Update the group membership configuration on IBM i

When you configure your LDAP user registry, a group membership is automatically created. You may need to adjust the group membership configuration if you notice high loads on the LDAP server and/or long response times on authentication requests.

In a clustered environment, start the dmgr and nodeagent and verify they are able to synchronize.

Update the group membership configuration

1. Edit wkplc.properties

2. Update the following required parameters in wkplc.properties under the VMM LDAP group member config heading:
   • gc.ldap.id
   • gc.name
   • gc.updateGroupMembership
   • gc.scope

3. Save changes to wkplc.properties.

4. Run the ConfigEngine.sh wp-create-ldap-groupconfig -DWasPassword=foo task, from WP_PROFILE/ConfigEngine, to update the group membership for the LDAP user registry.

5. Stop and restart servers, dmgrs, and node agents.

If created the clustered environment, including the additional nodes, and then completed the steps in this task, run update-jcr-admin on the secondary nodes.

Parent: Update the user registry on IBM i
Related:
Start and stop servers, dmgrs, and node agents
Enable LDAP security after cluster creation