Re: [TAKE CAUTION] RE: Email address verification

Still don't see it. The only things Listening are: Database server, HTTP 
server, and SMTP server.

Also did the F6 print. All that is LDAP is the Control Task.





From:   "Rob Berendt" <[email protected]>
To:     "DEnglander-Nx8w8t/[email protected]" <DEnglander-Nx8w8t/[email protected]>, 
"[email protected]" <[email protected]>
Date:   02/04/2021 08:47 AM
Subject:        [TAKE CAUTION]  RE: Email address verification



SHOW TASKS should show two lines.  Look harder.  If it's too hard to find 
you can do F6=Print and browse the spool file for LDAP.
LDAP Server          Listen for connect requests on TCP Port:389
LDAP Server          Utility task
 
 
 
Rob Berendt
-- 
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to:  7310 Innovation Blvd, Suite 104
          Ft. Wayne, IN 46818
Ship to:  7310 Innovation Blvd, Dock 9C
          Ft. Wayne, IN 46818
http://www.dekko.com
 
From: DEnglander-Nx8w8t/[email protected] <DEnglander-Nx8w8t/[email protected]> 
Sent: Thursday, February 4, 2021 9:39 AM
To: [email protected]
Cc: Rob Berendt <[email protected]>
Subject: RE: Email address verification
 
CAUTION: This email originated from outside of the organization. Do not 
click links or open attachments unless you recognize the sender and know 
the content is safe.
 
Rob,

When I enter the WRKDOMSVR command and take a 9 next to the server name, I 
do see that LDAP job running in the Domino subsystem.

When I enter the 8 option and then SHOW TASKS, I do see LDAP SERVER,  but 
it says CONTROL TASK, not Listen for....

If this means LDAP is being served, is there a way to verify email 
addresses?

Thank you again,

Doug





From:        "Rob Berendt" <[email protected]>
To:        "Lotus Domino on the IBM i (AS/400 and iSeries)" <
[email protected]>
Date:        02/04/2021 08:27 AM
Subject:        RE: Email address verification
Sent by:        "Domino400" <domino400-bounces-+hD5IHI5Xscn3HwCXmMcX9BPR1lH4CV8@public.gmane.org>




Yes.  The file in the IFS is names.nsf.  However, that may be a bit hard 
for you to analyze.  Your Domino server is not currently set up to export 
the names.nsf on a periodic basis so, since your Domino team is opposed to 
any change, I don't see that happening any time soon.  Now, if you want to 
manually go into File, Export Contacts and mess around with that you can.

Funny thing is, your Domino server is probably already set up to serve 
ldap and they don't even know it.  It's a default on your primary NAB 
server.
WRKDOMSVR
9=Work server jobs
LDAP         QNOTES      BCI      .0  PGM-LDAP
8=Work console
SHOW TASKS
LDAP Server          Listen for connect requests on TCP Port:389
Is it using ldap over SSL or not?  If the above says Port:389 it is not 
using ssl. 636 is the port for SSL.

Or WRKJOB LDAP
NETSTAT OPTION(*CNN)
F15=Subset
Local port range: 
 Lower value  . . . . . . . .   389
8=Display jobs

QSH
> Ldapsearch -h notes01.corp.dekko.com -s base "cn=*guebard*"   
 ldap_simple_bind: Inappropriate authentication  --- Failed, anonymous 
bind not allowed 
 $
> Ldapsearch -h notes01.corp.dekko.com -s base -D "cn=Rob Berendt,O=DEKKO" 
-w PlacePasswordHere "cn=*guebard*"

The -D is used to say the next parameter is the user to bind to the DNS 
with.  The -w is the password.

https://help.hcltechsw.com/domino/11.0.0/admin/conf_customizingtheldapserviceconfiguration_c.html


Here, we serve up ldap from Domino for use by our printer/scanners to send 
scanned documents to.  And a bunch of other stuff.  How does your printer 
scanners do their ldap search?  Can you use ldapsearch on that?  You may 
have to add parameters for a binding name and password.  Any google search 
for ldapsearch will show you how to do that.  I showed an example above. 
Windows Active Directory often has email addresses stored in that also. 
You could ldapsearch that.  Then next year when you migrate to Azure for 
active directory you can rewrite it.

Boy am I looking forward to my day off on Monday...

Rob Berendt
-- 
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to:  7310 Innovation Blvd, Suite 104
         Ft. Wayne, IN 46818
Ship to:  7310 Innovation Blvd, Dock 9C
         Ft. Wayne, IN 46818
http://www.dekko.com


-----Original Message-----
From: Domino400 <domino400-bounces-+hD5IHI5Xscn3HwCXmMcX9BPR1lH4CV8@public.gmane.org> On Behalf Of Doug 
via Domino400
Sent: Wednesday, February 3, 2021 9:09 AM
To: Lotus Domino on the IBM i(AS/400 and iSeries) <
[email protected]>
Cc: DEnglander-Nx8w8t/[email protected]
Subject: RE: Email address verification

CAUTION: This email originated from outside of the organization. Do not 
click links or open attachments unless you recognize the sender and know 
the content is safe.


Rob,

I have been told our Domino version is not set up to serve up ldap.

Do you know any other way? Is there a file on the IFS that holds the email
addresses configured in Domino.

Thank you,

Doug





From:   "Rob Berendt" <[email protected]>
To:     "Lotus Domino on the IBM i (AS/400 and iSeries)"
<[email protected]>
Date:   02/03/2021 07:30 AM
Subject:        RE: Email address verification
Sent by:        "Domino400" <domino400-bounces-+hD5IHI5Xscn3HwCXmMcX9BPR1lH4CV8@public.gmane.org>



Do you know how to do a ldapsearch?
Do you know how to configure Domino to serve up ldap?

