Make sure the SSL cert matches the URL that you are using, so:

https://myoutlookserver.com

SSL Issued to = myoutlookserver.com

​

Hello!

Certificate correct, session ovveride rule created.

But have error, wrong auth type....where is my mistake?

Have you managed to locate the IBM_Mail_Sync logs on the client?

They will so you if there are any errors and what they are.  This should help:

http://www.ibm.com/support/knowledgecenter/SSKTMJ_9.0.1/admin_imsmo/app_troubleshoot_adm.html

Take a look in c:\users\user_name\AppData\Local\Temp\IBM_Mail_Sync

10-06-2016 15:15:43,tid1,error,/traveler Connection failed as Invalid Authenticaion method on server
10-06-2016 15:15:45,tid1,error,Невозможно разрешить удаленное имя: 'api' (cannot resolve remote name 'api')
10-06-2016 15:15:45,tid1,error,/freebusy Connection failed with the exception:error

See if the REST api is available on your server.  Got to the url:

https://myoutlookserver.com/api

You should see something like:

{
 "services":[
   {
     "name":"FreeBusy",
     "enabled":true,
     "version":"9.0.1",
     "href":"\/api\/freebusy"
   },
   {
     "name":"Mail",
     "enabled":true,
     "version":"9.0.1",
     "href":"\/api\/mail"
   },
   {
     "name":"TravelerAdmin",
     "enabled":true,
     "version":"9.0.1.14",
     "href":"\/api\/traveler"
   },
   {
     "name":"Data",
     "enabled":false,
     "version":"9.0.1",
     "href":"\/api\/data"
   },
   {
     "name":"Calendar",
     "enabled":false,
     "version":"9.0.1",
     "href":"\/api\/calendar"
   },
   {
     "name":"Core",
     "enabled":true,
     "version":"9.0.1",
     "href":"\/api\/core"
   }
 ]
}

If not, enable them:

http://www.ibm.com/support/knowledgecenter/SSKTMJ_9.0.1/admin_imsmo/adm_enable_rest.html

{
  "services":[
    {
      "name":"FreeBusy",
      "enabled":true,
      "version":"9.0.1",
      "href":"\/api\/freebusy"
    },
    {
      "name":"TravelerAdmin",
      "enabled":true,
      "version":"9.0.1.14",
      "href":"\/api\/traveler"
    },
    {
      "name":"Mail",
      "enabled":true,
      "version":"9.0.1",
      "href":"\/api\/mail"
    },
    {
      "name":"Data",
      "enabled":false,
      "version":"9.0.1",
      "href":"\/api\/data"
    },
    {
      "name":"Calendar",
      "enabled":false,
      "version":"9.0.1",
      "href":"\/api\/calendar"
    },
    {
      "name":"Core",
      "enabled":true,
      "version":"9.0.1",
      "href":"\/api\/core"
    }
  ]
}

Yes, i can login and see standart traveler page

Are you able to log in with the user name and password via a web browser?

https://myoutlookserver.com/traveler

I just wanted to check.  Your mail file is on the server too?

No errors on the Domino console?

Enable traveler debugging for the connectivity problem:

http://www.ibm.com/support/knowledgecenter/SSYRPW_9.0.1/UserConnectivityProblems.html

Thk for answer!

Do you see standart page after open url myserver.com/traveler?

Or you see this:

{
    "apiversion": "1.2.0",
    "environment": "on-premises",
    "links": [
        {
            "description": "List of devices.",
            "href": "\/api\/traveler\/devices\/",
            "rel": "devices"
        },
        {
            "description": "List of devices with security information.",
            "href": "\/api\/traveler\/devices\/security",
            "rel": "device-security"
        },
        {
            "description": "List of traveler users.",
            "href": "\/api\/traveler\/users\/",
            "rel": "users"
        },
        {
            "description": "List of devices for a traveler user.",
            "href": "\/api\/traveler\/users\/<URL and Base64 encoded username>\/devices\/",
            "rel": "user-devices"
        },
        {
            "description": "List of devices security information for a traveler user.",
            "href": "\/api\/traveler\/users\/<URL and Base64 encoded username>\/devices\/security",
            "rel": "user-devices-security"
        },
        {
            "description": "List of approved applications for attachment handlings.",
            "href": "\/api\/traveler\/approvedapps\/",
            "rel": "approvedApplications"
        }
    ],
    "mode": "standalone",
    "version": "9.0.1.14 Build 201609011843_40"
}

I see the standard Traveler page.

