Windows stand-alone: Enabling referrals for your LDAP user registry

Referrals redirect object requests from one LDAP server to another when objects do not exist or cannot be located in a particular directory tree. You should enable referrals if your environment has more than one user registry existing on multiple servers or domains.

1. Before you configure security, you must use the IBM® WebSphere® Application Server backupConfig task to create and store a backup of the IBM WebSphere Portal configuration; see backupConfig command for information.
2. Open a UNIX System Services (z/OS UNIX System Services) command prompt.
   Note: If you are instructed to open a properties file, the files are ASCII files and should be opened with the appropriate tool.
3. Use any text editor to open the wkplc.properties file in the following directory: wp_profile_root/ConfigEngine/properties.
4. Specify values for the following parameters:
   • et.ldap.id=ID_of_your_LDAP_server
   • et.ldap.host=hostname_of_your_LDAP_server
   • et.ldap.referral=follow
5. Save and close wkplc.properties.
6. Run the following task from the wp_profile_root/ConfigEngine directory to create an LDAP entity type:
   • AIX® Solaris Linux: ./ConfigEngine.sh wp-update-et-ldap -DWasPassword=password
   • Windows: ConfigEngine.bat wp-update-et-ldap -DWasPassword=password
   • IBM i: ConfigEngine.sh wp-update-et-ldap -DWasPassword=password
   • z/OS®: ./ConfigEngine.sh wp-update-et-ldap -DWasPassword=password
7. Stop and restart the appropriate servers to propagate the changes. For specific instructions, see Starting and stopping servers, deployment managers, and node agents.