Wednesday, August 25, 2010

WebSphere - LDAP Integration

WebSphere 7.1 - Federated Repository - Microsoft Active Directory LDAP Integration

1) Login to deployment manager
2) Navigate to Security -> Global Security
3) Select Federated repositories -> Configure
4) Specify Realm name: ActiveDirectoryRealm

5) Add Base entry to Realm -> Add Repository
Specify these properties
Repository identifier: ActiveDirectoryRepositoryId
Directory Type: Microsoft Windows Active Directory
Primary host name: {your ldap server}
Bind distinguised name: {your_ldap_bind_id: CN=wpsbind,OU=_something,dc=company,dc=com}
Bind password: {ldap_bind_password}
Click ok

6) Repository dropdown should have ActiveDirectoryRepositoryId

Specify your base dn under these fields.
 Distinguished name of a base entry that uniquely identifies this set of entries in the realm
  dc=company,dc=com
 Distinguished name of a base entry in this repository
  dc=company,dc=com
Click ok

7) Remove the default file repository
o=defaultWIMFileBasedRealm   InternalFileRepository   File

8) Specify Primary administrative user name: CN=wasadmin,OU=_something,dc=company,dc=com
Click ok

9) In the Global Security screen,
Check Enable administrative security
Check Enable administrative security
Uncheck/ Disable Java 2 secuirty
Under Available realm definitions, select Federated repositories and set as current.
Click Apply

10) Review the changes, Synchronize the changes with nodes and save,

11) Stop nodes and deployment manager
System -> Nodes -> Select Nodes -> Stop
System -> Deployment Manager -> Stop

12) Start deployment manager and nodes
/IBM/WebSphere/AppServer/profiles/Dmgr01/bin/startManager.sh
/IBM/WebSphere/AppServer/profiles/node01Profile01/bin/startNode.sh

13) Launch the websphere deployment console and login using wasadmin ldap id (samaccountname) specified as primary administrative ID.

0 Comments:

Post a Comment

Subscribe to Post Comments [Atom]

<< Home