Scenario: Setting up a Directory Server

 

An example of how to set up an LDAP directory on the Directory Server.

 

Situation

As the administrator of your company's computer systems, you would like to place employee information such as telephone numbers and e-mail addresses for your organization into a central LDAP repository.

 

Objectives

In this scenario, MyCo, Inc. wants to configure a Directory Server and create a directory database that contains employee information such as name, e-mail address, and telephone number.

The objectives of this scenario are as follows:

• To make employee information available anywhere on the company network to employees using a Lotus Notes or Microsoft Outlook Express mail client.

• To allow managers to change employee data in the directory database, while not allowing non-managers to change employee data.

• To allow the system to be able to publish employee data into the directory database.

 

Details

The Directory Server will run on the system called mySystem.

The following example illustrates the information that MyCo, Inc. wants to include into its directory database for each employee.

Name: Jose Alvirez Department: DEPTA Telephone number: 999 999 9999
Email address: jalvirez@my_co.com

The directory structure for this scenario might be visualized as something similar to the following:

/
|
+- my_co.com    |
   +- employees       |
      +- Jose Alvirez       |  DEPTA       |  999-555-1234
      |  jalvirez@my_co.com       |
      +- John Smith       |  DEPTA       |  999-555-1235
      |  jsmith@my_co.com       |
      +  Managers group          Jose Alvirez          mySystem.my_co.com .
.
.

All employees (managers and non-managers) exist in the employees directory tree. Managers also belong to the managers group. Members of the managers group have authority to change employee data.

The system (mySystem) also needs to have authority to change employee data. In this scenario, the system is placed in the employees directory tree and is made a member of the managers group.

If you want to keep the employee entries separate from the system entry, you can create another directory tree (for example: computers) and add the system there. The system will need to have the same authority as the managers.

Prerequisites and assumptions

The Web Administration tool is properly configured and running. See Web administration for more information.

 

Setup steps

Complete the following tasks:

1. Scenario details: Set up the Directory Server
   

2. Scenario details: Create the directory database
   

3. Scenario details: Publish the System i5 data to the directory database
   

4. Scenario details: Enter information into the directory database
   

5. Scenario details: Test the directory database
   

 

Parent topic:

Directory Server scenarios