Configure directory server

QoS policy configurations can be exported to an LDAP directory server.

This can make your quality of service (QoS) solution easier to manage. Instead of configuring QoS policies on all of your servers, you can store the configuration data on one local directory server for many systems to share. When you first configure QoS on your server, an Initial Configuration wizard appears. This wizard will prompt you to configure a directory server.

To configure the directory server you will need to decide or know the following information:

Directory server name
Determine a distinguished name (DN) to refer to the QoS policies
Determine whether to use SSL security with your LDAP directory server
Determine whether to use keywords to improve the search for your policies on the directory server

Note: Currently, Kerberos cannot be configured as the authentication method the QoS server will use to access the directory.

To administer the LDAP directory server, you must have one of the following authority sets:

*ALLOBJ authority and *IOSYSCFG authority
*JOBCTL authority and object authority to the End TCP/IP (ENDTCP), Start TCP/IP (STRTCP), Start TCP/IP Server (STRTCPSVR), and End TCP/IP Server (ENDTCPSVR) commands
*AUDIT authority to configure i5/OS™ security auditing

If you are using iSeries™ Navigator, you will already have access to the default QoS Schema. The actual schema file is located on your server at /QIBM/UserData/OS400/DirSrv. However, if you are using an editor other than iSeries Navigator, you will need to import the LDIF file described in the following section. You can also import this file, if after editing, you want to reload the original, default file.

QoS schema

A set of rules, called a schema, exist to specify what types of LDAP objects are valid to the QoS server. The schema contains the necessary rules for QoS. If, however, the LDAP server used is not an iSeries server, these rules must be imported to the LDAP server. This is done with an LDIF (LDAP Data Interchange Format) file. Use the iSeries LDAP Web page to download the LDIF file. You will find this file under Categories > TCP/IP Policies on the left pane. See LDAP concepts for a sample QoS schema.