IBM – Server Slowdown during transaction logging if flushing does not succeed
Potential IBM Lotus Notes information leakage on port 1352
Andrew Christiansen contacted IBM® Lotus® to report a potential vulnerability in unauthenticated transactions using the Notes Remote Procedure Call (NRPC) protocol on port 1352. The advisory address is as follows: http://www.fortconsult.net/artikler/advisories.php The NRPC protocol uses an unauthenticated transaction to look up a user who is not yet authenticated so that the user can fetch their ID file during Notes® setup. This transaction is optionally used when a user is first registered or when a roaming user connects from a new client."
IBM Lotus Notes information leakage on port 1352 via the Lotus Domino Support RSS feed.
DB2 Development Workbench
While looking to DB2 v. 9 I stumbled upon DB2 Developer Workbench which is the follow-up to the old suite of Swing based Java DB2 development applications which I must say was due for an overhaul. If DB2 Developer Workbench is the yardstick for future IBM development products based on the IBM Eclipse/Expeditor platform all I can say is wow!!
I already picture an integrated development platform for Lotus, DB2 and Java products (can’t make myself write Websp…). It’s gonna be a BIG install but imagine the applications you can build that leverage Notes 8 as the client for applications what access Notes, DB2 and Java resources. How’s that for composite applications.
Seems everything is melting together nicely…
java.net: Nuances of the Java 5.0 for-each Loop
Nice article on java.net about the subtleties of the enhanced for-loop of Java 5: Nuances of the Java 5.0 for-each Loop. If you do any Java 5 development that doesn’t need to be portable to Notes/Domino I highly recommend the article.
Untitled!?
Am I the only one who have received a Lotus developerWorks newsletter with “Untitled” as the subject (see screenshot below)? The e-mail was very close to getting marked as SPAM… Not good!

IBM – Domino Router notes.ini debug parameters for SMTP
Practical Web Services in IBM Lotus Domino 7: What are Web services and why are they important?
New web services article by Julian on developerWorks: Practical Web Services in IBM Lotus Domino 7: What are Web services and why are they important? via Mr. Elgort…
Using OpenAudit to save my hair… :-)
At the moment I’m doing old school Notes development and needed to implement audit logging the in application. What better and easier to do than to head over to OpenNTF, grab the latest version of OpenAudit and implement it. Given I had some issues with some form aliases which I need to talk to Chad Schelfhout about it took me all of 90 minutes to implement. The component is now seamlessly embedded in the application – nice, quick and easy…
For me the the number one benefit of using open source is to be able to tweak the code to fit the exact problem domain. When creating applications I like to keep all databases for the application in a separate directory and hence group associated databases. When doing this it makes sense that the databases can automatically find the other databases of the application thus eliminating the need for additional configuration. This goes for Julians OpenLog application as well as OpenAudit. I previously implemented this for OpenLog and hence needed to do the same for Open Audit.
It proved very easy. A simple hack of the setAuditDb-method in the “Open Audit”-script library made it possible. Now when specifying “*/” at the start of the path name in the audit configuration (e.g. */OpenAudit.nsf) the method will assume that the database can be found in the same directory as the calling database.
My changes are in bold:
Public Sub setAuditDb(sServer As String, Byval sDatabase As String, sReplicaID As String)
On Error Goto ErrorHandler
If ( dbAudit Is Nothing ) Then
If sServer = "*" Then
sServer = System.ThisDatabase.Server
End If
If Left(sDatabase, 2) = "*/" Then
'get database relative to current directory
Dim session As New NotesSession
Dim current_directory As String
Dim sep As String
If Left(session.Platform, 3) = "Win" Then
sep = ||
Else
sep = |/|
End If
current_directory = Strleftback(System.ThisDatabase.FilePath, sep)
sDatabase = current_directory + sep + Right(sDatabase, Len(sDatabase)-2)
End If
Set dbAudit = New NotesDatabase( sServer, sDatabase )
If dbAudit.isopen Then
Else
Call dbAudit.OpenByReplicaID( sServer , sReplicaID )
If dbAudit.isopen Then
Else
Set dbAudit = System.ThisDatabase
End If
End If
End If
Exit Sub
'Catches any invalid Replica IDs, and will uses the current database then
errorHandler:
Set dbAudit = System.ThisDatabase
Exit Sub
End Sub
Force Notes to use mail.box when multiple mail.boxes are enabled
Although IBM states that putting e-mails directly in the mail.box isn’t a supported option, and Julie Kadashevich has been touting against it for years on Notes.net, apparently there is a setting for the notes.ini ensuring that Domino will continue to use the mail.box even though multiple mail.boxes has been configured. Only goes to show that it doesn’t help trying to enforce not using a hack that developers use because it is just easier…
Can Notes be forced to use mail.box when multiple mail.boxes are enabled via the Lotus Support RSS feed.
Ahhh…. Old school Notes development
For the past two days I have been blessed with doing plain old school Notes application development. Simple forms, views and a couple of LotusScript agents. Nothing fancy. What a nice way to end the week and a welcome change from all those advanced applications we always seem to be working on. Apart from being nice to simply create a finished, polished application in two days it’s also a nice reminder of how much you can do in Notes in such a short time.