We use the Domino redirect [url] to direct to users to different web pages.
One of our systems handles the Athens devolved authentication used many by UK Universities to provide access to journal subscriptions to students off-campus.
Athens basically works by a set of redirects and can be used by users either pre journal search or post. If they choose not to pre-authenticate. When a user accesses a journal they’re directed to Athen’s login page. They can then identify their host institution. At this point a series of redirects takes place.
Basically Athens sends a long URL to a Java agent on Domino. This url has a long MD5 session hash and information to pass back to Athens so that it can then direct the user to the correct page on publisher’s website.
We process the hash, validate it and then using a private key create a new hash that includes information about the user such as a unique id number and any permission sets that apply to them.
Today, it stopped working.
A publisher recently restructured their website and this created much longer url hashes. (2200 characters long)
Every time the agent was called from the Athens, Domino generated a http error – ‘Buffer Overflow’.
After some debugging. We identified that the error was generated by the in-built Domino redirect. It appears that there is a 2048 character limit on Java redirects.
The solution is simple to implement. You just need to return url string as part of the header via the http ‘Location’. But it’s odd that Domino will accept 4kb’s long URLs but less for redirects.
We use a Google Search Appliance to index our Domino websites. We use Google’s OneBox module to execute FT searches to return results from a database we don’t want Google to index (basically 80,000 journal records we don’t want to be counted against our license total).
Yesterday we upgraded our Search Appliance to the latest version of Google’s software (6.2.0.G14). About an hour after switching it on, one of our Domino servers was hit by a sustained denial of service. The Agent called by the Google OneBox module had saturated all our HTTP threads. The Google box was making continuous requests to the search agent at a rate of nearly 200,000 per hour. The odd thing was, Google’s OneBox module passes across the end-user’s IP address as part of the search query and all requests were coming from 216.239.43.1 – a Google IP address.
It appears that there’s a known issue with the OneBox module that can cause this. (Bug report #2368523). Google immediately applied the patch, and after an hour the requests had stopped.
If you intend to upgrade to 6.2. I suggest you remove all OneBox modules from your front-ends before upgrading
So related to this problem, I find it easy to create a DOS on a Domino server. Calling any agent that takes a second to return results continuously creates a DOS (it might simply be a case of holding F5). Our server’s are set up as per Lotus’s recommendations. But does anyone have any tips for optimising the Domino http stack (Solaris) to avoid DOS?
There’s going to be a lot of comment on the iPad and it’s capabilities. I thought I’d take a look at it from a ‘Higher Education’ perspective.
The ‘tablet’ form factor is ideally suited to education. Ever since Microsoft released the first Tablet PC it’s been clear to many in education that this interface was the answer to many of our needs. Unfortunately, Windows and the applications it runs, has never fulfilled the promise. Maybe Apple can provide us with the answer.
The Student Perspective
Laptop usage in Universities has been growing exponentially. Most Universities provide students with access to a wide range of internet based systems and resources, such as email, learning environments, e-books, journals, videos, podcasts etc, along with the wireless infrastructure to enable students to use their own laptop throughout campus. So laptop usage at my University has increased significantly over the last few years.
My first reaction to the iPad was the device when combined with the iBook store and iTunesU, would make the product attractive to Education. But now I’ve had time to think about it, I’m not sure if Apple has developed a product that will (just now) make massive inroads into (UK) Higher Education.
From a design perspective, it looks like Apple have nailed the design. It looks fantastic and it’s core functionality looks great. I can imagine our students finding the portability and user interface perfect for daily use. Whether it’s taking notes in class, using it in group work or even as a data recorder in a lab, the form factor and the instant access to research materials and our core systems through Safari is perfect in so many ways.
But for me, there’s some killer issues that might stop wide-spread adoption.
Often students in the UK do not need to buy many books. Work for example, provides dozens of copies of ‘core texts’ and provides access to over 50,000 e-books. When students are required to buy texts, they shop around or buy second hand copies from students who studied last year. Apple appear to be positioning the device as the front-end to purchasable content. The iBook store will undoubtably be a massive success, but it’s design appears to be centred around content you intend to keep. Let’s face it, few students will find the ‘4th Edition of Introduction to Thermodynamics’ such an exciting page turner that they will want to keep it. Many in education we’re hoping that Apple’s iBook store would adopt ‘micro payments’ allowing students to purchase just the chapters they need, or even ‘rent’ the book for short periods of time.
