Enabling and disabling LTPA_LDAP security with a profile using wsadmin

The following example calls the procedures set up by the default profile to enable and disable LTPA/LDAP security, based on single sign-on using LDAP user registry.

Enabling LTPA/LDAP global security:

• Use help to find out what arguments you need to provide:

  LTPA_LDAPSecurityOn help
  

  Example output:

  Syntax: LTPA_LDAPSecurityOn server user password port domain
  

• Issue the call with the arguments provided to turn on LTPA/LDAP security:

  LTPA_LDAPSecurityOn ldpaServer1 user1 password1 660 ibm.com
  

  Example output:

  PLEASE READ BELOW:
  Done with LTPA/LDAP security turning on process, now you need to restart all the 
  processes to make it affected. Then you can start using the client with
  SOAP or RMI connector.
  

  • If you use the SOAP connector to connect to the server, you need to modify the soap.client.props file in your /opt/WebSphere/properties directory. Update as below for SOAP connector:

    com.ibm.SOAP.securityEnabled=true
    com.ibm.SOAP.loginUserid=user1
    com.ibm.SOAP.loginPassword=password1 
    

  • If you use the RMI connector to connect to the server, you are prompted to enter the user ID and the password. If you want to bypass the login process, you can modify sas.client.props file in your /opt/WebSphere/properties directory. Update as below for RMI connector:

    com.ibm.CORBA.loginSource=properties
    com.ibm.CORBA.loginUserid=user1
    com.ibm.CORBA.loginPassword=password1
    

Disabling LTPA/LDAP global security:

• Issue the following call to turn off LTPA/LDAP global security

  LTPA_LDAPSecurityOff
  

  Example output:

  LTPA/LDAP security is off now but you need to restart all the processes to 
  make it affected.
  

 

IBM is a trademark of the IBM Corporation in the United States, other countries, or both.