No ID Recovery function enabled

HCL Domino Domino Forum
1

Hi,

What can an admin can do if no ID recovery function is enabled in server and there is no backup of id file and a user ID is lost or corrupted?

Thanks

2

Subject: No ID Recovery function enabled

I am not an admin expert, but I think they would have to delete the user (without deleting the mail file), then recreate them to make a new id file.

If you do this, be careful with the timing of the “delete user” and “register user” events. Deleting a user will make the server’s Admin process perform tasks to remove the user from groups, ACLs, etc. If you try to recreate the user before the Admin process has finished all its stuff, it might automatically delete the newly created person document.

(That happened to me just last week, but only on a test server.)

3

Subject: RE: No ID Recovery function enabled

Hi Scott,

It sounds dangerous~

Is there any way to create a new user ID(same user name) without deleting and readding the user?

Thanks

4

Subject: RE: No ID Recovery function enabled

You may delete Person doc manually (Del, F9) without AdminP and readding user with Adminp and new mail file. After this in the person doc edit field : mail file (fill it with actual old user mail file). This operation without any dangerous if user don’t use encryption in his mail

5

Subject: RE: No ID Recovery function enabled

Hi Sergey,

Thanks for your reply

Readding user with AdminP?

Do you mean register a user through Admin Client?

What will happen if the user use encryption in mail? Will he cannot open the encrypted mails?

6

Subject: RE: No ID Recovery function enabled

Sam,anytime a Notes user is registered and a user ID is created, this ID file will contain a UNIQUE private key string. Note that this key string cannot be reproduced by re-creating a user with the same name in the same organization. You might want to take a look at the Admin help and search for “encryption”.

In other words, if a user has encrypted his emails, even keeping his public key in the person document in the directory will no longer enable ANYONE to access these emails as the proper private key that was stored in the initial ID file is lost.

HTH

Stefan

7

Subject: RE: No ID Recovery function enabled

Stefan,

Coz my company has no backup of id and no ID Recovery function enabled, I just wonder why my colleague resumes the user ID in a few mins time.

Thanks for your valuable info :slight_smile: