IBM Lotus Domino Administrator Training
IBM Lotus Domino Administrator Training
IBM Lotus Domino Administrator Training
A Domino domain is a collection of Domino servers and users that share a common
Domino Directory. The Domino Directory is a directory of users, servers, groups, and
other entities. The primary function of the Domino domain is mail routing. Users‘
domains are determined by the location of their server-based mail files.
Specify your registration information, such as your name and your company’s name, and
click next to continue.
Select the
installation directory for both your program directory and your data directory. Click Next
to continue.
Select the type of Domino server to install.
Choose among the three displayed server installation types. The default setting is Domino
Messaging Server; in our case we selected the Domino Enterprise server.
After the progress bar reaches 100%, the Congratulations screen is displayed. Click
Finish to exit the installation.
Configuring the First Server
The installation setup is the first process. After you complete the installation, you need to
configure the server. Click Start->Program->select Lotus Domino Server.
Click Next
Choose your Organization name. The organization is usually your company name.
Choose the domino domain name. Domino domain can be the same as the Organization
name.
Specify an Administrator name and Password To create the Administrator's id; you must
provide administrator’s name and Password. You can use name of specific person or a
last name only to create a generic Administrator ID that can be used by several people.
Select the Internet services this domino server will provide. Basic notes and Domino
services are setup by default (you always choose these option later in the Domino
Directory).
Domino Network settings.
Setup automatically detects the port on this computer. To additional port Click
Customize.
Client Configuration
To configure client you must usually know the name of your
server, your user name (or have your ID file), and your
password.
Click Finish.
Set ID File
(Optional) Click the Set ID file button if you want to change the
location where Domino stores the certifier ID.
By default the ID is stored in C:\.
Organizational Unit:
A name for the new organizational unit.
Certifier password
A case-sensitive password for the certifier. The characters you use for
this password depend on the level set in Password Quality Scale.
Password Quality Scale
Level of complexity and variety of characters entered for the
password. Domino sets the default value to 10.
User Registration
It is highly likely that you will have more users than just your
self in an Organization, so you will need to register user.
You may also migrate users from other system.
You can register users using either the O certifier or any OU
certifier.
You can use the Register People tool from the People and
Groups tab or the Registration.... Person tool from the
Configuration tab to register new user into Organization.
Basic Registration
When you use the Basic Registration many Option are set by
default.
In this you should provide name, password and other basic
information for the new user.
Password options.
Click Password options to set a level for the password in the Password
Quality Scale. The default level is 8.
Click the check box "Set Internet password" to give Internet users
name and password access to a Domino server and to set an Internet
password in the Person document.
Click "Synch Internet password with Notes ID password" to make the
Internet password in the Person document the same as the Notes
password. This is a requirement for users who want to use Domino
Web Access to read encrypted mail or work offline.
Mail system.
Click to change the user's mail system from the default of Lotus Notes
to an Internet-based system or Domino Web Access.
Explicit policy.
Select the explicit policy to apply to this user.
Enable Roaming for this person.
Click to enable roaming capabilities for this user. Doing so enables the
Roaming tab.
Create a Notes ID for this person.
Click to create a Notes ID for this person during the registration
process.
Import Text File.
Use this button if you registering users via a text file.
Advanced Registration
You can also choose Advance Option and complete all the
configuration yourself.
With advance registration you can Internet domain, and
password, mail file name, and the location, mail server and
other items.
Mail Tab
Mail system.
Choose one of the available mail types and complete the necessary
associated fields:
•Lotus Notes (default)
•Other Internet
•POP
•IMAP
•Domino Web Access
•Other
∗ None
If you select Lotus Notes, POP, or IMAP, the Internet address is
automatically generated.
If you select Other Internet, POP, or IMAP, the Internet password is
set by default.
If you select Domino Web Access, you can change other user
registration selections to Domino Web Access defaults by clicking Yes
when prompted.
If you select Other or Other Internet, enter a forwarding address. This
address is the user's current address, where the user wants mail to be
sent.
Mail server.
