Wrong DN while creating user

HCL Domino Domino Forum
1

We have a Lotus Notes system and the certifier used to create a new user is cert1.id.

This certifier is related to a Organization Unit (OU=Test1)

The Lotus Notes LDAP tree has the following strutture:

                C=IT

                 |

              O=TEST

                 |

  -------------------------------

  |              |

OU=Test1.........

We have provided the following values to create a user in Lotus Notes using Lotus API.

FirstName ftest

LastName ltest

ShortName stest

The User Distinguished Name becomes

CN=ftest ltest/OU=Test1/O=TEST/c=IN.

But we have not provided any OU for the user. It is taking the OU associated with certifier.

But while creating user, if we provide value for the OU field for user e.g OU1, the user is created with a wrong DN

CN= ftest ltest/OU=OU1/OU=Test1/O=TEST/C=IN

Is there any way to create user so that it doesn’t pick the value of the OU of certifier. So that the distinguished Name is like

CN= ftest ltest/OU=OU1/O=TEST/C=IN

We are using the following Lotus API in Java to create a user in Domino Server.

Registration reg = session.createRegistration();

reg.setRegistrationServer(regsrv);

reg.setCreateMailDb( new Boolean(createMailDb).booleanValue());

reg.setCertifierIDFile(certpath);

reg.setOrgUnit(OrgUnit);

reg.setRegistrationLog(reglog);

reg.setUpdateAddressBook(new Boolean(addbook).booleanValue());

reg.setStoreIDInAddressBook(new Boolean(storeaddbook).booleanValue());

reg.setMailInternetAddress(mailInternetAddress);

reg.setSynchInternetPassword(new Boolean(isSynchInternetPwd).booleanValue());

reg.setShortName(shortName.trim());

reg.registerNewUser(lastname.trim(), //last name

idpath + firstname.trim()+lastname.trim()+IDFILE_EXTENSION, // file to be created

mailServer, // mail server

firstname.trim(), // first name

middlename.trim(), // middle name

certpws, // certifier password

location, // location field

comment, // comment field

mailDBPath + firstname.trim()+lastname.trim()+MAILFILE_EXTENSION, // mail file

forwardDomain, // forwarding domain

password)//user password

Please let us know is there any additional configuration required to achieve the above.

Thanks in Advance

2

Subject: Wrong DN while creating user

Use a different certifier.

The hierarchical name of the certifier ID that you use becomes part of the user’s hierarchical name.

In your example it looks like you’ll want to use the Organization Certifier.

3

Subject: RE: Wrong DN while creating user

Thanks!This is the way it is being implemneted in our environment.

Even if the user is getting generated successfully we are facing problem while we update the user.

Is there no way out the ou of the certifier is not get appended to the DN of the user.

Is there any special configuration that can be done on the server site so that it doesn’t pick the OU of the certifier at the time of creating user.

4

Subject: RE: Wrong DN while creating user

I don’t think so, that is the purpose of the certifier.