Hi,
I am writting a little web application, it is quite simple. The user should authorize him self (from any computer, from computers that dont have a notes client), and do some things with the database.
It is the authorization process that I am unsure about!
I thought about writting a login form which prompts the user for password and username and requieres SSL.
Is this the best solution? Or are there some better ways for the user to authorize and login!
Thanks
Branimir
Subject: Web access
I thought Lotus NOtes authenticate user automatically?
Subject: RE: Web access
I am not sure how it works.
If a user logs in from a computer that hasnt notes installed he cant make use of his id file?
Subject: RE: Web access
Hey
I have just done this myself.
You need to use the DOMCFG.nsf ( type this into domino help in designer ) This will tell you what you need to do.
You need to use the form mappings… But the topic is pretty big so your better off having a look on designer help.
If a user does not have a notes id, register the person in the address book as a person document ( no need for an id )…
For a password, enter a password in the Internet Password field.
let me know how you get on.
Subject: RE: Web access
You don’t necessarily need to do anything with the domcfg.nsf to do web authentication. The default mappings will work fine. If you want something different than the default look and behavior, go for it. It’s also good to know how things work, so I’m not discouraging reading up on domcfg…I’m just saying that it’s not necessary to do anything with it.
You set the SSL flag in the database properties, and then set the ACL up for the database and Domino will handle authentication on its own. If your server doc’s Session Authentication field (Internet Protocols\Domino Web Engine) is set to anything but Disabled, it will use the forms in domcfg.nsf. If the field is set to Disabled, the server will throw http_authenticate and the browser will pop its own authentication window.
Subject: RE: Web access
Actually with a little help of Mr. Phani Kiran i have succeeded to build the login proccess, but I am not sure about the loging of. And I wonder about the security and should i check the require SSL option on my forms. And will i be able to use @Formulas @UserName, @createdby and ect with the user from web?
Thanks
Subject: RE: Web access
“but I am not sure about the loging of”
I’m not clear on this. Are you talking about logging out, or logging the activity?
I would recommend if you want to keep the restricted databases/forms encrypted that you should set the require SSL property for them. It’s less stressful than relying on having “https” in your links.
Logging is handled by the server if you have it turned on. It’s not on by default, I think. Server doc, Internet Protocols, HTTP. There’s a section called “Enable logging to”. The Log Files field controls whether the web logging is done to text files. The Domlog.nsf field controls logging the information to a domlog.nsf database.
Forcing a session logout is relatively easy. I’m an admin so I’m not sure of other programmatic ways of doing things but adding “&logout” to a URL will force the user to log out.
Subject: RE: Web access
I am not sure about security…
But for all web @commands you can use, type in
“@command on the web” in designer help.