ru refering to any web databases?
Main Topics
Browse All TopicsHello,
I have some NSF files that are password protected. They are archives. Is there a way to use the Domino Designer to remove the password protection? If you know of a way to remove the protection using the designer please post a script for me.
I am using Designer version 5 and don't have a Domino Server.
Thanks,
John
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
If you are refering to a USER.ID that you are missing the password for, try either:
1) Using the password recovery feature, or
2) Retrieving the ID from archive
If you are refering to a lost password sed to authenticate via web browser, just change the HTTP Password field in the person's entry in the address book/directory. Same applies to mail clients other than Lotus Notes, including cell phones.
If you aer refering to a file that has the encryption option set, so that only a particular USER.ID file can unlock it, then see the first suggestion -- password recovery, or retrieve ID file from recovery archive.
Otherwise, I don't understand the question.
If it's not the password on the user id that you need: yes you could try designer, but its hard to assist when we can't view the design ourselves. It must have been created by a notes developer and must be some unusual code. Hard to predict where to look / what to look for.
Can to try the debugger, stepping through the code? Or is the design hidden?
OK. I will try to be clearer. I have a Lotus Notes .NSF file. When I try to open it up it says something like I am not authorized to open up the file. I have loaded Lotus Notes locally and am not connecting to a Domino Server. The NSF file was somebody's local archive. I don't have the user.id file for the NSF file.
Since I am trying to open up the file locally is there a way to get past the password? How would I attempt a password recovery if that is an option? I don't know if I am talking about the ACL. If there is a way to clear out the ACL or prevent from needing the user.id file and password then that is what I am looking for. I am not extremely familiar with Lotus Notes so hopefully, I have provided enough information to make my question more understandable.
Please let me know if you need more info.
Thanks,
J:\
Select database properties and change the Archive settings. And archive. And open the archive database. You can have the design. Before that, you should have Manager access to that database.
Check this link for full detaisl:
http://searchdomino.techta
If the database is setup with "Enforce consistent ACL across all replica's" option set, you can't access the database, unless you use an ID that is stored in the ACL and has sufficient access to the database.
That's just the way notes security works, if you don't have access on the server and the enforce consistent option is set, you don't have access to it locally. No matter what you do. If you create a new copy, this wouldn't help. Above suggestion is a way to unhide hidden design, but this is not your problem. Your problem is that you just are not an authorized user for the database.
Only solution is to get the id of a user with access to the database.
It is that Buddy... w32.Blaster.Worm. One of the worst worms i have seen so far.
Search wont work, copy paste wont work, recycle wont clear, no ms applications launch including IE, Word, Excel etc... Patch wont run from the site... too many things that did a whole lot of damage. it might take another couple days atleast since we have a lot of roaming users with the virus...
:-((
Don't know if you know this, but it's not that complicated to remove the virus :
Download the "Stinger" application from McAfee web site on un ininfected computer and put it on a floppy. Run the application and it will automatically remove the worm from your PC.
Make sure to install the security patch from Microsoft to prevent future infections. Virus DAT files for McAfee of 08/11/2003 should be applied if you use McAfee VirusScan (don't know the date for Norton and other scanners).
This also means that your firewall isn't very secure either, because the virus will try to access port 135 and this port should be closed by the firewall anyway :-)
Well, a worm uses a backdoor in your security system and will install itself without you having to do anything. This means it's activated from a remote computer.
A virus will only be activated when you yourself activate an infected file.
This is anyway how I think the difference is made, correct me if I'm wrong.
I'm not sure if you can do this. But in my environment I can copy a NSF file from the server to my local machine and it will give me access to it. It's either a flaw or something weird with our environment (I didn't set it up). But like I can take a users mail file that I don't have access to and once I've put it local it will open right up. Then I just put me in the ACL and FTP back wehre it goes. Hope that helps.
Worm=self spreading code, "traditionally" by exploiting the network, and a hole in the OS taht alows the code to install itself without permission via a network connection.
Virus = code that when run will automatically install ityself somewhere on the user's system in such a way that the computer always runs it when the computer starts
If you mix and match them, and possibly add "e-Mail" as an alternative to networking for worms, then most virii today are both virus and worm
You might look at this site.
http://solutions.nashcom.d
They have an ACL mod tool. I'm not sure if you have to have authority to the ACL to run it or not.
Hey
You do not have access to the database. The only way to do is to remove the "Enforce Consistent " , which can be done through Notes API"s and some few lines of lotusscript. There are documentations available related to "ACL_UNIFORM_ACCESS ". You can just change that value. This is not hacking as notes doesn't consider this as a security measure at all..
HTH
Partha
If you need the code to remove the enforce consistent acl , then do let me know, i will try it...
Hey
I wrote this code after some help from notes.net, and seeing some of the answers posted by nblade and qwaletee...
