HCL Domino - Securing Internet passwords - Need a Domino Consultant? Call NotesMail +1 212-599-2048

HCLSoftware Business Partner Domino Consulting Services CRUCIAL Notes Tools +1 212-599-2048	Domino Consulting Services CRUCIAL Notes Tools Domino administration Notes development	Chat now
.

Need a Domino Consultant? Call NotesMail +1 212-599-2048 - HCLSoftware Business Partner

SECURING

Securing Internet passwords
Internet passwords can be subject to attacks by malicious sources. However, there are measures you can take to make Internet passwords more secure.

About this task

Here are some examples of typical password attacks:

One type of attack is an attempt to read all the hashed passwords in the Domino® Directory. A user's Internet password is stored in a hashed version in the user's Person record in the Domino Directory. The directory is publicly accessible to all users of the system. You can protect against this sort of attack by using xACLs to stop access to the hashed passwords.
Another type of attack is that based on guessing passwords when authenticating. In this type of attack, users can still try to authenticate as someone else and try and guess passwords. You protect against this type of attack by using more secure password format, using passwords that are more difficult to guess, or by enabling the Internet password lockout feature on the server.

Use one or more of the following features to secure access to Internet passwords stored in the Domino Directory, or make them more difficult to guess.

More secure password format
Internet password lockout
xACLs
Using more secure password format
When you enter an Internet password and save the Person document, Domino automatically one-way hashes the Internet password field. To improve the default password, use the more secure password format.
Using Internet password lockout
Internet password lockout lets administrators set a threshold value for Internet password authentication failures for Domino Web and Domino Web Access users.
Using xACLs to secure Internet passwords
One way to secure Internet passwords is to use Extended ACLs, or xACLs, to control access based on levels in the naming hierarchy, and at the form and field level. For passwords stored in the Domino Directory, administrators can set up xACLs to limit access to Internet passwords to the users themselves, for accessing their own passwords, and to administrators, for allowing administrative changes to passwords.

Parent topic: Name-and-password authentication for Internet/intranet clients

Help on Help

All Help Contents

Help on Help

All Help Contents