RE: Groups/UserInfo from Domino and Active Directory only for passwords? Ben Williams 11.Feb.16 08:24 AM Lotus Notes Administration 9.0All Platforms
That might work for the Community server but what of the WAS infrastructure? WAS has no notion of DA.nsf and you would need to federate an AD repository alongside your Domino one at which point you would have a clash as a user would exist in both. What Markku suggests may have been possible in ST 8.5.2.x and below when WAS was not required but with the SSC in play at the minimum with version 9 you run the risk of failing policies if you do not add the AD repository.
Actually, I don't know as you will be forwarding LDAP queries from WAS to Domino on to AD. In WAS the users and groups are expected in a certain attribute which differs from Domino to AD. If WAS was expecting Domino but received something from AD what would it do?? Hmmm, something interesting to play with otherwise maybe PMR it. I fear that IBM will say one or the other if anything for support reasons when/if something breaks.