Task 1: Preparing the LDAP environment

In this step, you browse to the Apache Directory installation directory and start it by using command line. An LDAP is a repository of users. In this step, you create an organization unit (ou) to hold users, and create two users and two groups.

1. Download and install ApacheDS as described in the prerequisites section of Before you start.
2. Start ApacheDS by running the following command from its installation directory:

   <ApacheDS>/bin/apacheds.bat

   Wait for the text ApacheDS to be displayed.
3. Start the Samples Console, for example:
   • Windows 10: Click Start > All Programs > <ODM> > Samples Console (en_US)
   • Windows 11: Click Start > All apps > <ODM> > Samples Console (en_US)
4. Make sure that you are in the Samples Console perspective. Then, open the Samples Commands view, and expand Decision Center and LDAP User Management.
5. Click prepare.ldap.data and wait for the BUILD SUCCESSFUL message. This command creates the LDAP server, the connection parameters, the two users Sue and Jim, and the two groups Scoring and Checkers.

In this step, you create the server instance, establish the connection parameters, and identify the entry point in the LDAP hierarchy. Both the sample server and the Decision Center applications require connection information to access the LDAP server.

1. Download and install Apache Directory Studio.
2. Start Apache Directory Studio.
3. In the LDAP Servers view, create an LDAP server:
   1. Click the New Server button in the view toolbar.
   2. Select the default Apache DS 2.0.0.
   3. Click Finish.
   4. Double-click the server to see its content in the display area. Notice the port number and the available partitions:

      

4. In the LDAP Servers view, select and start the server.
   If it does not start on the first try, try again, or delete and re-create the server.
5. After the server is started, in the Connections view, create a new connection:
   1. Click the New Connection button in the view toolbar.
   2. Enter ODM1 as the connection name (the name is not used anywhere else).
   3. Enter localhost as the hostname and 10389 as the port:

      

6. Click Next. In the next screen, enter uid=admin,ou=system for Bind DN or user, and secret for Bind password.
   This person is the default user who is required to access the Apache Directory server:

   

7. Click Check Authentication. Authentication must be successful before you move on. Then, click Finish.
   The Directory Information Trees (DIT) in the LDAP Browser view shows the following information:

   

   Creating the connection parameters provides a domain with the distinguished name (DN) dc=example,dc=com, ideal for demos and tutorials. In this tutorial, you use this domain as the base DN.

In this step, you create an organization unit (ou) in which to place users, and create the first user. LDAPs are repositories of users.

1. In the LDAP Browser view, right-click dc=example,dc=com, and select New > New Entry.
2. Select Create entry from scratch, and click Next.
3. Under Available object classes, find organizationalUnit and add it to Selected objects classes:

   

4. Click Next. Then, for the relative distinguished name (RDN) field, enter ou=users:

   

5. Click Next, and then Finish.
   The LDAP Browser shows that your domain now has an organizational unit in which to place users:

   

6. Create the first user, Jim. In the LDAP Browser view, right-click ou=users, and select New > New Entry.
7. Select Create entry from scratch, and click Next.
8. Under Available object classes, find inetOrgPerson and add it to Selected object classes.
   This class is a general-purpose object class that holds attributes about persons.
9. Click Next. For RDN, enter uid=Jim.

   

10. Click Next.
11. On the Attributes page, do as follows:
    1. Enter Jim Jones in the common name (cn) field.
    2. Enter Jim in the surname field (sn).
    3. Click the New Attribute button in the toolbar of the pop-up and add the attribute userPassword.
12. Click Finish.
    Enter Jim as the password, confirm, and click OK.
13. Click Finish.

In this step, you use cut and paste features to create the second user that you need in this tutorial.

1. In the LDAP Browser view, right-click uid=Jim and click Copy Entry/DN.
2. Right-click ou=users, and click Paste Entry.
3. Select Rename entry and continue, and enter uid=Sue:

   

4. Click OK.
5. In the LDAP Browser view, click uid=Sue, and change as follows:
   • The cn value to Sue Smith
   • The sn value to Sue
   • The password to Sue

   You see in the next steps how the uid and cn fields are used differently.

In this step, you create the first group of users. In Decision Center, users must belong to groups so that security on decision services can be enforced.

1. In the LDAP Browser view, right-click dc=example,dc=com, and select New > New Entry.
2. Select Create entry from scratch, and click Next.
3. Under Available object classes, find organizationalUnit and add it to Selected objects classes.
4. Click Next. Then, enter ou=groups in the RDN field. Click Next and then Finish.
   The LDAP Browser view shows an organizational unit in which to place groups.
5. Create the first group, Checkers. In the LDAP Browser view, right-click ou=groups, and select New > New Entry.
6. Select Create entry from scratch, and click Next.
7. Under Available object classes, find groupOfNames and add it to Selected object classes:

   

8. Click Next. For RDN, enter cn=Checkers.
9. Click Next. In the DN Editor, click Browse and select Jim under ou=users.
10. Click OK and then Finish.
    The group Checkers now has a member Jim.

In this step, you use cut and paste features to create the other group.

1. In the LDAP Browser view, right-click cn=Checkers and click Copy Entry/DN.
2. Right-click ou=groups, and click Paste Entry.
3. Select Rename entry and continue, and enter cn=Scoring.
4. Click OK. Then, click cn=Scoring in the LDAP Browser view.
5. Double-click the member field and change the member to Sue:

   

6. Your groups and users now appear as follows: