Every now and then I get the following error in the logs of some of my servers:
“WARNING: The public key for USERNAME found in directory names.nsf on server SERVERNAME does not match the one used during authentication.”
This occurs for about 3 of our users, although they don’t seem to suffer any direct problems.
What could cause this, and is it something I should be worried about/try to fix?
Thanks
Subject: Public Keys Not Matching…
This happens for us if someone deletes and recreates a user, but doesn’t give the user the new id file.
You should set your server to check the keys -
To verify a Notes public key
Verifying Notes public keys against those in the Domino Directory helps prevent an unauthorized user or server from accessing another server.
From the Domino Administrator, click Configuration and open the Server document for the server.
Click Security.
In the Security Settings section, select Yes in the “Compare Notes public keys against those stored in Directory” field.
Save the document.
Restart the server so that the changes take effect.
Subject: RE: Public Keys Not Matching…
What happens then? Will those users be disallowed access to the server?
Also, how do I go about fixing the problem? Would recertifying the IDs help?
Subject: RE: Public Keys Not Matching…
In newer versions of Notes/Domino, you can configure public key checking to log errors but not lock out users. This can be used as a preliminary diagnostic step to find users whose configuration information needs to be updated before you lock them out entirely.
Subject: RE: Public Keys Not Matching…
Changing that setting will lock the users out, so correct the problem first…
Search the admin help file for “replace AND public AND key” - the first document found should be what you want