Broken LDAP service in 8.5.1

HCL Domino Domino Forum
1

Domino was upgraded to R8.5.1_FP2_IF1 from R8.5FP1 . Scanners stopped working. Scanners report “LDAP version not supported”. Scanners use Domino LDAP for directory lookups. We changed scanner’s settings to use 8.5FP1 LDAP server. Scanner started working again. Thus something is screwed up in 8.5.1 FP2 IF1.

IBM does not tell anything about changing LDAP behaviour:

http://publib.boulder.ibm.com/infocenter/domhelp/v8r0/index.jsp?topic=/com.ibm.help.domino.admin85.doc/H_SERVER_NEW_FEATURES_OVER_85.html

What could be the reason of the problem?

Regards

Ramunas

2

Subject: Solution

  1. Deny anonymous LDAP on Domino. This is needed because scanners use Anonymous connection until it is available no matter if authentication is configured.2. Configure authenticated LDAP queries on scanner.

Anonymous LDAP did not return some attributes needed for scanner. Older versions might have been less accurate for LDAP anonymous security.

3

Subject: Scanner?

Can you elaborate on what “Scanner” you are using?

4

Subject: the following models

konica minolta bizhub 250 and bizhub 350

5

Subject: Details

What are these scanners actually doing? Why are they reporting problems with Domino? Are you actually having problems with Domino?

6

Subject: problems with domino LDAP

Users scan printed documents on scanner and send them via email from within scanner interface. Before users are able to send emails they must lookup Domino LDAP directory for email adress. Unfortunately scanners stopped doing lookup on Domino LDAP service after Domino upgrade to 8.5.1 FP2 IF1 from 8.5FP1. Scanners started reporting “unsupported ldap version”.

7

Subject: 8.5.1 FP2 without IF1 has the same issue

8

Subject: 8.5.1 FP3 has the same issue