To enable or disable LDAP write access to the primary IBM® Lotus® Domino® Directory of the LDAP service, or to a secondary Domino Directory or Extended Directory Catalog the LDAP service serves:

1. From the Domino Administrator, open the directory for which you want to enable write access.

2. Select the Servers - Configurations view.

3. If you do not see a domain Configuration Settings document in the view, a document named * - [All Servers], skip to step 4. If you see this document, do the following:

1. Open the document
2. Click the LDAP tab.
3. Click Edit Server Configuration.

1. Click Add Configuration.
2. On the Basics tab select Yes next to "Use these settings as the default settings for all servers."
3. Click the LDAP tab.

5. Next to "Allow LDAP users write access" choose one:

• Yes to allow directory changes via LDAP.
• No (default) to prevent directory changes via LDAP.

7. For each server in the domain that runs the LDAP service, do the following:

1. If you made the changes to a Domino Directory replica on a different server, replicate the changes to the server.
2. Enter the following command on the server to put the changes into effect:
Restart Server

Note To allow users to modify documents in the directory, the "Maximum Internet name-and-password access" setting in the Advanced pane of the database Access Control dialog must be set to Editor access or higher.

Related topics

Using LDAP to modify a directory served by the LDAP service
Controlling access to the Domino Directory
Extended ACL
Maximum Internet name-and-password access
Configuring how the LDAP service responds to multiple name matches when processing write and compare operations
Customizing the LDAP service configuration
The LDAP service

Glossary