February OpenNTF Webinar: What's New in Domino security in 12.0.1 and 12.0.2

Jesse Gallagher | 3 days ago | Comments
Daniel Nashed will discuss the enhancements in Domino security and Mail security  that have been introduced in versions 12.0.1 and 12.0.2 of the Domino server including SPF, DKIM, CScan, CertMgr, and OIDC.

There will also be an update to a new feature for Domino backup introduced in V12.0.2.

Our presenter will be Daniel Nashed, HCL Lifetime Ambassador, from Nash!com.

This webinar will take place on February 16th from 11:00 AM (New York time) to 12:30 PM.

To register for this webinar, go to https://attendee.gotowebinar.com/register/8306132377595815003

Notes error: Effective users of the saved agent and the saving agent must match

Graham Acres | 1 week ago | Comments

Graham here. I ran into the error on this Blog title while on a project and wanted to share the solution with the community.

Use Case

You need to automate a function that finds and disables scheduled agents in any number of databases on a target server. To make things complicated, you may have numerous Domino Domains that those servers live on. A key problem is that those scheduled agents are signed by a variety of IDs that are not the same as the signer of the agent you are writing that is running this processing. In fact, that is the specific problem.


If the signers match, the code works. If they don't, it is very likely that you will receive the error.


My agent is scheduled to run on an Admin server. The error happens when I call NotesAgent.Save() on the target agent.

Troubleshooting

NotesAgent in LotusScript and Agent in Java have more or less the same information in the Help database. We gravitated to the bottom of the page:


To save an agent from an agent that runs on a server, the executing agent must either: be signed by someone listed under "Run unrestricted methods and operations" in the saved agent's Server document in the Domino® Directory; be signed by someone listed under "Sign agents to run on behalf of someone else"; or must have the same effective user as the saved agent. The effective user may be the signer of an agent, the user listed under "Run on behalf of" in the agent properties, or the user invoking the agent if the agent is run from the Web the "Run as web user" agent property is in effect.


That's a lot to pull apart. We took this to mean that the signer of the executing agent be in the "Run Unrestricted" field of the Server document. It turned out that it was my ID that was the signer, and through nested Groups I was in fact in the field already. We tried putting my ID directly into the field. Still no luck.


Our next move was to go to HCL Support. It was a collective effort as they were able to confirm that there was only one place where that error message was generated. Some additional troubleshooting led to a few different tests that led to the solution.

The Solution

It turns out that the documentation is missing a key piece of information. It's not just the signer of the executing agent that needs to have the rights noted in the Help, but both signers! The target signer doesn't even need a Person document in the Directory. I was also able to confirm that being a member of a Group is fine if you are using the "Run unrestricted" field.


Note that my testing was on one server rather than across servers. My next test is to use two different servers. In this scenario I am not sure that the server document of the target server also needs to have the security fields updated.




January OpenNTF Webinar: Update Your Applications with Restyle and Bring them Everywhere with Nomad

Jesse Gallagher | 3 weeks ago | Comments
What is all the excitement regarding HCL Nomad and Domino Restyle? Find out more about HCL's Restyle and how it can bring a new user interface to your applications using the Notes client and Nomad on the web. In this webinar you will learn what Restyle is, see demos and learn how to use it to design better applications for the Notes client and Nomad Web. Next, learn more about Nomad and how it extends your Notes applications to the web browser, iOS, and Android. Learn how to optimize your applications for Nomad and how to setup your Domino server for Nomad.

Come see how Domino Restyle and Nomad can breathe new life into older Notes applications and the vision for future enhancements.

Our presenters will be Maureen Leland, M.E. Miller and Bob Sielken from HCL.

This webinar will take place on January 19th at 11:00 AM (New York time).

Click here to register for the webinar: https://register.gotowebinar.com/register/6786398400631466592