Re: Domino LDAP and Directory Assistance

I have not used SonicWall authentication against a Domino LDAP and am in 
no way an LDAP expert, but I have set up a SonicWall against Microsoft AD 
(LDAP in disguise).

Either way, I don't see how it could return any information to an 
end-user. Even in the GUI administration, it looks like you can pick an 
(as in singular) attribute such as 'member'.

On the "test" tab for LDAP configuration, I enter my username and password 
and get the following returned user attributes:
userPrincipalName: tkreimer@xxxxxxxxxxxxxxxxxxx
memberOf: Limited Administrators
memberOf: WLAN Users
memberOf: Guest Services
memberOf: Trusted Users

The users just get a pass/fail at a login screen. We use it for VPN with 
their Global VPN client and for WiFi admission at a re-directed HTML login 
form.

On the theoretical side, wouldn't it be up to the LDAP directory what 
information it allows to be seen, and not the responsibility of a client?

Now that I've typed all that, I see you are talking about their e-mail 
security appliance. Different product. In a similar vein, I'm sure it 
allows you to define the returned attributes, and I'm wondering how the 
client can be responsible for what a server is willing to return.
====================================
Tom Kreimer
Information Alternatives



Hello,

I am looking into a Sonicwall EMail Security appliance that uses LDAP to
get user information from so it doesn't have to be separately configured.

What I want to confirm is that it will only be able to see the enrolled
users in names.nsf and not the addresses that they have put into another
database and made available via Directory Assistance for company wide
ease of addressing email.

This is Domino 7.0.1FP1 on OS/400 V5R3 (soon V5R4).

Thanks.

Roger Vicker, CCP