Lotus Notes Index Update Does Not Work with Security Enabled (289114)

SYMPTOMS

An index update on a Lotus Notes content source that is configured to honor security may stop working immediately, and an "Update failed" error message may be displayed in the content source's folder.

When you view the detailed log, the following error message is displayed:

Error fetching URL, (80040daa - The security descriptor for this document only contained built-in access control entries. The built-in ACEs have to be removed because they won't be valid for this document during queries.)

CAUSE

After you configure security mapping on your Lotus Notes server and index a Lotus Notes database, this issue can occur if the default security setting is "no access;" SharePoint Portal Server cannot resolve Windows domain accounts to Lotus Notes IDs.

RESOLUTION

To resolve this issue, determine which of the following configuration problems is causing the error message:

Entries in the Access Control List (ACL) for the database that contains the security mapping view have a User Type of unspecified. User accounts must be mapped to a specific User Type.

To resolve this issue, either manually change the User Type for each ACL entry, or configure Lotus Notes to resolve unspecified entries to known User Types; click Advanced on the ACL, and then click Look up User Types for Unspecified Users.
Duplicate entries exist in one or both of the columns in the security mapping view that you are using. If there are duplicate entries for either Windows domain accounts or Lotus Notes user names, SharePoint Portal Server cannot resolve user names.

To resolve this issue, make sure that no duplicate entries exist in the security mapping view that you are using.