Configuring pass-through authentication by using Web Administration Tool

Edit online

You can configure pass-through authentication by using Web Administration Tool with the instructions provided here.

About this task

If you have not done so already, expand the Manage security properties category under Server administration in the navigation area of the Web Administration Tool and click the Pass-through authentication tab.

On this panel, you can:
  • Enable or disable pass-through authentication by selecting or clearing the Enable pass-through authentication check box.
  • Configure a pass-through entry for a subtree for pass-through authentication. Clicking Add displays the Configure subtree for pass-through authentication wizard that can be used for configuring a pass-through entry for a subtree for pass-through authentication.
  • Edit an existing pass-through entry of a subtree for pass-through authentication. Clicking Edit displays the Configure subtree for pass-through authentication wizard that can be used for modifying an existing pass-through entry of a subtree for pass-through authentication.
  • Delete an existing pass-through entry of a subtree configured for pass-through authentication. For this, select a subtree from the Subtrees configured for pass-through authentication table and click the Delete button.
  • View pass-through entry details of a configured subtree for pass-through authentication. For this, select a subtree from the Subtrees configured for pass-through authentication table, select View from the Select Action list, and click Go.
  • After you are finished, do one of the following steps:
    • Click OK to save changes and navigate to the “Introduction” panel.
    • Click Apply to save changes and to remain on this panel.
    • Click Cancel to discard changes made and navigate to the “Introduction” panel.

To configure a pass-through entry for a subtree for pass-through authentication follow the steps given below:

Procedure

  1. In the Pass-through authentication panel, click Add.
  2. On the Subtree settings panel you can take the following actions:
    • Enter a subtree DN in the field and click the Add button to add it to the list for storing subtree DN.
    • Enter multiple subtree DNs by clicking the Browse button and then selecting the required rows from the Browse entries panel.
    • Remove a subtree DN from the list for storing subtree DN by selecting the subtree DN and clicking the Remove button.
    • Specify the host name of the pass-through server in the Host name field. This is a required field.
    • Specify the port number of the pass-through server in the Port field. This is a required field.
    • Select the directory type of the pass-through server from the Pass-through server directory type drop-down list. The available options are SecurityDirectoryServer, ActiveDirectory, and Other. You can select Other if the pass-through server is any other than IBM® Security Verify Directory or Active Directory.
    • Enable SSL encryption on the pass-through server by selecting the Enable SSL encryption check box.
    • Specify whether to save the user password on the local directory for all successful bind request processed through the pass-through server by selecting a value from the Migrate userpassword to this directory server field. The default value of this control is "False".
    • Specify the number of connections that is required for each pass-through server entry in the Number of connections to the pass-through server to maintain for Pass-through authentication field.
    • Specify a timeout value in the Pass-through authentication timeout field. The pass-through authentication interface will wait for result from socket till the timeout period before it returns the client request.
      Note:
      • The attribute "ibm-slapdPtaResultTimeout" in the "cn=< pass-through server >, cn=Passthrough Authentication, cn=Configuration" entry is associated with this control.
      • The timeout value is specified in milliseconds. The upper limit for this field is 60000 millisec (60 sec or 1 minute).
    • Click Next.
  3. To configure attribute mapping, do the following steps:
    1. Select the Enable attribute mapping check box to enable attribute mapping. Selecting the Enable attribute mapping check box also enables other controls on the Attribute mapping panel.
    2. In the Bind DN for pass-through server field, enter a bind DN for binding to the pass-through server.
    3. In the Bind password for pass-through server field, enter a bind password for binding to the pass-through server.
    4. In the Search base DN field, enter the search base DN of pass-through server where the entry will be searched, or click the Browse button to display Browse entries panel from which the user can select the existing DN from the pass-through server.
    5. From the Attribute for this directory server list, select an attribute that should be mapped to an attribute in pass-through server.
    6. From the Attribute for pass-through directory server list, select an attribute that should be mapped to the Security Directory Server attribute.
    7. When you are finished, do one of the following steps:
      • Click Back to navigate to the Subtree settings panel.
      • Click Finish to save the changes and to navigate to the Pass-through authentication.
      • Click Cancel to discard the changes and to navigate to the Pass-through authentication.