Setting up a Person document for an Internet user using SSL client authentication
In the Domino® Directory on your Domino server, set up a Person document for Internet clients using SSL client authentication to connect to a Domino server. The Person document for the user stores the user's Internet certificate, which is used to verify the user's identity. The Person document also lists the names that a Domino server can use to authenticate an Internet user.
About this task
When an Internet user tries to connect to a server, Domino looks for the Internet certificate name in the User name field in the user's Person document. Domino compares the Internet certificate presented with the one stored in the Person document. The comparison lets Domino authenticate the user, even if there are multiple users with the same name, since each user's public key is unique. If Domino finds a match and the public key is valid, then the first name listed in the User name field is used to check database ACLs and design element access lists.
For example, if the User name field contains these entries: Alan Jones, AJones, Alan, and Al Jones, and the client uses the name Al Jones to access the server, Domino authenticates the user, verifies that the public key presented matches the public key in the Person document, and uses the name Alan Jones to check database ACLs and design element access lists.
To set up a Person document
Procedure
- Create a new Person document in the Domino Directory.
- Enter the client's first, middle, and last names in the First name, Middle initial, and Last name fields.
- Enter the client's common name on the certificate in the User name field.
- Optional: Enter additional information about the client in the Work/Home tab.
- Save the document.