Controlling access to a pass-through server or pass-through destination

A pass-through server allows users and servers to use a pass-through connection to connect to another server. The server to which users connect is called a pass-through destination. You can control which users and servers can access a pass-through server and pass-through destination.

About this task

If your system uses multiple Domino® Directories, IBM® Domino® searches only the first Domino® Directory specified in the Names setting in the NOTES.INI file.

Internet and intranet clients cannot use pass-through; therefore, these settings are valid only for IBM® Notes® users and Domino® servers.

Procedure

  1. From the Domino® Administrator, click Configuration, and open the Server document.
  2. Click the Security tab.
  3. In the Passthru Use section, complete one or more of these fields, and then save the document:
    Table 1. Passthru Use fields

    Field

    Action

    Access this server

    Enter any of these:

    • Names of specific servers, users, and groups.
    • An asterisk (*) followed by a certificate name -- for example, */Sales/East/Renovations -- to allow all users certified by a particular certifier to access the server.
    • An asterisk (*) followed by a view name -- for example, *($Users) -- to allow access to all names that appear in a specific view in the Domino® Directory. Access time is quicker if you specify a group name rather than a view name.

    Any users or servers listed in this field can use a pass-through server to access this server. This field does not take precedence over other access fields -- for example, the Access server and Not access server fields. For example, if the Access server field specifies that only users listed in the Domino® Directory can access this server, users who are not in the local domain cannot access this server.

    The default for this field is blank, which means that users and servers are prevented from using a pass-through connection to access this server.

    Separate multiple names with commas ( , ) or semicolons ( ; ).

    Route through

    Enter any of these:

    • Names of specific servers, users, and groups.
    • An asterisk (*) followed by a certificate name -- for example, */Sales/East/Renovations -- to allow all users certified by a particular certifier to access the server.
    • An asterisk (*) followed by a view name -- for example, *($Users) -- to allow access to all names that appear in a specific view in the Domino® Directory. Access time is quicker if you specify a group name rather than a view name.

    Any users or servers listed in this field can use the server as a pass-through server, regardless of whether or not they are also included in the Access server or Not access server fields.

    The default for this field is blank, which means that users and servers are prevented from using this server for pass-through access.

    Separate multiple names with commas ( , ) or semicolons ( ; ) .

    Cause calling

    Enter any of these:

    • Names of specific servers, users, and groups.
    • An asterisk (*) followed by a certificate name -- for example, */Sales/East/Renovations -- to allow all users certified by a particular certifier to initiate calling.
    • An asterisk (*) followed by a view name -- for example, *($Users) -- to allow all names that appear in a specific view in the Domino® Directory to allow calling. Access time is quicker if you specify a group name rather than a view name.

    Any users or servers listed in this field can instruct this server to call -- that is, place a phone call to -- another server in order to establish a routing path to that server. If no names are entered, no calling is allowed. In general, if the Replicator on another server uses the modem on a server to reach its targets, the server name of the Replicator must be included in this list on the server with the modem. Otherwise, the replication will frequently fail.

    The default for this field is blank, which means that users and servers are prevented from using this server to route a path to another server.

    Separate multiple names with commas ( , ) or semicolons ( ; ) .

    This field corresponds to the Allow_Passthru_Callers setting in the NOTES.INI file. If a conflict exists, the Cause calling field takes precedence.

    Note: Support for dialup modem (X.PC) connections is available only in releases of Domino® earlier than release 8.5. You may continue to use Domino® Administrator 8.5 to configure and maintain modem support, for example using the Cause calling field, but only on servers running pre-8.5 releases.

    Destinations allowed

    Enter the names of destination servers to which this server may route clients.

    The default for this field is blank, which means that all servers may be routed to.

    This field corresponds to the Allow_Passthru_Targets setting in the NOTES.INI file. If a conflict exists, the Destinations allowed field takes precedence.