Lotus Notes Domino Administration
Agenda Topics
Set it up right for it all to work
the administration process
the certificate authority
administration access control
Performing Everyday Tasks Faster & Better
user management
database management
server management
2
Administration Process Configuration Checklist
The Administration Database
Named ADMIN4.NSF
Updated with the Current Version Template
Replica on Each Server
Verify Replication
The Administration Task
In the Notes.INI
• Tasks = …, adminp, …
3
Administration Process Configuration Checklist
Review Sever Document in the
Domino Directory
Server Tasks Tab, Administration
Process Tab
Determine The Administration Server
The Administration Server is the
server listed as the administration
server of the Domino Directory
Set this in the advanced tab of the
Access Control List dialog box for the
Domino Directory
4
The Administration Process
Why you need it
It carries out the instructions you give the Administration Client
It does the work that takes a long time if you do it yourself
• Create replicas, move mail files
It does a more complete job – most of the time – than you can
• Renaming or removing users
Its also a required part of the Certificate Authority
5
The Certificate Authority
Why we need it
Required if you plan to use the Web Administrator client to register
Notes users
Administrators can manage both Notes and Internet certifiers through
the CA process
Does not require administrator access to the certifier ID and ID
password in order to register users and servers.
• Allows administrators to delegate these tasks without potentially
compromising the certifier.
Issues Internet certificates that are compliant with security industry
standards
6
Setting Up the Certificate Authority
First, make sure you’ve got the Administrative Process set up and
running correctly
Migrate at least one certifier to use with the Certificate Authority
From the Domino Administrator, click Configuration
On the Tools pane, choose Certification - Migrate Certifier
• Make sure to specify both the people who can use the certifier, and the
server!
Start the Certificate Authority Task
load ca
Notes.INI -- Tasks = …, CA, …
The Certificate Authority adds newly-created certifiers when it
refreshes, which takes place every 12 hours
7
You Don’t Really Have To Wait
At the server console, simply type:
tell ADMINP process all
tell ca refresh
To see if the new certifier has been added:
tell ca stat
8
ACL:- TYPES
ACL:- is the listing of users and servers that are authorized to
access the database.
Manager Access:-delete database, encrypt, modify, and
performance task by lower access levels acl changes.
Desinger :- create full text index search., Modify [fields, forms,
views, public agents].
Editor:-create, edit, read documents (editor can change other
person documents also) (own docments and other persons
documents).
Author:-create edit, read (own/self document ).
Reader :-read documents, but can not create or edit document.
Depositor:-create documents.
No access:- none.
9
Types of Administrators:-
1. Full access administrator.
2. administrator.
3. database administrator.
4. full remote control administrator.
5. view only administrator.
6. system administrator.
7. Restricted system administrator.
10
Types of Administrators
Full Access Administrators Great tool – but be careful,
these guys own the server!
Manager access to all databases Once Enabled via the menu in
Runs with All roles in all databases the admin client, Full
Access to all documents Administrator Access is
enabled in the Client,
• Bypasses Reader Fields
Designer, and Administrator!
Practices for Managing Full Access Administrators
Disable via NOTES.INI
• SECURE_DISABLE_FULLADMIN = 1
Create separate Admin Full Access ID’s and use only the web
admin tool
11
Types of Administrators
Administrators
Everything but override ACL’s and Reader Names
as a Full Access Administrator
• Manager access to the Web Administrator
database
• Create,update,and delete folder and database
links
• Create, update, and delete directory link ACLs
• Compact and delete databases
• Create, update, and delete full text indexes
• Create databases, replicas, and Templates
• Get and set certain database options
• Issue any remote console command
Can delete any database on the server without being in the ACL! 12
Types of Administrators
Database Administrators Can delete any database on
the server without being in the
Create, update, and delete Folder and Database ACL!
links
Create, update, and delete directory link ACLs
Compact and delete databases
“Administrator”
Create, update, and delete full text indexes
vs.
Create databases, replicas, and Master Templates “Database Administrator”
Get and set quotas, database in/out of service flags
It sounds like a fine distinction
at first – but it is critical.
Database Administrators DON’T get:
This allows control over the
Automatic manager access to databases files & data but not the
Any rights to use the Web Administration Database configuration and most of the
• They cannot perform their tasks via performance settings on the
server.
browser
13
Types of Administrators
Full Remote Console Administrators
Can use the remote console without restriction
View-Only Administrators – Show, but not Tell
Can execute remote console commands that
display information
• Show Tasks, Show Server
Cannot execute remote console commands that
take action
• Load, Tell, Replicate, Route, …
14
Types of Administrators
System Administrators
Can issue Remote Server Console Commands to the
operating system
Use the “$” symbol before the command
Use the “#” symbol before commands to the server
controller
Restricted System Administrators
Same as above, but limited by the field below
Restricted system commands
Lists the specific Server Controller and Operating
System Commands available to Restricted System
Administrators
15
User and Group Management
It’s all about the people
Register a new user
If you’ve set the Certificate
Authority up correctly, it looks the
same!
A common mistake is to set up
the certifier without making the
server a certificate authority
17
Types of Groups: - (MAMSD)
1. Multipurpose.
2. Access control list only.
3 . Mail only.
4. Server only.
5. Deny list only.
18
Group Management
19
Set User Roaming Status
20
Database Management
Replication
Replication :- Synchronization of two
databases.
Replica :-It is a database used for replication.
Replica id :-It’s a unique no that is generated
when a database is first created.
22
Types of Replication
1. Pull-Pull (both server include)Bi-directional.
2. Pull – Push (default )-only source server
include Bi-directional.
3. Pull only –only source server. Uni directional.
4. Push only –only source server included.
Uni directional.
23
How replication works?
Replication issues an nsfsearch request against the
source replica NSFsearch returns several pieces of
information including a list of OIDs of all the documents
that have been created or modified since the last
replication.
OID :- is a combination of three components.
1. UNID:-unique 16 byte identifier that never changes.
2. Sequence No:- indicates how many times the
document has been modified.
3. Time Stamps:- indicates the last time the document
was modified.
24
Create New Replicas
Step 1 – Select the files you want to create new
replicas for
25
Create New Replicas
Step 2 – Select one or more target servers
26
Create New Replicas
Step 3 – Go to Lunch!
The Administration
Process Takes over
A replica stub is placed
on the target server
Replication fill in the data
In a cluster its even faster
Even if the target server does not directly replicate with the source, the target server
replicates the database as part of its normal replication schedule
27
Forcing Replication
28
Move A Database
29
Fix, Compact, or Full Text Index
30
Delete a Database – Or all replicas,
everywhere!
31
Server Management
Changing the NOTES.INI file
Who would have thought the easiest way to change
the NOTES.INI would be through a Web Browser?
33
Viewing Windows Services & Logs
34
Mail Trace from the Admin Console
35
