Default LDAP configuration mapping based on LDAP server type

Virtual member manager configuration CLIs and WebSphere federated repository LDAP configuration GUI set default values in the wimconfig.xml file, based on the selected LDAP server type.

Default values are set for following properties:

External identifier:

The name of the LDAP attributes that is used as external ID. For example, "ibm-entryUUID", "objectGUID". A special name "distinguishedName" indicates that the DN of the entity is used as the external ID.

The following table lists the default external ID assignments.

Table 1. Default external ID assignments. The default values for external identifiers.

LDAP type	External ID	Syntax
IBM Tivoli Directory Server	ibm-entryUUID	String
Microsoft Active Directory	objectGUID	octetString
Novell eDirectory	GUID	octetString
IBM Domino Server	dominoUNID	String
SunOne Directory Server	nsuniqueId	String
Custom	Distinguished Name (DN)	String

<config:attributeConfiguration>
       <config:externalIdAttributes name="dominounid"/>
...
</config:attributeConfiguration>

Entity types:

Maps the entity type to an objectClass.

<config:ldapEntityTypes name="PersonAccount" searchFilter="">
<config:objectClasses>dominoPerson</config:objectClasses>
</config:ldapEntityTypes>

RDN attribute types:

If there is more than one RDN attribute for an entity, maps the RDN property to the objectClass.

<config:ldapEntityTypes name="OrgContainer">
  <config:rdnAttributes name="o" objectClass="organization"/>
  <config:rdnAttributes name="ou" objectClass="organizationalUnit"/>
...
</config:ldapEntityTypes>

Member attribute types:

Specifies the Member attribute of the group objects

<config:groupConfiguration>
  <config:memberAttributes dummyMember="uid=dummy" name="member"
  objectClass="groupOfNames" scope="direct"/>
</config:groupConfiguration>

Attribute types:

Maps the virtual member manager property name to the LDAP attribute name (globally or per entity type).

<config:attributeConfiguration>
  <config:externalIdAttributes name="dominounid"/>
  <config:attributes name="userPassword" propertyName="password"/>
  <config:attributes name="cn" propertyName="displayName">
    <config:entityTypes>PersonAccount</config:entityTypes>
  </config:attributes>
  <config:attributes name="cn" propertyName="cn">
    <config:entityTypes>Group</config:entityTypes>
  </config:attributes>
  <config:propertiesNotSupported name="businessAddress"/>
</config:attributeConfiguration>

Unsupported properties:

Maps properties that are not supported by the LDAP.

<config:attributeConfiguration>
  ...
  <config:propertiesNotSupported name="businessAddress"/>
</config:attributeConfiguration>

Context pool and cache:

<config:contextPool enabled="true" initPoolSize="1" maxPoolSize="0"
  poolTimeOut="0" poolWaitTime="3000" prefPoolSize="3"/>
<config:cacheConfiguration cachesDiskOffLoad="false">
  <config:attributesCache attributeSizeLimit="2000" cacheSize="4000"
    cacheTimeOut="1200" enabled="true" cacheDistPolicy="none"/>
  <config:searchResultsCache cacheSize="2000" cacheTimeOut="600"
    enabled="true" searchResultSizeLimit="1000" cacheDistPolicy="none"/>
</config:cacheConfiguration>