Finally we can setup and use DKIM email authentication in HCL Domino. Here are the steps for adding DKIM in Domino and DNS.The actions are my actual commands for adding DKIM to my angioni.nl domain.

The issue applies to HCL Notes 12.0.1 standard and basic as well as HCL Notes 12.0.2 32/64Bit standard and basic. When you try to change your signature in the Calendar Profile, you get the error message

This video demonstrates the installation process for Domino 12.0.2 including HCL Nomad Web and HCL Domino Leap on Docker using the Domino Container build script.

In helping a customer who was having an issue with getting TOTP working, I came upon an interesting situation with their ID Vault. When issuing ‘show idvault’, the following error was displayed. Invalid or nonexistent document: Vault replica list inconsistency for vault /ID_Vault The really strange thing about this situation was the replica of the ID Vault was on both the primary and secondary server, however only the primary server was listed as a Vault Server in the ID Vault itself.

This is part one of my series on how to utilize Keycloak as the SAML IDP for HCL Nomad Web for Domino. While HCL describes the use of ADFS in the online documemtation, Keycloak can serve for this purpose with ease as well. Within this series I want to describe the components and configurations that are necessary to make the two work together.

There are a lot of handy constants included in the LotusScript file lsconst.lss, which you can include in your scripts via the statement: %Include "lsconst.lss" It contains many “Const” definitions for symbolic names needed for calling built-in functions, such as this constant useful when calling Messagebox function: Public Const MB_OK = 0 None of these constants is necessary since you can also hardcode the constant value when you make your call. But it makes your code easier to read and maintain if you use the symbolic names, so this is a best practice.

Today I learned the hard way what it means to "reset" the Docker Desktop installation using a tool like "Clean My Mac X", a tool that I strongly recommend to get rid of all crap that slows down your system - and does much more. However, resetting a Docker Desktop installation means that everything is wiped - except from the program itself. Docker started to be unstable, so my plan was to re-install it. After I did this task, I found out that all my containers were gone - including the images and volumes. The latter is the worst, so be careful.

Now that Domino 12.0.2 is has a native VSS Writer, we can look into new interesting integrations. In my session at SUTOL conference this week, I showed a first version of a Restic integration for Domino 12.0.2 via VSS. Restic is a very interesting application (https://restic.net) It's a single binary written in GO And uses a approach like Borg Backup uses. But in contrast to Borg Backup it has full Windows support. This includes VSS Writer + AutoRecovery support! It is Open Source, efficient, flexible & secure. And very simple to setup & use!

We have had an odd issue on Domino that we have not been able to resolve despite lots of input from HCL. I just wanted to post it in case any other person comes across it. The symptom is a Domlog entry for 38 seconds when you trigger an email via XPages. This happened @4 years ago on an Azure Linux Domino 9 server ( which we scrapped ) and then started again with an Azure Windows Domino 11 server about a year ago.

To test the new HCL Notes 12.0.2 "Signature" feature I created a simple form with a Rich Text Lite field for testing out the feature. I have have removed all options,but the signature feature for the field. Only a part of the image seem to be saved in the field.

Because of what I'll euphemistically call the current historical moment on Twitter, I (like a lot of people) decided to give another look at Mastodon. The normal way one would use it would be to sign up at mastodon.social and be on one's merry way, treating it just like a slightly-different Twitter. However, Mastodon is intentionally designed to be federated in a way similar to email, and the software is available on GitHub complete with scripts for Docker Compose, Vagrant, and so forth. So I went and did that, setting up my currently-barely-used account at @jesse@pub.frostillic.us. That on its own isn't particularly notable, nor are the specifics of how I set it up (it was a hodgepodge of a couple posts you can find by looking for "mastodon docker compose"). What I found neat for our purposes here was the way I could piggyback authentication onto stuff I had recently done with Keycloak. Keycloak, incidentally, was the topic of today's OpenNTF webinar, so, if you didn't see it, check back there for the replay when it's posted.

In the days of micro-services, Identity Management, Identity Brokering and Single-Sign-On Capabilities are getting more and more important. HCL has put some serious investment into modernizing the various Domino authentication capabilities but still a lot of services require external system integration to be a nice citizen in a service orchestra. In this session, Heiko want to demonstrate the use cases and technical ways to integrate one major Open Source Identity Management system with HCL Domino - Keycloak.