Detailed information for the notes.ini Keyword: 

LDAP_CountryCheck


Short Description: Allows the LDAP service to strictly define the directory tree structure of entries that don't include country attributes in their distinguished names, relative to entries that do include country attributes.

Description:
Allows the LDAP service to strictly define the directory tree structure of entries that don't include country attributes in their distinguished names, relative to entries that do include country attributes. This setting applies only when LDAP clients specify the country attribute of a distinguished name as a search base and also specify subtree as a search scope -- that is, when they search for all entries with names descended from a specific country attribute.

    1 = Strictly define directory tree location for entries without country attributes

    0 (or setting omitted) = Do not strictly define directory tree location for entries without country attributes


For example, suppose you use LDAP_CountryCheck=1, and then given this search query:

    Scope: subtree

    Search base: c=us

    Search filter: cn=*Alan*


the LDAP service will return an entry with the distinguished name cn=Alan Jones, o=Acme, c=US but not return an entry with the distinguished name cn=Alan Smith, o=Acme. If you omit the setting or specify a value of 0, the LDAP service will return both entries, given the same search query.

Note that even if you omit the setting or specify a value of 0, the LDAP service won't return an entry with the distinguished name cn=Alan Woods, o=Acme, c=CA given the search query above.

Enable this setting only if some entries in the Domino Directory include country components in their distinguished names, but others do not. If you enable this setting, Microsoft Outlook Express users who do not explicitly specify a search base may not see the search results they expect. This is because Outlook Express provides the country associated with the version of its software as a default search base when users don't specify one. If you use LDAP_CountryCheck=1 and Outlook Express clients use the default search base, the LDAP service returns only entries that have distinguished names that contain a country component that corresponds to the default search base. If your LDAP users are primarily Outlook Express users, you may not want to enable this setting. If your primary LDAP users are not Outlook Express users, we recommend enabling this setting.





Default value:
None

Syntax:
LDAP_CountryCheck=0 / 1

Example:
LDAP_CountryCheck=1

UI equivalent:
There is no kown UI setting for this notes.ini variable. But you can specify this setting in the notes.ini settings tab of the configuration settings document.


Applies to:
Server


Valid for version:
5.0.0

Obsolete since version:
6.0.0

Documented in:
Domino 5 Administration Help

Entry created by:
Bastian W.