Re: Password Recovery mail-in database

On the password change screen there is a choice to choose ID Key strength
for the Private key.
As for the public key, which is what we were talking about earlier, you
can control via a Security Policy.
The downside to this is that it prompts the user into clicking a button to
respond, then you have to approve via adminp. I was getting a notice for
months that I had a new public key waiting, until I found the approval in
adminp.
That is my best understanding of it right now anyway.

The encryption upgrade is a good thing. We had a legitimate reason to buy
a password cracker, and found that with the weaker encryption, it was
pretty trivial to crack passwords of 7 characters or less.

Tom
===============================================
Tom Kreimer
Senior AS400 LAN-WAN Network Specialist
Buckhorn Inc, Milford OH
(513)831-4402 x237

"So every time you add or remove a person who can recover ID's "....

Tom - that's got to be it. I did add a 'new admin' since our other notes
administrator is retiring in June and I set up his replacement with
administrator capabilities.

Also I see you mention "Be cautious if you upgrade the Notes ID security
from 64 to 128 bit (or I presume to 256 bit with Notes 8)."

I hadn't planned on upgrading/twiddling with the notes id security. I do
plan to install 8.0.1 at the end of this month. Could doing the upgrade to

8.0.1 result in this type of activity (upgrading notes id security)
without any action on my part?

(Also, while cleaning up, I did move the old files into a separate folder
too, just to keep them handy 'in case of emergency'. :)

Thanks everyone for your input.

Regards, Jerry

Gerald Kern - MIS Project Leader
Lotus Notes/Domino Administrator
IBM Certified RPG IV Developer
The Toledo Clinic, Inc.
4235 Secor Road
Toledo, OH 43623-4299
Phone 419-479-5535
gkern@xxxxxxxxxxxxxxxx


This e-mail message, including any attachments, is for the sole use of the

intended recipient(s) and may contain confidential and privileged
information. Any unauthorized use, disclosure or distribution is
prohibited. If you are not the intended recipient, please inform the
sender by reply e-mail and destroy this and all copies of this message.