In terms of iTunesU, we’re not sure our students use it. There’s some fantastic content on iTunesU, but our academics are still quite traditional. Many still believe that they have to stand in front of a class imparting knowledge through a set of Powerpoint slides. Few as yet, would consider requiring students to consume iTunesU content outside of class so that they can concentrate on exploring ‘understanding’ during face to face time. We know that our lecturers are not unique. UK Higher Education has wasted millions on unused ‘reusable’ content. So I don’t think the ease of access to iTunesU will help sell the product.
There’s also the issue that the iPad is not a ‘computer’. Many courses require specialist software, such as Photoshop, or CAD packages. Also since Microsoft has traditionally supported Universities with relatively cheap campus licenses, and students with cheap Office licenses, Office has been a core desktop application for over a decade. The iPad doesn’t support Office and I can’t see Microsoft developing an iPad version. There’s also the issue that students wouldn’t be able to access all the content we provide in ‘non Apple’ formats, such as Windows media, Real Video and Flash. So it’s likely a student would still require a laptop.
Although the base price seems reasonable, is it cheap enough for students to buy it alongside a laptop? Apple’s UK prices tend to be around $1.25 to a £. If that’s the case, the base product will cost £400. Students can get 15% discount (as can I – probably the biggest advantage of working at a Uni!). So the UK price to students will probably be around £340. Is this cheap enough to purchase as a second computer?
Staff Perspective
From a staff perspective, the iPad seems to be wide of the mark. All our academic staff have laptops so have the freedom to carry their work round with them. It’s unlikely that we would look to replace staff’s laptops with an iPad. But we already have a definite need for a good tablet, maybe in addition to their main laptop, because University staff have to mark assignments. Something as simple as marking paper submissions has proven to be significantly slower, when staff have to mark electronically. Last year we accepted over 80,000 electronic submissions, this year’s it’s likely to be double that amount. Within 5 years, I think all submissions will be electronic. So we’re desperate for a product with an interface that streamlines the marking workflow.
Windows Tablet PCs provide almost everything we require. But because of a number of small problems, they just don’t work. For example, I’ve not found a single member of staff who likes the software keyboard on Windows. So of most our staff use ‘hybrid’ laptop/tablet PCs. These tend to be underpowered, with poor battery life and awful ergonomics. So staff end up being tied to a desk. There’s also the issue that applications are rarely design to work with a touch based interface, so tend to be difficult to use when you are using a Tablet PC.
It’s clear the interface or iPad is excellent. It was designed from the ground up as touch based operating system. The ergonomics of the product look almost perfect. The size and weight should allow staff to use the product almost anywhere. As always with Apple products, the screen looks fantastic. So staff should be able to sit and mark where ever is convenient.
It looks like iLife has also been revamped with ‘touch’ as the main interface. But the lack of pen interface is disappointing. I’ve always thought that a pen based interface eases the transition of staff from paper to electronic. But I’m starting to think that this may not actually be needed. The iPad’s software keyboard looks fantastic and most iPhone users quickly adjust to typing on it’s tiny keyboard, so the iPad’s big virtual keyboard shouldn’t be a problem. Most staff use the pen to add comments next to student’s mistakes and the iPhone’s cut and paste mechanism demonstrates how easy it is to highlight sections with your finger. So adding inline comments should be pretty easy.
But there’s one core feature that the first generation iPad is missing – the web camera. Audio visual feedback is becoming a common method for staff to provide richer, personalised feedback to students. Being unable to record video limits how staff could use the iPad and it seem like Apple have intentionally tried to minimise the ‘first gen’ cost. I would expect a camera to appear on the second generation product.
So it’s a bit of a mixed bag really. I’m not sure it will appeal to students and the first gen iPad seems to be missing some core features for use by our staff.
I read a comment earlier that the iPad doesn’t know what it wants to be and although I can see their point, I don’t think it’s true. Yes, it appears like it might be targeted at business and education but I think Apple have a very clear idea of what they want the product to do. They want it to kill off the Kindle and for it to be a consumer device that acts as a front end to their increasing range of stores. To make it easier for consumers to have instant access to digital content, content that Apple control the distribution of. If it finds a place in business or education, then that will be a bonus
Mobile Roadie looks like an interesting service that helps people create iPhone apps.It appears to be aimed towards bands, but it’s just been used for ‘Le Web‘ conference. (Supports Twitter, uSteam, Comments, News etc).
