Disable 'Save password' for http login?

HCL Domino Domino Forum
1

I recall seeing somewhere a way to NOT allow a user to ‘Save password’ when they login with a browser (or at least not perform it if it was selected). I think it was at the end of the URL, but can’t find it anywhere.

This feature would help keep things secure when multiple users use the same machine for iNotes.

2

Subject: Disable ‘Save password’ for http login?

You need to use session authentication.

Then read this:

http://tinyurl.com/6j81

3

Subject: RE: Disable ‘Save password’ for http login?

Thanks…that was precisely the post!

But…(there always is one…)…

I’m using the WebMailRedirect utility, not a Custom Login form. This triggers the typical username / password challenge.

I wonder if anyone has monkeyed with WebMailRedirect to present a Custom Login form.

I wasn’t planning on digging in that deep to that utility, but I may need to.

Is there anything in NT / IE that can be done to prevent password saving?

Thanks again for taking the time to respond.

4

Subject: Re: Is there anything in NT / IE that can be done to prevent password saving?

Sorry. Don’t know the answer to that one.

Good luck.

5

Subject: RE: Disable ‘Save password’ for http login?

I use a custom login form and I use WMR. For the versions of these that I downloaded from the Sandbox, the two features are independent.

6

Subject: Correct…WMR and DCLF are independent!

Thanks for that clarification. I wasn’t clear on the mechanics of session authentication and how it relates (or not) to the destination URL.

I now have both WMR and DCLF in place and working.

Now back to the original challenge of keeping the password from being ‘saved’, but I have something I can deal with (a Form in DCLF) and the info was provided before:

“autocomplete="off"”

Thanks again!

7

Subject: One more thing though

Keep in mind that the DCLF.NSF posted on the sandbox was designed for R5. That design has been consequently incorporated into the default domcfg.ntf for R6, so on an R6 server, you might aswell just use the domcfg.ntf…(mostly because new things like password change requests etc. have been added to the domcfg.ntf which are absent from the dclf.ntf).

8

Subject: Didn’t know THAT…thanks!

Wow, that seems somewhat important w.r.t. this discussion.

Thank you for pointing that out.