Security

Showing 314

Autopopulated group must not resave group document, if content has not changed.

Now even if Autopopulated group content has not changed, server still Resave Document. It would be better, if content is actual, server does not resave group document. From ChangeManagement, Compliance prospective all changes should be logged, and...

9 months ago in Domino / Security 0 Under Consideration

18 VOTE

Domino has no control on how browsers store username/passwords in the local cache of the broswer, it sending password in plain text to Server

SPR #RKUR8VXDYM Domino has no control on how browsers store username/passwords in the local cache of the browser. Using customise login page created in inotes.nsf and this is set in Domcfg.nsf. Both the Username & password fields are set with ...

almost 7 years ago in Domino / Security 3 No Plans to Implement

9 VOTE

Internet Lockout not per server, but per website or per domain.

When you have a clustered Domino backend for hosting websites or web-apps, and you have a loadbalancer in front of them......and internet lockout only occurs per server.....it's possible that you end up on another cluster-member and can continue t...

over 3 years ago in Domino / Security 2 Assessment

9 VOTE

Force logout web mail users (i.e. Verse & iNotes)

Customer wants to apply a force logout to users whose accounts are compromised. Changing their password or restarting http task does not automatically logout the user. Waiting for token expiration could be risky if set for a long duration. Current...

over 3 years ago in Domino / Security 1 Under Consideration

1 VOTE

HCL Domino does not support using email addresses in groups

While switching the Authentication provider to Microsoft Entra using OIDC. The user identities returned from Entra are in email address format. It seems that email addresses added to group memberships are not being used for authorization to applic...

5 months ago in Domino / Security 0 Needs Review

11 VOTE

Extend User Details / Activity table size in Notes Database properties

The database property / "User details" (the table with adds/reads/writes/updates, timestamp and ID) is a limited table which starts overwriting if there are too many entries. On heavily used databases, this table can start overwriting very soon, e...

over 4 years ago in Domino / Security 0 Under Consideration

17 VOTE

Add memberof to Domino LDAP

For user synchronisation with TDI on Connections, or LDAP Filters who should be allowed to access an object (printer, sametime, Connections) it is mandatory to have a ldap memberof search. I know there is a dominoAccessGroups, but this returns the...

over 6 years ago in Domino / Security 1 Under Consideration

9 VOTE

HTTP Cookie limit

When there are more than 4k worth of cookie data passed to Domino, Domino does not capture the information in the CGI variable HTTP_cookie.

over 3 years ago in Domino / Security 0 Under Consideration

2 VOTE

'NSL' for Linux to be able to use password on server.id on Linux servers

I would like to have a way to secure a server.id on a Linux server with a password and not have to manually enter that password on start/restart. On Windows there is NSL, but on Linux we have nothing similar. Working with Information Security I se...

10 months ago in Domino / Security 1 Under Consideration

5 VOTE

Option to enable SMS OTP for Verse (web login)

Give an option to enable SMS OTP to login in HCL Verse or Webmail

about 2 years ago in Domino / Security 2 Already Exists

Please enter your email address

FILTER BY CATEGORY