LDAP attribute list with Domino 7

HCL Domino Domino Forum
1

Hi,

I’m new to domino and I’m trying to extract user information from a domino server using LDAP.

So far, I’ve just started the LDAP server and have been doing some basic queries against the server using some .NET test apps and Ldp.exe.

I’m getting the same result with both of the above. What I’m seeing is that I’m getting very few attributes back.

E.g. Using Ldp and browsing to a user in LDAP, I get the following information.

Expanding base ‘CN=Adam Lotus,O=aha’…

Result <0>: (null)

Matched DNs:

Getting 1 entries:

Dn: CN=Adam Lotus,O=aha

1> cn: Adam Lotus; 

1> mail: Adam.Lotus@aha.local; 

5> objectclass: dominoPerson; inetOrgPerson; organizationalPerson; person; top; 

1> dominocertificate: 03008902 2BC590E2 05G01613 G0020794; 

1> givenname: Adam; 

1> sn: Lotus; 

1> uid: AdamLotus; 

1> maildomain: aha;

I was expectinig to see all the attributes I had set on the person. Similar to what you get with Windows accounts in AD.

I’ve searched away on the net but I can’t find much infomration on this. I had a look at lschema.ldif but that didn’t help clear things up.

So could anyone tell me if I should be getting more attributes? Is there a way to expose more attributes? A particular configuration step I’ve missed?

I’d be very gratefull for any information on this.

Many thanks,

Huw

2

Subject: LDAP attribute list with Domino 7

I was expectinig to see all the attributes I had set on the person. Similar to what you get with Windows accounts in AD.

Assuming your documents have more information, my guess is that you are authenticating (i.e., binding) to the Domino LDAP server anonymously and therefore can only retrieve a limited set of fields. You can either:

Authenticate using the LDAP DN and password of a Notes user that is allowed to see the fields you are interested in.

Change the “Fields anonymous users can query” setting to include the fields you are interested in. You’d have to carefully evaluate if this jeopardizes any security issues.

Per Jean-Yves, “Domino Directory FAQ” (google it) points to the documents that answer most people’s directory-related questions.

3

Subject: RE: LDAP attribute list with Domino 7

Thanks to both of you for your responses.

I’ve now managed to open up my domino server to return more attributes.

4

Subject: LDAP attribute list with Domino 7

Hi,

Little reading…Lotus Notes/Domino 6 Directory FAQ

JYR