The client I am working for at the moment has a domino application on the web that they host. On the domino server there are also other applications that his staff use via the internet(mail etc.)
The client wants to add a section to the domino application that requires potential users to log in but as these users will be members of the public, he doesn’t want their usernames to be in the main NAB on the server.
I am setting up directory assistance on this server so he can have a secondary NAB where users of this application are registered.
Does DA override the normal NAB - to keep access to the other applications for staff, do they also need to be in the secondary NAB? Or can I turn DA on for one application only?
Subject: Directory Assistance - does it overide the NAB?
No, DA really just allows additional directories to be used in addition to the primary directory.
There is one major catch to be aware of: Resolving group names for authentication (read: application ACL contains a groupname, group contains a user, user should have access to the application) can be enabled for one secondary directory (plus one LDAP directory, if I remember right) only. Should they ever feel the need to add another secondary NAB, this would require to create a Directory Catalog for all secondary NABs.
For complete decoupling of Directories for more groups of users Domino can be set up in ASP mode (so called hosted environment). But this is an installation option and - if I remember right - has its own licensing scheme. I also have to admit, that I have zero experience with this.
Subject: RE: Directory Assistance - does it overide the NAB?
Ok thats the answer I was looking for thanks.
The server isn’t doing anything too complicated at the moment. There are 3 or 4 apps on there that currently use the main NAB to authenticate staff via the browser and then this app that I am working on. As long as the staff can continue to authticate as they currently do and the new app I am working on uses a different NAB that should work perfectly.
Thanks once again for all your help!
Matt
Subject: RE: Directory Assistance - does it overide the NAB?
I use a very similar setup and it works very well. The only thing that confused me for a while was how I could add users/groups from the 2nd NAB without manually typing them in…
I had to change the Directory Server in my location document to one of the servers with DA set up… obvious I know, but took me a while 