SECURITY

Setting up database access for SSL clients
After you set up SSL on an IBM® Lotus® Domino® server, you must give the clients access to databases on the server.

For anonymous users

If you set up a client for server authentication only, you cannot enter the user's name in a database ACL since the client does not use a user name to access the server. Instead, you add the entry Anonymous to database ACLs and design element access lists. If you do not specify Anonymous access, Domino gives anonymous users -Default- access.

For client authentication

If you set up a client for client and server authentication, you can control the client's access to databases by adding the client's name to database ACLs and design element access lists. You must use the first name listed in the User name field of the Person document for the client. For example, if a User name field contains the entries Alan Jones/Acme, ajones, Alan, AJ; add the name Alan Jones/Acme to the ACL and design element access lists. Alan Jones can authenticate with the server using any of the names listed, but Domino uses the first name in the User name field to verify entries in ACL and design element access lists. It is strongly recommended that the first name be in hierarchical name format.

Related topics