Cannot write to a secondary LDAP Directory

Hi,

We are not able to update documents into a secondary Directory.

Here is the setup:

Redhat Linux 7.2

Domino server 6.0.3 or 6.5

Using 3 directories: names.nsf, X.nsf and DirCat.nsf. All located on the server.

Using Directory assistance with names (Search order 2) and X (Search order 3) for Lotus only, DirCat (Search order 1) for Lotus and LDAP.

The search works and gives the expected results, ie the search happens on DirCat.nsf.

When trying to update a document and after a ldapdebug=7, we can see that the DN we want to modify is found, the attributes we want to modify are given the correct value. But unfortunatly, after being located, we can see two errors: “CLDAPException thrown at s_modify.cpp: 382 - No entry found” and “CLDAPException caught at s_modify.cpp: 1637 - No entry found” and the LDAP server returns an error code 50 “Insuffisant access”.

In th names.nsf, “Allow user write access is ON”, “Rules to follow when multiple match is change the first match”, “Enforce schema - NO”

I am not sur that the LDAP is trying to write to DirCat.nsf, that could explain the insufficient access. If it is the case, how could we write to the DirCat.nsf ?

We are not using XACL and the user who is modifying has [Editor] Access to the Database plus (User Mod and Group Mod Roles).

By the way, since we activated the Directory Assistance, our iNotes client are unable to send e-mail to Internet (the sender e-mail is MalFormed). Meanwhile webmail and Domino web Access on 6.5 work fine.

Subject: Cannot write to a secondary LDAP Directory

After rading the help files several times, I’ve noticed this sentence “Set in the domain Configuration Settings document of each Domino Directory and Extended Directory Catalog the LDAP service serves. Each directory can have different settings” and then, I added a Configuration document that allowed writing via LDAP.

It works.

However, it is somewhat confusing, since all security stuff (not ACL) are stored in the Primary Domino Directory.

Subject: RE: Cannot write to a secondary LDAP Directory

It is correct, you must create an “* - Default -” Configuration Document into seconday names not in names.nsf.

So confusing…