Solved

Implementing single-signon with Notes/WinNT

Posted on 1998-11-30
7
345 Views
Last Modified: 2013-12-18
Our users currently have independant Notes accounts (a separate username/password for Notes, in addition to their Windows Networking accounts).  We'd like to implement single-signon, so that Notes accepts its authentication from NT.  Has anyone done this?  (Notes server OS is Win NT 4.0, clients are 95 and NT now, will be all NT in near future.  Notes 4.0 server, 4.5 and 4.6 clients.)

It seems that Lotus would favor account creation through Notes (which would automatically create the Network account).  This is probably acceptable for new accounts, but how would we migrate existing users to connect the existing independant accounts?

We're interested in 'Been there, done that - and watch out for THIS' info.  TIA
0
Comment
Question by:frankr
  • 4
  • 2
7 Comments
 
LVL 2

Author Comment

by:frankr
Comment Utility
Edited text of question
0
 
LVL 2

Expert Comment

by:cwalter
Comment Utility
I have implemented this on about 4 different domains it works well, but I have never found any tool that would syncronize everything for you. If there was such a tool then getting all authentication in one place would be mute because you could just automate the syncronization.

The most succesful way to implement this is to create and manage your accounts through notes. This is good because you have better control over who does what.

What should happen is when you get everything up and running and you choose to use Notes to create and edit accounts then Notes will create any NT accounts which are missing from NT but exist in the Name and Address book.
0
 
LVL 2

Author Comment

by:frankr
Comment Utility
For the time being, I'm rejecting without prejudice.  If a better answer isn't forthcoming, I'll ask for a repost and accept it.  The following isn't a critique of the answer as much as it is a refinement of the question (and in many ways a critique of Lotus approach to the problem).

The daunting part of this is that we're looking for a way around the need to re-create all the NT (and Notes?) accounts.  That's not a trivial task.  The root of the problem lies in the Lotus approach to establishing the association between the accounts (i.e. at account creation time).  The events involved here (account creation, account association, and authentication) are very distinct, and SHOULDN'T be indivisible.

The Notes paradigm for this operation is poor, particularly in existing production environments.  We also use Oracle, and I've implemented this environment without having to re-create all my NT accounts.  We already had NT accounts for our users before we installed Notes (it's just another application, after all, not the OS).  Creating a Notes account and an NT account in a single operation should be an OPTION available to me, not a requirement.
0
How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

 

Accepted Solution

by:
lawrencekoo earned 200 total points
Comment Utility
You need to reinstall your Notes server by selecting custom installation and install the authentication support with NT (everything else preserved).  After this, whenever you goto the user manager of NT, you would get a new menu item called Lotus Notes which allowed you to create a corrsponding account for the user in Notes and vice versa.
0
 
LVL 2

Author Comment

by:frankr
Comment Utility
Thanks, Lawrence.  Is this still an answer of the variety "you can't establish a relationship between pre-existing NT and Notes  accounts, you have to create one or the other"?  That's the impression I get from your answer, am I correct?
0
 

Expert Comment

by:lawrencekoo
Comment Utility
Yes you are correct, you can't connect existing users of NT and Notes together, you have to either create'em from user manager or Notes, afterwards you can even synchronize the password.
0
 
LVL 2

Author Comment

by:frankr
Comment Utility
I was afraid there wasn't a good answer to this question (at least the one I was looking for).

Thanks for responding.
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

Lack of Storage capacity is a common problem that exists in every field of life. Here we are taking the case of Lotus Notes Emails, as we all know that we are totally depend on e-communication i.e. Emails. This article is fully dedicated to resolvin…
This article covers general Notes 8.5 troubleshooting information including recreating the Notes\Data folder.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now