I would like to clarify something on ND6 Agent Security and the Run on Behalf functionality. I attended the Lotusphere '03 presentation on ND6 Agents and on a slide entitled “On Behalf and Versions” it states that you need ND6 to set but will run on 5.04 or higher. In the article entitled “Decoding the new Notes/Domino 6 agent features”, one paragraph reads:
“In Notes/Domino 6, the preceding code runs successfully if server Gorky/Park (where the database is created) is configured to trust server Central/Park (where the agent is running). Note that both servers need to be running Domino 6…”
So I’m confused…do both servers have to be ND6? Can you write an agent that runs on an ND6 server on behalf and have it do a db.isopen() across to an R5 server from a web based agent? Also, if that is possible, on whose behalf would you run it? Thanks in advance.
As you saw in the presentation OnBehalf has many different uses. It is used internally for many things without direct user involvement and also can be set by the end user.
5.04 and higher can support SCHEDULED agents which have OnBehalf value set by the end user, AdminP or as a result of enabling an agent from the web.
A different use of OnBehalf is for opening databases on remote servers. To open a database accross servers BOTH servers have to be ND6, since need to do the right thing both servers have to do the new security.
Good Question! I should have been more explicit in the presentation
Subject: RE: ND6 Agents and On Behalf - for Julie K.
Thank you so much for the clarification. I thought that was the case, but I just wanted to be sure. I’m in the process of writing a iNotes web failover agent for our clustering environment and will need ND6 and the On Behalf to help us finalize this. Thanks again.
