Why oh why oh why does it change the permissions on my .kyr file so that I get an error [4164] next time I start the server?
Server runs as service under the SYSTEM and SYSTEM has access to .kyr file … until http loads and then it’s “removed”.
Am I missing something silly?
TIA, Lee
Subject: Solution: Change owner of SSL certificate
I had problems with a Domino 6.0.2 CF2 on my laptop. I use it for development, serving up large database (like this forum) The server code is much faster and more stable. Run it as a service, so it runs as SYSTEM.
What really annoys me though is that it unless I give SYSTEM full access, it will not use selfcert.kyr. And when I give it full access, it insists on removing all acces but for the owner.
Solution: make the Administrators group owner of selfcert.kyr, and add SYSTEM to the Administrators group.
Another option would be to create a special user to run the service, and assign ownership of selfcert.kyr to that user. This has the added (dis)advantage of not showing the Domino console. Whatever suits your preference.
Could y’all give feedback how this has helped you?
Cheers,
Lars