Traveler 9 on Domino 9 with IHS problem

HCL Domino Domino Forum
1

I have upgraded my servers with success. Enabled IHS and device approval for Traveler (through policies) after upgrade. Some hours later (after policy updates) Traveler stopped responding.

In logs, I saw “Device policy key 0 does not match server policy key null” and “Action syncAS is not allowed because the user’s device must perform a Provision command first” in Traveler logs.

Reset, delete, security delete and reinstalling client didn’t work.

Finally, I have disabled IHS and it started working.

After disabling IHS, I noticed that when traveler server returns “449” HTTP code, Activesync client sends back “PROVISION” command to the server. This wasn’t the case with IHS case.

I think IHS does not permit HTTP 449 code to the client so after a policy change ActiveSync stops working.

2

Subject: Forwarded to development <>

Traveler/bw

3

Subject: Can we get some additional information

To try and understand where things are breaking down, if possible would like to get some additional information.

To enable

  1. For IHS, in the domino.conf file enable the following, un-comment the net trace

mod_net_trace will record actual data sent/received from the client

and on proxy connections, even for SSL connections. Unlike an IP

trace, interaction with the platform network APIs can be seen.

The following example configuration can be activated by uncommenting

the LoadModule directive.

#LoadModule net_trace_module modules/debug/mod_net_trace.so
#
#NetTraceFile logs/nettrace.log
#NetTrace client * dest file event senddata=65535 event recvdata=65535
#

  1. For IHS and mod_domino also in domino.conf, un-comment the following

#DominoEnableDebugOutput 1
#LogLevel debug

  1. For Domino enable Domino http thread logging,

At the console “tell http debug thread all”

Reproduce the problem and collect the following

  1. htthr*log files from the IBM_TECHNICAL_SUPPORT directory.
  2. The IHS net trace.log, above it is in the logs/nettrace.log
  3. The IHS error.log, usually will also be in the logs sub-directory

This may give more information on what is actually going on, this will show us what is going in/out of each process.

Thanks

4

Subject: RE: Traveler 9 on Domino 9 with IHS problem

Mike,

OK, I have prepared log files. How can I submit those to you?

Thanks.

5

Subject: RE: Traveler 9 on Domino 9 with IHS problem

Please open a PMR with IBM support for this issue so that log files can be exchanged and final resolution determined.

6

Subject: Believe we have found the issue

Your suspicion is correct, the http response code 449 coming from Domino is changed to an http 500 response code by IHS when going back to the client which causes things to fail. Will require a code change mod_domino.so IHS module to correct and override the IHS status line tables which do not define http response code 449, The code change will enable the 449 http response to be sent to the client… A PMR is needed to get a hotfix if desired.