Secondary Address Book - Using Groups

Hi,

Am building a web app which requires front end user registration. So have set up a secondary address book to be used solely by this app. Did the following:

Created Directory Assistant database, and added to “Directory assistance database name” field on the server document

Created a new names.nsf and put it in the directory of my web app

Added the new names.nsf to the Directory Assistant database

I only require web authentication from the names listed in my new names.nsf, so no need to go through the notes registration routine.

I have added several users to my new names.nsf and explicitly added them to the acl in a database in my web app.

That works fine! So I’m guessing I must have set up the Directory Assistance database and registered my new names.nsf properly or this wouldn’t work.

The problem is that I obviously don’t want to have hundreds of users explicitly listed in the acl, so I need to use groups. I understand that the groups must be setup in the Domino Diretory (ie the ‘default’ names.nsf). So have added a group to names.nsf and added the users as listed in the new names.nsf to the group, and added the group to my acl. But my web app does not recognize them.

I tried explicitly added a user to the acl, then seeing what @usernameslist returns, and it does not return the group, which I would expect it to.

I have tried restarting the server. I have also changed the “Exhaustive lookup” field on the server configuration document to “Enabled” but still doesn’t work. Am I missing something here?!?

Thanks in advance - any help would be gratefully received

Subject: Secondary Address Book - Using Groups

I think you can use groups in DA as long as you enabled group authorization in the Directory Assitance document.

Subject: RE: Secondary Address Book - Using Groups

na, you can’t. if you try to you get an error message saying only one address book may be used for groups

Subject: RE: Secondary Address Book - Using Groups

sure you can - I use it all the time. Only one of the secondary directories can be configured for group authorization.

Subject: RE: Secondary Address Book - Using Groups

But this one addressbook can also be a directory catalog, so in fact this limitation is not as restrictive as it may seem at first glance.