For example:
QSH
ldapsearch -h ldap01.corp.dekko.com -s one "[email protected]"
returns:

> ldapsearch -h ldap01.corp.dekko.com -s one "[email protected]"
 CN=Rob Berendt,O=DEKKO
 cn=Rob Berendt
 cn=rberendt
...
 [email protected]
...

You could try this:
QSH CMD('ldapsearch -h ldap01.corp.dekko.com -s one "[email protected]" >
/home/ROB/ldapout.txt')
DSPF '/home/ROB/ldapout.txt'
Don't try the following in STRSQL, try it in iACS Run SQL Scripts instead.
SELECT * FROM TABLE(QSYS2.IFS_READ(
                    PATH_NAME => '/home/ROB/ldapout.txt'
                    ))
              where upper (line) like ('CN=%')
                or line like('mail=%')
;

Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to:  7310 Innovation Blvd, Suite 104
         Ft. Wayne, IN 46818
Ship to:  7310 Innovation Blvd, Dock 9C
         Ft. Wayne, IN 46818
http://www.dekko.com


-----Original Message-----
From: Domino400 <domino400-bounces-+hD5IHI5Xscn3HwCXmMcX9BPR1lH4CV8@public.gmane.org> On Behalf Of Doug
via Domino400
Sent: Tuesday, February 2, 2021 9:16 AM
To: [email protected]
Cc: DEnglander-Nx8w8t/[email protected]
Subject: Email address verification

CAUTION: This email originated from outside of the organization. Do not
click links or open attachments unless you recognize the sender and know
the content is safe.


Does anyone know of a way to validate an email address for a Domino
server? I am looking for an API or other interface that an RPG program can
interact with to have the API say, Yes, that email is in the directory, or
No, that email does not exist.

Does that capability exist anywhere? We are on V7R3, pretty current on
PTFs and pretty current on our Domino installation.

Thank you,

Doug


"CONFIDENTIALITY NOTICE:  This e-mail transmission (and/or the attachments
accompanying it) contain confidential information belonging to the sender.
The information is intended only for the use of the intended recipient.
If you are not the intended recipient, you are hereby notified that any
disclosure, copying, distribution or the taking of any action in reliance
on the contents of the information is strictly prohibited.  Any
unauthorized interception of this transmission is illegal under the law.
If you have received this transmission in error, please promptly notify
the sender by reply e-mail, and then destroy all copies of the
transmission."
--
This is the Lotus Domino on the IBM i (AS/400 and iSeries) (Domino400)
mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request-+hD5IHI5Xscn3HwCXmMcX9BPR1lH4CV8@public.gmane.org
Before posting, please take a moment to review the archives
at https://archive.midrange.com/domino400.
--
This is the Lotus Domino on the IBM i (AS/400 and iSeries) (Domino400)
mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request-+hD5IHI5Xscn3HwCXmMcX9BPR1lH4CV8@public.gmane.org
Before posting, please take a moment to review the archives
at https://archive.midrange.com/domino400.



"CONFIDENTIALITY NOTICE:  This e-mail transmission (and/or the attachments 
accompanying it) contain confidential information belonging to the sender. 
 The information is intended only for the use of the intended recipient. 
If you are not the intended recipient, you are hereby notified that any 
disclosure, copying, distribution or the taking of any action in reliance 
on the contents of the information is strictly prohibited.  Any 
unauthorized interception of this transmission is illegal under the law. 
If you have received this transmission in error, please promptly notify 
the sender by reply e-mail, and then destroy all copies of the 
transmission."
--
This is the Lotus Domino on the IBM i (AS/400 and iSeries) (Domino400) 
mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request-+hD5IHI5Xscn3HwCXmMcX9BPR1lH4CV8@public.gmane.org
Before posting, please take a moment to review the archives
at https://archive.midrange.com/domino400.
-- 
This is the Lotus Domino on the IBM i (AS/400 and iSeries) (Domino400) 
mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request-+hD5IHI5Xscn3HwCXmMcX9BPR1lH4CV8@public.gmane.org
Before posting, please take a moment to review the archives
at https://archive.midrange.com/domino400.




"CONFIDENTIALITY NOTICE: This e-mail transmission (and/or the attachments 
accompanying it) contain confidential information belonging to the sender. 
The information is intended only for the use of the intended recipient. If 
you are not the intended recipient, you are hereby notified that any 
disclosure, copying, distribution or the taking of any action in reliance 
on the contents of the information is strictly prohibited. Any 
unauthorized interception of this transmission is illegal under the law. 
If you have received this transmission in error, please promptly notify 
the sender by reply e-mail, and then destroy all copies of the 
transmission."


"CONFIDENTIALITY NOTICE:  This e-mail transmission (and/or the attachments accompanying it) contain confidential information belonging to the sender.  The information is intended only for the use of the intended recipient.  If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution or the taking of any action in reliance on the contents of the information is strictly prohibited.  Any unauthorized interception of this transmission is illegal under the law.  If you have received this transmission in error, please promptly notify the sender by reply e-mail, and then destroy all copies of the transmission."
-- 
This is the Lotus Domino on the IBM i (AS/400 and iSeries) (Domino400) mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request-+hD5IHI5Xscn3HwCXmMcX9BPR1lH4CV8@public.gmane.org
Before posting, please take a moment to review the archives
at https://archive.midrange.com/domino400.