The user's mail server. If you have not defined a mail server in
Administration Preferences, this server is (by default) the local server
if it contains a Domino Directory; otherwise, it is the Administration
server.
Mail file name.
By default, the path and file name are
mail\<firstinitial><first7charactersoflastname>.nsf.
Create file now/Create file in background.
Create file now (default)
Create file in background - Creating mail files in the background
forces the Administration Process to create the files and saves time
during the user registration process.
ID Info Tab
Security type.
Choose either North American or International.
The security type determines the type of ID file created and affects
encryption when sending and receiving mail and encrypting data. North
American is the stronger of the two types.
Certification expiration date.
The default is two years from the current date.
Location for storing user ID.
In Domino Directory (default). The ID file is stored as an attachment to the
user's Person document.
In file(default location: datadirectory>\ids\people\user.id).
In mail file. This option is only available with Domino Web Access
Group Tab
Assign person to groups
Selected groups
Roaming Tab
Roaming Server.
Click Roaming Server to open the Choose Roaming User Files Server
dialog box on which you specify the server that stores the user's
roaming information.
If you select Put roaming user files on mail server, the Roaming
Server defaults to the user's mail server.
Personal roaming folder.
The subdirectory that contains the user's roaming information. By
default, this is based on the sub-folder format you specify, but you can
customize it.
Sub-folder format.
This determines the default Personal roaming folder for each user.
Create roaming files now/Create roaming files in
background.
Create file now – Default.
Create roaming files in background - Click to create the user's
roaming files the next time the Administration Process runs.
Clean-up option.
Choose one of the following roaming user client clean-up options.
Clean-up will only occur on clients that have been installed and
configured for multiple users.
Roaming Replicas.
This option only applies to clustered servers.
Other Tab
Setup profile.
Name of an R5 User Setup profile to assign.
Unique org unit.
A word that distinguishes two users who have the same name and are
certified by the same certifier ID.
Location.
Departmental or geographical location of the user.
Local administrator.
The name of a user who has Author access to the Domino Directory
but who does not have the UserModifier role.
This setting allows the local administrator to edit Person documents.
Alternate name language.
Choice of alternate name language. The certifier ID used to register
this user must contain the alternate name language for it to appear
here.
Alternate name.
The alternate name of the user.
From the Domino Administrator, select the server you just set up.
Click the Configuration tab.
Expand the Server section in the view pane.
Click Current Server Document.
Click Edit Server, and then click the Ports - Notes Network Ports tab.
In the Notes Network field for each port, enter a new name for the
server's Notes named network. The name can include space
characters.
Click Save and Close.
Connection Document
Connection documents have two parts, a network part and a
schedule part.
The network part defines the connection: which server to
connect to and how that connection is made.
The schedule part determines when to perform activities
such as replication and routing to a particular server.
If the two servers are in different Notes named networks, the
Router on the sender’s server needs to find a connection
between the two networks.
Routing Table
When you start the Router on a server, it gathers
information from the Connection, Domain, and Server
documents in the Domino Directory.
When a user sends mail to a recipient in the local domain, the
Router looks in the Domino Directory (or a secondary
directory) for the recipient’s Person document, which lists
the recipient’s home server.
The Router consults the routing table to determine the
optimal (least-cost) path to that server and routes the
message along that path.
MAIL.BOX
Domino mail servers use a MAIL.BOX database to hold
messages that are in transit.
Mail clients and other servers use SMTP or Notes routing
protocols to deposit messages into MAIL.BOX.
The Router on each server checks the address of each
message in MAIL.BOX and either delivers the message to a
local mail file or transfers it to the MAIL.BOX database on
another server.
The Router on the server reads the messages and either
delivers them to a mail file on that server or transfers them
to the MAIL.BOX database on another server.
you can improve server performance by creating multiple
MAIL.BOX databases on a server.
Using multiple MAIL.BOX databases removes contention for
MAIL.BOX, allows multiple concurrent processes to act on
messages, and increases server throughput.
Having multiple MAIL.BOX databases provides failover in
the event that one MAIL.BOX becomes corrupted.
