Integrating LDAP with the application.

Answer

The configurations involved in LDAP Integration with InfoSphere MDM Server for PIM comprises of the following steps:

1. Enable LDAP Authentication

The flag “wpcOnlyAuthentication” in Login.wpc identifies the authentication mechanism. Set to false in case LDAP authentication is required. Here are the detailed steps:

- Go to Data Model Manager->Scripting->Scripts Console.
- Select “Login Script” from the drop down.
- Select the “Edit” button for the Login.wpcs script.
- Find and set “wpcOnlyAuthentication” to “false”.

2. Enable Logger

The Default logger used is “ldap” in the Login.wpcs script . Add a category and appender for this ldap logger in $TOP/etc/default/log.xml ,

Below is a sample for doing it (note: that the location and name of the log file generated in the sample is /tmp/ldap.log)

(A) Category definition

<category name="com.ibm.ccd.wpc_user_scripting.ldap" additivity="false">

<priority value="debug" />
<appender-ref ref="LDAPLOGGER" />
</category>

(B) Appender definition

<appender name="LDAPLOGGER" class="org.apache.log4j.RollingFileAppender">
<param name="File" value="/tmp/ldap.log" />
<param name="Append" value="true" />
<param name="maxFileSize" value="10MB" />
<param name="maxBackupIndex" value="2" />
<param name="encoding" value="UTF-8" />
<layout class="org.apache.log4j.PatternLayout">
<param name="ConversionPattern" value="%d [%t] %-5p %c %x- %m%n"/>
</layout>
</appender>

3. Configure LDAP server

Follow the steps outlined in the attached document for detailed information on how to set up users and groups in the various LDAP servers that are supported.

4. Add matching role in InfoSphere MDM Server for PIM

Create roles in the application with exactly the same name as that of group configured in LDAP server whose members are to be authenticated via this integration.

5. Populate Lookup table

Provide details about the LDAP configuration so that the application can use it for connectivity and authentication. Here are steps

- Go to the Lookup table console Product Manager-> Lookup Tables-> Lookup Table Console
- Click the magnifying icon to the right of the row for “LDAP Properties” .
- Click the + button to add a row, enter the information as per the LDAP configurations in step 3.