How the LDAP service forms a value for the mail attribute 
To return to value for the mail attribute for a Person, Group, Mail-In Database, or Resource document, the LDAP service searches for the following:

1. A fully formed Internet address in one of these fields, in the order indicated:

• • 1. Internet Address (InternetAddress)
    2. Short Name (ShortName) -- If the "Internet Address Lookup" field on Conversions tab of a Global Domain document is disabled, the LDAP service doesn't look for a short name.
    3. Forwarding address (MailAddress) -- "Forwarding address" is the label for this field for Notes mail users, but the label is different if another mail system is specified for a user.

2. Rules specified below the "Internet address lookup" field in the SMTP Address Conversion section on the Conversions tab of a Global Domain document. If your organization uses more than one Global Domain document, you must select "Yes" in the "Use as default Global Domain" field of the Global Domain document you want to use.

3. A DNS domain name retrieved from the operating system of the machine on which the LDAP service runs. The syntax is:

For example, Randi Bowker/Marketing/East/Acme%Acme@acme.com

user's hierarchical name%notesdomain@hostname

Note If an extended ACL denies an LDAP access to the LDAP mail attribute or the corresponding Domino InternetAdress field, the LDAP service does not follow the above steps to derive an address for the entry to return to the LDAP user.

See also

To create a Global Domain document
Extended ACL
How the LDAP service works
The LDAP Service