Realms, templates, users, and groups

A realm is a collection of users and the groups to which they belong. For example, a company, a bowling team, or a club can all be realms.

Realms are defined by creating entries of object class ibm-realm anywhere in a user naming context (not under cn=localhost,cn=schema or cn=configuration). The ibm-realm object defines the realm's name (cn), a group of realm administrators (ibm-realmAdminGroup), a user-template object (ibm-realmUserTemplate) specifying the object classes and attributes for users in the realm, and the location of container entries under which user and group entries are stored (ibm-realmUserContainer and ibm-realmGroupContainer). The directory administrator and members of the administrative group are responsible for managing user-templates, realms, and realm administrator groups. After a realm is created, members of that realm's administrator group (realm administrators) are responsible for managing the users and groups within that realm.