Topic
  • 5 replies
  • Latest Post - ‏2013-10-01T06:57:33Z by hydel
Pavel_Bely
Pavel_Bely
7 Posts

Pinned topic ITIM Lotus Notes reconciliation fails

‏2013-09-25T10:59:46Z |

Hi folks,

I have ITIM 5.1 and ITAM 6.1.1 with Tivoli Directory Server 6.1 running on Red Hat Linux 5.4
and Lotus Domino and Lotus Notes running on other machine with Windows.

The first reconciliation after the service is created went fine but with no users added.
But the further reconciliations fail with the following message:

 

CTGIMD106E An error occurred while processing the request.
Error: CTGIMD810E The adapter returned an error status for a reconciliation request. Status code: failure
Adapter error message: Error in opening the view folder ($VIMPeople)--No match found

 

 

In the log I have the following:

DBG:13/09/25 13:32:24 Processing SEARCH request, trans id = 6101722972240854093
DBG:13/09/25 13:32:24 Acquired the Mutex for Notes Authorization
DBG:13/09/25 13:32:24 Opening Mail Database File (NAMES.NSF) on Server (CN=bely_srv/O=bs2k)
DBG:13/09/25 13:32:24 NAMES.NSF, User: CN=Admin/O=bs2k, Type: person, Access: manager
DBG:13/09/25 13:32:24 In Command::InitGroupMap(): Number of documents to process=4
DBG:13/09/25 13:32:24 In Command::InitGroupMap(): opening document with id=3102
DBG:13/09/25 13:32:24 In Command::InitGroupMap(): Get Group Name
DBG:13/09/25 13:32:24 In Command::InitGroupMap(): Group Name1 = OtherDomainServers
DBG:13/09/25 13:32:24 In Command::InitGroupMap(): Group Name2 = OtherDomainServers
DBG:13/09/25 13:32:24 In Command::InitGroupMap(): opening document with id=3118
DBG:13/09/25 13:32:24 In Command::InitGroupMap(): Get Group Name
DBG:13/09/25 13:32:24 In Command::InitGroupMap(): Group Name1 = LocalDomainServers
DBG:13/09/25 13:32:24 In Command::InitGroupMap(): Group Name2 = LocalDomainServers
DBG:13/09/25 13:32:24 In Command::InitGroupMap(): opening document with id=3138
DBG:13/09/25 13:32:24 In Command::InitGroupMap(): Get Group Name
DBG:13/09/25 13:32:24 In Command::InitGroupMap(): Group Name1 = LocalDomainAdmins
DBG:13/09/25 13:32:24 In Command::InitGroupMap(): Group Name2 = LocalDomainAdmins
DBG:13/09/25 13:32:24 In Command::InitGroupMap(): opening document with id=5522
DBG:13/09/25 13:32:24 In Command::InitGroupMap(): Get Group Name
DBG:13/09/25 13:32:24 In Command::InitGroupMap(): Group Name1 = Testgroup
DBG:13/09/25 13:32:24 In Command::InitGroupMap(): Group Name2 = Testgroup
DBG:13/09/25 13:32:24 In Command::InitGroupMap(): sorting maps
DBG:13/09/25 13:32:24 In Command::InitGroupMap(): sorting ST maps
DBG:13/09/25 13:32:24 In Command::InitGroupMap(): release mutex
DBG:13/09/25 13:32:24 In Command::InitGroupMap(): End
DBG:13/09/25 13:32:24 NotesDataBase::GetGroupNamesAndMembers() Opening Document with id=c1e
DBG:13/09/25 13:32:24 NotesDataBase::GetGroupNamesAndMembers() Document opened with id=c1e
DBG:13/09/25 13:32:24 NotesDataBase::GetGroupNamesAndMembers() Group: OtherDomainServers
DBG:13/09/25 13:32:24 NotesDataBase::GetGroupNamesAndMembers() Opening Document with id=c2e
DBG:13/09/25 13:32:24 NotesDataBase::GetGroupNamesAndMembers() Document opened with id=c2e
DBG:13/09/25 13:32:24 NotesDataBase::GetGroupNamesAndMembers() Group: LocalDomainServers
DBG:13/09/25 13:32:24 NotesDataBase::GetGroupNamesAndMembers() Opening Document with id=c42
DBG:13/09/25 13:32:24 NotesDataBase::GetGroupNamesAndMembers() Document opened with id=c42
DBG:13/09/25 13:32:24 NotesDataBase::GetGroupNamesAndMembers() Group: LocalDomainAdmins
DBG:13/09/25 13:32:24 NotesDataBase::GetGroupNamesAndMembers() Opening Document with id=1592
DBG:13/09/25 13:32:24 NotesDataBase::GetGroupNamesAndMembers() Document opened with id=1592
DBG:13/09/25 13:32:24 NotesDataBase::GetGroupNamesAndMembers() Group: Testgroup
DBG:13/09/25 13:32:24 In NotesSearch::GetHttpLockedUsers
DBG:13/09/25 13:32:24 NotesSearch::GetHttpLockedUsers Error while reading lockout database: File does not exist
DBG:13/09/25 13:32:24 Folder name=$VIMPeople
DBG:13/09/25 13:32:24 Releasing the Mutex acquired for Notes Authorization
DBG:13/09/25 13:32:24 Successfully pipelined 1 entries