I grew up in Middlesbrough, a small town in the North East of England. It’s one of those ’salt of the earth’ towns. To outsiders it doesn’t appear to have much going for it. But in general the people are brilliant and they have a pride in the area that you don’t find in many of the more affluent areas of the UK.
Teesside in 1900
Like many industrial parts of the UK, it’s been in decline since the 60s, as successive governments have stood by and watch it’s industries die. Teesside was built on steel, shipbuilding, and petrochemicals, and had a rich industrial heritage for example steel from Teesside has been used in construction throughout the world. (Sydney Harbour Bridge is built with Teesside steel and even the new Wembley Arch is Teesside steel).
Wembley Arch
Today a critical blow has been struck against the area. Corus ‘mothballed’ their steel plant at Redcar ending 150 years of Teesside steel production. Closing a plant that until a bunch of useless bankers caused a world recession, was profitable making high quality specialist steel, but now is yet another one of their victims.
Many on Teesside rightly feel that they should be bailed out. They didn’t cause the recession and unlike the banks, used to make real money for the country. Also Teesside, unlike the South of England, did not experience many of the benefits of the ‘boom’ times of the last 30 years. The only new businesses on Teesside have been shops and call centres. So while the government is happy to bail out those that created the problem, 1700 honest hardworking Teessiders now face a bleak New Year. This cannot be right.
Sorry, for posting a job advert. But it might be useful to any out of work Domino developers.
2 x Applications and Development Consultant (with a focus on Learning Technology)
We are looking for experienced web-based software development professionals with substantial programming experience (preferably with expertise in Lotus Domino, Lotuscript, Java but additional languages such as .NET would be of interest) to join our web and learning applications team; developing and supporting the University’s intranet and on-line learning and business support environments.
(I meant to post this last week but didn’t get round to it)
It’s interesting to read the reaction to the abstract rejections for Lotusphere. I’m sure some of the rejected ideas would make great presentations. But I’m not going to go into the pros and cons of the abstract selection process, that’s been covered by many recent blog entries.
After I had my abstract rejected last year, I vowed that I’d blog about my particular area of interest, accessibility. After sitting through numerous XPage presentations, from both IBM and developers, I was concerned with the apparent lack of concern about accessibility issues XPages introduced. I came back vowing that this area was too important to wait for the next Lotusphere and vowed to blog about improving the accessibility of Domino web apps.
Guess what, I’ve done nothing about it. Yes, I have many excuses:
My SysAdmin won’t allow me to move our live web systems to a ‘point zero’ release. Our Domino based intranet is too heavily used for it to collapse. It’s expected to work 24/7, so upgrade windows are limited. A server crashing when there are hundreds of assignments due in, tends to create support issues, both technical and academic. So, so far, I haven’t designed an Xpage ‘in anger’.
‘I’ve been busy’ – If I’ve got time to write a blog entry, it means I’ve got time to be adding extra functionality!
Like many, we’ve been going through a restructuring. I’m now one member of my team short and another is leaving at the end of January (so unless my BOF is selected, it’s looking very unlikely that I’ll be allowed to go to Lotusphere). So my focus has naturally been on surviving the upheaval
etc
But the reality is, I obviously didn’t think my point of view was important enough to waste my own time on it, and if I don’t think it’s important why should I expect other people who are paying good money to be interested in my sessions?
Working for a University and having started out on the research side, there’s an expectation that you present at the conferences . I still find it uncomfortable when I’m not ‘paying my way’ by presenting, especially for an expensive overseas conference. But this year I didn’t submit an abstract for the main session. I have to admit I hadn’t realised that presenters get their fees paid, otherwise, I would have. But re-reading my abstract from last year, it was obvious I knocked it together in a rush and although I think a presentation on the subject is needed, I think I need to blog about it first before getting annoyed that no one is interested.
(I did submit a BOF. Since they’re selected by attendees, I figured that if it is selected, then there’s a obviously some people interested – and that might be a good way of starting some sort of informal network to build towards a presentation in 2011)
The ‘in crowd’
It’s easy for people who’ve been to more than one Lotusphere, to look at the return presenters as the ‘in crowd’ and forget that most are there because they have been consistently good. So I thought I’d look back at the photos of my first Lotusphere in 2008. I remember capturing a few of ‘the stars’ of my first Lotusphere. At the time, the only Lotus related websites I was aware off, were Notes.Net, CodeStore and OpenNTF. So I was unaware who I should see as ’stars’. So who stood out? (Other than the violinist at the opening session)
Stars of 2008
Bob Balaban was also in my photo collection but didn’t make it due to the fact that he was wearing one of his shirts that confuses cameras. It’s interesting looking back, how many ‘high profile’ people, impessed without me knowing they should!
