in a folder
Sort by message sender and date
You could not auto-spell check (added in R8)
Delete messages to save disk space (and to avoid lawsuits, etc)
Archive to a desktop file (so you could read you email on a plane, even in 2006!)
Flag important messages
Receive notifications of new mail
Forward multiple messages


In Gmail in 2006 you...

Had to wait for an invite
Had to wait for an invite
Had to wait for an invite
Had to wait for an invite
Had to wait for an invite
Had to wait for an invite
Had to wait for an invite
Had to wait for an invite
Had to wait for an invite
Had to wait for an invite

See mine post is true too. Google, Google, Google, are you proud of your place beside Microsoft in the "we'll say anything" contest? Really I have thought more (not much though) highly of you.

An update on Anonymous access to Domino applications

Darren Duke  July 16 2010 11:42:26 AM
Yesterday I concluded an email conversation with Ed Brill  to get some final clarification around the "anonymous access" questions surrounding Domino that were brought up on this blog and by Nathan Freeman over on Tim Tripcony's blog over that past free weeks.

Well the mystery is over. Express is, well, "limited" and as such has no anonymous access to Domino applications. You will need either a Domino Utility Server license or a Domino Enterprise Server license to allow this. Yes, that is right, Domino Enterprise Servers does allow anonymous access to applications. So at least some good news.

Thanks Ed for the follow up and clarification. Hopefully all confusion is now rectified......move along, nothing to see here.

OpenNTF IdeaJam is open until 7/16

Darren Duke  July 15 2010 03:05:38 AM


Over the last 12-18 months the OpenNTF web site and the number of projects (read free Lotus applications) has increased immeasurably. Help continue the trend by participating in the (the first annual?) OpenNTF IdeaJam that is open until 7/16/2010.

Got any things you'd like to see on the site? If not, go and peruse the ideas already contributed, there are some that will deserve your vote.

What are you waiting for, go to http://openntf.org/ideajam/IdeaJam.nsf/ProductByAreaMostRecent?openview&restricttocategory=July2010

The idea linked above is just a sample (although I think it is a great idea that we all start to promote OpenNTF on our blogs, etc).

It is hard to believe it’s 2 years for this blog - and international hug a blogger day

Darren Duke  July 12 2010 06:23:03 AM
Well that was a speedy 24 months. With a total of 294 post in that last two years I've averaged one post ever 2.48 days. That is far more than I ever thought I'd do ;)

With 527 comments (and not all of them are mine) then at least some find this useful.

Occasionally I get asked why I started this, and the honest truth is two fold:
  • The STS site requires editing and I'm crap at spelling ;)
  • To allow the STS sales and marketing folks to "prove" we know what we are doing

The latter has been a huge success and is sometimes the topic of a post requests from the team. Most of their requests get done, some get ignored ;)

During this period I've also been involved in other projects. I was worried that the blogging "frequency" and/or quality would lapse but I think I've avoided that potential pot fall, at least for the time being. Other stuff I'm involved in:

I think one of the things that goes unsaid in any community, not just the Yellow Submarine, is how much time and dedication the bloggers put in. I wish to thank everyone I read for your time, effort and dedication to enhancing my knowledge.

In fact I recently estimated that the efforts I am involved with (including blogging. PoTs, LUG's, etc) is an investment equivalent of well over $40,000 per year. So, if you see a blogger, give them a hug.

BlackBerry Enterprise Server 5.0 SP2 released

Darren Duke  July 10 2010 01:48:42 PM
RIM have released SP2 for BES 5.0 for Domino.

See the release notes for further details.

some highlights:
  • BES now supports Brazilian Portuguese, English, French, German, Italian, Japanese and Spanish.
  • SQL 2008 R2 support added
  • More browsers can access BAS, although IE is still required for managing devices
  • Support for Windows Server 2008 R2
  • Tons of fixes

Get it from http://na.blackberry.com/eng/support/downloads/

Quickr Domino 8.2 FP 13 is available

Darren Duke  July 10 2010 01:16:47 PM
As per, get it from IBM Fix Central.

