Domino on Linux/Unix, Troubleshooting, Best Practices, Tips and more ...https://blog.nashcom.de/nashcomblog.nsf/en-usWed, 2 Sep 2026 20:26:05 +0000 Wed, 2 Sep 2026 20:26:05 +0000 Alfred Cartanian HCL Support & Software Download https://blog.nashcom.de/nashcomblog.nsf/dx/hcl-support.htm?opendocument&comments#09022026082605PMNOTRYC.htm Thu, 16 Jul 2026 16:28:35 +0200 Daniel Nashed Domino 14.5 is not supported on brand new Debian 13 (Trixie)
When running the automation tests I always add all the Domino+ family products for the image build and test

Still it is using a quite new kernel. When you are installing nativ on Linux you would get the Debian kernel for that version (in contrast to a container) which has not been regression tested by HCL.

This is less a Traveler but core Domino topic.

But it should work!]]>
When running the automation tests I always add all the Domino+ family products for the image build and test

Still it is using a quite new kernel. When you are installing nativ on Linux you would get the Debian kernel for that version (in contrast to a container) which has not been regression tested by HCL.

This is less a Traveler but core Domino topic.

But it should work!]]> https://blog.nashcom.de/nashcomblog.nsf/dx/domino-14.5-is-not-supported-on-brand-new-debian-13-trixie.htm?opendocument&comments#16072026162835DNAJYY.htm Wed, 15 Jul 2026 14:19:59 +0000 Jeroen Jacobs Domino 14.5 is not supported on brand new Debian 13 (Trixie)
I was wondering if you had the opportunity to test Traveler 14.5.1 on Debian Trixie?]]>
I was wondering if you had the opportunity to test Traveler 14.5.1 on Debian Trixie?]]> https://blog.nashcom.de/nashcomblog.nsf/dx/domino-14.5-is-not-supported-on-brand-new-debian-13-trixie.htm?opendocument&comments#07152026021959PMNOTJTJ.htm Wed, 8 Jul 2026 21:10:15 +0000 Jesse Gallagher Domino NRPC Proxy – A Modern Proxy Platform for Domino https://blog.nashcom.de/nashcomblog.nsf/dx/domino-nrpc-proxy-–-a-modern-proxy-platform-for-domino.htm?opendocument&comments#07082026091015PMNOTSTY.htm Mon, 6 Jul 2026 16:06:05 +0000 Mike Proxmox energy savings options for home labs https://blog.nashcom.de/nashcomblog.nsf/dx/proxmox-energy-savings-options-for-home-labs.htm?opendocument&comments#06072026160605NOTLVU.htm Wed, 29 Apr 2026 19:52:57 +0200 Daniel Nashed Engage 2026 Presentation Slides Leveraging CertMgr and Resources
I also changed the settings in my blog to disable comments for all future posts.]]>
I also changed the settings in my blog to disable comments for all future posts.]]> https://blog.nashcom.de/nashcomblog.nsf/dx/engage-2026-presentation-slides-leveraging-certmgr-and-resources.htm?opendocument&comments#29042026195257DNANYP.htm Mon, 27 Apr 2026 13:04:28 +0000 Mark Holloway Engage 2026 Presentation Slides Leveraging CertMgr and Resources
thanks for sharing your perspective — and yes, I was there, in previous years. This year I wasn't, and that itself tells you something: nobody is paying for my attendance anymore. Not because Engage isn't a great community event — it is — but because for most of my clients, HCL is simply no longer on the radar. That's not a personal opinion. That's the market talking.

**On the products**

After 7 years under HCL, we still don't have a Notes client that can compete visually or functionally with modern productivity tools. The UI remains stuck in a design language that feels like 2005. HCL Verse was supposed to be the future of mail — it was never finished, never reached feature parity, and was quietly sidelined. These are not minor gaps. They are fundamental promises that were never delivered.

Nomad Web is a step in the right direction, but it's still not a full replacement for the desktop client, and the roadmap credibility has been eroded by years of under-delivery.

**On the financials**

Let's look at the numbers. HCLSoftware's Annual Recurring Revenue for FY25 came in at just over $1 billion — essentially flat compared to the previous year, with growth of 1.8% in constant currency. The software division grew 3.5% for the full year — modest, at best, for a company claiming to be transforming the enterprise software market. Compare that to what Microsoft, Salesforce, or ServiceNow are doing in the same space.

