Coexistence Manager for Notes 3.8.4

Step 5 (conditional): Change communications port

The Directory Connector needs to know which communications port to use for data transmissions between the DC service and the DC Management Console, on the server where these applications reside. The port number for this is set to 9081 by default, and this will be the correct setting in almost all environments.

But if port 9081 is assigned to some other service or function in your environment, you must change the communications port setting in the Directory Connector configuration file. To do this (if necessary):

Find and open the Directory Connector configuration file, in CMN’s \Directory Connector\ folder (named Configuration.xml by default).


	IMPORTANT: The CMN Management Console must be closed before you open this configuration file. When you select File\|Save in the Management Console, the Console saves all of its open data to the Configuration.xml file, and this will overwrite any manual changes to the file that may have been saved while the Console was open.

Find the <ServicePort>####</ServicePort> parameter, usually at or near the end of the <DirectoryConnectorSettings> section.


	CAUTION: Be very careful when manually entering or editing values in the Configuration.xml file, where incorrect syntax or even a single- character typo could disable a connector or the DC service altogether.

Change the value of the <ServicePort>####</ServicePort> parameter to the port number you want to designate as the CMN Directory Connector communications port.

Save and close the Directory Connector configuration file.

Step 6 (conditional): Preempt object collisions in environments with multiple source SMTP domains

Many organizations prefer to use alternate or subdomains to enable mail routing between systems during a coexistence period. In environments with multiple source SMTP domains, applying a constant subdomain to all users could result in collisions. The Directory Connector uses organizational units as the selection criteria for each connector’s operation. Multiple SMTP domains within a single OU create a possibility of address collisions during the operation. In this case, additional configuration may be required to avoid duplicate addresses.

For many organizations the easiest solution is to create multiple connectors (one for each source SMTP domain) with separate subdomains for each, and then define object filters for the different connectors (see Advanced Settings tab: object filtering features later in this chapter). Use the object filters to have each connector pull users only from the specified SMTP domain. This will allow a different subdomain to be used for each source SMTP domain and eliminate any chance of address conflicts between domains.

Step 7 (recommended): Configure LDAP to write to a secondary address book

The Directory Connector can write to a secondary address book, if you use Notes Directory Assistance (DA) to direct LDAP writes to a selected address book. Many organizations prefer this approach to isolate the updates and eliminate direct updates to the production NAB. To configure Notes for this:


	NOTE: Newer versions of Domino have renamed the File \| Database \| ... menu path to File \| Application \| .... If you are running one of these newer Domino versions, just substitute "File \| Application \| .. " for "File \| Database \| ..." wherever that menu path appears in this procedure.

Give the permission needed to create a Domino directory:

Open the database pubnames.ntf (File | Database | Open) by selecting the server, then manually typing in the filename. (If the database does not already exist, create it: File | Database | New.)

Edit the database's ACL: File | Database | Access Control.

Select or add the user or group to which you want to give permission (e.g., Local Domain Admins).

Assign manager access, verify all roles are checked, and click OK.

Close the database.

Create a new Domino directory:

Create the new database: File | Database | New.

Select the server in the Database Name section.

Enter a name for the new database (e.g., secondAB.nsf).

In Advanced Templates, check Show All Templates.

Select the server in the Template section.

Select Domino Directory as the template, and click OK.

Assign a unique domain name (e.g. secondAB), then Save & Close.

Note: This domain name will be used in step 6b below.

Apply permission for the CMN Directory Connector user account and the Notes admin account:

Edit the database's ACL: File | Database | Access Control.

Select or add the user or group to which you want to give permission (e.g., administrator and SyncUser).

Assign manager access, verify all roles are checked, and click OK.

Enable LDAP write access for that directory:

In Domino Administrator, on the Configuration tab: In the navigation tree at left, expand Directory, then expand LDAP, and then select Settings.

If you already have an LDAP configuration document, Domino Administrator will open it into the window at right. If you do not already have an LDAP configuration document, it will prompt you to create one.

In the LDAP configuration document: Click Edit LDAP Settings.

In the LDAP Settings: Set Allow LDAP users write access to Yes.

