Front cover - IBM Redbooks

442 Lotus Security Handbook
Using exceptions
You can assign an exception attribute to either an organizational or explicit policy
to allow the user to override a policy setting that is otherwise enforced throughout
an organization. When you create an exception policy, you specify only the
settings that will not be enforced. Then when you assign the exception policy, it
exempts users from enforcement of those settings only.
Exception policies are a way to give someone in an organization special
treatment, possibly because of their position or job requirements. For example,
the */Acme policy includes a Registration policy setting that enforces a mail
database quota of 60 MB. However, a small group of employees in Acme need to
exceed this quota. The solution is to create an “exception” policy that includes
only a Registration policy settings document that does not set a quota limitation
on the mail database. When this exception policy is assigned to users, they can
override the database quota setting. Because exception policies defeat the
enforcement of policy settings, use them sparingly.
For specific information about setting up and assigning policies, see the Policies
section of the chapter “User and Server Configuration” in the Domino 6
Administration Guide.
11.1.6 Internet Site security
New for
Domino 6
Internet Site documents are used to configure the Internet protocols supported
by Domino servers. A separate Internet Site document is created for each
protocol – Web (HTTP), IMAP, POP3, SMTP Inbound, LDAP, and IIOP – which
is then used to provide protocol configuration information for a single server, or
for multiple servers in a Domino organization. Specifically, you can create:
► Web Site documents: One for each Web site hosted on the Domino server.
► LDAP Site documents: To enable LDAP access to an organization in a
directory.
► IMAP, POP3, and SMTP Site documents: Create an individual Internet Site
document for each mail protocol for which you enter an IP address.
► IIOP Site documents: Create one to enable the Domino IIOP (DIIOP) task on
the server. This task allows Domino and the browser client to use the Domino
Object Request Broker (ORB) server program.
Internet Site documents make it easier for administrators to configure and
manage Internet protocols in their organizations. For example, prior to Domino 6,
if you wanted to set up a Web site in your organization, it was necessary to
configure each Domino server in the domain with Mapping documents, Web
realms, and File Protection documents. If you had virtual servers and virtual
hosts, you had to do the same thing for them. In Domino 6, you can configure a