34.6 Installing a Domino Security (DSAPI) Filter

The Domino security API filter, DSAPI, is an authentication method that enables you to register a DLL with the Domino Web server. In this case, the Web server calls the WebGate DLL to authenticate the user when a request for authentication occurs rather than using SSL or basic authentication. Authentication within Domino is optional with the Access Manager DSAPI filter. You can implement certain aspects of authentication that the default Web server does not support.

Task overview: Completing WebGate and filter installation:

1. Before you install the WebGate on a Domino Web server, complete all the previous steps.
2. Complete the WebGate installation and Web server update.

   See Locating and Installing the Latest 10g WebGate for Access Manager 11g.

3. Set ObWebGateInstallDir=$WEBGATE_INSTALL_DIR in your notes.ini file.
4. Choose one of the options as described in the following topic:

   See Completing the WebGate Installation.

34.6.1 Completing the WebGate Installation

You must make sure that the Domino Web Server can use the WebGate DLL. You need to edit the enter the name or names of the DLL/DLLs (DSAPI libraries) to be called for authentication in the DSAPI filter file names field of the HTTP tab under the Internet Protocols tab in the Server document.

You can select one of the following filters to install the filter:

• Through a Web browser and names.nsf (option 1)

• Through a Lotus Notes workstation and the Address Book (option 2)

Option 1: To set up the DSAPI filter to access names.nst:

1. Go to the names.nsf URL and log in. For example:

        http://hostname:port/names.nsf
   

2. Click the Server-Servers link.

   A Java applet will be loaded.

3. Select a server from those listed.

4. Click the Edit Server link to go to Edit mode.

5. Click the Internet Protocols link.

   By default, the HTTP tab is selected and information is displayed in Edit mode.

6. Look for DSAPI where it says "DSAPI filter file names:", then type in the absolute path to the libwebgate.so file.

7. Save your changes.

8. Restart the Domino http server task.

Option 2: to access the Address Book through Lotus Notes:

1. Open Domino Name and Address book. For example, select:

   File, Database, Open, then click Address Book

2. Switch to server view and open the server document.
3. Edit the server document.
4. Click the Internet Protocols tab.

   By default, the HTTP tab is selected and information is displayed in Edit mode.

5. Look for DSAPI where it says "DSAPI filter file names:", then type in the absolute path to the libwebgate.so file.
6. Save your changes.
7. Restart the Domino http server task.