wmm_LDAP_IDS_AD.xml

Sample wmm.xml file for Tivoli Directory Server and Active Directory

 

<?xml version="1.0"?>

<!-- Sample wmm.xml for two LDAP repositories (IBM Directory Server and Active Directory)-->

<wmm name="member manager"
     description="member manager"
     defaultRealmName="wmmRealm"
     horizontalPartitioning="true"
     lookAside="false"
     configurationFile="xml/wmmAttributes.xml"
     uniqueIdGeneratorClassName="com.ibm.ws.wmm.uniqueid.WMMUniqueMemberIdentifierGenerator"
     maximumSearchResults="2000"
     searchTimeOut="600000"
     maximumSearchResultsForSortingAndPaging="500"
     maximumTotalSearchResultsForSortingAndPaging="1000"
     pagingMemberObject="true"
     timeToRemovePagedCacheEntry="900"
     userSecurityNameAttribute="uid"
     passwordAttribute="userPassword">

  <supportedMemberTypes>

     <supportedMemberType name="Person"  
                          rdnAttrTypes="uid" 
                          defaultParentMember="cn=users,dc=yourco1,dc=com"
                          defaultProfileRepository="LDAP1"/>
       
     <supportedMemberType name="Group"  
                          rdnAttrTypes="cn" 
                          defaultParentMember="cn=groups,dc=yourco1,dc=com"
                          defaultProfileRepository="LDAP1"/>
       
     <supportedMemberType name="Organization"  
                          rdnAttrTypes="o" 
                          defaultParentMember="cn=users,dc=yourco1,dc=com"
                          defaultProfileRepository="LDAP1"/>
       
     <supportedMemberType name="OrganizationalUnit"  
                          rdnAttrTypes="ou"
                          defaultParentMember="cn=users,dc=yourco1,dc=com"
                          defaultProfileRepository="LDAP1"/>

  </supportedMemberTypes>
  

  <repositories>

       <!-- 
       databaseType   dataAccessManagerClassName
       db2            com.ibm.ws.wmm.db.dao.db2.WMMDB2Dao
       oracle         com.ibm.ws.wmm.db.dao.oracle.WMMOracleDao
       cloudscape     com.ibm.ws.wmm.db.dao.cloudscape.WMMCloudscapeDao
       sqlserver      com.ibm.ws.wmm.db.dao.sqlserver.WMMSQLServerDao
       informix       com.ibm.ws.wmm.db.dao.informix.WMMInformixDao
       db2_iseries    com.ibm.ws.wmm.db.dao.db2iseries.WMMDB2iSeriesDao
       -->

     <federationRepository name="wmmDBFederation"
                           UUID="DB1"
                           supportTransactions="true"
                           adapterClassName="com.ibm.ws.wmm.db.DataBaseFederationAdapter"
                           dataSourceName="jdbc/wmmDS"
                           databaseType="DB2"
                           dataAccessManagerClassName="com.ibm.ws.wmm.db.dao.db2.WMMDB2Dao"/>
  

     <!--
        ldapType       adapterClassName                                             configurationFile  
       
        ids            com.ibm.ws.wmm.ldap.ibmdir.IBMDirectoryAdapterImpl           xml/wmmLDAPAttributes_IDS.xml
        ids5           com.ibm.ws.wmm.ldap.ibmdir.IBMDirectory5AdapterImpl          xml/wmmLDAPAttributes_IDS.xml
        sunone         com.ibm.ws.wmm.ldap.sunone.SunOneDirectoryAdapterImpl        xml/wmmLDAPAttributes_SO.xml
        activedir      com.ibm.ws.wmm.ldap.activedir.ActiveDirectoryAdapterImpl     xml/wmmLDAPAttributes_AD.xml
        activedir2003  com.ibm.ws.wmm.ldap.activedir.ActiveDirectory2003AdapterImpl xml/wmmLDAPAttributes_AD.xml
        domino5        com.ibm.ws.wmm.ldap.domino.DominoLdapAdapterImpl             xml/wmmLDAPAttributes_DM.xml
        domino6        com.ibm.ws.wmm.ldap.domino.Domino6LdapAdapterImpl            xml/wmmLDAPAttributes_DM.xml
        nds            com.ibm.ws.wmm.ldap.novell.NovelleDirectoryAdapterImpl       xml/wmmLDAPAttributes_NDS.xml
     -->
     
