The topic "Verifying membership in groups in an LDAP directory" in Domino 5 Administration Help and in the book Administering the Domino System has incorrect information about the directory assistance rules required for the Group Expansion option for an external LDAP directory. To search groups in an external LDAP directory when checking database access, you should configure rules that correspond to the name formats of the authenticated users within the groups. In addition, if you choose the "Nested Group Expansion" option, you should additionally add rules that correspond to the names of any nested groups to be searched.