Scenario:Domino Server 6.x
Web Security:
Anonymous: Yes
TCPIP: Yes
Description:
After to configure servlet folder on the Domino folder, we setup a file protection to avoid accessing the servlet folder by Anonymous user. That is meaning that only authenticated users will access the servlet folder.
But the problems is “file protections” for the serlet folder are not working.
Please, anybody can help us saying the right configuration or if there is any workaround to fix that.
Subject: Aren’t servlets run with the server ID?
I think that servlets are supposed to use the server ID, which defeats your security here since the server is not Anonymous to itself.
Subject: File protection does not work on Servlet folder
I want the servlet folder being used by a colletion of users (authenticated users) more than everybody (anonymous + authenticated users). It is because “File protections” are a mechanism to give security to Folders via WEB. But, File Protections are NOT working properly on the SERVLET folder. All the requests done to the SERVLET folder are done ANONYMOUS and so, if we want authentication to reach to the servlets located on the server, that is not possible and some of them (servlets) does not run properly.
I hope my explanation was complete.
Subject: RE: File protection does not work on Servlet folder
File protection for servlets is not working.
Thiss issue was not addressed in Domino 6.x
See technote in IBM Knowledge base
http://www-1.ibm.com/support/docview.wss?rs=0&uid=swg21096453
Workaround is available when using Single Sign-on (SSO).
See technote: http://www-1.ibm.com/support/docview.wss?rs=100&q1=servlet+AND+protection&uid=swg21110650&loc=en_US&cs=utf-8&lang=en
Subject: Understood, but I am confused by the Help file
I understand exactly what you’d like to do.
My understanding is, however, that when the server runs a servlet, it uses the server ID and not the user’s ID. For example, in Sametime 3.x, the address dialog popup uses the server ID so you cannot use Reader names fields that depend upon the user who is logged in via the web. I don’t know if this is correct.
The Domino Administrator help file confuses me in this regard as it refers to File Protection documents as the way to secure servlets. Sorry that I can’t help.