HCL Domino Ideas Portal

Welcome to the #dominoforever Product Ideas Forum! The place where you can submit product ideas and enhancement request. We encourage you to participate by voting on, commenting on, and creating new ideas. All new ideas will be evaluated by HCL Product Management & Engineering teams, and the next steps will be communicated. While not all submitted ideas will be executed upon, community feedback will play a key role in influencing which ideas are and when they will be implemented.

For more information and upcoming events around #dominoforever, please visit our Destination Domino Page

1 VOTE

Status Shipped

Workspace Domino

Categories Security

Created by Guest

Created on Mar 23, 2021

Internet password hash quality

Customer wants to prohibit :

Each user is able to open the properties from each other person document and from there you can copy the hash value of the internet password and run it against a brut forth crack tool.

How can they prohibit this that each user, regular having author access to the directory, that he is able to take the password hash from each other user ?

Attach files

Enter a subject

Admin

Thomas Hampel

Reply
| Mar 23, 2021

In Domino V11.0 and later, you can configure HTTP authentication against the IDVault, so the HTTP password is not required anymore. https://help.hcltechsw.com/domino/11.0.1/admin/wn_authenticate_web_users_with_Notes_ID_passwords.html

0 reply Hide replies

Guest

Reply
| Mar 23, 2021

https://www.ytria.com/blog/deep-dive-domino-security-part-1-understanding-ibm-domino-password-hashes/

0 reply Hide replies

Copyright © 2023 HCL Technologies Limited