Search DominoPower's 11,441 Lotus-related article archive 
Home
EasyPrint
News details Click here for the RSS feed's XML code. This is not a browser URL.
Articles-only Click here for the RSS feed's XML code. This is not a browser URL.
Twitter Feed Click here for the Twitter feed.
NOTES Q&A
How recreate a missing ID file without going completely crazy
By David Gewirtz

To Sigmund Freud, "Where id is, there shall ego be." But to Notes administrators, where id is, there might permission to enter the network be.

The Notes ID file is a unique file that identifies an individual user or server and contains a number of elements, including certifier information, public and private keys, encryption keys, and more. Without the ID file, you don't get into Notes or Domino.

You might think, what with thumb drives, CD-ROMs, DVD-ROMs, servers, backups, and terabyte hard drives costing less than dinner at Carrabba's, that losing every single copy of one's ID file might be impossible. You'd think that, but you'd be wrong.

Users lose their ID files all the time. And no, they don't have backups. And no, they didn't remember to make a copy.

Where ID is not, there shall access not be. And that, dear reader, is where some Notes users start to go crazy, especially if they've lost their ID file.

Just say no
Fortunately, it is possible to reconstruct an ID file.

Conscience is the internal perception of the rejection of a particular wish operating within us. -- Sigmund Freud

Like that particular wish, recovering an ID file is not necessarily a good idea, but it's possible. Let's first discuss why it's a bad idea, then we can discuss how you can do something rather ill-advised in the pursuit of expediency.

Here's the thing: the ID file exists as a security measure. The whole design premise was that if you don't have your ID file, you don't get in. More intentionally, if someone trying to hack in doesn't have the ID file, he doesn't get in. That's why it's a whole file, and not just a password.

So let's say Joe Luser loses the thumb drive his ID file resides on. And let's say Joe has access to some important corporate data that a competitor might love to see. Did he really lose his thumb drive or was it lifted?

He that has eyes to see and ears to hear may convince himself that no mortal can keep a secret. If his lips are silent, he chatters with his fingertips; betrayal oozes out of him at every pore. -- Sigmund Freud

Can you see where I'm going here? This is exactly the time you don't want to recreate the ID file, because if it's lost, it might be in the wrong hands.

Recreating that ID file
As Siggy himself once said, "I do not doubt that it would be easier for fate to take away your suffering than it would for me. But you will see for yourself that much has been gained if we succeed in turning your hysterical misery into common unhappiness."

Even though it's a bad, bad, baaaaad idea, we're about to show you how to recreate your ID file. What? It's not like I'm your mother. If you don't know right from wrong by now, sure as shootin' aint' my job to teach you.

A Freudian slip is when you say one thing but mean your mother. -- Author Unknown

From the user's point of view, recreating the ID file can be problematic as well. If Joe had any Notes databases or documents that he'd encrypted, he will never, ever be able to get them back if you recreate the ID file.

So, here's what you need to do. Pay close attention to this first step, because doing it even slightly wrong can cause you real problems. Do not do anything until I say to. Ready?

First, take a screenshot of the user's Person document. You're going to need to type in the user name later, exactly as it's shown here. A screenshot is the best way to get it right.

OK, you're going to need to delete the user's Person document (don't do anything yet!!). You have to go about this in a particular way. Do not NOT NOT use the Delete User option in the Admin client. If you do, the Admin process will delete the entire user, yank his butt from your Domino domain, and otherwise make your life miserable.

Instead, find the person document and simply hit the Delete key. Just one key. Just once.

Bizarrely enough, this will delete the document, without deleting the user. OK, now you can go do it.

Next, find Register User in the People and Groups tab. Register the user with the absolutely identical name for the previously registered user (you did take a screen shot, didn't you?)

Now, set the Mail System to None. This will prevent a new mail file from being created. In the Mail File field, use a file name that's different from the original mail file name. Then, find the Set ID File button and locate the ID file somewhere where you'll be able to find it later.

