# Troubleshooting

If you encounter any of the following issues or errors, SailPoint recommends that you follow the guidance provided below to resolve the error before contacting SailPoint Support.

For issues or errors that are not addressed in this connector guide, refer to the following resources for troubleshooting information:

- [SailPoint Identity Services Documentation](<https://documentation.sailpoint.com/saas/help/index.html>)
- [SailPoint Support Knowledge Base](<https://support.sailpoint.com/csm?id=kb_view2&amp;kb_id=05ff44289f011200550bf7b6077fcfa3>)
- [SailPoint Developer Community](<https://developer.sailpoint.com/>)

## Could Not Get IOR from Domino Server

**Resolution**: Perform the following:

1. Ensure the Domino Server is accessible from a computer that is using the Fully Qualified Internet Host Name. The ping should be successful using the Fully Qualified Internet Host Name of the Domino Server.
2. Ensure DIIOP is present in the ServerTasks of the `notes.ini` file.
3. If HTTP is not added to the **notes.ini** file as part of the `ServerTasks` parameter, the **Host Name** field on the Connection Settings page should include the port number of the DIIOP Server in the following format:

   ```text
   fullyQualifiedInternetHostName:DIIOPPortNumber
   ```

   For example, `LOTUS-AME.SAILPOINT.COM:63148`
4. Ensure the `NCSO.jar` file is present in the CLASSPATH environment variable.

## Could Not Open the ID File

**Resolution**: Perform the following:

1. All file paths in the connector relate to the respective Domino Server. Verify that the ID file path you have provided is accessible from the Domino Server computer, as the ID files are read from and created on the file path.

## Add Account Gives Object Does Not Exist Exception

**Resolution**: Perform the following:

If the name of the user you created is *Derek Stevens* and the name of the certifier under which the user was created is */USA* then the following attributes need to be populated:

- `FirstName`: Derek
- `LastName`: Stevens
- `FullName`: Derek Stevens/USA

"Add account" searches for a user based on the `FullName` of the user, therefore it is important that it is provided correctly.

## IQService - Unable to Load DLL 'SPLotusNotesWrapper.dll': The Specified Module Could Not Be Found or the IQService Stops Responding

**Resolution**: Perform the following:

1. Confirm that the PATH system variable contains the Notes data folder. For example,

   ```text
   C:\Program Files\IBM\Notes must be present in the PATH system variable.
   ```
2. Confirm that you have restarted the computer after modifying the PATH system variable.
3. Close the Notes Administrator/Client and restart IQService.
4. Copy the IQService installation files in the Notes folder of IBM Lotus Notes Client. For example,

   ```text
   C:\Program Files\IBM\Notes
   ```

## Attempt to Load a Program with an Incorrect Format

An attempt to load a program with an incorrect format, displays the following error message:

```text
Unable to create iterator: sailpoint.connector.ConnectorException: Errors returned from IQService.
```

**Resolution**: Ensure that all the [Prerequisites](<https://documentation.sailpoint.com/connectors/hcl_domino/va/help/index.html#prerequisites>) are met.

## ID File Could Not Be Opened

When creating an account, the following error message appears:

```text
sailpoint.connector.ConnectorException: Notes error: Could not open the ID file
```

**Resolution**: Ensure the `cert.id` file is present on the server computer.

## During Delta Aggregation an Exception Error Is Displayed

While performing delta aggregation, the following error message is displayed:

```text
Exception during aggregation. Reason: sailpoint.connector.ConnectorException: Errors returned from IQService. Object reference not set to an instance of an object.
```

**Resolution**:

1. When performing delta aggregation or resetting the password, ensure that the Domino Client is closed and not open. When it's open during delta aggregation, the exception error message displays.
2. Close the Domino Client and perform the same operation to put the transaction in a pending or idle state.
3. Restart the Domino Server and terminate / cancel the request.

## Test Connection Fails with Invalid User Name/Password

Test connection fails with invalid user name/password.

**Resolution**: Ensure that the administrator password is an HTTP password and not an ID file password.

## Value of Date/Time (Lotus Domino Datatype) Attribute Is Not Aggregated

The `fdHiringDate` attribute is not aggregated when account aggregation is performed after adding the `fdHiringDate` attribute in account schema with the type as **string** or **long**.

**Resolution**: In the account schema, modify/ create the attribute type as **string** and properties as multi-valued for all the attributes of the **date/time** type from the HCL Domino managed system.

## Account Aggregation Takes a Long Time to Complete

Performing an Account (Full or Partition) aggregation process may take an unusually long time to complete because the SailPoint HCL Domino connector searches for entitlements with all possible user names by default.

**Resolution**: Set the `fetchGroupsForAllUsernames` attribute to `false` in the connector. Now, during account aggregation, SailPoint will only fetch groups with the `FullName` (one possible user name) instead of all user names. This reduces API calls which reduces the duration of aggregation. Default value: `true`.

The `fetchGroupsForAllUsernames` attribute can also be updated on the source using the PATCH method:

```json
[{
"op": "add",
"path": "/connectorAttributes/fetchGroupsForAllUsernames",
"value": "false"
}]
```

## Restricted Operation on a Server

**Resolution**: In HCL Domino notes under **Security Tab \> Programmability Restrictions**, there is an option to configure '**Sign or run unrestricted methods and operations**'. You must enter the name of the user who is allowed to run unrestricted operations. This user should be the same user who is configured in your HCL domino application/source as an Administrator user.

For example, `Administator /<Organisation_Name\>`

## Exception Occurred in Function NSFDbOpen - The Server Is Not Responding. The Server May Be Down or You May Be Experiencing Network or VPN Problems. Contact Your System Administrator If This Problem Persists.

**Resolution**: *Only applicable for Multi-User installation of HCL Notes*

Copy the Notes.ini file from `AppData\Local\HCL\Notes\Data` location. For example, `C:\Users\Administrator\AppData\Local\HCL\Notes\Data` to your Notes deployment path where your IQService binaries are placed. For example, `C:\Program Files (x86)\HCL\Notes`)