98 lines
6.0 KiB
HTML
98 lines
6.0 KiB
HTML
|
<?xml version="1.0" encoding="UTF-8"?>
|
||
|
<!DOCTYPE html
|
||
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
<html lang="en-us" xml:lang="en-us">
|
||
|
<head>
|
||
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
<meta name="security" content="public" />
|
||
|
<meta name="Robots" content="index,follow" />
|
||
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
||
|
<meta name="DC.Type" content="concept" />
|
||
|
<meta name="DC.Title" content="Interaction with iSeries Directory Server (LDAP)" />
|
||
|
<meta name="abstract" content="An LDAP directory is a listing of information about objects arranged in a particular order that gives details about each object." />
|
||
|
<meta name="description" content="An LDAP directory is a listing of information about objects arranged in a particular order that gives details about each object." />
|
||
|
<meta name="DC.Relation" scheme="URI" content="wpover.htm" />
|
||
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2004, 2006" />
|
||
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2004, 2006" />
|
||
|
<meta name="DC.Format" content="XHTML" />
|
||
|
<meta name="DC.Identifier" content="wpoverldap" />
|
||
|
<meta name="DC.Language" content="en-us" />
|
||
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
<!-- US Government Users Restricted Rights -->
|
||
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
||
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
||
|
<title>Interaction with iSeries Directory
|
||
|
Server (LDAP)</title>
|
||
|
</head>
|
||
|
<body id="wpoverldap"><a name="wpoverldap"><!-- --></a>
|
||
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
||
|
<h1 class="topictitle1">Interaction with <span class="keyword">iSeries</span> Directory
|
||
|
Server (LDAP)</h1>
|
||
|
<div><p>An LDAP directory is a listing of information about objects arranged
|
||
|
in a particular order that gives details about each object.</p>
|
||
|
<p>One special characteristic of directories is that they are accessed (read
|
||
|
or searched) much more often than they are updated (written). Hundreds of
|
||
|
people might look up an individual's phone number, but the phone number rarely
|
||
|
changes.</p>
|
||
|
<p>For more information about <span class="keyword">iSeries™</span> Directory
|
||
|
Server (LDAP), see the following topics:</p>
|
||
|
<ul><li><a href="../rzahy/rzahyrzahywelpo.htm">Directory
|
||
|
Server (LDAP)</a> </li>
|
||
|
<li><a href="http://www.ibm.com/servers/eserver/iseries/ldap" target="_blank"><span class="keyword">iSeries</span> Directory
|
||
|
Server (LDAP)</a> <img src="www.gif" alt="Link outside Information
Center" /> (http://www.ibm.com/servers/eserver/iseries/ldap). The <span class="uicontrol">Articles
|
||
|
and Publications</span> section has links to articles, redbooks and other
|
||
|
related LDAP books.</li>
|
||
|
</ul>
|
||
|
<div class="section"><h4 class="sectiontitle">LDAP configuration</h4><p>When you configure the LDAP server,
|
||
|
you must specify the suffixes you want to be provided on the LDAP server.
|
||
|
For example, the suffix dc=myhost,dc=mycompany,dc=com is the default suffix
|
||
|
that is set up when the LDAP server is automatically configured for the server
|
||
|
that has the TCP/IP host name of myhost.mycompany.com. Objects in a directory
|
||
|
are referenced by a distinguished name (DN) attribute. You must specify a
|
||
|
path (parent DN) where you want your IBM<sup>®</sup> Telephone Directory information to exist.
|
||
|
The default parent DN that is used is cn=users prepended to the TCP/IP hostname.
|
||
|
For example: cn=users,dc=myhost,dc=mycompany,dc=com.</p>
|
||
|
<p>Certain applications
|
||
|
use IBM Welcome
|
||
|
Page V1.1 for configuration.For example, the LDAP server is configured for
|
||
|
use with the IBM Telephone
|
||
|
Directory V5.2 but set up in the IBM Welcome Page V1.1 application during
|
||
|
installation. When the application is installed, it uses the default value
|
||
|
cn=users and prepends it to the host name. You can override the default value
|
||
|
by specifying which parent DN value you want to use during installation. IBM Telephone
|
||
|
Directory information can reside in an existing location where organizational
|
||
|
information is already kept. It also can exist in a new location. For example,
|
||
|
if you have an existing organization o=company that has existing inetOrgPerson
|
||
|
entries, you can configure IBM Telephone Directory to use this parent DN, and it
|
||
|
will access your existing information. The inetOrgPerson object class is an
|
||
|
industry standard class that is commonly used to represent and store information
|
||
|
about people, such as first and last name, telephone numbers, and email addresses.
|
||
|
Installation of the application also creates additional entries in the parent
|
||
|
DN for IBM Telephone
|
||
|
Directory to use. The entries created are:</p>
|
||
|
<ul><li><span class="uicontrol">cn=Administrators</span> <p>This is a group that has authority
|
||
|
to create, update, search, and delete entries in the directory."</p>
|
||
|
</li>
|
||
|
<li><span class="uicontrol">cn=Administrator</span> <p>This is a user that is a member
|
||
|
of the cn=Administrators group and has authority to create, update, search,
|
||
|
and delete entries in the directory. The user name you specify when authenticating
|
||
|
in the application is Administrator and the password is the password specified
|
||
|
during installation.</p>
|
||
|
</li>
|
||
|
<li><span class="uicontrol">cn=itdCreateAdministrator</span> <p>This
|
||
|
user is created when open enrollment is specified during installation. It
|
||
|
allows users to only be added to the application and is used when registering
|
||
|
users in the application for open enrollment.</p>
|
||
|
</li>
|
||
|
</ul>
|
||
|
</div>
|
||
|
</div>
|
||
|
<div>
|
||
|
<div class="familylinks">
|
||
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="wpover.htm" title="Provides an overview of the IBM Welcome Page V1.1 application and how it interacts with different iSeries server components and various software components.">Overview of IBM Welcome Page V1.1</a></div>
|
||
|
</div>
|
||
|
</div>
|
||
|
</body>
|
||
|
</html>
|