Sorry to post this twice, but I’m desperate and I can’t find an answer. Why can’t I log in to my simple web app, using a local Domino server with only one person, me, in the Domino Directory? The domain has only one server, everything is hosted on one WinXP machine. I am a manager of the database, I have a unique short name and an internet password. The database has Anonymous and Default set to No Access (if I change Anonymous to Editor, I can get in).
Hi Rachhpal. Thanks for your help. Here’s what I’ve found:
I do not see any error in the log. I am looking at Miscellaneous documents in log.nsf (from the server). The last message is “HTTP Server: Started”, and then other unrelated messages (from AMgr, Admin process, open and close session).
I am running a Domino server on my local PC. There are no other machines or servers in the system. This is my home PC, with just this server on it. The URL is http://localhost/dbname/formname?OpenForm. I closed the Notes Client and Domino Designer client to make sure it wasn’t a local HTTP server, but the Domino Server’s HTTP server that was replying to the URL. (Did that make sense? It was a little wordy).
As for the Person document: there is only one Person document. My name is in the User name field (also First and Last name fields), I have a short name and an Internet password. I believe those are all the relevant fields.
If you can log in when Anonymous is set to Editor, then I would assume the issue is with your server setup, so I’d try the following (assuming this is a test server, you can easily backup stuff, etc.):
Rename or delete the server document and create a new one with pretty much default everything. Just punch in the name/hostname and let it ride. Reboot the server.
Check that there isn’t a notes.ini (or config doc notes.ini) calling for a special view for authentication which you might not have put into your names.nsf. This would cause authentication to fail.
IIS?
re-reading your previous post, let’s make sure that you are using hierarchical names. In other words, in the ACL make sure that your name is explicitly referenced by using the little icon to choose it from the N&A Book. Do not type it in. And choose it from the test server’s N&A Book, not some other domain’s address book. When you log in, just do so to a TEST form that has a single field which resolves @UserName. Nothing else. No security, no @DbLookups, no frames, no pages or html, just this single form. Otherwise, it’s too easy to end up tackling multiple issues at once.
For me, that might mean that I’d have two entries in the ACL of this database, as follows:
Raphael Savir/LSDevelopment (my regular name)
Raphael Savir/TestDomain (for this test server)
Note that the test server has cross certified with my regular LSDevelopment domain, so using my Notes client I can get in to anything I want here. But if I’m authenticating using a browser then it only looks at the names in its own N&A Book, so it wants to find Raphael Savir/TestDomain. If that name isn’t explicitly in the ACL, then it’ll fail to authenticate me.
I didn’t try deleting the server document (yet). But I will (I’m kind of nervous about that even though it’s just my home system).
I have no idea how to check for a special authentication view. There is only one notes.ini for the server (there is a notes.ini for the Notes client, too). I do not know how to find a config notes.ini, but I will look that up). Maybe this issue would self-resolve when I try step 1.
No IIS on this system. This is a WinXP Professional PC. Unless IIS is built in, it’s not here.
I double checked my name and made sure to add it using the little icon and selecting from the N&A book. Problem persists. I am using a test form which has only a Computed Text field with @UserName.
Cross certification is not an issue because I only have this one server on my PC and I’m not even connected to anything else or any other servers.
I tried using 127.0.0.1, but had the same result. Can you give me details on how to “make sure that the address is listed on the TCPIP port settings on the server document”? I can’t find specific TCPIP port settings.
Session authentication is disabled. There is no host name in the IP > HTTP tab (!!). But I don’t understand the setting description and the on the document or in help, so I’m not sure what to put there. Can you help me understand that, too?
Just for giggle and a dumb question…can you create a new db with just an about page. Set it so when you first open the db over the web it shows the about page. First open it anonymously (set anonymous with edit access). If it opens, then set anonymous access to no access and put the person in question to same editor access. Now try to open it.
If this works, then it’s not server access problem. It’s something in your first db that has some sort of restricted access to maybe form or page level?
If it still does not open. Create a new person. Set internet password. Restart your server just to be sure everything is reloaded. Add this person to the new db editor access. If you can’t access it still, then it’s some configuration on the server. What, not sure, but at least you’ll know where to look…
I was able to open the new database when Anonymous was set to Editor. But when it was set to No Access, I was forced to log in and it did not accept my password.
I created a new user in the N&A, but he (or she?) still could not log in to the database.
Just so that I understand this correctly. You’re saying you can use the same person’s credentials and you can get in through the Notes interface, but not through the web eventhough you have set the access correctly?
Few questions:
On the server doc, in security tab, what’s in “Access server” and “Not access server” in the “Server Access” section?
You sure you’re not typing the password in the wrong case?
Did you try the short name, like jdoe (assuming that’s what the short name is)? How about the full name like John Doe/Org?
How about setting the person to FULL manager access? Does that work?
Have you try rebooting the machine?
Remember whenever you play with the PAB, it’s best to restart Domino server just to be sure everything is reloaded.
How about see if just this machine doing this? Copy the entire server files to another machine and see if it still behave the same.
If it’s not machine dependent, how about rename the server partition and save it elsewhere. Reinstall the server and see what if you still have the problem. If you still do, then it’s time to call IBM support!
Just so that I understand this correctly. You’re saying you >can use the same person’s credentials and you can get in
through the Notes interface, but not through the web
even though you have set the access correctly?
Correct
On the server doc, in security tab, what’s in "Access
server" and “Not access server” in the “Server Access”
section?
All users can access this server, and blank, respectively.
You sure you’re not typing the password in the wrong case?
Positive
Did you try the short name, like jdoe (assuming that’s
what the short name is)? How about the full name like John
Doe/Org?
Tried both names.
How about setting the person to FULL manager access? Does that work?
Still no luck. I am the only user and already had manager access.
5, 6, and 7. I will try rebooting the machine now, I have restarted the server after each configuration modification (since I don’t know which ones required it and which didn’t). There are no other machines available, I am at home with my only machine.
Suggestion 8 is incomprehensible to me. I am at home on a WinXP PC, I have no idea how to “rename a server partition”, etc. I will have to skip that suggestion.
I’ll report back on rebooting the PC. Please advise if you have any more ideas.
Open the server document - go to Ports>Notes Network Ports. You should have an entry for TCPIP. The “NET address” field is multi-value, so add 127.0.0.1
I think the problem is your server cannot resolve itself, and so cannot redirect you properly after you authenticate.
In my case, I have a server called ben/Local on my laptop. In my hosts file, I have an alias of “ben” for 127.0.0.1 and I access nsfs on my server using http://ben/names.nsf
My laptop is setup on our windows domain and registers itself in the dns when I connect to our network. The server doc (on the basics tab) has the fully qualified name of mymachine.ourdomain.int, which is also on the TCPIP port. On the Internet Protocols>HTTP tab, my server host name is set to just “ben”.
My server doc is completely new. I renamed the old server document and created a new one. I entered the server name and domain name and saved it, so it has all default values.
In Ports>Notes Network Ports, I added port “TCPIP”, Net Address 127.0.0.1, and enabled it. The Notes Network defaulted to “Default Network”. Rebooted the server, but still could not authenticate.
I found hosts and added an alias of “schwarz01”, which pointed to 127.0.0.1. schwarz01 is my server name on the basics tab. I still could not authenticate.
Can you explain your last paragraph? Or give me any more configuration issues to investigate? What field (basics tab) did you say the fully qualified name of your machine and what does “also on the TCPIP port” mean?