Manage Learn to apply best practices and optimize your operations.

Troubleshooting tip for web access control issues

Here's a tip from your uncle Al on a real handy thing you can do to help troubleshoot access problems on the web. I've found it invaluable to troubleshoot access problems on my server. It requires you be running R5, though.

I created a database called test.nsf in the root of the server. The database has no forms or views and only has the About document, which is the 'on launch' default. Set the ACL so that Anonymous has No Access and No read/write public. Set the Default to be Reader.

In the about doc, simply put a computed text formula of @UserNamesList.

Now, when you go to the URL http://server.company.com/test.nsf , you will be prompted to log in, then when you do, you'll see your authenticated user name, and all groups (and roles) you belong to.

It's a very simple but very useful troubleshooting tool. If you are unable to log in when prompted, your problem is definitely in your account or password or directory assistance or something. If you don't see the groups you were expecting, then it's a problem with the groups. Check the name as listed HERE and make sure it's the exact same format that is in the group, as the name you type in when you log in may not be the same as the name that shows up here, and it's THIS name that has to be included in groups.

You can also jazz it up a little, like I put a 'Welcome, ' banner, and I also put a bunch of roles in ACL and added certain groups to the ACL with those roles, so you also get a list of roles to prove that that is working properly too. You can probably think of other things to add to this screen, but it's been very useful to us in troubleshooting user problems, especially since our users are being authenticated from an LDAP directory and their group list is populated by a DSAPI program I wrote to pull attributes from the directory, so this is the first page I go to when a user reports a problem so I can see exactly what their name is and what groups they belong to.

Hope it helps...


Dig Deeper on Domino Resources - Part 7

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.

-ADS BY GOOGLE

SearchWindowsServer

Search400

  • iSeries tutorials

    Search400.com's tutorials provide in-depth information on the iSeries. Our iSeries tutorials address areas you need to know about...

  • V6R1 upgrade planning checklist

    When upgrading to V6R1, make sure your software will be supported, your programs will function and the correct PTFs have been ...

  • Connecting multiple iSeries systems through DDM

    Working with databases over multiple iSeries systems can be simple when remotely connecting logical partitions with distributed ...

SearchDataCenter

SearchContentManagement

Close