Home
Configuring
Use this information to configure your network, users, servers (including Web servers), directory services, security, messaging, widgets and live text, and server clusters.
Configuring users and servers
Topics in this section describe how to set up users and servers.
Configuring directory services
This section describes how to plan, set up, and use HCL Domino® directory services.
The Domino® Directory
The Domino® Directory, which some previous releases referred to as the Public Address Book or Name and Address Book, is a database that Domino creates automatically on every server. The Domino Directory is a directory of information about users, servers, and groups, as well as custom entries you may add. Registering users and servers in a domain automatically creates corresponding Person documents and Server documents in the Domino Directory for the domain. These documents contain detailed information about each user and server.
Controlling access to the Domino® Directory
You control access to the HCL Domino® Directory by setting it overall in the ACL, assigning administrators to roles that correspond to their administrative tasks, and, if you want, controlling access to individual documents or using the extended ACL to set access at the form and field level.
Setting overall access levels in the Domino® Directory ACL
The Domino® Directory, like all Notes® databases, has an access control list (ACL) that controls the overall access that users and servers have.

Configuring
Use this information to configure your network, users, servers (including Web servers), directory services, security, messaging, widgets and live text, and server clusters.
- Configuring a network
  This section presents the planning concepts and setup procedures necessary for a successful HCL Domino® deployment over a network. It provides information on network protocols from a Domino perspective but does not attempt to provide general network information.
- Configuring users and servers
  Topics in this section describe how to set up users and servers.
  - Understanding the Server document
    The Server document is set up when you register a server. It contains many of the settings that define how your server operates.
  - Policies
    Use Domino® policy settings to control how users work with Notes®. A policy is a document that identifies a collection of individual policy settings. Policy settings documents define a set of defaults that apply to the users and groups to which the policy is assigned. You can change policy settings and they will be automatically applied to the assigned users and groups.
  - Defining default settings for Notes® user registration
    Before you register new Notes® users, you can specify default settings that apply to all users. Default settings simplify user registration and ensure user settings consistency. You can define many default settings, such as what mail server users have or what certifier ID to use for user registration. You can also specify a default workstation execution control list (ECL) to protect data from unauthorized workstation access.
  - Using groups
    Groups are lists of users, groups, and servers that have common traits. They are useful for mailing lists and access control lists. Using groups can simplify administration tasks.
  - Replicas
    You can make a database available to users in different locations, on different networks, or in different time zones, by creating replicas of the database.
  - Calendars and scheduling
    The calendar and scheduling features allow users to check the free time of other users, schedule meetings with them, and reserve resources, such as conference rooms and equipment.
  - Editing the notes.ini file
    The Domino and Notes notes.ini files contain the settings required for the server and client to operate correctly. If you modify or add settings in a notes.ini file, do so cautiously and never edit the file directly with a text editor.
  - Configuring directory services
    This section describes how to plan, set up, and use HCL Domino® directory services.
    - The Domino® Directory
      The Domino® Directory, which some previous releases referred to as the Public Address Book or Name and Address Book, is a database that Domino creates automatically on every server. The Domino Directory is a directory of information about users, servers, and groups, as well as custom entries you may add. Registering users and servers in a domain automatically creates corresponding Person documents and Server documents in the Domino Directory for the domain. These documents contain detailed information about each user and server.
      - Setting up the Domino® Directory for a domain
        After you install and set up servers in a Domino® domain, you set up the Domino Directory for the domain by performing tasks including creating a central directory architecture, controlling access to the directory, categorizing users by corporate hierarchy, setting up Notes® clients to use a directory server, customizing the Directory Profile, and scheduling replication.
      - Controlling access to the Domino® Directory
        You control access to the HCL Domino® Directory by setting it overall in the ACL, assigning administrators to roles that correspond to their administrative tasks, and, if you want, controlling access to individual documents or using the extended ACL to set access at the form and field level.
        Setting overall access levels in the Domino® Directory ACL
        The Domino® Directory, like all Notes® databases, has an access control list (ACL) that controls the overall access that users and servers have.
        Using administration roles in the Domino® Directory ACL
        The Domino® Directory ACL includes Creator and Modifier roles that you assign to administrators so they have the authority to create and edit specific types of documents. By assigning one or more roles along with general access levels, you can limit an administrator's access to some types of documents but allow greater access to other types of documents.
        Using the Administrators field to control access to individual documents in the Domino® Directory
        Most types of documents in the Domino® Directory contain an Administration tab with an Administrators field on it. To allow an administrator who has Author access to the directory to modify a single document, enter the administrator's name in the Administrators field.
      - Corporate hierarchies
        You can categorize a Person document in the HCL Domino® Directory by a corporate hierarchy. When an HCL Notes® user selects a name from a Domino Directory, the user can view the list of names by the assigned Corporate Hierarchy.
