Adding Passwords to Webpage

HCL Domino Domino Forum
1

Hi ,

I would like to make available an information page (which I will create using Domino) for some of our clients. I would like to have a password on this page so that not everyone can access it. Is there a way to create several usernames and passwords specifically for online access. Can Lotus handle this and is there a script source anywhere that I could use?

Thanks,

Andrew

2

Subject: Adding Passwords to Webpage

First thing to note about this:

Unless you have a Utility Server license, you must have a user CAL for each person that has authenticated access to your Domino application.

Basically, you create a person record in the Domino Directory (or a cascaded directory) and enter an HTTP password for each user. This can be done in any number of ways (self-registration is probably the easiest, including tools for them to manage their own passwords).

Next consideration: Make sure you have locked everything else down on the server so that they do not start poking around (e.g. Make sure that every database on your server has an ACL entry of anonymous set to No Access). Ideally, this would be a server located outside of your firewall. Hide ALL design elements not needed by web users from the web (Forms, subforms, views, etc). Create an empty $$ViewTemplateDefault so they cannot poke around views.

And so on and so on.

Since you work with the Healthcare industry, HIPAA is very important to accomodate here.

Let me know if I can be of any assistance to you with this as I am not far from you at all.

Best regards,

An Atlanta Area Neighbor

3

Subject: RE: Adding Passwords to Webpage

Yes, I need help with this. how do I contact you?

4

Subject: Adding Passwords to Webpage

In general, the ACL is what causes a prompt for a password – individual documents/pages are not password protected (although readernames fields can protect docs). If you have a database with Anonymous=None, users will be prompted for their pw. Adding “&login” after a URL can cause that too. Domino uses the Internet password in the Person doc of the NAB (or LDAP dir). HTH.