Comments on: I can’t believe IT departments allow Lotus Notes on their networks http://blog.xcski.com/2007/12/12/i-cant-believe-it-departments-allow-lotus-notes-on-their-networks Everything I used to bore people on newsgroups and mailing lists with, now in one inconvenient place. Tue, 07 Oct 2008 09:32:19 +0000 http://wordpress.org/?v=2.6.2 By: Rob http://blog.xcski.com/2007/12/12/i-cant-believe-it-departments-allow-lotus-notes-on-their-networks#comment-68558 Rob Wed, 12 Dec 2007 22:20:02 +0000 http://blog.xcski.com/2007/12/12/i-cant-believe-it-departments-allow-lotus-notes-on-their-networks#comment-68558 Don't get me started... You may recall my rants about Outlook when my company switched over? Well IT here admitted that Outlook (and more specifically the Scalix server backend) was sucking, and replaced it with... Novell Groupwise. I never thought I'd hear myself say this, but I wish I was on Outlook now. Don’t get me started… You may recall my rants about Outlook when my company switched over? Well IT here admitted that Outlook (and more specifically the Scalix server backend) was sucking, and replaced it with… Novell Groupwise. I never thought I’d hear myself say this, but I wish I was on Outlook now.

]]> By: Jessica http://blog.xcski.com/2007/12/12/i-cant-believe-it-departments-allow-lotus-notes-on-their-networks#comment-68556 Jessica Wed, 12 Dec 2007 19:51:08 +0000 http://blog.xcski.com/2007/12/12/i-cant-believe-it-departments-allow-lotus-notes-on-their-networks#comment-68556 That is not the stupidest thing I have ever heard - there is an abundance of stupid in the world - but it is extremely stupid. And no doubt if you pointed it out to someone official who deals with the Notes/Does environment you will probably be accused of hacking the system to boot. That is not the stupidest thing I have ever heard - there is an abundance of stupid in the world - but it is extremely stupid.

And no doubt if you pointed it out to someone official who deals with the Notes/Does environment you will probably be accused of hacking the system to boot.

]]> By: Stephen Harris http://blog.xcski.com/2007/12/12/i-cant-believe-it-departments-allow-lotus-notes-on-their-networks#comment-68555 Stephen Harris Wed, 12 Dec 2007 19:42:11 +0000 http://blog.xcski.com/2007/12/12/i-cant-believe-it-departments-allow-lotus-notes-on-their-networks#comment-68555 That sounds like a misconfiguration in the environment. Your ID file identifies you to the server. That's (nearly) all. Your password unlocks the ID file just like a PGP keyThe desktop (desktop.dsk and variants) and the NAB (names.nsf) identify what mailbox you want to access. The desktop provides the icon, the NAB identifies where to check for new mail. The server _should_ refuse (using ACLs) unauthorised access. It sounds like the ACLs for the mailboxes in question are set to allow any authorised access, rather than specific named access. You have to be careful with notes ACLs, especially if you want to allow replication (so the servers also have to be given permission to the NSF files). It'd be very easy for the unaware admin to set permissions too weak. At least that's how it worked when I used to admin it... 9 years ago. Fortunately haven't had to do much Notes admin work for a while; it's what made me decide to leave that job! That sounds like a misconfiguration in the environment.

Your ID file identifies you to the server. That’s (nearly) all. Your password unlocks the ID file just like a PGP keyThe desktop (desktop.dsk and variants) and the NAB (names.nsf) identify what mailbox you want to access. The desktop provides the icon, the NAB identifies where to check for new mail. The server _should_ refuse (using ACLs) unauthorised access. It sounds like the ACLs for the mailboxes in question are set to allow any authorised access, rather than specific named access.

You have to be careful with notes ACLs, especially if you want to allow replication (so the servers also have to be given permission to the NSF files). It’d be very easy for the unaware admin to set permissions too weak.

At least that’s how it worked when I used to admin it… 9 years ago. Fortunately haven’t had to do much Notes admin work for a while; it’s what made me decide to leave that job!

]]> By: Tina Marie http://blog.xcski.com/2007/12/12/i-cant-believe-it-departments-allow-lotus-notes-on-their-networks#comment-68540 Tina Marie Wed, 12 Dec 2007 16:56:40 +0000 http://blog.xcski.com/2007/12/12/i-cant-believe-it-departments-allow-lotus-notes-on-their-networks#comment-68540 I've actually seen that behavior. I never actually had to use Notes, but I had to write code once to send email through it. And, no, I don't know how to fix it. It's been years. I’ve actually seen that behavior. I never actually had to use Notes, but I had to write code once to send email through it.

And, no, I don’t know how to fix it. It’s been years.

]]>