I have the following situation. I manage 5 different domains. To make like simple for users sending email, and for us to properly utilize the users and groups from other domains for security on databases, we first implemented on condensed directory catalog. Each domain address book is replicated to my server here, which runs the dircat task, and builds the catalog. I then push out the changes to replicas on each of the servers in the other domain. This worked fine for me until I found that I could not utilize groups for ACL. If I am sitting in /DOMAIN A, and I add a group from my domain to a database in /DOMAIN B, it does not work properly. It will only work in one of two situations. I either add my group to their address book, or I put a replica of my address book on their server.
I did some reading and found that the Extended Directory Catalog should overcome this limitation. I proceeded to remove the directory catalog on on all servers, and now have created an extended directory catalog, and push it out to the servers in the other domains. All ACL issues using groups has been solved. However, a new issue has arisen since implementing this, and I cannot think of any possible solution for a fix.
Each server is pushing replica copies of their names.nsf to my server, which in turn builds the Extended Directory catalog, which is then pushed back out to the servers in each domain. However, when a user in /DOMAIN B uses iNotes to access and send mail to groups within their own domain, mail delivery fails as it reports finding duplicates. Even if the user, when composing the message selects the entry from the /DOMAIN B Address Book versus the Extended Directory Catalog, the mail message fails to be delivered.
Is there any way to overcome this duplication issue? Hope someone can help…
Thanks.