With the release of 8.5.1 I thought I’d make the switch. So far I’ve been impressed. I’ve used 8.5 to play with XPages but I’ve not used it as my main development tool, so I’ve haven’t updated existing apps. Today I’ve been updating a 7 app and wanted to add some ‘computed text’ but couldn’t find it under the ‘create’ menu. After much hair pulling and unhelpful ‘help’ files telling me it’s still under ‘create’. I’ve (finally) found that the menus default to ’simple’ menus and you have to switch on ‘advanced menus’. (‘View‘ -> ‘Advanced menus‘).
We’ve just generated our yearly overview stats for our Domino-based Learning Environment. Our Learning Environment is firmly embedded within the University’s learning and teaching so it’s heavily used. Some of the figures are:
Daily Student Logins: 13,000
Daily Staff Logins: 1300
Data Transferred: 14TB
Average Daily Transfer: 46GB
Page Requests: 300,000,000
2008/9 Module Websites: 4000 (over 20,000+ in total)
Discussions Topics: 24,000
Teaching Resources: 120,000
Assignment submissions: 80,000
Quizzes attempted: 33,000
Wiki Pages: 4000
Module-level managed groups: 3000+
Group Discussions: 12,000
Wiki pages: 4700
Shared Files: 13,000
Blog Entries: 5400
Student Created & Managed Groups: 1400
We started developing our in house learning environment in 2000. It’s completely web based and the only Notes clients are our development and admin clients. It’s linked into our student record system so modules are automatically created and student registered on them.
Even back in 2000, those ‘in the know’ (i.e. Computer Science lecturers) argued that the technology wouldn’t scale and would be abandoned by IBM. However, we found the technology a good fit for our team’s skill-base which was more ‘learning technologies’ based (i.e. Director, VB etc). I think after nearly 10 years, we can say Domino does scale!
I’ve finally persuaded work that I need a Mac for my replacement computer. I’ve always been given RM ‘workstations’ (that have to last 4 years) that are really just fairly standard desktops with a bit extra memory and slightly better graphics card. From my point of view, they are underpowered for development work. Not bad machines, but more suited to general office tasks. But working for a University, you sometimes have to accept that cloth has to be cut to fit.
After two years of moaning about how underpowered my work computer is compared to my own Mac Pro (and taking my MacBook Pro to most meetings). They’ve finally given in and bought me a Mac Pro. They even threw in a few surprises such as a gorgeous Apple Cinema display and 2Tb of hard disk space. I owe somebody a very big favour.
Unfortunately I still need to run Windows for the odd piece of software such as Domino Designer and Admin clients, Real Helix video encoder, and IE, so I can’t go 100% Mac. Maybe Lotus will surprise us by announcing a Mac based Design client at Lotusphere 2010. Ok, maybe not. But I’m on a roll, so I might as well wish for it while my luck’s holding.
Cinema Display Unboxing
So simple, but so effective. It oozes class.
Even Apple’s packing is ‘designed’.
Shinny surface.
As a design graduate. The idea of creating a consumer product out of machined aluminium would have been a dream because we such designs would be rejected ‘as no company would accept the costs’. Than god for Apple. They allow their designers to create their dreams.
This is what the rest of the office will be starting at
Nice cable tidy
Built-in power supply for MacBooks and uses the new ‘Display Port’ connector. Not sure how you use it with older MacBook and Mac Pro models.
Mac Pro unboxing
Mac Pro box. Simple and effective. You know exactly what you expect to see when you open the box.
I’m a big fan of the Apple aluminium keyboards. For me, ‘laptop’ type keys work much better than the old fashioned keys. (Those the Apple mighty mouse is still a design disaster)
Our Domino servers (7.03) run on Solaris and we’ve recently moved them onto new hardware. As part of the move, they have been moved in Solaris zones. Unfortunately since the changes we’ve experienced a serious issue that appears to be related to server permissions. Users are loosing the ability to upload files as it appears that the server is rewriting the permissions to the ID file so root access is required. Effectively the server is loosing access to it’s own ID file. So far we’ve been unable to identify why this happens.
