Enabling or disabling LDAP write access to a directory served by the LDAP service

By default, the LDAP service does not allow LDAP clients to modify the directories the LDAP service serves. If you enable directory changes to be made via LDAP, the directory database ACL and, optionally, an extended ACL, control the extent to which authenticated and anonymous LDAP users can modify directory entries.

About this task

For example, an LDAP user with Editor database ACL access can modify all entries, whereas an LDAP user with only Author database ACL access and the UserModifier role can modify only Person entries and not other entries.

To enable or disable LDAP write access to the primary Domino® Directory of the LDAP service, or to a secondary Domino Directory or Extended Directory Catalog the LDAP service serves:


1. From the Domino Administrator, open the directory for which you want to enable write access.

2. Select the Servers -> Configurations view.

3. If you do not see a domain Configuration Settings document in the view, a document named * - [All Servers], skip to step 4. If you see this document, do the following:

4. If you do not see a domain Configuration Settings document in the view, create one by doing the following:
5. For Allow LDAP users write access, select one: 6. Click Save & Close.

7. For each server in the domain that runs the LDAP service, do the following:

Related concepts
Extended ACL
Customizing the LDAP service configuration
The LDAP service

Related tasks
Using LDAP to modify a directory served by the LDAP service
Controlling access to the Domino Directory
Maximum Internet name-and-password access
Configuring how the LDAP service responds to multiple name matches when processing write and compare operations