User ID and password

HCL Domino Domino Forum
1

Hi friends,

I got a challenge here. Is it possible if i want to get/pass the notes ID and password to an URL? eg : “http://myserver/login.asp?user_id=irene&password=password”. Hope someone can help me…

Thanks,

irene

2

Subject: User ID and password

Remember, the username/password of a NotesID has nothing to do with the username and password you use to log into a web application. On web you use the username(s) and password as specified in the person document in the public addressbook on the server.

Anyway, what you want, can be done ofcourse. This is an example on how I could log into my mailfile, just by clicking on a bookmark in my IE browser:

http://www.mydomain.no/names.nsf?login&username=rune carlsen&password=password&RedirectTo=/mail/rcarlsen.nsf

Though, remember, doing this does lower your security, as you pass on the username and password as clear text. Anyone can grab this URL if they listen to your network, and then, also your usernames and password. Though, if this is for internal use only, I don’t see the problem.

Best regards,

Rune Carlsen

http://www.dominozone.net

3

Subject: RE: User ID and password

thanks 4 ur response. actually, the situation is…from java application, submit button will send mail notification to user (mail notes client). then, when user receive the mail he will click the URL to response the document. and, they don’t want to login again. is it possible??

4

Subject: RE: User ID and password

Not really. There’s no way to “capture” the user’s password at Notes login (except by using a keystroke logger), and you can’t get the password from the id file programmatically (it’s not actually stored). Then there’s the little problem of the web password not necessarily being the same as the client password. Finally, you never, ever want to send the Notes password in the clear – there are way too many bad things that can happen if someone were to get hold of both the password and a person’s Notes id file. Finally, most browsers (“most browsers” being IE) would reject an in-address login attempt these days; http://username:password@server/database.nsf is no longer allowed.