wmm_LDAP_IDS_AD.xml
Sample wmm.xml file for Tivoli Directory Server and Active Directory
<?xml version="1.0"?> <!-- Sample wmm.xml for two LDAP repositories (IBM Directory Server and Active Directory)--> <wmm name="member manager" description="member manager" defaultRealmName="wmmRealm" horizontalPartitioning="true" lookAside="false" configurationFile="xml/wmmAttributes.xml" uniqueIdGeneratorClassName="com.ibm.ws.wmm.uniqueid.WMMUniqueMemberIdentifierGenerator" maximumSearchResults="2000" searchTimeOut="600000" maximumSearchResultsForSortingAndPaging="500" maximumTotalSearchResultsForSortingAndPaging="1000" pagingMemberObject="true" timeToRemovePagedCacheEntry="900" userSecurityNameAttribute="uid" passwordAttribute="userPassword"> <supportedMemberTypes> <supportedMemberType name="Person" rdnAttrTypes="uid" defaultParentMember="cn=users,dc=yourco1,dc=com" defaultProfileRepository="LDAP1"/> <supportedMemberType name="Group" rdnAttrTypes="cn" defaultParentMember="cn=groups,dc=yourco1,dc=com" defaultProfileRepository="LDAP1"/> <supportedMemberType name="Organization" rdnAttrTypes="o" defaultParentMember="cn=users,dc=yourco1,dc=com" defaultProfileRepository="LDAP1"/> <supportedMemberType name="OrganizationalUnit" rdnAttrTypes="ou" defaultParentMember="cn=users,dc=yourco1,dc=com" defaultProfileRepository="LDAP1"/> </supportedMemberTypes> <repositories> <!-- databaseType dataAccessManagerClassName db2 com.ibm.ws.wmm.db.dao.db2.WMMDB2Dao oracle com.ibm.ws.wmm.db.dao.oracle.WMMOracleDao cloudscape com.ibm.ws.wmm.db.dao.cloudscape.WMMCloudscapeDao sqlserver com.ibm.ws.wmm.db.dao.sqlserver.WMMSQLServerDao informix com.ibm.ws.wmm.db.dao.informix.WMMInformixDao db2_iseries com.ibm.ws.wmm.db.dao.db2iseries.WMMDB2iSeriesDao --> <federationRepository name="wmmDBFederation" UUID="DB1" supportTransactions="true" adapterClassName="com.ibm.ws.wmm.db.DataBaseFederationAdapter" dataSourceName="jdbc/wmmDS" databaseType="DB2" dataAccessManagerClassName="com.ibm.ws.wmm.db.dao.db2.WMMDB2Dao"/> <!-- ldapType adapterClassName configurationFile ids com.ibm.ws.wmm.ldap.ibmdir.IBMDirectoryAdapterImpl xml/wmmLDAPAttributes_IDS.xml ids5 com.ibm.ws.wmm.ldap.ibmdir.IBMDirectory5AdapterImpl xml/wmmLDAPAttributes_IDS.xml sunone com.ibm.ws.wmm.ldap.sunone.SunOneDirectoryAdapterImpl xml/wmmLDAPAttributes_SO.xml activedir com.ibm.ws.wmm.ldap.activedir.ActiveDirectoryAdapterImpl xml/wmmLDAPAttributes_AD.xml activedir2003 com.ibm.ws.wmm.ldap.activedir.ActiveDirectory2003AdapterImpl xml/wmmLDAPAttributes_AD.xml domino5 com.ibm.ws.wmm.ldap.domino.DominoLdapAdapterImpl xml/wmmLDAPAttributes_DM.xml domino6 com.ibm.ws.wmm.ldap.domino.Domino6LdapAdapterImpl xml/wmmLDAPAttributes_DM.xml nds com.ibm.ws.wmm.ldap.novell.NovelleDirectoryAdapterImpl xml/wmmLDAPAttributes_NDS.xml --> <ldapRepository name="wmmLDAP" UUID="LDAP1" adapterClassName="com.ibm.ws.wmm.ldap.ibmdir.IBMDirectory5AdapterImpl" supportDynamicAttributes="false" configurationFile="xml/wmmLDAPAttributes_IDS.xml" wmmGenerateExtId="false" supportGetPersonByAccountName="true" profileRepositoryForGroups="LDAP1" supportTransactions="false" adminId="cn=root" adminPassword="**" ldapHost="localhost" ldapPort="636" ldapTimeOut="6000" ldapAuthentication="SIMPLE" ldapType="0" sslEnabled="true" sslTrustStore="C:\WebSphere\AppServer\etc\DummyServerTrustFile.jks" dirContextsMaxSize="20" dirContextsMinSize="5" dirContextTimeToLive="-1" cacheGroups="false" groupsCacheTimeOut="600" cacheAttributes="true" attributesCacheSize="2000" attributesCacheTimeOut="600" cacheNames="true" namesCacheSize="2000" namesCacheTimeOut="600"> <readMemberType> <memberType name="Person" /> <memberType name="Group" /> <memberType name="Organization" /> <memberType name="OrganizationalUnit" /> </readMemberType> <createMemberType> <memberType name="Person" /> <memberType name="Group" /> <memberType name="Organization" /> <memberType name="OrganizationalUnit" /> </createMemberType> <updateMemberType> <memberType name="Person" /> <memberType name="Group" /> <memberType name="Organization" /> <memberType name="OrganizationalUnit" /> </updateMemberType> <deleteMemberType> <memberType name="Person" /> <memberType name="Group" /> <memberType name="Organization" /> <memberType name="OrganizationalUnit" /> </deleteMemberType> <renameMemberType> <memberType