To create multiple MAIL.BOX databases
Make sure you already have a Configuration Settings document for the
server (s) to be configured.
POP3 allows a user to log onto an e-mail post office system across the
network.
The post office system authenticates the user using an ID and
password, allows mail to be downloaded, and optionally allows the
user to delete the mail located on the central post office system.
Internet Message Access Protocol (IMAP)
IMAP4 (Internet Message Access Protocol, version 4; ) is a newer
protocol, used by e-mail clients to retrieve e-mail messages from a
mail server and work with the mailboxes on the server.
The latest version, IMAP4, is similar to POP3 but offers additional and
more sophisticated features. With IMAP, for example, it is possible to
work with the e-mail on the server, and sort and manage the e-mail in
server-side folders.
Multipurpose Internet Mail Extensions (MIME)
MIME is a specification for formatting non-ASCII messages so that
they can be sent over the Internet.
Mail Routing
Planning Mail Routing
Domino presents many possibilities for configuring your mail system
infrastructure, whether you want to use Notes routing, SMTP routing, or
both, for internal and external messages.
Before you set up mail routing, there are a number of decisions and factors
to consider:
∗ How clients access the server
∗ How internal mail routes
∗ How external mail routes
When you plan a mail routing topology, consider the types of clients that
will access the Domino server.
Domino supports Notes, IMAP, POP3, NNTP, and Web clients.
Notes clients
Notes clients access the server via Notes protocols, POP3, IMAP, and
NNTP.
IMAP clients
IMAP clients access mail on the server via IMAP and send mail to the server
via SMTP.
POP3 clients
POP3 clients access mail on the server via POP3 and send mail to the server
via SMTP.
NNTP clients
NNTP clients access news groups and discussion databases on the server via
the Domino NNTP service.
Web clients
Web clients access mail on the server via the Domino HTTP service and
send mail via SMTP using the Domino HTTP service and the Router.
The Router uses both SMTP and Notes protocols to route mail and
handles both MIME and Notes format messages.
Notes clients use Notes protocols, which are enabled by default with
the Notes client, to access mail on a Domino server.
To set this up using SMTP, configure the servers that are connected to
the Internet as relay hosts.
To set this up using Notes protocols, create Foreign SMTP Domain and
SMTP Connection documents.
Shared mail
you can set up a shared mail database on each mail server.
A shared mail database is a space-saving feature that stores a
single copy of mail messages that are addressed to multiple
recipients.
When multiple recipients whose mail files are on the same
server receive a message, the shared mail database stores the
message content, while each recipient’s mail file stores the
message header.
When a recipient opens a message, a link between the mail
file and the shared mail database causes the message to
appear in its entirety.
Users can delete, reply, change the view or folder, edit, save,
resend, and perform all the same tasks on a mail message
stored in a shared mail database as they would with the same
message stored in their own mail files.
Each user can edit, save, and resend the original message,
without affecting how the message is presented to the other
users.
Shared mail works for all messages, regardless of the mail
client used to compose the message.
That means that users who use a POP3, IMAP, or Notes mail
client and who have a mail file on the Domino mail server
can all use shared mail.
When the recipient opens the message, the header activates a link to
the message content, which is stored in the shared mail database. The
message appears as though the entire message is stored in the
recipient’s mail file.
If the recipient deletes a shared message, Domino deletes only the
header in the recipient’s mail file. The content is not affected because
it is stored in the shared mail database.
After all of the recipients delete the message header from their mail
files, the Object Collect task runs and purges the obsolete message,
including the content from the shared mail database. This task runs
daily at 2 AM, by default.
server Commands
Overview
The server console displays server events as they happen and responds
to commands you enter at the prompt.
For certain commands, such as Load, the server doesn’t issue a
response to the console. Instead, the server’s log file (LOG.NSF)
records the results of these commands.
You can view the log file from the Server - Analysis tab in the Domino
Administrator.
You can also use the Domino Administrator to issue server commands
that affect a remote server.
