Initializing and Configuring the LDAP Connector for CA ACF2

Initializing and Configuring the LDAP Connector for CA ACF2

This document describes how to initialize and configure the ACF2 LDAP connector into an existing One Identity Manager system. This enables One Identity Manager to access, read and update data stored in an ACF2 database on an IBM mainframe.

Detailed information about this topic

• Pre-requisites
• Platform Support
• Operating Constraints
• How to initialize and configure the ACF2 LDAP connector
• Domain Filter Setting
• System Variables
• User Mapping Information
• Appendix: ACF2 Attributes

Pre-requisites

• The IBM mainframe must have the CA LDAP Server for z/OS installed and configured. It is recommended to remove the search size limit on the CA LDAP Server. This is done by editing the configuration file slapd.conf on the server. Set the sizelimit value to "unlimited" as follows.

  For versions of CA LDAP Server version 14 or earlier

  sizelimit 0

  For versions of CA LDAP Server version 15 or later

  sizelimit unlimited

• An LDAP service account must be created on your ACF2 server which has the appropriate permissions to administer users and groups on this platform. The account must be given sufficient privileges so that the profiles being administered fall within the "SCOPE" of the Admin user.

Platform Support

• The ACF2 LDAP connector has been verified for synchronization against the IBM mainframe running CA ACF2 version 9.0 or later.

Operating Constraints

• There is an eight character limit for user names on ACF2.
• There is an eight character limit for passwords on ACF2.