22.12.2012 Views

Front cover - IBM Redbooks

Front cover - IBM Redbooks

Front cover - IBM Redbooks

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Default logout time period<br />

You can specify a default logout time period to log the Web client off the server<br />

after a specified period of inactivity. This forces the cookie that Domino uses to<br />

track the user session to expire.<br />

Automatically logging a user off the server prevents others from using the Web<br />

client to impersonate a user if the user leaves the workstation before logging off.<br />

If session-based name-and-password authentication is enabled for a server,<br />

users can also append ?logout at the end of a URL to log off a session, for<br />

example:<br />

http://acmeserver/sessions.nsf?logout<br />

It is also possible to redirect the logout to a design element or URL, for example,<br />

the following URLs:<br />

http://acmeserver/sessions.nsf?logout&redirectto=/logoutDB.nsf/logoutApp?Open<br />

Http://acmeserver/sessions.nsf?logout&redirectto=http://www.sales.com<br />

It is possible to build this expression into an application (for example, using it in a<br />

button), or type it in as a URL.<br />

Maximum user sessions<br />

You can specify the maximum number of concurrent user sessions allowed on<br />

the server for single-server session-based authentication only. If server<br />

performance is slow, this number can be reduced.<br />

Internet password management<br />

Domino 6 provides features for managing Internet passwords for session-based<br />

authentication. This is detailed in the Lotus Domino 6 Administration product<br />

documentation and in the Lotus Domino Administrator 6 Help file.<br />

Note: If the servers in the organization are set up for round-robin DNS, the<br />

multi-server (or single sign-on) option for session-based name-and-password<br />

authentication should be considered for use. Servers cannot store the session<br />

information in memory when using round-robin DNS with the single server<br />

cookie. In addition, if a server is restarted or crashes, session information is<br />

lost, and then users must re-enter their names and passwords. This will not<br />

occur with the multi-server session authentication option.<br />

Multi-server session-based authentication (SSO)<br />

Multi-server session-based authentication, also known as single sign-on (SSO),<br />

allows Web users to log in once to a Domino or WebSphere server, and then<br />

Chapter 6. Public key infrastructures 247

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!