Lotus Notes Extension

The Notes Extension DLL (psns.dll) is triggered by open and close events in the Lotus Notes client. It ensures that both the ID file on a user’s workstation and in the Bravura Security Fabric repository are current. The DLL is also responsible for the initial registration of Notes ID files in the Bravura Security Fabric repository.

Install the Notes Extension DLL on each workstation using a Windows Installer package (psns.msi). See Installing client components to learn how to do this.

Prior to performing the initialization procedure, ensure that you can access Bravura Pass using Internet Explorer.

Once the Notes Extension DLL is installed, the user must perform the following initialization procedure:

The purpose of the initialization procedure is to force the creation of the user’s configuration file and to modify it so that Lotus Notes will load the psns.dll when it is launched. Once the user’s notes.ini file is initialized, the Notes Extension DLL manages ID files as follows:

Post registration

1. User: opens the Lotus Notes client software.

2. DLL: connects to the ID File repository. See Figure 1, “Opening the Lotus Notes client software” .

3. DLL: checks if a new ID file is available and downloads it to the local workstation.

4. User: types his ID file password.

5. DLL: captures the user’s password.

6. User: closes the Lotus Notes client software.

7. DLL: re-connects to the ID File repository. See Figure 2, “Closing the Lotus Notes client software” .

8. DLL: checks if the ID file has been modified by the user and sends a copy of the ID file and password to the ID file repository.

When a password change occurs, the Notes connector on the Bravura Pass server pulls the user’s ID file from the did database table located on the Bravura Pass server, changes it’s password and updates the repository in the did database table on the Bravura Security Fabric server. The user’s record in the Bravura Security Fabric repository is flagged, which will cause the ID file to be downloaded to the user’s workstation once he opens the Lotus Notes client software.

If a user resets his password in Bravura Pass , the new password will be usable only after the user logs into Windows with his own account. For example:

• JDOE is currently logged into a workstation.

• BSMITH from somewhere, resets his Lotus Notes password using Bravura Pass .

• BSMITH goes to use JDOE’s current workstation; however, he is unable to start Lotus Notes with the new password.

• JDOE must log out of the workstation so that BSMITH can log in. BSMITH can then log into Lotus Notes with his new password.

If a user’s ID file cannot be found on the user’s workstation, for example if it is lost or accidentally removed, then the Lotus Notes Extension DLL can download an archived copy from the Bravura Security Fabric repository.

Figure 1. Opening the Lotus Notes client software

Figure 2. Closing the Lotus Notes client software

The Client Single Logon Feature, available with Lotus Notes, is a service that runs on workstations and synchronizes Windows passwords with Lotus Notes passwords.

When a user launches Lotus Notes with this service activated, he is not prompted for his ID file password. This causes an issue for the Notes Extension DLL (psns.dll), which normally captures the password as typed by the user when he logs into Notes. Without this password, initial ID file registration and updates to the Bravura Pass ID file repository will fail.

To solve this problem, you can install Bravura Security’s Lotus Notes SSO Support service on each workstation to capture a users’ passwords when they log into Windows. The psns.dll can then retrieve the ID file password from the support service instead of the Lotus Notes client.

You install Bravura Security’s Lotus Notes SSO Support service, along with Notes Extension DLL, on each workstation using the psns.msi installer package. See Installing client components to learn how to do this.

After users reset their passwords with Bravura Pass , they:

The Notes Extension DLL then downloads the new ID file from the repository in Bravura Security Fabric to the workstation.

In some cases, it may be necessary to download the new ID file before users log back into Windows. This allows programs launched at startup to access the new ID file.

For example, the Blackberry Manager (client), launched through the Startup Tasks folder, prompts users for their Lotus Notes password before they have a chance to open the Lotus Notes client. As a result, users cannot login to the Blackberry Manager using their new password.

To ensure that client programs with Lotus Notes login have access to the most current ID file at startup, you can install the Notes Extension EXE (psns.exe) on each workstation. This program executes during log off, checks if a new ID file exists in the Bravura Security Fabric repository, and downloads the new ID file to the workstation. When users log back into Windows, their ID file is already in place.

You install the Notes Extension EXE, along with Notes Extension DLL, on each workstation using the psns.msi installer package. See Installing client components to learn how to do this.

To set up for ID file synchronization, do the following before testing:

Once the prerequisites are met, install the client components on each workstation. Client components are supported on Windows 7 and newer. This section shows you how to install the:

The Notes Extension DLL is not supported on Windows Server 2008 systems.

To manually install the Bravura Pass Lotus Notes Extension:

Installation is now complete.

The following programs are shipped with Connector Pack.

didtovault.exe -s <server> -t <target> -vault <vault>
               [-ai <IDfile> -ap <password>]
               [-all | -ei <longID> | -ui <longID>]
               [-r] [--retries <N>] [-verbose]

dumpdmno.exe -d <server>!!<databasename> [-ai <adminfile> -ap <password>]-a <attribute> [-all][-preserve] -o <outputfilename> [--instance <instance>][-verbose]

dumpdmno -d win2k4!!psidfile.nsf -ai c:\idfiles\admin.id -ap haikou02-o c:\tmp\domino -a UserID -a Password

nidcopy -i <N> <Dir1> ... <DirN> -server <server> <shrfldr>