How to use a 2nd NAB as a lookup for Web access?

hcl-bot · June 17, 2004, 3:57am

Greetings!

Way back when… when I had no need for this functionality, I recall reading about a way to use a second NAB as a lookup for Web access.

Now, that I need the info, I can’t recall where I saw it, or even who it was that was telling how to do it.

Anyone know where this might be documented, or better still… mind posting the info here??

What it boils down to is that we’ve got two separate Domino domains, and only one sever on the one domain can be accessed via the Web (long story… relates to the pains of anti-Domino security people). Well, we have already got some databases replicated from the non-Web domain over to the system/domain that is Web accessible. Now, the issue is that we don’t want to have to register all those additional people… just so that they can access our Web content on the other box. I’ve got the NAB from the non-Web box replicated over to the Web box… I want to use that second NAB as a lookup for access.

Sleep is something I wish I had more of right at the moment, so my description might well reflect my tired mind, but if you can see through it all and make some sense of it… I would be grateful!

Thanks!

-D

hcl-bot · June 17, 2004, 7:07am

Subject: Authenticating Internet name-and-password clients in secondary Domino and LDAP directories

SECURITY

Authenticating Internet name-and-password clients in secondary Domino and LDAP directories

When an Internet client authenticates with a server, by default the server checks the primary Domino Directory to see if it can find a Person document with a name and password that match those entered by the Internet client. If your organization uses a secondary Domino Directory and/or an LDAP directory to verify Internet clients who use name-and-password authentication, you can set up Domino to check those additional directories. To do so, you set up the secondary Domino Directories and LDAP directories as trusted domains in the Directory Assistance database.

When you mark domains as trusted, Domino first searches the primary Domino Directory for the user name and password and then searches the trusted secondary Domino Directories and LDAP directories. When you set up directory assistance, you specify the order in which Domino searches the secondary directories.

The hierarchical name returned by the Domino Directory or LDAP directory is checked against the trusted rule in the Directory Assistance database to verify that the organization and organizational units match the specified rule. For example, if the user name returned is Dave Lawson/Acme, the Directory Assistance document must include the rule */Acme.

Searching multiple directories is also available for authenticating users with SSL client authentication.

Note For Domino R5.x and earlier, searching multiple directories is only used by the HTTP protocol and not the other Internet protocols.