We all experience issues with all software and Domino / Notes is not immune but it’s really infuriating when two issues strike at once.
We’ve been moving server’s around and my Design (8.02) client stopped replicating. Not in the normal way, an invalid connection document, but one where any replication event caused an immediate NSD. After much hair pulling – and at my age that’s something you want to avoid in case it doesn’t grow back – the only solution appears to be a complete reinstall.
The second more serious issue was that one of our servers lost permissions to it’s own ID file. Although HTTP continued to serve files anything requiring the ID file stopped functioning. A quick chmod solved the problem and all functionality returned. But this is the first live server we’ve run in a Solaris zone and the how zones function is beyond my basic unix skills. Hopefully this is a simple unix configuration issue and not some fundamental problem with domino on solaris (it wouldn’t be the first time we’ve run into solaris issues). One for our Domino admin to sort out tomorrow.
We have a facility for staff that allows them to download an Excel marking scheme, enter student marks and then to upload it as a tab delimited file (or xml file) back into the system. Last night a member of staff using the facility crashed both servers in our cluster.
On further inspection (and a lot of development server crashes!) I finally narrowed the problem down to a single line of code
Line Input #fileID, strLine
On further investigation it appears that the user exported their marking scheme from Excel using the ‘Unicode (.txt)’ rather than ‘ Text (.txt)’ and it’s the import of Unicode that was causing Domino to crash. My quick solution to stop the server crash is to use ‘Dos2Unix’ convert the file before importing. Although it seems to alter the format so that it no long imports correctly, it’s stopped the server from crashing.
A word of warning if you use a Google Search Appliance to index your Domino content. The latest version of the appliance software (5.2.0.G32) has a bug which means it is now case sensitive when checking for Domino rewrite and ignore rules. For example it will only exclude agents if they are correctly capitalised. i.e OpenAgent. If you have agents which might cause you some problems (say agents that delete content or send emails), make sure you add ignore statements to the exception lists before starting the index. Luckily our Google box runs with ’student’ access so couldn’t do any damage!
I’ve still got document locking in test. New ‘features’ keep cropping up so I’ve held off running the design update!
The latest issue is that databases with locking enabled are generating email messages warning users when their messages have generated a conflict. So far I’ve been unable to stop these emails.
There are a few comments reporting the same issue on the support forums and there’s an IBM reply stating that it’s been recorded as a bug – but this feature has been around since V6 and it’s still in 7.03 and I’m not sure it is a bug, more a helpful feature without a facility to disable it.
I’d prefer to find a solution to this before I roll this out to our module websites – there are 4000 of them (per year) and they’re heavily used an save conflicts do happen. I suspect cryptic messages to our students about ‘Databases….’ might be confusing.
I’ve just bought a new 17” Macbook Pro. My 2006 15” MacBook Pro had started to show it’s age.
First impressions? Well it’s a Mac, and we all know they are good at first impressions and this one is no different.
The unibody design gives is the laptop a solid feeling. The HD screen is bright and although this isn’t the first laptop that I’ve owned with a glossy screen, they are an acquired taste, so it’s worth checking out in store if you’re uncertain whether to pay extra for the matt screen.
The new touch pad takes a little bit of adjusting. I’m finding the extra multi-touch gestures a little bit annoying (I keep zooming instead of scrolling).
This laptop is much quieter and quicker than my 15” model. I hadn’t been sure about switching to the larger laptop. Previous 17” models were ‘big’ but this one though doesn’t feel much larger than my 15” and the extra screen real-estate is most welcome. I suspect it’s the rounded edges helps hide the ‘bulk’
My main reason for switching to the 17” was the larger battery. Apple claim it has an 8 hour battery life. Today, I’ve spent about 5 hours on various trains travelling to see Middlesbrough unexpectedly beat Liverpool. After five hours of using the battery is still reporting 35% charge and nearly 3 hours of life left. I haven’t been pushing it too hard and the screen’s brightness is switched down, but I’ve done a little bit of Domino development running in Fusion, replicating to the servers and testing via the trains’ (ropy) wireless. I’ve done some light word processing, answered some emails, general web browsing and downloaded and listened to a podcast, and written these blog entries.
I know Apple aren’t renowned for accurately quoting real-world battery life but it looks like I might get around 6-7 hours out of mine so I’m really pleased with this result. I usually use a EEE PC 901 on the trip but find I’m limited to very light work. This now gives me another option.
