TROUBLESHOOTING

LDAP service and remote search operations
Additional steps may be required to guarantee that a IBM® Lotus® Domino™ LDAP service running on one Domino server can successfully search another server's Domino Directory. When extended access is enabled for the remote directory, or when the search request comes from an authenticated LDAP client, in order to do the remote search, the database ACL on the remote directory must grant the server that receives the LDAP request at least Reader access, defined through a "Server" or "Server group" entry. By default, the LocalDomainServers and OtherDomainServers groups have the required access in the Domino Directory ACL, so no special configuration is required for the normal case where both servers are in the same domain.

1.