31 lines
1.9 KiB
HTML
31 lines
1.9 KiB
HTML
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
|
<html>
|
|
<head>
|
|
<META http-equiv="Content-Type" content="text/html; charset=utf-8">
|
|
<LINK rel="stylesheet" type="text/css" href="../../../rzahg/ic.css">
|
|
|
|
<title>Tune LDAP authentication</title>
|
|
</head>
|
|
|
|
<BODY>
|
|
<!-- Java sync-link -->
|
|
<SCRIPT LANGUAGE="Javascript" SRC="../../../rzahg/synch.js" TYPE="text/javascript"></SCRIPT>
|
|
|
|
<h3><a name="sectuldp"></a>Tune LDAP authentication</h3>
|
|
|
|
<p>To tune the LDAP authentication process, consider the following steps:</p>
|
|
|
|
<ol>
|
|
<li><p>When case-sensitivity is not critical, select the <strong>Ignore Case</strong> check box in the LDAP User Registry panel in the WebSphere administrative console.</p></li>
|
|
|
|
<li><p>Select <strong>Reuse Connections</strong> in your LDAP User Registry configuration.</p></li>
|
|
|
|
<li><p>Check to see what caching features your LDAP server provides, and take advantage of them. This action is best suited to LDAP servers that do not change frequently.</p></li>
|
|
|
|
<li><p>With WebSphere Application Server - Express for iSeries Version 5.1, you can choose the directory type of <tt>IBM_Directory_Server</tt> instead of <tt>SecureWay</tt> if you are using the OS/400 Directory Services product on V5R2 and have upgraded to LDAP 4.1. With LDAP 4.1, i5/OS Directory Services yields improved performance because it is programmed to use the new group membership attributes to optimize group membership searches. However, it is required that authorization is case-insensitive, so also select <strong>Ignore Case</strong> when you choose the directory type of <tt>IBM_Directory_Server</tt>. See <a href="http://www.ibm.com/servers/eserver/iseries/ldap/whatsnew.htm" target="_">iSeries LDAP: What's New</a> <img src="www.gif" width="18" height="15" alt="Link outside Information Center"> (http://www.ibm.com/servers/eserver/iseries/ldap/whatsnew.htm) for information regarding the PTFs that are required for LDAP 4.1.</p></li>
|
|
</ol>
|
|
|
|
</body>
|
|
</html>
|
|
|