Deployment and configuration

You must register the Security Directory Server Password Synchronizer with the IBM Security Directory Server before you deploy and configure the plug-in.

Plug-in registration with IBM Security Directory Server

To register the plug-in, edit the ids_dir/etc/ibmslapd.conf configuration file of the IBM Security Directory Server. Note: Before you edit the file, ensure that the server is not running.

1. Find the section dn: cn=Directory, cn=RDBM Backends, cn=IBM Directory, cn=Schemas, cn=Configuration and add the following configuration details:

   Win32

   ibm-slapdPlugin: preoperation "TDI_install_dir\pwd_plugins\tds\idspwsync.dll" PWSyncInit "TDI_install_dir\pwd_plugins\tds\pwsync.props"

   AIX64

   ibm-slapdPlugin: preoperation "TDI_install_dir/pwd_plugins/tds/libidspwsync_64.a.so "PWSyncInit "TDI_install_dir/pwd_plugins/tds/pwsync.props"

   Linux32

   ibm-slapdPlugin: preoperation "TDI_install_dir/pwd_plugins/tds/libidspwsync.so" PWSyncInit "TDI_install_dir/pwd_plugins/tds/pwsync.props"

2. Restart the IBM Security Directory Server.

Configuration of IBM Security Directory Server Password Synchronizer

The IBM Security Directory Server plug-in has a template configuration file that is installed at TDI_install_dir/pwd_plugins/tds/pwsync.props. When the plug-in is initialized, the configuration file is set as the last parameter in the registration line of the plug-in. Some of the parameters in the configuration file are shared between the plug-in and the Java Proxy. For a list of the supported properties, see Common configuration and utilities of password synchronization plug-ins. The syncBase property is specific to the IBM Security Directory Server Password Synchronizer:

syncBase

This optional property enables restriction of the part of the directory tree where the passwords are intercepted. The specified string value is the LDAP distinguished name (dn) of the root of the tree where entry passwords are to be intercepted. For example, when you specify "o=ibm, c=us" it results in

• Intercepting the password update "cn=Kyle Nguyen, ou=Austin, o=IBM, c=US".
• Skipping the password update "cn=Henry Nguyen, o=SomeOtherCompany, c=US".

Setting no value for this property results in the interception of password updates in the entire directory tree.

Parent topic:

IBM Security Directory Server Password Synchronizer