Notes / Domino 

HCL Domino - Web Federated Login Issue with Keycloak v26.6.0+ ·  

By Milan Matejic | 8/7/26, 11:39 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

If you are using Keycloak as an Identity Provider (IdP) for HCL Domino and have Web Federated Login enabled, exercise caution before upgrading to Keycloak v26.6.0 or newer. Starting with v26.6.0, Keycloak possibly changed how it validates the RFC8707 resource parameter, which effectively breaks Domino Web Authentication over OIDC. Downgrading to Keycloak v26.5.7 resolves the issue while the root cause is investigated.

Lotus Evangelist: ClamAV and Domino  

By Keith Brooks | 6/30/26, 6:41 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

I am not an expert on Anti-virus things and Domino, that would be Daniel Nashed. But if HCL Domino has something new, I test it out and set it up on my server. In this case, I had heard that ClamAV would now work with Domino as of 14.5.1. Having used Clam for many years at the OS level, I wanted to play with this in Domino. My server is Windows, not Linux, ClamAV Linux instructions are pretty common, Windows, not as much. Boy was this the hardest "easy' thing to do ever.

Upgrading to Domino Nomad  

By Hogne B. Pettersen | 6/30/26, 6:39 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

So what do you do if you work in an organisation where you don't want to administer the Notes client, but still need to give people access to Notes applications? You start using Nomad! Here is how I did it.

Unhealthy "health probes"  

By Cormac McCarthy | 6/21/26, 12:01 PM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

Recently enough I was troubleshooting a web performance issue for a customer (spoiler – there were multiple bottlenecks outside of Domino). One thing I thought I’d highlight, when turning on some debug parameters, Domino began throwing “SSL handshake errors”. Many of them. As in all the time.

Building your own (Domino) containers? Don’t forget to prune Docker  

By Martijn de Jong | 5/29/26, 7:13 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

If you regularly build or pull images on a Docker host, disk usage can creep up quickly. Most people know that Docker (and Podman) keeps old images around unless you prune them. What’s less obvious is the build cache. When you build images, like the Domino container, Docker stores intermediate layers, so future builds can be faster. Even if you build with --no-cache (as the Domino build script does), Docker still writes layers to the build cache. They’re just not reused. Over time, that cache can grow significantly. In my case, it explained why my root disk was filling up: 25+ GB of build cache.

When a “Successful” Install… isn’t: A Domino on Linux Gotcha  

By Martijn de Jong | 4/27/26, 3:40 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

While preparing for my Linux Installfest session for Engage, I figured I’d better walk through the Domino installation steps myself, just to make sure everything worked as expected. That might sound routine, but here’s the catch: I almost never install Domino manually anymore. I usually rely on a script Daniel built, which saves a ton of time and effort. But for this session, the goal was to help participants understand what’s actually happening behind the scenes. So, back to basics it was, command line and all. That’s when things got interesting.

Standards are Standards until they are not  

By Stephan Wissel | 4/13/26, 8:10 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

Standards are Standards until they are not - In my junior developer days, literally last century, a senior developer enlightened me: 'An open standard is only complete once its wording allows all participants to faithfully implement it to be absolutely incompatible to each other'. Ambiguity is king. Our modern software is build on a few standard, each of them have rock solid parts (nobody questions a <h1>) and parts of, let's call them disagreements. I'll pick on JWT as an example

Shortened Validity Periods for SSL/TLS Certificates  

By Manfred Dillmann | 3/22/26, 7:58 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

I would like to inform you about an important change that affects all web server operators and possibly your HCL Domino Servers: The maximum validity periods of SSL/TLS certificates will be drastically shortened in stages.

Domino IQ and external AI LLM – lesson learned   

By Rainer Brandl | 1/15/26, 8:44 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

Yesterday I configured an existing Domino IQ environment to use an already existing Open AI environment from the customer running on Azure. During that I was a little bit surprised because I could not see any information in the Domino Console about the external AI LLM when running a "sh ta".

Log Filter v3 now available on OpenNTF  

By Patrick Kwinten | 11/18/25, 5:00 AM | Infrastructure - Notes / Domino | Added by Patrick Kwintensson

I have posted a new code-drop of Log Filter on OpenNTF. This code-drop contains all the code (and design design elements) that you need to copy into an instance of the log template provided by HCL. Besides general improvements and bug fixes I added support to use wild-cards in filter queries. You can setup categories,…

Quick LLM Access via 4 Lines of Code   

By Fredrik Norling | 11/13/25, 8:20 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

4 lines of code to call a LLM, with zero maintenance in the future with DominoIQ. Can you find any devtool that make it simpler to use LLM:s like OpenAI, Claude, Llama, Mistral code setup?

