Showing posts with label ports. Show all posts
Showing posts with label ports. Show all posts

Friday, November 7, 2014

SnTT - In Which Port Settings Don't Quite Work

Been a long time since I wrote a Show n Tell Thursday so let's get on with it.

Building an IBM Domino cluster is not as difficult as it was years ago and I was done with the basic parts and wanted to test the fail over.

I figured easiest way to do this was to enter at a server console "stop port tcpip" while connected via rdp to the server.

I tested mail clients could fall over to the 2nd server and mail routed. Great.

Back to the server and server console and tell it to "start port tcpip".

I didn't think much about it and since there were some server updates to add to the box, I decided to shut it down after the updates were done.

It came back up and was running and I was working on another server in the domain when the client let me know no one could connect to the server. Odd, I was there and it "looked" ok. On closer inspection, it was not ok.

Errors that said databases could not be found, no route found, no network could be found, trace connections and some other fine error messages that mean nothing to the average person.

After poking around a bit, I figured the notes.ini needs to be edited. I checked with Rob Kirkland, of this book fame on Domino System Administration, and followed it to solve the problem.

I found the TCPIP port listed under disabled ports. Deleted it form there.
Found TCPIP=TCP,0,15,0,,45088 was missing which is for compression and encryption (see below).
Also missing was Ports=TCPIP

After putting it all back together, rebooted and all is good again. Still not sure why the commands failed and did not help this 8.5.3FixPack6 server but at least someone else out there will not have to waste an hour or 2 tying to figure it out.
Selection NOTES.INI parameter
          Nothing TCPIP=TCP,0,15,0,,12288,
Compression only TCPIP=TCP,0,15,0,,12320,
Encryption only TCPIP=TCP,0,15,0,,45056,
Both TCPIP=TCP,0,15,0,,45088,

EDITED: October 20, 2020 The below is pulled from the most awesome list of ini settings ever.

https://entwicklercamp.de/customer/notesini.nsf/85255a87005060c585255a850068ca6f/8d0f57b937909eefc1256e9e0045eddb?OpenDocument

Configuration for a TCPIP port.

Examples: TCPIP1=TCP,0,15,0,,12288

TCPIP=TCP, 0, 15, 0 [,,x] <----------- This is the setup for your TCP Port
.......|...|..|... Application Data buffer size (0 is default which = 8000)
.......|...|..Placeholder not used by TCP
.......|...Placeholder not used by TCP
.......This is the port driver name

The last parameter x ([,,x] above) can be decoded as follows:
0 X 8000 Encryption is enabled

0 X 0020 Compression is requested
0 X 4000 driver is internal
0 X 2000 no-op
0 X 1000 always for V2 and V3
0 X 0002 set to log modem I/O
0 X 0004 set to enable RTS/CTS


8020 which would be Encryption plus Compression is in hexadecimal code 45088

Selection NOTES.INI parameter
Nothing TCPIP=TCP,0,15,0,,12288,
Compression only TCPIP=TCP,0,15,0,,12320,
Encryption only TCPIP=TCP,0,15,0,,45056,
Both TCPIP=TCP,0,15,0,,45088,

Thursday, September 8, 2011

What would make installing WAS, DB2 and X product easier

Does not matter if it is Sametime, Connections or Quickr you may face the following challenges.

These are out of the ordinary for most companies but certain locked down, highly secured environments should keep the following in mind.

There are excellent step by step directions for the products, Sametime, but this is about before you start them.


Imagine you have a set of servers to work with, now imagine those servers have every single port aside from the absolute minimum locked down.

The documentation warns you to disable any firewalls on your server. You can follow that, but what if you are not allowed to enable any ports? Am I serious? Yes. So what you need to do is either enable ALL ports on the server for the short term of installation or if security requires it, work from the existing knwon ports that are in use by EVERYTHING.

Remember this from various IBM docs:
Note: No validation is done to see if the ports are in use or if the ports file is valid.

BUT IT SHOULD!

So for those in a locked down environment, here are links to the known ports you may need or how to find them:
Sametime - http://www-10.lotus.com/ldd/stwiki.nsf/dx/Sametime_8.5_Ports_and_URLs and this one which is more detailed: http://publib.boulder.ibm.com/infocenter/sametime/v8r5/index.jsp?topic=%2Fcom.ibm.help.sametime.v85.doc%2Fplan%2Fplan_ports.html

Quickr J2EE - http://www-10.lotus.com/ldd/lqwiki.nsf/dx/Configuring_the_Lotus_Quickr_ports_qp85

DB2,Websphere Deployment Manager - http://publib.boulder.ibm.com/infocenter/wasinfo/v6r1/topic/com.ibm.websphere.nd.iseries.doc/info/iseriesnd/ae/rmig_portnumber.html
for As/400 http://publib.boulder.ibm.com/infocenter/wsdoc400/v6r0/index.jsp?topic=/com.ibm.websphere.iseries.doc/info/ae/ae/adrport.htm

Lotus Notes Traveler - https://www-304.ibm.com/support/docview.wss?uid=swg21298475

And please disable your anti-virus solution as well.

Lastly, remember to use an 8 character administration name (DB2 limitation) and keep directories and naming as short as possible as well.