1. Neuerungen in
IBM Domino Server &
Administration
V9 Social Edition
[IS-07]
19. Februar 2013
Alexander Novak, alexander.novak@edcom.de, Tel.: +49 89 38 40 850
edcom Software & Consulting GmbH, Baierbrunner Straße 39, 81379 München, www.edcom.de

2. IBM Notes/INotes Social Edition
IBM Disclaimer
IBM’s statements regarding its plans, directions, and intent are
subject to change or withdrawal without notice at IBM’s sole
discretion.
Information regarding potential future products is intended to
outline our general product direction and it should not be relied on
in making a purchasing decision.
The information mentioned regarding potential future products is
not a commitment, promise, or legal obligation to deliver any
material, code or functionality. Information about potential future
products may not be incorporated into any contract.
The development, release, and timing of any future features or
functionality described for our products remains at our sole
discretion.
Seite 2

3. Agenda
Neuerungen in IBM Lotus Domino Server &
Administration 9 Social Edition
Wie sieht die Zukunft aus ? / Visionen
Seite 3

4. IBM Domino 9 SE News
Platform Support
Database Management Tool – DBMT
Compact Replication
Gruppen in Programm Dokumenten
Geschützte Gruppen
Quality of Service (QoS)
Performance Verbesserungen
SAML & federated login
OAuth für „embedded expierence“
TLS mit IBM HTTP Server
Domino Migration Utility
IBM Notes 9.0 Default Setting Changes
Seite 4

5. IBM Domino 9 SE News – Platform Support
Support nur für aktuelle und zukünftige Betriebssysteme
End of Live für Solaris (8.5)
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 5

6. IBM Domino 9 SE News – DBMT
Database Management Tool = aka. DBMT
Ein EINZIGES Werkzeug (Tool) das Wartungsarbeiten
an den Benutzer Maildatenbanken optimiert und
koordiniert ausführt
Compact auf non-system Datenbanken
Updall & Fixup auf alle Datenbanken
Zeitsteuerung erfolgt über die Kommandozeile
(dbmt –start/stoptime) oder über Programmdokumente
Mehrmals täglich
Wöchentlich
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 6

7. IBM Domino 9 SE News – DBMT
Was erledigt der DBMT ? Systemdatenbanken sind vom
“copy-style compact” Operationen Compact ausgeschlossen
Löschung von „deletion stubs“ -updall / -fti Operation werden trotzdem
Ablauf von „soft deleted entries“ ausgeführt
Aktualisierung von Ansichtsindizes
(incremental) Admin4, Busytime (oder Clubusy)
Reorganisierung von Ordner Catalog, Cldbdir, Daoscat
Volltext Indizierung DDM, Dbdirman, Dircat
Aktualisierung der „Unread Lists“ Domlog, Log
Reparatur von Datenbanken (Fixup) Lndfr, MtdataMtstore
Names, Statrep
Tool ersetzt „Update All“
Mechanismus Exclude weiterer DBs vom Compact
ServerTasksAt2=Updall DBMT_FILTER=companynames.nsf,2ndnab.nsf
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 7

8. IBM Domino 9 SE News – DBMT commands
DBMT [path] [-options]
DB oder Verzeichnis
IND Datei (indirect file)
Ohne Wert = gegen alle „non system“ DBs
Mehrere gleichzeitige DBMT Prozesse sind möglich
Auf Überschneidungen der Datenbanken/Aufgaben prüfen
Nur EIN gleichzeitiger DBMT Prozess gegen alle „non system“ DBs
Jeder weiterer FULL DBMT Prozess wird sofort wieder beendet
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 8

9. IBM Domino 9 SE News – DBMT commands
DBMT [path] [-options]
➮-compactThreads 5
➮ „copy style“ compact
➮ Wert kann zwischen 0 und 100, Vorgabe = 1
➮-compactNdays 30
➮ Nur ausführen wenn compact mehr als X Tage her ist
➮-updallThreads 5
➮ Reorganisiert Ansichtsindizes
➮ Wert kann zwischen 0 und 100, Vorgabe = 1
➮-ftiThreads 5
➮ Neuaufbau der Volltextindizes
➮ Wert kann zwischen 1 und 100, Vorgabe = 1
➮-ftiNdays 30
➮ Neuaufbau der Volltextindizes älter X Tage
➮ Vorgabe = Rebuild nur bei Defekt
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
Seite 9
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion

