IBM i stand-alone: Prepare a Tivoli Directory Server

To use a Tivoli Directory Server as an LDAP user registry, install and set up the server so that it communicates with IBM WebSphere Portal.

Prepare Tivoli Directory Server:

1. Customize the LDAP directory servers settings using the Directory Services Configuration Wizard. You must have *ALLOBJ and *IOSYSCFG special authority to use the wizard. Go to IBM System i and IBM i Information Center, select the appropriate Information Center version and navigate to e-business and Web serving > Security and IBM Tivoli Directory Server for i5/OS (LDAP) > IBM Tivoli Directory Server for i5/OS (LDAP) for information.

   Due to a restriction in Tivoli Directory Server, users or groups must not contain a Turkish uppercase dotted I or lowercase dotted i in the DN as this will prevent correct retrieval on that user or group.

2. To create the WebSphere Portal administrative user:
   To create a new directory suffix:

   1. Go to IBM System i and IBM i Information Center, select the appropriate Information Center version and navigate to Networking > TCP/IP applications, protocols, and services > IBM Directory Server for iSeries (LDAP) > Administering Directory Server > General administration tasks > Adding and Removing Directory Server suffixes for information.

   2. Stop and restart the LDAP server.
   1. Edit PORTAL_HOME/installer/wp.iim/ldif:

      • Use PortalUsers.ldif as a working example .

      • Use ContentUsers.ldif for the IBM Content Manager group and user IDs if you configured IBM Content Manager.

   2. Replace every dc=myco,dc=com with your suffix.

   3. Replace any prefixes and suffixes that are unique to your LDAP server.

   4. We can specify user names other than wpsadmin and wpsbind.

   5. If using IBM Tivoli Access Manager Version 5.1, set the objectclasses to accessGroup. If using Tivoli Access Manager Version 6, set the objectclasses to groupOfNames.

   6. Save the changes.

   7. Import the LDIF file.

Parent: IBM i stand-alone: Configure Portal to use a user registry
Next: IBM i stand-alone: Choose the user registry model