Which account would you recommend to use for signing LotusScript libraries and agents? Should it be a separate user account, used only for signing purposes?
What about using a server ID? Would that affect somehow running agents with restricted operations (i.e. COM object creation) signed under server ID on multiple Domino cluster servers? (server side)
TIA
Edmundas
Subject: Server ID vs User ID for signing LotusScript?
It all depends on the situation. If the agent send email, you do not necessarily want to sign it with the Server ID unless you have specifed a replyto address.
Subject: Server ID vs User ID for signing LotusScript?
I would recommend NOT using server id. You lose control and audit capabilities when you do this. Server id has a lot of special uses especially in R6. For more information see “decoding agents in in ND6” from agent FAQ. Especially the sections on OnBehalf, saving on the server, new security fields in the server record, and ability to set levels on per agent basis.
Subject: RE: Server ID vs User ID for signing LotusScript?
Hmm. I would tend to think you lose audit capabailities either way (i.e. also using a “Generic ID”). I have not played enough with the new settings…In my scenario, we use a genric ID to sign agents for the explicit purpose to manage workflow and mail routing for some applications. Our audit trail still tracks users another way.
Subject: RE: Server ID vs User ID for signing LotusScript?
We will use server id internally for a number of things for the new features, so you would not be able to tell the “system” actions apart from your own. So the situation is “muddier”. It is also easier to revoke rights when necessary from a special id than the server when something bad happens.