tag:blogger.com,1999:blog-2962058938658093988.post4465558859954245884..comments2023-05-07T09:07:24.301+02:00Comments on Roberts TechWorld: Connections Mail over SSL? There´s no need to install SSL certificate on the Domino iNotes server.Anonymoushttp://www.blogger.com/profile/02606707352534212749noreply@blogger.comBlogger10125tag:blogger.com,1999:blog-2962058938658093988.post-33853569811714037582016-04-10T00:36:30.206+02:002016-04-10T00:36:30.206+02:00Hi Amacre.
Does iNotes work normally? I mean, can ...Hi Amacre.<br />Does iNotes work normally? I mean, can you access the mail .nsf file in a browser in a normal way?<br />If not, then there´s your problem. Security settings on the nsf files and the server needs to be checked.<br /><br />If iNotes works normally, then it´s the LTPAToken that needs to be set up correctly. Websphere and domino needs to have the same LTPAToken in order for SSO to work between the servers :-)Anonymoushttps://www.blogger.com/profile/02606707352534212749noreply@blogger.comtag:blogger.com,1999:blog-2962058938658093988.post-52357236714854424532016-01-19T19:24:36.973+01:002016-01-19T19:24:36.973+01:00please help, i did everything but i cant make it w...please help, i did everything but i cant make it work<br /><br />it says:<br /><br />FORBIDDEN you dont have permission to access /mail/file.nsf on this server.<br /><br /><br />or <br /><br /><br />You don't have permission to access /redir.nsf on this server.<br /><br />what can i do?<br /><br />thanks.<br />amacrehttps://www.blogger.com/profile/14128388244522816771noreply@blogger.comtag:blogger.com,1999:blog-2962058938658093988.post-20899423505100377412016-01-19T18:29:43.996+01:002016-01-19T18:29:43.996+01:00This is great, thanks a lot!!!This is great, thanks a lot!!!amacrehttps://www.blogger.com/profile/14128388244522816771noreply@blogger.comtag:blogger.com,1999:blog-2962058938658093988.post-75614262523171075792014-02-24T22:39:29.647+01:002014-02-24T22:39:29.647+01:00Thank you Mats!! Will try this asap.Thank you Mats!! Will try this asap.Anonymoushttps://www.blogger.com/profile/02606707352534212749noreply@blogger.comtag:blogger.com,1999:blog-2962058938658093988.post-92193438846899885872014-01-17T23:38:24.363+01:002014-01-17T23:38:24.363+01:00Wildcard SSL certificate from P12/PFX file into Do...Wildcard SSL certificate from P12/PFX file into Domino<br /><br />I did some documentation and a checklist on how to do this at my company blog.<br /><br />Maybe that could help you out, here is the link:<br /><br />http://wp.me/p1CuQM-pG<br /><br />Regards<br /><br />MatsMatsBEkmanhttps://www.blogger.com/profile/05508072177535418561noreply@blogger.comtag:blogger.com,1999:blog-2962058938658093988.post-2024647986665078222013-06-12T21:27:10.343+02:002013-06-12T21:27:10.343+02:00Hi Brian. Sorry for the delay in replying to you.
...Hi Brian. Sorry for the delay in replying to you.<br /><br />Og, I understand your issue better now.<br />The Connections Mail config, where the fixed server is configured, connects to this server and only this server. But when using iwaredir, the redirection itself picks up the users mail server and redirects the user to this inotes server. So if you have multiple inotes/mail servers, then the iwaredir sorts this out for you.<br /><br />But this is not "helping" the Connections Mail part, is it? If ssl is not enabled on the inotes servers, then it won´t work...<br /><br />So I have 2 possible solutions for you:<br /><br />1. Replicate every maildatabase to one dedicated iNotes server, remove the iwaredir on this server, and set this server as the "Fixed server".<br /><br />2. Buy a wildcard ssl certificate and implement on every domino iNotes server. I know a wildcard SSL is a hassle to implement into the domino servers. Perhaps it has gotten better with Domino 9, but I know it should work. I´ve seen examples of it (Even though you might have to use an old version of ikeyman, which works only in windows xp....).<br /><br />If you are able to implement the wildcard ssl sertificate, then you can buy only one certificate for every subdomain (inotesserver1.company.com, inotesserver2.company.com) in your company. And frankly, then you don´t need the IHS Reverse Proxy server config anymore....Anonymoushttps://www.blogger.com/profile/02606707352534212749noreply@blogger.comtag:blogger.com,1999:blog-2962058938658093988.post-44819021143044637832013-06-12T21:14:48.887+02:002013-06-12T21:14:48.887+02:00Thank you for this information.
The problem we are...Thank you for this information.<br />The problem we are having with the redirect is we have many mail servers. It seems like it is looking up the home mail server for the user and then trying to make the connection to the domino server instead of the proxy server. This works if I used fixed server and point to proxy but when I do that for the redirect database it still tries to connect directly to the domino server via HTTPS. I can see it in the logs.Anonymoushttps://www.blogger.com/profile/17893329245812387273noreply@blogger.comtag:blogger.com,1999:blog-2962058938658093988.post-86042529411395030552013-06-12T21:11:16.745+02:002013-06-12T21:11:16.745+02:00Just wanted to leave another comment because you h...Just wanted to leave another comment because you have been really helpful in putting this information together. The problem we are running into is we have many mail servers so it looks like Connections mail is figuring out what server the user is on and then trying to go directly to the server to get the mail via HTTPS when we don't have SSL enabled in Domino. Is there a way to configure the proxy rule to account for all the mail servers?<br />fixed server seems to work but the redirect does not with multiple mail servers.I added some trace and the log shows that the mail server cannot be reached and it shows the connection directly to the mail server and not the proxy server.Anonymoushttps://www.blogger.com/profile/17893329245812387273noreply@blogger.comtag:blogger.com,1999:blog-2962058938658093988.post-43474873200032418402013-05-31T14:21:26.888+02:002013-05-31T14:21:26.888+02:00Hi Brain.
Hmm, are you using the iwaredir.nsf?
My...Hi Brain.<br /><br />Hmm, are you using the iwaredir.nsf?<br />My example above uses the "iredir.nsf". Perhaps this should be changed to the correct redir db name?<br /><br />Check out this article right here:<br />http://www-10.lotus.com/ldd/dominowiki.nsf/dx/How_to_Configure_a_Reverse_Proxy_server_for_iNotes_and_Sametime_Proxy_IntegrationAnonymoushttps://www.blogger.com/profile/02606707352534212749noreply@blogger.comtag:blogger.com,1999:blog-2962058938658093988.post-69808340885011947132013-05-29T21:24:53.077+02:002013-05-29T21:24:53.077+02:00Robert,
Great article and this worked well in my ...Robert, <br />Great article and this worked well in my environment except for one thing. I have multiple mail servers so I need to use the iNotes redirect. Your config works well for a single server but it did not work for the redirect. Do you have any idea how I could get the redirect to work going from an HTTPS session to an HTTP session?Anonymoushttps://www.blogger.com/profile/17893329245812387273noreply@blogger.com