Topics

Do not add the distinguished name of a user from an external LDAP directory to a Notes database ACL if that name has a CN attribute that contains an @ character. Domino cannot correctly interpret such a name when it is in the ACL. Instead, assign the access to the user through either a group ACL entry or wildcard ACL entry.

For example, don't add the name "CN=jdoe@acme.com/OU=NewYork/O=Acme" to an ACL. Instead, add the name of a group that includes that name, or add a wildcard entry such as "*/OU=NewYork/O=Acme" to represent all names at the New York organizational unit of the Acme organization.