Below you find the QPCONFIG.XML which I used at a customer site to connect Lotus Quickr (Domino Services) to an Active Directory LDAP source for authentication.
Although this configuration worked in my environment you might need to adapt some parts to fit in your environment (especially some of the LDAP attributes used). You easily can check what attributes are used in your environment with a freeware tool called “Softerra Ldap Browser“.
[codesyntax lang=”xml” title=”qpconfig.xml”]
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<server_settings>
<offline enabled="true" use_login_passwords="true" >
<name_translation enabled="true">
<from_directory_name>
<translate from="CN=(.+)/(.+)/DC=acme/DC=com" to="CN=\1/\2/O=acme_com" />
</from_directory_name>
<to_directory_name>
<translate from="CN=(.+)/(.+)/O=acme_com" to="CN=\1/\2/DC=acme/DC=com" />
</to_directory_name>
</name_translation>
</offline>
<super_user enabled="true">
<dn>CN=IT_WindowsServer_Admins,OU=acme (Organisation),OU=acme Groups,DC=acme,DC=com</dn>
</super_user>
<user_directory>
<ldap>
<base_dn>
<group>DC=acme,DC=com</group>
</base_dn>
<schema>
<ldap_is_active_directory enabled="false" />
<do_not_deref_for_groups enabled="true" />
<dn_delimiter robust_compare="false"/>
<dn_incoming_is_native enabled="true"/>
<secondary_cn_component enabled="true"/>
<maintain_escape_character enabled="false"/>
<object_class>objectClass</object_class>
<user>
<object_class_value>person</object_class_value>
<common_name>cn</common_name>
<display_name>cn</display_name>
<first_name>givenname</first_name>
<last_name>sn</last_name>
<email>mail</email>
<phone>telephoneNumber</phone>
</user>
<group>
<object_class_value>group</object_class_value>
<common_name>cn</common_name>
<display_name>cn</display_name>
<member>member</member>
</group>
</schema>
<search_filters>
<authentication>
<![CDATA[
(|(sAMAccountName={0})(cn={0}))
]]>
</authentication>
<user_lookup>
<![CDATA[
(&(objectclass=person)(sn={0})(givenname={1}))
]]>
</user_lookup>
<group_lookup>
<![CDATA[
(&(objectclass=group)(cn={0}))
]]>
</group_lookup>
<group_membership>
<![CDATA[
(&(objectclass=group)(member={0}))
]]>
</group_membership>
</search_filters>
<member_lookup_ui>
<column_name>
<person>sn, givenname</person>
</column_name>
<column_disambiguate>
<person>dn</person>
</column_disambiguate>
</member_lookup_ui>
<search_ui_hint>
<![CDATA[
( enter <B>last name, first name</B>)
0; ]]>
</search_ui_hint>
<search_ui_index>sn</search_ui_index>
</ldap>
</user_directory>
</server_settings>
[/codesyntax]
In addition to the above configuration you need to add the root point of your LDAP tree (see above) in corresponding field in the Quickr Site Administration:
You also need to do some work to get the Quickr offline capability working with Active Directory. I will describe how to do this in a later post.
Update:
David Byrd has just published a very good article in the Quickr wiki regarding AD integration.