Tag Archives: security

Rainer Brandl 15:12 on 2020-06-23
Tags: adminp, , security   

Enforcing password change at the next time for Internet password could be a problem

Yesterday I had an issue at customer where a case at HCL ( CSCS0131265 ) has been opened. Up to the beginning:

with Domino V11.0.1 the great feature for authenticating users accessing via Web protocol like HTTP(s), LDAP,… against the ID Vault is working like a charm. Therefore I registered a lot of people without setting an HTTP password in the person document. Afterwards I enforced the users to change the password after the first login what also worked fine.

You’ll receive the information that the Password Change request has been successfully sent to the Administration Requests what still is working. Now up the problem:

If the AdminP tries to modify the HTTP password in the person document you’ll receive the following error in the server console:

[2904:0005-1378] 23.06.2020 12:55:58 Adminp Request: [Change HTTP Password in Domino Directory] on [Username]

[2904:0005-1378] 23.06.2020 12:55:58 Admin Process: Received the following error performing a Change HTTP Password in Domino Directory request on Username (Path: admin4.nsf; Name: HTTPPassword): Note item not found

So it seems that the Internet Password isn´t set during the user registration Adminp cannot finish the change of the Internet Password.

Rainer Brandl 10:11 on 2020-01-29
Tags: , security,   

Extracting Private Key from PFX file and generating a KYR file

Today I had to create a new certificate at customer site because of a Shitrix attack and had to extract the private key from the PFX file.

It´s quite easy running the following command:

openssl pkcs12 -in path:/myfile.pfx -nocerts -out path:/private-key.pem -nodes

Enter Import Password: password

With this command you extract the private key AND the certificate which you can use for creating the KYR file needed for your Domino environment. You can find your private key and the certificate in the file “path:/private-key.pem” and can copy the text between and encluding —BEGIN PRIVATE KEY— and —END CERTIFICATE—.

 

Rainer Brandl 18:20 on 2019-08-18
Tags: , security   

A great 2 factor authentication tool for Domino

After having received a request for a 2FA solution for Domino I searched the web and found this great solution from cyone – the Two-Factor authentication.

Some mails later with Sergey Golubev he sent me some information about this solution and also the pricing which is extremely straightforward.

Now to the implementation: it took about 30 minutes for implementing this tool for an environment with one server and one test user ( me ). You can choose 3 types of notification – I took the one with the Google Authenticator and it´s running very fine !

The login process is looking this way without great customizations:

login_1

login_2

login_3

You also can exclude some content for the 2FA like Traveler and can choose each single user from your directory for which you can enable the requirement.

Compared with other solutions this is the most simple and effective way for a more secure environment.

 

Update on Monday, August 19th:

Today I checked the feature of the “Self registration” and created the requested database on our server. Just some modifications in the ACL of the main application and the self registration for users works like a charm.

Rainer Brandl 08:03 on 2019-04-19
Tags: kyrtool, security   

Error (0xc000007b) running the KYRTOOL.EXE

Today I ran into the issue on a new notebook that I was not able to run the KYRTOOL.EXE from the Notes program directory.

I copied over the 64bit version ( Windows 10 Pro 64-bit ) and always received the following error message “The application is unable to start correctly (0xc000007b)…”.

After some investigation I just copied over the 32bit version of the KYRTOOL.EXE and everythink was running fine again. Solution is very ease >> IBM Notes is a 32bit application and therefore you have to use the 32bit KYRTOOL.EXE.

You can download the tool here: https://ibm.co/2GmJ4iA

Rainer Brandl 10:40 on 2016-07-26
Tags: maas, security   

IBM MaaS360 launches four new suites

Source: http://www-01.ibm.com/common/ssi/cgi-bin/ssialias?subtype=ca&infotype=an&appname=iSource&supplier=877&letternum=ENUSZP16-0021

IBM® MaaS360® (SaaS) delivers a secure, cloud-based enterprise mobility management platform that provides complete mobility management and comprehensive security of mobile devices, apps, documents, emails, and access to the web from a single portal.

