Additional LDAP configuration

 

+
Search Tips   |   Advanced Search

 

After installing, setting up, and configuring the LDAP user registry, there are additional configurations we can perform depending on the environment.

1. Set up LDAP over SSL
   

   To secure the data flowing between...

   • LDAP server
   • IBM WebSphere Portal
   • IBM WAS

   ...set up the LDAP server to use the SSL protocol. Optional.

2. Configure the user subsystem to follow referral's of the LDAP repository
   

   Use the information in this file if you are using DBCS characters for the user ID and need to set the LDAP repository referral to follow.

3. FIPS compliance with IBM WebSphere Portal
   

4. Enable application groups
   

5. Configure WebSphere Portal for LDAP Searches
   

   Configure LDAP searches and using aliases in the LDAP user registry.

6. Map LDAP attributes
   

   Member Manager maps attribute names that are exposed on Java objects representing users and groups to the underlying repository attribute names. The attributes and mappings are specified in xml files in the portal_server_root/shared/app/wmm/ directory, which are referenced or implicitly defined in...

   portal_server_root/shared/app/wmm/wmm.xml

7. Map external IDs (extId) in Member Manager
   

   Every main profile repository that is used with Member Manager needs to have an attribute whose value is unique, static, and never reused for every member entry. In Member Manager, this attribute is called extId. If a Lookaside repository is also used with Member Manager, extId allows Member Manager to associate data for a member in the Lookaside repository to the data for the same member in the main profile repository.

8. Use Tivoli Directory Integrator to build a user registry
   

   Synchronize identity data residing in...

   • directories
   • databases
   • collaborative systems
   • corporate applications

   By serving as a flexible, synchronization layer between a company's identity structure and the application sources of identity data, it eliminates the need for a centralized datastore.

9. Use multiple realms and user registries
   

   This topic lists information about using multiple realms and user registries in WebSphere Portal :

 

Parent Topic

LDAP user registry

 

---