Using the command line

You can use the commands provided here at command line to configure the DIGEST-MD5 mechanism.

About this task

To create the cn=Digest,cn=configuration entry, enter the command:

idsldapadd -D <adminDN> -w <adminpw> -i <filename>

where <filename> contains:

dn: cn=Digest,cn=configuration
cn: Digest
ibm-slapdDigestRealm: <realm name>
ibm-slapdDigestAttr: <uuid>
ibm-slapdDigestAdminUser: <Adminuser>
ibm-slapdDigestEnabled: true
objectclass:top
objectclass: ibm-slapdConfigEntry
objectclass: ibm-slapdDigest

To change the settings for DIGEST-MD5, issue the following command:

idsldapmodify -D <adminDN> -w <adminpw> -i <filename>

where <filename> contains:

dn: cn=Digest,cn=configuration
changetype: modify
replace: ibm-slapdDigestRealm
ibm-slapdDigestRealm: <newrealmname>
-
replace: ibm-slapdDigestAttr
ibm-slapdDigestAttr: <newattribute>
-
replace: ibm-slapdDigestAdminUser
ibm-slapdDigestAdminUser: <newAdminuser>

Given below is an example of how a user can bind to the server using the Digest MD5 mechanism:

idsldapsearch -h <ldaphost> -p ldapport -U <username> -w <password> -m DIGEST-MD5 
 -G <realm> -b o=sample cn=gw*

Note: To perform a Digest MD5 bind it is necessary to specify the -h <hostname> option. The <hostname> parameter must be the IP address or FQDN (fully qualified domain name) of that IBM® Verify Directory machine, even if the bind is performed from local machine. Specifying localhost or loopback IP address as value of -h may lead to error.