10. IBM Domino 9 SE News – DBMT commands
DBMT [path] [-options]  Zeitparameter
➮ -range 09:00PM 07:00AM
➮ Start- und max. Endzeit für die Aufgabe
➮ Wert muss in „englischem“ Zeitformat angegeben werden
➮ DBMT ist außerhalb der Zeit inaktiv
➮ -timeLimit 120
➮ Wert in Minuten bis die gesamte Compact Operation abbricht (nicht für Updall)
➮ -stoptime 05:00AM
➮ Max. Endzeit für die Aufgabe
➮ Wert muss in „englischem“ Zeitformat angegeben werden
➮ DBMT wird danach beendet (Start via Programmdokument oder manuell)
➮ -noCompactLimit
➮ Compact läuft trotz Endzeit bis zum Abschluss der Operation
➮ Keine weitere Compact Operation kann gestartet werden
➮ -force 0
➮ Werte entsprechen den Wochentagen (1 = Sonntag, 2 = Montag, ...., 0 = täglich)
➮ Datenbank wird „offline“ für FIXUP Operationen genommen
➮ Fixup läuft NUR wenn Compact Operation mehr als 5 mal auf eine DB fehlerhaft war
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, 10
Seite or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion

11. IBM Domino 9 SE News – DBMT compact
Dbmt_compact_filter.ind wird erstellt, wenn ...
DBs mit ODS20 oder älter
DBs die innerhalb der „-range“ Zeit nicht komprimiert werden konnten
(Option –noCompactLimit darf nicht gesetzt sein)
DBs die vom Administration zusätzlich komprimiert werden sollen (z.B. „high
available“ Anwendungen)
Neue Ansicht im Admin Client „Last Compact“
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 11

12. IBM Domino 9 SE News – DBMT vs Updall
Updall Aufgaben (ServerTasksAt2)
Löschung von „deletion stubs“
Ablauf von „soft deleted entries“
Aktualisierung der „Unread Lists“
„Load Updall –nodbmt“  „Update All“ ohne obige Aufgaben
DBMT ist beinhaltet die obigen Funktionen und ist schneller
DBMT garantiert zusätzlich bereits aufgebaute Mailansichten für
schnelleren Client Zugriff
DBMT verwaltete Mail Ansichten (Mail7.ntf oder höher)
$Inbox, $Drafts, $All, $RepeatLookup, $ToDo, $Calender, $Users, $Alarms, Haiku_TOC,
iNotes, iNotes_Contacts
Aufnahme eigener Ansichten/Datenbanken
DBMT_StdNotesLog=SecurityEvents, ReplicationEvents, MailRoutingEvents
DBMT_StdR9Mail=($Sent), By Category
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, 12
Seite or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion

13. IBM Domino 9 SE News – DBMT Beispiele
dbmt -compactThreads 8 -updallThreads 8 -range 2:00AM 7:00AM -
compactNdays 5 -force 1
8 gleichzeitige Compact & Ansichtsaufbau Operationen
Start um 2 Uhr und Ende um 7 Uhr
Compact auf alle “non system” DBs mit mehr als 5 Tagen “Zeitfenster”
Fixup (Sonntags) von DBs die mehr als 5 mal nicht komprimiert werden konnten (Defekt)
DBMT Task wird beim Serverstart geladen und bleibt ausserhalb des Zeitfensters inaktiv
Überschneidungen mit anderen Aufgaben beachten (siehe FULL COMPACT)
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, 13
Seite or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion

14. IBM Domino 9 SE News – DBMT Beispiele
dbmt d:domdata –ftiThreads 2 –ftiNdays 30 06:00AM –compactThreads 0 –
updallThreads 0
2 gleichzeitiger Neuaufbau aller Volltextindizes – älter als 30 Tage - von allen Datenbanken
Compact & Ansichtsaufbau Operationen sind deaktiviert !!!
Start um 18 Uhr (via Programm Dok) & maximales Ende um 6 Uhr
DBMT Task wird um 18 Uhr und gestartet und spätestent um 6 Uhr wieder beendet
Überschneidungen – in dieser Zeit - mit anderen Aufgaben beachten
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, 14
Seite or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion

