SnTT - In Which Port Settings Don't Quite Work

Been a long time since I wrote a Show n Tell Thursday so let's get on with it.

Building an IBM Domino cluster is not as difficult as it was years ago and I was done with the basic parts and wanted to test the fail over.

I figured easiest way to do this was to enter at a server console "stop port tcpip" while connected via rdp to the server.

I tested mail clients could fall over to the 2nd server and mail routed. Great.

Back to the server and server console and tell it to "start port tcpip".

I didn't think much about it and since there were some server updates to add to the box, I decided to shut it down after the updates were done.

It came back up and was running and I was working on another server in the domain when the client let me know no one could connect to the server. Odd, I was there and it "looked" ok. On closer inspection, it was not ok.

Errors that said databases could not be found, no route found, no network could be found, trace connections and some other fine error messages that mean nothing to the average person.

After poking around a bit, I figured the notes.ini needs to be edited. I checked with Rob Kirkland, of this book fame on Domino System Administration, and followed it to solve the problem.

I found the TCPIP port listed under disabled ports. Deleted it form there.
Found TCPIP=TCP,0,15,0,,45088 was missing which is for compression and encryption (see below).
Also missing was Ports=TCPIP

After putting it all back together, rebooted and all is good again. Still not sure why the commands failed and did not help this 8.5.3FixPack6 server but at least someone else out there will not have to waste an hour or 2 tying to figure it out.

Selection NOTES.INI parameter

          Nothing TCPIP=TCP,0,15,0,,12288,

Compression only TCPIP=TCP,0,15,0,,12320,

Encryption only TCPIP=TCP,0,15,0,,45056,

Both TCPIP=TCP,0,15,0,,45088,

EDITED: October 20, 2020 The below is pulled from the most awesome list of ini settings ever.

https://entwicklercamp.de/customer/notesini.nsf/85255a87005060c585255a850068ca6f/8d0f57b937909eefc1256e9e0045eddb?OpenDocument

Configuration for a TCPIP port.

Examples: TCPIP1=TCP,0,15,0,,12288

TCPIP=TCP, 0, 15, 0 [,,x] <----------- This is the setup for your TCP Port
.......|...|..|... Application Data buffer size (0 is default which = 8000)
.......|...|..Placeholder not used by TCP
.......|...Placeholder not used by TCP
.......This is the port driver name

The last parameter x ([,,x] above) can be decoded as follows:
0 X 8000 Encryption is enabled
0 X 0020 Compression is requested
0 X 4000 driver is internal
0 X 2000 no-op
0 X 1000 always for V2 and V3
0 X 0002 set to log modem I/O
0 X 0004 set to enable RTS/CTS

8020 which would be Encryption plus Compression is in hexadecimal code 45088

Selection NOTES.INI parameter
Nothing TCPIP=TCP,0,15,0,,12288,
Compression only TCPIP=TCP,0,15,0,,12320,
Encryption only TCPIP=TCP,0,15,0,,45056,
Both TCPIP=TCP,0,15,0,,45088,

Domino is Federal Information Processing Standard (FIPS)

Found here
Sales guys, go tell customers MS is full of FUD again.

From the online updated information on Lotus Notes/Domino 8.0.1.
Note that although the code is included and acceptable for Windows, for some reason it is not acceptable when used in non-Windows environments running Domino.

AES encryption
The Advanced Encryption Standard (AES) algorithm is optionally available for use with some encryption features. The AES algorithm is widely used and is approved by Federal Information Processing Standard (FIPS) 140-2. AES is currently available for ID file encryption, mail and document encryption, single sign-on configuration using the LtpaToken2 format, and SSL cipher configuration.

FIPS 140-2 certification
FIPS regulates cryptography and the use of cryptographic libraries. The cryptographic library is the .dll that stores encryption algorithms, and cryptographic libraries, not the applications that use them, can be FIPS 140-2 certified. Starting with release 8.0.1, the cryptographic library provided with Notes and Domino on the 32-bit Microsoft Windows platform is FIPS 140-2 certified. Although the cryptographic libraries on Notes and Domino 8.0.1 on platforms other than 32-bit Windows are not FIPS 140-2 certified, those libraries nevertheless include the FIPS 140-2 approved AES algorithm.