Security

Showing 298

DIIOP to enforce password expiration at login

As of now password expiration at login only works for Notes and HTTP authentication. We request to enable to password expiration also works for DIIOP protocol as well when creating session using NotesFactory.createSession.

over 4 years ago in Domino / Security 0 Under Consideration

3 VOTE

Restrict the number of messages a single user can send in 24 hours to a maximum number of messages

Sometimes users are victims of clever phishing emails sent to them. Unfortunately this opens up the use of their valuable credentials to potential hackers. These hackers can then send email using their credentials. If Domino would have an internal...

almost 3 years ago in Domino / Security 3 Under Consideration

2 VOTE

Url scanning blocks ipadress

Add functionlity as with ip adress trying to login with multiple usernames. If an ipadress is trying different non existing url:s that ip will be blocked for x amount of time. Also that url:s can be ”blacklisted” so if an user is trying to access ...

almost 2 years ago in Domino / Security 0 Under Consideration

6 VOTE

Synchronizing of the User ID in mail files ($shimmerid) with the Internet password/ID vault

Synchronizing of the User ID in mail files ($shimmerid) with the Internet password/ID vaultID file can't be uploaded to mail file when SAML is enabled

almost 6 years ago in Domino / Security 0 Assessment

6 VOTE

Fallback to password authentication when SAML has been activated as

Fallback to password authentication when SAML has been activated as needed. Server should accept SAML and password authentication, depending on the policy

almost 6 years ago in Domino / Security 1 Under Consideration

5 VOTE

Log Copy on Database

Information in Domino Log database when someone have created local copy of database.

almost 5 years ago in Domino / Security 4 No Plans to Implement

6 VOTE

Internet password lockout whitelist

The internet passowrd lockout feature needs to be improved, like more logging, idea: DOMINO-I-389. It would be an improvment if there would be an option to add a whitelist for IP ranges. So if a user is locked out he could still login within an tr...

almost 6 years ago in Domino / Security 3 Under Consideration

2 VOTE

Lock certain ACL entries ( extra option ) because users can remove them by deleting the entries in delegations

We added certain groups in the Calendar delegations in order to perform audits or application access. Users can remove them, because it is a adminp request that deletes this entry. We would like to see the ACL enhanced by adding an extra option in...

about 2 years ago in Domino / Security 0 Under Consideration

6 VOTE

users locked out due to wrong password or wrong password strikes have their own Statistics in Domino, so later they can be monitored.

Another idea on Domino.ideas.aha.io is to log per protocol strikes and locks. If we can create new statistics this would help to monitor security with DDM or external solution Security Security.POP3.Strikes.Total = 30 Security.POP3.Locks.Total = 2...

about 6 years ago in Domino / Security 0 No Plans to Implement

6 VOTE

Password Security / Policy for Internet MUST track history for specified reuse

This capability is missing on the Internet side. Password policies everywhere now require that you cannot reuse past passwords for at least 'x' iterations. Security/Auditors/Risk people are demanding that we write something to ensure that browser ...

about 6 years ago in Domino / Security 0 Under Consideration

Please enter your email address

FILTER BY CATEGORY