If you allow LDAP write operations to a Domino Directory, store that directory on the server running the LDAP service rather than on another server. Make sure that the Replicas tab of the Directory Assistance document for the directory in the Directory Assistance database used by the LDAP service includes a replica only for the local directory. If you allow LDAP write operations to remote Domino directories, the ACL is unreliable.