15. IBM Domino 9 SE News – DBMT Beispiele
Aktualisierung aller Mailansichten nach jedem Server Neustart
Dbmt mail –compactThreads 0 –updallThreads 8
8 gleichzeitige Aktualisierungen aller Ansichten und vordefinierten Mailansichten
DBMT Task wird beim Serverstart geladen und wird nach der Aufgabe beendet
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, 15
Seite or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion

16. IBM Domino 9 SE News – Failover
MailFileDisableCompactAbort=1 (Server.Notes.INI)
Verhindert Abbruch des DBMT Compact während einer Mailzustellung
Mail bleibt in der Mail.box bis die Maildatenbank wieder verfügbar ist (retry)
MailFileEnableDeliveryFailover=1 (Server.Notes.INI)
Domino 9 „Cluster mate“ MailDB Failover während
Copy-style compact
Fixup („performing consistency check ...“
Maildb fehlt („file does not exist“)
DBMT prüft „replica index“ in der cldbdir.nsf zur Verhinderung für gleichzeitige
Compact Operationen der MailDB im Cluster
Failover von Out-of-Office & Mail Regeln
Clusterpartner müssen „monitoren“ können (Server ACL)
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 16

17. IBM Domino 9 SE News – Programm dok.
Gruppenfunktion in Programmdokumenten (V9 Server only)
Nur Servergruppen (Gruppentyp „Server only“)
Mustererkennung auf Zeichenbasis (Fragezeichen ersetzt Zeichen)
Sales??/Renovations
Beinhaltet Sales01/Org, Sales02/Org, usw.
Erweiterung der Mustererkennung mit Sternzeichen
Pre 9: */Renovations
V9+: Sales*/Renovations
Beinhaltet SalesDE1/Org, SalesUK2/Org, usw..
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 17

18. IBM Domino 9 SE News – Compact Repl.
Datenbank - ID Table
Beinhaltet „pointer“ zu jeder Dokument ID und Löschungen
„Every database has a UNID table that maps the note UNID to its note ID, which in turn can be
mapped through the database RRV table to the note’ s position within the database file“
Komprimiert, jedoch Größenlimitiert
„copy style“ Compact reduziert nur das Fragmentierungsproblem
Besser = Erstellung einer neuen Replik (Neuaufbau der IDTable)
„Running copy-style compact on a regular basis will mitigate the effect of ID table
fragmentation but ultimately it will be necessary to create a new replica“
„The fixup and compact tasks build an ID table that contains pointers to an ID for every
document in a database, including deletion stubs. The ID pointers are stored in a compressed
format which is most efficient in a newly-built database.
As documents are added and deleted over time, the ID table can become very fragmented and
eventually will overflow“
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 18

19. IBM Domino 9 SE News – Compact Repl.
ID Table Fehler wg. fehlerhafter Fragmentierung
„Unable to extend an ID table - insufficient memory“ (SPR JPAI6W8KUJ)
Tritt auf wenn eine DB
Meist mehr als 100.000 Dokumente (und/oder Löschungen) beinhaltet
Viele tausend Transaktionen (Dokumente erstellen und löschen) pro Tag
statt finden
Problem
Zugriff auf die Datenbank(en) nicht mehr möglich
Compact, Fixup & Updall bringen keine „Erlösung“
Erstellung der Datenbank als neue Replik (sofern vorhanden)
Neue Funktion in Domino 9 „Compact Replication“
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 19

20. IBM Domino 9 SE News – Compact Repl.
Erstellt automatisch eine „lokale“ Replik der DB am Server
während die Ursprungsdatenbank erreichbar bleibt
Ausnahme = kurze „rename phase“ (Umbennung der DB)
Ist die Ursprungs DB nicht frei gegeben („db is in use ...“) kann optional eine „rename
time period“ definiert und/oder ein Server Neustart initiert werden
Synchronisiert Ansichten und Lesemarkierungen der Usprungs-
und Ziel DB während der Compact Operation
Verhindert/Reduziert somit die ID Table Fragmentierung und sollte
bei „grossen“ Datenbanken angewendet werden
Ersetzt keinen „in-place“ oder „copy style“ Compact
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 20

