IC90318: IBM Systems Director Information Center Active Directory documentation incorrectly describes best practices.

APAR status

• Closed as documentation error.

Error description

• IBM Systems Director Information Center describes
  Active Directory best practices as:
  "For best practices, do not add Active Directory users directly
  to the local groups of any IBM Systems Director Servers."
  Instead, the documentation should state:
  "For Active Directory best practices, Active Directory users
  should not be directly added to the local groups of any IBM
  Systems Director Servers.  However, a user can manage individual
  Active Directory group members by creating a custom Active
  Directory group.  This group can be authorized and then assigned
  a role using the Users and Groups page.  Note that this may
  require restarting the IBM Systems Director service with a
  domain account."
  
  Impact:
  Users may be misled by existing documentation.
  

Local fix

Problem summary

• The existing IBM Systems Director Information Center incorrectly
   states the best practices for Active Directory.  The
  documentation states that Active Directory users should not be
  added to the local groups of the IBM Systems Director server as
  a best practice; however, it does not state what the actual best
  practice to accomplish authorizing users would be.  This can be
  accomplished by using the preexisting Active Directory groups
  (I.e.: smadmin, smuser, smmon, smmgr) or  by creating custom
  Active Directory groups, authorizing them with IBM Systems
  Director, then assigning roles and users to those groups. This
  documentation will be changed to clarify the correct best
  practice.
  
  Platforms:  All.
  
  Versions:  IBM Systems Director 6.3x and earlier.
  

Problem conclusion

• Versions: IBM Systems Director 6.3x and earlier.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels