NotesDriverShim: Investigate - A required certifier entry was not found in the Name and Address Book

Absent Member.
Absent Member.
0 0 4,823
0 Likes

Question:



The NotesDriverShim issues a move request to AdminP and the following error is reported by the Domino AdminP process to the NotesDriverShim:

"Notes error: A required certifier entry was not found in the Name and Address Book; consult the Notes Log for details on the specific entry".

Answer:

There are many ways this error can occur. Use the following suggestions to direct your investigation.


  1. Ensure proper certifier ID (cert.id) files and passwords (or password references) are being used within each move or rename command as the commands are submitted to the NotesDriverShim.

  2. Use the Domino Administrator client and check the AdminP request within the AdminP database (admin4.nsf). Look for the AdminP move or rename request that generated the error. If you can find it, you may also be able to have AdminP try to (re-)processes the request. If you use the same credentials as the NotesDriverShim (cert.id and password), you will probably get the same error from the UI that appeared within the NotesDriverShim.

  3. Check the certificates in the Notes Address Book. Ensure the Notes certifier names (i.e. "/O=MyOrg", "/OU=West/O=ACME") are properly defined within the NAB. Use Domino Administrator to view the certificates and check their existence. It is possible to make mistakes when migrating cert.id files into the NAB and they appear to have been migrated into the NAB, but AdminP cannot find them.

  4. Use type-less certifier references for the values passed to the NotesDriverShim. Try passing the certifier-name and old-certifier-name attributes with type-less names (e.g. certifier-name="/ACME" old-certifier-name="/West/ACME")

  5. When running on the NotesDriverShim on a machine that is not the Domino Server, the NotesDriverShim may not properly issue MoveUserInHeirarcyComplete requests. This is a problem with the MoveUserInHierarchyComplete method within the Lotus Notes APIs, and how it operates when running on a Notes Client workstation. Apparently, the MoveUserInHeirarcyComplete method defaults to using the local names.nsf when searching for certificates, instead of accessing the appropriate names.nsf on the Domino server. Here's a Lotus Notes/Domino Forum reference that mentions the problem: http://www-10.lotus.com/ldd/nd6forum.nsf/55c38d716d632d9b8525689b005ba1c0/549df76cf1d7f64785256e9f003a594a?OpenDocument


    1. The work-around is to copy the certifiers into the local address book (names.nsf) on the Notes client workstation. This can be easily done using the Domino Administrator on the Notes client workstation and referencing the Domino Directory, selecting the 'Certificates' view and using the 'Copy to Personal Address Book' tool-bar option (that is presented for that view) for each of the certifiers that the NotesDriverShim utilizes.


The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.