21. IBM Domino 9 SE News – Compact Repl.
① IDTable Analyse (prüft ob IDTable komprimiert werden muss)
② Erstellung und Synchronisation der TEMP.REPL mit der ORG.NSF
a. Note copy phase
b. View synchronization
c. Unread synchronization
③ Nehme die ORIG.NSF „Offline“ und tausche gegen die TEMP.REPL
a. „Drop all users“ von der ORIG.NSF
b. Nehme die ORIG.NSF „Offline“
c. Rename ORIG.NSF > OLD.ORIG
d. Rename TEMP.REPL > NEW.NSF
④ Synchronisation der NEW.NSF mit der OLD.ORIG
a. Note copy phase von neuen Dokumenten in die NEW.NSF
b. View synchronization – aktualisiert Ansichten in NEW.NSF (basierend auf der OLD.ORIG)
c. Unread synchronization – aktualisiert Lesemarkierungen in NEW.NSF (basierend auf der OLD.ORIG)
⑤ Nehme die NEW.NSF „Online“
 Wenn Phase 3 abbricht (z.B. rename time out) kann ein Server Restart initiert
werden und Phase 4 wird nach dem Start fortgesetzt
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, 21
Seite or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion

22. IBM Domino 9 SE News – Compact Repl.
Compact [path] [-options]
Replica
• „compact replica“ Funktion wird ausgeführt
IDS_FULL 30 (optional)
• Wert in Prozent zwischen 0 und 100, Vorgabe = 0 (immer)
• Nur ausführen wenn IDTable ist 30 Prozent (oder mehr) voll ist
REN_WAIT 3 (optional)
• Wert in Minuten zwischen 0 und 100
• Vorgabe = keine Wartezeit, NEW.REPL bleibt bis Serverstart liegen
• Wenn Umbenennung abbricht, warte 3 Minuten
RESTART (optional)
• Vorgabe = keine Restart, NEW.REPL bleibt bis Serverstart liegen
• Wenn Umbenennung abbricht (auch nach REN_WAIT Timeout), starte den Server neu
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 22

23. IBM Domino 9 SE News – Compact Repl.
Compact System.ind –replica –restart
System.ind mit Systemdatenbanken (log, names, admin4, etc.)
Wöchentliches Programmdokument (z.B. So – 20 Uhr)
Ermöglicht dem Administrator eine automatische „off user“ Wartung der
wichtigsten Domino Systemdatenbanken
„old way – offline Prozess (z.B. Windows)
Net stop „Lotus Domino Server“
Call <domprog>ncompact.exe –c –i system.ind
Net start „Lotus Domino Server“
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 23

24. IBM Domino 9 SE News
Protected Groups
Verhindert die Löschung von „definierten“ kritischen Gruppen im Domino
Adressbuch durch den Notes oder Webadmin Client
Programmatische API Löschungen (C/C++/Java) werden nicht geschützt
Benötigt Domino 9 Directory Schablone
Via Directory Profile
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 24

25. IBM Domino 9 SE News
Fault Analyzer Verbesserungen
Fehlermeldungen erscheinen in einer neuen Ansicht (und werden auch
analysiert) um auftretende Probleme besser erkennen zu können.
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 25

26. IBM Domino 9 SE News – QoS
QoS = Quality of Service
QoS prüft die generellen Operationen eines Domino-Servers um
ihn am laufen zu halten und auf Fehler reagieren zu können
Wenn QoS erkennt, dass ein Server nicht antwortet oder hängt,
kann QoS so konfiguriert werden, dass
Mail an Admin mit der Problembeschreibung
Automatischer Server-Kill („smart kill“) und Neustart
QoS Protokolle können für die Fehleranalyse verwendet werden
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 26