     <ldapRepository name="wmmLDAP"
                     UUID="LDAP1"
                     adapterClassName="com.ibm.ws.wmm.ldap.ibmdir.IBMDirectory5AdapterImpl"
                     supportDynamicAttributes="false"
                     configurationFile="xml/wmmLDAPAttributes_IDS.xml"
                     wmmGenerateExtId="false"
                     supportGetPersonByAccountName="true"
                     profileRepositoryForGroups="LDAP1"
                     supportTransactions="false"
                     adminId="cn=root"
                     adminPassword="**"
                     ldapHost="localhost"
                     ldapPort="636"
                     ldapTimeOut="6000"
                     ldapAuthentication="SIMPLE"
                     ldapType="0"
                     sslEnabled="true"
                     sslTrustStore="C:\WebSphere\AppServer\etc\DummyServerTrustFile.jks"
                     dirContextsMaxSize="20"
                     dirContextsMinSize="5"
                     dirContextTimeToLive="-1"
                     cacheGroups="false"                         
                     groupsCacheTimeOut="600"
                     cacheAttributes="true"
                     attributesCacheSize="2000"
                     attributesCacheTimeOut="600"
                     cacheNames="true"
                     namesCacheSize="2000"
                     namesCacheTimeOut="600">
     
       <readMemberType>
         <memberType name="Person" /> 
         <memberType name="Group" /> 
         <memberType name="Organization" /> 
         <memberType name="OrganizationalUnit" />
       </readMemberType>

       <createMemberType>
         <memberType name="Person" /> 
         <memberType name="Group" /> 
         <memberType name="Organization" /> 
         <memberType name="OrganizationalUnit" />
       </createMemberType>

       <updateMemberType>
         <memberType name="Person" /> 
         <memberType name="Group" /> 
         <memberType name="Organization" /> 
         <memberType name="OrganizationalUnit" />
       </updateMemberType>

       <deleteMemberType>
         <memberType name="Person" /> 
         <memberType name="Group" /> 
         <memberType name="Organization" /> 
         <memberType name="OrganizationalUnit" />
       </deleteMemberType>

       <renameMemberType>
         <memberType name="Person" /> 
         <memberType name="Group" /> 
         <memberType name="Organization" /> 
         <memberType name="OrganizationalUnit" />
       </renameMemberType>

       <moveMemberType>
         <memberType name="Person" /> 
         <memberType name="Group" /> 
         <memberType name="Organization" /> 
         <memberType name="OrganizationalUnit" />
       </moveMemberType>
       
       <nodeMaps>
         <nodeMap node="dc=yourco1,dc=com" pluginNode="dc=yourco1,dc=com" />
         <nodeMap node="cn=users,dc=yourco1,dc=com" pluginNode="cn=users,dc=yourco1,dc=com" />
         <nodeMap node="cn=groups,dc=yourco1,dc=com" pluginNode="cn=groups,dc=yourco1,dc=com" />
       </nodeMaps>
             
       <supportedLdapEntryTypes>

         <supportedLdapEntryType name="Person"
                                 rdnAttrTypes="uid" 
                                 objectClassesForRead="inetOrgPerson"
                                 objectClassesForWrite="inetOrgPerson"
                                 searchBases="cn=users,dc=yourco1,dc=com"/>

         <supportedLdapEntryType name="Group"
                                 rdnAttrTypes="cn" 
                                 objectClassesForRead="groupOfNames"
                                 objectClassesForWrite="groupOfNames"
                                 searchBases="cn=groups,dc=yourco1,dc=com"/>

         <supportedLdapEntryType name="Organization"
                                 rdnAttrTypes="o" 
                                 objectClassesForRead="organization"
                                 objectClassesForWrite="organization"/>

         <supportedLdapEntryType name="OrganizationalUnit"
                                 rdnAttrTypes="ou" 
                                 objectClassesForRead="organizationalUnit"
                                 objectClassesForWrite="organizationalUnit"/>

