Run an agent in behalf of

HCL Domino Domino Forum
1

Hi all…

I have:

a. “myapp.nsf” on serverA, this app has an agent “myagent”.

b. “origin.nsf” on serverB

c. “target.nsf” on serverC

“myagent” copy lots of documents from a view in origin.nsf to target.nsf

I need to run myagent on serverA using tell amgr run “myapp.nsf” ‘myagent’ on serverA console, the problem is that serverA does not have access on serverC. My user has access to all servers.

Is there a way to run this console amgr run by indicating that the agent should run like if it’s my user ?

I cannot use background run (in notes client), because it will take a long, that is why I need to run on server…

Thanks !!!

2

Subject: Why not give C access to A?

  • It’s a server, not a person. You should be able to cross-certify the server, don’t put it in any "Domain Groups, and add it to the ACL of that one database. Then that server will only be able to access that one database, if you’re worried some rouge Domino virus will run amok. (grin)

  • If you can’t cross-certify, say because C is remote and “they” who control C are too paranoid to do anything (am there, live that), then you should be able to run it as “you” by scheduling it, if you signed it. Set it to run “On Schedule” and select “Never”. The write an agent to launch it and exit, and run that Agent from your client. I’d do a little testing before doing this with the real system, because I only just thought of it!

  • Lastly, you could install a second R8.5.1 in a VM (virtual machine) and use that VM to run the Agent, while you keep working in R8.5.1 on the host system. When it’s done, close the VM down to free up the resources.

  • ALL of this should be taken as ideas only, not solutions, because it’s me tossing out what sounded like usable directions to go, rather than things I’ve actually done and know they work. Except the VM.

Hope this helps…

3

Subject: trusted server

What you are looking for is called ‘trusted server’. warning: this is very high level of trust, but it is what you are looking for.

You need to put the name of the where the agent runs into the trusted server field of the server where the database resides.

Note: the suggestion to cross-certify posted in another reply to your post will not help as the agents require a special permission (trusted server) to access data on remote server.