Configuring a virtual member manager LDAP repository

You can configure IBM® virtual member manager to use an approved LDAP repository to be the directory service for Content Cortex.

Before you begin

You must provide and configure one or more LDAP repositories that are certified for use by WebSphere® Application Server.

About this task

This task describes the values that you must provide when you configure Content Platform Engine using Configuration Manager.
Note: If the virtual member manager realm mapping is different from the repository mapping because the WebSphere Application Server "Distinguished name in the repository is different" configuration setting is enabled, the LDAP distinguished name (DN) that is retrieved from WebSphere Application Server virtual member manager is different than the name that is used internally by Content Platform Engine authorization.

Procedure

Configuring Content Platform Engine to use virtual member manager LDAP repositories is slightly different from configuring a typical Content Platform Engine-LDAP connection.

  1. To prepare Content Platform Engine to connect to a directory server through virtual member manager specify the following properties in Configuration Manager and Administration Console for Content Platform Engine:
    Configuration Manager Configure LDAP task property Enter this value
    Directory service provider type Specify the directory server that you are using behind IBM virtual member manager. (Content Platform Engine points to IBM virtual member manager that points to the LDAP you specify with this property.) Examples include Active Directory and eDirectory.
    Note: If you use multiple LDAPs, use the WebSphere administrative console to add more LDAP repositories.
    WebSphere Application Server LDAP repository type Select Federated repositories.
    Note: This value ensures that Content Platform Engine uses virtual member manager.
    Set as current active user registry Select the check box.
    Administration Console for Content Platform Engine Create a New Domain wizard property Enter this value
    Directory Service Provider type IBM virtual member manager
    Note: You do not need to specify values for any of the other directory service properties, such as Host, Port, User Base DN, or User Search Filter.
    Note: Icon representing the worksheet Record this value in your customized Installation and Upgrade Worksheet. To find this property, search the worksheet for instances of ACCE: New Domain wizard.
  2. Icon representing the worksheet Record these values in your customized Installation and Upgrade Worksheet. To help find these properties, search the worksheet for instances of virtual member manager.
  3. Log in to the WebSphere administrative console as a local WebSphere administrative user.
    1. Navigate to Security > Global security > Federated repositories.
    2. Verify that only two repositories are in the realm: o=defaultWIMFileBasedRealm, and the one you created.
      Keep the file repository in the list because you must use the local WebSphere administrative user.
    3. If there are other unrelated repositories in the list, delete them, save the change, and restart WebSphere Application Server.