Urgent : Server access problem

HCL Domino Domino Forum
1

Hi,I am new to domino administration. Could anyone please help me out with a domino server access problem?

I have to setup a domain in which I want to give full access administration to a person who’s originally from some other domain.

I created the cross certificates between both domains and then gave the person full access administration right, updated all the Db’s ACL on server with that person as manager and copied the person document to the server names.

Initially everything went ok, but after some time its giving me error on accessing the server through that admin Id.

Error says: “The subject’s public key found in the cross certificate does not match the one found in the certificate table.Do you want to access the server anyway?”

Then it allows to access server.

But sometimes it gives following errors and doesn’t allow the same id to access.

“The signature on the certicate was found to be invalid.”

“The certifier(whatever is the certifier for admin id) not found in domino directory. Entry not found in index”

We are already late in meeting deadlines…

can some one please guide.

Thanks.

2

Subject: Urgent : Server access problem

Hi Trapti,

Why do you need to copy the person document to your address book.

As what i understand,

You have already cross cert the OU or the “O”. If you have done so, you need to add him to access server group and give access to the database ACL ( As you have done ) . Open the address book and verify in the Certificates view under the Notes Cross Certificates, you can find cross cert issues to other OU or O .

If you dont find any cross cert, check for you last know backup copy you had for names.nsf. Copy the cross cert from the backup to the current address book

If you have the cross cert. issue the below command on domino consol to verify there is no corrution in address book.

load updall -r names.nsf

this shall refresh all the views. If you have index do delete the same before you issue this command.

Hope this helps