Security

Showing 119

Update Domino SAML IdP configuration when ADFS Token Signer Certificates has been changed

Once a year, ADFS must change it's Token Signer Certificate. 2 weeks before the expiration of it's old on, ADFS creates a second new one. Connected application will detect this second one and will change their configuration automatically. HCL Dom...

almost 5 years ago in Domino / Security 6 Under Consideration

3 VOTE

Block access ( HTTP / SMTP ) for entire countries instead of separated ipranges

We need to block certain countries from accessing Domino by HTTP and/or SMTP. For now SMTP is important. Now it's not possible because the amount of ipranges per/country are huge. Like Russia: 45,315,584 ipaddresses and 8799 ip-ranges. If you add ...

5 months ago in Domino / Security 3 Under Consideration

12 VOTE

Directory ACL for HTTP access

If you have Domino server used with internet site for many clients, a requirement is configure specific folder and subfolder for every customer access. In Apache HTTP, NGINX you have this possibiliy.. in Domino, the only way is manage the security...

almost 2 years ago in Domino / Security 1 Under Consideration

10 VOTE

Configure the Domino HTTP server to ignore "Authorization: Bearer" headers on Domino 12.0.2

This has always worked well in Domino 10, 11 and 12.0 but now HCL has implemented an option on the internet site to use a bearer token. The problem with this option is that you then need to configure an OIDC provider which is not well documentated...

over 1 year ago in Domino / Security 3 Under Consideration

38 VOTE

When a person or Group added to ACL, it is always unspecified while user type is known when selecting from NAB

When we add entry to ACL, we have directory and we see user type, User, Group, Server, but when Added to ACL we should always set this from UNSPECIFIED to proper type again. seems few lines of code will make it for friendly

over 6 years ago in Domino / Security 0 Under Consideration

8 VOTE

Add CScan function / option: Scan on upload

This IDEA is is to enhance CScan to scan files upon / during an upload function. HCL Connections has the ability to utilize ICAP for scanning files during the upload. We would like to see something similar implemented for HCL Domino. Currently we ...

over 1 year ago in Domino / Security 0 Under Consideration

12 VOTE

Block users that dont have a smartcard enabled ID-file

Today it is possible for users to smartcard enable their own ID-file and then use the smartcard to login to the Notes environment. Make it possible to block users that dont have a smartcard-enabled ID. Or in some way force users that they must use...

almost 3 years ago in Domino / Security 0 Under Consideration

13 VOTE

Add a blanket grant for the XPages JVM to the default java.policy file

I just lost two days, just to find out that our RuntimePermission exception (getClassLoader) in Java is caused by a missing setting in a java.policy file, somewhere deep in the Domino tree. In the end, after trying several different settings, the ...

over 3 years ago in Domino / Security 3 Under Consideration

13 VOTE

Internet Password History and Complexity

Password history and complexity checks are possible on notes id passwords but for internet password validation so we have to use using custom code, it would be nice to include the internet password history and complexity as part of standard Domino...

over 3 years ago in Domino / Security 1 Under Consideration

2 VOTE

RFC 8058 compliant functionality is required

Google will apply "Email sender guidelines" with enhanced anti-spam measures from February 2024. As a result, e-mails from companies that do not have sufficient countermeasures may not be delivered to Gmail accounts. The ability to insert MIME hea...

7 months ago in Domino / Security 1 Under Consideration

Please enter your email address

FILTER BY CATEGORY