Setting up non-Notes clients to use the LDAP service

About this task

For more information, see the documentation provided with the client.

Procedure

To set up Internet clients to connect to the LDAP service, specify the following on the clients:

• Host name of a Domino® server running the LDAP service -- for example, ldap.renovations.com
• Port to use for the connection, for example 389 for TCP/IP, or 636 for SSL
• Client authentication: SSL or name-and-password security
• Search base -- applies only to any secondary Domino Directories the LDAP service serves using directory assistance

About this task

To set up Notes clients to connect to the LDAP service running on a particular Domino server, create LDAP accounts for the LDAP service in the Notes clients' Personal Address Books. Use Desktop policy settings documents to automate setup of the LDAP accounts. If you do not automate setup of the accounts, you or the users must create the accounts manually. Make sure you understand policies and how to set them up.

Procedure

1. If you haven't already done so, create a Desktop policy settings document to use to automate setup of the LDAP accounts.

2. Open the Desktop policy settings document you want to use to automate setup of the LDAP account.

3. Click the Accounts tab, then complete the following fields, and then save and close the document:

Table 1. Accounts tab fields

Field	Enter
Inherit Default Accounts Settings from Parent	Select to inherit default account settings from parent.
Enforce Default Accounts Settings in Children	Select to enforce default account settings in children.
Account Names	A descriptive name for the LDAP service account; users see this name in the list of directories the client can search. If you specify more than one account -- for example, an account for another Internet service -- separate account names with commas (,).
Server Addresses	The host name of the server running the LDAP service -- for example, ldap.renovations.com.
Protocols	LDAP
Use SSL Connection	Yes to use SSL; otherwise, No.

To authenticate LDAP clients, the LDAP service can look up the clients' distinguished names and passwords/certificates in any of the following directories:

• Primary Domino Directory
• Extended directory catalog
• Secondary Domino Directory
• Remote LDAP directory

Related concepts
Policies
Understanding the desktop policy settings document
Name-and-password authentication for Internet/intranet clients
Anonymous Internet and intranet access
Setting up the LDAP service
Changing the LDAP service port and port security configuration
Customizing the LDAP service configuration
The LDAP service
SSL and S/MIME for clients

Related tasks
Directory assistance and client authentication

Feedback on Help or Product Usability?

Help on Help

All Help Contents

Feedback on Help or Usability?

Help on Help