Re: Password Recovery mail-in database

[tkreimer@xxxxxxxxxxxxxxx]

On the password change screen there is a choice to choose ID Key strength 
for the Private key.
As for the public key, which is what we were talking about earlier, you 
can control via a Security Policy. 
The downside to this is that it prompts the user into clicking a button to 
respond, then you have to approve via adminp. I was getting a notice for 
months that I had a new public key waiting, until I found the approval in 
adminp.
That is my best understanding of it right now anyway. 

The encryption upgrade is a good thing. We had a legitimate reason to buy 
a password cracker, and found that with the weaker encryption, it was 
pretty trivial to crack passwords of 7 characters or less.

Tom
===============================================
Tom Kreimer
Senior AS400 LAN-WAN Network Specialist
Buckhorn Inc, Milford OH
(513)831-4402 x237

"So every time you add or remove a person who can recover ID's "....

Tom - that's got to be it. I did add a 'new admin' since our other notes 
administrator is retiring in June and I set up his replacement with 
administrator capabilities. 

Also I see you mention "Be cautious if you upgrade the Notes ID security 
from 64 to 128 bit (or I presume to 256 bit with Notes 8)."

I hadn't planned on upgrading/twiddling with the notes id security. I do 
plan to install 8.0.1 at the end of this month. Could doing the upgrade to 

8.0.1 result in this type of activity (upgrading notes id security) 
without any action on my part?

(Also, while cleaning up, I did move the old files into a separate folder 
too, just to keep them handy 'in case of emergency'. :)

Thanks everyone for your input.

Regards, Jerry

Gerald Kern - MIS Project Leader
Lotus Notes/Domino Administrator
IBM Certified RPG IV Developer
The Toledo Clinic, Inc.
4235 Secor Road
Toledo, OH 43623-4299
Phone 419-479-5535
gkern@xxxxxxxxxxxxxxxx


This e-mail message, including any attachments, is for the sole use of the 

intended recipient(s) and may contain confidential and privileged 
information. Any unauthorized use, disclosure or distribution is 
prohibited. If you are not the intended recipient, please inform the 
sender by reply e-mail and destroy this and all copies of this message.