name="Person" /> <memberType name="Group" /> <memberType name="Organization" /> <memberType name="OrganizationalUnit" /> </renameMemberType> <moveMemberType> <memberType name="Person" /> <memberType name="Group" /> <memberType name="Organization" /> <memberType name="OrganizationalUnit" /> </moveMemberType> <nodeMaps> <nodeMap node="dc=yourco1,dc=com" pluginNode="dc=yourco1,dc=com" /> <nodeMap node="cn=users,dc=yourco1,dc=com" pluginNode="cn=users,dc=yourco1,dc=com" /> <nodeMap node="cn=groups,dc=yourco1,dc=com" pluginNode="cn=groups,dc=yourco1,dc=com" /> </nodeMaps> <supportedLdapEntryTypes> <supportedLdapEntryType name="Person" rdnAttrTypes="uid" objectClassesForRead="inetOrgPerson" objectClassesForWrite="inetOrgPerson" searchBases="cn=users,dc=yourco1,dc=com"/> <supportedLdapEntryType name="Group" rdnAttrTypes="cn" objectClassesForRead="groupOfNames" objectClassesForWrite="groupOfNames" searchBases="cn=groups,dc=yourco1,dc=com"/> <supportedLdapEntryType name="Organization" rdnAttrTypes="o" objectClassesForRead="organization" objectClassesForWrite="organization"/> <supportedLdapEntryType name="OrganizationalUnit" rdnAttrTypes="ou" objectClassesForRead="organizationalUnit" objectClassesForWrite="organizationalUnit"/> </supportedLdapEntryTypes> </ldapRepository> <ldapRepository name="wmmLDAP" UUID="LDAP2" adapterClassName="com.ibm.ws.wmm.ldap.activedir.ActiveDirectoryAdapterImpl" supportDynamicAttributes="false" configurationFile="xml/wmmLDAPAttributes_AD.xml" wmmGenerateExtId="false" supportGetPersonByAccountName="true" profileRepositoryForGroups="LDAP2" supportTransactions="false" adminId="CN=ldapadmin,CN=Users,DC=adserver,DC=torolab,DC=ibm,DC=com" adminPassword="**" ldapHost="localhost" ldapPort="636" ldapTimeOut="6000" ldapAuthentication="SIMPLE" ldapType="0" sslEnabled="true" sslTrustStore="C:\WebSphere\AppServer\etc\DummyServerTrustFile.jks" dirContextsMaxSize="0" dirContextsMinSize="5" dirContextTimeToLive="-1" com.sun.jndi.ldap.connect.pool="true" cacheGroups="false" groupsCacheTimeOut="600" cacheAttributes="true" attributesCacheSize="2000" attributesCacheTimeOut="600" cacheNames="true" namesCacheSize="2000" namesCacheTimeOut="600" groupMembershipAttributeMap="memberOf"> <readMemberType> <memberType name="Person" /> <memberType name="Group" /> <memberType name="Organization" /> <memberType name="OrganizationalUnit" /> </readMemberType> <createMemberType> <memberType name="Person" /> <memberType name="Group" /> <memberType name="Organization" /> <memberType name="OrganizationalUnit" /> </createMemberType> <updateMemberType> <memberType name="Person" /> <memberType name="Group" /> <memberType name="Organization" /> <memberType name="OrganizationalUnit" /> </updateMemberType> <deleteMemberType> <memberType name="Person" /> <memberType name="Group" /> <memberType name="Organization" /> <memberType name="OrganizationalUnit" /> </deleteMemberType> <renameMemberType> <memberType name="Person" /> <memberType name="Group" /> <memberType name="Organization" /> <memberType name="OrganizationalUnit" /> </renameMemberType> <moveMemberType> <memberType name="Person" /> <memberType name="Group" /> <memberType name="Organization" /> <memberType name="OrganizationalUnit" /> </moveMemberType> <nodeMaps> <nodeMap node="dc=yourco2,dc=com" pluginNode="dc=yourco2,dc=com" /> <nodeMap node="cn=users,dc=yourco2,dc=com" pluginNode="cn=users,dc=yourco2,dc=com" /> <nodeMap node="cn=groups,dc=yourco2,dc=com" pluginNode="cn=groups,dc=yourco2,dc=com" /> </nodeMaps> <supportedLdapEntryTypes> <supportedLdapEntryType name="Person" rdnAttrTypes="cn" objectClassesForRead="user" objectClassesForWrite="user" searchBases="cn=users,dc=yourco2,dc=com" searchFilter="(ObjectCategory=Person)"/> <supportedLdapEntryType name="Group" rdnAttrTypes="cn" objectClassesForRead="group" objectClassesForWrite="group" searchBases="cn=groups,dc=yourco2,dc=com" searchFilter="(ObjectCategory=Group)"/> <supportedLdapEntryType name="Organization" rdnAttrTypes="o" objectClassesForRead="organization" objectClassesForWrite="organization"/> <supportedLdapEntryType name="OrganizationalUnit" rdnAttrTypes="ou" objectClassesForRead="organizationalUnit" objectClassesForWrite="organizationalUnit"/> </supportedLdapEntryTypes> </ldapRepository> </repositories> </wmm>