ADMINISTERING


Processing administration requests across domains

The Administration Process for the Domino® Directory must be set up on a server in each domain.

Cross-domain processing offers these benefits:


These tasks can be processed across domains:
Setting up cross-domain processing of administration requests

To set up cross-domain processing of administration requests, you need to do the following:


Edit the Directory Profile document for the Domino Directory to include the names of anyone allowed to create a Cross-domain Configuration document. On the Directory Profile document, add the administrators' names to the field List of administrators who are allowed to create Cross-domain Configuration documents in the administration requests database. If a Cross-domain configuration document is created by someone whose name is not in that field or who is not a manager of the Domino Directory, that configuration will be ignored.

The Administration Requests database contains Cross-domain Configuration documents that specify how domains exchange and process administration requests. When you configure a Cross-domain Configuration document, you designate the trusted entities, which are persons, servers, or certifiers. All requests received from the domain must be signed by one of its trusted entities. Rename requests are the exception; they are signed by certifiers so their validity is determined by the certificates and the cross-certificate in the destination domain's Domino Directory. For Rename requests going to another domain, there must be appropriate cross-certificates between the two domains. Additionally, the Domino Directories of both the originating and destination domains must have all Certifier documents, with the certifier's public key, for the organizational structure represented in the name change request.

Tip: Copy the necessary set of Certifier documents from the originating domain to the destination domain. However, keep in mind that documents copied in this manner may need to replaced later if newer certifiers are used.

Note: Check the Connection documents for the servers involved in the cross-domain request processing. The fields on the Connection document that have particular impact on the processing of administration requests across domains are on the Basics tab: Source server, Source domain, Destination server, and Destination domain fields.

Other fields on the Connection should be set up to allow for replication and communication between source and destination servers as usual.

Related concepts
Adding cross-certificates to the Domino Directory or Contacts
Certifier IDs and certificates
Administration process requests

Related tasks
Creating a Cross-domain Configuration document
Customizing the Directory Profile

Related reference
Cross-Domain Administration Requests