27. IBM Domino 9 SE News – QoS vs. NSD
Fault Recovery (aka. NSD)
NSD ist Teil (Dienst) des Domino Server
Fault Reports werden NUR bei erfolgreichem Server Neustart geschickt
Quality of Service (QoS)
QoS ist Teil des Java Controllers und nicht des Domino Servers
Fault Reports können an externe SMTP Server geschickt werden
QoS und Fault Recovery sollten (Beta Phase) nicht
gleichzeitig betrieben werden
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 27

28. IBM Domino 9 SE News – QoS
QoS Controller ist ein neuer Thread und Teil der Domino „Java
Console“ (n)server –jc
Einrichtung QoS
QoS Probe = Domino Addin Task „load qosprobe“
QoS Probe Parameter (Server.Notes.ini)
QOS_ENABLE=1  Vorgabe= 0 oder inaktiv
QOS_PROBE_INTERVAL=1  Vorgabe= 1 Minute
QoS Controller Paramter (dcontroller.ini)
QOS_ENABLE=1  Vorgabe= 0 oder inaktiv
QOS_PROBE_TIMEOUT=5  Vorgabe= 5 Minuten
sollte größer als QOS_PROBE_INTERVALL sein (ständiger Server Neustart) !!!
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 28

29. IBM Domino 9 SE News – QoS Parameter
Weitere QoS Controller Paramter (dcontroller.ini)
Limit, bei deren Erreichen QoS deaktiviert wird
QOS_RESTART_LIMIT_ENABLE=1  Vorgabe= 0
QOS_RESTART_LIMIT_MAXIMUM=3  Vorgabe= 3 Intervall
QOS_RESTART_LIMIT_PERIOD=30  Vorgabe= 30 Minuten
Limit für „smart kill“ Zeitfenster
QOS_SHUTDOWN_TIMETOUT=5  Vorgabe= 5 Minuten
QOS_RESTART_TIMEOUT=5  Vorgabe= 5 Minuten
QOS_APPS_TIMEOUT=10  Vorgabe= 10 Minuten
„long running operation“ Timeout wie Compact, Fixup, Backup, DBPurge, DBCopy, etc.
QOS_NOKILL=1  Vorgabe= 0 (disable „smart kill“)
Einstellungen für QoS Report Versand (ohne SMTP Authentifizierung bzw. Passwort)
QOS_MAIL_TO=admin@novak.local  QOS Report Empfänger
QOS_MAIL_SMTP_SERVER=srv1.novak.local  QOS Report SMTP Server
QOS_MAIL_ATTACH_LOGS=1  Vorgabe= 0
Deaktivierung
QOS_DISABLE_PROBING=1
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, 29legal obligation to deliver any material, code or functionality.
Seite or
The development, release, and timing of any features or functionality described for our products remains at our sole discretion

30. IBM Domino 9 SE News – Performance
NIFReadEntries Optimierung für klassiche Operationen von Xpages
Eliminierung von nicht notwendigen „calls“ im back-end
Konsolidierung von NIFFindByKey und NIFReadEntries (NIFFindByKeyExtended2)
Eliminierung von NIFOpenCollection und NSFDbOpen calls
Eliminierung von $DbLookup und @DbColumn code Transaktionen (waren zu
zeitintensiv)
Optimierung für gleichzeitige Aufrufe
NIFReadEntries für mehrere Leser
NSFGetNoteInfobyUNID
„Form Bucket Bitmaps“ Optimierung funktioniert nun in Ansichten
bei Maskenwechsel wechseln
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 30

31. IBM Domino 9 SE News – Performance
Large UBM Support für 64BIT
NSF_BUFFER_POOL_SIZE_MB=8192
Verbesserung der Ansichtszugriffe durch Caching der Ansichten im Arbeitsspeicher
TXN Logging „buffer“ von 50 auf 1000 erhöht
Früher = synchrones Schreiben wenn der Buffer 50 erreicht hat
Blockierung weiterer „logger“)
HEUTE = Jetzt asynchrones Schreiben
keine Blockierung, Verbesserung bei großen Datenupdates – wie Anhängen)
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 31

