Register users with Lotusscript and ID Vault

HCL Domino Domino Forum
1

In our User Administration Tool, we are using the LotusScript class NotesRegistration to create Domino user accounts. The tool works fine on Domino 8.5 (beta 2).We activated the ID Vault functionality to try it out together with our tool.

When running the scheduled agent with the function NotesRegistration.registerNewUser included, we got this Notes error in return: “Notes error: ID upload to the Notes ID Vault failed”. No user account was created.

But when running the same agent through the Domino Designer client, everything worked fine; the account was created and the id-file ended up in the ID Vault.

The agent is signed with the same ID that ran the agent from the client.

All other functions work when the agent is run from the server.

Is this a bug in the NotesRegistration class? Or is there another explanation?

Best regards Marta Birgoth

2

Subject: Problem fixed?

I know this post is quiet old but it’s the only one that I found regarding this issue.

I wonder if this problem is really fixed…

Anyway I still have this problem using the RegisterNewUser Method:

“ID upload to the Notes ID Vault failed”

When I create a user using the Admin-Client everything works.

Client Version = 8.5.2

Server Version = 8.5.1 (FP4)

Any info is appreciated

Frank

3

Subject: We have the problem…

I have implemented the CA process. After that we have this error when we create a user. The user is created, but we still have the user in the registration que with an error ID upload to the Notes ID Vault failedServer 8.5.3 Client 8.5.3

4

Subject: Will investigate … some questions to clarify

Can you check the security events view in both the client and server log for error messages?

If necessary for us to reproduce, do you have an evaluation version of your tool we can test with?

5

Subject: Security log messages

Hello Catherine and thanks for the response. Here are the security log messages.

From the server when running the agent from the server console:

2008-10-15 12:01:38 ID ‘C:\treset.id’ failed to upload to vault ‘’ on server ‘CN=Server1/O=Birgoth’. ‘Server1/Birgoth’ made request. Error: Timeout occurred waiting for message.

From the server log as I ran the agent from the client:

2008-10-15 12:04:20 ID successfully synchronized with vault ‘O=SuperVault’ for ‘Test Reset/Blue/Birgoth’ (IP Address 192.168.23.1:58247).

And from the client log:

2008-10-15 12:05:19 ID ‘C:\treset.id’ successfully uploaded/synchronized to vault ‘’ on server ‘CN=Server1/O=Birgoth’ by ‘Resetpassword Admin/Birgoth’.

I will get back to you with some code examples, but basically we just use the NotesRegistration class.

6

Subject: Sample code

Hello again,

This is an somewhat modified extract from our User Administration Tool, hope this will help.

We do have a demo version of our tool, but it is still in Beta… But please let me know if you need it, and I could send it to you.

Dim userReg As New NotesRegistration

'____________________________________________________________________

'registration defaults

userReg.Expiration= Now() + expDays

userReg.CertifierIDFile = “C:\cert.id”

userReg.IDType = ID_HIERARCHICAL

userReg.MinPasswordLength = 8

userReg.RegistrationServer = “Server1/Birgoth”

userReg.CreateMailDB = False

userReg.StoreIdInAddressbook = False

userReg.IsNorthAmerican = False

'_____________________________________________________________________

'All users, register new user(=ID file)

dim lastName as string

dim idfilePath as string

dim mServer as string

dim firstName as string

dim mInitial as string

dim certPwd as string

dim mFile as string

dim pwd as string

dim licenseType as string

lastName = “Larson”

firstName = “Liza”

mInitial = “”

idfilePath = “C:\llarson.id”

pwd = “xxyx”

mServer = “Server1/Birgoth”

mFile = “mail\llarson.nsf”

certPwd = “password”

licenseType = 176

If Not userReg.RegisterNewUser(lastName, idfilePath, mServer,_

firstName, mInitial, certPwd, “”, “”, mFile, “”,pwd, licenseType) Then

RegisterIDFile = “Could not register user”

Exit Function

End If

'___________________________________________________________

'add to DD

If Not userReg.AddUserToAddressbook( idfilePath, fullName, lastName,pwd,_

firstName, mInitial, mServer, mFile, “”, “”, “”) Then

RegisterIDFile = “Could not add user to Domino Directory”

Exit Function

End If

Regards, Marta

7

Subject: Thanks for additional information, will do some testing

Apologies for delay in getting back to you.

8

Subject: No problem

Please let me know if you need some additional info or more code examples.

Thanks and best regards, Marta

9

Subject: SPR# KHON7L2RW6

Still investigating and will have another update (possibly some questions) shortly.

10

Subject: Fix submitted

Barring any last minute problems with the fix, this problem has been addressed for 8.5. Thanks so much for your help in reporting and diagnosing the problem!

11

Subject: Thank you too!

This is a very important issue for us, so I am very glad to hear that it will be fixed.

Thanks and best regards, Marta

12

Subject: OK, thanks for keeping me updated

We and our customers are eagerly waiting for your respons.

Best regards, Marta