Preparing to configure the LDAP directory 

Determine which Lightweight Directory Access Protocol (LDAP) attributes you want to use as the identifiers for IBM Connections users.


Before starting

Ensure that you have installed a supported LDAP directory. For more information about supported LDAP directories, see the IBM Connections detailed system requirements topic.

To ensure that the Profiles population wizard can return the maximum number of records from your LDAP directory, set the Size Limit parameter in your LDAP configuration to match the number of users in the directory. For example, if your directory has 100,000 users, set this parameter to 100000. For more information, see the documentation for your LDAP directory. If you cannot set the Size Limit parameter, you could run the wizard multiple times. Alternatively, you could write a JavaScript™ function to split the original LDAP search filter, then run the collect_dns_iterate.bat file, and finally run the populate_from_dns_files.bat file.


About this task

To prepare to configure your LDAP directory with IBM WAS...


Procedure

  1. Identify LDAP attributes to use for the following roles. If no corresponding attribute exists, create one. You can use an attribute for multiple purposes. For example, you can use the mail attribute to perform the login and messaging tasks.

      Display name

        The cn LDAP attribute is used to display a person's name in the product user interface. Ensure that the value you use in the cn attribute is suitable for use as a display name.

      Log in

        Determine which attribute or attributes you want people to be able to use to log in to IBM Connections. For example: uid. See Choosing log in values for important considerations when deciding which attributes to use.
        Note: The login name must be unique in the LDAP directory.

      Messaging

        (Optional.) Determine which attribute to use to define the email address of a person. The email address must be unique in the LDAP directory. If a person does not have an email address and does not have an LDAP attribute that represents the email address, that person cannot receive notifications.

      Global unique identifier (GUID)

        Determine which attribute to use as the unique identifier of each person and group in the organization. This value must be unique across the organization. For more information, see the Specify the global ID attribute for users and groups topic.

  2. Collect the following information about your LDAP directory before configuring it for WAS:

    • Directory Type. Identifies and selects a directory service from the available vendors and versions.

    • Primary host name

    • Port

    • Bind distinguished name

    • Bind password

    • Certificate mapping

    • Certificate filter, if applicable.

    • LDAP entity types or classes. Identifies and selects LDAP object classes. For example, select the LDAP inetOrgPerson object class for the Person Account entity, or the LDAP groupOfUniqueNames object class for the Group entity.

    • Search base. Identifies and selects the distinguished name (DN) of the LDAP subtree as the search scope. For example, select o=ibm.com to allow all directory objects underneath this subtree node to be searched. For example: Group, OrgContainer, PersonAccount, or inetOrgPerson.


Parent topic

Pre-installation tasks

Related concepts
Create databases


Related tasks


Install IBM WAS
Setting up federated repositories
Populating the Profiles database

Related reference
IBM Connections system requirements
http://publib.boulder.ibm.com/infocenter/wasinfo/v7r0/index.jsp


   

 

});

+

Search Tips   |   Advanced Search