SSL breaks after upgrading to Traveler 8.5.3 UP 1

On a production upgrade of Traveler to 8.5.3 U.P. 1 yesterday we came across a problem.

The upgrade itself completed without issue but mobile clients couldn’t connect to the server automatically after the server was back up and running.

We could see the following in the log :-

“HTTP Server: SSL Error: Keyring file not found, key ring file [keyfile.kyr], [Default Server]”

So we did some digging.  Before the upgrade the “SSL key file name” field (Server Document -> Ports > Internet Ports- >  SSL key file name) was something other than default (say mobile.kyr for argument’s sake).

After the upgrade this field changed back to the default “keyfile.kyr” automatically!  It is quite an easy fix (either renaming the the .kyr file on the OS and restarting HTTP or renaming the field in the server document and restarting HTTP fixes the problem).

We’ve done a few tests and it doesn’t appear to be reproducible on demand, however it is worth noting in case the same thing happens to you!

Cormac McCarthy – Domino People Ltd.

Posted in Android, HTC, HTTP, HTTPS, iPhone, Lotus Traveler, Windows Phone | Leave a comment

Traveler 8.5.3.2 Interim Fix 1 released

Overview

Lotus Traveler 8.5.3.2 IF 1 is an Interim Fix release that contains APAR fixes for the Lotus Traveler server and clients. The information below outlines the changes included.

Fix List

See Lotus Traveler APAR Listing

Feature List – new in 8.5.3.2 IF 1

Please ensure to read the detailed instructions.

You can download the fix here. (requires a IBM ID).

Posted in Android, HTC, iPhone, Lotus Traveler, Windows Phone | Leave a comment

Lotus Domino R8.5.3 Interim Fix for Traveler (Win 64bit)

If you are running Lotus Traveler on Domino 8.5.3 FP1 (Windows 64 bit), there’s a new interim fix available that may avoid serious issues (such as server crashes).

Details are available at this IBM tech note - http://www-01.ibm.com/support/docview.wss?uid=swg21591859

(please note to download the fix requires an IBM log in)

Posted in Android, Domino Server, HTC, iPhone, Lotus Traveler, Uncategorized, Windows Phone | Leave a comment

Lotus Traveler – Latest Device Updates (Feb 2012)

It’s worth noting this article published by IBM to make sure you’re on an appropriate release of Traveler for your users’ devices.  (and also for information on upcoming Traveler device support!)

http://www-01.ibm.com/support/docview.wss?uid=swg21577369&myns=swglotus&mynp=OCSSYRPW&mync=E

Steven Vaughan – Domino People Ltd

Posted in Android, HTC, iPhone, Lotus Traveler, Windows Phone | Leave a comment

The BES for Domino Extended Threading Model

Did you know that there is a default number of threads (40) on a Domino BES server that allow for connections to remote target mail servers which are used to read/write to users mail files?

Performance problems can occur if you have multiple target mail servers with a good number of target users. The Domino BES server by default will automatically allocate threads by target mail server numbers. A simple explanation is as follows:

Server A – 5 Users – 5 Threads Allocated out of 40 available – Ratio 1 Thread per user

Server B – 10 Users – 10 Threads Allocated out of 40 available – Ratio 1 Thread per user

Server C – 15 Users – 15 Threads Allocated out of 40 available – Ratio 1 Thread per user

Server D – 50 Users – 15 Threads Allocated out of 40 available – Ratio 0.3 Threads per user

From the example above, clearly Server D with 50 users will have potential performance issues with the BES server unable to allocate enough threads to facilitate the high user number which means there may be delays in delivering messages to handheld devices. The basic way of putting this is each BES will assign a number threads to mail servers(assuming they’ve at least one BlackBerry user) within your environment.

Now here’s a simple explanation of the difference between the two threading models:

The default threading model assigns the default pool of 40 threads purely by the number of mail servers.

The extended threading model assigns threads dynamically by the number of users on each mail server. (You can also increase the number of total threads in your pool for your BES beyond the default 40).

I use the following rule of thumb for when the default threading model will work efficiently for you if you’ve a BES server connecting to:-

-Only one mail server/cluster with a user base 100 or less

or

- Multiple mail servers /clusters with a similar number of BlackBerry users per server/cluster. (again with a total user base no greater than 100).

So the the conclusion from that is that it won’t work efficiently for you if  you’ve:

-More than one mail server/clusters with  differences in BlackBerry users per server/cluster

or

-A mail server with greater than 100 users (ie beyond that point 40 threads become insufficient).

If you’ve more than 100 users and you want your BES to be efficient, you need to start thinking about increasing your thread pool. One caveat is to be very careful increasing the number of total threads in your thread pool.  Do so incrementally and make sure the resources on your BES can handle an increase.

What does this mean for my end user?

The threads are used for every interaction with BlackBerry handhelds.  So if a mail server is “under served” by threads it will mean delays the delivery of mail to handhelds.

