Changing from LDAP to operating system authentication

To change from LDAP authentication to operating system authentication in IBM Spectrum® Control, you can use the IBM Spectrum Control GUI.

Before you begin

WebSphere Application Server Liberty cannot resolve users or groups that are present in more than one repository in the federated repositories framework. Because of this limitation, you must select either the operating system repository or an LDAP repository for user authentication and authorization in IBM Spectrum Control. If you upgraded from an earlier version of IBM Spectrum Control with both the operating system repository and an LDAP repository configured, you can keep using both repositories. However, it is recommended that you select either the operating system repository or the LDAP repository.

The use of the IBM Spectrum Control single sign-on feature is limited when you change from LDAP authentication to operating system authentication in IBM Spectrum Control. Storage system element managers do not support the operating system repository for single sign-on, even if the element manager is installed on the same system as IBM Spectrum Control.

Procedure

  1. Back up the ldapregistry.xml file in the installation_dir/wlp/usr/servers/webServer/registry/ directory.
  2. Log on as an administrator to the IBM Spectrum Control GUI.
  3. Click Settings > User Management.
  4. Click Edit Authentication.
  5. On the Authentication Configuration page, select Local OS and click Save.
  6. On the OS Settings page, enter your local operating system user name, password, group name and click Save.
    Note: The user name must be a member of the group.

    If your change from LDAP authentication to Local OS authentication is successful, you are logged out of the IBM Spectrum Control GUI. You can log into the GUI using your local operating system credentials. You cannot log into the GUI using your LDAP credentials.

    If your change from LDAP authentication to Local OS authentication is not successful, click Discard. After the confirmation, your previous LDAP authentication is restored and you are returned to the User Management page.

Results

You have changed from LDAP authentication to local operating system in IBM Spectrum Control. You can log on to the IBM Spectrum Control GUI with your local operating system credentials.