Fixes include:
06/23/2010 MPUL83KCKR Cannot expand Domino Native Group in Room Security Add Member dialog.
06/23/2010 TJOR868PEP Room contents not viewable when “Room Security” moved to the top of the room’s table of contents.
06/23/2010 PNOT86GG4Y In FireFox, the start icon designating the current version is missing.
06/23/2010 MZHA86MA5J Place non-member set to Author access cannot save a blog comment.
06/23/2010 ESEO85ZR4X In Add Member dialog, duplicate search result entries are returned when multiple base DNs are specified in the qpconfig.
06/23/2010 JRIE84GGDL “Upload to Library” drag and drop applet still visible and functional after disabling Java applets in the place.
06/23/2010 ASHH84WG46 In certain circumstances the h_Authors field is missing on a document during check out resulting in the user getting the error message “Sorry, you cannot edit this page right now because another author is currently editing it or has checked it out”.
06/23/2010 XZSU7K2853 When placing a Blog place in an IFrame, some fields are missing when creating a new blog entry.
06/14/2010 ESEO85TV5K When notifying, unable to see users or groups whose name contains open or closed parenthesis.
06/14/2010 XZSU85R9CJ In certain circumstances a user will get an error when cancelling a draft document.
06/14/2010 No SPR When notifying, the option to include the first 30 words of the document you are sending is not available.
06/14/2010 RELS7FWPN3 The list of document versions does not appear when using the FireFox browser.
06/14/2010 SORA7LYHCJ
RELS7C83C8
When editing the folder options for the Calendar, you lose the “New Event” button when viewing the Calendar.
06/08/2010 CLOH85TBPK When creating a new Post, if your cursor is in the Post Topic and you select to insert a new image, that image appears at the top of the web page, not within the Rich Text Editor.
06/08/2010 DWON84PHV8 Within connectors, when dragging and dropping a folder from a Room to the Windows Explorer, that folder is put into a folder named libraryxxxxxxxxxxxxxxxx.nsf.
06/04/2010 CSTS84JNJF The time is one hour behind on file's Modified Date using the Quickr ActiveX Control.
06/04/2010 MMOI84W2WB URL Links sent to users via the SameTime chat integration do not open when clicked.
06/04/2010 HMON85MQAN When using the QuickPlace Classic Theme, when you go to New or Customize, a smaller window opens in which you have to use the scroll bars to get to content.
06/04/2010 MPUL83NPPW Add Member lookup for groups when using Domino Native as the directory does not show groups if the qpconfig.xml setting is enabled.
06/04/2010 CSTS85FJND Cannot see places in My Places when using \, in Active Directory name.



Confused about Domino licensing? Attend my free webinar on July 15th

Darren Duke  July 8 2010 08:14:00 AM
With CPU changes, free entitlements "license simplification"  and the incredibly complicated PVU tables licensing you should have some questions. Well good news, the kindly folks at STS (one of which is me) is here to help you out with a free webinar followed by a Q&A session.

The event will be on July 15th at 1pm EST.

What will be covered Darren? Well a plethora of items including:
  • Free entitlements with various licenses
  • PVU requirements for various CPU architectures
  • Virtualization impact of licensing
  • The different type of license
Hopefully this will whet your appetite some and you will join me for this free event. To register for the event simply submit the registration page on the STS site.

"I couldn’t find a Lotus BP in my area" - or support a "real" Lotus BP

Darren Duke  July 7 2010 05:25:16 AM
I hear the "I couldn't find a Lotus BP in my area"  at least once a month and for the last few weeks I've been giving serious thought as to why. I actually think the answer is complex and I can't really do it justice in a single post, but hopefully this will provides food for thought.

Prologue

Over the last 5 years I been lucky enough to be part of a team that has built a reasonably successful Lotus-focused business. As with most Lotus BP's when we started out, we were not a dog turd on IBM's shoes until 4 years in. There is a reason for that, but that is not for a public post. After much work, 14 hour days and gnashing of teeth hoping we'd be able to pay the mortgage we've, at least in my mind, "arrived".

Prior to 2005 I worked for on the of the bigger Lotus consulting shops in the SE USA, the now defunct Eagle Technology Consultants. I started there in 1999 and there were literally a plethora of Lotus BP's in Atlanta. At least 6-9 I can think of even now. Now I can think of 3, two of which are multi-national conglomerates, and my company. So in the space of a decade the number of BP's in the Greater Atlanta area that I can rattle off has decreased by 50-75%. Why?

