Security

Showing 24

LDAP is not flushing old entries in its database and also auto populates mail address for Domino Groups

A Domino Group initially added an internet address, then it was removed from the document and now when doing ldapsearch, we noticed that address is still being populated in the mail= field. Another scenario was on a newly created test group where ...

7 months ago in Domino / Security 4 Needs Review

1 VOTE

User defined keystore for Domino

Currently, the Notes/Domino v9.x (same with newer versions) can only use the default JAVA trust keystore under Domino application server. The JAVA update overwrites this default keystore. Please add the option to set a custom,user defined keystore...

8 months ago in Domino / Security 2 Needs Review

4 VOTE

Cookie consent functionallity built in

It would be good to have a configurable cookie consent functionallity inside Domino built in from start. Like the one presented on https://help.hcltechsw.com And the configurable option could be accessable using @formula, Lotusscript and Java so y...

8 months ago in Domino / Security 0 Needs Review

6 VOTE

Add Ability To Set Secure Cookie Attribute To Domino Server

Can the ability to set the Secure cookie attribute be added to the HCL Domino server? This could be done similar to the SameSite cookie attribute that was added to Domino version 12.0.x. Most HTTP servers provide the ability to set the Secure cook...

10 months ago in Domino / Security 1 Needs Review

1 VOTE

SAML implementation, can be done safer?

1.) HCL Domino server 12.0.1 (and older) are missing SAML Artifact binding implementation/settings. It has just SAML POST binding :-( Hmm it also works SOAP and inside SAML POST binding, but SAML ARTIFACT binding didn't work for me at all. Is SAML...

11 months ago in Domino / Security 0 Needs Review

3 VOTE

IDVault:Need increase one view to display all these archived user id file document

https://help.hcltechsw.com/domino/12.0.0/admin/vault_automatic_restart_id_sync.html?hl=id%2Carchived Now all user ID file documents display under the default "Vault Users" view For these archived user ID file, which display as ~UserName also in th...

12 months ago in Domino / Security 0 Needs Review

4 VOTE

HTTP Password Changes Timing Issues - AdminP - Domino Caching - etc.

HTTP Password Changes has many challenges as documented by HCL here: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0024871 Other platforms have challenges, but not as severe as this. If Domino is going to be accepted as a r...

over 1 year ago in Domino / Security 2 Needs Review

4 VOTE

TOTP and send code to some email address set by a user.

TOTP authentication code send to an email address which is set by a user will be very use full on some certain situation.

over 1 year ago in Domino / Security 0 Needs Review

1 VOTE

Enable Internet password expiration for other protocols such as LDAP/POP3/IMAP/DIIOP

From Domino Administrator Help: https://help.hcltechsw.com/domino/11.0.0/conf_creatingsecuritypolicysettingsforlotusinotesusers_t.html Internet password expiration settings are recognized only by the HTTP protocol. This means that Internet passwor...

over 1 year ago in Domino / Security 3 Needs Review

1 VOTE

Improve $$LoginUserFormMFA so that it only shows Username & Password fields

I think it would be a lot prettier if the new MFA login form only displayed the Username and Password fields and then on submission you were then prompted separately for the TOTP/MFA code (if required). The new prompt for TOTP/MFA code could then ...

over 1 year ago in Domino / Security 1 Needs Review

Please enter your email address

FILTER BY CATEGORY