Password Synchronization in iNotes and Lotus Notes

HCL Domino Domino Forum
1

Hello all,

Our organization wants to enforce a password policy that would allow every user to have the same password on iNotes as well as Lotus notes (ie internet password and Lotus password must be the same at all times).

This implies that if a user changes his password on iNotes (ie internet password) the change should automatically be effected on the users Lotus Notes password (i.e. id file) and vice versa.

Please is this possible? It appears that the two passwords synchronize only when you change the password from lotus Notes but when changed from iNotes the Lotus Notes password does not change.

Again, the option “force user to Change Internet password on next login” available on the administration tab of the person document doesn’t work on iNotes. Please what could be responsible?

Please I need your assistance regarding this.

Thanks a million for your anticipated assistance.

Austine.

2

Subject: Password Synchronization in iNotes and Lotus Notes

Changing the password on the Notes ID file involves decrypting the ID file with the old password and re-encrypting the ID file under the new password. If the Domino server were capable of reaching out and automagically securely altering the ID file living on my desktop machine (which might not even be powered up at the time), I’d be horrified. :slight_smile: There may be tricks that might work involving storing the ID file in the directory, but that’s generally a very bad idea from a security perspective unless you’re using a mechanism that prevents a password-guessing attack on the ID file.

In general, the automatic password synchronization between the Notes client and the internet password is one-way only – changes from the Notes ID propogate out to the internet password. You’ll also need to turn on the “more secure internet hash format” before the password synchronization will take effect.

dave