You also need to take into account, that not all threads assigned to a mail server will be effectively usable for most of the users on that mail server. There are no real hard and fast numbers with this, a number of factors (how big your mailfiles are, whether they’re on a custom design, the network connectivity to your BES) contribute to how quickly a mailfile is “read” by BES.   But usually, from experience most mail servers will have at least a small number of mailfiles who hold onto BES threads for significantly longer than others, so effectively several threads are “locked” from the majority of your users.  If your mail server isn’t adequately served by the remaining threads this will lead to mail delivery delays to your other users.

RIM’s explanation of the threading models and extending threads is here.

Let us know if you’ve found this useful.  There is much more detail I can go into on how to know if your users are “locking” threads consistently, how to measure if changes you’ve made to the threading model are effective and  and how to handle completely hung threads better than the built in alerts RIM provide.

If you’d like us to look at your environment for you and recommend improvements that could be made to make your BES threading model more efficient then please do contact us

Cormac McCarthy – Domino People Ltd

Posted in BES, BlackBerry, Default Threading Model, Extended Threading Model, Hung Threads, Threading Model, Threads, Uncategorized | Leave a comment

Lotus Traveler – Latest Device Updates

It’s worth noting this article  published by IBM to make sure you’re on an appropriate release of Traveler for your users’ devices.  (and also for information on upcoming Traveler support!)

http://www-01.ibm.com/support/docview.wss?uid=swg21577369&myns=swglotus&mynp=OCSSYRPW&mync=E

Cormac McCarthy – Domino People Ltd

Posted in Android, HTC, iPhone, Lotus Traveler, Windows Phone | Leave a comment

Compare Domino Server/Configuration Documents

This is a really good tip for checking what changes have been made to Server and Configuration documents over the lifetime of a server and can be really useful when a  number of changes have been made in a short period of time especially when things are not working correctly!

If you open up the IBM_TECHNICAL_SUPPORT folder on the Domino server (within the data folder), look files with a DXL extension.

EVERY change made to a Server and Configuration document for that server will be stored here in a DXL file in the format:-

serverdoc_servername_date@time.dxl (server documents)

or configspecific_servername_date@time.dxl  (server specific configuration documents)

or configall_servername_date@time.dxl  (default configuration documents)

(where “servername” is the name of the server, “date” is the date a change was made, and “time” is the time the change was made at).
Now there are many sophisticated LotusScript ways to convert a DXL file into a readable format in a Notes database but there is an out of box solution that doesn’t involve any interaction with developers (and it’s free!).

You’ll need to download the Lotus Notes Diagnostic (LND) Utility http://www-01.ibm.com/support/docview.wss?uid=swg24019151 (also very handy for troubleshooting crashes) .
Download and install it choosing your local Notes program folder and launch.  Accept the ECL alerts and an LND Notes database will open. To open a server or config doc DXL file click on the LND header in the database:-

LND File Open

When prompted for a file, browse to the appropriate DXL file  It will reformat into a new Server/Configuration document within the LND application. You’ll be able to compare this and every DXL file to each other or your current server/config document and find out what changes have been made. The compare process is a bit laborious but it could be a lifesaver !

Please let us know if you find this tip helpful!

Thanks,

Cormac

Posted in Configuration Document, Domino Server, DXL files, IBM_TECHNICAL_SUPPORT, Lotus Notes Diagnostic, Server Document | 3 Comments

Traveler 8.5.3.1 Interim Fix Released

PREREQUISITES

Lotus Notes Traveler server version 8.5.3.1 already installed.

FIX LIST

LO65270 – MAILTO LINK DOES NOT WORK ON SOME ANDROID DEVICES.

LO65271 – UNABLE TO SYNC WITH SOME ANDROID DEVICES

LO65435 – SHORT CUT ICONS MAY DISAPEAR ON SOME ANDROID 3.X DEVICES.

LO65542 – ANDROID: LINKS IN MAIL AND CALENDAR ENTRIES ARE NOT CLICKABLE

LO65568 – IMPROVED SUPPORT FOR ANDROID 4.X PHONES

LO65759 – REPLY-TO MAIL HEADER IS NOT RESPECTED

LO65923 – CONTACT EDITOR SHOWS BLANK OR WRONG DATA

LO65948 – TRAVELER ANDROID FORCE CLOSE WHEN SD CARD STATE IS CHANGED

Please see : http://www-01.ibm.com/support/docview.wss?uid=swg24019529&wv=1 for details on installation and how to obtain the fix pack file.

Posted in Lotus Traveler | Tagged | Leave a comment

Domino BES – testing handhelds are functioning

A quick and easy test to ascertain if one or more of your Blackberry Enterprise Server users is setup correctly server side or if their device is configured correctly is possible and here’s how……

From your normal Lotus Notes mail (I’m assuming you are using Notes mail !), send the user, users or group an email with the following subject line:

<$Confirm,RemoveOnDelivery,SuppressSaveInSentItems>

If the Blackberry device is able to receive and send messages, you will get an automatic  reply. If you don’t get a message back, you know something is wrong. The original message you send is removed immediately and the reply is also deleted from their sent view.