User Status for User Name/OU/ORG

Manage the Notes ID

Execute Commands

Report a Problem

After enable http debug, i see GET /traveler from user-agent IMSMO1.0.0

and return code 200, with html traveler page

The only thing I can think of to do now is to enable domlog.nsf on the web server to see if it points to any issues:

https://www.ibm.com/support/knowledgecenter/SSKTMJ_8.5.3/com.ibm.help.domino.admin85.doc/H_SETTING_UP_THE_DOMINO_WEB_SERVER_LOG_DOMLOGNSF_OVERVIEW.html

Other than that I think a PMR is in order.

You could try going to the mail file via the url in a browser:

This is for a user with an email address of test.user@mydomain.com

https://myoutlookserver.com/api/mail?owner=test.user%40mydomain.com

You should get the folder list from the mail file.

​

Yes, i see folder`s list.

website:

in domlog:

User Agent:    IMSMO1.0.0
Cookie:    
    
Request:    GET /traveler HTTP/1.0
Status:    200 OK (Request fulfilled)
    
Content Length:    3518 bytes
Content Type:    text/html;charset=UTF-8
Process Time:    47 ms
Error:    
    
Translated URI:    /traveler

I do have session authentication disabled though.

Thaks for help.

I think my problem in prevision traveler`s installation.

It cannot uninstall clean maybe. I try install on another server and all works.

So, on same server I do have now inotes and traveler? When enter address on web I got iNotes login page. Same iNotes address  I must enter on IMSMO client? Address must match with cert? It is.

I still can not connect

If it is an existing Traveler server you will need to install the IMSA server component as this has the additional capabilities to support Outlook.

However, I strongly suggest you DO NOT install IMSA server on an existing Traveler configuration as you will have difficultly administering both IMSA and Traveler.  It will work but it's a PITA if you want to change settings.

http://www.ibm.com/support/knowledgecenter/SSKTMJ_9.0.1/admin_imsmo/adm_config_addon_tab.html

Traveler is on separated server. This thing for outlook is on my secondary inotes server. Everything works fine. APIs are OK, when I try to login (only inotes address) I got prompt for username and password and login into iNotes, if I add /traveler and log in, I can see status of my devices (like real Traveler). On logs of IMSMO I can see errors like Could not create SSL/TLS secure channel. SSL is working fine, I also imported cert by guide. Still can not login in

I couldn't get it to work out of the box either as I was using a self-cert SSL key.  I had to import the root cert into windows and then it was okay.

Are you using a self-cert SSL?

Cert is trusted, created by GoDaddy. I already imported it into trusted certs. But what is strange is that I can see cert from mmc, but can't see it through Internet Options (from IE, Certs)

If you want to discount the SSL cert as the issue you could create a new Internet Site document with a new URL and a new self-cert and see if that one works.

I can try, but cert is working normaly, iNotes also works with that cert

You could enable the SSL debugging options to see if there is anything that shows up.

Debug_SSL_All=1

Thank you very much. From SSL debugging I saw there is a handshake error. SSLV3 was enabled, but TLS10 was disabled. I reenabled TLS1.0 not it works

Thank you

Now I have another issue. When I create meeting request and send from Outlook, invitees doesn't get request? Why

I can see busy time, rooms, resources etc

There is a requirement that all resources, people and groups have SMTP addresses configured.

Have you also configured LDAP for name resolution?

LDAP is configured good. I also set address book through LDAP, and search is working fine.

When I search for person I got CN and email format. When sending even I put CN or email, person does not get invitation?

Why?

That's normal.  May not change until one of the next FP when you can switch Domino to use SMTP addresses and not the Notes Names.

Set your Domino server to have verbose logging on the router (in the configuration document) and then resend.

I did and found this

Traveler: SEVERE  Outlook Test  Exception Thrown: Notes Exception(4811) : Unsupported action

What versions are you running?

I'm using 2.0.0.2 IMSA & IMSMO

Don't forget you MUST run Domino 9.0.1 FP6 HF310 (for Windows) as a minimum.  Install FP7 to be safe.

IMSA & IMSMO both on 2.0.0.2

Domino 9.0.1 FP7

Have a look in the Traveler & Outlook logs to see if there is anything in there.  You may need to increase the logging:

http://www.ibm.com/support/knowledgecenter/SSKTMJ_9.0.1/admin_imsmo/app_troubleshoot_adm.html