Notes/Domino Fix List
 |  |
| SPR # DYHG67ACUQ | Fixed in 6.5.5 release |  |
Product Area: IBM Lotus iNotes Technical Area: Miscellaneous Platform: Cross Platform
SPR# DYHG67ACUQ - Fixed a problem where the cache was not cleared after logout.
Technote Number: 1106483
Problem:
Index:
Here is What occurs when logging out of Domino Web Access
Background on Step #5
Background on Step #:
Issue with iNotes_WA_LogoutScrubType in DWA 6.5.3 and 6.5.4
Here is What Occurs When Logging out of Domino Web Access (DWA):
1. The Logout page is displayed.
2. A ?Logout request is issued to the Domino server; this ends any
session-based authentication in effect.
3. Attachment files launched via the upload control are deleted
4. Browser cache entries are cleared; the iNotes_WA_LogoutScrubType setting
affects this.
5. The Internet Explorer (IE) Session is ended, and a call is made to clear
cached browser credentials.
6. An iNotes_WA_LogoutRedirect setting specified in the Notes.ini is checked
and, if found, the specified page is displayed.
Background on Step #5:
To make logout more secure, #5 listed above was added, starting in iNotes Web
Access 5.0.9. Enhanced cache scrubbing options are now available upon logout
(if the iNotes ActiveX control has been accepted). By default DWA deletes all
URLs in the cache which originate from the user's mail file and which do not
have a keep in cache flag.
This clears ALL browser credentials, including those for sites you still wish
to be logged in to. This problem was reported in SPR JGAN5DPJVR, and a new
server Notes.ini variable was introduced in 5.0.12 to disable this clearing of
credentials:
iNotes_WA_SkipEndIESession=1
However, this parameter was then deemed less secure as it then left
responsibility to the user to close the browser session. See the background on
Step #4 below for information on how this was remedied.
Background on Step #4:
A more complex level of automatic cache clearing was implemented starting in
5.0.13 and 6.0.2. A new iNotes configuration setting has been provided to
facilitate the level of automatic cache clearing.
The Notes.ini parameter, iNotes_WA_LogoutScrubType will determine how the
client code cleans the cache when the user logs out. The values are 0,
representing the least secure option, through 5.
inotes_WA_LogoutScrubType
Syntax: inotes_WA_LogoutScrubType=value
Description: Sets the automatic cache clearing level for the Domino Web Access
server.
0 - Deletes all URLs that begin with the mail file path, except those that have
a strategically placed KeepInCache (&KIC) argument.
1 - Deletes all URLs that begin with the mail file path.
2 - Deletes all URLs in the cache that originate from the server hostname,
except for URLs that contain /iNotes/Forms6.nsf, the current Forms file (or
iNotes/Forms5.nsf).
3 - Deletes all URLs in the cache that originate from the server hostname.
4 - Secure option) Deletes all URL s in the cache except for URLs that contain
/iNotes/Forms6.nsf, the current Forms file (or iNotes/Forms5.nsf).
5 - (More Secure option) Deletes all URL s in the cache.
Applies to: Domino Web Access IE clients using the Domino Web Access Control.
Default: 0
UI equivalent: None
For a full description of each value, see the topic "Setting the level for
automatic cache clearing" in the Domino 6.5 Administration help.
Issue with iNotes_WA_LogoutScrubType in DWA 6.5.3 and 6.5.4:
iNotes_WA_LogoutScrubType is not working as expected in DWA 6.5.3 and 6.5.4.
This issue has been reported to Quality Engineering as SPR# DYHG67ACUQ, and is
fixed in DWA 6.5.5 and 7.0.
Excerpt from the Lotus Notes and Lotus Domino Release 6.5.5 MR fix list
(available at http://www.ibm.com/developerworks/lotus):
Miscellaneous
SPR# DYHG67ACUQ - Fixed a problem where the cache was not cleared after logout.
Note: After the user has logged out, choosing the more secure logout option in
the UI and closed the browser he/she may find that there are still files left
behind in the cache originating from the recent DWA session. These files are
not visible from the Temporary Internet Files window accessed from Tools >
Internet Options > Settings > View Files. They can only be seen when searching
for all files in the directory via the Windows Explorer search option.
There may be one or more files called Proxy[1] in the directory. These files
are the indication that the Enhanced Auto Cache Scrubbing has been at work,
and they do not contain any confidential data.
More files are present prior to closing the browser. This represents the fact
that the browser updates/purges the last accessed cache files upon shutdown.
Refer to the Upgrade Central site for details on upgrading Domino Web Access. More >
Last Modified on 11/20/2010
Go back
|