Comments on: LDAP write access to Domino Directory http://itknowledgeexchange.techtarget.com/itanswers/ldap-write-access-to-domino-directory/ Sun, 19 May 2013 03:14:28 +0000 hourly 1 By: jvpaton http://itknowledgeexchange.techtarget.com/itanswers/ldap-write-access-to-domino-directory/#comment-38448 jvpaton Thu, 02 Dec 2004 18:56:43 +0000 #comment-38448 Hi Samir,

Just some troubleshooting thoughts:

> R U using xACL on the DD?

> Did you tell router update config or restart the server?

> using an admin account, can you add a new person entry?

> There is a debug ini variable LDAPDEBUG=1 -as always use debug variables with great care for a short period and constant monitoring.

And check out this really useful posting … http://www-10.lotus.com/ldd/nd6forum.nsf/55c38d716d632d9b8525689b005ba1c0/5c4bf25f844b9ac785256e4c005998b7?OpenDocument

GL
8!8

]]> By: samirk http://itknowledgeexchange.techtarget.com/itanswers/ldap-write-access-to-domino-directory/#comment-38449 samirk Thu, 02 Dec 2004 04:24:04 +0000 #comment-38449 Fixed!

Some kind adminguy (whose answer I couldn’t find on the site, I just got the first few words in the e-mail notification) suggested I look at the ACL’s advanced tab, ‘Maximum Internet Name & password access’.
I thought I had changed this to ‘Editor’, but it was on ‘Reader’ again.
Turns out you have to recycle the server after this change! Same thing after a change in LDAP access rights

Thanks to all
Samir

]]> By: anadminguy http://itknowledgeexchange.techtarget.com/itanswers/ldap-write-access-to-domino-directory/#comment-38450 anadminguy Wed, 01 Dec 2004 14:29:49 +0000 #comment-38450 When you checked the ACL, you only mention what the user’s rights were. What is the setting on the Advanced tab for ‘Maximum Internet Name & password’? I believe that’s where you might by hitting the rights problem.

]]> By: samirk http://itknowledgeexchange.techtarget.com/itanswers/ldap-write-access-to-domino-directory/#comment-38451 samirk Wed, 01 Dec 2004 05:32:07 +0000 #comment-38451 Thanks for your reply, I did try with the main Admin ID, same result. It must be something with the LDAP access setup in Domino (or maybe the Dmomino Directory’s ACL).

I suppose if I use the LDAP syntax on my LDAP client (ie CN=Joe User/O=MYCERT) and the Notes syntax in the ACL (ie: Joe User/MYCERT) it does recognize them as being the same person?
It must be, as I can retreive all attributes in my LDAP client (as opposed to an anonymous bind)

Samir

]]>