Microsoft KB Archive/927629

= FIX: Certificates for a Lotus Notes user account do not appear in the original order when you import the account in MIIS 2003 Enterprise Edition, and a MA cannot connect to an IBM Directory Server after you install MIIS Service Pack 1 =

Article ID: 927629

Article Last Modified on 11/15/2007

-

APPLIES TO


 * Microsoft Identity Integration Server 2003 Enterprise Edition

-



Scenario 1
In Microsoft Identity Integration Server (MIIS) 2003 Enterprise Edition, you use the management agent (MA) for Lotus Notes to import a user account. However, the certificates for the user account do not appear in the original order.

The certificates always appear in alphabetical order in the connector space object properties of the user. The certificates do not appear in the order that appears on the Notes certificates tab in IBM Lotus Domino Administrator.

This change in display order may cause the wrong certificate to be used.

Scenario 2
The MA for an IBM Directory Server cannot connect to the IBM Directory Server if the following conditions are true:
 * You install MIIS 2003 Enterprise Edition Service Pack 1 (SP1) build 3.1.1046.
 * You enable the Secure Sockets Layer (SSL) protocol.

When the MA tries to connect to the IBM Directory Server, you receive the following error message:

The specified server does not support SSL.



Cause 1
The problem that is described in the &quot;Scenario 1&quot; section occurs when a text string in Lotus Notes is converted to a multivalue string in MIIS. For more information about how this problem occurs, see the &quot;More Information&quot; section.

Cause 2
The problem that is described in the &quot;Scenario 2&quot; section occurs because of a regression in MIIS 2003 Enterprise Edition SP1 build 3.1.1046.



RESOLUTION
A supported hotfix is now available from Microsoft. However, this hotfix is intended to correct only the problem that this article describes. Apply this hotfix only to systems that are experiencing this specific problem.

To resolve this problem, submit a request to Microsoft Online Customer Services to obtain the hotfix. To submit an online request to obtain the hotfix, visit the following Microsoft Web site:

http://go.microsoft.com/?linkid=6294451

Note If additional issues occur or any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. To create a separate service request, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=support

Prerequisites
You must have MIIS 2003 Enterprise Edition SP1 installed before you apply this hotfix.

For more information, visit the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyId=A5F6E8DD-FC60-4A11-9D09-AA0BBA2A617E

Restart requirement
Typically, you do not have to restart the computer after you apply this hotfix. However, the installer can determine whether you must restart the computer. If you must restart the computer, you are prompted to restart the computer. Frequently, you must restart the computer because the installer is trying to install a file that the computer is currently running.

Hotfix replacement information
This hotfix does not replace any other hotfixes.

File information
The global version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies to&quot; section.



Information about string conversion
In Lotus Notes, the certificates for a user are stored in a field of type Text. When these fields have embedded newline characters in their values, the Lotus Notes management agent imports the fields as multivalued attributes. These attributes use one line for each value. This change corrupts the value because MIIS does not preserve line order.

For example, a text field in Lotus Notes contains an address that resembles the following:

123 Main Street


 * 201

Freehold, NJ

98107

After you import the text field in MIIS, the address may appear in the following order:


 * 201

98107

123 Main Street

Freehold, NJ

The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, about the performance or reliability of these products.

Keywords: kbssl kbexpertiseadvanced kbdirectory kbuser kbimport kbdigitalcertificates kbfix kbbug kbhotfixserver kbqfe kbmiis22sp1fix KB927629

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.