Forcing login in the browser

HCL Domino Domino Forum
1

Hi, I am a beginner on development of applications for web. I would like to force the user to login on the application before uses it, but I don’t know how to do it.Thanks in advance,

2

Subject: Forcing login in the browser

From the Desinger online help:

URL commands for required authentication

Login argument

To force user authentication regardless of the database access control list, append the Login argument to any Domino URL. This ensures that anonymous Web users who weren’t initially prompted for a name and password when they entered the site are required to supply a name and password to complete tasks that require user identity.

Note The URLs shown below are for example only. They do not point to existing Web sites.

Syntax

http://Host/DatabaseDirectory/DatabaseFileName?OpenDatabase&login

Examples

http://www.mercury.com/sales/leads.nsf?OpenDatabase&login

Logout command

You can specify a default logout time period to log the Web client off the server after a specified period of inactivity. This forces the cookie that Domino uses to track the user session to expire. Automatically logging a user off the server prevents others from using the Web client to impersonate a user if the user leaves the workstation before logging off. If you enable session-based name-and-password authentication for a server, users can also append ?logout at the end of a URL to log off a session.

Syntax

http://Host/DatabaseDirectory/DatabaseFileName?Logout

http://Host/DatabaseDirectory/DatabaseFileName?Logout&RedirectTo

Examples

"http://acmeserver/sessions.nsf?logout."http://acmeserver/sessions.nsf?logout

"Http://acmeserver/sessions.nsf?logout&redirectto=/logoutDB.nsf/logoutApp?Open"http://acmeserver/sessions.nsf?logout&redirectto=/logoutDB.nsf/logoutApp?OpenPage

Http://acmeserver/sessions.nsf?logout&redirectto=http://www.sales.com

You can build this expression into an application – for example, using it in a button – or type it in as a URL.

See Also

Domino URL Commands

Security in an application

3

Subject: RE: Forcing login in the browser

Thanks for your response! When I put the login command on the domino url, the browser couldn’t make it work. Is there something I have to configure on the server?

Now I have another question: how can I force user authentication using the database access control list?

Thanks in advance again,

4

Subject: Use the “Public Access” feature

  1. Create a Page named “Home”. Set this page’s security to “Available to Public Access users”. In Database Properties, launch this page when the database is opened from the browser.

  2. On the Home page, include a hotspot whose URL includes the “&login” parameter. The URL can open another page, view, frameset, etc. in your database.

  3. Set the database ACL to allow “No Access” for -Default- and Anonymous. Check “Read public documents”.

  4. Do not include the “&login” parameter in the URL you provide to users who want to open the database. Just provide the standard database URL.