I have one user who cannot access the server when using the client. When he tries he gets the error “You are not authorized to access the server”. However, when he logs into iNotes/DWA, he can get in fine and can read his mail, etc.
I have checked everything. He is not in deny access groups, he is allowed server access in the server document, his mailfile and ID have been re-created from scratch. I’ve run fixup/updall on the NAB. He gets the same error accessing any server (I’ve tried several).
What is going on? Why can’t he access the server with the client, but can with DWA? I’ve tried the ID on several PCs - same thing. The log shows “ATTEMPT TO ACCESS SERVER by User Name/ABC/DEF was denied” but with no more information. I turned on client clock debug and only get “Not authorized to access the server”.
Is there any additional debugging I can do to try to determine what isn’t working right?
Subject: User Not Authorized to Access Server from Client - DWA OK ???
DWA and Notes Access use completely different access mechanism so you shouldn’t be suprised about that one. That he can access his mailfile using DWA only means that he is in the ACL of his mailfile and that he is in the Domino Directory with an Internet Password.
You server logfile usually says a lot more about why people can’t log on. Look at which certifier he uses to try to log on. look for mentions of wrong certifiers.
Have you restarted the server since you changed his access etc? If not, do a “Show nlcache reset” on the console. Otherwise you might be working against cached entries.
Subject: RE: User Not Authorized to Access Server from Client - DWA OK ???
Certificates look fine. I even recertified the ID just to be sure. I tried the nlcache reset and it didn’t make a difference. One weird thing is when I switch to that ID and do a File/Database/Open, before the dialog box even comes up to select a server, the client seems to be stuck in a loop for about a minute as it cycles through each server again and again trying to access it and returning the error in the status bar. It does it for a full 60 seconds before finally giving me the dialog box. Then when I switch the server from local to the server, it does it again. Very strange.
Subject: RE: User Not Authorized to Access Server from Client - DWA OK ???
Finally found it. Someone had put a group in the deny access group. I had looked through it quickly, but missed it. Now that makes me wonder why I could get in through DWA. Hmmmmm. Time to do some testing. Thanks for the help.
Subject: RE: User Not Authorized to Access Server from Client - DWA OK ???
Bacause HTTP access doesn’t look at whether you’re allowed to access the server. HTTP access passes that Domino security level (which is why on servers with highly sensitive information, you should preferably not load the HTTP task)
Previous releases of Domino separated out server access between NRPC and HTTP access. Somewhere around 6.5.4, a setting in the Port - Internet Ports tab of the server document included whether or not to follow the server access settings. The default is set to NO, but you should set it to YES unless you have a server that restricts client access and allows HTTP access, it’s possible, but probably not the norm.