To save time and space at the command line, enter the
abbreviation for the server command. You can also press the
Up arrow to display a command that you previously entered.
Press CTRL+Q or PAUSE to stop the screen display and
suspend access to the server and events in process.
Press CTRL+R to resume display and access to the server.
Press CTRL+R (or ENTER) to restore a command line.
Load Fixup
Locates and fixes corrupted databases.
Load http
Enables a Domino server to act as a Web server so browser clients can
access databases on the server.
load imap
Enables a Domino server to act as a maildrop for IMAP clients.
Show users
Displays a list of all users who have established sessions with the
server.
Show Stat
Displays a list of server statistics for disk space, memory, mail,
replication, andnetwork activity.
Show Server
Shows server status information including the server name, data
directory on the server, time elapsed since server startup, transaction
statistics, and the status of shared, pending, and dead mail.
Show Port portname
Displays traffic and error statistics and the resources used on the
network adapter card or communications port.
Show Directory
Lists all database files in the data directory and specifies whether the
data directory contains multiple replicas of a database.
Show Cluster
Displays the local server’s cluster name cache, which includes a list of
all cluster members and their status, based on information received
during the server’s cluster probes.
Set Secure currentpassword
After you password-protect the console, you can’t use the Load, Tell,
Exit, Quit, and Set Configuration server commands or other
programs that aren’t run automatically through Program documents
in the Domino Directory or through the NOTES.INI file until you
enter the password.
Database Replication
Replication
Replication is the process of keeping data in multiple replica copies of
a database synchronized.
There is a server- to- server replication as well as server- to –
workstation replication.
Replicas
To make a database available to users in different locations, on
different networks, or in different time zones, you create replicas.
All replicas share a replica ID which is assigned when the database is
first created.
The file names of two replicas can be different, and each
replica can contain different documents or have a different
database design; however, if their replica IDs are identical,
replication can occur between them.
Types of Replication
When you choose replication direction, you identify which
server(s) send and receive changes.
Pull-Push
Pull-Push is the default replication direction, is a two-way process in
which the calling server pulls updates from the answering server and
then pushes its own updates to the answering server.
Using Pull-Push, the replicator task on the calling server performs all
the work.
Pull-Pull
Pull-Pull is a two-way process in which two servers exchange updates.
Using Pull-Pull, two replicators — one on the calling server and one
on the answering server — share the work of replication.
Push-only
Push-only is a one-way process in which the calling server pushes
updates to the answering server. One-way replication always takes
less time than two-way replication.
Pull-only
Pull-only is a one-way process in which the calling server pulls
updates from the answering server. One-way replication always takes
less time than two-way replication.
Replication Process
The Replicator remains idle until Server A initiates
replication to Server B.
As a security precaution before replication, the two servers
authenticate their identities in an exchange involving their
public and private keys. First, the two servers find a
certificate in common. Next, they test each other’s certificate
to ensure it is authentic.
The two servers compare lists of databases to identify
databases with identical replica IDs.
The servers check the time when each database was last
modified to see if that time is more recent than the date of
the last successful replication event recorded in the
replication history. This step enables servers to determine
that a database needs to be replicated.
For each modified database, both servers build a list of the
document, design element, and ACL changes that occurred
since the last replication with the other server.
For each modified database, Server A checks the database
ACL to determine what changes Server B can make to its
replica, and Server B checks the ACL to determine what
changes Server A can make to its replica.
The transfer of document, design, and ACL changes takes
place. For documents, the servers replicate only the fields
that have changed, rather than replicating the entire
documents. For documents that were deleted, deletion stubs
remain, enabling the replicator to replicate the deletions. To
save disk space, Domino removes these deletion stubs
according to the purge interval that is set in the database
replication settings.
Basic Tab
∗ Choose “Normal” to force the server to use the network information in the current Connection
document to make the connection.
Source server
∗ The name of the calling server.
Source domain
∗ The name of the calling server’s domain
Use the Port(s)
∗ The name of the network port (or protocol) that the calling server uses.
