Security

Showing 298

Block access ( HTTP / SMTP ) for entire countries instead of separated ipranges

We need to block certain countries from accessing Domino by HTTP and/or SMTP. For now SMTP is important. Now it's not possible because the amount of ipranges per/country are huge. Like Russia: 45,315,584 ipaddresses and 8799 ip-ranges. If you add ...

6 months ago in Domino / Security 3 Under Consideration

10 VOTE

Configure the Domino HTTP server to ignore "Authorization: Bearer" headers on Domino 12.0.2

This has always worked well in Domino 10, 11 and 12.0 but now HCL has implemented an option on the internet site to use a bearer token. The problem with this option is that you then need to configure an OIDC provider which is not well documentated...

over 1 year ago in Domino / Security 3 Under Consideration

1 VOTE

Add logout endpoint to DRAPI's oauth system

The .well-known/openid-configuration in DRAPI does not show a logout endpoint. A client web application can use the /oauth/authorization and /oauth/token endpoints to authenticate and refresh the authorization token. A logout is currently only pos...

2 months ago in Domino / Security 0 Needs Review

38 VOTE

When a person or Group added to ACL, it is always unspecified while user type is known when selecting from NAB

When we add entry to ACL, we have directory and we see user type, User, Group, Server, but when Added to ACL we should always set this from UNSPECIFIED to proper type again. seems few lines of code will make it for friendly

over 6 years ago in Domino / Security 0 Under Consideration

2 VOTE

Time-based One Time Password (TOTP) two-factor authentication for Domino server

Currently, Multi Factor Authentification (MFA) is only possible via external service providers. However, components such as SMS gateways (e.g. SMSEagle) are already available in many server architectures. For this reason, support for the internall...

4 months ago in Domino / Security 2 Already Exists

14 VOTE

Additional Option required to access database on other Domino Server by Agent Signer ID.

Agent Manager task is currently responsible for execution of all scheduled agents that run on Domino Server. The agent manager is one of the Domino server processes. When any scheduled agent needs to access some other database present on another D...

over 2 years ago in Domino / Security 1 Already Exists

8 VOTE

Add CScan function / option: Scan on upload

This IDEA is is to enhance CScan to scan files upon / during an upload function. HCL Connections has the ability to utilize ICAP for scanning files during the upload. We would like to see something similar implemented for HCL Domino. Currently we ...

over 1 year ago in Domino / Security 0 Under Consideration

13 VOTE

Scrub logs ( anonymize ) before sending it to support "Tell Domino Support"

This is a new feature in Domino V12.0.2 ( now in beta ) It's a great feature, but some companies have strict policies for sending logs to vendors. No server names No ipaddresses No user-names/-information No domain information Nothing what could ...

over 2 years ago in Domino / Security 0 Planning to Implement

35 VOTE

When creating new Web User accounts, enable them and their passwords immediately.

Currently if you add a new user to the Directory for web access, you have to do things like refresh http, refresh some view indexes. Otherwise the user has to wait 5-10 minutes before they can login. In 2018 this isn't acceptable, people expect to...

over 6 years ago in Domino / Security 1 Assessment

19 VOTE

MFA - index.html customization

Customer wanted to change the name of the MFA Login text to the Company name in /MFASetup?index.html. Attaching the screenshot for reference.

over 3 years ago in Domino / Security 2 Assessment

Please enter your email address

FILTER BY CATEGORY