32. IBM Domino 9 SE News – Backend Performance
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 32

33. IBM Domino 9 SE News – SAML
SAML = Security Assertion Markup Language
… ist ein XML-Framework zum Austausch von Authentifizierungs- und
Autorisierungsinformationen
Ziel ist die Vereinfachung die Benutzerauthentifizierung
durch Reduzierung der Anzahl der verwendeten Kennwörter
SAML Web Authentifizierung ist eine Alternative zu den bereits
existierenden Single Sign-on (SSO) Techniken in Domino (LTPA,
SPNEGO)
Vorteil gegenüber einer LTPA Technik, SAML ist nicht DNS abhängig und
kann so Domänenübergreifend verwendet werden.
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 33

34. IBM Domino 9 SE News – SAML
SAML benötigt einen Identity Provider (IdP) der die Anmeldung
entgegen nimmt und einen Service Provider (Domino 9) der die
Anwendung zur Verfügung stellt
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 34

35. IBM Domino 9 SE News – SAML „quick setup“
① Identity Provider (IdP) muss vorhanden sein
• ADFS (Active Directory Federation Services) – SAML 2.0
• TFIM (Tivoli Federated Identity Manager) – SAML 1.1/2.0
② ADFS - SSL Verbindung einrichten
③ FederationMetadata.XML Export (ADFS)
④ IdP Catalog erstellen (Idpcat.ntf)
⑤ IdP Config Dokument (IdP Catalog)
① FederationMetadata.XML Import
in das IdP Config Dokument
② HTTP Sessions Authentication auf
SAML stellen (Session Cookie)
 Server.Notes.INI  DEBUG_SAML=
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, 35
Seite or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion

36. IBM Domino 9 SE News – SAML
SAML Authentifizierung in Verbindung mit der Notes ID Vault
Funktion ermöglicht „federated login“
Web Federated Login (iNotes/HTTP)
Notes Federated Login (ID Datei im Memory)
① Benutzer startet Notes und verbindet sich mit der ID Vault
② ID Vault (SAML Authentifizierung) verbindet sich mit dem IdP
(z.B. TFIM/TAM oder ADFS)
③ Die IdP Instanz fragt den Benutzer nach seinen Anmeldedaten
④ Richtige Anmeldedaten werden zur Verfügung gestellt (supplied)
⑤ IdP stellt SAML „Artifakt“ (XML) der ID Vault zur Verfüng
(TFIM/TAM provides SAML artifact(XML) to ID Vault)
⑥ ID Vault schickt Notes ID zum Client.
Sobald die Notes Session generiert wurde, wird die ID vom
Notes Client gelöscht (wurde nur im Speicher gehalten)
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 36

37. IBM Domino 9 SE News – SAML
„federated Login“ Vorrausetzungen
Notes Benutzer muss Teil des Domino directory sein
Kein Support für directory assistance (da)
Notes Benutzer ID müssen in der ID Vault gespeichert sein
„federated Login“ Einschränkungen
Keine Funktion mit
Smartcard geschützte IDs
Roaming ID (im pernames)
Notes on USB
Notes.ID mit Mehrfachkennwörtern
aktiviertem „Password checking“
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 37

38. IBM Domino 9 SE News – SAML
„Notes Federated Login“ Setup
ID Vault Konfiguration des IdP
SECURE_USE_INMEM_IDFILES=1
Security Policy für SAML &
„Notes federtated login“ aktivieren
„Password checking“ deaktivieren
SAML-IdP Account Dokument
für Sidebar plugin SSO (z.B. Sametime)
embedded Browser SSO
Via Policy (Account) verteilbar
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 38

39. IBM Domino 9 SE News – OAuth
OAuth Credential Store (credstore.nsf)
Es ermöglicht dem User (Endnutzer) einer Webanwendung (Service-
Provider) private Ressourcen (Protected Resources) wie Fotos, Videos,
Kontaktliste und Kontoauszug mit allen anderen Webanwendungen
(Konsument) auszutauschen, ohne Nutzername und Passwort der Service-
Provider-Webanwendung den Konsumenten-Applikationen preiszugeben.
eine Art Vertrauensstellung zwischen Konsument & Service Provider
Offener Standard für Authorization (nicht Authentifizierung)
Tokenbasiert (definiert Seiten, Ressourcen & Dauer)
Domino 9 SE dient als „credential store“ für die OAuth Daten und ist die
Basis für die „embedded experiences„ Integration in Notes, iNotes & XPages
IBM Connections 4.5.x, Twitter, Flickr
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 39

