Troubleshooting

Resolution: Perform the following:

1. Ensure the Domino Server is accessible from a computer that is using the Fully Qualified Internet Host Name. The ping should be successful using the Fully Qualified Internet Host Name of the Domino Server.

2. Ensure DIIOP is present in the ServerTasks of the notes.ini file.

3. If HTTP is not added to the notes.ini file as part of the ServerTasks parameter, the HostName parameter should include the port number of the DIIOP Server in the following format:

   fullyQualifiedInternetHostName:DIIOPPortNumber

   For example, LOTUS-AME.SAILPOINT.COM:63148

4. Ensure the NCSO.jar file is present in the CLASSPATH environment variable.

Resolution: Perform the following:

1. All file paths in the connector relate to the respective Domino Server. Verify that the ID file path you have provided is accessible from the Domino Server computer, as the ID files are read from and created on the file path.

Resolution: Perform the following:

If the name of the user you created is Derek Stevens and the name of the certifier under which the user was created is /USA then the following attributes need to be populated:

• FirstName: Derek

• LastName: Stevens

• FullName: Derek Stevens/USA

"Add account" searches for a user based on the FullName of the user, therefore it is important that it is provided correctly.

Resolution: Perform the following:

1. Confirm that the PATH system variable contains the Notes data folder. For example,

   C:\Program Files\IBM\Notes must be present in the PATH system variable.

2. Confirm that you have restarted the computer after modifying the PATH system variable.

3. Close the Notes Administrator/Client and restart IQService.

4. Copy the IQService installation files in the Notes folder of IBM Lotus Notes Client. For example,

   C:\Program Files\IBM\Notes

An attempt to load a program with an incorrect format, displays the following error message:

Unable to create iterator: sailpoint.connector.ConnectorException: Errors returned from IQService.

Resolution: Ensure that all the Prerequisites are met.

When creating an account, the following error message appears:

sailpoint.connector.ConnectorException: Notes error: Could not open the ID file

Resolution: Ensure the cert.id file is present on the server computer.

While performing delta aggregation, the following error message is displayed:

Exception during aggregation. Reason: sailpoint.connector.ConnectorException: Errors returned from IQService. Object reference not set to an instance of an object.

Resolution:

1. When performing delta aggregation or resetting the password, ensure that the Domino Client is closed and not open. When it's open during delta aggregation, the exception error message displays.

2. Close the Domino Client and perform the same operation to put the transaction in a pending or idle state.

3. Restart the Domino Server and terminate / cancel the request.

Test connection fails with invalid user name/password.

Resolution: Ensure that the administrator password is an HTTP password and not an ID file password.

The fdHiringDate attribute is not aggregated when account aggregation is performed after adding the fdHiringDate attribute in account schema with the type as string or long.

Resolution: In the account schema, modify/ create the attribute type as string and properties as multi-valued for all the attributes of the date/time type from the HCL Domino managed system.

Performing an Account (Full or Partition) aggregation process may take an unusually long time to complete because the SailPoint HCL Domino connector searches for entitlements with all possible user names by default.

Resolution: Set the fetchGroupsForAllUsernames attribute to false in the connector. Now, during account aggregation, SailPoint will only fetch groups with the FullName (one possible user name) instead of all user names. This reduces API calls which reduces the duration of aggregation. Default value: true.

Add the following to the debug file:

<entry key="fetchGroupsForAllUsernames" value="false"/>

Resolution: In HCL Domino notes under Security Tab > Programmability Restrictions, there is an option to configure 'Sign or run unrestricted methods and operations'. You must enter the name of the user who is allowed to run unrestricted operations. This user should be the same user who is configured in your HCL domino application/source as an Administrator user.

For example, Administator /<Organisation_Name>

Resolution: Only applicable for Multi-User installation of HCL Notes

Copy the Notes.ini file from..... AppData\Local\HCL\Notes\Data location. For example, C:\Users\Administrator\AppData\Local\HCL\Notes\Data to your Notes deployment path where your IQService binaries are placed. For example, 'C:\Program Files (x86)\HCL\Notes' )