 

Could you please help resolving this problem.
Many thanks in advance.

Attachments

Updated on 2013-09-25T11:00:16Z at 2013-09-25T11:00:16Z by Pavel_Bely
  • hydel
    hydel
    16 Posts

    Re: ITIM Lotus Notes reconciliation fails

    ‏2013-09-25T17:44:26Z  

    Hi Pavel,

    have you created the Log DB database? This error message: DBG:13/09/25 13:32:24 NotesSearch::GetHttpLockedUsers Error while reading lockout database: File does not exist suggests that this database is missing from the Domino server.

    I believe that the initial reconciliation was for supporting data only, so only groups were pulled from Domino server and thus worked without any errors.

    Regards,

    Jukka

     

  • Pavel_Bely
    Pavel_Bely
    7 Posts

    Re: ITIM Lotus Notes reconciliation fails

    ‏2013-09-26T07:29:29Z  
    • hydel
    • ‏2013-09-25T17:44:26Z

    Hi Pavel,

    have you created the Log DB database? This error message: DBG:13/09/25 13:32:24 NotesSearch::GetHttpLockedUsers Error while reading lockout database: File does not exist suggests that this database is missing from the Domino server.

    I believe that the initial reconciliation was for supporting data only, so only groups were pulled from Domino server and thus worked without any errors.

    Regards,

    Jukka

     

    Hi Jukka,

    Thanks for your prompt reply!

    I created LogDB.nsf database and reinstalled the adapter with that file specified.

    But I still get the same error and the reconciliation fails.

    DBG:13/09/26 10:16:42 In Command::InitGroupMap(): End
    DBG:13/09/26 10:16:42 NotesDataBase::GetGroupNamesAndMembers() Opening Document with id=c1e
    DBG:13/09/26 10:16:42 NotesDataBase::GetGroupNamesAndMembers() Document opened with id=c1e
    DBG:13/09/26 10:16:42 NotesDataBase::GetGroupNamesAndMembers() Group: OtherDomainServers
    DBG:13/09/26 10:16:42 NotesDataBase::GetGroupNamesAndMembers() Opening Document with id=c2e
    DBG:13/09/26 10:16:42 NotesDataBase::GetGroupNamesAndMembers() Document opened with id=c2e
    DBG:13/09/26 10:16:42 NotesDataBase::GetGroupNamesAndMembers() Group: LocalDomainServers
    DBG:13/09/26 10:16:42 NotesDataBase::GetGroupNamesAndMembers() Opening Document with id=c42
    DBG:13/09/26 10:16:42 NotesDataBase::GetGroupNamesAndMembers() Document opened with id=c42
    DBG:13/09/26 10:16:42 NotesDataBase::GetGroupNamesAndMembers() Group: LocalDomainAdmins
    DBG:13/09/26 10:16:42 In NotesSearch::GetHttpLockedUsers
    DBG:13/09/26 10:16:42 NotesSearch::GetHttpLockedUsers Error while reading lockout database: File does not exist
    DBG:13/09/26 10:16:42 Folder name=$VIMPeople
    DBG:13/09/26 10:16:42 Releasing the Mutex acquired for Notes Authorization
    DBG:13/09/26 10:16:43 Successfully pipelined 1 entries

     

     

    Any other suggestions?

  • hydel
    hydel
    16 Posts

    Re: ITIM Lotus Notes reconciliation fails

    ‏2013-09-28T07:20:36Z  

    Hi Jukka,

    Thanks for your prompt reply!

    I created LogDB.nsf database and reinstalled the adapter with that file specified.

    But I still get the same error and the reconciliation fails.

