Troubleshooting

If you encounter any of the following issues or errors, SailPoint recommends that you follow the guidance provided below to resolve the error before contacting SailPoint Support.

For issues or errors that are not addressed in this connector guide, refer to the following resources for troubleshooting information:

Could Not Get IOR from Domino Server

Resolution: Perform the following:

Ensure the Domino Server is accessible from a computer that is using the Fully Qualified Internet Host Name. The ping should be successful using the Fully Qualified Internet Host Name of the Domino Server.
Ensure DIIOP is present in the ServerTasks of the notes.ini file.
If HTTP is not added to the notes.ini file as part of the ServerTasks parameter, the Host Name field on the Connection Settings page should include the port number of the DIIOP Server in the following format:
```
fullyQualifiedInternetHostName:DIIOPPortNumber
```
For example, LOTUS-AME.SAILPOINT.COM:63148
Ensure the NCSO.jar file is present in the CLASSPATH environment variable.

Could Not Open the ID File

Resolution: Perform the following:

All file paths in the connector relate to the respective Domino Server. Verify that the ID file path you have provided is accessible from the Domino Server computer, as the ID files are read from and created on the file path.

Add Account Gives Object Does Not Exist Exception

Resolution: Perform the following:

If the name of the user you created is Derek Stevens and the name of the certifier under which the user was created is /USA then the following attributes need to be populated:

FirstName: Derek
LastName: Stevens
FullName: Derek Stevens/USA

"Add account" searches for a user based on the FullName of the user, therefore it is important that it is provided correctly.

IQService - Unable to Load DLL 'SPLotusNotesWrapper.dll': The Specified Module Could Not Be Found or the IQService Stops Responding

Resolution: Perform the following:

Confirm that the PATH system variable contains the Notes data folder. For example,
```
C:\Program Files\IBM\Notes must be present in the PATH system variable.
```
Confirm that you have restarted the computer after modifying the PATH system variable.
Close the Notes Administrator/Client and restart IQService.
Copy the IQService installation files in the Notes folder of IBM Lotus Notes Client. For example,
```
C:\Program Files\IBM\Notes
```

Attempt to Load a Program with an Incorrect Format

An attempt to load a program with an incorrect format, displays the following error message:

Unable to create iterator: sailpoint.connector.ConnectorException: Errors returned from IQService.

Resolution: Ensure that all the Prerequisites are met.

ID File Could Not Be Opened

When creating an account, the following error message appears:

sailpoint.connector.ConnectorException: Notes error: Could not open the ID file

Resolution: Ensure the cert.id file is present on the server computer.

During Delta Aggregation an Exception Error Is Displayed

While performing delta aggregation, the following error message is displayed:

Exception during aggregation. Reason: sailpoint.connector.ConnectorException: Errors returned from IQService. Object reference not set to an instance of an object.

Resolution:

When performing delta aggregation or resetting the password, ensure that the Domino Client is closed and not open. When it's open during delta aggregation, the exception error message displays.
Close the Domino Client and perform the same operation to put the transaction in a pending or idle state.
Restart the Domino Server and terminate / cancel the request.

Test Connection Fails with Invalid User Name/Password

Test connection fails with invalid user name/password.

Resolution: Ensure that the administrator password is an HTTP password and not an ID file password.

Value of Date/Time (Lotus Domino Datatype) Attribute Is Not Aggregated

The fdHiringDate attribute is not aggregated when account aggregation is performed after adding the fdHiringDate attribute in account schema with the type as string or long.

Resolution: In the account schema, modify/ create the attribute type as string and properties as multi-valued for all the attributes of the date/time type from the HCL Domino managed system.

Account Aggregation Takes a Long Time to Complete

Performing an Account (Full or Partition) aggregation process may take an unusually long time to complete because the SailPoint HCL Domino connector searches for entitlements with all possible user names by default.

Resolution: Set the fetchGroupsForAllUsernames attribute to false in the connector. Now, during account aggregation, SailPoint will only fetch groups with the FullName (one possible user name) instead of all user names. This reduces API calls which reduces the duration of aggregation. Default value: true.

The fetchGroupsForAllUsernames attribute can also be updated on the source using the PATCH method:

[{
"op": "add",
"path": "/connectorAttributes/fetchGroupsForAllUsernames",
"value": "false"
}]

Restricted Operation on a Server

Resolution: In HCL Domino notes under Security Tab > Programmability Restrictions, there is an option to configure 'Sign or run unrestricted methods and operations'. You must enter the name of the user who is allowed to run unrestricted operations. This user should be the same user who is configured in your HCL domino application/source as an Administrator user.

For example, Administator /<Organisation_Name\>

Exception Occurred in Function NSFDbOpen - The Server Is Not Responding. The Server May Be Down or You May Be Experiencing Network or VPN Problems. Contact Your System Administrator If This Problem Persists.

Resolution: Only applicable for Multi-User installation of HCL Notes

Copy the Notes.ini file from AppData\Local\HCL\Notes\Data location. For example, C:\Users\Administrator\AppData\Local\HCL\Notes\Data to your Notes deployment path where your IQService binaries are placed. For example, C:\Program Files (x86)\HCL\Notes)

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.