Prepare to configure the LDAP directory with WAS

1. Install a supported LDAP directory.

2. To ensure the Profiles population wizard can return the maximum number of records from the LDAP directory, set the Size Limit parameter in the LDAP configuration to match the number of users in the directory.

   For example, if the directory has 100,000 users, set this parameter to 100000. See the documentation for the LDAP directory. If we cannot set the Size Limit parameter, you could run the wizard multiple times.

   Alternatively, you could write a JavaScript function to split the original LDAP search filter, then run...

   1. collect_dns_iterate.bat
   2. populate_from_dns_files.bat

3. Identify LDAP attributes to use for the following roles.

   If no corresponding attribute exists, create one. We can use an attribute for multiple purposes. For example, we can use the mail attribute to perform the login and messaging tasks.

   Display name	The cn attribute displays a person's name in the product user interface.
   Log in	Login attribute. For example: uid. Values must be unique in directory.
   Messaging	Attribute for email address. Must be unique in LDAP.
   Global unique identifier (GUID)	Unique identifier of each person and group. Must be unique across the organization.

4. Collect the following information about the LDAP directory...
   • Directory Type
   • Primary host name
   • Port
   • Bind distinguished name
   • Bind password
   • Certificate mapping
   • Certificate filter, if applicable.

   • LDAP entity types or classes

     Identifies and selects LDAP object classes. For example, select...

     inetOrgPerson

     ...for the Person Account entity, or...

     groupOfUniqueNames

     ...for the Group entity

   • Search base

     Distinguished name (DN) of the LDAP subtree to use as the search scope. For example...

     o=myco.com

Parent topic:
Pre-installation tasks