Location : Cleveland, OH
One of the scourges of Lotus Notes is the "Red X" when viewing HTML mail in the Notes client. To help refresh your memory, it looks like this:
Take a look at the forums and you will see that it is still an issue. To help, I've even posted two Show-n-Tell Thursday entries on the problem. Now comes another twist to this, which has no resolution.
On one of the list-serv's I subscribe, a person asked about resolving this issue for all HTML mail as they go through an authenticated proxy. Not just any proxy; it's not just a simple change to the Location Document. It's a proxy that uses NTLM.
Let's take a look at a TechNote (emphasis, IBM):
And, as I stated earlier, there is no facility within the Location Document to authenticate to NTLM enabled proxy.
The reaction from the person who has to support Notes clients in an NTLM environment, after I posted the link to the TechNote?
Surprised at this revelation, and trying to remove/reduce the incidents of the "Red X," there is now an Idea waiting to be voted upon.
Take a look at the forums and you will see that it is still an issue. To help, I've even posted two Show-n-Tell Thursday entries on the problem. Now comes another twist to this, which has no resolution.
On one of the list-serv's I subscribe, a person asked about resolving this issue for all HTML mail as they go through an authenticated proxy. Not just any proxy; it's not just a simple change to the Location Document. It's a proxy that uses NTLM.
Let's take a look at a TechNote (emphasis, IBM):
The main point is that Microsoft proxies that use NTLM (Windows® domain authentication / Microsoft security's protocol) is not supported. The protocol is a proprietary protocol (much like NRPC) that Microsoft uses in its suite of products (IE, Outlook®, Windows login).
A good indicator that NTLM is enabled is to open IE and get the prompt for authentication, where there are three text fields (username, password, domain). In the client, despite best efforts and intentions and countless correct login attempts, the red Xs will still be there.
The only workaround for this is to disable NTLM authentication. You cannot put in domain\username for the user name in Notes when the pop-up appears. On a single server machine, this is in the Internet Information Server (IIS) settings in Administrative tools. Make sure that domain authentication is disabled.
And, as I stated earlier, there is no facility within the Location Document to authenticate to NTLM enabled proxy.
The reaction from the person who has to support Notes clients in an NTLM environment, after I posted the link to the TechNote?
This is what I've been saying all along (to people internally). They just don't want to believe me (and I can't say I blame them) - it is remarkable that, in this day and age, Notes doesn't support NTLM. For a company like IBM that is always stressing how seriously they take *security* to not support anything better than basic authentication where the ID and PW are SENT IN CLEAR TEXT over the wire strains the bounds of credulity. It makes it very hard to defend (let alone "evangelize") the product under these conditions.
BTW, IBM's argument that NTLM is proprietary is lame. There are loads of apps, including open-source, free stuff that support it. Besides, if they don't want to support it, they should at least offer an alternative. Without that, I can't even counter-propose a solution.
Sorry, I'll stop venting (for now).
Surprised at this revelation, and trying to remove/reduce the incidents of the "Red X," there is now an Idea waiting to be voted upon.
Comment posted by Randy Bye03/16/2011 01:11:00 PM
Does this help? W3ContextNtlmMode=1 in the notes.ini
Comment posted by Nathan T. Freeman03/17/2011 10:24:14 PM
Homepage: http://ntf.gbs.com
Gregg, have you looked at the Accounts model in Eclipse? I don't see a specific NTLM proxy option there, but there's a lot of stuff with HTTP services that you can configure.
Go to File - Preferences, and select Accounts. Add an account and check out the options. The managed browser used for mail rendering DEFINITELY uses these account profiles.
Comment posted by Vitor Pereira03/18/2011 08:11:59 PM
Homepage: http://www.vitor-pereira.com
Hmmm. Strange! I don't have this problem neither with R7 or R8.x.
Powered By : Domino
BlogSphere V1.3.1
Join The WebLog Revolution at BlogSphere.net