Hello,
I have a public facing web server which has http bound to a different ip address than domino. All works fine except for diiop, which only seems to work if everything is bound to the same ip address. Is it possible to have diiop work in an environment where http and domino are bound to different ip addresses, and if so, how???
Many thanks in advance.
Chris.
Subject: Maybe . . .
I’ve got a problem I’m working through with support now where if I use DIIOP + SSL + Internet Site documents, DIIOP only partially loads (just the control task), generates an error about not being able to find keyring.kyr (even though i’ve specified a completely different keyring in the Internet Site document), and takes up all available CPU, locking up the Domino server.
If I change any of that formular (remove SSL, use Web Configuration docs), it works fine. I don’t, though, have a good server to test it on in a more pure environment (one Domino server on one host with one IP address), though I may tomorrow.
Subject: RE: Maybe . . .
Hello Folks,
I’m having a similar problem that I’m also working with support on.
We have Internet Site Documents enabled. One site is for SSL the other for internal http apps. DIIOP works fine with the web site configuration but I’m unable to make a connection when internet sites are enabled.
The stack trace from my java app gives an ‘invalid cookie’ error, I think. It seems as though DIIOP is not recognizing the SSO Token when internet sites are enabled but is when a web site configuration document is used.
I think these two issues might be related. Keep us posted on any updates and I will do the same.
Regards,
Jon LeDrew
Subject: RE: Maybe . . .
Small update - I had a chance last week, while upgrading my production servers to Domino 6.5.2, to test DIIOP in our production environment (i.e., a different Notes domain with a different directory). The stack traces we got from NSD indicated a problem accessing a view in the names.nsf in dev/test. Lo and behold, my production server, which uses Internet site documents and SSL works fine. I get the usual complaint about not finding keyring.kyr, but DIIOP does finish loading and listens both the regular and SSL ports.
At supports suggestion, I created a totally different server on a different box, but in the same Notes domain as my dev/test servers, and I was still able to re-create the problem. I haven’t heard back from the yet.
Subject: I heard back from them
I sent in my names.nsf, server ID and other files, and support was able to reproduce my issue, so they can dig in to it further.
Subject: Thanks, I’ll do the same…
I also have a SPR open with Lotus/IBM support.
I think our issues are more closely related than the information I’ve provided tells. I’ll update this thread if I have anything new.
Regards,
Jon
Subject: RE: Maybe . . .
If you could keep me posted with your findings Greg then that would be much appreciated.
Chris.
Subject: My issue has been resolved. Read on…
I received an email from my guy at IBM Support pointing to this thread:
In brief, my configuration consisted of one server using internet site documents to enable secure webmail to the internet and J2EE intranet applications using WAS and Single Sign-On internally.
If the internet site configuration was enabled the DIIOP service was storing the diiop_ior.txt in the html directory for the external webmail site and not the internal intranet site.
The result was an invalid cookie error. I think that our problems are related. The above thread may shed some light on your issue. Give it a read. Post any news.
Regards,
Jon
Subject: I seem to have found the hitch
at least for my situation.
I’m trying to do DIIOP with SSL using Internet Site documents. After a LOT of experimenting, I found that if you want to use that combination, and there are more than 375 documents in your Internet Sites view, DIIOP will lock up every time. I even had it to where I had 376 documents, DIIOP would start to load and not complete, even after 10 minutes of waiting. I would delete one document from the view, wait a few seconds for the indexer to update the view, and DIIOP would finish loading.
If I disable the DIIOP SSL port, it loads just fine, no matter how many documents are in the Internet Sites view.
Support is seeing about fix for this.
Subject: DIIOP Running in a multiple ip environment
Have you tried specifying the port when establishing the Session? For example:String astrIP = new StringBuffer(32).append(“127.0.0.1”).append(“:63148”).toString();
this.nsess = NotesFactory.createSession(astrIP, “some user name”, “some user password”);
hth,
dgg