Directory Assistance and Active Directory Groups

HCL Notes/Domino 8.5 Forum (includes Notes Traveler)

Subject: Directory Assistance and Active Directory Groups

Feedback Type: Problem

Product Area: Domino Server

Technical Area: Security

Platform: Windows

Release: 8.5.2

Reproducible: Always

We have a Directory Assistance document that points to our Microsoft Active Directory. When we add individual Active Directory usernames to a Notes database ACL, the web-based authentication works perfectly and users can access the Notes database over the web successfully.

However, we have never been able to add an Active Directory Group name to a Notes database ACL and make it work for the members of that group. As we want to extend the accessibility of some of our apps using AD Groups, this is becoming very frustrating.

We cannot work out why the expansion/enumeration of individual names from an AD group should not work.

(BTW for internal security policy reasons we can't use the alternative ADSync technique.)

Any suggestions?

David Clover
IT Development Manager
MCT Faculty
The Open University
d.a.clover@open.ac.uk

Feedback number WEBB8ARCNW created by ~Tony Reponezenlen on 10/31/2010

Status: Open
Comments: