SECURITY


Examples of names allowed for Internet client authentication
More name variations with lower security

Using the More name variations authentication level, Alan Jones/Sales/East/Acme can enter the following names when using a browser to authenticate with a IBM® Lotus® Domino™ Directory:
ExampleDescription
Alan JonesCommon name
AlanFirst name
JonesLast name
AjonesShort name
Alan Jones/Sales/East/Acme/USFull hierarchical name (abbreviated)
cn=Alan Jones/ou=East/ou=Sales/o=Acme/c=usFull hierarchical name (canonical)
cn=Alan JonesCommon name with CN=prefix
alan_jones@acme.comInternet (e-mail) address
If you want to authenticate Alan in an LDAP Directory, he can use a browser to enter the following names:
ExampleDescription
Alan JonesCommon name
AlanGivenname
JonesSurname
AjonesUID
cn=Alan Jones, cn=recipients, ou=Sales, ou=East, o=Acme, c=us (valid for a Microsoft® Exchange server)Full hierarchical name (canonical)
cn=Alan Jones (valid for Domino Directory)Common name with CN=prefix
uid=ajones, ou=Sales, ou=East, o=Acme, c=us (valid for a Netscape Directory Server)Full hierarchical name (canonical)
uid=ajones (valid for Netscape Directory Server)UID with UID=prefix
Alan Jones/Sales/East/Acme/USFull hierarchical name (abbreviated)
alan_jones@acme.comLDAP mail attribute

Fewer name variations with higher security

Using the Fewer name variations authentication level, Alan Jones/Sales/East/Acme can enter only the following names when using a browser to authenticate with a Domino Directory:
ExampleDescription
Alan Jones/Sales/East/AcmeFull hierarchical name (abbreviated)
CN=Alan JonesCommon name with CN= prefix
Alan JonesCommon name
cn=Alan Jones/ou=East/ou=Sales/o=Acme/c=usFull hierarchical name (canonical)
alan_jones@acme.comInternet (e-mail) address
If you want to authenticate Alan in an LDAP Directory, he can use a browser to enter the following names:
ExampleDescription
AJonesUID
Alan JonesCN
cn=Alan Jones, cn=recipients, ou=Sales, ou=East, o=Acme, c=us (valid for a Microsoft® Exchange server)DN
cn=Alan Jones (valid for a Domino Directory)CN with CN=prefix
uid=ajones, ou=Sales, ou=East, o=Acme, c=us (valid for a Netscape Directory Server)DN
uid=Ajones (valid for a Netscape Directory Server)UID with UID= prefix
alan_jones@acme.comLDAP mail attribute
See also