Unable to create new users in LDAP using WebSphere Application Server

Edit online

When a new user is created using the WebSphere® Application Server, the UniqueName attribute references the defaultFileBasedRealm instead of LDAP. This means that the new user cannot be assigned to groups and therefore cannot be assigned roles in LDAP.

Problem

When a new user is created using the WebSphere Application Server, the UniqueName attribute references the defaultFileBasedRealm instead of LDAP. This means that the new user cannot be assigned to groups and therefore cannot be assigned roles in LDAP.

Resolution

You can add more LDAP details in WebSphere Application Server to allow the user to be added to groups. Here is an example. Note that the details given in this example are repository-specific.
  1. Remove the ObjectServer definition.
    1. Expand Security and click Global Security.
    2. Scroll down on the page to the User account repository section and click Configure.
    3. Scroll down on the page to the Repositories in the realm, select the check box for the ObjectServer entry, and click Remove.
    4. Click Save.
    5. Scroll down on the page to the Related Items section and click Manage repositories.
    6. Check the box to select the ObjectServer entry and click Delete.
    7. Click Save.
    8. Log out of the administrative console.
    9. Log out of Dashboard Application Services Hub.
    10. The ObjectServer is removed as a Virtual Member Manager user repository. You must restart the Dashboard Application Services Hub to complete the removal.
  2. Stop the Dashboard Application Services Hub.
    cd /opt/IBM/JazzSM/profile/bin
./stopServer.sh server1 -username smadmin -password password
    Draft comment: gb030961 
    IVT RTC defect 66731