Lotus Notes MA with FIM2010
Has anyone tried to get the Lotus Notes MA working with FIM2010. As per the MA readme only Lotus Notes Client 6.5 or 7 is supported. However the Notes Client 6.5 or 7 is not supported on Windows 2008 64Bit. Only Notes Client 8.5.1 plus a few fixpacks is supported on Windows 7 64Bit and Windows 2008 64Bit. Any idea how to get the Lotus Notes MA working with FIM 2010? It doesn't look like it was ever tested.
May 6th, 2010 7:33am

Peter, This is an excellent question. A majority of my ILM work in the past has been Notes->Exchange migration projects. This will be impossible without a supported Notes client/Notes MA. Perhaps the answer is that Notes Server 6.5 or 7 is supported with the 8.5.1 client you have listed above. I'm looking forward to hearing more about this problem and any possible solutions. -Jeremy
Free Windows Admin Tool Kit Click here and download it now
May 6th, 2010 8:09am

Peter, We installed the client on Win 2008R2 and run it as a "Windows 2000" application. (right click on the exe - properties - compatibility tab) Hope this helps. Kr, Stefan
May 6th, 2010 3:28pm

Hi Peter, Which client are you running? Any fixes or patches? -Jeremy
Free Windows Admin Tool Kit Click here and download it now
May 6th, 2010 5:15pm

I have tried the following clients: 7.0.1 Notes Client with no patches 8.0.2 Notes Client with no patches 8.5.1 + FP2 Notes Client (Installed 8.5, upgraded to 8.5.1, applied FP2). All without success. With the 7.0.1 client I get the following error: -- Failed to connect to names.nsf: The management agent cannot access the Lotus Notes folder. The service account and the user who is trying to configure the management agent both need read /write access to the Lotus Notes folder to connect to the Lotus Notes server. -- With this I have installed the client with a local Admin account as a "single user install" who is also a domain admin, and was able to login to the notes client and use it. However failed to get the Sync console to login to the Notes Account. I also tried logging into the server with the service account after promoting it to be a Domain Admin (yes I know security issue, but trying to get it working..) and was able to happily login to the Lotus Notes Client on the workstation, but the MA still failed to login to Notes. Then when I installed either 8.0.2 or 8.5.1 FP2 as Single User I got the following error: -- Failed to connect to names.nsf: Unable to locate required client software. For more information about specific requirements for synchronizing with this connected data source, see the Synchronization Service help. -- Again I was able to login with either my regular admin account, or the service account who I had promoted to have sufficient access into the Notes Client, but the MA setup failed. There doesn't seem to be any way to debug the MA setup, to see what particular part it's failing on other than the error message it's giving me. I think I will be recommending to the customer Novell IDM as I know that it works, and requires 10% of the server capacity than FIM to do a better job, and so much easier to develop and debug.
May 7th, 2010 12:36am

Peter, We installed the client on Win 2008R2 and run it as a "Windows 2000" application. (right click on the exe - properties - compatibility tab) Hope this helps. Kr, Stefan But did you manage to get the MA setup against that client? As we havn't had an issue with the client, just getting the MA to talk to the client.
Free Windows Admin Tool Kit Click here and download it now
May 7th, 2010 12:37am

Hi Peter, You won't be able to use the 8.+ version clients with the Lotus Notes MA. IBM changed the APIs that the Lotus Notes MA was relying upon in version 8, breaking compatibility. Given MS' drive to getting FIM out the door, there's been no work done on updating (rebuilding) the Lotus Notes MA to support v8+ to this point. That being said, you can use the Lotus Notes v7 to manage user accounts on a Domino v8 server, though YMMV if trying to work with v8 functionality or templates. I've recently got this working on an ILM implementation. I haven't tried using the v7 client on a FIM 2010 box (i.e. W2K8 64-bit), but your errors and testing seems to indicate that the client is working properly, just not from the FIM Service's perspective. From my experience, you need to ensure the Synchronization Service account has full control over the Notes client's installation folder. You'll also need to ensure that the account has read permissions on the admin4.nsf database and that the Mmslnext.dll file has been copied to the Lotus Notes client installation folder. There is a section, "Using the Management Agent for Lotus Notes", in the Identity Manager help file that covers off on these checkpoints and others, which you may want to go over to see if something is missing. Another caveat... You cannot have the Lotus Notes client open at the same time as you're trying to connect with the Lotus Notes MA. Only one client connection at a time! :| Cheers, Marc Marc Mac Donell, ILM MVP, VP Identity and Access Solutions, Avaleris Inc.
May 10th, 2010 8:43pm