Take a moment and smack the user upside the head for losing his file in the first place. This could conceivably get you fired, but it'll feel good. And your user probably deserves it. Just don't blame me. In fact, don't blame me for anything. Remember, you were warned.

Sadism is all right in its place, but it should be directed to proper ends. And sometimes a cigar is just a cigar. -- Sigmund Freud

By now, you've created a new Person document and the user has been registered once again with Notes. Go ahead and edit the new Person document, configure the Mail System appropriately, and point the Mail File field to the original mail file.

Save and close. And make sure, this time, the user knows it's bad to lose the ID file.

I will take my leave of you, Dear Reader, at least for now. As we part company for this week, allow me to share with you one of The Sigmeister's wisest thoughts:

Time spent with cats is never wasted. -- Sigmund Freud

In all seriousness, it's not good to recreate ID files. But now, at least, you know how. Go, get a cat.

David Gewirtz is the author of How To Save Jobs and Where Have All The Emails Gone? For more than 20 years, he has analyzed current, historical, and emerging issues relating to technology, competitiveness, and policy. David is the Editor-in-Chief of the ZATZ magazines, is the Cyberterrorism Advisor for the International Association for Counterterrorism and Security Professionals, and is a member of the instructional faculty at the University of California, Berkeley extension. He can be reached at david@zatz.com and you can follow him at http://www.twitter.com/DavidGewirtz.


Other articles you might like
Home > Lotus Technologies > Notes (84 articles)
   A walk down Memory Lane with Lotus Notes
   An application for scanning physical mail and distributing it virtually
   Managing Notes deployments with Teamstudio Build Manager
Home > Tips & Techniques (102 articles)
   More about Domino log files
   Why your log.nsf might not be purging properly
   A faster way to repair corrupted server files
Get Weekly Email Updates
Subscribe to our regular weekly email newsletter. It's packed with tips, reviews, deep analysis, and the latest news.
 
Recent DominoPower Articles
Application development, William Shatner, and the origin of the universe
Learn Domino Designer 8.5 for free
The (near) future of Sametime, Quickr, Connections, and Symphony
Inside the IBM Innovations lab
Lotusphere 2010: Hot fixes and cool news for Notes, Domino, and LotusLive
Lotusphere 2010: mobility and collaboration
2010: A Lotusphere of change
Latest Lotus Headlines
Xpages not loading? JVM errors? - Solution
How to implement an iCalendar feed into your Notes calendar with XPages
DWA Hotfixes for Domino 8.5.1FP1 - A Gotcha
IBM Adds DB2 to Lotus Foundations SMB Package
SNTT : XPages onclick Ghosts in the machine
Ports used by Lotus Sametime 8.5 servers
Exploring a Domino Date Bug
>> Read all the news
More from the ZATZ journals
Computing Unplugged: The iPad defenders have spoken
David Gewirtz Online: CNN commentary and analysis
OutlookPower: More about disappearing text
-- Advertisement --

Find unused Lotus Notes groups and clean up your address book
Have you ever wanted to get rid of old Lotus Notes groups that were cluttering up your address book, but you weren't sure if they were used? Find Unused Groups can help.

Find Unused Groups will check your ACL, mail, multi purpose and server groups to help you determine if they are used, and who uses them.

Learn how to easily clean up your address book.

-- Advertisement --

Teamstudio Edition 25 has shipped
It's finally here! Now that Teamstudio Edition 25 has shipped, listen to our latest Tool Time audio program to find out what's changed. Updates to all your favorite Teamstudio tools will be discussed.

Plus, you'll get an introduction to Teamstudio Undo (formerly known as Teamstudio Snapper).

Tap here to get started!

ZATZ Home  ·  News  ·  Back Issues  ·  Credits/Trademarks ·  Link To Us
Copyright © 1998-2010, ZATZ Publishing. All rights reserved worldwide.
Editor's Login