After upgrading a hub server this weekend to Domino R7 we had the problem that all HTTP Password Change requests in the ADMIN4.NSF ran into an error and the HTTP passwords were no longer changed:
Person documents for the ‘Name(s) acted upon’ were found in multiple trusted directories for which this server is the Administration Server.
Person documents for Joe User/Acme were found in two trusted directories used by AcmeServer/SVR/Acme: Acme’s Address Book and AmceCo Extended Directory Catalog.
We only found some hints which said that we should remove the administration server from the Extended Directory Catalog. But this directory catalog did not have an admin server defined in our environment.
The problem was that the extended directory catalog was set to “Trusted” in the directory assistance database. This is necessary on the mail and application servers (because users from other domains should be able to authenticate) but not necessary on the hub server.
So we set this directory catalog to “Untrusted” on the hub server and the admin requests were successful again.