Portal, Express Beta Version 6.1 Operating systems: i5/OS, Linux,Windows

Preparing an Active Directory server on i5/OS

If you plan to use Active Directory as an LDAP user registry, install and set up the server so that it will communicate with IBM^® WebSphere^® Portal Express.

1. Customize the LDAP directory servers settings using the Directory Services Configuration Wizard. You must have *ALLOBJ and *IOSYSCFG special authority to use the wizard. See Directory Services (LDAP) for information.
2. Run the ldapsearch -h hostname -s base objectclass=* task on the LDAP server command line to verify that the server is installed and working properly.
3. Perform the following steps as a guide to create the WebSphere Portal Express administrative user:

   1. Create a new user with the Windows administrative tools. Note: There is a 20 character limitation for the user account name.
   2. Set the password for the new user.
   3. Activate the new user with the Windows administrative tools. Set the msDS-UserAccountDisabled attribute to false.
4. Perform the following steps to enable SSL for Active Directory; this step is required to set passwords during sign up and user creation:

   1. Install an Enterprise Certificate Authority on a Windows 2000 Domain Controller, which installs a certificate on a server or install a third-party certificate on the Domain Controller.
   2. Click Start > All Programs > Administrative Tools > Active Directory Users and Computer.
   3. In the Active Directory Users and Computers window, right-click on your domain name and select Properties.
   4. In the Domain Properties dialog box, select the Group Policy tab.
   5. Select the Default Domain Policy group policy and then click Edit.
   6. Select Windows Settings under Computer Configuration.
   7. Select Security Settings and then select Public Key Policies.
   8. Select Automatic Certificate Request Settings.
   9. Use the wizard to add a policy for Domain Controllers. Note: When these requirements are complete, all domain controllers request a certificate and support LDAP over SSL using port 636.