There will be minor glitches but the initial functionality is achieved
First of all create a form and put a button .. In the click event of the button put this code
On Error Goto partha
Dim session As New notessession
Dim db As notesdatabase
Set db = session.currentdatabase
Dim rc As Long
Dim hDB As Long
Dim memhandle As Long
Dim memPtr As Long
Dim memLen As Long
Dim hNT As Long
Dim getDatabaseName As String
getDatabaseName = Inputbox$ ( "Enter the path:",_
"Enforce consistent access", "" )
If getDatabaseName = "" Then Exit Sub
ret = NSFDbOpen ( getDatabaseName, hdb )
If (ret <> 0) Then
Exit Sub
End If
Msgbox "comign here"
Dim retcod As Integer
Dim hACL As Long
ret = NSFDbReadACL ( hdb&, hACL& )
If (ret <> 0) Then Goto Partha
ret = ACLGetFlags ( hACL&, flags& )
If (ret <> 0) Then Goto Partha
Newflag = flags& And (Not ACL_UNIFORM_ACCESS)
ret = ACLSetFlags ( hACL&, Newflag )
If (ret <> 0) Then Goto Partha
ret = NSFDbStoreACL ( hdb&, hACL&, 0&, 0 )
If (ret <> 0) Then Goto Partha
ret = OSMemFree ( hACL& )
If (ret <> 0) Then Goto Partha
NSFDbClose hDB
Msgbox "coming uptil the end"
Exit Sub
Partha:
If hDB <> 0 Then
NSFDbClose hDB
Exit Sub
End If
In the declaration section
Declare Private Function ACLGetFlags Lib "nNotes" Alias "ACLGetFlags" (_
Byval hACL As Long,_
Flags As Long )_
As Integer
Declare Private Function ACLSetFlags Lib "nNotes" Alias "ACLSetFlags" (_
Byval hACL As Long,_
Byval Flags As Long )_
As Integer
Declare Private Function NSFDbStoreACL Lib "nNotes" Alias "NSFDbStoreACL" (_
Byval dbhandle As Long,_
Byval hACL As Long,_
Byval objid As Long,_
Byval meth As Integer ) _
As Integer
Declare Private Function OSMemFree Lib "nNotes" Alias "OSMemFree" (_
Byval hmem As Long )_
As Integer
Declare Private Function NSFDbClose Lib "nNotes" Alias "NSFDbClose" (_
Byval dbhandle As Long )_
As Integer
Declare Private Function OSLoadString Lib "NLib.DLL" (_
Byval hmod As Long,_
Byval coderr As Integer,_
Byval liberr As String, _
Byval lgbuf As Integer ) As Integer
In the options section put this
Const ACL_UNIFORM_ACCESS = &h00000001
Const ERR_MASK = &h3FFF
When you click on the button, it will ask for the database in local. You just need to give the database name, i.e if it is found in c:\lotus\notes\data\test.n
just give test.nsf
it will do the remaining stuff
HTH
Partha
Can you place the database on an ND6 server. We're still on R5 (so, I cannot attest to this), but I saw a new setting at LotusSphere where ND6 supports hierarchical definition of server administrators (wish I could remember the exact name) -- the higher you are up the security tree, the more you can do. Anyway, top level (or near-top) administrators on the server were able to manage any database -- regardless of the database ACL. I'm not sure if you would be able to open the database directly, but you would be able to (re)set the ACL, and give yourself the rights.
I'd love to see comments from the experts on this option... Does heirarchical adminitration really work? Am I missing something?
In ND6 there is a new access level called "Full Access Administrator". This is a really interesting feature. It would be interesting to see if it would work in this instance. I just did a test with a database that I was locked out of and replicated to an R6 server. As a "Full Access Administrator" I was able to access the database that I was locked out of.
This seems to be a very cool feature for administrators, but REALLY NEEDS TO BE TIGHTLY CONTROLLED! It really seems to give anyone with this access level god rights to any database.
Quote from "Young Frankenstein":
"THIS COULD WORk!"
HS
jhieb,
Still if you face opening the archive mail file, there is a tool in Sandbox called aclsetter, using that
you could add your-self as a manager to the database and open the database locally, but for
using that you need to have atleast a test domino server and sign the utility database using the
server's id. Let me know whether you could able to open the db
MTN
Hello everyone,
Thanks for hanging in there. I am still putting out fires and I just hired a new person. Hopefully, I can catch up on this question soon. I promise to give an A :-)
While on the same topic, would I be able to clear the ACL (or remove the security requirements) and make this NSF file a person's default NSF file? I know, ask a different way. Hmmm. If I created a dummy Domino server and a user account, could I make one of these NSF files the default NSF file for that user when he or she logs in? First, of course, I need to clear out the ACL or whatever so I can get into it. If that works, then I would like to assign the NSF file to a user account without them having to logon and changing databases. It would sure be easier if I knew Domino/Lotus more. Sorry for the fragmented question.
Thanks,
J:\
Why would you want to do that?
Anyway, go to http://openntf.org and find theproject named ACLHelp. Download the files for your platform (it is available for a number of Domino server operating systems, including Windows and Solaris). Place the executable in your server's Domino program directory, and type LOAD ACLHELP at the console.
This will allow you to adjuts the ACL any way you want. You will have to se the special option for overwriting protected ACLs (i.e., enforce consistent).
Once you do that, whoever you addded to the ACL will be able to get in. No special test server needed.
But I don't see why you would want to make it the "default database" for anyone. I assume you mean, "make it someone's mail file."
Sorry I took so long in accepting this answer. I have been chasing fires, training new people, and haven't even had a chance to validate this answer. But, it looks like it is pointing me in the right direction. Rather than being rude and ignoring the help I will accept the answer and hope I can ask you more questions about it if I have any.
Thanks,
John
Business Accounts
Answer for Membership
by: p_parthaPosted on 2003-08-13 at 19:59:28ID: 9143631
What do you mean by password protected. Notes does not provide a way to put a password on a database
If you are talking abt ACL, then pls be clear
Partha