    DBG:13/09/26 10:16:42 In Command::InitGroupMap(): End
    DBG:13/09/26 10:16:42 NotesDataBase::GetGroupNamesAndMembers() Opening Document with id=c1e
    DBG:13/09/26 10:16:42 NotesDataBase::GetGroupNamesAndMembers() Document opened with id=c1e
    DBG:13/09/26 10:16:42 NotesDataBase::GetGroupNamesAndMembers() Group: OtherDomainServers
    DBG:13/09/26 10:16:42 NotesDataBase::GetGroupNamesAndMembers() Opening Document with id=c2e
    DBG:13/09/26 10:16:42 NotesDataBase::GetGroupNamesAndMembers() Document opened with id=c2e
    DBG:13/09/26 10:16:42 NotesDataBase::GetGroupNamesAndMembers() Group: LocalDomainServers
    DBG:13/09/26 10:16:42 NotesDataBase::GetGroupNamesAndMembers() Opening Document with id=c42
    DBG:13/09/26 10:16:42 NotesDataBase::GetGroupNamesAndMembers() Document opened with id=c42
    DBG:13/09/26 10:16:42 NotesDataBase::GetGroupNamesAndMembers() Group: LocalDomainAdmins
    DBG:13/09/26 10:16:42 In NotesSearch::GetHttpLockedUsers
    DBG:13/09/26 10:16:42 NotesSearch::GetHttpLockedUsers Error while reading lockout database: File does not exist
    DBG:13/09/26 10:16:42 Folder name=$VIMPeople
    DBG:13/09/26 10:16:42 Releasing the Mutex acquired for Notes Authorization
    DBG:13/09/26 10:16:43 Successfully pipelined 1 entries

     

     

    Any other suggestions?

    Took a second look at this and discovered that error message NotesSearch::GetHttpLockedUsers Error while reading lockout database: File does not exist actually refers to the Internet Password Lockout database (inetlockoutdb.nsf) and not to Log DB database, my bad.

    This has to do with a new feature in Notes Adapter 5.1.14 "17056 ( 7300) - Enhance Notes Adapter to support unlocking webmail for account". It seems that even if you haved enabled this feature in Domino, Notes Adapter in trying to read this database.

    But this is not the root cause of the problem but the message "Error in opening the view folder ($VIMPeople)--No match found" as the adapter was telling us (doh!). What kind of permissions does the adapter user account have?

    Regards,

    Jukka

  • Pavel_Bely
    Pavel_Bely
    7 Posts

    Re: ITIM Lotus Notes reconciliation fails

    ‏2013-09-30T15:16:04Z  
    • hydel
    • ‏2013-09-28T07:20:36Z

    Took a second look at this and discovered that error message NotesSearch::GetHttpLockedUsers Error while reading lockout database: File does not exist actually refers to the Internet Password Lockout database (inetlockoutdb.nsf) and not to Log DB database, my bad.

    This has to do with a new feature in Notes Adapter 5.1.14 "17056 ( 7300) - Enhance Notes Adapter to support unlocking webmail for account". It seems that even if you haved enabled this feature in Domino, Notes Adapter in trying to read this database.

    But this is not the root cause of the problem but the message "Error in opening the view folder ($VIMPeople)--No match found" as the adapter was telling us (doh!). What kind of permissions does the adapter user account have?

    Regards,

    Jukka

    Jukka, thanks for your cooperation,

     

    But I don't quite understand you, sorry.

    I supposed adapter is acting on behalf of domino server's admin.

    I provided admin's user id and password during adapter's installation.

     

    Should I add agent as a user for that database or for the whole server?

    And what should be its name then.

     

    Looking forward to hearing from you.

  • hydel
    hydel
    16 Posts

    Re: ITIM Lotus Notes reconciliation fails

    ‏2013-10-01T06:57:33Z  

    Jukka, thanks for your cooperation,

     

    But I don't quite understand you, sorry.

    I supposed adapter is acting on behalf of domino server's admin.

    I provided admin's user id and password during adapter's installation.

     

    Should I add agent as a user for that database or for the whole server?

    And what should be its name then.

     

    Looking forward to hearing from you.

    I would recommend that the adapter should use a separate user id which has administrative rights to Domino Server, because the adapter has to have exclusive access to the user id. 

    What is your Domino Server, Admin Client and Windows Server versions? You should be aware that installing the adapter on Domino Server is not recommended, this is stated in the adapters Release Notes.

    You can increase adapters activity logging by setting Debug, Detail, Base and Thread logging to enabled and try again to see more detailed log about the problem.

     

    Regards

    Jukka