       </supportedLdapEntryTypes>
       
     </ldapRepository>

     <ldapRepository name="wmmLDAP"
                     UUID="LDAP2"
                     adapterClassName="com.ibm.ws.wmm.ldap.activedir.ActiveDirectoryAdapterImpl"
                     supportDynamicAttributes="false"
                     configurationFile="xml/wmmLDAPAttributes_AD.xml"
                     wmmGenerateExtId="false"
                     supportGetPersonByAccountName="true"
                     profileRepositoryForGroups="LDAP2"
                     supportTransactions="false"
                     adminId="CN=ldapadmin,CN=Users,DC=adserver,DC=torolab,DC=ibm,DC=com"
                     adminPassword="**"
                     ldapHost="localhost"
                     ldapPort="636"
                     ldapTimeOut="6000"
                     ldapAuthentication="SIMPLE"
                     ldapType="0"
                     sslEnabled="true"
                     sslTrustStore="C:\WebSphere\AppServer\etc\DummyServerTrustFile.jks"
                     dirContextsMaxSize="0"
                     dirContextsMinSize="5"
                     dirContextTimeToLive="-1"
                     com.sun.jndi.ldap.connect.pool="true"
                     cacheGroups="false"                         
                     groupsCacheTimeOut="600"
                     cacheAttributes="true"
                     attributesCacheSize="2000"
                     attributesCacheTimeOut="600"
                     cacheNames="true"
                     namesCacheSize="2000"
                     namesCacheTimeOut="600"
                     groupMembershipAttributeMap="memberOf">     

       <readMemberType>
         <memberType name="Person" /> 
         <memberType name="Group" /> 
         <memberType name="Organization" /> 
         <memberType name="OrganizationalUnit" />
       </readMemberType>

       <createMemberType>
         <memberType name="Person" /> 
         <memberType name="Group" /> 
         <memberType name="Organization" /> 
         <memberType name="OrganizationalUnit" />
       </createMemberType>

       <updateMemberType>
         <memberType name="Person" /> 
         <memberType name="Group" /> 
         <memberType name="Organization" /> 
         <memberType name="OrganizationalUnit" />
       </updateMemberType>

       <deleteMemberType>
         <memberType name="Person" /> 
         <memberType name="Group" /> 
         <memberType name="Organization" /> 
         <memberType name="OrganizationalUnit" />
       </deleteMemberType>

       <renameMemberType>
         <memberType name="Person" /> 
         <memberType name="Group" /> 
         <memberType name="Organization" /> 
         <memberType name="OrganizationalUnit" />
       </renameMemberType>

       <moveMemberType>
         <memberType name="Person" /> 
         <memberType name="Group" /> 
         <memberType name="Organization" /> 
         <memberType name="OrganizationalUnit" />
       </moveMemberType>
       
       <nodeMaps>
         <nodeMap node="dc=yourco2,dc=com" 
                  pluginNode="dc=yourco2,dc=com" />

         <nodeMap node="cn=users,dc=yourco2,dc=com" 
                  pluginNode="cn=users,dc=yourco2,dc=com" />

         <nodeMap node="cn=groups,dc=yourco2,dc=com" 
                  pluginNode="cn=groups,dc=yourco2,dc=com" />
       </nodeMaps>
             
       <supportedLdapEntryTypes>

         <supportedLdapEntryType name="Person"
                                 rdnAttrTypes="cn" 
                                 objectClassesForRead="user"
                                 objectClassesForWrite="user"
                                 searchBases="cn=users,dc=yourco2,dc=com"
                                 searchFilter="(ObjectCategory=Person)"/>

         <supportedLdapEntryType name="Group"
                                 rdnAttrTypes="cn" 
                                 objectClassesForRead="group"
                                 objectClassesForWrite="group"
                                 searchBases="cn=groups,dc=yourco2,dc=com"
                                 searchFilter="(ObjectCategory=Group)"/>

         <supportedLdapEntryType name="Organization"
                                 rdnAttrTypes="o" 
                                 objectClassesForRead="organization"
                                 objectClassesForWrite="organization"/>

         <supportedLdapEntryType name="OrganizationalUnit"
                                 rdnAttrTypes="ou" 
                                 objectClassesForRead="organizationalUnit"
                                 objectClassesForWrite="organizationalUnit"/>
       </supportedLdapEntryTypes>
       
     </ldapRepository>
    
  </repositories>
  
</wmm>