A couple of Caveats:

  1. The original message you sent and the reply mail will be in the users trash view.
  2. Obviously this will not work if the handset is turned off or doesn’t have the appropriate signal, in this case the original message you send will also not be deleted until their handset is online.

 

Posted in BES, Domino Server, email | Tagged , , | 1 Comment

Yellow Status on Lotus Traveler – What to do ?

Scenario:  Every time you connect to the traveler server and issue a “tell traveler status” command from the Domino console, you get a yellow status returned or more particularly

“The response times for opening databases on mail server X are above the acceptable threshold.”

Mail users on server “X”  are perfectly happy with how quickly messages get to their devices and you want to understand how this “threshold” works and  to confirm if it is doing what you want it to do.

The first thing to explain is that Traveler will go into yellow status if it take more than 2 (yes, that’s 2) seconds to open a mailfile on a remote server.  This is fine when all mail servers are on the same LAN and in the same location.  But what about actual remote servers that are in different locations? Maybe they are on a decent connection but  you may expect the remote mailfile to take longer than 2 seconds  to open as the norm.

The good news is that you can change this threshold to make your Traveler Server “Green” again !!! and here’s how:

The next thing to note is exactly how many seconds mailfiles on server X are taking to open.

You can do this by issuing a command “tell traveler stat show” from the domino console, this will return a list of results.
(as an aside you can make more sense out of these results from this link – http://www-10.lotus.com/ldd/dominowiki.nsf/dx/System_status_results_LNT853)

Look for DCA.DB_OPEN.Time.Histogram.CN=X/O=YourOrg (where Server X is X/YourOrg)

You’ll see a list of results that look like this
DCA.DB_OPEN.Time.HistogramCN=X/O=YourOrg.000-001 = 10
DCA.DB_OPEN.Time.Histogram.CN=CN=X/O=YourOrg.001-002 = 20
DCA.DB_OPEN.Time.Histogram.CN=CN=X/O=YourOrg.002-005 = 1

In the above example it’s saying is that in the last fifteen minutes  (the default interval for status checks) 10 times it took less than one second to open a remote mailfile on Server X, 20 times it took 1 second to 2 seconds, and once it took between 2 and 5 seconds.  (you may see more results if it took longer than 5 seconds).

You may want to do this a few times over the course of a day or week to see are the times consistent.

Let’s continue the scenario and say your remote server is in another country or even continent and you wouldn’t be shocked if it took up to a minute to open the mailfile.  You’re happy to accept that this is a network restriction and you shouldn’t be constantly alerted about it i.e. you want to change the threshold to something more reasonable.

For this threshold the following “interval buckets” values apply:

1 – “000-001″ seconds to open a mailfile on a remote server.
2 – “001-002″ seconds to open a mailfile on a remote server.
3 – “002-005″ seconds to open a mailfile on a remote server.
4 – “005-010″ seconds to open a mailfile on a remote server.
5 – “010-030″ seconds to open a mailfile on a remote server.
6 – “030-060″ seconds to open a mailfile on a remote server.
7 – “060-120″ seconds to open a mailfile on a remote server.
8 – “120-Inf” seconds to open a mailfile on a remote server.

The default for a yellow status is a value 2 (so anything above 001-002 seconds) and the default for red is 8 (so anything from 120 seconds upwards).

We’ll give an example that from looking at the “tell traveler stat show” over the course of a week, you don’t want the traveler server to go into yellow status unless it takes over a minute to open a remote mailfile.  To do this your status value will need to equal 6 (“030-060″ seconds to open a mailfile on a remote server).

In order to apply this setting you need to modify the NTSConfig.xml file (located in <domino data directory>\traveler\cfg\ on the Traveler server) to include the following line:
<PROPERTY NAME=”STATUS_DB_OPEN_INTERVAL_YELLOW” VALUE=”6″/>
and on a new line below the following line
<COMPONENT COMPONENT_TYPE=”TrueSyncServer”>

Followed by issuing a “tell traveler quit“, followed by a “load traveler” from the Domino console.

You can see if the setting has been applied correctly by doing a “tell traveler systemdump“,  go to <domino data directory>\IBM_TECHNICAL_SUPPORT\traveler\logs\dumps\ and look for the latest system dump. Open the file and search for “—– adminForTSS —–”, and then for  STATUS_DB_OPEN_INTERVAL_YELLOW” below that, the value that is applied here is the one applied to the server (ie if it hasn’t changed then this value will equal the default of 2)

Obviously the status of the server will have changed as well (assuming there are no other yellow status’).

The next step from here from IBM’s point of view would be if you could set individual thresholds for individual servers (maybe even in the server document)!!

You can apply similar changes to other thresholds in the same way, more details on the status messages is here – http://www-10.lotus.com/ldd/dominowiki.nsf/dx/Status_command_details_LNT8521

Much kudos to Cormac McCarthy, one of our Senior Admins for taking the time for writing up his findings to share.

Posted in Domino Server, Lotus Traveler | 2 Comments