Skip to Main Content
HCL Domino Ideas Portal

Welcome to the #dominoforever Product Ideas Forum! The place where you can submit product ideas and enhancement request. We encourage you to participate by voting on, commenting on, and creating new ideas. All new ideas will be evaluated by HCL Product Management & Engineering teams, and the next steps will be communicated. While not all submitted ideas will be executed upon, community feedback will play a key role in influencing which ideas are and when they will be implemented.

For more information and upcoming events around #dominoforever, please visit our Destination Domino Page

Status Already Exists
Workspace Domino
Categories Integration
Created by Guest
Created on May 12, 2023

Option to turn off /api response on newer domino servers

Newer domino versions responds to /api even if I haven't enabled or want to use any api services against this server. The api server is implemented before the Redirection rules in Domino so I can't create a rule that will redirect a client accessing that url.

I don't want to expose things that isn't enabled or isn't used so some options that will turn this off completely and also perhaps only display enabled services. And all of this in a security perspective any thing exposed has a potential security aspect to it.

  • Attach files
  • Admin
    Thomas Hampel
    Reply
    |
    May 15, 2023

    Update: just tried and it is working even with a normal redirect rule.

  • Admin
    Thomas Hampel
    Reply
    |
    May 15, 2023

    The /api is an endpoint for Domino Data Access services and if disabled will still respond indicating that it is not enabled, if enabled it will respond with something else.

    What you can try is substitution rule which are applied before redirect rules and are applied early in the request life cycle. After that a redirect will work. E.g.
    subsitute /api with /foo and then redirect /foo to something else.

  • Guest
    Reply
    |
    May 12, 2023

    I want to beable to create a rule that prohibit users from accessing that url. But they don’t have any effect, should they have that?

  • Admin
    Thomas Hampel
    Reply
    |
    May 12, 2023

    Do you have any redirection rules in place that might cause this effect?
    Can you please open a support ticket to troubleshoot this issue?