Hi Peter, You won't be able to use the 8.+ version clients with the Lotus Notes MA. IBM changed the APIs that the Lotus Notes MA was relying upon in version 8, breaking compatibility. Given MS' drive to getting FIM out the door, there's been no work done on updating (rebuilding) the Lotus Notes MA to support v8+ to this point. That being said, you can use the Lotus Notes v7 to manage user accounts on a Domino v8 server, though YMMV if trying to work with v8 functionality or templates. I've recently got this working on an ILM implementation. I haven't tried using the v7 client on a FIM 2010 box (i.e. W2K8 64-bit), but your errors and testing seems to indicate that the client is working properly, just not from the FIM Service's perspective. From my experience, you need to ensure the Synchronization Service account has full control over the Notes client's installation folder. You'll also need to ensure that the account has read permissions on the admin4.nsf database and that the Mmslnext.dll file has been copied to the Lotus Notes client installation folder. There is a section, "Using the Management Agent for Lotus Notes", in the Identity Manager help file that covers off on these checkpoints and others, which you may want to go over to see if something is missing. Another caveat... You cannot have the Lotus Notes client open at the same time as you're trying to connect with the Lotus Notes MA. Only one client connection at a time! :| Cheers, Marc Marc Mac Donell, ILM MVP, VP Identity and Access Solutions, Avaleris Inc. Marc Thanks for the brilliant response, this is so far the most complete response I have had. I have put the FIM Sync Service account into the Local Server Administrators group, so access shouldn't be an issue. Plus I manually granted full access to the C:\Program Files (x86)\lotus\notes directories. I don't have a admin4.nsf as I am not trying to admin the notes environment, just pull information out of the NAB / custom NSF Application database into FIM. Not managing accounts in Notes what so ever. The Mmslnext.dll is in the Notes directory, so that's ok. However I am still not having any joy with either the 6.5.6 (upgraded from 6.5.5) and the 7.0.1 client on FIM. Now I am getting an error message "The server did not respond in a timely fashion". Even though I can successfully connect via the client. I suspect it is some connectivity / comms issue is remaining, time to load wireshark I suspect and trace it out.
Free Windows Admin Tool Kit Click here and download it now
May 11th, 2010 6:00am

Hi Peter, You may want to trace the Lotus Notes connections to ensure you've got the proper configuration in the Lotus Notes MA. From the Lotus Notes client (I'm using v7), select File... Preferences... User Preferences... Ports... Trace... Enter in the hierarchical server name (as defined in the Lotus Notes MA connection properties) into the Destination field, click on Trace and review the trace information. It might provide you with a clue. Cheers, MarcMarc Mac Donell, ILM MVP, VP Identity and Access Solutions, Avaleris Inc.
May 11th, 2010 5:10pm

Has anyone tried to get the Lotus Notes MA working with FIM2010. As per the MA readme only Lotus Notes Client 6.5 or 7 is supported. However the Notes Client 6.5 or 7 is not supported on Windows 2008 64Bit. Only Notes Client 8.5.1 plus a few fixpacks is supported on Windows 7 64Bit and Windows 2008 64Bit. Any idea how to get the Lotus Notes MA working with FIM 2010? It doesn't look like it was ever tested. After logging the call one important piece of information came out of the conversation. Even though you may install as a Single User, using your Administrator Account that is part of the FIMSyncAdmins group we still needed to do one step. Copy all files out of the "C:\Users\**CURRENT USER**\AppData\Local\VirtualStore\Program Files (x86)\lotus\notes" directory which was used to install the Notes Client, and used to initially connect to the Domino server into the "C:\Program Files (x86)\lotus\notes" directory. Your user.id file should be put into the "C:\Program Files (x86)\lotus\notes\data\"directory, it cannot sit anywhere else. Once I did that (After Installing the 7.0.1 Client + Making sure that Everyone had sufficient access to the "C:\Program Files (x86)\lotus\notes"directory, and ensuring that the DNS could resolve the server name) Everything worked fine to at least pull down data out of Notes NSF Databases.
Free Windows Admin Tool Kit Click here and download it now
May 20th, 2010 5:48am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics