TROUBLESHOOTING

Maximum Internet name and password settings with Extended Access
The default database ACL setting on a IBM® Lotus® Domino® Directory for "Maximum Internet Name & Password" is Editor. When Extended Access is enabled, this setting affects authenticated LDAP searches. If an entry in the database ACL is set higher than Editor access (for example, Manager), that user's access to the database will be lowered to Editor when authenticating with their Internet password.

In order for authenticated LDAP searches for entries with Manager access to override Extended Access restrictions, set "Maximum Internet Name & Password" to Manager by selecting File -> Application -> Access Control -> Advanced.