Directory Assistance and LDAP add operations

04 Documentation updates

Administrator Client, Server
Directory Assistance and LDAP add operations

In an environment with secondary Domino directories, the following rules determine in which directory or directories the LDAP service puts an entry added through LDAP:

NOTE: To modify a secondary directory through LDAP operations, store the directory locally on the server that runs the LDAP service. For more information, see the release note "Confine LDAP writes to local directories."

If the entry name corresponds to a Directory Assistance naming rule assigned to only one secondary directory, the LDAP service adds the entry to that directory.
If the entry name corresponds to naming rules assigned to more than one secondary Domino Directory, the entry is added to the directory with the naming rule that most closely matches the entry name.

If the rule that most closely matches the entry name is assigned to two or more secondary Domino directories, the "Rules to follow when this directory is...." LDAP setting for the primary Domino Directory controls where the entry goes as follows:

"Rules to follow when this directory is..." setting for the LDAP service primary Domino Directory	Where entry is added
Don't modify any	Entry not added; error message returned.
Modify first match	Secondary Domino Directory with the closest matching rule and the lowest sort order.
Modify all matches	All secondary Domino directories with the closest matching rule.

If the entry name doesn't correspond to a naming rule in Directory Assistance, the LDAP service adds the entry to the primary Domino Directory.

For example, suppose the LDAP service primary domain for the Acme organization is DomainA and there are three secondary domains, DomainB, DomainC, and DomainD. The Directory Assistance documents for the three secondary domains contain the following:

Domain	DomainB	DomainC	DomainD
Search Order	1	2	3
Rules	///DomainB/Acme/ ///DomainC/Acme/	///DomainC/Acme/ //West/DomainC/Acme/*	///DomainD/Acme

The following table provides examples of where different entries are added given the Directory Assistance configuration described above:

Entry to be added	"Rules to follow when this directory is..." setting	Domain directory in which entry is added	Reason
cn=Kate Powers,ou=DomainD,o=Acme	N/A	DomainD	DomainD is the only domain with a matching rule.
cn=Sue Wu,ou=West,ou=DomainC,o=Acme	N/A	DomainC	The DomainC rule ///West/DomainC/Acme/ is a closer match than the DomainB rule ////DomainC/Acme/* .
cn=John Ashby,ou=DomainC,o=Acme	Modify first match	DomainB	DomainB and DomainC both have rules that match, but since "Modify first match" is selected, the entry is added to the DomainB directory because it has the lower search order.
cn=John Ashby,ou=DomainC,o=Acme	Modify all matches	DomainB and DomainC	DomainB and DomainC both have rules that match, and since "Modify all matches" is selected, the entry is added to both domain directories.
cn=John Ashby,ou=DomainC,o=Acme	Don't modify any	None	DomainB and DomainC both have rules that match, but since "Don't modify any" is selected, the entry isn't added to either directory.
cn=Phyllis Spera,o=Acme	N/A	DomainA (primary directory)	No secondary directory has a rule that matches.