AIX stand-alone: Adapting the attribute configuration

After installing IBM® WebSphere® Portal and configuring your LDAP user registries, you will need to adapt the attribute configuration to match the configured LDAP server(s) and your business needs. However, you do not need to perform these steps if you are using either a database user registry or the default federated file-based repository for out-of-box installations.

Prerequisites
AIX stand-alone: Preparing user registries
AIX stand-alone: Choosing your user registry model

About this task

After installation, IBM WebSphere Portal has a predefined set of attributes for users and groups. Your LDAP server may have a different set of predefined user and group attributes. To ensure proper communication between WebSphere Portal and your LDAP server, you can configure additional attributes and flag existing attributes as required or unsupported on a per repository basis or for all configure repositories.

LDAP servers can only handle attributes that are explicitly defined in their schema. The LDAP server's schema is different from the WebSphere Portal schema but the two schemas should match for proper communication between WebSphere Portal and the LDAP server. The task to add the LDAP user registry does some basic attribute configurations depending on the type of LDAP server that you choose. You may, however, still need to adapt the WebSphere Portal configuration to match the LDAP schema; for example, if an attribute is defined in WebSphere Portal but not in the LDAP server, you will need to perform one of the following tasks to resolve this mismatch
  • Flag the attribute as unsupported for the LDAP server
  • Introduce an attribute mapping that maps the WebSphere Portal attribute to an attribute defined in the LDAP schema
Perform the following tasks to adapt the attribute configuration to match the configured LDAP server(s) and your business needs:
  1. AIX stand-alone: Querying the defined attributes
    First, install IBM WebSphere Portal and configure your LDAP user registries. Then, query the defined attributes to see what attributes are flagged as unsupported or mapped to a different LDAP attribute.
  2. AIX stand-alone: Adding attributes
    The VMM is configured with a default attribute schema that might not be compatible with your LDAP server. If so, extend the VMM attribute schema by adding new attributes that you can map between IBM WebSphere Portal and your user registry.
  3. AIX stand-alone: Mapping attributes
    First, install and configure your LDAP user registry and query the defined attributes. Then, map the attributes so they match the configured LDAP servers and your business needs.
  4. AIX stand-alone: Removing attributes
    Due to a Virtual Member Manager (VMM) limitation, there is currently no task to update an attribute. Therefore, if you added an attribute to your property extension database or when adapting attributes to match your LDAP server that were spelled incorrectly or already added due to migration, you must remove the attribute from the database. Use caution when performing these steps.
  • Parent topic: AIX stand-alone: Configuring portal to use a user registry
  • Previous topic: AIX stand-alone: Choosing your user registry model
  • Next topic: AIX stand-alone: Configuring Portal to use dynamic groups