More telling: HCLSoftware's revenue is around $1.4 billion out of HCLTech's total $14+ billion. Notes/Domino is a fraction of that. The strategic weight of this product line within the parent company is marginal — and investment decisions reflect that.

**My personal take — why HCL will not grow in this market**

HCL bought the IBM legacy portfolio in 2019 for one reason: to extract value from an installed base, not to build a new one. That's a legitimate business strategy, but it's not a growth strategy. You don't invest heavily in acquiring new customers for a platform that the broader market has already written off as legacy.

The European enterprise market has largely made its decisions. Microsoft 365 is the default. Google Workspace is the alternative. Everything else needs to fight for relevance — and to fight, you need aggressive sales, a modern go-to-market, and products that genuinely impress prospects. HCL has none of those three things in this segment.

The fact that Engage — a European flagship event for an enterprise software portfolio — is entirely run by a volunteer community is not something to celebrate. It's a symptom. It means HCL doesn't believe enough in this market to invest directly in it. The community does extraordinary work, but it is filling a gap that HCL itself should be filling. When a vendor outsources its own evangelism to unpaid volunteers, it has already decided the market isn't worth the investment.

I genuinely respect the people in this ecosystem — the consultants, the developers, the community members who keep showing up year after year. But respect for the community is not the same as confidence in the vendor.

Hope isn't a strategy. And for most of us working in the field, the business reality is already pointing in a different direction.

See you — maybe — at next year's Engage.]]>
thanks for sharing your perspective — and yes, I was there, in previous years. This year I wasn't, and that itself tells you something: nobody is paying for my attendance anymore. Not because Engage isn't a great community event — it is — but because for most of my clients, HCL is simply no longer on the radar. That's not a personal opinion. That's the market talking.

**On the products**

After 7 years under HCL, we still don't have a Notes client that can compete visually or functionally with modern productivity tools. The UI remains stuck in a design language that feels like 2005. HCL Verse was supposed to be the future of mail — it was never finished, never reached feature parity, and was quietly sidelined. These are not minor gaps. They are fundamental promises that were never delivered.

Nomad Web is a step in the right direction, but it's still not a full replacement for the desktop client, and the roadmap credibility has been eroded by years of under-delivery.

**On the financials**

Let's look at the numbers. HCLSoftware's Annual Recurring Revenue for FY25 came in at just over $1 billion — essentially flat compared to the previous year, with growth of 1.8% in constant currency. The software division grew 3.5% for the full year — modest, at best, for a company claiming to be transforming the enterprise software market. Compare that to what Microsoft, Salesforce, or ServiceNow are doing in the same space.

More telling: HCLSoftware's revenue is around $1.4 billion out of HCLTech's total $14+ billion. Notes/Domino is a fraction of that. The strategic weight of this product line within the parent company is marginal — and investment decisions reflect that.

**My personal take — why HCL will not grow in this market**

HCL bought the IBM legacy portfolio in 2019 for one reason: to extract value from an installed base, not to build a new one. That's a legitimate business strategy, but it's not a growth strategy. You don't invest heavily in acquiring new customers for a platform that the broader market has already written off as legacy.

The European enterprise market has largely made its decisions. Microsoft 365 is the default. Google Workspace is the alternative. Everything else needs to fight for relevance — and to fight, you need aggressive sales, a modern go-to-market, and products that genuinely impress prospects. HCL has none of those three things in this segment.

The fact that Engage — a European flagship event for an enterprise software portfolio — is entirely run by a volunteer community is not something to celebrate. It's a symptom. It means HCL doesn't believe enough in this market to invest directly in it. The community does extraordinary work, but it is filling a gap that HCL itself should be filling. When a vendor outsources its own evangelism to unpaid volunteers, it has already decided the market isn't worth the investment.

I genuinely respect the people in this ecosystem — the consultants, the developers, the community members who keep showing up year after year. But respect for the community is not the same as confidence in the vendor.

Hope isn't a strategy. And for most of us working in the field, the business reality is already pointing in a different direction.

See you — maybe — at next year's Engage.]]> https://blog.nashcom.de/nashcomblog.nsf/dx/engage-2026-presentation-slides-leveraging-certmgr-and-resources.htm?opendocument&comments#04272026010428PMNOTHCC.htm Mon, 27 Apr 2026 08:28:15 +0000 Kris De Bisschop Engage 2026 Presentation Slides Leveraging CertMgr and Resources
thanks a lot for your comments but I think it's difficult to give an opinion on an event if you were not present.