Domino server V14.x upgrade or update failed with error – unexpected operator on Ubuntu OS  

By Remco Angioni | 10/10/25, 5:11 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

When starting the upgrade or update, you notice the following errors: ./install grep: osystem: No such file or directory ./install: 199: [: !=: exexpected operator ./install: 44: [: /local/install/fp1/linux64/tools/-E: unexpected operator ./install: 51: [: /local/install/fp1/linux64/tools/-e: unexpected operator ./install: 57: [: /local/install/fp1/linux64/tools/-e: unexpected operator The Domino install script uses #!/bin/sh for the shell. Ubuntu uses bash.

Running HCL Notes/Admin/Designer seamless on Linux using WinBoat  

By Heiko Voigt | 10/6/25, 5:12 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

I have been searching for an easy-to-use solution to run HCL Notes/Admin/Designer on Linux for years. I am used to Parallels Desktop on the Mac and in search of something similar on Linux I seem to have found a solution using the OSS WinBoat

Problem after upgrading to HCL Domino V14.5 with ID Vault  

By Rainer Brandl | 9/8/25, 10:45 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

There´s a "bug" in the V14.5 with the option to authentication against the ID Vault because of the stronger default algorithm used by V14.5. The problem is described in an official KB article of HCL:https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0122915If you're in maintenance, you can create a case at HCL Support and will receive a fix for this issue.

HCL Nomad and TLS via CertMgr task  

By John Dalsgaard | 9/8/25, 10:36 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

So I had this idea to test out Nomad Web on a brand-new v.14.5 Domino server as an alternative to the normal Notes client - but it had to fit into the "normal" way I give access to our servers...

Connecting Domino IQ to External LLM Providers  

By Serdar Basegmez | 7/2/25, 4:37 PM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

Step-by-step guide to connect Domino IQ with Ollama or OpenAI in Domino 14.5, including setup, config tips, and troubleshooting.

HCL Domino 14.5, Fix your iNotes Redirector for Verse  

By Keith Brooks | 7/2/25, 4:34 PM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

By now, if you have updated your Domino server and relied on iNotes, you have found that it no longer works. HCL was clear about this, and there is no workaround, so if you want iNotes and not Verse, better keep a server on 14.0 and point everyone there. For the rest of us that move forward with the times, we will have seen that logging into the iNotes URL gets you to a pop-up telling hat iNotes is no longer available, and you need to open HCL Verse. If you click on the link, it directs you straight to Verse. iNotes required the iNotes redirector. Well, there is no new redirector, but it did get renamed to Verse redirector(same template name), but it does include some options you probably hadn't considered, and this is how you resolve the problem. If you haven't changed any settings in a while, now is a great time to update them. The redirector has been updated periodically along the way. These are the ones to change or review:

Domino Container Environment Install Script  

By Daniel Nashed | 7/2/25, 4:31 PM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

It has been a round for a while. I am too lazy to do the same installations over and over again manually. In addition it helps me to get customer environments all setup in the same way. This script clones the Domino container project and Domino start script. It also installs Docker from the official repository along with the Domino download script and also the container control script. This is the fastest way to setup a container environment.

Engage 2025: Visualize Your Domino Data with Open Source Tools Session Slides and Databases  

By Richard Moy | 6/10/25, 1:53 PM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

Thank you everyone for attending my Engage 2025 session, Visualizing your Domino Data using Open Source Tools. Though I was up against some formidable sessions, I was surprised to have close to 30 attendees in my session. As promised, here is the PowerPoint presentation and sample databases and code.

Engage session follow-up – Domino 14.5 AutoUpdate downloads  

By Daniel Nashed | 5/26/25, 8:48 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

Thanks to everyone who attended my 8:00 AM session on Wednesday. One topic raised during the session deserves a closer look: how Domino AutoUpdate retrieves installation artifacts. To download product.jwt, software.jwt, and the Notes/Domino web kits, you need at least one server with outbound connectivity to My HCL Software portal (MHS) and the HCL Domino fixlist servers. Domino AutoUpdate a supports HTTP proxy configurations, including authenticated proxies, which should work in most enterprise network environments. All downloads are validated against the software.jwt, which includes signed metadata for all supported software packages. This model fits most connected environments. Completely air-gapped setups are uncommon, and to date, there haven’t been strong or clearly defined requirements for full offline AutoUpdate workflows. However, it’s still possible to override download URLs in AutoUpdate documents to manually provide software.jwt and web kits from internal sources.