I also think this somehow plays into the "No Notes jobs" fever going around right now. Who do you think hires Lotus peeps? Lotus BP's and customers.

The Bigger Problem

There is no single reason for this rather sad state of affairs. There are many. And I'm pretty sure you'll add some more in the comments section.

1) The IBM web site

I remember when Lisa started at the company back in 2005. She was tasked with, and has done an incredible job of, building the IBM relationship. We sat down and went to the "Locate an IBM Business Partner" area on the IBM site and entered a search criteria of Atlanta, GA within 25 miles and selected Lotus as the technology. Of the top 10 (at the time) 6 of them had disconnected numbers. I can only imagine what it must be like being a customer trying to find an IBM sanctioned Lotus expert.

Even today, the same search brings back 34 results. 34? Hum.....OK, let test. The top one returned is a company called "PeopleTrain". I tried their phone number, disconnected. OK, next one, "Emtec". I went to their website and not a single Lotus related item out there. Nada. Dick! Then Softchoice, Ho-hum, only one of the largest re-sellers of Microsoft technologies in NA, and (thanks to LinkedIn)  the place most people go to work for after Softchoice? MS . Now you know how that customer phone call will go, right? Rounding out the top 5 is an IBM hardware vendor with no Lotus skills. How many more calls is this customer (or potential customer) going to make?

Mr Customer, you are "shit out of luck" on finding an IBM sanctioned BP that will be able to answer any questions you should have. It is the equivalent of telling the customer not to bother. Call MS, call Booble. *shakes head*

IBM you need to clean up the partner page. You need to start making mock calls into your "Premier" BP's as potential customers and see where the conversation goes. Prepare to be surprised and angered. I would love to know how many migrations are kicked off by talking to the wrong BP.......I know of a few.



2)  The Walmart effect - reverse it and support a "real" Lotus BP

If all you really care about is price, use SendMail. My value to a customer is provided at various levels:
  • I'll make sure you are licensed correctly either up or down (we saved one customer over $20,000 on stuff they didn't need)
  • I can get you what you actually need, as opposed to making some "sales quota"
  • I am you advocate with IBM
  • I can absolutely make your stuff work or work better. On any platform. Period.
  • You read this blog, download my presentations and white papers, listen to This Week In Lotus and watch Tips In Two

All of the above is a massive time and education investment. As a customer, I respect your decision to purchase from CDW, Softchoice, Agilysis  or some other corporation (be aware a puppy dies each time you do), but don't be surprised that when you need expert help, it is not there. You are effectively voting with your money and that is why "You can't find a Lotus BP in my area (worth a crap)". If Mr Customer continues to purchase or re-new Lotus related products from the Walmart's in the software business then eventually, the skilled BP's will move elsewhere. I guess to make up for the loss of revenue I'll need to raise my services rates.

Mr Customer, support a real Lotus BP with your purchases and renewals.



3) The IBM renewals process

By far the most irritating part of being an IBM BP is that IBM insists on elbowing their way into the renewal. Get this, if you come to STS for, I dunno, let's say a new 500 seat Domino install, we'll we fulfill both the services (as we are experts) and licenses on the deal. In fact, most of the time it is STS that created this opportunity, directly from the ground up. You know what happens when the renewal is due on year 2? IBM send the "new" customer an invoice for the renewal a whole 30 days before we can even get a price. My customer is now being invoiced for stuff I sold directly from IBM. How f'd up is that? I guess to make up for the loss of revenue I'll need to raise my services rates.

That's right, a customer we developed, from the ground up, is promptly stolen by IBM. Symantec send us a nice little spreadsheet each quarter with our up and coming renewals. IBM just steals them. Trust me IBM, it is because of STS, and not because of IBM, that my customer is using your software.

IBM you need to stop stealing the renewals. Every piece of revenue you take from partners makes then look elsewhere.


Epilogue


When I started this post, there were 9 reasons. On reflection the final 6 were just re-iterations of 1-3. Basically IBM and Mr Customer are both, in part, responsible for the issue of "I couldn't find a Lotus BP in my area".

Until you both change, don't be surprised if you have even further deterioration in the next decade. Just saying.