We have a Lotus Domino Server 7.0.2 with a Web application that autenticates users in Active Directory (Windows) using Directory Assistance (da.nsf). This autentication returns the Distinguished Name in Active Directory as the @UserName.
We want the authentication to return sAMAccountName, that is the windows username, (the user id when login to windows), but in the server there is also a Lotus Domino (Web) application that requires the Distinguished Name, so I can’t change in da.nsf the field of the Active Directory that is used as @username (this second application won’t run if I do it).
I have think to add a Internet Web Site to the Server, but I don’t find any field in the Internet Web Site document to use another da.nsf.
Do you know if is there any other possibility (for instance using names of sites or domains) to make the Internet Site to use a da.nsf document different than the da.nsf document used by the main web server?
Subject: Is it possible to have 2 da.nsf databases in the same server? (the second for a Web Site)
No, you cannot have more than one directory assistance at the same time.
While I don’t know much about authenticating users via AD, I’m not sure, why you would need that. I assume, that you have configures AD as an external LDAP, so authentication against a Domino Directory should not be affected. Do you also use synchronization between Domino Directory and AD?
Subject: RE: Is it possible to have 2 da.nsf databases in the same server? (the second for a Web Site)
I want to do this because in the server there is an application that uses as @username the Distinguished Name provided by MS Active Directory and now we want to put in this server a second application that uses as @username the windows username. This second application needs a different field of Active Directory to be returned as username when the user logs in domino, always using as password his/her windows password.
Using Distinguished name as @username has one drawback: if a user changes department in the company, his/her @username changes and he/she looses access to documents that have reader fields.