Front cover - IBM Redbooks

You can set up directory assistance for a remote LDAP directory or a Domino
directory. A remote LDAP directory can be any remote LDAP-compliant
directory, either one on a foreign LDAP directory server or one on a Domino
server that runs the LDAP service.
A Domino directory is a directory created from the PUBNAMES.NTF template
and accessed via NAMELookup calls. Servers can use directory assistance to do
lookups in either local or remote replicas of a Domino directory. A Domino
directory configured for directory assistance can be a secondary Domino
Directory, an Extended Directory Catalog, or a primary Domino Directory.
► A secondary Domino Directory is any Domino Directory that is not a server's
primary Domino Directory. A secondary Domino Directory can be a directory
associated with another Domino domain. A secondary Domino Directory can
also be a Domino Directory created manually from the PUBNAMES.NTF
template that is not associated with a Domino domain – used, for example, to
store and track Web user information.
► An Extended Directory Catalog contains documents aggregated from multiple
secondary Domino Directories. A server must use directory assistance to look
up information in an Extended Directory Catalog, unless you integrate the
Extended Directory Catalog directly into the primary Domino Directory.
► The primary Domino Directory is the directory a server searches first that
describes the Domino domain of the server. You can set up directory
assistance for a primary Domino Directory, usually to specify which replicas
of primary Domino Directories servers with Configuration Directories can use.
Directory assistance and client authentication
To authenticate a user who is accessing a database on a Domino server via any
of the supported Internet protocols – Web (HTTP), IMAP, POP3, or LDAP – a
server can look up the users' credentials in a directory that is configured in its
directory assistance database. Servers can use X.509 certificate security or
name-and-password security for the authentication.
To allow a server to use a directory for Internet client authentication that is
configured in a directory assistance database, do the following in the Directory
Assistance document for the directory:
► On the Basics tab, next to “Make this domain available to,” select “Notes
clients and Internet Authentication/Authorization.”
► On the Naming Contexts (Rules) tab, enable at least one rule that
corresponds to the distinguished names of the users in the directory to be
authenticated, and next to “Trusted for Credentials,” select “Yes.”
For example, if your organization registers Web users in a foreign LDAP
directory, when a Web user attempts to access a database on a Domino Web
Chapter 11. Domino/Notes 6 security features 459