Lotus Notes LDAP group is empty or missing some users


This article applies to:

  • Trustwave MailMarshal (SEG)

Symptoms:

  • Lotus Notes LDAP group is empty or missing some users.
  • Unable to import all or some members of a Lotus Notes LDAP group.
  • An LDAP connection to Lotus Notes does not import some or all users from a group.

Causes:

By default, Generic LDAP connectors in MailMarshal look for the User Class Name of 'user' type objectclass.  In Lotus Notes, an objectclass that is commonly used is 'dominoServerMailInDatabase'.

Resolution:

Use the specific Domino LDAP connector definition (present in MailMarshal SMTP 6.1 through 8.X).

You can also modify the existing Generic LDAP connector that you are using for Lotus Notes, as follows:

  1. Open MailMarshal Configurator or MailMarshal (SEG) 10 Management Console.
  2. Under Policy Elements | Connectors, select the Lotus Notes general LDAP connector you are using.
  3. On the User Attributes tab, change the User Class Name entry to user,dominoServerMailInDatabase
  4. Click Add under Email Address Attribute.
  5. Enter uid for the name. Select Attribute value requires filtering to locate email aliases. Enter (.+@.+) for Regular expression match. Enter $1 for Regular expression value. Click OK or Save.
  6. Click Add under Email Address Attribute.
  7. Enter cn for the name. Select Attribute value requires filtering to locate email aliases. Enter (.+@.+) for Regular expression match. Enter $1 for Regular expression value. Click OK or Save.
  8. Save the connector.
  9. Commit configuration changes and restart the MailMarshal Engine.
  10. Reload the User Group.

This article was previously published as:
NETIQKB45277

Last Modified 4/1/2020.
https://support.trustwave.com/kb/KnowledgebaseArticle10605.aspx