      - Setting up Notes® clients to use a directory server
        You can set up Notes® clients to use a different server from their mail servers for mail addressing. Type-ahead addressing searches a directory server only when Notes users do not use condensed (mobile) directory catalogs. Directory servers are not used for LDAP directory searches initiated by Notes users.
      - Customizing the Directory Profile
        Use the Directory Profile to specify miscellaneous settings for the HCL Domino® Directory.
      - Scheduling replication of the Domino® Directory
        Create Connection documents to schedule replication of the Domino® Directory on all servers in the Domino domain. Since the Domino Directory is central to a Domino system, it's important to replicate it frequently. Although the replication schedule you select ultimately depends on the configuration of the servers in the domain, in general, replicate the Domino Directory at least every 30 minutes or, if the directory is large and changes frequently, every 10 to 15 minutes.
      - The Domino® Directory template
        The default Domino® Directory template (PUBNAMES.NTF) controls the appearance and functionality of the Domino Directory database (NAMES.NSF). Domino uses the forms and settings in the default Domino Directory template to control features -- for example, mail, server tasks, and access control -- and to store critical information that manages server connections, mail routing, and system configuration.
    - The LDAP service
      Lightweight Directory Access Protocol (LDAP) is a standard Internet protocol for searching and managing entries in a directory, where an entry has one or more attributes associated with a distinguished name. A distinguished name -- for example, cn=Phyllis Spera,ou=Sales,ou=East,o=Renovations -- is a name that identifies an entry within a directory tree.
    - LDAP schema
      A directory entry contains information about a particular entity, or object -- for example, a person or a group -- and is associated with a distinguished name. An LDAP schema is a set of rules that define what can be stored as entries in an LDAP directory. Each LDAP directory has a default schema, which organizations can customize, or "extend," by adding elements to it. The elements of a schema are attributes, syntaxes, and object classes. LDAP directory servers provide the ability to enforce the schema to ensure that directory changes made using LDAP operations conform to it.
    - ldapsearch utility
      Domino® and Notes® provide a command-line search utility, LDAPSEARCH.EXE, that you use to search entries in any LDAP directory. The ldapsearch utility connects to a directory server and returns results that match search criteria you specify. It is available on Domino server and Notes client platforms.
    - Directory assistance
      Directory assistance allows a server to look up information in a directory other than a local primary Domino® Directory (NAMES.NSF).
    - Directory Sync
      Directory Sync allows you to sync people and group data from an external LDAP directory into the Domino® directory. Currently data from Active Directory can be synced.
    - Directory catalogs
      A directory catalog is an optional directory database that typically contains information aggregated from multiple Domino® directories. Clients and servers can use a directory catalog to look up mail addresses and other information about the people, groups, mail-in databases, and resources throughout an organization, regardless of the number of Domino domains and Domino Directories the organization uses.
    - Extended ACL
      An extended access control list (ACL) is an optional directory access-control feature available for a directory created from the PUBNAMES.NTF template -- a Domino® Directory or an extended directory catalog. An extended ACL is tied to the database ACL, and you access it through the Access Control List dialog box using a Notes® or Domino Administrator client.
  - Configuring messaging
    This section provides an overview of messaging and describes how to set up mail routing, how to set up and customize mail servers, and how to track mail.
  - Configuring iNotes®
    HCL iNotes® provides HCL Notes® users with browser-based access to Notes mail and to Notes calendar and scheduling features. Administrators specify mail policy and security policy settings as well as notes.ini file settings to complete the full implementation of HCL iNotes.
  - Configuring Web servers
    This section describes how to set up the HCL Domino® Web server, and the Domino Web Navigator.
  - Setting up a cluster
    Setting up a cluster includes the tasks of creating and verifying that it is working correctly, and then setting up user access, mail, replications, size quotas, directory assistance, roaming, web navigation, and use of a private LAN in the cluster.
  - Configuring Widgets and Live Text
    Widgets and Live Text enables end users to see and act on Live Text in supported documents, including HCL Notes® mail, using XML extensions (widgets) created specifically for their use.
  - Domain Search
    Notes® client and Web users can use Domain Search to search an entire Domino® domain for database documents, files, and attachments that match a search query.

Setting overall access levels in the Domino® Directory ACL

The Domino® Directory, like all Notes® databases, has an access control list (ACL) that controls the overall access that users and servers have.

About this task

The following table shows the default name entries in the Domino® Directory ACL and the default access settings for each entry.

You might want to customize the database ACL. For example, to have stricter control over database access, you might change the access for the -Default- entry to No Access and explicitly add the names of groups of users to the ACL that you want to allow access.

Note: The default access for the -Default- entry allows users only to change some of the fields in their Person documents.

Table 1. Default name entries their associated access settings
Default name entry	Access level	User type
-Default-	Author access without the "Create documents" privilege or administration roles	Unspecified
Anonymous	No access	Unspecified
LocalDomainAdmins	Manager access with no administration roles	Person group
LocalDomainServers	Manager access with all administration roles except PolicyCreator and PolicyModifier	Server group
OtherDomainServers	Reader access	Server group
Server in the domain on which the directory was created.	Manager access with all administration roles	Server
Administrator specified during server setup	Manager access with all administration roles	Person