Hi all,
There is a inventory system in my company which is made on a Domino 5.x server,say inventory.nsf.For the ACL,an amount of users are added with appropriate access right,users have to use their own notes id in order to access that database and of course,with notes client.
Recently,we have an idea of using web access for that,means:
http://myserver/inventory.nsf
Then a window will pop and prompt for password.
Because we use notes id for authentication previously and didnt’ set any internet password for those users,so it’s frustrating for me to add those internet password inside the Domino Directory.
So,is there any way to use notes id to authenticate when i’m using Browser to access that database?
Thanks a lot in advance.
Subject: Use password sync instead
Firstly, no, there’s no way to force browser users to authenticate using their Notes IDs, and I think that’s not the best solution to your problem.
Your post states that you’re using release 6.5.5, but you also say that the app is on a Domino R5 server. If the users have Notes 6.5 clients and your mail and admin servers are also 6.5, then I think your best approach would be to use the password syncronisation capability in version 6.5.
You can read about it in the topic “Managing Internet passwords” in Domino Administrator Help. Here’s a relevant excerpt:
You can also synchronize a user Internet password stored in the Person record in the Domino Directory with the user’s Notes password. This means that users can use the same password to log in to a Domino server through the Notes client and a Web browser. You can synchronize Notes and Internet passwords for individual users during user registration, or you can enable Notes-Internet password synchronization for multiple users on a server through the use of a security settings policy document.
If you synchronise passwords in this way, then the Domino R5 server will also use that same password (same directory, therefore same password).
If your clients or admin/mail servers are at Domino 6.5, then I’d see this as a good reason to do the upgrade.
Hope that helps,
Rupert Clayton
London
Subject: Alternatives?
Thx for your reponse recently,i have that thought as well,but the system’s owner told me that those users are not exist in the Domino Directory,they only have a Notes id file for authentication,so that means if i have to make those internet password for them,i have to create all the person documents as well,it’s about 800+ users,that’s why i said frustrating.Anyway,i know the fact that it’s not possible to use Notes id to authenticate for any web access.
So besides,is there any way to make those person documents by batch with those Notes id?
Subject: You need more extensive help
It’s possible I’m just misunderstanding things here, but it appears that you’re operating a Domino infrastructure with 800+ users of the Notes client, none of whom have person documents in the Domino directory. This will work (after a fashion) but it’s seriously bad practise. I’m assuming you don’t use Notes/Domino for mail (because you won’t be getting any.)
You have put some money and/or effort into developing or purchasing a web application to be used by these people, but either your administrator(s) or the company that assisted you with this never identified the lack of directory entries as an issue that needed resolving.
You either need to hire a competent administrator, or find a consultant who can come in and fix your infrastructure (and maybe train your existing staff). This is fixable, but you need someone experienced to help you.
Also, there’s not much reason to remove 800 person documents from the directory, except perhaps in a misguided attempt to avoid paying proper license fees. So you’d be well advised to check that your licenses are up to scratch as well.
You can search the list of IBM Business Partners here to find one with Lotus skills in your area:
http://d03bphrb.partner.boulder.ibm.com/bpconnections/bpcms.nsf/PublicSearchGUI?OpenFrameset&NL=en
Good luck,
Rupert
Subject: Alternative
Do the users exist in some other LDAP directory in your company? Maybe your shop is running Windows and you have Active Directory populated with all their names and passwords?
If this is the case, you can always try setting up a Directory Assistance LDAP document that references the LDAP server with the people. Make sure the DA document has “Trusted for credentials” set.
HERE’S THE DOWNSIDE THOUGH: If you set this up, then you’re going to need to add either individual names from the LDAP directory to your ACL, or add groups from the LDAP directory. You’ll need to instruct your users that they can’t log in using their Notes name, but they must use their LDAP name and password.
Maybe this will help you.
+Josh Burchard+