∗
Basic Tab
Usage Priority
•Choose “Normal” to force the server to use the network information in the current
Connection document to make the connection.
Source server
•The name of the calling server
Source domain
•The name of the calling server’s domain
Use the Port(s)
•The name of the network port (or protocol) that the calling server uses.
Destination server
•The name of the answering server. You can also specify a Group name that
contains server names so that the Source server replicates with each server listed
in the group you specify.
Destination domain
•The name of the answering server’s domain
Routing / Replication Tab
Replication task
•Choose Enabled
Replicate databases of Priority
•Choose one:
•High
•Medium & High
•Low & Medium & High (default)
Replication type
•Choose one:
•Pull Pull
•Pull Push (default)
•Pull Only
•Push Only
Schedule tab,
Schedule
•Choose Enabled
Call at times
•The times between which you want replication to occur each day; the default is 8
AM - 10 PM.
•The number of minutes between replication attempts; the default is 360 minutes
Days of week
•The days of the week to use this replication schedule; the default is Sun, Mon, Tue,
Wed, Thu, Fri, Sat
Console Comman.
PULL ServerName DataBaseName
PUSH ServerName DataBaseName
Replicate ServerName DataBaseName for Pull –Push
Network Security
Network security applies to the technologies and equipment
that permit the communication of data between devices.
This can be communications between servers; it can be also
between clients and servers.
In regard to the client/server communications, it can be from
a Notes client to a Domino server or a Web browser to a
Domino server.
Server security
After users and servers gain access to another server, you can
use the database access control list (ACL) to restrict access
that specific users and servers have to individual applications
on the server.
In addition, to provide data privacy, encrypt the database
with an ID so unauthorized users cannot access a locally
stored copy of the database, sign or encrypt mail messages
users send and receive, and sign the database or template to
protect workstations from formulas.
ID security
From the Domino Administrator, click the Configuration tab, and then
click Certification.
Select the certifier ID file, and then enter the password.
Click Add and select the names of the administrators who are
authorized to recover ID files.
Click Address and select the e-mail address for the mail or mail-in
database that will store the encrypted back up ID files.
Enter the number of administrators required to unlock an ID file.
Click OK.
If user IDs do not already contain recovery information, complete the
procedure “Preparing IDs for recovery.”
Administration Process
The Administration Process is a program that automates
many routine administrative tasks.
For example, if you delete a user, the Administration Process
locates that user’s name in the Domino Directory and
removes it, locates and removes the user’s name from ACLs,
and makes any other necessary deletions for that user.
The Administration Process automates following tasks:
? Name-management tasks, such as rename person, rename group,
delete person, delete group, delete server name, recertify users, and
store Internet certificate
Administration servers
Administration servers control how the Administration Process does
its work.
You specify an Administration server for the Domino Directory and
for each database.
By default, the first Domino server you set up in a domain is the
administration server for the Domino Directory.
Updall option.
From console.
∗Load updall databasepath options
Using the Task - Start tool
∗ From the Domino Administrator, select the server on which to run Updall
in the Server pane on the left. To expand the pane, click the servers icon on
the left.
∗ Click the Server - Status tab
∗ In the task panel on the right, click Task - Start.
∗ Select “Update all.” Do not select “Update.”
∗ Do one of the following:
•To customize how Updall runs, click “Show advanced options,” click
Start Task, specify options to customize how Updall runs, then click
OK.
Keyboard shortcuts.
•F9 Updates the current view
•SHIFT+ F9 Rebuilds the current view
•CTRL+SHIFT+F9 Rebuilds all views in a database that are not built; updates all
other views.
Run Fixup using the Task - Start tool — use this method to run Fixup
on all databases; you can continue to use the Domino Administrator
while Fixup runs and you don’t have to remember command-line
options.
Log File
The Domino server log (LOG.NSF)
Every Domino server has a log file (LOG.NSF) that reports all server
activity and provides detailed information about databases and users
on the server. The log file is created automatically when you start a
server for the first time. You can do the following:
•Record additional information in the log file
•View the log file
•Search the log file
•Control the size of the log file