Trust Signer keeps popping up for one user

Posted on 2010-09-16
Last Modified: 2013-12-21
I created a database in Notes that basically has a purpose to track projects. When I let the users use it, it gave them a pop-up about trusting the signer, but once they choose to trust the signer they don't get that pop up anymore.

Now, one user always get that pop-up when he tried to create a project, even after he chose to trusting the developer over and over.

I just don't know where to start to troubleshoot this problem. Please advise.

Thank you
Question by:coronoahcoro

Accepted Solution

DominoG earned 100 total points
ID: 33692226
The easiest/fastest way is to sign the database with the Server ID:

Open the Admin client and follow the instructions here:

In step 4, choose:
Active Server's ID to sign using the ID of the server that stores the database or template.
LVL 10

Expert Comment

ID: 33693762
The user in question may not have manager access to their local address book to save the updated ECL when the select trust the user.

As above should solve issue long term.

Also look at Policies and Policy Settings documents within your directory as you can modify a default ECL that includes the developers ID and then have it update all machines next time they connect to the server.

Author Comment

ID: 33694629
The user has a manager access on his local address book. I haven't tried the other solution. I will give more updates later.
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!


Author Comment

ID: 33704409
I haven't tried DominoG solution because no other user has this problem. So I took that user id file and open notes with that id file on the spare PC. I tried to create a new ticket and I didn't get Trust Signer notification.

So I came back to the user and asked him to make a change on the description because that will trigger the Send method that triggers the Trust Signer notification the last time. This time the notification didn't show up. He'll let met know when he needs to create a new ticket and get the notification again.

I'm not sure what else to test or what actually caused the problem.

Expert Comment

ID: 33711333
The most likely cause has been mentioned - that the user didn't have write access to their local NAB to store the result of the "trust signer" action. Sometimes this can be for silly reasons - like for instance, the user is female and just got married, and therefore their name has changed. Other times it can be because your client-side antivirus has locked down the files, or that the data directory is in a different place than some other policy implementation is expecting and that cuts off the write access. The fact you got the problem to go away by using that same ID on another PC sugegsts strongly that it is a Windows security issue, not a Notes security issue.

Author Comment

ID: 33799152
ok so I copied the current database, renamed it, and I created a test user. I signed the new database with server ID then using the test account I tried to create a new project but the Trust Signer window still come up the first time the test account use it.

Is that something to be expected even after I sign the database using the server ID?

Expert Comment

ID: 33801110
on the same PC that has the problem, or on a different PC? We are consiering the *local* Names.nsf which can end up having different rights on divverent client PCs, in "disadvantaged" installs...

Author Comment

ID: 33801246
it's on different PC (spare/test PC). What I'm not sure is if I sign the database with server ID, should it prompt the user to trust the signer (the server) the first time they access database or not at all?

It prompts the user when the code is trying to run ReplaceItemValue method, Dblookup, and Send method. (which are all included as part of Save & Close button in the form).

Assisted Solution

stevecassidy earned 50 total points
ID: 33803669
No; if the server and the user are in the same organisational unit or certifier tree then stuff that shares the same bit after the slash shouldn't require trust.

How about signing the database with the *user* ID that's causing the trouble, as an experiment?

Author Comment

ID: 33841876
I've signed the database with my UserID before and it required the user to authorize the action (only the first time).

About your first paragraph, how do I check if the server ID is on the same organizational unit?
LVL 46

Assisted Solution

by:Sjef Bosman
Sjef Bosman earned 25 total points
ID: 33890127
Read the paragraph "Where is the Execution Control List (ECL) stored and configured?" on this page:
and there are some other interesting paragraphs as well.

What you could try is to close Notes, rename the desktop.dsk or .ndk, then restart Notes. The desktop will be re-created normally, and hopefully filled with the local databases. Let the user try with this new desktop to use your database. He'll get one message to accept the certificate, and that should be it.

Worth a try??

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Work Space in Lotus Notes cannot found 6 174
Lotus notes - forward mails agent with these conditions in subject, 3 237
Lotus notes email code 2 130
IBM Domino web server 5 71
For users on the Lotus Notes 8 Standard client, this article provides information on checking the Java Heap size and adjusting it to half of your system RAM in attempt to get the Lotus Notes 8.x Standard client to run faster.  I've had to exercise t…
Article by: Rob
Notes 8.5 Archiving Steps and Tips This article covers setting up a Notes archive, and helps understand some of the menu choices making setting up and maintaining a Notes archive file easier.
Although Jacob Bernoulli (1654-1705) has been credited as the creator of "Binomial Distribution Table", Gottfried Leibniz (1646-1716) did his dissertation on the subject in 1666; Leibniz you may recall is the co-inventor of "Calculus" and beat Isaac…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question