立即与支持人员聊天
与支持团队交流

Identity Manager 9.1.1 - LDAP Connector for IBM i Reference Guide

Initializing and configuring the LDAP connector for IBM i

This document describes how to initialize and configure the LDAP connector for IBM i into an existing One Identity Manager system. This enables the One Identity Manager system to access, read, and update data stored on an IBM i system. 

Detailed information about this topic

Prerequisites

  • The IBM i computer must have IBM i Directory Services installed and configured.

  • A service account must be created on your IBM i server that has the appropriate permissions to administer users and groups on this platform:

    • Security administrator (*SECADM) special authority rights

    • Object management (*OBJMGT) rights over the user profile accounts that are to be managed

    • Use (*USE) rights over the user profile accounts that are to be managed

    • Service account set up as a projected user

NOTE: Before attempting to connect to the IBM i Directory Services LDAP server with the LDAP connector, first check that the LDAP server is running correctly. This can be tested with any LDAP browser, for example, the LDP.exe tool from Microsoft. For more information, see your LDAP browser documentation.

Platform support

The LDAP connector for IBM i has been verified for synchronization against os-400 V7R1 or later.

How to initialize and configure the LDAP connector for IBM i

NOTE: The following sequence describes how you configure a synchronization project if the Synchronization Editor is in expert mode.

To set up initial synchronization project for IBM i

  1. Start the Synchronization Editor and log in.

  2. From the start page, select Start a new synchronization project

    This starts the Synchronization Editor project wizard.

  3. On the Choose target system page, select IBM i LDAP Connector.

  4. On the System access page, click Next.

  5. On the Create system connection page, select Create new system connection.

  6. On the system connection wizard start page, click Next.

  7. On the Network page:

    1. In the Server field, enter the DNS name or IP address of your mainframe server.

    2. In the Port field, enter the port number.

    3. Click Test to make sure the server is accessible.

    4. IBM i Directory Services supports LDAP v3. Enter the number 3 in the Protocol version.

    5. If SSL is to be used, select the Use SSL check box.

  8. On the Authentication page:

    1. Set the Authentication method to Basic.

    2. In the Credentials section, enter the full DN and password of the administrator account on your IBM i system.

    3. Click Test to check that the credentials are valid.

    The schema is loaded from the IBM i system.

  9. Ignore the Define virtual classes page. Click Next.

  10. On the Search options page:

    1. In the Base DN drop-down list, select the correct base DN for your system. It should begin with OS400-SYS=.

    2. Ignore the Use paged search check box.

  11. Ignore the Modification capabilities page. Click Next.

  12. Ignore the Auxiliary class assignment page. Click Next.

  13. On the System attributes page, in the Revision properties section, clear the createTimestamp and modifyTimestamp entries by double-clicking them.

  14. Ignore the Select dynamic group attributes page. Click Next.

  15. Ignore the Password settings page. Click Next.

  16. Click Finish.

    This takes you back to the Synchronization Editor project wizard.

  17. On the One Identity Manager connection page, enter the database connection data.

    This loads the IBM i schema into your One Identity Manager. Wait for this to complete.

  18. On the Select project template page, select Create blank project.

  19. On the General page, enter a display name for your synchronization project and set a scripting language if required.

  20. Click Finish.

  21. Select Activate project.

自助服务工具
知识库
通知和警报
产品支持
下载软件
技术说明文件
用户论坛
视频教程
RSS订阅源
联系我们
获得许可 帮助
技术支持
查看全部
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级