Planning your Datacap system

Planning your Datacap system includes activities that are related to domains, Windows accounts, authentication systems, and Datacap users, groups, stations, and databases.

About this task

Review these topics so that you understand the following concepts before you install and configure IBM® Datacap:
Datacap domain and Windows accounts

In a client/server environment, Datacap users, background services, and processes require read, write, create, delete, and change files on various computers. To grant the appropriate permissions to the appropriate users, you must create Windows accounts for the Datacap users, application pools, background services, and background processes.

In addition, the computers on which Datacap is installed and to which the Windows accounts are granted access rights must be part of a single domain or a set of trusted domains.

A number of the Windows accounts used by Datacap background services must also be granted the Logon as a service on the domain controller. For more information, see Domains and Windows accounts.

Authentication systems
You also need to determine how you want Datacap users to be authenticated. Datacap supports the use of the following internal and external authentication systems:
  • Datacap authentication (TMA)
  • Active Directory Service Interfaces (ADSI)
  • Lightweight Directory Access Protocol (LDAP)
  • Active Directory Lightweight Directory Services (ADLDS)
  • Low-Level Lightweight Directory Access Protocol (LLLDAP)

While Datacap can access servers that host ADLDS or LLLDAP authentication systems that are outside the Datacap domain, ADSI and LDAP authentication servers must be in the Datacap domain. For more information, see Authentication.

Datacap users, groups, and stations

For Datacap to use its authentication system, you must set up users and stations in your Datacap application. If you choose to manage permissions at the group level, you can also set up groups. For Datacap to use an external ADSI, LDAP, ADLDS, or LLLDAP authentication system, you must set up users or groups in your Datacap application that correspond to the Datacap accounts or groups that are set up in the external authentication system. For more information, see Users and groups.

Stations in a Datacap application can be set up as you choose. You can set up a station for each physical computer, or a single station name can be used for multiple computers. You can set up stations to limit the types of tasks that can be run by a user and provide routing of batches. You can also monitor individual or aggregated activity. For more information, see Stations.

Datacap databases
Because Datacap applications include the use of databases, the Windows accounts of some Datacap components must be set up as database users and assigned the appropriate database permissions. For more information, see Database users.