Soo here is the question… how can i prepare 2 directorys in the same server for LDAP conection… The thing is that i need that users can query and read only on Directory1.nsf and can write only on Directory2.nsf?
regards
Subject: LDAP and 2 Directorys
You’ll have to set up Directory Assistance if it is not already set up. This will allow LDAP to work with both directories.
In order to let them write to the second address book you need to grant the LDAP account Author access in the secondary addressbook’s ACL. Also you will need to make a Configuration doc, in the second address book, that specifies that LDAP users are allowed write access.
Subject: LDAP and 2 Directorys
Set up both directories in Directory Assistance as Notes directories. They will be available via the Domino LDAP service to all LDAP clients
Set up the ACL properly for whoever needs write access to the second directory, but only read access to the first.
Edit the [All Servers] configuration document on the LDAP tab and set ‘Allow LDAP users write access’ to Yes. This will only be effective for authenticated users.
Check the advanced ACL settings on directory1.nsf, make sure max. internet access is Reader, and set Author or Editor, as appropriate, for the max internet access on directory2.nsf.
If you want to get more granular than that, take a look at extended ACL’s in the admin guide.
Subject: use Directory Assistance
You can make directory1.nsf available via Directory Assistance. Add a Notes domain type entry for it and make it available to LDAP clients. Use the acl to specify what access you want to give. Can you be a little more specific on the second part of your question? Do you really only want write-only access to dir2.nsf? Are these LDAP users or Notes users?
Subject: RE: use Directory Assistance
Its an LDAP Sync tool… I have Dir Assist ready…No just we dont wont that this tool can modify de Directory1.nsf (Master).
My real doubt y How the tool or the users know on what directory can read or write!!!