Configure Access Control List

You must create the IDIPWSync group in the Domino® Directory and update the Access Control List (ACL) of theidipwsync.nsf database. Only members of the IDIPWSync group can access the idipwsync.nsf database.

Procedure

1. Create IDIPWSync group in the Domino Directory:
   1. From the Lotus® Domino Administrator, click the People & Groups tab.
   2. In the left navigation panel, select Domino Directories/your_domain'sDirectory/Groups where your_domain is the name of the Lotus Domino domain.
   3. Click Add Group.
   4. Type IDIPWSync in the Group name field.
   5. In the Members field, add all administrators or users who can change passwords by editing the Person documents.
   6. In the Members field, add the signer who signs the agents of the Password Synchronizer.

2. Update Access Control List of the idipwsync.nsf database:
   1. From the Lotus Domino Administrator, click the Files tab.
   2. Select the idipwsync.nsf database.
   3. Select Database/Manage ACL from the right panel.
   4. Click Add and select the IDIPWSync group.
   5. Select Editor from the Access list.
   6. Set the following options under Attributes:
      1. Select the Delete documents check box. You must also select the Create documents, Read public documents, and Write public documents check boxes. This selection is done automatically when the Editor access is selected.
      2. Clear the Create private agents, Create personal folders/views, Create shared folders/views, Create LotusScript/Java agents, Replicate or copy documents check boxes.

   7. Select Default from Access Control List.
   8. Set Access to No Access.
   9. Click OK. Note: After the idipwsync.nsf database ACL is changed, we cannot change the ACL from the Domino Server. For security reasons, the most restrictive settings are used. If a change of the ACL is necessary, the database must be opened locally and you must change the ACL as per the requirements.

What to do next

Deleting pwsync_install_r8.nsf database

Parent topic:

Deployment on a single Domino Server