MacBook unboxing
Apple’s packaging keeps getting smaller and smaller. This isn’t much bigger than the laptop
There really isn’t much to this new ‘green’ packaging
New keyboard is based on the MacBook. If you’ve used a Macbook or one of Apple’s aluminium Mac Pro keyboards, then it’s basically the same. It’s nice to use, but the last gen’s silver keys are better. (Still the best keyboard on any laptop I’ve used)
The glossy screen – test drive one instore. Apple offer a matte version of the 17″ for an extra £30
I spent a pleasant Friday morning at a Google UK education event. Like many Universities we’re investigating how to provide services to our alumni and a common request from graduates is to keep their email address.
There are a number of options. Scale up our present Unix-based email. Implement a new email system. We use Exchange for staff. But implementing a Exchange for students and alumni would be too expensive. Alternative their is the hosted route.
Both Microsoft and Google offer hosted services free to Universities. I’m not sure if IBM is offering anything, if they are, they’ve never contacted us. Although email isn’t my area – I went along to look at the hosted apps service to consider how we might integrate some of these products into our current services.
Google make a very tempting offer, basically Google Apps, Talk, Video, Sites and Email for free. Ok nothing in life is free, but when they offer several GBs of email storage per student, it doesn’t take a great mathematician to work out that most (UK) University’s can’t offer this level of support. It just isn’t finically viable. So their offer is extremely tempting.
I suspect you’ve all played with Google Apps. They’re not as mature as any of the Office suites available but as an online collaborative tool they pretty decent.
Several Universities have already switched their services and the transition to Google was remarkably quick – usually taking less than six months from the point of deciding to investigate hosted services to roll-out.
I’m not sure if it’s worth the license for commercial organisations but for ‘free’ it’s a very good offering. If IBM don’t watch out, the entire education market will have moved to Microsoft or Google before they’ve even started.
A survey by WebAIM on how users of screen readers interact with web pages is worth a read. It gives a small insight into how screen reader users navigate around pages and some of the problems they face. The survey failed to clarify the term Web 2.0 so the survey hasn’t helped to understand if AJAX based sites disenfranchise partially sighted users but it does confirm some of the advice accessibility experts make. It also reinforces some of the point I tried to make to the Domino developers at Lotusphere about where the new XPage technology fails to meet basic accessibility criteria, namely that screen reader users use the page’s semantics to navigate around the page. A good practice that XPage authoring using the visual interface fails to support.
When html was originally specified it was intended to be a docuument markup language and the tags selected define the page’s content – headings, paragraphs, lists, etc. As web developers we all know this, it’s really basic stuff.
Since headings are more important than paragraphs, a significant percentage of screen reader users use headings to quickly navigate around sections of the page and this confirms the advice accessibility experts have been giving for years. Define a readable document and then style it to look like an application. XPages gets this fundamentally wrong and provides no visual tools to generate standard page markup, a glaring omission that no other editor that I’m aware off fails to include.
All’s not lost. If you want to develop a semantic page it’s just a case of switching to code view and you can add normal markup and it wouldn’t take much for Lotus to add some simple page editing tools.
Hopefully surveys like this help developers see how some simple changes to their pages can make page browsing easier for a small forgotten number of web users
I’m really glad Flickr has survived and grown from strength to strength.
For me, Flickr is the perfect ‘Web 2.0′ website. It doesn’t throw lots of rotating wait icons all over the place. It only uses dynamic features when they benefit the user and it’s inline editing is implemented perfectly.
Powerful but easy to use – I can’t give it a more glowing review than that.
Ok, I’ve been using Domino long enough to know that templates don’t do what you think they should do so I shouldn’t really be surprised.
I had a problem with document locking. Some documents couldn’t be edited because there were some temporary locks being set and my code didn’t unlock them. Okay, my code was at fault, I’d accidentally allowed temporary locks when the administration server was unavailable, but since our servers only get rebooted once a week about 2 in the morning and the documents in question were created during the day, I shouldn’t have been seeing temporary locks.
On further investigation it appears that reason temporary locks were being set was because there was no administration server set in the ACL. This was despite the fact I had set one in the template the database was created from.
I’ve never understood why some features are inherited at creation and others aren’t. If the tick option for document locking is inherited and designed to use the administration server to ensure locking in a cluster, is it wrong of me to think that this should also be inherited from the template?