Configure an addtional Notes port on a server  

By Daniel Nashed | 5/15/25, 6:48 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

The previous blog post was more dealing with the background about having a second Notes TCP/IP port. This post focuses to setup a new Notes port end to end using the DNUG Lab environment as an example. The server I am configuring has two separate IP addresses on two different network cards. But the same procedure would also work with IP addresses in the same network.

Benefits of running domino with multiple TCP/IP ports  

By Daniel Nashed | 5/15/25, 6:47 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

Support for multiple TCP/IP ports has been part of HCL Domino since the early days. Back then, it was first essential to support multiple simultaneous modem connections. It also proved valuable for clustered servers using dedicated network cards. While today’s networks offer 1 Gbit/s or even 10 Gbit/s speeds—making multiple ports less necessary from a raw bandwidth perspective—there are still compelling reasons to use multiple Notes ports in modern environments.

Quick Tip: Domino container in your timezone  

By Oliver Busse | 4/17/25, 5:18 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

Since I always forget about the timezone settings when spinning up Domino in a container, I just wanted to document it here for my own records. The key here is to provide an environment setting directly when issuing the run command. For me this would be the Central European timezone like so: docker run -d --name domdev -v /local/notesdata:/local/notesdata --hostname domdev.local --cap-add=SYS_PTRACE -e TZ=Europe/Berlin -p 1352:1352 -p 80:80 -p 443:443 domino-container:12.0.2FP6

Adding trusted roots to Domino containers  

By Daniel Nashed | 4/7/25, 4:03 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

Linux and Domino comes with a good set of public trusted certs. But in corporate environment you often have to add your own trusted root for a corporate CA. This starts with Linux which needs certificates to validate repository servers and other resources. Domino trusted roots But also within Domino there are are trust stores which need might need central management. Domino Directory Trusted roots, certstore.nsf Trusted roots can be easily centrally updated. But the following two trust stores are more difficult to manage: /local/notesdata/cacert.pem used for HTTP Requests in Lotus Script and other backend code using curl Domino JVM trust store used by Java

What you should know about Domino "res" files on Linux and AIX  

By Daniel Nashed | 4/3/25, 4:56 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

res files actually come from Windows and are used to translate strings for UI and errors. Those res files are usually linked to the Windows binary. Linux and AIX also use "res" files in a res/ directory below the binary directory. The files are essential for a server. All the core code string resources are in strings.res. Most Domino native servertasks also use string resources.

Wolfi OS - Secure base layer for containers  

By Daniel Nashed | 4/3/25, 4:54 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

This project is pretty cool. It's a container only OS using the kernel from the host. But it has a couple of really interesting design goals. https://github.com/wolfi-dev/ They build container base images with the minimum number of packages and "CVE free" as much as possible. So their own containers for NGINX for example really only have NGINX and nothing around it -- not even a shell unless you install a :latest-dev container.

How to update Domino when running in a container?  

By Daniel Nashed | 4/3/25, 4:52 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

Today I just updated my production environment to Domino 14.0 FP4. Let me show you how it works if you have everything setup.

Reducing the noise in the log   

By Patrick Kwinten | 2/20/25, 3:03 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

Every Domino environment has got logs and probably it's not you who goes through the logs since it's a repetitive mind-numbing task. Here too, but sometimes the colleague who performs the task takes some days off and then it might be you who is responsible for doing it. So last week I was “screwed” and was searching for a quick solution to minimalize the mind-numbing without risking to overlook an important log-entry. Here is what I came up with:

How to add a trusted root to Linux  

By Daniel Nashed | 2/3/25, 2:57 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

I am still adding custom trusted root support to the Domino container project. You will be able to just specify a trusted root to add to the local Linux trust store. Like other low level functionality this works differently on different Linux flavors. Here is what I am adding for SUSE, for Debian/Ubuntu and basically all the other Redhat/RPM based systems (I rested Rocky, Alma & Co so far).

Data Access With XPages JEE  

By Jesse Gallagher | 1/17/25, 6:25 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

Though one day I'd really like to sit down and work on expanding and categorizing the documentation for the XPages JEE project, in the mean time I can at least put together some scattered info in the form of blog posts, webinars, and example apps. Add this post to the pile! Some of it will be a rehash of previous posts, but it doesn't hurt to see it rephrased.