This year we had more attendees and there were even students present. Those students are the people that need to get introduced in the products to know more about them and see for themselves that, with the knowledge they have, they can work with the products that last already more then 30 years.

It's true that some of the stuff shown during the opening session is not a fit for all sorts of companies amongst us but allowing to use AI, at no additional license cost, and being able to create decent solutions out of it, is something that has been shown during lots of other sessions during the two days of Engage.

This community is year on year growing, every year we see new people coming to Engage and we have new people getting introduced to the HCL Digital Solutions portfolio.

I never saw so much new stuff getting introduced in the products then since HCL took over. They listen to what is needed, they evaluate how it can be delivered and they deliver, year after year and this for the last 7 years since they took over from IBM.

I suggest you attend next year's Engage and follow the sessions given by people in the field, working with the products and sharing their knowledge how they leverage what HCL offers.]]>
thanks a lot for your comments but I think it's difficult to give an opinion on an event if you were not present.

This year we had more attendees and there were even students present. Those students are the people that need to get introduced in the products to know more about them and see for themselves that, with the knowledge they have, they can work with the products that last already more then 30 years.

It's true that some of the stuff shown during the opening session is not a fit for all sorts of companies amongst us but allowing to use AI, at no additional license cost, and being able to create decent solutions out of it, is something that has been shown during lots of other sessions during the two days of Engage.

This community is year on year growing, every year we see new people coming to Engage and we have new people getting introduced to the HCL Digital Solutions portfolio.

I never saw so much new stuff getting introduced in the products then since HCL took over. They listen to what is needed, they evaluate how it can be delivered and they deliver, year after year and this for the last 7 years since they took over from IBM.

I suggest you attend next year's Engage and follow the sessions given by people in the field, working with the products and sharing their knowledge how they leverage what HCL offers.]]> https://blog.nashcom.de/nashcomblog.nsf/dx/engage-2026-presentation-slides-leveraging-certmgr-and-resources.htm?opendocument&comments#04272026082815AMNOTBXQ.htm Fri, 24 Apr 2026 17:59:50 +0200 Daniel Nashed Domino Transaction log on ZFS
The translog code tries to caclulate the block size but fails for some reason above 32K.

I looked at the callstack and did see which area this happened.

Then I escalated it to support/DEV at that time.

The block size of 32K was something I found out on my own testing the sizes. But I would use 16K for translog.

]]>
The translog code tries to caclulate the block size but fails for some reason above 32K.

I looked at the callstack and did see which area this happened.

Then I escalated it to support/DEV at that time.

The block size of 32K was something I found out on my own testing the sizes. But I would use 16K for translog.

]]> https://blog.nashcom.de/nashcomblog.nsf/dx/domino-transaction-log-on-zfs.htm?opendocument&comments#24042026175950DNALRY.htm Fri, 24 Apr 2026 15:43:38 +0000 Jeroen Jacobs Domino Transaction log on ZFS https://blog.nashcom.de/nashcomblog.nsf/dx/domino-transaction-log-on-zfs.htm?opendocument&comments#24042026154338NOTLFT.htm Fri, 24 Apr 2026 16:50:42 +0200 Daniel Nashed Engage 2026 Presentation Slides Leveraging CertMgr and Resources
Why are you posting a reply like this on my post for a technical session for Engage instead of sharing it with HCL?

Let me forward your reply to HCL to have them aware of your feedback.

Daniel]]>
Why are you posting a reply like this on my post for a technical session for Engage instead of sharing it with HCL?

Let me forward your reply to HCL to have them aware of your feedback.

Daniel]]> https://blog.nashcom.de/nashcomblog.nsf/dx/engage-2026-presentation-slides-leveraging-certmgr-and-resources.htm?opendocument&comments#24042026165042DNAKES.htm Fri, 24 Apr 2026 16:47:33 +0200 Daniel Nashed Domino/Traveler 14.5.1 shipped today - the container image is updated - ClamAV is added to Domino
ClamAV uses clamd which can be on the same or a different machine.

Clamd is also available on Windows if you really want it to be on Windows.

But it could be also a Linux machine running Clamd native or in a container.

I would personally prefer a loopback connection. But CScan supports TLS.

Clamd itself does not support TLS but you can add any kind of secure proxy or load-balancer in front of it. Like NGINX.

I wrote up NGINX configurations and blogged about it earlier.

-- Daniel]]>
ClamAV uses clamd which can be on the same or a different machine.

Clamd is also available on Windows if you really want it to be on Windows.

But it could be also a Linux machine running Clamd native or in a container.