MaaS360 (SaaS) extends across devices, users, applications, documents, and expenses. MaaS360 (SaaS) solutions are available on a secure, multitenant architecture, and offer immediate insight and control without the added costs and complexities of deploying hardware and software, dealing with intricate configurations, and dedicating resources to create and support the solution on an ongoing basis.

MaaS360 (Saas) launches four new suites including:

IBM MaaS360 Essentials Suite (SaaS)
IBM MaaS360 Deluxe Suite (SaaS)
IBM MaaS360 Premier Suite (SaaS)
IBM MaaS360 Enterprise Suite (SaaS)

These new suites are designed to provide comprehensive enterprise mobility management solutions for your organization, enabling improved productivity and securing corporate devices, apps, and content. These cumulative packages offer flexible options, enabling your organization to select the most appropriate capabilities to drive your use cases, whether that is protecting the devices with a management profile or providing an enterprise-wide capability-rich enterprise mobility management solution.

MaaS360 Essentials Suite enables you to view and control the mobile devices and apps entering your organization. The software offers enterprise mobile device, application and expense management from a single screen. With IBM, you can gain visibility into the usage and status of mobile devices, while securing data and controlling costs.

MaaS360 Deluxe Suite includes all the capabilities of the MaaS360 Essentials Suite and adds a separate and security-rich office productivity application for users to access and manage their email, calendar, and contacts.

MaaS360 Premier Suite includes all the capabilities of the MaaS360 Deluxe Suite and adds mobile application security, a secure mobile browser, and mobile content management.

MaaS360 Enterprise Suite includes all the capabilities of the MaaS360 Premier Suite and adds the enterprise capabilities that your organization needs to provide full mobile productivity and protection. This suite adds mobile threat management, a document editor, and document sync

Rainer Brandl 07:33 on 2015-11-02
Tags: , security,   

Open Mic Webcast: Keeping your IBM Domino Servers Secure with SSL

IBM is holding a webcast regarding SSL security for IBM Domino servers:

This Open Mic presentation aims to keep the audience informed about SSL configurations and the latest security concerns on Domino.
Throughout the event, attendees will also be encouraged to comment or ask questions in the IBM Connections Meetings Web chat.

Content

  • Topic: Keeping your IBM Domino Servers Secure using SSL
  • Date: Wednesday, November 4, 2015
  • Time: 11:00 AM EST (16:00 UTC/GMT, UTC-5 hours) for 60 minutes

Join the IBM Connections Meeting to view a slide presentation and participate in group web chat:

https://apps.na.collabserv.com/meetings/join?id=2897-4178

Web conference password: webcast

Phone conference
Participant passcode: 2675474

Further informations regarding international call-in numbers and an ICS file for importing this event in your personal calendar can be found here
 

Rainer Brandl 06:53 on 2014-11-26
Tags: , , security,   

Ask the Experts session: Ask us anything about Notes/Domino Security

Keith Wooten will begin the session with a demo on deleting a person and its impact on ID vault. We’ll then open up for your questions on the topic of Notes/Domino security.

Throughout the event, attendees will also be encouraged to comment or ask questions in the IBM Connections Meetings Web chat. Join us for this interactive, educational, lively session. Follow us on Twitter @IBM_ICSsupport.

Topic: Ask the Experts session: Ask us anything about Notes/Domino Security
Date: Tuesday, December 2, 2014
Time: 11:00 AM EST for 60 minutes
Webcast URL: https://apps.na.collabserv.com/meetings/join?id=2877-4178
Webcast Password:  webcast

For a list of world-wide phone numbers, the phone passcode, and an iCalendar (.ics) file for this session, click here: http://www.ibm.com/support/docview.wss?uid=swg27043975

Note: Audiocast will not be available for this session. An audio replay of the session will be posted to Technote 7043975 soon after the event.