Save & Close the document.

Restart the Domino server.

Create and configure the Directory Assistance database:

Create the new Directory Assistance database: File | Database | New.

Select the server in the Database Name section.

Enter a name for the new DA database (e.g., newDAdb.nsf).

Select the server in the Template section.

Check Advanced Templates to show all templates.

Select Directory Assistance as your template.

Click OK and leave the new Directory Assistance database open.

Assign address books to Directory Assistance:

From the Directory Assistance database, select Add Directory Assistance.

In the Basics tab, enter the domain of the address book you want to add.

Note: The primary address book domain name must match the domain name of the address book, and the domain name of the secondary address book must match the domain name specified in step 2g (e.g., secondAB).

Under the Naming Rules tab, enter a unique Organization Name for this address book, and leave all other fields for that line as "*" (e.g., secondary).

Note: The Organization Name will appear in the Name Rules for the secondary address book and will be used in step 9 below to create a CMN Directory Connector connection.

Open the address book you want to link to the rule you just created.

Switch back to the Add Directory Assistance dialog box, and select the Replicas tab.

Drag and drop the top tab (marking the address book you want to link to this Directory Assistance rule) into the field marked Database Links. This should produce a blue book in the field. Then Save & Close the rule.

Repeat steps 1–6 to create a unique Directory Assistance document for each address book, including the primary address book.

When you have completed steps 1–6 for all address books, you should see one document for each address book in the new Directory Assistance Database (newDAdb). This includes the primary address book. For example:


primaryDomain	Notes	companyA	////<primary>/*
secondary AB	Notes	companyX	////<secondary>/*

... where <primary> and <secondary> are variables that should be filled with the actual primary and secondary organization names, respectively.

NOTE: If you use an organization for the secondary address book, you must have a certifier for that organization or organizational unit. Usually you are asked for a "certificate" when you create it, but you can create it without one by only specifying the name and issuer. To create a certificate:

In Domino Administrator, on the People & Groups tab: Select the secondary address book from the navigation tree at left, and click Certificates.

Select Notes Certifiers (in the pane at right), and click Add Certifier.

Add two Certifier entries of O=xxxxxxxx (or OU=xxxxxxxx if configured at a higher level), where xxxxxxxx is the string you added to the secondary address book configuration (in place of the <secondary> variable in the routing table, as shown above).

Click Save & Close.

When you have completed steps 1–6 for all address books, continue this procedure with step 7:

Assign the Directory Assistance Database to the server:

Open the primary address book (names.nsf).

In the Servers part of the tree, open the document for your server.

Under the Directory Information, enter the name of the Directory Assistance Database file from step 5c (newDAdb.nsf).

Save & Close the primary address book.

Restart your Notes server:

Close the Notes client.

Type into the Notes console: quit

Open the Notes server and login with the client.

CMN Directory Connector configurations:

If defining an Exchange-to-Notes connector, and you want the Contacts placed in the secondary address book, you must use the target OU string as defined above: O=xxxxxxxx or OU=xxxxxxxx (see the pushpin note preceding step 7 above).

Step 8 (if necessary): Verify Exchange DL configuration

Check the Message Delivery Restrictions settings for any Exchange group to which you want Notes users to be able to send messages. Any such Exchange group must be of the universal distribution type to be mail-enabled. To change the settings, beginning in the Exchange Management Console:

Select the group under Recipient Configuration | Distribution Group, then double-click the group you want to edit.

Click the Mail Flow Settings tab, and highlight Message Delivery Restrictions, then click Properties above.

De-select (unmark) the check box for Require that all senders are authenticated.

Save, and then restart the MS Exchange transport service.

제품을 선택하십시오.

더 나은 서비스 제공을 위해 채팅 목적을 작성해 주십시오.

문제에 대한 권장 솔루션

Coexistence Manager for Notes 3.8.4 - User Guide

Step 5 (conditional): Change communications port

Step 6 (conditional): Preempt object collisions in environments with multiple source SMTP domains

Step 7 (recommended): Configure LDAP to write to a secondary address book

Step 8 (if necessary): Verify Exchange DL configuration