I would like to hear any feedback on the Pros and Cons of storing the Notes Id’s in the Domino Directory.
Are there any security risks?
I can’t seem to find any info within this forum
Thank you
ron
I would like to hear any feedback on the Pros and Cons of storing the Notes Id’s in the Domino Directory.
Are there any security risks?
I can’t seem to find any info within this forum
Thank you
ron
Subject: What are the Pros and Cons to storing ID’s in Domino Directory
Thank you for everyone that has replied, These are the answers that I was looking for. This gives me a good direction. We are trying to impliment a Zero Touch install and one recommendation is to have the Notes Id’s stored in the Dom. Dir. I’ve been working with Domino for about 6 months now and I certainly don’t have a clear understanding of the whole Domino security.Again, I thank you for your input.
ron
Subject: What are the Pros and Cons to storing ID’s in Domino Directory
This is by no means a comprehensive answer, but here are my thoughts…
As long as you don’t use a “standard” password for all accounts, I would store the IDs in the Domino Directory. That saves you the time of storing the ID somewhere else that must then be given to the end user during setup. If you do use a “standard” password, then there is a definite security risk.
Even if you use a “standard” password, storing the ID on removable media can pose a security problem because anyone who knows the standard could log in and impersonate the end user.
Putting the ID on removable media when you don’t use a standard allows the user to then carry the ID file with him/her and can then log into other machines within your domain. However, I would recommend setting up roaming if your end users need to do this.
Just my thoughts.
Subject: What are the Pros and Cons to storing ID’s in Domino Directory
Hi,
First-- ![]()
And —
Excellent redbook
http://www.redbooks.ibm.com/abstracts/sg247017.html?Open
p.227
Note: The registration process permits the Notes user ID of the registered
user to be attached to the Person document. This is strongly discouraged,
since the Domino directory is public by nature and Notes user IDs should be
kept secure.