40. IBM Domino 9 SE News – OAuth „quick setup“
Installation des Domino 9 “OpenSocial component”
Domino 9 SE Server mit „Shindig“ enabled (Framework für web-based Anwendungen)
Social Server Installation (<D9Serverinstall>SEsetup.exe)
<domprog>osgi
<domprog>osgi-dots
<domprog>SE
<domdata>FormSE.nsf
Konfiguration der Oauth Komponenten
Credstore.nsf, Widget Catalog, $ENBLE_EE=1, etc....
Session “IS05 Social Standards in Connections, Domino, Notes und iNotes”
Dienstag 14:45 (Raum 2) – Christoph Stöttner
IBM Connect 2013 “Walk through” (Slideshere) Make your business Open and
Social using IBM Notes Social Edition 9.0
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, 40
Seite or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion

41. IBM Domino 9 SE News – TLS
Secure Sockets Layer (SSL) & Transport Layer Security (TLS)
TLS = Weiterentwicklung des SSL-Protokolls mit neue Namen
TLS 1.0 = SSL 3.1
Unterschiede zwischen SSL & TLS (Quelle repges.net)
Der native Domino HTTP Webserver kann kein TLS
SSL (SSLv2, SSLv3) für alle Internetprotokolle (LDAP, HTTP, SMTP, etc.)
TLS für SIP (Sametime SIP Connector) & SMTP (STARTTLS)
SSLv2 führt in den meisten & aktuellen Browsern zu Warnungen oder
Funktionsstörungen (da deaktiviert)
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, 41
Seite or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion

42. IBM Domino 9 SE News – TLS
TLS Support für Domino via IBM HTTP Server (IHS)
Domino 9 „add-on“ IHS Installation (<domprog>ihs)
Windows only
IHS agiert als eine Art reverse-proxy für den Domino HTTP Server
Konfiguration
<domprog>ihsconfdomino.conf
Notes.ini: HTTPIHSEnabled=1
SSL Schlüsseldatenbank für IHS (ikeyman) konfigurieren
LoopBack Port 9288 von Domino HTTP (IHS mod_domino reverse proxy modul)
Debug HTTPIHSDebugStartup=1
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 42

43. IBM Domino 9 SE News – Migration utility
Erneuerung des DUS / NUS Tool für die Migration von Exchange zu Domino
Wurden seit ND 6.5 nicht mehr weiter entwickelt (Exchange 2003 only) - BinaryTree
Probleme mit der Stabilität & reine Benutzerseitige Migration (NUS)
Neues Tool für Server- & Clientseitige Migration
Server  server based mail migration
Client  local mail migration (PST files)
Funktionen
Migration von E-Mail, Kalender & Kontakte
Active Directory Migration: Automatische Erstellung von Benutzer/Gruppen in Domino directory
Verwaltung der Migration via neue APIs
Wird erst mit mit ND 9 Gold verfügbar sein (seperate Installation/Tool)
Benötigt Notes & Domino 9
Supports für Exchange/Outlook 2007 & Outlook Express, Active Directory 2003 & 2008
Bei Bedarf kein das Tool von IBM „jetzt“ angefordert werden (Scott Vrusho@IBM)
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, 43
Seite or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion

44. IBM Domino 9 SE News
SHA-2 Support für S/MIME (Secure Hash Algorithm)
SHA-1 ist nicht mehr sicher, wurde aber noch bis Ende 2012 geduldet
Regierungen und Banken setzen die Verwendung der SHA-2
Verschlüsselung voraus
@Password3 HTTP Hashing mit SHA-2 (D9 only), SHA-1 (D8.x)
Traveler V9
Device Support
Windows Phone 7.5 & 8, RT/Pro Tablets
Blackberry Enterprise Service (BES) 10
Neue Serverplatform
IBM iServer
Redhat & Suse Linux 64-Bit)
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 44

