eimadmin.conf File

Edit online

Purpose

Stores system Enterprise Identity Mapping (EIM) connection information from the eimadmin command.

Description

This file is used to store system Enterprise Identity Mapping (EIM) connection information from the eimadmin command. Use the eimadmin command to create and update this file. The connection information stored by the eimadmin.conf file includes the EIM domain and its controlling server, the identity with which to authenticate (bind) to the server, and the authentication method.

The meanings of the eimadmin.conf file's fields are as follows:

Item Description
LdapURL Specifies the URL and port for the LDAP server controlling the EIM data. This field takes the following format: 
ldap://some.ldap.host:389  
ldaps://secure.ldap.host:636
KerberosRegistry Specifies the name of a Kerberos registry.
LocalRegistry EimDomain Specifies the full distinguished name (DN) of the EIM domain. This name begins with ibm-eimDomainName= and consists of the following elements:
domainName
The name of the EIM domain you are creating. For example, MyDomain.
parent distinguished name
The distinguished name for the entry immediately above the given entry in the directory information tree hierarchy, such as o=ibm,c=us. For example: 
ibm-eimDomainName=MyDomain,o=ibm,c=us
ConnectionMethod Specifies the method of authentication to the LDAP server. You can select one of the following methods:
  • SIMPLE (bind DN and password). (DEFAULT method).
  • CRAM-MD5 (bind DN and protected password).
  • EXTERNAL (digital certificate).
  • GSSAPI (Kerberos). Uses the default Kerberos credential. The credential must be established using a service such as kinit before running EIM.
BindDn The distinguished name to use for the simple bind to LDAP. For example, cn=admin. The bind distinguished name has one of the following EIM authorities:
  • EIM administrator
  • EIM registries administrator
  • EIM registry X administrator
  • EIM identifiers administrator
BindPassword Specifies the password associated with the bind DN.
SSLKeyFile The name of the SSL key database file, including the full path name. If the file cannot be found, the name of a RACF® key ring that contains authentication certificates is used. This value is required for SSL communications with a secure LDAP host. For example: 
 /u/eimuser/ldap.kdb
SSLKeyPassword The password required to access the encrypted information in the key database file. As an alternative, you can specify an SSL password stash file by prefixing the stash file name with file://. For example: 
file:///u/eimuser/ldapclient.sth
SSLKeyCert Identifies which certificate to use from the key database file or RACF key ring. If a certificate label is not specified, the default certificate in the file or ring is used.

Example

-> /usr/bin/eimadmin -X -d ibm-eimDomainName='ibm-eimDomainName=MyDomain,o=ibm,c=us'  
           -h 'ldap://keystone.austin.ibm.com:389'  -S 'SIMPLE'-b 'cn=admin'  -w 'secret'
-> cat /etc/eimadmin.conf
EimConfiguration:
        LdapURL="ldap://keystone.austin.ibm.com:389"
        KerberosRegistry=""
        LocalRegistry=""
        EimDomain="ibm-eimDomainName=MyDomain,o=ibm,c=us"
        ConnectionMethod="SIMPLE-b"
        BindDn=""
        BindPassword=""
        SSLKeyFile=""
        SSLKeyPassword=""
        SSLKeyCert=""
->

Location

Item Description
/etc/eimadmin.conf Contains the eimadmin.conf file.