Solved

Trust Signer keeps popping up for one user

Posted on 2010-09-16
13
1,484 Views
Last Modified: 2013-12-21
I created a database in Notes that basically has a purpose to track projects. When I let the users use it, it gave them a pop-up about trusting the signer, but once they choose to trust the signer they don't get that pop up anymore.

Now, one user always get that pop-up when he tried to create a project, even after he chose to trusting the developer over and over.

I just don't know where to start to troubleshoot this problem. Please advise.

Thank you
0
Comment
Question by:coronoahcoro
13 Comments
 
LVL 7

Accepted Solution

by:
DominoG earned 100 total points
ID: 33692226
The easiest/fastest way is to sign the database with the Server ID:

Open the Admin client and follow the instructions here:

http://www.nae.edu/help/help65_admin.nsf/2e73cbb2141acefa85256b8700688cea/391a698ff37f622485256dff004b41cd?OpenDocument

In step 4, choose:
Active Server's ID to sign using the ID of the server that stores the database or template.
0
 
LVL 10

Expert Comment

by:doninja
ID: 33693762
The user in question may not have manager access to their local address book to save the updated ECL when the select trust the user.

As above should solve issue long term.

Also look at Policies and Policy Settings documents within your directory as you can modify a default ECL that includes the developers ID and then have it update all machines next time they connect to the server.
0
 
LVL 2

Author Comment

by:coronoahcoro
ID: 33694629
The user has a manager access on his local address book. I haven't tried the other solution. I will give more updates later.
0
 
LVL 2

Author Comment

by:coronoahcoro
ID: 33704409
I haven't tried DominoG solution because no other user has this problem. So I took that user id file and open notes with that id file on the spare PC. I tried to create a new ticket and I didn't get Trust Signer notification.

So I came back to the user and asked him to make a change on the description because that will trigger the Send method that triggers the Trust Signer notification the last time. This time the notification didn't show up. He'll let met know when he needs to create a new ticket and get the notification again.

I'm not sure what else to test or what actually caused the problem.
0
 

Expert Comment

by:stevecassidy
ID: 33711333
The most likely cause has been mentioned - that the user didn't have write access to their local NAB to store the result of the "trust signer" action. Sometimes this can be for silly reasons - like for instance, the user is female and just got married, and therefore their name has changed. Other times it can be because your client-side antivirus has locked down the files, or that the data directory is in a different place than some other policy implementation is expecting and that cuts off the write access. The fact you got the problem to go away by using that same ID on another PC sugegsts strongly that it is a Windows security issue, not a Notes security issue.
0
Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

 
LVL 2

Author Comment

by:coronoahcoro
ID: 33799152
ok so I copied the current database, renamed it, and I created a test user. I signed the new database with server ID then using the test account I tried to create a new project but the Trust Signer window still come up the first time the test account use it.

Is that something to be expected even after I sign the database using the server ID?
0
 

Expert Comment

by:stevecassidy
ID: 33801110
on the same PC that has the problem, or on a different PC? We are consiering the *local* Names.nsf which can end up having different rights on divverent client PCs, in "disadvantaged" installs...
0
 
LVL 2

Author Comment

by:coronoahcoro
ID: 33801246
it's on different PC (spare/test PC). What I'm not sure is if I sign the database with server ID, should it prompt the user to trust the signer (the server) the first time they access database or not at all?

It prompts the user when the code is trying to run ReplaceItemValue method, Dblookup, and Send method. (which are all included as part of Save & Close button in the form).
0
 

Assisted Solution

by:stevecassidy
stevecassidy earned 50 total points
ID: 33803669
No; if the server and the user are in the same organisational unit or certifier tree then stuff that shares the same bit after the slash shouldn't require trust.

How about signing the database with the *user* ID that's causing the trouble, as an experiment?
0
 
LVL 2

Author Comment

by:coronoahcoro
ID: 33841876
I've signed the database with my UserID before and it required the user to authorize the action (only the first time).

About your first paragraph, how do I check if the server ID is on the same organizational unit?
0
 
LVL 46

Assisted Solution

by:Sjef Bosman
Sjef Bosman earned 25 total points
ID: 33890127
Read the paragraph "Where is the Execution Control List (ECL) stored and configured?" on this page:
http://www-01.ibm.com/support/docview.wss?uid=swg21091186
and there are some other interesting paragraphs as well.

What you could try is to close Notes, rename the desktop.dsk or .ndk, then restart Notes. The desktop will be re-created normally, and hopefully filled with the local databases. Let the user try with this new desktop to use your database. He'll get one message to accept the certificate, and that should be it.

Worth a try??
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

You’ve got a lotus Domino web server, and you have been told that “leverage browser caching” is a must do. This means that we have to tell the browser everywhere in the web to use cache. In other words, we set (and send) an expiration date in the HT…
Problem "Can you help me recover my changes?  I double-clicked the attachment, made changes, and then hit Save before closing it.  But when I try to re-open it, my changes are missing!"    Solution This solution opens the Outlook Secure Temp Fold…
Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now