Security

Showing 314 of 8712

Autopopulated group must not resave group document, if content has not changed.

Now even if Autopopulated group content has not changed, server still Resave Document. It would be better, if content is actual, server does not resave group document. From ChangeManagement, Compliance prospective all changes should be logged, and...

9 months ago in Domino / Security 0 Under Consideration

18 VOTE

Domino has no control on how browsers store username/passwords in the local cache of the broswer, it sending password in plain text to Server

SPR #RKUR8VXDYM Domino has no control on how browsers store username/passwords in the local cache of the browser. Using customise login page created in inotes.nsf and this is set in Domcfg.nsf. Both the Username & password fields are set with ...

almost 7 years ago in Domino / Security 3 No Plans to Implement

9 VOTE

Internet Lockout not per server, but per website or per domain.

When you have a clustered Domino backend for hosting websites or web-apps, and you have a loadbalancer in front of them......and internet lockout only occurs per server.....it's possible that you end up on another cluster-member and can continue t...

over 3 years ago in Domino / Security 2 Assessment

9 VOTE

Force logout web mail users (i.e. Verse & iNotes)

Customer wants to apply a force logout to users whose accounts are compromised. Changing their password or restarting http task does not automatically logout the user. Waiting for token expiration could be risky if set for a long duration. Current...

over 3 years ago in Domino / Security 1 Under Consideration

11 VOTE

Extend User Details / Activity table size in Notes Database properties

The database property / "User details" (the table with adds/reads/writes/updates, timestamp and ID) is a limited table which starts overwriting if there are too many entries. On heavily used databases, this table can start overwriting very soon, e...

over 4 years ago in Domino / Security 0 Under Consideration

17 VOTE

Add memberof to Domino LDAP

For user synchronisation with TDI on Connections, or LDAP Filters who should be allowed to access an object (printer, sametime, Connections) it is mandatory to have a ldap memberof search. I know there is a dominoAccessGroups, but this returns the...

over 6 years ago in Domino / Security 1 Under Consideration

1 VOTE

HCL Domino does not support using email addresses in groups

While switching the Authentication provider to Microsoft Entra using OIDC. The user identities returned from Entra are in email address format. It seems that email addresses added to group memberships are not being used for authorization to applic...

5 months ago in Domino / Security 0 Needs Review

9 VOTE

HTTP Cookie limit

When there are more than 4k worth of cookie data passed to Domino, Domino does not capture the information in the CGI variable HTTP_cookie.

over 3 years ago in Domino / Security 0 Under Consideration

17 VOTE

Increase the number of roles allowed in a database

I believe that the current limit is 75 roles. For most databases this is enough, but for some it is not. Please increase this limit.

almost 7 years ago in Domino / Security 0 Under Consideration

6 VOTE

Web query open database - agent running before continuing loading server side..

Same as Web query open on a form I should very much like to have the possibility to run a Web query open database with user priveliges. This way I could use third party (my own) two factor authentication to check if user are authenticated and poss...

over 2 years ago in Domino / Security 2 Needs Clarification

Please enter your email address

FILTER BY CATEGORY