ACL blocking access to target server

ACL blocking access to target server

When trying to replicate NAB from different servers/domains in our company, we receive an error from the server we are trying to replicate in the replication log: Access Control List (ACL) will not allow us access into the target server. I manually replicated three of the five NABs; however, I can't replicate two of them. Also when I try to send mail out from my server, we cannot send mail.

    Requires Free Membership to View

    Login

    Register today to access targeted resources from our editorial writers and independent industry experts focused on Lotus Domino, Notes, Workplace and other related technologies.

    By submitting your registration information to SearchDomino.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchDomino.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

This sounds typical -- and correct. First, I must warn you against manually replicating address books, especially ones in different domains. The ACLs of those servers are set up for that domain. When you replicate them manually, you run the risk of overriding settings for that domain, such as the administration server. When you manually replicate the databases as a manager, you will pass the ACLs between the servers.

If you are a manager of both domains, you can troubleshoot the replication issues by investigating the ACLs and connection documents. In this case, it appears to be that domain B is not set to allow users from your domain A to access and use the server. If you want users and servers from the domains to be able to use each other, you need to cross-certify the domains, allow the domains to access each other's servers or both.

This was first published in April 2003

Back to top