Is there a way to prevent an administrator from changing an internet password from the domino directory?
We would like the option to change the internet password to be available ONLY to the user.
Is there a way to do this?
Subject: Internet Password
Daniel,
The question is “WHY” would you want that your users only can change internet passwords?
What if a user forgets his credentials? Someone must be able to change it / restrieve it for you !!
Greetz,
Ron
Subject: RE: Internet Password
if the admin can easily change the internet password, can’t he then access anyone’s mail box?
maybe a system like ID recovery exists, where there is need for more than one admin to be able to reset an internet password…
Subject: RE: Internet Password
He might. However there are several other methods for an admin to read someone else’s mail than reseting the password. You see, the password is stored encrypted, so if an aministrator changes it, he won’t be able to put the old password, and so the evidence will remain that someone has changed the password. Admin could only put the old password if he knew it in the first place. So yes, it is possible for him to read the mail, but it won’t go unnoticed. However there are several other methods to read the mail, including having the Full Administrator access, having the right to set the ACL on a file (which you can copy from the server to your own workstation and then noone will even know, as you won’t open the file on the server), or having the original user’s id file from the time his/her account was created (with a password set by administrator). So if you want to make sure that administrators don’t read mail, you would have to restrict their rights very tightly. I guess you could do it by giving them some restricted accounts and having id files for full access admin accounts stored somewhere in a safe. You would also have to have a procedure for creating the users’ accounts with someone checking what the creating admin is actually doing.
Subject: RE: Internet Password
Daniel,
Are you an admin or user?
An administrator is supposed to acces someone’s mailbox if there is a problem. Also when he is not in the acl of your mailbox he can enter it( if he is a full administrator).
Its all a matter of trust there. An admin does not need to know your internet password to gain accesto your mailbox to.
he can acces your mailbox via your mailbox on the server if he needs to.
Just trust your admins to do their job…
Greetz,
Ron
Subject: RE: Internet Password
i’m part of the admin - the nature of the organisation asks for high data security. the way we are set up, an admin can never gain access to a mailbox without the user being present. the admins are not super administrators…
Subject: RE: Internet Password
Hi Daniel,
I am aware that there are many configurations possible. But domino is already set up to be very secure.
But what are you doing in case a user cannot login or forgets his HTTP password?
I do not believe that the internet password field can be that way that only the user can change it.
Subject: RE: Internet Password
Yeah, without sounding snobby, users WILL forget their passwords, as sure a rain follows rain (in Ireland it does). A user sets their Internet Password, Admin will not know what it is as it is encrypted. Admin can reset the password but the user will know straight away someones been poking about.
As the others have said its a matter of trust.
Cutting Admin out of the loop is just asking for trouble.
Besides if you cant trust the Administrator, who can you trust???
Subject: RE: Internet Password
In secure enviroment it can make sense, that the administrator did not know the users internet password, although it makes administrator works more difficult. Using the full administrator modus the admin acts with his own ID-File and because of this a controller or revisor can verify his doing. When he use the users HTTP-password, he his working with the identity of the user, which is a significant different situation. When the user forget his HTTP-Password and he has an Notes-ID too, he can always choose a new password by editing his Person-Doc in names.nsf, where he normaly has Author access.
Subject: Internet Password
I agree to Ronny. The question is why?
A simple solution is to hide the row in the persondoc, where the internet password is saved, when the username differs from the owner field. This is not a really save way, cause an admin has enough rights to redesign the person form, but it makes it a little bit more complicate.