problems recertifying users

[tenntitans]

we have inherited a poorly managed lotus notes server with a database and mail functions. it seems that all our users certificates are set to expire. we have set the clock back to buy us some time but we need to figure this puppy out.

we have the general certification process down but for some reason when we recertify users they have access to the database but not to the email. do you have to recertify two seperate files? is there a way to tell the server not time expire any certificates for 20 more years?

thanks for any help.

 

[geier]

Regarding your questions:
1. There is no way to tell the server not to expire any certificates that already exist - when you register new users you can certify them for a longer timespan (we use 50 years), but the old users must be recertified for this to take effect.
2. You don't have to recertify two separate files - you go to the person document in the NAB and recertify. I assume that your recertification process didn't complete successfully. Did the users accept their new certificate (normally they get a message that they have been recertified)? The reason why they still have access to the database could be because of the ACL-Settings of that database (perhaps: Default is Reader)

 

[geier]

Sorry, I did tell you something wrong in my first reply: The users don't get a prompt that they have been recertified which they must accept - they get the promt only when they are renamed or move within the organisation and therefore get a different certifier ID. In your case this doesn't apply as you recertifiy them with the original certifer-ID.

 

[tenntitans]

thanks for the reply. i figured it out. there were about 6 different certifier id files that i could use to recertify people. once i figured that out then it was just a matter of finding the correct one.

like i said this thing has really gotten out of hand.

thanks again for the help.