<?xml version="1.0"?> <wmm name="member manager" description="member manager" defaultRealmName="wmmRealm" horizontalPartitioning="false" lookAside="true" configurationFile="xml/wmmAttributes.xml" uniqueIdGeneratorClassName="com.ibm.ws.wmm.uniqueid.WMMUniqueMemberIdentifierGenerator" maximumSearchResults="2000" searchTimeOut="600000" maximumSearchResultsForSortingAndPaging="500" maximumTotalSearchResultsForSortingAndPaging="1000" pagingMemberObject="true" timeToRemovePagedCacheEntry="900" userSecurityNameAttribute="uid" passwordAttribute="userPassword"> <supportedMemberTypes> <supportedMemberType name="Person" rdnAttrTypes="uid" defaultParentMember="cn=users,dc=yourco,dc=com" defaultProfileRepository="LDAP1"/> <supportedMemberType name="Group" rdnAttrTypes="cn" defaultParentMember="cn=groups,dc=yourco,dc=com" defaultProfileRepository="LDAP1"/> <supportedMemberType name="Organization" rdnAttrTypes="o" defaultParentMember="cn=users,dc=yourco,dc=com" defaultProfileRepository="LDAP1"/> <supportedMemberType name="OrganizationalUnit" rdnAttrTypes="ou" defaultParentMember="cn=users,dc=yourco,dc=com" defaultProfileRepository="LDAP1"/> </supportedMemberTypes> <repositories> <!-- ****************************************************************************************************** databaseType dataAccessManagerClassName ****************************************************************************************************** db2 com.ibm.ws.wmm.db.dao.db2.WMMDB2Dao oracle com.ibm.ws.wmm.db.dao.oracle.WMMOracleDao cloudscape com.ibm.ws.wmm.db.dao.cloudscape.WMMCloudscapeDao sqlserver com.ibm.ws.wmm.db.dao.sqlserver.WMMSQLServerDao informix com.ibm.ws.wmm.db.dao.informix.WMMInformixDao ******************************************************************************************************* --> <lookAsideRepository name="wmmDBLookAside" UUID="LA" supportTransactions="true" standardNamingSubContext="" specVersion="1.0" adapterClassName="com.ibm.ws.wmm.lookaside.db.LookAsideAdapter" supportDynamicAttributes="true" dataSourceName="jdbc/wmmDS" databaseType="DB2" dataAccessManagerClassName="com.ibm.ws.wmm.db.dao.db2.WMMDB2Dao"/> <!-- *************************************************************************************************************** ldapType adapterClassName configurationFile *************************************************************************************************************** ids com.ibm.ws.wmm.ldap.ibmdir.IBMDirectoryAdapterImpl wmm/xml/wmmLDAPAttributes_IDS.xml sunone com.ibm.ws.wmm.ldap.sunone.SunOneDirectoryAdapterImpl wmm/xml/wmmLDAPAttributes_SO.xml activedir com.ibm.ws.wmm.ldap.activedir.ActiveDirectoryAdapterImpl wmm/xml/wmmLDAPAttributes_AD.xml domino5 com.ibm.ws.wmm.ldap.domino.DominoLdapAdapterImpl wmm/xml/wmmLDAPAttributes_DM.xml domino6 com.ibm.ws.wmm.ldap.domino.Domino6LdapAdapterImpl wmm/xml/wmmLDAPAttributes_DM.xml nds com.ibm.ws.wmm.ldap.novell.NovelleDirectoryAdapterImpl wmm/xml/wmmLDAPAttributes_NDS.xml *************************************************************************************************************** adminPassword - can either use clear text or encrypted text generated by wmm_encrypt.bat wmmGeneratedExtId - can be set to false if LDAP Directory Server provides extId. For example, objectGUID attribute in Active Directory. --> <ldapRepository name="wmmLDAP" UUID="LDAP1" adapterClassName="com.ibm.ws.wmm.ldap.ibmdir.IBMDirectoryAdapterImpl" supportDynamicAttributes="false" configurationFile="xml/wmmLDAPAttributes.xml" wmmGenerateExtId="false" supportGetPersonByAccountName="true" profileRepositoryForGroups="LDAP1" supportTransactions="false" adminId="cn=root" adminPassword="******" ldapHost="localhost" ldapPort="389" ldapTimeOut="6000" ldapAuthentication="SIMPLE" ldapType="0" groupCacheRefreshInterval="6000"> <readMemberType> <memberType name="Person" /> <memberType name="Group" /> <memberType name="Organization" /> <memberType name="OrganizationalUnit" /> </readMemberType> <createMemberType> <memberType name="Person" /> <memberType name="Group" /> <memberType name="Organization" /> <memberType name="OrganizationalUnit" /> </createMemberType> <updateMemberType> <memberType name="Person" /> <memberType name="Group" /> <memberType name="Organization" /> <memberType name="OrganizationalUnit" /> </updateMemberType> <deleteMemberType> <memberType name="Person" /> <memberType name="Group" /> <memberType name="Organization" /> <memberType name="OrganizationalUnit" /> </deleteMemberType> <renameMemberType> <memberType name="Person" /> <memberType name="Group" /> <memberType name="Organization" /> <memberType name="OrganizationalUnit" /> </renameMemberType> <moveMemberType> <memberType name="Person" /> <memberType name="Group" /> <memberType name="Organization" /> <memberType name="OrganizationalUnit" /> </moveMemberType> <nodeMaps> <nodeMap node="dc=yourco,dc=com" pluginNode="dc=yourco,dc=com" /> <nodeMap node="cn=users,dc=yourco,dc=com" pluginNode="cn=users,dc=yourco,dc=com" /> <nodeMap node="cn=groups,dc=yourco,dc=com" pluginNode="cn=groups,dc=yourco,dc=com" /> </nodeMaps> <supportedLdapEntryTypes> <supportedLdapEntryType name="Person" rdnAttrTypes="uid" objectClassesForRead="inetOrgPerson" objectClassesForWrite="inetOrgPerson" searchBases="cn=users,dc=yourco,dc=com"/> <supportedLdapEntryType name="Group" rdnAttrTypes="cn" objectClassesForRead="groupOfNames" objectClassesForWrite="groupOfNames" searchBases="cn=groups,dc=yourco,dc=com"/> <supportedLdapEntryType name="Organization" rdnAttrTypes="o" objectClassesForRead="organization" objectClassesForWrite="organization"/> <supportedLdapEntryType name="OrganizationalUnit" rdnAttrTypes="ou" objectClassesForRead="organizationalUnit" objectClassesForWrite="organizationalUnit"/> </supportedLdapEntryTypes> </ldapRepository> </repositories> </wmm>