Password Recovery Issues with R8.0.2 Server

Just wanted to give everyone a heads up if you are going through an upgrade, Password Recovery will not work if you have R8.0.2 Servers and R7.x or R6.x clients. The issue is that a client is unable to sends ID’s back to the specified password recovery db. Previously collected backup ID’s can be used, but no new ID will be absorbed until the client is upgraded to R8.0.2 (or higher).

We have not yet upgraded to R8.5 servers, but my assumption is that it will still not work.

Subject: Have you enabled the new ND8 functionality?

New functionality for ID File Recovery was added for ND8, if you enable it then older clients will be left out in the cold.

Subject: Same issues using 8.0.2 Clients

Hello,

i have got the same issues using 8.0.2 Clients. Where do i find the >New functionality for ID File Recovery< in ND8.

Thank you!

Subject: 8.0.2 clients will be easier to diagnose

8.0.2 clients will log a great deal of ID file recovery-related information to their local log file, including attempts to send an encrypted backup to the repository. Adding a new document encryption key will result in sending off an encrypted backup, as will a new button in the user security panel, called something along the lines of “send encrypted backup”. If you aren’t seeing anything in the log at all after that, then the ID files are not actually recoverable and you should revisit your ID file recovery configuration.

Subject: ID Vault

Dave, thanks for the response.The ID Vault is only available to R8.5 server and R8.5 Client. Previous versions will not work and you have to continue to use password recovery until all clients are upgraded. The great thing is that after you configure ID Vault, as soon as a client is upgraded to 8.5 their ID file will automatically be sent to your ID vault so you can perform the ID related tasks.

As far as the initial issue that I reported its only related if you have R8.* server and R7.* and R6.* clients. This issue has been reported to IBM development team and they are currently looking for a fix.

Subject: Solution Provided by IBM

IBM Has released a fix for 8.0.2 and 8.5 for this issue. I believe is HF874.

Please contact IBM to obtain this fix

Thanks

Subject: Are you using CA to register users?

Do you use CA to register the users having problems? What happens if you register a user with the cert ID file?

Subject: Either

Chad, either one of the approaches causes an issue. The problem is related to the Notes R7 & R6 clients and how security is built.

Subject: Got some users with this problem

I am getting:2009-09-02 04:16:08 PM Failure to mail backup recovery ID file for Backup of recent changes to ID file for User Name/OU/OU1/C to Mail-IN database: Multiple Notes name matches found in directory.

Is this related to the problem described above?

I have searched our NAB and cannot find multiple Noes name matches in our directory for those users. Not sure where this program is looking…