I would personally prefer a loopback connection. But CScan supports TLS.

Clamd itself does not support TLS but you can add any kind of secure proxy or load-balancer in front of it. Like NGINX.

I wrote up NGINX configurations and blogged about it earlier.

-- Daniel]]> https://blog.nashcom.de/nashcomblog.nsf/dx/dominotraveler-14.5.1-shipped-today-the-container-image-is-updated-clamav-is-added-to-domino.htm?opendocument&comments#24042026164733DNAKCT.htm Fri, 24 Apr 2026 16:45:24 +0200 Daniel Nashed Engage 2026 Presentation Slides Leveraging CertMgr and Resources
Starting with Domino 12 CertMgr is the recommended way to use TLS/SSL certificates.

Already in 12.0 you see a message that you should switch to CertMgr.

I would be personally interested in what reasons a customer should have to use kyr files.

Thanks

Daniel]]>
Starting with Domino 12 CertMgr is the recommended way to use TLS/SSL certificates.

Already in 12.0 you see a message that you should switch to CertMgr.

I would be personally interested in what reasons a customer should have to use kyr files.

Thanks

Daniel]]> https://blog.nashcom.de/nashcomblog.nsf/dx/engage-2026-presentation-slides-leveraging-certmgr-and-resources.htm?opendocument&comments#24042026164524DNAKBG.htm Fri, 24 Apr 2026 13:22:08 +0000 Richard Pajerski Engage 2026 Presentation Slides Leveraging CertMgr and Resources
One point -- for folks still needing to deal with those legacy .kyr files for whatever reason, I offer an easy-to-use and very inexpensive Windows Desktop utility (Aperture) for managing them.

Best,

Richard]]>
One point -- for folks still needing to deal with those legacy .kyr files for whatever reason, I offer an easy-to-use and very inexpensive Windows Desktop utility (Aperture) for managing them.

Best,

Richard]]> https://blog.nashcom.de/nashcomblog.nsf/dx/engage-2026-presentation-slides-leveraging-certmgr-and-resources.htm?opendocument&comments#04242026012208PMNOTHPD.htm Fri, 24 Apr 2026 10:02:53 +0000 Norbert Gase Domino/Traveler 14.5.1 shipped today - the container image is updated - ClamAV is added to Domino
so how is ClamAV implemented/to implement in Domino 14.5.1 on Windows on-prem (no container).

Do I have to install separate ClamAV (MSI installer) locally on each windows server I'm running Domino on? Or is ist completely integrated? Did not find anything in detail for this topic.

Thanks.]]>
so how is ClamAV implemented/to implement in Domino 14.5.1 on Windows on-prem (no container).

Do I have to install separate ClamAV (MSI installer) locally on each windows server I'm running Domino on? Or is ist completely integrated? Did not find anything in detail for this topic.

Thanks.]]> https://blog.nashcom.de/nashcomblog.nsf/dx/dominotraveler-14.5.1-shipped-today-the-container-image-is-updated-clamav-is-added-to-domino.htm?opendocument&comments#24.04.2026100253NOTDSU.htm Fri, 24 Apr 2026 08:57:37 +0000 Mark Holloway Engage 2026 Presentation Slides Leveraging CertMgr and Resources
Attendance is shrinking year after year. Zero major surprises from HCL. A keynote full of AI buzzwords that feel exciting on stage but leave SMBs wondering: "where exactly do I fit in this roadmap?"

Agentic AI and Vibe Coding are cool. But 80% of the Domino installed base is mid-market companies running business-critical apps on lean IT budgets. When was the last time HCL announced something that made *that* audience feel genuinely valued?

The community keeps showing up — loyal, passionate, willing to evangelize. HCL keeps talking strategy. But strategy without traction is just a PowerPoint.

How many more years of declining attendance before someone at HCL asks the hard question: are we growing this ecosystem, or just managing its decline?]]>
Attendance is shrinking year after year. Zero major surprises from HCL. A keynote full of AI buzzwords that feel exciting on stage but leave SMBs wondering: "where exactly do I fit in this roadmap?"

Agentic AI and Vibe Coding are cool. But 80% of the Domino installed base is mid-market companies running business-critical apps on lean IT budgets. When was the last time HCL announced something that made *that* audience feel genuinely valued?

The community keeps showing up — loyal, passionate, willing to evangelize. HCL keeps talking strategy. But strategy without traction is just a PowerPoint.

How many more years of declining attendance before someone at HCL asks the hard question: are we growing this ecosystem, or just managing its decline?]]> https://blog.nashcom.de/nashcomblog.nsf/dx/engage-2026-presentation-slides-leveraging-certmgr-and-resources.htm?opendocument&comments#04242026085737AMNOTCJ3.htm Fri, 24 Apr 2026 08:49:19 +0000 AnotherVisitor Ollama keep models loaded for longer than 5 minutes idle time https://blog.nashcom.de/nashcomblog.nsf/dx/ollama-keep-models-loaded-for-longer-than-5-minutes-idle.htm?opendocument&comments#24.04.2026084919NOTCCV.htm Tue, 21 Apr 2026 21:54:10 +0000 Christian Carrasco G My HCLSoftware download portal (MHS) requires to accept license terms
Thanks

Regards]]>
Thanks

Regards]]> https://blog.nashcom.de/nashcomblog.nsf/dx/my-hclsoftware-download-portal-mhs-requires-to-accept-license-terms.htm?opendocument&comments#21042026215410NOTTPE.htm Wed, 8 Apr 2026 20:36:19 +0200 Daniel Nashed Notes / Domino 14.5.1 – Testing TLS 1.3 and Post-Quantum Cryptography with HttpGetRequest
The TLS cipher list in Domino contains cipher suites, for example:

TLS_AES_256_GCM_SHA384

Ciphers support multiple ways for:

- key exchange

- encryption algorithm

- integrity algorithm

What is used depends on both ends of the communication channel and are negotiated during the handshake.

The handshake also differs between TLS versions. For example TLS 1.3 has an advanced handshake used when both sides support TLS 1.3.

First part of the handshake is to find out the highest TLS version both sides have in common.

Then the handshake finds out about the best cipher supported on both ends (the order is usually defined by the server).

Then details like the following are negotiated, based on available on both sides.

There isn't anything configurable on Domino side. The Domino Internet tasks TLS stack isn't OpenSSL based and does not support those modern standards yet.

But OpenSSL backend code is used in other parts of Notes/Domino. For example for Lotus Script HTTP request class.

---

ML-KEM (Key Encapsulation Mechanism)

Used for key exchange, not encryption itself

How both sides agree on a shared secret

ML-DSA (Digital Signature Algorithm)

Used for signing / authentication

Not used for encrypting data

SHAKE-128 / SHAKE-256

Hash / extendable-output functions

Used in derivation, hashing, signatures, not as TLS ciphers

---

I hope this clarifies it a bit?]]>
The TLS cipher list in Domino contains cipher suites, for example:

TLS_AES_256_GCM_SHA384

Ciphers support multiple ways for:

- key exchange

- encryption algorithm

- integrity algorithm

What is used depends on both ends of the communication channel and are negotiated during the handshake.

The handshake also differs between TLS versions. For example TLS 1.3 has an advanced handshake used when both sides support TLS 1.3.

First part of the handshake is to find out the highest TLS version both sides have in common.

Then the handshake finds out about the best cipher supported on both ends (the order is usually defined by the server).

Then details like the following are negotiated, based on available on both sides.

There isn't anything configurable on Domino side. The Domino Internet tasks TLS stack isn't OpenSSL based and does not support those modern standards yet.

But OpenSSL backend code is used in other parts of Notes/Domino. For example for Lotus Script HTTP request class.

---

ML-KEM (Key Encapsulation Mechanism)

Used for key exchange, not encryption itself

How both sides agree on a shared secret

ML-DSA (Digital Signature Algorithm)

Used for signing / authentication

Not used for encrypting data

SHAKE-128 / SHAKE-256

Hash / extendable-output functions

Used in derivation, hashing, signatures, not as TLS ciphers

---

I hope this clarifies it a bit?]]> https://blog.nashcom.de/nashcomblog.nsf/dx/notes-domino-14.5.1-–-testing-tls-1.3-and-post-quantum-cryptography-with-httpgetrequest-.htm?opendocument&comments#08042026203619DNAPTT.htm Tue, 7 Apr 2026 14:21:56 +0000 Anders Johansson Certificate Lifetimes Are Shrinking — Is Your Domino Infrastructure Ready?
Some of my colleagues will be at Engage.]]>
Some of my colleagues will be at Engage.]]> https://blog.nashcom.de/nashcomblog.nsf/dx/certificate-lifetimes-are-shrinking-is-your-domino-infrastructure-ready.htm?opendocument&comments#2026-04-07142156NOTJUR.htm