45. IBM Notes 9 SE News – Vorgabewerte
Mail-Benachrichtigung über Slide-In (vorher Popup)
Nach Beantwortung oder Weiterleitung einer Mail wird das Tab mit der
original Nachricht automatisch geschlossen
Neueste E-Mails werden oben angezeigt („most recent on top“)
Einladungen werden automatisch verarbeitet
sofern keine Entscheidung darüber notwendig ist – z.B. neuer Termin
„ghosted“ Kalendereinträge werden nun angezeigt
Wenn ein Kalenderdokument aus einer Mailansicht gelöscht wird, wird
nicht mehr nachgefragt
Die Synchronisation der Notes Kontakte mit der Maildatenbank ist nun
automatisch aktiviert („synchronize contacts“ Option)
Aktivierung der Replikation ist jedoch weiterhin notwendig (Desktop Settings)
Zeige „Job Title“ im Type-ahead an
IBM Social Theme ist automatisch aktiv (Managed Settings)
„Show Toolbar when editing“ (Managed Settings)
Seite 45

46. IBM Notes 9 SE News – DOTS
OSGI = Open Services Gateway initiative
Xpages ≈ Java
IBM Domino
Java Application Server, JSF Container, OSGI Platform
Domino 8.5.3+
DOTS = Domino OSGi Tasklet Service
„next generation Agents“ für Domino (>Tell dots run xyz)
DOTS tasklet vs. Java Agent
DOTS tasklets sind schneller und stabiler
BP207 – Meet the Java Application Server (IBM Domino 9)
Seite 46

47. Agenda
Neuerungen in IBM Lotus Domino Server &
Administration 9 Social Edition
Wie sieht die Zukunft aus ?
Seite 47

48. IBM Messaging Roadmap
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 48

49. IBM Notes/Domino Next – Future
Traveler 9 Upgrade Packs (Q2 / Q4)
Mobile Device Management API„s
Integration mit IBM Connections Mobile & Sametime Mobile
Versand/Empfang von verschlüsselten Mails (X509)
Synchronisation des Papierkorbs
„Smart Forward/Reply“
Certificate based Authentication
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 49

50. IBM Notes/Domino Next – Future
Notes Next Startup Auditor Tool
Überwachung von „key events“ und Umgebungsvariablen während des
Notes Client Starts und des Öffnen von Mails/Kalender und sammelt die
Daten zentral am Server
Startzeiten
Zeiten zu öffnen der Mail & Kalender
uvm (OS Infos, System Statistiken ....)
Analyse von Notes 8.x +
Zentrale Datenbank (Auditor.ntf)
Auditor add-on & plugin für Notes Client
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 50

51. IBM Notes/Domino Next – Future
Notes Next Install Validator
Überprüfung ob alle notwendigen Notes Client Daten (dll, etc.) vorhanden
sind und kann diese auch mit anderen Notes Installationen vergleichen
Notes Next Installer
Vereinfachter & schnellerer Installer (Windows MSI)
Notes-only Kit + Add-on für Designer/Admin
Multi-Cab Dateien für Apps – XPD, Sametime, etc
Prüffunktionen (offene Dateien, etc.) vor Installation
MUMA Integration (out of the box)
Rollback Funktion bei Fehlern
„post“ Validation zur evtl. Fehlersuche
Aufruf via: niv [-p notes_prog] [-d notes_data] [options]
Domino Next Administrator - Webonly
The information on the new product is intended to outline our general product direction and it should not be relied on in making a purchasing decision.
The information on the new product is for informational purposes only and may not be incorporated into any contract.
The information on the new product is not a commitment, promise, or legal obligation to deliver any material, code or functionality.
The development, release, and timing of any features or functionality described for our products remains at our sole discretion
Seite 51

52. Informationsmaterial
Blogs
Alan Lepofsky
Daniel Nashed
Paul Mooney
Bleed Yellow
http://infolib.lotus.com/resources/experience/notes/
http://infolib.lotus.com/resources/experience/notes/resources/notes9_whatsn
ew_ref.pdf
Free Admin Toolkit(s)
Zusammenstellung von nützlichen (teilweise unsupported) Tools
Replcation utility, Surely template, Mail ACL Changer, Panagenda Group Explorer, uvm.....
http://idonot.es/freeadmintoolkit
Seite 52

53. Beurteilung bitte nicht vergessen!
[IS-07]
News in Domino Server & Administration 9 SE
Seite 53